[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0500. Oct 4 07:12:12 64.231.244.84:4863 -> xxx.yyy.1.0:1433 SYN ******S* Oct 4 07:12:12 64.231.244.84:4866 -> xxx.yyy.1.1:1433 SYN ******S* Oct 4 07:12:12 64.231.244.84:4868 -> xxx.yyy.1.2:1433 SYN ******S* Oct 4 07:12:12 64.231.244.84:4876 -> xxx.yyy.1.3:1433 SYN ******S* Oct 4 07:12:12 64.231.244.84:4879 -> xxx.yyy.1.4:1433 SYN ******S* Oct 4 07:12:12 64.231.244.84:4880 -> xxx.yyy.1.5:1433 SYN ******S* Oct 4 07:12:12 64.231.244.84:4888 -> xxx.yyy.1.6:1433 SYN ******S* Oct 4 07:12:12 64.231.244.84:4889 -> xxx.yyy.1.7:1433 SYN ******S* [...] Oct 4 10:14:43 64.231.244.84:3207 -> xxx.yyy.204.168:1433 SYN ******S* Oct 4 10:14:43 64.231.244.84:3210 -> xxx.yyy.204.170:1433 SYN ******S* Oct 4 10:14:43 64.231.244.84:3011 -> xxx.yyy.204.145:1433 SYN ******S* Oct 4 10:14:43 64.231.244.84:3219 -> xxx.yyy.204.173:1433 SYN ******S* Oct 4 10:14:43 64.231.244.84:3230 -> xxx.yyy.204.179:1433 SYN ******S* Oct 4 10:14:43 64.231.244.84:3024 -> xxx.yyy.204.147:1433 SYN ******S* Oct 4 10:14:43 64.231.244.84:2296 -> xxx.yyy.204.94:1433 SYN ******S* Oct 4 10:14:43 64.231.244.84:3236 -> xxx.yyy.204.181:1433 SYN ******S* Oct 4 10:14:45 64.231.244.84:2479 -> xxx.yyy.204.103:1433 SYN ******S* 55137 Oct 4 04:27:52 203.172.47.161:2493 -> xxx.yyy.64.0:1433 SYN ******S* Oct 4 04:27:52 203.172.47.161:2496 -> xxx.yyy.64.1:1433 SYN ******S* Oct 4 04:27:52 203.172.47.161:2499 -> xxx.yyy.64.2:1433 SYN ******S* Oct 4 04:27:52 203.172.47.161:2502 -> xxx.yyy.64.3:1433 SYN ******S* Oct 4 04:27:52 203.172.47.161:2505 -> xxx.yyy.64.4:1433 SYN ******S* Oct 4 04:27:49 203.172.47.161:2509 -> xxx.yyy.64.6:1433 SYN ******S* Oct 4 04:27:49 203.172.47.161:2511 -> xxx.yyy.64.7:1433 SYN ******S* Oct 4 04:27:49 203.172.47.161:2513 -> xxx.yyy.64.8:1433 SYN ******S* [...] Oct 4 06:02:32 203.172.47.161:3966 -> xxx.yyy.169.77:1433 SYN ******S* Oct 4 06:02:32 203.172.47.161:3985 -> xxx.yyy.169.81:1433 SYN ******S* Oct 4 06:02:32 203.172.47.161:3984 -> xxx.yyy.169.80:1433 SYN ******S* Oct 4 06:02:32 203.172.47.161:3983 -> xxx.yyy.169.79:1433 SYN ******S* Oct 4 06:02:32 203.172.47.161:3981 -> xxx.yyy.169.78:1433 SYN ******S* Oct 4 06:02:33 203.172.47.161:4046 -> xxx.yyy.169.88:1433 SYN ******S* Oct 4 06:02:33 203.172.47.161:4043 -> xxx.yyy.169.87:1433 SYN ******S* Oct 4 06:02:33 203.172.47.161:4040 -> xxx.yyy.169.86:1433 SYN ******S* Oct 4 06:02:33 203.172.47.161:4038 -> xxx.yyy.169.85:1433 SYN ******S* 53271 Oct 4 12:44:48 209.125.241.211:3302 -> xxx.yyy.1.1:1433 SYN ******S* Oct 4 12:44:45 209.125.241.211:3303 -> xxx.yyy.1.2:1433 SYN ******S* Oct 4 12:44:45 209.125.241.211:3304 -> xxx.yyy.1.3:1433 SYN ******S* Oct 4 12:44:45 209.125.241.211:3305 -> xxx.yyy.1.4:1433 SYN ******S* Oct 4 12:44:48 209.125.241.211:3306 -> xxx.yyy.1.5:1433 SYN ******S* Oct 4 12:44:48 209.125.241.211:3307 -> xxx.yyy.1.6:1433 SYN ******S* Oct 4 12:44:45 209.125.241.211:3308 -> xxx.yyy.1.7:1433 SYN ******S* Oct 4 12:44:48 209.125.241.211:3309 -> xxx.yyy.1.8:1433 SYN ******S* [...] Oct 4 12:56:27 209.125.241.211:1100 -> xxx.yyy.255.223:1433 SYN ******S* Oct 4 12:56:27 209.125.241.211:1105 -> xxx.yyy.255.228:1433 SYN ******S* Oct 4 12:56:27 209.125.241.211:1102 -> xxx.yyy.255.225:1433 SYN ******S* Oct 4 12:56:27 209.125.241.211:1104 -> xxx.yyy.255.227:1433 SYN ******S* Oct 4 12:56:27 209.125.241.211:1099 -> xxx.yyy.255.222:1433 SYN ******S* Oct 4 12:56:27 209.125.241.211:1101 -> xxx.yyy.255.224:1433 SYN ******S* Oct 4 12:56:27 209.125.241.211:1106 -> xxx.yyy.255.229:1433 SYN ******S* Oct 4 12:56:27 209.125.241.211:1103 -> xxx.yyy.255.226:1433 SYN ******S* Oct 4 12:56:28 209.125.241.211:1124 -> xxx.yyy.255.247:1433 SYN ******S* 44135 Oct 4 21:35:14 194.199.250.248:714 -> xxx.yyy.1.0:111 SYN ******S* Oct 4 21:35:14 194.199.250.248:715 -> xxx.yyy.1.1:111 SYN ******S* Oct 4 21:35:17 194.199.250.248:716 -> xxx.yyy.1.2:111 SYN ******S* Oct 4 21:35:17 194.199.250.248:717 -> xxx.yyy.1.3:111 SYN ******S* Oct 4 21:35:17 194.199.250.248:719 -> xxx.yyy.1.5:111 SYN ******S* Oct 4 21:35:14 194.199.250.248:720 -> xxx.yyy.1.6:111 SYN ******S* Oct 4 21:35:14 194.199.250.248:724 -> xxx.yyy.1.10:111 SYN ******S* Oct 4 21:35:14 194.199.250.248:725 -> xxx.yyy.1.11:111 SYN ******S* [...] Oct 4 22:02:29 194.199.250.248:747 -> xxx.yyy.255.237:111 SYN ******S* Oct 4 22:02:29 194.199.250.248:748 -> xxx.yyy.255.238:111 SYN ******S* Oct 4 22:02:29 194.199.250.248:754 -> xxx.yyy.255.244:111 SYN ******S* Oct 4 22:02:29 194.199.250.248:755 -> xxx.yyy.255.245:111 SYN ******S* Oct 4 22:02:29 194.199.250.248:756 -> xxx.yyy.255.246:111 SYN ******S* Oct 4 22:02:29 194.199.250.248:757 -> xxx.yyy.255.247:111 SYN ******S* Oct 4 22:02:29 194.199.250.248:759 -> xxx.yyy.255.249:111 SYN ******S* Oct 4 22:02:29 194.199.250.248:760 -> xxx.yyy.255.250:111 SYN ******S* Oct 4 22:02:29 194.199.250.248:764 -> xxx.yyy.255.254:111 SYN ******S* 42566 Oct 4 03:09:51 67.36.32.90:16099 -> xxx.yyy.1.1:80 SYN ******S* Oct 4 03:09:50 67.36.32.90:16104 -> xxx.yyy.1.6:80 SYN ******S* Oct 4 03:09:51 67.36.32.90:16109 -> xxx.yyy.1.11:80 SYN ******S* Oct 4 03:09:50 67.36.32.90:16113 -> xxx.yyy.1.15:80 SYN ******S* Oct 4 03:09:50 67.36.32.90:16118 -> xxx.yyy.1.20:80 SYN ******S* Oct 4 03:09:50 67.36.32.90:16123 -> xxx.yyy.1.25:80 SYN ******S* Oct 4 03:09:50 67.36.32.90:16128 -> xxx.yyy.1.30:80 SYN ******S* Oct 4 03:09:51 67.36.32.90:16133 -> xxx.yyy.1.35:80 SYN ******S* [...] Oct 4 03:19:47 67.36.32.90:16901 -> xxx.yyy.255.233:80 SYN ******S* Oct 4 03:19:47 67.36.32.90:16850 -> xxx.yyy.255.182:80 SYN ******S* Oct 4 03:19:47 67.36.32.90:16876 -> xxx.yyy.255.208:80 SYN ******S* Oct 4 03:19:47 67.36.32.90:16825 -> xxx.yyy.255.157:80 SYN ******S* Oct 4 03:19:47 67.36.32.90:16800 -> xxx.yyy.255.132:80 SYN ******S* Oct 4 03:19:47 67.36.32.90:16877 -> xxx.yyy.255.209:80 SYN ******S* Oct 4 03:19:47 67.36.32.90:16826 -> xxx.yyy.255.158:80 SYN ******S* Oct 4 03:19:47 67.36.32.90:16903 -> xxx.yyy.255.235:80 SYN ******S* 42340 Oct 4 18:44:09 64.229.10.234:1426 -> xxx.yyy.10.0:1433 SYN ******S* Oct 4 18:44:06 64.229.10.234:1427 -> xxx.yyy.10.1:1433 SYN ******S* Oct 4 18:44:06 64.229.10.234:1429 -> xxx.yyy.10.2:1433 SYN ******S* Oct 4 18:44:09 64.229.10.234:1430 -> xxx.yyy.10.3:1433 SYN ******S* Oct 4 18:44:09 64.229.10.234:1435 -> xxx.yyy.10.4:1433 SYN ******S* Oct 4 18:44:07 64.229.10.234:1446 -> xxx.yyy.10.7:1433 SYN ******S* Oct 4 18:44:07 64.229.10.234:1455 -> xxx.yyy.10.8:1433 SYN ******S* Oct 4 18:44:07 64.229.10.234:1460 -> xxx.yyy.10.9:1433 SYN ******S* [...] Oct 4 20:51:17 64.229.10.234:2518 -> xxx.yyy.255.130:1433 SYN ******S* Oct 4 20:51:17 64.229.10.234:2477 -> xxx.yyy.255.129:1433 SYN ******S* Oct 4 20:51:17 64.229.10.234:3414 -> xxx.yyy.255.141:1433 SYN ******S* Oct 4 20:51:17 64.229.10.234:2897 -> xxx.yyy.255.139:1433 SYN ******S* Oct 4 20:51:17 64.229.10.234:2781 -> xxx.yyy.255.138:1433 SYN ******S* Oct 4 20:51:17 64.229.10.234:4573 -> xxx.yyy.255.150:1433 SYN ******S* Oct 4 20:51:17 64.229.10.234:3760 -> xxx.yyy.255.147:1433 SYN ******S* Oct 4 20:51:18 64.229.10.234:1732 -> xxx.yyy.255.207:1433 SYN ******S* Oct 4 20:51:18 64.229.10.234:2834 -> xxx.yyy.255.253:1433 SYN ******S* 40520 Oct 4 11:17:42 70.48.95.54:3963 -> xxx.yyy.1.1:1433 SYN ******S* Oct 4 11:17:42 70.48.95.54:1969 -> xxx.yyy.1.13:1433 SYN ******S* Oct 4 11:17:40 70.48.95.54:4330 -> xxx.yyy.1.17:1433 SYN ******S* Oct 4 11:17:40 70.48.95.54:4883 -> xxx.yyy.1.19:1433 SYN ******S* Oct 4 11:17:40 70.48.95.54:1128 -> xxx.yyy.1.20:1433 SYN ******S* Oct 4 11:17:43 70.48.95.54:1161 -> xxx.yyy.1.21:1433 SYN ******S* Oct 4 11:17:40 70.48.95.54:1167 -> xxx.yyy.1.22:1433 SYN ******S* Oct 4 11:17:41 70.48.95.54:1286 -> xxx.yyy.1.24:1433 SYN ******S* [...] Oct 4 13:53:23 70.48.95.54:4561 -> xxx.yyy.255.211:1433 SYN ******S* Oct 4 13:53:24 70.48.95.54:2882 -> xxx.yyy.255.252:1433 SYN ******S* Oct 4 13:53:24 70.48.95.54:3068 -> xxx.yyy.255.218:1433 SYN ******S* Oct 4 13:53:27 70.48.95.54:3683 -> xxx.yyy.255.236:1433 SYN ******S* Oct 4 13:53:28 70.48.95.54:4566 -> xxx.yyy.255.241:1433 SYN ******S* Oct 4 13:53:28 70.48.95.54:2604 -> xxx.yyy.255.240:1433 SYN ******S* Oct 4 13:53:29 70.48.95.54:2990 -> xxx.yyy.255.246:1433 SYN ******S* Oct 4 13:53:29 70.48.95.54:3909 -> xxx.yyy.255.249:1433 SYN ******S* Oct 4 13:53:30 70.48.95.54:1693 -> xxx.yyy.255.253:1433 SYN ******S* 39857 Oct 4 19:40:28 200.114.4.213:1956 -> xxx.yyy.1.0:1433 SYN ******S* Oct 4 19:40:28 200.114.4.213:1959 -> xxx.yyy.1.1:1433 SYN ******S* Oct 4 19:40:28 200.114.4.213:1961 -> xxx.yyy.1.2:1433 SYN ******S* Oct 4 19:40:28 200.114.4.213:1963 -> xxx.yyy.1.3:1433 SYN ******S* Oct 4 19:40:31 200.114.4.213:1965 -> xxx.yyy.1.4:1433 SYN ******S* Oct 4 19:40:31 200.114.4.213:1966 -> xxx.yyy.1.5:1433 SYN ******S* Oct 4 19:40:28 200.114.4.213:1967 -> xxx.yyy.1.6:1433 SYN ******S* Oct 4 19:40:28 200.114.4.213:1968 -> xxx.yyy.1.7:1433 SYN ******S* [...] Oct 4 22:12:54 200.114.4.213:4904 -> xxx.yyy.170.223:1433 SYN ******S* Oct 4 22:12:54 200.114.4.213:1284 -> xxx.yyy.171.18:1433 SYN ******S* Oct 4 22:12:54 200.114.4.213:1291 -> xxx.yyy.171.19:1433 SYN ******S* Oct 4 22:12:54 200.114.4.213:4551 -> xxx.yyy.170.202:1433 SYN ******S* Oct 4 22:12:55 200.114.4.213:4665 -> xxx.yyy.170.205:1433 SYN ******S* Oct 4 22:12:55 200.114.4.213:4686 -> xxx.yyy.170.206:1433 SYN ******S* Oct 4 22:12:55 200.114.4.213:4703 -> xxx.yyy.170.208:1433 SYN ******S* Oct 4 22:12:55 200.114.4.213:4702 -> xxx.yyy.170.207:1433 SYN ******S* Oct 4 22:12:55 200.114.4.213:4722 -> xxx.yyy.170.211:1433 SYN ******S* 32366 Oct 4 15:57:13 69.56.215.130:3039 -> xxx.yyy.1.1:80 SYN ******S* Oct 4 15:57:13 69.56.215.130:3040 -> xxx.yyy.1.2:80 SYN ******S* Oct 4 15:57:13 69.56.215.130:3041 -> xxx.yyy.1.3:80 SYN ******S* Oct 4 15:57:16 69.56.215.130:3043 -> xxx.yyy.1.5:80 SYN ******S* Oct 4 15:57:13 69.56.215.130:3044 -> xxx.yyy.1.6:80 SYN ******S* Oct 4 15:57:16 69.56.215.130:3046 -> xxx.yyy.1.8:80 SYN ******S* Oct 4 15:57:14 69.56.215.130:3049 -> xxx.yyy.1.11:80 SYN ******S* Oct 4 15:57:13 69.56.215.130:3054 -> xxx.yyy.1.16:80 SYN ******S* [...] Oct 4 16:02:12 69.56.215.130:1905 -> xxx.yyy.255.241:80 SYN ******S* Oct 4 16:02:12 69.56.215.130:1907 -> xxx.yyy.255.243:80 SYN ******S* Oct 4 16:02:12 69.56.215.130:1910 -> xxx.yyy.255.246:80 SYN ******S* Oct 4 16:02:12 69.56.215.130:1883 -> xxx.yyy.255.219:80 SYN ******S* Oct 4 16:02:12 69.56.215.130:1908 -> xxx.yyy.255.244:80 SYN ******S* Oct 4 16:02:12 69.56.215.130:1911 -> xxx.yyy.255.247:80 SYN ******S* Oct 4 16:02:12 69.56.215.130:1909 -> xxx.yyy.255.245:80 SYN ******S* Oct 4 16:02:12 69.56.215.130:1886 -> xxx.yyy.255.222:80 SYN ******S* Oct 4 16:02:12 69.56.215.130:1912 -> xxx.yyy.255.248:80 SYN ******S* 28783 Oct 4 21:25:24 202.215.182.170:58292 -> xxx.yyy.1.1:4899 SYN ******S* Oct 4 21:25:24 202.215.182.170:58290 -> xxx.yyy.1.2:4899 SYN ******S* Oct 4 21:25:24 202.215.182.170:58291 -> xxx.yyy.1.3:4899 SYN ******S* Oct 4 21:25:22 202.215.182.170:57914 -> xxx.yyy.1.4:4899 SYN ******S* Oct 4 21:25:22 202.215.182.170:57923 -> xxx.yyy.1.9:4899 SYN ******S* Oct 4 21:25:22 202.215.182.170:57924 -> xxx.yyy.1.10:4899 SYN ******S* Oct 4 21:25:24 202.215.182.170:58310 -> xxx.yyy.1.16:4899 SYN ******S* Oct 4 21:25:24 202.215.182.170:58309 -> xxx.yyy.1.17:4899 SYN ******S* [...] Oct 4 21:37:00 202.215.182.170:56166 -> xxx.yyy.254.84:4899 SYN ******S* Oct 4 21:37:00 202.215.182.170:56167 -> xxx.yyy.254.85:4899 SYN ******S* Oct 4 21:37:00 202.215.182.170:56162 -> xxx.yyy.254.83:4899 SYN ******S* Oct 4 21:37:00 202.215.182.170:56168 -> xxx.yyy.254.86:4899 SYN ******S* Oct 4 21:37:00 202.215.182.170:56175 -> xxx.yyy.254.87:4899 SYN ******S* Oct 4 21:37:00 202.215.182.170:56176 -> xxx.yyy.254.88:4899 SYN ******S* Oct 4 21:37:00 202.215.182.170:56177 -> xxx.yyy.254.89:4899 SYN ******S* Oct 4 21:37:00 202.215.182.170:56198 -> xxx.yyy.254.90:4899 SYN ******S* Oct 4 21:37:00 202.215.182.170:56199 -> xxx.yyy.254.91:4899 SYN ******S* 24209 Oct 4 01:17:46 213.180.210.35:58238 -> xxx.yyy.104.54:52871 SYN ******S* Oct 4 01:17:46 213.180.210.35:58238 -> xxx.yyy.104.54:33555 SYN ******S* Oct 4 01:17:46 213.180.210.35:58238 -> xxx.yyy.104.54:29059 SYN ******S* Oct 4 01:17:46 213.180.210.35:58238 -> xxx.yyy.104.54:28004 SYN ******S* Oct 4 01:17:46 213.180.210.35:58238 -> xxx.yyy.104.54:35930 SYN ******S* Oct 4 01:17:46 213.180.210.35:58238 -> xxx.yyy.104.54:45964 SYN ******S* Oct 4 01:17:46 213.180.210.35:58238 -> xxx.yyy.104.54:13261 SYN ******S* Oct 4 01:17:46 213.180.210.35:58238 -> xxx.yyy.104.54:23852 SYN ******S* [...] Oct 4 01:22:01 213.180.210.35:58242 -> xxx.yyy.104.54:6019 SYN ******S* Oct 4 01:22:02 213.180.210.35:58243 -> xxx.yyy.104.54:6002 SYN ******S* Oct 4 01:22:02 213.180.210.35:58243 -> xxx.yyy.104.54:6027 SYN ******S* Oct 4 01:22:02 213.180.210.35:58243 -> xxx.yyy.104.54:6038 SYN ******S* Oct 4 01:22:02 213.180.210.35:58243 -> xxx.yyy.104.54:1434 SYN ******S* Oct 4 01:22:02 213.180.210.35:58243 -> xxx.yyy.104.54:512 SYN ******S* Oct 4 01:22:02 213.180.210.35:58243 -> xxx.yyy.104.54:1243 SYN ******S* Oct 4 01:22:02 213.180.210.35:58243 -> xxx.yyy.104.54:2000 SYN ******S* Oct 4 01:22:02 213.180.210.35:58243 -> xxx.yyy.104.54:6019 SYN ******S* 23879 Oct 4 05:27:39 69.157.81.41:3689 -> xxx.yyy.1.0:1433 SYN ******S* Oct 4 05:27:41 69.157.81.41:4205 -> xxx.yyy.1.4:1433 SYN ******S* Oct 4 05:27:42 69.157.81.41:4081 -> xxx.yyy.1.7:1433 SYN ******S* Oct 4 05:27:42 69.157.81.41:2599 -> xxx.yyy.1.8:1433 SYN ******S* Oct 4 05:27:43 69.157.81.41:1249 -> xxx.yyy.1.10:1433 SYN ******S* Oct 4 05:27:43 69.157.81.41:3470 -> xxx.yyy.1.13:1433 SYN ******S* Oct 4 05:27:43 69.157.81.41:1985 -> xxx.yyy.1.14:1433 SYN ******S* Oct 4 05:27:41 69.157.81.41:2765 -> xxx.yyy.1.15:1433 SYN ******S* [...] Oct 4 09:53:25 69.157.81.41:1268 -> xxx.yyy.198.220:1433 SYN ******S* Oct 4 09:53:26 69.157.81.41:2171 -> xxx.yyy.198.242:1433 SYN ******S* Oct 4 09:53:27 69.157.81.41:2524 -> xxx.yyy.198.236:1433 SYN ******S* Oct 4 09:53:28 69.157.81.41:2411 -> xxx.yyy.198.227:1433 SYN ******S* Oct 4 09:53:29 69.157.81.41:4219 -> xxx.yyy.198.229:1433 SYN ******S* Oct 4 09:53:29 69.157.81.41:2171 -> xxx.yyy.198.242:1433 SYN ******S* Oct 4 09:53:30 69.157.81.41:2586 -> xxx.yyy.198.230:1433 SYN ******S* Oct 4 09:53:33 69.157.81.41:1270 -> xxx.yyy.198.255:1433 SYN ******S* 23412 Oct 4 09:48:20 218.102.94.15:3983 -> xxx.yyy.29.0:1433 SYN ******S* Oct 4 09:48:20 218.102.94.15:3994 -> xxx.yyy.29.1:1433 SYN ******S* Oct 4 09:48:17 218.102.94.15:3995 -> xxx.yyy.29.2:1433 SYN ******S* Oct 4 09:48:20 218.102.94.15:3998 -> xxx.yyy.29.3:1433 SYN ******S* Oct 4 09:48:20 218.102.94.15:4000 -> xxx.yyy.29.4:1433 SYN ******S* Oct 4 09:48:20 218.102.94.15:4010 -> xxx.yyy.29.6:1433 SYN ******S* Oct 4 09:48:17 218.102.94.15:4012 -> xxx.yyy.29.7:1433 SYN ******S* Oct 4 09:48:20 218.102.94.15:4016 -> xxx.yyy.29.9:1433 SYN ******S* [...] Oct 4 11:32:14 218.102.94.15:4162 -> xxx.yyy.144.152:1433 SYN ******S* Oct 4 11:32:15 218.102.94.15:4167 -> xxx.yyy.144.153:1433 SYN ******S* Oct 4 11:32:15 218.102.94.15:4604 -> xxx.yyy.144.200:1433 SYN ******S* Oct 4 11:32:15 218.102.94.15:4176 -> xxx.yyy.144.155:1433 SYN ******S* Oct 4 11:32:15 218.102.94.15:4611 -> xxx.yyy.144.201:1433 SYN ******S* Oct 4 11:32:15 218.102.94.15:4626 -> xxx.yyy.144.204:1433 SYN ******S* Oct 4 11:32:15 218.102.94.15:4643 -> xxx.yyy.144.205:1433 SYN ******S* Oct 4 11:32:15 218.102.94.15:4647 -> xxx.yyy.144.207:1433 SYN ******S* Oct 4 11:32:15 218.102.94.15:4662 -> xxx.yyy.144.209:1433 SYN ******S* 21250 Oct 4 20:09:25 61.39.160.194:4576 -> xxx.yyy.1.3:4899 SYN ******S* Oct 4 20:09:23 61.39.160.194:4577 -> xxx.yyy.1.4:4899 SYN ******S* Oct 4 20:09:24 61.39.160.194:4575 -> xxx.yyy.1.2:4899 SYN ******S* Oct 4 20:09:23 61.39.160.194:4579 -> xxx.yyy.1.6:4899 SYN ******S* Oct 4 20:09:23 61.39.160.194:4580 -> xxx.yyy.1.7:4899 SYN ******S* Oct 4 20:09:23 61.39.160.194:4585 -> xxx.yyy.1.12:4899 SYN ******S* Oct 4 20:09:25 61.39.160.194:4587 -> xxx.yyy.1.14:4899 SYN ******S* Oct 4 20:09:23 61.39.160.194:4588 -> xxx.yyy.1.15:4899 SYN ******S* [...] Oct 4 20:14:25 61.39.160.194:4118 -> xxx.yyy.254.232:4899 SYN ******S* Oct 4 20:14:25 61.39.160.194:4165 -> xxx.yyy.254.244:4899 SYN ******S* Oct 4 20:14:25 61.39.160.194:4179 -> xxx.yyy.254.245:4899 SYN ******S* Oct 4 20:14:25 61.39.160.194:4164 -> xxx.yyy.254.243:4899 SYN ******S* Oct 4 20:14:25 61.39.160.194:4201 -> xxx.yyy.254.248:4899 SYN ******S* Oct 4 20:14:25 61.39.160.194:4204 -> xxx.yyy.254.250:4899 SYN ******S* Oct 4 20:14:25 61.39.160.194:4219 -> xxx.yyy.254.253:4899 SYN ******S* Oct 4 20:14:25 61.39.160.194:4205 -> xxx.yyy.254.251:4899 SYN ******S* Oct 4 20:14:25 61.39.160.194:4202 -> xxx.yyy.254.249:4899 SYN ******S* 21107 Oct 4 11:36:10 218.34.168.33:2913 -> xxx.yyy.1.147:1433 SYN ******S* Oct 4 11:36:13 218.34.168.33:2939 -> xxx.yyy.1.157:1433 SYN ******S* Oct 4 11:36:11 218.34.168.33:3082 -> xxx.yyy.1.209:1433 SYN ******S* Oct 4 11:36:11 218.34.168.33:3083 -> xxx.yyy.1.210:1433 SYN ******S* Oct 4 11:36:11 218.34.168.33:3099 -> xxx.yyy.1.217:1433 SYN ******S* Oct 4 11:36:11 218.34.168.33:3101 -> xxx.yyy.1.219:1433 SYN ******S* Oct 4 11:36:11 218.34.168.33:3116 -> xxx.yyy.1.227:1433 SYN ******S* Oct 4 11:36:14 218.34.168.33:3117 -> xxx.yyy.1.228:1433 SYN ******S* [...] Oct 4 14:59:46 218.34.168.33:1892 -> xxx.yyy.228.226:1433 SYN ******S* Oct 4 14:59:47 218.34.168.33:1577 -> xxx.yyy.228.159:1433 SYN ******S* Oct 4 14:59:48 218.34.168.33:1653 -> xxx.yyy.228.171:1433 SYN ******S* Oct 4 14:59:49 218.34.168.33:1729 -> xxx.yyy.228.178:1433 SYN ******S* Oct 4 14:59:49 218.34.168.33:1760 -> xxx.yyy.228.182:1433 SYN ******S* Oct 4 14:59:49 218.34.168.33:1759 -> xxx.yyy.228.181:1433 SYN ******S* Oct 4 14:59:49 218.34.168.33:1779 -> xxx.yyy.228.186:1433 SYN ******S* Oct 4 14:59:50 218.34.168.33:1787 -> xxx.yyy.228.188:1433 SYN ******S* Oct 4 14:59:50 218.34.168.33:1796 -> xxx.yyy.228.190:1433 SYN ******S* 18771 Oct 4 21:51:59 211.187.127.151:3311 -> xxx.yyy.1.1:4899 SYN ******S* Oct 4 21:52:00 211.187.127.151:3314 -> xxx.yyy.1.2:4899 SYN ******S* Oct 4 21:51:58 211.187.127.151:3322 -> xxx.yyy.1.8:4899 SYN ******S* Oct 4 21:51:58 211.187.127.151:3323 -> xxx.yyy.1.9:4899 SYN ******S* Oct 4 21:51:58 211.187.127.151:3351 -> xxx.yyy.1.28:4899 SYN ******S* Oct 4 21:51:58 211.187.127.151:3354 -> xxx.yyy.1.29:4899 SYN ******S* Oct 4 21:51:58 211.187.127.151:3348 -> xxx.yyy.1.25:4899 SYN ******S* Oct 4 21:51:58 211.187.127.151:3357 -> xxx.yyy.1.31:4899 SYN ******S* [...] Oct 4 21:55:48 211.187.127.151:3637 -> xxx.yyy.255.216:4899 SYN ******S* Oct 4 21:55:48 211.187.127.151:3654 -> xxx.yyy.255.226:4899 SYN ******S* Oct 4 21:55:48 211.187.127.151:3657 -> xxx.yyy.255.227:4899 SYN ******S* Oct 4 21:55:48 211.187.127.151:3669 -> xxx.yyy.255.235:4899 SYN ******S* Oct 4 21:55:48 211.187.127.151:3662 -> xxx.yyy.255.229:4899 SYN ******S* Oct 4 21:55:48 211.187.127.151:3663 -> xxx.yyy.255.230:4899 SYN ******S* Oct 4 21:55:48 211.187.127.151:3668 -> xxx.yyy.255.234:4899 SYN ******S* Oct 4 21:55:48 211.187.127.151:3678 -> xxx.yyy.255.244:4899 SYN ******S* Oct 4 21:55:48 211.187.127.151:3671 -> xxx.yyy.255.237:4899 SYN ******S* 18406 Oct 4 08:41:40 200.118.38.91:2078 -> xxx.yyy.1.0:1433 SYN ******S* Oct 4 08:41:37 200.118.38.91:2110 -> xxx.yyy.1.7:1433 SYN ******S* Oct 4 08:41:40 200.118.38.91:2119 -> xxx.yyy.1.8:1433 SYN ******S* Oct 4 08:41:40 200.118.38.91:2121 -> xxx.yyy.1.9:1433 SYN ******S* Oct 4 08:41:40 200.118.38.91:2123 -> xxx.yyy.1.10:1433 SYN ******S* Oct 4 08:41:40 200.118.38.91:2125 -> xxx.yyy.1.11:1433 SYN ******S* Oct 4 08:41:40 200.118.38.91:2127 -> xxx.yyy.1.12:1433 SYN ******S* Oct 4 08:41:37 200.118.38.91:2131 -> xxx.yyy.1.13:1433 SYN ******S* [...] Oct 4 10:07:09 200.118.38.91:1356 -> xxx.yyy.95.238:1433 SYN ******S* Oct 4 10:07:09 200.118.38.91:1353 -> xxx.yyy.95.237:1433 SYN ******S* Oct 4 10:07:11 200.118.38.91:1376 -> xxx.yyy.95.242:1433 SYN ******S* Oct 4 10:07:12 200.118.38.91:1406 -> xxx.yyy.95.244:1433 SYN ******S* Oct 4 10:07:13 200.118.38.91:1445 -> xxx.yyy.95.248:1433 SYN ******S* Oct 4 10:07:13 200.118.38.91:1451 -> xxx.yyy.95.249:1433 SYN ******S* Oct 4 10:07:13 200.118.38.91:1472 -> xxx.yyy.95.253:1433 SYN ******S* Oct 4 10:07:14 200.118.38.91:1483 -> xxx.yyy.95.255:1433 SYN ******S* 17712 Oct 4 15:57:14 172.187.23.131:3275 -> xxx.yyy.1.1:21 SYN ******S* Oct 4 15:57:14 172.187.23.131:3277 -> xxx.yyy.1.3:21 SYN ******S* Oct 4 15:57:11 172.187.23.131:3279 -> xxx.yyy.1.5:21 SYN ******S* Oct 4 15:57:11 172.187.23.131:3281 -> xxx.yyy.1.7:21 SYN ******S* Oct 4 15:57:11 172.187.23.131:3286 -> xxx.yyy.1.12:21 SYN ******S* Oct 4 15:57:14 172.187.23.131:3287 -> xxx.yyy.1.13:21 SYN ******S* Oct 4 15:57:11 172.187.23.131:3289 -> xxx.yyy.1.15:21 SYN ******S* Oct 4 15:57:11 172.187.23.131:3295 -> xxx.yyy.1.21:21 SYN ******S* [...] Oct 4 16:18:41 172.187.23.131:2172 -> xxx.yyy.160.239:21 SYN ******S* Oct 4 16:18:41 172.187.23.131:2173 -> xxx.yyy.160.240:21 SYN ******S* Oct 4 16:18:41 172.187.23.131:2170 -> xxx.yyy.160.237:21 SYN ******S* Oct 4 16:18:41 172.187.23.131:2186 -> xxx.yyy.160.253:21 SYN ******S* Oct 4 16:18:41 172.187.23.131:2180 -> xxx.yyy.160.247:21 SYN ******S* Oct 4 16:18:41 172.187.23.131:2174 -> xxx.yyy.160.241:21 SYN ******S* Oct 4 16:18:41 172.187.23.131:2187 -> xxx.yyy.160.254:21 SYN ******S* Oct 4 16:18:41 172.187.23.131:2171 -> xxx.yyy.160.238:21 SYN ******S* 17133 Oct 4 07:43:21 82.154.33.40:3491 -> xxx.yyy.20.0:1433 SYN ******S* Oct 4 07:43:21 82.154.33.40:3496 -> xxx.yyy.20.2:1433 SYN ******S* Oct 4 07:43:21 82.154.33.40:3497 -> xxx.yyy.20.3:1433 SYN ******S* Oct 4 07:43:18 82.154.33.40:3500 -> xxx.yyy.20.4:1433 SYN ******S* Oct 4 07:43:21 82.154.33.40:3502 -> xxx.yyy.20.5:1433 SYN ******S* Oct 4 07:43:21 82.154.33.40:3503 -> xxx.yyy.20.6:1433 SYN ******S* Oct 4 07:43:21 82.154.33.40:3506 -> xxx.yyy.20.7:1433 SYN ******S* Oct 4 07:43:21 82.154.33.40:3508 -> xxx.yyy.20.8:1433 SYN ******S* [...] Oct 4 09:07:05 82.154.33.40:4638 -> xxx.yyy.131.69:1433 SYN ******S* Oct 4 09:07:05 82.154.33.40:4671 -> xxx.yyy.131.70:1433 SYN ******S* Oct 4 09:07:05 82.154.33.40:1287 -> xxx.yyy.131.124:1433 SYN ******S* Oct 4 09:07:05 82.154.33.40:4876 -> xxx.yyy.131.73:1433 SYN ******S* Oct 4 09:07:05 82.154.33.40:4878 -> xxx.yyy.131.74:1433 SYN ******S* Oct 4 09:07:05 82.154.33.40:1299 -> xxx.yyy.131.127:1433 SYN ******S* Oct 4 09:07:05 82.154.33.40:1313 -> xxx.yyy.131.128:1433 SYN ******S* Oct 4 09:07:05 82.154.33.40:1318 -> xxx.yyy.131.129:1433 SYN ******S* 16886 [...] 14238 Oct 4 17:59:14 219.148.123.79:4985 -> xxx.yyy.1.2:1433 SYN ******S* Oct 4 17:59:14 219.148.123.79:1060 -> xxx.yyy.1.3:1433 SYN ******S* Oct 4 17:59:14 219.148.123.79:1135 -> xxx.yyy.1.5:1433 SYN ******S* Oct 4 17:59:17 219.148.123.79:1265 -> xxx.yyy.1.8:1433 SYN ******S* Oct 4 17:59:17 219.148.123.79:1209 -> xxx.yyy.1.7:1433 SYN ******S* Oct 4 17:59:18 219.148.123.79:1376 -> xxx.yyy.1.10:1433 SYN ******S* Oct 4 17:59:15 219.148.123.79:1317 -> xxx.yyy.1.9:1433 SYN ******S* Oct 4 17:59:18 219.148.123.79:1535 -> xxx.yyy.1.12:1433 SYN ******S* [...] Oct 4 19:19:41 219.148.123.79:1748 -> xxx.yyy.88.72:1433 SYN ******S* Oct 4 19:19:41 219.148.123.79:2169 -> xxx.yyy.88.75:1433 SYN ******S* Oct 4 19:19:42 219.148.123.79:2379 -> xxx.yyy.88.77:1433 SYN ******S* Oct 4 19:19:42 219.148.123.79:2687 -> xxx.yyy.88.55:1433 SYN ******S* Oct 4 19:19:42 219.148.123.79:3115 -> xxx.yyy.88.56:1433 SYN ******S* Oct 4 19:19:42 219.148.123.79:2390 -> xxx.yyy.88.78:1433 SYN ******S* Oct 4 19:19:42 219.148.123.79:3237 -> xxx.yyy.88.134:1433 SYN ******S* Oct 4 19:19:43 219.148.123.79:2401 -> xxx.yyy.88.80:1433 SYN ******S* Oct 4 19:19:43 219.148.123.79:2416 -> xxx.yyy.88.82:1433 SYN ******S* 12999 Oct 4 02:53:53 82.151.161.185:3050 -> xxx.yyy.1.0:1433 SYN ******S* Oct 4 02:53:53 82.151.161.185:3052 -> xxx.yyy.1.1:1433 SYN ******S* Oct 4 02:53:53 82.151.161.185:3054 -> xxx.yyy.1.2:1433 SYN ******S* Oct 4 02:53:53 82.151.161.185:3056 -> xxx.yyy.1.3:1433 SYN ******S* Oct 4 02:53:53 82.151.161.185:3059 -> xxx.yyy.1.4:1433 SYN ******S* Oct 4 02:53:53 82.151.161.185:3062 -> xxx.yyy.1.5:1433 SYN ******S* Oct 4 02:53:53 82.151.161.185:3063 -> xxx.yyy.1.6:1433 SYN ******S* Oct 4 02:53:53 82.151.161.185:3066 -> xxx.yyy.1.7:1433 SYN ******S* [...] Oct 4 03:56:29 82.151.161.185:4451 -> xxx.yyy.70.78:1433 SYN ******S* Oct 4 03:56:29 82.151.161.185:4860 -> xxx.yyy.70.88:1433 SYN ******S* Oct 4 03:56:29 82.151.161.185:4480 -> xxx.yyy.70.81:1433 SYN ******S* Oct 4 03:56:29 82.151.161.185:4483 -> xxx.yyy.70.82:1433 SYN ******S* Oct 4 03:56:29 82.151.161.185:4508 -> xxx.yyy.70.84:1433 SYN ******S* Oct 4 03:56:29 82.151.161.185:4479 -> xxx.yyy.70.80:1433 SYN ******S* Oct 4 03:56:30 82.151.161.185:4500 -> xxx.yyy.70.83:1433 SYN ******S* Oct 4 03:56:30 82.151.161.185:4549 -> xxx.yyy.70.85:1433 SYN ******S* Oct 4 03:56:30 82.151.161.185:4934 -> xxx.yyy.70.89:1433 SYN ******S* 12548 Oct 4 00:17:22 218.66.199.229:3326 -> xxx.yyy.1.20:1433 SYN ******S* Oct 4 00:17:19 218.66.199.229:4378 -> xxx.yyy.1.24:1433 SYN ******S* Oct 4 00:17:22 218.66.199.229:4025 -> xxx.yyy.1.27:1433 SYN ******S* Oct 4 00:17:19 218.66.199.229:3530 -> xxx.yyy.1.28:1433 SYN ******S* Oct 4 00:17:19 218.66.199.229:4679 -> xxx.yyy.1.29:1433 SYN ******S* Oct 4 00:17:20 218.66.199.229:4629 -> xxx.yyy.1.34:1433 SYN ******S* Oct 4 00:17:20 218.66.199.229:3708 -> xxx.yyy.1.38:1433 SYN ******S* Oct 4 00:17:20 218.66.199.229:3860 -> xxx.yyy.1.47:1433 SYN ******S* [...] Oct 4 01:21:42 218.66.199.229:4429 -> xxx.yyy.255.96:1433 SYN ******S* Oct 4 01:21:43 218.66.199.229:4469 -> xxx.yyy.255.120:1433 SYN ******S* Oct 4 01:21:43 218.66.199.229:4067 -> xxx.yyy.255.135:1433 SYN ******S* Oct 4 01:21:44 218.66.199.229:4888 -> xxx.yyy.255.154:1433 SYN ******S* Oct 4 01:21:44 218.66.199.229:4141 -> xxx.yyy.255.153:1433 SYN ******S* Oct 4 01:21:44 218.66.199.229:4679 -> xxx.yyy.255.163:1433 SYN ******S* Oct 4 01:21:46 218.66.199.229:4331 -> xxx.yyy.255.220:1433 SYN ******S* Oct 4 01:21:47 218.66.199.229:3923 -> xxx.yyy.255.241:1433 SYN ******S* 11269 Oct 4 20:04:32 218.75.47.158:3060 -> xxx.yyy.1.102:4899 SYN ******S* Oct 4 20:04:32 218.75.47.158:3086 -> xxx.yyy.1.105:4899 SYN ******S* Oct 4 20:04:32 218.75.47.158:3108 -> xxx.yyy.1.106:4899 SYN ******S* Oct 4 20:04:32 218.75.47.158:3110 -> xxx.yyy.1.107:4899 SYN ******S* Oct 4 20:04:32 218.75.47.158:3222 -> xxx.yyy.1.110:4899 SYN ******S* Oct 4 20:04:32 218.75.47.158:3230 -> xxx.yyy.1.114:4899 SYN ******S* Oct 4 20:04:32 218.75.47.158:3243 -> xxx.yyy.1.118:4899 SYN ******S* Oct 4 20:04:32 218.75.47.158:3252 -> xxx.yyy.1.121:4899 SYN ******S* [...] Oct 4 20:09:38 218.75.47.158:3603 -> xxx.yyy.255.235:4899 SYN ******S* Oct 4 20:09:38 218.75.47.158:3604 -> xxx.yyy.255.236:4899 SYN ******S* Oct 4 20:09:38 218.75.47.158:3885 -> xxx.yyy.255.240:4899 SYN ******S* Oct 4 20:09:38 218.75.47.158:3904 -> xxx.yyy.255.243:4899 SYN ******S* Oct 4 20:09:38 218.75.47.158:3950 -> xxx.yyy.255.245:4899 SYN ******S* Oct 4 20:09:38 218.75.47.158:3994 -> xxx.yyy.255.246:4899 SYN ******S* Oct 4 20:09:38 218.75.47.158:3996 -> xxx.yyy.255.248:4899 SYN ******S* Oct 4 20:09:38 218.75.47.158:4002 -> xxx.yyy.255.252:4899 SYN ******S* Oct 4 20:09:38 218.75.47.158:4005 -> xxx.yyy.255.254:4899 SYN ******S* 11127 Oct 4 07:58:52 81.229.176.68:4627 -> xxx.yyy.1.25:1433 SYN ******S* Oct 4 07:58:52 81.229.176.68:1475 -> xxx.yyy.1.26:1433 SYN ******S* Oct 4 07:58:52 81.229.176.68:1227 -> xxx.yyy.1.28:1433 SYN ******S* Oct 4 07:58:53 81.229.176.68:2840 -> xxx.yyy.1.33:1433 SYN ******S* Oct 4 07:58:55 81.229.176.68:4196 -> xxx.yyy.1.41:1433 SYN ******S* Oct 4 07:58:55 81.229.176.68:1627 -> xxx.yyy.1.45:1433 SYN ******S* Oct 4 07:58:53 81.229.176.68:4405 -> xxx.yyy.1.49:1433 SYN ******S* Oct 4 07:58:54 81.229.176.68:4700 -> xxx.yyy.1.53:1433 SYN ******S* [...] Oct 4 11:07:52 81.229.176.68:2611 -> xxx.yyy.255.224:1433 SYN ******S* Oct 4 11:07:52 81.229.176.68:3348 -> xxx.yyy.255.207:1433 SYN ******S* Oct 4 11:07:55 81.229.176.68:2611 -> xxx.yyy.255.224:1433 SYN ******S* Oct 4 11:07:57 81.229.176.68:1224 -> xxx.yyy.255.238:1433 SYN ******S* Oct 4 11:07:58 81.229.176.68:4817 -> xxx.yyy.255.204:1433 SYN ******S* Oct 4 11:07:58 81.229.176.68:3348 -> xxx.yyy.255.207:1433 SYN ******S* Oct 4 11:07:59 81.229.176.68:3589 -> xxx.yyy.255.248:1433 SYN ******S* Oct 4 11:08:01 81.229.176.68:2611 -> xxx.yyy.255.224:1433 SYN ******S* Oct 4 11:08:03 81.229.176.68:1224 -> xxx.yyy.255.238:1433 SYN ******S* 9889 Oct 4 13:47:35 81.59.37.179:2299 -> xxx.yyy.13.37:1433 SYN ******S* Oct 4 13:47:32 81.59.37.179:2744 -> xxx.yyy.13.40:1433 SYN ******S* Oct 4 13:47:32 81.59.37.179:2870 -> xxx.yyy.13.41:1433 SYN ******S* Oct 4 13:47:32 81.59.37.179:2907 -> xxx.yyy.13.42:1433 SYN ******S* Oct 4 13:47:32 81.59.37.179:1025 -> xxx.yyy.13.47:1433 SYN ******S* Oct 4 13:47:35 81.59.37.179:1025 -> xxx.yyy.13.48:1433 SYN ******S* Oct 4 13:47:32 81.59.37.179:1025 -> xxx.yyy.13.49:1433 SYN ******S* Oct 4 13:47:32 81.59.37.179:1025 -> xxx.yyy.13.50:1433 SYN ******S* [...] Oct 4 14:49:26 81.59.37.179:2707 -> xxx.yyy.211.43:1433 SYN ******S* Oct 4 14:49:26 81.59.37.179:1025 -> xxx.yyy.210.194:1433 SYN ******S* Oct 4 14:49:26 81.59.37.179:1515 -> xxx.yyy.211.49:1433 SYN ******S* Oct 4 14:50:07 81.59.37.179:1565 -> xxx.yyy.213.157:1433 SYN ******S* Oct 4 14:50:04 81.59.37.179:1025 -> xxx.yyy.212.254:1433 SYN ******S* Oct 4 14:50:04 81.59.37.179:2569 -> xxx.yyy.213.1:1433 SYN ******S* Oct 4 14:50:04 81.59.37.179:1173 -> xxx.yyy.213.3:1433 SYN ******S* Oct 4 14:50:04 81.59.37.179:1025 -> xxx.yyy.213.7:1433 SYN ******S* 9761 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions