[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Nov 10 05:02:48 218.34.83.174:3025 -> xxx.yyy.1.0:1433 SYN ******S* Nov 10 05:02:48 218.34.83.174:3027 -> xxx.yyy.1.1:1433 SYN ******S* Nov 10 05:02:48 218.34.83.174:3033 -> xxx.yyy.1.3:1433 SYN ******S* Nov 10 05:02:48 218.34.83.174:3030 -> xxx.yyy.1.2:1433 SYN ******S* Nov 10 05:02:48 218.34.83.174:3036 -> xxx.yyy.1.4:1433 SYN ******S* Nov 10 05:02:48 218.34.83.174:3038 -> xxx.yyy.1.5:1433 SYN ******S* Nov 10 05:02:48 218.34.83.174:3041 -> xxx.yyy.1.6:1433 SYN ******S* Nov 10 05:02:48 218.34.83.174:3049 -> xxx.yyy.1.7:1433 SYN ******S* [...] Nov 10 08:52:07 218.34.83.174:3552 -> xxx.yyy.255.242:1433 SYN ******S* Nov 10 08:52:09 218.34.83.174:3793 -> xxx.yyy.255.247:1433 SYN ******S* Nov 10 08:52:09 218.34.83.174:3794 -> xxx.yyy.255.248:1433 SYN ******S* Nov 10 08:52:10 218.34.83.174:3801 -> xxx.yyy.255.249:1433 SYN ******S* Nov 10 08:52:10 218.34.83.174:3802 -> xxx.yyy.255.250:1433 SYN ******S* Nov 10 08:52:10 218.34.83.174:3852 -> xxx.yyy.255.251:1433 SYN ******S* Nov 10 08:52:10 218.34.83.174:3854 -> xxx.yyy.255.252:1433 SYN ******S* Nov 10 08:52:11 218.34.83.174:3861 -> xxx.yyy.255.253:1433 SYN ******S* Nov 10 08:52:11 218.34.83.174:3933 -> xxx.yyy.255.254:1433 SYN ******S* 109292 Nov 10 01:17:32 81.56.17.68:3216 -> xxx.yyy.1.1:1433 SYN ******S* Nov 10 01:17:29 81.56.17.68:3217 -> xxx.yyy.1.2:1433 SYN ******S* Nov 10 01:17:29 81.56.17.68:3218 -> xxx.yyy.1.3:1433 SYN ******S* Nov 10 01:17:32 81.56.17.68:3219 -> xxx.yyy.1.4:1433 SYN ******S* Nov 10 01:17:32 81.56.17.68:3220 -> xxx.yyy.1.5:1433 SYN ******S* Nov 10 01:17:29 81.56.17.68:3221 -> xxx.yyy.1.6:1433 SYN ******S* Nov 10 01:17:32 81.56.17.68:3222 -> xxx.yyy.1.7:1433 SYN ******S* Nov 10 01:17:32 81.56.17.68:3223 -> xxx.yyy.1.8:1433 SYN ******S* [...] Nov 10 01:29:15 81.56.17.68:2351 -> xxx.yyy.255.230:1433 SYN ******S* Nov 10 01:29:15 81.56.17.68:2349 -> xxx.yyy.255.228:1433 SYN ******S* Nov 10 01:29:15 81.56.17.68:2363 -> xxx.yyy.255.242:1433 SYN ******S* Nov 10 01:29:15 81.56.17.68:2359 -> xxx.yyy.255.238:1433 SYN ******S* Nov 10 01:29:15 81.56.17.68:2362 -> xxx.yyy.255.241:1433 SYN ******S* Nov 10 01:29:15 81.56.17.68:2372 -> xxx.yyy.255.251:1433 SYN ******S* Nov 10 01:29:15 81.56.17.68:2369 -> xxx.yyy.255.248:1433 SYN ******S* Nov 10 01:29:15 81.56.17.68:2368 -> xxx.yyy.255.247:1433 SYN ******S* Nov 10 01:29:15 81.56.17.68:2371 -> xxx.yyy.255.250:1433 SYN ******S* 57105 Nov 10 16:32:28 203.122.72.24:3218 -> xxx.yyy.1.0:139 SYN ******S* Nov 10 16:32:28 203.122.72.24:3228 -> xxx.yyy.1.3:139 SYN ******S* Nov 10 16:32:25 203.122.72.24:3229 -> xxx.yyy.1.4:139 SYN ******S* Nov 10 16:32:25 203.122.72.24:3236 -> xxx.yyy.1.9:139 SYN ******S* Nov 10 16:32:25 203.122.72.24:3237 -> xxx.yyy.1.10:139 SYN ******S* Nov 10 16:32:26 203.122.72.24:3238 -> xxx.yyy.1.11:139 SYN ******S* Nov 10 16:32:26 203.122.72.24:3242 -> xxx.yyy.1.15:139 SYN ******S* Nov 10 16:32:26 203.122.72.24:3243 -> xxx.yyy.1.16:139 SYN ******S* [...] Nov 10 16:55:36 203.122.72.24:2473 -> xxx.yyy.255.238:139 SYN ******S* Nov 10 16:55:36 203.122.72.24:2472 -> xxx.yyy.255.237:139 SYN ******S* Nov 10 16:55:36 203.122.72.24:2475 -> xxx.yyy.255.240:139 SYN ******S* Nov 10 16:55:36 203.122.72.24:2480 -> xxx.yyy.255.245:139 SYN ******S* Nov 10 16:55:36 203.122.72.24:2477 -> xxx.yyy.255.242:139 SYN ******S* Nov 10 16:55:36 203.122.72.24:2487 -> xxx.yyy.255.249:139 SYN ******S* Nov 10 16:55:36 203.122.72.24:2489 -> xxx.yyy.255.251:139 SYN ******S* Nov 10 16:55:36 203.122.72.24:2492 -> xxx.yyy.255.254:139 SYN ******S* 55798 Nov 10 09:53:44 69.211.54.81:9446 -> xxx.yyy.1.1:1433 SYN ******S* Nov 10 09:53:44 69.211.54.81:9448 -> xxx.yyy.1.3:1433 SYN ******S* Nov 10 09:53:41 69.211.54.81:9450 -> xxx.yyy.1.5:1433 SYN ******S* Nov 10 09:53:41 69.211.54.81:9451 -> xxx.yyy.1.6:1433 SYN ******S* Nov 10 09:53:41 69.211.54.81:9452 -> xxx.yyy.1.7:1433 SYN ******S* Nov 10 09:53:41 69.211.54.81:9453 -> xxx.yyy.1.8:1433 SYN ******S* Nov 10 09:53:44 69.211.54.81:9454 -> xxx.yyy.1.9:1433 SYN ******S* Nov 10 09:53:44 69.211.54.81:9456 -> xxx.yyy.1.11:1433 SYN ******S* [...] Nov 10 10:05:22 69.211.54.81:10632 -> xxx.yyy.255.236:1433 SYN ******S* Nov 10 10:05:23 69.211.54.81:10644 -> xxx.yyy.255.248:1433 SYN ******S* Nov 10 10:05:23 69.211.54.81:10640 -> xxx.yyy.255.244:1433 SYN ******S* Nov 10 10:05:23 69.211.54.81:10638 -> xxx.yyy.255.242:1433 SYN ******S* Nov 10 10:05:23 69.211.54.81:10645 -> xxx.yyy.255.249:1433 SYN ******S* Nov 10 10:05:23 69.211.54.81:10642 -> xxx.yyy.255.246:1433 SYN ******S* Nov 10 10:05:23 69.211.54.81:10639 -> xxx.yyy.255.243:1433 SYN ******S* Nov 10 10:05:23 69.211.54.81:10650 -> xxx.yyy.255.254:1433 SYN ******S* Nov 10 10:05:23 69.211.54.81:10647 -> xxx.yyy.255.251:1433 SYN ******S* 40452 Nov 10 20:34:58 24.14.109.184:2637 -> xxx.yyy.1.1:4899 SYN ******S* Nov 10 20:34:57 24.14.109.184:2638 -> xxx.yyy.1.2:4899 SYN ******S* Nov 10 20:34:58 24.14.109.184:2639 -> xxx.yyy.1.3:4899 SYN ******S* Nov 10 20:34:57 24.14.109.184:2645 -> xxx.yyy.1.9:4899 SYN ******S* Nov 10 20:34:57 24.14.109.184:2646 -> xxx.yyy.1.10:4899 SYN ******S* Nov 10 20:34:57 24.14.109.184:2641 -> xxx.yyy.1.5:4899 SYN ******S* Nov 10 20:34:57 24.14.109.184:2644 -> xxx.yyy.1.8:4899 SYN ******S* Nov 10 20:34:57 24.14.109.184:2647 -> xxx.yyy.1.11:4899 SYN ******S* [...] Nov 10 21:07:55 24.14.109.184:3109 -> xxx.yyy.255.249:4899 SYN ******S* Nov 10 21:07:55 24.14.109.184:3058 -> xxx.yyy.255.198:4899 SYN ******S* Nov 10 21:07:55 24.14.109.184:3090 -> xxx.yyy.255.230:4899 SYN ******S* Nov 10 21:07:55 24.14.109.184:3071 -> xxx.yyy.255.211:4899 SYN ******S* Nov 10 21:07:55 24.14.109.184:3074 -> xxx.yyy.255.214:4899 SYN ******S* Nov 10 21:07:55 24.14.109.184:3055 -> xxx.yyy.255.195:4899 SYN ******S* Nov 10 21:07:55 24.14.109.184:3042 -> xxx.yyy.255.182:4899 SYN ******S* Nov 10 21:07:55 24.14.109.184:3039 -> xxx.yyy.255.179:4899 SYN ******S* Nov 10 21:07:55 24.14.109.184:3087 -> xxx.yyy.255.227:4899 SYN ******S* 39181 Nov 10 20:45:36 195.223.249.118:3274 -> xxx.yyy.1.1:4000 SYN ******S* Nov 10 20:45:36 195.223.249.118:3276 -> xxx.yyy.1.2:4000 SYN ******S* Nov 10 20:45:37 195.223.249.118:3280 -> xxx.yyy.1.4:4000 SYN ******S* Nov 10 20:45:35 195.223.249.118:3284 -> xxx.yyy.1.6:4000 SYN ******S* Nov 10 20:45:35 195.223.249.118:3288 -> xxx.yyy.1.8:4000 SYN ******S* Nov 10 20:45:35 195.223.249.118:3290 -> xxx.yyy.1.9:4000 SYN ******S* Nov 10 20:45:35 195.223.249.118:3292 -> xxx.yyy.1.10:4000 SYN ******S* Nov 10 20:45:35 195.223.249.118:3294 -> xxx.yyy.1.11:4000 SYN ******S* [...] Nov 10 20:57:24 195.223.249.118:3462 -> xxx.yyy.255.209:4000 SYN ******S* Nov 10 20:57:24 195.223.249.118:3468 -> xxx.yyy.255.212:4000 SYN ******S* Nov 10 20:57:24 195.223.249.118:3458 -> xxx.yyy.255.207:4000 SYN ******S* Nov 10 20:57:24 195.223.249.118:3488 -> xxx.yyy.255.222:4000 SYN ******S* Nov 10 20:57:24 195.223.249.118:3486 -> xxx.yyy.255.221:4000 SYN ******S* Nov 10 20:57:24 195.223.249.118:3476 -> xxx.yyy.255.216:4000 SYN ******S* Nov 10 20:57:24 195.223.249.118:3482 -> xxx.yyy.255.219:4000 SYN ******S* Nov 10 20:57:24 195.223.249.118:3480 -> xxx.yyy.255.218:4000 SYN ******S* Nov 10 20:57:24 195.223.249.118:3494 -> xxx.yyy.255.225:4000 SYN ******S* 35393 Nov 10 19:46:40 207.189.19.166:61024 -> xxx.yyy.1.2:1433 SYN ******S* Nov 10 19:46:43 207.189.19.166:61025 -> xxx.yyy.1.3:1433 SYN ******S* Nov 10 19:46:40 207.189.19.166:61026 -> xxx.yyy.1.4:1433 SYN ******S* Nov 10 19:46:42 207.189.19.166:61377 -> xxx.yyy.1.6:1433 SYN ******S* Nov 10 19:46:43 207.189.19.166:61029 -> xxx.yyy.1.7:1433 SYN ******S* Nov 10 19:46:40 207.189.19.166:61030 -> xxx.yyy.1.8:1433 SYN ******S* Nov 10 19:46:40 207.189.19.166:61057 -> xxx.yyy.1.10:1433 SYN ******S* Nov 10 19:46:40 207.189.19.166:61058 -> xxx.yyy.1.11:1433 SYN ******S* [...] Nov 10 19:58:21 207.189.19.166:62423 -> xxx.yyy.255.201:1433 SYN ******S* Nov 10 19:58:21 207.189.19.166:62419 -> xxx.yyy.255.197:1433 SYN ******S* Nov 10 19:58:21 207.189.19.166:62431 -> xxx.yyy.255.209:1433 SYN ******S* Nov 10 19:58:21 207.189.19.166:62435 -> xxx.yyy.255.213:1433 SYN ******S* Nov 10 19:58:21 207.189.19.166:62859 -> xxx.yyy.255.247:1433 SYN ******S* Nov 10 19:58:21 207.189.19.166:62447 -> xxx.yyy.255.225:1433 SYN ******S* Nov 10 19:58:21 207.189.19.166:62881 -> xxx.yyy.255.239:1433 SYN ******S* Nov 10 19:58:21 207.189.19.166:62464 -> xxx.yyy.255.241:1433 SYN ******S* Nov 10 19:58:22 207.189.19.166:62472 -> xxx.yyy.255.249:1433 SYN ******S* 31663 Nov 10 22:19:02 201.1.116.12:3732 -> xxx.yyy.1.2:1433 SYN ******S* Nov 10 22:19:02 201.1.116.12:3733 -> xxx.yyy.1.3:1433 SYN ******S* Nov 10 22:19:05 201.1.116.12:3735 -> xxx.yyy.1.5:1433 SYN ******S* Nov 10 22:19:02 201.1.116.12:3737 -> xxx.yyy.1.7:1433 SYN ******S* Nov 10 22:19:02 201.1.116.12:3740 -> xxx.yyy.1.10:1433 SYN ******S* Nov 10 22:19:02 201.1.116.12:3741 -> xxx.yyy.1.11:1433 SYN ******S* Nov 10 22:19:02 201.1.116.12:3744 -> xxx.yyy.1.14:1433 SYN ******S* Nov 10 22:19:05 201.1.116.12:3747 -> xxx.yyy.1.17:1433 SYN ******S* [...] Nov 10 22:30:04 201.1.116.12:4454 -> xxx.yyy.255.218:1433 SYN ******S* Nov 10 22:30:04 201.1.116.12:4461 -> xxx.yyy.255.225:1433 SYN ******S* Nov 10 22:30:04 201.1.116.12:4462 -> xxx.yyy.255.226:1433 SYN ******S* Nov 10 22:30:04 201.1.116.12:4463 -> xxx.yyy.255.227:1433 SYN ******S* Nov 10 22:30:04 201.1.116.12:4469 -> xxx.yyy.255.233:1433 SYN ******S* Nov 10 22:30:04 201.1.116.12:4471 -> xxx.yyy.255.235:1433 SYN ******S* Nov 10 22:30:04 201.1.116.12:4482 -> xxx.yyy.255.246:1433 SYN ******S* Nov 10 22:30:04 201.1.116.12:4489 -> xxx.yyy.255.253:1433 SYN ******S* 30915 Nov 10 03:23:41 81.190.209.208:3857 -> xxx.yyy.1.0:1433 SYN ******S* Nov 10 03:23:41 81.190.209.208:3858 -> xxx.yyy.1.1:1433 SYN ******S* Nov 10 03:23:41 81.190.209.208:3859 -> xxx.yyy.1.2:1433 SYN ******S* Nov 10 03:23:41 81.190.209.208:3860 -> xxx.yyy.1.3:1433 SYN ******S* Nov 10 03:23:41 81.190.209.208:3861 -> xxx.yyy.1.4:1433 SYN ******S* Nov 10 03:23:41 81.190.209.208:3864 -> xxx.yyy.1.6:1433 SYN ******S* Nov 10 03:23:41 81.190.209.208:3865 -> xxx.yyy.1.7:1433 SYN ******S* Nov 10 03:23:41 81.190.209.208:3866 -> xxx.yyy.1.8:1433 SYN ******S* [...] Nov 10 04:40:02 81.190.209.208:3736 -> xxx.yyy.86.69:1433 SYN ******S* Nov 10 04:40:02 81.190.209.208:3735 -> xxx.yyy.86.68:1433 SYN ******S* Nov 10 04:40:02 81.190.209.208:3734 -> xxx.yyy.86.67:1433 SYN ******S* Nov 10 04:40:02 81.190.209.208:3733 -> xxx.yyy.86.66:1433 SYN ******S* Nov 10 04:40:02 81.190.209.208:3739 -> xxx.yyy.86.71:1433 SYN ******S* Nov 10 04:40:02 81.190.209.208:3738 -> xxx.yyy.86.70:1433 SYN ******S* Nov 10 04:40:02 81.190.209.208:3742 -> xxx.yyy.86.74:1433 SYN ******S* Nov 10 04:40:02 81.190.209.208:3741 -> xxx.yyy.86.73:1433 SYN ******S* Nov 10 04:40:02 81.190.209.208:3740 -> xxx.yyy.86.72:1433 SYN ******S* 24042 Nov 10 00:32:16 217.129.237.226:3503 -> xxx.yyy.1.5:1433 SYN ******S* Nov 10 00:32:16 217.129.237.226:3506 -> xxx.yyy.1.8:1433 SYN ******S* Nov 10 00:32:16 217.129.237.226:3507 -> xxx.yyy.1.9:1433 SYN ******S* Nov 10 00:32:16 217.129.237.226:3513 -> xxx.yyy.1.15:1433 SYN ******S* Nov 10 00:32:16 217.129.237.226:3516 -> xxx.yyy.1.18:1433 SYN ******S* Nov 10 00:32:16 217.129.237.226:3520 -> xxx.yyy.1.22:1433 SYN ******S* Nov 10 00:32:16 217.129.237.226:3526 -> xxx.yyy.1.28:1433 SYN ******S* Nov 10 00:32:16 217.129.237.226:3530 -> xxx.yyy.1.32:1433 SYN ******S* [...] Nov 10 00:54:36 217.129.237.226:3824 -> xxx.yyy.255.141:1433 SYN ******S* Nov 10 00:54:36 217.129.237.226:3832 -> xxx.yyy.255.149:1433 SYN ******S* Nov 10 00:54:36 217.129.237.226:3845 -> xxx.yyy.255.162:1433 SYN ******S* Nov 10 00:54:36 217.129.237.226:3855 -> xxx.yyy.255.172:1433 SYN ******S* Nov 10 00:54:36 217.129.237.226:3871 -> xxx.yyy.255.188:1433 SYN ******S* Nov 10 00:54:36 217.129.237.226:3878 -> xxx.yyy.255.196:1433 SYN ******S* Nov 10 00:54:36 217.129.237.226:3905 -> xxx.yyy.255.222:1433 SYN ******S* Nov 10 00:54:36 217.129.237.226:3912 -> xxx.yyy.255.230:1433 SYN ******S* Nov 10 00:54:36 217.129.237.226:3923 -> xxx.yyy.255.240:1433 SYN ******S* 22931 Nov 10 21:17:59 217.158.150.47:2002 -> xxx.yyy.1.0:139 SYN ******S* Nov 10 21:17:59 217.158.150.47:2006 -> xxx.yyy.1.2:139 SYN ******S* Nov 10 21:17:59 217.158.150.47:2010 -> xxx.yyy.1.3:139 SYN ******S* Nov 10 21:17:59 217.158.150.47:2012 -> xxx.yyy.1.4:139 SYN ******S* Nov 10 21:17:59 217.158.150.47:2014 -> xxx.yyy.1.5:139 SYN ******S* Nov 10 21:17:59 217.158.150.47:2016 -> xxx.yyy.1.6:139 SYN ******S* Nov 10 21:17:59 217.158.150.47:2018 -> xxx.yyy.1.7:139 SYN ******S* Nov 10 21:17:59 217.158.150.47:2020 -> xxx.yyy.1.8:139 SYN ******S* [...] Nov 10 21:40:23 217.158.150.47:2709 -> xxx.yyy.255.238:139 SYN ******S* Nov 10 21:40:23 217.158.150.47:2713 -> xxx.yyy.255.240:139 SYN ******S* Nov 10 21:40:23 217.158.150.47:2717 -> xxx.yyy.255.241:139 SYN ******S* Nov 10 21:40:23 217.158.150.47:2719 -> xxx.yyy.255.242:139 SYN ******S* Nov 10 21:40:23 217.158.150.47:2725 -> xxx.yyy.255.245:139 SYN ******S* Nov 10 21:40:23 217.158.150.47:2727 -> xxx.yyy.255.246:139 SYN ******S* Nov 10 21:40:23 217.158.150.47:2735 -> xxx.yyy.255.250:139 SYN ******S* Nov 10 21:40:23 217.158.150.47:2737 -> xxx.yyy.255.251:139 SYN ******S* Nov 10 21:40:23 217.158.150.47:2739 -> xxx.yyy.255.252:139 SYN ******S* 22366 Nov 10 00:27:21 213.180.210.35:38268 -> xxx.yyy.184.215:80 SYN ******S* Nov 10 00:27:21 213.180.210.35:38150 -> xxx.yyy.184.215:81 SYN ******S* Nov 10 00:27:21 213.180.210.35:51899 -> xxx.yyy.184.215:1075 SYN ******S* Nov 10 00:27:18 213.180.210.35:60993 -> xxx.yyy.184.215:3128 SYN ******S* Nov 10 00:27:18 213.180.210.35:33754 -> xxx.yyy.184.215:4480 SYN ******S* Nov 10 00:27:18 213.180.210.35:31012 -> xxx.yyy.184.215:6588 SYN ******S* Nov 10 00:27:18 213.180.210.35:47119 -> xxx.yyy.184.215:8000 SYN ******S* Nov 10 00:27:21 213.180.210.35:36266 -> xxx.yyy.184.215:8080 SYN ******S* [...] Nov 10 22:43:01 213.180.210.35:42630 -> xxx.yyy.241.254:6027 SYN ******S* Nov 10 22:43:01 213.180.210.35:42630 -> xxx.yyy.241.254:6061 SYN ******S* Nov 10 22:43:01 213.180.210.35:42630 -> xxx.yyy.241.254:6024 SYN ******S* Nov 10 23:13:26 213.180.210.35:61204 -> xxx.yyy.241.254:22 SYN ******S* Nov 10 23:13:26 213.180.210.35:64982 -> xxx.yyy.241.254:80 SYN ******S* Nov 10 23:13:26 213.180.210.35:64142 -> xxx.yyy.241.254:389 SYN ******S* Nov 10 23:13:26 213.180.210.35:34436 -> xxx.yyy.241.254:5432 SYN ******S* Nov 10 23:13:26 213.180.210.35:43067 -> xxx.yyy.241.254:32771 SYN ******S* 22211 Nov 10 15:36:04 80.242.24.142:4145 -> xxx.yyy.204.2:20168 SYN ******S* Nov 10 15:36:04 80.242.24.142:4146 -> xxx.yyy.204.3:20168 SYN ******S* Nov 10 15:36:04 80.242.24.142:4148 -> xxx.yyy.204.4:20168 SYN ******S* Nov 10 15:36:04 80.242.24.142:4149 -> xxx.yyy.204.5:20168 SYN ******S* Nov 10 15:36:04 80.242.24.142:4154 -> xxx.yyy.204.10:20168 SYN ******S* Nov 10 15:36:04 80.242.24.142:4158 -> xxx.yyy.204.14:20168 SYN ******S* Nov 10 15:36:04 80.242.24.142:4159 -> xxx.yyy.204.15:20168 SYN ******S* Nov 10 15:36:04 80.242.24.142:4160 -> xxx.yyy.204.16:20168 SYN ******S* [...] Nov 10 16:09:44 80.242.24.142:3346 -> xxx.yyy.255.205:20168 SYN ******S* Nov 10 16:09:45 80.242.24.142:3388 -> xxx.yyy.255.242:20168 SYN ******S* Nov 10 16:09:45 80.242.24.142:3387 -> xxx.yyy.255.241:20168 SYN ******S* Nov 10 16:09:45 80.242.24.142:3386 -> xxx.yyy.255.240:20168 SYN ******S* Nov 10 16:09:45 80.242.24.142:3385 -> xxx.yyy.255.239:20168 SYN ******S* Nov 10 16:09:45 80.242.24.142:3384 -> xxx.yyy.255.238:20168 SYN ******S* Nov 10 16:09:50 80.242.24.142:4173 -> xxx.yyy.255.246:20168 SYN ******S* Nov 10 16:09:50 80.242.24.142:4181 -> xxx.yyy.255.254:20168 SYN ******S* 11239 Nov 10 07:56:07 210.123.112.134:1523 -> xxx.yyy.235.115:5554 SYN ******S* Nov 10 07:56:08 210.123.112.134:2113 -> xxx.yyy.235.115:1023 SYN ******S* Nov 10 07:56:07 210.123.112.134:1522 -> xxx.yyy.235.114:5554 SYN ******S* Nov 10 07:56:07 210.123.112.134:1524 -> xxx.yyy.235.116:5554 SYN ******S* Nov 10 07:56:07 210.123.112.134:1532 -> xxx.yyy.235.112:5554 SYN ******S* Nov 10 07:56:08 210.123.112.134:2110 -> xxx.yyy.235.112:1023 SYN ******S* Nov 10 07:56:10 210.123.112.134:3008 -> xxx.yyy.235.112:9898 SYN ******S* Nov 10 07:56:07 210.123.112.134:1533 -> xxx.yyy.235.113:5554 SYN ******S* [...] Nov 10 07:56:50 210.123.112.134:2087 -> xxx.yyy.255.129:9898 SYN ******S* Nov 10 07:56:50 210.123.112.134:2086 -> xxx.yyy.255.128:9898 SYN ******S* Nov 10 07:56:50 210.123.112.134:2100 -> xxx.yyy.255.142:9898 SYN ******S* Nov 10 07:56:50 210.123.112.134:2101 -> xxx.yyy.255.143:9898 SYN ******S* Nov 10 07:56:50 210.123.112.134:2102 -> xxx.yyy.255.144:9898 SYN ******S* Nov 10 07:56:50 210.123.112.134:2149 -> xxx.yyy.255.185:9898 SYN ******S* Nov 10 07:56:50 210.123.112.134:2150 -> xxx.yyy.255.186:9898 SYN ******S* Nov 10 07:56:50 210.123.112.134:2208 -> xxx.yyy.255.200:9898 SYN ******S* Nov 10 07:56:50 210.123.112.134:2260 -> xxx.yyy.255.215:9898 SYN ******S* 11080 Nov 10 21:41:28 216.60.254.10:1076 -> xxx.yyy.1.1:80 SYN ******S* Nov 10 21:41:27 216.60.254.10:1077 -> xxx.yyy.1.2:80 SYN ******S* Nov 10 21:41:26 216.60.254.10:1089 -> xxx.yyy.1.14:80 SYN ******S* Nov 10 21:41:28 216.60.254.10:1091 -> xxx.yyy.1.16:80 SYN ******S* Nov 10 21:41:26 216.60.254.10:1092 -> xxx.yyy.1.17:80 SYN ******S* Nov 10 21:41:26 216.60.254.10:1093 -> xxx.yyy.1.18:80 SYN ******S* Nov 10 21:41:26 216.60.254.10:1094 -> xxx.yyy.1.19:80 SYN ******S* Nov 10 21:41:26 216.60.254.10:1095 -> xxx.yyy.1.20:80 SYN ******S* [...] Nov 10 21:49:34 216.60.254.10:2860 -> xxx.yyy.255.38:80 SYN ******S* Nov 10 21:49:34 216.60.254.10:2847 -> xxx.yyy.255.25:80 SYN ******S* Nov 10 21:49:34 216.60.254.10:2973 -> xxx.yyy.255.151:80 SYN ******S* Nov 10 21:49:34 216.60.254.10:3053 -> xxx.yyy.255.231:80 SYN ******S* Nov 10 21:49:34 216.60.254.10:3018 -> xxx.yyy.255.196:80 SYN ******S* Nov 10 21:49:34 216.60.254.10:2903 -> xxx.yyy.255.81:80 SYN ******S* Nov 10 21:49:34 216.60.254.10:2967 -> xxx.yyy.255.145:80 SYN ******S* Nov 10 21:49:34 216.60.254.10:3063 -> xxx.yyy.255.241:80 SYN ******S* Nov 10 21:49:34 216.60.254.10:3044 -> xxx.yyy.255.222:80 SYN ******S* 8994 Nov 10 21:42:00 65.68.28.10:1812 -> xxx.yyy.17.89:80 SYN ******S* Nov 10 21:42:03 65.68.28.10:1813 -> xxx.yyy.17.90:80 SYN ******S* Nov 10 21:42:03 65.68.28.10:1814 -> xxx.yyy.17.91:80 SYN ******S* Nov 10 21:42:00 65.68.28.10:1815 -> xxx.yyy.17.92:80 SYN ******S* Nov 10 21:42:00 65.68.28.10:1816 -> xxx.yyy.17.93:80 SYN ******S* Nov 10 21:42:00 65.68.28.10:1827 -> xxx.yyy.17.104:80 SYN ******S* Nov 10 21:42:03 65.68.28.10:1828 -> xxx.yyy.17.105:80 SYN ******S* Nov 10 21:42:00 65.68.28.10:1829 -> xxx.yyy.17.106:80 SYN ******S* [...] Nov 10 21:49:23 65.68.28.10:1778 -> xxx.yyy.251.30:80 SYN ******S* Nov 10 21:49:23 65.68.28.10:1718 -> xxx.yyy.250.225:80 SYN ******S* Nov 10 21:49:23 65.68.28.10:1686 -> xxx.yyy.250.194:80 SYN ******S* Nov 10 21:49:23 65.68.28.10:1725 -> xxx.yyy.250.232:80 SYN ******S* Nov 10 21:49:23 65.68.28.10:1696 -> xxx.yyy.250.204:80 SYN ******S* Nov 10 21:49:23 65.68.28.10:1760 -> xxx.yyy.251.12:80 SYN ******S* Nov 10 21:49:23 65.68.28.10:1779 -> xxx.yyy.251.31:80 SYN ******S* Nov 10 21:49:23 65.68.28.10:1763 -> xxx.yyy.251.15:80 SYN ******S* Nov 10 21:49:23 65.68.28.10:1699 -> xxx.yyy.250.207:80 SYN ******S* 8831 Nov 10 04:17:51 220.174.41.95:3132 -> xxx.yyy.1.4:1433 SYN ******S* Nov 10 04:17:54 220.174.41.95:3139 -> xxx.yyy.1.9:1433 SYN ******S* Nov 10 04:17:54 220.174.41.95:3137 -> xxx.yyy.1.7:1433 SYN ******S* Nov 10 04:17:54 220.174.41.95:3136 -> xxx.yyy.1.6:1433 SYN ******S* Nov 10 04:17:52 220.174.41.95:3141 -> xxx.yyy.1.11:1433 SYN ******S* Nov 10 04:17:52 220.174.41.95:3145 -> xxx.yyy.1.14:1433 SYN ******S* Nov 10 04:17:54 220.174.41.95:3140 -> xxx.yyy.1.10:1433 SYN ******S* Nov 10 04:17:52 220.174.41.95:3146 -> xxx.yyy.1.15:1433 SYN ******S* [...] Nov 10 05:11:23 220.174.41.95:3133 -> xxx.yyy.254.181:1433 SYN ******S* Nov 10 05:11:23 220.174.41.95:3129 -> xxx.yyy.254.177:1433 SYN ******S* Nov 10 05:11:23 220.174.41.95:3132 -> xxx.yyy.254.180:1433 SYN ******S* Nov 10 05:11:24 220.174.41.95:3138 -> xxx.yyy.254.186:1433 SYN ******S* Nov 10 05:11:24 220.174.41.95:3134 -> xxx.yyy.254.182:1433 SYN ******S* Nov 10 05:11:24 220.174.41.95:3143 -> xxx.yyy.254.191:1433 SYN ******S* Nov 10 05:11:24 220.174.41.95:3140 -> xxx.yyy.254.188:1433 SYN ******S* Nov 10 05:11:24 220.174.41.95:3146 -> xxx.yyy.254.194:1433 SYN ******S* Nov 10 05:11:24 220.174.41.95:3144 -> xxx.yyy.254.192:1433 SYN ******S* 8593 Nov 10 15:36:36 82.37.195.249:3736 -> xxx.yyy.20.1:20168 SYN ******S* Nov 10 15:36:37 82.37.195.249:3741 -> xxx.yyy.20.6:20168 SYN ******S* Nov 10 15:36:34 82.37.195.249:3739 -> xxx.yyy.20.4:20168 SYN ******S* Nov 10 15:36:34 82.37.195.249:3740 -> xxx.yyy.20.5:20168 SYN ******S* Nov 10 15:36:37 82.37.195.249:3744 -> xxx.yyy.20.8:20168 SYN ******S* Nov 10 15:36:37 82.37.195.249:3746 -> xxx.yyy.20.10:20168 SYN ******S* Nov 10 15:36:37 82.37.195.249:3747 -> xxx.yyy.20.11:20168 SYN ******S* Nov 10 15:36:34 82.37.195.249:3751 -> xxx.yyy.20.14:20168 SYN ******S* [...] Nov 10 16:48:29 82.37.195.249:4918 -> xxx.yyy.132.59:20168 SYN ******S* Nov 10 16:48:31 82.37.195.249:4888 -> xxx.yyy.132.44:20168 SYN ******S* Nov 10 16:48:29 82.37.195.249:4928 -> xxx.yyy.132.66:20168 SYN ******S* Nov 10 16:48:29 82.37.195.249:4924 -> xxx.yyy.132.62:20168 SYN ******S* Nov 10 16:48:29 82.37.195.249:4926 -> xxx.yyy.132.64:20168 SYN ******S* Nov 10 16:48:29 82.37.195.249:4925 -> xxx.yyy.132.63:20168 SYN ******S* Nov 10 16:48:31 82.37.195.249:4842 -> xxx.yyy.132.12:20168 SYN ******S* Nov 10 16:48:31 82.37.195.249:4882 -> xxx.yyy.132.38:20168 SYN ******S* Nov 10 16:48:31 82.37.195.249:4898 -> xxx.yyy.132.48:20168 SYN ******S* 7850 Nov 10 05:30:56 203.229.109.226:1597 -> xxx.yyy.1.1:1433 SYN ******S* Nov 10 05:30:56 203.229.109.226:1599 -> xxx.yyy.1.2:1433 SYN ******S* Nov 10 05:30:56 203.229.109.226:1601 -> xxx.yyy.1.3:1433 SYN ******S* Nov 10 05:30:56 203.229.109.226:1606 -> xxx.yyy.1.5:1433 SYN ******S* Nov 10 05:30:53 203.229.109.226:1610 -> xxx.yyy.1.7:1433 SYN ******S* Nov 10 05:30:53 203.229.109.226:1608 -> xxx.yyy.1.6:1433 SYN ******S* Nov 10 05:30:56 203.229.109.226:1612 -> xxx.yyy.1.8:1433 SYN ******S* Nov 10 05:30:56 203.229.109.226:1614 -> xxx.yyy.1.9:1433 SYN ******S* [...] Nov 10 06:00:44 203.229.109.226:2820 -> xxx.yyy.33.248:1433 SYN ******S* Nov 10 06:00:44 203.229.109.226:2821 -> xxx.yyy.33.249:1433 SYN ******S* Nov 10 06:00:44 203.229.109.226:2823 -> xxx.yyy.33.251:1433 SYN ******S* Nov 10 06:00:44 203.229.109.226:2822 -> xxx.yyy.33.250:1433 SYN ******S* Nov 10 06:00:44 203.229.109.226:2824 -> xxx.yyy.33.252:1433 SYN ******S* Nov 10 06:00:44 203.229.109.226:2825 -> xxx.yyy.33.253:1433 SYN ******S* Nov 10 06:00:44 203.229.109.226:2826 -> xxx.yyy.33.254:1433 SYN ******S* Nov 10 06:00:44 203.229.109.226:2828 -> xxx.yyy.33.255:1433 SYN ******S* 7722 Nov 10 22:59:33 221.165.21.51:3031 -> xxx.yyy.214.246:5554 SYN ******S* Nov 10 22:59:34 221.165.21.51:3891 -> xxx.yyy.214.246:1023 SYN ******S* Nov 10 22:59:33 221.165.21.51:3037 -> xxx.yyy.214.247:5554 SYN ******S* Nov 10 22:59:34 221.165.21.51:3892 -> xxx.yyy.214.247:1023 SYN ******S* Nov 10 22:59:33 221.165.21.51:3045 -> xxx.yyy.214.251:5554 SYN ******S* Nov 10 22:59:36 221.165.21.51:1859 -> xxx.yyy.214.251:9898 SYN ******S* Nov 10 22:59:33 221.165.21.51:3054 -> xxx.yyy.214.255:5554 SYN ******S* Nov 10 22:59:33 221.165.21.51:3060 -> xxx.yyy.214.253:5554 SYN ******S* [...] Nov 10 23:00:17 221.165.21.51:3591 -> xxx.yyy.235.84:9898 SYN ******S* Nov 10 23:00:18 221.165.21.51:3715 -> xxx.yyy.235.93:9898 SYN ******S* Nov 10 23:00:18 221.165.21.51:3724 -> xxx.yyy.235.92:9898 SYN ******S* Nov 10 23:00:18 221.165.21.51:3778 -> xxx.yyy.235.99:9898 SYN ******S* Nov 10 23:00:18 221.165.21.51:3781 -> xxx.yyy.235.101:9898 SYN ******S* Nov 10 23:00:18 221.165.21.51:3784 -> xxx.yyy.235.100:9898 SYN ******S* Nov 10 23:00:18 221.165.21.51:3811 -> xxx.yyy.235.105:9898 SYN ******S* Nov 10 23:00:18 221.165.21.51:3840 -> xxx.yyy.235.107:9898 SYN ******S* Nov 10 23:00:18 221.165.21.51:3842 -> xxx.yyy.235.112:9898 SYN ******S* 6683 Nov 10 23:57:01 218.61.128.51:3199 -> xxx.yyy.72.124:5554 SYN ******S* Nov 10 23:57:02 218.61.128.51:3456 -> xxx.yyy.72.124:1023 SYN ******S* Nov 10 23:57:01 218.61.128.51:3211 -> xxx.yyy.72.140:5554 SYN ******S* Nov 10 23:57:01 218.61.128.51:3210 -> xxx.yyy.72.139:5554 SYN ******S* Nov 10 23:57:01 218.61.128.51:3209 -> xxx.yyy.72.136:5554 SYN ******S* Nov 10 23:57:01 218.61.128.51:3214 -> xxx.yyy.72.145:5554 SYN ******S* Nov 10 23:57:02 218.61.128.51:3462 -> xxx.yyy.72.145:1023 SYN ******S* Nov 10 23:57:01 218.61.128.51:3215 -> xxx.yyy.72.141:5554 SYN ******S* [...] Nov 10 23:58:14 218.61.128.51:2285 -> xxx.yyy.73.97:9898 SYN ******S* Nov 10 23:58:15 218.61.128.51:2448 -> xxx.yyy.73.100:9898 SYN ******S* Nov 10 23:58:15 218.61.128.51:2449 -> xxx.yyy.73.101:9898 SYN ******S* Nov 10 23:58:15 218.61.128.51:2450 -> xxx.yyy.73.102:9898 SYN ******S* Nov 10 23:58:15 218.61.128.51:2451 -> xxx.yyy.73.103:9898 SYN ******S* Nov 10 23:58:15 218.61.128.51:2454 -> xxx.yyy.73.107:9898 SYN ******S* Nov 10 23:58:15 218.61.128.51:2473 -> xxx.yyy.73.111:9898 SYN ******S* Nov 10 23:58:15 218.61.128.51:2478 -> xxx.yyy.73.116:9898 SYN ******S* 6647 [...] 6472 Nov 10 15:39:55 81.244.10.129:4270 -> xxx.yyy.128.3:20168 SYN ******S* Nov 10 15:39:52 81.244.10.129:4272 -> xxx.yyy.128.5:20168 SYN ******S* Nov 10 15:39:52 81.244.10.129:4275 -> xxx.yyy.128.8:20168 SYN ******S* Nov 10 15:39:52 81.244.10.129:4277 -> xxx.yyy.128.10:20168 SYN ******S* Nov 10 15:39:52 81.244.10.129:4280 -> xxx.yyy.128.13:20168 SYN ******S* Nov 10 15:39:55 81.244.10.129:4284 -> xxx.yyy.128.17:20168 SYN ******S* Nov 10 15:39:55 81.244.10.129:4291 -> xxx.yyy.128.24:20168 SYN ******S* Nov 10 15:39:52 81.244.10.129:4294 -> xxx.yyy.128.27:20168 SYN ******S* [...] Nov 10 15:55:23 81.244.10.129:1877 -> xxx.yyy.151.228:20168 SYN ******S* Nov 10 15:55:23 81.244.10.129:1893 -> xxx.yyy.151.244:20168 SYN ******S* Nov 10 15:55:23 81.244.10.129:1915 -> xxx.yyy.152.10:20168 SYN ******S* Nov 10 15:55:23 81.244.10.129:1861 -> xxx.yyy.151.213:20168 SYN ******S* Nov 10 15:55:23 81.244.10.129:1887 -> xxx.yyy.151.238:20168 SYN ******S* Nov 10 15:55:23 81.244.10.129:1865 -> xxx.yyy.151.217:20168 SYN ******S* Nov 10 15:55:23 81.244.10.129:1891 -> xxx.yyy.151.242:20168 SYN ******S* Nov 10 15:55:23 81.244.10.129:1922 -> xxx.yyy.152.16:20168 SYN ******S* 6250 [...] 6188 Nov 10 22:55:12 220.76.77.91:3560 -> xxx.yyy.236.76:5554 SYN ******S* Nov 10 22:55:13 220.76.77.91:3826 -> xxx.yyy.236.76:1023 SYN ******S* Nov 10 22:55:12 220.76.77.91:3567 -> xxx.yyy.236.82:5554 SYN ******S* Nov 10 22:55:13 220.76.77.91:3835 -> xxx.yyy.236.82:1023 SYN ******S* Nov 10 22:55:12 220.76.77.91:3575 -> xxx.yyy.236.85:5554 SYN ******S* Nov 10 22:55:13 220.76.77.91:3564 -> xxx.yyy.236.79:5554 SYN ******S* Nov 10 22:55:14 220.76.77.91:3830 -> xxx.yyy.236.79:1023 SYN ******S* Nov 10 22:55:12 220.76.77.91:3587 -> xxx.yyy.236.87:5554 SYN ******S* [...] Nov 10 22:56:31 220.76.77.91:1846 -> xxx.yyy.255.195:9898 SYN ******S* Nov 10 22:56:31 220.76.77.91:1875 -> xxx.yyy.255.219:9898 SYN ******S* Nov 10 22:56:31 220.76.77.91:1890 -> xxx.yyy.255.231:9898 SYN ******S* Nov 10 22:56:31 220.76.77.91:1891 -> xxx.yyy.255.232:9898 SYN ******S* Nov 10 22:56:32 220.76.77.91:2009 -> xxx.yyy.255.242:9898 SYN ******S* Nov 10 22:56:32 220.76.77.91:2018 -> xxx.yyy.255.244:9898 SYN ******S* Nov 10 22:56:32 220.76.77.91:2038 -> xxx.yyy.255.252:9898 SYN ******S* Nov 10 22:56:32 220.76.77.91:2041 -> xxx.yyy.255.253:9898 SYN ******S* 5937 Nov 10 00:11:22 65.54.188.51:54526 -> xxx.yyy.1.60:80 SYN ******S* Nov 10 00:11:23 65.54.188.51:54607 -> xxx.yyy.248.4:80 SYN ******S* Nov 10 00:11:23 65.54.188.51:54648 -> xxx.yyy.241.31:80 SYN ******S* Nov 10 00:11:23 65.54.188.51:54713 -> xxx.yyy.220.68:80 SYN ******S* Nov 10 00:11:24 65.54.188.51:54804 -> xxx.yyy.233.193:80 SYN ******S* Nov 10 00:11:30 65.54.188.51:55197 -> xxx.yyy.221.183:80 SYN ******S* Nov 10 00:11:34 65.54.188.51:55902 -> xxx.yyy.241.22:80 SYN ******S* Nov 10 00:11:39 65.54.188.51:56229 -> xxx.yyy.225.122:200 SYN ******S* [...] Nov 10 23:59:34 65.54.188.51:40217 -> xxx.yyy.248.4:80 SYN ******S* Nov 10 23:59:37 65.54.188.51:40872 -> xxx.yyy.212.103:80 SYN ******S* Nov 10 23:59:37 65.54.188.51:40931 -> xxx.yyy.12.25:80 SYN ******S* Nov 10 23:59:37 65.54.188.51:40971 -> xxx.yyy.241.29:80 SYN ******S* Nov 10 23:59:39 65.54.188.51:41210 -> xxx.yyy.243.44:80 SYN ******S* Nov 10 23:59:40 65.54.188.51:41383 -> xxx.yyy.241.98:80 SYN ******S* Nov 10 23:59:40 65.54.188.51:41385 -> xxx.yyy.241.20:80 SYN ******S* Nov 10 23:59:41 65.54.188.51:41556 -> xxx.yyy.232.143:80 SYN ******S* Nov 10 23:59:44 65.54.188.51:42136 -> xxx.yyy.241.4:80 SYN ******S* 5918 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions