[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0500. Sep 22 06:58:14 194.133.11.171:1475 -> xxx.yyy.1.1:4899 SYN ******S* Sep 22 06:58:14 194.133.11.171:1476 -> xxx.yyy.1.2:4899 SYN ******S* Sep 22 06:58:14 194.133.11.171:1477 -> xxx.yyy.1.3:4899 SYN ******S* Sep 22 06:58:16 194.133.11.171:1478 -> xxx.yyy.1.4:4899 SYN ******S* Sep 22 06:58:16 194.133.11.171:1479 -> xxx.yyy.1.5:4899 SYN ******S* Sep 22 06:58:13 194.133.11.171:1480 -> xxx.yyy.1.6:4899 SYN ******S* Sep 22 06:58:16 194.133.11.171:1481 -> xxx.yyy.1.7:4899 SYN ******S* Sep 22 06:58:13 194.133.11.171:1482 -> xxx.yyy.1.8:4899 SYN ******S* [...] Sep 22 07:11:05 194.133.11.171:2429 -> xxx.yyy.255.245:4899 SYN ******S* Sep 22 07:11:05 194.133.11.171:2421 -> xxx.yyy.255.239:4899 SYN ******S* Sep 22 07:11:05 194.133.11.171:2425 -> xxx.yyy.255.242:4899 SYN ******S* Sep 22 07:11:05 194.133.11.171:2418 -> xxx.yyy.255.236:4899 SYN ******S* Sep 22 07:11:05 194.133.11.171:2408 -> xxx.yyy.255.226:4899 SYN ******S* Sep 22 07:11:05 194.133.11.171:2405 -> xxx.yyy.255.223:4899 SYN ******S* Sep 22 07:11:05 194.133.11.171:2415 -> xxx.yyy.255.233:4899 SYN ******S* Sep 22 07:11:05 194.133.11.171:2443 -> xxx.yyy.255.254:4899 SYN ******S* 88324 Sep 22 06:21:19 81.71.90.43:2636 -> xxx.yyy.1.3:1433 SYN ******S* Sep 22 06:21:19 81.71.90.43:2638 -> xxx.yyy.1.5:1433 SYN ******S* Sep 22 06:21:19 81.71.90.43:2634 -> xxx.yyy.1.1:1433 SYN ******S* Sep 22 06:21:19 81.71.90.43:2637 -> xxx.yyy.1.4:1433 SYN ******S* Sep 22 06:21:19 81.71.90.43:2640 -> xxx.yyy.1.6:1433 SYN ******S* Sep 22 06:21:19 81.71.90.43:2635 -> xxx.yyy.1.2:1433 SYN ******S* Sep 22 06:21:19 81.71.90.43:2633 -> xxx.yyy.1.0:1433 SYN ******S* Sep 22 06:21:19 81.71.90.43:2641 -> xxx.yyy.1.7:1433 SYN ******S* [...] Sep 22 10:09:58 81.71.90.43:2889 -> xxx.yyy.255.242:1433 SYN ******S* Sep 22 10:09:58 81.71.90.43:2885 -> xxx.yyy.255.240:1433 SYN ******S* Sep 22 10:09:58 81.71.90.43:2886 -> xxx.yyy.255.241:1433 SYN ******S* Sep 22 10:09:59 81.71.90.43:2902 -> xxx.yyy.255.248:1433 SYN ******S* Sep 22 10:09:59 81.71.90.43:2903 -> xxx.yyy.255.249:1433 SYN ******S* Sep 22 10:09:59 81.71.90.43:2904 -> xxx.yyy.255.250:1433 SYN ******S* Sep 22 10:10:02 81.71.90.43:2853 -> xxx.yyy.255.228:1433 SYN ******S* Sep 22 10:10:04 81.71.90.43:2881 -> xxx.yyy.255.237:1433 SYN ******S* Sep 22 10:10:05 81.71.90.43:2882 -> xxx.yyy.255.238:1433 SYN ******S* 82547 Sep 22 05:35:36 203.75.206.165:4213 -> xxx.yyy.1.1:1433 SYN ******S* Sep 22 05:35:36 203.75.206.165:4214 -> xxx.yyy.1.2:1433 SYN ******S* Sep 22 05:35:36 203.75.206.165:4215 -> xxx.yyy.1.3:1433 SYN ******S* Sep 22 05:35:36 203.75.206.165:4216 -> xxx.yyy.1.4:1433 SYN ******S* Sep 22 05:35:33 203.75.206.165:4217 -> xxx.yyy.1.5:1433 SYN ******S* Sep 22 05:35:33 203.75.206.165:4218 -> xxx.yyy.1.6:1433 SYN ******S* Sep 22 05:35:36 203.75.206.165:4219 -> xxx.yyy.1.7:1433 SYN ******S* Sep 22 05:35:36 203.75.206.165:4220 -> xxx.yyy.1.8:1433 SYN ******S* [...] Sep 22 05:47:14 203.75.206.165:2759 -> xxx.yyy.255.238:1433 SYN ******S* Sep 22 05:47:14 203.75.206.165:2769 -> xxx.yyy.255.248:1433 SYN ******S* Sep 22 05:47:15 203.75.206.165:2766 -> xxx.yyy.255.245:1433 SYN ******S* Sep 22 05:47:15 203.75.206.165:2763 -> xxx.yyy.255.242:1433 SYN ******S* Sep 22 05:47:15 203.75.206.165:2772 -> xxx.yyy.255.251:1433 SYN ******S* Sep 22 05:47:15 203.75.206.165:2773 -> xxx.yyy.255.252:1433 SYN ******S* Sep 22 05:47:15 203.75.206.165:2774 -> xxx.yyy.255.253:1433 SYN ******S* Sep 22 05:47:15 203.75.206.165:2775 -> xxx.yyy.255.254:1433 SYN ******S* 71674 Sep 22 17:54:07 70.60.123.137:1900 -> xxx.yyy.1.2:139 SYN ******S* Sep 22 17:54:05 70.60.123.137:1901 -> xxx.yyy.1.3:139 SYN ******S* Sep 22 17:54:05 70.60.123.137:1902 -> xxx.yyy.1.4:139 SYN ******S* Sep 22 17:54:07 70.60.123.137:1907 -> xxx.yyy.1.10:139 SYN ******S* Sep 22 17:54:10 70.60.123.137:1908 -> xxx.yyy.1.9:139 SYN ******S* Sep 22 17:54:08 70.60.123.137:1910 -> xxx.yyy.1.13:139 SYN ******S* Sep 22 17:54:08 70.60.123.137:1915 -> xxx.yyy.1.17:139 SYN ******S* Sep 22 17:54:08 70.60.123.137:1919 -> xxx.yyy.1.21:139 SYN ******S* [...] Sep 22 21:32:49 70.60.123.137:2712 -> xxx.yyy.250.238:139 SYN ******S* Sep 22 21:32:51 70.60.123.137:2714 -> xxx.yyy.250.240:139 SYN ******S* Sep 22 21:32:51 70.60.123.137:2716 -> xxx.yyy.250.242:139 SYN ******S* Sep 22 21:32:52 70.60.123.137:2718 -> xxx.yyy.250.243:139 SYN ******S* Sep 22 21:32:52 70.60.123.137:2717 -> xxx.yyy.250.245:139 SYN ******S* Sep 22 21:32:52 70.60.123.137:2722 -> xxx.yyy.250.247:139 SYN ******S* Sep 22 21:32:53 70.60.123.137:2723 -> xxx.yyy.250.249:139 SYN ******S* Sep 22 21:32:54 70.60.123.137:2725 -> xxx.yyy.250.250:139 SYN ******S* 64729 Sep 22 01:13:07 128.210.180.120:2834 -> xxx.yyy.1.1:4000 SYN ******S* Sep 22 01:13:07 128.210.180.120:2837 -> xxx.yyy.1.2:4000 SYN ******S* Sep 22 01:13:07 128.210.180.120:2840 -> xxx.yyy.1.3:4000 SYN ******S* Sep 22 01:13:09 128.210.180.120:2843 -> xxx.yyy.1.4:4000 SYN ******S* Sep 22 01:13:09 128.210.180.120:2846 -> xxx.yyy.1.5:4000 SYN ******S* Sep 22 01:13:09 128.210.180.120:2849 -> xxx.yyy.1.6:4000 SYN ******S* Sep 22 01:13:09 128.210.180.120:2852 -> xxx.yyy.1.7:4000 SYN ******S* Sep 22 01:13:09 128.210.180.120:2855 -> xxx.yyy.1.8:4000 SYN ******S* [...] Sep 22 01:24:53 128.210.180.120:1607 -> xxx.yyy.255.239:4000 SYN ******S* Sep 22 01:24:53 128.210.180.120:1627 -> xxx.yyy.255.246:4000 SYN ******S* Sep 22 01:24:53 128.210.180.120:1621 -> xxx.yyy.255.244:4000 SYN ******S* Sep 22 01:24:53 128.210.180.120:1615 -> xxx.yyy.255.242:4000 SYN ******S* Sep 22 01:24:54 128.210.180.120:1651 -> xxx.yyy.255.254:4000 SYN ******S* Sep 22 01:24:54 128.210.180.120:1637 -> xxx.yyy.255.249:4000 SYN ******S* Sep 22 01:24:54 128.210.180.120:1639 -> xxx.yyy.255.250:4000 SYN ******S* Sep 22 01:24:54 128.210.180.120:1645 -> xxx.yyy.255.252:4000 SYN ******S* Sep 22 01:24:54 128.210.180.120:1633 -> xxx.yyy.255.248:4000 SYN ******S* 59952 Sep 22 00:23:31 221.139.14.75:2107 -> xxx.yyy.1.4:1433 SYN ******S* Sep 22 00:23:34 221.139.14.75:2103 -> xxx.yyy.1.2:1433 SYN ******S* Sep 22 00:23:34 221.139.14.75:2108 -> xxx.yyy.1.5:1433 SYN ******S* Sep 22 00:23:34 221.139.14.75:2106 -> xxx.yyy.1.3:1433 SYN ******S* Sep 22 00:23:31 221.139.14.75:2112 -> xxx.yyy.1.9:1433 SYN ******S* Sep 22 00:23:31 221.139.14.75:2111 -> xxx.yyy.1.8:1433 SYN ******S* Sep 22 00:23:34 221.139.14.75:2116 -> xxx.yyy.1.13:1433 SYN ******S* Sep 22 00:23:34 221.139.14.75:2113 -> xxx.yyy.1.10:1433 SYN ******S* [...] Sep 22 00:35:12 221.139.14.75:2813 -> xxx.yyy.255.245:1433 SYN ******S* Sep 22 00:35:12 221.139.14.75:2807 -> xxx.yyy.255.239:1433 SYN ******S* Sep 22 00:35:12 221.139.14.75:2810 -> xxx.yyy.255.242:1433 SYN ******S* Sep 22 00:35:12 221.139.14.75:2808 -> xxx.yyy.255.240:1433 SYN ******S* Sep 22 00:35:13 221.139.14.75:2822 -> xxx.yyy.255.254:1433 SYN ******S* Sep 22 00:35:13 221.139.14.75:2821 -> xxx.yyy.255.253:1433 SYN ******S* Sep 22 00:35:13 221.139.14.75:2817 -> xxx.yyy.255.249:1433 SYN ******S* Sep 22 00:35:13 221.139.14.75:2816 -> xxx.yyy.255.248:1433 SYN ******S* Sep 22 00:35:13 221.139.14.75:2819 -> xxx.yyy.255.251:1433 SYN ******S* 47663 Sep 22 00:40:05 67.93.147.67:3567 -> xxx.yyy.1.1:1433 SYN ******S* Sep 22 00:40:05 67.93.147.67:3569 -> xxx.yyy.1.3:1433 SYN ******S* Sep 22 00:40:05 67.93.147.67:3570 -> xxx.yyy.1.4:1433 SYN ******S* Sep 22 00:40:08 67.93.147.67:3571 -> xxx.yyy.1.5:1433 SYN ******S* Sep 22 00:40:08 67.93.147.67:3572 -> xxx.yyy.1.6:1433 SYN ******S* Sep 22 00:40:08 67.93.147.67:3573 -> xxx.yyy.1.7:1433 SYN ******S* Sep 22 00:40:08 67.93.147.67:3574 -> xxx.yyy.1.8:1433 SYN ******S* Sep 22 00:40:05 67.93.147.67:3575 -> xxx.yyy.1.9:1433 SYN ******S* [...] Sep 22 00:51:51 67.93.147.67:2666 -> xxx.yyy.255.211:1433 SYN ******S* Sep 22 00:51:51 67.93.147.67:2675 -> xxx.yyy.255.220:1433 SYN ******S* Sep 22 00:51:51 67.93.147.67:2687 -> xxx.yyy.255.232:1433 SYN ******S* Sep 22 00:51:51 67.93.147.67:2692 -> xxx.yyy.255.237:1433 SYN ******S* Sep 22 00:51:51 67.93.147.67:2700 -> xxx.yyy.255.245:1433 SYN ******S* Sep 22 00:51:51 67.93.147.67:2707 -> xxx.yyy.255.252:1433 SYN ******S* Sep 22 00:51:51 67.93.147.67:2708 -> xxx.yyy.255.253:1433 SYN ******S* Sep 22 00:51:51 67.93.147.67:2709 -> xxx.yyy.255.254:1433 SYN ******S* 47187 Sep 22 06:34:04 213.39.182.237:3800 -> xxx.yyy.1.0:1433 SYN ******S* Sep 22 06:34:04 213.39.182.237:3801 -> xxx.yyy.1.1:1433 SYN ******S* Sep 22 06:34:04 213.39.182.237:3802 -> xxx.yyy.1.2:1433 SYN ******S* Sep 22 06:34:04 213.39.182.237:3804 -> xxx.yyy.1.4:1433 SYN ******S* Sep 22 06:34:04 213.39.182.237:3805 -> xxx.yyy.1.5:1433 SYN ******S* Sep 22 06:34:04 213.39.182.237:3806 -> xxx.yyy.1.6:1433 SYN ******S* Sep 22 06:34:04 213.39.182.237:3807 -> xxx.yyy.1.7:1433 SYN ******S* Sep 22 06:34:04 213.39.182.237:3808 -> xxx.yyy.1.8:1433 SYN ******S* [...] Sep 22 06:42:33 213.39.182.237:3817 -> xxx.yyy.255.247:1433 SYN ******S* Sep 22 06:42:33 213.39.182.237:3818 -> xxx.yyy.255.248:1433 SYN ******S* Sep 22 06:42:33 213.39.182.237:3819 -> xxx.yyy.255.249:1433 SYN ******S* Sep 22 06:42:33 213.39.182.237:3820 -> xxx.yyy.255.250:1433 SYN ******S* Sep 22 06:42:33 213.39.182.237:3821 -> xxx.yyy.255.251:1433 SYN ******S* Sep 22 06:42:33 213.39.182.237:3822 -> xxx.yyy.255.252:1433 SYN ******S* Sep 22 06:42:33 213.39.182.237:3823 -> xxx.yyy.255.253:1433 SYN ******S* Sep 22 06:42:33 213.39.182.237:3824 -> xxx.yyy.255.254:1433 SYN ******S* 43885 Sep 22 23:36:56 220.85.12.196:2355 -> xxx.yyy.1.2:1433 SYN ******S* Sep 22 23:36:54 220.85.12.196:2358 -> xxx.yyy.1.5:1433 SYN ******S* Sep 22 23:36:56 220.85.12.196:2356 -> xxx.yyy.1.3:1433 SYN ******S* Sep 22 23:36:54 220.85.12.196:2357 -> xxx.yyy.1.4:1433 SYN ******S* Sep 22 23:36:57 220.85.12.196:2359 -> xxx.yyy.1.6:1433 SYN ******S* Sep 22 23:36:54 220.85.12.196:2365 -> xxx.yyy.1.8:1433 SYN ******S* Sep 22 23:36:54 220.85.12.196:2366 -> xxx.yyy.1.9:1433 SYN ******S* Sep 22 23:36:57 220.85.12.196:2367 -> xxx.yyy.1.10:1433 SYN ******S* [...] Sep 22 23:48:44 220.85.12.196:3911 -> xxx.yyy.255.231:1433 SYN ******S* Sep 22 23:48:44 220.85.12.196:3908 -> xxx.yyy.255.228:1433 SYN ******S* Sep 22 23:48:44 220.85.12.196:3909 -> xxx.yyy.255.229:1433 SYN ******S* Sep 22 23:48:44 220.85.12.196:3910 -> xxx.yyy.255.230:1433 SYN ******S* Sep 22 23:48:44 220.85.12.196:3903 -> xxx.yyy.255.224:1433 SYN ******S* Sep 22 23:48:44 220.85.12.196:3919 -> xxx.yyy.255.238:1433 SYN ******S* Sep 22 23:48:44 220.85.12.196:3931 -> xxx.yyy.255.244:1433 SYN ******S* Sep 22 23:48:44 220.85.12.196:3936 -> xxx.yyy.255.247:1433 SYN ******S* Sep 22 23:48:44 220.85.12.196:3939 -> xxx.yyy.255.250:1433 SYN ******S* 40294 Sep 22 07:16:10 211.23.220.53:1788 -> xxx.yyy.1.0:23 SYN ******S* Sep 22 07:16:10 211.23.220.53:1791 -> xxx.yyy.1.3:23 SYN ******S* Sep 22 07:16:10 211.23.220.53:1792 -> xxx.yyy.1.4:23 SYN ******S* Sep 22 07:16:10 211.23.220.53:1793 -> xxx.yyy.1.5:23 SYN ******S* Sep 22 07:16:10 211.23.220.53:1794 -> xxx.yyy.1.6:23 SYN ******S* Sep 22 07:16:07 211.23.220.53:1864 -> xxx.yyy.1.76:23 SYN ******S* Sep 22 07:16:07 211.23.220.53:1865 -> xxx.yyy.1.77:23 SYN ******S* Sep 22 07:16:07 211.23.220.53:1866 -> xxx.yyy.1.78:23 SYN ******S* [...] Sep 22 07:48:46 211.23.220.53:2181 -> xxx.yyy.255.230:23 SYN ******S* Sep 22 07:48:46 211.23.220.53:2182 -> xxx.yyy.255.231:23 SYN ******S* Sep 22 07:48:46 211.23.220.53:2183 -> xxx.yyy.255.232:23 SYN ******S* Sep 22 07:48:46 211.23.220.53:2184 -> xxx.yyy.255.233:23 SYN ******S* Sep 22 07:48:46 211.23.220.53:2186 -> xxx.yyy.255.235:23 SYN ******S* Sep 22 07:48:46 211.23.220.53:2190 -> xxx.yyy.255.239:23 SYN ******S* Sep 22 07:48:46 211.23.220.53:2192 -> xxx.yyy.255.241:23 SYN ******S* Sep 22 07:48:46 211.23.220.53:2194 -> xxx.yyy.255.243:23 SYN ******S* Sep 22 07:48:46 211.23.220.53:2195 -> xxx.yyy.255.244:23 SYN ******S* 36857 Sep 22 19:23:45 203.145.16.203:37876 -> xxx.yyy.1.1:1433 SYN ******S* Sep 22 19:23:45 203.145.16.203:37877 -> xxx.yyy.1.2:1433 SYN ******S* Sep 22 19:23:45 203.145.16.203:37878 -> xxx.yyy.1.3:1433 SYN ******S* Sep 22 19:23:45 203.145.16.203:37880 -> xxx.yyy.1.5:1433 SYN ******S* Sep 22 19:23:48 203.145.16.203:37881 -> xxx.yyy.1.6:1433 SYN ******S* Sep 22 19:23:48 203.145.16.203:37882 -> xxx.yyy.1.7:1433 SYN ******S* Sep 22 19:23:45 203.145.16.203:37884 -> xxx.yyy.1.9:1433 SYN ******S* Sep 22 19:23:48 203.145.16.203:37888 -> xxx.yyy.1.13:1433 SYN ******S* [...] Sep 22 19:35:34 203.145.16.203:42352 -> xxx.yyy.255.221:1433 SYN ******S* Sep 22 19:35:34 203.145.16.203:42349 -> xxx.yyy.255.218:1433 SYN ******S* Sep 22 19:35:34 203.145.16.203:42350 -> xxx.yyy.255.219:1433 SYN ******S* Sep 22 19:35:34 203.145.16.203:42355 -> xxx.yyy.255.224:1433 SYN ******S* Sep 22 19:35:34 203.145.16.203:42360 -> xxx.yyy.255.229:1433 SYN ******S* Sep 22 19:35:34 203.145.16.203:42380 -> xxx.yyy.255.249:1433 SYN ******S* Sep 22 19:35:34 203.145.16.203:42378 -> xxx.yyy.255.247:1433 SYN ******S* Sep 22 19:35:34 203.145.16.203:42384 -> xxx.yyy.255.253:1433 SYN ******S* Sep 22 19:35:34 203.145.16.203:42385 -> xxx.yyy.255.254:1433 SYN ******S* 35957 Sep 22 20:30:12 218.58.252.58:3474 -> xxx.yyy.1.2:1433 SYN ******S* Sep 22 20:30:15 218.58.252.58:3475 -> xxx.yyy.1.3:1433 SYN ******S* Sep 22 20:30:12 218.58.252.58:3478 -> xxx.yyy.1.6:1433 SYN ******S* Sep 22 20:30:12 218.58.252.58:3480 -> xxx.yyy.1.8:1433 SYN ******S* Sep 22 20:30:12 218.58.252.58:3481 -> xxx.yyy.1.9:1433 SYN ******S* Sep 22 20:30:15 218.58.252.58:3487 -> xxx.yyy.1.15:1433 SYN ******S* Sep 22 20:30:12 218.58.252.58:3489 -> xxx.yyy.1.17:1433 SYN ******S* Sep 22 20:30:12 218.58.252.58:3490 -> xxx.yyy.1.18:1433 SYN ******S* [...] Sep 22 23:59:58 218.58.252.58:3648 -> xxx.yyy.179.232:1433 SYN ******S* Sep 22 23:59:58 218.58.252.58:3702 -> xxx.yyy.179.245:1433 SYN ******S* Sep 22 23:59:58 218.58.252.58:3658 -> xxx.yyy.179.236:1433 SYN ******S* Sep 22 23:59:59 218.58.252.58:3711 -> xxx.yyy.179.247:1433 SYN ******S* Sep 22 23:59:59 218.58.252.58:3714 -> xxx.yyy.179.248:1433 SYN ******S* Sep 22 23:59:59 218.58.252.58:3715 -> xxx.yyy.179.249:1433 SYN ******S* Sep 22 23:59:59 218.58.252.58:3724 -> xxx.yyy.179.252:1433 SYN ******S* Sep 22 23:59:59 218.58.252.58:3726 -> xxx.yyy.179.253:1433 SYN ******S* Sep 22 23:59:59 218.58.252.58:3727 -> xxx.yyy.179.254:1433 SYN ******S* 35294 Sep 22 21:11:11 81.220.32.168:3639 -> xxx.yyy.1.10:1433 SYN ******S* Sep 22 21:11:11 81.220.32.168:3656 -> xxx.yyy.1.24:1433 SYN ******S* Sep 22 21:11:11 81.220.32.168:3646 -> xxx.yyy.1.16:1433 SYN ******S* Sep 22 21:11:11 81.220.32.168:3675 -> xxx.yyy.1.42:1433 SYN ******S* Sep 22 21:11:11 81.220.32.168:3640 -> xxx.yyy.1.11:1433 SYN ******S* Sep 22 21:11:11 81.220.32.168:3642 -> xxx.yyy.1.12:1433 SYN ******S* Sep 22 21:11:11 81.220.32.168:3644 -> xxx.yyy.1.14:1433 SYN ******S* Sep 22 21:11:11 81.220.32.168:3643 -> xxx.yyy.1.13:1433 SYN ******S* [...] Sep 23 00:00:00 81.220.32.168:1813 -> xxx.yyy.189.11:1433 SYN ******S* Sep 23 00:00:00 81.220.32.168:1709 -> xxx.yyy.188.235:1433 SYN ******S* Sep 23 00:00:00 81.220.32.168:1605 -> xxx.yyy.188.204:1433 SYN ******S* Sep 23 00:00:00 81.220.32.168:1604 -> xxx.yyy.188.203:1433 SYN ******S* Sep 23 00:00:00 81.220.32.168:1827 -> xxx.yyy.189.16:1433 SYN ******S* Sep 23 00:00:01 81.220.32.168:1735 -> xxx.yyy.188.245:1433 SYN ******S* Sep 23 00:00:01 81.220.32.168:1614 -> xxx.yyy.188.207:1433 SYN ******S* Sep 23 00:00:01 81.220.32.168:1734 -> xxx.yyy.188.244:1433 SYN ******S* Sep 23 00:00:01 81.220.32.168:1748 -> xxx.yyy.188.246:1433 SYN ******S* 34148 Sep 22 20:56:12 62.149.228.68:1254 -> xxx.yyy.1.8:1433 SYN ******S* Sep 22 20:56:12 62.149.228.68:1271 -> xxx.yyy.1.25:1433 SYN ******S* Sep 22 20:56:12 62.149.228.68:1260 -> xxx.yyy.1.14:1433 SYN ******S* Sep 22 20:56:12 62.149.228.68:1287 -> xxx.yyy.1.41:1433 SYN ******S* Sep 22 20:56:12 62.149.228.68:1307 -> xxx.yyy.1.61:1433 SYN ******S* Sep 22 20:56:12 62.149.228.68:1273 -> xxx.yyy.1.27:1433 SYN ******S* Sep 22 20:56:12 62.149.228.68:1276 -> xxx.yyy.1.30:1433 SYN ******S* Sep 22 20:56:12 62.149.228.68:1323 -> xxx.yyy.1.77:1433 SYN ******S* [...] Sep 22 20:59:33 62.149.228.68:3001 -> xxx.yyy.255.253:1433 SYN ******S* Sep 22 20:59:33 62.149.228.68:2968 -> xxx.yyy.255.220:1433 SYN ******S* Sep 22 20:59:33 62.149.228.68:2992 -> xxx.yyy.255.244:1433 SYN ******S* Sep 22 20:59:33 62.149.228.68:2976 -> xxx.yyy.255.228:1433 SYN ******S* Sep 22 20:59:33 62.149.228.68:2986 -> xxx.yyy.255.238:1433 SYN ******S* Sep 22 20:59:33 62.149.228.68:2983 -> xxx.yyy.255.235:1433 SYN ******S* Sep 22 20:59:33 62.149.228.68:2958 -> xxx.yyy.255.210:1433 SYN ******S* Sep 22 20:59:33 62.149.228.68:2973 -> xxx.yyy.255.225:1433 SYN ******S* Sep 22 20:59:33 62.149.228.68:3002 -> xxx.yyy.255.254:1433 SYN ******S* 27674 Sep 22 06:57:37 81.134.109.205:15051 -> xxx.yyy.1.3:1433 SYN ******S* Sep 22 06:57:37 81.134.109.205:15070 -> xxx.yyy.1.22:1433 SYN ******S* Sep 22 06:57:37 81.134.109.205:15071 -> xxx.yyy.1.23:1433 SYN ******S* Sep 22 06:57:37 81.134.109.205:15087 -> xxx.yyy.1.39:1433 SYN ******S* Sep 22 06:57:37 81.134.109.205:15097 -> xxx.yyy.1.49:1433 SYN ******S* Sep 22 06:57:37 81.134.109.205:15099 -> xxx.yyy.1.51:1433 SYN ******S* Sep 22 06:57:34 81.134.109.205:15100 -> xxx.yyy.1.52:1433 SYN ******S* Sep 22 06:57:34 81.134.109.205:15101 -> xxx.yyy.1.53:1433 SYN ******S* [...] Sep 22 07:09:30 81.134.109.205:15869 -> xxx.yyy.255.225:1433 SYN ******S* Sep 22 07:09:30 81.134.109.205:15870 -> xxx.yyy.255.226:1433 SYN ******S* Sep 22 07:09:30 81.134.109.205:15871 -> xxx.yyy.255.227:1433 SYN ******S* Sep 22 07:09:30 81.134.109.205:15878 -> xxx.yyy.255.234:1433 SYN ******S* Sep 22 07:09:30 81.134.109.205:15880 -> xxx.yyy.255.236:1433 SYN ******S* Sep 22 07:09:30 81.134.109.205:15887 -> xxx.yyy.255.243:1433 SYN ******S* Sep 22 07:09:30 81.134.109.205:15888 -> xxx.yyy.255.244:1433 SYN ******S* Sep 22 07:09:30 81.134.109.205:15889 -> xxx.yyy.255.245:1433 SYN ******S* Sep 22 07:09:30 81.134.109.205:15890 -> xxx.yyy.255.246:1433 SYN ******S* 25093 Sep 22 16:46:01 217.226.217.207:2302 -> xxx.yyy.1.0:1433 SYN ******S* Sep 22 16:46:01 217.226.217.207:2306 -> xxx.yyy.1.1:1433 SYN ******S* Sep 22 16:46:01 217.226.217.207:2310 -> xxx.yyy.1.2:1433 SYN ******S* Sep 22 16:46:01 217.226.217.207:2319 -> xxx.yyy.1.4:1433 SYN ******S* Sep 22 16:46:01 217.226.217.207:2331 -> xxx.yyy.1.7:1433 SYN ******S* Sep 22 16:46:01 217.226.217.207:2335 -> xxx.yyy.1.8:1433 SYN ******S* Sep 22 16:46:01 217.226.217.207:2336 -> xxx.yyy.1.9:1433 SYN ******S* Sep 22 16:46:02 217.226.217.207:2356 -> xxx.yyy.1.14:1433 SYN ******S* [...] Sep 22 17:20:06 217.226.217.207:2721 -> xxx.yyy.255.239:1433 SYN ******S* Sep 22 17:20:06 217.226.217.207:2722 -> xxx.yyy.255.240:1433 SYN ******S* Sep 22 17:20:06 217.226.217.207:2727 -> xxx.yyy.255.241:1433 SYN ******S* Sep 22 17:20:06 217.226.217.207:2745 -> xxx.yyy.255.245:1433 SYN ******S* Sep 22 17:20:06 217.226.217.207:2751 -> xxx.yyy.255.247:1433 SYN ******S* Sep 22 17:20:06 217.226.217.207:2757 -> xxx.yyy.255.248:1433 SYN ******S* Sep 22 17:20:06 217.226.217.207:2763 -> xxx.yyy.255.250:1433 SYN ******S* Sep 22 17:20:06 217.226.217.207:2770 -> xxx.yyy.255.252:1433 SYN ******S* Sep 22 17:20:06 217.226.217.207:2781 -> xxx.yyy.255.254:1433 SYN ******S* 24035 Sep 22 08:59:12 61.111.33.85:2944 -> xxx.yyy.1.1:4899 SYN ******S* Sep 22 08:59:13 61.111.33.85:2946 -> xxx.yyy.1.3:4899 SYN ******S* Sep 22 08:59:13 61.111.33.85:2945 -> xxx.yyy.1.2:4899 SYN ******S* Sep 22 08:59:12 61.111.33.85:2947 -> xxx.yyy.1.4:4899 SYN ******S* Sep 22 08:59:12 61.111.33.85:2949 -> xxx.yyy.1.6:4899 SYN ******S* Sep 22 08:59:12 61.111.33.85:2948 -> xxx.yyy.1.5:4899 SYN ******S* Sep 22 08:59:12 61.111.33.85:2953 -> xxx.yyy.1.10:4899 SYN ******S* Sep 22 08:59:12 61.111.33.85:2963 -> xxx.yyy.1.20:4899 SYN ******S* [...] Sep 22 09:02:23 61.111.33.85:3669 -> xxx.yyy.255.225:4899 SYN ******S* Sep 22 09:02:23 61.111.33.85:3682 -> xxx.yyy.255.237:4899 SYN ******S* Sep 22 09:02:23 61.111.33.85:3683 -> xxx.yyy.255.238:4899 SYN ******S* Sep 22 09:02:23 61.111.33.85:3684 -> xxx.yyy.255.239:4899 SYN ******S* Sep 22 09:02:23 61.111.33.85:3690 -> xxx.yyy.255.244:4899 SYN ******S* Sep 22 09:02:23 61.111.33.85:3691 -> xxx.yyy.255.245:4899 SYN ******S* Sep 22 09:02:23 61.111.33.85:3698 -> xxx.yyy.255.247:4899 SYN ******S* Sep 22 09:02:23 61.111.33.85:2782 -> xxx.yyy.253.125:4899 SYN ******S* 20482 Sep 22 09:00:44 69.79.9.206:47750 -> xxx.yyy.1.0:21 SYN ******S* Sep 22 09:00:44 69.79.9.206:47765 -> xxx.yyy.1.15:21 SYN ******S* Sep 22 09:00:44 69.79.9.206:47767 -> xxx.yyy.1.17:21 SYN ******S* Sep 22 09:00:44 69.79.9.206:47768 -> xxx.yyy.1.18:21 SYN ******S* Sep 22 09:00:44 69.79.9.206:47769 -> xxx.yyy.1.19:21 SYN ******S* Sep 22 09:00:44 69.79.9.206:47770 -> xxx.yyy.1.20:21 SYN ******S* Sep 22 09:00:44 69.79.9.206:47771 -> xxx.yyy.1.21:21 SYN ******S* Sep 22 09:00:45 69.79.9.206:47773 -> xxx.yyy.1.23:21 SYN ******S* [...] Sep 22 09:11:37 69.79.9.206:39487 -> xxx.yyy.255.195:21 SYN ******S* Sep 22 09:11:37 69.79.9.206:39488 -> xxx.yyy.255.196:21 SYN ******S* Sep 22 09:11:37 69.79.9.206:39489 -> xxx.yyy.255.197:21 SYN ******S* Sep 22 09:11:37 69.79.9.206:39576 -> xxx.yyy.255.247:21 SYN ******S* Sep 22 09:11:37 69.79.9.206:39577 -> xxx.yyy.255.248:21 SYN ******S* Sep 22 09:11:37 69.79.9.206:39578 -> xxx.yyy.255.249:21 SYN ******S* Sep 22 09:11:37 69.79.9.206:39579 -> xxx.yyy.255.250:21 SYN ******S* Sep 22 09:11:37 69.79.9.206:39580 -> xxx.yyy.255.251:21 SYN ******S* 12103 Sep 22 10:16:00 218.93.124.211:18198 -> xxx.yyy.1.0:22 SYN ******S* Sep 22 10:16:00 218.93.124.211:18198 -> xxx.yyy.1.10:22 SYN ******S* Sep 22 10:16:00 218.93.124.211:18198 -> xxx.yyy.1.5:22 SYN ******S* Sep 22 10:16:00 218.93.124.211:18198 -> xxx.yyy.1.13:22 SYN ******S* Sep 22 10:16:00 218.93.124.211:18198 -> xxx.yyy.1.18:22 SYN ******S* Sep 22 10:16:00 218.93.124.211:18198 -> xxx.yyy.1.11:22 SYN ******S* Sep 22 10:16:00 218.93.124.211:18198 -> xxx.yyy.1.14:22 SYN ******S* Sep 22 10:16:00 218.93.124.211:18198 -> xxx.yyy.1.15:22 SYN ******S* [...] Sep 22 10:19:37 218.93.124.211:53248 -> xxx.yyy.241.162:22 SYN ******S* Sep 22 10:19:37 218.93.124.211:53259 -> xxx.yyy.228.144:22 SYN ******S* Sep 22 10:19:37 218.93.124.211:53263 -> xxx.yyy.241.36:22 SYN ******S* Sep 22 10:19:42 218.93.124.211:53278 -> xxx.yyy.225.144:22 SYN ******S* Sep 22 10:19:43 218.93.124.211:53282 -> xxx.yyy.241.98:22 SYN ******S* Sep 22 10:19:43 218.93.124.211:53216 -> xxx.yyy.229.167:22 SYN ******S* Sep 22 10:19:43 218.93.124.211:53226 -> xxx.yyy.229.95:22 SYN ******S* Sep 22 10:19:43 218.93.124.211:53217 -> xxx.yyy.229.17:22 SYN ******S* Sep 22 10:19:43 218.93.124.211:53270 -> xxx.yyy.248.80:22 SYN ******S* 11626 Sep 22 01:35:42 222.150.23.240:3980 -> xxx.yyy.236.76:5554 SYN ******S* Sep 22 01:35:45 222.150.23.240:1175 -> xxx.yyy.236.76:9898 SYN ******S* Sep 22 01:35:42 222.150.23.240:3984 -> xxx.yyy.236.80:5554 SYN ******S* Sep 22 01:35:43 222.150.23.240:4285 -> xxx.yyy.236.80:1023 SYN ******S* Sep 22 01:35:45 222.150.23.240:1181 -> xxx.yyy.236.80:9898 SYN ******S* Sep 22 01:35:43 222.150.23.240:3983 -> xxx.yyy.236.79:5554 SYN ******S* Sep 22 01:35:44 222.150.23.240:4284 -> xxx.yyy.236.79:1023 SYN ******S* Sep 22 01:35:45 222.150.23.240:1180 -> xxx.yyy.236.79:9898 SYN ******S* [...] Sep 22 01:36:51 222.150.23.240:4705 -> xxx.yyy.237.0:9898 SYN ******S* Sep 22 01:36:51 222.150.23.240:4706 -> xxx.yyy.237.1:9898 SYN ******S* Sep 22 01:36:51 222.150.23.240:4737 -> xxx.yyy.237.2:9898 SYN ******S* Sep 22 01:36:51 222.150.23.240:4758 -> xxx.yyy.237.8:9898 SYN ******S* Sep 22 01:36:51 222.150.23.240:4761 -> xxx.yyy.237.10:9898 SYN ******S* Sep 22 01:36:51 222.150.23.240:4798 -> xxx.yyy.237.12:9898 SYN ******S* Sep 22 01:36:51 222.150.23.240:4799 -> xxx.yyy.237.13:9898 SYN ******S* Sep 22 01:36:51 222.150.23.240:4796 -> xxx.yyy.237.11:9898 SYN ******S* Sep 22 01:36:51 222.150.23.240:4823 -> xxx.yyy.237.15:9898 SYN ******S* 10624 Sep 22 14:16:28 217.255.95.79:64051 -> xxx.yyy.1.7:3306 SYN ******S* Sep 22 14:16:28 217.255.95.79:64485 -> xxx.yyy.1.11:3306 SYN ******S* Sep 22 14:16:28 217.255.95.79:64159 -> xxx.yyy.1.16:3306 SYN ******S* Sep 22 14:16:28 217.255.95.79:64633 -> xxx.yyy.1.20:3306 SYN ******S* Sep 22 14:16:28 217.255.95.79:63943 -> xxx.yyy.1.25:3306 SYN ******S* Sep 22 14:16:28 217.255.95.79:63507 -> xxx.yyy.1.26:3306 SYN ******S* Sep 22 14:16:28 217.255.95.79:65389 -> xxx.yyy.1.36:3306 SYN ******S* Sep 22 14:16:28 217.255.95.79:64987 -> xxx.yyy.1.37:3306 SYN ******S* [...] Sep 22 14:19:48 217.255.95.79:64729 -> xxx.yyy.255.221:3306 SYN ******S* Sep 22 14:19:48 217.255.95.79:65339 -> xxx.yyy.255.222:3306 SYN ******S* Sep 22 14:19:48 217.255.95.79:65423 -> xxx.yyy.255.224:3306 SYN ******S* Sep 22 14:19:48 217.255.95.79:65053 -> xxx.yyy.255.238:3306 SYN ******S* Sep 22 14:19:48 217.255.95.79:64645 -> xxx.yyy.255.244:3306 SYN ******S* Sep 22 14:19:48 217.255.95.79:63499 -> xxx.yyy.255.251:3306 SYN ******S* Sep 22 14:19:48 217.255.95.79:65173 -> xxx.yyy.255.252:3306 SYN ******S* Sep 22 14:19:48 217.255.95.79:63595 -> xxx.yyy.255.254:3306 SYN ******S* 10392 [...] 9458 Sep 22 19:16:02 217.10.198.10:25711 -> xxx.yyy.1.4:8000 SYN ******S* Sep 22 19:16:03 217.10.198.10:25724 -> xxx.yyy.1.17:8000 SYN ******S* Sep 22 19:16:02 217.10.198.10:25737 -> xxx.yyy.1.30:8000 SYN ******S* Sep 22 19:16:02 217.10.198.10:25813 -> xxx.yyy.1.106:8000 SYN ******S* Sep 22 19:16:02 217.10.198.10:25839 -> xxx.yyy.1.132:8000 SYN ******S* Sep 22 19:16:02 217.10.198.10:25775 -> xxx.yyy.1.68:8000 SYN ******S* Sep 22 19:16:02 217.10.198.10:25814 -> xxx.yyy.1.107:8000 SYN ******S* Sep 22 19:16:02 217.10.198.10:25790 -> xxx.yyy.1.83:8000 SYN ******S* [...] Sep 22 19:32:04 217.10.198.10:28185 -> xxx.yyy.255.56:8000 SYN ******S* Sep 22 19:32:04 217.10.198.10:28198 -> xxx.yyy.255.69:8000 SYN ******S* Sep 22 19:32:04 217.10.198.10:28237 -> xxx.yyy.255.108:8000 SYN ******S* Sep 22 19:32:04 217.10.198.10:28269 -> xxx.yyy.255.140:8000 SYN ******S* Sep 22 19:32:04 217.10.198.10:28339 -> xxx.yyy.255.210:8000 SYN ******S* Sep 22 19:32:04 217.10.198.10:28301 -> xxx.yyy.255.172:8000 SYN ******S* Sep 22 19:32:05 217.10.198.10:28298 -> xxx.yyy.255.169:8000 SYN ******S* Sep 22 19:32:05 217.10.198.10:28383 -> xxx.yyy.255.254:8000 SYN ******S* 8939 Sep 22 07:56:52 221.144.247.245:4843 -> xxx.yyy.154.100:5554 SYN ******S* Sep 22 07:56:53 221.144.247.245:3821 -> xxx.yyy.154.100:1023 SYN ******S* Sep 22 07:56:55 221.144.247.245:1555 -> xxx.yyy.154.100:9898 SYN ******S* Sep 22 07:56:52 221.144.247.245:1162 -> xxx.yyy.154.107:5554 SYN ******S* Sep 22 07:56:53 221.144.247.245:3851 -> xxx.yyy.154.107:1023 SYN ******S* Sep 22 07:56:55 221.144.247.245:2985 -> xxx.yyy.154.107:9898 SYN ******S* Sep 22 07:56:52 221.144.247.245:2130 -> xxx.yyy.154.138:5554 SYN ******S* Sep 22 07:56:53 221.144.247.245:4863 -> xxx.yyy.154.138:1023 SYN ******S* [...] Sep 22 07:57:58 221.144.247.245:4295 -> xxx.yyy.155.236:9898 SYN ******S* Sep 22 07:57:58 221.144.247.245:1763 -> xxx.yyy.156.8:9898 SYN ******S* Sep 22 07:57:58 221.144.247.245:4577 -> xxx.yyy.155.244:9898 SYN ******S* Sep 22 07:57:58 221.144.247.245:1900 -> xxx.yyy.156.14:9898 SYN ******S* Sep 22 07:57:58 221.144.247.245:4593 -> xxx.yyy.155.246:9898 SYN ******S* Sep 22 07:57:58 221.144.247.245:4637 -> xxx.yyy.155.249:9898 SYN ******S* Sep 22 07:57:58 221.144.247.245:2005 -> xxx.yyy.156.19:9898 SYN ******S* Sep 22 07:57:58 221.144.247.245:4879 -> xxx.yyy.155.254:9898 SYN ******S* Sep 22 07:57:58 221.144.247.245:1808 -> xxx.yyy.156.12:9898 SYN ******S* 8398 Sep 22 00:56:54 221.219.210.123:3395 -> xxx.yyy.198.57:5554 SYN ******S* Sep 22 00:56:55 221.219.210.123:3608 -> xxx.yyy.198.57:1023 SYN ******S* Sep 22 00:56:54 221.219.210.123:3394 -> xxx.yyy.198.56:5554 SYN ******S* Sep 22 00:56:55 221.219.210.123:3607 -> xxx.yyy.198.56:1023 SYN ******S* Sep 22 00:56:54 221.219.210.123:3393 -> xxx.yyy.198.55:5554 SYN ******S* Sep 22 00:56:54 221.219.210.123:3396 -> xxx.yyy.198.58:5554 SYN ******S* Sep 22 00:56:57 221.219.210.123:4137 -> xxx.yyy.198.58:9898 SYN ******S* Sep 22 00:56:54 221.219.210.123:3397 -> xxx.yyy.198.59:5554 SYN ******S* [...] Sep 22 00:58:19 221.219.210.123:3122 -> xxx.yyy.215.189:9898 SYN ******S* Sep 22 00:58:19 221.219.210.123:3138 -> xxx.yyy.215.193:9898 SYN ******S* Sep 22 00:58:19 221.219.210.123:3139 -> xxx.yyy.215.196:9898 SYN ******S* Sep 22 00:58:19 221.219.210.123:3141 -> xxx.yyy.215.200:9898 SYN ******S* Sep 22 00:58:19 221.219.210.123:3143 -> xxx.yyy.215.202:9898 SYN ******S* Sep 22 00:58:19 221.219.210.123:3142 -> xxx.yyy.215.201:9898 SYN ******S* Sep 22 00:58:19 221.219.210.123:3145 -> xxx.yyy.215.204:9898 SYN ******S* Sep 22 00:58:19 221.219.210.123:3148 -> xxx.yyy.215.180:9898 SYN ******S* Sep 22 00:58:19 221.219.210.123:3149 -> xxx.yyy.215.194:9898 SYN ******S* 7532 Sep 22 00:01:21 65.54.188.52:7847 -> xxx.yyy.241.255:80 SYN ******S* Sep 22 00:01:17 65.54.188.52:6444 -> xxx.yyy.241.179:80 SYN ******S* Sep 22 00:01:22 65.54.188.52:8025 -> xxx.yyy.241.20:80 SYN ******S* Sep 22 00:01:19 65.54.188.52:6747 -> xxx.yyy.225.192:591 SYN ******S* Sep 22 00:01:19 65.54.188.52:7052 -> xxx.yyy.241.29:80 SYN ******S* Sep 22 00:01:22 65.54.188.52:8102 -> xxx.yyy.212.103:80 SYN ******S* Sep 22 00:01:22 65.54.188.52:8115 -> xxx.yyy.1.13:80 SYN ******S* Sep 22 00:01:25 65.54.188.52:9135 -> xxx.yyy.241.255:80 SYN ******S* [...] Sep 22 22:47:53 65.54.188.52:31380 -> xxx.yyy.241.255:80 SYN ******S* Sep 22 22:47:53 65.54.188.52:31675 -> xxx.yyy.208.6:80 SYN ******S* Sep 22 22:47:54 65.54.188.52:31668 -> xxx.yyy.14.23:80 SYN ******S* Sep 22 22:47:55 65.54.188.52:32444 -> xxx.yyy.1.13:80 SYN ******S* Sep 22 23:13:54 65.54.188.52:14430 -> xxx.yyy.241.255:80 SYN ******S* Sep 22 23:13:55 65.54.188.52:14859 -> xxx.yyy.241.98:80 SYN ******S* Sep 22 23:13:58 65.54.188.52:14876 -> xxx.yyy.241.179:80 SYN ******S* Sep 22 23:13:59 65.54.188.52:15376 -> xxx.yyy.220.58:80 SYN ******S* Sep 22 23:14:00 65.54.188.52:15533 -> xxx.yyy.248.180:80 SYN ******S* 7163 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions