[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0500. Sep 24 00:01:18 211.20.42.21:63387 -> xxx.yyy.29.0:1433 SYN ******S* Sep 24 00:01:15 211.20.42.21:63393 -> xxx.yyy.29.1:1433 SYN ******S* Sep 24 00:01:15 211.20.42.21:63465 -> xxx.yyy.29.7:1433 SYN ******S* Sep 24 00:01:15 211.20.42.21:63519 -> xxx.yyy.29.13:1433 SYN ******S* Sep 24 00:01:19 211.20.42.21:63582 -> xxx.yyy.29.17:1433 SYN ******S* Sep 24 00:01:19 211.20.42.21:63630 -> xxx.yyy.29.18:1433 SYN ******S* Sep 24 00:01:19 211.20.42.21:63644 -> xxx.yyy.29.20:1433 SYN ******S* Sep 24 00:01:19 211.20.42.21:63653 -> xxx.yyy.29.22:1433 SYN ******S* [...] Sep 24 03:24:49 211.20.42.21:61544 -> xxx.yyy.255.246:1433 SYN ******S* Sep 24 03:24:50 211.20.42.21:61698 -> xxx.yyy.255.247:1433 SYN ******S* Sep 24 03:24:50 211.20.42.21:61712 -> xxx.yyy.255.248:1433 SYN ******S* Sep 24 03:24:50 211.20.42.21:61798 -> xxx.yyy.255.249:1433 SYN ******S* Sep 24 03:24:51 211.20.42.21:61855 -> xxx.yyy.255.251:1433 SYN ******S* Sep 24 03:24:51 211.20.42.21:61853 -> xxx.yyy.255.250:1433 SYN ******S* Sep 24 03:24:51 211.20.42.21:61893 -> xxx.yyy.255.252:1433 SYN ******S* Sep 24 03:24:51 211.20.42.21:62066 -> xxx.yyy.255.253:1433 SYN ******S* Sep 24 03:24:52 211.20.42.21:62082 -> xxx.yyy.255.254:1433 SYN ******S* 109554 Sep 24 08:40:35 212.194.101.49:3442 -> xxx.yyy.1.0:1433 SYN ******S* Sep 24 08:40:35 212.194.101.49:3444 -> xxx.yyy.1.1:1433 SYN ******S* Sep 24 08:40:35 212.194.101.49:3445 -> xxx.yyy.1.2:1433 SYN ******S* Sep 24 08:40:35 212.194.101.49:3446 -> xxx.yyy.1.3:1433 SYN ******S* Sep 24 08:40:35 212.194.101.49:3447 -> xxx.yyy.1.4:1433 SYN ******S* Sep 24 08:40:35 212.194.101.49:3448 -> xxx.yyy.1.5:1433 SYN ******S* Sep 24 08:40:35 212.194.101.49:3449 -> xxx.yyy.1.6:1433 SYN ******S* Sep 24 08:40:35 212.194.101.49:3450 -> xxx.yyy.1.7:1433 SYN ******S* [...] Sep 24 12:29:14 212.194.101.49:4269 -> xxx.yyy.255.245:1433 SYN ******S* Sep 24 12:29:14 212.194.101.49:4267 -> xxx.yyy.255.244:1433 SYN ******S* Sep 24 12:29:14 212.194.101.49:4265 -> xxx.yyy.255.243:1433 SYN ******S* Sep 24 12:29:14 212.194.101.49:4371 -> xxx.yyy.255.248:1433 SYN ******S* Sep 24 12:29:14 212.194.101.49:4383 -> xxx.yyy.255.254:1433 SYN ******S* Sep 24 12:29:14 212.194.101.49:4378 -> xxx.yyy.255.252:1433 SYN ******S* Sep 24 12:29:14 212.194.101.49:4377 -> xxx.yyy.255.251:1433 SYN ******S* Sep 24 12:29:14 212.194.101.49:4375 -> xxx.yyy.255.250:1433 SYN ******S* 72679 Sep 24 13:56:03 218.189.152.125:64183 -> xxx.yyy.1.0:1433 SYN ******S* Sep 24 13:56:04 218.189.152.125:61725 -> xxx.yyy.1.2:1433 SYN ******S* Sep 24 13:56:07 218.189.152.125:62510 -> xxx.yyy.1.38:1433 SYN ******S* Sep 24 13:56:07 218.189.152.125:65017 -> xxx.yyy.1.39:1433 SYN ******S* Sep 24 13:56:07 218.189.152.125:63686 -> xxx.yyy.1.40:1433 SYN ******S* Sep 24 13:56:07 218.189.152.125:63823 -> xxx.yyy.1.41:1433 SYN ******S* Sep 24 13:56:07 218.189.152.125:63784 -> xxx.yyy.1.43:1433 SYN ******S* Sep 24 13:56:07 218.189.152.125:62378 -> xxx.yyy.1.34:1433 SYN ******S* [...] Sep 24 17:44:47 218.189.152.125:64006 -> xxx.yyy.255.247:1433 SYN ******S* Sep 24 17:44:47 218.189.152.125:62852 -> xxx.yyy.255.248:1433 SYN ******S* Sep 24 17:44:47 218.189.152.125:64763 -> xxx.yyy.255.249:1433 SYN ******S* Sep 24 17:44:47 218.189.152.125:62215 -> xxx.yyy.255.250:1433 SYN ******S* Sep 24 17:44:48 218.189.152.125:63494 -> xxx.yyy.255.251:1433 SYN ******S* Sep 24 17:44:48 218.189.152.125:62460 -> xxx.yyy.255.252:1433 SYN ******S* Sep 24 17:44:48 218.189.152.125:62089 -> xxx.yyy.255.253:1433 SYN ******S* Sep 24 17:44:48 218.189.152.125:64699 -> xxx.yyy.255.254:1433 SYN ******S* 71501 Sep 24 06:49:01 81.195.184.194:28001 -> xxx.yyy.1.1:4000 SYN ******S* Sep 24 06:49:01 81.195.184.194:28004 -> xxx.yyy.1.2:4000 SYN ******S* Sep 24 06:49:01 81.195.184.194:28007 -> xxx.yyy.1.3:4000 SYN ******S* Sep 24 06:49:00 81.195.184.194:28010 -> xxx.yyy.1.4:4000 SYN ******S* Sep 24 06:49:00 81.195.184.194:28013 -> xxx.yyy.1.5:4000 SYN ******S* Sep 24 06:49:03 81.195.184.194:28016 -> xxx.yyy.1.6:4000 SYN ******S* Sep 24 06:49:03 81.195.184.194:28019 -> xxx.yyy.1.7:4000 SYN ******S* Sep 24 06:49:03 81.195.184.194:28022 -> xxx.yyy.1.8:4000 SYN ******S* [...] Sep 24 07:01:57 81.195.184.194:63493 -> xxx.yyy.255.235:4000 SYN ******S* Sep 24 07:01:57 81.195.184.194:63496 -> xxx.yyy.255.236:4000 SYN ******S* Sep 24 07:01:57 81.195.184.194:63505 -> xxx.yyy.255.239:4000 SYN ******S* Sep 24 07:01:57 81.195.184.194:63508 -> xxx.yyy.255.240:4000 SYN ******S* Sep 24 07:01:57 81.195.184.194:63538 -> xxx.yyy.255.250:4000 SYN ******S* Sep 24 07:01:57 81.195.184.194:63541 -> xxx.yyy.255.251:4000 SYN ******S* Sep 24 07:01:57 81.195.184.194:63544 -> xxx.yyy.255.252:4000 SYN ******S* Sep 24 07:01:57 81.195.184.194:63547 -> xxx.yyy.255.253:4000 SYN ******S* Sep 24 07:01:57 81.195.184.194:63550 -> xxx.yyy.255.254:4000 SYN ******S* 66778 Sep 24 11:11:23 212.244.37.68:1315 -> xxx.yyy.1.2:4899 SYN ******S* Sep 24 11:11:25 212.244.37.68:1317 -> xxx.yyy.1.4:4899 SYN ******S* Sep 24 11:11:22 212.244.37.68:1319 -> xxx.yyy.1.6:4899 SYN ******S* Sep 24 11:11:23 212.244.37.68:1325 -> xxx.yyy.1.11:4899 SYN ******S* Sep 24 11:11:22 212.244.37.68:1326 -> xxx.yyy.1.12:4899 SYN ******S* Sep 24 11:11:23 212.244.37.68:1331 -> xxx.yyy.1.17:4899 SYN ******S* Sep 24 11:11:23 212.244.37.68:1334 -> xxx.yyy.1.20:4899 SYN ******S* Sep 24 11:11:24 212.244.37.68:1335 -> xxx.yyy.1.21:4899 SYN ******S* [...] Sep 24 11:44:39 212.244.37.68:3540 -> xxx.yyy.255.215:4899 SYN ******S* Sep 24 11:44:40 212.244.37.68:3554 -> xxx.yyy.255.229:4899 SYN ******S* Sep 24 11:44:40 212.244.37.68:3555 -> xxx.yyy.255.230:4899 SYN ******S* Sep 24 11:44:40 212.244.37.68:3564 -> xxx.yyy.255.239:4899 SYN ******S* Sep 24 11:44:40 212.244.37.68:3565 -> xxx.yyy.255.240:4899 SYN ******S* Sep 24 11:44:40 212.244.37.68:3571 -> xxx.yyy.255.246:4899 SYN ******S* Sep 24 11:44:40 212.244.37.68:3570 -> xxx.yyy.255.245:4899 SYN ******S* Sep 24 11:44:40 212.244.37.68:3574 -> xxx.yyy.255.249:4899 SYN ******S* Sep 24 11:44:40 212.244.37.68:3577 -> xxx.yyy.255.252:4899 SYN ******S* 63153 Sep 24 14:51:53 217.151.177.168:3808 -> xxx.yyy.1.3:1433 SYN ******S* Sep 24 14:51:56 217.151.177.168:3810 -> xxx.yyy.1.4:1433 SYN ******S* Sep 24 14:51:56 217.151.177.168:3850 -> xxx.yyy.1.6:1433 SYN ******S* Sep 24 14:51:54 217.151.177.168:3854 -> xxx.yyy.1.7:1433 SYN ******S* Sep 24 14:51:57 217.151.177.168:3895 -> xxx.yyy.1.8:1433 SYN ******S* Sep 24 14:51:57 217.151.177.168:3931 -> xxx.yyy.1.9:1433 SYN ******S* Sep 24 14:51:57 217.151.177.168:3951 -> xxx.yyy.1.12:1433 SYN ******S* Sep 24 14:51:54 217.151.177.168:3992 -> xxx.yyy.1.14:1433 SYN ******S* [...] Sep 24 18:40:50 217.151.177.168:3604 -> xxx.yyy.255.233:1433 SYN ******S* Sep 24 18:40:51 217.151.177.168:3693 -> xxx.yyy.255.234:1433 SYN ******S* Sep 24 18:40:51 217.151.177.168:3790 -> xxx.yyy.255.235:1433 SYN ******S* Sep 24 18:40:52 217.151.177.168:3891 -> xxx.yyy.255.237:1433 SYN ******S* Sep 24 18:40:52 217.151.177.168:3889 -> xxx.yyy.255.236:1433 SYN ******S* Sep 24 18:40:52 217.151.177.168:3893 -> xxx.yyy.255.238:1433 SYN ******S* Sep 24 18:40:52 217.151.177.168:3900 -> xxx.yyy.255.239:1433 SYN ******S* Sep 24 18:40:52 217.151.177.168:3905 -> xxx.yyy.255.240:1433 SYN ******S* Sep 24 18:40:56 217.151.177.168:4102 -> xxx.yyy.255.254:1433 SYN ******S* 59747 Sep 24 07:22:57 217.127.40.220:3713 -> xxx.yyy.1.1:4000 SYN ******S* Sep 24 07:22:57 217.127.40.220:3714 -> xxx.yyy.1.2:4000 SYN ******S* Sep 24 07:22:57 217.127.40.220:3715 -> xxx.yyy.1.3:4000 SYN ******S* Sep 24 07:22:55 217.127.40.220:3717 -> xxx.yyy.1.5:4000 SYN ******S* Sep 24 07:22:55 217.127.40.220:3716 -> xxx.yyy.1.4:4000 SYN ******S* Sep 24 07:22:55 217.127.40.220:3718 -> xxx.yyy.1.6:4000 SYN ******S* Sep 24 07:22:55 217.127.40.220:3719 -> xxx.yyy.1.7:4000 SYN ******S* Sep 24 07:22:55 217.127.40.220:3720 -> xxx.yyy.1.8:4000 SYN ******S* [...] Sep 24 07:33:51 217.127.40.220:4197 -> xxx.yyy.255.243:4000 SYN ******S* Sep 24 07:33:51 217.127.40.220:4191 -> xxx.yyy.255.237:4000 SYN ******S* Sep 24 07:33:51 217.127.40.220:4198 -> xxx.yyy.255.244:4000 SYN ******S* Sep 24 07:33:51 217.127.40.220:4195 -> xxx.yyy.255.241:4000 SYN ******S* Sep 24 07:33:51 217.127.40.220:4192 -> xxx.yyy.255.238:4000 SYN ******S* Sep 24 07:33:51 217.127.40.220:4202 -> xxx.yyy.255.248:4000 SYN ******S* Sep 24 07:33:51 217.127.40.220:4203 -> xxx.yyy.255.249:4000 SYN ******S* Sep 24 07:33:51 217.127.40.220:4201 -> xxx.yyy.255.247:4000 SYN ******S* 58855 Sep 24 17:33:25 130.91.40.236:4859 -> xxx.yyy.1.1:1433 SYN ******S* Sep 24 17:33:25 130.91.40.236:4860 -> xxx.yyy.1.2:1433 SYN ******S* Sep 24 17:33:25 130.91.40.236:4861 -> xxx.yyy.1.3:1433 SYN ******S* Sep 24 17:33:25 130.91.40.236:4862 -> xxx.yyy.1.4:1433 SYN ******S* Sep 24 17:33:25 130.91.40.236:4863 -> xxx.yyy.1.5:1433 SYN ******S* Sep 24 17:33:25 130.91.40.236:4865 -> xxx.yyy.1.7:1433 SYN ******S* Sep 24 17:33:25 130.91.40.236:4866 -> xxx.yyy.1.8:1433 SYN ******S* Sep 24 17:33:25 130.91.40.236:4867 -> xxx.yyy.1.9:1433 SYN ******S* [...] Sep 24 17:44:19 130.91.40.236:3512 -> xxx.yyy.255.199:1433 SYN ******S* Sep 24 17:44:19 130.91.40.236:3516 -> xxx.yyy.255.203:1433 SYN ******S* Sep 24 17:44:19 130.91.40.236:3514 -> xxx.yyy.255.201:1433 SYN ******S* Sep 24 17:44:19 130.91.40.236:3513 -> xxx.yyy.255.200:1433 SYN ******S* Sep 24 17:44:19 130.91.40.236:3528 -> xxx.yyy.255.215:1433 SYN ******S* Sep 24 17:44:19 130.91.40.236:3525 -> xxx.yyy.255.212:1433 SYN ******S* Sep 24 17:44:19 130.91.40.236:3534 -> xxx.yyy.255.221:1433 SYN ******S* Sep 24 17:44:19 130.91.40.236:3532 -> xxx.yyy.255.219:1433 SYN ******S* Sep 24 17:44:19 130.91.40.236:3544 -> xxx.yyy.255.231:1433 SYN ******S* 56582 Sep 24 21:44:52 80.8.151.12:3363 -> xxx.yyy.1.0:1433 SYN ******S* Sep 24 21:44:52 80.8.151.12:3401 -> xxx.yyy.1.2:1433 SYN ******S* Sep 24 21:44:52 80.8.151.12:3377 -> xxx.yyy.1.1:1433 SYN ******S* Sep 24 21:44:52 80.8.151.12:3410 -> xxx.yyy.1.3:1433 SYN ******S* Sep 24 21:44:52 80.8.151.12:3535 -> xxx.yyy.1.6:1433 SYN ******S* Sep 24 21:44:52 80.8.151.12:3455 -> xxx.yyy.1.4:1433 SYN ******S* Sep 24 21:44:52 80.8.151.12:3496 -> xxx.yyy.1.5:1433 SYN ******S* Sep 24 21:44:55 80.8.151.12:3638 -> xxx.yyy.1.16:1433 SYN ******S* [...] Sep 24 23:59:58 80.8.151.12:3948 -> xxx.yyy.206.103:1433 SYN ******S* Sep 24 23:59:58 80.8.151.12:3752 -> xxx.yyy.206.69:1433 SYN ******S* Sep 24 23:59:58 80.8.151.12:4019 -> xxx.yyy.206.104:1433 SYN ******S* Sep 24 23:59:58 80.8.151.12:3848 -> xxx.yyy.206.70:1433 SYN ******S* Sep 24 23:59:58 80.8.151.12:4032 -> xxx.yyy.206.105:1433 SYN ******S* Sep 24 23:59:58 80.8.151.12:3858 -> xxx.yyy.206.71:1433 SYN ******S* Sep 24 23:59:58 80.8.151.12:4006 -> xxx.yyy.206.72:1433 SYN ******S* Sep 24 23:59:58 80.8.151.12:4105 -> xxx.yyy.206.107:1433 SYN ******S* Sep 24 23:59:58 80.8.151.12:4112 -> xxx.yyy.206.108:1433 SYN ******S* 47082 Sep 24 13:57:01 211.32.196.89:3842 -> xxx.yyy.1.1:1433 SYN ******S* Sep 24 13:57:01 211.32.196.89:3843 -> xxx.yyy.1.2:1433 SYN ******S* Sep 24 13:57:01 211.32.196.89:3844 -> xxx.yyy.1.3:1433 SYN ******S* Sep 24 13:56:58 211.32.196.89:3846 -> xxx.yyy.1.5:1433 SYN ******S* Sep 24 13:56:58 211.32.196.89:3848 -> xxx.yyy.1.7:1433 SYN ******S* Sep 24 13:56:58 211.32.196.89:3849 -> xxx.yyy.1.8:1433 SYN ******S* Sep 24 13:57:01 211.32.196.89:3850 -> xxx.yyy.1.9:1433 SYN ******S* Sep 24 13:57:01 211.32.196.89:3851 -> xxx.yyy.1.10:1433 SYN ******S* [...] Sep 24 14:08:39 211.32.196.89:2811 -> xxx.yyy.255.239:1433 SYN ******S* Sep 24 14:08:39 211.32.196.89:2812 -> xxx.yyy.255.240:1433 SYN ******S* Sep 24 14:08:39 211.32.196.89:2817 -> xxx.yyy.255.245:1433 SYN ******S* Sep 24 14:08:39 211.32.196.89:2813 -> xxx.yyy.255.241:1433 SYN ******S* Sep 24 14:08:39 211.32.196.89:2824 -> xxx.yyy.255.252:1433 SYN ******S* Sep 24 14:08:39 211.32.196.89:2825 -> xxx.yyy.255.253:1433 SYN ******S* Sep 24 14:08:39 211.32.196.89:2821 -> xxx.yyy.255.249:1433 SYN ******S* Sep 24 14:08:39 211.32.196.89:2826 -> xxx.yyy.255.254:1433 SYN ******S* Sep 24 14:08:39 211.32.196.89:2823 -> xxx.yyy.255.251:1433 SYN ******S* 39294 Sep 24 17:38:50 217.10.198.10:52641 -> xxx.yyy.1.6:8000 SYN ******S* Sep 24 17:38:51 217.10.198.10:52649 -> xxx.yyy.1.14:8000 SYN ******S* Sep 24 17:38:50 217.10.198.10:52666 -> xxx.yyy.1.31:8000 SYN ******S* Sep 24 17:38:50 217.10.198.10:52674 -> xxx.yyy.1.39:8000 SYN ******S* Sep 24 17:38:50 217.10.198.10:52682 -> xxx.yyy.1.47:8000 SYN ******S* Sep 24 17:38:51 217.10.198.10:52689 -> xxx.yyy.1.54:8000 SYN ******S* Sep 24 17:38:51 217.10.198.10:52697 -> xxx.yyy.1.62:8000 SYN ******S* Sep 24 17:38:50 217.10.198.10:52705 -> xxx.yyy.1.70:8000 SYN ******S* [...] Sep 24 19:02:35 217.10.198.10:34118 -> xxx.yyy.255.206:8000 SYN ******S* Sep 24 19:02:35 217.10.198.10:34131 -> xxx.yyy.255.219:8000 SYN ******S* Sep 24 19:02:35 217.10.198.10:34144 -> xxx.yyy.255.232:8000 SYN ******S* Sep 24 19:02:35 217.10.198.10:34119 -> xxx.yyy.255.207:8000 SYN ******S* Sep 24 19:02:35 217.10.198.10:34145 -> xxx.yyy.255.233:8000 SYN ******S* Sep 24 19:02:35 217.10.198.10:34132 -> xxx.yyy.255.220:8000 SYN ******S* Sep 24 19:02:35 217.10.198.10:34134 -> xxx.yyy.255.222:8000 SYN ******S* Sep 24 19:02:35 217.10.198.10:34161 -> xxx.yyy.255.249:8000 SYN ******S* 39034 Sep 24 17:05:38 193.128.182.110:1864 -> xxx.yyy.1.1:1433 SYN ******S* Sep 24 17:05:38 193.128.182.110:1867 -> xxx.yyy.1.2:1433 SYN ******S* Sep 24 17:05:38 193.128.182.110:1870 -> xxx.yyy.1.3:1433 SYN ******S* Sep 24 17:05:42 193.128.182.110:1873 -> xxx.yyy.1.4:1433 SYN ******S* Sep 24 17:05:39 193.128.182.110:1880 -> xxx.yyy.1.6:1433 SYN ******S* Sep 24 17:05:39 193.128.182.110:1883 -> xxx.yyy.1.7:1433 SYN ******S* Sep 24 17:05:39 193.128.182.110:1891 -> xxx.yyy.1.10:1433 SYN ******S* Sep 24 17:05:39 193.128.182.110:1895 -> xxx.yyy.1.11:1433 SYN ******S* [...] Sep 24 17:19:37 193.128.182.110:2782 -> xxx.yyy.255.86:1433 SYN ******S* Sep 24 17:19:37 193.128.182.110:2801 -> xxx.yyy.255.92:1433 SYN ******S* Sep 24 17:19:37 193.128.182.110:2802 -> xxx.yyy.255.93:1433 SYN ******S* Sep 24 17:19:37 193.128.182.110:2823 -> xxx.yyy.255.99:1433 SYN ******S* Sep 24 17:19:37 193.128.182.110:2847 -> xxx.yyy.255.107:1433 SYN ******S* Sep 24 17:19:38 193.128.182.110:2869 -> xxx.yyy.255.114:1433 SYN ******S* Sep 24 17:19:38 193.128.182.110:2888 -> xxx.yyy.255.120:1433 SYN ******S* Sep 24 17:19:38 193.128.182.110:2891 -> xxx.yyy.255.121:1433 SYN ******S* Sep 24 17:19:38 193.128.182.110:2966 -> xxx.yyy.255.145:1433 SYN ******S* 35946 Sep 24 08:33:57 80.137.247.99:1579 -> xxx.yyy.1.1:1433 SYN ******S* Sep 24 08:33:57 80.137.247.99:1581 -> xxx.yyy.1.2:1433 SYN ******S* Sep 24 08:33:57 80.137.247.99:1583 -> xxx.yyy.1.3:1433 SYN ******S* Sep 24 08:33:57 80.137.247.99:1585 -> xxx.yyy.1.4:1433 SYN ******S* Sep 24 08:33:58 80.137.247.99:1587 -> xxx.yyy.1.5:1433 SYN ******S* Sep 24 08:33:58 80.137.247.99:1589 -> xxx.yyy.1.6:1433 SYN ******S* Sep 24 08:33:55 80.137.247.99:1591 -> xxx.yyy.1.7:1433 SYN ******S* Sep 24 08:33:58 80.137.247.99:1593 -> xxx.yyy.1.8:1433 SYN ******S* [...] Sep 24 09:58:49 80.137.247.99:3794 -> xxx.yyy.254.250:1433 SYN ******S* Sep 24 09:58:50 80.137.247.99:3798 -> xxx.yyy.254.252:1433 SYN ******S* Sep 24 09:58:50 80.137.247.99:3810 -> xxx.yyy.255.2:1433 SYN ******S* Sep 24 09:58:50 80.137.247.99:3816 -> xxx.yyy.255.5:1433 SYN ******S* Sep 24 09:58:50 80.137.247.99:3822 -> xxx.yyy.255.8:1433 SYN ******S* Sep 24 09:58:51 80.137.247.99:3826 -> xxx.yyy.255.10:1433 SYN ******S* Sep 24 09:58:51 80.137.247.99:3828 -> xxx.yyy.255.11:1433 SYN ******S* Sep 24 09:58:51 80.137.247.99:3830 -> xxx.yyy.255.12:1433 SYN ******S* Sep 24 09:58:51 80.137.247.99:3832 -> xxx.yyy.255.13:1433 SYN ******S* 27492 Sep 24 09:16:52 210.200.243.53:3284 -> xxx.yyy.1.0:1433 SYN ******S* Sep 24 09:16:52 210.200.243.53:3287 -> xxx.yyy.1.3:1433 SYN ******S* Sep 24 09:16:52 210.200.243.53:3288 -> xxx.yyy.1.4:1433 SYN ******S* Sep 24 09:16:52 210.200.243.53:3289 -> xxx.yyy.1.5:1433 SYN ******S* Sep 24 09:16:52 210.200.243.53:3290 -> xxx.yyy.1.6:1433 SYN ******S* Sep 24 09:16:52 210.200.243.53:3292 -> xxx.yyy.1.8:1433 SYN ******S* Sep 24 09:16:52 210.200.243.53:3293 -> xxx.yyy.1.9:1433 SYN ******S* Sep 24 09:16:52 210.200.243.53:3294 -> xxx.yyy.1.10:1433 SYN ******S* [...] Sep 24 10:56:29 210.200.243.53:1432 -> xxx.yyy.111.243:1433 SYN ******S* Sep 24 10:56:29 210.200.243.53:1435 -> xxx.yyy.111.245:1433 SYN ******S* Sep 24 10:56:29 210.200.243.53:1433 -> xxx.yyy.111.244:1433 SYN ******S* Sep 24 10:56:29 210.200.243.53:1441 -> xxx.yyy.111.250:1433 SYN ******S* Sep 24 10:56:29 210.200.243.53:1439 -> xxx.yyy.111.248:1433 SYN ******S* Sep 24 10:56:30 210.200.243.53:1436 -> xxx.yyy.111.246:1433 SYN ******S* Sep 24 10:56:30 210.200.243.53:1443 -> xxx.yyy.111.252:1433 SYN ******S* Sep 24 10:56:30 210.200.243.53:1446 -> xxx.yyy.111.253:1433 SYN ******S* 22270 [...] 16762 Sep 24 07:09:37 222.99.138.181:3846 -> xxx.yyy.174.222:5554 SYN ******S* Sep 24 07:09:38 222.99.138.181:1216 -> xxx.yyy.174.222:1023 SYN ******S* Sep 24 07:09:40 222.99.138.181:2819 -> xxx.yyy.174.222:9898 SYN ******S* Sep 24 07:09:37 222.99.138.181:3895 -> xxx.yyy.174.223:5554 SYN ******S* Sep 24 07:09:38 222.99.138.181:1232 -> xxx.yyy.174.223:1023 SYN ******S* Sep 24 07:09:40 222.99.138.181:2833 -> xxx.yyy.174.223:9898 SYN ******S* Sep 24 07:09:37 222.99.138.181:3946 -> xxx.yyy.174.225:5554 SYN ******S* Sep 24 07:09:38 222.99.138.181:1247 -> xxx.yyy.174.225:1023 SYN ******S* [...] Sep 24 07:10:21 222.99.138.181:1967 -> xxx.yyy.195.84:9898 SYN ******S* Sep 24 07:10:21 222.99.138.181:1969 -> xxx.yyy.195.79:9898 SYN ******S* Sep 24 07:10:21 222.99.138.181:1975 -> xxx.yyy.195.67:9898 SYN ******S* Sep 24 07:10:21 222.99.138.181:1973 -> xxx.yyy.195.71:9898 SYN ******S* Sep 24 07:10:21 222.99.138.181:1962 -> xxx.yyy.195.87:9898 SYN ******S* Sep 24 07:10:21 222.99.138.181:1971 -> xxx.yyy.195.72:9898 SYN ******S* Sep 24 07:10:21 222.99.138.181:1968 -> xxx.yyy.195.83:9898 SYN ******S* Sep 24 07:10:21 222.99.138.181:1970 -> xxx.yyy.195.78:9898 SYN ******S* Sep 24 07:10:21 222.99.138.181:1976 -> xxx.yyy.195.66:9898 SYN ******S* 14477 Sep 24 23:53:44 61.83.120.112:2010 -> xxx.yyy.215.210:5554 SYN ******S* Sep 24 23:53:45 61.83.120.112:2552 -> xxx.yyy.215.210:1023 SYN ******S* Sep 24 23:53:47 61.83.120.112:3579 -> xxx.yyy.215.210:9898 SYN ******S* Sep 24 23:53:44 61.83.120.112:2015 -> xxx.yyy.215.211:5554 SYN ******S* Sep 24 23:53:45 61.83.120.112:2563 -> xxx.yyy.215.211:1023 SYN ******S* Sep 24 23:53:47 61.83.120.112:3587 -> xxx.yyy.215.211:9898 SYN ******S* Sep 24 23:53:44 61.83.120.112:2017 -> xxx.yyy.215.212:5554 SYN ******S* Sep 24 23:53:45 61.83.120.112:2564 -> xxx.yyy.215.212:1023 SYN ******S* [...] Sep 24 23:54:28 61.83.120.112:3338 -> xxx.yyy.224.56:9898 SYN ******S* Sep 24 23:54:28 61.83.120.112:3335 -> xxx.yyy.224.53:9898 SYN ******S* Sep 24 23:54:28 61.83.120.112:3334 -> xxx.yyy.224.52:9898 SYN ******S* Sep 24 23:54:28 61.83.120.112:3337 -> xxx.yyy.224.55:9898 SYN ******S* Sep 24 23:54:28 61.83.120.112:3340 -> xxx.yyy.224.58:9898 SYN ******S* Sep 24 23:54:28 61.83.120.112:3341 -> xxx.yyy.224.59:9898 SYN ******S* Sep 24 23:54:28 61.83.120.112:3333 -> xxx.yyy.224.51:9898 SYN ******S* Sep 24 23:54:28 61.83.120.112:3336 -> xxx.yyy.224.54:9898 SYN ******S* Sep 24 23:54:28 61.83.120.112:3339 -> xxx.yyy.224.57:9898 SYN ******S* 12290 Sep 24 00:52:31 218.24.86.36:42337 -> xxx.yyy.71.161:5554 SYN ******S* Sep 24 00:52:32 218.24.86.36:8804 -> xxx.yyy.71.161:1023 SYN ******S* Sep 24 00:52:34 218.24.86.36:18281 -> xxx.yyy.71.161:9898 SYN ******S* Sep 24 00:52:31 218.24.86.36:42593 -> xxx.yyy.71.163:5554 SYN ******S* Sep 24 00:52:32 218.24.86.36:9316 -> xxx.yyy.71.163:1023 SYN ******S* Sep 24 00:52:31 218.24.86.36:42849 -> xxx.yyy.71.160:5554 SYN ******S* Sep 24 00:52:32 218.24.86.36:9060 -> xxx.yyy.71.160:1023 SYN ******S* Sep 24 00:52:34 218.24.86.36:18537 -> xxx.yyy.71.160:9898 SYN ******S* [...] Sep 24 00:53:13 218.24.86.36:9922 -> xxx.yyy.91.215:9898 SYN ******S* Sep 24 00:53:13 218.24.86.36:11458 -> xxx.yyy.91.217:9898 SYN ******S* Sep 24 00:53:13 218.24.86.36:11714 -> xxx.yyy.91.218:9898 SYN ******S* Sep 24 00:53:13 218.24.86.36:35778 -> xxx.yyy.91.236:9898 SYN ******S* Sep 24 00:53:13 218.24.86.36:40130 -> xxx.yyy.91.239:9898 SYN ******S* Sep 24 00:53:14 218.24.86.36:42434 -> xxx.yyy.91.240:9898 SYN ******S* Sep 24 00:53:14 218.24.86.36:63682 -> xxx.yyy.91.241:9898 SYN ******S* Sep 24 00:53:14 218.24.86.36:8387 -> xxx.yyy.92.15:9898 SYN ******S* 12116 Sep 24 23:52:37 220.100.201.97:1468 -> xxx.yyy.71.160:5554 SYN ******S* Sep 24 23:52:38 220.100.201.97:2176 -> xxx.yyy.71.160:1023 SYN ******S* Sep 24 23:52:40 220.100.201.97:3204 -> xxx.yyy.71.160:9898 SYN ******S* Sep 24 23:52:37 220.100.201.97:1469 -> xxx.yyy.71.161:5554 SYN ******S* Sep 24 23:52:38 220.100.201.97:2177 -> xxx.yyy.71.161:1023 SYN ******S* Sep 24 23:52:40 220.100.201.97:3205 -> xxx.yyy.71.161:9898 SYN ******S* Sep 24 23:52:37 220.100.201.97:1470 -> xxx.yyy.71.162:5554 SYN ******S* Sep 24 23:52:38 220.100.201.97:2178 -> xxx.yyy.71.162:1023 SYN ******S* [...] Sep 24 23:53:18 220.100.201.97:2188 -> xxx.yyy.91.253:9898 SYN ******S* Sep 24 23:53:18 220.100.201.97:2189 -> xxx.yyy.92.7:9898 SYN ******S* Sep 24 23:53:18 220.100.201.97:2190 -> xxx.yyy.92.6:9898 SYN ******S* Sep 24 23:53:18 220.100.201.97:2191 -> xxx.yyy.92.8:9898 SYN ******S* Sep 24 23:53:18 220.100.201.97:2192 -> xxx.yyy.92.11:9898 SYN ******S* Sep 24 23:53:18 220.100.201.97:2193 -> xxx.yyy.92.12:9898 SYN ******S* Sep 24 23:53:18 220.100.201.97:2194 -> xxx.yyy.92.13:9898 SYN ******S* Sep 24 23:53:18 220.100.201.97:2196 -> xxx.yyy.92.9:9898 SYN ******S* Sep 24 23:53:18 220.100.201.97:2201 -> xxx.yyy.92.23:9898 SYN ******S* 10843 Sep 24 00:10:43 65.54.188.52:40537 -> xxx.yyy.12.25:80 SYN ******S* Sep 24 00:10:43 65.54.188.52:40555 -> xxx.yyy.236.22:80 SYN ******S* Sep 24 00:10:44 65.54.188.52:40759 -> xxx.yyy.241.30:80 SYN ******S* Sep 24 00:10:44 65.54.188.52:40801 -> xxx.yyy.249.5:80 SYN ******S* Sep 24 00:10:45 65.54.188.52:40969 -> xxx.yyy.241.72:80 SYN ******S* Sep 24 00:10:50 65.54.188.52:41746 -> xxx.yyy.1.63:80 SYN ******S* Sep 24 00:10:50 65.54.188.52:41738 -> xxx.yyy.232.168:80 SYN ******S* Sep 24 00:10:51 65.54.188.52:41817 -> xxx.yyy.213.66:80 SYN ******S* [...] Sep 24 23:51:47 65.54.188.52:16050 -> xxx.yyy.241.179:80 SYN ******S* Sep 24 23:51:51 65.54.188.52:17387 -> xxx.yyy.1.13:80 SYN ******S* Sep 24 23:51:51 65.54.188.52:17533 -> xxx.yyy.241.179:80 SYN ******S* Sep 24 23:51:53 65.54.188.52:17970 -> xxx.yyy.1.13:80 SYN ******S* Sep 24 23:54:00 65.54.188.52:23035 -> xxx.yyy.241.179:80 SYN ******S* Sep 24 23:54:00 65.54.188.52:23053 -> xxx.yyy.1.13:80 SYN ******S* Sep 24 23:54:01 65.54.188.52:23221 -> xxx.yyy.220.58:80 SYN ******S* Sep 24 23:54:04 65.54.188.52:23323 -> xxx.yyy.249.31:80 SYN ******S* Sep 24 23:54:04 65.54.188.52:23352 -> xxx.yyy.248.180:80 SYN ******S* 10743 Sep 24 23:54:50 221.161.241.248:4199 -> xxx.yyy.71.167:5554 SYN ******S* Sep 24 23:54:51 221.161.241.248:4409 -> xxx.yyy.71.167:1023 SYN ******S* Sep 24 23:54:53 221.161.241.248:3063 -> xxx.yyy.71.167:9898 SYN ******S* Sep 24 23:54:50 221.161.241.248:4203 -> xxx.yyy.71.172:5554 SYN ******S* Sep 24 23:54:51 221.161.241.248:4414 -> xxx.yyy.71.172:1023 SYN ******S* Sep 24 23:54:53 221.161.241.248:3068 -> xxx.yyy.71.172:9898 SYN ******S* Sep 24 23:54:50 221.161.241.248:4204 -> xxx.yyy.71.173:5554 SYN ******S* Sep 24 23:54:51 221.161.241.248:4415 -> xxx.yyy.71.173:1023 SYN ******S* [...] Sep 24 23:56:22 221.161.241.248:3413 -> xxx.yyy.92.12:9898 SYN ******S* Sep 24 23:56:22 221.161.241.248:3405 -> xxx.yyy.92.4:9898 SYN ******S* Sep 24 23:56:22 221.161.241.248:3414 -> xxx.yyy.92.13:9898 SYN ******S* Sep 24 23:56:22 221.161.241.248:3406 -> xxx.yyy.92.5:9898 SYN ******S* Sep 24 23:56:22 221.161.241.248:3407 -> xxx.yyy.92.6:9898 SYN ******S* Sep 24 23:56:22 221.161.241.248:3417 -> xxx.yyy.92.16:9898 SYN ******S* Sep 24 23:56:22 221.161.241.248:3404 -> xxx.yyy.92.3:9898 SYN ******S* Sep 24 23:56:22 221.161.241.248:3423 -> xxx.yyy.92.22:9898 SYN ******S* 9840 Sep 24 00:01:04 60.236.8.70:1943 -> xxx.yyy.133.234:5554 SYN ******S* Sep 24 00:01:05 60.236.8.70:3144 -> xxx.yyy.133.234:1023 SYN ******S* Sep 24 00:01:04 60.236.8.70:1944 -> xxx.yyy.133.235:5554 SYN ******S* Sep 24 00:01:05 60.236.8.70:3145 -> xxx.yyy.133.235:1023 SYN ******S* Sep 24 00:01:04 60.236.8.70:1945 -> xxx.yyy.133.236:5554 SYN ******S* Sep 24 00:01:04 60.236.8.70:1946 -> xxx.yyy.133.237:5554 SYN ******S* Sep 24 00:01:05 60.236.8.70:3232 -> xxx.yyy.133.237:1023 SYN ******S* Sep 24 00:01:07 60.236.8.70:1087 -> xxx.yyy.133.237:9898 SYN ******S* [...] Sep 24 00:02:05 60.236.8.70:1465 -> xxx.yyy.154.90:9898 SYN ******S* Sep 24 00:02:05 60.236.8.70:1466 -> xxx.yyy.154.91:9898 SYN ******S* Sep 24 00:02:05 60.236.8.70:1471 -> xxx.yyy.154.93:9898 SYN ******S* Sep 24 00:02:05 60.236.8.70:1470 -> xxx.yyy.154.92:9898 SYN ******S* Sep 24 00:02:05 60.236.8.70:1472 -> xxx.yyy.154.94:9898 SYN ******S* Sep 24 00:02:05 60.236.8.70:1474 -> xxx.yyy.154.95:9898 SYN ******S* Sep 24 00:02:05 60.236.8.70:1489 -> xxx.yyy.154.96:9898 SYN ******S* Sep 24 00:02:05 60.236.8.70:1608 -> xxx.yyy.154.99:9898 SYN ******S* Sep 24 00:02:05 60.236.8.70:1610 -> xxx.yyy.154.100:9898 SYN ******S* 9374 Sep 24 00:56:58 61.51.81.220:1333 -> xxx.yyy.215.222:5554 SYN ******S* Sep 24 00:56:59 61.51.81.220:1795 -> xxx.yyy.215.222:1023 SYN ******S* Sep 24 00:57:01 61.51.81.220:1243 -> xxx.yyy.215.222:9898 SYN ******S* Sep 24 00:56:58 61.51.81.220:1337 -> xxx.yyy.215.217:5554 SYN ******S* Sep 24 00:56:59 61.51.81.220:1803 -> xxx.yyy.215.217:1023 SYN ******S* Sep 24 00:57:01 61.51.81.220:1250 -> xxx.yyy.215.217:9898 SYN ******S* Sep 24 00:56:58 61.51.81.220:1336 -> xxx.yyy.215.218:5554 SYN ******S* Sep 24 00:56:59 61.51.81.220:1808 -> xxx.yyy.215.218:1023 SYN ******S* [...] Sep 24 00:57:40 61.51.81.220:1851 -> xxx.yyy.236.60:9898 SYN ******S* Sep 24 00:57:40 61.51.81.220:1852 -> xxx.yyy.236.61:9898 SYN ******S* Sep 24 00:57:40 61.51.81.220:1854 -> xxx.yyy.236.63:9898 SYN ******S* Sep 24 00:57:40 61.51.81.220:1855 -> xxx.yyy.236.64:9898 SYN ******S* Sep 24 00:57:40 61.51.81.220:1866 -> xxx.yyy.236.70:9898 SYN ******S* Sep 24 00:57:40 61.51.81.220:1870 -> xxx.yyy.236.72:9898 SYN ******S* Sep 24 00:57:40 61.51.81.220:1873 -> xxx.yyy.236.73:9898 SYN ******S* Sep 24 00:57:40 61.51.81.220:1871 -> xxx.yyy.236.69:9898 SYN ******S* Sep 24 00:57:40 61.51.81.220:1872 -> xxx.yyy.236.68:9898 SYN ******S* 9026 Sep 24 11:56:47 218.110.39.242:4317 -> xxx.yyy.174.5:5554 SYN ******S* Sep 24 11:56:48 218.110.39.242:1172 -> xxx.yyy.174.5:1023 SYN ******S* Sep 24 11:56:50 218.110.39.242:2205 -> xxx.yyy.174.5:9898 SYN ******S* Sep 24 11:56:47 218.110.39.242:4319 -> xxx.yyy.174.6:5554 SYN ******S* Sep 24 11:56:48 218.110.39.242:1173 -> xxx.yyy.174.6:1023 SYN ******S* Sep 24 11:56:50 218.110.39.242:2206 -> xxx.yyy.174.6:9898 SYN ******S* Sep 24 11:56:47 218.110.39.242:4341 -> xxx.yyy.174.9:5554 SYN ******S* Sep 24 11:56:48 218.110.39.242:1180 -> xxx.yyy.174.9:1023 SYN ******S* [...] Sep 24 11:57:32 218.110.39.242:3735 -> xxx.yyy.194.112:9898 SYN ******S* Sep 24 11:57:32 218.110.39.242:3736 -> xxx.yyy.194.113:9898 SYN ******S* Sep 24 11:57:32 218.110.39.242:3737 -> xxx.yyy.194.114:9898 SYN ******S* Sep 24 11:57:32 218.110.39.242:3738 -> xxx.yyy.194.115:9898 SYN ******S* Sep 24 11:57:32 218.110.39.242:3739 -> xxx.yyy.194.116:9898 SYN ******S* Sep 24 11:57:32 218.110.39.242:3743 -> xxx.yyy.194.118:9898 SYN ******S* Sep 24 11:57:32 218.110.39.242:3744 -> xxx.yyy.194.119:9898 SYN ******S* Sep 24 11:57:32 218.110.39.242:3768 -> xxx.yyy.194.124:9898 SYN ******S* 9025 Sep 24 00:53:10 61.177.48.186:32840 -> xxx.yyy.174.2:5554 SYN ******S* Sep 24 00:53:10 61.177.48.186:32852 -> xxx.yyy.174.3:5554 SYN ******S* Sep 24 00:53:10 61.177.48.186:32854 -> xxx.yyy.174.5:5554 SYN ******S* Sep 24 00:53:11 61.177.48.186:29861 -> xxx.yyy.174.5:1023 SYN ******S* Sep 24 00:53:10 61.177.48.186:32856 -> xxx.yyy.174.7:5554 SYN ******S* Sep 24 00:53:11 61.177.48.186:29863 -> xxx.yyy.174.7:1023 SYN ******S* Sep 24 00:53:10 61.177.48.186:32857 -> xxx.yyy.174.8:5554 SYN ******S* Sep 24 00:53:11 61.177.48.186:29864 -> xxx.yyy.174.8:1023 SYN ******S* [...] Sep 24 00:55:24 61.177.48.186:49987 -> xxx.yyy.194.95:9898 SYN ******S* Sep 24 00:55:24 61.177.48.186:49989 -> xxx.yyy.194.97:9898 SYN ******S* Sep 24 00:55:24 61.177.48.186:50031 -> xxx.yyy.194.98:9898 SYN ******S* Sep 24 00:55:24 61.177.48.186:50032 -> xxx.yyy.194.99:9898 SYN ******S* Sep 24 00:55:24 61.177.48.186:50033 -> xxx.yyy.194.100:9898 SYN ******S* Sep 24 00:55:24 61.177.48.186:50034 -> xxx.yyy.194.101:9898 SYN ******S* Sep 24 00:55:24 61.177.48.186:50037 -> xxx.yyy.194.104:9898 SYN ******S* Sep 24 00:55:25 61.177.48.186:50094 -> xxx.yyy.194.122:9898 SYN ******S* 8045 Sep 24 13:33:37 80.137.237.252:2703 -> xxx.yyy.1.55:1433 SYN ******S* Sep 24 13:33:35 80.137.237.252:2709 -> xxx.yyy.1.58:1433 SYN ******S* Sep 24 13:33:35 80.137.237.252:2711 -> xxx.yyy.1.59:1433 SYN ******S* Sep 24 13:33:35 80.137.237.252:2714 -> xxx.yyy.1.60:1433 SYN ******S* Sep 24 13:33:35 80.137.237.252:2715 -> xxx.yyy.1.61:1433 SYN ******S* Sep 24 13:33:38 80.137.237.252:2726 -> xxx.yyy.1.66:1433 SYN ******S* Sep 24 13:33:38 80.137.237.252:2730 -> xxx.yyy.1.68:1433 SYN ******S* Sep 24 13:33:38 80.137.237.252:2735 -> xxx.yyy.1.71:1433 SYN ******S* [...] Sep 24 14:07:37 80.137.237.252:1250 -> xxx.yyy.254.126:1433 SYN ******S* Sep 24 14:07:37 80.137.237.252:1256 -> xxx.yyy.254.132:1433 SYN ******S* Sep 24 14:07:38 80.137.237.252:1272 -> xxx.yyy.254.148:1433 SYN ******S* Sep 24 14:07:38 80.137.237.252:1273 -> xxx.yyy.254.149:1433 SYN ******S* Sep 24 14:07:38 80.137.237.252:1274 -> xxx.yyy.254.150:1433 SYN ******S* Sep 24 14:07:38 80.137.237.252:1275 -> xxx.yyy.254.151:1433 SYN ******S* Sep 24 14:07:38 80.137.237.252:1276 -> xxx.yyy.254.152:1433 SYN ******S* Sep 24 14:07:38 80.137.237.252:1277 -> xxx.yyy.254.153:1433 SYN ******S* 7642 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions