[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0500. Oct 30 17:24:27 148.223.87.19:4188 -> xxx.yyy.1.1:1433 SYN ******S* Oct 30 17:24:27 148.223.87.19:4189 -> xxx.yyy.1.2:1433 SYN ******S* Oct 30 17:24:27 148.223.87.19:4190 -> xxx.yyy.1.3:1433 SYN ******S* Oct 30 17:24:24 148.223.87.19:4191 -> xxx.yyy.1.4:1433 SYN ******S* Oct 30 17:24:27 148.223.87.19:4192 -> xxx.yyy.1.5:1433 SYN ******S* Oct 30 17:24:27 148.223.87.19:4193 -> xxx.yyy.1.6:1433 SYN ******S* Oct 30 17:24:27 148.223.87.19:4194 -> xxx.yyy.1.7:1433 SYN ******S* Oct 30 17:24:27 148.223.87.19:4195 -> xxx.yyy.1.8:1433 SYN ******S* [...] Oct 30 23:37:21 148.223.87.19:3839 -> xxx.yyy.255.240:6129 SYN ******S* Oct 30 23:37:21 148.223.87.19:3840 -> xxx.yyy.255.241:6129 SYN ******S* Oct 30 23:37:21 148.223.87.19:3832 -> xxx.yyy.255.233:6129 SYN ******S* Oct 30 23:37:21 148.223.87.19:3845 -> xxx.yyy.255.246:6129 SYN ******S* Oct 30 23:37:21 148.223.87.19:3850 -> xxx.yyy.255.251:6129 SYN ******S* Oct 30 23:37:21 148.223.87.19:3846 -> xxx.yyy.255.247:6129 SYN ******S* Oct 30 23:37:21 148.223.87.19:3842 -> xxx.yyy.255.243:6129 SYN ******S* Oct 30 23:37:21 148.223.87.19:3847 -> xxx.yyy.255.248:6129 SYN ******S* Oct 30 23:37:21 148.223.87.19:3848 -> xxx.yyy.255.249:6129 SYN ******S* 123567 Oct 30 07:13:16 82.122.103.44:1885 -> xxx.yyy.1.165:1433 SYN ******S* Oct 30 07:13:13 82.122.103.44:1828 -> xxx.yyy.1.138:1433 SYN ******S* Oct 30 07:13:13 82.122.103.44:1830 -> xxx.yyy.1.139:1433 SYN ******S* Oct 30 07:13:16 82.122.103.44:1887 -> xxx.yyy.1.166:1433 SYN ******S* Oct 30 07:13:13 82.122.103.44:1832 -> xxx.yyy.1.140:1433 SYN ******S* Oct 30 07:13:16 82.122.103.44:1890 -> xxx.yyy.1.167:1433 SYN ******S* Oct 30 07:13:13 82.122.103.44:1834 -> xxx.yyy.1.141:1433 SYN ******S* Oct 30 07:13:16 82.122.103.44:1892 -> xxx.yyy.1.168:1433 SYN ******S* [...] Oct 30 16:41:23 82.122.103.44:2874 -> xxx.yyy.255.246:1433 SYN ******S* Oct 30 16:41:23 82.122.103.44:2875 -> xxx.yyy.255.247:1433 SYN ******S* Oct 30 16:41:24 82.122.103.44:2876 -> xxx.yyy.255.248:1433 SYN ******S* Oct 30 16:41:24 82.122.103.44:2877 -> xxx.yyy.255.249:1433 SYN ******S* Oct 30 16:41:24 82.122.103.44:2878 -> xxx.yyy.255.250:1433 SYN ******S* Oct 30 16:41:25 82.122.103.44:2879 -> xxx.yyy.255.251:1433 SYN ******S* Oct 30 16:41:25 82.122.103.44:2880 -> xxx.yyy.255.252:1433 SYN ******S* Oct 30 16:41:25 82.122.103.44:2881 -> xxx.yyy.255.253:1433 SYN ******S* Oct 30 16:41:25 82.122.103.44:2882 -> xxx.yyy.255.254:1433 SYN ******S* 106477 Oct 30 02:42:38 202.126.109.42:62548 -> xxx.yyy.81.53:6348 SYN ******S* Oct 30 02:42:39 202.126.109.42:62548 -> xxx.yyy.81.53:6348 FIN *******F Oct 30 16:41:30 202.126.109.42:62045 -> xxx.yyy.1.0:1433 SYN ******S* Oct 30 16:41:30 202.126.109.42:62049 -> xxx.yyy.1.1:1433 SYN ******S* Oct 30 16:41:30 202.126.109.42:62059 -> xxx.yyy.1.2:1433 SYN ******S* Oct 30 16:41:30 202.126.109.42:62086 -> xxx.yyy.1.3:1433 SYN ******S* Oct 30 16:41:30 202.126.109.42:62088 -> xxx.yyy.1.4:1433 SYN ******S* Oct 30 16:41:28 202.126.109.42:62090 -> xxx.yyy.1.5:1433 SYN ******S* [...] Oct 30 20:28:13 202.126.109.42:61439 -> xxx.yyy.255.232:1433 SYN ******S* Oct 30 20:28:14 202.126.109.42:61538 -> xxx.yyy.255.234:1433 SYN ******S* Oct 30 20:28:14 202.126.109.42:61545 -> xxx.yyy.255.235:1433 SYN ******S* Oct 30 20:28:15 202.126.109.42:61659 -> xxx.yyy.255.237:1433 SYN ******S* Oct 30 20:28:15 202.126.109.42:61712 -> xxx.yyy.255.239:1433 SYN ******S* Oct 30 20:28:15 202.126.109.42:61738 -> xxx.yyy.255.241:1433 SYN ******S* Oct 30 20:28:16 202.126.109.42:61752 -> xxx.yyy.255.243:1433 SYN ******S* Oct 30 20:28:16 202.126.109.42:61806 -> xxx.yyy.255.244:1433 SYN ******S* Oct 30 20:28:16 202.126.109.42:61866 -> xxx.yyy.255.253:1433 SYN ******S* 100052 Oct 30 21:59:28 198.173.169.20:3742 -> xxx.yyy.1.1:4899 SYN ******S* Oct 30 21:59:28 198.173.169.20:3743 -> xxx.yyy.1.2:4899 SYN ******S* Oct 30 21:59:28 198.173.169.20:3744 -> xxx.yyy.1.3:4899 SYN ******S* Oct 30 21:59:26 198.173.169.20:3745 -> xxx.yyy.1.4:4899 SYN ******S* Oct 30 21:59:29 198.173.169.20:3750 -> xxx.yyy.1.7:4899 SYN ******S* Oct 30 21:59:26 198.173.169.20:3751 -> xxx.yyy.1.8:4899 SYN ******S* Oct 30 21:59:29 198.173.169.20:3752 -> xxx.yyy.1.9:4899 SYN ******S* Oct 30 21:59:29 198.173.169.20:3753 -> xxx.yyy.1.10:4899 SYN ******S* [...] Oct 30 22:49:23 198.173.169.20:1250 -> xxx.yyy.255.241:4899 SYN ******S* Oct 30 22:49:23 198.173.169.20:1256 -> xxx.yyy.255.245:4899 SYN ******S* Oct 30 22:49:23 198.173.169.20:1266 -> xxx.yyy.255.253:4899 SYN ******S* Oct 30 22:49:23 198.173.169.20:1253 -> xxx.yyy.255.242:4899 SYN ******S* Oct 30 22:49:23 198.173.169.20:1261 -> xxx.yyy.255.250:4899 SYN ******S* Oct 30 22:49:23 198.173.169.20:1257 -> xxx.yyy.255.246:4899 SYN ******S* Oct 30 22:49:23 198.173.169.20:1267 -> xxx.yyy.255.254:4899 SYN ******S* Oct 30 22:49:23 198.173.169.20:1263 -> xxx.yyy.255.251:4899 SYN ******S* 89677 Oct 30 00:37:36 213.180.210.35:52584 -> xxx.yyy.67.189:1080 SYN ******S* Oct 30 00:37:36 213.180.210.35:54001 -> xxx.yyy.67.189:1075 SYN ******S* Oct 30 00:37:36 213.180.210.35:48852 -> xxx.yyy.67.189:80 SYN ******S* Oct 30 00:37:36 213.180.210.35:33613 -> xxx.yyy.67.189:81 SYN ******S* Oct 30 00:37:36 213.180.210.35:44150 -> xxx.yyy.67.189:3128 SYN ******S* Oct 30 00:37:36 213.180.210.35:45784 -> xxx.yyy.67.189:4480 SYN ******S* Oct 30 00:37:36 213.180.210.35:52364 -> xxx.yyy.67.189:6588 SYN ******S* Oct 30 00:37:36 213.180.210.35:35496 -> xxx.yyy.67.189:8000 SYN ******S* [...] Oct 30 10:57:28 213.180.210.35:39754 -> xxx.yyy.200.212:80 SYN ******S* Oct 30 10:57:28 213.180.210.35:44842 -> xxx.yyy.200.212:81 SYN ******S* Oct 30 10:57:28 213.180.210.35:56988 -> xxx.yyy.200.212:3128 SYN ******S* Oct 30 10:57:28 213.180.210.35:51105 -> xxx.yyy.200.212:4480 SYN ******S* Oct 30 10:57:28 213.180.210.35:35268 -> xxx.yyy.200.212:6588 SYN ******S* Oct 30 10:57:28 213.180.210.35:49694 -> xxx.yyy.200.212:8000 SYN ******S* Oct 30 10:57:28 213.180.210.35:64602 -> xxx.yyy.200.212:8080 SYN ******S* Oct 30 10:57:28 213.180.210.35:30975 -> xxx.yyy.200.212:8081 SYN ******S* Oct 30 10:57:28 213.180.210.35:61957 -> xxx.yyy.200.212:8090 SYN ******S* 69783 Oct 30 01:54:40 211.239.150.99:2335 -> xxx.yyy.1.5:1433 SYN ******S* Oct 30 01:54:40 211.239.150.99:2340 -> xxx.yyy.1.10:1433 SYN ******S* Oct 30 01:54:37 211.239.150.99:2341 -> xxx.yyy.1.11:1433 SYN ******S* Oct 30 01:54:40 211.239.150.99:2343 -> xxx.yyy.1.13:1433 SYN ******S* Oct 30 01:54:40 211.239.150.99:2344 -> xxx.yyy.1.14:1433 SYN ******S* Oct 30 01:54:40 211.239.150.99:2345 -> xxx.yyy.1.15:1433 SYN ******S* Oct 30 01:54:40 211.239.150.99:2346 -> xxx.yyy.1.16:1433 SYN ******S* Oct 30 01:54:40 211.239.150.99:2348 -> xxx.yyy.1.18:1433 SYN ******S* [...] Oct 30 02:07:38 211.239.150.99:2675 -> xxx.yyy.255.192:1433 SYN ******S* Oct 30 02:07:38 211.239.150.99:2678 -> xxx.yyy.255.195:1433 SYN ******S* Oct 30 02:07:38 211.239.150.99:2679 -> xxx.yyy.255.196:1433 SYN ******S* Oct 30 02:07:38 211.239.150.99:2677 -> xxx.yyy.255.194:1433 SYN ******S* Oct 30 02:07:38 211.239.150.99:2676 -> xxx.yyy.255.193:1433 SYN ******S* Oct 30 02:07:39 211.239.150.99:2688 -> xxx.yyy.255.205:1433 SYN ******S* Oct 30 02:07:39 211.239.150.99:2702 -> xxx.yyy.255.219:1433 SYN ******S* Oct 30 02:07:39 211.239.150.99:2729 -> xxx.yyy.255.246:1433 SYN ******S* 65484 Oct 30 00:26:45 202.118.7.130:1292 -> xxx.yyy.1.2:4000 SYN ******S* Oct 30 00:26:44 202.118.7.130:1294 -> xxx.yyy.1.4:4000 SYN ******S* Oct 30 00:26:43 202.118.7.130:1293 -> xxx.yyy.1.3:4000 SYN ******S* Oct 30 00:26:44 202.118.7.130:1295 -> xxx.yyy.1.5:4000 SYN ******S* Oct 30 00:26:44 202.118.7.130:1297 -> xxx.yyy.1.7:4000 SYN ******S* Oct 30 00:26:45 202.118.7.130:1298 -> xxx.yyy.1.8:4000 SYN ******S* Oct 30 00:26:45 202.118.7.130:1300 -> xxx.yyy.1.10:4000 SYN ******S* Oct 30 00:26:45 202.118.7.130:1299 -> xxx.yyy.1.9:4000 SYN ******S* [...] Oct 30 00:38:25 202.118.7.130:3580 -> xxx.yyy.255.242:4000 SYN ******S* Oct 30 00:38:25 202.118.7.130:3579 -> xxx.yyy.255.241:4000 SYN ******S* Oct 30 00:38:25 202.118.7.130:3584 -> xxx.yyy.255.246:4000 SYN ******S* Oct 30 00:38:25 202.118.7.130:3585 -> xxx.yyy.255.247:4000 SYN ******S* Oct 30 00:38:25 202.118.7.130:3583 -> xxx.yyy.255.245:4000 SYN ******S* Oct 30 00:38:25 202.118.7.130:3587 -> xxx.yyy.255.249:4000 SYN ******S* Oct 30 00:38:25 202.118.7.130:3586 -> xxx.yyy.255.248:4000 SYN ******S* Oct 30 00:38:25 202.118.7.130:3588 -> xxx.yyy.255.250:4000 SYN ******S* Oct 30 00:38:25 202.118.7.130:3589 -> xxx.yyy.255.251:4000 SYN ******S* 63842 Oct 30 22:39:59 81.15.135.180:3674 -> xxx.yyy.1.1:1521 SYN ******S* Oct 30 22:39:59 81.15.135.180:3675 -> xxx.yyy.1.2:1521 SYN ******S* Oct 30 22:39:59 81.15.135.180:3676 -> xxx.yyy.1.3:1521 SYN ******S* Oct 30 22:40:01 81.15.135.180:3677 -> xxx.yyy.1.4:1521 SYN ******S* Oct 30 22:40:01 81.15.135.180:3678 -> xxx.yyy.1.5:1521 SYN ******S* Oct 30 22:40:01 81.15.135.180:3679 -> xxx.yyy.1.6:1521 SYN ******S* Oct 30 22:39:58 81.15.135.180:3680 -> xxx.yyy.1.7:1521 SYN ******S* Oct 30 22:39:58 81.15.135.180:3681 -> xxx.yyy.1.8:1521 SYN ******S* [...] Oct 30 22:51:06 81.15.135.180:2485 -> xxx.yyy.255.235:1521 SYN ******S* Oct 30 22:51:06 81.15.135.180:2486 -> xxx.yyy.255.236:1521 SYN ******S* Oct 30 22:51:06 81.15.135.180:2494 -> xxx.yyy.255.244:1521 SYN ******S* Oct 30 22:51:06 81.15.135.180:2495 -> xxx.yyy.255.245:1521 SYN ******S* Oct 30 22:51:06 81.15.135.180:2496 -> xxx.yyy.255.246:1521 SYN ******S* Oct 30 22:51:06 81.15.135.180:2499 -> xxx.yyy.255.249:1521 SYN ******S* Oct 30 22:51:06 81.15.135.180:2498 -> xxx.yyy.255.248:1521 SYN ******S* Oct 30 22:51:06 81.15.135.180:2497 -> xxx.yyy.255.247:1521 SYN ******S* Oct 30 22:51:06 81.15.135.180:2504 -> xxx.yyy.255.254:1521 SYN ******S* 61002 Oct 30 17:28:18 68.199.45.69:2626 -> xxx.yyy.1.1:2000 SYN ******S* Oct 30 17:28:21 68.199.45.69:2627 -> xxx.yyy.1.2:2000 SYN ******S* Oct 30 17:28:18 68.199.45.69:2628 -> xxx.yyy.1.3:2000 SYN ******S* Oct 30 17:28:21 68.199.45.69:2629 -> xxx.yyy.1.4:2000 SYN ******S* Oct 30 17:28:18 68.199.45.69:2630 -> xxx.yyy.1.5:2000 SYN ******S* Oct 30 17:28:18 68.199.45.69:2631 -> xxx.yyy.1.6:2000 SYN ******S* Oct 30 17:28:21 68.199.45.69:2633 -> xxx.yyy.1.8:2000 SYN ******S* Oct 30 17:28:21 68.199.45.69:2634 -> xxx.yyy.1.9:2000 SYN ******S* [...] Oct 30 17:40:44 68.199.45.69:1179 -> xxx.yyy.255.248:2000 SYN ******S* Oct 30 17:40:44 68.199.45.69:1176 -> xxx.yyy.255.245:2000 SYN ******S* Oct 30 17:40:44 68.199.45.69:1178 -> xxx.yyy.255.247:2000 SYN ******S* Oct 30 17:40:44 68.199.45.69:1173 -> xxx.yyy.255.242:2000 SYN ******S* Oct 30 17:40:44 68.199.45.69:1177 -> xxx.yyy.255.246:2000 SYN ******S* Oct 30 17:40:44 68.199.45.69:1175 -> xxx.yyy.255.244:2000 SYN ******S* Oct 30 17:40:44 68.199.45.69:1181 -> xxx.yyy.255.250:2000 SYN ******S* Oct 30 17:40:44 68.199.45.69:1184 -> xxx.yyy.255.253:2000 SYN ******S* 59702 Oct 30 22:07:28 210.61.139.132:4844 -> xxx.yyy.1.1:1433 SYN ******S* Oct 30 22:07:28 210.61.139.132:4845 -> xxx.yyy.1.2:1433 SYN ******S* Oct 30 22:07:28 210.61.139.132:4846 -> xxx.yyy.1.3:1433 SYN ******S* Oct 30 22:07:28 210.61.139.132:4847 -> xxx.yyy.1.4:1433 SYN ******S* Oct 30 22:07:28 210.61.139.132:4848 -> xxx.yyy.1.5:1433 SYN ******S* Oct 30 22:07:28 210.61.139.132:4849 -> xxx.yyy.1.6:1433 SYN ******S* Oct 30 22:07:28 210.61.139.132:4850 -> xxx.yyy.1.7:1433 SYN ******S* Oct 30 22:07:28 210.61.139.132:4851 -> xxx.yyy.1.8:1433 SYN ******S* [...] Oct 30 22:16:45 210.61.139.132:3309 -> xxx.yyy.255.216:1433 SYN ******S* Oct 30 22:16:45 210.61.139.132:3261 -> xxx.yyy.255.168:1433 SYN ******S* Oct 30 22:16:45 210.61.139.132:3290 -> xxx.yyy.255.197:1433 SYN ******S* Oct 30 22:16:45 210.61.139.132:3330 -> xxx.yyy.255.237:1433 SYN ******S* Oct 30 22:16:45 210.61.139.132:3346 -> xxx.yyy.255.253:1433 SYN ******S* Oct 30 22:16:45 210.61.139.132:3343 -> xxx.yyy.255.250:1433 SYN ******S* Oct 30 22:16:45 210.61.139.132:3327 -> xxx.yyy.255.234:1433 SYN ******S* Oct 30 22:16:45 210.61.139.132:3328 -> xxx.yyy.255.235:1433 SYN ******S* 55949 [...] 51789 Oct 30 16:20:06 194.69.220.170:4362 -> xxx.yyy.1.1:1433 SYN ******S* Oct 30 16:20:03 194.69.220.170:4363 -> xxx.yyy.1.2:1433 SYN ******S* Oct 30 16:20:06 194.69.220.170:4364 -> xxx.yyy.1.3:1433 SYN ******S* Oct 30 16:20:06 194.69.220.170:4365 -> xxx.yyy.1.4:1433 SYN ******S* Oct 30 16:20:03 194.69.220.170:4366 -> xxx.yyy.1.5:1433 SYN ******S* Oct 30 16:20:06 194.69.220.170:4367 -> xxx.yyy.1.6:1433 SYN ******S* Oct 30 16:20:06 194.69.220.170:4374 -> xxx.yyy.1.13:1433 SYN ******S* Oct 30 16:20:03 194.69.220.170:4375 -> xxx.yyy.1.14:1433 SYN ******S* [...] Oct 30 16:40:55 194.69.220.170:2426 -> xxx.yyy.255.163:1433 SYN ******S* Oct 30 16:40:55 194.69.220.170:2506 -> xxx.yyy.255.243:1433 SYN ******S* Oct 30 16:40:55 194.69.220.170:2503 -> xxx.yyy.255.240:1433 SYN ******S* Oct 30 16:40:55 194.69.220.170:2455 -> xxx.yyy.255.192:1433 SYN ******S* Oct 30 16:40:56 194.69.220.170:2452 -> xxx.yyy.255.189:1433 SYN ******S* Oct 30 16:40:56 194.69.220.170:2484 -> xxx.yyy.255.221:1433 SYN ******S* Oct 30 16:40:56 194.69.220.170:2468 -> xxx.yyy.255.205:1433 SYN ******S* Oct 30 16:40:56 194.69.220.170:2436 -> xxx.yyy.255.173:1433 SYN ******S* 49320 Oct 30 03:01:18 172.182.208.8:2922 -> xxx.yyy.1.0:1433 SYN ******S* Oct 30 03:01:18 172.182.208.8:2932 -> xxx.yyy.1.2:1433 SYN ******S* Oct 30 03:01:18 172.182.208.8:2938 -> xxx.yyy.1.3:1433 SYN ******S* Oct 30 03:01:18 172.182.208.8:2949 -> xxx.yyy.1.5:1433 SYN ******S* Oct 30 03:01:18 172.182.208.8:2960 -> xxx.yyy.1.7:1433 SYN ******S* Oct 30 03:01:18 172.182.208.8:2964 -> xxx.yyy.1.8:1433 SYN ******S* Oct 30 03:01:18 172.182.208.8:2972 -> xxx.yyy.1.9:1433 SYN ******S* Oct 30 03:01:18 172.182.208.8:2978 -> xxx.yyy.1.10:1433 SYN ******S* [...] Oct 30 03:46:20 172.182.208.8:2307 -> xxx.yyy.255.246:1433 SYN ******S* Oct 30 03:46:20 172.182.208.8:2318 -> xxx.yyy.255.247:1433 SYN ******S* Oct 30 03:46:20 172.182.208.8:2322 -> xxx.yyy.255.248:1433 SYN ******S* Oct 30 03:46:20 172.182.208.8:2329 -> xxx.yyy.255.249:1433 SYN ******S* Oct 30 03:46:20 172.182.208.8:2334 -> xxx.yyy.255.250:1433 SYN ******S* Oct 30 03:46:20 172.182.208.8:2339 -> xxx.yyy.255.251:1433 SYN ******S* Oct 30 03:46:20 172.182.208.8:2344 -> xxx.yyy.255.252:1433 SYN ******S* Oct 30 03:46:20 172.182.208.8:2351 -> xxx.yyy.255.253:1433 SYN ******S* Oct 30 03:46:20 172.182.208.8:2356 -> xxx.yyy.255.254:1433 SYN ******S* 42450 Oct 30 04:58:00 62.48.177.68:2852 -> xxx.yyy.1.1:4899 SYN ******S* Oct 30 04:58:00 62.48.177.68:2853 -> xxx.yyy.1.2:4899 SYN ******S* Oct 30 04:58:00 62.48.177.68:2854 -> xxx.yyy.1.3:4899 SYN ******S* Oct 30 04:57:58 62.48.177.68:2855 -> xxx.yyy.1.4:4899 SYN ******S* Oct 30 04:57:58 62.48.177.68:2856 -> xxx.yyy.1.5:4899 SYN ******S* Oct 30 04:57:58 62.48.177.68:2857 -> xxx.yyy.1.6:4899 SYN ******S* Oct 30 04:57:58 62.48.177.68:2858 -> xxx.yyy.1.7:4899 SYN ******S* Oct 30 04:57:58 62.48.177.68:2859 -> xxx.yyy.1.8:4899 SYN ******S* [...] Oct 30 05:02:01 62.48.177.68:1374 -> xxx.yyy.255.246:4899 SYN ******S* Oct 30 05:02:01 62.48.177.68:1375 -> xxx.yyy.255.247:4899 SYN ******S* Oct 30 05:02:01 62.48.177.68:1376 -> xxx.yyy.255.248:4899 SYN ******S* Oct 30 05:02:01 62.48.177.68:1378 -> xxx.yyy.255.250:4899 SYN ******S* Oct 30 05:02:01 62.48.177.68:1379 -> xxx.yyy.255.251:4899 SYN ******S* Oct 30 05:02:01 62.48.177.68:1380 -> xxx.yyy.255.252:4899 SYN ******S* Oct 30 05:02:01 62.48.177.68:1381 -> xxx.yyy.255.253:4899 SYN ******S* Oct 30 05:02:01 62.48.177.68:1382 -> xxx.yyy.255.254:4899 SYN ******S* 39134 Oct 30 00:00:07 65.163.154.2:11679 -> xxx.yyy.211.190:1433 SYN ******S* Oct 30 00:00:10 65.163.154.2:11689 -> xxx.yyy.211.191:1433 SYN ******S* Oct 30 00:00:10 65.163.154.2:11707 -> xxx.yyy.211.194:1433 SYN ******S* Oct 30 00:00:07 65.163.154.2:11715 -> xxx.yyy.211.196:1433 SYN ******S* Oct 30 00:00:07 65.163.154.2:11719 -> xxx.yyy.211.197:1433 SYN ******S* Oct 30 00:00:08 65.163.154.2:11725 -> xxx.yyy.211.198:1433 SYN ******S* Oct 30 00:00:08 65.163.154.2:11726 -> xxx.yyy.211.199:1433 SYN ******S* Oct 30 00:00:08 65.163.154.2:11730 -> xxx.yyy.211.200:1433 SYN ******S* [...] Oct 30 00:43:34 65.163.154.2:34680 -> xxx.yyy.255.245:1433 SYN ******S* Oct 30 00:43:34 65.163.154.2:34687 -> xxx.yyy.255.246:1433 SYN ******S* Oct 30 00:43:34 65.163.154.2:34693 -> xxx.yyy.255.247:1433 SYN ******S* Oct 30 00:43:34 65.163.154.2:34696 -> xxx.yyy.255.248:1433 SYN ******S* Oct 30 00:43:34 65.163.154.2:34704 -> xxx.yyy.255.249:1433 SYN ******S* Oct 30 00:43:34 65.163.154.2:34711 -> xxx.yyy.255.250:1433 SYN ******S* Oct 30 00:43:35 65.163.154.2:34714 -> xxx.yyy.255.251:1433 SYN ******S* Oct 30 00:43:35 65.163.154.2:34719 -> xxx.yyy.255.252:1433 SYN ******S* Oct 30 00:43:35 65.163.154.2:34727 -> xxx.yyy.255.254:1433 SYN ******S* 27933 [...] 21477 Oct 30 01:52:19 80.223.91.212:2443 -> xxx.yyy.1.0:1433 SYN ******S* Oct 30 01:52:19 80.223.91.212:2447 -> xxx.yyy.1.1:1433 SYN ******S* Oct 30 01:52:19 80.223.91.212:2452 -> xxx.yyy.1.2:1433 SYN ******S* Oct 30 01:52:19 80.223.91.212:2459 -> xxx.yyy.1.4:1433 SYN ******S* Oct 30 01:52:19 80.223.91.212:2462 -> xxx.yyy.1.5:1433 SYN ******S* Oct 30 01:52:19 80.223.91.212:2467 -> xxx.yyy.1.6:1433 SYN ******S* Oct 30 01:52:19 80.223.91.212:2471 -> xxx.yyy.1.7:1433 SYN ******S* Oct 30 01:52:19 80.223.91.212:2474 -> xxx.yyy.1.8:1433 SYN ******S* [...] Oct 30 03:33:55 80.223.91.212:1255 -> xxx.yyy.92.26:1433 SYN ******S* Oct 30 03:33:55 80.223.91.212:4614 -> xxx.yyy.92.33:1433 SYN ******S* Oct 30 03:33:58 80.223.91.212:3820 -> xxx.yyy.92.28:1433 SYN ******S* Oct 30 03:33:58 80.223.91.212:3776 -> xxx.yyy.92.27:1433 SYN ******S* Oct 30 03:34:01 80.223.91.212:4614 -> xxx.yyy.92.33:1433 SYN ******S* Oct 30 03:34:02 80.223.91.212:3047 -> xxx.yyy.92.37:1433 SYN ******S* Oct 30 03:34:02 80.223.91.212:3120 -> xxx.yyy.92.36:1433 SYN ******S* Oct 30 03:34:02 80.223.91.212:3357 -> xxx.yyy.92.38:1433 SYN ******S* Oct 30 03:34:02 80.223.91.212:2020 -> xxx.yyy.92.34:1433 SYN ******S* 20135 [...] 18900 Oct 30 13:45:55 219.106.226.4:36829 -> xxx.yyy.1.103:139 SYN ******S* Oct 30 13:45:55 219.106.226.4:36832 -> xxx.yyy.1.106:139 SYN ******S* Oct 30 13:45:55 219.106.226.4:36831 -> xxx.yyy.1.105:139 SYN ******S* Oct 30 13:45:55 219.106.226.4:36813 -> xxx.yyy.1.87:139 SYN ******S* Oct 30 13:45:55 219.106.226.4:36827 -> xxx.yyy.1.101:139 SYN ******S* Oct 30 13:45:55 219.106.226.4:36803 -> xxx.yyy.1.77:139 SYN ******S* Oct 30 13:45:55 219.106.226.4:36806 -> xxx.yyy.1.80:139 SYN ******S* Oct 30 13:45:55 219.106.226.4:36805 -> xxx.yyy.1.79:139 SYN ******S* [...] Oct 30 13:59:30 219.106.226.4:45678 -> xxx.yyy.255.226:139 SYN ******S* Oct 30 13:59:30 219.106.226.4:45650 -> xxx.yyy.255.198:139 SYN ******S* Oct 30 13:59:30 219.106.226.4:45664 -> xxx.yyy.255.212:139 SYN ******S* Oct 30 13:59:30 219.106.226.4:45668 -> xxx.yyy.255.216:139 SYN ******S* Oct 30 13:59:30 219.106.226.4:45669 -> xxx.yyy.255.217:139 SYN ******S* Oct 30 13:59:30 219.106.226.4:45665 -> xxx.yyy.255.213:139 SYN ******S* Oct 30 13:59:30 219.106.226.4:45687 -> xxx.yyy.255.235:139 SYN ******S* Oct 30 13:59:30 219.106.226.4:45683 -> xxx.yyy.255.231:139 SYN ******S* Oct 30 13:59:30 219.106.226.4:45670 -> xxx.yyy.255.218:139 SYN ******S* 14247 Oct 30 23:53:31 202.225.192.19:4091 -> xxx.yyy.174.2:5554 SYN ******S* Oct 30 23:53:32 202.225.192.19:4774 -> xxx.yyy.174.2:1023 SYN ******S* Oct 30 23:53:34 202.225.192.19:2074 -> xxx.yyy.174.2:9898 SYN ******S* Oct 30 23:53:31 202.225.192.19:4092 -> xxx.yyy.174.4:5554 SYN ******S* Oct 30 23:53:32 202.225.192.19:4775 -> xxx.yyy.174.4:1023 SYN ******S* Oct 30 23:53:34 202.225.192.19:2075 -> xxx.yyy.174.4:9898 SYN ******S* Oct 30 23:53:31 202.225.192.19:4093 -> xxx.yyy.174.5:5554 SYN ******S* Oct 30 23:53:32 202.225.192.19:4779 -> xxx.yyy.174.5:1023 SYN ******S* [...] Oct 30 23:54:16 202.225.192.19:1218 -> xxx.yyy.174.39:9898 SYN ******S* Oct 30 23:54:16 202.225.192.19:1219 -> xxx.yyy.174.32:9898 SYN ******S* Oct 30 23:54:16 202.225.192.19:1226 -> xxx.yyy.174.40:9898 SYN ******S* Oct 30 23:54:16 202.225.192.19:1227 -> xxx.yyy.174.41:9898 SYN ******S* Oct 30 23:54:16 202.225.192.19:1228 -> xxx.yyy.174.42:9898 SYN ******S* Oct 30 23:54:16 202.225.192.19:1229 -> xxx.yyy.174.43:9898 SYN ******S* Oct 30 23:54:16 202.225.192.19:1230 -> xxx.yyy.174.46:9898 SYN ******S* Oct 30 23:54:16 202.225.192.19:1244 -> xxx.yyy.174.48:9898 SYN ******S* Oct 30 23:54:16 202.225.192.19:1273 -> xxx.yyy.174.49:9898 SYN ******S* 12745 Oct 30 18:32:28 66.98.172.92:1378 -> xxx.yyy.1.0:1433 SYN ******S* Oct 30 18:32:28 66.98.172.92:1379 -> xxx.yyy.1.1:1433 SYN ******S* Oct 30 18:32:28 66.98.172.92:1380 -> xxx.yyy.1.2:1433 SYN ******S* Oct 30 18:32:28 66.98.172.92:1381 -> xxx.yyy.1.3:1433 SYN ******S* Oct 30 18:32:28 66.98.172.92:1383 -> xxx.yyy.1.5:1433 SYN ******S* Oct 30 18:32:28 66.98.172.92:1382 -> xxx.yyy.1.4:1433 SYN ******S* Oct 30 18:32:28 66.98.172.92:1385 -> xxx.yyy.1.7:1433 SYN ******S* Oct 30 18:32:28 66.98.172.92:1388 -> xxx.yyy.1.10:1433 SYN ******S* [...] Oct 30 18:32:45 66.98.172.92:1377 -> xxx.yyy.255.229:1433 SYN ******S* Oct 30 18:32:45 66.98.172.92:1384 -> xxx.yyy.255.236:1433 SYN ******S* Oct 30 18:32:45 66.98.172.92:1399 -> xxx.yyy.255.251:1433 SYN ******S* Oct 30 18:32:45 66.98.172.92:1401 -> xxx.yyy.255.253:1433 SYN ******S* Oct 30 18:32:45 66.98.172.92:1400 -> xxx.yyy.255.252:1433 SYN ******S* Oct 30 18:32:45 66.98.172.92:1398 -> xxx.yyy.255.250:1433 SYN ******S* Oct 30 18:32:45 66.98.172.92:1397 -> xxx.yyy.255.249:1433 SYN ******S* Oct 30 18:32:45 66.98.172.92:1402 -> xxx.yyy.255.254:1433 SYN ******S* 12419 Oct 30 04:18:27 221.116.253.130:2212 -> xxx.yyy.1.5:111 SYN ******S* Oct 30 04:18:27 221.116.253.130:2218 -> xxx.yyy.1.11:111 SYN ******S* Oct 30 04:18:27 221.116.253.130:2214 -> xxx.yyy.1.7:111 SYN ******S* Oct 30 04:18:27 221.116.253.130:2216 -> xxx.yyy.1.9:111 SYN ******S* Oct 30 04:18:27 221.116.253.130:2213 -> xxx.yyy.1.6:111 SYN ******S* Oct 30 04:18:27 221.116.253.130:2215 -> xxx.yyy.1.8:111 SYN ******S* Oct 30 04:18:27 221.116.253.130:2234 -> xxx.yyy.1.27:111 SYN ******S* Oct 30 04:18:27 221.116.253.130:2228 -> xxx.yyy.1.21:111 SYN ******S* [...] Oct 30 04:21:45 221.116.253.130:3103 -> xxx.yyy.253.218:111 SYN ******S* Oct 30 04:21:45 221.116.253.130:3100 -> xxx.yyy.253.215:111 SYN ******S* Oct 30 04:21:45 221.116.253.130:3113 -> xxx.yyy.253.228:111 SYN ******S* Oct 30 04:21:45 221.116.253.130:3114 -> xxx.yyy.253.229:111 SYN ******S* Oct 30 04:21:45 221.116.253.130:3117 -> xxx.yyy.253.232:111 SYN ******S* Oct 30 04:21:45 221.116.253.130:3129 -> xxx.yyy.253.244:111 SYN ******S* Oct 30 04:21:45 221.116.253.130:3120 -> xxx.yyy.253.235:111 SYN ******S* Oct 30 04:21:45 221.116.253.130:3130 -> xxx.yyy.253.245:111 SYN ******S* 11454 [...] 10648 Oct 30 00:07:11 59.11.12.175:2917 -> xxx.yyy.72.128:5554 SYN ******S* Oct 30 00:07:12 59.11.12.175:3302 -> xxx.yyy.72.128:1023 SYN ******S* Oct 30 00:07:14 59.11.12.175:4133 -> xxx.yyy.72.128:9898 SYN ******S* Oct 30 00:07:11 59.11.12.175:2920 -> xxx.yyy.72.136:5554 SYN ******S* Oct 30 00:07:12 59.11.12.175:3313 -> xxx.yyy.72.136:1023 SYN ******S* Oct 30 00:07:14 59.11.12.175:4144 -> xxx.yyy.72.136:9898 SYN ******S* Oct 30 00:07:11 59.11.12.175:2931 -> xxx.yyy.72.146:5554 SYN ******S* Oct 30 00:07:12 59.11.12.175:3320 -> xxx.yyy.72.146:1023 SYN ******S* [...] Oct 30 00:07:57 59.11.12.175:2961 -> xxx.yyy.73.81:9898 SYN ******S* Oct 30 00:07:57 59.11.12.175:2963 -> xxx.yyy.73.85:9898 SYN ******S* Oct 30 00:07:57 59.11.12.175:2968 -> xxx.yyy.73.103:9898 SYN ******S* Oct 30 00:07:57 59.11.12.175:2988 -> xxx.yyy.73.121:9898 SYN ******S* Oct 30 00:07:57 59.11.12.175:2967 -> xxx.yyy.73.102:9898 SYN ******S* Oct 30 00:07:57 59.11.12.175:2969 -> xxx.yyy.73.106:9898 SYN ******S* Oct 30 00:07:57 59.11.12.175:2970 -> xxx.yyy.73.107:9898 SYN ******S* Oct 30 00:07:57 59.11.12.175:2971 -> xxx.yyy.73.108:9898 SYN ******S* Oct 30 00:07:58 59.11.12.175:2975 -> xxx.yyy.73.82:9898 SYN ******S* 9507 Oct 30 00:53:09 221.127.10.72:1191 -> xxx.yyy.235.112:5554 SYN ******S* Oct 30 00:53:10 221.127.10.72:1771 -> xxx.yyy.235.112:1023 SYN ******S* Oct 30 00:53:12 221.127.10.72:2917 -> xxx.yyy.235.112:9898 SYN ******S* Oct 30 00:53:09 221.127.10.72:1192 -> xxx.yyy.235.113:5554 SYN ******S* Oct 30 00:53:10 221.127.10.72:1772 -> xxx.yyy.235.113:1023 SYN ******S* Oct 30 00:53:12 221.127.10.72:2918 -> xxx.yyy.235.113:9898 SYN ******S* Oct 30 00:53:09 221.127.10.72:1232 -> xxx.yyy.235.114:5554 SYN ******S* Oct 30 00:53:10 221.127.10.72:1788 -> xxx.yyy.235.114:1023 SYN ******S* [...] Oct 30 00:53:55 221.127.10.72:4507 -> xxx.yyy.255.191:9898 SYN ******S* Oct 30 00:53:55 221.127.10.72:4509 -> xxx.yyy.255.193:9898 SYN ******S* Oct 30 00:53:55 221.127.10.72:4523 -> xxx.yyy.255.195:9898 SYN ******S* Oct 30 00:53:55 221.127.10.72:4527 -> xxx.yyy.255.196:9898 SYN ******S* Oct 30 00:53:55 221.127.10.72:4529 -> xxx.yyy.255.198:9898 SYN ******S* Oct 30 00:53:55 221.127.10.72:4531 -> xxx.yyy.255.200:9898 SYN ******S* Oct 30 00:53:55 221.127.10.72:4537 -> xxx.yyy.255.201:9898 SYN ******S* Oct 30 00:53:55 221.127.10.72:4539 -> xxx.yyy.255.203:9898 SYN ******S* Oct 30 00:53:55 221.127.10.72:4551 -> xxx.yyy.255.212:9898 SYN ******S* 9471 Oct 30 00:56:01 61.149.2.120:1822 -> xxx.yyy.153.137:5554 SYN ******S* Oct 30 00:56:02 61.149.2.120:2009 -> xxx.yyy.153.137:1023 SYN ******S* Oct 30 00:56:04 61.149.2.120:2342 -> xxx.yyy.153.137:9898 SYN ******S* Oct 30 00:56:01 61.149.2.120:1823 -> xxx.yyy.153.138:5554 SYN ******S* Oct 30 00:56:01 61.149.2.120:1821 -> xxx.yyy.153.136:5554 SYN ******S* Oct 30 00:56:02 61.149.2.120:2008 -> xxx.yyy.153.136:1023 SYN ******S* Oct 30 00:56:04 61.149.2.120:2345 -> xxx.yyy.153.136:9898 SYN ******S* Oct 30 00:56:01 61.149.2.120:1824 -> xxx.yyy.153.139:5554 SYN ******S* [...] Oct 30 00:57:59 61.149.2.120:3945 -> xxx.yyy.173.212:9898 SYN ******S* Oct 30 00:57:59 61.149.2.120:3946 -> xxx.yyy.173.213:9898 SYN ******S* Oct 30 00:57:59 61.149.2.120:3948 -> xxx.yyy.173.216:9898 SYN ******S* Oct 30 00:57:59 61.149.2.120:3950 -> xxx.yyy.173.218:9898 SYN ******S* Oct 30 00:57:59 61.149.2.120:3949 -> xxx.yyy.173.217:9898 SYN ******S* Oct 30 00:57:59 61.149.2.120:4035 -> xxx.yyy.173.221:9898 SYN ******S* Oct 30 00:57:59 61.149.2.120:4051 -> xxx.yyy.173.228:9898 SYN ******S* Oct 30 00:58:00 61.149.2.120:4119 -> xxx.yyy.174.2:9898 SYN ******S* 9366 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions