[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0500. Oct 19 09:04:59 4.65.108.157:1031 -> xxx.yyy.135.189:139 SYN ******S* Oct 19 09:05:01 4.65.108.157:1030 -> xxx.yyy.246.87:139 SYN ******S* Oct 19 09:04:59 4.65.108.157:1036 -> xxx.yyy.255.82:139 SYN ******S* Oct 19 09:04:59 4.65.108.157:1037 -> xxx.yyy.141.93:139 SYN ******S* Oct 19 09:04:59 4.65.108.157:1038 -> xxx.yyy.208.14:139 SYN ******S* Oct 19 09:05:02 4.65.108.157:1044 -> xxx.yyy.1.98:139 SYN ******S* Oct 19 09:04:59 4.65.108.157:1045 -> xxx.yyy.253.240:139 SYN ******S* Oct 19 09:05:02 4.65.108.157:1049 -> xxx.yyy.216.231:139 SYN ******S* [...] Oct 19 13:04:58 4.65.108.157:1788 -> xxx.yyy.69.248:139 SYN ******S* Oct 19 13:04:58 4.65.108.157:1789 -> xxx.yyy.209.168:139 SYN ******S* Oct 19 13:04:58 4.65.108.157:1790 -> xxx.yyy.218.67:139 SYN ******S* Oct 19 13:04:58 4.65.108.157:1792 -> xxx.yyy.173.35:139 SYN ******S* Oct 19 13:04:58 4.65.108.157:1795 -> xxx.yyy.220.80:139 SYN ******S* Oct 19 13:04:58 4.65.108.157:1797 -> xxx.yyy.165.165:139 SYN ******S* Oct 19 13:05:01 4.65.108.157:1793 -> xxx.yyy.171.16:139 SYN ******S* Oct 19 13:05:01 4.65.108.157:1797 -> xxx.yyy.165.165:139 SYN ******S* Oct 19 13:05:01 4.65.108.157:1792 -> xxx.yyy.173.35:139 SYN ******S* 149856 Oct 19 09:07:06 200.153.67.70:1037 -> xxx.yyy.11.104:139 SYN ******S* Oct 19 09:07:06 200.153.67.70:1035 -> xxx.yyy.73.143:139 SYN ******S* Oct 19 09:07:06 200.153.67.70:1036 -> xxx.yyy.152.197:139 SYN ******S* Oct 19 09:07:06 200.153.67.70:1038 -> xxx.yyy.244.8:139 SYN ******S* Oct 19 09:07:06 200.153.67.70:1039 -> xxx.yyy.68.4:139 SYN ******S* Oct 19 09:07:06 200.153.67.70:1043 -> xxx.yyy.237.73:139 SYN ******S* Oct 19 09:07:06 200.153.67.70:1044 -> xxx.yyy.155.248:139 SYN ******S* Oct 19 09:07:03 200.153.67.70:1049 -> xxx.yyy.79.22:139 SYN ******S* [...] Oct 19 13:09:36 200.153.67.70:2891 -> xxx.yyy.228.157:139 SYN ******S* Oct 19 13:09:36 200.153.67.70:2898 -> xxx.yyy.189.109:139 SYN ******S* Oct 19 13:09:36 200.153.67.70:2900 -> xxx.yyy.202.221:139 SYN ******S* Oct 19 13:09:36 200.153.67.70:2899 -> xxx.yyy.168.136:139 SYN ******S* Oct 19 13:09:37 200.153.67.70:2954 -> xxx.yyy.190.145:139 SYN ******S* Oct 19 13:09:37 200.153.67.70:2967 -> xxx.yyy.216.17:139 SYN ******S* Oct 19 13:09:37 200.153.67.70:2971 -> xxx.yyy.68.24:139 SYN ******S* Oct 19 13:09:37 200.153.67.70:2986 -> xxx.yyy.231.244:139 SYN ******S* 146270 Oct 19 00:00:11 220.135.113.42:2959 -> xxx.yyy.78.238:1433 SYN ******S* Oct 19 00:00:14 220.135.113.42:2969 -> xxx.yyy.78.240:1433 SYN ******S* Oct 19 00:00:11 220.135.113.42:2978 -> xxx.yyy.78.241:1433 SYN ******S* Oct 19 00:00:14 220.135.113.42:2980 -> xxx.yyy.78.242:1433 SYN ******S* Oct 19 00:00:11 220.135.113.42:2989 -> xxx.yyy.78.246:1433 SYN ******S* Oct 19 00:00:12 220.135.113.42:3031 -> xxx.yyy.79.0:1433 SYN ******S* Oct 19 00:00:13 220.135.113.42:3033 -> xxx.yyy.79.2:1433 SYN ******S* Oct 19 00:00:13 220.135.113.42:3034 -> xxx.yyy.79.3:1433 SYN ******S* [...] Oct 19 02:38:55 220.135.113.42:4137 -> xxx.yyy.255.245:1433 SYN ******S* Oct 19 02:38:55 220.135.113.42:4140 -> xxx.yyy.255.248:1433 SYN ******S* Oct 19 02:38:55 220.135.113.42:4142 -> xxx.yyy.255.249:1433 SYN ******S* Oct 19 02:38:55 220.135.113.42:4147 -> xxx.yyy.255.251:1433 SYN ******S* Oct 19 02:38:55 220.135.113.42:4146 -> xxx.yyy.255.250:1433 SYN ******S* Oct 19 02:38:56 220.135.113.42:4148 -> xxx.yyy.255.252:1433 SYN ******S* Oct 19 02:38:56 220.135.113.42:4151 -> xxx.yyy.255.253:1433 SYN ******S* Oct 19 02:38:56 220.135.113.42:4186 -> xxx.yyy.255.254:1433 SYN ******S* 88230 Oct 19 08:29:13 4.7.2.4:1031 -> xxx.yyy.135.185:139 SYN ******S* Oct 19 08:29:13 4.7.2.4:1032 -> xxx.yyy.240.50:139 SYN ******S* Oct 19 08:29:13 4.7.2.4:1033 -> xxx.yyy.210.57:139 SYN ******S* Oct 19 08:29:10 4.7.2.4:1034 -> xxx.yyy.216.67:139 SYN ******S* Oct 19 08:29:13 4.7.2.4:1038 -> xxx.yyy.246.225:139 SYN ******S* Oct 19 08:29:13 4.7.2.4:1039 -> xxx.yyy.140.239:139 SYN ******S* Oct 19 08:29:13 4.7.2.4:1041 -> xxx.yyy.204.5:139 SYN ******S* Oct 19 08:29:13 4.7.2.4:1042 -> xxx.yyy.219.200:139 SYN ******S* [...] Oct 19 12:29:09 4.7.2.4:2248 -> xxx.yyy.86.18:139 SYN ******S* Oct 19 12:29:09 4.7.2.4:2251 -> xxx.yyy.168.88:139 SYN ******S* Oct 19 12:29:06 4.7.2.4:2257 -> xxx.yyy.150.83:139 SYN ******S* Oct 19 12:29:09 4.7.2.4:2219 -> xxx.yyy.14.252:139 SYN ******S* Oct 19 12:29:09 4.7.2.4:2239 -> xxx.yyy.82.55:139 SYN ******S* Oct 19 12:29:09 4.7.2.4:2232 -> xxx.yyy.20.45:139 SYN ******S* Oct 19 12:29:09 4.7.2.4:2245 -> xxx.yyy.228.157:139 SYN ******S* Oct 19 12:29:09 4.7.2.4:2250 -> xxx.yyy.10.109:139 SYN ******S* 83231 Oct 19 08:36:04 218.165.228.189:64788 -> xxx.yyy.66.225:139 SYN ******S* Oct 19 08:36:07 218.165.228.189:64789 -> xxx.yyy.222.242:139 SYN ******S* Oct 19 08:36:07 218.165.228.189:64792 -> xxx.yyy.145.193:139 SYN ******S* Oct 19 08:36:04 218.165.228.189:64793 -> xxx.yyy.29.15:139 SYN ******S* Oct 19 08:36:04 218.165.228.189:64795 -> xxx.yyy.77.147:139 SYN ******S* Oct 19 08:36:04 218.165.228.189:64799 -> xxx.yyy.20.174:139 SYN ******S* Oct 19 08:36:04 218.165.228.189:64800 -> xxx.yyy.239.214:139 SYN ******S* Oct 19 08:36:04 218.165.228.189:64801 -> xxx.yyy.241.42:139 SYN ******S* [...] Oct 19 12:36:08 218.165.228.189:63613 -> xxx.yyy.205.93:139 SYN ******S* Oct 19 12:36:08 218.165.228.189:63638 -> xxx.yyy.154.135:139 SYN ******S* Oct 19 12:36:08 218.165.228.189:63615 -> xxx.yyy.104.41:139 SYN ******S* Oct 19 12:36:08 218.165.228.189:63639 -> xxx.yyy.158.99:139 SYN ******S* Oct 19 12:36:08 218.165.228.189:63627 -> xxx.yyy.198.134:139 SYN ******S* Oct 19 12:36:08 218.165.228.189:63624 -> xxx.yyy.170.19:139 SYN ******S* Oct 19 12:36:08 218.165.228.189:63634 -> xxx.yyy.68.189:139 SYN ******S* Oct 19 12:36:08 218.165.228.189:63626 -> xxx.yyy.87.223:139 SYN ******S* Oct 19 12:36:08 218.165.228.189:63622 -> xxx.yyy.132.228:139 SYN ******S* 82253 Oct 19 08:29:47 63.150.12.161:1367 -> xxx.yyy.146.248:139 SYN ******S* Oct 19 08:29:48 63.150.12.161:1370 -> xxx.yyy.140.241:139 SYN ******S* Oct 19 08:29:47 63.150.12.161:1374 -> xxx.yyy.106.178:139 SYN ******S* Oct 19 08:29:48 63.150.12.161:1381 -> xxx.yyy.208.241:139 SYN ******S* Oct 19 08:29:47 63.150.12.161:1380 -> xxx.yyy.222.49:139 SYN ******S* Oct 19 08:29:48 63.150.12.161:1387 -> xxx.yyy.64.204:139 SYN ******S* Oct 19 08:29:48 63.150.12.161:1389 -> xxx.yyy.82.218:139 SYN ******S* Oct 19 08:29:45 63.150.12.161:1390 -> xxx.yyy.186.197:139 SYN ******S* [...] Oct 19 12:29:47 63.150.12.161:2966 -> xxx.yyy.68.117:139 SYN ******S* Oct 19 12:29:47 63.150.12.161:2967 -> xxx.yyy.186.36:139 SYN ******S* Oct 19 12:29:47 63.150.12.161:2971 -> xxx.yyy.203.85:139 SYN ******S* Oct 19 12:29:47 63.150.12.161:2975 -> xxx.yyy.235.6:139 SYN ******S* Oct 19 12:29:47 63.150.12.161:2974 -> xxx.yyy.152.211:139 SYN ******S* Oct 19 12:29:47 63.150.12.161:2970 -> xxx.yyy.87.21:139 SYN ******S* Oct 19 12:29:47 63.150.12.161:2979 -> xxx.yyy.197.129:139 SYN ******S* Oct 19 12:29:47 63.150.12.161:2978 -> xxx.yyy.174.199:139 SYN ******S* 81090 Oct 19 08:27:07 67.105.36.186:1041 -> xxx.yyy.111.107:139 SYN ******S* Oct 19 08:27:07 67.105.36.186:1043 -> xxx.yyy.143.159:139 SYN ******S* Oct 19 08:27:07 67.105.36.186:1045 -> xxx.yyy.196.218:139 SYN ******S* Oct 19 08:27:07 67.105.36.186:1046 -> xxx.yyy.83.25:139 SYN ******S* Oct 19 08:27:07 67.105.36.186:1047 -> xxx.yyy.149.210:139 SYN ******S* Oct 19 08:27:04 67.105.36.186:1050 -> xxx.yyy.199.14:139 SYN ******S* Oct 19 08:27:07 67.105.36.186:1052 -> xxx.yyy.193.244:139 SYN ******S* Oct 19 08:27:07 67.105.36.186:1053 -> xxx.yyy.139.160:139 SYN ******S* [...] Oct 19 12:27:04 67.105.36.186:2976 -> xxx.yyy.78.55:139 SYN ******S* Oct 19 12:27:04 67.105.36.186:2977 -> xxx.yyy.222.39:139 SYN ******S* Oct 19 12:27:04 67.105.36.186:2985 -> xxx.yyy.16.251:139 SYN ******S* Oct 19 12:27:04 67.105.36.186:2990 -> xxx.yyy.29.130:139 SYN ******S* Oct 19 12:27:04 67.105.36.186:2988 -> xxx.yyy.64.92:139 SYN ******S* Oct 19 12:27:04 67.105.36.186:2989 -> xxx.yyy.177.88:139 SYN ******S* Oct 19 12:27:04 67.105.36.186:2997 -> xxx.yyy.17.44:139 SYN ******S* Oct 19 12:27:04 67.105.36.186:2998 -> xxx.yyy.146.142:139 SYN ******S* 80471 Oct 19 08:40:35 61.10.141.192:1029 -> xxx.yyy.232.224:139 SYN ******S* Oct 19 08:40:32 61.10.141.192:1030 -> xxx.yyy.134.111:139 SYN ******S* Oct 19 08:40:32 61.10.141.192:1032 -> xxx.yyy.177.169:139 SYN ******S* Oct 19 08:40:32 61.10.141.192:1033 -> xxx.yyy.138.73:139 SYN ******S* Oct 19 08:40:32 61.10.141.192:1034 -> xxx.yyy.11.31:139 SYN ******S* Oct 19 08:40:32 61.10.141.192:1037 -> xxx.yyy.216.160:139 SYN ******S* Oct 19 08:40:35 61.10.141.192:1039 -> xxx.yyy.190.10:139 SYN ******S* Oct 19 08:40:35 61.10.141.192:1042 -> xxx.yyy.184.5:139 SYN ******S* [...] Oct 19 12:40:11 61.10.141.192:1491 -> xxx.yyy.200.102:139 SYN ******S* Oct 19 12:40:11 61.10.141.192:1494 -> xxx.yyy.216.22:139 SYN ******S* Oct 19 12:40:11 61.10.141.192:1495 -> xxx.yyy.233.244:139 SYN ******S* Oct 19 12:40:12 61.10.141.192:1472 -> xxx.yyy.153.6:139 SYN ******S* Oct 19 12:40:13 61.10.141.192:1474 -> xxx.yyy.250.76:139 SYN ******S* Oct 19 12:40:13 61.10.141.192:1478 -> xxx.yyy.83.254:139 SYN ******S* Oct 19 12:40:14 61.10.141.192:1484 -> xxx.yyy.82.206:139 SYN ******S* Oct 19 12:40:14 61.10.141.192:1483 -> xxx.yyy.81.252:139 SYN ******S* 80075 Oct 19 08:44:23 211.75.165.217:1031 -> xxx.yyy.65.239:139 SYN ******S* Oct 19 08:44:20 211.75.165.217:1040 -> xxx.yyy.94.12:139 SYN ******S* Oct 19 08:44:23 211.75.165.217:1041 -> xxx.yyy.105.229:139 SYN ******S* Oct 19 08:44:23 211.75.165.217:1043 -> xxx.yyy.174.185:139 SYN ******S* Oct 19 08:44:23 211.75.165.217:1044 -> xxx.yyy.245.141:139 SYN ******S* Oct 19 08:44:20 211.75.165.217:1035 -> xxx.yyy.128.16:139 SYN ******S* Oct 19 08:44:23 211.75.165.217:1039 -> xxx.yyy.187.221:139 SYN ******S* Oct 19 08:44:23 211.75.165.217:1032 -> xxx.yyy.75.184:139 SYN ******S* [...] Oct 19 12:44:20 211.75.165.217:3668 -> xxx.yyy.254.42:139 SYN ******S* Oct 19 12:44:20 211.75.165.217:3680 -> xxx.yyy.156.13:139 SYN ******S* Oct 19 12:44:20 211.75.165.217:3684 -> xxx.yyy.152.69:139 SYN ******S* Oct 19 12:44:20 211.75.165.217:3682 -> xxx.yyy.69.222:139 SYN ******S* Oct 19 12:44:20 211.75.165.217:3685 -> xxx.yyy.202.134:139 SYN ******S* Oct 19 12:44:21 211.75.165.217:3695 -> xxx.yyy.187.100:139 SYN ******S* Oct 19 12:44:24 211.75.165.217:3694 -> xxx.yyy.163.249:139 SYN ******S* Oct 19 12:44:24 211.75.165.217:3693 -> xxx.yyy.29.19:139 SYN ******S* Oct 19 12:44:24 211.75.165.217:3695 -> xxx.yyy.187.100:139 SYN ******S* 76032 Oct 19 08:18:49 63.226.144.97:5184 -> xxx.yyy.192.53:139 SYN ******S* Oct 19 08:18:49 63.226.144.97:5185 -> xxx.yyy.133.59:139 SYN ******S* Oct 19 08:18:48 63.226.144.97:5186 -> xxx.yyy.209.218:139 SYN ******S* Oct 19 08:18:46 63.226.144.97:5187 -> xxx.yyy.88.25:139 SYN ******S* Oct 19 08:18:49 63.226.144.97:5189 -> xxx.yyy.227.138:139 SYN ******S* Oct 19 08:18:49 63.226.144.97:5191 -> xxx.yyy.192.26:139 SYN ******S* Oct 19 08:18:49 63.226.144.97:5195 -> xxx.yyy.188.49:139 SYN ******S* Oct 19 08:18:49 63.226.144.97:5197 -> xxx.yyy.66.165:139 SYN ******S* [...] Oct 19 12:18:44 63.226.144.97:13040 -> xxx.yyy.248.45:139 SYN ******S* Oct 19 12:18:47 63.226.144.97:13007 -> xxx.yyy.15.189:139 SYN ******S* Oct 19 12:18:47 63.226.144.97:13008 -> xxx.yyy.193.133:139 SYN ******S* Oct 19 12:18:47 63.226.144.97:13029 -> xxx.yyy.140.107:139 SYN ******S* Oct 19 12:18:47 63.226.144.97:13025 -> xxx.yyy.197.136:139 SYN ******S* Oct 19 12:18:47 63.226.144.97:13017 -> xxx.yyy.94.182:139 SYN ******S* Oct 19 12:18:47 63.226.144.97:13016 -> xxx.yyy.76.227:139 SYN ******S* Oct 19 12:18:47 63.226.144.97:13021 -> xxx.yyy.139.23:139 SYN ******S* Oct 19 12:18:47 63.226.144.97:13019 -> xxx.yyy.189.132:139 SYN ******S* 75090 Oct 19 09:14:02 211.40.31.200:2397 -> xxx.yyy.206.155:139 SYN ******S* Oct 19 09:14:05 211.40.31.200:2392 -> xxx.yyy.91.17:139 SYN ******S* Oct 19 09:14:02 211.40.31.200:2406 -> xxx.yyy.249.179:139 SYN ******S* Oct 19 09:14:02 211.40.31.200:2405 -> xxx.yyy.172.162:139 SYN ******S* Oct 19 09:14:02 211.40.31.200:2407 -> xxx.yyy.246.168:139 SYN ******S* Oct 19 09:14:05 211.40.31.200:2419 -> xxx.yyy.91.125:139 SYN ******S* Oct 19 09:14:02 211.40.31.200:2424 -> xxx.yyy.187.54:139 SYN ******S* Oct 19 09:14:05 211.40.31.200:2414 -> xxx.yyy.138.218:139 SYN ******S* [...] Oct 19 13:13:23 211.40.31.200:1690 -> xxx.yyy.203.43:139 SYN ******S* Oct 19 13:13:24 211.40.31.200:1736 -> xxx.yyy.17.92:139 SYN ******S* Oct 19 13:13:26 211.40.31.200:1572 -> xxx.yyy.164.106:139 SYN ******S* Oct 19 13:13:26 211.40.31.200:1585 -> xxx.yyy.162.207:139 SYN ******S* Oct 19 13:13:26 211.40.31.200:1589 -> xxx.yyy.228.78:139 SYN ******S* Oct 19 13:13:26 211.40.31.200:1594 -> xxx.yyy.245.108:139 SYN ******S* Oct 19 13:13:26 211.40.31.200:1633 -> xxx.yyy.184.176:139 SYN ******S* Oct 19 13:13:26 211.40.31.200:1640 -> xxx.yyy.89.78:139 SYN ******S* 74459 Oct 19 08:24:09 209.47.13.131:21771 -> xxx.yyy.230.41:139 SYN ******S* Oct 19 08:24:09 209.47.13.131:23499 -> xxx.yyy.192.95:139 SYN ******S* Oct 19 08:24:09 209.47.13.131:22131 -> xxx.yyy.132.239:139 SYN ******S* Oct 19 08:24:09 209.47.13.131:23614 -> xxx.yyy.252.250:139 SYN ******S* Oct 19 08:24:09 209.47.13.131:21280 -> xxx.yyy.152.21:139 SYN ******S* Oct 19 08:24:09 209.47.13.131:22620 -> xxx.yyy.169.193:139 SYN ******S* Oct 19 08:24:09 209.47.13.131:23620 -> xxx.yyy.243.240:139 SYN ******S* Oct 19 08:24:09 209.47.13.131:22316 -> xxx.yyy.246.62:139 SYN ******S* [...] Oct 19 12:53:37 209.47.13.131:21288 -> xxx.yyy.111.127:139 SYN ******S* Oct 19 12:53:37 209.47.13.131:20531 -> xxx.yyy.193.84:139 SYN ******S* Oct 19 12:53:37 209.47.13.131:22817 -> xxx.yyy.78.173:139 SYN ******S* Oct 19 12:53:37 209.47.13.131:23881 -> xxx.yyy.166.235:139 SYN ******S* Oct 19 12:53:37 209.47.13.131:23678 -> xxx.yyy.20.26:139 SYN ******S* Oct 19 12:53:37 209.47.13.131:23409 -> xxx.yyy.179.111:139 SYN ******S* Oct 19 12:53:37 209.47.13.131:20290 -> xxx.yyy.139.213:139 SYN ******S* Oct 19 12:53:37 209.47.13.131:22168 -> xxx.yyy.164.254:139 SYN ******S* Oct 19 12:53:37 209.47.13.131:20138 -> xxx.yyy.224.251:139 SYN ******S* 72808 Oct 19 06:21:01 69.242.162.227:3969 -> xxx.yyy.1.1:6129 SYN ******S* Oct 19 06:21:01 69.242.162.227:3970 -> xxx.yyy.1.2:6129 SYN ******S* Oct 19 06:21:01 69.242.162.227:3971 -> xxx.yyy.1.3:6129 SYN ******S* Oct 19 06:20:59 69.242.162.227:3972 -> xxx.yyy.1.4:6129 SYN ******S* Oct 19 06:21:02 69.242.162.227:3973 -> xxx.yyy.1.5:6129 SYN ******S* Oct 19 06:21:02 69.242.162.227:3974 -> xxx.yyy.1.6:6129 SYN ******S* Oct 19 06:20:59 69.242.162.227:3975 -> xxx.yyy.1.7:6129 SYN ******S* Oct 19 06:20:59 69.242.162.227:3976 -> xxx.yyy.1.8:6129 SYN ******S* [...] Oct 19 06:31:55 69.242.162.227:1774 -> xxx.yyy.255.238:6129 SYN ******S* Oct 19 06:31:55 69.242.162.227:1784 -> xxx.yyy.255.248:6129 SYN ******S* Oct 19 06:31:55 69.242.162.227:1788 -> xxx.yyy.255.252:6129 SYN ******S* Oct 19 06:31:55 69.242.162.227:1785 -> xxx.yyy.255.249:6129 SYN ******S* Oct 19 06:31:55 69.242.162.227:1789 -> xxx.yyy.255.253:6129 SYN ******S* Oct 19 06:31:55 69.242.162.227:1786 -> xxx.yyy.255.250:6129 SYN ******S* Oct 19 06:31:55 69.242.162.227:1790 -> xxx.yyy.255.254:6129 SYN ******S* Oct 19 06:31:55 69.242.162.227:1787 -> xxx.yyy.255.251:6129 SYN ******S* 71112 Oct 19 08:50:43 82.226.2.64:1029 -> xxx.yyy.135.100:139 SYN ******S* Oct 19 08:50:43 82.226.2.64:1032 -> xxx.yyy.187.30:139 SYN ******S* Oct 19 08:50:43 82.226.2.64:1033 -> xxx.yyy.95.11:139 SYN ******S* Oct 19 08:50:40 82.226.2.64:1034 -> xxx.yyy.248.64:139 SYN ******S* Oct 19 08:50:40 82.226.2.64:1035 -> xxx.yyy.158.184:139 SYN ******S* Oct 19 08:50:43 82.226.2.64:1037 -> xxx.yyy.251.50:139 SYN ******S* Oct 19 08:50:43 82.226.2.64:1038 -> xxx.yyy.87.33:139 SYN ******S* Oct 19 08:50:40 82.226.2.64:1039 -> xxx.yyy.104.160:139 SYN ******S* [...] Oct 19 12:40:34 82.226.2.64:2568 -> xxx.yyy.179.95:139 SYN ******S* Oct 19 12:40:34 82.226.2.64:2560 -> xxx.yyy.75.150:139 SYN ******S* Oct 19 12:40:34 82.226.2.64:2563 -> xxx.yyy.190.241:139 SYN ******S* Oct 19 12:40:34 82.226.2.64:2566 -> xxx.yyy.85.169:139 SYN ******S* Oct 19 12:40:34 82.226.2.64:2564 -> xxx.yyy.232.245:139 SYN ******S* Oct 19 12:40:34 82.226.2.64:2574 -> xxx.yyy.198.253:139 SYN ******S* Oct 19 12:40:34 82.226.2.64:2581 -> xxx.yyy.208.44:139 SYN ******S* Oct 19 12:40:34 82.226.2.64:2576 -> xxx.yyy.209.143:139 SYN ******S* 64626 Oct 19 10:02:53 207.237.234.240:4456 -> xxx.yyy.1.0:1433 SYN ******S* Oct 19 10:02:53 207.237.234.240:4464 -> xxx.yyy.1.2:1433 SYN ******S* Oct 19 10:02:53 207.237.234.240:4470 -> xxx.yyy.1.4:1433 SYN ******S* Oct 19 10:02:53 207.237.234.240:4473 -> xxx.yyy.1.5:1433 SYN ******S* Oct 19 10:02:53 207.237.234.240:4477 -> xxx.yyy.1.6:1433 SYN ******S* Oct 19 10:02:56 207.237.234.240:4480 -> xxx.yyy.1.7:1433 SYN ******S* Oct 19 10:02:56 207.237.234.240:4484 -> xxx.yyy.1.8:1433 SYN ******S* Oct 19 10:02:56 207.237.234.240:4487 -> xxx.yyy.1.9:1433 SYN ******S* [...] Oct 19 13:51:45 207.237.234.240:4083 -> xxx.yyy.255.246:1433 SYN ******S* Oct 19 13:51:45 207.237.234.240:4079 -> xxx.yyy.255.245:1433 SYN ******S* Oct 19 13:51:45 207.237.234.240:4119 -> xxx.yyy.255.248:1433 SYN ******S* Oct 19 13:51:45 207.237.234.240:4141 -> xxx.yyy.255.250:1433 SYN ******S* Oct 19 13:51:45 207.237.234.240:4140 -> xxx.yyy.255.249:1433 SYN ******S* Oct 19 13:51:45 207.237.234.240:4154 -> xxx.yyy.255.251:1433 SYN ******S* Oct 19 13:51:46 207.237.234.240:4155 -> xxx.yyy.255.252:1433 SYN ******S* Oct 19 13:51:46 207.237.234.240:4193 -> xxx.yyy.255.254:1433 SYN ******S* Oct 19 13:51:46 207.237.234.240:4186 -> xxx.yyy.255.253:1433 SYN ******S* 62771 Oct 19 07:55:55 82.38.112.191:4002 -> xxx.yyy.1.0:1433 SYN ******S* Oct 19 07:55:56 82.38.112.191:4004 -> xxx.yyy.1.1:1433 SYN ******S* Oct 19 07:55:56 82.38.112.191:4005 -> xxx.yyy.1.2:1433 SYN ******S* Oct 19 07:55:56 82.38.112.191:4006 -> xxx.yyy.1.3:1433 SYN ******S* Oct 19 07:55:56 82.38.112.191:4007 -> xxx.yyy.1.4:1433 SYN ******S* Oct 19 07:55:56 82.38.112.191:4008 -> xxx.yyy.1.5:1433 SYN ******S* Oct 19 07:55:56 82.38.112.191:4009 -> xxx.yyy.1.6:1433 SYN ******S* Oct 19 07:55:56 82.38.112.191:4010 -> xxx.yyy.1.7:1433 SYN ******S* [...] Oct 19 11:16:57 82.38.112.191:4356 -> xxx.yyy.226.158:1433 SYN ******S* Oct 19 11:16:57 82.38.112.191:4357 -> xxx.yyy.226.159:1433 SYN ******S* Oct 19 11:16:58 82.38.112.191:4367 -> xxx.yyy.226.161:1433 SYN ******S* Oct 19 11:16:58 82.38.112.191:4369 -> xxx.yyy.226.163:1433 SYN ******S* Oct 19 11:16:58 82.38.112.191:4370 -> xxx.yyy.226.164:1433 SYN ******S* Oct 19 11:16:58 82.38.112.191:4371 -> xxx.yyy.226.165:1433 SYN ******S* Oct 19 11:16:58 82.38.112.191:4374 -> xxx.yyy.226.167:1433 SYN ******S* Oct 19 11:16:59 82.38.112.191:4379 -> xxx.yyy.226.168:1433 SYN ******S* Oct 19 11:16:59 82.38.112.191:4346 -> xxx.yyy.226.152:1433 SYN ******S* 62609 Oct 19 08:33:10 212.118.8.66:1082 -> xxx.yyy.1.23:1433 SYN ******S* Oct 19 08:33:07 212.118.8.66:1083 -> xxx.yyy.1.24:1433 SYN ******S* Oct 19 08:33:07 212.118.8.66:1084 -> xxx.yyy.1.25:1433 SYN ******S* Oct 19 08:33:10 212.118.8.66:1085 -> xxx.yyy.1.26:1433 SYN ******S* Oct 19 08:33:10 212.118.8.66:1086 -> xxx.yyy.1.27:1433 SYN ******S* Oct 19 08:33:10 212.118.8.66:1087 -> xxx.yyy.1.28:1433 SYN ******S* Oct 19 08:33:10 212.118.8.66:1091 -> xxx.yyy.1.32:1433 SYN ******S* Oct 19 08:33:10 212.118.8.66:1094 -> xxx.yyy.1.35:1433 SYN ******S* [...] Oct 19 08:45:08 212.118.8.66:3402 -> xxx.yyy.255.226:1433 SYN ******S* Oct 19 08:45:08 212.118.8.66:3413 -> xxx.yyy.255.237:1433 SYN ******S* Oct 19 08:45:08 212.118.8.66:3407 -> xxx.yyy.255.231:1433 SYN ******S* Oct 19 08:45:08 212.118.8.66:3414 -> xxx.yyy.255.238:1433 SYN ******S* Oct 19 08:45:08 212.118.8.66:3410 -> xxx.yyy.255.234:1433 SYN ******S* Oct 19 08:45:08 212.118.8.66:3418 -> xxx.yyy.255.242:1433 SYN ******S* Oct 19 08:45:08 212.118.8.66:3422 -> xxx.yyy.255.246:1433 SYN ******S* Oct 19 08:45:08 212.118.8.66:3420 -> xxx.yyy.255.244:1433 SYN ******S* 54711 Oct 19 03:33:09 211.230.57.227:1099 -> xxx.yyy.1.1:4899 SYN ******S* Oct 19 03:33:10 211.230.57.227:1100 -> xxx.yyy.1.2:4899 SYN ******S* Oct 19 03:33:10 211.230.57.227:1101 -> xxx.yyy.1.3:4899 SYN ******S* Oct 19 03:33:08 211.230.57.227:1102 -> xxx.yyy.1.4:4899 SYN ******S* Oct 19 03:33:08 211.230.57.227:1106 -> xxx.yyy.1.5:4899 SYN ******S* Oct 19 03:33:08 211.230.57.227:1113 -> xxx.yyy.1.6:4899 SYN ******S* Oct 19 03:33:08 211.230.57.227:1114 -> xxx.yyy.1.7:4899 SYN ******S* Oct 19 03:33:08 211.230.57.227:1115 -> xxx.yyy.1.8:4899 SYN ******S* [...] Oct 19 03:53:49 211.230.57.227:1381 -> xxx.yyy.255.90:4899 SYN ******S* Oct 19 03:53:49 211.230.57.227:1382 -> xxx.yyy.255.91:4899 SYN ******S* Oct 19 03:53:49 211.230.57.227:1383 -> xxx.yyy.255.92:4899 SYN ******S* Oct 19 03:53:49 211.230.57.227:1553 -> xxx.yyy.255.253:4899 SYN ******S* Oct 19 03:53:49 211.230.57.227:1554 -> xxx.yyy.255.254:4899 SYN ******S* Oct 19 03:53:52 211.230.57.227:1545 -> xxx.yyy.255.245:4899 SYN ******S* Oct 19 03:53:52 211.230.57.227:1543 -> xxx.yyy.255.243:4899 SYN ******S* Oct 19 03:53:52 211.230.57.227:1544 -> xxx.yyy.255.244:4899 SYN ******S* 54334 Oct 19 08:19:15 4.27.196.145:1039 -> xxx.yyy.75.174:139 SYN ******S* Oct 19 08:19:15 4.27.196.145:1042 -> xxx.yyy.245.133:139 SYN ******S* Oct 19 08:19:18 4.27.196.145:1043 -> xxx.yyy.223.77:139 SYN ******S* Oct 19 08:19:18 4.27.196.145:1052 -> xxx.yyy.228.155:139 SYN ******S* Oct 19 08:19:15 4.27.196.145:1054 -> xxx.yyy.93.145:139 SYN ******S* Oct 19 08:19:18 4.27.196.145:1031 -> xxx.yyy.179.132:139 SYN ******S* Oct 19 08:19:18 4.27.196.145:1056 -> xxx.yyy.217.157:139 SYN ******S* Oct 19 08:19:18 4.27.196.145:1057 -> xxx.yyy.104.154:139 SYN ******S* [...] Oct 19 10:30:29 4.27.196.145:1132 -> xxx.yyy.79.1:139 SYN ******S* Oct 19 10:30:29 4.27.196.145:1147 -> xxx.yyy.219.97:139 SYN ******S* Oct 19 10:30:29 4.27.196.145:1152 -> xxx.yyy.181.177:139 SYN ******S* Oct 19 10:30:29 4.27.196.145:1150 -> xxx.yyy.72.170:139 SYN ******S* Oct 19 10:30:29 4.27.196.145:1156 -> xxx.yyy.246.180:139 SYN ******S* Oct 19 10:30:29 4.27.196.145:1158 -> xxx.yyy.145.92:139 SYN ******S* Oct 19 10:30:29 4.27.196.145:1151 -> xxx.yyy.149.146:139 SYN ******S* Oct 19 10:30:29 4.27.196.145:1149 -> xxx.yyy.107.59:139 SYN ******S* Oct 19 10:30:29 4.27.196.145:1155 -> xxx.yyy.171.19:139 SYN ******S* 48332 Oct 19 08:55:36 65.178.241.63:1079 -> xxx.yyy.239.159:139 SYN ******S* Oct 19 08:55:39 65.178.241.63:1086 -> xxx.yyy.250.221:139 SYN ******S* Oct 19 08:55:36 65.178.241.63:1089 -> xxx.yyy.165.91:139 SYN ******S* Oct 19 08:55:39 65.178.241.63:1098 -> xxx.yyy.200.255:139 SYN ******S* Oct 19 08:55:39 65.178.241.63:1101 -> xxx.yyy.227.122:139 SYN ******S* Oct 19 08:55:36 65.178.241.63:1104 -> xxx.yyy.169.1:139 SYN ******S* Oct 19 08:55:36 65.178.241.63:1109 -> xxx.yyy.1.168:139 SYN ******S* Oct 19 08:55:36 65.178.241.63:1112 -> xxx.yyy.206.139:139 SYN ******S* [...] Oct 19 10:55:25 65.178.241.63:3651 -> xxx.yyy.185.207:139 SYN ******S* Oct 19 10:55:26 65.178.241.63:3664 -> xxx.yyy.32.102:139 SYN ******S* Oct 19 10:55:26 65.178.241.63:3653 -> xxx.yyy.81.126:139 SYN ******S* Oct 19 10:55:26 65.178.241.63:3662 -> xxx.yyy.200.151:139 SYN ******S* Oct 19 10:55:27 65.178.241.63:3668 -> xxx.yyy.233.121:139 SYN ******S* Oct 19 10:55:27 65.178.241.63:3669 -> xxx.yyy.203.74:139 SYN ******S* Oct 19 10:55:27 65.178.241.63:3670 -> xxx.yyy.89.99:139 SYN ******S* Oct 19 10:55:27 65.178.241.63:3674 -> xxx.yyy.236.149:139 SYN ******S* 41912 Oct 19 08:55:29 211.50.31.89:1362 -> xxx.yyy.194.105:139 SYN ******S* Oct 19 08:55:26 211.50.31.89:1360 -> xxx.yyy.234.165:139 SYN ******S* Oct 19 08:55:26 211.50.31.89:1363 -> xxx.yyy.146.169:139 SYN ******S* Oct 19 08:55:29 211.50.31.89:1357 -> xxx.yyy.78.158:139 SYN ******S* Oct 19 08:55:26 211.50.31.89:1359 -> xxx.yyy.184.200:139 SYN ******S* Oct 19 08:55:29 211.50.31.89:1374 -> xxx.yyy.237.78:139 SYN ******S* Oct 19 08:55:29 211.50.31.89:1380 -> xxx.yyy.169.157:139 SYN ******S* Oct 19 08:55:29 211.50.31.89:1372 -> xxx.yyy.106.196:139 SYN ******S* [...] Oct 19 10:58:52 211.50.31.89:3823 -> xxx.yyy.134.103:139 SYN ******S* Oct 19 10:58:52 211.50.31.89:3828 -> xxx.yyy.212.130:139 SYN ******S* Oct 19 10:58:54 211.50.31.89:3932 -> xxx.yyy.216.98:139 SYN ******S* Oct 19 10:58:54 211.50.31.89:3940 -> xxx.yyy.234.145:139 SYN ******S* Oct 19 10:58:54 211.50.31.89:3937 -> xxx.yyy.148.206:139 SYN ******S* Oct 19 10:58:54 211.50.31.89:3939 -> xxx.yyy.156.63:139 SYN ******S* Oct 19 10:58:54 211.50.31.89:3936 -> xxx.yyy.13.232:139 SYN ******S* Oct 19 10:58:54 211.50.31.89:3942 -> xxx.yyy.93.16:139 SYN ******S* Oct 19 10:58:58 211.50.31.89:3848 -> xxx.yyy.174.115:139 SYN ******S* 40250 Oct 19 08:19:52 200.209.9.130:1035 -> xxx.yyy.136.7:139 SYN ******S* Oct 19 08:19:49 200.209.9.130:1041 -> xxx.yyy.224.77:139 SYN ******S* Oct 19 08:19:52 200.209.9.130:1042 -> xxx.yyy.78.184:139 SYN ******S* Oct 19 08:19:52 200.209.9.130:1045 -> xxx.yyy.179.199:139 SYN ******S* Oct 19 08:19:52 200.209.9.130:1047 -> xxx.yyy.246.95:139 SYN ******S* Oct 19 08:19:50 200.209.9.130:1046 -> xxx.yyy.13.221:139 SYN ******S* Oct 19 08:19:53 200.209.9.130:1050 -> xxx.yyy.80.114:139 SYN ******S* Oct 19 08:19:53 200.209.9.130:1053 -> xxx.yyy.69.62:139 SYN ******S* [...] Oct 19 10:59:07 200.209.9.130:2274 -> xxx.yyy.135.115:139 SYN ******S* Oct 19 10:59:09 200.209.9.130:3973 -> xxx.yyy.75.112:139 SYN ******S* Oct 19 10:59:09 200.209.9.130:1593 -> xxx.yyy.209.198:139 SYN ******S* Oct 19 10:59:10 200.209.9.130:3920 -> xxx.yyy.239.90:139 SYN ******S* Oct 19 10:59:12 200.209.9.130:1978 -> xxx.yyy.197.218:139 SYN ******S* Oct 19 10:59:12 200.209.9.130:1593 -> xxx.yyy.209.198:139 SYN ******S* Oct 19 10:59:13 200.209.9.130:3105 -> xxx.yyy.14.28:139 SYN ******S* Oct 19 10:59:13 200.209.9.130:1698 -> xxx.yyy.154.114:139 SYN ******S* 39749 Oct 19 07:39:40 210.199.11.130:4106 -> xxx.yyy.1.1:554 SYN ******S* Oct 19 07:39:40 210.199.11.130:4107 -> xxx.yyy.1.2:554 SYN ******S* Oct 19 07:39:38 210.199.11.130:4109 -> xxx.yyy.1.4:554 SYN ******S* Oct 19 07:39:38 210.199.11.130:4110 -> xxx.yyy.1.5:554 SYN ******S* Oct 19 07:39:41 210.199.11.130:4111 -> xxx.yyy.1.6:554 SYN ******S* Oct 19 07:39:38 210.199.11.130:4112 -> xxx.yyy.1.7:554 SYN ******S* Oct 19 07:39:38 210.199.11.130:4113 -> xxx.yyy.1.8:554 SYN ******S* Oct 19 07:39:38 210.199.11.130:4114 -> xxx.yyy.1.9:554 SYN ******S* [...] Oct 19 07:47:55 210.199.11.130:2389 -> xxx.yyy.255.223:554 SYN ******S* Oct 19 07:47:55 210.199.11.130:2293 -> xxx.yyy.255.127:554 SYN ******S* Oct 19 07:47:55 210.199.11.130:2325 -> xxx.yyy.255.159:554 SYN ******S* Oct 19 07:47:55 210.199.11.130:2261 -> xxx.yyy.255.95:554 SYN ******S* Oct 19 07:47:55 210.199.11.130:2341 -> xxx.yyy.255.175:554 SYN ******S* Oct 19 07:47:55 210.199.11.130:2258 -> xxx.yyy.255.92:554 SYN ******S* Oct 19 07:47:55 210.199.11.130:2386 -> xxx.yyy.255.220:554 SYN ******S* Oct 19 07:47:55 210.199.11.130:2322 -> xxx.yyy.255.156:554 SYN ******S* Oct 19 07:47:55 210.199.11.130:2306 -> xxx.yyy.255.140:554 SYN ******S* 36550 Oct 19 10:58:51 65.178.240.251:1354 -> xxx.yyy.144.146:139 SYN ******S* Oct 19 10:58:51 65.178.240.251:1357 -> xxx.yyy.240.129:139 SYN ******S* Oct 19 10:58:48 65.178.240.251:1366 -> xxx.yyy.233.122:139 SYN ******S* Oct 19 10:58:51 65.178.240.251:1343 -> xxx.yyy.67.151:139 SYN ******S* Oct 19 10:58:48 65.178.240.251:1346 -> xxx.yyy.144.189:139 SYN ******S* Oct 19 10:58:51 65.178.240.251:1349 -> xxx.yyy.92.142:139 SYN ******S* Oct 19 10:58:51 65.178.240.251:1352 -> xxx.yyy.32.252:139 SYN ******S* Oct 19 10:58:51 65.178.240.251:1355 -> xxx.yyy.105.112:139 SYN ******S* [...] Oct 19 12:55:37 65.178.240.251:2434 -> xxx.yyy.207.155:139 SYN ******S* Oct 19 12:55:37 65.178.240.251:2435 -> xxx.yyy.32.60:139 SYN ******S* Oct 19 12:55:37 65.178.240.251:2438 -> xxx.yyy.186.16:139 SYN ******S* Oct 19 12:55:37 65.178.240.251:2442 -> xxx.yyy.237.230:139 SYN ******S* Oct 19 12:55:37 65.178.240.251:2448 -> xxx.yyy.202.184:139 SYN ******S* Oct 19 12:55:37 65.178.240.251:2447 -> xxx.yyy.133.188:139 SYN ******S* Oct 19 12:55:37 65.178.240.251:2451 -> xxx.yyy.224.126:139 SYN ******S* Oct 19 12:55:37 65.178.240.251:2453 -> xxx.yyy.178.112:139 SYN ******S* Oct 19 12:55:37 65.178.240.251:2452 -> xxx.yyy.211.45:139 SYN ******S* 34571 Oct 19 08:45:05 222.166.140.66:1602 -> xxx.yyy.252.151:139 SYN ******S* Oct 19 08:45:05 222.166.140.66:1606 -> xxx.yyy.200.26:139 SYN ******S* Oct 19 08:45:06 222.166.140.66:1599 -> xxx.yyy.247.23:139 SYN ******S* Oct 19 08:45:06 222.166.140.66:1600 -> xxx.yyy.90.124:139 SYN ******S* Oct 19 08:45:03 222.166.140.66:1598 -> xxx.yyy.90.61:139 SYN ******S* Oct 19 08:45:05 222.166.140.66:1614 -> xxx.yyy.255.128:139 SYN ******S* Oct 19 08:45:06 222.166.140.66:1607 -> xxx.yyy.106.123:139 SYN ******S* Oct 19 08:45:03 222.166.140.66:1604 -> xxx.yyy.253.130:139 SYN ******S* [...] Oct 19 10:18:16 222.166.140.66:3080 -> xxx.yyy.251.78:139 SYN ******S* Oct 19 10:18:16 222.166.140.66:3073 -> xxx.yyy.147.159:139 SYN ******S* Oct 19 10:18:16 222.166.140.66:3071 -> xxx.yyy.76.40:139 SYN ******S* Oct 19 10:18:16 222.166.140.66:3084 -> xxx.yyy.234.114:139 SYN ******S* Oct 19 10:18:16 222.166.140.66:3087 -> xxx.yyy.20.28:139 SYN ******S* Oct 19 10:18:16 222.166.140.66:3079 -> xxx.yyy.233.229:139 SYN ******S* Oct 19 10:18:16 222.166.140.66:3083 -> xxx.yyy.32.88:139 SYN ******S* Oct 19 10:18:16 222.166.140.66:3081 -> xxx.yyy.227.76:139 SYN ******S* Oct 19 10:18:16 222.166.140.66:3077 -> xxx.yyy.252.178:139 SYN ******S* 34083 Oct 19 08:29:36 218.253.245.250:1043 -> xxx.yyy.177.160:139 SYN ******S* Oct 19 08:29:36 218.253.245.250:1041 -> xxx.yyy.88.152:139 SYN ******S* Oct 19 08:29:36 218.253.245.250:1054 -> xxx.yyy.174.125:139 SYN ******S* Oct 19 08:29:36 218.253.245.250:1055 -> xxx.yyy.134.115:139 SYN ******S* Oct 19 08:29:36 218.253.245.250:1056 -> xxx.yyy.206.100:139 SYN ******S* Oct 19 08:29:36 218.253.245.250:1035 -> xxx.yyy.136.208:139 SYN ******S* Oct 19 08:29:36 218.253.245.250:1058 -> xxx.yyy.157.211:139 SYN ******S* Oct 19 08:29:36 218.253.245.250:1060 -> xxx.yyy.155.54:139 SYN ******S* [...] Oct 19 09:39:00 218.253.245.250:2823 -> xxx.yyy.188.44:139 SYN ******S* Oct 19 09:39:03 218.253.245.250:2830 -> xxx.yyy.237.55:139 SYN ******S* Oct 19 09:39:02 218.253.245.250:2766 -> xxx.yyy.196.112:139 SYN ******S* Oct 19 09:39:02 218.253.245.250:2767 -> xxx.yyy.70.112:139 SYN ******S* Oct 19 09:39:02 218.253.245.250:2763 -> xxx.yyy.175.96:139 SYN ******S* Oct 19 09:39:03 218.253.245.250:2814 -> xxx.yyy.138.205:139 SYN ******S* Oct 19 09:39:03 218.253.245.250:2810 -> xxx.yyy.29.55:139 SYN ******S* Oct 19 09:39:03 218.253.245.250:2809 -> xxx.yyy.92.223:139 SYN ******S* 27593 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions