[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Nov 5 05:24:14 66.207.12.72:4225 -> xxx.yyy.1.1:1433 SYN ******S* Nov 5 05:24:14 66.207.12.72:4226 -> xxx.yyy.1.2:1433 SYN ******S* Nov 5 05:24:11 66.207.12.72:4227 -> xxx.yyy.1.3:1433 SYN ******S* Nov 5 05:24:11 66.207.12.72:4228 -> xxx.yyy.1.4:1433 SYN ******S* Nov 5 05:24:14 66.207.12.72:4229 -> xxx.yyy.1.5:1433 SYN ******S* Nov 5 05:24:14 66.207.12.72:4230 -> xxx.yyy.1.6:1433 SYN ******S* Nov 5 05:24:14 66.207.12.72:4231 -> xxx.yyy.1.7:1433 SYN ******S* Nov 5 05:24:14 66.207.12.72:4232 -> xxx.yyy.1.8:1433 SYN ******S* [...] Nov 5 05:38:11 66.207.12.72:4927 -> xxx.yyy.255.241:1433 SYN ******S* Nov 5 05:38:12 66.207.12.72:4940 -> xxx.yyy.255.254:1433 SYN ******S* Nov 5 05:38:12 66.207.12.72:4937 -> xxx.yyy.255.251:1433 SYN ******S* Nov 5 05:38:12 66.207.12.72:4933 -> xxx.yyy.255.247:1433 SYN ******S* Nov 5 05:38:12 66.207.12.72:4934 -> xxx.yyy.255.248:1433 SYN ******S* Nov 5 05:38:12 66.207.12.72:4938 -> xxx.yyy.255.252:1433 SYN ******S* Nov 5 05:38:12 66.207.12.72:4939 -> xxx.yyy.255.253:1433 SYN ******S* Nov 5 05:38:12 66.207.12.72:4935 -> xxx.yyy.255.249:1433 SYN ******S* 70988 Nov 5 01:57:06 80.146.105.177:1318 -> xxx.yyy.1.1:1433 SYN ******S* Nov 5 01:57:03 80.146.105.177:1319 -> xxx.yyy.1.2:1433 SYN ******S* Nov 5 01:57:06 80.146.105.177:1320 -> xxx.yyy.1.3:1433 SYN ******S* Nov 5 01:57:06 80.146.105.177:1321 -> xxx.yyy.1.4:1433 SYN ******S* Nov 5 01:57:06 80.146.105.177:1322 -> xxx.yyy.1.5:1433 SYN ******S* Nov 5 01:57:06 80.146.105.177:1323 -> xxx.yyy.1.6:1433 SYN ******S* Nov 5 01:57:06 80.146.105.177:1324 -> xxx.yyy.1.7:1433 SYN ******S* Nov 5 01:57:03 80.146.105.177:1325 -> xxx.yyy.1.8:1433 SYN ******S* [...] Nov 5 06:16:27 80.146.105.177:3707 -> xxx.yyy.zzz.246:1433 SYN ******S* Nov 5 06:16:27 80.146.105.177:3708 -> xxx.yyy.zzz.247:1433 SYN ******S* Nov 5 06:16:27 80.146.105.177:3709 -> xxx.yyy.zzz.248:1433 SYN ******S* Nov 5 06:16:27 80.146.105.177:3710 -> xxx.yyy.zzz.249:1433 SYN ******S* Nov 5 06:16:27 80.146.105.177:3711 -> xxx.yyy.zzz.250:1433 SYN ******S* Nov 5 06:16:27 80.146.105.177:3712 -> xxx.yyy.zzz.251:1433 SYN ******S* Nov 5 06:16:27 80.146.105.177:3713 -> xxx.yyy.zzz.252:1433 SYN ******S* Nov 5 06:16:27 80.146.105.177:3714 -> xxx.yyy.zzz.253:1433 SYN ******S* Nov 5 06:16:27 80.146.105.177:3715 -> xxx.yyy.zzz.254:1433 SYN ******S* 67309 Nov 5 00:00:04 212.182.58.98:61113 -> xxx.yyy.12.79:1433 SYN ******S* Nov 5 00:00:07 212.182.58.98:61121 -> xxx.yyy.12.83:1433 SYN ******S* Nov 5 00:00:07 212.182.58.98:61123 -> xxx.yyy.12.84:1433 SYN ******S* Nov 5 00:00:07 212.182.58.98:61126 -> xxx.yyy.12.86:1433 SYN ******S* Nov 5 00:00:08 212.182.58.98:61133 -> xxx.yyy.12.88:1433 SYN ******S* Nov 5 00:00:08 212.182.58.98:61135 -> xxx.yyy.12.89:1433 SYN ******S* Nov 5 00:00:08 212.182.58.98:61137 -> xxx.yyy.12.90:1433 SYN ******S* Nov 5 00:00:08 212.182.58.98:61143 -> xxx.yyy.12.94:1433 SYN ******S* [...] Nov 5 02:16:58 212.182.58.98:61637 -> xxx.yyy.164.214:1433 SYN ******S* Nov 5 02:16:59 212.182.58.98:61645 -> xxx.yyy.164.217:1433 SYN ******S* Nov 5 02:16:59 212.182.58.98:61644 -> xxx.yyy.164.216:1433 SYN ******S* Nov 5 02:16:59 212.182.58.98:61653 -> xxx.yyy.164.219:1433 SYN ******S* Nov 5 02:16:59 212.182.58.98:61652 -> xxx.yyy.164.218:1433 SYN ******S* Nov 5 02:16:59 212.182.58.98:61654 -> xxx.yyy.164.220:1433 SYN ******S* Nov 5 02:16:59 212.182.58.98:61655 -> xxx.yyy.164.221:1433 SYN ******S* Nov 5 02:16:59 212.182.58.98:62150 -> xxx.yyy.164.223:1433 SYN ******S* 48518 Nov 5 00:41:22 64.56.106.188:22259 -> xxx.yyy.1.2:80 SYN ******S* Nov 5 00:41:22 64.56.106.188:22260 -> xxx.yyy.1.3:80 SYN ******S* Nov 5 00:41:24 64.56.106.188:22261 -> xxx.yyy.1.4:80 SYN ******S* Nov 5 00:41:24 64.56.106.188:22264 -> xxx.yyy.1.7:80 SYN ******S* Nov 5 00:41:24 64.56.106.188:22266 -> xxx.yyy.1.9:80 SYN ******S* Nov 5 00:41:24 64.56.106.188:22267 -> xxx.yyy.1.10:80 SYN ******S* Nov 5 00:41:22 64.56.106.188:22268 -> xxx.yyy.1.11:80 SYN ******S* Nov 5 00:41:24 64.56.106.188:22269 -> xxx.yyy.1.12:80 SYN ******S* [...] Nov 5 00:48:15 64.56.106.188:24954 -> xxx.yyy.255.230:80 SYN ******S* Nov 5 00:48:15 64.56.106.188:24970 -> xxx.yyy.255.246:80 SYN ******S* Nov 5 00:48:15 64.56.106.188:24967 -> xxx.yyy.255.243:80 SYN ******S* Nov 5 00:48:15 64.56.106.188:24964 -> xxx.yyy.255.240:80 SYN ******S* Nov 5 00:48:15 64.56.106.188:24961 -> xxx.yyy.255.237:80 SYN ******S* Nov 5 00:48:15 64.56.106.188:24958 -> xxx.yyy.255.234:80 SYN ******S* Nov 5 00:48:15 64.56.106.188:24974 -> xxx.yyy.255.250:80 SYN ******S* Nov 5 00:48:15 64.56.106.188:24955 -> xxx.yyy.255.231:80 SYN ******S* 47956 Nov 5 00:25:33 151.100.36.160:2614 -> xxx.yyy.1.1:1433 SYN ******S* Nov 5 00:25:33 151.100.36.160:2616 -> xxx.yyy.1.3:1433 SYN ******S* Nov 5 00:25:33 151.100.36.160:2617 -> xxx.yyy.1.4:1433 SYN ******S* Nov 5 00:25:33 151.100.36.160:2618 -> xxx.yyy.1.5:1433 SYN ******S* Nov 5 00:25:33 151.100.36.160:2619 -> xxx.yyy.1.6:1433 SYN ******S* Nov 5 00:25:33 151.100.36.160:2626 -> xxx.yyy.1.13:1433 SYN ******S* Nov 5 00:25:33 151.100.36.160:2623 -> xxx.yyy.1.10:1433 SYN ******S* Nov 5 00:25:33 151.100.36.160:2620 -> xxx.yyy.1.7:1433 SYN ******S* [...] Nov 5 00:34:53 151.100.36.160:4559 -> xxx.yyy.255.200:1433 SYN ******S* Nov 5 00:34:53 151.100.36.160:4608 -> xxx.yyy.255.249:1433 SYN ******S* Nov 5 00:34:53 151.100.36.160:4589 -> xxx.yyy.255.230:1433 SYN ******S* Nov 5 00:34:53 151.100.36.160:4602 -> xxx.yyy.255.243:1433 SYN ******S* Nov 5 00:34:53 151.100.36.160:4590 -> xxx.yyy.255.231:1433 SYN ******S* Nov 5 00:34:53 151.100.36.160:4603 -> xxx.yyy.255.244:1433 SYN ******S* Nov 5 00:34:53 151.100.36.160:4584 -> xxx.yyy.255.225:1433 SYN ******S* Nov 5 00:34:53 151.100.36.160:4597 -> xxx.yyy.255.238:1433 SYN ******S* 46732 Nov 5 03:08:11 211.245.114.180:3524 -> xxx.yyy.1.1:4899 SYN ******S* Nov 5 03:08:11 211.245.114.180:3525 -> xxx.yyy.1.2:4899 SYN ******S* Nov 5 03:08:11 211.245.114.180:3526 -> xxx.yyy.1.3:4899 SYN ******S* Nov 5 03:08:10 211.245.114.180:3527 -> xxx.yyy.1.4:4899 SYN ******S* Nov 5 03:08:10 211.245.114.180:3528 -> xxx.yyy.1.5:4899 SYN ******S* Nov 5 03:08:10 211.245.114.180:3529 -> xxx.yyy.1.6:4899 SYN ******S* Nov 5 03:08:10 211.245.114.180:3530 -> xxx.yyy.1.7:4899 SYN ******S* Nov 5 03:08:10 211.245.114.180:3531 -> xxx.yyy.1.8:4899 SYN ******S* [...] Nov 5 03:14:08 211.245.114.180:2586 -> xxx.yyy.255.245:4899 SYN ******S* Nov 5 03:14:08 211.245.114.180:2587 -> xxx.yyy.255.246:4899 SYN ******S* Nov 5 03:14:08 211.245.114.180:2588 -> xxx.yyy.255.247:4899 SYN ******S* Nov 5 03:14:08 211.245.114.180:2589 -> xxx.yyy.255.248:4899 SYN ******S* Nov 5 03:14:08 211.245.114.180:2590 -> xxx.yyy.255.249:4899 SYN ******S* Nov 5 03:14:08 211.245.114.180:2591 -> xxx.yyy.255.250:4899 SYN ******S* Nov 5 03:14:08 211.245.114.180:2592 -> xxx.yyy.255.251:4899 SYN ******S* Nov 5 03:14:08 211.245.114.180:2593 -> xxx.yyy.255.252:4899 SYN ******S* Nov 5 03:14:08 211.245.114.180:2595 -> xxx.yyy.255.254:4899 SYN ******S* 40179 Nov 5 21:44:27 66.118.140.104:1768 -> xxx.yyy.1.1:1433 SYN ******S* Nov 5 21:44:27 66.118.140.104:1769 -> xxx.yyy.1.2:1433 SYN ******S* Nov 5 21:44:28 66.118.140.104:1770 -> xxx.yyy.1.3:1433 SYN ******S* Nov 5 21:44:28 66.118.140.104:1771 -> xxx.yyy.1.4:1433 SYN ******S* Nov 5 21:44:28 66.118.140.104:1775 -> xxx.yyy.1.9:1433 SYN ******S* Nov 5 21:44:28 66.118.140.104:1776 -> xxx.yyy.1.8:1433 SYN ******S* Nov 5 21:44:28 66.118.140.104:1778 -> xxx.yyy.1.12:1433 SYN ******S* Nov 5 21:44:28 66.118.140.104:1779 -> xxx.yyy.1.11:1433 SYN ******S* [...] Nov 5 21:54:42 66.118.140.104:4251 -> xxx.yyy.255.240:1433 SYN ******S* Nov 5 21:54:42 66.118.140.104:4252 -> xxx.yyy.255.241:1433 SYN ******S* Nov 5 21:54:42 66.118.140.104:4253 -> xxx.yyy.255.242:1433 SYN ******S* Nov 5 21:54:42 66.118.140.104:4255 -> xxx.yyy.255.244:1433 SYN ******S* Nov 5 21:54:42 66.118.140.104:4256 -> xxx.yyy.255.245:1433 SYN ******S* Nov 5 21:54:42 66.118.140.104:4257 -> xxx.yyy.255.246:1433 SYN ******S* Nov 5 21:54:42 66.118.140.104:4259 -> xxx.yyy.255.248:1433 SYN ******S* Nov 5 21:54:42 66.118.140.104:4260 -> xxx.yyy.255.249:1433 SYN ******S* 35617 Nov 5 02:28:44 62.48.177.68:2879 -> xxx.yyy.1.1:4899 SYN ******S* Nov 5 02:28:44 62.48.177.68:2880 -> xxx.yyy.1.2:4899 SYN ******S* Nov 5 02:28:44 62.48.177.68:2881 -> xxx.yyy.1.3:4899 SYN ******S* Nov 5 02:28:42 62.48.177.68:2882 -> xxx.yyy.1.4:4899 SYN ******S* Nov 5 02:28:42 62.48.177.68:2883 -> xxx.yyy.1.5:4899 SYN ******S* Nov 5 02:28:42 62.48.177.68:2884 -> xxx.yyy.1.6:4899 SYN ******S* Nov 5 02:28:42 62.48.177.68:2885 -> xxx.yyy.1.7:4899 SYN ******S* Nov 5 02:28:42 62.48.177.68:2886 -> xxx.yyy.1.8:4899 SYN ******S* [...] Nov 5 02:32:37 62.48.177.68:2201 -> xxx.yyy.255.244:4899 SYN ******S* Nov 5 02:32:37 62.48.177.68:2202 -> xxx.yyy.255.245:4899 SYN ******S* Nov 5 02:32:37 62.48.177.68:2203 -> xxx.yyy.255.246:4899 SYN ******S* Nov 5 02:32:37 62.48.177.68:2204 -> xxx.yyy.255.247:4899 SYN ******S* Nov 5 02:32:37 62.48.177.68:2205 -> xxx.yyy.255.248:4899 SYN ******S* Nov 5 02:32:37 62.48.177.68:2208 -> xxx.yyy.255.251:4899 SYN ******S* Nov 5 02:32:37 62.48.177.68:2209 -> xxx.yyy.255.252:4899 SYN ******S* Nov 5 02:32:37 62.48.177.68:2210 -> xxx.yyy.255.253:4899 SYN ******S* 35364 Nov 5 13:45:41 131.234.169.125:4231 -> xxx.yyy.1.1:8000 SYN ******S* Nov 5 13:45:41 131.234.169.125:4234 -> xxx.yyy.1.4:8000 SYN ******S* Nov 5 13:45:41 131.234.169.125:4232 -> xxx.yyy.1.2:8000 SYN ******S* Nov 5 13:45:41 131.234.169.125:4233 -> xxx.yyy.1.3:8000 SYN ******S* Nov 5 13:45:41 131.234.169.125:4236 -> xxx.yyy.1.6:8000 SYN ******S* Nov 5 13:45:41 131.234.169.125:4240 -> xxx.yyy.1.10:8000 SYN ******S* Nov 5 13:45:41 131.234.169.125:4238 -> xxx.yyy.1.8:8000 SYN ******S* Nov 5 13:45:42 131.234.169.125:4241 -> xxx.yyy.1.11:8000 SYN ******S* [...] Nov 5 13:54:23 131.234.169.125:1777 -> xxx.yyy.255.163:8000 SYN ******S* Nov 5 13:54:23 131.234.169.125:1781 -> xxx.yyy.255.166:8000 SYN ******S* Nov 5 13:54:23 131.234.169.125:1858 -> xxx.yyy.255.203:8000 SYN ******S* Nov 5 13:54:23 131.234.169.125:1846 -> xxx.yyy.255.191:8000 SYN ******S* Nov 5 13:54:23 131.234.169.125:1847 -> xxx.yyy.255.192:8000 SYN ******S* Nov 5 13:54:23 131.234.169.125:1891 -> xxx.yyy.255.213:8000 SYN ******S* Nov 5 13:54:23 131.234.169.125:1783 -> xxx.yyy.255.168:8000 SYN ******S* Nov 5 13:54:23 131.234.169.125:1775 -> xxx.yyy.255.162:8000 SYN ******S* Nov 5 13:54:23 131.234.169.125:1871 -> xxx.yyy.255.210:8000 SYN ******S* 34385 [...] 33033 Nov 5 14:13:48 200.104.184.30:3636 -> xxx.yyy.1.4:1433 SYN ******S* Nov 5 14:13:48 200.104.184.30:3633 -> xxx.yyy.1.1:1433 SYN ******S* Nov 5 14:13:45 200.104.184.30:3646 -> xxx.yyy.1.13:1433 SYN ******S* Nov 5 14:13:45 200.104.184.30:3638 -> xxx.yyy.1.6:1433 SYN ******S* Nov 5 14:13:45 200.104.184.30:3645 -> xxx.yyy.1.12:1433 SYN ******S* Nov 5 14:13:45 200.104.184.30:3637 -> xxx.yyy.1.5:1433 SYN ******S* Nov 5 14:13:45 200.104.184.30:3647 -> xxx.yyy.1.14:1433 SYN ******S* Nov 5 14:13:45 200.104.184.30:3644 -> xxx.yyy.1.11:1433 SYN ******S* [...] Nov 5 14:29:20 200.104.184.30:4760 -> xxx.yyy.255.246:1433 SYN ******S* Nov 5 14:29:20 200.104.184.30:4754 -> xxx.yyy.255.244:1433 SYN ******S* Nov 5 14:29:20 200.104.184.30:4764 -> xxx.yyy.255.250:1433 SYN ******S* Nov 5 14:29:20 200.104.184.30:4761 -> xxx.yyy.255.247:1433 SYN ******S* Nov 5 14:29:20 200.104.184.30:4755 -> xxx.yyy.255.245:1433 SYN ******S* Nov 5 14:29:20 200.104.184.30:4763 -> xxx.yyy.255.249:1433 SYN ******S* Nov 5 14:29:20 200.104.184.30:4762 -> xxx.yyy.255.248:1433 SYN ******S* Nov 5 14:29:20 200.104.184.30:4749 -> xxx.yyy.255.243:1433 SYN ******S* 31528 Nov 5 06:41:17 219.248.244.240:2131 -> xxx.yyy.1.0:1433 SYN ******S* Nov 5 06:41:17 219.248.244.240:2134 -> xxx.yyy.1.1:1433 SYN ******S* Nov 5 06:41:17 219.248.244.240:2137 -> xxx.yyy.1.2:1433 SYN ******S* Nov 5 06:41:17 219.248.244.240:2143 -> xxx.yyy.1.4:1433 SYN ******S* Nov 5 06:41:17 219.248.244.240:2140 -> xxx.yyy.1.3:1433 SYN ******S* Nov 5 06:41:17 219.248.244.240:2146 -> xxx.yyy.1.5:1433 SYN ******S* Nov 5 06:41:17 219.248.244.240:2149 -> xxx.yyy.1.6:1433 SYN ******S* Nov 5 06:41:17 219.248.244.240:2155 -> xxx.yyy.1.8:1433 SYN ******S* [...] Nov 5 08:20:51 219.248.244.240:3013 -> xxx.yyy.111.246:1433 SYN ******S* Nov 5 08:20:51 219.248.244.240:3015 -> xxx.yyy.111.248:1433 SYN ******S* Nov 5 08:20:52 219.248.244.240:3021 -> xxx.yyy.111.249:1433 SYN ******S* Nov 5 08:20:52 219.248.244.240:3023 -> xxx.yyy.111.251:1433 SYN ******S* Nov 5 08:20:52 219.248.244.240:3022 -> xxx.yyy.111.250:1433 SYN ******S* Nov 5 08:20:52 219.248.244.240:3027 -> xxx.yyy.111.252:1433 SYN ******S* Nov 5 08:20:52 219.248.244.240:3032 -> xxx.yyy.111.253:1433 SYN ******S* Nov 5 08:20:52 219.248.244.240:3033 -> xxx.yyy.111.254:1433 SYN ******S* Nov 5 08:20:52 219.248.244.240:3037 -> xxx.yyy.111.255:1433 SYN ******S* 31446 Nov 5 12:43:48 213.180.210.35:33485 -> xxx.yyy.246.142:1075 SYN ******S* Nov 5 12:43:48 213.180.210.35:52012 -> xxx.yyy.246.142:80 SYN ******S* Nov 5 12:43:48 213.180.210.35:43761 -> xxx.yyy.246.142:81 SYN ******S* Nov 5 12:43:48 213.180.210.35:54235 -> xxx.yyy.246.142:3128 SYN ******S* Nov 5 12:43:48 213.180.210.35:60490 -> xxx.yyy.246.142:4480 SYN ******S* Nov 5 13:09:18 213.180.210.35:49305 -> xxx.yyy.246.142:14422 SYN ******S* Nov 5 13:09:18 213.180.210.35:49305 -> xxx.yyy.246.142:57559 SYN ******S* Nov 5 13:09:18 213.180.210.35:49305 -> xxx.yyy.246.142:43323 SYN ******S* [...] Nov 5 13:13:56 213.180.210.35:49310 -> xxx.yyy.246.142:6052 SYN ******S* Nov 5 13:13:56 213.180.210.35:49310 -> xxx.yyy.246.142:6040 SYN ******S* Nov 5 13:13:56 213.180.210.35:49310 -> xxx.yyy.246.142:20432 SYN ******S* Nov 5 13:13:56 213.180.210.35:49310 -> xxx.yyy.246.142:6008 SYN ******S* Nov 5 13:13:56 213.180.210.35:49310 -> xxx.yyy.246.142:6059 SYN ******S* Nov 5 13:13:56 213.180.210.35:49310 -> xxx.yyy.246.142:6063 SYN ******S* Nov 5 13:13:56 213.180.210.35:49310 -> xxx.yyy.246.142:6013 SYN ******S* Nov 5 13:13:56 213.180.210.35:49310 -> xxx.yyy.246.142:6010 SYN ******S* 23126 [...] 12159 Nov 5 22:50:39 220.120.6.54:1166 -> xxx.yyy.71.161:5554 SYN ******S* Nov 5 22:50:40 220.120.6.54:1605 -> xxx.yyy.71.161:1023 SYN ******S* Nov 5 22:50:39 220.120.6.54:1168 -> xxx.yyy.71.165:5554 SYN ******S* Nov 5 22:50:40 220.120.6.54:1606 -> xxx.yyy.71.165:1023 SYN ******S* Nov 5 22:50:39 220.120.6.54:1167 -> xxx.yyy.71.162:5554 SYN ******S* Nov 5 22:50:40 220.120.6.54:1607 -> xxx.yyy.71.162:1023 SYN ******S* Nov 5 22:50:39 220.120.6.54:1170 -> xxx.yyy.71.163:5554 SYN ******S* Nov 5 22:50:39 220.120.6.54:1172 -> xxx.yyy.71.171:5554 SYN ******S* [...] Nov 5 22:51:31 220.120.6.54:1568 -> xxx.yyy.72.109:9898 SYN ******S* Nov 5 22:51:31 220.120.6.54:1563 -> xxx.yyy.72.108:9898 SYN ******S* Nov 5 22:51:31 220.120.6.54:1597 -> xxx.yyy.72.105:9898 SYN ******S* Nov 5 22:51:31 220.120.6.54:1598 -> xxx.yyy.72.106:9898 SYN ******S* Nov 5 22:51:31 220.120.6.54:1610 -> xxx.yyy.72.110:9898 SYN ******S* Nov 5 22:51:32 220.120.6.54:1641 -> xxx.yyy.72.111:9898 SYN ******S* Nov 5 22:51:32 220.120.6.54:1643 -> xxx.yyy.72.114:9898 SYN ******S* Nov 5 22:51:32 220.120.6.54:1646 -> xxx.yyy.72.112:9898 SYN ******S* Nov 5 22:51:32 220.120.6.54:1648 -> xxx.yyy.72.116:9898 SYN ******S* 11318 Nov 5 22:37:48 220.84.73.76:1183 -> xxx.yyy.154.101:5554 SYN ******S* Nov 5 22:37:51 220.84.73.76:2772 -> xxx.yyy.154.101:9898 SYN ******S* Nov 5 22:37:48 220.84.73.76:1185 -> xxx.yyy.154.103:5554 SYN ******S* Nov 5 22:37:49 220.84.73.76:1775 -> xxx.yyy.154.103:1023 SYN ******S* Nov 5 22:37:51 220.84.73.76:2771 -> xxx.yyy.154.103:9898 SYN ******S* Nov 5 22:37:48 220.84.73.76:1184 -> xxx.yyy.154.102:5554 SYN ******S* Nov 5 22:37:51 220.84.73.76:2773 -> xxx.yyy.154.102:9898 SYN ******S* Nov 5 22:37:48 220.84.73.76:1186 -> xxx.yyy.154.104:5554 SYN ******S* [...] Nov 5 22:38:33 220.84.73.76:2183 -> xxx.yyy.174.221:9898 SYN ******S* Nov 5 22:38:33 220.84.73.76:2184 -> xxx.yyy.174.222:9898 SYN ******S* Nov 5 22:38:33 220.84.73.76:2141 -> xxx.yyy.174.202:9898 SYN ******S* Nov 5 22:38:33 220.84.73.76:2145 -> xxx.yyy.174.204:9898 SYN ******S* Nov 5 22:38:33 220.84.73.76:2147 -> xxx.yyy.174.206:9898 SYN ******S* Nov 5 22:38:34 220.84.73.76:2154 -> xxx.yyy.174.210:9898 SYN ******S* Nov 5 22:38:34 220.84.73.76:2160 -> xxx.yyy.174.214:9898 SYN ******S* Nov 5 22:38:34 220.84.73.76:2201 -> xxx.yyy.174.212:9898 SYN ******S* 10229 Nov 5 00:00:04 209.87.152.226:1490 -> xxx.yyy.222.231:1433 SYN ******S* Nov 5 00:00:07 209.87.152.226:1512 -> xxx.yyy.222.253:1433 SYN ******S* Nov 5 00:00:04 209.87.152.226:1492 -> xxx.yyy.222.233:1433 SYN ******S* Nov 5 00:00:08 209.87.152.226:1513 -> xxx.yyy.222.254:1433 SYN ******S* Nov 5 00:00:05 209.87.152.226:1514 -> xxx.yyy.222.255:1433 SYN ******S* Nov 5 00:00:05 209.87.152.226:1494 -> xxx.yyy.222.235:1433 SYN ******S* Nov 5 00:00:05 209.87.152.226:1495 -> xxx.yyy.222.236:1433 SYN ******S* Nov 5 00:00:05 209.87.152.226:1496 -> xxx.yyy.222.237:1433 SYN ******S* [...] Nov 5 00:21:59 209.87.152.226:2036 -> xxx.yyy.255.242:1433 SYN ******S* Nov 5 00:21:59 209.87.152.226:2048 -> xxx.yyy.255.254:1433 SYN ******S* Nov 5 00:21:59 209.87.152.226:2037 -> xxx.yyy.255.243:1433 SYN ******S* Nov 5 00:22:01 209.87.152.226:2044 -> xxx.yyy.255.250:1433 SYN ******S* Nov 5 00:22:01 209.87.152.226:2045 -> xxx.yyy.255.251:1433 SYN ******S* Nov 5 00:22:02 209.87.152.226:2046 -> xxx.yyy.255.252:1433 SYN ******S* Nov 5 00:22:02 209.87.152.226:2047 -> xxx.yyy.255.253:1433 SYN ******S* Nov 5 00:22:02 209.87.152.226:2048 -> xxx.yyy.255.254:1433 SYN ******S* 10067 Nov 5 04:02:52 69.41.232.167:24177 -> xxx.yyy.1.0:1433 SYN ******S* Nov 5 04:02:52 69.41.232.167:26178 -> xxx.yyy.1.1:1433 SYN ******S* Nov 5 04:02:52 69.41.232.167:24627 -> xxx.yyy.1.2:1433 SYN ******S* Nov 5 04:02:52 69.41.232.167:24282 -> xxx.yyy.1.3:1433 SYN ******S* Nov 5 04:02:52 69.41.232.167:21521 -> xxx.yyy.1.4:1433 SYN ******S* Nov 5 04:02:52 69.41.232.167:23500 -> xxx.yyy.1.5:1433 SYN ******S* Nov 5 04:02:52 69.41.232.167:23894 -> xxx.yyy.1.6:1433 SYN ******S* Nov 5 04:02:52 69.41.232.167:23080 -> xxx.yyy.1.7:1433 SYN ******S* [...] Nov 5 04:03:04 69.41.232.167:22922 -> xxx.yyy.245.137:1433 SYN ******S* Nov 5 04:03:04 69.41.232.167:22099 -> xxx.yyy.245.138:1433 SYN ******S* Nov 5 04:03:04 69.41.232.167:21358 -> xxx.yyy.245.139:1433 SYN ******S* Nov 5 04:03:04 69.41.232.167:26145 -> xxx.yyy.245.140:1433 SYN ******S* Nov 5 04:03:04 69.41.232.167:25063 -> xxx.yyy.245.141:1433 SYN ******S* Nov 5 04:03:04 69.41.232.167:21688 -> xxx.yyy.245.142:1433 SYN ******S* Nov 5 04:03:04 69.41.232.167:23589 -> xxx.yyy.245.143:1433 SYN ******S* Nov 5 04:03:04 69.41.232.167:22620 -> xxx.yyy.245.144:1433 SYN ******S* 10055 Nov 5 22:58:25 220.121.203.118:3745 -> xxx.yyy.154.117:5554 SYN ******S* Nov 5 22:58:26 220.121.203.118:4990 -> xxx.yyy.154.117:1023 SYN ******S* Nov 5 22:58:25 220.121.203.118:3746 -> xxx.yyy.154.118:5554 SYN ******S* Nov 5 22:58:26 220.121.203.118:4991 -> xxx.yyy.154.118:1023 SYN ******S* Nov 5 22:58:25 220.121.203.118:3750 -> xxx.yyy.154.122:5554 SYN ******S* Nov 5 22:58:26 220.121.203.118:4994 -> xxx.yyy.154.122:1023 SYN ******S* Nov 5 22:58:25 220.121.203.118:3747 -> xxx.yyy.154.119:5554 SYN ******S* Nov 5 22:58:26 220.121.203.118:4992 -> xxx.yyy.154.119:1023 SYN ******S* [...] Nov 5 22:59:13 220.121.203.118:2043 -> xxx.yyy.174.177:9898 SYN ******S* Nov 5 22:59:13 220.121.203.118:2050 -> xxx.yyy.174.182:9898 SYN ******S* Nov 5 22:59:13 220.121.203.118:2057 -> xxx.yyy.174.200:9898 SYN ******S* Nov 5 22:59:13 220.121.203.118:2082 -> xxx.yyy.174.199:9898 SYN ******S* Nov 5 22:59:13 220.121.203.118:2092 -> xxx.yyy.174.201:9898 SYN ******S* Nov 5 22:59:13 220.121.203.118:2093 -> xxx.yyy.174.202:9898 SYN ******S* Nov 5 22:59:13 220.121.203.118:2094 -> xxx.yyy.174.203:9898 SYN ******S* Nov 5 22:59:13 220.121.203.118:2114 -> xxx.yyy.174.216:9898 SYN ******S* Nov 5 22:59:13 220.121.203.118:2132 -> xxx.yyy.174.221:9898 SYN ******S* 9308 Nov 5 23:56:12 221.127.172.251:2717 -> xxx.yyy.133.14:5554 SYN ******S* Nov 5 23:56:13 221.127.172.251:3258 -> xxx.yyy.133.14:1023 SYN ******S* Nov 5 23:56:15 221.127.172.251:4578 -> xxx.yyy.133.14:9898 SYN ******S* Nov 5 23:56:12 221.127.172.251:2718 -> xxx.yyy.133.16:5554 SYN ******S* Nov 5 23:56:15 221.127.172.251:4593 -> xxx.yyy.133.16:9898 SYN ******S* Nov 5 23:56:12 221.127.172.251:2719 -> xxx.yyy.133.15:5554 SYN ******S* Nov 5 23:56:13 221.127.172.251:3259 -> xxx.yyy.133.15:1023 SYN ******S* Nov 5 23:56:15 221.127.172.251:4579 -> xxx.yyy.133.15:9898 SYN ******S* [...] Nov 5 23:56:55 221.127.172.251:3996 -> xxx.yyy.153.75:9898 SYN ******S* Nov 5 23:56:55 221.127.172.251:4055 -> xxx.yyy.153.94:9898 SYN ******S* Nov 5 23:56:55 221.127.172.251:4070 -> xxx.yyy.153.102:9898 SYN ******S* Nov 5 23:56:55 221.127.172.251:4072 -> xxx.yyy.153.104:9898 SYN ******S* Nov 5 23:56:55 221.127.172.251:4074 -> xxx.yyy.153.105:9898 SYN ******S* Nov 5 23:56:55 221.127.172.251:4075 -> xxx.yyy.153.106:9898 SYN ******S* Nov 5 23:56:55 221.127.172.251:4329 -> xxx.yyy.153.116:9898 SYN ******S* Nov 5 23:56:55 221.127.172.251:4338 -> xxx.yyy.153.117:9898 SYN ******S* Nov 5 23:56:55 221.127.172.251:4427 -> xxx.yyy.153.130:9898 SYN ******S* 8347 Nov 5 23:56:37 221.216.10.237:2346 -> xxx.yyy.236.76:5554 SYN ******S* Nov 5 23:56:38 221.216.10.237:3038 -> xxx.yyy.236.76:1023 SYN ******S* Nov 5 23:56:37 221.216.10.237:2356 -> xxx.yyy.236.77:5554 SYN ******S* Nov 5 23:56:38 221.216.10.237:3054 -> xxx.yyy.236.77:1023 SYN ******S* Nov 5 23:56:37 221.216.10.237:2367 -> xxx.yyy.236.78:5554 SYN ******S* Nov 5 23:56:38 221.216.10.237:3061 -> xxx.yyy.236.78:1023 SYN ******S* Nov 5 23:56:40 221.216.10.237:1048 -> xxx.yyy.236.78:9898 SYN ******S* Nov 5 23:56:37 221.216.10.237:2415 -> xxx.yyy.236.82:5554 SYN ******S* [...] Nov 5 23:57:17 221.216.10.237:2370 -> xxx.yyy.255.243:9898 SYN ******S* Nov 5 23:57:17 221.216.10.237:2384 -> xxx.yyy.255.245:9898 SYN ******S* Nov 5 23:57:17 221.216.10.237:2390 -> xxx.yyy.255.246:9898 SYN ******S* Nov 5 23:57:17 221.216.10.237:2405 -> xxx.yyy.255.248:9898 SYN ******S* Nov 5 23:57:17 221.216.10.237:2409 -> xxx.yyy.255.249:9898 SYN ******S* Nov 5 23:57:17 221.216.10.237:2417 -> xxx.yyy.255.251:9898 SYN ******S* Nov 5 23:57:17 221.216.10.237:2420 -> xxx.yyy.255.252:9898 SYN ******S* Nov 5 23:57:17 221.216.10.237:2421 -> xxx.yyy.255.253:9898 SYN ******S* 7986 Nov 5 23:59:14 221.217.94.2:3411 -> xxx.yyy.195.89:5554 SYN ******S* Nov 5 23:59:15 221.217.94.2:3730 -> xxx.yyy.195.89:1023 SYN ******S* Nov 5 23:59:14 221.217.94.2:3415 -> xxx.yyy.195.93:5554 SYN ******S* Nov 5 23:59:15 221.217.94.2:3717 -> xxx.yyy.195.93:1023 SYN ******S* Nov 5 23:59:17 221.217.94.2:4310 -> xxx.yyy.195.93:9898 SYN ******S* Nov 5 23:59:14 221.217.94.2:3412 -> xxx.yyy.195.90:5554 SYN ******S* Nov 5 23:59:15 221.217.94.2:3715 -> xxx.yyy.195.90:1023 SYN ******S* Nov 5 23:59:14 221.217.94.2:3418 -> xxx.yyy.195.96:5554 SYN ******S* [...] Nov 6 00:00:01 221.217.94.2:3369 -> xxx.yyy.209.97:1023 SYN ******S* Nov 6 00:00:01 221.217.94.2:3370 -> xxx.yyy.209.98:1023 SYN ******S* Nov 6 00:00:01 221.217.94.2:3371 -> xxx.yyy.209.176:5554 SYN ******S* Nov 6 00:00:01 221.217.94.2:3373 -> xxx.yyy.209.99:1023 SYN ******S* Nov 6 00:00:01 221.217.94.2:3387 -> xxx.yyy.209.182:5554 SYN ******S* Nov 6 00:00:01 221.217.94.2:3388 -> xxx.yyy.208.171:9898 SYN ******S* Nov 6 00:00:01 221.217.94.2:3397 -> xxx.yyy.209.180:5554 SYN ******S* Nov 6 00:00:01 221.217.94.2:3460 -> xxx.yyy.209.184:5554 SYN ******S* 7422 Nov 5 22:57:02 220.121.136.53:1864 -> xxx.yyy.236.89:5554 SYN ******S* Nov 5 22:57:05 220.121.136.53:3129 -> xxx.yyy.236.89:9898 SYN ******S* Nov 5 22:57:02 220.121.136.53:1879 -> xxx.yyy.236.97:5554 SYN ******S* Nov 5 22:57:02 220.121.136.53:1885 -> xxx.yyy.236.99:5554 SYN ******S* Nov 5 22:57:05 220.121.136.53:3152 -> xxx.yyy.236.99:9898 SYN ******S* Nov 5 22:57:02 220.121.136.53:1887 -> xxx.yyy.236.101:5554 SYN ******S* Nov 5 22:57:02 220.121.136.53:1892 -> xxx.yyy.236.104:5554 SYN ******S* Nov 5 22:57:02 220.121.136.53:1884 -> xxx.yyy.236.98:5554 SYN ******S* [...] Nov 5 22:59:20 220.121.136.53:2084 -> xxx.yyy.255.211:9898 SYN ******S* Nov 5 22:59:20 220.121.136.53:2112 -> xxx.yyy.255.220:9898 SYN ******S* Nov 5 22:59:20 220.121.136.53:2116 -> xxx.yyy.255.221:9898 SYN ******S* Nov 5 22:59:20 220.121.136.53:2117 -> xxx.yyy.255.222:9898 SYN ******S* Nov 5 22:59:20 220.121.136.53:2129 -> xxx.yyy.255.229:9898 SYN ******S* Nov 5 22:59:20 220.121.136.53:2119 -> xxx.yyy.255.224:9898 SYN ******S* Nov 5 22:59:20 220.121.136.53:2153 -> xxx.yyy.255.244:9898 SYN ******S* Nov 5 22:59:20 220.121.136.53:2173 -> xxx.yyy.255.252:9898 SYN ******S* 7362 [...] 6988 Nov 5 22:56:43 222.100.59.169:3507 -> xxx.yyy.154.189:5554 SYN ******S* Nov 5 22:56:43 222.100.59.169:3514 -> xxx.yyy.154.186:5554 SYN ******S* Nov 5 22:56:43 222.100.59.169:3517 -> xxx.yyy.154.184:5554 SYN ******S* Nov 5 22:56:43 222.100.59.169:3714 -> xxx.yyy.154.194:5554 SYN ******S* Nov 5 22:56:43 222.100.59.169:3702 -> xxx.yyy.154.106:5554 SYN ******S* Nov 5 22:56:43 222.100.59.169:3513 -> xxx.yyy.154.187:5554 SYN ******S* Nov 5 22:56:43 222.100.59.169:3528 -> xxx.yyy.154.177:5554 SYN ******S* Nov 5 22:56:46 222.100.59.169:1151 -> xxx.yyy.154.177:9898 SYN ******S* [...] Nov 5 23:00:32 222.100.59.169:1497 -> xxx.yyy.154.188:1023 SYN ******S* Nov 5 23:00:32 222.100.59.169:1408 -> xxx.yyy.154.156:1023 SYN ******S* Nov 5 23:00:32 222.100.59.169:1443 -> xxx.yyy.154.169:1023 SYN ******S* Nov 5 23:00:32 222.100.59.169:1462 -> xxx.yyy.154.174:1023 SYN ******S* Nov 5 23:00:34 222.100.59.169:2633 -> xxx.yyy.154.174:9898 SYN ******S* Nov 5 23:00:34 222.100.59.169:2573 -> xxx.yyy.154.168:9898 SYN ******S* Nov 5 23:00:34 222.100.59.169:2585 -> xxx.yyy.154.172:9898 SYN ******S* Nov 5 23:00:34 222.100.59.169:2590 -> xxx.yyy.154.173:9898 SYN ******S* 6741 [...] 6655 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions