[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0500. Sep 29 01:20:46 141.164.66.83:1261 -> xxx.yyy.1.0:1433 SYN ******S* Sep 29 01:20:46 141.164.66.83:1266 -> xxx.yyy.1.1:1433 SYN ******S* Sep 29 01:20:44 141.164.66.83:1273 -> xxx.yyy.1.3:1433 SYN ******S* Sep 29 01:20:47 141.164.66.83:1270 -> xxx.yyy.1.2:1433 SYN ******S* Sep 29 01:20:47 141.164.66.83:1281 -> xxx.yyy.1.5:1433 SYN ******S* Sep 29 01:20:47 141.164.66.83:1278 -> xxx.yyy.1.4:1433 SYN ******S* Sep 29 01:20:47 141.164.66.83:1283 -> xxx.yyy.1.6:1433 SYN ******S* Sep 29 01:20:47 141.164.66.83:1285 -> xxx.yyy.1.7:1433 SYN ******S* [...] Sep 29 05:10:09 141.164.66.83:4770 -> xxx.yyy.255.246:1433 SYN ******S* Sep 29 05:10:09 141.164.66.83:4776 -> xxx.yyy.255.247:1433 SYN ******S* Sep 29 05:10:09 141.164.66.83:4789 -> xxx.yyy.255.250:1433 SYN ******S* Sep 29 05:10:09 141.164.66.83:4787 -> xxx.yyy.255.249:1433 SYN ******S* Sep 29 05:10:09 141.164.66.83:4783 -> xxx.yyy.255.248:1433 SYN ******S* Sep 29 05:10:10 141.164.66.83:4859 -> xxx.yyy.255.251:1433 SYN ******S* Sep 29 05:10:10 141.164.66.83:4885 -> xxx.yyy.255.254:1433 SYN ******S* Sep 29 05:10:10 141.164.66.83:4879 -> xxx.yyy.255.252:1433 SYN ******S* Sep 29 05:10:10 141.164.66.83:4880 -> xxx.yyy.255.253:1433 SYN ******S* 119783 Sep 29 04:07:24 81.220.32.168:2862 -> xxx.yyy.1.0:1433 SYN ******S* Sep 29 04:07:25 81.220.32.168:2864 -> xxx.yyy.1.1:1433 SYN ******S* Sep 29 04:07:25 81.220.32.168:2869 -> xxx.yyy.1.5:1433 SYN ******S* Sep 29 04:07:25 81.220.32.168:2870 -> xxx.yyy.1.6:1433 SYN ******S* Sep 29 04:07:25 81.220.32.168:2872 -> xxx.yyy.1.7:1433 SYN ******S* Sep 29 04:07:25 81.220.32.168:2874 -> xxx.yyy.1.8:1433 SYN ******S* Sep 29 04:07:25 81.220.32.168:2876 -> xxx.yyy.1.9:1433 SYN ******S* Sep 29 04:07:25 81.220.32.168:2878 -> xxx.yyy.1.10:1433 SYN ******S* [...] Sep 29 07:57:11 81.220.32.168:4222 -> xxx.yyy.255.236:1433 SYN ******S* Sep 29 07:57:11 81.220.32.168:4226 -> xxx.yyy.255.238:1433 SYN ******S* Sep 29 07:57:11 81.220.32.168:4223 -> xxx.yyy.255.237:1433 SYN ******S* Sep 29 07:57:11 81.220.32.168:4237 -> xxx.yyy.255.241:1433 SYN ******S* Sep 29 07:57:12 81.220.32.168:4270 -> xxx.yyy.255.246:1433 SYN ******S* Sep 29 07:57:12 81.220.32.168:4269 -> xxx.yyy.255.245:1433 SYN ******S* Sep 29 07:57:12 81.220.32.168:4268 -> xxx.yyy.255.244:1433 SYN ******S* Sep 29 07:57:12 81.220.32.168:4279 -> xxx.yyy.255.252:1433 SYN ******S* Sep 29 07:57:12 81.220.32.168:4280 -> xxx.yyy.255.253:1433 SYN ******S* 100514 Sep 29 02:56:51 213.180.210.35:33468 -> xxx.yyy.245.145:53601 SYN ******S* Sep 29 02:56:51 213.180.210.35:33468 -> xxx.yyy.245.145:31888 SYN ******S* Sep 29 02:56:51 213.180.210.35:33468 -> xxx.yyy.245.145:34157 SYN ******S* Sep 29 02:56:51 213.180.210.35:33468 -> xxx.yyy.245.145:54772 SYN ******S* Sep 29 02:56:51 213.180.210.35:33468 -> xxx.yyy.245.145:62764 SYN ******S* Sep 29 02:56:51 213.180.210.35:33468 -> xxx.yyy.245.145:12509 SYN ******S* Sep 29 02:56:51 213.180.210.35:33468 -> xxx.yyy.245.145:3100 SYN ******S* Sep 29 02:56:51 213.180.210.35:33468 -> xxx.yyy.245.145:39362 SYN ******S* [...] Sep 29 03:17:44 213.180.210.35:60134 -> xxx.yyy.234.184:6016 SYN ******S* Sep 29 03:17:44 213.180.210.35:60134 -> xxx.yyy.234.184:524 SYN ******S* Sep 29 03:17:44 213.180.210.35:60134 -> xxx.yyy.234.184:53 SYN ******S* Sep 29 03:17:44 213.180.210.35:60134 -> xxx.yyy.234.184:6008 SYN ******S* Sep 29 03:17:44 213.180.210.35:60134 -> xxx.yyy.234.184:6054 SYN ******S* Sep 29 03:17:44 213.180.210.35:60134 -> xxx.yyy.234.184:512 SYN ******S* Sep 29 03:17:44 213.180.210.35:60134 -> xxx.yyy.234.184:6006 SYN ******S* Sep 29 03:17:44 213.180.210.35:60134 -> xxx.yyy.234.184:6011 SYN ******S* Sep 29 03:17:44 213.180.210.35:60134 -> xxx.yyy.234.184:6026 SYN ******S* 74299 Sep 29 06:21:36 156.63.129.16:4202 -> xxx.yyy.1.1:1433 SYN ******S* Sep 29 06:21:36 156.63.129.16:4204 -> xxx.yyy.1.3:1433 SYN ******S* Sep 29 06:21:36 156.63.129.16:4203 -> xxx.yyy.1.2:1433 SYN ******S* Sep 29 06:21:36 156.63.129.16:4205 -> xxx.yyy.1.4:1433 SYN ******S* Sep 29 06:21:36 156.63.129.16:4206 -> xxx.yyy.1.5:1433 SYN ******S* Sep 29 06:21:33 156.63.129.16:4208 -> xxx.yyy.1.7:1433 SYN ******S* Sep 29 06:21:36 156.63.129.16:4209 -> xxx.yyy.1.8:1433 SYN ******S* Sep 29 06:21:36 156.63.129.16:4210 -> xxx.yyy.1.9:1433 SYN ******S* [...] Sep 29 06:33:15 156.63.129.16:2082 -> xxx.yyy.255.237:1433 SYN ******S* Sep 29 06:33:15 156.63.129.16:2097 -> xxx.yyy.255.252:1433 SYN ******S* Sep 29 06:33:15 156.63.129.16:2094 -> xxx.yyy.255.249:1433 SYN ******S* Sep 29 06:33:15 156.63.129.16:2092 -> xxx.yyy.255.247:1433 SYN ******S* Sep 29 06:33:15 156.63.129.16:2096 -> xxx.yyy.255.251:1433 SYN ******S* Sep 29 06:33:15 156.63.129.16:2093 -> xxx.yyy.255.248:1433 SYN ******S* Sep 29 06:33:15 156.63.129.16:2091 -> xxx.yyy.255.246:1433 SYN ******S* Sep 29 06:33:15 156.63.129.16:2098 -> xxx.yyy.255.253:1433 SYN ******S* Sep 29 06:33:15 156.63.129.16:2095 -> xxx.yyy.255.250:1433 SYN ******S* 68318 Sep 29 00:42:59 193.179.242.33:3296 -> xxx.yyy.1.1:139 SYN ******S* Sep 29 00:42:56 193.179.242.33:3297 -> xxx.yyy.1.2:139 SYN ******S* Sep 29 00:42:56 193.179.242.33:3298 -> xxx.yyy.1.3:139 SYN ******S* Sep 29 00:42:59 193.179.242.33:3299 -> xxx.yyy.1.4:139 SYN ******S* Sep 29 00:42:56 193.179.242.33:3300 -> xxx.yyy.1.5:139 SYN ******S* Sep 29 00:42:56 193.179.242.33:3301 -> xxx.yyy.1.6:139 SYN ******S* Sep 29 00:42:59 193.179.242.33:3302 -> xxx.yyy.1.7:139 SYN ******S* Sep 29 00:42:59 193.179.242.33:3303 -> xxx.yyy.1.8:139 SYN ******S* [...] Sep 29 00:54:53 193.179.242.33:2465 -> xxx.yyy.255.245:139 SYN ******S* Sep 29 00:54:53 193.179.242.33:2469 -> xxx.yyy.255.249:139 SYN ******S* Sep 29 00:54:53 193.179.242.33:2464 -> xxx.yyy.255.244:139 SYN ******S* Sep 29 00:54:53 193.179.242.33:2468 -> xxx.yyy.255.248:139 SYN ******S* Sep 29 00:54:53 193.179.242.33:2466 -> xxx.yyy.255.246:139 SYN ******S* Sep 29 00:54:53 193.179.242.33:2463 -> xxx.yyy.255.243:139 SYN ******S* Sep 29 00:54:53 193.179.242.33:2471 -> xxx.yyy.255.251:139 SYN ******S* Sep 29 00:54:53 193.179.242.33:2472 -> xxx.yyy.255.252:139 SYN ******S* Sep 29 00:54:53 193.179.242.33:2473 -> xxx.yyy.255.253:139 SYN ******S* 56221 Sep 29 23:03:00 216.229.142.202:2946 -> xxx.yyy.1.1:4899 SYN ******S* Sep 29 23:03:01 216.229.142.202:2947 -> xxx.yyy.1.2:4899 SYN ******S* Sep 29 23:03:01 216.229.142.202:2948 -> xxx.yyy.1.3:4899 SYN ******S* Sep 29 23:03:03 216.229.142.202:2949 -> xxx.yyy.1.4:4899 SYN ******S* Sep 29 23:03:03 216.229.142.202:2956 -> xxx.yyy.1.9:4899 SYN ******S* Sep 29 23:03:00 216.229.142.202:2959 -> xxx.yyy.1.10:4899 SYN ******S* Sep 29 23:03:01 216.229.142.202:2962 -> xxx.yyy.1.11:4899 SYN ******S* Sep 29 23:03:03 216.229.142.202:2964 -> xxx.yyy.1.12:4899 SYN ******S* [...] Sep 29 23:14:46 216.229.142.202:2879 -> xxx.yyy.255.239:4899 SYN ******S* Sep 29 23:14:46 216.229.142.202:2891 -> xxx.yyy.255.248:4899 SYN ******S* Sep 29 23:14:46 216.229.142.202:2887 -> xxx.yyy.255.245:4899 SYN ******S* Sep 29 23:14:46 216.229.142.202:2851 -> xxx.yyy.255.214:4899 SYN ******S* Sep 29 23:14:46 216.229.142.202:2847 -> xxx.yyy.255.211:4899 SYN ******S* Sep 29 23:14:46 216.229.142.202:2872 -> xxx.yyy.255.233:4899 SYN ******S* Sep 29 23:14:46 216.229.142.202:2893 -> xxx.yyy.255.250:4899 SYN ******S* Sep 29 23:14:46 216.229.142.202:2853 -> xxx.yyy.255.216:4899 SYN ******S* Sep 29 23:14:46 216.229.142.202:2881 -> xxx.yyy.255.241:4899 SYN ******S* 54358 Sep 29 10:34:30 211.157.101.128:1077 -> xxx.yyy.1.1:1433 SYN ******S* Sep 29 10:34:30 211.157.101.128:1080 -> xxx.yyy.1.2:1433 SYN ******S* Sep 29 10:34:27 211.157.101.128:1088 -> xxx.yyy.1.7:1433 SYN ******S* Sep 29 10:34:30 211.157.101.128:1091 -> xxx.yyy.1.10:1433 SYN ******S* Sep 29 10:34:30 211.157.101.128:1096 -> xxx.yyy.1.15:1433 SYN ******S* Sep 29 10:34:30 211.157.101.128:1099 -> xxx.yyy.1.17:1433 SYN ******S* Sep 29 10:34:27 211.157.101.128:1101 -> xxx.yyy.1.18:1433 SYN ******S* Sep 29 10:34:30 211.157.101.128:1107 -> xxx.yyy.1.21:1433 SYN ******S* [...] Sep 29 10:46:16 211.157.101.128:2597 -> xxx.yyy.255.204:1433 SYN ******S* Sep 29 10:46:16 211.157.101.128:2602 -> xxx.yyy.255.206:1433 SYN ******S* Sep 29 10:46:17 211.157.101.128:2648 -> xxx.yyy.255.227:1433 SYN ******S* Sep 29 10:46:17 211.157.101.128:2654 -> xxx.yyy.255.229:1433 SYN ******S* Sep 29 10:46:17 211.157.101.128:2657 -> xxx.yyy.255.231:1433 SYN ******S* Sep 29 10:46:17 211.157.101.128:2662 -> xxx.yyy.255.232:1433 SYN ******S* Sep 29 10:46:17 211.157.101.128:2692 -> xxx.yyy.255.252:1433 SYN ******S* Sep 29 10:46:17 211.157.101.128:2688 -> xxx.yyy.255.250:1433 SYN ******S* Sep 29 10:46:17 211.157.101.128:2691 -> xxx.yyy.255.251:1433 SYN ******S* 41789 Sep 29 07:13:59 217.85.110.91:4060 -> xxx.yyy.1.13:1433 SYN ******S* Sep 29 07:13:59 217.85.110.91:4070 -> xxx.yyy.1.17:1433 SYN ******S* Sep 29 07:13:59 217.85.110.91:4073 -> xxx.yyy.1.18:1433 SYN ******S* Sep 29 07:13:59 217.85.110.91:4075 -> xxx.yyy.1.19:1433 SYN ******S* Sep 29 07:13:59 217.85.110.91:4077 -> xxx.yyy.1.20:1433 SYN ******S* Sep 29 07:13:59 217.85.110.91:4079 -> xxx.yyy.1.21:1433 SYN ******S* Sep 29 07:13:59 217.85.110.91:4083 -> xxx.yyy.1.23:1433 SYN ******S* Sep 29 07:13:59 217.85.110.91:4085 -> xxx.yyy.1.24:1433 SYN ******S* [...] Sep 29 07:25:26 217.85.110.91:3229 -> xxx.yyy.255.155:1433 SYN ******S* Sep 29 07:25:26 217.85.110.91:3238 -> xxx.yyy.255.160:1433 SYN ******S* Sep 29 07:25:26 217.85.110.91:3249 -> xxx.yyy.255.165:1433 SYN ******S* Sep 29 07:25:27 217.85.110.91:3267 -> xxx.yyy.255.174:1433 SYN ******S* Sep 29 07:25:27 217.85.110.91:3304 -> xxx.yyy.255.192:1433 SYN ******S* Sep 29 07:25:27 217.85.110.91:3342 -> xxx.yyy.255.211:1433 SYN ******S* Sep 29 07:25:27 217.85.110.91:3362 -> xxx.yyy.255.221:1433 SYN ******S* Sep 29 07:25:27 217.85.110.91:3402 -> xxx.yyy.255.241:1433 SYN ******S* Sep 29 07:25:27 217.85.110.91:3418 -> xxx.yyy.255.249:1433 SYN ******S* 39735 Sep 29 10:22:42 216.185.96.108:2911 -> xxx.yyy.1.3:1433 SYN ******S* Sep 29 10:22:42 216.185.96.108:2912 -> xxx.yyy.1.4:1433 SYN ******S* Sep 29 10:22:42 216.185.96.108:2913 -> xxx.yyy.1.5:1433 SYN ******S* Sep 29 10:22:42 216.185.96.108:2914 -> xxx.yyy.1.6:1433 SYN ******S* Sep 29 10:22:39 216.185.96.108:2917 -> xxx.yyy.1.9:1433 SYN ******S* Sep 29 10:22:39 216.185.96.108:2925 -> xxx.yyy.1.17:1433 SYN ******S* Sep 29 10:22:42 216.185.96.108:2930 -> xxx.yyy.1.22:1433 SYN ******S* Sep 29 10:22:39 216.185.96.108:2932 -> xxx.yyy.1.24:1433 SYN ******S* [...] Sep 29 10:38:10 216.185.96.108:4126 -> xxx.yyy.255.235:1433 SYN ******S* Sep 29 10:38:10 216.185.96.108:4137 -> xxx.yyy.255.246:1433 SYN ******S* Sep 29 10:38:10 216.185.96.108:4140 -> xxx.yyy.255.249:1433 SYN ******S* Sep 29 10:38:10 216.185.96.108:4144 -> xxx.yyy.255.253:1433 SYN ******S* Sep 29 10:38:10 216.185.96.108:4143 -> xxx.yyy.255.252:1433 SYN ******S* Sep 29 10:38:10 216.185.96.108:4139 -> xxx.yyy.255.248:1433 SYN ******S* Sep 29 10:38:10 216.185.96.108:4142 -> xxx.yyy.255.251:1433 SYN ******S* Sep 29 10:38:10 216.185.96.108:4141 -> xxx.yyy.255.250:1433 SYN ******S* 39661 Sep 29 16:36:50 83.213.131.224:4119 -> xxx.yyy.1.1:1433 SYN ******S* Sep 29 16:36:51 83.213.131.224:4124 -> xxx.yyy.1.6:1433 SYN ******S* Sep 29 16:36:53 83.213.131.224:4125 -> xxx.yyy.1.7:1433 SYN ******S* Sep 29 16:36:51 83.213.131.224:4126 -> xxx.yyy.1.8:1433 SYN ******S* Sep 29 16:36:51 83.213.131.224:4127 -> xxx.yyy.1.9:1433 SYN ******S* Sep 29 16:36:51 83.213.131.224:4129 -> xxx.yyy.1.11:1433 SYN ******S* Sep 29 16:36:51 83.213.131.224:4135 -> xxx.yyy.1.17:1433 SYN ******S* Sep 29 16:36:51 83.213.131.224:4133 -> xxx.yyy.1.15:1433 SYN ******S* [...] Sep 29 16:48:34 83.213.131.224:3580 -> xxx.yyy.255.221:1433 SYN ******S* Sep 29 16:48:34 83.213.131.224:3577 -> xxx.yyy.255.218:1433 SYN ******S* Sep 29 16:48:34 83.213.131.224:3578 -> xxx.yyy.255.219:1433 SYN ******S* Sep 29 16:48:34 83.213.131.224:3579 -> xxx.yyy.255.220:1433 SYN ******S* Sep 29 16:48:34 83.213.131.224:3602 -> xxx.yyy.255.243:1433 SYN ******S* Sep 29 16:48:34 83.213.131.224:3609 -> xxx.yyy.255.250:1433 SYN ******S* Sep 29 16:48:34 83.213.131.224:3607 -> xxx.yyy.255.248:1433 SYN ******S* Sep 29 16:48:34 83.213.131.224:3608 -> xxx.yyy.255.249:1433 SYN ******S* 38201 Sep 29 16:01:24 66.15.107.170:14353 -> xxx.yyy.1.1:1433 SYN ******S* Sep 29 16:01:24 66.15.107.170:14355 -> xxx.yyy.1.2:1433 SYN ******S* Sep 29 16:01:24 66.15.107.170:14357 -> xxx.yyy.1.3:1433 SYN ******S* Sep 29 16:01:24 66.15.107.170:14361 -> xxx.yyy.1.5:1433 SYN ******S* Sep 29 16:01:24 66.15.107.170:14365 -> xxx.yyy.1.7:1433 SYN ******S* Sep 29 16:01:27 66.15.107.170:14367 -> xxx.yyy.1.8:1433 SYN ******S* Sep 29 16:01:24 66.15.107.170:14373 -> xxx.yyy.1.11:1433 SYN ******S* Sep 29 16:01:24 66.15.107.170:14375 -> xxx.yyy.1.12:1433 SYN ******S* [...] Sep 29 16:13:04 66.15.107.170:31557 -> xxx.yyy.255.236:1433 SYN ******S* Sep 29 16:13:04 66.15.107.170:31559 -> xxx.yyy.255.237:1433 SYN ******S* Sep 29 16:13:04 66.15.107.170:31561 -> xxx.yyy.255.238:1433 SYN ******S* Sep 29 16:13:04 66.15.107.170:31569 -> xxx.yyy.255.242:1433 SYN ******S* Sep 29 16:13:04 66.15.107.170:31573 -> xxx.yyy.255.244:1433 SYN ******S* Sep 29 16:13:04 66.15.107.170:31579 -> xxx.yyy.255.247:1433 SYN ******S* Sep 29 16:13:04 66.15.107.170:31583 -> xxx.yyy.255.249:1433 SYN ******S* Sep 29 16:13:04 66.15.107.170:31593 -> xxx.yyy.255.254:1433 SYN ******S* 38170 Sep 29 00:52:43 222.132.246.14:3525 -> xxx.yyy.1.0:1433 SYN ******S* Sep 29 00:52:43 222.132.246.14:3526 -> xxx.yyy.1.1:1433 SYN ******S* Sep 29 00:52:43 222.132.246.14:3527 -> xxx.yyy.1.2:1433 SYN ******S* Sep 29 00:52:40 222.132.246.14:3528 -> xxx.yyy.1.3:1433 SYN ******S* Sep 29 00:52:40 222.132.246.14:3531 -> xxx.yyy.1.4:1433 SYN ******S* Sep 29 00:52:43 222.132.246.14:3534 -> xxx.yyy.1.5:1433 SYN ******S* Sep 29 00:52:40 222.132.246.14:3540 -> xxx.yyy.1.7:1433 SYN ******S* Sep 29 00:52:40 222.132.246.14:3542 -> xxx.yyy.1.8:1433 SYN ******S* [...] Sep 29 02:53:03 222.132.246.14:3155 -> xxx.yyy.135.13:1433 SYN ******S* Sep 29 02:53:03 222.132.246.14:3158 -> xxx.yyy.135.15:1433 SYN ******S* Sep 29 02:53:03 222.132.246.14:3157 -> xxx.yyy.135.14:1433 SYN ******S* Sep 29 02:53:03 222.132.246.14:3162 -> xxx.yyy.135.17:1433 SYN ******S* Sep 29 02:53:03 222.132.246.14:3163 -> xxx.yyy.135.18:1433 SYN ******S* Sep 29 02:53:03 222.132.246.14:3161 -> xxx.yyy.135.16:1433 SYN ******S* Sep 29 02:53:03 222.132.246.14:3172 -> xxx.yyy.135.19:1433 SYN ******S* Sep 29 02:53:03 222.132.246.14:3192 -> xxx.yyy.135.21:1433 SYN ******S* Sep 29 02:53:03 222.132.246.14:3189 -> xxx.yyy.135.20:1433 SYN ******S* 35723 Sep 29 23:16:10 61.83.199.105:3052 -> xxx.yyy.1.6:4899 SYN ******S* Sep 29 23:16:10 61.83.199.105:3048 -> xxx.yyy.1.2:4899 SYN ******S* Sep 29 23:16:10 61.83.199.105:3049 -> xxx.yyy.1.3:4899 SYN ******S* Sep 29 23:16:10 61.83.199.105:3050 -> xxx.yyy.1.4:4899 SYN ******S* Sep 29 23:16:10 61.83.199.105:3047 -> xxx.yyy.1.1:4899 SYN ******S* Sep 29 23:16:10 61.83.199.105:3058 -> xxx.yyy.1.12:4899 SYN ******S* Sep 29 23:16:11 61.83.199.105:3062 -> xxx.yyy.1.14:4899 SYN ******S* Sep 29 23:16:10 61.83.199.105:3054 -> xxx.yyy.1.8:4899 SYN ******S* [...] Sep 29 23:20:35 61.83.199.105:4310 -> xxx.yyy.254.229:4899 SYN ******S* Sep 29 23:20:35 61.83.199.105:4319 -> xxx.yyy.254.233:4899 SYN ******S* Sep 29 23:20:35 61.83.199.105:4327 -> xxx.yyy.254.241:4899 SYN ******S* Sep 29 23:20:35 61.83.199.105:4333 -> xxx.yyy.254.246:4899 SYN ******S* Sep 29 23:20:35 61.83.199.105:4334 -> xxx.yyy.254.247:4899 SYN ******S* Sep 29 23:20:35 61.83.199.105:4325 -> xxx.yyy.254.239:4899 SYN ******S* Sep 29 23:20:35 61.83.199.105:4326 -> xxx.yyy.254.240:4899 SYN ******S* Sep 29 23:20:35 61.83.199.105:4335 -> xxx.yyy.254.248:4899 SYN ******S* Sep 29 23:20:35 61.83.199.105:4343 -> xxx.yyy.254.253:4899 SYN ******S* 24583 Sep 29 10:44:38 61.249.23.22:4828 -> xxx.yyy.1.4:4899 SYN ******S* Sep 29 10:44:38 61.249.23.22:4836 -> xxx.yyy.1.9:4899 SYN ******S* Sep 29 10:44:39 61.249.23.22:4842 -> xxx.yyy.1.11:4899 SYN ******S* Sep 29 10:44:38 61.249.23.22:4851 -> xxx.yyy.1.12:4899 SYN ******S* Sep 29 10:44:38 61.249.23.22:4918 -> xxx.yyy.1.18:4899 SYN ******S* Sep 29 10:44:38 61.249.23.22:4872 -> xxx.yyy.1.17:4899 SYN ******S* Sep 29 10:44:39 61.249.23.22:4921 -> xxx.yyy.1.19:4899 SYN ******S* Sep 29 10:44:39 61.249.23.22:4931 -> xxx.yyy.1.20:4899 SYN ******S* [...] Sep 29 10:49:40 61.249.23.22:3522 -> xxx.yyy.255.244:4899 SYN ******S* Sep 29 10:49:40 61.249.23.22:3564 -> xxx.yyy.255.248:4899 SYN ******S* Sep 29 10:49:40 61.249.23.22:3546 -> xxx.yyy.255.246:4899 SYN ******S* Sep 29 10:49:40 61.249.23.22:3517 -> xxx.yyy.255.242:4899 SYN ******S* Sep 29 10:49:40 61.249.23.22:3549 -> xxx.yyy.255.247:4899 SYN ******S* Sep 29 10:49:40 61.249.23.22:3717 -> xxx.yyy.255.251:4899 SYN ******S* Sep 29 10:49:40 61.249.23.22:3619 -> xxx.yyy.255.249:4899 SYN ******S* Sep 29 10:49:40 61.249.23.22:3791 -> xxx.yyy.255.252:4899 SYN ******S* 19771 Sep 29 01:15:41 218.80.201.91:41692 -> xxx.yyy.1.0:6112 SYN ******S* Sep 29 01:15:41 218.80.201.91:41698 -> xxx.yyy.1.3:6112 SYN ******S* Sep 29 01:15:41 218.80.201.91:41708 -> xxx.yyy.1.9:6112 SYN ******S* Sep 29 01:15:41 218.80.201.91:41756 -> xxx.yyy.1.33:6112 SYN ******S* Sep 29 01:15:41 218.80.201.91:41758 -> xxx.yyy.1.34:6112 SYN ******S* Sep 29 01:15:41 218.80.201.91:41761 -> xxx.yyy.1.36:6112 SYN ******S* Sep 29 01:15:41 218.80.201.91:41766 -> xxx.yyy.1.39:6112 SYN ******S* Sep 29 01:15:41 218.80.201.91:41765 -> xxx.yyy.1.38:6112 SYN ******S* [...] Sep 29 01:18:52 218.80.201.91:48246 -> xxx.yyy.255.237:6112 SYN ******S* Sep 29 01:18:52 218.80.201.91:48254 -> xxx.yyy.255.241:6112 SYN ******S* Sep 29 01:18:52 218.80.201.91:48255 -> xxx.yyy.255.242:6112 SYN ******S* Sep 29 01:18:52 218.80.201.91:48267 -> xxx.yyy.255.248:6112 SYN ******S* Sep 29 01:18:52 218.80.201.91:48268 -> xxx.yyy.255.249:6112 SYN ******S* Sep 29 01:18:52 218.80.201.91:48270 -> xxx.yyy.255.250:6112 SYN ******S* Sep 29 01:18:54 218.80.201.91:47231 -> xxx.yyy.253.217:6112 SYN ******S* Sep 29 01:18:54 218.80.201.91:47236 -> xxx.yyy.253.220:6112 SYN ******S* 16079 Sep 29 07:50:55 61.100.205.107:3240 -> xxx.yyy.1.10:1433 SYN ******S* Sep 29 07:50:55 61.100.205.107:3265 -> xxx.yyy.1.35:1433 SYN ******S* Sep 29 07:50:55 61.100.205.107:3256 -> xxx.yyy.1.26:1433 SYN ******S* Sep 29 07:50:55 61.100.205.107:3266 -> xxx.yyy.1.36:1433 SYN ******S* Sep 29 07:50:55 61.100.205.107:3268 -> xxx.yyy.1.38:1433 SYN ******S* Sep 29 07:50:58 61.100.205.107:3269 -> xxx.yyy.1.39:1433 SYN ******S* Sep 29 07:50:55 61.100.205.107:3272 -> xxx.yyy.1.42:1433 SYN ******S* Sep 29 07:50:55 61.100.205.107:3271 -> xxx.yyy.1.41:1433 SYN ******S* [...] Sep 29 07:59:05 61.100.205.107:3083 -> xxx.yyy.255.148:1433 SYN ******S* Sep 29 07:59:05 61.100.205.107:3170 -> xxx.yyy.255.235:1433 SYN ******S* Sep 29 07:59:05 61.100.205.107:3173 -> xxx.yyy.255.238:1433 SYN ******S* Sep 29 07:59:05 61.100.205.107:3174 -> xxx.yyy.255.239:1433 SYN ******S* Sep 29 07:59:05 61.100.205.107:3175 -> xxx.yyy.255.240:1433 SYN ******S* Sep 29 07:59:05 61.100.205.107:3176 -> xxx.yyy.255.241:1433 SYN ******S* Sep 29 07:59:05 61.100.205.107:3180 -> xxx.yyy.255.245:1433 SYN ******S* Sep 29 07:59:05 61.100.205.107:3177 -> xxx.yyy.255.242:1433 SYN ******S* 13777 Sep 29 06:56:11 80.180.215.184:2619 -> xxx.yyy.71.163:5554 SYN ******S* Sep 29 06:56:12 80.180.215.184:3295 -> xxx.yyy.71.163:1023 SYN ******S* Sep 29 06:56:14 80.180.215.184:4958 -> xxx.yyy.71.163:9898 SYN ******S* Sep 29 06:56:11 80.180.215.184:2629 -> xxx.yyy.71.165:5554 SYN ******S* Sep 29 06:56:12 80.180.215.184:3352 -> xxx.yyy.71.165:1023 SYN ******S* Sep 29 06:56:14 80.180.215.184:4985 -> xxx.yyy.71.165:9898 SYN ******S* Sep 29 06:56:11 80.180.215.184:2631 -> xxx.yyy.71.167:5554 SYN ******S* Sep 29 06:56:14 80.180.215.184:4972 -> xxx.yyy.71.167:9898 SYN ******S* [...] Sep 29 06:56:56 80.180.215.184:2638 -> xxx.yyy.90.244:9898 SYN ******S* Sep 29 06:56:56 80.180.215.184:2640 -> xxx.yyy.90.248:9898 SYN ******S* Sep 29 06:56:56 80.180.215.184:2644 -> xxx.yyy.90.250:9898 SYN ******S* Sep 29 06:56:57 80.180.215.184:2954 -> xxx.yyy.91.18:9898 SYN ******S* Sep 29 06:56:57 80.180.215.184:2953 -> xxx.yyy.91.16:9898 SYN ******S* Sep 29 06:56:57 80.180.215.184:2967 -> xxx.yyy.91.28:9898 SYN ******S* Sep 29 06:56:57 80.180.215.184:3033 -> xxx.yyy.91.64:9898 SYN ******S* Sep 29 06:56:58 80.180.215.184:3681 -> xxx.yyy.91.171:9898 SYN ******S* Sep 29 06:56:59 80.180.215.184:4417 -> xxx.yyy.71.162:9898 SYN ******S* 10614 Sep 29 01:01:04 221.10.44.89:14182 -> xxx.yyy.154.103:5554 SYN ******S* Sep 29 01:01:05 221.10.44.89:14991 -> xxx.yyy.154.103:1023 SYN ******S* Sep 29 01:01:04 221.10.44.89:11491 -> xxx.yyy.154.109:5554 SYN ******S* Sep 29 01:01:05 221.10.44.89:11649 -> xxx.yyy.154.109:1023 SYN ******S* Sep 29 01:01:04 221.10.44.89:14186 -> xxx.yyy.155.9:5554 SYN ******S* Sep 29 01:01:05 221.10.44.89:11647 -> xxx.yyy.155.9:1023 SYN ******S* Sep 29 01:01:07 221.10.44.89:12170 -> xxx.yyy.155.9:9898 SYN ******S* Sep 29 01:01:04 221.10.44.89:11498 -> xxx.yyy.154.108:5554 SYN ******S* [...] Sep 29 01:02:06 221.10.44.89:15107 -> xxx.yyy.154.199:9898 SYN ******S* Sep 29 01:02:06 221.10.44.89:14588 -> xxx.yyy.154.203:9898 SYN ******S* Sep 29 01:02:06 221.10.44.89:12788 -> xxx.yyy.154.207:9898 SYN ******S* Sep 29 01:02:06 221.10.44.89:14591 -> xxx.yyy.154.208:9898 SYN ******S* Sep 29 01:02:06 221.10.44.89:12795 -> xxx.yyy.154.202:9898 SYN ******S* Sep 29 01:02:06 221.10.44.89:12808 -> xxx.yyy.154.225:9898 SYN ******S* Sep 29 01:02:06 221.10.44.89:12834 -> xxx.yyy.154.233:9898 SYN ******S* Sep 29 01:02:06 221.10.44.89:12835 -> xxx.yyy.154.234:9898 SYN ******S* Sep 29 01:02:06 221.10.44.89:12855 -> xxx.yyy.154.230:9898 SYN ******S* 10189 Sep 29 00:57:59 221.200.34.203:4566 -> xxx.yyy.133.234:5554 SYN ******S* Sep 29 00:58:02 221.200.34.203:1299 -> xxx.yyy.133.234:9898 SYN ******S* Sep 29 00:57:59 221.200.34.203:4567 -> xxx.yyy.133.235:5554 SYN ******S* Sep 29 00:58:02 221.200.34.203:1300 -> xxx.yyy.133.235:9898 SYN ******S* Sep 29 00:57:59 221.200.34.203:4569 -> xxx.yyy.133.237:5554 SYN ******S* Sep 29 00:58:02 221.200.34.203:1302 -> xxx.yyy.133.237:9898 SYN ******S* Sep 29 00:57:59 221.200.34.203:4570 -> xxx.yyy.133.238:5554 SYN ******S* Sep 29 00:58:02 221.200.34.203:1303 -> xxx.yyy.133.238:9898 SYN ******S* [...] Sep 29 00:59:49 221.200.34.203:3046 -> xxx.yyy.135.21:9898 SYN ******S* Sep 29 00:59:49 221.200.34.203:3045 -> xxx.yyy.135.20:9898 SYN ******S* Sep 29 00:59:49 221.200.34.203:3049 -> xxx.yyy.134.180:9898 SYN ******S* Sep 29 00:59:49 221.200.34.203:3172 -> xxx.yyy.135.30:9898 SYN ******S* Sep 29 00:59:49 221.200.34.203:3173 -> xxx.yyy.135.31:9898 SYN ******S* Sep 29 00:59:49 221.200.34.203:3174 -> xxx.yyy.135.47:9898 SYN ******S* Sep 29 00:59:49 221.200.34.203:3190 -> xxx.yyy.135.46:9898 SYN ******S* Sep 29 00:59:49 221.200.34.203:3191 -> xxx.yyy.135.48:9898 SYN ******S* 10075 Sep 29 23:53:04 222.113.60.42:2203 -> xxx.yyy.133.234:5554 SYN ******S* Sep 29 23:53:05 222.113.60.42:2658 -> xxx.yyy.133.234:1023 SYN ******S* Sep 29 23:53:07 222.113.60.42:1537 -> xxx.yyy.133.234:9898 SYN ******S* Sep 29 23:53:04 222.113.60.42:2228 -> xxx.yyy.133.242:5554 SYN ******S* Sep 29 23:53:05 222.113.60.42:2687 -> xxx.yyy.133.242:1023 SYN ******S* Sep 29 23:53:04 222.113.60.42:4265 -> xxx.yyy.133.235:5554 SYN ******S* Sep 29 23:53:05 222.113.60.42:4720 -> xxx.yyy.133.235:1023 SYN ******S* Sep 29 23:53:07 222.113.60.42:1540 -> xxx.yyy.133.235:9898 SYN ******S* [...] Sep 29 23:53:53 222.113.60.42:2942 -> xxx.yyy.154.79:9898 SYN ******S* Sep 29 23:53:53 222.113.60.42:5001 -> xxx.yyy.154.83:9898 SYN ******S* Sep 29 23:53:53 222.113.60.42:4999 -> xxx.yyy.154.81:9898 SYN ******S* Sep 29 23:53:53 222.113.60.42:5000 -> xxx.yyy.154.82:9898 SYN ******S* Sep 29 23:53:53 222.113.60.42:5014 -> xxx.yyy.154.84:9898 SYN ******S* Sep 29 23:53:53 222.113.60.42:5053 -> xxx.yyy.154.90:9898 SYN ******S* Sep 29 23:53:53 222.113.60.42:5059 -> xxx.yyy.154.96:9898 SYN ******S* Sep 29 23:53:53 222.113.60.42:5064 -> xxx.yyy.154.99:9898 SYN ******S* Sep 29 23:53:53 222.113.60.42:5061 -> xxx.yyy.154.98:9898 SYN ******S* 8775 Sep 29 00:56:58 61.51.188.191:3529 -> xxx.yyy.236.81:5554 SYN ******S* Sep 29 00:56:59 61.51.188.191:3886 -> xxx.yyy.236.81:1023 SYN ******S* Sep 29 00:56:58 61.51.188.191:3542 -> xxx.yyy.236.85:5554 SYN ******S* Sep 29 00:57:01 61.51.188.191:4794 -> xxx.yyy.236.85:9898 SYN ******S* Sep 29 00:56:58 61.51.188.191:3545 -> xxx.yyy.236.86:5554 SYN ******S* Sep 29 00:56:59 61.51.188.191:3891 -> xxx.yyy.236.86:1023 SYN ******S* Sep 29 00:56:58 61.51.188.191:3532 -> xxx.yyy.236.84:5554 SYN ******S* Sep 29 00:56:59 61.51.188.191:3889 -> xxx.yyy.236.84:1023 SYN ******S* [...] Sep 29 00:58:07 61.51.188.191:4172 -> xxx.yyy.237.59:9898 SYN ******S* Sep 29 00:58:07 61.51.188.191:4177 -> xxx.yyy.237.63:9898 SYN ******S* Sep 29 00:58:07 61.51.188.191:4190 -> xxx.yyy.237.76:9898 SYN ******S* Sep 29 00:58:07 61.51.188.191:4191 -> xxx.yyy.237.78:9898 SYN ******S* Sep 29 00:58:07 61.51.188.191:4213 -> xxx.yyy.237.91:9898 SYN ******S* Sep 29 00:58:07 61.51.188.191:4214 -> xxx.yyy.237.93:9898 SYN ******S* Sep 29 00:58:07 61.51.188.191:4215 -> xxx.yyy.237.95:9898 SYN ******S* Sep 29 00:58:07 61.51.188.191:4218 -> xxx.yyy.237.101:9898 SYN ******S* Sep 29 00:58:07 61.51.188.191:4219 -> xxx.yyy.237.103:9898 SYN ******S* 7869 [...] 7483 Sep 29 22:33:52 217.209.136.157:3974 -> xxx.yyy.1.11:4128 SYN ******S* Sep 29 22:33:52 217.209.136.157:3975 -> xxx.yyy.1.12:4128 SYN ******S* Sep 29 22:33:52 217.209.136.157:3932 -> xxx.yyy.1.19:4128 SYN ******S* Sep 29 22:33:52 217.209.136.157:3933 -> xxx.yyy.1.20:4128 SYN ******S* Sep 29 22:33:52 217.209.136.157:3934 -> xxx.yyy.1.21:4128 SYN ******S* Sep 29 22:33:52 217.209.136.157:3964 -> xxx.yyy.1.51:4128 SYN ******S* Sep 29 22:33:52 217.209.136.157:3965 -> xxx.yyy.1.52:4128 SYN ******S* Sep 29 22:33:52 217.209.136.157:3973 -> xxx.yyy.1.60:4128 SYN ******S* [...] Sep 29 22:34:19 217.209.136.157:3938 -> xxx.yyy.255.205:4128 SYN ******S* Sep 29 22:34:19 217.209.136.157:3939 -> xxx.yyy.255.206:4128 SYN ******S* Sep 29 22:34:19 217.209.136.157:3948 -> xxx.yyy.255.215:4128 SYN ******S* Sep 29 22:34:19 217.209.136.157:3951 -> xxx.yyy.255.218:4128 SYN ******S* Sep 29 22:34:19 217.209.136.157:3958 -> xxx.yyy.255.225:4128 SYN ******S* Sep 29 22:34:19 217.209.136.157:3959 -> xxx.yyy.255.226:4128 SYN ******S* Sep 29 22:34:19 217.209.136.157:3968 -> xxx.yyy.255.235:4128 SYN ******S* Sep 29 22:34:19 217.209.136.157:3971 -> xxx.yyy.255.238:4128 SYN ******S* Sep 29 22:34:19 217.209.136.157:3928 -> xxx.yyy.255.245:4128 SYN ******S* 7195 [...] 6879 Sep 29 00:00:40 220.210.8.139:1164 -> xxx.yyy.174.225:5554 SYN ******S* Sep 29 00:00:41 220.210.8.139:1443 -> xxx.yyy.174.225:1023 SYN ******S* Sep 29 00:00:43 220.210.8.139:2126 -> xxx.yyy.174.225:9898 SYN ******S* Sep 29 00:00:40 220.210.8.139:1163 -> xxx.yyy.174.224:5554 SYN ******S* Sep 29 00:00:40 220.210.8.139:1179 -> xxx.yyy.174.231:5554 SYN ******S* Sep 29 00:00:43 220.210.8.139:2139 -> xxx.yyy.174.231:9898 SYN ******S* Sep 29 00:00:40 220.210.8.139:1180 -> xxx.yyy.174.232:5554 SYN ******S* Sep 29 00:00:43 220.210.8.139:2140 -> xxx.yyy.174.232:9898 SYN ******S* [...] Sep 29 00:01:50 220.210.8.139:3882 -> xxx.yyy.194.244:9898 SYN ******S* Sep 29 00:01:50 220.210.8.139:3893 -> xxx.yyy.195.63:9898 SYN ******S* Sep 29 00:01:50 220.210.8.139:3891 -> xxx.yyy.195.13:9898 SYN ******S* Sep 29 00:01:50 220.210.8.139:3890 -> xxx.yyy.194.254:9898 SYN ******S* Sep 29 00:01:50 220.210.8.139:3894 -> xxx.yyy.195.65:9898 SYN ******S* Sep 29 00:01:50 220.210.8.139:3895 -> xxx.yyy.195.68:9898 SYN ******S* Sep 29 00:01:50 220.210.8.139:3896 -> xxx.yyy.195.69:9898 SYN ******S* Sep 29 00:01:50 220.210.8.139:3897 -> xxx.yyy.195.70:9898 SYN ******S* Sep 29 00:01:50 220.210.8.139:3899 -> xxx.yyy.195.59:9898 SYN ******S* 6603 Sep 29 00:56:25 221.127.90.37:1999 -> xxx.yyy.236.76:5554 SYN ******S* Sep 29 00:56:26 221.127.90.37:2469 -> xxx.yyy.236.76:1023 SYN ******S* Sep 29 00:56:28 221.127.90.37:3426 -> xxx.yyy.236.76:9898 SYN ******S* Sep 29 00:56:25 221.127.90.37:2000 -> xxx.yyy.236.77:5554 SYN ******S* Sep 29 00:56:26 221.127.90.37:2470 -> xxx.yyy.236.77:1023 SYN ******S* Sep 29 00:56:28 221.127.90.37:3427 -> xxx.yyy.236.77:9898 SYN ******S* Sep 29 00:56:25 221.127.90.37:2001 -> xxx.yyy.236.78:5554 SYN ******S* Sep 29 00:56:26 221.127.90.37:2479 -> xxx.yyy.236.78:1023 SYN ******S* [...] Sep 29 00:57:11 221.127.90.37:1342 -> xxx.yyy.237.208:9898 SYN ******S* Sep 29 00:57:11 221.127.90.37:1359 -> xxx.yyy.237.222:9898 SYN ******S* Sep 29 00:57:11 221.127.90.37:1360 -> xxx.yyy.237.223:9898 SYN ******S* Sep 29 00:57:11 221.127.90.37:1366 -> xxx.yyy.237.229:9898 SYN ******S* Sep 29 00:57:11 221.127.90.37:1367 -> xxx.yyy.237.230:9898 SYN ******S* Sep 29 00:57:11 221.127.90.37:1368 -> xxx.yyy.237.231:9898 SYN ******S* Sep 29 00:57:11 221.127.90.37:1369 -> xxx.yyy.237.232:9898 SYN ******S* Sep 29 00:57:11 221.127.90.37:1381 -> xxx.yyy.237.244:9898 SYN ******S* Sep 29 00:57:11 221.127.90.37:1382 -> xxx.yyy.237.245:9898 SYN ******S* 6225 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions