[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0500. [...] 78315 Sep 26 02:57:58 213.214.241.16:1387 -> xxx.yyy.1.1:1433 SYN ******S* Sep 26 02:57:58 213.214.241.16:1388 -> xxx.yyy.1.2:1433 SYN ******S* Sep 26 02:57:58 213.214.241.16:1389 -> xxx.yyy.1.3:1433 SYN ******S* Sep 26 02:57:58 213.214.241.16:1390 -> xxx.yyy.1.4:1433 SYN ******S* Sep 26 02:57:55 213.214.241.16:1391 -> xxx.yyy.1.5:1433 SYN ******S* Sep 26 02:57:58 213.214.241.16:1392 -> xxx.yyy.1.6:1433 SYN ******S* Sep 26 02:57:58 213.214.241.16:1393 -> xxx.yyy.1.7:1433 SYN ******S* Sep 26 02:57:58 213.214.241.16:1394 -> xxx.yyy.1.8:1433 SYN ******S* [...] Sep 26 03:08:50 213.214.241.16:4172 -> xxx.yyy.255.240:1433 SYN ******S* Sep 26 03:08:50 213.214.241.16:4179 -> xxx.yyy.255.247:1433 SYN ******S* Sep 26 03:08:50 213.214.241.16:4183 -> xxx.yyy.255.251:1433 SYN ******S* Sep 26 03:08:50 213.214.241.16:4186 -> xxx.yyy.255.254:1433 SYN ******S* Sep 26 03:08:50 213.214.241.16:4184 -> xxx.yyy.255.252:1433 SYN ******S* Sep 26 03:08:50 213.214.241.16:4181 -> xxx.yyy.255.249:1433 SYN ******S* Sep 26 03:08:50 213.214.241.16:4185 -> xxx.yyy.255.253:1433 SYN ******S* Sep 26 03:08:50 213.214.241.16:4182 -> xxx.yyy.255.250:1433 SYN ******S* 73333 Sep 26 03:46:49 67.155.152.126:2448 -> xxx.yyy.1.1:4000 SYN ******S* Sep 26 03:46:49 67.155.152.126:2449 -> xxx.yyy.1.2:4000 SYN ******S* Sep 26 03:46:49 67.155.152.126:2450 -> xxx.yyy.1.3:4000 SYN ******S* Sep 26 03:46:51 67.155.152.126:2451 -> xxx.yyy.1.4:4000 SYN ******S* Sep 26 03:46:51 67.155.152.126:2452 -> xxx.yyy.1.5:4000 SYN ******S* Sep 26 03:46:51 67.155.152.126:2453 -> xxx.yyy.1.6:4000 SYN ******S* Sep 26 03:46:51 67.155.152.126:2454 -> xxx.yyy.1.7:4000 SYN ******S* Sep 26 03:46:51 67.155.152.126:2455 -> xxx.yyy.1.8:4000 SYN ******S* [...] Sep 26 03:58:10 67.155.152.126:1342 -> xxx.yyy.255.238:4000 SYN ******S* Sep 26 03:58:10 67.155.152.126:1356 -> xxx.yyy.255.252:4000 SYN ******S* Sep 26 03:58:10 67.155.152.126:1353 -> xxx.yyy.255.249:4000 SYN ******S* Sep 26 03:58:10 67.155.152.126:1357 -> xxx.yyy.255.253:4000 SYN ******S* Sep 26 03:58:10 67.155.152.126:1354 -> xxx.yyy.255.250:4000 SYN ******S* Sep 26 03:58:10 67.155.152.126:1358 -> xxx.yyy.255.254:4000 SYN ******S* Sep 26 03:58:10 67.155.152.126:1355 -> xxx.yyy.255.251:4000 SYN ******S* Sep 26 03:58:10 67.155.152.126:1352 -> xxx.yyy.255.248:4000 SYN ******S* 72774 Sep 26 04:06:30 68.109.251.131:3363 -> xxx.yyy.1.1:1433 SYN ******S* Sep 26 04:06:33 68.109.251.131:3364 -> xxx.yyy.1.2:1433 SYN ******S* Sep 26 04:06:33 68.109.251.131:3365 -> xxx.yyy.1.3:1433 SYN ******S* Sep 26 04:06:33 68.109.251.131:3366 -> xxx.yyy.1.4:1433 SYN ******S* Sep 26 04:06:33 68.109.251.131:3367 -> xxx.yyy.1.5:1433 SYN ******S* Sep 26 04:06:33 68.109.251.131:3369 -> xxx.yyy.1.7:1433 SYN ******S* Sep 26 04:06:33 68.109.251.131:3370 -> xxx.yyy.1.8:1433 SYN ******S* Sep 26 04:06:33 68.109.251.131:3371 -> xxx.yyy.1.9:1433 SYN ******S* [...] Sep 26 04:18:27 68.109.251.131:1794 -> xxx.yyy.255.245:1433 SYN ******S* Sep 26 04:18:27 68.109.251.131:1795 -> xxx.yyy.255.246:1433 SYN ******S* Sep 26 04:18:27 68.109.251.131:1796 -> xxx.yyy.255.247:1433 SYN ******S* Sep 26 04:18:27 68.109.251.131:1799 -> xxx.yyy.255.250:1433 SYN ******S* Sep 26 04:18:27 68.109.251.131:1800 -> xxx.yyy.255.251:1433 SYN ******S* Sep 26 04:18:27 68.109.251.131:1801 -> xxx.yyy.255.252:1433 SYN ******S* Sep 26 04:18:27 68.109.251.131:1802 -> xxx.yyy.255.253:1433 SYN ******S* Sep 26 04:18:27 68.109.251.131:1803 -> xxx.yyy.255.254:1433 SYN ******S* 71738 Sep 26 04:29:47 140.137.61.88:3563 -> xxx.yyy.1.1:1433 SYN ******S* Sep 26 04:29:47 140.137.61.88:3564 -> xxx.yyy.1.2:1433 SYN ******S* Sep 26 04:29:44 140.137.61.88:3565 -> xxx.yyy.1.3:1433 SYN ******S* Sep 26 04:29:47 140.137.61.88:3566 -> xxx.yyy.1.4:1433 SYN ******S* Sep 26 04:29:47 140.137.61.88:3567 -> xxx.yyy.1.5:1433 SYN ******S* Sep 26 04:29:47 140.137.61.88:3568 -> xxx.yyy.1.6:1433 SYN ******S* Sep 26 04:29:47 140.137.61.88:3569 -> xxx.yyy.1.7:1433 SYN ******S* Sep 26 04:29:47 140.137.61.88:3570 -> xxx.yyy.1.8:1433 SYN ******S* [...] Sep 26 04:41:23 140.137.61.88:2392 -> xxx.yyy.255.244:1433 SYN ******S* Sep 26 04:41:23 140.137.61.88:2396 -> xxx.yyy.255.248:1433 SYN ******S* Sep 26 04:41:23 140.137.61.88:2389 -> xxx.yyy.255.241:1433 SYN ******S* Sep 26 04:41:23 140.137.61.88:2393 -> xxx.yyy.255.245:1433 SYN ******S* Sep 26 04:41:23 140.137.61.88:2390 -> xxx.yyy.255.242:1433 SYN ******S* Sep 26 04:41:23 140.137.61.88:2400 -> xxx.yyy.255.252:1433 SYN ******S* Sep 26 04:41:23 140.137.61.88:2401 -> xxx.yyy.255.253:1433 SYN ******S* Sep 26 04:41:23 140.137.61.88:2402 -> xxx.yyy.255.254:1433 SYN ******S* Sep 26 04:41:23 140.137.61.88:2399 -> xxx.yyy.255.251:1433 SYN ******S* 70641 Sep 26 09:40:31 205.160.235.246:1866 -> xxx.yyy.1.1:8000 SYN ******S* Sep 26 09:40:31 205.160.235.246:1868 -> xxx.yyy.1.2:8000 SYN ******S* Sep 26 09:40:31 205.160.235.246:1870 -> xxx.yyy.1.3:8000 SYN ******S* Sep 26 09:40:33 205.160.235.246:1872 -> xxx.yyy.1.4:8000 SYN ******S* Sep 26 09:40:33 205.160.235.246:1874 -> xxx.yyy.1.5:8000 SYN ******S* Sep 26 09:40:30 205.160.235.246:1876 -> xxx.yyy.1.6:8000 SYN ******S* Sep 26 09:40:33 205.160.235.246:1878 -> xxx.yyy.1.7:8000 SYN ******S* Sep 26 09:40:33 205.160.235.246:1880 -> xxx.yyy.1.8:8000 SYN ******S* [...] Sep 26 09:54:33 205.160.235.246:2245 -> xxx.yyy.255.221:8000 SYN ******S* Sep 26 09:54:33 205.160.235.246:2241 -> xxx.yyy.255.219:8000 SYN ******S* Sep 26 09:54:33 205.160.235.246:2235 -> xxx.yyy.255.216:8000 SYN ******S* Sep 26 09:54:33 205.160.235.246:2239 -> xxx.yyy.255.218:8000 SYN ******S* Sep 26 09:54:33 205.160.235.246:2249 -> xxx.yyy.255.223:8000 SYN ******S* Sep 26 09:54:33 205.160.235.246:2233 -> xxx.yyy.255.215:8000 SYN ******S* Sep 26 09:54:34 205.160.235.246:2257 -> xxx.yyy.255.227:8000 SYN ******S* Sep 26 09:54:34 205.160.235.246:2253 -> xxx.yyy.255.225:8000 SYN ******S* Sep 26 09:54:34 205.160.235.246:2255 -> xxx.yyy.255.226:8000 SYN ******S* 69850 Sep 26 11:53:57 81.93.103.203:1255 -> xxx.yyy.1.1:1433 SYN ******S* Sep 26 11:53:57 81.93.103.203:1256 -> xxx.yyy.1.2:1433 SYN ******S* Sep 26 11:53:57 81.93.103.203:1257 -> xxx.yyy.1.3:1433 SYN ******S* Sep 26 11:53:57 81.93.103.203:1258 -> xxx.yyy.1.4:1433 SYN ******S* Sep 26 11:53:57 81.93.103.203:1259 -> xxx.yyy.1.5:1433 SYN ******S* Sep 26 11:53:57 81.93.103.203:1260 -> xxx.yyy.1.6:1433 SYN ******S* Sep 26 11:53:57 81.93.103.203:1261 -> xxx.yyy.1.7:1433 SYN ******S* Sep 26 11:53:57 81.93.103.203:1262 -> xxx.yyy.1.8:1433 SYN ******S* [...] Sep 26 12:05:36 81.93.103.203:4106 -> xxx.yyy.255.246:1433 SYN ******S* Sep 26 12:05:36 81.93.103.203:4103 -> xxx.yyy.255.243:1433 SYN ******S* Sep 26 12:05:36 81.93.103.203:4110 -> xxx.yyy.255.250:1433 SYN ******S* Sep 26 12:05:36 81.93.103.203:4107 -> xxx.yyy.255.247:1433 SYN ******S* Sep 26 12:05:36 81.93.103.203:4104 -> xxx.yyy.255.244:1433 SYN ******S* Sep 26 12:05:36 81.93.103.203:4108 -> xxx.yyy.255.248:1433 SYN ******S* Sep 26 12:05:36 81.93.103.203:4105 -> xxx.yyy.255.245:1433 SYN ******S* Sep 26 12:05:36 81.93.103.203:4113 -> xxx.yyy.255.253:1433 SYN ******S* Sep 26 12:05:36 81.93.103.203:4114 -> xxx.yyy.255.254:1433 SYN ******S* 66997 Sep 26 19:51:46 216.229.142.202:2314 -> xxx.yyy.1.1:4899 SYN ******S* Sep 26 19:51:46 216.229.142.202:2315 -> xxx.yyy.1.2:4899 SYN ******S* Sep 26 19:51:46 216.229.142.202:2317 -> xxx.yyy.1.3:4899 SYN ******S* Sep 26 19:51:48 216.229.142.202:2318 -> xxx.yyy.1.4:4899 SYN ******S* Sep 26 19:51:48 216.229.142.202:2319 -> xxx.yyy.1.5:4899 SYN ******S* Sep 26 19:51:48 216.229.142.202:2322 -> xxx.yyy.1.6:4899 SYN ******S* Sep 26 19:51:48 216.229.142.202:2324 -> xxx.yyy.1.7:4899 SYN ******S* Sep 26 19:51:48 216.229.142.202:2325 -> xxx.yyy.1.8:4899 SYN ******S* [...] Sep 26 20:03:34 216.229.142.202:3102 -> xxx.yyy.255.218:4899 SYN ******S* Sep 26 20:03:34 216.229.142.202:3142 -> xxx.yyy.255.244:4899 SYN ******S* Sep 26 20:03:34 216.229.142.202:3130 -> xxx.yyy.255.235:4899 SYN ******S* Sep 26 20:03:34 216.229.142.202:3125 -> xxx.yyy.255.230:4899 SYN ******S* Sep 26 20:03:34 216.229.142.202:3105 -> xxx.yyy.255.219:4899 SYN ******S* Sep 26 20:03:37 216.229.142.202:3046 -> xxx.yyy.255.192:4899 SYN ******S* Sep 26 20:03:40 216.229.142.202:3067 -> xxx.yyy.255.203:4899 SYN ******S* Sep 26 20:03:40 216.229.142.202:3116 -> xxx.yyy.255.223:4899 SYN ******S* Sep 26 20:03:40 216.229.142.202:3168 -> xxx.yyy.255.254:4899 SYN ******S* 56090 Sep 26 18:56:53 222.243.9.159:1870 -> xxx.yyy.1.134:1433 SYN ******S* Sep 26 18:56:50 222.243.9.159:1901 -> xxx.yyy.1.150:1433 SYN ******S* Sep 26 18:56:53 222.243.9.159:1903 -> xxx.yyy.1.151:1433 SYN ******S* Sep 26 18:56:51 222.243.9.159:1854 -> xxx.yyy.1.127:1433 SYN ******S* Sep 26 18:56:51 222.243.9.159:1910 -> xxx.yyy.1.154:1433 SYN ******S* Sep 26 18:56:51 222.243.9.159:1899 -> xxx.yyy.1.149:1433 SYN ******S* Sep 26 18:56:51 222.243.9.159:1895 -> xxx.yyy.1.147:1433 SYN ******S* Sep 26 18:56:54 222.243.9.159:1923 -> xxx.yyy.1.160:1433 SYN ******S* [...] Sep 26 22:45:35 222.243.9.159:4630 -> xxx.yyy.255.236:1433 SYN ******S* Sep 26 22:45:35 222.243.9.159:4636 -> xxx.yyy.255.241:1433 SYN ******S* Sep 26 22:45:35 222.243.9.159:4632 -> xxx.yyy.255.238:1433 SYN ******S* Sep 26 22:45:36 222.243.9.159:4638 -> xxx.yyy.255.242:1433 SYN ******S* Sep 26 22:45:36 222.243.9.159:4642 -> xxx.yyy.255.245:1433 SYN ******S* Sep 26 22:45:37 222.243.9.159:4641 -> xxx.yyy.255.244:1433 SYN ******S* Sep 26 22:45:37 222.243.9.159:4647 -> xxx.yyy.255.249:1433 SYN ******S* Sep 26 22:45:37 222.243.9.159:4649 -> xxx.yyy.255.251:1433 SYN ******S* Sep 26 22:45:38 222.243.9.159:4648 -> xxx.yyy.255.250:1433 SYN ******S* 48396 Sep 26 03:39:21 220.150.249.181:2112 -> xxx.yyy.1.0:17300 SYN ******S* Sep 26 03:39:20 220.150.249.181:2117 -> xxx.yyy.1.5:17300 SYN ******S* Sep 26 03:39:20 220.150.249.181:2116 -> xxx.yyy.1.4:17300 SYN ******S* Sep 26 03:39:20 220.150.249.181:2118 -> xxx.yyy.1.6:17300 SYN ******S* Sep 26 03:39:20 220.150.249.181:2119 -> xxx.yyy.1.7:17300 SYN ******S* Sep 26 03:39:20 220.150.249.181:2120 -> xxx.yyy.1.8:17300 SYN ******S* Sep 26 03:39:20 220.150.249.181:2122 -> xxx.yyy.1.10:17300 SYN ******S* Sep 26 03:39:20 220.150.249.181:2124 -> xxx.yyy.1.12:17300 SYN ******S* [...] Sep 26 05:00:07 220.150.249.181:2435 -> xxx.yyy.254.239:17300 SYN ******S* Sep 26 05:00:07 220.150.249.181:2412 -> xxx.yyy.254.235:17300 SYN ******S* Sep 26 05:00:07 220.150.249.181:2471 -> xxx.yyy.254.241:17300 SYN ******S* Sep 26 05:00:07 220.150.249.181:2492 -> xxx.yyy.254.242:17300 SYN ******S* Sep 26 05:00:07 220.150.249.181:2535 -> xxx.yyy.254.254:17300 SYN ******S* Sep 26 05:00:07 220.150.249.181:2521 -> xxx.yyy.254.249:17300 SYN ******S* Sep 26 05:00:07 220.150.249.181:2536 -> xxx.yyy.254.255:17300 SYN ******S* Sep 26 05:00:07 220.150.249.181:2525 -> xxx.yyy.254.251:17300 SYN ******S* 42734 Sep 26 14:41:18 12.109.2.85:55429 -> xxx.yyy.1.0:22 SYN ******S* Sep 26 14:41:18 12.109.2.85:55430 -> xxx.yyy.1.1:22 SYN ******S* Sep 26 14:41:18 12.109.2.85:55431 -> xxx.yyy.1.2:22 SYN ******S* Sep 26 14:41:18 12.109.2.85:55432 -> xxx.yyy.1.3:22 SYN ******S* Sep 26 14:41:21 12.109.2.85:55433 -> xxx.yyy.1.4:22 SYN ******S* Sep 26 14:41:21 12.109.2.85:55439 -> xxx.yyy.1.10:22 SYN ******S* Sep 26 14:41:18 12.109.2.85:55440 -> xxx.yyy.1.11:22 SYN ******S* Sep 26 14:41:18 12.109.2.85:55446 -> xxx.yyy.1.17:22 SYN ******S* [...] Sep 26 15:10:09 12.109.2.85:54773 -> xxx.yyy.243.45:22 SYN ******S* Sep 26 15:10:13 12.109.2.85:55177 -> xxx.yyy.241.87:22 SYN ******S* Sep 26 15:10:15 12.109.2.85:55178 -> xxx.yyy.243.45:22 SYN ******S* Sep 26 15:10:18 12.109.2.85:55180 -> xxx.yyy.243.45:22 SYN ******S* Sep 26 15:10:21 12.109.2.85:55581 -> xxx.yyy.241.87:22 SYN ******S* Sep 26 15:10:21 12.109.2.85:55582 -> xxx.yyy.243.45:22 SYN ******S* Sep 26 15:10:27 12.109.2.85:55985 -> xxx.yyy.243.45:22 SYN ******S* Sep 26 15:10:24 12.109.2.85:55984 -> xxx.yyy.241.87:22 SYN ******S* Sep 26 15:10:31 12.109.2.85:56390 -> xxx.yyy.241.87:22 SYN ******S* 41814 Sep 26 11:37:17 136.234.71.100:2379 -> xxx.yyy.1.1:1433 SYN ******S* Sep 26 11:37:17 136.234.71.100:2380 -> xxx.yyy.1.2:1433 SYN ******S* Sep 26 11:37:17 136.234.71.100:2381 -> xxx.yyy.1.3:1433 SYN ******S* Sep 26 11:37:17 136.234.71.100:2382 -> xxx.yyy.1.4:1433 SYN ******S* Sep 26 11:37:17 136.234.71.100:2383 -> xxx.yyy.1.5:1433 SYN ******S* Sep 26 11:37:17 136.234.71.100:2384 -> xxx.yyy.1.6:1433 SYN ******S* Sep 26 11:37:17 136.234.71.100:2385 -> xxx.yyy.1.7:1433 SYN ******S* Sep 26 11:37:17 136.234.71.100:2386 -> xxx.yyy.1.8:1433 SYN ******S* [...] Sep 26 11:47:31 136.234.71.100:4747 -> xxx.yyy.255.247:1433 SYN ******S* Sep 26 11:47:31 136.234.71.100:4748 -> xxx.yyy.255.248:1433 SYN ******S* Sep 26 11:47:31 136.234.71.100:4749 -> xxx.yyy.255.249:1433 SYN ******S* Sep 26 11:47:31 136.234.71.100:4750 -> xxx.yyy.255.250:1433 SYN ******S* Sep 26 11:47:31 136.234.71.100:4751 -> xxx.yyy.255.251:1433 SYN ******S* Sep 26 11:47:31 136.234.71.100:4752 -> xxx.yyy.255.252:1433 SYN ******S* Sep 26 11:47:31 136.234.71.100:4753 -> xxx.yyy.255.253:1433 SYN ******S* Sep 26 11:47:31 136.234.71.100:4754 -> xxx.yyy.255.254:1433 SYN ******S* 39538 Sep 26 00:22:25 212.85.160.78:2316 -> xxx.yyy.1.1:1433 SYN ******S* Sep 26 00:22:28 212.85.160.78:2317 -> xxx.yyy.1.2:1433 SYN ******S* Sep 26 00:22:25 212.85.160.78:2318 -> xxx.yyy.1.3:1433 SYN ******S* Sep 26 00:22:25 212.85.160.78:2319 -> xxx.yyy.1.4:1433 SYN ******S* Sep 26 00:22:25 212.85.160.78:2320 -> xxx.yyy.1.5:1433 SYN ******S* Sep 26 00:22:28 212.85.160.78:2321 -> xxx.yyy.1.6:1433 SYN ******S* Sep 26 00:22:28 212.85.160.78:2324 -> xxx.yyy.1.9:1433 SYN ******S* Sep 26 00:22:25 212.85.160.78:2325 -> xxx.yyy.1.10:1433 SYN ******S* [...] Sep 26 00:34:06 212.85.160.78:4903 -> xxx.yyy.255.190:1433 SYN ******S* Sep 26 00:34:06 212.85.160.78:4930 -> xxx.yyy.255.217:1433 SYN ******S* Sep 26 00:34:07 212.85.160.78:4965 -> xxx.yyy.255.251:1433 SYN ******S* Sep 26 00:34:07 212.85.160.78:4959 -> xxx.yyy.255.245:1433 SYN ******S* Sep 26 00:34:07 212.85.160.78:4962 -> xxx.yyy.255.248:1433 SYN ******S* Sep 26 00:34:07 212.85.160.78:4966 -> xxx.yyy.255.252:1433 SYN ******S* Sep 26 00:34:07 212.85.160.78:4963 -> xxx.yyy.255.249:1433 SYN ******S* Sep 26 00:34:07 212.85.160.78:4964 -> xxx.yyy.255.250:1433 SYN ******S* Sep 26 00:34:07 212.85.160.78:4961 -> xxx.yyy.255.247:1433 SYN ******S* 32055 Sep 26 07:55:55 82.53.174.109:57977 -> xxx.yyy.1.0:111 SYN ******S* Sep 26 07:55:54 82.53.174.109:58277 -> xxx.yyy.1.0:443 SYN ******S* Sep 26 07:55:55 82.53.174.109:57978 -> xxx.yyy.1.1:111 SYN ******S* Sep 26 07:55:54 82.53.174.109:58278 -> xxx.yyy.1.1:443 SYN ******S* Sep 26 07:55:55 82.53.174.109:57979 -> xxx.yyy.1.2:111 SYN ******S* Sep 26 07:55:54 82.53.174.109:58279 -> xxx.yyy.1.2:443 SYN ******S* Sep 26 07:55:55 82.53.174.109:57980 -> xxx.yyy.1.3:111 SYN ******S* Sep 26 07:55:54 82.53.174.109:58280 -> xxx.yyy.1.3:443 SYN ******S* [...] Sep 26 08:06:25 82.53.174.109:36405 -> xxx.yyy.74.173:111 SYN ******S* Sep 26 08:06:25 82.53.174.109:36406 -> xxx.yyy.74.174:111 SYN ******S* Sep 26 08:06:25 82.53.174.109:36407 -> xxx.yyy.74.175:111 SYN ******S* Sep 26 08:06:25 82.53.174.109:36408 -> xxx.yyy.74.176:111 SYN ******S* Sep 26 08:06:25 82.53.174.109:36409 -> xxx.yyy.74.177:111 SYN ******S* Sep 26 08:06:25 82.53.174.109:36410 -> xxx.yyy.74.178:111 SYN ******S* Sep 26 08:06:25 82.53.174.109:36411 -> xxx.yyy.74.179:111 SYN ******S* Sep 26 08:06:25 82.53.174.109:36412 -> xxx.yyy.74.180:111 SYN ******S* 24301 [...] 20398 Sep 26 19:55:53 211.112.137.236:4234 -> xxx.yyy.1.3:6112 SYN ******S* Sep 26 19:55:53 211.112.137.236:4232 -> xxx.yyy.1.1:6112 SYN ******S* Sep 26 19:55:53 211.112.137.236:4240 -> xxx.yyy.1.9:6112 SYN ******S* Sep 26 19:55:53 211.112.137.236:4242 -> xxx.yyy.1.11:6112 SYN ******S* Sep 26 19:55:53 211.112.137.236:4254 -> xxx.yyy.1.23:6112 SYN ******S* Sep 26 19:55:53 211.112.137.236:4255 -> xxx.yyy.1.24:6112 SYN ******S* Sep 26 19:55:53 211.112.137.236:4262 -> xxx.yyy.1.31:6112 SYN ******S* Sep 26 19:55:53 211.112.137.236:4258 -> xxx.yyy.1.27:6112 SYN ******S* [...] Sep 26 19:59:01 211.112.137.236:1718 -> xxx.yyy.255.244:6112 SYN ******S* Sep 26 19:59:01 211.112.137.236:1719 -> xxx.yyy.255.245:6112 SYN ******S* Sep 26 19:59:01 211.112.137.236:1721 -> xxx.yyy.255.247:6112 SYN ******S* Sep 26 19:59:01 211.112.137.236:1725 -> xxx.yyy.255.251:6112 SYN ******S* Sep 26 19:59:01 211.112.137.236:1714 -> xxx.yyy.255.240:6112 SYN ******S* Sep 26 19:59:01 211.112.137.236:1720 -> xxx.yyy.255.246:6112 SYN ******S* Sep 26 19:59:01 211.112.137.236:1723 -> xxx.yyy.255.249:6112 SYN ******S* Sep 26 19:59:02 211.112.137.236:4722 -> xxx.yyy.252.38:6112 SYN ******S* Sep 26 19:59:02 211.112.137.236:4723 -> xxx.yyy.252.39:6112 SYN ******S* 15286 Sep 26 18:15:29 209.213.0.21:111 -> xxx.yyy.1.6:111 SYN ******S* Sep 26 18:15:29 209.213.0.21:111 -> xxx.yyy.1.9:111 SYN ******S* Sep 26 18:15:29 209.213.0.21:111 -> xxx.yyy.1.10:111 SYN ******S* Sep 26 18:15:29 209.213.0.21:111 -> xxx.yyy.1.7:111 SYN ******S* Sep 26 18:15:29 209.213.0.21:111 -> xxx.yyy.1.12:111 SYN ******S* Sep 26 18:15:29 209.213.0.21:111 -> xxx.yyy.1.5:111 SYN ******S* Sep 26 18:15:29 209.213.0.21:111 -> xxx.yyy.1.4:111 SYN ******S* Sep 26 18:15:29 209.213.0.21:111 -> xxx.yyy.1.15:111 SYN ******S* [...] Sep 26 18:15:55 209.213.0.21:111 -> xxx.yyy.255.225:111 SYN ******S* Sep 26 18:15:55 209.213.0.21:111 -> xxx.yyy.255.243:111 SYN ******S* Sep 26 18:15:55 209.213.0.21:111 -> xxx.yyy.255.255:111 SYN ******S* Sep 26 18:15:55 209.213.0.21:111 -> xxx.yyy.255.249:111 SYN ******S* Sep 26 18:15:56 209.213.0.21:111 -> xxx.yyy.255.238:111 SYN ******S* Sep 26 18:15:56 209.213.0.21:111 -> xxx.yyy.255.254:111 SYN ******S* Sep 26 18:15:56 209.213.0.21:111 -> xxx.yyy.255.222:111 SYN ******S* Sep 26 18:15:56 209.213.0.21:111 -> xxx.yyy.255.244:111 SYN ******S* 14975 Sep 26 00:00:22 65.54.188.52:5546 -> xxx.yyy.1.60:80 SYN ******S* Sep 26 00:00:19 65.54.188.52:4315 -> xxx.yyy.234.52:80 SYN ******S* Sep 26 00:00:19 65.54.188.52:4393 -> xxx.yyy.248.4:80 SYN ******S* Sep 26 00:00:19 65.54.188.52:4440 -> xxx.yyy.243.44:80 SYN ******S* Sep 26 00:00:19 65.54.188.52:4542 -> xxx.yyy.212.103:80 SYN ******S* Sep 26 00:00:19 65.54.188.52:4790 -> xxx.yyy.241.20:80 SYN ******S* Sep 26 00:00:20 65.54.188.52:4893 -> xxx.yyy.241.179:80 SYN ******S* Sep 26 00:00:20 65.54.188.52:5074 -> xxx.yyy.1.13:80 SYN ******S* [...] Sep 26 23:42:06 65.54.188.52:49395 -> xxx.yyy.241.29:80 SYN ******S* Sep 26 23:42:06 65.54.188.52:49458 -> xxx.yyy.1.60:80 SYN ******S* Sep 26 23:42:08 65.54.188.52:49672 -> xxx.yyy.241.179:80 SYN ******S* Sep 26 23:42:08 65.54.188.52:49723 -> xxx.yyy.1.13:80 SYN ******S* Sep 26 23:42:12 65.54.188.52:50045 -> xxx.yyy.208.6:80 SYN ******S* Sep 26 23:42:19 65.54.188.52:50442 -> xxx.yyy.12.25:80 SYN ******S* Sep 26 23:42:22 65.54.188.52:50676 -> xxx.yyy.241.22:80 SYN ******S* Sep 26 23:42:23 65.54.188.52:50796 -> xxx.yyy.241.20:80 SYN ******S* Sep 26 23:42:25 65.54.188.52:50886 -> xxx.yyy.241.179:80 SYN ******S* 12042 Sep 26 23:48:55 222.114.90.191:3545 -> xxx.yyy.133.14:5554 SYN ******S* Sep 26 23:48:56 222.114.90.191:4638 -> xxx.yyy.133.14:1023 SYN ******S* Sep 26 23:48:58 222.114.90.191:2265 -> xxx.yyy.133.14:9898 SYN ******S* Sep 26 23:48:55 222.114.90.191:3562 -> xxx.yyy.133.19:5554 SYN ******S* Sep 26 23:48:56 222.114.90.191:4822 -> xxx.yyy.133.19:1023 SYN ******S* Sep 26 23:48:55 222.114.90.191:3565 -> xxx.yyy.133.21:5554 SYN ******S* Sep 26 23:48:56 222.114.90.191:4829 -> xxx.yyy.133.21:1023 SYN ******S* Sep 26 23:48:55 222.114.90.191:3550 -> xxx.yyy.133.17:5554 SYN ******S* [...] Sep 26 23:50:02 222.114.90.191:4505 -> xxx.yyy.153.63:9898 SYN ******S* Sep 26 23:50:02 222.114.90.191:4520 -> xxx.yyy.153.73:9898 SYN ******S* Sep 26 23:50:02 222.114.90.191:4557 -> xxx.yyy.153.91:9898 SYN ******S* Sep 26 23:50:02 222.114.90.191:4618 -> xxx.yyy.153.108:9898 SYN ******S* Sep 26 23:50:03 222.114.90.191:4719 -> xxx.yyy.153.131:9898 SYN ******S* Sep 26 23:50:03 222.114.90.191:4701 -> xxx.yyy.153.123:9898 SYN ******S* Sep 26 23:50:03 222.114.90.191:4721 -> xxx.yyy.153.70:9898 SYN ******S* Sep 26 23:50:03 222.114.90.191:4783 -> xxx.yyy.153.120:9898 SYN ******S* 11045 Sep 26 23:54:14 220.121.43.105:3863 -> xxx.yyy.215.211:5554 SYN ******S* Sep 26 23:54:15 220.121.43.105:4306 -> xxx.yyy.215.211:1023 SYN ******S* Sep 26 23:54:17 220.121.43.105:1237 -> xxx.yyy.215.211:9898 SYN ******S* Sep 26 23:54:14 220.121.43.105:3855 -> xxx.yyy.215.210:5554 SYN ******S* Sep 26 23:54:17 220.121.43.105:1234 -> xxx.yyy.215.210:9898 SYN ******S* Sep 26 23:54:14 220.121.43.105:3872 -> xxx.yyy.215.214:5554 SYN ******S* Sep 26 23:54:14 220.121.43.105:3881 -> xxx.yyy.215.219:5554 SYN ******S* Sep 26 23:54:15 220.121.43.105:4322 -> xxx.yyy.215.219:1023 SYN ******S* [...] Sep 26 23:55:03 220.121.43.105:2705 -> xxx.yyy.236.69:9898 SYN ******S* Sep 26 23:55:03 220.121.43.105:2709 -> xxx.yyy.236.71:9898 SYN ******S* Sep 26 23:55:03 220.121.43.105:2699 -> xxx.yyy.236.68:9898 SYN ******S* Sep 26 23:55:03 220.121.43.105:2698 -> xxx.yyy.236.67:9898 SYN ******S* Sep 26 23:55:03 220.121.43.105:2706 -> xxx.yyy.236.70:9898 SYN ******S* Sep 26 23:55:03 220.121.43.105:2713 -> xxx.yyy.236.74:9898 SYN ******S* Sep 26 23:55:03 220.121.43.105:2712 -> xxx.yyy.236.73:9898 SYN ******S* Sep 26 23:55:03 220.121.43.105:2715 -> xxx.yyy.236.75:9898 SYN ******S* Sep 26 23:55:03 220.121.43.105:2716 -> xxx.yyy.236.76:9898 SYN ******S* 9446 Sep 26 23:54:33 222.149.247.178:1629 -> xxx.yyy.235.112:5554 SYN ******S* Sep 26 23:54:36 222.149.247.178:3054 -> xxx.yyy.235.112:9898 SYN ******S* Sep 26 23:54:33 222.149.247.178:1654 -> xxx.yyy.235.113:5554 SYN ******S* Sep 26 23:54:33 222.149.247.178:1655 -> xxx.yyy.235.114:5554 SYN ******S* Sep 26 23:54:33 222.149.247.178:1665 -> xxx.yyy.235.115:5554 SYN ******S* Sep 26 23:54:34 222.149.247.178:2082 -> xxx.yyy.235.115:1023 SYN ******S* Sep 26 23:54:33 222.149.247.178:1668 -> xxx.yyy.235.116:5554 SYN ******S* Sep 26 23:54:36 222.149.247.178:3076 -> xxx.yyy.235.116:9898 SYN ******S* [...] Sep 26 23:55:21 222.149.247.178:2842 -> xxx.yyy.254.30:9898 SYN ******S* Sep 26 23:55:21 222.149.247.178:2841 -> xxx.yyy.254.29:9898 SYN ******S* Sep 26 23:55:21 222.149.247.178:2845 -> xxx.yyy.254.33:9898 SYN ******S* Sep 26 23:55:21 222.149.247.178:2844 -> xxx.yyy.254.32:9898 SYN ******S* Sep 26 23:55:21 222.149.247.178:2848 -> xxx.yyy.254.35:9898 SYN ******S* Sep 26 23:55:21 222.149.247.178:2852 -> xxx.yyy.254.76:9898 SYN ******S* Sep 26 23:55:21 222.149.247.178:2836 -> xxx.yyy.254.26:9898 SYN ******S* Sep 26 23:55:21 222.149.247.178:2882 -> xxx.yyy.255.180:9898 SYN ******S* Sep 26 23:55:21 222.149.247.178:2883 -> xxx.yyy.255.181:9898 SYN ******S* 9277 Sep 26 00:56:10 218.11.229.170:2336 -> xxx.yyy.71.161:5554 SYN ******S* Sep 26 00:56:11 218.11.229.170:2876 -> xxx.yyy.71.161:1023 SYN ******S* Sep 26 00:56:13 218.11.229.170:3886 -> xxx.yyy.71.161:9898 SYN ******S* Sep 26 00:56:10 218.11.229.170:2335 -> xxx.yyy.71.160:5554 SYN ******S* Sep 26 00:56:11 218.11.229.170:2875 -> xxx.yyy.71.160:1023 SYN ******S* Sep 26 00:56:10 218.11.229.170:2379 -> xxx.yyy.71.162:5554 SYN ******S* Sep 26 00:56:11 218.11.229.170:2919 -> xxx.yyy.71.162:1023 SYN ******S* Sep 26 00:56:10 218.11.229.170:2380 -> xxx.yyy.71.163:5554 SYN ******S* [...] Sep 26 00:56:56 218.11.229.170:1144 -> xxx.yyy.91.203:9898 SYN ******S* Sep 26 00:56:56 218.11.229.170:1196 -> xxx.yyy.91.223:9898 SYN ******S* Sep 26 00:56:56 218.11.229.170:1206 -> xxx.yyy.91.228:9898 SYN ******S* Sep 26 00:56:56 218.11.229.170:1202 -> xxx.yyy.91.221:9898 SYN ******S* Sep 26 00:56:56 218.11.229.170:1197 -> xxx.yyy.91.224:9898 SYN ******S* Sep 26 00:56:56 218.11.229.170:1204 -> xxx.yyy.91.226:9898 SYN ******S* Sep 26 00:56:57 218.11.229.170:1267 -> xxx.yyy.91.232:9898 SYN ******S* Sep 26 00:56:57 218.11.229.170:1268 -> xxx.yyy.91.233:9898 SYN ******S* Sep 26 00:56:57 218.11.229.170:1271 -> xxx.yyy.91.236:9898 SYN ******S* 9047 Sep 26 00:56:37 218.24.187.241:1612 -> xxx.yyy.154.100:5554 SYN ******S* Sep 26 00:56:40 218.24.187.241:2399 -> xxx.yyy.154.100:9898 SYN ******S* Sep 26 00:56:37 218.24.187.241:1618 -> xxx.yyy.154.106:5554 SYN ******S* Sep 26 00:56:40 218.24.187.241:2406 -> xxx.yyy.154.106:9898 SYN ******S* Sep 26 00:56:37 218.24.187.241:1619 -> xxx.yyy.154.107:5554 SYN ******S* Sep 26 00:56:38 218.24.187.241:1841 -> xxx.yyy.154.107:1023 SYN ******S* Sep 26 00:56:37 218.24.187.241:1617 -> xxx.yyy.154.105:5554 SYN ******S* Sep 26 00:56:38 218.24.187.241:1839 -> xxx.yyy.154.105:1023 SYN ******S* [...] Sep 26 00:58:01 218.24.187.241:1964 -> xxx.yyy.174.163:9898 SYN ******S* Sep 26 00:58:01 218.24.187.241:1961 -> xxx.yyy.174.160:9898 SYN ******S* Sep 26 00:58:01 218.24.187.241:1965 -> xxx.yyy.174.164:9898 SYN ******S* Sep 26 00:58:01 218.24.187.241:1966 -> xxx.yyy.174.165:9898 SYN ******S* Sep 26 00:58:01 218.24.187.241:1967 -> xxx.yyy.174.166:9898 SYN ******S* Sep 26 00:58:03 218.24.187.241:2322 -> xxx.yyy.174.187:9898 SYN ******S* Sep 26 00:58:03 218.24.187.241:2337 -> xxx.yyy.174.202:9898 SYN ******S* Sep 26 00:58:03 218.24.187.241:2339 -> xxx.yyy.174.204:9898 SYN ******S* 8913 Sep 26 04:52:09 221.5.251.157:33971 -> xxx.yyy.1.0:22 SYN ******S* Sep 26 04:52:09 221.5.251.157:33971 -> xxx.yyy.1.3:22 SYN ******S* Sep 26 04:52:09 221.5.251.157:33971 -> xxx.yyy.1.12:22 SYN ******S* Sep 26 04:52:09 221.5.251.157:33971 -> xxx.yyy.1.2:22 SYN ******S* Sep 26 04:52:09 221.5.251.157:33971 -> xxx.yyy.1.7:22 SYN ******S* Sep 26 04:52:09 221.5.251.157:33971 -> xxx.yyy.1.8:22 SYN ******S* Sep 26 04:52:09 221.5.251.157:33971 -> xxx.yyy.1.9:22 SYN ******S* Sep 26 04:52:09 221.5.251.157:33971 -> xxx.yyy.1.11:22 SYN ******S* [...] Sep 26 04:52:17 221.5.251.157:33971 -> xxx.yyy.255.161:22 SYN ******S* Sep 26 04:52:17 221.5.251.157:33971 -> xxx.yyy.255.162:22 SYN ******S* Sep 26 04:52:17 221.5.251.157:33971 -> xxx.yyy.255.138:22 SYN ******S* Sep 26 04:52:17 221.5.251.157:33971 -> xxx.yyy.255.191:22 SYN ******S* Sep 26 04:52:17 221.5.251.157:33971 -> xxx.yyy.255.164:22 SYN ******S* Sep 26 04:52:17 221.5.251.157:33971 -> xxx.yyy.255.167:22 SYN ******S* Sep 26 04:52:17 221.5.251.157:33971 -> xxx.yyy.255.169:22 SYN ******S* Sep 26 04:52:17 221.5.251.157:33971 -> xxx.yyy.255.213:22 SYN ******S* 8562 Sep 26 10:42:55 70.64.148.102:5574 -> xxx.yyy.1.8:22 SYN ******S* Sep 26 10:42:55 70.64.148.102:5574 -> xxx.yyy.1.9:22 SYN ******S* Sep 26 10:42:55 70.64.148.102:5574 -> xxx.yyy.1.10:22 SYN ******S* Sep 26 10:42:55 70.64.148.102:5574 -> xxx.yyy.1.11:22 SYN ******S* Sep 26 10:42:55 70.64.148.102:5574 -> xxx.yyy.1.12:22 SYN ******S* Sep 26 10:42:55 70.64.148.102:5574 -> xxx.yyy.1.13:22 SYN ******S* Sep 26 10:42:55 70.64.148.102:5574 -> xxx.yyy.1.14:22 SYN ******S* Sep 26 10:42:55 70.64.148.102:5574 -> xxx.yyy.1.15:22 SYN ******S* [...] Sep 26 11:17:53 70.64.148.102:52827 -> xxx.yyy.241.35:22 SYN ******S* Sep 26 11:17:53 70.64.148.102:52830 -> xxx.yyy.241.30:22 SYN ******S* Sep 26 11:17:53 70.64.148.102:52848 -> xxx.yyy.241.25:22 SYN ******S* Sep 26 11:17:54 70.64.148.102:52860 -> xxx.yyy.10.5:22 SYN ******S* Sep 26 11:17:54 70.64.148.102:52868 -> xxx.yyy.224.54:22 SYN ******S* Sep 26 11:17:54 70.64.148.102:52878 -> xxx.yyy.1.40:22 SYN ******S* Sep 26 11:17:57 70.64.148.102:52970 -> xxx.yyy.224.50:22 SYN ******S* Sep 26 11:18:01 70.64.148.102:53132 -> xxx.yyy.224.50:22 SYN ******S* Sep 26 11:18:04 70.64.148.102:53190 -> xxx.yyy.10.5:22 SYN ******S* 8097 Sep 26 00:56:39 218.11.24.22:1993 -> xxx.yyy.236.78:5554 SYN ******S* Sep 26 00:56:40 218.11.24.22:2454 -> xxx.yyy.236.78:1023 SYN ******S* Sep 26 00:56:42 218.11.24.22:3326 -> xxx.yyy.236.78:9898 SYN ******S* Sep 26 00:56:39 218.11.24.22:1991 -> xxx.yyy.236.76:5554 SYN ******S* Sep 26 00:56:40 218.11.24.22:2452 -> xxx.yyy.236.76:1023 SYN ******S* Sep 26 00:56:42 218.11.24.22:3324 -> xxx.yyy.236.76:9898 SYN ******S* Sep 26 00:56:40 218.11.24.22:1998 -> xxx.yyy.236.83:5554 SYN ******S* Sep 26 00:56:41 218.11.24.22:2459 -> xxx.yyy.236.83:1023 SYN ******S* [...] Sep 26 00:57:31 218.11.24.22:2907 -> xxx.yyy.255.249:9898 SYN ******S* Sep 26 00:57:31 218.11.24.22:2909 -> xxx.yyy.255.252:9898 SYN ******S* Sep 26 00:57:31 218.11.24.22:2910 -> xxx.yyy.255.253:9898 SYN ******S* Sep 26 00:57:31 218.11.24.22:2946 -> xxx.yyy.255.244:9898 SYN ******S* Sep 26 00:57:31 218.11.24.22:2949 -> xxx.yyy.255.254:9898 SYN ******S* Sep 26 00:57:31 218.11.24.22:2948 -> xxx.yyy.255.245:9898 SYN ******S* Sep 26 00:57:31 218.11.24.22:2950 -> xxx.yyy.255.248:9898 SYN ******S* Sep 26 00:57:31 218.11.24.22:3004 -> xxx.yyy.255.250:9898 SYN ******S* 7720 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions