[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Dec 3 04:51:22 200.102.6.26:2220 -> xxx.yyy.1.1:1433 SYN ******S* Dec 3 04:51:22 200.102.6.26:2222 -> xxx.yyy.1.2:1433 SYN ******S* Dec 3 04:51:22 200.102.6.26:2223 -> xxx.yyy.1.3:1433 SYN ******S* Dec 3 04:51:22 200.102.6.26:2224 -> xxx.yyy.1.4:1433 SYN ******S* Dec 3 04:51:22 200.102.6.26:2225 -> xxx.yyy.1.5:1433 SYN ******S* Dec 3 04:51:22 200.102.6.26:2226 -> xxx.yyy.1.6:1433 SYN ******S* Dec 3 04:51:22 200.102.6.26:2227 -> xxx.yyy.1.7:1433 SYN ******S* Dec 3 04:51:22 200.102.6.26:2228 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 3 06:46:21 200.102.6.26:3948 -> xxx.yyy.255.247:1433 SYN ******S* Dec 3 06:46:21 200.102.6.26:3949 -> xxx.yyy.255.248:1433 SYN ******S* Dec 3 06:46:21 200.102.6.26:3953 -> xxx.yyy.255.249:1433 SYN ******S* Dec 3 06:46:21 200.102.6.26:3955 -> xxx.yyy.255.250:1433 SYN ******S* Dec 3 06:46:22 200.102.6.26:3965 -> xxx.yyy.255.251:1433 SYN ******S* Dec 3 06:46:22 200.102.6.26:3968 -> xxx.yyy.255.252:1433 SYN ******S* Dec 3 06:46:22 200.102.6.26:3970 -> xxx.yyy.255.253:1433 SYN ******S* Dec 3 06:46:22 200.102.6.26:3972 -> xxx.yyy.255.254:1433 SYN ******S* 120631 Dec 3 02:14:26 220.170.244.253:4646 -> xxx.yyy.1.3:1433 SYN ******S* Dec 3 02:14:26 220.170.244.253:4643 -> xxx.yyy.1.0:1433 SYN ******S* Dec 3 02:14:26 220.170.244.253:4650 -> xxx.yyy.1.7:1433 SYN ******S* Dec 3 02:14:26 220.170.244.253:4652 -> xxx.yyy.1.9:1433 SYN ******S* Dec 3 02:14:26 220.170.244.253:4654 -> xxx.yyy.1.11:1433 SYN ******S* Dec 3 02:14:23 220.170.244.253:4647 -> xxx.yyy.1.4:1433 SYN ******S* Dec 3 02:14:23 220.170.244.253:4663 -> xxx.yyy.1.13:1433 SYN ******S* Dec 3 02:14:26 220.170.244.253:4651 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 3 06:04:52 220.170.244.253:3787 -> xxx.yyy.255.243:1433 SYN ******S* Dec 3 06:04:53 220.170.244.253:3798 -> xxx.yyy.255.248:1433 SYN ******S* Dec 3 06:04:53 220.170.244.253:3794 -> xxx.yyy.255.246:1433 SYN ******S* Dec 3 06:04:53 220.170.244.253:3789 -> xxx.yyy.255.244:1433 SYN ******S* Dec 3 06:04:53 220.170.244.253:3817 -> xxx.yyy.255.250:1433 SYN ******S* Dec 3 06:04:53 220.170.244.253:3824 -> xxx.yyy.255.253:1433 SYN ******S* Dec 3 06:04:53 220.170.244.253:3819 -> xxx.yyy.255.251:1433 SYN ******S* Dec 3 06:04:53 220.170.244.253:3821 -> xxx.yyy.255.252:1433 SYN ******S* Dec 3 06:04:53 220.170.244.253:3826 -> xxx.yyy.255.254:1433 SYN ******S* 109806 Dec 3 06:13:49 213.66.16.62:3487 -> xxx.yyy.1.5:1433 SYN ******S* Dec 3 06:13:49 213.66.16.62:3485 -> xxx.yyy.1.4:1433 SYN ******S* Dec 3 06:13:49 213.66.16.62:3483 -> xxx.yyy.1.3:1433 SYN ******S* Dec 3 06:13:49 213.66.16.62:3481 -> xxx.yyy.1.2:1433 SYN ******S* Dec 3 06:13:49 213.66.16.62:3479 -> xxx.yyy.1.1:1433 SYN ******S* Dec 3 06:13:49 213.66.16.62:3477 -> xxx.yyy.1.0:1433 SYN ******S* Dec 3 06:13:49 213.66.16.62:3501 -> xxx.yyy.1.12:1433 SYN ******S* Dec 3 06:13:49 213.66.16.62:3499 -> xxx.yyy.1.11:1433 SYN ******S* [...] Dec 3 10:02:38 213.66.16.62:3524 -> xxx.yyy.255.254:1433 SYN ******S* Dec 3 10:02:38 213.66.16.62:3244 -> xxx.yyy.255.232:1433 SYN ******S* Dec 3 10:02:38 213.66.16.62:3254 -> xxx.yyy.255.234:1433 SYN ******S* Dec 3 10:02:40 213.66.16.62:3292 -> xxx.yyy.255.238:1433 SYN ******S* Dec 3 10:02:41 213.66.16.62:3344 -> xxx.yyy.255.241:1433 SYN ******S* Dec 3 10:02:41 213.66.16.62:3390 -> xxx.yyy.255.243:1433 SYN ******S* Dec 3 10:02:43 213.66.16.62:3489 -> xxx.yyy.255.248:1433 SYN ******S* Dec 3 10:02:44 213.66.16.62:3520 -> xxx.yyy.255.252:1433 SYN ******S* 92459 Dec 3 17:15:10 84.120.112.170:2285 -> xxx.yyy.1.0:1433 SYN ******S* Dec 3 17:15:10 84.120.112.170:2286 -> xxx.yyy.1.1:1433 SYN ******S* Dec 3 17:15:07 84.120.112.170:2287 -> xxx.yyy.1.2:1433 SYN ******S* Dec 3 17:15:10 84.120.112.170:2288 -> xxx.yyy.1.3:1433 SYN ******S* Dec 3 17:15:08 84.120.112.170:2290 -> xxx.yyy.1.5:1433 SYN ******S* Dec 3 17:15:10 84.120.112.170:2294 -> xxx.yyy.1.8:1433 SYN ******S* Dec 3 17:15:08 84.120.112.170:2295 -> xxx.yyy.1.9:1433 SYN ******S* Dec 3 17:15:10 84.120.112.170:2296 -> xxx.yyy.1.10:1433 SYN ******S* [...] Dec 3 21:04:23 84.120.112.170:4917 -> xxx.yyy.255.242:1433 SYN ******S* Dec 3 21:04:23 84.120.112.170:4926 -> xxx.yyy.255.243:1433 SYN ******S* Dec 3 21:04:24 84.120.112.170:4927 -> xxx.yyy.255.244:1433 SYN ******S* Dec 3 21:04:24 84.120.112.170:4931 -> xxx.yyy.255.245:1433 SYN ******S* Dec 3 21:04:24 84.120.112.170:4932 -> xxx.yyy.255.246:1433 SYN ******S* Dec 3 21:04:25 84.120.112.170:4940 -> xxx.yyy.255.249:1433 SYN ******S* Dec 3 21:04:26 84.120.112.170:4942 -> xxx.yyy.255.251:1433 SYN ******S* Dec 3 21:04:26 84.120.112.170:4944 -> xxx.yyy.255.253:1433 SYN ******S* 79437 Dec 3 20:38:08 67.174.28.237:4107 -> xxx.yyy.1.2:1433 SYN ******S* Dec 3 20:38:05 67.174.28.237:4109 -> xxx.yyy.1.3:1433 SYN ******S* Dec 3 20:38:05 67.174.28.237:4111 -> xxx.yyy.1.4:1433 SYN ******S* Dec 3 20:38:08 67.174.28.237:4113 -> xxx.yyy.1.5:1433 SYN ******S* Dec 3 20:38:08 67.174.28.237:4114 -> xxx.yyy.1.6:1433 SYN ******S* Dec 3 20:38:05 67.174.28.237:4120 -> xxx.yyy.1.9:1433 SYN ******S* Dec 3 20:38:05 67.174.28.237:4121 -> xxx.yyy.1.10:1433 SYN ******S* Dec 3 20:38:06 67.174.28.237:4126 -> xxx.yyy.1.12:1433 SYN ******S* [...] Dec 3 23:59:59 67.174.28.237:2687 -> xxx.yyy.226.17:1433 SYN ******S* Dec 3 23:59:59 67.174.28.237:2688 -> xxx.yyy.226.18:1433 SYN ******S* Dec 3 23:59:59 67.174.28.237:2689 -> xxx.yyy.226.19:1433 SYN ******S* Dec 4 00:00:00 67.174.28.237:2662 -> xxx.yyy.226.2:1433 SYN ******S* Dec 4 00:00:00 67.174.28.237:2619 -> xxx.yyy.225.220:1433 SYN ******S* Dec 4 00:00:00 67.174.28.237:2698 -> xxx.yyy.226.23:1433 SYN ******S* Dec 4 00:00:00 67.174.28.237:2699 -> xxx.yyy.226.24:1433 SYN ******S* Dec 4 00:00:00 67.174.28.237:2622 -> xxx.yyy.225.223:1433 SYN ******S* Dec 4 00:00:00 67.174.28.237:2621 -> xxx.yyy.225.222:1433 SYN ******S* 78856 Dec 3 19:06:20 201.8.60.147:4453 -> xxx.yyy.1.1:1433 SYN ******S* Dec 3 19:06:20 201.8.60.147:4458 -> xxx.yyy.1.5:1433 SYN ******S* Dec 3 19:06:20 201.8.60.147:4461 -> xxx.yyy.1.6:1433 SYN ******S* Dec 3 19:06:20 201.8.60.147:4463 -> xxx.yyy.1.7:1433 SYN ******S* Dec 3 19:06:20 201.8.60.147:4464 -> xxx.yyy.1.8:1433 SYN ******S* Dec 3 19:06:20 201.8.60.147:4467 -> xxx.yyy.1.10:1433 SYN ******S* Dec 3 19:06:20 201.8.60.147:4468 -> xxx.yyy.1.11:1433 SYN ******S* Dec 3 19:06:20 201.8.60.147:4475 -> xxx.yyy.1.16:1433 SYN ******S* [...] Dec 3 21:01:22 201.8.60.147:3007 -> xxx.yyy.255.244:1433 SYN ******S* Dec 3 21:01:22 201.8.60.147:3017 -> xxx.yyy.255.247:1433 SYN ******S* Dec 3 21:01:22 201.8.60.147:3024 -> xxx.yyy.255.248:1433 SYN ******S* Dec 3 21:01:22 201.8.60.147:3025 -> xxx.yyy.255.249:1433 SYN ******S* Dec 3 21:01:22 201.8.60.147:3030 -> xxx.yyy.255.251:1433 SYN ******S* Dec 3 21:01:22 201.8.60.147:3029 -> xxx.yyy.255.250:1433 SYN ******S* Dec 3 21:01:22 201.8.60.147:3033 -> xxx.yyy.255.252:1433 SYN ******S* Dec 3 21:01:23 201.8.60.147:3041 -> xxx.yyy.255.254:1433 SYN ******S* 77052 Dec 3 05:58:55 209.235.192.64:3896 -> xxx.yyy.1.1:1433 SYN ******S* Dec 3 05:58:55 209.235.192.64:3897 -> xxx.yyy.1.2:1433 SYN ******S* Dec 3 05:58:55 209.235.192.64:3898 -> xxx.yyy.1.3:1433 SYN ******S* Dec 3 05:58:55 209.235.192.64:3899 -> xxx.yyy.1.4:1433 SYN ******S* Dec 3 05:58:55 209.235.192.64:3900 -> xxx.yyy.1.5:1433 SYN ******S* Dec 3 05:58:55 209.235.192.64:3901 -> xxx.yyy.1.6:1433 SYN ******S* Dec 3 05:58:55 209.235.192.64:3902 -> xxx.yyy.1.7:1433 SYN ******S* Dec 3 05:58:55 209.235.192.64:3903 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 3 06:09:48 209.235.192.64:3002 -> xxx.yyy.255.245:1433 SYN ******S* Dec 3 06:09:48 209.235.192.64:3003 -> xxx.yyy.255.246:1433 SYN ******S* Dec 3 06:09:48 209.235.192.64:2999 -> xxx.yyy.255.242:1433 SYN ******S* Dec 3 06:09:48 209.235.192.64:3009 -> xxx.yyy.255.252:1433 SYN ******S* Dec 3 06:09:48 209.235.192.64:3010 -> xxx.yyy.255.253:1433 SYN ******S* Dec 3 06:09:48 209.235.192.64:3007 -> xxx.yyy.255.250:1433 SYN ******S* Dec 3 06:09:48 209.235.192.64:3011 -> xxx.yyy.255.254:1433 SYN ******S* Dec 3 06:09:48 209.235.192.64:3008 -> xxx.yyy.255.251:1433 SYN ******S* 72595 Dec 3 07:29:15 194.70.81.117:2190 -> xxx.yyy.1.6:4000 SYN ******S* Dec 3 07:29:12 194.70.81.117:2191 -> xxx.yyy.1.7:4000 SYN ******S* Dec 3 07:29:12 194.70.81.117:2194 -> xxx.yyy.1.10:4000 SYN ******S* Dec 3 07:29:13 194.70.81.117:2195 -> xxx.yyy.1.11:4000 SYN ******S* Dec 3 07:29:12 194.70.81.117:2196 -> xxx.yyy.1.12:4000 SYN ******S* Dec 3 07:29:12 194.70.81.117:2197 -> xxx.yyy.1.13:4000 SYN ******S* Dec 3 07:29:15 194.70.81.117:2199 -> xxx.yyy.1.15:4000 SYN ******S* Dec 3 07:29:13 194.70.81.117:2200 -> xxx.yyy.1.16:4000 SYN ******S* [...] Dec 3 07:37:12 194.70.81.117:4614 -> xxx.yyy.255.235:4000 SYN ******S* Dec 3 07:37:12 194.70.81.117:4618 -> xxx.yyy.255.238:4000 SYN ******S* Dec 3 07:37:12 194.70.81.117:4654 -> xxx.yyy.255.249:4000 SYN ******S* Dec 3 07:37:12 194.70.81.117:4659 -> xxx.yyy.255.252:4000 SYN ******S* Dec 3 07:37:12 194.70.81.117:4651 -> xxx.yyy.255.246:4000 SYN ******S* Dec 3 07:37:12 194.70.81.117:4648 -> xxx.yyy.255.243:4000 SYN ******S* Dec 3 07:37:12 194.70.81.117:4629 -> xxx.yyy.255.240:4000 SYN ******S* Dec 3 07:37:12 194.70.81.117:4615 -> xxx.yyy.255.236:4000 SYN ******S* Dec 3 07:37:12 194.70.81.117:4660 -> xxx.yyy.255.253:4000 SYN ******S* 67744 Dec 3 07:26:43 213.24.114.73:1762 -> xxx.yyy.1.1:1433 SYN ******S* Dec 3 07:26:43 213.24.114.73:1763 -> xxx.yyy.1.2:1433 SYN ******S* Dec 3 07:26:43 213.24.114.73:1764 -> xxx.yyy.1.3:1433 SYN ******S* Dec 3 07:26:43 213.24.114.73:1765 -> xxx.yyy.1.4:1433 SYN ******S* Dec 3 07:26:40 213.24.114.73:1766 -> xxx.yyy.1.5:1433 SYN ******S* Dec 3 07:26:40 213.24.114.73:1767 -> xxx.yyy.1.6:1433 SYN ******S* Dec 3 07:26:43 213.24.114.73:1768 -> xxx.yyy.1.7:1433 SYN ******S* Dec 3 07:26:43 213.24.114.73:1769 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 3 07:40:15 213.24.114.73:4544 -> xxx.yyy.255.225:1433 SYN ******S* Dec 3 07:40:15 213.24.114.73:4539 -> xxx.yyy.255.220:1433 SYN ******S* Dec 3 07:40:15 213.24.114.73:4542 -> xxx.yyy.255.223:1433 SYN ******S* Dec 3 07:40:15 213.24.114.73:4538 -> xxx.yyy.255.219:1433 SYN ******S* Dec 3 07:40:15 213.24.114.73:4543 -> xxx.yyy.255.224:1433 SYN ******S* Dec 3 07:40:16 213.24.114.73:4548 -> xxx.yyy.255.229:1433 SYN ******S* Dec 3 07:40:16 213.24.114.73:4549 -> xxx.yyy.255.230:1433 SYN ******S* Dec 3 07:40:16 213.24.114.73:4567 -> xxx.yyy.255.248:1433 SYN ******S* Dec 3 07:40:16 213.24.114.73:4568 -> xxx.yyy.255.249:1433 SYN ******S* 66565 Dec 3 03:23:07 194.51.60.100:34136 -> xxx.yyy.1.0:1433 SYN ******S* Dec 3 03:23:07 194.51.60.100:34139 -> xxx.yyy.1.1:1433 SYN ******S* Dec 3 03:23:07 194.51.60.100:34142 -> xxx.yyy.1.2:1433 SYN ******S* Dec 3 03:23:10 194.51.60.100:34145 -> xxx.yyy.1.3:1433 SYN ******S* Dec 3 03:23:07 194.51.60.100:34148 -> xxx.yyy.1.4:1433 SYN ******S* Dec 3 03:23:07 194.51.60.100:34151 -> xxx.yyy.1.5:1433 SYN ******S* Dec 3 03:23:07 194.51.60.100:34154 -> xxx.yyy.1.6:1433 SYN ******S* Dec 3 03:23:07 194.51.60.100:34157 -> xxx.yyy.1.7:1433 SYN ******S* [...] Dec 3 07:18:09 194.51.60.100:35129 -> xxx.yyy.255.210:1433 SYN ******S* Dec 3 07:18:09 194.51.60.100:35474 -> xxx.yyy.255.219:1433 SYN ******S* Dec 3 07:18:10 194.51.60.100:35298 -> xxx.yyy.255.247:1433 SYN ******S* Dec 3 07:18:13 194.51.60.100:35086 -> xxx.yyy.255.204:1433 SYN ******S* Dec 3 07:18:15 194.51.60.100:35126 -> xxx.yyy.255.208:1433 SYN ******S* Dec 3 07:18:15 194.51.60.100:35154 -> xxx.yyy.255.217:1433 SYN ******S* Dec 3 07:18:15 194.51.60.100:35250 -> xxx.yyy.255.237:1433 SYN ******S* Dec 3 07:18:15 194.51.60.100:35293 -> xxx.yyy.255.246:1433 SYN ******S* 56886 [...] 54165 Dec 3 00:53:21 62.128.38.186:4580 -> xxx.yyy.1.1:1433 SYN ******S* Dec 3 00:53:21 62.128.38.186:4598 -> xxx.yyy.10.55:1433 SYN ******S* Dec 3 00:53:21 62.128.38.186:4600 -> xxx.yyy.11.61:1433 SYN ******S* Dec 3 00:53:21 62.128.38.186:4603 -> xxx.yyy.12.198:1433 SYN ******S* Dec 3 00:53:21 62.128.38.186:4604 -> xxx.yyy.13.73:1433 SYN ******S* Dec 3 00:53:18 62.128.38.186:4607 -> xxx.yyy.14.79:1433 SYN ******S* Dec 3 00:53:18 62.128.38.186:4608 -> xxx.yyy.14.210:1433 SYN ******S* Dec 3 00:53:18 62.128.38.186:4609 -> xxx.yyy.15.85:1433 SYN ******S* [...] Dec 3 01:04:27 62.128.38.186:3226 -> xxx.yyy.133.137:1433 SYN ******S* Dec 3 01:04:27 62.128.38.186:3236 -> xxx.yyy.137.161:1433 SYN ******S* Dec 3 01:04:27 62.128.38.186:3233 -> xxx.yyy.137.30:1433 SYN ******S* Dec 3 01:04:27 62.128.38.186:3240 -> xxx.yyy.140.179:1433 SYN ******S* Dec 3 01:04:27 62.128.38.186:3235 -> xxx.yyy.138.167:1433 SYN ******S* Dec 3 01:04:27 62.128.38.186:3245 -> xxx.yyy.143.66:1433 SYN ******S* Dec 3 01:04:27 62.128.38.186:3242 -> xxx.yyy.141.185:1433 SYN ******S* Dec 3 01:04:27 62.128.38.186:3241 -> xxx.yyy.141.54:1433 SYN ******S* Dec 3 01:04:27 62.128.38.186:3243 -> xxx.yyy.142.60:1433 SYN ******S* 47898 Dec 3 06:49:47 80.179.226.125:2698 -> xxx.yyy.1.7:4899 SYN ******S* Dec 3 06:49:47 80.179.226.125:2693 -> xxx.yyy.1.2:4899 SYN ******S* Dec 3 06:49:47 80.179.226.125:2701 -> xxx.yyy.1.10:4899 SYN ******S* Dec 3 06:49:47 80.179.226.125:2695 -> xxx.yyy.1.4:4899 SYN ******S* Dec 3 06:49:47 80.179.226.125:2692 -> xxx.yyy.1.1:4899 SYN ******S* Dec 3 06:49:47 80.179.226.125:2704 -> xxx.yyy.1.13:4899 SYN ******S* Dec 3 06:49:47 80.179.226.125:2699 -> xxx.yyy.1.8:4899 SYN ******S* Dec 3 06:49:47 80.179.226.125:2703 -> xxx.yyy.1.12:4899 SYN ******S* [...] Dec 3 07:00:48 80.179.226.125:4472 -> xxx.yyy.254.129:4899 SYN ******S* Dec 3 07:00:48 80.179.226.125:4477 -> xxx.yyy.254.134:4899 SYN ******S* Dec 3 07:00:48 80.179.226.125:4478 -> xxx.yyy.254.135:4899 SYN ******S* Dec 3 07:00:48 80.179.226.125:4479 -> xxx.yyy.254.136:4899 SYN ******S* Dec 3 07:00:48 80.179.226.125:4480 -> xxx.yyy.254.137:4899 SYN ******S* Dec 3 07:00:48 80.179.226.125:4484 -> xxx.yyy.254.141:4899 SYN ******S* Dec 3 07:00:48 80.179.226.125:4482 -> xxx.yyy.254.139:4899 SYN ******S* Dec 3 07:00:48 80.179.226.125:4476 -> xxx.yyy.254.133:4899 SYN ******S* 46025 Dec 3 10:57:00 83.104.91.98:29405 -> xxx.yyy.1.5:80 SYN ******S* Dec 3 10:57:00 83.104.91.98:29406 -> xxx.yyy.1.6:80 SYN ******S* Dec 3 10:57:00 83.104.91.98:29422 -> xxx.yyy.1.21:80 SYN ******S* Dec 3 10:57:00 83.104.91.98:29438 -> xxx.yyy.1.36:80 SYN ******S* Dec 3 10:57:01 83.104.91.98:29445 -> xxx.yyy.1.42:80 SYN ******S* Dec 3 10:57:00 83.104.91.98:29469 -> xxx.yyy.1.65:80 SYN ******S* Dec 3 10:57:00 83.104.91.98:29470 -> xxx.yyy.1.66:80 SYN ******S* Dec 3 10:57:00 83.104.91.98:29476 -> xxx.yyy.1.71:80 SYN ******S* [...] Dec 3 13:47:32 83.104.91.98:4200 -> xxx.yyy.255.218:1433 SYN ******S* Dec 3 13:47:32 83.104.91.98:4206 -> xxx.yyy.255.224:1433 SYN ******S* Dec 3 13:47:32 83.104.91.98:4212 -> xxx.yyy.255.230:1433 SYN ******S* Dec 3 13:47:32 83.104.91.98:4218 -> xxx.yyy.255.236:1433 SYN ******S* Dec 3 13:47:32 83.104.91.98:4220 -> xxx.yyy.255.238:1433 SYN ******S* Dec 3 13:47:32 83.104.91.98:4221 -> xxx.yyy.255.239:1433 SYN ******S* Dec 3 13:47:32 83.104.91.98:4226 -> xxx.yyy.255.244:1433 SYN ******S* Dec 3 13:47:32 83.104.91.98:4229 -> xxx.yyy.255.247:1433 SYN ******S* Dec 3 13:47:32 83.104.91.98:4235 -> xxx.yyy.255.253:1433 SYN ******S* 44128 Dec 3 19:02:25 147.26.112.73:1054 -> xxx.yyy.1.1:4899 SYN ******S* Dec 3 19:02:27 147.26.112.73:1058 -> xxx.yyy.1.5:4899 SYN ******S* Dec 3 19:02:27 147.26.112.73:1059 -> xxx.yyy.1.6:4899 SYN ******S* Dec 3 19:02:27 147.26.112.73:1060 -> xxx.yyy.1.7:4899 SYN ******S* Dec 3 19:02:27 147.26.112.73:1065 -> xxx.yyy.1.12:4899 SYN ******S* Dec 3 19:02:27 147.26.112.73:1066 -> xxx.yyy.1.13:4899 SYN ******S* Dec 3 19:02:24 147.26.112.73:1067 -> xxx.yyy.1.14:4899 SYN ******S* Dec 3 19:02:27 147.26.112.73:1068 -> xxx.yyy.1.15:4899 SYN ******S* [...] Dec 3 19:05:09 147.26.112.73:1419 -> xxx.yyy.255.168:4899 SYN ******S* Dec 3 19:05:09 147.26.112.73:1444 -> xxx.yyy.255.192:4899 SYN ******S* Dec 3 19:05:09 147.26.112.73:1436 -> xxx.yyy.255.184:4899 SYN ******S* Dec 3 19:05:09 147.26.112.73:1416 -> xxx.yyy.255.165:4899 SYN ******S* Dec 3 19:05:09 147.26.112.73:1432 -> xxx.yyy.255.181:4899 SYN ******S* Dec 3 19:05:09 147.26.112.73:1421 -> xxx.yyy.255.170:4899 SYN ******S* Dec 3 19:05:09 147.26.112.73:1441 -> xxx.yyy.255.189:4899 SYN ******S* Dec 3 19:05:09 147.26.112.73:1424 -> xxx.yyy.255.173:4899 SYN ******S* Dec 3 19:05:09 147.26.112.73:1429 -> xxx.yyy.255.178:4899 SYN ******S* 36619 Dec 3 21:51:06 222.41.199.201:2506 -> xxx.yyy.1.0:1433 SYN ******S* Dec 3 21:51:06 222.41.199.201:3018 -> xxx.yyy.1.2:1433 SYN ******S* Dec 3 21:51:06 222.41.199.201:2763 -> xxx.yyy.1.1:1433 SYN ******S* Dec 3 21:51:06 222.41.199.201:3273 -> xxx.yyy.1.3:1433 SYN ******S* Dec 3 21:51:06 222.41.199.201:3530 -> xxx.yyy.1.4:1433 SYN ******S* Dec 3 21:51:03 222.41.199.201:3785 -> xxx.yyy.1.5:1433 SYN ******S* Dec 3 21:51:06 222.41.199.201:4040 -> xxx.yyy.1.6:1433 SYN ******S* Dec 3 21:51:06 222.41.199.201:4550 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 3 23:59:59 222.41.199.201:31972 -> xxx.yyy.143.117:1433 SYN ******S* Dec 3 23:59:59 222.41.199.201:32225 -> xxx.yyy.143.118:1433 SYN ******S* Dec 3 23:59:59 222.41.199.201:21090 -> xxx.yyy.143.74:1433 SYN ******S* Dec 3 23:59:59 222.41.199.201:32478 -> xxx.yyy.143.119:1433 SYN ******S* Dec 4 00:00:00 222.41.199.201:22375 -> xxx.yyy.143.79:1433 SYN ******S* Dec 4 00:00:00 222.41.199.201:32987 -> xxx.yyy.143.121:1433 SYN ******S* Dec 4 00:00:00 222.41.199.201:22885 -> xxx.yyy.143.81:1433 SYN ******S* Dec 4 00:00:00 222.41.199.201:22632 -> xxx.yyy.143.80:1433 SYN ******S* Dec 4 00:00:00 222.41.199.201:33502 -> xxx.yyy.143.123:1433 SYN ******S* 32113 Dec 3 00:00:05 128.180.246.172:3005 -> xxx.yyy.156.42:1433 SYN ******S* Dec 3 00:00:06 128.180.246.172:4454 -> xxx.yyy.156.90:1433 SYN ******S* Dec 3 00:00:06 128.180.246.172:4505 -> xxx.yyy.156.91:1433 SYN ******S* Dec 3 00:00:06 128.180.246.172:3971 -> xxx.yyy.156.79:1433 SYN ******S* Dec 3 00:00:06 128.180.246.172:3989 -> xxx.yyy.156.80:1433 SYN ******S* Dec 3 00:00:06 128.180.246.172:4645 -> xxx.yyy.156.94:1433 SYN ******S* Dec 3 00:00:06 128.180.246.172:4655 -> xxx.yyy.156.95:1433 SYN ******S* Dec 3 00:00:07 128.180.246.172:3213 -> xxx.yyy.156.49:1433 SYN ******S* [...] Dec 3 01:14:36 128.180.246.172:2755 -> xxx.yyy.233.140:1433 SYN ******S* Dec 3 01:14:37 128.180.246.172:2798 -> xxx.yyy.233.142:1433 SYN ******S* Dec 3 01:14:37 128.180.246.172:2810 -> xxx.yyy.233.143:1433 SYN ******S* Dec 3 01:14:37 128.180.246.172:2816 -> xxx.yyy.233.145:1433 SYN ******S* Dec 3 01:14:37 128.180.246.172:2813 -> xxx.yyy.233.144:1433 SYN ******S* Dec 3 01:14:37 128.180.246.172:2819 -> xxx.yyy.233.147:1433 SYN ******S* Dec 3 01:14:37 128.180.246.172:2821 -> xxx.yyy.233.146:1433 SYN ******S* Dec 3 01:14:37 128.180.246.172:2835 -> xxx.yyy.233.148:1433 SYN ******S* Dec 3 01:14:37 128.180.246.172:3374 -> xxx.yyy.233.166:1433 SYN ******S* 31192 Dec 3 11:24:31 66.232.140.124:3831 -> xxx.yyy.1.1:1433 SYN ******S* Dec 3 11:24:31 66.232.140.124:3837 -> xxx.yyy.1.7:1433 SYN ******S* Dec 3 11:24:31 66.232.140.124:3838 -> xxx.yyy.1.8:1433 SYN ******S* Dec 3 11:24:31 66.232.140.124:3839 -> xxx.yyy.1.9:1433 SYN ******S* Dec 3 11:24:31 66.232.140.124:3843 -> xxx.yyy.1.13:1433 SYN ******S* Dec 3 11:24:31 66.232.140.124:3848 -> xxx.yyy.1.18:1433 SYN ******S* Dec 3 11:24:31 66.232.140.124:3849 -> xxx.yyy.1.19:1433 SYN ******S* Dec 3 11:24:34 66.232.140.124:3850 -> xxx.yyy.1.20:1433 SYN ******S* [...] Dec 3 11:36:36 66.232.140.124:2372 -> xxx.yyy.255.221:1433 SYN ******S* Dec 3 11:36:36 66.232.140.124:2373 -> xxx.yyy.255.222:1433 SYN ******S* Dec 3 11:36:36 66.232.140.124:2384 -> xxx.yyy.255.233:1433 SYN ******S* Dec 3 11:36:36 66.232.140.124:2383 -> xxx.yyy.255.232:1433 SYN ******S* Dec 3 11:36:36 66.232.140.124:2381 -> xxx.yyy.255.230:1433 SYN ******S* Dec 3 11:36:36 66.232.140.124:2382 -> xxx.yyy.255.231:1433 SYN ******S* Dec 3 11:36:36 66.232.140.124:2394 -> xxx.yyy.255.243:1433 SYN ******S* Dec 3 11:36:36 66.232.140.124:2395 -> xxx.yyy.255.244:1433 SYN ******S* 30476 Dec 3 01:56:57 219.150.175.2:2513 -> xxx.yyy.1.1:1433 SYN ******S* Dec 3 01:57:00 219.150.175.2:2517 -> xxx.yyy.1.3:1433 SYN ******S* Dec 3 01:57:00 219.150.175.2:2512 -> xxx.yyy.1.0:1433 SYN ******S* Dec 3 01:56:57 219.150.175.2:2519 -> xxx.yyy.1.5:1433 SYN ******S* Dec 3 01:57:00 219.150.175.2:2521 -> xxx.yyy.1.7:1433 SYN ******S* Dec 3 01:57:00 219.150.175.2:2523 -> xxx.yyy.1.9:1433 SYN ******S* Dec 3 01:57:00 219.150.175.2:2529 -> xxx.yyy.1.11:1433 SYN ******S* Dec 3 01:56:57 219.150.175.2:2520 -> xxx.yyy.1.6:1433 SYN ******S* [...] Dec 3 03:21:25 219.150.175.2:4763 -> xxx.yyy.95.39:1433 SYN ******S* Dec 3 03:21:25 219.150.175.2:4469 -> xxx.yyy.95.24:1433 SYN ******S* Dec 3 03:21:25 219.150.175.2:4480 -> xxx.yyy.95.25:1433 SYN ******S* Dec 3 03:21:25 219.150.175.2:4483 -> xxx.yyy.95.26:1433 SYN ******S* Dec 3 03:21:26 219.150.175.2:4576 -> xxx.yyy.95.28:1433 SYN ******S* Dec 3 03:21:26 219.150.175.2:4575 -> xxx.yyy.95.27:1433 SYN ******S* Dec 3 03:21:26 219.150.175.2:4577 -> xxx.yyy.95.29:1433 SYN ******S* Dec 3 03:21:26 219.150.175.2:4780 -> xxx.yyy.95.40:1433 SYN ******S* Dec 3 03:21:26 219.150.175.2:4781 -> xxx.yyy.95.41:1433 SYN ******S* 27230 Dec 3 09:24:02 64.22.200.28:51461 -> xxx.yyy.1.1:1433 SYN ******S* Dec 3 09:24:05 64.22.200.28:51462 -> xxx.yyy.1.2:1433 SYN ******S* Dec 3 09:24:02 64.22.200.28:51463 -> xxx.yyy.1.3:1433 SYN ******S* Dec 3 09:24:05 64.22.200.28:51464 -> xxx.yyy.1.4:1433 SYN ******S* Dec 3 09:24:02 64.22.200.28:51465 -> xxx.yyy.1.5:1433 SYN ******S* Dec 3 09:24:02 64.22.200.28:51466 -> xxx.yyy.1.6:1433 SYN ******S* Dec 3 09:24:02 64.22.200.28:51467 -> xxx.yyy.1.7:1433 SYN ******S* Dec 3 09:24:05 64.22.200.28:51468 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 3 09:38:52 64.22.200.28:54961 -> xxx.yyy.255.223:1433 SYN ******S* Dec 3 09:38:52 64.22.200.28:54962 -> xxx.yyy.255.224:1433 SYN ******S* Dec 3 09:38:52 64.22.200.28:54973 -> xxx.yyy.255.227:1433 SYN ******S* Dec 3 09:38:52 64.22.200.28:54974 -> xxx.yyy.255.228:1433 SYN ******S* Dec 3 09:38:52 64.22.200.28:54977 -> xxx.yyy.255.231:1433 SYN ******S* Dec 3 09:38:52 64.22.200.28:54978 -> xxx.yyy.255.232:1433 SYN ******S* Dec 3 09:38:52 64.22.200.28:54980 -> xxx.yyy.255.234:1433 SYN ******S* Dec 3 09:38:52 64.22.200.28:54988 -> xxx.yyy.255.237:1433 SYN ******S* Dec 3 09:38:52 64.22.200.28:54994 -> xxx.yyy.255.243:1433 SYN ******S* 26480 [...] 25858 Dec 3 20:36:11 61.145.238.198:4974 -> xxx.yyy.1.0:1433 SYN ******S* Dec 3 20:36:11 61.145.238.198:4995 -> xxx.yyy.1.5:1433 SYN ******S* Dec 3 20:36:08 61.145.238.198:4997 -> xxx.yyy.1.6:1433 SYN ******S* Dec 3 20:36:08 61.145.238.198:1029 -> xxx.yyy.1.7:1433 SYN ******S* Dec 3 20:36:08 61.145.238.198:1045 -> xxx.yyy.1.11:1433 SYN ******S* Dec 3 20:36:11 61.145.238.198:1049 -> xxx.yyy.1.12:1433 SYN ******S* Dec 3 20:36:09 61.145.238.198:1051 -> xxx.yyy.1.13:1433 SYN ******S* Dec 3 20:36:09 61.145.238.198:1038 -> xxx.yyy.1.9:1433 SYN ******S* [...] Dec 3 22:18:39 61.145.238.198:2145 -> xxx.yyy.111.248:1433 SYN ******S* Dec 3 22:18:39 61.145.238.198:2146 -> xxx.yyy.111.249:1433 SYN ******S* Dec 3 22:18:39 61.145.238.198:2150 -> xxx.yyy.111.250:1433 SYN ******S* Dec 3 22:18:39 61.145.238.198:2156 -> xxx.yyy.111.251:1433 SYN ******S* Dec 3 22:18:39 61.145.238.198:2161 -> xxx.yyy.111.252:1433 SYN ******S* Dec 3 22:18:40 61.145.238.198:2162 -> xxx.yyy.111.253:1433 SYN ******S* Dec 3 22:18:40 61.145.238.198:2164 -> xxx.yyy.111.254:1433 SYN ******S* Dec 3 22:18:40 61.145.238.198:2167 -> xxx.yyy.111.255:1433 SYN ******S* 25302 Dec 3 15:24:36 213.180.210.35:58429 -> xxx.yyy.1.95:24672 SYN ******S* Dec 3 15:24:36 213.180.210.35:58429 -> xxx.yyy.1.95:7965 SYN ******S* Dec 3 15:24:36 213.180.210.35:58429 -> xxx.yyy.1.95:49040 SYN ******S* Dec 3 15:24:36 213.180.210.35:58429 -> xxx.yyy.1.95:53717 SYN ******S* Dec 3 15:24:36 213.180.210.35:58429 -> xxx.yyy.1.95:46797 SYN ******S* Dec 3 15:24:36 213.180.210.35:58429 -> xxx.yyy.1.95:39035 SYN ******S* Dec 3 15:24:36 213.180.210.35:58429 -> xxx.yyy.1.95:24635 SYN ******S* Dec 3 15:24:36 213.180.210.35:58429 -> xxx.yyy.1.95:48772 SYN ******S* [...] Dec 3 15:31:48 213.180.210.35:58432 -> xxx.yyy.1.95:20432 SYN ******S* Dec 3 15:31:49 213.180.210.35:58434 -> xxx.yyy.1.95:6018 SYN ******S* Dec 3 15:31:49 213.180.210.35:58434 -> xxx.yyy.1.95:1243 SYN ******S* Dec 3 15:31:49 213.180.210.35:58434 -> xxx.yyy.1.95:13782 SYN ******S* Dec 3 15:31:49 213.180.210.35:58434 -> xxx.yyy.1.95:6057 SYN ******S* Dec 3 15:31:49 213.180.210.35:58434 -> xxx.yyy.1.95:6004 SYN ******S* Dec 3 15:31:49 213.180.210.35:58434 -> xxx.yyy.1.95:139 SYN ******S* Dec 3 15:31:49 213.180.210.35:58434 -> xxx.yyy.1.95:6030 SYN ******S* Dec 3 15:31:49 213.180.210.35:58434 -> xxx.yyy.1.95:53 SYN ******S* 24883 Dec 3 21:52:51 218.18.35.95:30176 -> xxx.yyy.1.0:1433 SYN ******S* Dec 3 21:52:51 218.18.35.95:31968 -> xxx.yyy.1.2:1433 SYN ******S* Dec 3 21:52:49 218.18.35.95:33248 -> xxx.yyy.1.4:1433 SYN ******S* Dec 3 21:52:51 218.18.35.95:35040 -> xxx.yyy.1.6:1433 SYN ******S* Dec 3 21:52:49 218.18.35.95:31200 -> xxx.yyy.1.1:1433 SYN ******S* Dec 3 21:52:49 218.18.35.95:32736 -> xxx.yyy.1.3:1433 SYN ******S* Dec 3 21:52:52 218.18.35.95:34272 -> xxx.yyy.1.5:1433 SYN ******S* Dec 3 21:52:49 218.18.35.95:39904 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 3 23:32:31 218.18.35.95:63219 -> xxx.yyy.111.243:1433 SYN ******S* Dec 3 23:32:31 218.18.35.95:63475 -> xxx.yyy.111.244:1433 SYN ******S* Dec 3 23:32:32 218.18.35.95:65267 -> xxx.yyy.111.246:1433 SYN ******S* Dec 3 23:32:32 218.18.35.95:1780 -> xxx.yyy.111.247:1433 SYN ******S* Dec 3 23:32:32 218.18.35.95:3828 -> xxx.yyy.111.249:1433 SYN ******S* Dec 3 23:32:32 218.18.35.95:7924 -> xxx.yyy.111.253:1433 SYN ******S* Dec 3 23:32:32 218.18.35.95:6900 -> xxx.yyy.111.251:1433 SYN ******S* Dec 3 23:32:32 218.18.35.95:6388 -> xxx.yyy.111.250:1433 SYN ******S* Dec 3 23:32:32 218.18.35.95:12276 -> xxx.yyy.111.255:1433 SYN ******S* 22739 Dec 3 05:54:25 61.53.55.157:2368 -> xxx.yyy.1.0:1433 SYN ******S* Dec 3 05:54:22 61.53.55.157:2369 -> xxx.yyy.1.2:1433 SYN ******S* Dec 3 05:54:22 61.53.55.157:2372 -> xxx.yyy.1.5:1433 SYN ******S* Dec 3 05:54:22 61.53.55.157:2380 -> xxx.yyy.1.12:1433 SYN ******S* Dec 3 05:54:22 61.53.55.157:2379 -> xxx.yyy.1.11:1433 SYN ******S* Dec 3 05:54:22 61.53.55.157:2377 -> xxx.yyy.1.7:1433 SYN ******S* Dec 3 05:54:22 61.53.55.157:2383 -> xxx.yyy.1.9:1433 SYN ******S* Dec 3 05:54:22 61.53.55.157:2387 -> xxx.yyy.1.14:1433 SYN ******S* [...] Dec 3 07:17:26 61.53.55.157:2431 -> xxx.yyy.90.112:1433 SYN ******S* Dec 3 07:17:26 61.53.55.157:3305 -> xxx.yyy.90.140:1433 SYN ******S* Dec 3 07:17:26 61.53.55.157:3349 -> xxx.yyy.90.146:1433 SYN ******S* Dec 3 07:17:26 61.53.55.157:2670 -> xxx.yyy.90.123:1433 SYN ******S* Dec 3 07:17:26 61.53.55.157:2672 -> xxx.yyy.90.124:1433 SYN ******S* Dec 3 07:17:28 61.53.55.157:3534 -> xxx.yyy.90.147:1433 SYN ******S* Dec 3 07:17:28 61.53.55.157:3571 -> xxx.yyy.90.157:1433 SYN ******S* Dec 3 07:17:28 61.53.55.157:3611 -> xxx.yyy.90.164:1433 SYN ******S* Dec 3 07:17:28 61.53.55.157:3617 -> xxx.yyy.90.165:1433 SYN ******S* 15421 [...] 13144 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions