[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0500. Oct 20 03:03:02 159.178.65.142:1125 -> xxx.yyy.1.1:4899 SYN ******S* Oct 20 03:03:02 159.178.65.142:1126 -> xxx.yyy.1.2:4899 SYN ******S* Oct 20 03:03:02 159.178.65.142:1127 -> xxx.yyy.1.3:4899 SYN ******S* Oct 20 03:03:04 159.178.65.142:1128 -> xxx.yyy.1.4:4899 SYN ******S* Oct 20 03:03:04 159.178.65.142:1129 -> xxx.yyy.1.5:4899 SYN ******S* Oct 20 03:03:04 159.178.65.142:1130 -> xxx.yyy.1.6:4899 SYN ******S* Oct 20 03:03:04 159.178.65.142:1131 -> xxx.yyy.1.7:4899 SYN ******S* Oct 20 03:03:04 159.178.65.142:1132 -> xxx.yyy.1.8:4899 SYN ******S* [...] Oct 20 03:26:01 159.178.65.142:1463 -> xxx.yyy.255.185:4899 SYN ******S* Oct 20 03:26:01 159.178.65.142:1532 -> xxx.yyy.255.254:4899 SYN ******S* Oct 20 03:26:01 159.178.65.142:1531 -> xxx.yyy.255.253:4899 SYN ******S* Oct 20 03:26:01 159.178.65.142:1530 -> xxx.yyy.255.252:4899 SYN ******S* Oct 20 03:26:01 159.178.65.142:1528 -> xxx.yyy.255.250:4899 SYN ******S* Oct 20 03:26:01 159.178.65.142:1529 -> xxx.yyy.255.251:4899 SYN ******S* Oct 20 03:26:01 159.178.65.142:1527 -> xxx.yyy.255.249:4899 SYN ******S* Oct 20 03:26:01 159.178.65.142:1526 -> xxx.yyy.255.248:4899 SYN ******S* 89682 Oct 20 07:01:55 212.33.141.157:1396 -> xxx.yyy.1.1:4000 SYN ******S* Oct 20 07:01:55 212.33.141.157:1397 -> xxx.yyy.1.2:4000 SYN ******S* Oct 20 07:01:55 212.33.141.157:1398 -> xxx.yyy.1.3:4000 SYN ******S* Oct 20 07:01:57 212.33.141.157:1399 -> xxx.yyy.1.4:4000 SYN ******S* Oct 20 07:01:54 212.33.141.157:1400 -> xxx.yyy.1.5:4000 SYN ******S* Oct 20 07:01:57 212.33.141.157:1401 -> xxx.yyy.1.6:4000 SYN ******S* Oct 20 07:01:57 212.33.141.157:1402 -> xxx.yyy.1.7:4000 SYN ******S* Oct 20 07:01:57 212.33.141.157:1403 -> xxx.yyy.1.8:4000 SYN ******S* [...] Oct 20 07:23:04 212.33.141.157:1807 -> xxx.yyy.255.238:4000 SYN ******S* Oct 20 07:23:04 212.33.141.157:1814 -> xxx.yyy.255.245:4000 SYN ******S* Oct 20 07:23:04 212.33.141.157:1815 -> xxx.yyy.255.246:4000 SYN ******S* Oct 20 07:23:04 212.33.141.157:1812 -> xxx.yyy.255.243:4000 SYN ******S* Oct 20 07:23:04 212.33.141.157:1816 -> xxx.yyy.255.247:4000 SYN ******S* Oct 20 07:23:05 212.33.141.157:1819 -> xxx.yyy.255.250:4000 SYN ******S* Oct 20 07:23:05 212.33.141.157:1820 -> xxx.yyy.255.251:4000 SYN ******S* Oct 20 07:23:05 212.33.141.157:1823 -> xxx.yyy.255.254:4000 SYN ******S* 72259 Oct 20 15:46:09 82.225.229.18:4680 -> xxx.yyy.1.0:1433 SYN ******S* Oct 20 15:46:09 82.225.229.18:4681 -> xxx.yyy.1.1:1433 SYN ******S* Oct 20 15:46:09 82.225.229.18:4684 -> xxx.yyy.1.2:1433 SYN ******S* Oct 20 15:46:07 82.225.229.18:4699 -> xxx.yyy.1.11:1433 SYN ******S* Oct 20 15:46:10 82.225.229.18:4700 -> xxx.yyy.1.12:1433 SYN ******S* Oct 20 15:46:07 82.225.229.18:4703 -> xxx.yyy.1.14:1433 SYN ******S* Oct 20 15:46:07 82.225.229.18:4704 -> xxx.yyy.1.15:1433 SYN ******S* Oct 20 15:46:07 82.225.229.18:4705 -> xxx.yyy.1.16:1433 SYN ******S* [...] Oct 20 19:27:59 82.225.229.18:3014 -> xxx.yyy.255.201:1433 SYN ******S* Oct 20 19:27:59 82.225.229.18:3020 -> xxx.yyy.255.204:1433 SYN ******S* Oct 20 19:28:00 82.225.229.18:3027 -> xxx.yyy.255.205:1433 SYN ******S* Oct 20 19:28:00 82.225.229.18:3028 -> xxx.yyy.255.206:1433 SYN ******S* Oct 20 19:28:00 82.225.229.18:3032 -> xxx.yyy.255.207:1433 SYN ******S* Oct 20 19:28:00 82.225.229.18:3043 -> xxx.yyy.255.213:1433 SYN ******S* Oct 20 19:28:01 82.225.229.18:3060 -> xxx.yyy.255.216:1433 SYN ******S* Oct 20 19:28:01 82.225.229.18:3059 -> xxx.yyy.255.215:1433 SYN ******S* Oct 20 19:28:02 82.225.229.18:3064 -> xxx.yyy.255.225:1433 SYN ******S* 65974 Oct 20 06:57:22 64.187.61.30:1115 -> xxx.yyy.1.1:1433 SYN ******S* Oct 20 06:57:22 64.187.61.30:1116 -> xxx.yyy.1.2:1433 SYN ******S* Oct 20 06:57:22 64.187.61.30:1117 -> xxx.yyy.1.3:1433 SYN ******S* Oct 20 06:57:22 64.187.61.30:1118 -> xxx.yyy.1.4:1433 SYN ******S* Oct 20 06:57:19 64.187.61.30:1119 -> xxx.yyy.1.5:1433 SYN ******S* Oct 20 06:57:22 64.187.61.30:1120 -> xxx.yyy.1.6:1433 SYN ******S* Oct 20 06:57:19 64.187.61.30:1121 -> xxx.yyy.1.7:1433 SYN ******S* Oct 20 06:57:19 64.187.61.30:1122 -> xxx.yyy.1.8:1433 SYN ******S* [...] Oct 20 07:00:42 64.187.61.30:2826 -> xxx.yyy.255.181:1433 SYN ******S* Oct 20 07:00:42 64.187.61.30:2842 -> xxx.yyy.255.197:1433 SYN ******S* Oct 20 07:00:42 64.187.61.30:2839 -> xxx.yyy.255.194:1433 SYN ******S* Oct 20 07:00:42 64.187.61.30:3619 -> xxx.yyy.255.243:1433 SYN ******S* Oct 20 07:00:42 64.187.61.30:4695 -> xxx.yyy.255.254:1433 SYN ******S* Oct 20 07:00:42 64.187.61.30:2859 -> xxx.yyy.255.213:1433 SYN ******S* Oct 20 07:00:42 64.187.61.30:2875 -> xxx.yyy.255.229:1433 SYN ******S* Oct 20 07:00:42 64.187.61.30:2879 -> xxx.yyy.255.232:1433 SYN ******S* 59166 Oct 20 01:16:11 221.152.153.249:4588 -> xxx.yyy.1.1:1433 SYN ******S* Oct 20 01:16:14 221.152.153.249:4590 -> xxx.yyy.1.2:1433 SYN ******S* Oct 20 01:16:14 221.152.153.249:4596 -> xxx.yyy.1.3:1433 SYN ******S* Oct 20 01:16:14 221.152.153.249:4598 -> xxx.yyy.1.4:1433 SYN ******S* Oct 20 01:16:11 221.152.153.249:4612 -> xxx.yyy.1.7:1433 SYN ******S* Oct 20 01:16:14 221.152.153.249:4620 -> xxx.yyy.1.10:1433 SYN ******S* Oct 20 01:16:14 221.152.153.249:4630 -> xxx.yyy.1.12:1433 SYN ******S* Oct 20 01:16:14 221.152.153.249:4626 -> xxx.yyy.1.11:1433 SYN ******S* [...] Oct 20 01:28:06 221.152.153.249:3582 -> xxx.yyy.255.244:1433 SYN ******S* Oct 20 01:28:06 221.152.153.249:3570 -> xxx.yyy.255.239:1433 SYN ******S* Oct 20 01:28:06 221.152.153.249:3594 -> xxx.yyy.255.250:1433 SYN ******S* Oct 20 01:28:06 221.152.153.249:3590 -> xxx.yyy.255.248:1433 SYN ******S* Oct 20 01:28:06 221.152.153.249:3600 -> xxx.yyy.255.253:1433 SYN ******S* Oct 20 01:28:06 221.152.153.249:3596 -> xxx.yyy.255.251:1433 SYN ******S* Oct 20 01:28:06 221.152.153.249:3592 -> xxx.yyy.255.249:1433 SYN ******S* Oct 20 01:28:06 221.152.153.249:3602 -> xxx.yyy.255.254:1433 SYN ******S* Oct 20 01:28:06 221.152.153.249:3598 -> xxx.yyy.255.252:1433 SYN ******S* 57873 Oct 20 19:18:56 203.87.161.102:3010 -> xxx.yyy.153.1:1433 SYN ******S* Oct 20 19:18:56 203.87.161.102:3011 -> xxx.yyy.153.2:1433 SYN ******S* Oct 20 19:18:56 203.87.161.102:3012 -> xxx.yyy.153.3:1433 SYN ******S* Oct 20 19:18:56 203.87.161.102:3013 -> xxx.yyy.153.4:1433 SYN ******S* Oct 20 19:18:53 203.87.161.102:3014 -> xxx.yyy.153.5:1433 SYN ******S* Oct 20 19:18:56 203.87.161.102:3016 -> xxx.yyy.153.7:1433 SYN ******S* Oct 20 19:18:53 203.87.161.102:3018 -> xxx.yyy.153.9:1433 SYN ******S* Oct 20 19:18:56 203.87.161.102:3020 -> xxx.yyy.153.11:1433 SYN ******S* [...] Oct 20 20:51:43 203.87.161.102:4784 -> xxx.yyy.255.244:1433 SYN ******S* Oct 20 20:51:43 203.87.161.102:4788 -> xxx.yyy.255.248:1433 SYN ******S* Oct 20 20:51:43 203.87.161.102:4791 -> xxx.yyy.255.251:1433 SYN ******S* Oct 20 20:51:43 203.87.161.102:4792 -> xxx.yyy.255.252:1433 SYN ******S* Oct 20 20:51:43 203.87.161.102:4789 -> xxx.yyy.255.249:1433 SYN ******S* Oct 20 20:51:43 203.87.161.102:4790 -> xxx.yyy.255.250:1433 SYN ******S* Oct 20 20:51:43 203.87.161.102:4793 -> xxx.yyy.255.253:1433 SYN ******S* Oct 20 20:51:44 203.87.161.102:4794 -> xxx.yyy.255.254:1433 SYN ******S* 44685 Oct 20 18:34:25 169.226.28.101:1838 -> xxx.yyy.1.1:6129 SYN ******S* Oct 20 18:34:25 169.226.28.101:1840 -> xxx.yyy.1.3:6129 SYN ******S* Oct 20 18:34:24 169.226.28.101:1842 -> xxx.yyy.1.5:6129 SYN ******S* Oct 20 18:34:24 169.226.28.101:1843 -> xxx.yyy.1.6:6129 SYN ******S* Oct 20 18:34:24 169.226.28.101:1845 -> xxx.yyy.1.8:6129 SYN ******S* Oct 20 18:34:24 169.226.28.101:1846 -> xxx.yyy.1.9:6129 SYN ******S* Oct 20 18:34:27 169.226.28.101:1847 -> xxx.yyy.1.10:6129 SYN ******S* Oct 20 18:34:25 169.226.28.101:1848 -> xxx.yyy.1.11:6129 SYN ******S* [...] Oct 20 18:45:19 169.226.28.101:3340 -> xxx.yyy.255.242:6129 SYN ******S* Oct 20 18:45:19 169.226.28.101:3344 -> xxx.yyy.255.246:6129 SYN ******S* Oct 20 18:45:19 169.226.28.101:3345 -> xxx.yyy.255.247:6129 SYN ******S* Oct 20 18:45:19 169.226.28.101:3338 -> xxx.yyy.255.240:6129 SYN ******S* Oct 20 18:45:19 169.226.28.101:3342 -> xxx.yyy.255.244:6129 SYN ******S* Oct 20 18:45:19 169.226.28.101:3346 -> xxx.yyy.255.248:6129 SYN ******S* Oct 20 18:45:19 169.226.28.101:3339 -> xxx.yyy.255.241:6129 SYN ******S* Oct 20 18:45:19 169.226.28.101:3343 -> xxx.yyy.255.245:6129 SYN ******S* 37694 Oct 20 18:59:21 219.133.212.73:23291 -> xxx.yyy.1.8:1433 SYN ******S* Oct 20 18:59:21 219.133.212.73:23299 -> xxx.yyy.1.10:1433 SYN ******S* Oct 20 18:59:24 219.133.212.73:23267 -> xxx.yyy.1.2:1433 SYN ******S* Oct 20 18:59:21 219.133.212.73:23287 -> xxx.yyy.1.7:1433 SYN ******S* Oct 20 18:59:21 219.133.212.73:23318 -> xxx.yyy.1.16:1433 SYN ******S* Oct 20 18:59:24 219.133.212.73:23357 -> xxx.yyy.1.26:1433 SYN ******S* Oct 20 18:59:21 219.133.212.73:23327 -> xxx.yyy.1.18:1433 SYN ******S* Oct 20 18:59:21 219.133.212.73:23361 -> xxx.yyy.1.27:1433 SYN ******S* [...] Oct 20 22:48:02 219.133.212.73:21938 -> xxx.yyy.255.242:1433 SYN ******S* Oct 20 22:48:02 219.133.212.73:26119 -> xxx.yyy.255.225:1433 SYN ******S* Oct 20 22:48:04 219.133.212.73:21462 -> xxx.yyy.255.247:1433 SYN ******S* Oct 20 22:48:05 219.133.212.73:1117 -> xxx.yyy.255.230:1433 SYN ******S* Oct 20 22:48:07 219.133.212.73:25611 -> xxx.yyy.255.232:1433 SYN ******S* Oct 20 22:48:07 219.133.212.73:21912 -> xxx.yyy.255.237:1433 SYN ******S* Oct 20 22:48:08 219.133.212.73:24015 -> xxx.yyy.255.243:1433 SYN ******S* Oct 20 22:48:10 219.133.212.73:22261 -> xxx.yyy.255.249:1433 SYN ******S* Oct 20 22:48:13 219.133.212.73:23282 -> xxx.yyy.255.254:1433 SYN ******S* 37328 Oct 20 17:42:09 217.11.100.43:4479 -> xxx.yyy.1.3:4899 SYN ******S* Oct 20 17:42:08 217.11.100.43:4481 -> xxx.yyy.1.5:4899 SYN ******S* Oct 20 17:42:08 217.11.100.43:4480 -> xxx.yyy.1.4:4899 SYN ******S* Oct 20 17:42:08 217.11.100.43:4482 -> xxx.yyy.1.6:4899 SYN ******S* Oct 20 17:42:08 217.11.100.43:4483 -> xxx.yyy.1.7:4899 SYN ******S* Oct 20 17:42:08 217.11.100.43:4484 -> xxx.yyy.1.8:4899 SYN ******S* Oct 20 17:42:11 217.11.100.43:4486 -> xxx.yyy.1.10:4899 SYN ******S* Oct 20 17:42:08 217.11.100.43:4488 -> xxx.yyy.1.11:4899 SYN ******S* [...] Oct 20 18:04:45 217.11.100.43:4753 -> xxx.yyy.255.238:4899 SYN ******S* Oct 20 18:04:45 217.11.100.43:4761 -> xxx.yyy.255.244:4899 SYN ******S* Oct 20 18:04:45 217.11.100.43:4412 -> xxx.yyy.255.204:4899 SYN ******S* Oct 20 18:04:45 217.11.100.43:4765 -> xxx.yyy.255.248:4899 SYN ******S* Oct 20 18:04:45 217.11.100.43:4488 -> xxx.yyy.255.214:4899 SYN ******S* Oct 20 18:04:45 217.11.100.43:4492 -> xxx.yyy.255.217:4899 SYN ******S* Oct 20 18:04:45 217.11.100.43:4413 -> xxx.yyy.255.205:4899 SYN ******S* Oct 20 18:04:45 217.11.100.43:4417 -> xxx.yyy.255.208:4899 SYN ******S* Oct 20 18:04:45 217.11.100.43:4766 -> xxx.yyy.255.249:4899 SYN ******S* 32170 Oct 20 20:01:56 67.68.232.202:2625 -> xxx.yyy.1.0:1433 SYN ******S* Oct 20 20:01:53 67.68.232.202:4334 -> xxx.yyy.1.1:1433 SYN ******S* Oct 20 20:01:56 67.68.232.202:3481 -> xxx.yyy.1.2:1433 SYN ******S* Oct 20 20:01:56 67.68.232.202:4957 -> xxx.yyy.1.3:1433 SYN ******S* Oct 20 20:01:56 67.68.232.202:3355 -> xxx.yyy.1.4:1433 SYN ******S* Oct 20 20:01:56 67.68.232.202:3474 -> xxx.yyy.1.6:1433 SYN ******S* Oct 20 20:01:56 67.68.232.202:3628 -> xxx.yyy.1.7:1433 SYN ******S* Oct 20 20:01:56 67.68.232.202:3579 -> xxx.yyy.1.5:1433 SYN ******S* [...] Oct 20 21:33:22 67.68.232.202:4833 -> xxx.yyy.255.197:1433 SYN ******S* Oct 20 21:33:23 67.68.232.202:3557 -> xxx.yyy.255.208:1433 SYN ******S* Oct 20 21:33:23 67.68.232.202:4320 -> xxx.yyy.255.210:1433 SYN ******S* Oct 20 21:33:23 67.68.232.202:1235 -> xxx.yyy.255.218:1433 SYN ******S* Oct 20 21:33:23 67.68.232.202:1114 -> xxx.yyy.255.217:1433 SYN ******S* Oct 20 21:33:23 67.68.232.202:3221 -> xxx.yyy.255.219:1433 SYN ******S* Oct 20 21:33:23 67.68.232.202:1469 -> xxx.yyy.255.221:1433 SYN ******S* Oct 20 21:33:24 67.68.232.202:4848 -> xxx.yyy.255.232:1433 SYN ******S* Oct 20 21:33:25 67.68.232.202:2995 -> xxx.yyy.255.239:1433 SYN ******S* 26577 Oct 20 15:35:39 83.114.116.109:4715 -> xxx.yyy.1.2:139 SYN ******S* Oct 20 15:35:39 83.114.116.109:4735 -> xxx.yyy.1.7:139 SYN ******S* Oct 20 15:35:39 83.114.116.109:4738 -> xxx.yyy.1.25:139 SYN ******S* Oct 20 15:35:39 83.114.116.109:4739 -> xxx.yyy.1.30:139 SYN ******S* Oct 20 15:35:39 83.114.116.109:4740 -> xxx.yyy.1.8:139 SYN ******S* Oct 20 15:35:39 83.114.116.109:4741 -> xxx.yyy.1.22:139 SYN ******S* Oct 20 15:35:39 83.114.116.109:4742 -> xxx.yyy.1.19:139 SYN ******S* Oct 20 15:35:39 83.114.116.109:4743 -> xxx.yyy.1.23:139 SYN ******S* [...] Oct 20 16:09:45 83.114.116.109:3814 -> xxx.yyy.255.228:139 SYN ******S* Oct 20 16:09:45 83.114.116.109:3816 -> xxx.yyy.255.239:139 SYN ******S* Oct 20 16:09:45 83.114.116.109:3817 -> xxx.yyy.255.227:139 SYN ******S* Oct 20 16:09:45 83.114.116.109:3819 -> xxx.yyy.255.251:139 SYN ******S* Oct 20 16:09:45 83.114.116.109:3820 -> xxx.yyy.255.229:139 SYN ******S* Oct 20 16:09:45 83.114.116.109:3821 -> xxx.yyy.255.254:139 SYN ******S* Oct 20 16:09:45 83.114.116.109:3824 -> xxx.yyy.255.232:139 SYN ******S* Oct 20 16:09:45 83.114.116.109:3829 -> xxx.yyy.255.231:139 SYN ******S* Oct 20 16:09:45 83.114.116.109:3830 -> xxx.yyy.255.243:139 SYN ******S* 21371 Oct 20 04:43:36 128.173.43.224:4903 -> xxx.yyy.1.1:2277 SYN ******S* Oct 20 04:43:36 128.173.43.224:4906 -> xxx.yyy.1.2:2277 SYN ******S* Oct 20 04:43:36 128.173.43.224:4907 -> xxx.yyy.1.3:2277 SYN ******S* Oct 20 04:43:38 128.173.43.224:4908 -> xxx.yyy.1.4:2277 SYN ******S* Oct 20 04:43:38 128.173.43.224:4910 -> xxx.yyy.1.5:2277 SYN ******S* Oct 20 04:43:38 128.173.43.224:4912 -> xxx.yyy.1.6:2277 SYN ******S* Oct 20 04:43:38 128.173.43.224:4913 -> xxx.yyy.1.7:2277 SYN ******S* Oct 20 04:43:38 128.173.43.224:4915 -> xxx.yyy.1.8:2277 SYN ******S* [...] Oct 20 04:46:14 128.173.43.224:4049 -> xxx.yyy.106.40:2277 SYN ******S* Oct 20 04:46:14 128.173.43.224:4061 -> xxx.yyy.106.46:2277 SYN ******S* Oct 20 04:46:14 128.173.43.224:4043 -> xxx.yyy.106.38:2277 SYN ******S* Oct 20 04:46:14 128.173.43.224:4120 -> xxx.yyy.106.74:2277 SYN ******S* Oct 20 04:46:14 128.173.43.224:4121 -> xxx.yyy.106.75:2277 SYN ******S* Oct 20 04:46:14 128.173.43.224:4158 -> xxx.yyy.106.94:2277 SYN ******S* Oct 20 04:46:14 128.173.43.224:4224 -> xxx.yyy.106.122:2277 SYN ******S* Oct 20 04:46:14 128.173.43.224:4290 -> xxx.yyy.106.156:2277 SYN ******S* 19483 Oct 20 11:27:49 64.237.66.110:2596 -> xxx.yyy.1.0:8002 SYN ******S* Oct 20 11:27:49 64.237.66.110:2598 -> xxx.yyy.1.2:8002 SYN ******S* Oct 20 11:27:49 64.237.66.110:2601 -> xxx.yyy.1.5:8002 SYN ******S* Oct 20 11:27:49 64.237.66.110:2599 -> xxx.yyy.1.3:8002 SYN ******S* Oct 20 11:27:49 64.237.66.110:2600 -> xxx.yyy.1.4:8002 SYN ******S* Oct 20 11:27:49 64.237.66.110:2602 -> xxx.yyy.1.6:8002 SYN ******S* Oct 20 11:27:49 64.237.66.110:2603 -> xxx.yyy.1.7:8002 SYN ******S* Oct 20 11:27:49 64.237.66.110:2617 -> xxx.yyy.1.21:8002 SYN ******S* [...] Oct 20 11:28:36 64.237.66.110:2594 -> xxx.yyy.253.188:8002 SYN ******S* Oct 20 11:28:36 64.237.66.110:2604 -> xxx.yyy.253.198:8002 SYN ******S* Oct 20 11:28:36 64.237.66.110:2607 -> xxx.yyy.253.201:8002 SYN ******S* Oct 20 11:28:36 64.237.66.110:2608 -> xxx.yyy.253.202:8002 SYN ******S* Oct 20 11:28:36 64.237.66.110:2609 -> xxx.yyy.253.203:8002 SYN ******S* Oct 20 11:28:36 64.237.66.110:2610 -> xxx.yyy.253.204:8002 SYN ******S* Oct 20 11:28:37 64.237.66.110:2614 -> xxx.yyy.253.208:8002 SYN ******S* Oct 20 11:28:37 64.237.66.110:2615 -> xxx.yyy.253.209:8002 SYN ******S* Oct 20 11:28:37 64.237.66.110:2623 -> xxx.yyy.253.217:8002 SYN ******S* 16452 Oct 20 10:53:23 144.164.141.113:4244 -> xxx.yyy.1.0:1433 SYN ******S* Oct 20 10:53:23 144.164.141.113:4247 -> xxx.yyy.1.1:1433 SYN ******S* Oct 20 10:53:26 144.164.141.113:4250 -> xxx.yyy.1.4:1433 SYN ******S* Oct 20 10:53:27 144.164.141.113:4252 -> xxx.yyy.1.6:1433 SYN ******S* Oct 20 10:53:24 144.164.141.113:4254 -> xxx.yyy.1.7:1433 SYN ******S* Oct 20 10:53:24 144.164.141.113:4255 -> xxx.yyy.1.8:1433 SYN ******S* Oct 20 10:53:24 144.164.141.113:4260 -> xxx.yyy.1.9:1433 SYN ******S* Oct 20 10:53:24 144.164.141.113:4261 -> xxx.yyy.1.10:1433 SYN ******S* [...] Oct 20 12:11:35 144.164.141.113:3464 -> xxx.yyy.87.145:1433 SYN ******S* Oct 20 12:11:35 144.164.141.113:3482 -> xxx.yyy.87.148:1433 SYN ******S* Oct 20 12:11:35 144.164.141.113:3478 -> xxx.yyy.87.147:1433 SYN ******S* Oct 20 12:11:35 144.164.141.113:3614 -> xxx.yyy.87.167:1433 SYN ******S* Oct 20 12:11:35 144.164.141.113:3615 -> xxx.yyy.87.168:1433 SYN ******S* Oct 20 12:11:35 144.164.141.113:3616 -> xxx.yyy.87.169:1433 SYN ******S* Oct 20 12:11:35 144.164.141.113:3617 -> xxx.yyy.87.170:1433 SYN ******S* Oct 20 12:11:36 144.164.141.113:3619 -> xxx.yyy.87.171:1433 SYN ******S* 13695 [...] 12691 [...] 12294 [...] 11643 Oct 20 00:56:16 61.49.191.247:2655 -> xxx.yyy.174.229:5554 SYN ******S* Oct 20 00:56:17 61.49.191.247:2855 -> xxx.yyy.174.229:1023 SYN ******S* Oct 20 00:56:16 61.49.191.247:2678 -> xxx.yyy.174.245:5554 SYN ******S* Oct 20 00:56:19 61.49.191.247:3415 -> xxx.yyy.174.245:9898 SYN ******S* Oct 20 00:56:16 61.49.191.247:2679 -> xxx.yyy.174.246:5554 SYN ******S* Oct 20 00:56:19 61.49.191.247:3417 -> xxx.yyy.174.246:9898 SYN ******S* Oct 20 00:56:16 61.49.191.247:2668 -> xxx.yyy.174.236:5554 SYN ******S* Oct 20 00:56:19 61.49.191.247:3401 -> xxx.yyy.174.236:9898 SYN ******S* [...] Oct 20 00:58:25 61.49.191.247:4295 -> xxx.yyy.195.66:9898 SYN ******S* Oct 20 00:58:25 61.49.191.247:4301 -> xxx.yyy.195.71:9898 SYN ******S* Oct 20 00:58:25 61.49.191.247:4305 -> xxx.yyy.195.76:9898 SYN ******S* Oct 20 00:58:25 61.49.191.247:4302 -> xxx.yyy.195.72:9898 SYN ******S* Oct 20 00:58:25 61.49.191.247:4304 -> xxx.yyy.195.73:9898 SYN ******S* Oct 20 00:58:25 61.49.191.247:4308 -> xxx.yyy.195.78:9898 SYN ******S* Oct 20 00:58:25 61.49.191.247:4309 -> xxx.yyy.195.79:9898 SYN ******S* Oct 20 00:58:25 61.49.191.247:4349 -> xxx.yyy.195.81:9898 SYN ******S* Oct 20 00:58:25 61.49.191.247:4454 -> xxx.yyy.195.82:9898 SYN ******S* 9590 Oct 20 22:56:23 141.150.38.199:1630 -> xxx.yyy.1.0:1433 SYN ******S* Oct 20 22:56:20 141.150.38.199:1634 -> xxx.yyy.1.2:1433 SYN ******S* Oct 20 22:56:23 141.150.38.199:1635 -> xxx.yyy.1.3:1433 SYN ******S* Oct 20 22:56:23 141.150.38.199:1636 -> xxx.yyy.1.4:1433 SYN ******S* Oct 20 22:56:20 141.150.38.199:1639 -> xxx.yyy.1.6:1433 SYN ******S* Oct 20 22:56:23 141.150.38.199:1642 -> xxx.yyy.1.7:1433 SYN ******S* Oct 20 22:56:20 141.150.38.199:1645 -> xxx.yyy.1.9:1433 SYN ******S* Oct 20 22:56:23 141.150.38.199:1647 -> xxx.yyy.1.11:1433 SYN ******S* [...] Oct 20 23:59:59 141.150.38.199:4220 -> xxx.yyy.71.224:1433 SYN ******S* Oct 20 23:59:59 141.150.38.199:4221 -> xxx.yyy.71.225:1433 SYN ******S* Oct 20 23:59:59 141.150.38.199:4002 -> xxx.yyy.71.173:1433 SYN ******S* Oct 20 23:59:59 141.150.38.199:4010 -> xxx.yyy.71.174:1433 SYN ******S* Oct 20 23:59:59 141.150.38.199:4223 -> xxx.yyy.71.227:1433 SYN ******S* Oct 20 23:59:59 141.150.38.199:4224 -> xxx.yyy.71.228:1433 SYN ******S* Oct 21 00:00:00 141.150.38.199:4226 -> xxx.yyy.71.229:1433 SYN ******S* Oct 21 00:00:00 141.150.38.199:4064 -> xxx.yyy.71.180:1433 SYN ******S* Oct 21 00:00:01 141.150.38.199:4103 -> xxx.yyy.71.187:1433 SYN ******S* 8609 Oct 20 00:01:11 65.54.188.52:31536 -> xxx.yyy.241.20:80 SYN ******S* Oct 20 00:01:12 65.54.188.52:31852 -> xxx.yyy.241.31:80 SYN ******S* Oct 20 00:01:13 65.54.188.52:31968 -> xxx.yyy.212.75:80 SYN ******S* Oct 20 00:01:13 65.54.188.52:32037 -> xxx.yyy.241.255:80 SYN ******S* Oct 20 00:01:14 65.54.188.52:32282 -> xxx.yyy.241.179:80 SYN ******S* Oct 20 00:01:15 65.54.188.52:32399 -> xxx.yyy.241.29:80 SYN ******S* Oct 20 00:01:18 65.54.188.52:33161 -> xxx.yyy.243.44:80 SYN ******S* Oct 20 00:01:19 65.54.188.52:33579 -> xxx.yyy.236.22:80 SYN ******S* [...] Oct 20 13:48:32 65.54.188.52:61306 -> xxx.yyy.236.22:80 SYN ******S* Oct 20 13:48:33 65.54.188.52:61315 -> xxx.yyy.226.1:80 SYN ******S* Oct 20 13:48:32 65.54.188.52:61316 -> xxx.yyy.208.6:80 SYN ******S* Oct 20 13:50:00 65.54.188.52:7198 -> xxx.yyy.1.13:80 SYN ******S* Oct 20 13:49:58 65.54.188.52:6667 -> xxx.yyy.243.44:80 SYN ******S* Oct 20 13:49:59 65.54.188.52:6707 -> xxx.yyy.248.4:80 SYN ******S* Oct 20 13:49:59 65.54.188.52:6710 -> xxx.yyy.212.103:80 SYN ******S* Oct 20 13:49:59 65.54.188.52:6788 -> xxx.yyy.241.20:80 SYN ******S* Oct 20 13:49:59 65.54.188.52:7058 -> xxx.yyy.234.52:80 SYN ******S* 8589 Oct 20 06:32:11 222.132.225.178:2363 -> xxx.yyy.1.144:1433 SYN ******S* Oct 20 06:32:11 222.132.225.178:2367 -> xxx.yyy.1.145:1433 SYN ******S* Oct 20 06:32:11 222.132.225.178:2369 -> xxx.yyy.1.146:1433 SYN ******S* Oct 20 06:32:11 222.132.225.178:2371 -> xxx.yyy.1.147:1433 SYN ******S* Oct 20 06:32:11 222.132.225.178:2375 -> xxx.yyy.1.148:1433 SYN ******S* Oct 20 06:32:11 222.132.225.178:2377 -> xxx.yyy.1.149:1433 SYN ******S* Oct 20 06:32:11 222.132.225.178:2379 -> xxx.yyy.1.150:1433 SYN ******S* Oct 20 06:32:11 222.132.225.178:2383 -> xxx.yyy.1.151:1433 SYN ******S* [...] Oct 20 07:01:09 222.132.225.178:2996 -> xxx.yyy.33.247:1433 SYN ******S* Oct 20 07:01:09 222.132.225.178:2994 -> xxx.yyy.33.246:1433 SYN ******S* Oct 20 07:01:09 222.132.225.178:3010 -> xxx.yyy.33.250:1433 SYN ******S* Oct 20 07:01:09 222.132.225.178:3014 -> xxx.yyy.33.251:1433 SYN ******S* Oct 20 07:01:09 222.132.225.178:3016 -> xxx.yyy.33.252:1433 SYN ******S* Oct 20 07:01:09 222.132.225.178:3021 -> xxx.yyy.33.253:1433 SYN ******S* Oct 20 07:01:09 222.132.225.178:3030 -> xxx.yyy.33.255:1433 SYN ******S* Oct 20 07:01:09 222.132.225.178:3027 -> xxx.yyy.33.254:1433 SYN ******S* 8326 Oct 20 23:58:22 60.35.181.156:3170 -> xxx.yyy.133.20:5554 SYN ******S* Oct 20 23:58:25 60.35.181.156:1311 -> xxx.yyy.133.20:9898 SYN ******S* Oct 20 23:58:22 60.35.181.156:3169 -> xxx.yyy.133.19:5554 SYN ******S* Oct 20 23:58:25 60.35.181.156:1306 -> xxx.yyy.133.19:9898 SYN ******S* Oct 20 23:58:22 60.35.181.156:3171 -> xxx.yyy.133.21:5554 SYN ******S* Oct 20 23:58:23 60.35.181.156:3712 -> xxx.yyy.133.21:1023 SYN ******S* Oct 20 23:58:22 60.35.181.156:3174 -> xxx.yyy.133.32:5554 SYN ******S* Oct 20 23:58:23 60.35.181.156:3715 -> xxx.yyy.133.32:1023 SYN ******S* [...] Oct 20 23:59:04 60.35.181.156:2421 -> xxx.yyy.153.112:9898 SYN ******S* Oct 20 23:59:04 60.35.181.156:2443 -> xxx.yyy.153.99:9898 SYN ******S* Oct 20 23:59:04 60.35.181.156:2444 -> xxx.yyy.153.120:9898 SYN ******S* Oct 20 23:59:04 60.35.181.156:2446 -> xxx.yyy.153.118:9898 SYN ******S* Oct 20 23:59:04 60.35.181.156:2458 -> xxx.yyy.153.125:9898 SYN ******S* Oct 20 23:59:04 60.35.181.156:2474 -> xxx.yyy.153.126:9898 SYN ******S* Oct 20 23:59:04 60.35.181.156:2440 -> xxx.yyy.153.116:9898 SYN ******S* Oct 20 23:59:04 60.35.181.156:2475 -> xxx.yyy.153.119:9898 SYN ******S* Oct 20 23:59:04 60.35.181.156:2543 -> xxx.yyy.153.128:9898 SYN ******S* 7207 Oct 20 00:55:23 61.53.38.71:3091 -> xxx.yyy.174.5:1023 SYN ******S* Oct 20 00:55:25 61.53.38.71:3649 -> xxx.yyy.174.5:9898 SYN ******S* Oct 20 00:55:23 61.53.38.71:3093 -> xxx.yyy.174.10:1023 SYN ******S* Oct 20 00:55:25 61.53.38.71:3651 -> xxx.yyy.174.10:9898 SYN ******S* Oct 20 00:55:23 61.53.38.71:3096 -> xxx.yyy.174.20:1023 SYN ******S* Oct 20 00:55:23 61.53.38.71:3097 -> xxx.yyy.174.21:1023 SYN ******S* Oct 20 00:55:25 61.53.38.71:3655 -> xxx.yyy.174.21:9898 SYN ******S* Oct 20 00:55:23 61.53.38.71:3095 -> xxx.yyy.174.19:1023 SYN ******S* [...] Oct 20 00:56:39 61.53.38.71:2235 -> xxx.yyy.174.215:9898 SYN ******S* Oct 20 00:56:39 61.53.38.71:2234 -> xxx.yyy.174.214:9898 SYN ******S* Oct 20 00:56:39 61.53.38.71:2237 -> xxx.yyy.174.216:9898 SYN ******S* Oct 20 00:56:39 61.53.38.71:2238 -> xxx.yyy.174.217:9898 SYN ******S* Oct 20 00:56:39 61.53.38.71:2251 -> xxx.yyy.174.222:9898 SYN ******S* Oct 20 00:56:39 61.53.38.71:2252 -> xxx.yyy.174.223:9898 SYN ******S* Oct 20 00:56:39 61.53.38.71:2253 -> xxx.yyy.174.224:9898 SYN ******S* Oct 20 00:56:39 61.53.38.71:2265 -> xxx.yyy.174.226:9898 SYN ******S* Oct 20 00:56:39 61.53.38.71:2267 -> xxx.yyy.174.220:9898 SYN ******S* 6267 Oct 20 17:06:06 141.150.138.196:3341 -> xxx.yyy.1.0:1433 SYN ******S* Oct 20 17:06:03 141.150.138.196:4141 -> xxx.yyy.1.2:1433 SYN ******S* Oct 20 17:06:03 141.150.138.196:4929 -> xxx.yyy.1.9:1433 SYN ******S* Oct 20 17:06:03 141.150.138.196:4520 -> xxx.yyy.1.18:1433 SYN ******S* Oct 20 17:06:04 141.150.138.196:3567 -> xxx.yyy.1.25:1433 SYN ******S* Oct 20 17:06:04 141.150.138.196:3804 -> xxx.yyy.1.28:1433 SYN ******S* Oct 20 17:06:04 141.150.138.196:3909 -> xxx.yyy.1.29:1433 SYN ******S* Oct 20 17:06:07 141.150.138.196:3007 -> xxx.yyy.1.30:1433 SYN ******S* [...] Oct 20 18:07:46 141.150.138.196:4985 -> xxx.yyy.255.224:1433 SYN ******S* Oct 20 18:07:47 141.150.138.196:4334 -> xxx.yyy.255.241:1433 SYN ******S* Oct 20 18:07:47 141.150.138.196:3358 -> xxx.yyy.255.245:1433 SYN ******S* Oct 20 18:07:47 141.150.138.196:4359 -> xxx.yyy.255.246:1433 SYN ******S* Oct 20 18:07:50 141.150.138.196:4313 -> xxx.yyy.255.195:1433 SYN ******S* Oct 20 18:07:52 141.150.138.196:4985 -> xxx.yyy.255.224:1433 SYN ******S* Oct 20 18:07:52 141.150.138.196:3264 -> xxx.yyy.255.227:1433 SYN ******S* Oct 20 18:07:53 141.150.138.196:4334 -> xxx.yyy.255.241:1433 SYN ******S* Oct 20 18:07:53 141.150.138.196:4359 -> xxx.yyy.255.246:1433 SYN ******S* 6162 Oct 20 07:00:02 217.217.171.17:1739 -> xxx.yyy.92.246:5554 SYN ******S* Oct 20 07:00:03 217.217.171.17:2861 -> xxx.yyy.92.246:1023 SYN ******S* Oct 20 07:00:02 217.217.171.17:1740 -> xxx.yyy.92.247:5554 SYN ******S* Oct 20 07:00:03 217.217.171.17:2862 -> xxx.yyy.92.247:1023 SYN ******S* Oct 20 07:00:05 217.217.171.17:3265 -> xxx.yyy.92.247:9898 SYN ******S* Oct 20 07:00:02 217.217.171.17:1750 -> xxx.yyy.92.255:5554 SYN ******S* Oct 20 07:00:03 217.217.171.17:2870 -> xxx.yyy.92.255:1023 SYN ******S* Oct 20 07:00:05 217.217.171.17:3274 -> xxx.yyy.92.255:9898 SYN ******S* [...] Oct 20 07:13:49 217.217.171.17:2164 -> xxx.yyy.94.175:9898 SYN ******S* Oct 20 07:13:47 217.217.171.17:2129 -> xxx.yyy.94.176:1023 SYN ******S* Oct 20 07:13:49 217.217.171.17:2166 -> xxx.yyy.94.176:9898 SYN ******S* Oct 20 07:13:47 217.217.171.17:2132 -> xxx.yyy.94.179:1023 SYN ******S* Oct 20 07:13:49 217.217.171.17:2170 -> xxx.yyy.94.179:9898 SYN ******S* Oct 20 07:13:47 217.217.171.17:2130 -> xxx.yyy.94.177:1023 SYN ******S* Oct 20 07:13:49 217.217.171.17:2167 -> xxx.yyy.94.177:9898 SYN ******S* Oct 20 07:13:47 217.217.171.17:2131 -> xxx.yyy.94.178:1023 SYN ******S* Oct 20 07:13:49 217.217.171.17:2169 -> xxx.yyy.94.178:9898 SYN ******S* 5838 Oct 20 23:55:57 220.120.28.176:3512 -> xxx.yyy.215.27:5554 SYN ******S* Oct 20 23:55:57 220.120.28.176:3513 -> xxx.yyy.215.26:5554 SYN ******S* Oct 20 23:55:57 220.120.28.176:3516 -> xxx.yyy.215.23:5554 SYN ******S* Oct 20 23:55:57 220.120.28.176:3519 -> xxx.yyy.215.20:5554 SYN ******S* Oct 20 23:55:57 220.120.28.176:3521 -> xxx.yyy.215.18:5554 SYN ******S* Oct 20 23:55:57 220.120.28.176:3518 -> xxx.yyy.215.21:5554 SYN ******S* Oct 20 23:55:57 220.120.28.176:3520 -> xxx.yyy.215.19:5554 SYN ******S* Oct 20 23:55:57 220.120.28.176:3530 -> xxx.yyy.215.9:5554 SYN ******S* [...] Oct 20 23:56:46 220.120.28.176:4389 -> xxx.yyy.235.81:9898 SYN ******S* Oct 20 23:56:46 220.120.28.176:4413 -> xxx.yyy.235.83:9898 SYN ******S* Oct 20 23:56:46 220.120.28.176:4478 -> xxx.yyy.235.87:9898 SYN ******S* Oct 20 23:56:46 220.120.28.176:4483 -> xxx.yyy.235.93:9898 SYN ******S* Oct 20 23:56:46 220.120.28.176:4469 -> xxx.yyy.235.101:9898 SYN ******S* Oct 20 23:56:46 220.120.28.176:4498 -> xxx.yyy.235.111:9898 SYN ******S* Oct 20 23:56:46 220.120.28.176:4493 -> xxx.yyy.235.108:9898 SYN ******S* Oct 20 23:56:46 220.120.28.176:4495 -> xxx.yyy.235.109:9898 SYN ******S* 5833 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions