[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Nov 18 04:21:07 218.28.24.194:45284 -> xxx.yyy.1.0:1433 SYN ******S* Nov 18 04:21:07 218.28.24.194:45287 -> xxx.yyy.1.1:1433 SYN ******S* Nov 18 04:21:07 218.28.24.194:45288 -> xxx.yyy.1.2:1433 SYN ******S* Nov 18 04:21:07 218.28.24.194:45289 -> xxx.yyy.1.3:1433 SYN ******S* Nov 18 04:21:07 218.28.24.194:45296 -> xxx.yyy.1.5:1433 SYN ******S* Nov 18 04:21:07 218.28.24.194:45302 -> xxx.yyy.1.7:1433 SYN ******S* Nov 18 04:21:07 218.28.24.194:45301 -> xxx.yyy.1.6:1433 SYN ******S* Nov 18 04:21:07 218.28.24.194:45303 -> xxx.yyy.1.8:1433 SYN ******S* [...] Nov 18 08:11:04 218.28.24.194:13973 -> xxx.yyy.255.244:1433 SYN ******S* Nov 18 08:11:04 218.28.24.194:43187 -> xxx.yyy.255.245:1433 SYN ******S* Nov 18 08:11:04 218.28.24.194:18963 -> xxx.yyy.255.250:1433 SYN ******S* Nov 18 08:11:04 218.28.24.194:41642 -> xxx.yyy.255.247:1433 SYN ******S* Nov 18 08:11:04 218.28.24.194:30718 -> xxx.yyy.255.246:1433 SYN ******S* Nov 18 08:11:04 218.28.24.194:32475 -> xxx.yyy.255.251:1433 SYN ******S* Nov 18 08:11:05 218.28.24.194:25869 -> xxx.yyy.255.252:1433 SYN ******S* Nov 18 08:11:06 218.28.24.194:53536 -> xxx.yyy.255.254:1433 SYN ******S* 115844 Nov 18 02:31:02 213.82.33.5:16980 -> xxx.yyy.1.1:1433 SYN ******S* Nov 18 02:31:02 213.82.33.5:16984 -> xxx.yyy.1.2:1433 SYN ******S* Nov 18 02:31:02 213.82.33.5:16988 -> xxx.yyy.1.3:1433 SYN ******S* Nov 18 02:31:02 213.82.33.5:16995 -> xxx.yyy.1.5:1433 SYN ******S* Nov 18 02:31:02 213.82.33.5:16999 -> xxx.yyy.1.6:1433 SYN ******S* Nov 18 02:31:02 213.82.33.5:17003 -> xxx.yyy.1.7:1433 SYN ******S* Nov 18 02:31:02 213.82.33.5:17009 -> xxx.yyy.1.8:1433 SYN ******S* Nov 18 02:31:02 213.82.33.5:17011 -> xxx.yyy.1.9:1433 SYN ******S* [...] Nov 18 02:47:52 213.82.33.5:59232 -> xxx.yyy.255.250:1433 SYN ******S* Nov 18 02:47:52 213.82.33.5:59222 -> xxx.yyy.255.247:1433 SYN ******S* Nov 18 02:47:52 213.82.33.5:59214 -> xxx.yyy.255.245:1433 SYN ******S* Nov 18 02:47:52 213.82.33.5:59226 -> xxx.yyy.255.248:1433 SYN ******S* Nov 18 02:47:52 213.82.33.5:59218 -> xxx.yyy.255.246:1433 SYN ******S* Nov 18 02:47:52 213.82.33.5:59237 -> xxx.yyy.255.251:1433 SYN ******S* Nov 18 02:47:52 213.82.33.5:59245 -> xxx.yyy.255.253:1433 SYN ******S* Nov 18 02:47:52 213.82.33.5:59241 -> xxx.yyy.255.252:1433 SYN ******S* 69384 Nov 18 05:29:02 218.148.10.65:4369 -> xxx.yyy.1.1:6129 SYN ******S* Nov 18 05:29:02 218.148.10.65:4371 -> xxx.yyy.1.2:6129 SYN ******S* Nov 18 05:29:02 218.148.10.65:4373 -> xxx.yyy.1.3:6129 SYN ******S* Nov 18 05:29:03 218.148.10.65:4383 -> xxx.yyy.1.8:6129 SYN ******S* Nov 18 05:29:03 218.148.10.65:4375 -> xxx.yyy.1.4:6129 SYN ******S* Nov 18 05:29:03 218.148.10.65:4377 -> xxx.yyy.1.5:6129 SYN ******S* Nov 18 05:29:03 218.148.10.65:4379 -> xxx.yyy.1.6:6129 SYN ******S* Nov 18 05:29:00 218.148.10.65:4387 -> xxx.yyy.1.10:6129 SYN ******S* [...] Nov 18 05:40:59 218.148.10.65:1346 -> xxx.yyy.255.237:6129 SYN ******S* Nov 18 05:40:59 218.148.10.65:1356 -> xxx.yyy.255.247:6129 SYN ******S* Nov 18 05:40:59 218.148.10.65:1353 -> xxx.yyy.255.244:6129 SYN ******S* Nov 18 05:40:59 218.148.10.65:1355 -> xxx.yyy.255.246:6129 SYN ******S* Nov 18 05:40:59 218.148.10.65:1357 -> xxx.yyy.255.248:6129 SYN ******S* Nov 18 05:40:59 218.148.10.65:1360 -> xxx.yyy.255.251:6129 SYN ******S* Nov 18 05:40:59 218.148.10.65:1362 -> xxx.yyy.255.253:6129 SYN ******S* Nov 18 05:40:59 218.148.10.65:1363 -> xxx.yyy.255.254:6129 SYN ******S* Nov 18 05:40:59 218.148.10.65:1361 -> xxx.yyy.255.252:6129 SYN ******S* 66283 Nov 18 23:07:21 211.220.223.92:4305 -> xxx.yyy.1.1:4000 SYN ******S* Nov 18 23:07:22 211.220.223.92:4307 -> xxx.yyy.1.3:4000 SYN ******S* Nov 18 23:07:21 211.220.223.92:4308 -> xxx.yyy.1.4:4000 SYN ******S* Nov 18 23:07:21 211.220.223.92:4314 -> xxx.yyy.1.10:4000 SYN ******S* Nov 18 23:07:21 211.220.223.92:4317 -> xxx.yyy.1.13:4000 SYN ******S* Nov 18 23:07:24 211.220.223.92:4312 -> xxx.yyy.1.8:4000 SYN ******S* Nov 18 23:07:22 211.220.223.92:4318 -> xxx.yyy.1.14:4000 SYN ******S* Nov 18 23:07:22 211.220.223.92:4320 -> xxx.yyy.1.16:4000 SYN ******S* [...] Nov 18 23:19:25 211.220.223.92:2955 -> xxx.yyy.255.237:4000 SYN ******S* Nov 18 23:19:25 211.220.223.92:2965 -> xxx.yyy.255.247:4000 SYN ******S* Nov 18 23:19:25 211.220.223.92:2967 -> xxx.yyy.255.249:4000 SYN ******S* Nov 18 23:19:25 211.220.223.92:2970 -> xxx.yyy.255.251:4000 SYN ******S* Nov 18 23:19:25 211.220.223.92:2971 -> xxx.yyy.255.252:4000 SYN ******S* Nov 18 23:19:25 211.220.223.92:2968 -> xxx.yyy.255.250:4000 SYN ******S* Nov 18 23:19:25 211.220.223.92:2972 -> xxx.yyy.255.253:4000 SYN ******S* Nov 18 23:19:25 211.220.223.92:2966 -> xxx.yyy.255.248:4000 SYN ******S* 41113 Nov 18 23:08:04 217.220.247.92:3489 -> xxx.yyy.1.7:1433 SYN ******S* Nov 18 23:08:04 217.220.247.92:3491 -> xxx.yyy.1.9:1433 SYN ******S* Nov 18 23:08:07 217.220.247.92:3492 -> xxx.yyy.1.10:1433 SYN ******S* Nov 18 23:08:04 217.220.247.92:3497 -> xxx.yyy.1.15:1433 SYN ******S* Nov 18 23:08:07 217.220.247.92:3498 -> xxx.yyy.1.16:1433 SYN ******S* Nov 18 23:08:05 217.220.247.92:3499 -> xxx.yyy.1.17:1433 SYN ******S* Nov 18 23:08:05 217.220.247.92:3501 -> xxx.yyy.1.19:1433 SYN ******S* Nov 18 23:08:05 217.220.247.92:3502 -> xxx.yyy.1.20:1433 SYN ******S* [...] Nov 18 23:19:48 217.220.247.92:3367 -> xxx.yyy.255.202:1433 SYN ******S* Nov 18 23:19:48 217.220.247.92:3392 -> xxx.yyy.255.225:1433 SYN ******S* Nov 18 23:19:48 217.220.247.92:3388 -> xxx.yyy.255.222:1433 SYN ******S* Nov 18 23:19:48 217.220.247.92:3395 -> xxx.yyy.255.228:1433 SYN ******S* Nov 18 23:19:48 217.220.247.92:3397 -> xxx.yyy.255.230:1433 SYN ******S* Nov 18 23:19:48 217.220.247.92:3408 -> xxx.yyy.255.241:1433 SYN ******S* Nov 18 23:19:48 217.220.247.92:3407 -> xxx.yyy.255.240:1433 SYN ******S* Nov 18 23:19:48 217.220.247.92:3420 -> xxx.yyy.255.253:1433 SYN ******S* 39733 Nov 18 21:40:58 82.126.211.155:4720 -> xxx.yyy.1.1:21 SYN ******S* Nov 18 21:40:58 82.126.211.155:4723 -> xxx.yyy.1.2:21 SYN ******S* Nov 18 21:40:58 82.126.211.155:4725 -> xxx.yyy.1.4:21 SYN ******S* Nov 18 21:40:58 82.126.211.155:4727 -> xxx.yyy.1.5:21 SYN ******S* Nov 18 21:40:58 82.126.211.155:4729 -> xxx.yyy.1.7:21 SYN ******S* Nov 18 21:40:56 82.126.211.155:4732 -> xxx.yyy.1.9:21 SYN ******S* Nov 18 21:40:58 82.126.211.155:4734 -> xxx.yyy.1.11:21 SYN ******S* Nov 18 21:40:58 82.126.211.155:4736 -> xxx.yyy.1.12:21 SYN ******S* [...] Nov 18 22:27:47 82.126.211.155:4752 -> xxx.yyy.255.240:21 SYN ******S* Nov 18 22:27:47 82.126.211.155:4757 -> xxx.yyy.255.245:21 SYN ******S* Nov 18 22:27:47 82.126.211.155:4758 -> xxx.yyy.255.246:21 SYN ******S* Nov 18 22:27:47 82.126.211.155:4760 -> xxx.yyy.255.248:21 SYN ******S* Nov 18 22:27:47 82.126.211.155:4761 -> xxx.yyy.255.249:21 SYN ******S* Nov 18 22:27:47 82.126.211.155:4762 -> xxx.yyy.255.250:21 SYN ******S* Nov 18 22:27:47 82.126.211.155:4764 -> xxx.yyy.255.252:21 SYN ******S* Nov 18 22:27:47 82.126.211.155:4766 -> xxx.yyy.255.254:21 SYN ******S* 39330 Nov 18 15:10:32 83.28.130.217:4865 -> xxx.yyy.209.160:139 SYN ******S* Nov 18 15:10:29 83.28.130.217:4879 -> xxx.yyy.239.3:139 SYN ******S* Nov 18 15:10:32 83.28.130.217:4880 -> xxx.yyy.190.164:139 SYN ******S* Nov 18 15:10:29 83.28.130.217:4888 -> xxx.yyy.142.69:139 SYN ******S* Nov 18 15:10:29 83.28.130.217:4892 -> xxx.yyy.229.133:139 SYN ******S* Nov 18 15:10:29 83.28.130.217:4916 -> xxx.yyy.171.168:139 SYN ******S* Nov 18 15:10:29 83.28.130.217:4919 -> xxx.yyy.74.234:139 SYN ******S* Nov 18 15:10:33 83.28.130.217:4942 -> xxx.yyy.249.106:139 SYN ******S* [...] Nov 18 17:22:36 83.28.130.217:1618 -> xxx.yyy.158.184:139 SYN ******S* Nov 18 17:22:36 83.28.130.217:1619 -> xxx.yyy.197.243:139 SYN ******S* Nov 18 17:22:37 83.28.130.217:1635 -> xxx.yyy.245.194:139 SYN ******S* Nov 18 17:22:37 83.28.130.217:1636 -> xxx.yyy.137.231:139 SYN ******S* Nov 18 17:22:37 83.28.130.217:1643 -> xxx.yyy.81.132:139 SYN ******S* Nov 18 17:22:37 83.28.130.217:1644 -> xxx.yyy.132.252:139 SYN ******S* Nov 18 17:22:37 83.28.130.217:1652 -> xxx.yyy.90.24:139 SYN ******S* Nov 18 17:22:39 83.28.130.217:1718 -> xxx.yyy.228.154:139 SYN ******S* 37557 Nov 18 20:09:49 192.84.136.185:3498 -> xxx.yyy.1.1:6543 SYN ******S* Nov 18 20:09:49 192.84.136.185:3499 -> xxx.yyy.1.2:6543 SYN ******S* Nov 18 20:09:49 192.84.136.185:3500 -> xxx.yyy.1.3:6543 SYN ******S* Nov 18 20:09:49 192.84.136.185:3501 -> xxx.yyy.1.4:6543 SYN ******S* Nov 18 20:09:52 192.84.136.185:3502 -> xxx.yyy.1.5:6543 SYN ******S* Nov 18 20:09:52 192.84.136.185:3505 -> xxx.yyy.1.8:6543 SYN ******S* Nov 18 20:09:49 192.84.136.185:3508 -> xxx.yyy.1.11:6543 SYN ******S* Nov 18 20:09:49 192.84.136.185:3513 -> xxx.yyy.1.16:6543 SYN ******S* [...] Nov 18 20:21:35 192.84.136.185:2016 -> xxx.yyy.255.236:6543 SYN ******S* Nov 18 20:21:35 192.84.136.185:2013 -> xxx.yyy.255.233:6543 SYN ******S* Nov 18 20:21:35 192.84.136.185:2017 -> xxx.yyy.255.237:6543 SYN ******S* Nov 18 20:21:35 192.84.136.185:2014 -> xxx.yyy.255.234:6543 SYN ******S* Nov 18 20:21:35 192.84.136.185:2021 -> xxx.yyy.255.241:6543 SYN ******S* Nov 18 20:21:35 192.84.136.185:2033 -> xxx.yyy.255.253:6543 SYN ******S* Nov 18 20:21:35 192.84.136.185:2032 -> xxx.yyy.255.252:6543 SYN ******S* Nov 18 20:21:35 192.84.136.185:2030 -> xxx.yyy.255.250:6543 SYN ******S* 36850 Nov 18 03:43:10 222.181.94.64:3939 -> xxx.yyy.20.2:1433 SYN ******S* Nov 18 03:43:07 222.181.94.64:3943 -> xxx.yyy.20.4:1433 SYN ******S* Nov 18 03:43:10 222.181.94.64:3937 -> xxx.yyy.20.1:1433 SYN ******S* Nov 18 03:43:07 222.181.94.64:3955 -> xxx.yyy.20.10:1433 SYN ******S* Nov 18 03:43:07 222.181.94.64:3945 -> xxx.yyy.20.5:1433 SYN ******S* Nov 18 03:43:07 222.181.94.64:3961 -> xxx.yyy.20.13:1433 SYN ******S* Nov 18 03:43:07 222.181.94.64:3957 -> xxx.yyy.20.11:1433 SYN ******S* Nov 18 03:43:07 222.181.94.64:3959 -> xxx.yyy.20.12:1433 SYN ******S* [...] Nov 18 06:36:31 222.181.94.64:3142 -> xxx.yyy.213.85:1433 SYN ******S* Nov 18 06:36:31 222.181.94.64:3139 -> xxx.yyy.213.82:1433 SYN ******S* Nov 18 06:36:31 222.181.94.64:3141 -> xxx.yyy.213.84:1433 SYN ******S* Nov 18 06:36:31 222.181.94.64:3147 -> xxx.yyy.213.86:1433 SYN ******S* Nov 18 06:36:31 222.181.94.64:3414 -> xxx.yyy.213.95:1433 SYN ******S* Nov 18 06:36:31 222.181.94.64:3148 -> xxx.yyy.213.87:1433 SYN ******S* Nov 18 06:36:31 222.181.94.64:3426 -> xxx.yyy.213.96:1433 SYN ******S* Nov 18 06:36:33 222.181.94.64:3364 -> xxx.yyy.213.88:1433 SYN ******S* Nov 18 06:36:33 222.181.94.64:3374 -> xxx.yyy.213.89:1433 SYN ******S* 36497 Nov 18 22:36:48 24.58.6.28:2271 -> xxx.yyy.1.62:4899 SYN ******S* Nov 18 22:36:48 24.58.6.28:2274 -> xxx.yyy.1.65:4899 SYN ******S* Nov 18 22:36:51 24.58.6.28:2276 -> xxx.yyy.1.67:4899 SYN ******S* Nov 18 22:36:48 24.58.6.28:2285 -> xxx.yyy.1.76:4899 SYN ******S* Nov 18 22:36:48 24.58.6.28:2281 -> xxx.yyy.1.72:4899 SYN ******S* Nov 18 22:36:48 24.58.6.28:2268 -> xxx.yyy.1.59:4899 SYN ******S* Nov 18 22:36:48 24.58.6.28:2269 -> xxx.yyy.1.60:4899 SYN ******S* Nov 18 22:36:48 24.58.6.28:2273 -> xxx.yyy.1.64:4899 SYN ******S* [...] Nov 18 23:00:37 24.58.6.28:2299 -> xxx.yyy.255.237:4899 SYN ******S* Nov 18 23:00:37 24.58.6.28:2296 -> xxx.yyy.255.234:4899 SYN ******S* Nov 18 23:00:37 24.58.6.28:2293 -> xxx.yyy.255.231:4899 SYN ******S* Nov 18 23:00:37 24.58.6.28:2314 -> xxx.yyy.255.252:4899 SYN ******S* Nov 18 23:00:37 24.58.6.28:2306 -> xxx.yyy.255.244:4899 SYN ******S* Nov 18 23:00:37 24.58.6.28:2303 -> xxx.yyy.255.241:4899 SYN ******S* Nov 18 23:00:37 24.58.6.28:2316 -> xxx.yyy.255.254:4899 SYN ******S* Nov 18 23:00:37 24.58.6.28:2315 -> xxx.yyy.255.253:4899 SYN ******S* 34968 Nov 18 15:48:03 209.181.61.52:3869 -> xxx.yyy.1.2:4000 SYN ******S* Nov 18 15:48:01 209.181.61.52:3873 -> xxx.yyy.1.6:4000 SYN ******S* Nov 18 15:48:01 209.181.61.52:3875 -> xxx.yyy.1.8:4000 SYN ******S* Nov 18 15:48:01 209.181.61.52:3877 -> xxx.yyy.1.10:4000 SYN ******S* Nov 18 15:48:01 209.181.61.52:3878 -> xxx.yyy.1.11:4000 SYN ******S* Nov 18 15:48:01 209.181.61.52:3879 -> xxx.yyy.1.12:4000 SYN ******S* Nov 18 15:48:01 209.181.61.52:3880 -> xxx.yyy.1.13:4000 SYN ******S* Nov 18 15:48:03 209.181.61.52:3881 -> xxx.yyy.1.14:4000 SYN ******S* [...] Nov 18 16:14:18 209.181.61.52:3715 -> xxx.yyy.zzz.224:4000 SYN ******S* Nov 18 16:14:18 209.181.61.52:3719 -> xxx.yyy.zzz.228:4000 SYN ******S* Nov 18 16:14:18 209.181.61.52:3716 -> xxx.yyy.zzz.225:4000 SYN ******S* Nov 18 16:14:18 209.181.61.52:3713 -> xxx.yyy.zzz.222:4000 SYN ******S* Nov 18 16:14:18 209.181.61.52:3727 -> xxx.yyy.zzz.236:4000 SYN ******S* Nov 18 16:14:18 209.181.61.52:3728 -> xxx.yyy.zzz.237:4000 SYN ******S* Nov 18 16:14:18 209.181.61.52:3725 -> xxx.yyy.zzz.234:4000 SYN ******S* Nov 18 16:14:18 209.181.61.52:3744 -> xxx.yyy.zzz.253:4000 SYN ******S* Nov 18 16:14:18 209.181.61.52:3741 -> xxx.yyy.zzz.250:4000 SYN ******S* 34427 Nov 18 00:30:46 158.110.190.117:2657 -> xxx.yyy.1.1:22 SYN ******S* Nov 18 00:30:46 158.110.190.117:2658 -> xxx.yyy.1.2:22 SYN ******S* Nov 18 00:30:46 158.110.190.117:2659 -> xxx.yyy.1.3:22 SYN ******S* Nov 18 00:30:46 158.110.190.117:2669 -> xxx.yyy.1.13:22 SYN ******S* Nov 18 00:30:46 158.110.190.117:2671 -> xxx.yyy.1.15:22 SYN ******S* Nov 18 00:30:46 158.110.190.117:2673 -> xxx.yyy.1.17:22 SYN ******S* Nov 18 00:30:46 158.110.190.117:2675 -> xxx.yyy.1.19:22 SYN ******S* Nov 18 00:30:46 158.110.190.117:2687 -> xxx.yyy.1.31:22 SYN ******S* [...] Nov 18 00:38:58 158.110.190.117:2465 -> xxx.yyy.255.182:22 SYN ******S* Nov 18 00:38:58 158.110.190.117:2497 -> xxx.yyy.255.214:22 SYN ******S* Nov 18 00:38:58 158.110.190.117:2528 -> xxx.yyy.255.245:22 SYN ******S* Nov 18 00:38:58 158.110.190.117:2512 -> xxx.yyy.255.229:22 SYN ******S* Nov 18 00:38:58 158.110.190.117:2516 -> xxx.yyy.255.233:22 SYN ******S* Nov 18 00:38:58 158.110.190.117:2529 -> xxx.yyy.255.246:22 SYN ******S* Nov 18 00:38:58 158.110.190.117:2510 -> xxx.yyy.255.227:22 SYN ******S* Nov 18 00:38:58 158.110.190.117:2523 -> xxx.yyy.255.240:22 SYN ******S* Nov 18 00:38:58 158.110.190.117:2534 -> xxx.yyy.255.251:22 SYN ******S* 32341 [...] 30750 [...] 22149 Nov 18 20:06:49 210.219.191.139:2387 -> xxx.yyy.1.2:4899 SYN ******S* Nov 18 20:06:48 210.219.191.139:2386 -> xxx.yyy.1.1:4899 SYN ******S* Nov 18 20:06:50 210.219.191.139:2401 -> xxx.yyy.1.16:4899 SYN ******S* Nov 18 20:06:48 210.219.191.139:2398 -> xxx.yyy.1.13:4899 SYN ******S* Nov 18 20:06:48 210.219.191.139:2403 -> xxx.yyy.1.18:4899 SYN ******S* Nov 18 20:06:49 210.219.191.139:2405 -> xxx.yyy.1.20:4899 SYN ******S* Nov 18 20:06:50 210.219.191.139:2406 -> xxx.yyy.1.21:4899 SYN ******S* Nov 18 20:06:50 210.219.191.139:2411 -> xxx.yyy.1.26:4899 SYN ******S* [...] Nov 18 20:13:27 210.219.191.139:3111 -> xxx.yyy.254.218:4899 SYN ******S* Nov 18 20:13:27 210.219.191.139:3113 -> xxx.yyy.254.220:4899 SYN ******S* Nov 18 20:13:27 210.219.191.139:3132 -> xxx.yyy.254.239:4899 SYN ******S* Nov 18 20:13:27 210.219.191.139:3134 -> xxx.yyy.254.241:4899 SYN ******S* Nov 18 20:13:27 210.219.191.139:3140 -> xxx.yyy.254.247:4899 SYN ******S* Nov 18 20:13:27 210.219.191.139:3141 -> xxx.yyy.254.248:4899 SYN ******S* Nov 18 20:13:27 210.219.191.139:3138 -> xxx.yyy.254.245:4899 SYN ******S* Nov 18 20:13:27 210.219.191.139:3142 -> xxx.yyy.254.249:4899 SYN ******S* Nov 18 20:13:27 210.219.191.139:3139 -> xxx.yyy.254.246:4899 SYN ******S* 19952 Nov 18 13:40:33 211.147.248.234:3616 -> xxx.yyy.1.4:1433 SYN ******S* Nov 18 13:40:33 211.147.248.234:3622 -> xxx.yyy.1.10:1433 SYN ******S* Nov 18 13:40:34 211.147.248.234:3615 -> xxx.yyy.1.3:1433 SYN ******S* Nov 18 13:40:37 211.147.248.234:3619 -> xxx.yyy.1.7:1433 SYN ******S* Nov 18 13:40:34 211.147.248.234:3654 -> xxx.yyy.1.40:1433 SYN ******S* Nov 18 13:40:34 211.147.248.234:3657 -> xxx.yyy.1.43:1433 SYN ******S* Nov 18 13:40:34 211.147.248.234:3646 -> xxx.yyy.1.33:1433 SYN ******S* Nov 18 13:40:34 211.147.248.234:3648 -> xxx.yyy.1.35:1433 SYN ******S* [...] Nov 18 13:58:12 211.147.248.234:4140 -> xxx.yyy.255.228:1433 SYN ******S* Nov 18 13:58:12 211.147.248.234:4148 -> xxx.yyy.255.236:1433 SYN ******S* Nov 18 13:58:12 211.147.248.234:4149 -> xxx.yyy.255.237:1433 SYN ******S* Nov 18 13:58:12 211.147.248.234:4157 -> xxx.yyy.255.244:1433 SYN ******S* Nov 18 13:58:12 211.147.248.234:4145 -> xxx.yyy.255.233:1433 SYN ******S* Nov 18 13:58:12 211.147.248.234:4143 -> xxx.yyy.255.231:1433 SYN ******S* Nov 18 13:58:12 211.147.248.234:4167 -> xxx.yyy.255.252:1433 SYN ******S* Nov 18 13:58:12 211.147.248.234:4168 -> xxx.yyy.255.253:1433 SYN ******S* Nov 18 13:58:12 211.147.248.234:4152 -> xxx.yyy.255.239:1433 SYN ******S* 18092 Nov 18 20:10:15 211.185.11.21:3977 -> xxx.yyy.1.2:4899 SYN ******S* Nov 18 20:10:15 211.185.11.21:3972 -> xxx.yyy.1.1:4899 SYN ******S* Nov 18 20:10:14 211.185.11.21:3980 -> xxx.yyy.1.5:4899 SYN ******S* Nov 18 20:10:14 211.185.11.21:4031 -> xxx.yyy.1.8:4899 SYN ******S* Nov 18 20:10:14 211.185.11.21:4014 -> xxx.yyy.1.7:4899 SYN ******S* Nov 18 20:10:14 211.185.11.21:4069 -> xxx.yyy.1.18:4899 SYN ******S* Nov 18 20:10:14 211.185.11.21:4086 -> xxx.yyy.1.31:4899 SYN ******S* Nov 18 20:10:14 211.185.11.21:4087 -> xxx.yyy.1.32:4899 SYN ******S* [...] Nov 18 20:13:39 211.185.11.21:1449 -> xxx.yyy.252.203:4899 SYN ******S* Nov 18 20:13:39 211.185.11.21:1448 -> xxx.yyy.252.202:4899 SYN ******S* Nov 18 20:13:39 211.185.11.21:1420 -> xxx.yyy.252.176:4899 SYN ******S* Nov 18 20:13:39 211.185.11.21:1114 -> xxx.yyy.251.233:4899 SYN ******S* Nov 18 20:13:39 211.185.11.21:1121 -> xxx.yyy.251.240:4899 SYN ******S* Nov 18 20:13:39 211.185.11.21:1138 -> xxx.yyy.251.252:4899 SYN ******S* Nov 18 20:13:39 211.185.11.21:1136 -> xxx.yyy.251.251:4899 SYN ******S* Nov 18 20:13:39 211.185.11.21:1118 -> xxx.yyy.251.237:4899 SYN ******S* Nov 18 20:13:39 211.185.11.21:1130 -> xxx.yyy.251.246:4899 SYN ******S* 17328 Nov 18 05:11:49 61.54.200.219:3129 -> xxx.yyy.1.1:1433 SYN ******S* Nov 18 05:11:49 61.54.200.219:3131 -> xxx.yyy.1.3:1433 SYN ******S* Nov 18 05:11:49 61.54.200.219:3132 -> xxx.yyy.1.4:1433 SYN ******S* Nov 18 05:11:49 61.54.200.219:3134 -> xxx.yyy.1.6:1433 SYN ******S* Nov 18 05:11:49 61.54.200.219:3128 -> xxx.yyy.1.0:1433 SYN ******S* Nov 18 05:11:49 61.54.200.219:3136 -> xxx.yyy.1.8:1433 SYN ******S* Nov 18 05:11:49 61.54.200.219:3130 -> xxx.yyy.1.2:1433 SYN ******S* Nov 18 05:11:49 61.54.200.219:3138 -> xxx.yyy.1.10:1433 SYN ******S* [...] Nov 18 06:20:15 61.54.200.219:1752 -> xxx.yyy.77.43:1433 SYN ******S* Nov 18 06:20:15 61.54.200.219:1756 -> xxx.yyy.77.44:1433 SYN ******S* Nov 18 06:20:16 61.54.200.219:1761 -> xxx.yyy.77.47:1433 SYN ******S* Nov 18 06:20:16 61.54.200.219:1759 -> xxx.yyy.77.45:1433 SYN ******S* Nov 18 06:20:16 61.54.200.219:1760 -> xxx.yyy.77.46:1433 SYN ******S* Nov 18 06:20:16 61.54.200.219:1765 -> xxx.yyy.77.48:1433 SYN ******S* Nov 18 06:20:16 61.54.200.219:1766 -> xxx.yyy.77.49:1433 SYN ******S* Nov 18 06:20:16 61.54.200.219:1767 -> xxx.yyy.77.50:1433 SYN ******S* Nov 18 06:20:16 61.54.200.219:1987 -> xxx.yyy.77.93:1433 SYN ******S* 16867 Nov 18 05:09:27 61.152.96.213:10512 -> xxx.yyy.1.0:25 SYN ******S* Nov 18 05:09:27 61.152.96.213:10512 -> xxx.yyy.1.4:25 SYN ******S* Nov 18 05:09:27 61.152.96.213:10512 -> xxx.yyy.1.5:25 SYN ******S* Nov 18 05:09:27 61.152.96.213:10512 -> xxx.yyy.1.11:25 SYN ******S* Nov 18 05:09:27 61.152.96.213:10512 -> xxx.yyy.1.14:25 SYN ******S* Nov 18 05:09:27 61.152.96.213:10512 -> xxx.yyy.1.15:25 SYN ******S* Nov 18 05:09:27 61.152.96.213:10512 -> xxx.yyy.1.22:25 SYN ******S* Nov 18 05:09:27 61.152.96.213:10512 -> xxx.yyy.1.17:25 SYN ******S* [...] Nov 18 05:10:51 61.152.96.213:10512 -> xxx.yyy.255.229:25 SYN ******S* Nov 18 05:10:51 61.152.96.213:10512 -> xxx.yyy.255.237:25 SYN ******S* Nov 18 05:10:51 61.152.96.213:10512 -> xxx.yyy.255.241:25 SYN ******S* Nov 18 05:10:51 61.152.96.213:10512 -> xxx.yyy.255.251:25 SYN ******S* Nov 18 05:10:51 61.152.96.213:10512 -> xxx.yyy.255.252:25 SYN ******S* Nov 18 05:10:51 61.152.96.213:10512 -> xxx.yyy.255.244:25 SYN ******S* Nov 18 05:10:51 61.152.96.213:10512 -> xxx.yyy.255.255:25 SYN ******S* Nov 18 05:10:51 61.152.96.213:10512 -> xxx.yyy.255.254:25 SYN ******S* 15664 Nov 18 20:18:37 211.33.98.202:1132 -> xxx.yyy.1.17:4899 SYN ******S* Nov 18 20:18:39 211.33.98.202:1136 -> xxx.yyy.1.20:4899 SYN ******S* Nov 18 20:18:37 211.33.98.202:1135 -> xxx.yyy.1.19:4899 SYN ******S* Nov 18 20:18:39 211.33.98.202:1138 -> xxx.yyy.1.21:4899 SYN ******S* Nov 18 20:18:37 211.33.98.202:1146 -> xxx.yyy.1.23:4899 SYN ******S* Nov 18 20:18:37 211.33.98.202:1145 -> xxx.yyy.1.22:4899 SYN ******S* Nov 18 20:18:38 211.33.98.202:1170 -> xxx.yyy.1.36:4899 SYN ******S* Nov 18 20:18:39 211.33.98.202:1172 -> xxx.yyy.1.38:4899 SYN ******S* [...] Nov 18 20:22:39 211.33.98.202:2696 -> xxx.yyy.173.61:4899 SYN ******S* Nov 18 20:22:39 211.33.98.202:2726 -> xxx.yyy.173.78:4899 SYN ******S* Nov 18 20:22:39 211.33.98.202:2730 -> xxx.yyy.173.80:4899 SYN ******S* Nov 18 20:22:39 211.33.98.202:2753 -> xxx.yyy.173.94:4899 SYN ******S* Nov 18 20:22:39 211.33.98.202:2762 -> xxx.yyy.173.100:4899 SYN ******S* Nov 18 20:22:39 211.33.98.202:2768 -> xxx.yyy.173.101:4899 SYN ******S* Nov 18 20:22:42 211.33.98.202:2474 -> xxx.yyy.172.226:4899 SYN ******S* Nov 18 20:22:42 211.33.98.202:2561 -> xxx.yyy.173.1:4899 SYN ******S* Nov 18 20:22:42 211.33.98.202:2560 -> xxx.yyy.172.253:4899 SYN ******S* 11111 [...] 10842 [...] 10254 [...] 9490 [...] 8933 Nov 18 12:59:38 148.244.117.205:1409 -> xxx.yyy.1.247:80 SYN ******S* Nov 18 12:59:38 148.244.117.205:1634 -> xxx.yyy.1.248:80 SYN ******S* Nov 18 12:59:38 148.244.117.205:2078 -> xxx.yyy.1.251:80 SYN ******S* Nov 18 12:59:38 148.244.117.205:2130 -> xxx.yyy.1.253:80 SYN ******S* Nov 18 12:59:38 148.244.117.205:2134 -> xxx.yyy.1.255:80 SYN ******S* Nov 18 12:59:42 148.244.117.205:2159 -> xxx.yyy.4.1:80 SYN ******S* Nov 18 12:59:42 148.244.117.205:2161 -> xxx.yyy.4.3:80 SYN ******S* Nov 18 12:59:42 148.244.117.205:2217 -> xxx.yyy.4.20:80 SYN ******S* [...] Nov 18 13:09:17 148.244.117.205:2362 -> xxx.yyy.255.240:80 SYN ******S* Nov 18 13:09:17 148.244.117.205:2383 -> xxx.yyy.255.251:80 SYN ******S* Nov 18 13:09:17 148.244.117.205:2370 -> xxx.yyy.255.247:80 SYN ******S* Nov 18 13:09:17 148.244.117.205:2350 -> xxx.yyy.255.236:80 SYN ******S* Nov 18 13:09:17 148.244.117.205:2392 -> xxx.yyy.255.254:80 SYN ******S* Nov 18 13:09:17 148.244.117.205:2368 -> xxx.yyy.255.245:80 SYN ******S* Nov 18 13:09:17 148.244.117.205:2379 -> xxx.yyy.255.250:80 SYN ******S* Nov 18 13:09:17 148.244.117.205:2360 -> xxx.yyy.255.239:80 SYN ******S* Nov 18 13:09:17 148.244.117.205:2373 -> xxx.yyy.255.248:80 SYN ******S* 8487 Nov 18 00:12:51 12.219.29.186:1083 -> xxx.yyy.77.190:8 SYN ******S* Nov 18 00:12:51 12.219.29.186:1084 -> xxx.yyy.77.190:11 SYN ******S* Nov 18 00:12:51 12.219.29.186:1085 -> xxx.yyy.77.190:13 SYN ******S* Nov 18 00:12:51 12.219.29.186:1095 -> xxx.yyy.77.190:29 SYN ******S* Nov 18 00:12:51 12.219.29.186:1096 -> xxx.yyy.77.190:31 SYN ******S* Nov 18 00:12:54 12.219.29.186:1097 -> xxx.yyy.77.190:21 SYN ******S* Nov 18 00:13:31 12.219.29.186:1108 -> xxx.yyy.77.190:8 SYN ******S* Nov 18 00:13:34 12.219.29.186:1111 -> xxx.yyy.77.190:17 SYN ******S* [...] Nov 18 05:40:53 12.219.29.186:1442 -> xxx.yyy.77.190:11 SYN ******S* Nov 18 05:40:54 12.219.29.186:1444 -> xxx.yyy.77.190:17 SYN ******S* Nov 18 05:51:37 12.219.29.186:1647 -> xxx.yyy.77.190:17 SYN ******S* Nov 18 05:51:35 12.219.29.186:1645 -> xxx.yyy.77.190:21 SYN ******S* Nov 18 05:51:38 12.219.29.186:1648 -> xxx.yyy.77.190:8 SYN ******S* Nov 18 05:51:38 12.219.29.186:1649 -> xxx.yyy.77.190:13 SYN ******S* Nov 18 05:51:40 12.219.29.186:1650 -> xxx.yyy.77.190:11 SYN ******S* Nov 18 05:51:44 12.219.29.186:1652 -> xxx.yyy.77.190:17 SYN ******S* Nov 18 05:51:47 12.219.29.186:1652 -> xxx.yyy.77.190:17 SYN ******S* 7951 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions