[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0500. Oct 11 06:01:44 200.44.121.10:55551 -> xxx.yyy.1.12:1433 SYN ******S* Oct 11 06:01:44 200.44.121.10:55553 -> xxx.yyy.1.13:1433 SYN ******S* Oct 11 06:01:44 200.44.121.10:55555 -> xxx.yyy.1.14:1433 SYN ******S* Oct 11 06:01:44 200.44.121.10:55557 -> xxx.yyy.1.15:1433 SYN ******S* Oct 11 06:01:44 200.44.121.10:55559 -> xxx.yyy.1.16:1433 SYN ******S* Oct 11 06:01:44 200.44.121.10:55561 -> xxx.yyy.1.17:1433 SYN ******S* Oct 11 06:01:44 200.44.121.10:55565 -> xxx.yyy.1.18:1433 SYN ******S* Oct 11 06:01:44 200.44.121.10:55567 -> xxx.yyy.1.19:1433 SYN ******S* [...] Oct 11 09:50:55 200.44.121.10:44986 -> xxx.yyy.255.243:1433 SYN ******S* Oct 11 09:50:55 200.44.121.10:44988 -> xxx.yyy.255.244:1433 SYN ******S* Oct 11 09:50:55 200.44.121.10:44991 -> xxx.yyy.255.245:1433 SYN ******S* Oct 11 09:50:56 200.44.121.10:45009 -> xxx.yyy.255.250:1433 SYN ******S* Oct 11 09:50:56 200.44.121.10:45013 -> xxx.yyy.255.251:1433 SYN ******S* Oct 11 09:50:56 200.44.121.10:45021 -> xxx.yyy.255.253:1433 SYN ******S* Oct 11 09:50:56 200.44.121.10:45023 -> xxx.yyy.255.254:1433 SYN ******S* Oct 11 09:50:56 200.44.121.10:45018 -> xxx.yyy.255.252:1433 SYN ******S* 93501 Oct 11 07:31:16 61.230.50.104:2891 -> xxx.yyy.64.0:1433 SYN ******S* Oct 11 07:31:16 61.230.50.104:2892 -> xxx.yyy.64.1:1433 SYN ******S* Oct 11 07:31:16 61.230.50.104:2893 -> xxx.yyy.64.2:1433 SYN ******S* Oct 11 07:31:16 61.230.50.104:2894 -> xxx.yyy.64.3:1433 SYN ******S* Oct 11 07:31:16 61.230.50.104:2897 -> xxx.yyy.64.5:1433 SYN ******S* Oct 11 07:31:16 61.230.50.104:2901 -> xxx.yyy.64.7:1433 SYN ******S* Oct 11 07:31:16 61.230.50.104:2902 -> xxx.yyy.64.8:1433 SYN ******S* Oct 11 07:31:16 61.230.50.104:2903 -> xxx.yyy.64.9:1433 SYN ******S* [...] Oct 11 10:13:49 61.230.50.104:2718 -> xxx.yyy.247.13:1433 SYN ******S* Oct 11 10:13:49 61.230.50.104:2633 -> xxx.yyy.246.253:1433 SYN ******S* Oct 11 10:13:49 61.230.50.104:2638 -> xxx.yyy.246.254:1433 SYN ******S* Oct 11 10:13:49 61.230.50.104:2522 -> xxx.yyy.246.223:1433 SYN ******S* Oct 11 10:13:49 61.230.50.104:2641 -> xxx.yyy.246.255:1433 SYN ******S* Oct 11 10:13:49 61.230.50.104:2734 -> xxx.yyy.247.17:1433 SYN ******S* Oct 11 10:13:49 61.230.50.104:2736 -> xxx.yyy.247.18:1433 SYN ******S* Oct 11 10:13:49 61.230.50.104:2526 -> xxx.yyy.246.224:1433 SYN ******S* Oct 11 10:13:50 61.230.50.104:2529 -> xxx.yyy.246.225:1433 SYN ******S* 85934 Oct 11 04:24:16 140.134.242.181:60600 -> xxx.yyy.1.0:1433 SYN ******S* Oct 11 04:24:16 140.134.242.181:60601 -> xxx.yyy.1.1:1433 SYN ******S* Oct 11 04:24:16 140.134.242.181:60603 -> xxx.yyy.1.2:1433 SYN ******S* Oct 11 04:24:16 140.134.242.181:60605 -> xxx.yyy.1.3:1433 SYN ******S* Oct 11 04:24:16 140.134.242.181:60607 -> xxx.yyy.1.4:1433 SYN ******S* Oct 11 04:24:16 140.134.242.181:60609 -> xxx.yyy.1.5:1433 SYN ******S* Oct 11 04:24:16 140.134.242.181:60611 -> xxx.yyy.1.6:1433 SYN ******S* Oct 11 04:24:16 140.134.242.181:60613 -> xxx.yyy.1.7:1433 SYN ******S* [...] Oct 11 08:13:00 140.134.242.181:13026 -> xxx.yyy.255.246:1433 SYN ******S* Oct 11 08:13:00 140.134.242.181:12270 -> xxx.yyy.255.247:1433 SYN ******S* Oct 11 08:13:00 140.134.242.181:14493 -> xxx.yyy.255.248:1433 SYN ******S* Oct 11 08:13:00 140.134.242.181:12272 -> xxx.yyy.255.250:1433 SYN ******S* Oct 11 08:13:00 140.134.242.181:14494 -> xxx.yyy.255.249:1433 SYN ******S* Oct 11 08:13:00 140.134.242.181:14498 -> xxx.yyy.255.251:1433 SYN ******S* Oct 11 08:13:00 140.134.242.181:13041 -> xxx.yyy.255.252:1433 SYN ******S* Oct 11 08:13:00 140.134.242.181:13042 -> xxx.yyy.255.253:1433 SYN ******S* 72623 Oct 11 10:10:24 24.214.216.39:3520 -> xxx.yyy.1.0:1433 SYN ******S* Oct 11 10:10:21 24.214.216.39:3529 -> xxx.yyy.1.3:1433 SYN ******S* Oct 11 10:10:24 24.214.216.39:3541 -> xxx.yyy.1.7:1433 SYN ******S* Oct 11 10:10:22 24.214.216.39:3569 -> xxx.yyy.1.12:1433 SYN ******S* Oct 11 10:10:22 24.214.216.39:3570 -> xxx.yyy.1.13:1433 SYN ******S* Oct 11 10:10:22 24.214.216.39:3573 -> xxx.yyy.1.16:1433 SYN ******S* Oct 11 10:10:25 24.214.216.39:3575 -> xxx.yyy.1.18:1433 SYN ******S* Oct 11 10:10:25 24.214.216.39:3577 -> xxx.yyy.1.19:1433 SYN ******S* [...] Oct 11 13:58:56 24.214.216.39:3477 -> xxx.yyy.255.247:1433 SYN ******S* Oct 11 13:58:56 24.214.216.39:3478 -> xxx.yyy.255.248:1433 SYN ******S* Oct 11 13:58:56 24.214.216.39:3481 -> xxx.yyy.255.249:1433 SYN ******S* Oct 11 13:58:56 24.214.216.39:3482 -> xxx.yyy.255.250:1433 SYN ******S* Oct 11 13:58:56 24.214.216.39:3488 -> xxx.yyy.255.253:1433 SYN ******S* Oct 11 13:58:56 24.214.216.39:3489 -> xxx.yyy.255.254:1433 SYN ******S* Oct 11 13:59:01 24.214.216.39:3443 -> xxx.yyy.255.226:1433 SYN ******S* Oct 11 13:59:02 24.214.216.39:3467 -> xxx.yyy.255.240:1433 SYN ******S* Oct 11 13:59:03 24.214.216.39:3486 -> xxx.yyy.255.251:1433 SYN ******S* 69268 Oct 11 00:01:57 221.12.122.130:1500 -> xxx.yyy.111.1:1433 SYN ******S* Oct 11 00:01:57 221.12.122.130:1496 -> xxx.yyy.111.0:1433 SYN ******S* Oct 11 00:01:57 221.12.122.130:1533 -> xxx.yyy.111.4:1433 SYN ******S* Oct 11 00:01:57 221.12.122.130:1530 -> xxx.yyy.111.3:1433 SYN ******S* Oct 11 00:02:01 221.12.122.130:1544 -> xxx.yyy.111.7:1433 SYN ******S* Oct 11 00:02:01 221.12.122.130:1543 -> xxx.yyy.111.6:1433 SYN ******S* Oct 11 00:02:01 221.12.122.130:1588 -> xxx.yyy.111.13:1433 SYN ******S* Oct 11 00:01:58 221.12.122.130:1589 -> xxx.yyy.111.14:1433 SYN ******S* [...] Oct 11 02:11:58 221.12.122.130:1407 -> xxx.yyy.255.248:1433 SYN ******S* Oct 11 02:11:59 221.12.122.130:1410 -> xxx.yyy.255.249:1433 SYN ******S* Oct 11 02:11:59 221.12.122.130:1389 -> xxx.yyy.255.247:1433 SYN ******S* Oct 11 02:11:59 221.12.122.130:1419 -> xxx.yyy.255.251:1433 SYN ******S* Oct 11 02:11:59 221.12.122.130:1440 -> xxx.yyy.255.252:1433 SYN ******S* Oct 11 02:11:59 221.12.122.130:1416 -> xxx.yyy.255.250:1433 SYN ******S* Oct 11 02:11:59 221.12.122.130:1461 -> xxx.yyy.255.254:1433 SYN ******S* Oct 11 02:11:59 221.12.122.130:1459 -> xxx.yyy.255.253:1433 SYN ******S* 67555 Oct 11 09:37:49 81.138.10.55:3993 -> xxx.yyy.1.3:1433 SYN ******S* Oct 11 09:37:52 81.138.10.55:3994 -> xxx.yyy.1.4:1433 SYN ******S* Oct 11 09:37:52 81.138.10.55:3995 -> xxx.yyy.1.5:1433 SYN ******S* Oct 11 09:37:52 81.138.10.55:3996 -> xxx.yyy.1.6:1433 SYN ******S* Oct 11 09:37:52 81.138.10.55:4000 -> xxx.yyy.1.10:1433 SYN ******S* Oct 11 09:37:52 81.138.10.55:4001 -> xxx.yyy.1.11:1433 SYN ******S* Oct 11 09:37:49 81.138.10.55:4003 -> xxx.yyy.1.13:1433 SYN ******S* Oct 11 09:37:49 81.138.10.55:4005 -> xxx.yyy.1.15:1433 SYN ******S* [...] Oct 11 09:49:12 81.138.10.55:2767 -> xxx.yyy.255.250:1433 SYN ******S* Oct 11 09:49:12 81.138.10.55:2764 -> xxx.yyy.255.247:1433 SYN ******S* Oct 11 09:49:12 81.138.10.55:2761 -> xxx.yyy.255.244:1433 SYN ******S* Oct 11 09:49:12 81.138.10.55:2768 -> xxx.yyy.255.251:1433 SYN ******S* Oct 11 09:49:12 81.138.10.55:2765 -> xxx.yyy.255.248:1433 SYN ******S* Oct 11 09:49:12 81.138.10.55:2762 -> xxx.yyy.255.245:1433 SYN ******S* Oct 11 09:49:12 81.138.10.55:2770 -> xxx.yyy.255.253:1433 SYN ******S* Oct 11 09:49:12 81.138.10.55:2771 -> xxx.yyy.255.254:1433 SYN ******S* 52829 Oct 11 11:59:20 213.176.64.123:2311 -> xxx.yyy.1.1:20168 SYN ******S* Oct 11 11:59:19 213.176.64.123:2312 -> xxx.yyy.1.2:20168 SYN ******S* Oct 11 11:59:20 213.176.64.123:2313 -> xxx.yyy.1.3:20168 SYN ******S* Oct 11 11:59:21 213.176.64.123:2314 -> xxx.yyy.1.4:20168 SYN ******S* Oct 11 11:59:21 213.176.64.123:2315 -> xxx.yyy.1.5:20168 SYN ******S* Oct 11 11:59:18 213.176.64.123:2316 -> xxx.yyy.1.6:20168 SYN ******S* Oct 11 11:59:21 213.176.64.123:2317 -> xxx.yyy.1.7:20168 SYN ******S* Oct 11 11:59:18 213.176.64.123:2318 -> xxx.yyy.1.8:20168 SYN ******S* [...] Oct 11 12:10:14 213.176.64.123:1536 -> xxx.yyy.255.226:20168 SYN ******S* Oct 11 12:10:14 213.176.64.123:1543 -> xxx.yyy.255.233:20168 SYN ******S* Oct 11 12:10:14 213.176.64.123:1548 -> xxx.yyy.255.238:20168 SYN ******S* Oct 11 12:10:14 213.176.64.123:1546 -> xxx.yyy.255.236:20168 SYN ******S* Oct 11 12:10:14 213.176.64.123:1553 -> xxx.yyy.255.243:20168 SYN ******S* Oct 11 12:10:14 213.176.64.123:1557 -> xxx.yyy.255.247:20168 SYN ******S* Oct 11 12:10:14 213.176.64.123:1562 -> xxx.yyy.255.252:20168 SYN ******S* Oct 11 12:10:14 213.176.64.123:1559 -> xxx.yyy.255.249:20168 SYN ******S* Oct 11 12:10:14 213.176.64.123:1560 -> xxx.yyy.255.250:20168 SYN ******S* 41769 Oct 11 12:24:46 152.149.133.197:2998 -> xxx.yyy.1.4:1433 SYN ******S* Oct 11 12:24:49 152.149.133.197:2999 -> xxx.yyy.1.5:1433 SYN ******S* Oct 11 12:24:49 152.149.133.197:3001 -> xxx.yyy.1.7:1433 SYN ******S* Oct 11 12:24:49 152.149.133.197:3002 -> xxx.yyy.1.8:1433 SYN ******S* Oct 11 12:24:49 152.149.133.197:3004 -> xxx.yyy.1.10:1433 SYN ******S* Oct 11 12:24:46 152.149.133.197:3005 -> xxx.yyy.1.11:1433 SYN ******S* Oct 11 12:24:46 152.149.133.197:3006 -> xxx.yyy.1.12:1433 SYN ******S* Oct 11 12:24:49 152.149.133.197:3008 -> xxx.yyy.1.14:1433 SYN ******S* [...] Oct 11 12:37:17 152.149.133.197:1264 -> xxx.yyy.255.249:1433 SYN ******S* Oct 11 12:37:17 152.149.133.197:1262 -> xxx.yyy.255.247:1433 SYN ******S* Oct 11 12:37:17 152.149.133.197:1261 -> xxx.yyy.255.246:1433 SYN ******S* Oct 11 12:37:17 152.149.133.197:1263 -> xxx.yyy.255.248:1433 SYN ******S* Oct 11 12:37:17 152.149.133.197:1260 -> xxx.yyy.255.245:1433 SYN ******S* Oct 11 12:37:17 152.149.133.197:1259 -> xxx.yyy.255.244:1433 SYN ******S* Oct 11 12:37:17 152.149.133.197:1268 -> xxx.yyy.255.253:1433 SYN ******S* Oct 11 12:37:17 152.149.133.197:1269 -> xxx.yyy.255.254:1433 SYN ******S* Oct 11 12:37:17 152.149.133.197:1267 -> xxx.yyy.255.252:1433 SYN ******S* 40235 Oct 11 19:43:42 218.147.107.148:2215 -> xxx.yyy.1.1:8000 SYN ******S* Oct 11 19:43:40 218.147.107.148:2217 -> xxx.yyy.1.2:8000 SYN ******S* Oct 11 19:43:42 218.147.107.148:2219 -> xxx.yyy.1.3:8000 SYN ******S* Oct 11 19:43:43 218.147.107.148:2221 -> xxx.yyy.1.4:8000 SYN ******S* Oct 11 19:43:43 218.147.107.148:2233 -> xxx.yyy.1.10:8000 SYN ******S* Oct 11 19:43:40 218.147.107.148:2229 -> xxx.yyy.1.8:8000 SYN ******S* Oct 11 19:43:43 218.147.107.148:2237 -> xxx.yyy.1.12:8000 SYN ******S* Oct 11 19:43:40 218.147.107.148:2239 -> xxx.yyy.1.13:8000 SYN ******S* [...] Oct 11 19:55:29 218.147.107.148:2450 -> xxx.yyy.255.235:8000 SYN ******S* Oct 11 19:55:29 218.147.107.148:2452 -> xxx.yyy.255.236:8000 SYN ******S* Oct 11 19:55:29 218.147.107.148:2456 -> xxx.yyy.255.238:8000 SYN ******S* Oct 11 19:55:29 218.147.107.148:2454 -> xxx.yyy.255.237:8000 SYN ******S* Oct 11 19:55:29 218.147.107.148:2478 -> xxx.yyy.255.249:8000 SYN ******S* Oct 11 19:55:29 218.147.107.148:2472 -> xxx.yyy.255.246:8000 SYN ******S* Oct 11 19:55:29 218.147.107.148:2464 -> xxx.yyy.255.242:8000 SYN ******S* Oct 11 19:55:29 218.147.107.148:2486 -> xxx.yyy.255.253:8000 SYN ******S* Oct 11 19:55:29 218.147.107.148:2488 -> xxx.yyy.255.254:8000 SYN ******S* 38938 Oct 11 01:23:02 200.155.19.13:2645 -> xxx.yyy.1.0:1433 SYN ******S* Oct 11 01:23:02 200.155.19.13:2646 -> xxx.yyy.1.1:1433 SYN ******S* Oct 11 01:23:02 200.155.19.13:2598 -> xxx.yyy.1.3:1433 SYN ******S* Oct 11 01:23:02 200.155.19.13:2647 -> xxx.yyy.1.2:1433 SYN ******S* Oct 11 01:23:02 200.155.19.13:2599 -> xxx.yyy.1.4:1433 SYN ******S* Oct 11 01:23:02 200.155.19.13:2600 -> xxx.yyy.1.5:1433 SYN ******S* Oct 11 01:23:02 200.155.19.13:2601 -> xxx.yyy.1.6:1433 SYN ******S* Oct 11 01:23:02 200.155.19.13:2602 -> xxx.yyy.1.7:1433 SYN ******S* [...] Oct 11 01:26:26 200.155.19.13:2611 -> xxx.yyy.255.246:1433 SYN ******S* Oct 11 01:26:26 200.155.19.13:2612 -> xxx.yyy.255.247:1433 SYN ******S* Oct 11 01:26:26 200.155.19.13:2613 -> xxx.yyy.255.248:1433 SYN ******S* Oct 11 01:26:26 200.155.19.13:2614 -> xxx.yyy.255.249:1433 SYN ******S* Oct 11 01:26:26 200.155.19.13:2615 -> xxx.yyy.255.250:1433 SYN ******S* Oct 11 01:26:26 200.155.19.13:2616 -> xxx.yyy.255.251:1433 SYN ******S* Oct 11 01:26:26 200.155.19.13:2617 -> xxx.yyy.255.252:1433 SYN ******S* Oct 11 01:26:26 200.155.19.13:2618 -> xxx.yyy.255.253:1433 SYN ******S* Oct 11 01:26:26 200.155.19.13:2619 -> xxx.yyy.255.254:1433 SYN ******S* 38010 Oct 11 16:39:24 66.55.11.244:4086 -> xxx.yyy.1.3:1433 SYN ******S* Oct 11 16:39:24 66.55.11.244:4087 -> xxx.yyy.1.4:1433 SYN ******S* Oct 11 16:39:21 66.55.11.244:4088 -> xxx.yyy.1.5:1433 SYN ******S* Oct 11 16:39:24 66.55.11.244:4089 -> xxx.yyy.1.6:1433 SYN ******S* Oct 11 16:39:24 66.55.11.244:4093 -> xxx.yyy.1.10:1433 SYN ******S* Oct 11 16:39:24 66.55.11.244:4096 -> xxx.yyy.1.13:1433 SYN ******S* Oct 11 16:39:21 66.55.11.244:4100 -> xxx.yyy.1.17:1433 SYN ******S* Oct 11 16:39:24 66.55.11.244:4102 -> xxx.yyy.1.19:1433 SYN ******S* [...] Oct 11 16:51:00 66.55.11.244:3286 -> xxx.yyy.255.227:1433 SYN ******S* Oct 11 16:51:00 66.55.11.244:3279 -> xxx.yyy.255.220:1433 SYN ******S* Oct 11 16:51:00 66.55.11.244:3284 -> xxx.yyy.255.225:1433 SYN ******S* Oct 11 16:51:00 66.55.11.244:3289 -> xxx.yyy.255.230:1433 SYN ******S* Oct 11 16:51:00 66.55.11.244:3303 -> xxx.yyy.255.244:1433 SYN ******S* Oct 11 16:51:00 66.55.11.244:3301 -> xxx.yyy.255.242:1433 SYN ******S* Oct 11 16:51:00 66.55.11.244:3304 -> xxx.yyy.255.245:1433 SYN ******S* Oct 11 16:51:00 66.55.11.244:3312 -> xxx.yyy.255.253:1433 SYN ******S* 37032 Oct 11 15:01:52 62.110.121.190:3575 -> xxx.yyy.1.3:139 SYN ******S* Oct 11 15:01:49 62.110.121.190:3576 -> xxx.yyy.1.4:139 SYN ******S* Oct 11 15:01:49 62.110.121.190:3579 -> xxx.yyy.1.7:139 SYN ******S* Oct 11 15:01:49 62.110.121.190:3582 -> xxx.yyy.1.10:139 SYN ******S* Oct 11 15:01:49 62.110.121.190:3583 -> xxx.yyy.1.11:139 SYN ******S* Oct 11 15:01:49 62.110.121.190:3584 -> xxx.yyy.1.12:139 SYN ******S* Oct 11 15:01:52 62.110.121.190:3586 -> xxx.yyy.1.14:139 SYN ******S* Oct 11 15:01:52 62.110.121.190:3587 -> xxx.yyy.1.15:139 SYN ******S* [...] Oct 11 15:12:49 62.110.121.190:3097 -> xxx.yyy.255.226:139 SYN ******S* Oct 11 15:12:49 62.110.121.190:3094 -> xxx.yyy.255.223:139 SYN ******S* Oct 11 15:12:49 62.110.121.190:3103 -> xxx.yyy.255.232:139 SYN ******S* Oct 11 15:12:49 62.110.121.190:3106 -> xxx.yyy.255.235:139 SYN ******S* Oct 11 15:12:49 62.110.121.190:3104 -> xxx.yyy.255.233:139 SYN ******S* Oct 11 15:12:49 62.110.121.190:3110 -> xxx.yyy.255.239:139 SYN ******S* Oct 11 15:12:49 62.110.121.190:3107 -> xxx.yyy.255.236:139 SYN ******S* Oct 11 15:12:49 62.110.121.190:3109 -> xxx.yyy.255.238:139 SYN ******S* Oct 11 15:12:49 62.110.121.190:3108 -> xxx.yyy.255.237:139 SYN ******S* 34709 Oct 11 07:26:58 201.10.156.24:8335 -> xxx.yyy.71.2:3730 INVALIDACK ***A*R*F Oct 11 07:26:59 201.10.156.24:8335 -> xxx.yyy.71.2:3761 INVALIDACK ***A*R*F Oct 11 07:27:00 201.10.156.24:8335 -> xxx.yyy.71.2:3791 INVALIDACK ***A*R*F Oct 11 07:27:00 201.10.156.24:8335 -> xxx.yyy.71.2:3821 INVALIDACK ***A*R*F Oct 11 07:27:01 201.10.156.24:8335 -> xxx.yyy.71.2:3821 INVALIDACK ***A*R*F Oct 11 07:27:01 201.10.156.24:8335 -> xxx.yyy.71.2:3851 INVALIDACK ***A*R*F Oct 11 07:27:03 201.10.156.24:8335 -> xxx.yyy.71.2:3881 INVALIDACK ***A*R*F Oct 11 07:27:04 201.10.156.24:8335 -> xxx.yyy.71.2:3911 INVALIDACK ***A*R*F [...] Oct 11 15:56:28 201.10.156.24:8335 -> xxx.yyy.71.2:3991 INVALIDACK ***A*R*F Oct 11 15:56:31 201.10.156.24:8335 -> xxx.yyy.71.2:4082 INVALIDACK ***A*R*F Oct 11 15:56:32 201.10.156.24:8335 -> xxx.yyy.71.2:4113 INVALIDACK ***A*R*F Oct 11 15:56:35 201.10.156.24:8335 -> xxx.yyy.71.2:4174 INVALIDACK ***A*R*F Oct 11 15:56:37 201.10.156.24:8335 -> xxx.yyy.71.2:4234 INVALIDACK ***A*R*F Oct 11 15:56:38 201.10.156.24:8335 -> xxx.yyy.71.2:4265 INVALIDACK ***A*R*F Oct 11 15:56:39 201.10.156.24:8335 -> xxx.yyy.71.2:4325 INVALIDACK ***A*R*F Oct 11 15:56:40 201.10.156.24:8335 -> xxx.yyy.71.2:4355 INVALIDACK ***A*R*F Oct 11 15:56:44 201.10.156.24:8335 -> xxx.yyy.71.2:4448 INVALIDACK ***A*R*F 19511 Oct 11 22:01:21 222.132.253.64:2266 -> xxx.yyy.17.175:1433 SYN ******S* Oct 11 22:01:24 222.132.253.64:2268 -> xxx.yyy.17.178:1433 SYN ******S* Oct 11 22:01:24 222.132.253.64:2270 -> xxx.yyy.17.179:1433 SYN ******S* Oct 11 22:01:24 222.132.253.64:2276 -> xxx.yyy.17.182:1433 SYN ******S* Oct 11 22:01:24 222.132.253.64:2277 -> xxx.yyy.17.183:1433 SYN ******S* Oct 11 22:01:21 222.132.253.64:2280 -> xxx.yyy.17.184:1433 SYN ******S* Oct 11 22:01:24 222.132.253.64:2282 -> xxx.yyy.17.185:1433 SYN ******S* Oct 11 22:01:21 222.132.253.64:2284 -> xxx.yyy.17.186:1433 SYN ******S* [...] Oct 11 23:59:58 222.132.253.64:1836 -> xxx.yyy.141.11:1433 SYN ******S* Oct 11 23:59:59 222.132.253.64:1700 -> xxx.yyy.140.230:1433 SYN ******S* Oct 11 23:59:59 222.132.253.64:1786 -> xxx.yyy.140.251:1433 SYN ******S* Oct 11 23:59:59 222.132.253.64:1706 -> xxx.yyy.140.231:1433 SYN ******S* Oct 11 23:59:59 222.132.253.64:1790 -> xxx.yyy.140.253:1433 SYN ******S* Oct 11 23:59:59 222.132.253.64:1711 -> xxx.yyy.140.233:1433 SYN ******S* Oct 11 23:59:59 222.132.253.64:1802 -> xxx.yyy.140.255:1433 SYN ******S* Oct 11 23:59:59 222.132.253.64:1803 -> xxx.yyy.141.0:1433 SYN ******S* 18244 Oct 11 14:43:03 212.194.135.73:4637 -> xxx.yyy.82.144:1433 SYN ******S* Oct 11 14:43:06 212.194.135.73:4643 -> xxx.yyy.82.146:1433 SYN ******S* Oct 11 14:43:06 212.194.135.73:4649 -> xxx.yyy.82.148:1433 SYN ******S* Oct 11 14:43:03 212.194.135.73:4652 -> xxx.yyy.82.149:1433 SYN ******S* Oct 11 14:43:03 212.194.135.73:4658 -> xxx.yyy.82.151:1433 SYN ******S* Oct 11 14:43:03 212.194.135.73:4673 -> xxx.yyy.82.156:1433 SYN ******S* Oct 11 14:43:06 212.194.135.73:4676 -> xxx.yyy.82.157:1433 SYN ******S* Oct 11 14:43:03 212.194.135.73:4679 -> xxx.yyy.82.158:1433 SYN ******S* [...] Oct 11 15:57:15 212.194.135.73:4555 -> xxx.yyy.164.174:1433 SYN ******S* Oct 11 15:57:15 212.194.135.73:4539 -> xxx.yyy.164.173:1433 SYN ******S* Oct 11 15:57:15 212.194.135.73:3080 -> xxx.yyy.164.213:1433 SYN ******S* Oct 11 15:57:15 212.194.135.73:3082 -> xxx.yyy.164.214:1433 SYN ******S* Oct 11 15:57:15 212.194.135.73:3087 -> xxx.yyy.164.216:1433 SYN ******S* Oct 11 15:57:15 212.194.135.73:3096 -> xxx.yyy.164.218:1433 SYN ******S* Oct 11 15:57:16 212.194.135.73:3104 -> xxx.yyy.164.220:1433 SYN ******S* Oct 11 15:57:16 212.194.135.73:3128 -> xxx.yyy.164.225:1433 SYN ******S* 17761 Oct 11 07:56:32 82.41.170.33:4107 -> xxx.yyy.1.0:1433 SYN ******S* Oct 11 07:56:29 82.41.170.33:4110 -> xxx.yyy.1.1:1433 SYN ******S* Oct 11 07:56:32 82.41.170.33:4111 -> xxx.yyy.1.2:1433 SYN ******S* Oct 11 07:56:32 82.41.170.33:4112 -> xxx.yyy.1.3:1433 SYN ******S* Oct 11 07:56:32 82.41.170.33:4113 -> xxx.yyy.1.4:1433 SYN ******S* Oct 11 07:56:32 82.41.170.33:4114 -> xxx.yyy.1.5:1433 SYN ******S* Oct 11 07:56:32 82.41.170.33:4115 -> xxx.yyy.1.6:1433 SYN ******S* Oct 11 07:56:32 82.41.170.33:4116 -> xxx.yyy.1.7:1433 SYN ******S* [...] Oct 11 09:07:18 82.41.170.33:4174 -> xxx.yyy.79.213:1433 SYN ******S* Oct 11 09:07:18 82.41.170.33:4175 -> xxx.yyy.79.214:1433 SYN ******S* Oct 11 09:07:18 82.41.170.33:4176 -> xxx.yyy.79.215:1433 SYN ******S* Oct 11 09:07:18 82.41.170.33:4190 -> xxx.yyy.79.216:1433 SYN ******S* Oct 11 09:07:18 82.41.170.33:4415 -> xxx.yyy.79.244:1433 SYN ******S* Oct 11 09:07:18 82.41.170.33:4192 -> xxx.yyy.79.217:1433 SYN ******S* Oct 11 09:07:18 82.41.170.33:4196 -> xxx.yyy.79.219:1433 SYN ******S* Oct 11 09:07:18 82.41.170.33:4199 -> xxx.yyy.79.220:1433 SYN ******S* Oct 11 09:07:18 82.41.170.33:4201 -> xxx.yyy.79.221:1433 SYN ******S* 16937 Oct 11 07:07:22 201.1.146.29:3400 -> xxx.yyy.1.1:1433 SYN ******S* Oct 11 07:07:22 201.1.146.29:3398 -> xxx.yyy.1.0:1433 SYN ******S* Oct 11 07:07:22 201.1.146.29:3403 -> xxx.yyy.1.4:1433 SYN ******S* Oct 11 07:07:22 201.1.146.29:3402 -> xxx.yyy.1.3:1433 SYN ******S* Oct 11 07:07:22 201.1.146.29:3401 -> xxx.yyy.1.2:1433 SYN ******S* Oct 11 07:07:22 201.1.146.29:3404 -> xxx.yyy.1.5:1433 SYN ******S* Oct 11 07:07:22 201.1.146.29:3405 -> xxx.yyy.1.6:1433 SYN ******S* Oct 11 07:07:22 201.1.146.29:3407 -> xxx.yyy.1.7:1433 SYN ******S* [...] Oct 11 08:20:09 201.1.146.29:2604 -> xxx.yyy.81.111:1433 SYN ******S* Oct 11 08:20:09 201.1.146.29:2609 -> xxx.yyy.81.113:1433 SYN ******S* Oct 11 08:20:39 201.1.146.29:3283 -> xxx.yyy.81.213:1433 SYN ******S* Oct 11 08:20:39 201.1.146.29:3281 -> xxx.yyy.81.212:1433 SYN ******S* Oct 11 08:20:39 201.1.146.29:3291 -> xxx.yyy.81.216:1433 SYN ******S* Oct 11 08:20:39 201.1.146.29:3290 -> xxx.yyy.81.215:1433 SYN ******S* Oct 11 08:20:39 201.1.146.29:3288 -> xxx.yyy.81.214:1433 SYN ******S* Oct 11 08:20:39 201.1.146.29:3297 -> xxx.yyy.81.219:1433 SYN ******S* Oct 11 08:20:39 201.1.146.29:3295 -> xxx.yyy.81.218:1433 SYN ******S* 15887 Oct 11 12:02:21 219.131.214.54:4852 -> xxx.yyy.1.23:8535 SYN ******S* Oct 11 12:02:21 219.131.214.54:4830 -> xxx.yyy.1.1:8535 SYN ******S* Oct 11 12:02:21 219.131.214.54:4832 -> xxx.yyy.1.3:8535 SYN ******S* Oct 11 12:02:21 219.131.214.54:4838 -> xxx.yyy.1.9:8535 SYN ******S* Oct 11 12:02:21 219.131.214.54:4839 -> xxx.yyy.1.10:8535 SYN ******S* Oct 11 12:02:21 219.131.214.54:4841 -> xxx.yyy.1.12:8535 SYN ******S* Oct 11 12:02:21 219.131.214.54:4847 -> xxx.yyy.1.18:8535 SYN ******S* Oct 11 12:02:21 219.131.214.54:4853 -> xxx.yyy.1.24:8535 SYN ******S* [...] Oct 11 12:24:02 219.131.214.54:3441 -> xxx.yyy.255.232:8535 SYN ******S* Oct 11 12:24:02 219.131.214.54:3445 -> xxx.yyy.255.236:8535 SYN ******S* Oct 11 12:24:02 219.131.214.54:3455 -> xxx.yyy.255.246:8535 SYN ******S* Oct 11 12:24:02 219.131.214.54:3457 -> xxx.yyy.255.248:8535 SYN ******S* Oct 11 12:24:02 219.131.214.54:3456 -> xxx.yyy.255.247:8535 SYN ******S* Oct 11 12:24:02 219.131.214.54:3463 -> xxx.yyy.255.254:8535 SYN ******S* Oct 11 12:24:02 219.131.214.54:3454 -> xxx.yyy.255.245:8535 SYN ******S* Oct 11 12:24:02 219.131.214.54:3462 -> xxx.yyy.255.253:8535 SYN ******S* 15867 Oct 11 00:38:24 130.86.213.69:4622 -> xxx.yyy.1.245:1433 SYN ******S* Oct 11 00:38:24 130.86.213.69:4620 -> xxx.yyy.1.244:1433 SYN ******S* Oct 11 00:38:24 130.86.213.69:4624 -> xxx.yyy.1.246:1433 SYN ******S* Oct 11 00:38:24 130.86.213.69:4626 -> xxx.yyy.1.247:1433 SYN ******S* Oct 11 00:38:24 130.86.213.69:4630 -> xxx.yyy.1.249:1433 SYN ******S* Oct 11 00:38:24 130.86.213.69:4628 -> xxx.yyy.1.248:1433 SYN ******S* Oct 11 00:38:24 130.86.213.69:4632 -> xxx.yyy.1.250:1433 SYN ******S* Oct 11 00:38:25 130.86.213.69:4639 -> xxx.yyy.1.251:1433 SYN ******S* [...] Oct 11 01:44:49 130.86.213.69:3396 -> xxx.yyy.249.172:1433 SYN ******S* Oct 11 01:44:49 130.86.213.69:3508 -> xxx.yyy.249.173:1433 SYN ******S* Oct 11 01:44:49 130.86.213.69:3598 -> xxx.yyy.249.174:1433 SYN ******S* Oct 11 01:44:49 130.86.213.69:3647 -> xxx.yyy.249.175:1433 SYN ******S* Oct 11 01:44:49 130.86.213.69:3803 -> xxx.yyy.249.176:1433 SYN ******S* Oct 11 01:44:49 130.86.213.69:3906 -> xxx.yyy.249.177:1433 SYN ******S* Oct 11 01:44:49 130.86.213.69:4006 -> xxx.yyy.249.178:1433 SYN ******S* Oct 11 01:44:49 130.86.213.69:4030 -> xxx.yyy.249.179:1433 SYN ******S* Oct 11 01:44:49 130.86.213.69:4068 -> xxx.yyy.249.180:1433 SYN ******S* 14956 Oct 11 05:56:21 221.164.191.103:4103 -> xxx.yyy.174.2:5554 SYN ******S* Oct 11 05:56:22 221.164.191.103:1359 -> xxx.yyy.174.2:1023 SYN ******S* Oct 11 05:56:24 221.164.191.103:3101 -> xxx.yyy.174.2:9898 SYN ******S* Oct 11 05:56:21 221.164.191.103:4106 -> xxx.yyy.174.4:5554 SYN ******S* Oct 11 05:56:22 221.164.191.103:1363 -> xxx.yyy.174.4:1023 SYN ******S* Oct 11 05:56:24 221.164.191.103:3103 -> xxx.yyy.174.4:9898 SYN ******S* Oct 11 05:56:21 221.164.191.103:4130 -> xxx.yyy.174.17:5554 SYN ******S* Oct 11 05:56:22 221.164.191.103:1386 -> xxx.yyy.174.17:1023 SYN ******S* [...] Oct 11 05:57:07 221.164.191.103:2734 -> xxx.yyy.193.136:9898 SYN ******S* Oct 11 05:57:07 221.164.191.103:2762 -> xxx.yyy.193.139:9898 SYN ******S* Oct 11 05:57:07 221.164.191.103:2763 -> xxx.yyy.193.140:9898 SYN ******S* Oct 11 05:57:09 221.164.191.103:4510 -> xxx.yyy.194.121:9898 SYN ******S* Oct 11 05:57:09 221.164.191.103:4515 -> xxx.yyy.194.122:9898 SYN ******S* Oct 11 05:57:09 221.164.191.103:4709 -> xxx.yyy.179.32:9898 SYN ******S* Oct 11 05:57:09 221.164.191.103:4701 -> xxx.yyy.179.33:9898 SYN ******S* Oct 11 05:57:09 221.164.191.103:4745 -> xxx.yyy.179.35:9898 SYN ******S* Oct 11 05:57:09 221.164.191.103:4747 -> xxx.yyy.179.34:9898 SYN ******S* 14711 Oct 11 15:11:24 83.24.65.248:25217 -> xxx.yyy.10.78:1433 SYN ******S* Oct 11 15:11:25 83.24.65.248:25223 -> xxx.yyy.10.80:1433 SYN ******S* Oct 11 15:11:25 83.24.65.248:25224 -> xxx.yyy.10.81:1433 SYN ******S* Oct 11 15:11:25 83.24.65.248:25225 -> xxx.yyy.10.82:1433 SYN ******S* Oct 11 15:11:25 83.24.65.248:25232 -> xxx.yyy.10.88:1433 SYN ******S* Oct 11 15:11:25 83.24.65.248:25237 -> xxx.yyy.10.90:1433 SYN ******S* Oct 11 15:11:25 83.24.65.248:25238 -> xxx.yyy.10.91:1433 SYN ******S* Oct 11 15:11:25 83.24.65.248:25239 -> xxx.yyy.10.92:1433 SYN ******S* [...] Oct 11 17:25:49 83.24.65.248:38798 -> xxx.yyy.160.80:1433 SYN ******S* Oct 11 17:25:49 83.24.65.248:38800 -> xxx.yyy.160.47:1433 SYN ******S* Oct 11 17:25:49 83.24.65.248:38801 -> xxx.yyy.160.48:1433 SYN ******S* Oct 11 17:28:27 83.24.65.248:38812 -> xxx.yyy.163.19:1433 SYN ******S* Oct 11 17:28:27 83.24.65.248:38819 -> xxx.yyy.163.21:1433 SYN ******S* Oct 11 17:28:27 83.24.65.248:38834 -> xxx.yyy.163.23:1433 SYN ******S* Oct 11 17:28:27 83.24.65.248:38836 -> xxx.yyy.163.25:1433 SYN ******S* Oct 11 17:28:27 83.24.65.248:38840 -> xxx.yyy.163.26:1433 SYN ******S* Oct 11 17:28:27 83.24.65.248:38853 -> xxx.yyy.163.28:1433 SYN ******S* 10712 Oct 11 17:27:29 82.37.123.224:1301 -> xxx.yyy.1.0:1433 SYN ******S* Oct 11 17:27:29 82.37.123.224:1316 -> xxx.yyy.1.4:1433 SYN ******S* Oct 11 17:27:32 82.37.123.224:1321 -> xxx.yyy.1.6:1433 SYN ******S* Oct 11 17:27:32 82.37.123.224:1325 -> xxx.yyy.1.7:1433 SYN ******S* Oct 11 17:27:32 82.37.123.224:1326 -> xxx.yyy.1.8:1433 SYN ******S* Oct 11 17:27:32 82.37.123.224:1327 -> xxx.yyy.1.9:1433 SYN ******S* Oct 11 17:27:29 82.37.123.224:1334 -> xxx.yyy.1.11:1433 SYN ******S* Oct 11 17:27:32 82.37.123.224:1341 -> xxx.yyy.1.12:1433 SYN ******S* [...] Oct 11 18:37:55 82.37.123.224:3319 -> xxx.yyy.73.174:1433 SYN ******S* Oct 11 18:37:56 82.37.123.224:3326 -> xxx.yyy.73.175:1433 SYN ******S* Oct 11 18:37:56 82.37.123.224:3330 -> xxx.yyy.73.176:1433 SYN ******S* Oct 11 18:37:57 82.37.123.224:3472 -> xxx.yyy.73.179:1433 SYN ******S* Oct 11 18:37:58 82.37.123.224:3549 -> xxx.yyy.73.180:1433 SYN ******S* Oct 11 18:37:58 82.37.123.224:3560 -> xxx.yyy.73.183:1433 SYN ******S* Oct 11 18:37:58 82.37.123.224:3557 -> xxx.yyy.73.182:1433 SYN ******S* Oct 11 18:37:59 82.37.123.224:4611 -> xxx.yyy.73.188:1433 SYN ******S* 10508 Oct 11 09:57:18 82.32.216.65:4867 -> xxx.yyy.161.79:1433 SYN ******S* Oct 11 09:57:15 82.32.216.65:4869 -> xxx.yyy.161.80:1433 SYN ******S* Oct 11 09:57:18 82.32.216.65:4881 -> xxx.yyy.161.86:1433 SYN ******S* Oct 11 09:57:18 82.32.216.65:4883 -> xxx.yyy.161.87:1433 SYN ******S* Oct 11 09:57:18 82.32.216.65:4885 -> xxx.yyy.161.88:1433 SYN ******S* Oct 11 09:57:18 82.32.216.65:4889 -> xxx.yyy.161.90:1433 SYN ******S* Oct 11 09:57:18 82.32.216.65:4891 -> xxx.yyy.161.91:1433 SYN ******S* Oct 11 09:57:15 82.32.216.65:4895 -> xxx.yyy.161.93:1433 SYN ******S* [...] Oct 11 10:16:11 82.32.216.65:2875 -> xxx.yyy.182.122:1433 SYN ******S* Oct 11 10:16:11 82.32.216.65:2876 -> xxx.yyy.182.123:1433 SYN ******S* Oct 11 10:16:11 82.32.216.65:2881 -> xxx.yyy.182.124:1433 SYN ******S* Oct 11 10:16:11 82.32.216.65:2882 -> xxx.yyy.182.125:1433 SYN ******S* Oct 11 10:16:11 82.32.216.65:2883 -> xxx.yyy.182.126:1433 SYN ******S* Oct 11 10:16:11 82.32.216.65:2893 -> xxx.yyy.182.127:1433 SYN ******S* Oct 11 10:16:11 82.32.216.65:2894 -> xxx.yyy.182.128:1433 SYN ******S* Oct 11 10:16:11 82.32.216.65:2896 -> xxx.yyy.182.130:1433 SYN ******S* 9662 Oct 11 06:16:53 81.79.128.42:2283 -> xxx.yyy.1.0:1433 SYN ******S* Oct 11 06:16:53 81.79.128.42:2286 -> xxx.yyy.1.1:1433 SYN ******S* Oct 11 06:16:53 81.79.128.42:2290 -> xxx.yyy.1.3:1433 SYN ******S* Oct 11 06:16:53 81.79.128.42:2291 -> xxx.yyy.1.4:1433 SYN ******S* Oct 11 06:16:53 81.79.128.42:2288 -> xxx.yyy.1.2:1433 SYN ******S* Oct 11 06:16:53 81.79.128.42:2292 -> xxx.yyy.1.5:1433 SYN ******S* Oct 11 06:16:53 81.79.128.42:2293 -> xxx.yyy.1.6:1433 SYN ******S* Oct 11 06:16:53 81.79.128.42:2294 -> xxx.yyy.1.7:1433 SYN ******S* [...] Oct 11 06:46:36 81.79.128.42:3016 -> xxx.yyy.33.248:1433 SYN ******S* Oct 11 06:46:36 81.79.128.42:3015 -> xxx.yyy.33.247:1433 SYN ******S* Oct 11 06:46:36 81.79.128.42:3014 -> xxx.yyy.33.246:1433 SYN ******S* Oct 11 06:46:36 81.79.128.42:3019 -> xxx.yyy.33.251:1433 SYN ******S* Oct 11 06:46:36 81.79.128.42:3018 -> xxx.yyy.33.250:1433 SYN ******S* Oct 11 06:46:36 81.79.128.42:3020 -> xxx.yyy.33.252:1433 SYN ******S* Oct 11 06:46:36 81.79.128.42:3033 -> xxx.yyy.33.253:1433 SYN ******S* Oct 11 06:46:36 81.79.128.42:3036 -> xxx.yyy.33.254:1433 SYN ******S* Oct 11 06:46:37 81.79.128.42:3039 -> xxx.yyy.33.255:1433 SYN ******S* 8984 Oct 11 05:59:20 222.53.122.74:3914 -> xxx.yyy.1.44:1433 SYN ******S* Oct 11 05:59:20 222.53.122.74:3918 -> xxx.yyy.1.46:1433 SYN ******S* Oct 11 05:59:20 222.53.122.74:3916 -> xxx.yyy.1.45:1433 SYN ******S* Oct 11 05:59:17 222.53.122.74:3920 -> xxx.yyy.1.47:1433 SYN ******S* Oct 11 05:59:20 222.53.122.74:3923 -> xxx.yyy.1.48:1433 SYN ******S* Oct 11 05:59:20 222.53.122.74:3924 -> xxx.yyy.1.49:1433 SYN ******S* Oct 11 05:59:20 222.53.122.74:3925 -> xxx.yyy.1.50:1433 SYN ******S* Oct 11 05:59:20 222.53.122.74:3926 -> xxx.yyy.1.51:1433 SYN ******S* [...] Oct 11 06:28:54 222.53.122.74:4399 -> xxx.yyy.33.247:1433 SYN ******S* Oct 11 06:28:54 222.53.122.74:4401 -> xxx.yyy.33.249:1433 SYN ******S* Oct 11 06:28:54 222.53.122.74:4402 -> xxx.yyy.33.250:1433 SYN ******S* Oct 11 06:28:55 222.53.122.74:4406 -> xxx.yyy.33.252:1433 SYN ******S* Oct 11 06:28:55 222.53.122.74:4405 -> xxx.yyy.33.251:1433 SYN ******S* Oct 11 06:28:55 222.53.122.74:4410 -> xxx.yyy.33.253:1433 SYN ******S* Oct 11 06:28:55 222.53.122.74:4415 -> xxx.yyy.33.254:1433 SYN ******S* Oct 11 06:28:55 222.53.122.74:4416 -> xxx.yyy.33.255:1433 SYN ******S* 8877 [...] 7643 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions