[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0500. Sep 19 03:04:51 82.41.206.23:1386 -> xxx.yyy.1.0:1433 SYN ******S* Sep 19 03:04:51 82.41.206.23:1387 -> xxx.yyy.1.1:1433 SYN ******S* Sep 19 03:04:51 82.41.206.23:1390 -> xxx.yyy.1.2:1433 SYN ******S* Sep 19 03:04:51 82.41.206.23:1391 -> xxx.yyy.1.3:1433 SYN ******S* Sep 19 03:04:51 82.41.206.23:1392 -> xxx.yyy.1.4:1433 SYN ******S* Sep 19 03:04:49 82.41.206.23:1393 -> xxx.yyy.1.5:1433 SYN ******S* Sep 19 03:04:49 82.41.206.23:1394 -> xxx.yyy.1.6:1433 SYN ******S* Sep 19 03:04:49 82.41.206.23:1395 -> xxx.yyy.1.7:1433 SYN ******S* [...] Sep 19 06:53:33 82.41.206.23:3661 -> xxx.yyy.255.247:1433 SYN ******S* Sep 19 06:53:33 82.41.206.23:3674 -> xxx.yyy.255.248:1433 SYN ******S* Sep 19 06:53:33 82.41.206.23:3675 -> xxx.yyy.255.249:1433 SYN ******S* Sep 19 06:53:33 82.41.206.23:3688 -> xxx.yyy.255.250:1433 SYN ******S* Sep 19 06:53:33 82.41.206.23:3697 -> xxx.yyy.255.251:1433 SYN ******S* Sep 19 06:53:33 82.41.206.23:3702 -> xxx.yyy.255.252:1433 SYN ******S* Sep 19 06:53:33 82.41.206.23:3707 -> xxx.yyy.255.253:1433 SYN ******S* Sep 19 06:53:34 82.41.206.23:3714 -> xxx.yyy.255.254:1433 SYN ******S* 121415 Sep 19 05:39:03 216.119.112.31:2438 -> xxx.yyy.1.1:4899 SYN ******S* Sep 19 05:39:03 216.119.112.31:2439 -> xxx.yyy.1.2:4899 SYN ******S* Sep 19 05:39:03 216.119.112.31:2440 -> xxx.yyy.1.3:4899 SYN ******S* Sep 19 05:39:05 216.119.112.31:2441 -> xxx.yyy.1.4:4899 SYN ******S* Sep 19 05:39:05 216.119.112.31:2442 -> xxx.yyy.1.5:4899 SYN ******S* Sep 19 05:39:05 216.119.112.31:2443 -> xxx.yyy.1.6:4899 SYN ******S* Sep 19 05:39:05 216.119.112.31:2444 -> xxx.yyy.1.7:4899 SYN ******S* Sep 19 05:39:05 216.119.112.31:2445 -> xxx.yyy.1.8:4899 SYN ******S* [...] Sep 19 05:50:24 216.119.112.31:4631 -> xxx.yyy.255.223:4899 SYN ******S* Sep 19 05:50:24 216.119.112.31:4698 -> xxx.yyy.255.254:4899 SYN ******S* Sep 19 05:50:24 216.119.112.31:4655 -> xxx.yyy.255.233:4899 SYN ******S* Sep 19 05:50:24 216.119.112.31:4434 -> xxx.yyy.255.116:4899 SYN ******S* Sep 19 05:50:24 216.119.112.31:4454 -> xxx.yyy.255.127:4899 SYN ******S* Sep 19 05:50:24 216.119.112.31:4623 -> xxx.yyy.255.217:4899 SYN ******S* Sep 19 05:50:24 216.119.112.31:4684 -> xxx.yyy.255.245:4899 SYN ******S* Sep 19 05:50:24 216.119.112.31:4539 -> xxx.yyy.255.174:4899 SYN ******S* 95331 Sep 19 13:10:03 82.74.148.144:1789 -> xxx.yyy.1.2:1433 SYN ******S* Sep 19 13:10:03 82.74.148.144:1793 -> xxx.yyy.1.6:1433 SYN ******S* Sep 19 13:10:03 82.74.148.144:1797 -> xxx.yyy.1.10:1433 SYN ******S* Sep 19 13:10:03 82.74.148.144:1805 -> xxx.yyy.1.18:1433 SYN ******S* Sep 19 13:10:00 82.74.148.144:1806 -> xxx.yyy.1.19:1433 SYN ******S* Sep 19 13:10:03 82.74.148.144:1807 -> xxx.yyy.1.20:1433 SYN ******S* Sep 19 13:10:01 82.74.148.144:1831 -> xxx.yyy.1.43:1433 SYN ******S* Sep 19 13:10:03 82.74.148.144:1787 -> xxx.yyy.1.0:1433 SYN ******S* [...] Sep 19 16:58:46 82.74.148.144:1685 -> xxx.yyy.255.237:1433 SYN ******S* Sep 19 16:58:46 82.74.148.144:1686 -> xxx.yyy.255.238:1433 SYN ******S* Sep 19 16:58:46 82.74.148.144:1692 -> xxx.yyy.255.239:1433 SYN ******S* Sep 19 16:58:46 82.74.148.144:1697 -> xxx.yyy.255.241:1433 SYN ******S* Sep 19 16:58:47 82.74.148.144:1708 -> xxx.yyy.255.244:1433 SYN ******S* Sep 19 16:58:47 82.74.148.144:1716 -> xxx.yyy.255.245:1433 SYN ******S* Sep 19 16:58:47 82.74.148.144:1723 -> xxx.yyy.255.248:1433 SYN ******S* Sep 19 16:58:47 82.74.148.144:1727 -> xxx.yyy.255.250:1433 SYN ******S* Sep 19 16:58:47 82.74.148.144:1726 -> xxx.yyy.255.249:1433 SYN ******S* 81354 Sep 19 06:20:47 61.17.91.11:3624 -> xxx.yyy.1.1:1433 SYN ******S* Sep 19 06:20:47 61.17.91.11:3627 -> xxx.yyy.1.2:1433 SYN ******S* Sep 19 06:20:47 61.17.91.11:3629 -> xxx.yyy.1.3:1433 SYN ******S* Sep 19 06:20:47 61.17.91.11:3634 -> xxx.yyy.1.4:1433 SYN ******S* Sep 19 06:20:47 61.17.91.11:3636 -> xxx.yyy.1.5:1433 SYN ******S* Sep 19 06:20:47 61.17.91.11:3637 -> xxx.yyy.1.6:1433 SYN ******S* Sep 19 06:20:47 61.17.91.11:3640 -> xxx.yyy.1.7:1433 SYN ******S* Sep 19 06:20:44 61.17.91.11:3642 -> xxx.yyy.1.8:1433 SYN ******S* [...] Sep 19 06:32:28 61.17.91.11:2477 -> xxx.yyy.255.214:1433 SYN ******S* Sep 19 06:32:28 61.17.91.11:2480 -> xxx.yyy.255.217:1433 SYN ******S* Sep 19 06:32:28 61.17.91.11:2475 -> xxx.yyy.255.212:1433 SYN ******S* Sep 19 06:32:28 61.17.91.11:2478 -> xxx.yyy.255.215:1433 SYN ******S* Sep 19 06:32:28 61.17.91.11:2479 -> xxx.yyy.255.216:1433 SYN ******S* Sep 19 06:32:29 61.17.91.11:2487 -> xxx.yyy.255.224:1433 SYN ******S* Sep 19 06:32:29 61.17.91.11:2486 -> xxx.yyy.255.223:1433 SYN ******S* Sep 19 06:32:29 61.17.91.11:2485 -> xxx.yyy.255.222:1433 SYN ******S* Sep 19 06:32:29 61.17.91.11:2507 -> xxx.yyy.255.244:1433 SYN ******S* 70727 Sep 19 17:10:32 80.8.159.163:3313 -> xxx.yyy.1.0:1433 SYN ******S* Sep 19 17:10:32 80.8.159.163:3314 -> xxx.yyy.1.1:1433 SYN ******S* Sep 19 17:10:32 80.8.159.163:3320 -> xxx.yyy.1.6:1433 SYN ******S* Sep 19 17:10:32 80.8.159.163:3321 -> xxx.yyy.1.7:1433 SYN ******S* Sep 19 17:10:32 80.8.159.163:3323 -> xxx.yyy.1.9:1433 SYN ******S* Sep 19 17:10:32 80.8.159.163:3331 -> xxx.yyy.1.17:1433 SYN ******S* Sep 19 17:10:32 80.8.159.163:3332 -> xxx.yyy.1.18:1433 SYN ******S* Sep 19 17:10:32 80.8.159.163:3335 -> xxx.yyy.1.21:1433 SYN ******S* [...] Sep 19 20:59:17 80.8.159.163:4851 -> xxx.yyy.255.239:1433 SYN ******S* Sep 19 20:59:17 80.8.159.163:4863 -> xxx.yyy.255.240:1433 SYN ******S* Sep 19 20:59:17 80.8.159.163:4866 -> xxx.yyy.255.241:1433 SYN ******S* Sep 19 20:59:18 80.8.159.163:4871 -> xxx.yyy.255.242:1433 SYN ******S* Sep 19 20:59:18 80.8.159.163:4877 -> xxx.yyy.255.243:1433 SYN ******S* Sep 19 20:59:18 80.8.159.163:4898 -> xxx.yyy.255.246:1433 SYN ******S* Sep 19 20:59:19 80.8.159.163:4941 -> xxx.yyy.255.253:1433 SYN ******S* Sep 19 20:59:19 80.8.159.163:4940 -> xxx.yyy.255.252:1433 SYN ******S* 69820 Sep 19 00:00:05 68.174.135.139:3742 -> xxx.yyy.133.167:139 SYN ******S* Sep 19 00:00:08 68.174.135.139:3766 -> xxx.yyy.133.174:139 SYN ******S* Sep 19 00:00:07 68.174.135.139:3745 -> xxx.yyy.133.168:139 SYN ******S* Sep 19 00:00:07 68.174.135.139:3754 -> xxx.yyy.133.171:139 SYN ******S* Sep 19 00:00:07 68.174.135.139:3751 -> xxx.yyy.133.169:139 SYN ******S* Sep 19 00:00:13 68.174.135.139:3760 -> xxx.yyy.133.172:139 SYN ******S* Sep 19 00:00:14 68.174.135.139:3763 -> xxx.yyy.133.173:139 SYN ******S* Sep 19 00:00:14 68.174.135.139:3770 -> xxx.yyy.133.175:139 SYN ******S* [...] Sep 19 21:25:17 68.174.135.139:3417 -> xxx.yyy.255.245:139 SYN ******S* Sep 19 21:25:22 68.174.135.139:3414 -> xxx.yyy.255.244:139 SYN ******S* Sep 19 21:25:23 68.174.135.139:3420 -> xxx.yyy.255.246:139 SYN ******S* Sep 19 21:25:23 68.174.135.139:3423 -> xxx.yyy.255.247:139 SYN ******S* Sep 19 21:25:24 68.174.135.139:3426 -> xxx.yyy.255.248:139 SYN ******S* Sep 19 21:25:24 68.174.135.139:3432 -> xxx.yyy.255.249:139 SYN ******S* Sep 19 21:25:24 68.174.135.139:3429 -> xxx.yyy.255.250:139 SYN ******S* Sep 19 21:25:25 68.174.135.139:3437 -> xxx.yyy.255.251:139 SYN ******S* Sep 19 21:25:28 68.174.135.139:3444 -> xxx.yyy.255.253:139 SYN ******S* 67911 [...] 66020 Sep 19 02:22:40 194.65.62.91:1893 -> xxx.yyy.1.1:1433 SYN ******S* Sep 19 02:22:40 194.65.62.91:1896 -> xxx.yyy.1.4:1433 SYN ******S* Sep 19 02:22:40 194.65.62.91:1897 -> xxx.yyy.1.5:1433 SYN ******S* Sep 19 02:22:37 194.65.62.91:1898 -> xxx.yyy.1.6:1433 SYN ******S* Sep 19 02:22:37 194.65.62.91:1899 -> xxx.yyy.1.7:1433 SYN ******S* Sep 19 02:22:40 194.65.62.91:1900 -> xxx.yyy.1.8:1433 SYN ******S* Sep 19 02:22:40 194.65.62.91:1901 -> xxx.yyy.1.9:1433 SYN ******S* Sep 19 02:22:40 194.65.62.91:1902 -> xxx.yyy.1.10:1433 SYN ******S* [...] Sep 19 02:34:20 194.65.62.91:4266 -> xxx.yyy.255.182:1433 SYN ******S* Sep 19 02:34:20 194.65.62.91:4270 -> xxx.yyy.255.185:1433 SYN ******S* Sep 19 02:34:20 194.65.62.91:4265 -> xxx.yyy.255.181:1433 SYN ******S* Sep 19 02:34:20 194.65.62.91:4269 -> xxx.yyy.255.184:1433 SYN ******S* Sep 19 02:34:20 194.65.62.91:4271 -> xxx.yyy.255.186:1433 SYN ******S* Sep 19 02:34:21 194.65.62.91:4302 -> xxx.yyy.255.217:1433 SYN ******S* Sep 19 02:34:21 194.65.62.91:4310 -> xxx.yyy.255.224:1433 SYN ******S* Sep 19 02:34:21 194.65.62.91:4314 -> xxx.yyy.255.227:1433 SYN ******S* 65824 Sep 19 06:50:07 216.48.40.27:1639 -> xxx.yyy.1.1:1433 SYN ******S* Sep 19 06:50:10 216.48.40.27:1640 -> xxx.yyy.1.2:1433 SYN ******S* Sep 19 06:50:10 216.48.40.27:1641 -> xxx.yyy.1.3:1433 SYN ******S* Sep 19 06:50:07 216.48.40.27:1642 -> xxx.yyy.1.4:1433 SYN ******S* Sep 19 06:50:10 216.48.40.27:1643 -> xxx.yyy.1.5:1433 SYN ******S* Sep 19 06:50:10 216.48.40.27:1644 -> xxx.yyy.1.6:1433 SYN ******S* Sep 19 06:50:07 216.48.40.27:1645 -> xxx.yyy.1.7:1433 SYN ******S* Sep 19 06:50:10 216.48.40.27:1646 -> xxx.yyy.1.8:1433 SYN ******S* [...] Sep 19 07:30:17 216.48.40.27:4802 -> xxx.yyy.255.205:1433 SYN ******S* Sep 19 07:30:17 216.48.40.27:4845 -> xxx.yyy.255.248:1433 SYN ******S* Sep 19 07:30:17 216.48.40.27:4834 -> xxx.yyy.255.237:1433 SYN ******S* Sep 19 07:30:17 216.48.40.27:4797 -> xxx.yyy.255.200:1433 SYN ******S* Sep 19 07:30:17 216.48.40.27:4818 -> xxx.yyy.255.221:1433 SYN ******S* Sep 19 07:30:17 216.48.40.27:4807 -> xxx.yyy.255.210:1433 SYN ******S* Sep 19 07:30:17 216.48.40.27:4791 -> xxx.yyy.255.194:1433 SYN ******S* Sep 19 07:30:17 216.48.40.27:4839 -> xxx.yyy.255.242:1433 SYN ******S* 64159 Sep 19 13:02:43 81.89.240.19:3010 -> xxx.yyy.1.1:4000 SYN ******S* Sep 19 13:02:43 81.89.240.19:3011 -> xxx.yyy.1.2:4000 SYN ******S* Sep 19 13:02:43 81.89.240.19:3012 -> xxx.yyy.1.3:4000 SYN ******S* Sep 19 13:02:45 81.89.240.19:3013 -> xxx.yyy.1.4:4000 SYN ******S* Sep 19 13:02:45 81.89.240.19:3014 -> xxx.yyy.1.5:4000 SYN ******S* Sep 19 13:02:45 81.89.240.19:3015 -> xxx.yyy.1.6:4000 SYN ******S* Sep 19 13:02:45 81.89.240.19:3017 -> xxx.yyy.1.8:4000 SYN ******S* Sep 19 13:02:45 81.89.240.19:3018 -> xxx.yyy.1.9:4000 SYN ******S* [...] Sep 19 13:13:58 81.89.240.19:2232 -> xxx.yyy.255.247:4000 SYN ******S* Sep 19 13:13:58 81.89.240.19:2229 -> xxx.yyy.255.244:4000 SYN ******S* Sep 19 13:13:58 81.89.240.19:2226 -> xxx.yyy.255.241:4000 SYN ******S* Sep 19 13:13:58 81.89.240.19:2237 -> xxx.yyy.255.252:4000 SYN ******S* Sep 19 13:13:58 81.89.240.19:2238 -> xxx.yyy.255.253:4000 SYN ******S* Sep 19 13:13:58 81.89.240.19:2235 -> xxx.yyy.255.250:4000 SYN ******S* Sep 19 13:13:58 81.89.240.19:2239 -> xxx.yyy.255.254:4000 SYN ******S* Sep 19 13:13:58 81.89.240.19:2236 -> xxx.yyy.255.251:4000 SYN ******S* 58302 Sep 19 17:38:26 206.13.56.94:3124 -> xxx.yyy.1.1:1433 SYN ******S* Sep 19 17:38:29 206.13.56.94:3137 -> xxx.yyy.1.2:1433 SYN ******S* Sep 19 17:38:26 206.13.56.94:3163 -> xxx.yyy.1.4:1433 SYN ******S* Sep 19 17:38:27 206.13.56.94:3241 -> xxx.yyy.1.10:1433 SYN ******S* Sep 19 17:38:30 206.13.56.94:3267 -> xxx.yyy.1.12:1433 SYN ******S* Sep 19 17:38:30 206.13.56.94:3293 -> xxx.yyy.1.14:1433 SYN ******S* Sep 19 17:38:27 206.13.56.94:3306 -> xxx.yyy.1.15:1433 SYN ******S* Sep 19 17:38:30 206.13.56.94:3319 -> xxx.yyy.1.16:1433 SYN ******S* [...] Sep 19 18:14:47 206.13.56.94:2687 -> xxx.yyy.255.232:1433 SYN ******S* Sep 19 18:14:47 206.13.56.94:2778 -> xxx.yyy.255.239:1433 SYN ******S* Sep 19 18:14:48 206.13.56.94:2882 -> xxx.yyy.255.247:1433 SYN ******S* Sep 19 18:14:48 206.13.56.94:2895 -> xxx.yyy.255.248:1433 SYN ******S* Sep 19 18:14:48 206.13.56.94:2908 -> xxx.yyy.255.249:1433 SYN ******S* Sep 19 18:14:48 206.13.56.94:2921 -> xxx.yyy.255.250:1433 SYN ******S* Sep 19 18:14:48 206.13.56.94:2934 -> xxx.yyy.255.251:1433 SYN ******S* Sep 19 18:14:48 206.13.56.94:2998 -> xxx.yyy.255.254:1433 SYN ******S* 49552 Sep 19 22:20:53 217.9.240.37:33900 -> xxx.yyy.1.1:111 SYN ******S* Sep 19 22:20:53 217.9.240.37:33901 -> xxx.yyy.1.2:111 SYN ******S* Sep 19 22:20:53 217.9.240.37:33902 -> xxx.yyy.1.3:111 SYN ******S* Sep 19 22:20:53 217.9.240.37:33904 -> xxx.yyy.1.5:111 SYN ******S* Sep 19 22:20:53 217.9.240.37:33905 -> xxx.yyy.1.6:111 SYN ******S* Sep 19 22:20:53 217.9.240.37:33906 -> xxx.yyy.1.7:111 SYN ******S* Sep 19 22:20:54 217.9.240.37:33912 -> xxx.yyy.1.13:111 SYN ******S* Sep 19 22:20:54 217.9.240.37:33915 -> xxx.yyy.1.16:111 SYN ******S* [...] Sep 19 22:43:31 217.9.240.37:33642 -> xxx.yyy.255.245:111 SYN ******S* Sep 19 22:43:31 217.9.240.37:33646 -> xxx.yyy.255.249:111 SYN ******S* Sep 19 22:43:31 217.9.240.37:33648 -> xxx.yyy.255.251:111 SYN ******S* Sep 19 22:43:31 217.9.240.37:33647 -> xxx.yyy.255.250:111 SYN ******S* Sep 19 22:43:31 217.9.240.37:33650 -> xxx.yyy.255.253:111 SYN ******S* Sep 19 22:43:31 217.9.240.37:33649 -> xxx.yyy.255.252:111 SYN ******S* Sep 19 22:43:31 217.9.240.37:33652 -> xxx.yyy.255.255:111 SYN ******S* Sep 19 22:43:31 217.9.240.37:33651 -> xxx.yyy.255.254:111 SYN ******S* 47981 Sep 19 19:11:23 12.217.182.106:3889 -> xxx.yyy.1.1:1433 SYN ******S* Sep 19 19:11:23 12.217.182.106:3890 -> xxx.yyy.1.2:1433 SYN ******S* Sep 19 19:11:20 12.217.182.106:3891 -> xxx.yyy.1.3:1433 SYN ******S* Sep 19 19:11:20 12.217.182.106:3892 -> xxx.yyy.1.4:1433 SYN ******S* Sep 19 19:11:20 12.217.182.106:3893 -> xxx.yyy.1.5:1433 SYN ******S* Sep 19 19:11:20 12.217.182.106:3894 -> xxx.yyy.1.6:1433 SYN ******S* Sep 19 19:11:20 12.217.182.106:3897 -> xxx.yyy.1.9:1433 SYN ******S* Sep 19 19:11:20 12.217.182.106:3898 -> xxx.yyy.1.10:1433 SYN ******S* [...] Sep 19 19:23:03 12.217.182.106:4118 -> xxx.yyy.255.240:1433 SYN ******S* Sep 19 19:23:03 12.217.182.106:4120 -> xxx.yyy.255.242:1433 SYN ******S* Sep 19 19:23:03 12.217.182.106:4121 -> xxx.yyy.255.243:1433 SYN ******S* Sep 19 19:23:03 12.217.182.106:4122 -> xxx.yyy.255.244:1433 SYN ******S* Sep 19 19:23:03 12.217.182.106:4124 -> xxx.yyy.255.246:1433 SYN ******S* Sep 19 19:23:03 12.217.182.106:4126 -> xxx.yyy.255.248:1433 SYN ******S* Sep 19 19:23:03 12.217.182.106:4132 -> xxx.yyy.255.252:1433 SYN ******S* Sep 19 19:23:03 12.217.182.106:4134 -> xxx.yyy.255.254:1433 SYN ******S* 43646 Sep 19 03:17:09 60.25.121.237:3252 -> xxx.yyy.1.1:1433 SYN ******S* Sep 19 03:17:09 60.25.121.237:3257 -> xxx.yyy.1.3:1433 SYN ******S* Sep 19 03:17:09 60.25.121.237:3259 -> xxx.yyy.1.4:1433 SYN ******S* Sep 19 03:17:09 60.25.121.237:3261 -> xxx.yyy.1.5:1433 SYN ******S* Sep 19 03:17:09 60.25.121.237:3262 -> xxx.yyy.1.6:1433 SYN ******S* Sep 19 03:17:09 60.25.121.237:3264 -> xxx.yyy.1.7:1433 SYN ******S* Sep 19 03:17:09 60.25.121.237:3266 -> xxx.yyy.1.8:1433 SYN ******S* Sep 19 03:17:09 60.25.121.237:3269 -> xxx.yyy.1.9:1433 SYN ******S* [...] Sep 19 03:34:34 60.25.121.237:3265 -> xxx.yyy.255.246:1433 SYN ******S* Sep 19 03:34:34 60.25.121.237:3267 -> xxx.yyy.255.247:1433 SYN ******S* Sep 19 03:34:34 60.25.121.237:3269 -> xxx.yyy.255.248:1433 SYN ******S* Sep 19 03:34:34 60.25.121.237:3271 -> xxx.yyy.255.249:1433 SYN ******S* Sep 19 03:34:34 60.25.121.237:3273 -> xxx.yyy.255.250:1433 SYN ******S* Sep 19 03:34:34 60.25.121.237:3275 -> xxx.yyy.255.251:1433 SYN ******S* Sep 19 03:34:34 60.25.121.237:3277 -> xxx.yyy.255.252:1433 SYN ******S* Sep 19 03:34:34 60.25.121.237:3280 -> xxx.yyy.255.253:1433 SYN ******S* Sep 19 03:34:34 60.25.121.237:3282 -> xxx.yyy.255.254:1433 SYN ******S* 42590 Sep 19 21:56:15 82.192.225.192:3305 -> xxx.yyy.1.10:1433 SYN ******S* Sep 19 21:56:18 82.192.225.192:3318 -> xxx.yyy.1.23:1433 SYN ******S* Sep 19 21:56:18 82.192.225.192:3319 -> xxx.yyy.1.24:1433 SYN ******S* Sep 19 21:56:18 82.192.225.192:3324 -> xxx.yyy.1.29:1433 SYN ******S* Sep 19 21:56:18 82.192.225.192:3325 -> xxx.yyy.1.30:1433 SYN ******S* Sep 19 21:56:18 82.192.225.192:3326 -> xxx.yyy.1.31:1433 SYN ******S* Sep 19 21:56:18 82.192.225.192:3328 -> xxx.yyy.1.33:1433 SYN ******S* Sep 19 21:56:15 82.192.225.192:3331 -> xxx.yyy.1.36:1433 SYN ******S* [...] Sep 19 22:08:03 82.192.225.192:1828 -> xxx.yyy.255.245:1433 SYN ******S* Sep 19 22:08:03 82.192.225.192:1829 -> xxx.yyy.255.246:1433 SYN ******S* Sep 19 22:08:03 82.192.225.192:1830 -> xxx.yyy.255.247:1433 SYN ******S* Sep 19 22:08:03 82.192.225.192:1831 -> xxx.yyy.255.248:1433 SYN ******S* Sep 19 22:08:03 82.192.225.192:1832 -> xxx.yyy.255.249:1433 SYN ******S* Sep 19 22:08:03 82.192.225.192:1833 -> xxx.yyy.255.250:1433 SYN ******S* Sep 19 22:08:03 82.192.225.192:1834 -> xxx.yyy.255.251:1433 SYN ******S* Sep 19 22:08:03 82.192.225.192:1836 -> xxx.yyy.255.253:1433 SYN ******S* 41589 Sep 19 17:51:27 193.128.182.110:3144 -> xxx.yyy.1.2:1433 SYN ******S* Sep 19 17:51:27 193.128.182.110:3148 -> xxx.yyy.1.3:1433 SYN ******S* Sep 19 17:51:27 193.128.182.110:3151 -> xxx.yyy.1.4:1433 SYN ******S* Sep 19 17:51:27 193.128.182.110:3156 -> xxx.yyy.1.6:1433 SYN ******S* Sep 19 17:51:27 193.128.182.110:3159 -> xxx.yyy.1.7:1433 SYN ******S* Sep 19 17:51:27 193.128.182.110:3172 -> xxx.yyy.1.13:1433 SYN ******S* Sep 19 17:51:27 193.128.182.110:3184 -> xxx.yyy.1.18:1433 SYN ******S* Sep 19 17:51:27 193.128.182.110:3189 -> xxx.yyy.1.20:1433 SYN ******S* [...] Sep 19 18:29:08 193.128.182.110:3829 -> xxx.yyy.255.155:1433 SYN ******S* Sep 19 18:29:08 193.128.182.110:3860 -> xxx.yyy.255.186:1433 SYN ******S* Sep 19 18:29:08 193.128.182.110:3859 -> xxx.yyy.255.185:1433 SYN ******S* Sep 19 18:29:08 193.128.182.110:3877 -> xxx.yyy.255.203:1433 SYN ******S* Sep 19 18:29:08 193.128.182.110:3878 -> xxx.yyy.255.204:1433 SYN ******S* Sep 19 18:29:08 193.128.182.110:3887 -> xxx.yyy.255.212:1433 SYN ******S* Sep 19 18:29:08 193.128.182.110:3911 -> xxx.yyy.255.236:1433 SYN ******S* Sep 19 18:29:09 193.128.182.110:3922 -> xxx.yyy.255.247:1433 SYN ******S* Sep 19 18:29:09 193.128.182.110:3929 -> xxx.yyy.255.254:1433 SYN ******S* 35780 Sep 19 22:34:32 194.219.232.8:4760 -> xxx.yyy.1.1:1433 SYN ******S* Sep 19 22:34:32 194.219.232.8:4762 -> xxx.yyy.1.3:1433 SYN ******S* Sep 19 22:34:35 194.219.232.8:4765 -> xxx.yyy.1.6:1433 SYN ******S* Sep 19 22:34:32 194.219.232.8:4766 -> xxx.yyy.1.7:1433 SYN ******S* Sep 19 22:34:32 194.219.232.8:4770 -> xxx.yyy.1.11:1433 SYN ******S* Sep 19 22:34:32 194.219.232.8:4771 -> xxx.yyy.1.12:1433 SYN ******S* Sep 19 22:34:32 194.219.232.8:4774 -> xxx.yyy.1.15:1433 SYN ******S* Sep 19 22:34:32 194.219.232.8:4775 -> xxx.yyy.1.16:1433 SYN ******S* [...] Sep 19 22:54:19 194.219.232.8:4253 -> xxx.yyy.255.208:1433 SYN ******S* Sep 19 22:54:19 194.219.232.8:4269 -> xxx.yyy.255.224:1433 SYN ******S* Sep 19 22:54:19 194.219.232.8:4266 -> xxx.yyy.255.221:1433 SYN ******S* Sep 19 22:54:19 194.219.232.8:4292 -> xxx.yyy.255.247:1433 SYN ******S* Sep 19 22:54:19 194.219.232.8:4289 -> xxx.yyy.255.244:1433 SYN ******S* Sep 19 22:54:19 194.219.232.8:4299 -> xxx.yyy.255.254:1433 SYN ******S* Sep 19 22:54:19 194.219.232.8:4283 -> xxx.yyy.255.238:1433 SYN ******S* Sep 19 22:54:19 194.219.232.8:4293 -> xxx.yyy.255.248:1433 SYN ******S* Sep 19 22:54:19 194.219.232.8:4288 -> xxx.yyy.255.243:1433 SYN ******S* 23288 Sep 19 06:07:20 217.255.216.109:3388 -> xxx.yyy.1.5:1433 SYN ******S* Sep 19 06:07:20 217.255.216.109:3389 -> xxx.yyy.1.6:1433 SYN ******S* Sep 19 06:07:20 217.255.216.109:3390 -> xxx.yyy.1.7:1433 SYN ******S* Sep 19 06:07:20 217.255.216.109:3398 -> xxx.yyy.1.15:1433 SYN ******S* Sep 19 06:07:20 217.255.216.109:3399 -> xxx.yyy.1.16:1433 SYN ******S* Sep 19 06:07:20 217.255.216.109:3400 -> xxx.yyy.1.17:1433 SYN ******S* Sep 19 06:07:20 217.255.216.109:3401 -> xxx.yyy.1.18:1433 SYN ******S* Sep 19 06:07:20 217.255.216.109:3408 -> xxx.yyy.1.25:1433 SYN ******S* [...] Sep 19 06:08:17 217.255.216.109:3388 -> xxx.yyy.255.235:1433 SYN ******S* Sep 19 06:08:17 217.255.216.109:3389 -> xxx.yyy.255.236:1433 SYN ******S* Sep 19 06:08:17 217.255.216.109:3390 -> xxx.yyy.255.237:1433 SYN ******S* Sep 19 06:08:17 217.255.216.109:3391 -> xxx.yyy.255.238:1433 SYN ******S* Sep 19 06:08:17 217.255.216.109:3392 -> xxx.yyy.255.239:1433 SYN ******S* Sep 19 06:08:17 217.255.216.109:3398 -> xxx.yyy.255.245:1433 SYN ******S* Sep 19 06:08:17 217.255.216.109:3399 -> xxx.yyy.255.246:1433 SYN ******S* Sep 19 06:08:17 217.255.216.109:3400 -> xxx.yyy.255.247:1433 SYN ******S* Sep 19 06:08:17 217.255.216.109:3401 -> xxx.yyy.255.248:1433 SYN ******S* 15883 Sep 19 00:34:12 222.100.110.114:4803 -> xxx.yyy.73.71:5554 SYN ******S* Sep 19 00:34:13 222.100.110.114:1220 -> xxx.yyy.73.71:1023 SYN ******S* Sep 19 00:34:15 222.100.110.114:1841 -> xxx.yyy.73.71:9898 SYN ******S* Sep 19 00:34:12 222.100.110.114:4809 -> xxx.yyy.73.74:5554 SYN ******S* Sep 19 00:34:13 222.100.110.114:1222 -> xxx.yyy.73.74:1023 SYN ******S* Sep 19 00:34:12 222.100.110.114:4797 -> xxx.yyy.72.127:5554 SYN ******S* Sep 19 00:34:13 222.100.110.114:1218 -> xxx.yyy.72.127:1023 SYN ******S* Sep 19 00:34:15 222.100.110.114:1838 -> xxx.yyy.72.127:9898 SYN ******S* [...] Sep 19 00:36:31 222.100.110.114:3399 -> xxx.yyy.73.62:9898 SYN ******S* Sep 19 00:36:31 222.100.110.114:3386 -> xxx.yyy.73.57:9898 SYN ******S* Sep 19 00:36:31 222.100.110.114:3388 -> xxx.yyy.73.60:9898 SYN ******S* Sep 19 00:36:31 222.100.110.114:3396 -> xxx.yyy.73.59:9898 SYN ******S* Sep 19 00:36:31 222.100.110.114:3411 -> xxx.yyy.73.69:9898 SYN ******S* Sep 19 00:36:31 222.100.110.114:3409 -> xxx.yyy.73.65:9898 SYN ******S* Sep 19 00:36:31 222.100.110.114:3413 -> xxx.yyy.73.67:9898 SYN ******S* Sep 19 00:36:31 222.100.110.114:3410 -> xxx.yyy.73.68:9898 SYN ******S* Sep 19 00:36:31 222.100.110.114:3412 -> xxx.yyy.73.70:9898 SYN ******S* 13239 Sep 19 00:54:23 218.61.12.87:2654 -> xxx.yyy.153.137:5554 SYN ******S* Sep 19 00:54:24 218.61.12.87:2801 -> xxx.yyy.153.137:1023 SYN ******S* Sep 19 00:54:26 218.61.12.87:3065 -> xxx.yyy.153.137:9898 SYN ******S* Sep 19 00:54:23 218.61.12.87:2655 -> xxx.yyy.153.138:5554 SYN ******S* Sep 19 00:54:24 218.61.12.87:2802 -> xxx.yyy.153.138:1023 SYN ******S* Sep 19 00:54:26 218.61.12.87:3066 -> xxx.yyy.153.138:9898 SYN ******S* Sep 19 00:54:23 218.61.12.87:2652 -> xxx.yyy.153.136:5554 SYN ******S* Sep 19 00:54:24 218.61.12.87:2799 -> xxx.yyy.153.136:1023 SYN ******S* [...] Sep 19 00:56:43 218.61.12.87:4731 -> xxx.yyy.173.248:9898 SYN ******S* Sep 19 00:56:43 218.61.12.87:4735 -> xxx.yyy.173.252:9898 SYN ******S* Sep 19 00:56:43 218.61.12.87:4734 -> xxx.yyy.173.251:9898 SYN ******S* Sep 19 00:56:43 218.61.12.87:4736 -> xxx.yyy.173.253:9898 SYN ******S* Sep 19 00:56:43 218.61.12.87:4737 -> xxx.yyy.173.254:9898 SYN ******S* Sep 19 00:56:43 218.61.12.87:4739 -> xxx.yyy.174.0:9898 SYN ******S* Sep 19 00:56:43 218.61.12.87:4738 -> xxx.yyy.173.255:9898 SYN ******S* Sep 19 00:56:43 218.61.12.87:4740 -> xxx.yyy.174.1:9898 SYN ******S* 12056 Sep 19 00:04:12 65.54.188.52:29436 -> xxx.yyy.241.255:80 SYN ******S* Sep 19 00:04:09 65.54.188.52:28560 -> xxx.yyy.1.63:80 SYN ******S* Sep 19 00:04:10 65.54.188.52:28672 -> xxx.yyy.213.66:80 SYN ******S* Sep 19 00:04:10 65.54.188.52:28823 -> xxx.yyy.236.22:80 SYN ******S* Sep 19 00:04:11 65.54.188.52:29324 -> xxx.yyy.210.5:80 SYN ******S* Sep 19 00:04:12 65.54.188.52:29493 -> xxx.yyy.220.224:80 SYN ******S* Sep 19 00:04:13 65.54.188.52:29838 -> xxx.yyy.241.98:80 SYN ******S* Sep 19 00:04:13 65.54.188.52:29909 -> xxx.yyy.1.60:80 SYN ******S* [...] Sep 19 23:59:37 65.54.188.52:20405 -> xxx.yyy.241.20:80 SYN ******S* Sep 19 23:59:42 65.54.188.52:22681 -> xxx.yyy.241.4:80 SYN ******S* Sep 19 23:59:43 65.54.188.52:22805 -> xxx.yyy.1.13:80 SYN ******S* Sep 19 23:59:45 65.54.188.52:23475 -> xxx.yyy.241.20:80 SYN ******S* Sep 19 23:59:46 65.54.188.52:23892 -> xxx.yyy.1.13:80 SYN ******S* Sep 19 23:59:46 65.54.188.52:24011 -> xxx.yyy.1.60:80 SYN ******S* Sep 19 23:59:49 65.54.188.52:24839 -> xxx.yyy.241.4:80 SYN ******S* Sep 19 23:59:49 65.54.188.52:24929 -> xxx.yyy.1.13:80 SYN ******S* Sep 19 23:59:49 65.54.188.52:25032 -> xxx.yyy.1.60:80 SYN ******S* 11397 Sep 19 06:00:38 82.43.163.10:1738 -> xxx.yyy.1.0:1433 SYN ******S* Sep 19 06:00:38 82.43.163.10:1739 -> xxx.yyy.1.1:1433 SYN ******S* Sep 19 06:00:38 82.43.163.10:1740 -> xxx.yyy.1.2:1433 SYN ******S* Sep 19 06:00:38 82.43.163.10:1742 -> xxx.yyy.1.4:1433 SYN ******S* Sep 19 06:00:39 82.43.163.10:1744 -> xxx.yyy.1.5:1433 SYN ******S* Sep 19 06:00:39 82.43.163.10:1746 -> xxx.yyy.1.6:1433 SYN ******S* Sep 19 06:00:39 82.43.163.10:1747 -> xxx.yyy.1.7:1433 SYN ******S* Sep 19 06:00:39 82.43.163.10:1748 -> xxx.yyy.1.8:1433 SYN ******S* [...] Sep 19 06:30:14 82.43.163.10:2475 -> xxx.yyy.33.240:1433 SYN ******S* Sep 19 06:30:14 82.43.163.10:2486 -> xxx.yyy.33.248:1433 SYN ******S* Sep 19 06:30:14 82.43.163.10:2484 -> xxx.yyy.33.247:1433 SYN ******S* Sep 19 06:30:14 82.43.163.10:2492 -> xxx.yyy.33.250:1433 SYN ******S* Sep 19 06:30:14 82.43.163.10:2493 -> xxx.yyy.33.251:1433 SYN ******S* Sep 19 06:30:14 82.43.163.10:2491 -> xxx.yyy.33.249:1433 SYN ******S* Sep 19 06:30:14 82.43.163.10:2504 -> xxx.yyy.33.255:1433 SYN ******S* Sep 19 06:30:14 82.43.163.10:2500 -> xxx.yyy.33.253:1433 SYN ******S* Sep 19 06:30:14 82.43.163.10:2502 -> xxx.yyy.33.254:1433 SYN ******S* 8998 Sep 19 02:37:06 82.47.128.127:3620 -> xxx.yyy.1.0:1433 SYN ******S* Sep 19 02:37:06 82.47.128.127:3622 -> xxx.yyy.1.1:1433 SYN ******S* Sep 19 02:37:06 82.47.128.127:3624 -> xxx.yyy.1.2:1433 SYN ******S* Sep 19 02:37:06 82.47.128.127:3626 -> xxx.yyy.1.3:1433 SYN ******S* Sep 19 02:37:06 82.47.128.127:3628 -> xxx.yyy.1.4:1433 SYN ******S* Sep 19 02:37:06 82.47.128.127:3630 -> xxx.yyy.1.5:1433 SYN ******S* Sep 19 02:37:06 82.47.128.127:3632 -> xxx.yyy.1.6:1433 SYN ******S* Sep 19 02:37:06 82.47.128.127:3634 -> xxx.yyy.1.7:1433 SYN ******S* [...] Sep 19 03:06:42 82.47.128.127:3818 -> xxx.yyy.33.245:1433 SYN ******S* Sep 19 03:06:42 82.47.128.127:3821 -> xxx.yyy.33.246:1433 SYN ******S* Sep 19 03:06:42 82.47.128.127:3827 -> xxx.yyy.33.252:1433 SYN ******S* Sep 19 03:06:42 82.47.128.127:3826 -> xxx.yyy.33.251:1433 SYN ******S* Sep 19 03:06:42 82.47.128.127:3824 -> xxx.yyy.33.249:1433 SYN ******S* Sep 19 03:06:42 82.47.128.127:3831 -> xxx.yyy.33.254:1433 SYN ******S* Sep 19 03:06:42 82.47.128.127:3830 -> xxx.yyy.33.253:1433 SYN ******S* Sep 19 03:06:42 82.47.128.127:3836 -> xxx.yyy.33.255:1433 SYN ******S* 8404 Sep 19 00:56:47 218.61.86.77:2958 -> xxx.yyy.195.88:5554 SYN ******S* Sep 19 00:56:48 218.61.86.77:3445 -> xxx.yyy.195.88:1023 SYN ******S* Sep 19 00:56:50 218.61.86.77:4626 -> xxx.yyy.195.88:9898 SYN ******S* Sep 19 00:56:47 218.61.86.77:2961 -> xxx.yyy.195.91:5554 SYN ******S* Sep 19 00:56:48 218.61.86.77:3448 -> xxx.yyy.195.91:1023 SYN ******S* Sep 19 00:56:50 218.61.86.77:4629 -> xxx.yyy.195.91:9898 SYN ******S* Sep 19 00:56:47 218.61.86.77:2963 -> xxx.yyy.195.92:5554 SYN ******S* Sep 19 00:56:48 218.61.86.77:3449 -> xxx.yyy.195.92:1023 SYN ******S* [...] Sep 19 00:57:35 218.61.86.77:3906 -> xxx.yyy.215.203:9898 SYN ******S* Sep 19 00:57:35 218.61.86.77:3907 -> xxx.yyy.215.204:9898 SYN ******S* Sep 19 00:57:35 218.61.86.77:3908 -> xxx.yyy.215.205:9898 SYN ******S* Sep 19 00:57:35 218.61.86.77:3910 -> xxx.yyy.215.207:9898 SYN ******S* Sep 19 00:57:35 218.61.86.77:3909 -> xxx.yyy.215.206:9898 SYN ******S* Sep 19 00:57:35 218.61.86.77:3920 -> xxx.yyy.215.209:9898 SYN ******S* Sep 19 00:57:35 218.61.86.77:3921 -> xxx.yyy.215.210:9898 SYN ******S* Sep 19 00:57:35 218.61.86.77:3919 -> xxx.yyy.215.208:9898 SYN ******S* 8382 Sep 19 00:56:09 218.61.74.138:2425 -> xxx.yyy.174.27:5554 SYN ******S* Sep 19 00:56:09 218.61.74.138:2424 -> xxx.yyy.174.29:5554 SYN ******S* Sep 19 00:56:12 218.61.74.138:4036 -> xxx.yyy.174.29:9898 SYN ******S* Sep 19 00:56:09 218.61.74.138:2431 -> xxx.yyy.174.21:5554 SYN ******S* Sep 19 00:56:09 218.61.74.138:2428 -> xxx.yyy.174.24:5554 SYN ******S* Sep 19 00:56:09 218.61.74.138:2430 -> xxx.yyy.174.22:5554 SYN ******S* Sep 19 00:56:10 218.61.74.138:3012 -> xxx.yyy.174.22:1023 SYN ******S* Sep 19 00:56:12 218.61.74.138:4039 -> xxx.yyy.174.22:9898 SYN ******S* [...] Sep 19 00:56:54 218.61.74.138:1113 -> xxx.yyy.194.22:9898 SYN ******S* Sep 19 00:56:55 218.61.74.138:1306 -> xxx.yyy.194.85:9898 SYN ******S* Sep 19 00:56:55 218.61.74.138:1309 -> xxx.yyy.194.92:9898 SYN ******S* Sep 19 00:56:55 218.61.74.138:1311 -> xxx.yyy.194.87:9898 SYN ******S* Sep 19 00:56:55 218.61.74.138:1312 -> xxx.yyy.194.88:9898 SYN ******S* Sep 19 00:56:55 218.61.74.138:1313 -> xxx.yyy.194.89:9898 SYN ******S* Sep 19 00:56:55 218.61.74.138:1310 -> xxx.yyy.194.86:9898 SYN ******S* Sep 19 00:56:55 218.61.74.138:1315 -> xxx.yyy.194.91:9898 SYN ******S* Sep 19 00:56:55 218.61.74.138:1619 -> xxx.yyy.194.97:9898 SYN ******S* 8248 Sep 19 23:50:30 221.189.131.240:3016 -> xxx.yyy.71.197:5554 SYN ******S* Sep 19 23:50:33 221.189.131.240:1320 -> xxx.yyy.71.197:9898 SYN ******S* Sep 19 23:50:30 221.189.131.240:3020 -> xxx.yyy.71.202:5554 SYN ******S* Sep 19 23:50:31 221.189.131.240:3625 -> xxx.yyy.71.202:1023 SYN ******S* Sep 19 23:50:33 221.189.131.240:1308 -> xxx.yyy.71.202:9898 SYN ******S* Sep 19 23:50:30 221.189.131.240:2994 -> xxx.yyy.71.184:5554 SYN ******S* Sep 19 23:50:33 221.189.131.240:1280 -> xxx.yyy.71.184:9898 SYN ******S* Sep 19 23:50:30 221.189.131.240:3027 -> xxx.yyy.71.208:5554 SYN ******S* [...] Sep 19 23:51:19 221.189.131.240:1990 -> xxx.yyy.92.4:9898 SYN ******S* Sep 19 23:51:19 221.189.131.240:2039 -> xxx.yyy.92.15:9898 SYN ******S* Sep 19 23:51:19 221.189.131.240:2040 -> xxx.yyy.92.16:9898 SYN ******S* Sep 19 23:51:19 221.189.131.240:2070 -> xxx.yyy.92.21:9898 SYN ******S* Sep 19 23:51:19 221.189.131.240:2069 -> xxx.yyy.92.20:9898 SYN ******S* Sep 19 23:51:19 221.189.131.240:2071 -> xxx.yyy.92.22:9898 SYN ******S* Sep 19 23:51:19 221.189.131.240:2110 -> xxx.yyy.92.25:9898 SYN ******S* Sep 19 23:51:19 221.189.131.240:2214 -> xxx.yyy.71.194:9898 SYN ******S* 7901 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions