[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0500. Sep 20 05:48:21 64.173.4.100:4016 -> xxx.yyy.1.1:1433 SYN ******S* Sep 20 05:48:21 64.173.4.100:4017 -> xxx.yyy.1.1:6129 SYN ******S* Sep 20 05:48:21 64.173.4.100:4019 -> xxx.yyy.1.2:6129 SYN ******S* Sep 20 05:48:21 64.173.4.100:4018 -> xxx.yyy.1.2:1433 SYN ******S* Sep 20 05:48:21 64.173.4.100:4020 -> xxx.yyy.1.3:1433 SYN ******S* Sep 20 05:48:21 64.173.4.100:4021 -> xxx.yyy.1.3:6129 SYN ******S* Sep 20 05:48:21 64.173.4.100:4022 -> xxx.yyy.1.4:1433 SYN ******S* Sep 20 05:48:21 64.173.4.100:4023 -> xxx.yyy.1.4:6129 SYN ******S* [...] Sep 20 05:58:42 64.173.4.100:4491 -> xxx.yyy.255.251:1433 SYN ******S* Sep 20 05:58:42 64.173.4.100:4492 -> xxx.yyy.255.251:6129 SYN ******S* Sep 20 05:58:42 64.173.4.100:4493 -> xxx.yyy.255.252:1433 SYN ******S* Sep 20 05:58:42 64.173.4.100:4494 -> xxx.yyy.255.252:6129 SYN ******S* Sep 20 05:58:42 64.173.4.100:4495 -> xxx.yyy.255.253:1433 SYN ******S* Sep 20 05:58:42 64.173.4.100:4496 -> xxx.yyy.255.253:6129 SYN ******S* Sep 20 05:58:42 64.173.4.100:4497 -> xxx.yyy.255.254:1433 SYN ******S* Sep 20 05:58:42 64.173.4.100:4498 -> xxx.yyy.255.254:6129 SYN ******S* 77769 Sep 20 17:03:15 64.4.171.59:6984 -> xxx.yyy.1.4:1433 SYN ******S* Sep 20 17:03:18 64.4.171.59:6988 -> xxx.yyy.1.8:1433 SYN ******S* Sep 20 17:03:18 64.4.171.59:6989 -> xxx.yyy.1.9:1433 SYN ******S* Sep 20 17:03:18 64.4.171.59:6990 -> xxx.yyy.1.10:1433 SYN ******S* Sep 20 17:03:15 64.4.171.59:6994 -> xxx.yyy.1.14:1433 SYN ******S* Sep 20 17:03:15 64.4.171.59:6997 -> xxx.yyy.1.17:1433 SYN ******S* Sep 20 17:03:18 64.4.171.59:7001 -> xxx.yyy.1.21:1433 SYN ******S* Sep 20 17:03:18 64.4.171.59:7002 -> xxx.yyy.1.22:1433 SYN ******S* [...] Sep 20 20:51:59 64.4.171.59:24504 -> xxx.yyy.255.235:1433 SYN ******S* Sep 20 20:52:01 64.4.171.59:24542 -> xxx.yyy.255.246:1433 SYN ******S* Sep 20 20:52:01 64.4.171.59:24543 -> xxx.yyy.255.247:1433 SYN ******S* Sep 20 20:52:01 64.4.171.59:24549 -> xxx.yyy.255.251:1433 SYN ******S* Sep 20 20:52:01 64.4.171.59:24547 -> xxx.yyy.255.249:1433 SYN ******S* Sep 20 20:52:01 64.4.171.59:24548 -> xxx.yyy.255.250:1433 SYN ******S* Sep 20 20:52:01 64.4.171.59:24546 -> xxx.yyy.255.248:1433 SYN ******S* Sep 20 20:52:01 64.4.171.59:24558 -> xxx.yyy.255.254:1433 SYN ******S* 64100 Sep 20 17:47:06 64.53.39.7:2586 -> xxx.yyy.1.3:5554 SYN ******S* Sep 20 17:47:07 64.53.39.7:2589 -> xxx.yyy.1.6:5554 SYN ******S* Sep 20 17:47:07 64.53.39.7:2590 -> xxx.yyy.1.7:5554 SYN ******S* Sep 20 17:47:07 64.53.39.7:2592 -> xxx.yyy.1.9:5554 SYN ******S* Sep 20 17:47:07 64.53.39.7:2596 -> xxx.yyy.1.13:5554 SYN ******S* Sep 20 17:47:07 64.53.39.7:2598 -> xxx.yyy.1.15:5554 SYN ******S* Sep 20 17:47:07 64.53.39.7:2599 -> xxx.yyy.1.16:5554 SYN ******S* Sep 20 17:47:07 64.53.39.7:2601 -> xxx.yyy.1.18:5554 SYN ******S* [...] Sep 20 17:58:48 64.53.39.7:1404 -> xxx.yyy.255.241:5554 SYN ******S* Sep 20 17:58:48 64.53.39.7:1401 -> xxx.yyy.255.238:5554 SYN ******S* Sep 20 17:58:48 64.53.39.7:1400 -> xxx.yyy.255.237:5554 SYN ******S* Sep 20 17:58:48 64.53.39.7:1398 -> xxx.yyy.255.235:5554 SYN ******S* Sep 20 17:58:48 64.53.39.7:1397 -> xxx.yyy.255.234:5554 SYN ******S* Sep 20 17:58:48 64.53.39.7:1402 -> xxx.yyy.255.239:5554 SYN ******S* Sep 20 17:58:48 64.53.39.7:1416 -> xxx.yyy.255.253:5554 SYN ******S* Sep 20 17:58:48 64.53.39.7:1417 -> xxx.yyy.255.254:5554 SYN ******S* 47543 Sep 20 01:37:57 83.135.74.43:1205 -> xxx.yyy.1.2:4898 SYN ******S* Sep 20 01:37:56 83.135.74.43:1267 -> xxx.yyy.1.59:4898 SYN ******S* Sep 20 01:37:57 83.135.74.43:1270 -> xxx.yyy.1.60:4898 SYN ******S* Sep 20 01:37:57 83.135.74.43:1273 -> xxx.yyy.1.61:4898 SYN ******S* Sep 20 01:37:57 83.135.74.43:1275 -> xxx.yyy.1.62:4898 SYN ******S* Sep 20 01:37:57 83.135.74.43:1298 -> xxx.yyy.1.63:4898 SYN ******S* Sep 20 01:37:57 83.135.74.43:1206 -> xxx.yyy.1.3:4898 SYN ******S* Sep 20 01:37:57 83.135.74.43:1299 -> xxx.yyy.1.64:4898 SYN ******S* [...] Sep 20 02:46:19 83.135.74.43:3334 -> xxx.yyy.255.247:4898 SYN ******S* Sep 20 02:46:19 83.135.74.43:3335 -> xxx.yyy.255.248:4898 SYN ******S* Sep 20 02:46:19 83.135.74.43:3336 -> xxx.yyy.255.249:4898 SYN ******S* Sep 20 02:46:19 83.135.74.43:3337 -> xxx.yyy.255.250:4898 SYN ******S* Sep 20 02:46:19 83.135.74.43:3338 -> xxx.yyy.255.251:4898 SYN ******S* Sep 20 02:46:19 83.135.74.43:3339 -> xxx.yyy.255.252:4898 SYN ******S* Sep 20 02:46:19 83.135.74.43:3340 -> xxx.yyy.255.253:4898 SYN ******S* Sep 20 02:46:19 83.135.74.43:3341 -> xxx.yyy.255.254:4898 SYN ******S* 44169 Sep 20 16:57:13 211.14.136.197:1908 -> xxx.yyy.1.2:3632 SYN ******S* Sep 20 16:57:12 211.14.136.197:1918 -> xxx.yyy.1.12:3632 SYN ******S* Sep 20 16:57:12 211.14.136.197:1919 -> xxx.yyy.1.13:3632 SYN ******S* Sep 20 16:57:14 211.14.136.197:1923 -> xxx.yyy.1.17:3632 SYN ******S* Sep 20 16:57:12 211.14.136.197:1925 -> xxx.yyy.1.19:3632 SYN ******S* Sep 20 16:57:12 211.14.136.197:1928 -> xxx.yyy.1.22:3632 SYN ******S* Sep 20 16:57:12 211.14.136.197:1929 -> xxx.yyy.1.23:3632 SYN ******S* Sep 20 16:57:14 211.14.136.197:1933 -> xxx.yyy.1.27:3632 SYN ******S* [...] Sep 20 17:09:05 211.14.136.197:4515 -> xxx.yyy.255.188:3632 SYN ******S* Sep 20 17:09:05 211.14.136.197:4516 -> xxx.yyy.255.189:3632 SYN ******S* Sep 20 17:09:05 211.14.136.197:4521 -> xxx.yyy.255.193:3632 SYN ******S* Sep 20 17:09:05 211.14.136.197:4518 -> xxx.yyy.255.191:3632 SYN ******S* Sep 20 17:09:05 211.14.136.197:4561 -> xxx.yyy.255.211:3632 SYN ******S* Sep 20 17:09:05 211.14.136.197:4580 -> xxx.yyy.255.218:3632 SYN ******S* Sep 20 17:09:05 211.14.136.197:4621 -> xxx.yyy.255.240:3632 SYN ******S* Sep 20 17:09:05 211.14.136.197:4616 -> xxx.yyy.255.235:3632 SYN ******S* 39848 Sep 20 12:03:17 208.36.159.212:2319 -> xxx.yyy.1.0:1433 SYN ******S* Sep 20 12:03:20 208.36.159.212:2320 -> xxx.yyy.1.1:1433 SYN ******S* Sep 20 12:03:17 208.36.159.212:2321 -> xxx.yyy.1.2:1433 SYN ******S* Sep 20 12:03:17 208.36.159.212:2322 -> xxx.yyy.1.3:1433 SYN ******S* Sep 20 12:03:20 208.36.159.212:2323 -> xxx.yyy.1.4:1433 SYN ******S* Sep 20 12:03:17 208.36.159.212:2324 -> xxx.yyy.1.5:1433 SYN ******S* Sep 20 12:03:20 208.36.159.212:2328 -> xxx.yyy.1.9:1433 SYN ******S* Sep 20 12:03:20 208.36.159.212:2331 -> xxx.yyy.1.12:1433 SYN ******S* [...] Sep 20 12:19:35 208.36.159.212:3968 -> xxx.yyy.255.229:1433 SYN ******S* Sep 20 12:19:35 208.36.159.212:3965 -> xxx.yyy.255.226:1433 SYN ******S* Sep 20 12:19:35 208.36.159.212:3962 -> xxx.yyy.255.223:1433 SYN ******S* Sep 20 12:19:36 208.36.159.212:3974 -> xxx.yyy.255.235:1433 SYN ******S* Sep 20 12:19:36 208.36.159.212:3971 -> xxx.yyy.255.232:1433 SYN ******S* Sep 20 12:19:36 208.36.159.212:3979 -> xxx.yyy.255.240:1433 SYN ******S* Sep 20 12:19:36 208.36.159.212:3976 -> xxx.yyy.255.237:1433 SYN ******S* Sep 20 12:19:36 208.36.159.212:3973 -> xxx.yyy.255.234:1433 SYN ******S* 37815 Sep 20 20:31:21 80.81.125.244:3069 -> xxx.yyy.1.1:5554 SYN ******S* Sep 20 20:31:21 80.81.125.244:3071 -> xxx.yyy.1.2:5554 SYN ******S* Sep 20 20:31:21 80.81.125.244:3073 -> xxx.yyy.1.3:5554 SYN ******S* Sep 20 20:31:20 80.81.125.244:3077 -> xxx.yyy.1.5:5554 SYN ******S* Sep 20 20:31:23 80.81.125.244:3083 -> xxx.yyy.1.8:5554 SYN ******S* Sep 20 20:31:20 80.81.125.244:3085 -> xxx.yyy.1.9:5554 SYN ******S* Sep 20 20:31:20 80.81.125.244:3089 -> xxx.yyy.1.11:5554 SYN ******S* Sep 20 20:31:20 80.81.125.244:3093 -> xxx.yyy.1.13:5554 SYN ******S* [...] Sep 20 20:43:01 80.81.125.244:2816 -> xxx.yyy.255.226:5554 SYN ******S* Sep 20 20:43:01 80.81.125.244:2810 -> xxx.yyy.255.223:5554 SYN ******S* Sep 20 20:43:01 80.81.125.244:2834 -> xxx.yyy.255.235:5554 SYN ******S* Sep 20 20:43:01 80.81.125.244:2856 -> xxx.yyy.255.246:5554 SYN ******S* Sep 20 20:43:01 80.81.125.244:2852 -> xxx.yyy.255.244:5554 SYN ******S* Sep 20 20:43:01 80.81.125.244:2862 -> xxx.yyy.255.249:5554 SYN ******S* Sep 20 20:43:01 80.81.125.244:2858 -> xxx.yyy.255.247:5554 SYN ******S* Sep 20 20:43:02 80.81.125.244:2868 -> xxx.yyy.255.252:5554 SYN ******S* Sep 20 20:43:02 80.81.125.244:2872 -> xxx.yyy.255.254:5554 SYN ******S* 36067 Sep 20 15:51:04 213.180.210.35:54680 -> xxx.yyy.153.164:8085 SYN ******S* Sep 20 15:51:04 213.180.210.35:42304 -> xxx.yyy.153.164:8095 SYN ******S* Sep 20 15:51:04 213.180.210.35:63583 -> xxx.yyy.153.164:8105 SYN ******S* Sep 20 15:51:04 213.180.210.35:58629 -> xxx.yyy.153.164:8100 SYN ******S* Sep 20 15:51:04 213.180.210.35:62496 -> xxx.yyy.153.164:8110 SYN ******S* Sep 20 15:51:04 213.180.210.35:37675 -> xxx.yyy.153.164:80 SYN ******S* Sep 20 15:51:04 213.180.210.35:34348 -> xxx.yyy.153.164:1075 SYN ******S* Sep 20 15:51:04 213.180.210.35:64766 -> xxx.yyy.153.164:81 SYN ******S* [...] Sep 20 16:56:15 213.180.210.35:60321 -> xxx.yyy.153.164:6038 SYN ******S* Sep 20 16:56:15 213.180.210.35:60321 -> xxx.yyy.153.164:6035 SYN ******S* Sep 20 16:56:15 213.180.210.35:60321 -> xxx.yyy.153.164:515 SYN ******S* Sep 20 16:56:15 213.180.210.35:60321 -> xxx.yyy.153.164:27374 SYN ******S* Sep 20 16:56:15 213.180.210.35:60321 -> xxx.yyy.153.164:6003 SYN ******S* Sep 20 16:56:15 213.180.210.35:60321 -> xxx.yyy.153.164:6062 SYN ******S* Sep 20 16:56:15 213.180.210.35:60321 -> xxx.yyy.153.164:6028 SYN ******S* Sep 20 16:56:15 213.180.210.35:60321 -> xxx.yyy.153.164:6005 SYN ******S* 25257 Sep 20 22:24:30 61.73.137.244:4048 -> xxx.yyy.1.2:4899 SYN ******S* Sep 20 22:24:30 61.73.137.244:4053 -> xxx.yyy.1.7:4899 SYN ******S* Sep 20 22:24:30 61.73.137.244:4052 -> xxx.yyy.1.6:4899 SYN ******S* Sep 20 22:24:30 61.73.137.244:4054 -> xxx.yyy.1.8:4899 SYN ******S* Sep 20 22:24:30 61.73.137.244:4056 -> xxx.yyy.1.10:4899 SYN ******S* Sep 20 22:24:30 61.73.137.244:4057 -> xxx.yyy.1.11:4899 SYN ******S* Sep 20 22:24:30 61.73.137.244:4058 -> xxx.yyy.1.12:4899 SYN ******S* Sep 20 22:24:30 61.73.137.244:4059 -> xxx.yyy.1.13:4899 SYN ******S* [...] Sep 20 22:35:25 61.73.137.244:1145 -> xxx.yyy.255.235:4899 SYN ******S* Sep 20 22:35:25 61.73.137.244:1146 -> xxx.yyy.255.236:4899 SYN ******S* Sep 20 22:35:25 61.73.137.244:1150 -> xxx.yyy.255.240:4899 SYN ******S* Sep 20 22:35:25 61.73.137.244:1153 -> xxx.yyy.255.242:4899 SYN ******S* Sep 20 22:35:25 61.73.137.244:1157 -> xxx.yyy.255.246:4899 SYN ******S* Sep 20 22:35:25 61.73.137.244:1158 -> xxx.yyy.255.247:4899 SYN ******S* Sep 20 22:35:25 61.73.137.244:1160 -> xxx.yyy.255.249:4899 SYN ******S* Sep 20 22:35:25 61.73.137.244:1161 -> xxx.yyy.255.250:4899 SYN ******S* Sep 20 22:35:25 61.73.137.244:1162 -> xxx.yyy.255.251:4899 SYN ******S* 21953 Sep 20 13:55:39 221.148.5.247:3130 -> xxx.yyy.1.8:4899 SYN ******S* Sep 20 13:55:39 221.148.5.247:3132 -> xxx.yyy.1.10:4899 SYN ******S* Sep 20 13:55:39 221.148.5.247:3137 -> xxx.yyy.1.15:4899 SYN ******S* Sep 20 13:55:40 221.148.5.247:3142 -> xxx.yyy.1.20:4899 SYN ******S* Sep 20 13:55:40 221.148.5.247:3143 -> xxx.yyy.1.21:4899 SYN ******S* Sep 20 13:55:39 221.148.5.247:3156 -> xxx.yyy.1.32:4899 SYN ******S* Sep 20 13:55:39 221.148.5.247:3151 -> xxx.yyy.1.28:4899 SYN ******S* Sep 20 13:55:40 221.148.5.247:3148 -> xxx.yyy.1.26:4899 SYN ******S* [...] Sep 20 13:59:56 221.148.5.247:3056 -> xxx.yyy.255.234:4899 SYN ******S* Sep 20 13:59:56 221.148.5.247:3060 -> xxx.yyy.255.238:4899 SYN ******S* Sep 20 13:59:56 221.148.5.247:3057 -> xxx.yyy.255.235:4899 SYN ******S* Sep 20 13:59:56 221.148.5.247:3058 -> xxx.yyy.255.236:4899 SYN ******S* Sep 20 13:59:56 221.148.5.247:3066 -> xxx.yyy.255.244:4899 SYN ******S* Sep 20 13:59:56 221.148.5.247:3067 -> xxx.yyy.255.245:4899 SYN ******S* Sep 20 13:59:56 221.148.5.247:3068 -> xxx.yyy.255.246:4899 SYN ******S* Sep 20 13:59:56 221.148.5.247:3074 -> xxx.yyy.255.252:4899 SYN ******S* Sep 20 13:59:56 221.148.5.247:3076 -> xxx.yyy.255.254:4899 SYN ******S* 20223 Sep 20 13:18:28 62.174.110.133:2215 -> xxx.yyy.128.0:17300 SYN ******S* Sep 20 13:18:29 62.174.110.133:2216 -> xxx.yyy.128.1:17300 SYN ******S* Sep 20 13:18:28 62.174.110.133:2217 -> xxx.yyy.128.2:17300 SYN ******S* Sep 20 13:18:31 62.174.110.133:2219 -> xxx.yyy.128.4:17300 SYN ******S* Sep 20 13:18:28 62.174.110.133:2218 -> xxx.yyy.128.3:17300 SYN ******S* Sep 20 13:18:30 62.174.110.133:2253 -> xxx.yyy.128.8:17300 SYN ******S* Sep 20 13:18:30 62.174.110.133:2254 -> xxx.yyy.128.9:17300 SYN ******S* Sep 20 13:18:30 62.174.110.133:2255 -> xxx.yyy.128.10:17300 SYN ******S* [...] Sep 20 13:35:26 62.174.110.133:2436 -> xxx.yyy.166.98:17300 SYN ******S* Sep 20 13:35:26 62.174.110.133:2452 -> xxx.yyy.166.114:17300 SYN ******S* Sep 20 13:35:26 62.174.110.133:2297 -> xxx.yyy.166.49:17300 SYN ******S* Sep 20 13:35:26 62.174.110.133:2449 -> xxx.yyy.166.111:17300 SYN ******S* Sep 20 13:35:26 62.174.110.133:2453 -> xxx.yyy.166.115:17300 SYN ******S* Sep 20 13:35:27 62.174.110.133:2444 -> xxx.yyy.166.106:17300 SYN ******S* Sep 20 13:35:27 62.174.110.133:2289 -> xxx.yyy.166.41:17300 SYN ******S* Sep 20 13:35:27 62.174.110.133:2441 -> xxx.yyy.166.103:17300 SYN ******S* Sep 20 13:35:27 62.174.110.133:2454 -> xxx.yyy.166.116:17300 SYN ******S* 13432 Sep 20 22:17:11 82.182.135.86:64731 -> xxx.yyy.10.1:1433 SYN ******S* Sep 20 22:17:14 82.182.135.86:64735 -> xxx.yyy.10.3:1433 SYN ******S* Sep 20 22:17:11 82.182.135.86:64743 -> xxx.yyy.10.7:1433 SYN ******S* Sep 20 22:17:11 82.182.135.86:64029 -> xxx.yyy.10.9:1433 SYN ******S* Sep 20 22:17:14 82.182.135.86:64751 -> xxx.yyy.10.11:1433 SYN ******S* Sep 20 22:17:11 82.182.135.86:64753 -> xxx.yyy.10.12:1433 SYN ******S* Sep 20 22:17:11 82.182.135.86:64759 -> xxx.yyy.10.15:1433 SYN ******S* Sep 20 22:17:11 82.182.135.86:64779 -> xxx.yyy.10.25:1433 SYN ******S* [...] Sep 20 22:27:57 82.182.135.86:65429 -> xxx.yyy.254.229:1433 SYN ******S* Sep 20 22:27:57 82.182.135.86:65423 -> xxx.yyy.254.226:1433 SYN ******S* Sep 20 22:27:57 82.182.135.86:65425 -> xxx.yyy.254.227:1433 SYN ******S* Sep 20 22:27:57 82.182.135.86:65439 -> xxx.yyy.254.234:1433 SYN ******S* Sep 20 22:27:57 82.182.135.86:65453 -> xxx.yyy.254.241:1433 SYN ******S* Sep 20 22:27:57 82.182.135.86:65455 -> xxx.yyy.254.242:1433 SYN ******S* Sep 20 22:27:59 82.182.135.86:64281 -> xxx.yyy.255.168:1433 SYN ******S* Sep 20 22:28:00 82.182.135.86:64005 -> xxx.yyy.255.243:1433 SYN ******S* 10019 Sep 20 00:02:00 65.54.188.52:34303 -> xxx.yyy.1.60:80 SYN ******S* Sep 20 00:01:58 65.54.188.52:33756 -> xxx.yyy.241.4:80 SYN ******S* Sep 20 00:01:59 65.54.188.52:33955 -> xxx.yyy.243.44:80 SYN ******S* Sep 20 00:02:04 65.54.188.52:35468 -> xxx.yyy.1.13:80 SYN ******S* Sep 20 00:02:01 65.54.188.52:34518 -> xxx.yyy.241.179:80 SYN ******S* Sep 20 00:02:02 65.54.188.52:34732 -> xxx.yyy.241.20:80 SYN ******S* Sep 20 00:02:08 65.54.188.52:36659 -> xxx.yyy.241.4:80 SYN ******S* Sep 20 00:02:08 65.54.188.52:36656 -> xxx.yyy.241.20:80 SYN ******S* [...] Sep 20 23:56:09 65.54.188.52:9087 -> xxx.yyy.1.13:80 SYN ******S* Sep 20 23:56:09 65.54.188.52:9209 -> xxx.yyy.225.192:591 SYN ******S* Sep 20 23:56:10 65.54.188.52:9210 -> xxx.yyy.208.6:80 SYN ******S* Sep 20 23:56:10 65.54.188.52:9203 -> xxx.yyy.209.1:80 SYN ******S* Sep 20 23:56:11 65.54.188.52:9453 -> xxx.yyy.14.23:80 SYN ******S* Sep 20 23:56:11 65.54.188.52:9733 -> xxx.yyy.212.103:80 SYN ******S* Sep 20 23:56:15 65.54.188.52:10319 -> xxx.yyy.1.13:80 SYN ******S* Sep 20 23:56:16 65.54.188.52:10496 -> xxx.yyy.241.179:80 SYN ******S* Sep 20 23:56:17 65.54.188.52:8758 -> xxx.yyy.220.58:80 SYN ******S* 9807 [...] 9709 Sep 20 23:53:38 146.145.237.59:2895 -> xxx.yyy.1.2:1433 SYN ******S* Sep 20 23:53:38 146.145.237.59:2897 -> xxx.yyy.1.4:1433 SYN ******S* Sep 20 23:53:35 146.145.237.59:2898 -> xxx.yyy.1.5:1433 SYN ******S* Sep 20 23:53:35 146.145.237.59:2904 -> xxx.yyy.1.11:1433 SYN ******S* Sep 20 23:53:35 146.145.237.59:2906 -> xxx.yyy.1.13:1433 SYN ******S* Sep 20 23:53:38 146.145.237.59:2907 -> xxx.yyy.1.14:1433 SYN ******S* Sep 20 23:53:35 146.145.237.59:2910 -> xxx.yyy.1.17:1433 SYN ******S* Sep 20 23:53:35 146.145.237.59:2911 -> xxx.yyy.1.18:1433 SYN ******S* [...] Sep 20 23:59:55 146.145.237.59:1336 -> xxx.yyy.111.239:1433 SYN ******S* Sep 20 23:59:55 146.145.237.59:1333 -> xxx.yyy.111.236:1433 SYN ******S* Sep 20 23:59:55 146.145.237.59:1337 -> xxx.yyy.111.240:1433 SYN ******S* Sep 20 23:59:55 146.145.237.59:1334 -> xxx.yyy.111.237:1433 SYN ******S* Sep 20 23:59:55 146.145.237.59:1338 -> xxx.yyy.111.241:1433 SYN ******S* Sep 20 23:59:56 146.145.237.59:1342 -> xxx.yyy.111.245:1433 SYN ******S* Sep 20 23:59:56 146.145.237.59:1352 -> xxx.yyy.111.255:1433 SYN ******S* Sep 20 23:59:56 146.145.237.59:1351 -> xxx.yyy.111.254:1433 SYN ******S* 9343 Sep 20 00:56:35 60.21.231.215:1824 -> xxx.yyy.154.100:5554 SYN ******S* Sep 20 00:56:36 60.21.231.215:2461 -> xxx.yyy.154.100:1023 SYN ******S* Sep 20 00:56:35 60.21.231.215:1828 -> xxx.yyy.154.101:5554 SYN ******S* Sep 20 00:56:36 60.21.231.215:2464 -> xxx.yyy.154.101:1023 SYN ******S* Sep 20 00:56:35 60.21.231.215:1830 -> xxx.yyy.154.106:5554 SYN ******S* Sep 20 00:56:35 60.21.231.215:1836 -> xxx.yyy.154.104:5554 SYN ******S* Sep 20 00:56:36 60.21.231.215:2476 -> xxx.yyy.154.104:1023 SYN ******S* Sep 20 00:56:35 60.21.231.215:1837 -> xxx.yyy.154.105:5554 SYN ******S* [...] Sep 20 00:57:20 60.21.231.215:3552 -> xxx.yyy.174.161:9898 SYN ******S* Sep 20 00:57:21 60.21.231.215:3567 -> xxx.yyy.174.159:9898 SYN ******S* Sep 20 00:57:21 60.21.231.215:3643 -> xxx.yyy.174.168:9898 SYN ******S* Sep 20 00:57:21 60.21.231.215:3667 -> xxx.yyy.174.174:9898 SYN ******S* Sep 20 00:57:21 60.21.231.215:3665 -> xxx.yyy.174.172:9898 SYN ******S* Sep 20 00:57:21 60.21.231.215:3693 -> xxx.yyy.174.178:9898 SYN ******S* Sep 20 00:57:21 60.21.231.215:3762 -> xxx.yyy.174.182:9898 SYN ******S* Sep 20 00:57:21 60.21.231.215:3889 -> xxx.yyy.174.194:9898 SYN ******S* Sep 20 00:57:21 60.21.231.215:3935 -> xxx.yyy.174.217:9898 SYN ******S* 8400 Sep 20 23:44:15 218.47.72.56:2811 -> xxx.yyy.174.223:5554 SYN ******S* Sep 20 23:44:18 218.47.72.56:1266 -> xxx.yyy.174.223:9898 SYN ******S* Sep 20 23:44:15 218.47.72.56:2810 -> xxx.yyy.174.222:5554 SYN ******S* Sep 20 23:44:15 218.47.72.56:2818 -> xxx.yyy.174.225:5554 SYN ******S* Sep 20 23:44:16 218.47.72.56:3696 -> xxx.yyy.174.225:1023 SYN ******S* Sep 20 23:44:15 218.47.72.56:2819 -> xxx.yyy.174.226:5554 SYN ******S* Sep 20 23:44:15 218.47.72.56:2820 -> xxx.yyy.174.227:5554 SYN ******S* Sep 20 23:44:15 218.47.72.56:2821 -> xxx.yyy.174.228:5554 SYN ******S* [...] Sep 20 23:44:56 218.47.72.56:3892 -> xxx.yyy.195.78:9898 SYN ******S* Sep 20 23:44:56 218.47.72.56:3882 -> xxx.yyy.195.79:9898 SYN ******S* Sep 20 23:44:56 218.47.72.56:3899 -> xxx.yyy.195.84:9898 SYN ******S* Sep 20 23:44:56 218.47.72.56:3888 -> xxx.yyy.195.76:9898 SYN ******S* Sep 20 23:44:56 218.47.72.56:3890 -> xxx.yyy.195.77:9898 SYN ******S* Sep 20 23:44:56 218.47.72.56:3901 -> xxx.yyy.195.86:9898 SYN ******S* Sep 20 23:44:56 218.47.72.56:3898 -> xxx.yyy.195.83:9898 SYN ******S* Sep 20 23:44:56 218.47.72.56:3902 -> xxx.yyy.195.87:9898 SYN ******S* Sep 20 23:44:56 218.47.72.56:3911 -> xxx.yyy.195.80:9898 SYN ******S* 7064 Sep 20 00:56:17 140.119.153.153:2330 -> xxx.yyy.133.14:1023 SYN ******S* Sep 20 00:56:19 140.119.153.153:4326 -> xxx.yyy.133.14:9898 SYN ******S* Sep 20 00:56:17 140.119.153.153:2332 -> xxx.yyy.133.16:1023 SYN ******S* Sep 20 00:56:19 140.119.153.153:4202 -> xxx.yyy.133.16:9898 SYN ******S* Sep 20 00:56:17 140.119.153.153:2334 -> xxx.yyy.133.15:1023 SYN ******S* Sep 20 00:56:19 140.119.153.153:4322 -> xxx.yyy.133.15:9898 SYN ******S* Sep 20 00:56:17 140.119.153.153:2335 -> xxx.yyy.133.17:1023 SYN ******S* Sep 20 00:56:19 140.119.153.153:4320 -> xxx.yyy.133.17:9898 SYN ******S* [...] Sep 20 00:58:23 140.119.153.153:4551 -> xxx.yyy.153.126:9898 SYN ******S* Sep 20 00:58:24 140.119.153.153:4943 -> xxx.yyy.153.128:9898 SYN ******S* Sep 20 00:58:25 140.119.153.153:1323 -> xxx.yyy.153.131:9898 SYN ******S* Sep 20 00:58:25 140.119.153.153:1329 -> xxx.yyy.153.132:9898 SYN ******S* Sep 20 00:58:25 140.119.153.153:1328 -> xxx.yyy.153.130:9898 SYN ******S* Sep 20 00:58:25 140.119.153.153:1331 -> xxx.yyy.153.134:9898 SYN ******S* Sep 20 00:58:25 140.119.153.153:1335 -> xxx.yyy.153.136:9898 SYN ******S* Sep 20 00:58:25 140.119.153.153:1337 -> xxx.yyy.153.133:9898 SYN ******S* Sep 20 00:58:25 140.119.153.153:1338 -> xxx.yyy.153.135:9898 SYN ******S* 6645 Sep 20 23:53:43 219.122.156.224:1751 -> xxx.yyy.236.78:5554 SYN ******S* Sep 20 23:53:44 219.122.156.224:2155 -> xxx.yyy.236.78:1023 SYN ******S* Sep 20 23:53:46 219.122.156.224:2853 -> xxx.yyy.236.78:9898 SYN ******S* Sep 20 23:53:44 219.122.156.224:1752 -> xxx.yyy.236.79:5554 SYN ******S* Sep 20 23:53:44 219.122.156.224:2156 -> xxx.yyy.236.79:1023 SYN ******S* Sep 20 23:53:43 219.122.156.224:1754 -> xxx.yyy.236.85:5554 SYN ******S* Sep 20 23:53:43 219.122.156.224:1753 -> xxx.yyy.236.80:5554 SYN ******S* Sep 20 23:53:43 219.122.156.224:1760 -> xxx.yyy.236.76:5554 SYN ******S* [...] Sep 20 23:54:41 219.122.156.224:1639 -> xxx.yyy.236.206:9898 SYN ******S* Sep 20 23:54:41 219.122.156.224:1640 -> xxx.yyy.236.207:9898 SYN ******S* Sep 20 23:54:41 219.122.156.224:1642 -> xxx.yyy.236.209:9898 SYN ******S* Sep 20 23:54:41 219.122.156.224:1786 -> xxx.yyy.236.227:9898 SYN ******S* Sep 20 23:54:42 219.122.156.224:1826 -> xxx.yyy.236.226:9898 SYN ******S* Sep 20 23:54:42 219.122.156.224:1827 -> xxx.yyy.236.219:9898 SYN ******S* Sep 20 23:54:42 219.122.156.224:1829 -> xxx.yyy.236.224:9898 SYN ******S* Sep 20 23:54:42 219.122.156.224:1838 -> xxx.yyy.236.225:9898 SYN ******S* Sep 20 23:54:42 219.122.156.224:1964 -> xxx.yyy.236.239:9898 SYN ******S* 6563 Sep 20 00:57:47 211.158.80.139:3276 -> xxx.yyy.10.56:9898 SYN ******S* Sep 20 00:57:47 211.158.80.139:3277 -> xxx.yyy.10.53:9898 SYN ******S* Sep 20 00:57:47 211.158.80.139:3278 -> xxx.yyy.10.52:9898 SYN ******S* Sep 20 00:57:47 211.158.80.139:3279 -> xxx.yyy.10.57:9898 SYN ******S* Sep 20 00:57:47 211.158.80.139:3280 -> xxx.yyy.10.51:9898 SYN ******S* Sep 20 00:57:47 211.158.80.139:3281 -> xxx.yyy.10.58:9898 SYN ******S* Sep 20 00:57:50 211.158.80.139:3282 -> xxx.yyy.10.54:9898 SYN ******S* Sep 20 00:57:50 211.158.80.139:3284 -> xxx.yyy.10.76:9898 SYN ******S* [...] Sep 20 01:15:04 211.158.80.139:3370 -> xxx.yyy.29.248:9898 SYN ******S* Sep 20 01:15:04 211.158.80.139:3369 -> xxx.yyy.29.251:9898 SYN ******S* Sep 20 01:15:04 211.158.80.139:3368 -> xxx.yyy.29.246:9898 SYN ******S* Sep 20 01:15:04 211.158.80.139:3367 -> xxx.yyy.29.245:9898 SYN ******S* Sep 20 01:15:04 211.158.80.139:3364 -> xxx.yyy.29.249:9898 SYN ******S* Sep 20 01:15:04 211.158.80.139:3365 -> xxx.yyy.29.252:9898 SYN ******S* Sep 20 01:15:04 211.158.80.139:3366 -> xxx.yyy.29.247:9898 SYN ******S* Sep 20 01:15:04 211.158.80.139:3363 -> xxx.yyy.29.250:9898 SYN ******S* Sep 20 01:15:05 211.158.80.139:3407 -> xxx.yyy.29.255:9898 SYN ******S* 5918 Sep 20 23:57:12 220.220.109.245:1590 -> xxx.yyy.215.219:5554 SYN ******S* Sep 20 23:57:13 220.220.109.245:1916 -> xxx.yyy.215.219:1023 SYN ******S* Sep 20 23:57:15 220.220.109.245:2597 -> xxx.yyy.215.219:9898 SYN ******S* Sep 20 23:57:12 220.220.109.245:1607 -> xxx.yyy.215.224:5554 SYN ******S* Sep 20 23:57:13 220.220.109.245:1926 -> xxx.yyy.215.224:1023 SYN ******S* Sep 20 23:57:12 220.220.109.245:1572 -> xxx.yyy.215.210:5554 SYN ******S* Sep 20 23:57:13 220.220.109.245:1890 -> xxx.yyy.215.210:1023 SYN ******S* Sep 20 23:57:15 220.220.109.245:2566 -> xxx.yyy.215.210:9898 SYN ******S* [...] Sep 20 23:59:27 220.220.109.245:1406 -> xxx.yyy.236.76:9898 SYN ******S* Sep 20 23:59:26 220.220.109.245:4496 -> xxx.yyy.236.35:1023 SYN ******S* Sep 20 23:59:27 220.220.109.245:1273 -> xxx.yyy.236.16:9898 SYN ******S* Sep 20 23:59:27 220.220.109.245:1319 -> xxx.yyy.236.36:9898 SYN ******S* Sep 20 23:59:27 220.220.109.245:1397 -> xxx.yyy.236.71:9898 SYN ******S* Sep 20 23:59:27 220.220.109.245:1370 -> xxx.yyy.236.60:9898 SYN ******S* Sep 20 23:59:27 220.220.109.245:1367 -> xxx.yyy.236.58:9898 SYN ******S* Sep 20 23:59:27 220.220.109.245:1373 -> xxx.yyy.236.62:9898 SYN ******S* Sep 20 23:59:27 220.220.109.245:1379 -> xxx.yyy.236.64:9898 SYN ******S* 5686 Sep 20 23:56:50 218.154.11.206:2698 -> xxx.yyy.72.124:5554 SYN ******S* Sep 20 23:56:53 218.154.11.206:4041 -> xxx.yyy.72.124:9898 SYN ******S* Sep 20 23:56:50 218.154.11.206:2708 -> xxx.yyy.72.130:5554 SYN ******S* Sep 20 23:56:50 218.154.11.206:2721 -> xxx.yyy.72.138:5554 SYN ******S* Sep 20 23:56:51 218.154.11.206:2834 -> xxx.yyy.72.142:5554 SYN ******S* Sep 20 23:56:51 218.154.11.206:2870 -> xxx.yyy.72.151:5554 SYN ******S* Sep 20 23:56:51 218.154.11.206:2860 -> xxx.yyy.72.147:5554 SYN ******S* Sep 20 23:56:51 218.154.11.206:2861 -> xxx.yyy.72.148:5554 SYN ******S* [...] Sep 20 23:58:45 218.154.11.206:1126 -> xxx.yyy.92.228:9898 SYN ******S* Sep 20 23:58:45 218.154.11.206:1109 -> xxx.yyy.92.225:9898 SYN ******S* Sep 20 23:58:45 218.154.11.206:1139 -> xxx.yyy.92.235:9898 SYN ******S* Sep 20 23:58:45 218.154.11.206:1140 -> xxx.yyy.92.236:9898 SYN ******S* Sep 20 23:58:45 218.154.11.206:1234 -> xxx.yyy.92.222:9898 SYN ******S* Sep 20 23:58:45 218.154.11.206:1229 -> xxx.yyy.92.216:9898 SYN ******S* Sep 20 23:58:45 218.154.11.206:1230 -> xxx.yyy.92.219:9898 SYN ******S* Sep 20 23:58:45 218.154.11.206:1247 -> xxx.yyy.92.239:9898 SYN ******S* Sep 20 23:58:46 218.154.11.206:1592 -> xxx.yyy.92.246:9898 SYN ******S* 5548 Sep 20 00:56:36 61.185.75.204:1184 -> xxx.yyy.215.210:5554 SYN ******S* Sep 20 00:56:40 61.185.75.204:3128 -> xxx.yyy.215.210:9898 SYN ******S* Sep 20 00:56:36 61.185.75.204:1194 -> xxx.yyy.215.220:5554 SYN ******S* Sep 20 00:56:40 61.185.75.204:3143 -> xxx.yyy.215.220:9898 SYN ******S* Sep 20 00:56:36 61.185.75.204:1242 -> xxx.yyy.215.240:5554 SYN ******S* Sep 20 00:56:37 61.185.75.204:1199 -> xxx.yyy.215.225:5554 SYN ******S* Sep 20 00:56:40 61.185.75.204:3176 -> xxx.yyy.215.225:9898 SYN ******S* Sep 20 00:56:37 61.185.75.204:1294 -> xxx.yyy.215.237:5554 SYN ******S* [...] Sep 20 00:57:22 61.185.75.204:3699 -> xxx.yyy.236.54:9898 SYN ******S* Sep 20 00:57:22 61.185.75.204:3161 -> xxx.yyy.235.182:9898 SYN ******S* Sep 20 00:57:22 61.185.75.204:3643 -> xxx.yyy.236.61:9898 SYN ******S* Sep 20 00:57:22 61.185.75.204:3660 -> xxx.yyy.236.49:9898 SYN ******S* Sep 20 00:57:22 61.185.75.204:3668 -> xxx.yyy.236.35:9898 SYN ******S* Sep 20 00:57:22 61.185.75.204:3686 -> xxx.yyy.236.51:9898 SYN ******S* Sep 20 00:57:22 61.185.75.204:3787 -> xxx.yyy.236.63:9898 SYN ******S* Sep 20 00:57:23 61.185.75.204:3659 -> xxx.yyy.236.48:9898 SYN ******S* Sep 20 00:57:23 61.185.75.204:3661 -> xxx.yyy.236.50:9898 SYN ******S* 5064 Sep 20 23:56:09 220.220.205.231:1940 -> xxx.yyy.194.129:5554 SYN ******S* Sep 20 23:56:10 220.220.205.231:2440 -> xxx.yyy.194.129:1023 SYN ******S* Sep 20 23:56:09 220.220.205.231:1949 -> xxx.yyy.194.134:5554 SYN ******S* Sep 20 23:56:10 220.220.205.231:2447 -> xxx.yyy.194.134:1023 SYN ******S* Sep 20 23:56:09 220.220.205.231:1951 -> xxx.yyy.194.136:5554 SYN ******S* Sep 20 23:56:10 220.220.205.231:2449 -> xxx.yyy.194.136:1023 SYN ******S* Sep 20 23:56:09 220.220.205.231:1947 -> xxx.yyy.194.132:5554 SYN ******S* Sep 20 23:56:09 220.220.205.231:1965 -> xxx.yyy.194.138:5554 SYN ******S* [...] Sep 20 23:57:37 220.220.205.231:3014 -> xxx.yyy.10.243:9898 SYN ******S* Sep 20 23:57:37 220.220.205.231:3027 -> xxx.yyy.10.244:9898 SYN ******S* Sep 20 23:57:37 220.220.205.231:3046 -> xxx.yyy.10.249:9898 SYN ******S* Sep 20 23:57:37 220.220.205.231:3059 -> xxx.yyy.10.254:9898 SYN ******S* Sep 20 23:57:37 220.220.205.231:3072 -> xxx.yyy.11.2:9898 SYN ******S* Sep 20 23:57:37 220.220.205.231:3090 -> xxx.yyy.11.9:9898 SYN ******S* Sep 20 23:57:37 220.220.205.231:3073 -> xxx.yyy.11.3:9898 SYN ******S* Sep 20 23:57:37 220.220.205.231:3091 -> xxx.yyy.11.10:9898 SYN ******S* Sep 20 23:57:37 220.220.205.231:3095 -> xxx.yyy.11.14:9898 SYN ******S* 5034 Sep 20 23:56:05 222.109.87.181:3703 -> xxx.yyy.194.153:5554 SYN ******S* Sep 20 23:56:06 222.109.87.181:1235 -> xxx.yyy.194.153:1023 SYN ******S* Sep 20 23:56:08 222.109.87.181:2581 -> xxx.yyy.194.153:9898 SYN ******S* Sep 20 23:56:05 222.109.87.181:3716 -> xxx.yyy.194.145:5554 SYN ******S* Sep 20 23:56:05 222.109.87.181:3724 -> xxx.yyy.194.141:5554 SYN ******S* Sep 20 23:56:06 222.109.87.181:1247 -> xxx.yyy.194.141:1023 SYN ******S* Sep 20 23:56:05 222.109.87.181:3734 -> xxx.yyy.194.138:5554 SYN ******S* Sep 20 23:56:05 222.109.87.181:3744 -> xxx.yyy.194.133:5554 SYN ******S* [...] Sep 20 23:56:51 222.109.87.181:3298 -> xxx.yyy.214.198:9898 SYN ******S* Sep 20 23:56:51 222.109.87.181:3302 -> xxx.yyy.214.206:9898 SYN ******S* Sep 20 23:56:51 222.109.87.181:3335 -> xxx.yyy.214.205:9898 SYN ******S* Sep 20 23:56:52 222.109.87.181:3609 -> xxx.yyy.214.238:9898 SYN ******S* Sep 20 23:56:52 222.109.87.181:3637 -> xxx.yyy.214.227:9898 SYN ******S* Sep 20 23:56:52 222.109.87.181:3649 -> xxx.yyy.214.235:9898 SYN ******S* Sep 20 23:56:52 222.109.87.181:3645 -> xxx.yyy.214.246:9898 SYN ******S* Sep 20 23:56:52 222.109.87.181:3652 -> xxx.yyy.214.241:9898 SYN ******S* 4807 Sep 20 23:56:09 222.102.190.214:2364 -> xxx.yyy.235.119:5554 SYN ******S* Sep 20 23:56:10 222.102.190.214:2954 -> xxx.yyy.235.119:1023 SYN ******S* Sep 20 23:56:12 222.102.190.214:4143 -> xxx.yyy.235.119:9898 SYN ******S* Sep 20 23:56:09 222.102.190.214:2360 -> xxx.yyy.235.115:5554 SYN ******S* Sep 20 23:56:09 222.102.190.214:2366 -> xxx.yyy.235.121:5554 SYN ******S* Sep 20 23:56:10 222.102.190.214:2956 -> xxx.yyy.235.121:1023 SYN ******S* Sep 20 23:56:09 222.102.190.214:2371 -> xxx.yyy.235.126:5554 SYN ******S* Sep 20 23:56:12 222.102.190.214:4162 -> xxx.yyy.235.126:9898 SYN ******S* [...] Sep 20 23:56:52 222.102.190.214:1468 -> xxx.yyy.255.156:9898 SYN ******S* Sep 20 23:56:52 222.102.190.214:1493 -> xxx.yyy.255.182:9898 SYN ******S* Sep 20 23:56:52 222.102.190.214:1480 -> xxx.yyy.255.167:9898 SYN ******S* Sep 20 23:56:52 222.102.190.214:1502 -> xxx.yyy.255.189:9898 SYN ******S* Sep 20 23:56:52 222.102.190.214:1527 -> xxx.yyy.255.213:9898 SYN ******S* Sep 20 23:56:52 222.102.190.214:1521 -> xxx.yyy.255.207:9898 SYN ******S* Sep 20 23:56:52 222.102.190.214:1553 -> xxx.yyy.254.247:9898 SYN ******S* Sep 20 23:56:52 222.102.190.214:1561 -> xxx.yyy.236.112:9898 SYN ******S* Sep 20 23:56:52 222.102.190.214:1564 -> xxx.yyy.236.115:9898 SYN ******S* 4701 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions