[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0500. Oct 22 12:51:49 82.36.147.76:2640 -> xxx.yyy.1.0:1433 SYN ******S* Oct 22 12:51:49 82.36.147.76:2642 -> xxx.yyy.1.2:1433 SYN ******S* Oct 22 12:51:49 82.36.147.76:2661 -> xxx.yyy.1.5:1433 SYN ******S* Oct 22 12:51:49 82.36.147.76:2678 -> xxx.yyy.1.9:1433 SYN ******S* Oct 22 12:51:49 82.36.147.76:2683 -> xxx.yyy.1.10:1433 SYN ******S* Oct 22 12:51:47 82.36.147.76:2716 -> xxx.yyy.1.20:1433 SYN ******S* Oct 22 12:51:47 82.36.147.76:2715 -> xxx.yyy.1.19:1433 SYN ******S* Oct 22 12:51:47 82.36.147.76:2718 -> xxx.yyy.1.21:1433 SYN ******S* [...] Oct 22 16:41:58 82.36.147.76:2385 -> xxx.yyy.255.244:1433 SYN ******S* Oct 22 16:41:58 82.36.147.76:2387 -> xxx.yyy.255.245:1433 SYN ******S* Oct 22 16:41:58 82.36.147.76:2411 -> xxx.yyy.255.248:1433 SYN ******S* Oct 22 16:41:59 82.36.147.76:2416 -> xxx.yyy.255.249:1433 SYN ******S* Oct 22 16:41:59 82.36.147.76:2421 -> xxx.yyy.255.250:1433 SYN ******S* Oct 22 16:41:59 82.36.147.76:2427 -> xxx.yyy.255.251:1433 SYN ******S* Oct 22 16:41:59 82.36.147.76:2460 -> xxx.yyy.255.254:1433 SYN ******S* Oct 22 16:41:59 82.36.147.76:2459 -> xxx.yyy.255.253:1433 SYN ******S* 73386 Oct 22 07:35:39 68.50.1.183:1983 -> xxx.yyy.1.1:1433 SYN ******S* Oct 22 07:35:39 68.50.1.183:1984 -> xxx.yyy.1.2:1433 SYN ******S* Oct 22 07:35:39 68.50.1.183:1985 -> xxx.yyy.1.3:1433 SYN ******S* Oct 22 07:35:39 68.50.1.183:1986 -> xxx.yyy.1.4:1433 SYN ******S* Oct 22 07:35:39 68.50.1.183:1987 -> xxx.yyy.1.5:1433 SYN ******S* Oct 22 07:35:39 68.50.1.183:1988 -> xxx.yyy.1.6:1433 SYN ******S* Oct 22 07:35:39 68.50.1.183:1989 -> xxx.yyy.1.7:1433 SYN ******S* Oct 22 07:35:39 68.50.1.183:1990 -> xxx.yyy.1.8:1433 SYN ******S* [...] Oct 22 07:57:31 68.50.1.183:1725 -> xxx.yyy.255.242:1433 SYN ******S* Oct 22 07:57:31 68.50.1.183:1722 -> xxx.yyy.255.239:1433 SYN ******S* Oct 22 07:57:31 68.50.1.183:1719 -> xxx.yyy.255.236:1433 SYN ******S* Oct 22 07:57:31 68.50.1.183:1729 -> xxx.yyy.255.246:1433 SYN ******S* Oct 22 07:57:31 68.50.1.183:1726 -> xxx.yyy.255.243:1433 SYN ******S* Oct 22 07:57:31 68.50.1.183:1723 -> xxx.yyy.255.240:1433 SYN ******S* Oct 22 07:57:31 68.50.1.183:1720 -> xxx.yyy.255.237:1433 SYN ******S* Oct 22 07:57:32 68.50.1.183:1730 -> xxx.yyy.255.247:1433 SYN ******S* Oct 22 07:57:32 68.50.1.183:1727 -> xxx.yyy.255.244:1433 SYN ******S* 65550 Oct 22 17:45:29 195.216.97.40:4268 -> xxx.yyy.1.1:2323 SYN ******S* Oct 22 17:45:28 195.216.97.40:4269 -> xxx.yyy.1.2:2323 SYN ******S* Oct 22 17:45:27 195.216.97.40:4270 -> xxx.yyy.1.3:2323 SYN ******S* Oct 22 17:45:30 195.216.97.40:4271 -> xxx.yyy.1.4:2323 SYN ******S* Oct 22 17:45:30 195.216.97.40:4272 -> xxx.yyy.1.5:2323 SYN ******S* Oct 22 17:45:30 195.216.97.40:4273 -> xxx.yyy.1.6:2323 SYN ******S* Oct 22 17:45:27 195.216.97.40:4275 -> xxx.yyy.1.8:2323 SYN ******S* Oct 22 17:45:27 195.216.97.40:4277 -> xxx.yyy.1.10:2323 SYN ******S* [...] Oct 22 17:56:23 195.216.97.40:3069 -> xxx.yyy.255.218:2323 SYN ******S* Oct 22 17:56:24 195.216.97.40:3082 -> xxx.yyy.255.231:2323 SYN ******S* Oct 22 17:56:24 195.216.97.40:3079 -> xxx.yyy.255.228:2323 SYN ******S* Oct 22 17:56:24 195.216.97.40:3080 -> xxx.yyy.255.229:2323 SYN ******S* Oct 22 17:56:24 195.216.97.40:3078 -> xxx.yyy.255.227:2323 SYN ******S* Oct 22 17:56:24 195.216.97.40:3096 -> xxx.yyy.255.245:2323 SYN ******S* Oct 22 17:56:24 195.216.97.40:3088 -> xxx.yyy.255.237:2323 SYN ******S* Oct 22 17:56:24 195.216.97.40:3095 -> xxx.yyy.255.244:2323 SYN ******S* Oct 22 17:56:24 195.216.97.40:3103 -> xxx.yyy.255.252:2323 SYN ******S* 62552 Oct 22 18:59:14 203.101.43.126:2636 -> xxx.yyy.1.2:1433 SYN ******S* Oct 22 18:59:11 203.101.43.126:2644 -> xxx.yyy.1.6:1433 SYN ******S* Oct 22 18:59:14 203.101.43.126:2645 -> xxx.yyy.1.7:1433 SYN ******S* Oct 22 18:59:12 203.101.43.126:2649 -> xxx.yyy.1.9:1433 SYN ******S* Oct 22 18:59:12 203.101.43.126:2653 -> xxx.yyy.1.11:1433 SYN ******S* Oct 22 18:59:15 203.101.43.126:2656 -> xxx.yyy.1.12:1433 SYN ******S* Oct 22 18:59:15 203.101.43.126:2660 -> xxx.yyy.1.14:1433 SYN ******S* Oct 22 18:59:15 203.101.43.126:2661 -> xxx.yyy.1.15:1433 SYN ******S* [...] Oct 22 19:10:10 203.101.43.126:1706 -> xxx.yyy.255.246:1433 SYN ******S* Oct 22 19:10:10 203.101.43.126:1708 -> xxx.yyy.255.247:1433 SYN ******S* Oct 22 19:10:10 203.101.43.126:1710 -> xxx.yyy.255.248:1433 SYN ******S* Oct 22 19:10:10 203.101.43.126:1712 -> xxx.yyy.255.249:1433 SYN ******S* Oct 22 19:10:10 203.101.43.126:1714 -> xxx.yyy.255.250:1433 SYN ******S* Oct 22 19:10:10 203.101.43.126:1716 -> xxx.yyy.255.251:1433 SYN ******S* Oct 22 19:10:11 203.101.43.126:1720 -> xxx.yyy.255.253:1433 SYN ******S* Oct 22 19:10:11 203.101.43.126:1722 -> xxx.yyy.255.254:1433 SYN ******S* 60046 Oct 22 17:14:39 158.132.110.217:3778 -> xxx.yyy.1.2:1433 SYN ******S* Oct 22 17:14:42 158.132.110.217:3779 -> xxx.yyy.1.3:1433 SYN ******S* Oct 22 17:14:42 158.132.110.217:3781 -> xxx.yyy.1.5:1433 SYN ******S* Oct 22 17:14:39 158.132.110.217:3782 -> xxx.yyy.1.6:1433 SYN ******S* Oct 22 17:14:42 158.132.110.217:3784 -> xxx.yyy.1.8:1433 SYN ******S* Oct 22 17:14:42 158.132.110.217:3783 -> xxx.yyy.1.7:1433 SYN ******S* Oct 22 17:14:40 158.132.110.217:3788 -> xxx.yyy.1.12:1433 SYN ******S* Oct 22 17:14:43 158.132.110.217:3790 -> xxx.yyy.1.14:1433 SYN ******S* [...] Oct 22 17:25:38 158.132.110.217:2832 -> xxx.yyy.255.246:1433 SYN ******S* Oct 22 17:25:38 158.132.110.217:2830 -> xxx.yyy.255.244:1433 SYN ******S* Oct 22 17:25:38 158.132.110.217:2834 -> xxx.yyy.255.248:1433 SYN ******S* Oct 22 17:25:38 158.132.110.217:2838 -> xxx.yyy.255.252:1433 SYN ******S* Oct 22 17:25:38 158.132.110.217:2836 -> xxx.yyy.255.250:1433 SYN ******S* Oct 22 17:25:38 158.132.110.217:2831 -> xxx.yyy.255.245:1433 SYN ******S* Oct 22 17:25:38 158.132.110.217:2833 -> xxx.yyy.255.247:1433 SYN ******S* Oct 22 17:25:38 158.132.110.217:2837 -> xxx.yyy.255.251:1433 SYN ******S* Oct 22 17:25:38 158.132.110.217:2835 -> xxx.yyy.255.249:1433 SYN ******S* 53682 Oct 22 10:07:29 213.180.210.35:32022 -> xxx.yyy.68.49:8090 SYN ******S* Oct 22 10:07:29 213.180.210.35:49015 -> xxx.yyy.68.49:1080 SYN ******S* Oct 22 10:07:29 213.180.210.35:37018 -> xxx.yyy.68.49:1075 SYN ******S* Oct 22 10:07:29 213.180.210.35:49951 -> xxx.yyy.68.49:80 SYN ******S* Oct 22 10:07:29 213.180.210.35:58632 -> xxx.yyy.68.49:81 SYN ******S* Oct 22 10:07:29 213.180.210.35:38823 -> xxx.yyy.68.49:3128 SYN ******S* Oct 22 10:07:29 213.180.210.35:52011 -> xxx.yyy.68.49:4480 SYN ******S* Oct 22 10:07:29 213.180.210.35:56467 -> xxx.yyy.68.49:6588 SYN ******S* [...] Oct 22 14:09:33 213.180.210.35:41987 -> xxx.yyy.93.77:4480 SYN ******S* Oct 22 14:09:33 213.180.210.35:57741 -> xxx.yyy.93.77:6588 SYN ******S* Oct 22 14:09:36 213.180.210.35:65177 -> xxx.yyy.93.77:8000 SYN ******S* Oct 22 14:09:33 213.180.210.35:62495 -> xxx.yyy.93.77:8081 SYN ******S* Oct 22 14:09:33 213.180.210.35:39409 -> xxx.yyy.93.77:8080 SYN ******S* Oct 22 14:09:33 213.180.210.35:64930 -> xxx.yyy.93.77:8090 SYN ******S* Oct 22 14:09:33 213.180.210.35:63608 -> xxx.yyy.93.77:5490 SYN ******S* Oct 22 14:09:33 213.180.210.35:50713 -> xxx.yyy.93.77:7033 SYN ******S* Oct 22 14:09:36 213.180.210.35:46552 -> xxx.yyy.93.77:8105 SYN ******S* 50629 Oct 22 12:46:22 64.173.4.100:2343 -> xxx.yyy.1.1:1433 SYN ******S* Oct 22 12:46:22 64.173.4.100:2347 -> xxx.yyy.1.3:1433 SYN ******S* Oct 22 12:46:22 64.173.4.100:2349 -> xxx.yyy.1.4:1433 SYN ******S* Oct 22 12:46:22 64.173.4.100:2350 -> xxx.yyy.1.4:6129 SYN ******S* Oct 22 12:46:22 64.173.4.100:2353 -> xxx.yyy.1.6:1433 SYN ******S* Oct 22 12:46:22 64.173.4.100:2360 -> xxx.yyy.1.9:6129 SYN ******S* Oct 22 12:46:22 64.173.4.100:2361 -> xxx.yyy.1.10:1433 SYN ******S* Oct 22 12:46:22 64.173.4.100:2367 -> xxx.yyy.1.13:6129 SYN ******S* [...] Oct 22 12:56:43 64.173.4.100:2843 -> xxx.yyy.255.250:1433 SYN ******S* Oct 22 12:56:43 64.173.4.100:2844 -> xxx.yyy.255.250:6129 SYN ******S* Oct 22 12:56:43 64.173.4.100:2845 -> xxx.yyy.255.251:1433 SYN ******S* Oct 22 12:56:43 64.173.4.100:2846 -> xxx.yyy.255.251:6129 SYN ******S* Oct 22 12:56:43 64.173.4.100:2848 -> xxx.yyy.255.252:6129 SYN ******S* Oct 22 12:56:43 64.173.4.100:2849 -> xxx.yyy.255.253:1433 SYN ******S* Oct 22 12:56:43 64.173.4.100:2850 -> xxx.yyy.255.253:6129 SYN ******S* Oct 22 12:56:43 64.173.4.100:2851 -> xxx.yyy.255.254:1433 SYN ******S* 48383 Oct 22 12:14:44 82.34.28.209:1246 -> xxx.yyy.1.2:1433 SYN ******S* Oct 22 12:14:44 82.34.28.209:1249 -> xxx.yyy.1.3:1433 SYN ******S* Oct 22 12:14:44 82.34.28.209:1252 -> xxx.yyy.1.4:1433 SYN ******S* Oct 22 12:14:44 82.34.28.209:1275 -> xxx.yyy.1.5:1433 SYN ******S* Oct 22 12:14:44 82.34.28.209:1283 -> xxx.yyy.1.6:1433 SYN ******S* Oct 22 12:14:44 82.34.28.209:1289 -> xxx.yyy.1.8:1433 SYN ******S* Oct 22 12:14:44 82.34.28.209:1292 -> xxx.yyy.1.9:1433 SYN ******S* Oct 22 12:14:44 82.34.28.209:1295 -> xxx.yyy.1.10:1433 SYN ******S* [...] Oct 22 15:26:59 82.34.28.209:1214 -> xxx.yyy.197.35:1433 SYN ******S* Oct 22 15:26:59 82.34.28.209:1718 -> xxx.yyy.197.40:1433 SYN ******S* Oct 22 15:26:59 82.34.28.209:1233 -> xxx.yyy.197.37:1433 SYN ******S* Oct 22 15:26:59 82.34.28.209:1240 -> xxx.yyy.197.39:1433 SYN ******S* Oct 22 15:26:59 82.34.28.209:1239 -> xxx.yyy.197.38:1433 SYN ******S* Oct 22 15:27:01 82.34.28.209:1758 -> xxx.yyy.197.43:1433 SYN ******S* Oct 22 15:27:01 82.34.28.209:1757 -> xxx.yyy.197.42:1433 SYN ******S* Oct 22 15:27:02 82.34.28.209:1790 -> xxx.yyy.197.47:1433 SYN ******S* Oct 22 15:27:02 82.34.28.209:1798 -> xxx.yyy.197.48:1433 SYN ******S* 47174 Oct 22 12:59:46 69.224.139.201:2395 -> xxx.yyy.1.2:1433 SYN ******S* Oct 22 12:59:46 69.224.139.201:2396 -> xxx.yyy.1.3:1433 SYN ******S* Oct 22 12:59:49 69.224.139.201:2398 -> xxx.yyy.1.5:1433 SYN ******S* Oct 22 12:59:46 69.224.139.201:2400 -> xxx.yyy.1.7:1433 SYN ******S* Oct 22 12:59:49 69.224.139.201:2401 -> xxx.yyy.1.8:1433 SYN ******S* Oct 22 12:59:49 69.224.139.201:2402 -> xxx.yyy.1.9:1433 SYN ******S* Oct 22 12:59:46 69.224.139.201:2403 -> xxx.yyy.1.10:1433 SYN ******S* Oct 22 12:59:46 69.224.139.201:2405 -> xxx.yyy.1.12:1433 SYN ******S* [...] Oct 22 13:11:28 69.224.139.201:1098 -> xxx.yyy.255.233:1433 SYN ******S* Oct 22 13:11:28 69.224.139.201:1105 -> xxx.yyy.255.240:1433 SYN ******S* Oct 22 13:11:28 69.224.139.201:1112 -> xxx.yyy.255.247:1433 SYN ******S* Oct 22 13:11:28 69.224.139.201:1109 -> xxx.yyy.255.244:1433 SYN ******S* Oct 22 13:11:28 69.224.139.201:1106 -> xxx.yyy.255.241:1433 SYN ******S* Oct 22 13:11:28 69.224.139.201:1110 -> xxx.yyy.255.245:1433 SYN ******S* Oct 22 13:11:28 69.224.139.201:1115 -> xxx.yyy.255.250:1433 SYN ******S* Oct 22 13:11:28 69.224.139.201:1119 -> xxx.yyy.255.254:1433 SYN ******S* 38453 Oct 22 18:50:51 82.36.50.81:2906 -> xxx.yyy.1.12:1433 SYN ******S* Oct 22 18:50:54 82.36.50.81:3082 -> xxx.yyy.1.23:1433 SYN ******S* Oct 22 18:50:52 82.36.50.81:4410 -> xxx.yyy.1.28:1433 SYN ******S* Oct 22 18:50:52 82.36.50.81:4315 -> xxx.yyy.1.25:1433 SYN ******S* Oct 22 18:50:52 82.36.50.81:4296 -> xxx.yyy.1.24:1433 SYN ******S* Oct 22 18:50:52 82.36.50.81:1920 -> xxx.yyy.1.26:1433 SYN ******S* Oct 22 18:50:52 82.36.50.81:4564 -> xxx.yyy.1.29:1433 SYN ******S* Oct 22 18:50:54 82.36.50.81:1688 -> xxx.yyy.1.8:1433 SYN ******S* [...] Oct 22 20:14:11 82.36.50.81:3471 -> xxx.yyy.255.218:1433 SYN ******S* Oct 22 20:14:11 82.36.50.81:4441 -> xxx.yyy.255.216:1433 SYN ******S* Oct 22 20:14:11 82.36.50.81:4468 -> xxx.yyy.255.217:1433 SYN ******S* Oct 22 20:14:11 82.36.50.81:3082 -> xxx.yyy.255.222:1433 SYN ******S* Oct 22 20:14:11 82.36.50.81:4767 -> xxx.yyy.255.224:1433 SYN ******S* Oct 22 20:14:13 82.36.50.81:1400 -> xxx.yyy.255.227:1433 SYN ******S* Oct 22 20:14:13 82.36.50.81:2214 -> xxx.yyy.255.228:1433 SYN ******S* Oct 22 20:14:13 82.36.50.81:2530 -> xxx.yyy.255.230:1433 SYN ******S* Oct 22 20:14:13 82.36.50.81:2018 -> xxx.yyy.255.229:1433 SYN ******S* 32729 Oct 22 15:54:45 66.59.235.155:3098 -> xxx.yyy.1.1:1080 SYN ******S* Oct 22 15:54:45 66.59.235.155:3100 -> xxx.yyy.1.3:1080 SYN ******S* Oct 22 15:54:44 66.59.235.155:3102 -> xxx.yyy.1.5:1080 SYN ******S* Oct 22 15:54:44 66.59.235.155:3103 -> xxx.yyy.1.6:1080 SYN ******S* Oct 22 15:54:44 66.59.235.155:3104 -> xxx.yyy.1.7:1080 SYN ******S* Oct 22 15:54:44 66.59.235.155:3105 -> xxx.yyy.1.8:1080 SYN ******S* Oct 22 15:54:44 66.59.235.155:3106 -> xxx.yyy.1.9:1080 SYN ******S* Oct 22 15:54:46 66.59.235.155:3108 -> xxx.yyy.1.11:1080 SYN ******S* [...] Oct 22 16:09:30 66.59.235.155:1763 -> xxx.yyy.255.129:1080 SYN ******S* Oct 22 16:09:30 66.59.235.155:1766 -> xxx.yyy.255.132:1080 SYN ******S* Oct 22 16:09:30 66.59.235.155:1767 -> xxx.yyy.255.133:1080 SYN ******S* Oct 22 16:09:30 66.59.235.155:1764 -> xxx.yyy.255.130:1080 SYN ******S* Oct 22 16:09:30 66.59.235.155:1781 -> xxx.yyy.255.147:1080 SYN ******S* Oct 22 16:09:30 66.59.235.155:1780 -> xxx.yyy.255.146:1080 SYN ******S* Oct 22 16:09:30 66.59.235.155:1782 -> xxx.yyy.255.148:1080 SYN ******S* Oct 22 16:09:31 66.59.235.155:1798 -> xxx.yyy.255.164:1080 SYN ******S* Oct 22 16:09:31 66.59.235.155:1801 -> xxx.yyy.255.167:1080 SYN ******S* 32463 [...] 24702 Oct 22 10:58:40 219.157.87.162:3376 -> xxx.yyy.1.0:1433 SYN ******S* Oct 22 10:58:40 219.157.87.162:3379 -> xxx.yyy.1.1:1433 SYN ******S* Oct 22 10:58:38 219.157.87.162:3383 -> xxx.yyy.1.2:1433 SYN ******S* Oct 22 10:58:38 219.157.87.162:3390 -> xxx.yyy.1.4:1433 SYN ******S* Oct 22 10:58:41 219.157.87.162:3396 -> xxx.yyy.1.6:1433 SYN ******S* Oct 22 10:58:39 219.157.87.162:3393 -> xxx.yyy.1.5:1433 SYN ******S* Oct 22 10:58:42 219.157.87.162:3398 -> xxx.yyy.1.7:1433 SYN ******S* Oct 22 10:58:42 219.157.87.162:3401 -> xxx.yyy.1.8:1433 SYN ******S* [...] Oct 22 12:38:50 219.157.87.162:2990 -> xxx.yyy.141.41:1433 SYN ******S* Oct 22 12:38:51 219.157.87.162:2992 -> xxx.yyy.141.43:1433 SYN ******S* Oct 22 12:38:51 219.157.87.162:2994 -> xxx.yyy.141.44:1433 SYN ******S* Oct 22 12:38:51 219.157.87.162:2997 -> xxx.yyy.141.45:1433 SYN ******S* Oct 22 12:38:56 219.157.87.162:3028 -> xxx.yyy.141.47:1433 SYN ******S* Oct 22 12:38:56 219.157.87.162:3029 -> xxx.yyy.141.48:1433 SYN ******S* Oct 22 12:38:56 219.157.87.162:3033 -> xxx.yyy.141.49:1433 SYN ******S* Oct 22 12:38:56 219.157.87.162:3037 -> xxx.yyy.141.51:1433 SYN ******S* Oct 22 12:38:56 219.157.87.162:3036 -> xxx.yyy.141.50:1433 SYN ******S* 24491 [...] 23509 Oct 22 09:54:01 220.162.30.110:1799 -> xxx.yyy.1.2:1433 SYN ******S* Oct 22 09:54:04 220.162.30.110:7175 -> xxx.yyy.1.10:1433 SYN ******S* Oct 22 09:54:01 220.162.30.110:13831 -> xxx.yyy.1.16:1433 SYN ******S* Oct 22 09:54:04 220.162.30.110:13063 -> xxx.yyy.1.15:1433 SYN ******S* Oct 22 09:54:02 220.162.30.110:23303 -> xxx.yyy.1.19:1433 SYN ******S* Oct 22 09:54:02 220.162.30.110:23559 -> xxx.yyy.1.20:1433 SYN ******S* Oct 22 09:54:04 220.162.30.110:24327 -> xxx.yyy.1.22:1433 SYN ******S* Oct 22 09:54:02 220.162.30.110:33543 -> xxx.yyy.1.32:1433 SYN ******S* [...] Oct 22 12:24:08 220.162.30.110:59910 -> xxx.yyy.168.47:1433 SYN ******S* Oct 22 12:24:08 220.162.30.110:38149 -> xxx.yyy.168.62:1433 SYN ******S* Oct 22 12:24:09 220.162.30.110:52741 -> xxx.yyy.168.64:1433 SYN ******S* Oct 22 12:24:09 220.162.30.110:58629 -> xxx.yyy.168.66:1433 SYN ******S* Oct 22 12:24:09 220.162.30.110:25605 -> xxx.yyy.168.58:1433 SYN ******S* Oct 22 12:24:09 220.162.30.110:11014 -> xxx.yyy.168.67:1433 SYN ******S* Oct 22 12:24:10 220.162.30.110:23046 -> xxx.yyy.168.70:1433 SYN ******S* Oct 22 12:24:10 220.162.30.110:28678 -> xxx.yyy.168.94:1433 SYN ******S* Oct 22 12:24:10 220.162.30.110:58630 -> xxx.yyy.168.72:1433 SYN ******S* 21103 Oct 22 12:25:42 218.5.129.153:59140 -> xxx.yyy.169.246:1433 SYN ******S* Oct 22 12:25:45 218.5.129.153:62468 -> xxx.yyy.170.13:1433 SYN ******S* Oct 22 12:25:42 218.5.129.153:14085 -> xxx.yyy.170.18:1433 SYN ******S* Oct 22 12:25:43 218.5.129.153:11012 -> xxx.yyy.169.250:1433 SYN ******S* Oct 22 12:25:43 218.5.129.153:13060 -> xxx.yyy.169.251:1433 SYN ******S* Oct 22 12:25:46 218.5.129.153:24581 -> xxx.yyy.170.24:1433 SYN ******S* Oct 22 12:25:46 218.5.129.153:26629 -> xxx.yyy.170.30:1433 SYN ******S* Oct 22 12:25:43 218.5.129.153:20740 -> xxx.yyy.169.253:1433 SYN ******S* [...] Oct 22 13:42:53 218.5.129.153:34052 -> xxx.yyy.255.233:1433 SYN ******S* Oct 22 13:42:53 218.5.129.153:64260 -> xxx.yyy.255.230:1433 SYN ******S* Oct 22 13:42:53 218.5.129.153:41989 -> xxx.yyy.255.241:1433 SYN ******S* Oct 22 13:42:54 218.5.129.153:39686 -> xxx.yyy.255.244:1433 SYN ******S* Oct 22 13:42:54 218.5.129.153:8197 -> xxx.yyy.255.240:1433 SYN ******S* Oct 22 13:42:55 218.5.129.153:45319 -> xxx.yyy.255.249:1433 SYN ******S* Oct 22 13:42:56 218.5.129.153:31751 -> xxx.yyy.255.248:1433 SYN ******S* Oct 22 13:42:56 218.5.129.153:12292 -> xxx.yyy.255.254:1433 SYN ******S* 20203 Oct 22 13:11:26 61.37.196.55:1982 -> xxx.yyy.1.1:4899 SYN ******S* Oct 22 13:11:26 61.37.196.55:1984 -> xxx.yyy.1.3:4899 SYN ******S* Oct 22 13:11:26 61.37.196.55:1986 -> xxx.yyy.1.5:4899 SYN ******S* Oct 22 13:11:26 61.37.196.55:1988 -> xxx.yyy.1.7:4899 SYN ******S* Oct 22 13:11:26 61.37.196.55:1993 -> xxx.yyy.1.12:4899 SYN ******S* Oct 22 13:11:26 61.37.196.55:1985 -> xxx.yyy.1.4:4899 SYN ******S* Oct 22 13:11:27 61.37.196.55:1995 -> xxx.yyy.1.14:4899 SYN ******S* Oct 22 13:11:28 61.37.196.55:1997 -> xxx.yyy.1.16:4899 SYN ******S* [...] Oct 22 13:14:56 61.37.196.55:1417 -> xxx.yyy.255.231:4899 SYN ******S* Oct 22 13:14:56 61.37.196.55:1411 -> xxx.yyy.255.225:4899 SYN ******S* Oct 22 13:14:56 61.37.196.55:1421 -> xxx.yyy.255.235:4899 SYN ******S* Oct 22 13:14:56 61.37.196.55:1429 -> xxx.yyy.255.242:4899 SYN ******S* Oct 22 13:14:56 61.37.196.55:1430 -> xxx.yyy.255.243:4899 SYN ******S* Oct 22 13:14:56 61.37.196.55:1428 -> xxx.yyy.255.241:4899 SYN ******S* Oct 22 13:14:56 61.37.196.55:1439 -> xxx.yyy.255.252:4899 SYN ******S* Oct 22 13:14:56 61.37.196.55:1435 -> xxx.yyy.255.248:4899 SYN ******S* 19513 Oct 22 09:19:04 199.89.146.50:16625 -> xxx.yyy.1.40:22 SYN ******S* Oct 22 09:19:04 199.89.146.50:16625 -> xxx.yyy.1.41:22 SYN ******S* Oct 22 09:19:04 199.89.146.50:16625 -> xxx.yyy.1.42:22 SYN ******S* Oct 22 09:19:04 199.89.146.50:16625 -> xxx.yyy.1.43:22 SYN ******S* Oct 22 09:19:04 199.89.146.50:16625 -> xxx.yyy.1.44:22 SYN ******S* Oct 22 09:19:04 199.89.146.50:16625 -> xxx.yyy.1.46:22 SYN ******S* Oct 22 09:19:04 199.89.146.50:16625 -> xxx.yyy.1.47:22 SYN ******S* Oct 22 09:19:04 199.89.146.50:16625 -> xxx.yyy.1.48:22 SYN ******S* [...] Oct 22 09:19:31 199.89.146.50:16625 -> xxx.yyy.255.232:22 SYN ******S* Oct 22 09:19:31 199.89.146.50:16625 -> xxx.yyy.255.233:22 SYN ******S* Oct 22 09:19:31 199.89.146.50:16625 -> xxx.yyy.255.234:22 SYN ******S* Oct 22 09:19:31 199.89.146.50:16625 -> xxx.yyy.255.235:22 SYN ******S* Oct 22 09:19:31 199.89.146.50:16625 -> xxx.yyy.255.236:22 SYN ******S* Oct 22 09:19:31 199.89.146.50:16625 -> xxx.yyy.255.237:22 SYN ******S* Oct 22 09:19:31 199.89.146.50:16625 -> xxx.yyy.254.254:22 SYN ******S* Oct 22 09:19:31 199.89.146.50:16625 -> xxx.yyy.255.253:22 SYN ******S* 15459 [...] 14727 [...] 14273 Oct 22 03:47:52 203.251.42.136:1996 -> xxx.yyy.1.5:1433 SYN ******S* Oct 22 03:47:52 203.251.42.136:1999 -> xxx.yyy.1.8:1433 SYN ******S* Oct 22 03:47:52 203.251.42.136:1998 -> xxx.yyy.1.7:1433 SYN ******S* Oct 22 03:47:52 203.251.42.136:2001 -> xxx.yyy.1.10:1433 SYN ******S* Oct 22 03:47:52 203.251.42.136:2000 -> xxx.yyy.1.9:1433 SYN ******S* Oct 22 03:47:52 203.251.42.136:1997 -> xxx.yyy.1.6:1433 SYN ******S* Oct 22 03:47:52 203.251.42.136:2005 -> xxx.yyy.1.14:1433 SYN ******S* Oct 22 03:47:52 203.251.42.136:1979 -> xxx.yyy.1.38:1433 SYN ******S* [...] Oct 22 03:48:08 203.251.42.136:1995 -> xxx.yyy.255.184:1433 SYN ******S* Oct 22 03:48:08 203.251.42.136:1994 -> xxx.yyy.255.183:1433 SYN ******S* Oct 22 03:48:08 203.251.42.136:1996 -> xxx.yyy.255.185:1433 SYN ******S* Oct 22 03:48:08 203.251.42.136:2001 -> xxx.yyy.255.190:1433 SYN ******S* Oct 22 03:48:08 203.251.42.136:1997 -> xxx.yyy.255.186:1433 SYN ******S* Oct 22 03:48:08 203.251.42.136:2003 -> xxx.yyy.255.192:1433 SYN ******S* Oct 22 03:48:08 203.251.42.136:2000 -> xxx.yyy.255.189:1433 SYN ******S* Oct 22 03:48:08 203.251.42.136:2006 -> xxx.yyy.255.195:1433 SYN ******S* 14176 Oct 22 23:51:33 218.155.247.248:3946 -> xxx.yyy.72.125:5554 SYN ******S* Oct 22 23:51:33 218.155.247.248:3945 -> xxx.yyy.72.124:5554 SYN ******S* Oct 22 23:51:34 218.155.247.248:1273 -> xxx.yyy.72.124:1023 SYN ******S* Oct 22 23:51:33 218.155.247.248:3948 -> xxx.yyy.72.127:5554 SYN ******S* Oct 22 23:51:34 218.155.247.248:1279 -> xxx.yyy.72.127:1023 SYN ******S* Oct 22 23:51:33 218.155.247.248:3996 -> xxx.yyy.72.130:5554 SYN ******S* Oct 22 23:51:34 218.155.247.248:1290 -> xxx.yyy.72.130:1023 SYN ******S* Oct 22 23:51:36 218.155.247.248:2739 -> xxx.yyy.72.130:9898 SYN ******S* [...] Oct 22 23:52:20 218.155.247.248:3608 -> xxx.yyy.92.168:9898 SYN ******S* Oct 22 23:52:20 218.155.247.248:3598 -> xxx.yyy.92.163:9898 SYN ******S* Oct 22 23:52:20 218.155.247.248:3628 -> xxx.yyy.92.169:9898 SYN ******S* Oct 22 23:52:20 218.155.247.248:3640 -> xxx.yyy.92.213:9898 SYN ******S* Oct 22 23:52:20 218.155.247.248:3661 -> xxx.yyy.92.209:9898 SYN ******S* Oct 22 23:52:20 218.155.247.248:3666 -> xxx.yyy.92.210:9898 SYN ******S* Oct 22 23:52:20 218.155.247.248:3705 -> xxx.yyy.92.214:9898 SYN ******S* Oct 22 23:52:20 218.155.247.248:4036 -> xxx.yyy.92.225:9898 SYN ******S* 11182 [...] 10416 Oct 22 23:55:30 220.78.217.184:2804 -> xxx.yyy.215.220:5554 SYN ******S* Oct 22 23:55:31 220.78.217.184:3302 -> xxx.yyy.215.220:1023 SYN ******S* Oct 22 23:55:33 220.78.217.184:4426 -> xxx.yyy.215.220:9898 SYN ******S* Oct 22 23:55:30 220.78.217.184:2805 -> xxx.yyy.215.221:5554 SYN ******S* Oct 22 23:55:31 220.78.217.184:3305 -> xxx.yyy.215.221:1023 SYN ******S* Oct 22 23:55:33 220.78.217.184:4429 -> xxx.yyy.215.221:9898 SYN ******S* Oct 22 23:55:30 220.78.217.184:2807 -> xxx.yyy.215.223:5554 SYN ******S* Oct 22 23:55:31 220.78.217.184:3303 -> xxx.yyy.215.223:1023 SYN ******S* [...] Oct 22 23:56:16 220.78.217.184:3461 -> xxx.yyy.236.40:9898 SYN ******S* Oct 22 23:56:16 220.78.217.184:3462 -> xxx.yyy.236.38:9898 SYN ******S* Oct 22 23:56:16 220.78.217.184:3471 -> xxx.yyy.236.45:9898 SYN ******S* Oct 22 23:56:16 220.78.217.184:3477 -> xxx.yyy.236.50:9898 SYN ******S* Oct 22 23:56:16 220.78.217.184:3479 -> xxx.yyy.236.52:9898 SYN ******S* Oct 22 23:56:16 220.78.217.184:3483 -> xxx.yyy.236.55:9898 SYN ******S* Oct 22 23:56:17 220.78.217.184:3608 -> xxx.yyy.236.69:9898 SYN ******S* Oct 22 23:56:17 220.78.217.184:3609 -> xxx.yyy.236.70:9898 SYN ******S* Oct 22 23:56:17 220.78.217.184:3616 -> xxx.yyy.236.73:9898 SYN ******S* 9715 Oct 22 00:34:00 221.154.168.173:2427 -> xxx.yyy.153.162:5554 SYN ******S* Oct 22 00:34:01 221.154.168.173:3013 -> xxx.yyy.153.162:1023 SYN ******S* Oct 22 00:34:00 221.154.168.173:2428 -> xxx.yyy.153.161:5554 SYN ******S* Oct 22 00:34:00 221.154.168.173:2429 -> xxx.yyy.153.160:5554 SYN ******S* Oct 22 00:34:01 221.154.168.173:2937 -> xxx.yyy.153.160:1023 SYN ******S* Oct 22 00:34:01 221.154.168.173:2430 -> xxx.yyy.153.159:5554 SYN ******S* Oct 22 00:34:00 221.154.168.173:2431 -> xxx.yyy.153.158:5554 SYN ******S* Oct 22 00:34:01 221.154.168.173:3016 -> xxx.yyy.153.158:1023 SYN ******S* [...] Oct 22 00:34:46 221.154.168.173:3768 -> xxx.yyy.173.253:9898 SYN ******S* Oct 22 00:34:46 221.154.168.173:3769 -> xxx.yyy.173.254:9898 SYN ******S* Oct 22 00:34:46 221.154.168.173:3770 -> xxx.yyy.173.255:9898 SYN ******S* Oct 22 00:35:26 221.154.168.173:1856 -> xxx.yyy.153.163:5554 SYN ******S* Oct 22 00:35:26 221.154.168.173:1857 -> xxx.yyy.153.164:5554 SYN ******S* Oct 22 00:35:27 221.154.168.173:2369 -> xxx.yyy.153.164:1023 SYN ******S* Oct 22 00:35:26 221.154.168.173:1858 -> xxx.yyy.153.165:5554 SYN ******S* Oct 22 00:35:27 221.154.168.173:2386 -> xxx.yyy.153.165:1023 SYN ******S* Oct 22 00:35:29 221.154.168.173:3417 -> xxx.yyy.153.165:9898 SYN ******S* 9619 [...] 9247 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions