[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0500. Sep 21 01:33:47 24.205.250.228:2536 -> xxx.yyy.1.0:1433 SYN ******S* Sep 21 01:33:47 24.205.250.228:2537 -> xxx.yyy.1.1:1433 SYN ******S* Sep 21 01:33:47 24.205.250.228:2539 -> xxx.yyy.1.2:1433 SYN ******S* Sep 21 01:33:47 24.205.250.228:2541 -> xxx.yyy.1.3:1433 SYN ******S* Sep 21 01:33:44 24.205.250.228:2542 -> xxx.yyy.1.4:1433 SYN ******S* Sep 21 01:33:47 24.205.250.228:2544 -> xxx.yyy.1.6:1433 SYN ******S* Sep 21 01:33:47 24.205.250.228:2545 -> xxx.yyy.1.7:1433 SYN ******S* Sep 21 01:33:47 24.205.250.228:2546 -> xxx.yyy.1.8:1433 SYN ******S* [...] Sep 21 05:22:27 24.205.250.228:2096 -> xxx.yyy.255.250:1433 SYN ******S* Sep 21 05:22:27 24.205.250.228:2095 -> xxx.yyy.255.249:1433 SYN ******S* Sep 21 05:22:27 24.205.250.228:2094 -> xxx.yyy.255.248:1433 SYN ******S* Sep 21 05:22:27 24.205.250.228:2092 -> xxx.yyy.255.247:1433 SYN ******S* Sep 21 05:22:27 24.205.250.228:2090 -> xxx.yyy.255.246:1433 SYN ******S* Sep 21 05:22:27 24.205.250.228:2087 -> xxx.yyy.255.245:1433 SYN ******S* Sep 21 05:22:27 24.205.250.228:2086 -> xxx.yyy.255.244:1433 SYN ******S* Sep 21 05:22:27 24.205.250.228:2101 -> xxx.yyy.255.254:1433 SYN ******S* 117402 Sep 21 09:20:16 201.1.53.52:1672 -> xxx.yyy.1.1:1433 SYN ******S* Sep 21 09:20:16 201.1.53.52:1673 -> xxx.yyy.1.2:1433 SYN ******S* Sep 21 09:20:16 201.1.53.52:1675 -> xxx.yyy.1.4:1433 SYN ******S* Sep 21 09:20:16 201.1.53.52:1676 -> xxx.yyy.1.5:1433 SYN ******S* Sep 21 09:20:16 201.1.53.52:1678 -> xxx.yyy.1.7:1433 SYN ******S* Sep 21 09:20:16 201.1.53.52:1680 -> xxx.yyy.1.9:1433 SYN ******S* Sep 21 09:20:13 201.1.53.52:1681 -> xxx.yyy.1.10:1433 SYN ******S* Sep 21 09:20:16 201.1.53.52:1684 -> xxx.yyy.1.13:1433 SYN ******S* [...] Sep 21 13:08:57 201.1.53.52:3292 -> xxx.yyy.255.236:1433 SYN ******S* Sep 21 13:08:58 201.1.53.52:3293 -> xxx.yyy.255.237:1433 SYN ******S* Sep 21 13:08:58 201.1.53.52:3294 -> xxx.yyy.255.238:1433 SYN ******S* Sep 21 13:08:59 201.1.53.52:3296 -> xxx.yyy.255.240:1433 SYN ******S* Sep 21 13:08:59 201.1.53.52:3297 -> xxx.yyy.255.241:1433 SYN ******S* Sep 21 13:09:00 201.1.53.52:3303 -> xxx.yyy.255.246:1433 SYN ******S* Sep 21 13:09:00 201.1.53.52:3305 -> xxx.yyy.255.247:1433 SYN ******S* Sep 21 13:09:00 201.1.53.52:3311 -> xxx.yyy.255.248:1433 SYN ******S* Sep 21 13:09:01 201.1.53.52:3320 -> xxx.yyy.255.252:1433 SYN ******S* 68677 Sep 21 06:42:20 194.204.245.3:56449 -> xxx.yyy.1.0:1433 SYN ******S* Sep 21 06:42:23 194.204.245.3:56450 -> xxx.yyy.1.1:1433 SYN ******S* Sep 21 06:42:20 194.204.245.3:56451 -> xxx.yyy.1.2:1433 SYN ******S* Sep 21 06:42:20 194.204.245.3:56452 -> xxx.yyy.1.3:1433 SYN ******S* Sep 21 06:42:23 194.204.245.3:56453 -> xxx.yyy.1.4:1433 SYN ******S* Sep 21 06:42:23 194.204.245.3:56454 -> xxx.yyy.1.5:1433 SYN ******S* Sep 21 06:42:20 194.204.245.3:56455 -> xxx.yyy.1.6:1433 SYN ******S* Sep 21 06:42:23 194.204.245.3:56456 -> xxx.yyy.1.7:1433 SYN ******S* [...] Sep 21 06:54:07 194.204.245.3:13653 -> xxx.yyy.255.247:1433 SYN ******S* Sep 21 06:54:07 194.204.245.3:13650 -> xxx.yyy.255.244:1433 SYN ******S* Sep 21 06:54:07 194.204.245.3:13647 -> xxx.yyy.255.241:1433 SYN ******S* Sep 21 06:54:07 194.204.245.3:13654 -> xxx.yyy.255.248:1433 SYN ******S* Sep 21 06:54:07 194.204.245.3:13656 -> xxx.yyy.255.250:1433 SYN ******S* Sep 21 06:54:07 194.204.245.3:13660 -> xxx.yyy.255.254:1433 SYN ******S* Sep 21 06:54:07 194.204.245.3:13657 -> xxx.yyy.255.251:1433 SYN ******S* Sep 21 06:54:07 194.204.245.3:13658 -> xxx.yyy.255.252:1433 SYN ******S* 54714 Sep 21 08:08:46 216.230.138.206:3519 -> xxx.yyy.1.1:1433 SYN ******S* Sep 21 08:08:46 216.230.138.206:3520 -> xxx.yyy.1.2:1433 SYN ******S* Sep 21 08:08:46 216.230.138.206:3521 -> xxx.yyy.1.3:1433 SYN ******S* Sep 21 08:08:46 216.230.138.206:3522 -> xxx.yyy.1.4:1433 SYN ******S* Sep 21 08:08:46 216.230.138.206:3523 -> xxx.yyy.1.5:1433 SYN ******S* Sep 21 08:08:46 216.230.138.206:3524 -> xxx.yyy.1.6:1433 SYN ******S* Sep 21 08:08:46 216.230.138.206:3525 -> xxx.yyy.1.7:1433 SYN ******S* Sep 21 08:08:43 216.230.138.206:3527 -> xxx.yyy.1.9:1433 SYN ******S* [...] Sep 21 09:34:45 216.230.138.206:3822 -> xxx.yyy.255.217:1433 SYN ******S* Sep 21 09:34:45 216.230.138.206:3825 -> xxx.yyy.255.220:1433 SYN ******S* Sep 21 09:34:45 216.230.138.206:3826 -> xxx.yyy.255.221:1433 SYN ******S* Sep 21 09:34:45 216.230.138.206:3835 -> xxx.yyy.255.230:1433 SYN ******S* Sep 21 09:34:45 216.230.138.206:3833 -> xxx.yyy.255.228:1433 SYN ******S* Sep 21 09:34:45 216.230.138.206:3834 -> xxx.yyy.255.229:1433 SYN ******S* Sep 21 09:34:46 216.230.138.206:3850 -> xxx.yyy.255.245:1433 SYN ******S* Sep 21 09:34:46 216.230.138.206:3853 -> xxx.yyy.255.248:1433 SYN ******S* Sep 21 09:34:46 216.230.138.206:3859 -> xxx.yyy.255.254:1433 SYN ******S* 48838 Sep 21 00:34:04 194.208.133.150:3061 -> xxx.yyy.1.1:1433 SYN ******S* Sep 21 00:34:01 194.208.133.150:3062 -> xxx.yyy.1.2:1433 SYN ******S* Sep 21 00:34:04 194.208.133.150:3065 -> xxx.yyy.1.5:1433 SYN ******S* Sep 21 00:34:01 194.208.133.150:3066 -> xxx.yyy.1.6:1433 SYN ******S* Sep 21 00:34:01 194.208.133.150:3067 -> xxx.yyy.1.7:1433 SYN ******S* Sep 21 00:34:04 194.208.133.150:3068 -> xxx.yyy.1.8:1433 SYN ******S* Sep 21 00:34:04 194.208.133.150:3069 -> xxx.yyy.1.9:1433 SYN ******S* Sep 21 00:34:04 194.208.133.150:3070 -> xxx.yyy.1.10:1433 SYN ******S* [...] Sep 21 00:45:42 194.208.133.150:4502 -> xxx.yyy.255.235:1433 SYN ******S* Sep 21 00:45:42 194.208.133.150:4499 -> xxx.yyy.255.232:1433 SYN ******S* Sep 21 00:45:42 194.208.133.150:4496 -> xxx.yyy.255.229:1433 SYN ******S* Sep 21 00:45:42 194.208.133.150:4497 -> xxx.yyy.255.230:1433 SYN ******S* Sep 21 00:45:42 194.208.133.150:4506 -> xxx.yyy.255.239:1433 SYN ******S* Sep 21 00:45:42 194.208.133.150:4510 -> xxx.yyy.255.243:1433 SYN ******S* Sep 21 00:45:42 194.208.133.150:4507 -> xxx.yyy.255.240:1433 SYN ******S* Sep 21 00:45:42 194.208.133.150:4516 -> xxx.yyy.255.249:1433 SYN ******S* Sep 21 00:45:42 194.208.133.150:4520 -> xxx.yyy.255.253:1433 SYN ******S* 44829 Sep 21 19:12:59 213.9.173.98:4320 -> xxx.yyy.1.1:3306 SYN ******S* Sep 21 19:12:59 213.9.173.98:4321 -> xxx.yyy.1.2:3306 SYN ******S* Sep 21 19:13:01 213.9.173.98:4324 -> xxx.yyy.1.5:3306 SYN ******S* Sep 21 19:12:58 213.9.173.98:4328 -> xxx.yyy.1.9:3306 SYN ******S* Sep 21 19:13:01 213.9.173.98:4329 -> xxx.yyy.1.10:3306 SYN ******S* Sep 21 19:12:58 213.9.173.98:4330 -> xxx.yyy.1.11:3306 SYN ******S* Sep 21 19:12:58 213.9.173.98:4332 -> xxx.yyy.1.13:3306 SYN ******S* Sep 21 19:12:59 213.9.173.98:4341 -> xxx.yyy.1.22:3306 SYN ******S* [...] Sep 21 19:24:43 213.9.173.98:2879 -> xxx.yyy.255.216:3306 SYN ******S* Sep 21 19:24:43 213.9.173.98:2875 -> xxx.yyy.255.212:3306 SYN ******S* Sep 21 19:24:43 213.9.173.98:2890 -> xxx.yyy.255.227:3306 SYN ******S* Sep 21 19:24:43 213.9.173.98:2887 -> xxx.yyy.255.224:3306 SYN ******S* Sep 21 19:24:43 213.9.173.98:2899 -> xxx.yyy.255.236:3306 SYN ******S* Sep 21 19:24:43 213.9.173.98:2908 -> xxx.yyy.255.245:3306 SYN ******S* Sep 21 19:24:43 213.9.173.98:2907 -> xxx.yyy.255.244:3306 SYN ******S* Sep 21 19:24:43 213.9.173.98:2902 -> xxx.yyy.255.239:3306 SYN ******S* 43165 Sep 21 04:22:09 61.111.33.85:4413 -> xxx.yyy.1.1:4899 SYN ******S* Sep 21 04:22:09 61.111.33.85:4414 -> xxx.yyy.1.2:4899 SYN ******S* Sep 21 04:22:08 61.111.33.85:4416 -> xxx.yyy.1.4:4899 SYN ******S* Sep 21 04:22:09 61.111.33.85:4415 -> xxx.yyy.1.3:4899 SYN ******S* Sep 21 04:22:08 61.111.33.85:4418 -> xxx.yyy.1.6:4899 SYN ******S* Sep 21 04:22:08 61.111.33.85:4421 -> xxx.yyy.1.8:4899 SYN ******S* Sep 21 04:22:08 61.111.33.85:4417 -> xxx.yyy.1.5:4899 SYN ******S* Sep 21 04:22:08 61.111.33.85:4420 -> xxx.yyy.1.7:4899 SYN ******S* [...] Sep 21 04:25:06 61.111.33.85:2754 -> xxx.yyy.255.243:4899 SYN ******S* Sep 21 04:25:06 61.111.33.85:2762 -> xxx.yyy.255.248:4899 SYN ******S* Sep 21 04:25:06 61.111.33.85:2763 -> xxx.yyy.255.249:4899 SYN ******S* Sep 21 04:25:06 61.111.33.85:2764 -> xxx.yyy.255.250:4899 SYN ******S* Sep 21 04:25:06 61.111.33.85:2765 -> xxx.yyy.255.251:4899 SYN ******S* Sep 21 04:25:06 61.111.33.85:2766 -> xxx.yyy.255.252:4899 SYN ******S* Sep 21 04:25:06 61.111.33.85:2769 -> xxx.yyy.255.253:4899 SYN ******S* Sep 21 04:25:06 61.111.33.85:2782 -> xxx.yyy.255.254:4899 SYN ******S* 40851 [...] 34427 Sep 21 22:19:22 210.44.135.25:3654 -> xxx.yyy.1.2:1433 SYN ******S* Sep 21 22:19:25 210.44.135.25:3656 -> xxx.yyy.1.4:1433 SYN ******S* Sep 21 22:19:22 210.44.135.25:3660 -> xxx.yyy.1.8:1433 SYN ******S* Sep 21 22:19:22 210.44.135.25:3661 -> xxx.yyy.1.9:1433 SYN ******S* Sep 21 22:19:25 210.44.135.25:3667 -> xxx.yyy.1.15:1433 SYN ******S* Sep 21 22:19:25 210.44.135.25:3669 -> xxx.yyy.1.17:1433 SYN ******S* Sep 21 22:19:22 210.44.135.25:3670 -> xxx.yyy.1.18:1433 SYN ******S* Sep 21 22:19:25 210.44.135.25:3673 -> xxx.yyy.1.21:1433 SYN ******S* [...] Sep 21 22:31:05 210.44.135.25:2352 -> xxx.yyy.255.244:1433 SYN ******S* Sep 21 22:31:05 210.44.135.25:2357 -> xxx.yyy.255.249:1433 SYN ******S* Sep 21 22:31:05 210.44.135.25:2359 -> xxx.yyy.255.251:1433 SYN ******S* Sep 21 22:31:05 210.44.135.25:2356 -> xxx.yyy.255.248:1433 SYN ******S* Sep 21 22:31:05 210.44.135.25:2354 -> xxx.yyy.255.246:1433 SYN ******S* Sep 21 22:31:05 210.44.135.25:2353 -> xxx.yyy.255.245:1433 SYN ******S* Sep 21 22:31:05 210.44.135.25:2358 -> xxx.yyy.255.250:1433 SYN ******S* Sep 21 22:31:05 210.44.135.25:2355 -> xxx.yyy.255.247:1433 SYN ******S* Sep 21 22:31:05 210.44.135.25:2362 -> xxx.yyy.255.254:1433 SYN ******S* 33262 Sep 21 15:46:58 203.204.98.163:2577 -> xxx.yyy.1.1:1433 SYN ******S* Sep 21 15:46:58 203.204.98.163:2579 -> xxx.yyy.1.2:1433 SYN ******S* Sep 21 15:47:01 203.204.98.163:2581 -> xxx.yyy.1.3:1433 SYN ******S* Sep 21 15:46:58 203.204.98.163:2587 -> xxx.yyy.1.6:1433 SYN ******S* Sep 21 15:47:01 203.204.98.163:2595 -> xxx.yyy.1.10:1433 SYN ******S* Sep 21 15:47:01 203.204.98.163:2599 -> xxx.yyy.1.12:1433 SYN ******S* Sep 21 15:46:58 203.204.98.163:2605 -> xxx.yyy.1.15:1433 SYN ******S* Sep 21 15:47:01 203.204.98.163:2607 -> xxx.yyy.1.16:1433 SYN ******S* [...] Sep 21 15:58:40 203.204.98.163:1161 -> xxx.yyy.255.227:1433 SYN ******S* Sep 21 15:58:40 203.204.98.163:1163 -> xxx.yyy.255.228:1433 SYN ******S* Sep 21 15:58:40 203.204.98.163:1169 -> xxx.yyy.255.231:1433 SYN ******S* Sep 21 15:58:40 203.204.98.163:1159 -> xxx.yyy.255.226:1433 SYN ******S* Sep 21 15:58:40 203.204.98.163:1181 -> xxx.yyy.255.237:1433 SYN ******S* Sep 21 15:58:40 203.204.98.163:1187 -> xxx.yyy.255.240:1433 SYN ******S* Sep 21 15:58:41 203.204.98.163:1189 -> xxx.yyy.255.241:1433 SYN ******S* Sep 21 15:58:41 203.204.98.163:1197 -> xxx.yyy.255.245:1433 SYN ******S* 31969 Sep 21 00:00:42 146.145.237.59:1746 -> xxx.yyy.128.1:1433 SYN ******S* Sep 21 00:00:42 146.145.237.59:1747 -> xxx.yyy.128.2:1433 SYN ******S* Sep 21 00:00:42 146.145.237.59:1748 -> xxx.yyy.128.3:1433 SYN ******S* Sep 21 00:00:42 146.145.237.59:1753 -> xxx.yyy.128.8:1433 SYN ******S* Sep 21 00:00:42 146.145.237.59:1755 -> xxx.yyy.128.10:1433 SYN ******S* Sep 21 00:00:42 146.145.237.59:1757 -> xxx.yyy.128.12:1433 SYN ******S* Sep 21 00:00:42 146.145.237.59:1758 -> xxx.yyy.128.13:1433 SYN ******S* Sep 21 00:00:42 146.145.237.59:1759 -> xxx.yyy.128.14:1433 SYN ******S* [...] Sep 21 00:08:00 146.145.237.59:4394 -> xxx.yyy.255.225:1433 SYN ******S* Sep 21 00:08:00 146.145.237.59:4391 -> xxx.yyy.255.222:1433 SYN ******S* Sep 21 00:08:00 146.145.237.59:4417 -> xxx.yyy.255.248:1433 SYN ******S* Sep 21 00:08:00 146.145.237.59:4414 -> xxx.yyy.255.245:1433 SYN ******S* Sep 21 00:08:00 146.145.237.59:4411 -> xxx.yyy.255.242:1433 SYN ******S* Sep 21 00:08:00 146.145.237.59:4415 -> xxx.yyy.255.246:1433 SYN ******S* Sep 21 00:08:00 146.145.237.59:4422 -> xxx.yyy.255.253:1433 SYN ******S* Sep 21 00:08:00 146.145.237.59:4419 -> xxx.yyy.255.250:1433 SYN ******S* 29100 Sep 21 00:47:15 218.76.57.102:4648 -> xxx.yyy.83.22:3128 SYN ******S* Sep 21 00:47:15 218.76.57.102:4691 -> xxx.yyy.153.35:3128 SYN ******S* Sep 21 00:47:20 218.76.57.102:4662 -> xxx.yyy.130.30:3128 SYN ******S* Sep 21 00:47:18 218.76.57.102:4705 -> xxx.yyy.249.153:3128 SYN ******S* Sep 21 00:47:18 218.76.57.102:4650 -> xxx.yyy.29.2:3128 SYN ******S* Sep 21 00:47:19 218.76.57.102:4703 -> xxx.yyy.249.207:3128 SYN ******S* Sep 21 00:47:23 218.76.57.102:4743 -> xxx.yyy.68.192:3128 SYN ******S* Sep 21 00:47:24 218.76.57.102:4689 -> xxx.yyy.155.54:3128 SYN ******S* [...] Sep 21 23:55:54 218.76.57.102:4681 -> xxx.yyy.105.188:3128 SYN ******S* Sep 21 23:55:56 218.76.57.102:4654 -> xxx.yyy.210.186:3128 SYN ******S* Sep 21 23:55:57 218.76.57.102:4656 -> xxx.yyy.178.69:3128 SYN ******S* Sep 21 23:55:57 218.76.57.102:4701 -> xxx.yyy.162.208:3128 SYN ******S* Sep 21 23:56:00 218.76.57.102:4681 -> xxx.yyy.105.188:3128 SYN ******S* Sep 21 23:56:02 218.76.57.102:4752 -> xxx.yyy.237.158:3128 SYN ******S* Sep 21 23:56:03 218.76.57.102:4701 -> xxx.yyy.162.208:3128 SYN ******S* Sep 21 23:56:08 218.76.57.102:4782 -> xxx.yyy.152.143:3128 SYN ******S* Sep 21 23:56:12 218.76.57.102:4824 -> xxx.yyy.151.163:3128 SYN ******S* 28713 Sep 21 15:57:49 134.121.39.31:2660 -> xxx.yyy.1.1:8000 SYN ******S* Sep 21 15:57:49 134.121.39.31:2661 -> xxx.yyy.1.2:8000 SYN ******S* Sep 21 15:57:48 134.121.39.31:2662 -> xxx.yyy.1.3:8000 SYN ******S* Sep 21 15:57:51 134.121.39.31:2667 -> xxx.yyy.1.8:8000 SYN ******S* Sep 21 15:57:48 134.121.39.31:2668 -> xxx.yyy.1.9:8000 SYN ******S* Sep 21 15:57:48 134.121.39.31:2663 -> xxx.yyy.1.4:8000 SYN ******S* Sep 21 15:57:51 134.121.39.31:2665 -> xxx.yyy.1.6:8000 SYN ******S* Sep 21 15:57:48 134.121.39.31:2664 -> xxx.yyy.1.5:8000 SYN ******S* [...] Sep 21 16:06:09 134.121.39.31:2977 -> xxx.yyy.255.247:8000 SYN ******S* Sep 21 16:06:09 134.121.39.31:2945 -> xxx.yyy.255.215:8000 SYN ******S* Sep 21 16:06:09 134.121.39.31:2979 -> xxx.yyy.255.249:8000 SYN ******S* Sep 21 16:06:09 134.121.39.31:2976 -> xxx.yyy.255.246:8000 SYN ******S* Sep 21 16:06:09 134.121.39.31:2931 -> xxx.yyy.255.201:8000 SYN ******S* Sep 21 16:06:09 134.121.39.31:2944 -> xxx.yyy.255.214:8000 SYN ******S* Sep 21 16:06:09 134.121.39.31:2947 -> xxx.yyy.255.217:8000 SYN ******S* Sep 21 16:06:09 134.121.39.31:2168 -> xxx.yyy.252.202:8000 SYN ******S* Sep 21 16:06:09 134.121.39.31:2930 -> xxx.yyy.255.200:8000 SYN ******S* 25846 Sep 21 21:41:22 193.128.182.110:3129 -> xxx.yyy.1.1:1433 SYN ******S* Sep 21 21:41:22 193.128.182.110:3136 -> xxx.yyy.1.2:1433 SYN ******S* Sep 21 21:41:22 193.128.182.110:3150 -> xxx.yyy.1.3:1433 SYN ******S* Sep 21 21:41:22 193.128.182.110:3171 -> xxx.yyy.1.5:1433 SYN ******S* Sep 21 21:41:22 193.128.182.110:3200 -> xxx.yyy.1.9:1433 SYN ******S* Sep 21 21:41:22 193.128.182.110:3216 -> xxx.yyy.1.11:1433 SYN ******S* Sep 21 21:41:22 193.128.182.110:3235 -> xxx.yyy.1.14:1433 SYN ******S* Sep 21 21:41:22 193.128.182.110:3253 -> xxx.yyy.1.18:1433 SYN ******S* [...] Sep 21 21:53:20 193.128.182.110:1802 -> xxx.yyy.255.194:1433 SYN ******S* Sep 21 21:53:20 193.128.182.110:1811 -> xxx.yyy.255.195:1433 SYN ******S* Sep 21 21:53:20 193.128.182.110:1852 -> xxx.yyy.255.203:1433 SYN ******S* Sep 21 21:53:20 193.128.182.110:1941 -> xxx.yyy.255.214:1433 SYN ******S* Sep 21 21:53:20 193.128.182.110:1937 -> xxx.yyy.255.213:1433 SYN ******S* Sep 21 21:53:21 193.128.182.110:2010 -> xxx.yyy.255.222:1433 SYN ******S* Sep 21 21:53:21 193.128.182.110:2015 -> xxx.yyy.255.223:1433 SYN ******S* Sep 21 21:53:21 193.128.182.110:2172 -> xxx.yyy.255.243:1433 SYN ******S* Sep 21 21:53:21 193.128.182.110:2239 -> xxx.yyy.255.251:1433 SYN ******S* 25157 Sep 21 16:37:38 82.36.19.46:2833 -> xxx.yyy.1.6:1433 SYN ******S* Sep 21 16:37:38 82.36.19.46:2839 -> xxx.yyy.1.8:1433 SYN ******S* Sep 21 16:37:38 82.36.19.46:2920 -> xxx.yyy.1.40:1433 SYN ******S* Sep 21 16:37:38 82.36.19.46:2910 -> xxx.yyy.1.37:1433 SYN ******S* Sep 21 16:37:38 82.36.19.46:2915 -> xxx.yyy.1.39:1433 SYN ******S* Sep 21 16:37:44 82.36.19.46:2854 -> xxx.yyy.1.13:1433 SYN ******S* Sep 21 16:37:44 82.36.19.46:2851 -> xxx.yyy.1.12:1433 SYN ******S* Sep 21 16:37:44 82.36.19.46:2848 -> xxx.yyy.1.11:1433 SYN ******S* [...] Sep 21 18:53:55 82.36.19.46:4710 -> xxx.yyy.153.6:1433 SYN ******S* Sep 21 18:53:55 82.36.19.46:4714 -> xxx.yyy.153.7:1433 SYN ******S* Sep 21 18:53:55 82.36.19.46:4739 -> xxx.yyy.153.10:1433 SYN ******S* Sep 21 18:53:55 82.36.19.46:4283 -> xxx.yyy.152.205:1433 SYN ******S* Sep 21 18:53:56 82.36.19.46:4744 -> xxx.yyy.153.12:1433 SYN ******S* Sep 21 18:53:56 82.36.19.46:4805 -> xxx.yyy.153.19:1433 SYN ******S* Sep 21 18:53:56 82.36.19.46:4816 -> xxx.yyy.153.20:1433 SYN ******S* Sep 21 18:53:56 82.36.19.46:4320 -> xxx.yyy.152.210:1433 SYN ******S* Sep 21 18:53:56 82.36.19.46:4319 -> xxx.yyy.152.209:1433 SYN ******S* 24397 Sep 21 05:19:50 80.15.107.99:4252 -> xxx.yyy.10.0:12345 SYN ******S* Sep 21 05:19:50 80.15.107.99:4253 -> xxx.yyy.10.1:12345 SYN ******S* Sep 21 05:19:50 80.15.107.99:4254 -> xxx.yyy.10.2:12345 SYN ******S* Sep 21 05:19:51 80.15.107.99:4255 -> xxx.yyy.10.3:12345 SYN ******S* Sep 21 05:19:51 80.15.107.99:4256 -> xxx.yyy.10.4:12345 SYN ******S* Sep 21 05:19:51 80.15.107.99:4257 -> xxx.yyy.10.5:12345 SYN ******S* Sep 21 05:19:51 80.15.107.99:4258 -> xxx.yyy.10.6:12345 SYN ******S* Sep 21 05:19:51 80.15.107.99:4259 -> xxx.yyy.10.7:12345 SYN ******S* [...] Sep 21 05:53:14 80.15.107.99:1998 -> xxx.yyy.93.40:12345 SYN ******S* Sep 21 05:53:14 80.15.107.99:2029 -> xxx.yyy.93.71:12345 SYN ******S* Sep 21 05:53:14 80.15.107.99:1999 -> xxx.yyy.93.41:12345 SYN ******S* Sep 21 05:53:14 80.15.107.99:2030 -> xxx.yyy.93.72:12345 SYN ******S* Sep 21 05:53:14 80.15.107.99:2031 -> xxx.yyy.93.73:12345 SYN ******S* Sep 21 05:53:14 80.15.107.99:2000 -> xxx.yyy.93.42:12345 SYN ******S* Sep 21 05:53:14 80.15.107.99:2032 -> xxx.yyy.93.74:12345 SYN ******S* Sep 21 05:53:14 80.15.107.99:2033 -> xxx.yyy.93.75:12345 SYN ******S* Sep 21 05:53:14 80.15.107.99:2001 -> xxx.yyy.93.43:12345 SYN ******S* 18121 Sep 21 05:27:43 62.143.17.39:22710 -> xxx.yyy.1.0:1433 SYN ******S* Sep 21 05:27:43 62.143.17.39:21607 -> xxx.yyy.1.1:1433 SYN ******S* Sep 21 05:27:43 62.143.17.39:23924 -> xxx.yyy.1.2:1433 SYN ******S* Sep 21 05:27:43 62.143.17.39:21693 -> xxx.yyy.1.3:1433 SYN ******S* Sep 21 05:27:43 62.143.17.39:25180 -> xxx.yyy.1.4:1433 SYN ******S* Sep 21 05:27:43 62.143.17.39:24084 -> xxx.yyy.1.5:1433 SYN ******S* Sep 21 05:27:43 62.143.17.39:22575 -> xxx.yyy.1.6:1433 SYN ******S* Sep 21 05:27:43 62.143.17.39:25130 -> xxx.yyy.1.7:1433 SYN ******S* [...] Sep 21 05:30:30 62.143.17.39:24145 -> xxx.yyy.255.247:1433 SYN ******S* Sep 21 05:30:30 62.143.17.39:25636 -> xxx.yyy.255.248:1433 SYN ******S* Sep 21 05:30:30 62.143.17.39:23853 -> xxx.yyy.255.249:1433 SYN ******S* Sep 21 05:30:30 62.143.17.39:23453 -> xxx.yyy.255.250:1433 SYN ******S* Sep 21 05:30:30 62.143.17.39:23797 -> xxx.yyy.255.251:1433 SYN ******S* Sep 21 05:30:30 62.143.17.39:24413 -> xxx.yyy.255.252:1433 SYN ******S* Sep 21 05:30:30 62.143.17.39:24884 -> xxx.yyy.255.253:1433 SYN ******S* Sep 21 05:30:30 62.143.17.39:22474 -> xxx.yyy.255.254:1433 SYN ******S* Sep 21 05:30:30 62.143.17.39:21911 -> xxx.yyy.255.255:1433 SYN ******S* 16343 Sep 21 12:16:09 216.49.238.51:1624 -> xxx.yyy.1.10:8000 SYN ******S* Sep 21 12:16:10 216.49.238.51:1642 -> xxx.yyy.1.28:8000 SYN ******S* Sep 21 12:16:09 216.49.238.51:1643 -> xxx.yyy.1.29:8000 SYN ******S* Sep 21 12:16:09 216.49.238.51:1676 -> xxx.yyy.1.62:8000 SYN ******S* Sep 21 12:16:12 216.49.238.51:1733 -> xxx.yyy.1.119:8000 SYN ******S* Sep 21 12:16:09 216.49.238.51:1738 -> xxx.yyy.1.124:8000 SYN ******S* Sep 21 12:16:09 216.49.238.51:1748 -> xxx.yyy.1.134:8000 SYN ******S* Sep 21 12:16:09 216.49.238.51:1747 -> xxx.yyy.1.133:8000 SYN ******S* [...] Sep 21 13:30:35 216.49.238.51:4484 -> xxx.yyy.134.132:8000 SYN ******S* Sep 21 13:30:35 216.49.238.51:4485 -> xxx.yyy.134.133:8000 SYN ******S* Sep 21 13:30:38 216.49.238.51:4483 -> xxx.yyy.134.131:8000 SYN ******S* Sep 21 13:30:38 216.49.238.51:4485 -> xxx.yyy.134.133:8000 SYN ******S* Sep 21 13:30:38 216.49.238.51:4484 -> xxx.yyy.134.132:8000 SYN ******S* Sep 21 13:30:38 216.49.238.51:4482 -> xxx.yyy.134.130:8000 SYN ******S* Sep 21 13:30:42 216.49.238.51:4486 -> xxx.yyy.134.134:8000 SYN ******S* Sep 21 13:30:42 216.49.238.51:4488 -> xxx.yyy.134.136:8000 SYN ******S* Sep 21 13:30:42 216.49.238.51:4489 -> xxx.yyy.134.137:8000 SYN ******S* 8131 Sep 21 11:56:11 220.81.200.158:3999 -> xxx.yyy.174.2:5554 SYN ******S* Sep 21 11:56:12 220.81.200.158:1281 -> xxx.yyy.174.2:1023 SYN ******S* Sep 21 11:56:11 220.81.200.158:4013 -> xxx.yyy.174.8:5554 SYN ******S* Sep 21 11:56:14 220.81.200.158:2917 -> xxx.yyy.174.8:9898 SYN ******S* Sep 21 11:56:11 220.81.200.158:4017 -> xxx.yyy.174.11:5554 SYN ******S* Sep 21 11:56:14 220.81.200.158:2934 -> xxx.yyy.174.11:9898 SYN ******S* Sep 21 11:56:11 220.81.200.158:4006 -> xxx.yyy.174.6:5554 SYN ******S* Sep 21 11:56:12 220.81.200.158:1291 -> xxx.yyy.174.6:1023 SYN ******S* [...] Sep 21 11:57:40 220.81.200.158:3262 -> xxx.yyy.194.108:9898 SYN ******S* Sep 21 11:57:40 220.81.200.158:3263 -> xxx.yyy.194.109:9898 SYN ******S* Sep 21 11:57:40 220.81.200.158:3266 -> xxx.yyy.194.111:9898 SYN ******S* Sep 21 11:57:40 220.81.200.158:3268 -> xxx.yyy.194.112:9898 SYN ******S* Sep 21 11:57:41 220.81.200.158:3362 -> xxx.yyy.194.118:9898 SYN ******S* Sep 21 11:57:41 220.81.200.158:3363 -> xxx.yyy.194.119:9898 SYN ******S* Sep 21 11:57:41 220.81.200.158:3365 -> xxx.yyy.194.120:9898 SYN ******S* Sep 21 11:57:41 220.81.200.158:3367 -> xxx.yyy.194.121:9898 SYN ******S* 7649 Sep 21 00:56:02 140.120.237.214:1802 -> xxx.yyy.194.133:5554 SYN ******S* Sep 21 00:56:02 140.120.237.214:1806 -> xxx.yyy.194.137:5554 SYN ******S* Sep 21 00:56:02 140.120.237.214:1789 -> xxx.yyy.194.128:5554 SYN ******S* Sep 21 00:56:03 140.120.237.214:2444 -> xxx.yyy.194.128:1023 SYN ******S* Sep 21 00:56:02 140.120.237.214:1809 -> xxx.yyy.194.140:5554 SYN ******S* Sep 21 00:56:02 140.120.237.214:1801 -> xxx.yyy.194.132:5554 SYN ******S* Sep 21 00:56:05 140.120.237.214:3710 -> xxx.yyy.194.132:9898 SYN ******S* Sep 21 00:56:02 140.120.237.214:1810 -> xxx.yyy.194.141:5554 SYN ******S* [...] Sep 21 00:56:55 140.120.237.214:4951 -> xxx.yyy.214.190:9898 SYN ******S* Sep 21 00:56:55 140.120.237.214:4983 -> xxx.yyy.214.195:9898 SYN ******S* Sep 21 00:56:55 140.120.237.214:4963 -> xxx.yyy.214.194:9898 SYN ******S* Sep 21 00:56:55 140.120.237.214:1041 -> xxx.yyy.214.24:9898 SYN ******S* Sep 21 00:56:55 140.120.237.214:1042 -> xxx.yyy.214.25:9898 SYN ******S* Sep 21 00:56:55 140.120.237.214:1048 -> xxx.yyy.214.87:9898 SYN ******S* Sep 21 00:56:55 140.120.237.214:1049 -> xxx.yyy.214.174:9898 SYN ******S* Sep 21 00:56:55 140.120.237.214:1050 -> xxx.yyy.214.196:9898 SYN ******S* Sep 21 00:56:55 140.120.237.214:1064 -> xxx.yyy.214.68:9898 SYN ******S* 7106 Sep 21 00:00:41 65.54.188.52:38665 -> xxx.yyy.220.147:80 SYN ******S* Sep 21 00:00:42 65.54.188.52:39190 -> xxx.yyy.249.5:80 SYN ******S* Sep 21 00:00:43 65.54.188.52:39754 -> xxx.yyy.241.255:80 SYN ******S* Sep 21 00:00:46 65.54.188.52:39776 -> xxx.yyy.225.122:204 SYN ******S* Sep 21 00:00:44 65.54.188.52:39972 -> xxx.yyy.248.180:80 SYN ******S* Sep 21 00:02:45 65.54.188.52:51263 -> xxx.yyy.1.13:80 SYN ******S* Sep 21 00:02:45 65.54.188.52:51651 -> xxx.yyy.212.103:80 SYN ******S* Sep 21 00:02:45 65.54.188.52:51791 -> xxx.yyy.241.22:80 SYN ******S* [...] Sep 21 23:59:16 65.54.188.52:60817 -> xxx.yyy.241.179:80 SYN ******S* Sep 21 23:59:21 65.54.188.52:62984 -> xxx.yyy.1.13:80 SYN ******S* Sep 21 23:59:17 65.54.188.52:61476 -> xxx.yyy.212.103:80 SYN ******S* Sep 21 23:59:18 65.54.188.52:61957 -> xxx.yyy.241.29:80 SYN ******S* Sep 21 23:59:19 65.54.188.52:62212 -> xxx.yyy.241.255:80 SYN ******S* Sep 21 23:59:23 65.54.188.52:63845 -> xxx.yyy.241.255:80 SYN ******S* Sep 21 23:59:22 65.54.188.52:63394 -> xxx.yyy.241.20:80 SYN ******S* Sep 21 23:59:22 65.54.188.52:63504 -> xxx.yyy.212.103:80 SYN ******S* Sep 21 23:59:22 65.54.188.52:63543 -> xxx.yyy.1.13:80 SYN ******S* 6741 Sep 21 01:04:41 219.130.51.252:3910 -> xxx.yyy.71.168:5554 SYN ******S* Sep 21 01:04:41 219.130.51.252:3914 -> xxx.yyy.71.172:5554 SYN ******S* Sep 21 01:04:41 219.130.51.252:3829 -> xxx.yyy.71.161:5554 SYN ******S* Sep 21 01:04:44 219.130.51.252:1876 -> xxx.yyy.71.161:9898 SYN ******S* Sep 21 01:04:41 219.130.51.252:4000 -> xxx.yyy.71.174:5554 SYN ******S* Sep 21 01:04:44 219.130.51.252:1948 -> xxx.yyy.71.174:9898 SYN ******S* Sep 21 01:04:41 219.130.51.252:3913 -> xxx.yyy.71.171:5554 SYN ******S* Sep 21 01:04:42 219.130.51.252:4923 -> xxx.yyy.71.171:1023 SYN ******S* [...] Sep 21 01:05:24 219.130.51.252:1302 -> xxx.yyy.91.143:9898 SYN ******S* Sep 21 01:05:24 219.130.51.252:1398 -> xxx.yyy.91.191:9898 SYN ******S* Sep 21 01:05:25 219.130.51.252:1450 -> xxx.yyy.91.226:9898 SYN ******S* Sep 21 01:05:25 219.130.51.252:1407 -> xxx.yyy.91.200:9898 SYN ******S* Sep 21 01:05:25 219.130.51.252:1424 -> xxx.yyy.91.214:9898 SYN ******S* Sep 21 01:05:25 219.130.51.252:1464 -> xxx.yyy.91.236:9898 SYN ******S* Sep 21 01:05:25 219.130.51.252:1516 -> xxx.yyy.92.5:9898 SYN ******S* Sep 21 01:05:25 219.130.51.252:1543 -> xxx.yyy.92.17:9898 SYN ******S* Sep 21 01:05:25 219.130.51.252:1558 -> xxx.yyy.92.23:9898 SYN ******S* 6532 Sep 21 00:57:09 218.76.117.208:4128 -> xxx.yyy.174.223:5554 SYN ******S* Sep 21 00:57:10 218.76.117.208:4130 -> xxx.yyy.174.225:5554 SYN ******S* Sep 21 00:57:13 218.76.117.208:4794 -> xxx.yyy.174.225:9898 SYN ******S* Sep 21 00:57:10 218.76.117.208:4431 -> xxx.yyy.174.237:5554 SYN ******S* Sep 21 00:57:13 218.76.117.208:1150 -> xxx.yyy.174.237:9898 SYN ******S* Sep 21 00:57:10 218.76.117.208:4435 -> xxx.yyy.174.239:5554 SYN ******S* Sep 21 00:57:11 218.76.117.208:4603 -> xxx.yyy.174.239:1023 SYN ******S* Sep 21 00:57:10 218.76.117.208:4412 -> xxx.yyy.174.234:5554 SYN ******S* [...] Sep 21 00:59:29 218.76.117.208:4630 -> xxx.yyy.195.57:9898 SYN ******S* Sep 21 00:59:29 218.76.117.208:4649 -> xxx.yyy.195.72:9898 SYN ******S* Sep 21 00:59:30 218.76.117.208:4595 -> xxx.yyy.195.32:9898 SYN ******S* Sep 21 00:59:30 218.76.117.208:4627 -> xxx.yyy.195.56:9898 SYN ******S* Sep 21 00:59:30 218.76.117.208:4555 -> xxx.yyy.195.20:9898 SYN ******S* Sep 21 00:59:30 218.76.117.208:4633 -> xxx.yyy.195.60:9898 SYN ******S* Sep 21 00:59:30 218.76.117.208:4644 -> xxx.yyy.195.67:9898 SYN ******S* Sep 21 00:59:30 218.76.117.208:4601 -> xxx.yyy.195.38:9898 SYN ******S* Sep 21 00:59:30 218.76.117.208:4650 -> xxx.yyy.195.73:9898 SYN ******S* 6143 Sep 21 08:14:05 220.72.76.146:22002 -> xxx.yyy.1.0:1080 SYN ******S* Sep 21 08:14:05 220.72.76.146:22002 -> xxx.yyy.1.0:10080 SYN ******S* Sep 21 08:14:06 220.72.76.146:22002 -> xxx.yyy.1.1:1080 SYN ******S* Sep 21 08:14:06 220.72.76.146:22002 -> xxx.yyy.1.1:10080 SYN ******S* Sep 21 08:14:06 220.72.76.146:22002 -> xxx.yyy.1.1:3128 SYN ******S* Sep 21 08:14:06 220.72.76.146:22002 -> xxx.yyy.1.2:1080 SYN ******S* Sep 21 08:14:06 220.72.76.146:22002 -> xxx.yyy.1.2:3128 SYN ******S* Sep 21 08:14:07 220.72.76.146:22002 -> xxx.yyy.1.3:1080 SYN ******S* [...] Sep 21 08:49:46 220.72.76.146:22002 -> xxx.yyy.20.251:10080 SYN ******S* Sep 21 08:49:47 220.72.76.146:22002 -> xxx.yyy.20.252:10080 SYN ******S* Sep 21 08:49:47 220.72.76.146:22002 -> xxx.yyy.20.253:1080 SYN ******S* Sep 21 08:49:47 220.72.76.146:22002 -> xxx.yyy.20.253:3128 SYN ******S* Sep 21 08:49:47 220.72.76.146:22002 -> xxx.yyy.20.254:10080 SYN ******S* Sep 21 08:49:48 220.72.76.146:22002 -> xxx.yyy.20.254:3128 SYN ******S* Sep 21 08:49:48 220.72.76.146:22002 -> xxx.yyy.20.255:1080 SYN ******S* Sep 21 08:49:48 220.72.76.146:22002 -> xxx.yyy.20.255:3128 SYN ******S* 5994 Sep 21 00:56:11 218.25.83.43:4081 -> xxx.yyy.133.14:5554 SYN ******S* Sep 21 00:56:12 218.25.83.43:1298 -> xxx.yyy.133.14:1023 SYN ******S* Sep 21 00:56:11 218.25.83.43:4082 -> xxx.yyy.133.15:5554 SYN ******S* Sep 21 00:56:11 218.25.83.43:4083 -> xxx.yyy.133.17:5554 SYN ******S* Sep 21 00:56:12 218.25.83.43:1316 -> xxx.yyy.133.17:1023 SYN ******S* Sep 21 00:56:14 218.25.83.43:3734 -> xxx.yyy.133.17:9898 SYN ******S* Sep 21 00:56:11 218.25.83.43:4084 -> xxx.yyy.133.18:5554 SYN ******S* Sep 21 00:56:11 218.25.83.43:4087 -> xxx.yyy.133.19:5554 SYN ******S* [...] Sep 21 00:57:00 218.25.83.43:2839 -> xxx.yyy.153.125:9898 SYN ******S* Sep 21 00:57:00 218.25.83.43:2845 -> xxx.yyy.153.127:9898 SYN ******S* Sep 21 00:57:00 218.25.83.43:2846 -> xxx.yyy.153.129:9898 SYN ******S* Sep 21 00:57:00 218.25.83.43:2847 -> xxx.yyy.153.130:9898 SYN ******S* Sep 21 00:57:00 218.25.83.43:2853 -> xxx.yyy.153.120:9898 SYN ******S* Sep 21 00:57:00 218.25.83.43:2866 -> xxx.yyy.153.116:9898 SYN ******S* Sep 21 00:57:00 218.25.83.43:2887 -> xxx.yyy.153.135:9898 SYN ******S* Sep 21 00:57:00 218.25.83.43:2884 -> xxx.yyy.153.122:9898 SYN ******S* 5864 Sep 21 23:56:02 221.147.212.197:2284 -> xxx.yyy.174.5:5554 SYN ******S* Sep 21 23:56:04 221.147.212.197:2828 -> xxx.yyy.174.5:1023 SYN ******S* Sep 21 23:56:02 221.147.212.197:2286 -> xxx.yyy.174.6:5554 SYN ******S* Sep 21 23:56:04 221.147.212.197:2829 -> xxx.yyy.174.6:1023 SYN ******S* Sep 21 23:56:03 221.147.212.197:2348 -> xxx.yyy.174.22:5554 SYN ******S* Sep 21 23:56:04 221.147.212.197:2912 -> xxx.yyy.174.22:1023 SYN ******S* Sep 21 23:56:06 221.147.212.197:4286 -> xxx.yyy.174.22:9898 SYN ******S* Sep 21 23:56:03 221.147.212.197:2333 -> xxx.yyy.174.2:5554 SYN ******S* [...] Sep 21 23:56:51 221.147.212.197:3689 -> xxx.yyy.33.231:9898 SYN ******S* Sep 21 23:56:51 221.147.212.197:3698 -> xxx.yyy.33.234:9898 SYN ******S* Sep 21 23:56:51 221.147.212.197:3715 -> xxx.yyy.33.235:9898 SYN ******S* Sep 21 23:56:51 221.147.212.197:3711 -> xxx.yyy.33.232:9898 SYN ******S* Sep 21 23:56:51 221.147.212.197:3736 -> xxx.yyy.33.243:9898 SYN ******S* Sep 21 23:56:51 221.147.212.197:3735 -> xxx.yyy.33.241:9898 SYN ******S* Sep 21 23:56:51 221.147.212.197:3737 -> xxx.yyy.33.244:9898 SYN ******S* Sep 21 23:56:51 221.147.212.197:3792 -> xxx.yyy.33.254:9898 SYN ******S* Sep 21 23:56:51 221.147.212.197:3861 -> xxx.yyy.33.250:9898 SYN ******S* 5501 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions