[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0500. Oct 26 00:14:45 208.217.175.254:34378 -> xxx.yyy.1.1:1433 SYN ******S* Oct 26 00:14:45 208.217.175.254:34379 -> xxx.yyy.1.2:1433 SYN ******S* Oct 26 00:14:46 208.217.175.254:34380 -> xxx.yyy.1.3:1433 SYN ******S* Oct 26 00:14:45 208.217.175.254:34383 -> xxx.yyy.1.5:1433 SYN ******S* Oct 26 00:14:46 208.217.175.254:34386 -> xxx.yyy.1.7:1433 SYN ******S* Oct 26 00:14:43 208.217.175.254:34387 -> xxx.yyy.1.8:1433 SYN ******S* Oct 26 00:14:46 208.217.175.254:34394 -> xxx.yyy.1.11:1433 SYN ******S* Oct 26 00:14:46 208.217.175.254:34396 -> xxx.yyy.1.12:1433 SYN ******S* [...] Oct 26 04:03:44 208.217.175.254:52740 -> xxx.yyy.255.244:1433 SYN ******S* Oct 26 04:03:44 208.217.175.254:52737 -> xxx.yyy.255.241:1433 SYN ******S* Oct 26 04:03:44 208.217.175.254:52748 -> xxx.yyy.255.251:1433 SYN ******S* Oct 26 04:03:44 208.217.175.254:52752 -> xxx.yyy.255.254:1433 SYN ******S* Oct 26 04:03:44 208.217.175.254:52749 -> xxx.yyy.255.252:1433 SYN ******S* Oct 26 04:03:44 208.217.175.254:52746 -> xxx.yyy.255.249:1433 SYN ******S* Oct 26 04:03:44 208.217.175.254:52747 -> xxx.yyy.255.250:1433 SYN ******S* Oct 26 04:03:44 208.217.175.254:52751 -> xxx.yyy.255.253:1433 SYN ******S* 105053 Oct 26 04:16:42 216.240.150.254:1619 -> xxx.yyy.1.1:443 SYN ******S* Oct 26 04:16:42 216.240.150.254:1620 -> xxx.yyy.1.2:443 SYN ******S* Oct 26 04:16:44 216.240.150.254:1624 -> xxx.yyy.1.6:443 SYN ******S* Oct 26 04:16:44 216.240.150.254:1625 -> xxx.yyy.1.7:443 SYN ******S* Oct 26 04:16:44 216.240.150.254:1627 -> xxx.yyy.1.9:443 SYN ******S* Oct 26 04:16:42 216.240.150.254:1629 -> xxx.yyy.1.11:443 SYN ******S* Oct 26 04:16:44 216.240.150.254:1630 -> xxx.yyy.1.12:443 SYN ******S* Oct 26 04:16:41 216.240.150.254:1631 -> xxx.yyy.1.13:443 SYN ******S* [...] Oct 26 04:29:13 216.240.150.254:4072 -> xxx.yyy.255.247:443 SYN ******S* Oct 26 04:29:13 216.240.150.254:4073 -> xxx.yyy.255.248:443 SYN ******S* Oct 26 04:29:13 216.240.150.254:4074 -> xxx.yyy.255.249:443 SYN ******S* Oct 26 04:29:13 216.240.150.254:4075 -> xxx.yyy.255.250:443 SYN ******S* Oct 26 04:29:13 216.240.150.254:4071 -> xxx.yyy.255.246:443 SYN ******S* Oct 26 04:29:13 216.240.150.254:4076 -> xxx.yyy.255.251:443 SYN ******S* Oct 26 04:29:13 216.240.150.254:4077 -> xxx.yyy.255.252:443 SYN ******S* Oct 26 04:29:13 216.240.150.254:4079 -> xxx.yyy.255.254:443 SYN ******S* 67505 Oct 26 08:17:45 12.107.104.58:35669 -> xxx.yyy.1.1:1433 SYN ******S* Oct 26 08:17:45 12.107.104.58:35670 -> xxx.yyy.1.2:1433 SYN ******S* Oct 26 08:17:42 12.107.104.58:35671 -> xxx.yyy.1.3:1433 SYN ******S* Oct 26 08:17:45 12.107.104.58:35672 -> xxx.yyy.1.4:1433 SYN ******S* Oct 26 08:17:42 12.107.104.58:35673 -> xxx.yyy.1.5:1433 SYN ******S* Oct 26 08:17:42 12.107.104.58:35674 -> xxx.yyy.1.6:1433 SYN ******S* Oct 26 08:17:45 12.107.104.58:35675 -> xxx.yyy.1.7:1433 SYN ******S* Oct 26 08:17:45 12.107.104.58:35676 -> xxx.yyy.1.8:1433 SYN ******S* [...] Oct 26 09:11:05 12.107.104.58:53011 -> xxx.yyy.zzz.219:1433 SYN ******S* Oct 26 09:11:05 12.107.104.58:52976 -> xxx.yyy.zzz.184:1433 SYN ******S* Oct 26 09:11:05 12.107.104.58:52944 -> xxx.yyy.zzz.152:1433 SYN ******S* Oct 26 09:11:05 12.107.104.58:53024 -> xxx.yyy.zzz.232:1433 SYN ******S* Oct 26 09:11:05 12.107.104.58:53040 -> xxx.yyy.zzz.248:1433 SYN ******S* Oct 26 09:11:05 12.107.104.58:53008 -> xxx.yyy.zzz.216:1433 SYN ******S* Oct 26 09:11:05 12.107.104.58:52954 -> xxx.yyy.zzz.162:1433 SYN ******S* Oct 26 09:11:05 12.107.104.58:53018 -> xxx.yyy.zzz.226:1433 SYN ******S* Oct 26 09:11:05 12.107.104.58:53015 -> xxx.yyy.zzz.223:1433 SYN ******S* 64509 Oct 26 05:13:18 203.124.142.228:4293 -> xxx.yyy.1.1:8000 SYN ******S* Oct 26 05:13:18 203.124.142.228:4294 -> xxx.yyy.1.2:8000 SYN ******S* Oct 26 05:13:18 203.124.142.228:4295 -> xxx.yyy.1.3:8000 SYN ******S* Oct 26 05:13:19 203.124.142.228:4296 -> xxx.yyy.1.4:8000 SYN ******S* Oct 26 05:13:19 203.124.142.228:4297 -> xxx.yyy.1.5:8000 SYN ******S* Oct 26 05:13:19 203.124.142.228:4298 -> xxx.yyy.1.6:8000 SYN ******S* Oct 26 05:13:19 203.124.142.228:4299 -> xxx.yyy.1.7:8000 SYN ******S* Oct 26 05:13:19 203.124.142.228:4302 -> xxx.yyy.1.10:8000 SYN ******S* [...] Oct 26 05:30:45 203.124.142.228:2444 -> xxx.yyy.255.210:8000 SYN ******S* Oct 26 05:30:45 203.124.142.228:2412 -> xxx.yyy.255.178:8000 SYN ******S* Oct 26 05:30:45 203.124.142.228:2457 -> xxx.yyy.255.223:8000 SYN ******S* Oct 26 05:30:45 203.124.142.228:2329 -> xxx.yyy.255.159:8000 SYN ******S* Oct 26 05:30:45 203.124.142.228:2425 -> xxx.yyy.255.191:8000 SYN ******S* Oct 26 05:30:46 203.124.142.228:2468 -> xxx.yyy.255.234:8000 SYN ******S* Oct 26 05:30:46 203.124.142.228:2465 -> xxx.yyy.255.231:8000 SYN ******S* Oct 26 05:30:46 203.124.142.228:2466 -> xxx.yyy.255.232:8000 SYN ******S* Oct 26 05:30:46 203.124.142.228:2467 -> xxx.yyy.255.233:8000 SYN ******S* 60718 Oct 26 02:16:21 193.163.220.58:55781 -> xxx.yyy.241.101:36378 SYN ******S* Oct 26 02:16:21 193.163.220.58:55782 -> xxx.yyy.241.101:64202 SYN ******S* Oct 26 02:16:21 193.163.220.58:55783 -> xxx.yyy.241.101:46381 SYN ******S* Oct 26 02:16:21 193.163.220.58:55784 -> xxx.yyy.241.101:12385 SYN ******S* Oct 26 02:16:21 193.163.220.58:55785 -> xxx.yyy.241.101:31583 SYN ******S* Oct 26 02:16:21 193.163.220.58:55786 -> xxx.yyy.241.101:55291 SYN ******S* Oct 26 02:16:21 193.163.220.58:55787 -> xxx.yyy.241.101:6099 SYN ******S* Oct 26 02:16:21 193.163.220.58:55788 -> xxx.yyy.241.101:4248 SYN ******S* [...] Oct 26 02:24:02 193.163.220.58:60632 -> xxx.yyy.241.101:6001 SYN ******S* Oct 26 02:24:02 193.163.220.58:60635 -> xxx.yyy.241.101:143 SYN ******S* Oct 26 02:24:02 193.163.220.58:60636 -> xxx.yyy.241.101:6033 SYN ******S* Oct 26 02:24:02 193.163.220.58:60637 -> xxx.yyy.241.101:6049 SYN ******S* Oct 26 02:24:02 193.163.220.58:60639 -> xxx.yyy.241.101:138 SYN ******S* Oct 26 02:24:02 193.163.220.58:60640 -> xxx.yyy.241.101:27374 SYN ******S* Oct 26 02:24:03 193.163.220.58:65059 -> xxx.yyy.241.101:3389 SYN ******S* Oct 26 02:24:03 193.163.220.58:65060 -> xxx.yyy.241.101:14321 SYN ******S* 57018 [...] 54535 Oct 26 00:29:40 208.144.224.203:4685 -> xxx.yyy.1.1:1433 SYN ******S* Oct 26 00:29:43 208.144.224.203:4697 -> xxx.yyy.1.2:1433 SYN ******S* Oct 26 00:29:40 208.144.224.203:4713 -> xxx.yyy.1.3:1433 SYN ******S* Oct 26 00:29:40 208.144.224.203:4727 -> xxx.yyy.1.4:1433 SYN ******S* Oct 26 00:29:43 208.144.224.203:4745 -> xxx.yyy.1.5:1433 SYN ******S* Oct 26 00:29:43 208.144.224.203:4775 -> xxx.yyy.1.7:1433 SYN ******S* Oct 26 00:29:40 208.144.224.203:4793 -> xxx.yyy.1.8:1433 SYN ******S* Oct 26 00:29:40 208.144.224.203:4810 -> xxx.yyy.1.9:1433 SYN ******S* [...] Oct 26 00:42:36 208.144.224.203:3822 -> xxx.yyy.255.178:1433 SYN ******S* Oct 26 00:42:36 208.144.224.203:3732 -> xxx.yyy.255.173:1433 SYN ******S* Oct 26 00:42:36 208.144.224.203:3850 -> xxx.yyy.255.206:1433 SYN ******S* Oct 26 00:42:36 208.144.224.203:3857 -> xxx.yyy.255.213:1433 SYN ******S* Oct 26 00:42:36 208.144.224.203:3862 -> xxx.yyy.255.218:1433 SYN ******S* Oct 26 00:42:36 208.144.224.203:3859 -> xxx.yyy.255.215:1433 SYN ******S* Oct 26 00:42:36 208.144.224.203:3876 -> xxx.yyy.255.232:1433 SYN ******S* Oct 26 00:42:36 208.144.224.203:3894 -> xxx.yyy.255.246:1433 SYN ******S* Oct 26 00:42:36 208.144.224.203:3901 -> xxx.yyy.255.250:1433 SYN ******S* 51015 Oct 26 09:20:47 221.9.105.181:3927 -> xxx.yyy.1.0:1433 SYN ******S* Oct 26 09:20:50 221.9.105.181:3928 -> xxx.yyy.1.1:1433 SYN ******S* Oct 26 09:20:50 221.9.105.181:3931 -> xxx.yyy.1.2:1433 SYN ******S* Oct 26 09:20:50 221.9.105.181:3934 -> xxx.yyy.1.3:1433 SYN ******S* Oct 26 09:20:50 221.9.105.181:3938 -> xxx.yyy.1.4:1433 SYN ******S* Oct 26 09:20:47 221.9.105.181:3942 -> xxx.yyy.1.5:1433 SYN ******S* Oct 26 09:20:47 221.9.105.181:3943 -> xxx.yyy.1.6:1433 SYN ******S* Oct 26 09:20:50 221.9.105.181:3962 -> xxx.yyy.1.7:1433 SYN ******S* [...] Oct 26 12:24:56 221.9.105.181:4143 -> xxx.yyy.255.236:1433 SYN ******S* Oct 26 12:24:56 221.9.105.181:4256 -> xxx.yyy.255.237:1433 SYN ******S* Oct 26 12:24:56 221.9.105.181:4526 -> xxx.yyy.255.238:1433 SYN ******S* Oct 26 12:24:57 221.9.105.181:3604 -> xxx.yyy.255.242:1433 SYN ******S* Oct 26 12:24:59 221.9.105.181:3912 -> xxx.yyy.255.246:1433 SYN ******S* Oct 26 12:24:59 221.9.105.181:3983 -> xxx.yyy.255.248:1433 SYN ******S* Oct 26 12:24:59 221.9.105.181:4341 -> xxx.yyy.255.249:1433 SYN ******S* Oct 26 12:24:59 221.9.105.181:4376 -> xxx.yyy.255.250:1433 SYN ******S* Oct 26 12:24:59 221.9.105.181:4662 -> xxx.yyy.255.254:1433 SYN ******S* 47218 Oct 26 05:48:21 211.33.174.220:2093 -> xxx.yyy.1.1:4899 SYN ******S* Oct 26 05:48:21 211.33.174.220:2094 -> xxx.yyy.1.2:4899 SYN ******S* Oct 26 05:48:19 211.33.174.220:2096 -> xxx.yyy.1.4:4899 SYN ******S* Oct 26 05:48:19 211.33.174.220:2097 -> xxx.yyy.1.5:4899 SYN ******S* Oct 26 05:48:21 211.33.174.220:2095 -> xxx.yyy.1.3:4899 SYN ******S* Oct 26 05:48:19 211.33.174.220:2099 -> xxx.yyy.1.7:4899 SYN ******S* Oct 26 05:48:19 211.33.174.220:2098 -> xxx.yyy.1.6:4899 SYN ******S* Oct 26 05:48:21 211.33.174.220:2103 -> xxx.yyy.1.11:4899 SYN ******S* [...] Oct 26 05:55:29 211.33.174.220:2163 -> xxx.yyy.255.243:4899 SYN ******S* Oct 26 05:55:29 211.33.174.220:2165 -> xxx.yyy.255.245:4899 SYN ******S* Oct 26 05:55:29 211.33.174.220:2166 -> xxx.yyy.255.246:4899 SYN ******S* Oct 26 05:55:29 211.33.174.220:2168 -> xxx.yyy.255.248:4899 SYN ******S* Oct 26 05:55:29 211.33.174.220:2169 -> xxx.yyy.255.249:4899 SYN ******S* Oct 26 05:55:29 211.33.174.220:2170 -> xxx.yyy.255.250:4899 SYN ******S* Oct 26 05:55:29 211.33.174.220:2173 -> xxx.yyy.255.253:4899 SYN ******S* Oct 26 05:55:29 211.33.174.220:2174 -> xxx.yyy.255.254:4899 SYN ******S* 43422 Oct 26 10:09:04 169.226.28.104:2650 -> xxx.yyy.1.1:6129 SYN ******S* Oct 26 10:09:04 169.226.28.104:2651 -> xxx.yyy.1.2:6129 SYN ******S* Oct 26 10:09:04 169.226.28.104:2652 -> xxx.yyy.1.3:6129 SYN ******S* Oct 26 10:09:05 169.226.28.104:2653 -> xxx.yyy.1.4:6129 SYN ******S* Oct 26 10:09:05 169.226.28.104:2654 -> xxx.yyy.1.5:6129 SYN ******S* Oct 26 10:09:05 169.226.28.104:2656 -> xxx.yyy.1.7:6129 SYN ******S* Oct 26 10:09:05 169.226.28.104:2657 -> xxx.yyy.1.8:6129 SYN ******S* Oct 26 10:09:05 169.226.28.104:2658 -> xxx.yyy.1.9:6129 SYN ******S* [...] Oct 26 10:20:22 169.226.28.104:4127 -> xxx.yyy.255.220:6129 SYN ******S* Oct 26 10:20:22 169.226.28.104:4128 -> xxx.yyy.255.221:6129 SYN ******S* Oct 26 10:20:22 169.226.28.104:4124 -> xxx.yyy.255.217:6129 SYN ******S* Oct 26 10:20:22 169.226.28.104:4137 -> xxx.yyy.255.230:6129 SYN ******S* Oct 26 10:20:22 169.226.28.104:4141 -> xxx.yyy.255.234:6129 SYN ******S* Oct 26 10:20:22 169.226.28.104:4139 -> xxx.yyy.255.232:6129 SYN ******S* Oct 26 10:20:22 169.226.28.104:4136 -> xxx.yyy.255.229:6129 SYN ******S* Oct 26 10:20:22 169.226.28.104:4135 -> xxx.yyy.255.228:6129 SYN ******S* 41944 Oct 26 19:13:13 193.255.139.103:3194 -> xxx.yyy.1.2:1433 SYN ******S* Oct 26 19:13:13 193.255.139.103:3196 -> xxx.yyy.1.4:1433 SYN ******S* Oct 26 19:13:13 193.255.139.103:3197 -> xxx.yyy.1.5:1433 SYN ******S* Oct 26 19:13:14 193.255.139.103:3198 -> xxx.yyy.1.6:1433 SYN ******S* Oct 26 19:13:17 193.255.139.103:3203 -> xxx.yyy.1.11:1433 SYN ******S* Oct 26 19:13:17 193.255.139.103:3204 -> xxx.yyy.1.12:1433 SYN ******S* Oct 26 19:13:17 193.255.139.103:3205 -> xxx.yyy.1.13:1433 SYN ******S* Oct 26 19:13:17 193.255.139.103:3206 -> xxx.yyy.1.14:1433 SYN ******S* [...] Oct 26 19:25:00 193.255.139.103:2359 -> xxx.yyy.255.219:1433 SYN ******S* Oct 26 19:25:00 193.255.139.103:2356 -> xxx.yyy.255.216:1433 SYN ******S* Oct 26 19:25:00 193.255.139.103:2353 -> xxx.yyy.255.213:1433 SYN ******S* Oct 26 19:25:00 193.255.139.103:2360 -> xxx.yyy.255.220:1433 SYN ******S* Oct 26 19:25:00 193.255.139.103:2357 -> xxx.yyy.255.217:1433 SYN ******S* Oct 26 19:25:00 193.255.139.103:2355 -> xxx.yyy.255.215:1433 SYN ******S* Oct 26 19:25:00 193.255.139.103:2358 -> xxx.yyy.255.218:1433 SYN ******S* Oct 26 19:25:01 193.255.139.103:2384 -> xxx.yyy.255.244:1433 SYN ******S* Oct 26 19:25:01 193.255.139.103:2381 -> xxx.yyy.255.241:1433 SYN ******S* 41833 Oct 26 00:19:11 62.58.50.220:45726 -> xxx.yyy.241.101:6796 SYN ******S* Oct 26 00:19:11 62.58.50.220:45760 -> xxx.yyy.241.101:7212 SYN ******S* Oct 26 00:19:11 62.58.50.220:45762 -> xxx.yyy.241.101:8080 SYN ******S* Oct 26 00:19:11 62.58.50.220:45763 -> xxx.yyy.241.101:9321 SYN ******S* Oct 26 00:19:11 62.58.50.220:45764 -> xxx.yyy.241.101:10103 SYN ******S* Oct 26 00:19:11 62.58.50.220:45766 -> xxx.yyy.241.101:11220 SYN ******S* Oct 26 00:19:11 62.58.50.220:45732 -> xxx.yyy.241.101:12501 SYN ******S* Oct 26 00:19:11 62.58.50.220:45733 -> xxx.yyy.241.101:12654 SYN ******S* [...] Oct 26 00:38:11 62.58.50.220:46288 -> xxx.yyy.241.101:61239 SYN ******S* Oct 26 00:38:11 62.58.50.220:46488 -> xxx.yyy.241.101:62059 SYN ******S* Oct 26 00:38:11 62.58.50.220:46490 -> xxx.yyy.241.101:58769 SYN ******S* Oct 26 00:38:11 62.58.50.220:46507 -> xxx.yyy.241.101:59302 SYN ******S* Oct 26 00:38:11 62.58.50.220:46514 -> xxx.yyy.241.101:63917 SYN ******S* Oct 26 00:38:11 62.58.50.220:46524 -> xxx.yyy.241.101:62341 SYN ******S* Oct 26 00:38:11 62.58.50.220:46541 -> xxx.yyy.241.101:61952 SYN ******S* Oct 26 00:38:11 62.58.50.220:46579 -> xxx.yyy.241.101:58176 SYN ******S* 40064 Oct 26 11:01:28 219.151.39.129:2970 -> xxx.yyy.1.0:1433 SYN ******S* Oct 26 11:01:28 219.151.39.129:2973 -> xxx.yyy.1.3:1433 SYN ******S* Oct 26 11:01:28 219.151.39.129:2978 -> xxx.yyy.1.8:1433 SYN ******S* Oct 26 11:01:28 219.151.39.129:2981 -> xxx.yyy.1.11:1433 SYN ******S* Oct 26 11:01:28 219.151.39.129:2983 -> xxx.yyy.1.13:1433 SYN ******S* Oct 26 11:01:31 219.151.39.129:2991 -> xxx.yyy.1.21:1433 SYN ******S* Oct 26 11:01:31 219.151.39.129:3006 -> xxx.yyy.1.36:1433 SYN ******S* Oct 26 11:01:28 219.151.39.129:3010 -> xxx.yyy.1.40:1433 SYN ******S* [...] Oct 26 14:58:56 219.151.39.129:3431 -> xxx.yyy.255.254:1433 SYN ******S* Oct 26 14:58:58 219.151.39.129:3359 -> xxx.yyy.255.226:1433 SYN ******S* Oct 26 14:58:58 219.151.39.129:3341 -> xxx.yyy.255.223:1433 SYN ******S* Oct 26 14:58:59 219.151.39.129:3388 -> xxx.yyy.255.234:1433 SYN ******S* Oct 26 14:59:00 219.151.39.129:3415 -> xxx.yyy.255.240:1433 SYN ******S* Oct 26 14:59:01 219.151.39.129:3407 -> xxx.yyy.255.239:1433 SYN ******S* Oct 26 14:59:01 219.151.39.129:3430 -> xxx.yyy.255.253:1433 SYN ******S* Oct 26 14:59:01 219.151.39.129:3421 -> xxx.yyy.255.246:1433 SYN ******S* 39270 Oct 26 00:21:50 24.205.227.37:4846 -> xxx.yyy.32.144:1433 SYN ******S* Oct 26 00:21:50 24.205.227.37:4858 -> xxx.yyy.32.145:1433 SYN ******S* Oct 26 00:21:49 24.205.227.37:4808 -> xxx.yyy.32.142:1433 SYN ******S* Oct 26 00:21:51 24.205.227.37:4815 -> xxx.yyy.32.143:1433 SYN ******S* Oct 26 00:21:56 24.205.227.37:4870 -> xxx.yyy.32.146:1433 SYN ******S* Oct 26 00:21:56 24.205.227.37:4846 -> xxx.yyy.32.144:1433 SYN ******S* Oct 26 00:21:56 24.205.227.37:4858 -> xxx.yyy.32.145:1433 SYN ******S* Oct 26 00:22:01 24.205.227.37:4885 -> xxx.yyy.32.147:1433 SYN ******S* [...] Oct 26 23:59:51 24.205.227.37:4993 -> xxx.yyy.185.89:1433 SYN ******S* Oct 26 23:59:51 24.205.227.37:4989 -> xxx.yyy.185.85:1433 SYN ******S* Oct 26 23:59:56 24.205.227.37:4995 -> xxx.yyy.185.91:1433 SYN ******S* Oct 26 23:59:56 24.205.227.37:4996 -> xxx.yyy.185.92:1433 SYN ******S* Oct 26 23:59:56 24.205.227.37:4997 -> xxx.yyy.185.93:1433 SYN ******S* Oct 26 23:59:54 24.205.227.37:4993 -> xxx.yyy.185.89:1433 SYN ******S* Oct 26 23:59:57 24.205.227.37:4991 -> xxx.yyy.185.87:1433 SYN ******S* Oct 27 00:00:00 24.205.227.37:4992 -> xxx.yyy.185.88:1433 SYN ******S* Oct 27 00:00:00 24.205.227.37:4993 -> xxx.yyy.185.89:1433 SYN ******S* 38995 Oct 26 16:52:19 67.127.19.124:3069 -> xxx.yyy.1.2:1433 SYN ******S* Oct 26 16:52:16 67.127.19.124:3071 -> xxx.yyy.1.4:1433 SYN ******S* Oct 26 16:52:19 67.127.19.124:3072 -> xxx.yyy.1.5:1433 SYN ******S* Oct 26 16:52:19 67.127.19.124:3073 -> xxx.yyy.1.6:1433 SYN ******S* Oct 26 16:52:19 67.127.19.124:3074 -> xxx.yyy.1.7:1433 SYN ******S* Oct 26 16:52:19 67.127.19.124:3082 -> xxx.yyy.1.15:1433 SYN ******S* Oct 26 16:52:16 67.127.19.124:3087 -> xxx.yyy.1.20:1433 SYN ******S* Oct 26 16:52:19 67.127.19.124:3088 -> xxx.yyy.1.21:1433 SYN ******S* [...] Oct 26 17:03:14 67.127.19.124:2157 -> xxx.yyy.255.233:1433 SYN ******S* Oct 26 17:03:14 67.127.19.124:2164 -> xxx.yyy.255.240:1433 SYN ******S* Oct 26 17:03:14 67.127.19.124:2161 -> xxx.yyy.255.237:1433 SYN ******S* Oct 26 17:03:14 67.127.19.124:2162 -> xxx.yyy.255.238:1433 SYN ******S* Oct 26 17:03:14 67.127.19.124:2159 -> xxx.yyy.255.235:1433 SYN ******S* Oct 26 17:03:14 67.127.19.124:2173 -> xxx.yyy.255.249:1433 SYN ******S* Oct 26 17:03:14 67.127.19.124:2170 -> xxx.yyy.255.246:1433 SYN ******S* Oct 26 17:03:14 67.127.19.124:2174 -> xxx.yyy.255.250:1433 SYN ******S* Oct 26 17:03:14 67.127.19.124:2177 -> xxx.yyy.255.253:1433 SYN ******S* 38219 Oct 26 22:20:46 24.229.139.200:1884 -> xxx.yyy.1.8:4899 SYN ******S* Oct 26 22:20:46 24.229.139.200:1896 -> xxx.yyy.1.10:4899 SYN ******S* Oct 26 22:20:47 24.229.139.200:1903 -> xxx.yyy.1.13:4899 SYN ******S* Oct 26 22:20:47 24.229.139.200:1914 -> xxx.yyy.1.15:4899 SYN ******S* Oct 26 22:20:47 24.229.139.200:1935 -> xxx.yyy.1.25:4899 SYN ******S* Oct 26 22:20:47 24.229.139.200:1945 -> xxx.yyy.1.34:4899 SYN ******S* Oct 26 22:20:47 24.229.139.200:1956 -> xxx.yyy.1.45:4899 SYN ******S* Oct 26 22:20:47 24.229.139.200:1966 -> xxx.yyy.1.55:4899 SYN ******S* [...] Oct 26 22:33:05 24.229.139.200:1316 -> xxx.yyy.255.219:4899 SYN ******S* Oct 26 22:33:05 24.229.139.200:1312 -> xxx.yyy.255.215:4899 SYN ******S* Oct 26 22:33:05 24.229.139.200:1311 -> xxx.yyy.255.214:4899 SYN ******S* Oct 26 22:33:05 24.229.139.200:1309 -> xxx.yyy.255.212:4899 SYN ******S* Oct 26 22:33:05 24.229.139.200:1302 -> xxx.yyy.255.205:4899 SYN ******S* Oct 26 22:33:05 24.229.139.200:1350 -> xxx.yyy.255.253:4899 SYN ******S* Oct 26 22:33:05 24.229.139.200:1349 -> xxx.yyy.255.252:4899 SYN ******S* Oct 26 22:33:05 24.229.139.200:1341 -> xxx.yyy.255.244:4899 SYN ******S* 36213 Oct 26 08:28:27 66.51.223.133:1798 -> xxx.yyy.1.2:1433 SYN ******S* Oct 26 08:28:27 66.51.223.133:1805 -> xxx.yyy.1.9:1433 SYN ******S* Oct 26 08:28:27 66.51.223.133:1807 -> xxx.yyy.1.11:1433 SYN ******S* Oct 26 08:28:27 66.51.223.133:1810 -> xxx.yyy.1.14:1433 SYN ******S* Oct 26 08:28:27 66.51.223.133:1811 -> xxx.yyy.1.15:1433 SYN ******S* Oct 26 08:28:27 66.51.223.133:1820 -> xxx.yyy.1.24:1433 SYN ******S* Oct 26 08:28:27 66.51.223.133:1826 -> xxx.yyy.1.30:1433 SYN ******S* Oct 26 08:28:27 66.51.223.133:1829 -> xxx.yyy.1.33:1433 SYN ******S* [...] Oct 26 08:32:47 66.51.223.133:4957 -> xxx.yyy.255.210:1433 SYN ******S* Oct 26 08:32:47 66.51.223.133:1054 -> xxx.yyy.255.254:1433 SYN ******S* Oct 26 08:32:47 66.51.223.133:1047 -> xxx.yyy.255.248:1433 SYN ******S* Oct 26 08:32:47 66.51.223.133:1044 -> xxx.yyy.255.245:1433 SYN ******S* Oct 26 08:32:47 66.51.223.133:4952 -> xxx.yyy.255.208:1433 SYN ******S* Oct 26 08:32:47 66.51.223.133:1028 -> xxx.yyy.255.229:1433 SYN ******S* Oct 26 08:32:47 66.51.223.133:4970 -> xxx.yyy.255.216:1433 SYN ******S* Oct 26 08:32:47 66.51.223.133:1038 -> xxx.yyy.255.239:1433 SYN ******S* Oct 26 08:32:47 66.51.223.133:1035 -> xxx.yyy.255.236:1433 SYN ******S* 35449 [...] 11251 [...] 9131 Oct 26 09:23:55 221.157.13.1:2904 -> xxx.yyy.1.4:4899 SYN ******S* Oct 26 09:23:55 221.157.13.1:2905 -> xxx.yyy.1.5:4899 SYN ******S* Oct 26 09:23:57 221.157.13.1:2903 -> xxx.yyy.1.3:4899 SYN ******S* Oct 26 09:23:55 221.157.13.1:2908 -> xxx.yyy.1.8:4899 SYN ******S* Oct 26 09:23:55 221.157.13.1:2907 -> xxx.yyy.1.7:4899 SYN ******S* Oct 26 09:23:55 221.157.13.1:2909 -> xxx.yyy.1.9:4899 SYN ******S* Oct 26 09:23:57 221.157.13.1:2914 -> xxx.yyy.1.14:4899 SYN ******S* Oct 26 09:23:55 221.157.13.1:2912 -> xxx.yyy.1.12:4899 SYN ******S* [...] Oct 26 09:26:36 221.157.13.1:1607 -> xxx.yyy.183.144:4899 SYN ******S* Oct 26 09:26:36 221.157.13.1:1620 -> xxx.yyy.183.157:4899 SYN ******S* Oct 26 09:26:36 221.157.13.1:1608 -> xxx.yyy.183.145:4899 SYN ******S* Oct 26 09:26:36 221.157.13.1:1622 -> xxx.yyy.183.159:4899 SYN ******S* Oct 26 09:26:36 221.157.13.1:1623 -> xxx.yyy.183.160:4899 SYN ******S* Oct 26 09:26:36 221.157.13.1:1611 -> xxx.yyy.183.148:4899 SYN ******S* Oct 26 09:26:36 221.157.13.1:1610 -> xxx.yyy.183.147:4899 SYN ******S* Oct 26 09:26:36 221.157.13.1:1624 -> xxx.yyy.183.161:4899 SYN ******S* 8666 Oct 26 00:06:45 60.35.228.63:3204 -> xxx.yyy.133.19:5554 SYN ******S* Oct 26 00:06:46 60.35.228.63:3240 -> xxx.yyy.133.19:1023 SYN ******S* Oct 26 00:06:45 60.35.228.63:3225 -> xxx.yyy.134.185:5554 SYN ******S* Oct 26 00:06:45 60.35.228.63:3232 -> xxx.yyy.134.191:5554 SYN ******S* Oct 26 00:06:46 60.35.228.63:3272 -> xxx.yyy.134.191:1023 SYN ******S* Oct 26 00:06:49 60.35.228.63:3338 -> xxx.yyy.134.191:9898 SYN ******S* Oct 26 00:06:46 60.35.228.63:3238 -> xxx.yyy.133.17:1023 SYN ******S* Oct 26 00:06:48 60.35.228.63:3305 -> xxx.yyy.133.17:9898 SYN ******S* [...] Oct 26 00:17:07 60.35.228.63:4688 -> xxx.yyy.134.173:9898 SYN ******S* Oct 26 00:17:07 60.35.228.63:4689 -> xxx.yyy.134.174:9898 SYN ******S* Oct 26 00:17:07 60.35.228.63:4690 -> xxx.yyy.134.175:9898 SYN ******S* Oct 26 00:17:07 60.35.228.63:4691 -> xxx.yyy.134.176:9898 SYN ******S* Oct 26 00:17:07 60.35.228.63:4692 -> xxx.yyy.134.177:9898 SYN ******S* Oct 26 00:17:08 60.35.228.63:4707 -> xxx.yyy.134.179:9898 SYN ******S* Oct 26 00:17:08 60.35.228.63:4710 -> xxx.yyy.134.182:9898 SYN ******S* Oct 26 00:17:08 60.35.228.63:4731 -> xxx.yyy.134.163:9898 SYN ******S* 8454 Oct 26 23:52:43 220.92.156.151:1235 -> xxx.yyy.214.249:5554 SYN ******S* Oct 26 23:52:44 220.92.156.151:1823 -> xxx.yyy.214.249:1023 SYN ******S* Oct 26 23:52:43 220.92.156.151:1232 -> xxx.yyy.214.246:5554 SYN ******S* Oct 26 23:52:44 220.92.156.151:1820 -> xxx.yyy.214.246:1023 SYN ******S* Oct 26 23:52:43 220.92.156.151:1241 -> xxx.yyy.215.0:5554 SYN ******S* Oct 26 23:52:44 220.92.156.151:1826 -> xxx.yyy.215.0:1023 SYN ******S* Oct 26 23:52:43 220.92.156.151:1233 -> xxx.yyy.214.247:5554 SYN ******S* Oct 26 23:52:44 220.92.156.151:1821 -> xxx.yyy.214.247:1023 SYN ******S* [...] Oct 26 23:53:30 220.92.156.151:2573 -> xxx.yyy.235.31:9898 SYN ******S* Oct 26 23:53:30 220.92.156.151:2599 -> xxx.yyy.235.43:9898 SYN ******S* Oct 26 23:53:30 220.92.156.151:2606 -> xxx.yyy.235.47:9898 SYN ******S* Oct 26 23:53:30 220.92.156.151:2668 -> xxx.yyy.235.64:9898 SYN ******S* Oct 26 23:53:30 220.92.156.151:2664 -> xxx.yyy.235.61:9898 SYN ******S* Oct 26 23:53:30 220.92.156.151:2683 -> xxx.yyy.235.68:9898 SYN ******S* Oct 26 23:53:30 220.92.156.151:2703 -> xxx.yyy.235.80:9898 SYN ******S* Oct 26 23:53:30 220.92.156.151:2745 -> xxx.yyy.235.109:9898 SYN ******S* 8008 Oct 26 23:56:41 220.86.29.206:1295 -> xxx.yyy.133.248:5554 SYN ******S* Oct 26 23:56:41 220.86.29.206:1301 -> xxx.yyy.133.250:5554 SYN ******S* Oct 26 23:56:41 220.86.29.206:1312 -> xxx.yyy.134.0:5554 SYN ******S* Oct 26 23:56:42 220.86.29.206:1585 -> xxx.yyy.134.0:1023 SYN ******S* Oct 26 23:56:41 220.86.29.206:1317 -> xxx.yyy.133.253:5554 SYN ******S* Oct 26 23:56:41 220.86.29.206:1318 -> xxx.yyy.134.1:5554 SYN ******S* Oct 26 23:56:44 220.86.29.206:2168 -> xxx.yyy.134.1:9898 SYN ******S* Oct 26 23:56:41 220.86.29.206:1358 -> xxx.yyy.134.6:5554 SYN ******S* [...] Oct 26 23:58:59 220.86.29.206:2069 -> xxx.yyy.154.97:9898 SYN ******S* Oct 26 23:58:59 220.86.29.206:2068 -> xxx.yyy.154.96:9898 SYN ******S* Oct 26 23:58:59 220.86.29.206:2072 -> xxx.yyy.154.78:9898 SYN ******S* Oct 26 23:58:59 220.86.29.206:2073 -> xxx.yyy.154.79:9898 SYN ******S* Oct 26 23:58:59 220.86.29.206:2075 -> xxx.yyy.154.80:9898 SYN ******S* Oct 26 23:58:59 220.86.29.206:2078 -> xxx.yyy.154.82:9898 SYN ******S* Oct 26 23:58:59 220.86.29.206:2071 -> xxx.yyy.154.76:9898 SYN ******S* Oct 26 23:58:59 220.86.29.206:2076 -> xxx.yyy.154.81:9898 SYN ******S* Oct 26 23:58:59 220.86.29.206:2079 -> xxx.yyy.154.83:9898 SYN ******S* 6636 Oct 26 00:56:07 218.76.0.31:1911 -> xxx.yyy.133.16:5554 SYN ******S* Oct 26 00:56:08 218.76.0.31:2392 -> xxx.yyy.133.16:1023 SYN ******S* Oct 26 00:56:07 218.76.0.31:1916 -> xxx.yyy.133.21:5554 SYN ******S* Oct 26 00:56:10 218.76.0.31:3317 -> xxx.yyy.133.21:9898 SYN ******S* Oct 26 00:56:07 218.76.0.31:1964 -> xxx.yyy.133.69:5554 SYN ******S* Oct 26 00:56:10 218.76.0.31:3361 -> xxx.yyy.133.69:9898 SYN ******S* Oct 26 00:56:07 218.76.0.31:1909 -> xxx.yyy.133.14:5554 SYN ******S* Oct 26 00:56:08 218.76.0.31:2390 -> xxx.yyy.133.14:1023 SYN ******S* [...] Oct 26 00:57:36 218.76.0.31:1265 -> xxx.yyy.92.216:9898 SYN ******S* Oct 26 00:57:36 218.76.0.31:3869 -> xxx.yyy.92.229:1023 SYN ******S* Oct 26 00:57:38 218.76.0.31:1305 -> xxx.yyy.92.229:9898 SYN ******S* Oct 26 00:57:36 218.76.0.31:3870 -> xxx.yyy.92.230:1023 SYN ******S* Oct 26 00:57:36 218.76.0.31:1311 -> xxx.yyy.92.235:9898 SYN ******S* Oct 26 00:57:36 218.76.0.31:1315 -> xxx.yyy.92.239:9898 SYN ******S* Oct 26 00:57:36 218.76.0.31:4744 -> xxx.yyy.92.85:9898 SYN ******S* Oct 26 00:57:37 218.76.0.31:1222 -> xxx.yyy.92.183:9898 SYN ******S* Oct 26 00:57:37 218.76.0.31:1319 -> xxx.yyy.92.243:9898 SYN ******S* 6543 Oct 26 00:56:16 218.61.9.252:2223 -> xxx.yyy.153.137:5554 SYN ******S* Oct 26 00:56:19 218.61.9.252:2869 -> xxx.yyy.153.137:9898 SYN ******S* Oct 26 00:56:16 218.61.9.252:2226 -> xxx.yyy.153.136:5554 SYN ******S* Oct 26 00:56:16 218.61.9.252:2222 -> xxx.yyy.153.142:5554 SYN ******S* Oct 26 00:56:16 218.61.9.252:2228 -> xxx.yyy.153.143:5554 SYN ******S* Oct 26 00:56:17 218.61.9.252:2505 -> xxx.yyy.153.143:1023 SYN ******S* Oct 26 00:56:19 218.61.9.252:2883 -> xxx.yyy.153.143:9898 SYN ******S* Oct 26 00:56:16 218.61.9.252:2240 -> xxx.yyy.153.146:5554 SYN ******S* [...] Oct 26 00:58:09 218.61.9.252:4194 -> xxx.yyy.173.249:9898 SYN ******S* Oct 26 00:58:09 218.61.9.252:4195 -> xxx.yyy.173.250:9898 SYN ******S* Oct 26 00:58:09 218.61.9.252:4196 -> xxx.yyy.173.251:9898 SYN ******S* Oct 26 00:58:09 218.61.9.252:4197 -> xxx.yyy.173.252:9898 SYN ******S* Oct 26 00:58:09 218.61.9.252:4198 -> xxx.yyy.173.253:9898 SYN ******S* Oct 26 00:58:09 218.61.9.252:4199 -> xxx.yyy.173.254:9898 SYN ******S* Oct 26 00:58:09 218.61.9.252:4204 -> xxx.yyy.174.2:9898 SYN ******S* Oct 26 00:58:09 218.61.9.252:4201 -> xxx.yyy.174.0:9898 SYN ******S* 6132 Oct 26 23:58:41 221.160.38.51:1336 -> xxx.yyy.174.224:5554 SYN ******S* Oct 26 23:58:42 221.160.38.51:1532 -> xxx.yyy.174.224:1023 SYN ******S* Oct 26 23:58:44 221.160.38.51:1914 -> xxx.yyy.174.224:9898 SYN ******S* Oct 26 23:58:41 221.160.38.51:1334 -> xxx.yyy.174.222:5554 SYN ******S* Oct 26 23:58:42 221.160.38.51:1530 -> xxx.yyy.174.222:1023 SYN ******S* Oct 26 23:58:44 221.160.38.51:1912 -> xxx.yyy.174.222:9898 SYN ******S* Oct 26 23:58:41 221.160.38.51:1335 -> xxx.yyy.174.223:5554 SYN ******S* Oct 26 23:58:44 221.160.38.51:1913 -> xxx.yyy.174.223:9898 SYN ******S* [...] Oct 27 00:00:00 221.160.38.51:3813 -> xxx.yyy.193.32:5554 SYN ******S* Oct 27 00:00:00 221.160.38.51:3817 -> xxx.yyy.193.36:5554 SYN ******S* Oct 27 00:00:00 221.160.38.51:3814 -> xxx.yyy.193.33:5554 SYN ******S* Oct 27 00:00:00 221.160.38.51:3831 -> xxx.yyy.193.50:5554 SYN ******S* Oct 27 00:00:00 221.160.38.51:3816 -> xxx.yyy.193.35:5554 SYN ******S* Oct 27 00:00:00 221.160.38.51:3815 -> xxx.yyy.193.34:5554 SYN ******S* Oct 27 00:00:00 221.160.38.51:3818 -> xxx.yyy.193.37:5554 SYN ******S* Oct 27 00:00:00 221.160.38.51:3830 -> xxx.yyy.193.49:5554 SYN ******S* Oct 27 00:00:00 221.160.38.51:3845 -> xxx.yyy.193.57:5554 SYN ******S* 5976 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions