[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0500. Oct 21 00:00:08 141.150.38.199:4399 -> xxx.yyy.71.235:1433 SYN ******S* Oct 21 00:00:06 141.150.38.199:4410 -> xxx.yyy.71.238:1433 SYN ******S* Oct 21 00:00:07 141.150.38.199:4419 -> xxx.yyy.71.242:1433 SYN ******S* Oct 21 00:00:07 141.150.38.199:4421 -> xxx.yyy.71.243:1433 SYN ******S* Oct 21 00:00:11 141.150.38.199:4440 -> xxx.yyy.71.247:1433 SYN ******S* Oct 21 00:00:08 141.150.38.199:4398 -> xxx.yyy.71.234:1433 SYN ******S* Oct 21 00:00:09 141.150.38.199:4472 -> xxx.yyy.71.252:1433 SYN ******S* Oct 21 00:00:09 141.150.38.199:4473 -> xxx.yyy.71.253:1433 SYN ******S* [...] Oct 21 09:45:23 141.150.38.199:1686 -> xxx.yyy.255.242:1433 SYN ******S* Oct 21 09:45:23 141.150.38.199:1690 -> xxx.yyy.255.244:1433 SYN ******S* Oct 21 09:45:24 141.150.38.199:1693 -> xxx.yyy.255.245:1433 SYN ******S* Oct 21 09:45:24 141.150.38.199:1707 -> xxx.yyy.255.248:1433 SYN ******S* Oct 21 09:45:25 141.150.38.199:1709 -> xxx.yyy.255.249:1433 SYN ******S* Oct 21 09:45:25 141.150.38.199:1711 -> xxx.yyy.255.250:1433 SYN ******S* Oct 21 09:45:25 141.150.38.199:1712 -> xxx.yyy.255.251:1433 SYN ******S* Oct 21 09:45:26 141.150.38.199:1719 -> xxx.yyy.255.253:1433 SYN ******S* 196763 Oct 21 02:44:15 222.95.57.237:50391 -> xxx.yyy.1.25:443 SYN ******S* Oct 21 02:44:18 222.95.57.237:50233 -> xxx.yyy.1.25:3128 SYN ******S* Oct 21 02:44:18 222.95.57.237:50248 -> xxx.yyy.1.25:80 SYN ******S* Oct 21 02:44:15 222.95.57.237:50430 -> xxx.yyy.1.27:80 SYN ******S* Oct 21 02:44:15 222.95.57.237:50431 -> xxx.yyy.1.27:8000 SYN ******S* Oct 21 02:44:18 222.95.57.237:50433 -> xxx.yyy.1.27:443 SYN ******S* Oct 21 02:44:15 222.95.57.237:50446 -> xxx.yyy.1.29:8080 SYN ******S* Oct 21 02:44:15 222.95.57.237:50465 -> xxx.yyy.1.29:80 SYN ******S* [...] Oct 21 04:48:13 222.95.57.237:50925 -> xxx.yyy.255.250:8080 SYN ******S* Oct 21 04:48:13 222.95.57.237:50928 -> xxx.yyy.255.250:2301 SYN ******S* Oct 21 04:48:13 222.95.57.237:50932 -> xxx.yyy.255.250:80 SYN ******S* Oct 21 04:48:13 222.95.57.237:50934 -> xxx.yyy.255.250:8000 SYN ******S* Oct 21 04:48:13 222.95.57.237:50933 -> xxx.yyy.255.251:3128 SYN ******S* Oct 21 04:48:13 222.95.57.237:50947 -> xxx.yyy.255.251:443 SYN ******S* Oct 21 04:48:13 222.95.57.237:50966 -> xxx.yyy.255.251:8080 SYN ******S* Oct 21 04:48:13 222.95.57.237:50977 -> xxx.yyy.255.251:80 SYN ******S* Oct 21 04:48:13 222.95.57.237:50938 -> xxx.yyy.255.249:2301 SYN ******S* 186933 [...] 78346 Oct 21 03:42:13 212.68.146.201:3540 -> xxx.yyy.1.1:4899 SYN ******S* Oct 21 03:42:13 212.68.146.201:3541 -> xxx.yyy.1.2:4899 SYN ******S* Oct 21 03:42:13 212.68.146.201:3543 -> xxx.yyy.1.3:4899 SYN ******S* Oct 21 03:42:15 212.68.146.201:3544 -> xxx.yyy.1.4:4899 SYN ******S* Oct 21 03:42:15 212.68.146.201:3547 -> xxx.yyy.1.6:4899 SYN ******S* Oct 21 03:42:15 212.68.146.201:3545 -> xxx.yyy.1.5:4899 SYN ******S* Oct 21 03:42:15 212.68.146.201:3549 -> xxx.yyy.1.8:4899 SYN ******S* Oct 21 03:42:15 212.68.146.201:3548 -> xxx.yyy.1.7:4899 SYN ******S* [...] Oct 21 03:51:05 212.68.146.201:3676 -> xxx.yyy.255.178:4899 SYN ******S* Oct 21 03:51:05 212.68.146.201:3661 -> xxx.yyy.255.167:4899 SYN ******S* Oct 21 03:51:05 212.68.146.201:3752 -> xxx.yyy.255.235:4899 SYN ******S* Oct 21 03:51:05 212.68.146.201:3709 -> xxx.yyy.255.200:4899 SYN ******S* Oct 21 03:51:05 212.68.146.201:3717 -> xxx.yyy.255.206:4899 SYN ******S* Oct 21 03:51:05 212.68.146.201:3685 -> xxx.yyy.255.186:4899 SYN ******S* Oct 21 03:51:05 212.68.146.201:3761 -> xxx.yyy.255.243:4899 SYN ******S* Oct 21 03:51:05 212.68.146.201:3701 -> xxx.yyy.255.198:4899 SYN ******S* 77192 Oct 21 14:36:21 64.231.247.185:2005 -> xxx.yyy.1.2:1433 SYN ******S* Oct 21 14:36:18 64.231.247.185:2048 -> xxx.yyy.1.3:1433 SYN ******S* Oct 21 14:36:21 64.231.247.185:2049 -> xxx.yyy.1.4:1433 SYN ******S* Oct 21 14:36:21 64.231.247.185:2085 -> xxx.yyy.1.6:1433 SYN ******S* Oct 21 14:36:18 64.231.247.185:2111 -> xxx.yyy.1.7:1433 SYN ******S* Oct 21 14:36:18 64.231.247.185:2123 -> xxx.yyy.1.8:1433 SYN ******S* Oct 21 14:36:21 64.231.247.185:2147 -> xxx.yyy.1.9:1433 SYN ******S* Oct 21 14:36:21 64.231.247.185:2310 -> xxx.yyy.1.14:1433 SYN ******S* [...] Oct 21 18:25:04 64.231.247.185:4719 -> xxx.yyy.255.241:1433 SYN ******S* Oct 21 18:25:04 64.231.247.185:4727 -> xxx.yyy.255.242:1433 SYN ******S* Oct 21 18:25:05 64.231.247.185:4753 -> xxx.yyy.255.244:1433 SYN ******S* Oct 21 18:25:05 64.231.247.185:4744 -> xxx.yyy.255.243:1433 SYN ******S* Oct 21 18:25:05 64.231.247.185:4789 -> xxx.yyy.255.249:1433 SYN ******S* Oct 21 18:25:05 64.231.247.185:4800 -> xxx.yyy.255.250:1433 SYN ******S* Oct 21 18:25:05 64.231.247.185:4807 -> xxx.yyy.255.251:1433 SYN ******S* Oct 21 18:25:06 64.231.247.185:4924 -> xxx.yyy.255.254:1433 SYN ******S* 69124 Oct 21 07:12:40 68.236.194.11:3047 -> xxx.yyy.1.1:4000 SYN ******S* Oct 21 07:12:40 68.236.194.11:3048 -> xxx.yyy.1.2:4000 SYN ******S* Oct 21 07:12:40 68.236.194.11:3049 -> xxx.yyy.1.3:4000 SYN ******S* Oct 21 07:12:42 68.236.194.11:3050 -> xxx.yyy.1.4:4000 SYN ******S* Oct 21 07:12:39 68.236.194.11:3051 -> xxx.yyy.1.5:4000 SYN ******S* Oct 21 07:12:42 68.236.194.11:3052 -> xxx.yyy.1.6:4000 SYN ******S* Oct 21 07:12:39 68.236.194.11:3053 -> xxx.yyy.1.7:4000 SYN ******S* Oct 21 07:12:39 68.236.194.11:3054 -> xxx.yyy.1.8:4000 SYN ******S* [...] Oct 21 07:24:25 68.236.194.11:3475 -> xxx.yyy.255.241:4000 SYN ******S* Oct 21 07:24:25 68.236.194.11:3472 -> xxx.yyy.255.238:4000 SYN ******S* Oct 21 07:24:25 68.236.194.11:3487 -> xxx.yyy.255.251:4000 SYN ******S* Oct 21 07:24:25 68.236.194.11:3484 -> xxx.yyy.255.248:4000 SYN ******S* Oct 21 07:24:25 68.236.194.11:3488 -> xxx.yyy.255.252:4000 SYN ******S* Oct 21 07:24:25 68.236.194.11:3480 -> xxx.yyy.255.246:4000 SYN ******S* Oct 21 07:24:25 68.236.194.11:3485 -> xxx.yyy.255.249:4000 SYN ******S* Oct 21 07:24:25 68.236.194.11:3486 -> xxx.yyy.255.250:4000 SYN ******S* Oct 21 07:24:25 68.236.194.11:3483 -> xxx.yyy.255.247:4000 SYN ******S* 68696 Oct 21 01:21:40 62.94.4.153:1245 -> xxx.yyy.153.191:1433 SYN ******S* Oct 21 01:21:37 62.94.4.153:1246 -> xxx.yyy.153.192:1433 SYN ******S* Oct 21 01:21:40 62.94.4.153:1248 -> xxx.yyy.153.194:1433 SYN ******S* Oct 21 01:21:40 62.94.4.153:1250 -> xxx.yyy.153.196:1433 SYN ******S* Oct 21 01:21:40 62.94.4.153:1252 -> xxx.yyy.153.198:1433 SYN ******S* Oct 21 01:21:40 62.94.4.153:1253 -> xxx.yyy.153.199:1433 SYN ******S* Oct 21 01:21:40 62.94.4.153:1254 -> xxx.yyy.153.200:1433 SYN ******S* Oct 21 01:21:39 62.94.4.153:1234 -> xxx.yyy.153.180:1433 SYN ******S* [...] Oct 21 02:57:10 62.94.4.153:3036 -> xxx.yyy.255.245:1433 SYN ******S* Oct 21 02:57:10 62.94.4.153:3040 -> xxx.yyy.255.247:1433 SYN ******S* Oct 21 02:57:10 62.94.4.153:3039 -> xxx.yyy.255.246:1433 SYN ******S* Oct 21 02:57:10 62.94.4.153:3042 -> xxx.yyy.255.249:1433 SYN ******S* Oct 21 02:57:10 62.94.4.153:3043 -> xxx.yyy.255.250:1433 SYN ******S* Oct 21 02:57:11 62.94.4.153:3046 -> xxx.yyy.255.251:1433 SYN ******S* Oct 21 02:57:11 62.94.4.153:3049 -> xxx.yyy.255.254:1433 SYN ******S* Oct 21 02:57:11 62.94.4.153:3048 -> xxx.yyy.255.253:1433 SYN ******S* Oct 21 02:57:11 62.94.4.153:3047 -> xxx.yyy.255.252:1433 SYN ******S* 64772 Oct 21 17:33:11 68.50.1.183:2017 -> xxx.yyy.1.1:1433 SYN ******S* Oct 21 17:33:11 68.50.1.183:2018 -> xxx.yyy.1.2:1433 SYN ******S* Oct 21 17:33:08 68.50.1.183:2019 -> xxx.yyy.1.3:1433 SYN ******S* Oct 21 17:33:08 68.50.1.183:2020 -> xxx.yyy.1.4:1433 SYN ******S* Oct 21 17:33:08 68.50.1.183:2022 -> xxx.yyy.1.6:1433 SYN ******S* Oct 21 17:33:08 68.50.1.183:2024 -> xxx.yyy.1.8:1433 SYN ******S* Oct 21 17:33:08 68.50.1.183:2025 -> xxx.yyy.1.9:1433 SYN ******S* Oct 21 17:33:08 68.50.1.183:2029 -> xxx.yyy.1.13:1433 SYN ******S* [...] Oct 21 17:55:37 68.50.1.183:1766 -> xxx.yyy.255.226:1433 SYN ******S* Oct 21 17:55:37 68.50.1.183:1779 -> xxx.yyy.255.239:1433 SYN ******S* Oct 21 17:55:37 68.50.1.183:1789 -> xxx.yyy.255.249:1433 SYN ******S* Oct 21 17:55:37 68.50.1.183:1786 -> xxx.yyy.255.246:1433 SYN ******S* Oct 21 17:55:37 68.50.1.183:1790 -> xxx.yyy.255.250:1433 SYN ******S* Oct 21 17:55:37 68.50.1.183:1787 -> xxx.yyy.255.247:1433 SYN ******S* Oct 21 17:55:37 68.50.1.183:1794 -> xxx.yyy.255.254:1433 SYN ******S* Oct 21 17:55:37 68.50.1.183:1791 -> xxx.yyy.255.251:1433 SYN ******S* Oct 21 17:55:37 68.50.1.183:1785 -> xxx.yyy.255.245:1433 SYN ******S* 45074 [...] 44119 Oct 21 12:49:05 140.122.118.55:4218 -> xxx.yyy.1.1:4000 SYN ******S* Oct 21 12:49:05 140.122.118.55:4220 -> xxx.yyy.1.3:4000 SYN ******S* Oct 21 12:49:07 140.122.118.55:4223 -> xxx.yyy.1.6:4000 SYN ******S* Oct 21 12:49:07 140.122.118.55:4225 -> xxx.yyy.1.8:4000 SYN ******S* Oct 21 12:49:07 140.122.118.55:4226 -> xxx.yyy.1.9:4000 SYN ******S* Oct 21 12:49:04 140.122.118.55:4227 -> xxx.yyy.1.10:4000 SYN ******S* Oct 21 12:49:07 140.122.118.55:4229 -> xxx.yyy.1.12:4000 SYN ******S* Oct 21 12:49:07 140.122.118.55:4230 -> xxx.yyy.1.13:4000 SYN ******S* [...] Oct 21 13:00:45 140.122.118.55:1039 -> xxx.yyy.255.243:4000 SYN ******S* Oct 21 13:00:45 140.122.118.55:1043 -> xxx.yyy.255.247:4000 SYN ******S* Oct 21 13:00:45 140.122.118.55:1041 -> xxx.yyy.255.245:4000 SYN ******S* Oct 21 13:00:45 140.122.118.55:1044 -> xxx.yyy.255.248:4000 SYN ******S* Oct 21 13:00:46 140.122.118.55:1048 -> xxx.yyy.255.252:4000 SYN ******S* Oct 21 13:00:46 140.122.118.55:1050 -> xxx.yyy.255.254:4000 SYN ******S* Oct 21 13:00:46 140.122.118.55:1047 -> xxx.yyy.255.251:4000 SYN ******S* Oct 21 13:00:46 140.122.118.55:1049 -> xxx.yyy.255.253:4000 SYN ******S* 40433 Oct 21 23:02:00 211.20.45.28:2812 -> xxx.yyy.1.0:1433 SYN ******S* Oct 21 23:02:03 211.20.45.28:2814 -> xxx.yyy.1.2:1433 SYN ******S* Oct 21 23:02:00 211.20.45.28:2816 -> xxx.yyy.1.4:1433 SYN ******S* Oct 21 23:02:03 211.20.45.28:2817 -> xxx.yyy.1.5:1433 SYN ******S* Oct 21 23:02:03 211.20.45.28:2819 -> xxx.yyy.1.7:1433 SYN ******S* Oct 21 23:02:03 211.20.45.28:2820 -> xxx.yyy.1.8:1433 SYN ******S* Oct 21 23:02:00 211.20.45.28:2821 -> xxx.yyy.1.9:1433 SYN ******S* Oct 21 23:02:03 211.20.45.28:2822 -> xxx.yyy.1.10:1433 SYN ******S* [...] Oct 21 23:13:02 211.20.45.28:2095 -> xxx.yyy.255.239:1433 SYN ******S* Oct 21 23:13:02 211.20.45.28:2092 -> xxx.yyy.255.236:1433 SYN ******S* Oct 21 23:13:02 211.20.45.28:2099 -> xxx.yyy.255.243:1433 SYN ******S* Oct 21 23:13:02 211.20.45.28:2109 -> xxx.yyy.255.253:1433 SYN ******S* Oct 21 23:13:02 211.20.45.28:2104 -> xxx.yyy.255.248:1433 SYN ******S* Oct 21 23:13:02 211.20.45.28:2108 -> xxx.yyy.255.252:1433 SYN ******S* Oct 21 23:13:02 211.20.45.28:2105 -> xxx.yyy.255.249:1433 SYN ******S* Oct 21 23:13:02 211.20.45.28:2102 -> xxx.yyy.255.246:1433 SYN ******S* 39989 Oct 21 16:59:56 203.186.79.248:3120 -> xxx.yyy.1.2:1433 SYN ******S* Oct 21 16:59:53 203.186.79.248:3121 -> xxx.yyy.1.3:1433 SYN ******S* Oct 21 16:59:56 203.186.79.248:3125 -> xxx.yyy.1.7:1433 SYN ******S* Oct 21 16:59:53 203.186.79.248:3126 -> xxx.yyy.1.8:1433 SYN ******S* Oct 21 16:59:56 203.186.79.248:3127 -> xxx.yyy.1.9:1433 SYN ******S* Oct 21 16:59:53 203.186.79.248:3128 -> xxx.yyy.1.10:1433 SYN ******S* Oct 21 16:59:53 203.186.79.248:3130 -> xxx.yyy.1.12:1433 SYN ******S* Oct 21 16:59:53 203.186.79.248:3132 -> xxx.yyy.1.14:1433 SYN ******S* [...] Oct 21 17:11:46 203.186.79.248:1744 -> xxx.yyy.255.241:1433 SYN ******S* Oct 21 17:11:46 203.186.79.248:1741 -> xxx.yyy.255.238:1433 SYN ******S* Oct 21 17:11:46 203.186.79.248:1738 -> xxx.yyy.255.235:1433 SYN ******S* Oct 21 17:11:46 203.186.79.248:1753 -> xxx.yyy.255.250:1433 SYN ******S* Oct 21 17:11:46 203.186.79.248:1747 -> xxx.yyy.255.244:1433 SYN ******S* Oct 21 17:11:46 203.186.79.248:1746 -> xxx.yyy.255.243:1433 SYN ******S* Oct 21 17:11:46 203.186.79.248:1756 -> xxx.yyy.255.253:1433 SYN ******S* Oct 21 17:11:46 203.186.79.248:1757 -> xxx.yyy.255.254:1433 SYN ******S* 38527 Oct 21 13:24:32 66.208.40.90:45845 -> xxx.yyy.1.3:8000 SYN ******S* Oct 21 13:24:33 66.208.40.90:45847 -> xxx.yyy.1.5:8000 SYN ******S* Oct 21 13:24:33 66.208.40.90:45848 -> xxx.yyy.1.6:8000 SYN ******S* Oct 21 13:24:33 66.208.40.90:45849 -> xxx.yyy.1.7:8000 SYN ******S* Oct 21 13:24:33 66.208.40.90:45851 -> xxx.yyy.1.8:8000 SYN ******S* Oct 21 13:24:33 66.208.40.90:45852 -> xxx.yyy.1.9:8000 SYN ******S* Oct 21 13:24:33 66.208.40.90:45853 -> xxx.yyy.1.10:8000 SYN ******S* Oct 21 13:24:31 66.208.40.90:45854 -> xxx.yyy.1.11:8000 SYN ******S* [...] Oct 21 13:36:24 66.208.40.90:49578 -> xxx.yyy.255.232:8000 SYN ******S* Oct 21 13:36:24 66.208.40.90:49577 -> xxx.yyy.255.231:8000 SYN ******S* Oct 21 13:36:24 66.208.40.90:49580 -> xxx.yyy.255.234:8000 SYN ******S* Oct 21 13:36:24 66.208.40.90:49583 -> xxx.yyy.255.237:8000 SYN ******S* Oct 21 13:36:24 66.208.40.90:49584 -> xxx.yyy.255.238:8000 SYN ******S* Oct 21 13:36:24 66.208.40.90:49588 -> xxx.yyy.255.242:8000 SYN ******S* Oct 21 13:36:24 66.208.40.90:49590 -> xxx.yyy.255.244:8000 SYN ******S* Oct 21 13:36:24 66.208.40.90:49591 -> xxx.yyy.255.245:8000 SYN ******S* Oct 21 13:36:24 66.208.40.90:49596 -> xxx.yyy.255.250:8000 SYN ******S* 36810 Oct 21 11:34:02 80.195.184.68:3590 -> xxx.yyy.1.1:1433 SYN ******S* Oct 21 11:34:02 80.195.184.68:3592 -> xxx.yyy.1.3:1433 SYN ******S* Oct 21 11:34:02 80.195.184.68:3593 -> xxx.yyy.1.4:1433 SYN ******S* Oct 21 11:34:02 80.195.184.68:3594 -> xxx.yyy.1.5:1433 SYN ******S* Oct 21 11:34:02 80.195.184.68:3591 -> xxx.yyy.1.2:1433 SYN ******S* Oct 21 11:34:02 80.195.184.68:3595 -> xxx.yyy.1.6:1433 SYN ******S* Oct 21 11:34:02 80.195.184.68:3596 -> xxx.yyy.1.7:1433 SYN ******S* Oct 21 11:34:02 80.195.184.68:3597 -> xxx.yyy.1.8:1433 SYN ******S* [...] Oct 21 13:34:46 80.195.184.68:3440 -> xxx.yyy.152.196:1433 SYN ******S* Oct 21 16:02:30 80.195.184.68:4212 -> xxx.yyy.156.88:1433 SYN ******S* Oct 21 16:02:31 80.195.184.68:4311 -> xxx.yyy.156.112:1433 SYN ******S* Oct 21 16:02:31 80.195.184.68:4343 -> xxx.yyy.156.120:1433 SYN ******S* Oct 21 16:02:31 80.195.184.68:4410 -> xxx.yyy.156.133:1433 SYN ******S* Oct 21 16:02:31 80.195.184.68:4414 -> xxx.yyy.156.134:1433 SYN ******S* Oct 21 16:02:31 80.195.184.68:4418 -> xxx.yyy.156.135:1433 SYN ******S* Oct 21 16:02:31 80.195.184.68:4422 -> xxx.yyy.156.136:1433 SYN ******S* Oct 21 16:02:31 80.195.184.68:4438 -> xxx.yyy.156.140:1433 SYN ******S* 20447 Oct 21 14:29:40 81.208.106.69:32114 -> xxx.yyy.1.2:1433 SYN ******S* Oct 21 14:29:43 81.208.106.69:32127 -> xxx.yyy.1.5:1433 SYN ******S* Oct 21 14:29:41 81.208.106.69:30036 -> xxx.yyy.1.15:1433 SYN ******S* Oct 21 14:29:44 81.208.106.69:32180 -> xxx.yyy.1.45:1433 SYN ******S* Oct 21 14:29:44 81.208.106.69:32184 -> xxx.yyy.1.46:1433 SYN ******S* Oct 21 14:29:41 81.208.106.69:32188 -> xxx.yyy.1.47:1433 SYN ******S* Oct 21 14:29:41 81.208.106.69:30696 -> xxx.yyy.1.48:1433 SYN ******S* Oct 21 14:29:41 81.208.106.69:32195 -> xxx.yyy.1.54:1433 SYN ******S* [...] Oct 21 16:56:14 81.208.106.69:23015 -> xxx.yyy.255.251:1433 SYN ******S* Oct 21 16:56:15 81.208.106.69:22924 -> xxx.yyy.255.159:1433 SYN ******S* Oct 21 16:56:15 81.208.106.69:22946 -> xxx.yyy.255.164:1433 SYN ******S* Oct 21 16:56:16 81.208.106.69:22494 -> xxx.yyy.255.172:1433 SYN ******S* Oct 21 16:56:17 81.208.106.69:23018 -> xxx.yyy.255.252:1433 SYN ******S* Oct 21 16:56:17 81.208.106.69:23205 -> xxx.yyy.255.181:1433 SYN ******S* Oct 21 16:56:23 81.208.106.69:23023 -> xxx.yyy.255.253:1433 SYN ******S* Oct 21 16:56:23 81.208.106.69:23018 -> xxx.yyy.255.252:1433 SYN ******S* 16689 Oct 21 08:59:24 24.36.54.158:3965 -> xxx.yyy.1.0:1433 SYN ******S* Oct 21 08:59:24 24.36.54.158:3973 -> xxx.yyy.1.2:1433 SYN ******S* Oct 21 08:59:21 24.36.54.158:3977 -> xxx.yyy.1.3:1433 SYN ******S* Oct 21 08:59:21 24.36.54.158:3981 -> xxx.yyy.1.4:1433 SYN ******S* Oct 21 08:59:21 24.36.54.158:3985 -> xxx.yyy.1.5:1433 SYN ******S* Oct 21 08:59:21 24.36.54.158:3989 -> xxx.yyy.1.6:1433 SYN ******S* Oct 21 08:59:21 24.36.54.158:3994 -> xxx.yyy.1.7:1433 SYN ******S* Oct 21 08:59:21 24.36.54.158:4002 -> xxx.yyy.1.9:1433 SYN ******S* [...] Oct 21 10:52:56 24.36.54.158:4068 -> xxx.yyy.128.40:1433 SYN ******S* Oct 21 10:52:57 24.36.54.158:1793 -> xxx.yyy.128.0:1433 SYN ******S* Oct 21 10:52:58 24.36.54.158:4043 -> xxx.yyy.128.39:1433 SYN ******S* Oct 21 10:52:59 24.36.54.158:1287 -> xxx.yyy.128.48:1433 SYN ******S* Oct 21 10:52:59 24.36.54.158:2473 -> xxx.yyy.128.30:1433 SYN ******S* Oct 21 10:53:00 24.36.54.158:2572 -> xxx.yyy.128.32:1433 SYN ******S* Oct 21 10:53:01 24.36.54.158:1076 -> xxx.yyy.128.45:1433 SYN ******S* Oct 21 10:53:01 24.36.54.158:1761 -> xxx.yyy.128.51:1433 SYN ******S* Oct 21 10:53:02 24.36.54.158:1866 -> xxx.yyy.128.55:1433 SYN ******S* 15619 [...] 13704 Oct 21 00:18:35 220.166.126.229:65188 -> xxx.yyy.64.41:1433 SYN ******S* Oct 21 00:18:35 220.166.126.229:65190 -> xxx.yyy.64.90:1433 SYN ******S* Oct 21 00:18:36 220.166.126.229:65155 -> xxx.yyy.64.64:1433 SYN ******S* Oct 21 00:18:37 220.166.126.229:65243 -> xxx.yyy.64.85:1433 SYN ******S* Oct 21 00:18:38 220.166.126.229:65272 -> xxx.yyy.64.86:1433 SYN ******S* Oct 21 00:18:40 220.166.126.229:65343 -> xxx.yyy.64.66:1433 SYN ******S* Oct 21 00:18:40 220.166.126.229:65342 -> xxx.yyy.64.108:1433 SYN ******S* Oct 21 00:18:41 220.166.126.229:65361 -> xxx.yyy.64.72:1433 SYN ******S* [...] Oct 21 03:11:35 220.166.126.229:57903 -> xxx.yyy.255.188:1433 SYN ******S* Oct 21 03:11:37 220.166.126.229:57852 -> xxx.yyy.255.197:1433 SYN ******S* Oct 21 03:11:37 220.166.126.229:57848 -> xxx.yyy.255.196:1433 SYN ******S* Oct 21 03:11:38 220.166.126.229:58084 -> xxx.yyy.255.232:1433 SYN ******S* Oct 21 03:11:38 220.166.126.229:57887 -> xxx.yyy.255.204:1433 SYN ******S* Oct 21 03:11:39 220.166.126.229:58220 -> xxx.yyy.255.245:1433 SYN ******S* Oct 21 03:11:39 220.166.126.229:58195 -> xxx.yyy.255.241:1433 SYN ******S* Oct 21 03:11:42 220.166.126.229:58318 -> xxx.yyy.255.242:1433 SYN ******S* 10979 [...] 9940 [...] 9892 Oct 21 12:14:25 61.9.55.111:4982 -> xxx.yyy.204.202:1433 SYN ******S* Oct 21 12:14:25 61.9.55.111:4985 -> xxx.yyy.204.203:1433 SYN ******S* Oct 21 12:14:25 61.9.55.111:4988 -> xxx.yyy.204.204:1433 SYN ******S* Oct 21 12:14:22 61.9.55.111:4991 -> xxx.yyy.204.205:1433 SYN ******S* Oct 21 12:14:22 61.9.55.111:4994 -> xxx.yyy.204.206:1433 SYN ******S* Oct 21 12:14:22 61.9.55.111:3010 -> xxx.yyy.204.210:1433 SYN ******S* Oct 21 12:14:22 61.9.55.111:3013 -> xxx.yyy.204.211:1433 SYN ******S* Oct 21 12:14:22 61.9.55.111:3025 -> xxx.yyy.204.215:1433 SYN ******S* [...] Oct 21 12:39:04 61.9.55.111:4447 -> xxx.yyy.232.62:1433 SYN ******S* Oct 21 12:39:05 61.9.55.111:4444 -> xxx.yyy.232.61:1433 SYN ******S* Oct 21 12:39:05 61.9.55.111:4463 -> xxx.yyy.232.66:1433 SYN ******S* Oct 21 12:39:05 61.9.55.111:4452 -> xxx.yyy.232.63:1433 SYN ******S* Oct 21 12:39:05 61.9.55.111:4467 -> xxx.yyy.232.68:1433 SYN ******S* Oct 21 12:39:05 61.9.55.111:4497 -> xxx.yyy.232.77:1433 SYN ******S* Oct 21 12:39:05 61.9.55.111:4507 -> xxx.yyy.232.81:1433 SYN ******S* Oct 21 12:39:05 61.9.55.111:4505 -> xxx.yyy.232.80:1433 SYN ******S* Oct 21 12:39:05 61.9.55.111:4500 -> xxx.yyy.232.78:1433 SYN ******S* 9680 [...] 7953 [...] 7735 [...] 7727 Oct 21 00:01:37 65.54.188.51:54754 -> xxx.yyy.1.13:80 SYN ******S* Oct 21 00:01:38 65.54.188.51:54871 -> xxx.yyy.241.30:80 SYN ******S* Oct 21 00:01:38 65.54.188.51:54905 -> xxx.yyy.241.179:80 SYN ******S* Oct 21 00:01:39 65.54.188.51:55376 -> xxx.yyy.241.255:80 SYN ******S* Oct 21 00:01:40 65.54.188.51:55709 -> xxx.yyy.234.52:80 SYN ******S* Oct 21 00:04:24 65.54.188.51:12683 -> xxx.yyy.236.22:80 SYN ******S* Oct 21 00:04:24 65.54.188.51:12905 -> xxx.yyy.1.13:80 SYN ******S* Oct 21 00:04:26 65.54.188.51:13350 -> xxx.yyy.241.4:80 SYN ******S* [...] Oct 21 23:58:48 65.54.188.51:5013 -> xxx.yyy.1.13:80 SYN ******S* Oct 21 23:58:48 65.54.188.51:5142 -> xxx.yyy.212.103:80 SYN ******S* Oct 21 23:58:47 65.54.188.51:4753 -> xxx.yyy.233.181:80 SYN ******S* Oct 21 23:58:47 65.54.188.51:4845 -> xxx.yyy.12.25:80 SYN ******S* Oct 21 23:58:52 65.54.188.51:6515 -> xxx.yyy.12.25:80 SYN ******S* Oct 21 23:58:50 65.54.188.51:5811 -> xxx.yyy.1.13:80 SYN ******S* Oct 21 23:58:50 65.54.188.51:5957 -> xxx.yyy.241.179:80 SYN ******S* Oct 21 23:58:53 65.54.188.51:6928 -> xxx.yyy.241.179:80 SYN ******S* Oct 21 23:58:53 65.54.188.51:6930 -> xxx.yyy.212.103:80 SYN ******S* 7133 Oct 21 13:02:23 24.200.88.65:3823 -> xxx.yyy.215.214:5554 SYN ******S* Oct 21 13:02:26 24.200.88.65:2493 -> xxx.yyy.215.214:9898 SYN ******S* Oct 21 13:02:23 24.200.88.65:3825 -> xxx.yyy.215.216:5554 SYN ******S* Oct 21 13:02:23 24.200.88.65:3827 -> xxx.yyy.215.217:5554 SYN ******S* Oct 21 13:02:26 24.200.88.65:2496 -> xxx.yyy.215.217:9898 SYN ******S* Oct 21 13:02:23 24.200.88.65:3838 -> xxx.yyy.215.218:5554 SYN ******S* Oct 21 13:02:23 24.200.88.65:3876 -> xxx.yyy.215.223:5554 SYN ******S* Oct 21 13:02:24 24.200.88.65:1117 -> xxx.yyy.215.223:1023 SYN ******S* [...] Oct 21 13:03:06 24.200.88.65:1970 -> xxx.yyy.236.12:9898 SYN ******S* Oct 21 13:03:06 24.200.88.65:1959 -> xxx.yyy.236.2:9898 SYN ******S* Oct 21 13:03:06 24.200.88.65:1971 -> xxx.yyy.236.13:9898 SYN ******S* Oct 21 13:03:06 24.200.88.65:1982 -> xxx.yyy.235.252:9898 SYN ******S* Oct 21 13:03:06 24.200.88.65:1996 -> xxx.yyy.235.251:9898 SYN ******S* Oct 21 13:03:06 24.200.88.65:1990 -> xxx.yyy.236.10:9898 SYN ******S* Oct 21 13:03:06 24.200.88.65:2055 -> xxx.yyy.236.38:9898 SYN ******S* Oct 21 13:03:06 24.200.88.65:2056 -> xxx.yyy.236.39:9898 SYN ******S* 6962 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions