[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0500. Nov 3 05:16:04 222.109.150.69:2541 -> xxx.yyy.1.1:1433 SYN ******S* Nov 3 05:16:04 222.109.150.69:2544 -> xxx.yyy.1.2:1433 SYN ******S* Nov 3 05:16:01 222.109.150.69:2545 -> xxx.yyy.1.3:1433 SYN ******S* Nov 3 05:16:04 222.109.150.69:2548 -> xxx.yyy.1.4:1433 SYN ******S* Nov 3 05:16:04 222.109.150.69:2549 -> xxx.yyy.1.5:1433 SYN ******S* Nov 3 05:16:04 222.109.150.69:2552 -> xxx.yyy.1.6:1433 SYN ******S* Nov 3 05:16:04 222.109.150.69:2553 -> xxx.yyy.1.7:1433 SYN ******S* Nov 3 05:16:04 222.109.150.69:2556 -> xxx.yyy.1.8:1433 SYN ******S* [...] Nov 3 05:43:23 222.109.150.69:1291 -> xxx.yyy.255.246:1433 SYN ******S* Nov 3 05:43:23 222.109.150.69:1288 -> xxx.yyy.255.244:1433 SYN ******S* Nov 3 05:43:23 222.109.150.69:1298 -> xxx.yyy.255.250:1433 SYN ******S* Nov 3 05:43:23 222.109.150.69:1294 -> xxx.yyy.255.248:1433 SYN ******S* Nov 3 05:43:23 222.109.150.69:1300 -> xxx.yyy.255.251:1433 SYN ******S* Nov 3 05:43:23 222.109.150.69:1297 -> xxx.yyy.255.249:1433 SYN ******S* Nov 3 05:43:23 222.109.150.69:1306 -> xxx.yyy.255.254:1433 SYN ******S* Nov 3 05:43:23 222.109.150.69:1304 -> xxx.yyy.255.253:1433 SYN ******S* 71001 Nov 3 07:14:02 140.123.22.199:15529 -> xxx.yyy.1.1:4899 SYN ******S* Nov 3 07:14:02 140.123.22.199:15530 -> xxx.yyy.1.2:4899 SYN ******S* Nov 3 07:14:00 140.123.22.199:15534 -> xxx.yyy.1.6:4899 SYN ******S* Nov 3 07:14:02 140.123.22.199:15531 -> xxx.yyy.1.3:4899 SYN ******S* Nov 3 07:14:00 140.123.22.199:15535 -> xxx.yyy.1.7:4899 SYN ******S* Nov 3 07:14:00 140.123.22.199:15532 -> xxx.yyy.1.4:4899 SYN ******S* Nov 3 07:14:00 140.123.22.199:15536 -> xxx.yyy.1.8:4899 SYN ******S* Nov 3 07:14:00 140.123.22.199:15533 -> xxx.yyy.1.5:4899 SYN ******S* [...] Nov 3 07:24:38 140.123.22.199:16959 -> xxx.yyy.255.218:4899 SYN ******S* Nov 3 07:24:38 140.123.22.199:16963 -> xxx.yyy.255.222:4899 SYN ******S* Nov 3 07:24:38 140.123.22.199:16960 -> xxx.yyy.255.219:4899 SYN ******S* Nov 3 07:24:38 140.123.22.199:16951 -> xxx.yyy.255.210:4899 SYN ******S* Nov 3 07:24:38 140.123.22.199:16954 -> xxx.yyy.255.213:4899 SYN ******S* Nov 3 07:24:38 140.123.22.199:16961 -> xxx.yyy.255.220:4899 SYN ******S* Nov 3 07:24:38 140.123.22.199:16964 -> xxx.yyy.255.223:4899 SYN ******S* Nov 3 07:24:38 140.123.22.199:16952 -> xxx.yyy.255.211:4899 SYN ******S* Nov 3 07:24:38 140.123.22.199:16955 -> xxx.yyy.255.214:4899 SYN ******S* 69698 Nov 3 04:09:40 218.25.75.94:4944 -> xxx.yyy.1.0:1433 SYN ******S* Nov 3 04:09:40 218.25.75.94:4948 -> xxx.yyy.1.1:1433 SYN ******S* Nov 3 04:09:40 218.25.75.94:4950 -> xxx.yyy.1.2:1433 SYN ******S* Nov 3 04:09:40 218.25.75.94:4952 -> xxx.yyy.1.3:1433 SYN ******S* Nov 3 04:09:40 218.25.75.94:4953 -> xxx.yyy.1.4:1433 SYN ******S* Nov 3 04:09:37 218.25.75.94:4954 -> xxx.yyy.1.5:1433 SYN ******S* Nov 3 04:09:40 218.25.75.94:4957 -> xxx.yyy.1.6:1433 SYN ******S* Nov 3 04:09:37 218.25.75.94:4959 -> xxx.yyy.1.8:1433 SYN ******S* [...] Nov 3 06:28:06 218.25.75.94:4128 -> xxx.yyy.162.91:1433 SYN ******S* Nov 3 06:28:06 218.25.75.94:4121 -> xxx.yyy.162.90:1433 SYN ******S* Nov 3 06:28:06 218.25.75.94:4116 -> xxx.yyy.162.89:1433 SYN ******S* Nov 3 06:28:06 218.25.75.94:4110 -> xxx.yyy.162.88:1433 SYN ******S* Nov 3 06:28:06 218.25.75.94:4097 -> xxx.yyy.162.87:1433 SYN ******S* Nov 3 06:28:06 218.25.75.94:4218 -> xxx.yyy.162.104:1433 SYN ******S* Nov 3 06:28:06 218.25.75.94:4211 -> xxx.yyy.162.103:1433 SYN ******S* Nov 3 06:28:06 218.25.75.94:4203 -> xxx.yyy.162.102:1433 SYN ******S* 50748 Nov 3 05:59:31 218.193.28.226:2888 -> xxx.yyy.1.0:1433 SYN ******S* Nov 3 05:59:28 218.193.28.226:2892 -> xxx.yyy.1.1:1433 SYN ******S* Nov 3 05:59:31 218.193.28.226:2896 -> xxx.yyy.1.2:1433 SYN ******S* Nov 3 05:59:28 218.193.28.226:2899 -> xxx.yyy.1.3:1433 SYN ******S* Nov 3 05:59:28 218.193.28.226:2903 -> xxx.yyy.1.4:1433 SYN ******S* Nov 3 05:59:31 218.193.28.226:2907 -> xxx.yyy.1.5:1433 SYN ******S* Nov 3 05:59:31 218.193.28.226:2910 -> xxx.yyy.1.6:1433 SYN ******S* Nov 3 05:59:31 218.193.28.226:2914 -> xxx.yyy.1.7:1433 SYN ******S* [...] Nov 3 08:54:31 218.193.28.226:2682 -> xxx.yyy.208.204:1433 SYN ******S* Nov 3 08:54:31 218.193.28.226:1169 -> xxx.yyy.208.206:1433 SYN ******S* Nov 3 08:54:31 218.193.28.226:4418 -> xxx.yyy.208.205:1433 SYN ******S* Nov 3 08:54:31 218.193.28.226:2549 -> xxx.yyy.208.183:1433 SYN ******S* Nov 3 08:54:31 218.193.28.226:4995 -> xxx.yyy.208.131:1433 SYN ******S* Nov 3 08:54:32 218.193.28.226:1982 -> xxx.yyy.208.186:1433 SYN ******S* Nov 3 08:54:32 218.193.28.226:4990 -> xxx.yyy.208.138:1433 SYN ******S* Nov 3 08:54:32 218.193.28.226:2667 -> xxx.yyy.208.213:1433 SYN ******S* 49050 Nov 3 19:33:39 24.214.216.39:4226 -> xxx.yyy.1.2:1433 SYN ******S* Nov 3 19:33:42 24.214.216.39:4227 -> xxx.yyy.1.3:1433 SYN ******S* Nov 3 19:33:42 24.214.216.39:4234 -> xxx.yyy.1.10:1433 SYN ******S* Nov 3 19:33:42 24.214.216.39:4236 -> xxx.yyy.1.12:1433 SYN ******S* Nov 3 19:33:42 24.214.216.39:4237 -> xxx.yyy.1.13:1433 SYN ******S* Nov 3 19:33:42 24.214.216.39:4238 -> xxx.yyy.1.14:1433 SYN ******S* Nov 3 19:33:42 24.214.216.39:4240 -> xxx.yyy.1.16:1433 SYN ******S* Nov 3 19:33:42 24.214.216.39:4242 -> xxx.yyy.1.18:1433 SYN ******S* [...] Nov 3 22:36:53 24.214.216.39:3801 -> xxx.yyy.205.52:1433 SYN ******S* Nov 3 22:36:54 24.214.216.39:4005 -> xxx.yyy.205.121:1433 SYN ******S* Nov 3 22:36:54 24.214.216.39:4014 -> xxx.yyy.205.124:1433 SYN ******S* Nov 3 22:36:54 24.214.216.39:3817 -> xxx.yyy.205.57:1433 SYN ******S* Nov 3 22:36:54 24.214.216.39:3819 -> xxx.yyy.205.58:1433 SYN ******S* Nov 3 22:36:54 24.214.216.39:3831 -> xxx.yyy.205.59:1433 SYN ******S* Nov 3 22:36:54 24.214.216.39:3851 -> xxx.yyy.205.63:1433 SYN ******S* Nov 3 22:36:54 24.214.216.39:3850 -> xxx.yyy.205.62:1433 SYN ******S* Nov 3 22:36:55 24.214.216.39:3854 -> xxx.yyy.205.64:1433 SYN ******S* 44846 Nov 3 00:06:58 67.85.229.122:1085 -> xxx.yyy.1.1:1433 SYN ******S* Nov 3 00:06:58 67.85.229.122:1089 -> xxx.yyy.1.5:1433 SYN ******S* Nov 3 00:07:01 67.85.229.122:1091 -> xxx.yyy.1.7:1433 SYN ******S* Nov 3 00:06:58 67.85.229.122:1092 -> xxx.yyy.1.8:1433 SYN ******S* Nov 3 00:07:01 67.85.229.122:1095 -> xxx.yyy.1.11:1433 SYN ******S* Nov 3 00:07:01 67.85.229.122:1096 -> xxx.yyy.1.12:1433 SYN ******S* Nov 3 00:07:01 67.85.229.122:1097 -> xxx.yyy.1.13:1433 SYN ******S* Nov 3 00:06:58 67.85.229.122:1099 -> xxx.yyy.1.15:1433 SYN ******S* [...] Nov 3 00:22:34 67.85.229.122:3094 -> xxx.yyy.255.232:1433 SYN ******S* Nov 3 00:22:35 67.85.229.122:3103 -> xxx.yyy.255.241:1433 SYN ******S* Nov 3 00:22:35 67.85.229.122:3101 -> xxx.yyy.255.239:1433 SYN ******S* Nov 3 00:22:35 67.85.229.122:3104 -> xxx.yyy.255.242:1433 SYN ******S* Nov 3 00:22:35 67.85.229.122:3102 -> xxx.yyy.255.240:1433 SYN ******S* Nov 3 00:22:35 67.85.229.122:3109 -> xxx.yyy.255.247:1433 SYN ******S* Nov 3 00:22:35 67.85.229.122:3113 -> xxx.yyy.255.251:1433 SYN ******S* Nov 3 00:22:35 67.85.229.122:3114 -> xxx.yyy.255.252:1433 SYN ******S* Nov 3 00:22:35 67.85.229.122:3115 -> xxx.yyy.255.253:1433 SYN ******S* 38952 Nov 3 06:27:13 62.165.201.147:2335 -> xxx.yyy.1.1:4899 SYN ******S* Nov 3 06:27:13 62.165.201.147:2336 -> xxx.yyy.1.2:4899 SYN ******S* Nov 3 06:27:13 62.165.201.147:2337 -> xxx.yyy.1.3:4899 SYN ******S* Nov 3 06:27:12 62.165.201.147:2344 -> xxx.yyy.1.7:4899 SYN ******S* Nov 3 06:27:12 62.165.201.147:2339 -> xxx.yyy.1.4:4899 SYN ******S* Nov 3 06:27:12 62.165.201.147:2341 -> xxx.yyy.1.5:4899 SYN ******S* Nov 3 06:27:12 62.165.201.147:2343 -> xxx.yyy.1.6:4899 SYN ******S* Nov 3 06:27:12 62.165.201.147:2346 -> xxx.yyy.1.8:4899 SYN ******S* [...] Nov 3 06:34:41 62.165.201.147:3339 -> xxx.yyy.253.246:4899 SYN ******S* Nov 3 06:34:41 62.165.201.147:3340 -> xxx.yyy.253.247:4899 SYN ******S* Nov 3 06:34:41 62.165.201.147:3344 -> xxx.yyy.253.250:4899 SYN ******S* Nov 3 06:34:41 62.165.201.147:3347 -> xxx.yyy.253.253:4899 SYN ******S* Nov 3 06:34:41 62.165.201.147:3345 -> xxx.yyy.253.251:4899 SYN ******S* Nov 3 06:34:41 62.165.201.147:3343 -> xxx.yyy.253.249:4899 SYN ******S* Nov 3 06:34:41 62.165.201.147:3341 -> xxx.yyy.253.248:4899 SYN ******S* Nov 3 06:34:41 62.165.201.147:3346 -> xxx.yyy.253.252:4899 SYN ******S* 35967 Nov 3 04:25:28 202.103.229.201:20370 -> xxx.yyy.1.1:1433 SYN ******S* Nov 3 04:25:28 202.103.229.201:20389 -> xxx.yyy.1.11:1433 SYN ******S* Nov 3 04:25:28 202.103.229.201:20399 -> xxx.yyy.1.18:1433 SYN ******S* Nov 3 04:25:31 202.103.229.201:20400 -> xxx.yyy.1.19:1433 SYN ******S* Nov 3 04:25:28 202.103.229.201:20415 -> xxx.yyy.1.27:1433 SYN ******S* Nov 3 04:25:28 202.103.229.201:20418 -> xxx.yyy.1.30:1433 SYN ******S* Nov 3 04:25:31 202.103.229.201:20419 -> xxx.yyy.1.31:1433 SYN ******S* Nov 3 04:25:28 202.103.229.201:20421 -> xxx.yyy.1.33:1433 SYN ******S* [...] Nov 3 07:18:11 202.103.229.201:10730 -> xxx.yyy.183.208:1433 SYN ******S* Nov 3 07:18:11 202.103.229.201:59579 -> xxx.yyy.183.149:1433 SYN ******S* Nov 3 07:18:11 202.103.229.201:10494 -> xxx.yyy.183.177:1433 SYN ******S* Nov 3 07:18:11 202.103.229.201:10539 -> xxx.yyy.183.180:1433 SYN ******S* Nov 3 07:18:12 202.103.229.201:10564 -> xxx.yyy.183.182:1433 SYN ******S* Nov 3 07:18:12 202.103.229.201:10572 -> xxx.yyy.183.184:1433 SYN ******S* Nov 3 07:18:12 202.103.229.201:10711 -> xxx.yyy.183.202:1433 SYN ******S* Nov 3 07:18:12 202.103.229.201:10739 -> xxx.yyy.183.210:1433 SYN ******S* 35384 Nov 3 23:49:28 148.235.130.172:3952 -> xxx.yyy.1.2:1433 SYN ******S* Nov 3 23:49:25 148.235.130.172:3953 -> xxx.yyy.1.3:1433 SYN ******S* Nov 3 23:49:25 148.235.130.172:3954 -> xxx.yyy.1.4:1433 SYN ******S* Nov 3 23:49:28 148.235.130.172:3955 -> xxx.yyy.1.5:1433 SYN ******S* Nov 3 23:49:25 148.235.130.172:3956 -> xxx.yyy.1.6:1433 SYN ******S* Nov 3 23:49:25 148.235.130.172:3957 -> xxx.yyy.1.7:1433 SYN ******S* Nov 3 23:49:25 148.235.130.172:3958 -> xxx.yyy.1.8:1433 SYN ******S* Nov 3 23:49:25 148.235.130.172:3963 -> xxx.yyy.1.13:1433 SYN ******S* [...] Nov 4 00:00:00 148.235.130.172:4034 -> xxx.yyy.232.189:1433 SYN ******S* Nov 4 00:00:00 148.235.130.172:4035 -> xxx.yyy.232.190:1433 SYN ******S* Nov 4 00:00:00 148.235.130.172:4036 -> xxx.yyy.232.191:1433 SYN ******S* Nov 4 00:00:00 148.235.130.172:3757 -> xxx.yyy.231.169:1433 SYN ******S* Nov 4 00:00:00 148.235.130.172:3756 -> xxx.yyy.231.168:1433 SYN ******S* Nov 4 00:00:00 148.235.130.172:4037 -> xxx.yyy.232.192:1433 SYN ******S* Nov 4 00:00:00 148.235.130.172:4038 -> xxx.yyy.232.193:1433 SYN ******S* Nov 4 00:00:00 148.235.130.172:4039 -> xxx.yyy.232.194:1433 SYN ******S* Nov 4 00:00:00 148.235.130.172:4040 -> xxx.yyy.232.195:1433 SYN ******S* 34493 Nov 3 16:42:12 64.241.177.25:4078 -> xxx.yyy.1.3:1433 SYN ******S* Nov 3 16:42:15 64.241.177.25:4079 -> xxx.yyy.1.4:1433 SYN ******S* Nov 3 16:42:15 64.241.177.25:4082 -> xxx.yyy.1.7:1433 SYN ******S* Nov 3 16:42:15 64.241.177.25:4086 -> xxx.yyy.1.11:1433 SYN ******S* Nov 3 16:42:12 64.241.177.25:4089 -> xxx.yyy.1.14:1433 SYN ******S* Nov 3 16:42:13 64.241.177.25:4110 -> xxx.yyy.1.35:1433 SYN ******S* Nov 3 16:42:13 64.241.177.25:4112 -> xxx.yyy.1.37:1433 SYN ******S* Nov 3 16:42:13 64.241.177.25:4115 -> xxx.yyy.1.40:1433 SYN ******S* [...] Nov 3 16:54:01 64.241.177.25:1680 -> xxx.yyy.255.212:1433 SYN ******S* Nov 3 16:54:01 64.241.177.25:1697 -> xxx.yyy.255.229:1433 SYN ******S* Nov 3 16:54:01 64.241.177.25:1706 -> xxx.yyy.255.238:1433 SYN ******S* Nov 3 16:54:01 64.241.177.25:1714 -> xxx.yyy.255.246:1433 SYN ******S* Nov 3 16:54:01 64.241.177.25:1716 -> xxx.yyy.255.248:1433 SYN ******S* Nov 3 16:54:01 64.241.177.25:1713 -> xxx.yyy.255.245:1433 SYN ******S* Nov 3 16:54:01 64.241.177.25:1722 -> xxx.yyy.255.254:1433 SYN ******S* Nov 3 16:54:01 64.241.177.25:1720 -> xxx.yyy.255.252:1433 SYN ******S* Nov 3 16:54:01 64.241.177.25:1721 -> xxx.yyy.255.253:1433 SYN ******S* 27903 [...] 25614 Nov 3 11:22:55 216.222.92.13:2123 -> xxx.yyy.1.2:80 SYN ******S* Nov 3 11:22:55 216.222.92.13:2124 -> xxx.yyy.1.3:80 SYN ******S* Nov 3 11:22:55 216.222.92.13:2125 -> xxx.yyy.1.4:80 SYN ******S* Nov 3 11:22:55 216.222.92.13:2126 -> xxx.yyy.1.5:80 SYN ******S* Nov 3 11:22:55 216.222.92.13:2127 -> xxx.yyy.1.6:80 SYN ******S* Nov 3 11:22:55 216.222.92.13:2128 -> xxx.yyy.1.7:80 SYN ******S* Nov 3 11:22:55 216.222.92.13:2129 -> xxx.yyy.1.8:80 SYN ******S* Nov 3 11:22:55 216.222.92.13:2130 -> xxx.yyy.1.9:80 SYN ******S* [...] Nov 3 11:31:33 216.222.92.13:1942 -> xxx.yyy.255.241:80 SYN ******S* Nov 3 11:31:33 216.222.92.13:1955 -> xxx.yyy.255.254:80 SYN ******S* Nov 3 11:31:33 216.222.92.13:1947 -> xxx.yyy.255.246:80 SYN ******S* Nov 3 11:31:33 216.222.92.13:1954 -> xxx.yyy.255.253:80 SYN ******S* Nov 3 11:31:33 216.222.92.13:1946 -> xxx.yyy.255.245:80 SYN ******S* Nov 3 11:31:33 216.222.92.13:1948 -> xxx.yyy.255.247:80 SYN ******S* Nov 3 11:31:33 216.222.92.13:1944 -> xxx.yyy.255.243:80 SYN ******S* Nov 3 11:31:33 216.222.92.13:1941 -> xxx.yyy.255.240:80 SYN ******S* Nov 3 11:31:33 216.222.92.13:1951 -> xxx.yyy.255.250:80 SYN ******S* 23655 Nov 3 08:10:42 24.181.106.180:2416 -> xxx.yyy.1.1:4899 SYN ******S* Nov 3 08:10:42 24.181.106.180:2417 -> xxx.yyy.1.2:4899 SYN ******S* Nov 3 08:10:42 24.181.106.180:2418 -> xxx.yyy.1.3:4899 SYN ******S* Nov 3 08:10:42 24.181.106.180:2419 -> xxx.yyy.1.4:4899 SYN ******S* Nov 3 08:10:42 24.181.106.180:2421 -> xxx.yyy.1.6:4899 SYN ******S* Nov 3 08:10:42 24.181.106.180:2424 -> xxx.yyy.1.9:4899 SYN ******S* Nov 3 08:10:42 24.181.106.180:2427 -> xxx.yyy.1.12:4899 SYN ******S* Nov 3 08:10:42 24.181.106.180:2428 -> xxx.yyy.1.13:4899 SYN ******S* [...] Nov 3 08:17:06 24.181.106.180:1502 -> xxx.yyy.254.251:4899 SYN ******S* Nov 3 08:17:06 24.181.106.180:1503 -> xxx.yyy.254.252:4899 SYN ******S* Nov 3 08:17:06 24.181.106.180:1504 -> xxx.yyy.254.253:4899 SYN ******S* Nov 3 08:17:08 24.181.106.180:1408 -> xxx.yyy.254.158:4899 SYN ******S* Nov 3 08:17:08 24.181.106.180:1405 -> xxx.yyy.254.155:4899 SYN ******S* Nov 3 08:17:08 24.181.106.180:1430 -> xxx.yyy.254.180:4899 SYN ******S* Nov 3 08:17:08 24.181.106.180:1414 -> xxx.yyy.254.164:4899 SYN ******S* Nov 3 08:17:08 24.181.106.180:1411 -> xxx.yyy.254.161:4899 SYN ******S* 22431 Nov 3 07:34:59 68.252.99.23:4306 -> xxx.yyy.1.1:80 SYN ******S* Nov 3 07:34:59 68.252.99.23:4308 -> xxx.yyy.1.3:80 SYN ******S* Nov 3 07:34:58 68.252.99.23:4313 -> xxx.yyy.1.8:80 SYN ******S* Nov 3 07:34:58 68.252.99.23:4315 -> xxx.yyy.1.10:80 SYN ******S* Nov 3 07:34:58 68.252.99.23:4317 -> xxx.yyy.1.12:80 SYN ******S* Nov 3 07:34:58 68.252.99.23:4319 -> xxx.yyy.1.14:80 SYN ******S* Nov 3 07:34:59 68.252.99.23:4321 -> xxx.yyy.1.16:80 SYN ******S* Nov 3 07:34:58 68.252.99.23:4324 -> xxx.yyy.1.19:80 SYN ******S* [...] Nov 3 08:05:55 68.252.99.23:3063 -> xxx.yyy.254.173:80 SYN ******S* Nov 3 08:05:55 68.252.99.23:3079 -> xxx.yyy.254.189:80 SYN ******S* Nov 3 08:05:55 68.252.99.23:3095 -> xxx.yyy.254.205:80 SYN ******S* Nov 3 08:05:55 68.252.99.23:3124 -> xxx.yyy.254.234:80 SYN ******S* Nov 3 08:05:55 68.252.99.23:3140 -> xxx.yyy.254.250:80 SYN ******S* Nov 3 08:05:55 68.252.99.23:3137 -> xxx.yyy.254.247:80 SYN ******S* Nov 3 08:05:55 68.252.99.23:3118 -> xxx.yyy.254.228:80 SYN ******S* Nov 3 08:05:55 68.252.99.23:3125 -> xxx.yyy.254.235:80 SYN ******S* 22006 Nov 3 16:00:45 67.21.231.14:1370 -> xxx.yyy.1.4:1433 SYN ******S* Nov 3 16:00:45 67.21.231.14:1371 -> xxx.yyy.1.5:1433 SYN ******S* Nov 3 16:00:45 67.21.231.14:1375 -> xxx.yyy.1.9:1433 SYN ******S* Nov 3 16:00:45 67.21.231.14:1376 -> xxx.yyy.1.10:1433 SYN ******S* Nov 3 16:00:45 67.21.231.14:1377 -> xxx.yyy.1.11:1433 SYN ******S* Nov 3 16:00:45 67.21.231.14:1385 -> xxx.yyy.1.19:1433 SYN ******S* Nov 3 16:00:48 67.21.231.14:1389 -> xxx.yyy.1.23:1433 SYN ******S* Nov 3 16:00:45 67.21.231.14:1391 -> xxx.yyy.1.25:1433 SYN ******S* [...] Nov 3 16:12:45 67.21.231.14:4816 -> xxx.yyy.255.190:1433 SYN ******S* Nov 3 16:12:45 67.21.231.14:4820 -> xxx.yyy.255.193:1433 SYN ******S* Nov 3 16:12:45 67.21.231.14:4846 -> xxx.yyy.255.209:1433 SYN ******S* Nov 3 16:12:45 67.21.231.14:4852 -> xxx.yyy.255.212:1433 SYN ******S* Nov 3 16:12:45 67.21.231.14:4849 -> xxx.yyy.255.210:1433 SYN ******S* Nov 3 16:12:45 67.21.231.14:4853 -> xxx.yyy.255.213:1433 SYN ******S* Nov 3 16:12:45 67.21.231.14:4877 -> xxx.yyy.255.229:1433 SYN ******S* Nov 3 16:12:45 67.21.231.14:4880 -> xxx.yyy.255.232:1433 SYN ******S* 20655 [...] 15419 [...] 13573 Nov 3 07:49:57 218.106.101.234:47202 -> xxx.yyy.1.2:1433 SYN ******S* Nov 3 07:49:54 218.106.101.234:47270 -> xxx.yyy.1.3:1433 SYN ******S* Nov 3 07:49:54 218.106.101.234:50676 -> xxx.yyy.1.5:1433 SYN ******S* Nov 3 07:49:55 218.106.101.234:6859 -> xxx.yyy.1.6:1433 SYN ******S* Nov 3 07:49:55 218.106.101.234:4507 -> xxx.yyy.1.7:1433 SYN ******S* Nov 3 07:49:55 218.106.101.234:4583 -> xxx.yyy.1.8:1433 SYN ******S* Nov 3 07:49:55 218.106.101.234:7091 -> xxx.yyy.1.9:1433 SYN ******S* Nov 3 07:49:55 218.106.101.234:4616 -> xxx.yyy.1.10:1433 SYN ******S* [...] Nov 3 09:13:09 218.106.101.234:49398 -> xxx.yyy.227.40:1433 SYN ******S* Nov 3 09:13:09 218.106.101.234:49792 -> xxx.yyy.227.41:1433 SYN ******S* Nov 3 09:13:10 218.106.101.234:42844 -> xxx.yyy.227.69:1433 SYN ******S* Nov 3 09:13:10 218.106.101.234:10491 -> xxx.yyy.227.46:1433 SYN ******S* Nov 3 09:13:10 218.106.101.234:54732 -> xxx.yyy.227.47:1433 SYN ******S* Nov 3 09:13:10 218.106.101.234:4562 -> xxx.yyy.227.93:1433 SYN ******S* Nov 3 09:13:10 218.106.101.234:38759 -> xxx.yyy.227.94:1433 SYN ******S* Nov 3 09:13:10 218.106.101.234:49516 -> xxx.yyy.227.96:1433 SYN ******S* Nov 3 09:13:10 218.106.101.234:10264 -> xxx.yyy.227.97:1433 SYN ******S* 13312 [...] 11852 Nov 3 01:24:30 195.175.135.171:3890 -> xxx.yyy.75.69:17300 SYN ******S* Nov 3 01:24:30 195.175.135.171:3884 -> xxx.yyy.75.63:17300 SYN ******S* Nov 3 01:24:30 195.175.135.171:3893 -> xxx.yyy.75.72:17300 SYN ******S* Nov 3 01:24:30 195.175.135.171:3887 -> xxx.yyy.75.66:17300 SYN ******S* Nov 3 01:24:30 195.175.135.171:3896 -> xxx.yyy.75.75:17300 SYN ******S* Nov 3 01:24:30 195.175.135.171:3899 -> xxx.yyy.75.78:17300 SYN ******S* Nov 3 01:24:30 195.175.135.171:3882 -> xxx.yyy.75.61:17300 SYN ******S* Nov 3 01:24:30 195.175.135.171:3902 -> xxx.yyy.75.81:17300 SYN ******S* [...] Nov 3 02:20:11 195.175.135.171:3922 -> xxx.yyy.232.130:17300 SYN ******S* Nov 3 02:20:11 195.175.135.171:3933 -> xxx.yyy.232.133:17300 SYN ******S* Nov 3 02:20:11 195.175.135.171:3936 -> xxx.yyy.232.136:17300 SYN ******S* Nov 3 02:20:11 195.175.135.171:3957 -> xxx.yyy.232.151:17300 SYN ******S* Nov 3 02:20:11 195.175.135.171:3963 -> xxx.yyy.232.157:17300 SYN ******S* Nov 3 02:20:11 195.175.135.171:3950 -> xxx.yyy.232.145:17300 SYN ******S* Nov 3 02:20:11 195.175.135.171:3953 -> xxx.yyy.232.148:17300 SYN ******S* Nov 3 02:20:11 195.175.135.171:3960 -> xxx.yyy.232.154:17300 SYN ******S* 7346 [...] 6173 Nov 3 22:48:13 222.147.242.11:2054 -> xxx.yyy.72.129:5554 SYN ******S* Nov 3 22:48:14 222.147.242.11:1537 -> xxx.yyy.72.129:1023 SYN ******S* Nov 3 22:48:13 222.147.242.11:2023 -> xxx.yyy.72.133:5554 SYN ******S* Nov 3 22:48:14 222.147.242.11:1504 -> xxx.yyy.72.133:1023 SYN ******S* Nov 3 22:48:16 222.147.242.11:3801 -> xxx.yyy.72.133:9898 SYN ******S* Nov 3 22:48:13 222.147.242.11:2103 -> xxx.yyy.72.124:5554 SYN ******S* Nov 3 22:48:14 222.147.242.11:1544 -> xxx.yyy.72.124:1023 SYN ******S* Nov 3 22:48:16 222.147.242.11:4106 -> xxx.yyy.72.124:9898 SYN ******S* [...] Nov 3 22:49:39 222.147.242.11:3825 -> xxx.yyy.92.225:9898 SYN ******S* Nov 3 22:49:39 222.147.242.11:3827 -> xxx.yyy.92.226:9898 SYN ******S* Nov 3 22:49:40 222.147.242.11:2342 -> xxx.yyy.92.233:9898 SYN ******S* Nov 3 22:49:40 222.147.242.11:2366 -> xxx.yyy.92.234:9898 SYN ******S* Nov 3 22:49:40 222.147.242.11:2368 -> xxx.yyy.92.235:9898 SYN ******S* Nov 3 22:49:40 222.147.242.11:2373 -> xxx.yyy.92.237:9898 SYN ******S* Nov 3 22:49:40 222.147.242.11:2410 -> xxx.yyy.92.239:9898 SYN ******S* Nov 3 22:49:40 222.147.242.11:2372 -> xxx.yyy.92.236:9898 SYN ******S* Nov 3 22:49:40 222.147.242.11:2835 -> xxx.yyy.92.246:9898 SYN ******S* 5783 [...] 4903 Nov 3 22:56:18 210.178.55.2:2151 -> xxx.yyy.133.32:5554 SYN ******S* Nov 3 22:56:21 210.178.55.2:4052 -> xxx.yyy.133.32:9898 SYN ******S* Nov 3 22:56:18 210.178.55.2:2190 -> xxx.yyy.133.33:5554 SYN ******S* Nov 3 22:56:19 210.178.55.2:2787 -> xxx.yyy.133.33:1023 SYN ******S* Nov 3 22:56:21 210.178.55.2:4053 -> xxx.yyy.133.33:9898 SYN ******S* Nov 3 22:56:18 210.178.55.2:2305 -> xxx.yyy.133.38:5554 SYN ******S* Nov 3 22:56:19 210.178.55.2:2818 -> xxx.yyy.133.38:1023 SYN ******S* Nov 3 22:56:18 210.178.55.2:2334 -> xxx.yyy.133.45:5554 SYN ******S* [...] Nov 3 22:58:11 210.178.55.2:3945 -> xxx.yyy.153.120:9898 SYN ******S* Nov 3 22:58:11 210.178.55.2:3929 -> xxx.yyy.153.119:9898 SYN ******S* Nov 3 22:58:11 210.178.55.2:3946 -> xxx.yyy.153.121:9898 SYN ******S* Nov 3 22:58:11 210.178.55.2:3992 -> xxx.yyy.153.122:9898 SYN ******S* Nov 3 22:58:11 210.178.55.2:4023 -> xxx.yyy.153.131:9898 SYN ******S* Nov 3 22:58:11 210.178.55.2:4009 -> xxx.yyy.153.130:9898 SYN ******S* Nov 3 22:58:11 210.178.55.2:4018 -> xxx.yyy.153.126:9898 SYN ******S* Nov 3 22:58:11 210.178.55.2:4028 -> xxx.yyy.153.133:9898 SYN ******S* 4853 Nov 3 22:56:15 221.163.49.161:2743 -> xxx.yyy.174.3:5554 SYN ******S* Nov 3 22:56:16 221.163.49.161:3263 -> xxx.yyy.174.3:1023 SYN ******S* Nov 3 22:56:15 221.163.49.161:2744 -> xxx.yyy.174.4:5554 SYN ******S* Nov 3 22:56:16 221.163.49.161:3264 -> xxx.yyy.174.4:1023 SYN ******S* Nov 3 22:56:15 221.163.49.161:2755 -> xxx.yyy.174.8:5554 SYN ******S* Nov 3 22:56:18 221.163.49.161:4501 -> xxx.yyy.174.8:9898 SYN ******S* Nov 3 22:56:15 221.163.49.161:2764 -> xxx.yyy.174.13:5554 SYN ******S* Nov 3 22:56:18 221.163.49.161:4517 -> xxx.yyy.174.13:9898 SYN ******S* [...] Nov 3 22:56:59 221.163.49.161:3207 -> xxx.yyy.194.97:9898 SYN ******S* Nov 3 22:56:59 221.163.49.161:3203 -> xxx.yyy.194.94:9898 SYN ******S* Nov 3 22:56:59 221.163.49.161:3218 -> xxx.yyy.194.100:9898 SYN ******S* Nov 3 22:56:59 221.163.49.161:3225 -> xxx.yyy.194.104:9898 SYN ******S* Nov 3 22:56:59 221.163.49.161:3227 -> xxx.yyy.194.103:9898 SYN ******S* Nov 3 22:56:59 221.163.49.161:3251 -> xxx.yyy.194.111:9898 SYN ******S* Nov 3 22:56:59 221.163.49.161:3252 -> xxx.yyy.194.112:9898 SYN ******S* Nov 3 22:56:59 221.163.49.161:3262 -> xxx.yyy.194.114:9898 SYN ******S* 4578 Nov 3 22:56:13 221.163.128.211:2245 -> xxx.yyy.174.26:5554 SYN ******S* Nov 3 22:56:13 221.163.128.211:2249 -> xxx.yyy.174.21:5554 SYN ******S* Nov 3 22:56:13 221.163.128.211:2254 -> xxx.yyy.174.16:5554 SYN ******S* Nov 3 22:56:16 221.163.128.211:3865 -> xxx.yyy.174.16:9898 SYN ******S* Nov 3 22:56:13 221.163.128.211:2257 -> xxx.yyy.174.13:5554 SYN ******S* Nov 3 22:56:14 221.163.128.211:2814 -> xxx.yyy.174.13:1023 SYN ******S* Nov 3 22:56:16 221.163.128.211:3867 -> xxx.yyy.174.13:9898 SYN ******S* Nov 3 22:56:13 221.163.128.211:2258 -> xxx.yyy.174.12:5554 SYN ******S* [...] Nov 3 22:56:55 221.163.128.211:3369 -> xxx.yyy.194.86:9898 SYN ******S* Nov 3 22:56:55 221.163.128.211:3382 -> xxx.yyy.194.87:9898 SYN ******S* Nov 3 22:56:55 221.163.128.211:3478 -> xxx.yyy.194.100:9898 SYN ******S* Nov 3 22:56:55 221.163.128.211:3473 -> xxx.yyy.194.92:9898 SYN ******S* Nov 3 22:56:55 221.163.128.211:3479 -> xxx.yyy.194.95:9898 SYN ******S* Nov 3 22:56:55 221.163.128.211:3486 -> xxx.yyy.194.106:9898 SYN ******S* Nov 3 22:56:55 221.163.128.211:3488 -> xxx.yyy.194.107:9898 SYN ******S* Nov 3 22:56:55 221.163.128.211:3501 -> xxx.yyy.194.112:9898 SYN ******S* Nov 3 22:56:55 221.163.128.211:3506 -> xxx.yyy.194.117:9898 SYN ******S* 4571 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions