[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0500. Sep 28 03:09:20 61.72.205.175:1283 -> xxx.yyy.1.1:1433 SYN ******S* Sep 28 03:09:20 61.72.205.175:1285 -> xxx.yyy.1.2:1433 SYN ******S* Sep 28 03:09:20 61.72.205.175:1287 -> xxx.yyy.1.3:1433 SYN ******S* Sep 28 03:09:18 61.72.205.175:1289 -> xxx.yyy.1.4:1433 SYN ******S* Sep 28 03:09:18 61.72.205.175:1291 -> xxx.yyy.1.5:1433 SYN ******S* Sep 28 03:09:20 61.72.205.175:1299 -> xxx.yyy.1.9:1433 SYN ******S* Sep 28 03:09:21 61.72.205.175:1293 -> xxx.yyy.1.6:1433 SYN ******S* Sep 28 03:09:20 61.72.205.175:1301 -> xxx.yyy.1.10:1433 SYN ******S* [...] Sep 28 03:20:51 61.72.205.175:2336 -> xxx.yyy.255.244:1433 SYN ******S* Sep 28 03:20:51 61.72.205.175:2338 -> xxx.yyy.255.245:1433 SYN ******S* Sep 28 03:20:51 61.72.205.175:2334 -> xxx.yyy.255.243:1433 SYN ******S* Sep 28 03:20:51 61.72.205.175:2332 -> xxx.yyy.255.242:1433 SYN ******S* Sep 28 03:20:51 61.72.205.175:2340 -> xxx.yyy.255.246:1433 SYN ******S* Sep 28 03:20:51 61.72.205.175:2328 -> xxx.yyy.255.240:1433 SYN ******S* Sep 28 03:20:51 61.72.205.175:2330 -> xxx.yyy.255.241:1433 SYN ******S* Sep 28 03:20:52 61.72.205.175:2348 -> xxx.yyy.255.250:1433 SYN ******S* Sep 28 03:20:52 61.72.205.175:2346 -> xxx.yyy.255.249:1433 SYN ******S* 71801 Sep 28 11:20:22 219.91.110.111:2242 -> xxx.yyy.1.3:25 SYN ******S* Sep 28 11:20:22 219.91.110.111:2240 -> xxx.yyy.1.1:25 SYN ******S* Sep 28 11:20:22 219.91.110.111:2245 -> xxx.yyy.1.6:25 SYN ******S* Sep 28 11:20:25 219.91.110.111:2246 -> xxx.yyy.1.7:25 SYN ******S* Sep 28 11:20:22 219.91.110.111:2249 -> xxx.yyy.1.10:25 SYN ******S* Sep 28 11:20:22 219.91.110.111:2254 -> xxx.yyy.1.15:25 SYN ******S* Sep 28 11:20:22 219.91.110.111:2257 -> xxx.yyy.1.18:25 SYN ******S* Sep 28 11:20:22 219.91.110.111:2255 -> xxx.yyy.1.16:25 SYN ******S* [...] Sep 28 12:52:03 219.91.110.111:3988 -> xxx.yyy.255.241:25 SYN ******S* Sep 28 12:52:03 219.91.110.111:3993 -> xxx.yyy.255.246:25 SYN ******S* Sep 28 12:52:03 219.91.110.111:3991 -> xxx.yyy.255.244:25 SYN ******S* Sep 28 12:52:03 219.91.110.111:3994 -> xxx.yyy.255.247:25 SYN ******S* Sep 28 12:52:03 219.91.110.111:3996 -> xxx.yyy.255.249:25 SYN ******S* Sep 28 12:52:03 219.91.110.111:3997 -> xxx.yyy.255.250:25 SYN ******S* Sep 28 12:52:03 219.91.110.111:4001 -> xxx.yyy.255.254:25 SYN ******S* Sep 28 12:52:03 219.91.110.111:3999 -> xxx.yyy.255.252:25 SYN ******S* 64124 Sep 28 01:59:56 62.141.58.143:3672 -> xxx.yyy.1.1:1433 SYN ******S* Sep 28 01:59:57 62.141.58.143:3673 -> xxx.yyy.1.2:1433 SYN ******S* Sep 28 01:59:57 62.141.58.143:3674 -> xxx.yyy.1.3:1433 SYN ******S* Sep 28 01:59:57 62.141.58.143:3675 -> xxx.yyy.1.4:1433 SYN ******S* Sep 28 01:59:57 62.141.58.143:3676 -> xxx.yyy.1.5:1433 SYN ******S* Sep 28 01:59:57 62.141.58.143:3677 -> xxx.yyy.1.6:1433 SYN ******S* Sep 28 01:59:57 62.141.58.143:3678 -> xxx.yyy.1.7:1433 SYN ******S* Sep 28 01:59:57 62.141.58.143:3679 -> xxx.yyy.1.8:1433 SYN ******S* [...] Sep 28 02:16:52 62.141.58.143:4457 -> xxx.yyy.255.242:1433 SYN ******S* Sep 28 02:16:52 62.141.58.143:4460 -> xxx.yyy.255.245:1433 SYN ******S* Sep 28 02:16:52 62.141.58.143:4463 -> xxx.yyy.255.248:1433 SYN ******S* Sep 28 02:16:53 62.141.58.143:4465 -> xxx.yyy.255.250:1433 SYN ******S* Sep 28 02:16:53 62.141.58.143:4467 -> xxx.yyy.255.252:1433 SYN ******S* Sep 28 02:16:53 62.141.58.143:4468 -> xxx.yyy.255.253:1433 SYN ******S* Sep 28 02:16:53 62.141.58.143:4466 -> xxx.yyy.255.251:1433 SYN ******S* Sep 28 02:16:53 62.141.58.143:4469 -> xxx.yyy.255.254:1433 SYN ******S* Sep 28 02:16:53 62.141.58.143:4464 -> xxx.yyy.255.249:1433 SYN ******S* 63672 Sep 28 04:39:57 213.180.210.35:55735 -> xxx.yyy.104.87:45906 SYN ******S* Sep 28 04:39:57 213.180.210.35:55735 -> xxx.yyy.104.87:37539 SYN ******S* Sep 28 04:39:57 213.180.210.35:55735 -> xxx.yyy.104.87:21803 SYN ******S* Sep 28 04:39:57 213.180.210.35:55735 -> xxx.yyy.104.87:25058 SYN ******S* Sep 28 04:39:57 213.180.210.35:55735 -> xxx.yyy.104.87:53573 SYN ******S* Sep 28 04:39:57 213.180.210.35:55735 -> xxx.yyy.104.87:30976 SYN ******S* Sep 28 04:39:57 213.180.210.35:55735 -> xxx.yyy.104.87:28720 SYN ******S* Sep 28 04:39:57 213.180.210.35:55735 -> xxx.yyy.104.87:31350 SYN ******S* [...] Sep 28 20:13:35 213.180.210.35:34743 -> xxx.yyy.104.82:6045 SYN ******S* Sep 28 20:13:34 213.180.210.35:34741 -> xxx.yyy.104.82:6061 SYN ******S* Sep 28 20:13:34 213.180.210.35:34742 -> xxx.yyy.104.82:6043 SYN ******S* Sep 28 20:13:34 213.180.210.35:34742 -> xxx.yyy.104.82:6036 SYN ******S* Sep 28 20:13:34 213.180.210.35:34742 -> xxx.yyy.104.82:6047 SYN ******S* Sep 28 20:13:34 213.180.210.35:34742 -> xxx.yyy.104.82:27374 SYN ******S* Sep 28 20:13:34 213.180.210.35:34742 -> xxx.yyy.104.82:6014 SYN ******S* Sep 28 20:13:35 213.180.210.35:34743 -> xxx.yyy.104.82:139 SYN ******S* Sep 28 20:13:34 213.180.210.35:34742 -> xxx.yyy.104.82:6056 SYN ******S* 61701 Sep 28 08:53:12 63.199.179.188:27125 -> xxx.yyy.1.1:1433 SYN ******S* Sep 28 08:53:12 63.199.179.188:27126 -> xxx.yyy.1.2:1433 SYN ******S* Sep 28 08:53:12 63.199.179.188:27127 -> xxx.yyy.1.3:1433 SYN ******S* Sep 28 08:53:12 63.199.179.188:27130 -> xxx.yyy.1.6:1433 SYN ******S* Sep 28 08:53:12 63.199.179.188:27131 -> xxx.yyy.1.7:1433 SYN ******S* Sep 28 08:53:12 63.199.179.188:27132 -> xxx.yyy.1.8:1433 SYN ******S* Sep 28 08:53:12 63.199.179.188:27135 -> xxx.yyy.1.11:1433 SYN ******S* Sep 28 08:53:12 63.199.179.188:27136 -> xxx.yyy.1.12:1433 SYN ******S* [...] Sep 28 09:04:55 63.199.179.188:33541 -> xxx.yyy.255.243:1433 SYN ******S* Sep 28 09:04:55 63.199.179.188:33542 -> xxx.yyy.255.244:1433 SYN ******S* Sep 28 09:04:55 63.199.179.188:33543 -> xxx.yyy.255.245:1433 SYN ******S* Sep 28 09:04:55 63.199.179.188:33544 -> xxx.yyy.255.246:1433 SYN ******S* Sep 28 09:04:55 63.199.179.188:33547 -> xxx.yyy.255.249:1433 SYN ******S* Sep 28 09:04:55 63.199.179.188:33548 -> xxx.yyy.255.250:1433 SYN ******S* Sep 28 09:04:55 63.199.179.188:33550 -> xxx.yyy.255.252:1433 SYN ******S* Sep 28 09:04:55 63.199.179.188:33551 -> xxx.yyy.255.253:1433 SYN ******S* Sep 28 09:04:55 63.199.179.188:33552 -> xxx.yyy.255.254:1433 SYN ******S* 55722 Sep 28 23:01:50 83.104.87.30:2015 -> xxx.yyy.1.2:1433 SYN ******S* Sep 28 23:01:50 83.104.87.30:2016 -> xxx.yyy.1.3:1433 SYN ******S* Sep 28 23:01:50 83.104.87.30:2017 -> xxx.yyy.1.4:1433 SYN ******S* Sep 28 23:01:50 83.104.87.30:2018 -> xxx.yyy.1.5:1433 SYN ******S* Sep 28 23:01:50 83.104.87.30:2019 -> xxx.yyy.1.6:1433 SYN ******S* Sep 28 23:01:50 83.104.87.30:2020 -> xxx.yyy.1.7:1433 SYN ******S* Sep 28 23:01:53 83.104.87.30:2021 -> xxx.yyy.1.8:1433 SYN ******S* Sep 28 23:01:50 83.104.87.30:2022 -> xxx.yyy.1.9:1433 SYN ******S* [...] Sep 28 23:13:33 83.104.87.30:4010 -> xxx.yyy.255.246:1433 SYN ******S* Sep 28 23:13:33 83.104.87.30:4007 -> xxx.yyy.255.243:1433 SYN ******S* Sep 28 23:13:33 83.104.87.30:4008 -> xxx.yyy.255.244:1433 SYN ******S* Sep 28 23:13:33 83.104.87.30:4004 -> xxx.yyy.255.240:1433 SYN ******S* Sep 28 23:13:33 83.104.87.30:4014 -> xxx.yyy.255.250:1433 SYN ******S* Sep 28 23:13:33 83.104.87.30:4015 -> xxx.yyy.255.251:1433 SYN ******S* Sep 28 23:13:33 83.104.87.30:4012 -> xxx.yyy.255.248:1433 SYN ******S* Sep 28 23:13:33 83.104.87.30:4017 -> xxx.yyy.255.253:1433 SYN ******S* 40220 Sep 28 10:59:36 137.204.158.170:3008 -> xxx.yyy.1.1:80 SYN ******S* Sep 28 10:59:36 137.204.158.170:3012 -> xxx.yyy.1.2:80 SYN ******S* Sep 28 10:59:36 137.204.158.170:3016 -> xxx.yyy.1.3:80 SYN ******S* Sep 28 10:59:34 137.204.158.170:3024 -> xxx.yyy.1.5:80 SYN ******S* Sep 28 10:59:34 137.204.158.170:3029 -> xxx.yyy.1.6:80 SYN ******S* Sep 28 10:59:34 137.204.158.170:3033 -> xxx.yyy.1.7:80 SYN ******S* Sep 28 10:59:37 137.204.158.170:3037 -> xxx.yyy.1.8:80 SYN ******S* Sep 28 10:59:34 137.204.158.170:3049 -> xxx.yyy.1.11:80 SYN ******S* [...] Sep 28 11:11:57 137.204.158.170:3457 -> xxx.yyy.255.208:80 SYN ******S* Sep 28 11:11:57 137.204.158.170:3461 -> xxx.yyy.255.209:80 SYN ******S* Sep 28 11:11:57 137.204.158.170:3494 -> xxx.yyy.255.217:80 SYN ******S* Sep 28 11:11:57 137.204.158.170:3552 -> xxx.yyy.255.231:80 SYN ******S* Sep 28 11:11:57 137.204.158.170:3547 -> xxx.yyy.255.230:80 SYN ******S* Sep 28 11:11:57 137.204.158.170:3543 -> xxx.yyy.255.229:80 SYN ******S* Sep 28 11:11:57 137.204.158.170:3637 -> xxx.yyy.255.252:80 SYN ******S* Sep 28 11:11:57 137.204.158.170:3641 -> xxx.yyy.255.253:80 SYN ******S* Sep 28 11:11:57 137.204.158.170:3645 -> xxx.yyy.255.254:80 SYN ******S* 39226 Sep 28 22:24:58 210.44.135.25:3525 -> xxx.yyy.1.1:1433 SYN ******S* Sep 28 22:24:55 210.44.135.25:3526 -> xxx.yyy.1.2:1433 SYN ******S* Sep 28 22:24:55 210.44.135.25:3529 -> xxx.yyy.1.5:1433 SYN ******S* Sep 28 22:24:58 210.44.135.25:3530 -> xxx.yyy.1.6:1433 SYN ******S* Sep 28 22:24:58 210.44.135.25:3532 -> xxx.yyy.1.8:1433 SYN ******S* Sep 28 22:24:55 210.44.135.25:3541 -> xxx.yyy.1.17:1433 SYN ******S* Sep 28 22:24:55 210.44.135.25:3542 -> xxx.yyy.1.18:1433 SYN ******S* Sep 28 22:24:55 210.44.135.25:3544 -> xxx.yyy.1.20:1433 SYN ******S* [...] Sep 28 22:36:38 210.44.135.25:2216 -> xxx.yyy.255.236:1433 SYN ******S* Sep 28 22:36:38 210.44.135.25:2211 -> xxx.yyy.255.231:1433 SYN ******S* Sep 28 22:36:38 210.44.135.25:2213 -> xxx.yyy.255.233:1433 SYN ******S* Sep 28 22:36:38 210.44.135.25:2210 -> xxx.yyy.255.230:1433 SYN ******S* Sep 28 22:36:38 210.44.135.25:2214 -> xxx.yyy.255.234:1433 SYN ******S* Sep 28 22:36:38 210.44.135.25:2222 -> xxx.yyy.255.242:1433 SYN ******S* Sep 28 22:36:38 210.44.135.25:2219 -> xxx.yyy.255.239:1433 SYN ******S* Sep 28 22:36:38 210.44.135.25:2223 -> xxx.yyy.255.243:1433 SYN ******S* Sep 28 22:36:38 210.44.135.25:2220 -> xxx.yyy.255.240:1433 SYN ******S* 37431 Sep 28 21:53:32 211.174.63.45:2345 -> xxx.yyy.29.56:8000 SYN ******S* Sep 28 21:53:30 211.174.63.45:3664 -> xxx.yyy.29.58:8000 SYN ******S* Sep 28 21:53:31 211.174.63.45:4388 -> xxx.yyy.29.63:8000 SYN ******S* Sep 28 21:53:30 211.174.63.45:4478 -> xxx.yyy.29.65:8000 SYN ******S* Sep 28 21:53:30 211.174.63.45:4551 -> xxx.yyy.29.68:8000 SYN ******S* Sep 28 21:53:30 211.174.63.45:4556 -> xxx.yyy.29.69:8000 SYN ******S* Sep 28 21:53:31 211.174.63.45:4564 -> xxx.yyy.29.70:8000 SYN ******S* Sep 28 21:53:33 211.174.63.45:4578 -> xxx.yyy.29.71:8000 SYN ******S* [...] Sep 28 22:12:49 211.174.63.45:2679 -> xxx.yyy.255.226:8000 SYN ******S* Sep 28 22:12:49 211.174.63.45:2674 -> xxx.yyy.255.225:8000 SYN ******S* Sep 28 22:12:49 211.174.63.45:2712 -> xxx.yyy.255.233:8000 SYN ******S* Sep 28 22:12:49 211.174.63.45:2707 -> xxx.yyy.255.232:8000 SYN ******S* Sep 28 22:12:49 211.174.63.45:2766 -> xxx.yyy.255.244:8000 SYN ******S* Sep 28 22:12:49 211.174.63.45:2771 -> xxx.yyy.255.245:8000 SYN ******S* Sep 28 22:12:49 211.174.63.45:2756 -> xxx.yyy.255.242:8000 SYN ******S* Sep 28 22:12:49 211.174.63.45:2775 -> xxx.yyy.255.246:8000 SYN ******S* Sep 28 22:12:49 211.174.63.45:2751 -> xxx.yyy.255.241:8000 SYN ******S* 35745 Sep 28 03:37:23 81.220.32.168:4142 -> xxx.yyy.1.0:1433 SYN ******S* Sep 28 03:37:23 81.220.32.168:4143 -> xxx.yyy.1.1:1433 SYN ******S* Sep 28 03:37:23 81.220.32.168:4144 -> xxx.yyy.1.2:1433 SYN ******S* Sep 28 03:37:23 81.220.32.168:4145 -> xxx.yyy.1.3:1433 SYN ******S* Sep 28 03:37:23 81.220.32.168:4146 -> xxx.yyy.1.4:1433 SYN ******S* Sep 28 03:37:23 81.220.32.168:4148 -> xxx.yyy.1.5:1433 SYN ******S* Sep 28 03:37:23 81.220.32.168:4149 -> xxx.yyy.1.6:1433 SYN ******S* Sep 28 03:37:23 81.220.32.168:4150 -> xxx.yyy.1.7:1433 SYN ******S* [...] Sep 28 05:34:39 81.220.32.168:3230 -> xxx.yyy.129.76:1433 SYN ******S* Sep 28 05:34:44 81.220.32.168:3225 -> xxx.yyy.129.74:1433 SYN ******S* Sep 28 05:34:45 81.220.32.168:3228 -> xxx.yyy.129.75:1433 SYN ******S* Sep 28 05:34:45 81.220.32.168:3230 -> xxx.yyy.129.76:1433 SYN ******S* Sep 28 05:34:46 81.220.32.168:3232 -> xxx.yyy.129.77:1433 SYN ******S* Sep 28 05:34:46 81.220.32.168:3241 -> xxx.yyy.129.79:1433 SYN ******S* Sep 28 05:34:46 81.220.32.168:3239 -> xxx.yyy.129.78:1433 SYN ******S* Sep 28 05:34:46 81.220.32.168:3245 -> xxx.yyy.129.81:1433 SYN ******S* Sep 28 05:34:46 81.220.32.168:3243 -> xxx.yyy.129.80:1433 SYN ******S* 34720 Sep 28 15:45:51 216.184.168.214:2902 -> xxx.yyy.1.1:1433 SYN ******S* Sep 28 15:45:54 216.184.168.214:2905 -> xxx.yyy.1.4:1433 SYN ******S* Sep 28 15:45:54 216.184.168.214:2906 -> xxx.yyy.1.5:1433 SYN ******S* Sep 28 15:45:54 216.184.168.214:2908 -> xxx.yyy.1.7:1433 SYN ******S* Sep 28 15:45:51 216.184.168.214:2909 -> xxx.yyy.1.8:1433 SYN ******S* Sep 28 15:45:51 216.184.168.214:2910 -> xxx.yyy.1.9:1433 SYN ******S* Sep 28 15:45:51 216.184.168.214:2913 -> xxx.yyy.1.12:1433 SYN ******S* Sep 28 15:45:54 216.184.168.214:2915 -> xxx.yyy.1.14:1433 SYN ******S* [...] Sep 28 15:57:40 216.184.168.214:1476 -> xxx.yyy.255.230:1433 SYN ******S* Sep 28 15:57:40 216.184.168.214:1473 -> xxx.yyy.255.227:1433 SYN ******S* Sep 28 15:57:40 216.184.168.214:1488 -> xxx.yyy.255.242:1433 SYN ******S* Sep 28 15:57:40 216.184.168.214:1485 -> xxx.yyy.255.239:1433 SYN ******S* Sep 28 15:57:40 216.184.168.214:1482 -> xxx.yyy.255.236:1433 SYN ******S* Sep 28 15:57:40 216.184.168.214:1496 -> xxx.yyy.255.250:1433 SYN ******S* Sep 28 15:57:40 216.184.168.214:1493 -> xxx.yyy.255.247:1433 SYN ******S* Sep 28 15:57:40 216.184.168.214:1495 -> xxx.yyy.255.249:1433 SYN ******S* Sep 28 15:57:40 216.184.168.214:1492 -> xxx.yyy.255.246:1433 SYN ******S* 32984 Sep 28 06:20:04 69.70.122.122:4447 -> xxx.yyy.105.25:1433 SYN ******S* Sep 28 06:20:04 69.70.122.122:4448 -> xxx.yyy.105.26:1433 SYN ******S* Sep 28 06:20:04 69.70.122.122:4449 -> xxx.yyy.105.29:1433 SYN ******S* Sep 28 06:20:04 69.70.122.122:4450 -> xxx.yyy.105.27:1433 SYN ******S* Sep 28 06:20:04 69.70.122.122:4451 -> xxx.yyy.105.28:1433 SYN ******S* Sep 28 06:20:04 69.70.122.122:4454 -> xxx.yyy.105.31:1433 SYN ******S* Sep 28 06:20:04 69.70.122.122:4456 -> xxx.yyy.105.32:1433 SYN ******S* Sep 28 06:20:04 69.70.122.122:4457 -> xxx.yyy.105.33:1433 SYN ******S* [...] Sep 28 07:16:17 69.70.122.122:3919 -> xxx.yyy.166.121:1433 SYN ******S* Sep 28 07:16:17 69.70.122.122:3848 -> xxx.yyy.166.54:1433 SYN ******S* Sep 28 07:16:17 69.70.122.122:3852 -> xxx.yyy.166.58:1433 SYN ******S* Sep 28 07:16:17 69.70.122.122:3851 -> xxx.yyy.166.57:1433 SYN ******S* Sep 28 07:16:17 69.70.122.122:3850 -> xxx.yyy.166.56:1433 SYN ******S* Sep 28 07:16:17 69.70.122.122:3849 -> xxx.yyy.166.55:1433 SYN ******S* Sep 28 07:16:17 69.70.122.122:3853 -> xxx.yyy.166.59:1433 SYN ******S* Sep 28 07:16:18 69.70.122.122:3855 -> xxx.yyy.166.60:1433 SYN ******S* Sep 28 07:16:18 69.70.122.122:3856 -> xxx.yyy.166.61:1433 SYN ******S* 28656 [...] 19614 Sep 28 12:07:50 24.16.61.181:1260 -> xxx.yyy.1.2:1433 SYN ******S* Sep 28 12:07:50 24.16.61.181:1262 -> xxx.yyy.1.4:1433 SYN ******S* Sep 28 12:07:50 24.16.61.181:1273 -> xxx.yyy.1.15:1433 SYN ******S* Sep 28 12:07:50 24.16.61.181:1278 -> xxx.yyy.1.20:1433 SYN ******S* Sep 28 12:07:51 24.16.61.181:1287 -> xxx.yyy.1.29:1433 SYN ******S* Sep 28 12:07:51 24.16.61.181:1289 -> xxx.yyy.1.31:1433 SYN ******S* Sep 28 12:07:51 24.16.61.181:1290 -> xxx.yyy.1.32:1433 SYN ******S* Sep 28 12:07:51 24.16.61.181:1291 -> xxx.yyy.1.33:1433 SYN ******S* [...] Sep 28 12:19:32 24.16.61.181:3608 -> xxx.yyy.255.227:1433 SYN ******S* Sep 28 12:19:32 24.16.61.181:3614 -> xxx.yyy.255.233:1433 SYN ******S* Sep 28 12:19:32 24.16.61.181:3610 -> xxx.yyy.255.229:1433 SYN ******S* Sep 28 12:19:32 24.16.61.181:3620 -> xxx.yyy.255.239:1433 SYN ******S* Sep 28 12:19:32 24.16.61.181:3626 -> xxx.yyy.255.245:1433 SYN ******S* Sep 28 12:19:32 24.16.61.181:3632 -> xxx.yyy.255.251:1433 SYN ******S* Sep 28 12:19:32 24.16.61.181:3633 -> xxx.yyy.255.252:1433 SYN ******S* Sep 28 12:19:32 24.16.61.181:3635 -> xxx.yyy.255.254:1433 SYN ******S* 18461 Sep 28 13:14:05 216.38.192.230:1686 -> xxx.yyy.1.5:1433 SYN ******S* Sep 28 13:14:05 216.38.192.230:1693 -> xxx.yyy.1.12:1433 SYN ******S* Sep 28 13:14:05 216.38.192.230:1696 -> xxx.yyy.1.15:1433 SYN ******S* Sep 28 13:14:05 216.38.192.230:1697 -> xxx.yyy.1.16:1433 SYN ******S* Sep 28 13:14:05 216.38.192.230:1698 -> xxx.yyy.1.18:1433 SYN ******S* Sep 28 13:14:05 216.38.192.230:1699 -> xxx.yyy.1.17:1433 SYN ******S* Sep 28 13:14:05 216.38.192.230:1700 -> xxx.yyy.1.19:1433 SYN ******S* Sep 28 13:14:05 216.38.192.230:1702 -> xxx.yyy.1.22:1433 SYN ******S* [...] Sep 28 13:16:30 216.38.192.230:3437 -> xxx.yyy.255.244:1433 SYN ******S* Sep 28 13:16:30 216.38.192.230:3438 -> xxx.yyy.255.246:1433 SYN ******S* Sep 28 13:16:30 216.38.192.230:3439 -> xxx.yyy.255.247:1433 SYN ******S* Sep 28 13:16:30 216.38.192.230:3440 -> xxx.yyy.255.249:1433 SYN ******S* Sep 28 13:16:30 216.38.192.230:3441 -> xxx.yyy.255.248:1433 SYN ******S* Sep 28 13:16:30 216.38.192.230:3442 -> xxx.yyy.255.250:1433 SYN ******S* Sep 28 13:16:30 216.38.192.230:3443 -> xxx.yyy.255.251:1433 SYN ******S* Sep 28 13:16:30 216.38.192.230:3444 -> xxx.yyy.255.252:1433 SYN ******S* 14911 [...] 14264 Sep 28 23:54:13 222.99.60.134:4303 -> xxx.yyy.153.139:5554 SYN ******S* Sep 28 23:54:16 222.99.60.134:2337 -> xxx.yyy.153.139:9898 SYN ******S* Sep 28 23:54:13 222.99.60.134:4298 -> xxx.yyy.153.136:5554 SYN ******S* Sep 28 23:54:13 222.99.60.134:4326 -> xxx.yyy.153.141:5554 SYN ******S* Sep 28 23:54:14 222.99.60.134:1363 -> xxx.yyy.153.141:1023 SYN ******S* Sep 28 23:54:16 222.99.60.134:2340 -> xxx.yyy.153.141:9898 SYN ******S* Sep 28 23:54:13 222.99.60.134:4325 -> xxx.yyy.153.140:5554 SYN ******S* Sep 28 23:54:14 222.99.60.134:1362 -> xxx.yyy.153.140:1023 SYN ******S* [...] Sep 28 23:55:30 222.99.60.134:3496 -> xxx.yyy.255.253:1023 SYN ******S* Sep 28 23:55:30 222.99.60.134:3489 -> xxx.yyy.255.246:1023 SYN ******S* Sep 28 23:55:32 222.99.60.134:4889 -> xxx.yyy.255.228:9898 SYN ******S* Sep 28 23:55:32 222.99.60.134:4895 -> xxx.yyy.255.233:9898 SYN ******S* Sep 28 23:55:32 222.99.60.134:4899 -> xxx.yyy.255.234:9898 SYN ******S* Sep 28 23:55:32 222.99.60.134:4900 -> xxx.yyy.255.235:9898 SYN ******S* Sep 28 23:55:32 222.99.60.134:4902 -> xxx.yyy.255.237:9898 SYN ******S* Sep 28 23:55:32 222.99.60.134:4923 -> xxx.yyy.255.250:9898 SYN ******S* Sep 28 23:55:32 222.99.60.134:4928 -> xxx.yyy.255.254:9898 SYN ******S* 13917 [...] 8691 Sep 28 23:42:58 218.155.109.84:3410 -> xxx.yyy.72.127:5554 SYN ******S* Sep 28 23:42:58 218.155.109.84:3411 -> xxx.yyy.72.128:5554 SYN ******S* Sep 28 23:42:58 218.155.109.84:3405 -> xxx.yyy.72.125:5554 SYN ******S* Sep 28 23:42:59 218.155.109.84:3934 -> xxx.yyy.72.125:1023 SYN ******S* Sep 28 23:42:58 218.155.109.84:3406 -> xxx.yyy.72.126:5554 SYN ******S* Sep 28 23:42:59 218.155.109.84:3935 -> xxx.yyy.72.126:1023 SYN ******S* Sep 28 23:42:58 218.155.109.84:3418 -> xxx.yyy.72.133:5554 SYN ******S* Sep 28 23:43:01 218.155.109.84:1367 -> xxx.yyy.72.133:9898 SYN ******S* [...] Sep 28 23:43:52 218.155.109.84:1616 -> xxx.yyy.92.178:9898 SYN ******S* Sep 28 23:43:52 218.155.109.84:1667 -> xxx.yyy.88.80:9898 SYN ******S* Sep 28 23:43:53 218.155.109.84:1858 -> xxx.yyy.92.246:9898 SYN ******S* Sep 28 23:43:53 218.155.109.84:1884 -> xxx.yyy.92.235:9898 SYN ******S* Sep 28 23:43:53 218.155.109.84:1890 -> xxx.yyy.92.195:9898 SYN ******S* Sep 28 23:43:53 218.155.109.84:1883 -> xxx.yyy.92.124:9898 SYN ******S* Sep 28 23:43:53 218.155.109.84:1891 -> xxx.yyy.92.196:9898 SYN ******S* Sep 28 23:43:53 218.155.109.84:1918 -> xxx.yyy.92.206:9898 SYN ******S* Sep 28 23:43:53 218.155.109.84:1926 -> xxx.yyy.88.77:9898 SYN ******S* 7296 Sep 28 00:56:19 221.216.151.220:25495 -> xxx.yyy.133.14:5554 SYN ******S* Sep 28 00:56:20 221.216.151.220:22302 -> xxx.yyy.133.14:1023 SYN ******S* Sep 28 00:56:22 221.216.151.220:21295 -> xxx.yyy.133.14:9898 SYN ******S* Sep 28 00:56:19 221.216.151.220:25509 -> xxx.yyy.133.16:5554 SYN ******S* Sep 28 00:56:20 221.216.151.220:27282 -> xxx.yyy.133.16:1023 SYN ******S* Sep 28 00:56:22 221.216.151.220:24519 -> xxx.yyy.133.16:9898 SYN ******S* Sep 28 00:56:19 221.216.151.220:24546 -> xxx.yyy.133.18:5554 SYN ******S* Sep 28 00:56:20 221.216.151.220:22890 -> xxx.yyy.133.18:1023 SYN ******S* [...] Sep 28 00:57:05 221.216.151.220:28435 -> xxx.yyy.153.78:9898 SYN ******S* Sep 28 00:57:05 221.216.151.220:23727 -> xxx.yyy.153.83:9898 SYN ******S* Sep 28 00:57:05 221.216.151.220:21546 -> xxx.yyy.153.131:9898 SYN ******S* Sep 28 00:57:05 221.216.151.220:22936 -> xxx.yyy.153.132:9898 SYN ******S* Sep 28 00:57:05 221.216.151.220:24042 -> xxx.yyy.153.133:9898 SYN ******S* Sep 28 00:57:05 221.216.151.220:24394 -> xxx.yyy.153.135:9898 SYN ******S* Sep 28 00:57:05 221.216.151.220:22942 -> xxx.yyy.153.136:9898 SYN ******S* Sep 28 00:57:05 221.216.151.220:24393 -> xxx.yyy.153.134:9898 SYN ******S* 7199 Sep 28 06:56:10 213.213.194.137:2040 -> xxx.yyy.215.4:5554 SYN ******S* Sep 28 06:56:11 213.213.194.137:2431 -> xxx.yyy.215.4:1023 SYN ******S* Sep 28 06:56:10 213.213.194.137:2041 -> xxx.yyy.215.5:5554 SYN ******S* Sep 28 06:56:11 213.213.194.137:2432 -> xxx.yyy.215.5:1023 SYN ******S* Sep 28 06:56:10 213.213.194.137:2042 -> xxx.yyy.215.7:5554 SYN ******S* Sep 28 06:56:11 213.213.194.137:2433 -> xxx.yyy.215.7:1023 SYN ******S* Sep 28 06:56:10 213.213.194.137:2044 -> xxx.yyy.215.8:5554 SYN ******S* Sep 28 06:56:11 213.213.194.137:2435 -> xxx.yyy.215.8:1023 SYN ******S* [...] Sep 28 06:56:58 213.213.194.137:3125 -> xxx.yyy.235.90:9898 SYN ******S* Sep 28 06:56:58 213.213.194.137:3126 -> xxx.yyy.235.91:9898 SYN ******S* Sep 28 06:56:58 213.213.194.137:3128 -> xxx.yyy.235.93:9898 SYN ******S* Sep 28 06:56:58 213.213.194.137:3127 -> xxx.yyy.235.92:9898 SYN ******S* Sep 28 06:56:58 213.213.194.137:3130 -> xxx.yyy.235.94:9898 SYN ******S* Sep 28 06:56:58 213.213.194.137:3164 -> xxx.yyy.235.108:9898 SYN ******S* Sep 28 06:56:58 213.213.194.137:3168 -> xxx.yyy.235.109:9898 SYN ******S* Sep 28 06:56:58 213.213.194.137:3171 -> xxx.yyy.235.110:9898 SYN ******S* Sep 28 06:56:58 213.213.194.137:3174 -> xxx.yyy.235.111:9898 SYN ******S* 7130 Sep 28 10:54:56 221.145.21.133:1959 -> xxx.yyy.174.9:5554 SYN ******S* Sep 28 10:54:57 221.145.21.133:2454 -> xxx.yyy.174.9:1023 SYN ******S* Sep 28 10:54:59 221.145.21.133:3407 -> xxx.yyy.174.9:9898 SYN ******S* Sep 28 10:54:56 221.145.21.133:1956 -> xxx.yyy.174.12:5554 SYN ******S* Sep 28 10:54:57 221.145.21.133:2426 -> xxx.yyy.174.12:1023 SYN ******S* Sep 28 10:54:56 221.145.21.133:1942 -> xxx.yyy.174.26:5554 SYN ******S* Sep 28 10:54:59 221.145.21.133:3406 -> xxx.yyy.174.26:9898 SYN ******S* Sep 28 10:54:56 221.145.21.133:1945 -> xxx.yyy.174.23:5554 SYN ******S* [...] Sep 28 10:55:43 221.145.21.133:2937 -> xxx.yyy.194.97:9898 SYN ******S* Sep 28 10:55:43 221.145.21.133:2958 -> xxx.yyy.194.100:9898 SYN ******S* Sep 28 10:55:43 221.145.21.133:2966 -> xxx.yyy.194.103:9898 SYN ******S* Sep 28 10:55:43 221.145.21.133:2985 -> xxx.yyy.194.108:9898 SYN ******S* Sep 28 10:55:43 221.145.21.133:2998 -> xxx.yyy.194.111:9898 SYN ******S* Sep 28 10:55:43 221.145.21.133:2999 -> xxx.yyy.194.112:9898 SYN ******S* Sep 28 10:55:43 221.145.21.133:3004 -> xxx.yyy.194.114:9898 SYN ******S* Sep 28 10:55:43 221.145.21.133:3049 -> xxx.yyy.194.122:9898 SYN ******S* 6485 Sep 28 00:51:46 220.169.24.184:2502 -> xxx.yyy.72.138:5554 SYN ******S* Sep 28 00:51:49 220.169.24.184:3345 -> xxx.yyy.72.138:9898 SYN ******S* Sep 28 00:51:46 220.169.24.184:2506 -> xxx.yyy.72.142:5554 SYN ******S* Sep 28 00:51:47 220.169.24.184:2780 -> xxx.yyy.72.142:1023 SYN ******S* Sep 28 00:51:46 220.169.24.184:2510 -> xxx.yyy.72.146:5554 SYN ******S* Sep 28 00:51:47 220.169.24.184:2791 -> xxx.yyy.72.146:1023 SYN ******S* Sep 28 00:51:46 220.169.24.184:2522 -> xxx.yyy.72.160:5554 SYN ******S* Sep 28 00:51:46 220.169.24.184:2530 -> xxx.yyy.72.166:5554 SYN ******S* [...] Sep 28 00:52:54 220.169.24.184:2093 -> xxx.yyy.73.67:9898 SYN ******S* Sep 28 00:52:54 220.169.24.184:2345 -> xxx.yyy.73.74:9898 SYN ******S* Sep 28 00:52:54 220.169.24.184:2511 -> xxx.yyy.73.81:9898 SYN ******S* Sep 28 00:52:54 220.169.24.184:2514 -> xxx.yyy.73.46:9898 SYN ******S* Sep 28 00:52:54 220.169.24.184:2513 -> xxx.yyy.73.83:9898 SYN ******S* Sep 28 00:52:54 220.169.24.184:2512 -> xxx.yyy.73.82:9898 SYN ******S* Sep 28 00:52:54 220.169.24.184:2305 -> xxx.yyy.73.79:9898 SYN ******S* Sep 28 00:52:54 220.169.24.184:2307 -> xxx.yyy.73.75:9898 SYN ******S* Sep 28 00:52:55 220.169.24.184:2515 -> xxx.yyy.73.85:9898 SYN ******S* 5951 Sep 28 00:54:53 221.233.132.96:4014 -> xxx.yyy.71.164:5554 SYN ******S* Sep 28 00:54:53 221.233.132.96:4054 -> xxx.yyy.71.171:5554 SYN ******S* Sep 28 00:54:54 221.233.132.96:4671 -> xxx.yyy.71.171:1023 SYN ******S* Sep 28 00:54:53 221.233.132.96:4057 -> xxx.yyy.71.174:5554 SYN ******S* Sep 28 00:54:53 221.233.132.96:4056 -> xxx.yyy.71.173:5554 SYN ******S* Sep 28 00:54:54 221.233.132.96:4745 -> xxx.yyy.71.173:1023 SYN ******S* Sep 28 00:54:53 221.233.132.96:4013 -> xxx.yyy.71.163:5554 SYN ******S* Sep 28 00:54:53 221.233.132.96:4058 -> xxx.yyy.71.175:5554 SYN ******S* [...] Sep 28 00:56:04 221.233.132.96:3808 -> xxx.yyy.91.251:9898 SYN ******S* Sep 28 00:56:05 221.233.132.96:4093 -> xxx.yyy.92.3:9898 SYN ******S* Sep 28 00:56:05 221.233.132.96:4101 -> xxx.yyy.92.13:9898 SYN ******S* Sep 28 00:56:05 221.233.132.96:4117 -> xxx.yyy.92.18:9898 SYN ******S* Sep 28 00:56:05 221.233.132.96:4112 -> xxx.yyy.92.12:9898 SYN ******S* Sep 28 00:56:05 221.233.132.96:4114 -> xxx.yyy.92.15:9898 SYN ******S* Sep 28 00:56:05 221.233.132.96:3888 -> xxx.yyy.91.254:9898 SYN ******S* Sep 28 00:56:05 221.233.132.96:4063 -> xxx.yyy.92.4:9898 SYN ******S* Sep 28 00:56:05 221.233.132.96:4122 -> xxx.yyy.92.20:9898 SYN ******S* 5921 Sep 28 00:57:50 221.234.41.193:4012 -> xxx.yyy.195.128:5554 SYN ******S* Sep 28 00:57:50 221.234.41.193:4023 -> xxx.yyy.195.138:5554 SYN ******S* Sep 28 00:57:53 221.234.41.193:1493 -> xxx.yyy.195.138:9898 SYN ******S* Sep 28 00:57:50 221.234.41.193:4042 -> xxx.yyy.195.153:5554 SYN ******S* Sep 28 00:57:50 221.234.41.193:3968 -> xxx.yyy.195.99:5554 SYN ******S* Sep 28 00:57:51 221.234.41.193:4308 -> xxx.yyy.195.99:1023 SYN ******S* Sep 28 00:57:50 221.234.41.193:4087 -> xxx.yyy.195.169:5554 SYN ******S* Sep 28 00:57:50 221.234.41.193:3965 -> xxx.yyy.195.95:5554 SYN ******S* [...] Sep 28 00:58:49 221.234.41.193:3673 -> xxx.yyy.215.106:9898 SYN ******S* Sep 28 00:58:49 221.234.41.193:3705 -> xxx.yyy.215.126:9898 SYN ******S* Sep 28 00:58:50 221.234.41.193:3792 -> xxx.yyy.215.162:9898 SYN ******S* Sep 28 00:58:50 221.234.41.193:3832 -> xxx.yyy.215.192:9898 SYN ******S* Sep 28 00:58:50 221.234.41.193:3834 -> xxx.yyy.215.193:9898 SYN ******S* Sep 28 00:58:50 221.234.41.193:3845 -> xxx.yyy.215.197:9898 SYN ******S* Sep 28 00:58:50 221.234.41.193:3854 -> xxx.yyy.215.206:9898 SYN ******S* Sep 28 00:58:50 221.234.41.193:3997 -> xxx.yyy.215.207:9898 SYN ******S* 5698 Sep 28 00:56:39 61.185.146.81:1646 -> xxx.yyy.215.233:5554 SYN ******S* Sep 28 00:56:40 61.185.146.81:2356 -> xxx.yyy.215.233:1023 SYN ******S* Sep 28 00:56:39 61.185.146.81:1530 -> xxx.yyy.215.220:5554 SYN ******S* Sep 28 00:56:39 61.185.146.81:1783 -> xxx.yyy.216.14:5554 SYN ******S* Sep 28 00:56:42 61.185.146.81:4873 -> xxx.yyy.216.14:9898 SYN ******S* Sep 28 00:56:39 61.185.146.81:1796 -> xxx.yyy.216.16:5554 SYN ******S* Sep 28 00:56:42 61.185.146.81:4869 -> xxx.yyy.216.16:9898 SYN ******S* Sep 28 00:56:39 61.185.146.81:1626 -> xxx.yyy.215.228:5554 SYN ******S* [...] Sep 28 00:57:23 61.185.146.81:3671 -> xxx.yyy.236.76:9898 SYN ******S* Sep 28 00:57:23 61.185.146.81:3082 -> xxx.yyy.236.1:9898 SYN ******S* Sep 28 00:57:23 61.185.146.81:3089 -> xxx.yyy.236.7:9898 SYN ******S* Sep 28 00:57:23 61.185.146.81:3146 -> xxx.yyy.236.25:9898 SYN ******S* Sep 28 00:57:23 61.185.146.81:3139 -> xxx.yyy.236.17:9898 SYN ******S* Sep 28 00:57:23 61.185.146.81:3159 -> xxx.yyy.236.15:9898 SYN ******S* Sep 28 00:57:23 61.185.146.81:3283 -> xxx.yyy.236.45:9898 SYN ******S* Sep 28 00:57:23 61.185.146.81:3422 -> xxx.yyy.236.47:9898 SYN ******S* Sep 28 00:57:23 61.185.146.81:3485 -> xxx.yyy.236.61:9898 SYN ******S* 5078 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions