[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Dec 9 20:25:58 67.70.197.224:1691 -> xxx.yyy.1.1:1433 SYN ******S* Dec 9 20:26:01 67.70.197.224:1692 -> xxx.yyy.1.2:1433 SYN ******S* Dec 9 20:26:01 67.70.197.224:1693 -> xxx.yyy.1.3:1433 SYN ******S* Dec 9 20:25:58 67.70.197.224:1694 -> xxx.yyy.1.4:1433 SYN ******S* Dec 9 20:25:58 67.70.197.224:1696 -> xxx.yyy.1.6:1433 SYN ******S* Dec 9 20:26:01 67.70.197.224:1701 -> xxx.yyy.1.11:1433 SYN ******S* Dec 9 20:25:58 67.70.197.224:1703 -> xxx.yyy.1.13:1433 SYN ******S* Dec 9 20:25:58 67.70.197.224:1705 -> xxx.yyy.1.15:1433 SYN ******S* [...] Dec 9 22:23:35 67.70.197.224:1400 -> xxx.yyy.255.240:1433 SYN ******S* Dec 9 22:23:35 67.70.197.224:1403 -> xxx.yyy.255.242:1433 SYN ******S* Dec 9 22:23:35 67.70.197.224:1406 -> xxx.yyy.255.245:1433 SYN ******S* Dec 9 22:23:35 67.70.197.224:1405 -> xxx.yyy.255.244:1433 SYN ******S* Dec 9 22:23:35 67.70.197.224:1411 -> xxx.yyy.255.246:1433 SYN ******S* Dec 9 22:23:35 67.70.197.224:1418 -> xxx.yyy.255.250:1433 SYN ******S* Dec 9 22:23:35 67.70.197.224:1420 -> xxx.yyy.255.251:1433 SYN ******S* Dec 9 22:23:36 67.70.197.224:1422 -> xxx.yyy.255.253:1433 SYN ******S* Dec 9 22:23:36 67.70.197.224:1424 -> xxx.yyy.255.254:1433 SYN ******S* 60776 Dec 9 20:52:08 200.78.40.216:2832 -> xxx.yyy.1.2:1433 SYN ******S* Dec 9 20:52:11 200.78.40.216:2837 -> xxx.yyy.1.6:1433 SYN ******S* Dec 9 20:52:08 200.78.40.216:2838 -> xxx.yyy.1.7:1433 SYN ******S* Dec 9 20:52:08 200.78.40.216:2839 -> xxx.yyy.1.8:1433 SYN ******S* Dec 9 20:52:08 200.78.40.216:2841 -> xxx.yyy.1.10:1433 SYN ******S* Dec 9 20:52:11 200.78.40.216:2852 -> xxx.yyy.1.21:1433 SYN ******S* Dec 9 20:52:08 200.78.40.216:2853 -> xxx.yyy.1.22:1433 SYN ******S* Dec 9 20:52:08 200.78.40.216:2854 -> xxx.yyy.1.23:1433 SYN ******S* [...] Dec 9 22:46:39 200.78.40.216:3889 -> xxx.yyy.255.230:1433 SYN ******S* Dec 9 22:46:39 200.78.40.216:3911 -> xxx.yyy.255.233:1433 SYN ******S* Dec 9 22:46:39 200.78.40.216:3910 -> xxx.yyy.255.232:1433 SYN ******S* Dec 9 22:46:40 200.78.40.216:3944 -> xxx.yyy.255.244:1433 SYN ******S* Dec 9 22:46:40 200.78.40.216:3945 -> xxx.yyy.255.245:1433 SYN ******S* Dec 9 22:46:40 200.78.40.216:3954 -> xxx.yyy.255.247:1433 SYN ******S* Dec 9 22:46:40 200.78.40.216:3955 -> xxx.yyy.255.248:1433 SYN ******S* Dec 9 22:46:40 200.78.40.216:3961 -> xxx.yyy.255.251:1433 SYN ******S* Dec 9 22:46:40 200.78.40.216:3959 -> xxx.yyy.255.250:1433 SYN ******S* 59781 Dec 9 05:49:13 130.149.118.34:1707 -> xxx.yyy.1.1:1433 SYN ******S* Dec 9 05:49:10 130.149.118.34:1708 -> xxx.yyy.1.2:1433 SYN ******S* Dec 9 05:49:13 130.149.118.34:1709 -> xxx.yyy.1.3:1433 SYN ******S* Dec 9 05:49:13 130.149.118.34:1710 -> xxx.yyy.1.4:1433 SYN ******S* Dec 9 05:49:13 130.149.118.34:1711 -> xxx.yyy.1.5:1433 SYN ******S* Dec 9 05:49:10 130.149.118.34:1712 -> xxx.yyy.1.6:1433 SYN ******S* Dec 9 05:49:13 130.149.118.34:1713 -> xxx.yyy.1.7:1433 SYN ******S* Dec 9 05:49:10 130.149.118.34:1714 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 9 06:00:22 130.149.118.34:2215 -> xxx.yyy.255.209:1433 SYN ******S* Dec 9 06:00:22 130.149.118.34:2211 -> xxx.yyy.255.205:1433 SYN ******S* Dec 9 06:00:22 130.149.118.34:2224 -> xxx.yyy.255.218:1433 SYN ******S* Dec 9 06:00:22 130.149.118.34:2220 -> xxx.yyy.255.214:1433 SYN ******S* Dec 9 06:00:22 130.149.118.34:2225 -> xxx.yyy.255.219:1433 SYN ******S* Dec 9 06:00:22 130.149.118.34:2221 -> xxx.yyy.255.215:1433 SYN ******S* Dec 9 06:00:22 130.149.118.34:2226 -> xxx.yyy.255.220:1433 SYN ******S* Dec 9 06:00:22 130.149.118.34:2223 -> xxx.yyy.255.217:1433 SYN ******S* 57045 Dec 9 00:00:29 140.135.36.232:3462 -> xxx.yyy.111.2:1433 SYN ******S* Dec 9 00:00:29 140.135.36.232:3466 -> xxx.yyy.111.5:1433 SYN ******S* Dec 9 00:00:29 140.135.36.232:3470 -> xxx.yyy.111.8:1433 SYN ******S* Dec 9 00:00:29 140.135.36.232:3474 -> xxx.yyy.111.12:1433 SYN ******S* Dec 9 00:00:29 140.135.36.232:3478 -> xxx.yyy.111.16:1433 SYN ******S* Dec 9 00:00:32 140.135.36.232:3480 -> xxx.yyy.111.18:1433 SYN ******S* Dec 9 00:00:32 140.135.36.232:3494 -> xxx.yyy.111.29:1433 SYN ******S* Dec 9 00:00:29 140.135.36.232:3496 -> xxx.yyy.111.31:1433 SYN ******S* [...] Dec 9 02:10:41 140.135.36.232:3849 -> xxx.yyy.255.237:1433 SYN ******S* Dec 9 02:10:41 140.135.36.232:3848 -> xxx.yyy.255.236:1433 SYN ******S* Dec 9 02:10:41 140.135.36.232:3850 -> xxx.yyy.255.238:1433 SYN ******S* Dec 9 02:10:42 140.135.36.232:3863 -> xxx.yyy.255.243:1433 SYN ******S* Dec 9 02:10:42 140.135.36.232:3864 -> xxx.yyy.255.244:1433 SYN ******S* Dec 9 02:10:42 140.135.36.232:3865 -> xxx.yyy.255.245:1433 SYN ******S* Dec 9 02:10:42 140.135.36.232:3886 -> xxx.yyy.255.253:1433 SYN ******S* Dec 9 02:10:42 140.135.36.232:3887 -> xxx.yyy.255.254:1433 SYN ******S* 54589 Dec 9 08:44:18 194.206.215.23:4029 -> xxx.yyy.1.2:1433 SYN ******S* Dec 9 08:44:18 194.206.215.23:4031 -> xxx.yyy.1.4:1433 SYN ******S* Dec 9 08:44:21 194.206.215.23:4034 -> xxx.yyy.1.7:1433 SYN ******S* Dec 9 08:44:19 194.206.215.23:4036 -> xxx.yyy.1.9:1433 SYN ******S* Dec 9 08:44:22 194.206.215.23:4040 -> xxx.yyy.1.13:1433 SYN ******S* Dec 9 08:44:19 194.206.215.23:4043 -> xxx.yyy.1.16:1433 SYN ******S* Dec 9 08:44:22 194.206.215.23:4044 -> xxx.yyy.1.17:1433 SYN ******S* Dec 9 08:44:19 194.206.215.23:4045 -> xxx.yyy.1.18:1433 SYN ******S* [...] Dec 9 08:56:13 194.206.215.23:2723 -> xxx.yyy.255.239:1433 SYN ******S* Dec 9 08:56:13 194.206.215.23:2736 -> xxx.yyy.255.252:1433 SYN ******S* Dec 9 08:56:13 194.206.215.23:2733 -> xxx.yyy.255.249:1433 SYN ******S* Dec 9 08:56:13 194.206.215.23:2730 -> xxx.yyy.255.246:1433 SYN ******S* Dec 9 08:56:13 194.206.215.23:2734 -> xxx.yyy.255.250:1433 SYN ******S* Dec 9 08:56:13 194.206.215.23:2731 -> xxx.yyy.255.247:1433 SYN ******S* Dec 9 08:56:13 194.206.215.23:2735 -> xxx.yyy.255.251:1433 SYN ******S* Dec 9 08:56:13 194.206.215.23:2738 -> xxx.yyy.255.254:1433 SYN ******S* 52914 Dec 9 00:00:07 213.251.127.104:2024 -> xxx.yyy.129.74:1433 SYN ******S* Dec 9 00:00:07 213.251.127.104:2046 -> xxx.yyy.129.76:1433 SYN ******S* Dec 9 00:00:05 213.251.127.104:2057 -> xxx.yyy.129.78:1433 SYN ******S* Dec 9 00:00:07 213.251.127.104:2060 -> xxx.yyy.129.79:1433 SYN ******S* Dec 9 00:00:05 213.251.127.104:2064 -> xxx.yyy.129.80:1433 SYN ******S* Dec 9 00:00:05 213.251.127.104:1724 -> xxx.yyy.129.52:1433 SYN ******S* Dec 9 00:00:05 213.251.127.104:2088 -> xxx.yyy.129.82:1433 SYN ******S* Dec 9 00:00:05 213.251.127.104:2115 -> xxx.yyy.129.85:1433 SYN ******S* [...] Dec 9 01:55:05 213.251.127.104:1412 -> xxx.yyy.255.233:1433 SYN ******S* Dec 9 01:55:05 213.251.127.104:1482 -> xxx.yyy.255.244:1433 SYN ******S* Dec 9 01:55:05 213.251.127.104:1508 -> xxx.yyy.255.247:1433 SYN ******S* Dec 9 01:55:05 213.251.127.104:1488 -> xxx.yyy.255.246:1433 SYN ******S* Dec 9 01:55:05 213.251.127.104:1510 -> xxx.yyy.255.248:1433 SYN ******S* Dec 9 01:55:05 213.251.127.104:1518 -> xxx.yyy.255.249:1433 SYN ******S* Dec 9 01:55:05 213.251.127.104:1533 -> xxx.yyy.255.250:1433 SYN ******S* Dec 9 01:55:06 213.251.127.104:1552 -> xxx.yyy.255.252:1433 SYN ******S* Dec 9 01:55:06 213.251.127.104:1579 -> xxx.yyy.255.254:1433 SYN ******S* 46446 Dec 9 05:39:29 63.209.100.23:1191 -> xxx.yyy.1.0:80 SYN ******S* Dec 9 05:39:29 63.209.100.23:1192 -> xxx.yyy.1.1:80 SYN ******S* Dec 9 05:39:29 63.209.100.23:1193 -> xxx.yyy.1.2:80 SYN ******S* Dec 9 05:39:29 63.209.100.23:1194 -> xxx.yyy.1.3:80 SYN ******S* Dec 9 05:39:29 63.209.100.23:1195 -> xxx.yyy.1.4:80 SYN ******S* Dec 9 05:39:29 63.209.100.23:1196 -> xxx.yyy.1.5:80 SYN ******S* Dec 9 05:39:29 63.209.100.23:1197 -> xxx.yyy.1.6:80 SYN ******S* Dec 9 05:39:29 63.209.100.23:1198 -> xxx.yyy.1.7:80 SYN ******S* [...] Dec 9 05:46:44 63.209.100.23:2704 -> xxx.yyy.255.246:80 SYN ******S* Dec 9 05:46:44 63.209.100.23:2705 -> xxx.yyy.255.247:80 SYN ******S* Dec 9 05:46:44 63.209.100.23:2706 -> xxx.yyy.255.248:80 SYN ******S* Dec 9 05:46:45 63.209.100.23:2707 -> xxx.yyy.255.249:80 SYN ******S* Dec 9 05:46:45 63.209.100.23:2708 -> xxx.yyy.255.250:80 SYN ******S* Dec 9 05:46:45 63.209.100.23:2709 -> xxx.yyy.255.251:80 SYN ******S* Dec 9 05:46:45 63.209.100.23:2710 -> xxx.yyy.255.252:80 SYN ******S* Dec 9 05:46:45 63.209.100.23:2711 -> xxx.yyy.255.253:80 SYN ******S* Dec 9 05:46:45 63.209.100.23:2715 -> xxx.yyy.255.254:80 SYN ******S* 42670 Dec 9 12:22:58 195.110.123.106:1430 -> xxx.yyy.1.1:1433 SYN ******S* Dec 9 12:22:58 195.110.123.106:1431 -> xxx.yyy.1.2:1433 SYN ******S* Dec 9 12:22:58 195.110.123.106:1436 -> xxx.yyy.1.5:1433 SYN ******S* Dec 9 12:23:01 195.110.123.106:1437 -> xxx.yyy.1.6:1433 SYN ******S* Dec 9 12:23:01 195.110.123.106:1439 -> xxx.yyy.1.8:1433 SYN ******S* Dec 9 12:23:01 195.110.123.106:1440 -> xxx.yyy.1.9:1433 SYN ******S* Dec 9 12:22:58 195.110.123.106:1441 -> xxx.yyy.1.10:1433 SYN ******S* Dec 9 12:22:59 195.110.123.106:1444 -> xxx.yyy.1.13:1433 SYN ******S* [...] Dec 9 12:34:48 195.110.123.106:3941 -> xxx.yyy.255.184:1433 SYN ******S* Dec 9 12:34:48 195.110.123.106:3944 -> xxx.yyy.255.187:1433 SYN ******S* Dec 9 12:34:48 195.110.123.106:3939 -> xxx.yyy.255.182:1433 SYN ******S* Dec 9 12:34:48 195.110.123.106:3943 -> xxx.yyy.255.186:1433 SYN ******S* Dec 9 12:34:48 195.110.123.106:3942 -> xxx.yyy.255.185:1433 SYN ******S* Dec 9 12:34:48 195.110.123.106:3945 -> xxx.yyy.255.188:1433 SYN ******S* Dec 9 12:34:49 195.110.123.106:3982 -> xxx.yyy.255.225:1433 SYN ******S* Dec 9 12:34:49 195.110.123.106:3996 -> xxx.yyy.255.239:1433 SYN ******S* Dec 9 12:34:49 195.110.123.106:4011 -> xxx.yyy.255.254:1433 SYN ******S* 37304 Dec 9 20:03:38 211.238.42.186:4002 -> xxx.yyy.1.2:8000 SYN ******S* Dec 9 20:03:38 211.238.42.186:4003 -> xxx.yyy.1.3:8000 SYN ******S* Dec 9 20:03:37 211.238.42.186:4012 -> xxx.yyy.1.12:8000 SYN ******S* Dec 9 20:03:37 211.238.42.186:4016 -> xxx.yyy.1.16:8000 SYN ******S* Dec 9 20:03:37 211.238.42.186:4017 -> xxx.yyy.1.17:8000 SYN ******S* Dec 9 20:03:37 211.238.42.186:4019 -> xxx.yyy.1.19:8000 SYN ******S* Dec 9 20:03:37 211.238.42.186:4022 -> xxx.yyy.1.22:8000 SYN ******S* Dec 9 20:03:40 211.238.42.186:4023 -> xxx.yyy.1.23:8000 SYN ******S* [...] Dec 9 20:14:32 211.238.42.186:2929 -> xxx.yyy.255.236:8000 SYN ******S* Dec 9 20:14:32 211.238.42.186:2924 -> xxx.yyy.255.231:8000 SYN ******S* Dec 9 20:14:32 211.238.42.186:2934 -> xxx.yyy.255.241:8000 SYN ******S* Dec 9 20:14:32 211.238.42.186:2932 -> xxx.yyy.255.239:8000 SYN ******S* Dec 9 20:14:32 211.238.42.186:2936 -> xxx.yyy.255.243:8000 SYN ******S* Dec 9 20:14:32 211.238.42.186:2940 -> xxx.yyy.255.247:8000 SYN ******S* Dec 9 20:14:32 211.238.42.186:2943 -> xxx.yyy.255.250:8000 SYN ******S* Dec 9 20:14:32 211.238.42.186:2945 -> xxx.yyy.255.252:8000 SYN ******S* 35485 Dec 9 04:02:59 80.118.217.26:3783 -> xxx.yyy.1.1:21 SYN ******S* Dec 9 04:02:59 80.118.217.26:3973 -> xxx.yyy.1.2:21 SYN ******S* Dec 9 04:02:56 80.118.217.26:4009 -> xxx.yyy.1.4:21 SYN ******S* Dec 9 04:02:59 80.118.217.26:4031 -> xxx.yyy.1.6:21 SYN ******S* Dec 9 04:02:56 80.118.217.26:4033 -> xxx.yyy.1.7:21 SYN ******S* Dec 9 04:02:59 80.118.217.26:4071 -> xxx.yyy.1.3:21 SYN ******S* Dec 9 04:02:56 80.118.217.26:4086 -> xxx.yyy.1.8:21 SYN ******S* Dec 9 04:02:59 80.118.217.26:4122 -> xxx.yyy.1.9:21 SYN ******S* [...] Dec 9 04:51:58 80.118.217.26:4505 -> xxx.yyy.254.192:21 SYN ******S* Dec 9 04:51:58 80.118.217.26:4632 -> xxx.yyy.254.185:21 SYN ******S* Dec 9 04:51:58 80.118.217.26:4216 -> xxx.yyy.254.153:21 SYN ******S* Dec 9 04:52:00 80.118.217.26:3088 -> xxx.yyy.254.12:21 SYN ******S* Dec 9 04:52:02 80.118.217.26:3656 -> xxx.yyy.253.182:21 SYN ******S* Dec 9 04:52:03 80.118.217.26:3044 -> xxx.yyy.255.252:21 SYN ******S* Dec 9 04:52:06 80.118.217.26:3111 -> xxx.yyy.255.254:21 SYN ******S* Dec 9 04:52:06 80.118.217.26:3109 -> xxx.yyy.255.253:21 SYN ******S* Dec 9 04:52:06 80.118.217.26:3098 -> xxx.yyy.255.251:21 SYN ******S* 34068 Dec 9 20:22:25 203.232.49.18:2603 -> xxx.yyy.1.1:1433 SYN ******S* Dec 9 20:22:25 203.232.49.18:2604 -> xxx.yyy.1.2:1433 SYN ******S* Dec 9 20:22:22 203.232.49.18:2608 -> xxx.yyy.1.3:1433 SYN ******S* Dec 9 20:22:22 203.232.49.18:2611 -> xxx.yyy.1.6:1433 SYN ******S* Dec 9 20:22:22 203.232.49.18:2613 -> xxx.yyy.1.8:1433 SYN ******S* Dec 9 20:22:25 203.232.49.18:2614 -> xxx.yyy.1.9:1433 SYN ******S* Dec 9 20:22:23 203.232.49.18:2623 -> xxx.yyy.1.15:1433 SYN ******S* Dec 9 20:22:23 203.232.49.18:2624 -> xxx.yyy.1.16:1433 SYN ******S* [...] Dec 9 20:41:55 203.232.49.18:2709 -> xxx.yyy.255.226:1433 SYN ******S* Dec 9 20:41:55 203.232.49.18:2707 -> xxx.yyy.255.225:1433 SYN ******S* Dec 9 20:41:55 203.232.49.18:2716 -> xxx.yyy.255.229:1433 SYN ******S* Dec 9 20:41:56 203.232.49.18:2719 -> xxx.yyy.255.232:1433 SYN ******S* Dec 9 20:41:56 203.232.49.18:2729 -> xxx.yyy.255.241:1433 SYN ******S* Dec 9 20:41:56 203.232.49.18:2734 -> xxx.yyy.255.246:1433 SYN ******S* Dec 9 20:41:56 203.232.49.18:2733 -> xxx.yyy.255.245:1433 SYN ******S* Dec 9 20:41:56 203.232.49.18:2737 -> xxx.yyy.255.249:1433 SYN ******S* Dec 9 20:41:56 203.232.49.18:2744 -> xxx.yyy.255.254:1433 SYN ******S* 33245 Dec 9 10:20:29 212.217.32.101:3044 -> xxx.yyy.1.0:1433 SYN ******S* Dec 9 10:20:29 212.217.32.101:3052 -> xxx.yyy.1.6:1433 SYN ******S* Dec 9 10:20:29 212.217.32.101:3051 -> xxx.yyy.1.5:1433 SYN ******S* Dec 9 10:20:30 212.217.32.101:3060 -> xxx.yyy.1.7:1433 SYN ******S* Dec 9 10:20:30 212.217.32.101:3117 -> xxx.yyy.1.17:1433 SYN ******S* Dec 9 10:20:30 212.217.32.101:3131 -> xxx.yyy.1.18:1433 SYN ******S* Dec 9 10:20:30 212.217.32.101:3134 -> xxx.yyy.1.19:1433 SYN ******S* Dec 9 10:20:30 212.217.32.101:3135 -> xxx.yyy.1.20:1433 SYN ******S* [...] Dec 9 13:16:49 212.217.32.101:4046 -> xxx.yyy.255.228:1433 SYN ******S* Dec 9 13:16:50 212.217.32.101:3283 -> xxx.yyy.255.141:1433 SYN ******S* Dec 9 13:16:51 212.217.32.101:3752 -> xxx.yyy.255.159:1433 SYN ******S* Dec 9 13:16:53 212.217.32.101:2375 -> xxx.yyy.255.186:1433 SYN ******S* Dec 9 13:16:55 212.217.32.101:3735 -> xxx.yyy.255.226:1433 SYN ******S* Dec 9 13:16:55 212.217.32.101:2880 -> xxx.yyy.255.225:1433 SYN ******S* Dec 9 13:16:55 212.217.32.101:4087 -> xxx.yyy.255.229:1433 SYN ******S* Dec 9 13:16:56 212.217.32.101:3009 -> xxx.yyy.255.247:1433 SYN ******S* 31055 Dec 9 21:31:47 200.47.91.234:1034 -> xxx.yyy.1.7:6129 SYN ******S* Dec 9 21:31:47 200.47.91.234:1038 -> xxx.yyy.1.10:6129 SYN ******S* Dec 9 21:31:47 200.47.91.234:1039 -> xxx.yyy.1.11:6129 SYN ******S* Dec 9 21:31:48 200.47.91.234:4967 -> xxx.yyy.1.1:6129 SYN ******S* Dec 9 21:31:47 200.47.91.234:1031 -> xxx.yyy.1.5:6129 SYN ******S* Dec 9 21:31:49 200.47.91.234:1028 -> xxx.yyy.1.3:6129 SYN ******S* Dec 9 21:31:50 200.47.91.234:1037 -> xxx.yyy.1.9:6129 SYN ******S* Dec 9 21:31:47 200.47.91.234:1042 -> xxx.yyy.1.13:6129 SYN ******S* [...] Dec 9 21:40:33 200.47.91.234:3092 -> xxx.yyy.255.185:6129 SYN ******S* Dec 9 21:40:33 200.47.91.234:3946 -> xxx.yyy.255.237:6129 SYN ******S* Dec 9 21:40:33 200.47.91.234:3947 -> xxx.yyy.255.238:6129 SYN ******S* Dec 9 21:40:33 200.47.91.234:3951 -> xxx.yyy.255.242:6129 SYN ******S* Dec 9 21:40:33 200.47.91.234:3950 -> xxx.yyy.255.241:6129 SYN ******S* Dec 9 21:40:33 200.47.91.234:3956 -> xxx.yyy.255.245:6129 SYN ******S* Dec 9 21:40:33 200.47.91.234:3959 -> xxx.yyy.255.247:6129 SYN ******S* Dec 9 21:40:33 200.47.91.234:4078 -> xxx.yyy.255.251:6129 SYN ******S* Dec 9 21:40:33 200.47.91.234:4081 -> xxx.yyy.255.253:6129 SYN ******S* 30441 Dec 9 16:11:35 200.93.184.90:3759 -> xxx.yyy.1.3:1433 SYN ******S* Dec 9 16:11:38 200.93.184.90:3761 -> xxx.yyy.1.5:1433 SYN ******S* Dec 9 16:11:35 200.93.184.90:3763 -> xxx.yyy.1.7:1433 SYN ******S* Dec 9 16:11:35 200.93.184.90:3765 -> xxx.yyy.1.9:1433 SYN ******S* Dec 9 16:11:35 200.93.184.90:3768 -> xxx.yyy.1.12:1433 SYN ******S* Dec 9 16:11:35 200.93.184.90:3769 -> xxx.yyy.1.13:1433 SYN ******S* Dec 9 16:11:38 200.93.184.90:3770 -> xxx.yyy.1.14:1433 SYN ******S* Dec 9 16:11:35 200.93.184.90:3771 -> xxx.yyy.1.15:1433 SYN ******S* [...] Dec 9 16:23:20 200.93.184.90:4912 -> xxx.yyy.255.216:1433 SYN ******S* Dec 9 16:23:20 200.93.184.90:4910 -> xxx.yyy.255.214:1433 SYN ******S* Dec 9 16:23:20 200.93.184.90:4908 -> xxx.yyy.255.212:1433 SYN ******S* Dec 9 16:23:20 200.93.184.90:4930 -> xxx.yyy.255.224:1433 SYN ******S* Dec 9 16:23:20 200.93.184.90:4919 -> xxx.yyy.255.219:1433 SYN ******S* Dec 9 16:23:20 200.93.184.90:4922 -> xxx.yyy.255.221:1433 SYN ******S* Dec 9 16:23:20 200.93.184.90:4956 -> xxx.yyy.255.238:1433 SYN ******S* Dec 9 16:23:20 200.93.184.90:4960 -> xxx.yyy.255.242:1433 SYN ******S* Dec 9 16:23:20 200.93.184.90:4958 -> xxx.yyy.255.240:1433 SYN ******S* 29643 Dec 9 05:24:48 221.193.85.224:3539 -> xxx.yyy.1.0:1433 SYN ******S* Dec 9 05:24:51 221.193.85.224:3544 -> xxx.yyy.1.1:1433 SYN ******S* Dec 9 05:24:51 221.193.85.224:3550 -> xxx.yyy.1.2:1433 SYN ******S* Dec 9 05:24:51 221.193.85.224:3553 -> xxx.yyy.1.3:1433 SYN ******S* Dec 9 05:24:51 221.193.85.224:3554 -> xxx.yyy.1.4:1433 SYN ******S* Dec 9 05:24:51 221.193.85.224:3555 -> xxx.yyy.1.5:1433 SYN ******S* Dec 9 05:24:51 221.193.85.224:3557 -> xxx.yyy.1.6:1433 SYN ******S* Dec 9 05:24:49 221.193.85.224:3560 -> xxx.yyy.1.7:1433 SYN ******S* [...] Dec 9 06:50:29 221.193.85.224:3564 -> xxx.yyy.95.246:1433 SYN ******S* Dec 9 06:50:30 221.193.85.224:3577 -> xxx.yyy.95.248:1433 SYN ******S* Dec 9 06:50:30 221.193.85.224:3579 -> xxx.yyy.95.249:1433 SYN ******S* Dec 9 06:50:30 221.193.85.224:3586 -> xxx.yyy.95.250:1433 SYN ******S* Dec 9 06:50:30 221.193.85.224:3597 -> xxx.yyy.95.251:1433 SYN ******S* Dec 9 06:50:30 221.193.85.224:3612 -> xxx.yyy.95.252:1433 SYN ******S* Dec 9 06:50:30 221.193.85.224:3630 -> xxx.yyy.95.253:1433 SYN ******S* Dec 9 06:50:31 221.193.85.224:3644 -> xxx.yyy.95.254:1433 SYN ******S* Dec 9 06:50:31 221.193.85.224:3685 -> xxx.yyy.95.255:1433 SYN ******S* 28227 Dec 9 07:40:09 210.109.217.223:1904 -> xxx.yyy.1.1:1433 SYN ******S* Dec 9 07:40:09 210.109.217.223:1901 -> xxx.yyy.1.0:1433 SYN ******S* Dec 9 07:40:09 210.109.217.223:1907 -> xxx.yyy.1.2:1433 SYN ******S* Dec 9 07:40:06 210.109.217.223:1910 -> xxx.yyy.1.3:1433 SYN ******S* Dec 9 07:40:06 210.109.217.223:1912 -> xxx.yyy.1.4:1433 SYN ******S* Dec 9 07:40:09 210.109.217.223:1914 -> xxx.yyy.1.5:1433 SYN ******S* Dec 9 07:40:09 210.109.217.223:1916 -> xxx.yyy.1.6:1433 SYN ******S* Dec 9 07:40:06 210.109.217.223:1924 -> xxx.yyy.1.10:1433 SYN ******S* [...] Dec 9 09:20:03 210.109.217.223:3864 -> xxx.yyy.111.242:1433 SYN ******S* Dec 9 09:20:04 210.109.217.223:3885 -> xxx.yyy.111.244:1433 SYN ******S* Dec 9 09:20:04 210.109.217.223:3892 -> xxx.yyy.111.245:1433 SYN ******S* Dec 9 09:20:05 210.109.217.223:3921 -> xxx.yyy.111.246:1433 SYN ******S* Dec 9 09:20:05 210.109.217.223:3947 -> xxx.yyy.111.250:1433 SYN ******S* Dec 9 09:20:05 210.109.217.223:3948 -> xxx.yyy.111.251:1433 SYN ******S* Dec 9 09:20:06 210.109.217.223:3964 -> xxx.yyy.111.252:1433 SYN ******S* Dec 9 09:20:06 210.109.217.223:3986 -> xxx.yyy.111.254:1433 SYN ******S* Dec 9 09:20:06 210.109.217.223:3988 -> xxx.yyy.111.255:1433 SYN ******S* 26560 Dec 9 00:00:05 61.222.62.195:1256 -> xxx.yyy.131.79:1433 SYN ******S* Dec 9 00:00:05 61.222.62.195:1278 -> xxx.yyy.131.80:1433 SYN ******S* Dec 9 00:00:05 61.222.62.195:3085 -> xxx.yyy.130.235:1433 SYN ******S* Dec 9 00:00:05 61.222.62.195:1279 -> xxx.yyy.131.81:1433 SYN ******S* Dec 9 00:00:05 61.222.62.195:3116 -> xxx.yyy.130.237:1433 SYN ******S* Dec 9 00:00:05 61.222.62.195:1334 -> xxx.yyy.131.87:1433 SYN ******S* Dec 9 00:00:05 61.222.62.195:1352 -> xxx.yyy.131.89:1433 SYN ******S* Dec 9 00:00:05 61.222.62.195:3156 -> xxx.yyy.130.239:1433 SYN ******S* [...] Dec 9 00:37:40 61.222.62.195:2808 -> xxx.yyy.215.37:1433 SYN ******S* Dec 9 00:37:40 61.222.62.195:3675 -> xxx.yyy.215.38:1433 SYN ******S* Dec 9 00:37:40 61.222.62.195:1907 -> xxx.yyy.214.237:1433 SYN ******S* Dec 9 00:46:47 61.222.62.195:2051 -> xxx.yyy.236.206:1433 SYN ******S* Dec 9 00:46:47 61.222.62.195:3607 -> xxx.yyy.236.225:1433 SYN ******S* Dec 9 00:46:48 61.222.62.195:2008 -> xxx.yyy.236.230:1433 SYN ******S* Dec 9 00:46:49 61.222.62.195:3096 -> xxx.yyy.236.246:1433 SYN ******S* Dec 9 00:46:49 61.222.62.195:3750 -> xxx.yyy.237.2:1433 SYN ******S* Dec 9 00:46:50 61.222.62.195:1418 -> xxx.yyy.237.38:1433 SYN ******S* 25777 Dec 9 09:32:29 138.89.150.84:3831 -> xxx.yyy.1.0:1433 SYN ******S* Dec 9 09:32:29 138.89.150.84:3840 -> xxx.yyy.1.3:1433 SYN ******S* Dec 9 09:32:26 138.89.150.84:3843 -> xxx.yyy.1.4:1433 SYN ******S* Dec 9 09:32:29 138.89.150.84:3846 -> xxx.yyy.1.5:1433 SYN ******S* Dec 9 09:32:26 138.89.150.84:3849 -> xxx.yyy.1.6:1433 SYN ******S* Dec 9 09:32:26 138.89.150.84:3852 -> xxx.yyy.1.7:1433 SYN ******S* Dec 9 09:32:29 138.89.150.84:3855 -> xxx.yyy.1.8:1433 SYN ******S* Dec 9 09:32:26 138.89.150.84:3861 -> xxx.yyy.1.10:1433 SYN ******S* [...] Dec 9 11:27:05 138.89.150.84:4405 -> xxx.yyy.255.149:1433 SYN ******S* Dec 9 11:27:05 138.89.150.84:3821 -> xxx.yyy.255.150:1433 SYN ******S* Dec 9 11:27:05 138.89.150.84:3804 -> xxx.yyy.255.151:1433 SYN ******S* Dec 9 11:27:06 138.89.150.84:3174 -> xxx.yyy.255.154:1433 SYN ******S* Dec 9 11:27:07 138.89.150.84:4961 -> xxx.yyy.255.156:1433 SYN ******S* Dec 9 11:27:08 138.89.150.84:4619 -> xxx.yyy.255.165:1433 SYN ******S* Dec 9 11:27:08 138.89.150.84:4786 -> xxx.yyy.255.166:1433 SYN ******S* Dec 9 11:27:08 138.89.150.84:3454 -> xxx.yyy.255.168:1433 SYN ******S* Dec 9 11:27:09 138.89.150.84:3499 -> xxx.yyy.255.170:1433 SYN ******S* 25126 Dec 9 00:33:00 220.75.235.220:1055 -> xxx.yyy.1.29:4899 SYN ******S* Dec 9 00:33:00 220.75.235.220:1056 -> xxx.yyy.1.30:4899 SYN ******S* Dec 9 00:33:00 220.75.235.220:1051 -> xxx.yyy.1.25:4899 SYN ******S* Dec 9 00:33:00 220.75.235.220:1057 -> xxx.yyy.1.31:4899 SYN ******S* Dec 9 00:33:00 220.75.235.220:1060 -> xxx.yyy.1.34:4899 SYN ******S* Dec 9 00:33:00 220.75.235.220:1059 -> xxx.yyy.1.33:4899 SYN ******S* Dec 9 00:33:00 220.75.235.220:1066 -> xxx.yyy.1.40:4899 SYN ******S* Dec 9 00:33:00 220.75.235.220:1063 -> xxx.yyy.1.37:4899 SYN ******S* [...] Dec 9 00:37:43 220.75.235.220:2034 -> xxx.yyy.255.246:4899 SYN ******S* Dec 9 00:37:43 220.75.235.220:2032 -> xxx.yyy.255.244:4899 SYN ******S* Dec 9 00:37:43 220.75.235.220:2036 -> xxx.yyy.255.248:4899 SYN ******S* Dec 9 00:37:43 220.75.235.220:2037 -> xxx.yyy.255.249:4899 SYN ******S* Dec 9 00:37:43 220.75.235.220:2038 -> xxx.yyy.255.250:4899 SYN ******S* Dec 9 00:37:43 220.75.235.220:2039 -> xxx.yyy.255.251:4899 SYN ******S* Dec 9 00:37:43 220.75.235.220:2040 -> xxx.yyy.255.252:4899 SYN ******S* Dec 9 00:37:43 220.75.235.220:2042 -> xxx.yyy.255.254:4899 SYN ******S* 22854 Dec 9 00:00:42 219.146.103.37:53137 -> xxx.yyy.153.229:3127 SYN ******S* Dec 9 00:00:42 219.146.103.37:32816 -> xxx.yyy.153.229:2745 SYN ******S* Dec 9 00:00:42 219.146.103.37:38773 -> xxx.yyy.153.229:1025 SYN ******S* Dec 9 00:00:42 219.146.103.37:6380 -> xxx.yyy.153.229:6129 SYN ******S* Dec 9 00:00:42 219.146.103.37:49532 -> xxx.yyy.153.229:80 SYN ******S* Dec 9 00:00:48 219.146.103.37:49532 -> xxx.yyy.153.229:80 SYN ******S* Dec 9 00:00:48 219.146.103.37:6380 -> xxx.yyy.153.229:6129 SYN ******S* Dec 9 00:00:48 219.146.103.37:53137 -> xxx.yyy.153.229:3127 SYN ******S* [...] Dec 9 23:58:01 219.146.103.37:51989 -> xxx.yyy.247.242:1025 SYN ******S* Dec 9 23:58:01 219.146.103.37:48061 -> xxx.yyy.247.242:2745 SYN ******S* Dec 9 23:58:39 219.146.103.37:61792 -> xxx.yyy.177.47:2745 SYN ******S* Dec 9 23:58:39 219.146.103.37:8043 -> xxx.yyy.177.47:1025 SYN ******S* Dec 9 23:58:36 219.146.103.37:18444 -> xxx.yyy.177.47:3127 SYN ******S* Dec 9 23:58:39 219.146.103.37:57276 -> xxx.yyy.177.47:6129 SYN ******S* Dec 9 23:58:39 219.146.103.37:40495 -> xxx.yyy.177.47:80 SYN ******S* Dec 9 23:58:45 219.146.103.37:8043 -> xxx.yyy.177.47:1025 SYN ******S* Dec 9 23:58:45 219.146.103.37:57276 -> xxx.yyy.177.47:6129 SYN ******S* 22533 [...] 21583 Dec 9 07:32:47 218.12.77.134:44929 -> xxx.yyy.1.0:1433 SYN ******S* Dec 9 07:32:47 218.12.77.134:44953 -> xxx.yyy.1.1:1433 SYN ******S* Dec 9 07:32:47 218.12.77.134:44969 -> xxx.yyy.1.2:1433 SYN ******S* Dec 9 07:32:47 218.12.77.134:44984 -> xxx.yyy.1.4:1433 SYN ******S* Dec 9 07:32:47 218.12.77.134:45001 -> xxx.yyy.1.5:1433 SYN ******S* Dec 9 07:32:47 218.12.77.134:45018 -> xxx.yyy.1.6:1433 SYN ******S* Dec 9 07:32:47 218.12.77.134:45032 -> xxx.yyy.1.7:1433 SYN ******S* Dec 9 07:32:44 218.12.77.134:45040 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 9 08:52:29 218.12.77.134:57657 -> xxx.yyy.87.231:1433 SYN ******S* Dec 9 08:52:29 218.12.77.134:57672 -> xxx.yyy.87.232:1433 SYN ******S* Dec 9 08:52:29 218.12.77.134:57777 -> xxx.yyy.87.235:1433 SYN ******S* Dec 9 08:52:29 218.12.77.134:57754 -> xxx.yyy.87.233:1433 SYN ******S* Dec 9 08:52:29 218.12.77.134:57800 -> xxx.yyy.87.238:1433 SYN ******S* Dec 9 08:52:29 218.12.77.134:57785 -> xxx.yyy.87.236:1433 SYN ******S* Dec 9 08:52:29 218.12.77.134:57793 -> xxx.yyy.87.237:1433 SYN ******S* Dec 9 08:52:29 218.12.77.134:57809 -> xxx.yyy.87.239:1433 SYN ******S* Dec 9 08:52:29 218.12.77.134:57769 -> xxx.yyy.87.234:1433 SYN ******S* 20574 Dec 9 17:02:58 61.54.1.178:2786 -> xxx.yyy.1.2:4899 SYN ******S* Dec 9 17:02:58 61.54.1.178:2793 -> xxx.yyy.1.9:4899 SYN ******S* Dec 9 17:02:58 61.54.1.178:2796 -> xxx.yyy.1.12:4899 SYN ******S* Dec 9 17:02:58 61.54.1.178:2801 -> xxx.yyy.1.17:4899 SYN ******S* Dec 9 17:02:58 61.54.1.178:2802 -> xxx.yyy.1.18:4899 SYN ******S* Dec 9 17:02:58 61.54.1.178:2809 -> xxx.yyy.1.25:4899 SYN ******S* Dec 9 17:02:58 61.54.1.178:2807 -> xxx.yyy.1.23:4899 SYN ******S* Dec 9 17:02:58 61.54.1.178:2812 -> xxx.yyy.1.28:4899 SYN ******S* [...] Dec 9 17:06:03 61.54.1.178:1416 -> xxx.yyy.255.249:4899 SYN ******S* Dec 9 17:06:03 61.54.1.178:1385 -> xxx.yyy.255.219:4899 SYN ******S* Dec 9 17:06:03 61.54.1.178:1387 -> xxx.yyy.255.221:4899 SYN ******S* Dec 9 17:06:03 61.54.1.178:1388 -> xxx.yyy.255.222:4899 SYN ******S* Dec 9 17:06:03 61.54.1.178:1390 -> xxx.yyy.255.224:4899 SYN ******S* Dec 9 17:06:03 61.54.1.178:1393 -> xxx.yyy.255.227:4899 SYN ******S* Dec 9 17:06:03 61.54.1.178:1398 -> xxx.yyy.255.232:4899 SYN ******S* Dec 9 17:06:03 61.54.1.178:1410 -> xxx.yyy.255.243:4899 SYN ******S* Dec 9 17:06:03 61.54.1.178:1412 -> xxx.yyy.255.245:4899 SYN ******S* 20442 Dec 9 22:56:08 24.65.34.5:2158 -> xxx.yyy.1.4:1433 SYN ******S* Dec 9 22:56:08 24.65.34.5:2159 -> xxx.yyy.1.5:1433 SYN ******S* Dec 9 22:56:08 24.65.34.5:2162 -> xxx.yyy.1.8:1433 SYN ******S* Dec 9 22:56:11 24.65.34.5:2166 -> xxx.yyy.1.12:1433 SYN ******S* Dec 9 22:56:08 24.65.34.5:2165 -> xxx.yyy.1.11:1433 SYN ******S* Dec 9 22:56:09 24.65.34.5:2183 -> xxx.yyy.1.29:1433 SYN ******S* Dec 9 22:56:09 24.65.34.5:2184 -> xxx.yyy.1.30:1433 SYN ******S* Dec 9 22:56:09 24.65.34.5:2187 -> xxx.yyy.1.33:1433 SYN ******S* [...] Dec 10 00:00:01 24.65.34.5:3896 -> xxx.yyy.141.190:1433 SYN ******S* Dec 10 00:00:01 24.65.34.5:3788 -> xxx.yyy.141.89:1433 SYN ******S* Dec 10 00:00:01 24.65.34.5:3789 -> xxx.yyy.141.90:1433 SYN ******S* Dec 10 00:00:01 24.65.34.5:3905 -> xxx.yyy.141.194:1433 SYN ******S* Dec 10 00:00:01 24.65.34.5:3908 -> xxx.yyy.141.197:1433 SYN ******S* Dec 10 00:00:01 24.65.34.5:3790 -> xxx.yyy.141.91:1433 SYN ******S* Dec 10 00:00:01 24.65.34.5:3906 -> xxx.yyy.141.195:1433 SYN ******S* Dec 10 00:00:01 24.65.34.5:3794 -> xxx.yyy.141.95:1433 SYN ******S* 20221 Dec 9 13:16:21 82.54.122.120:3985 -> xxx.yyy.10.0:1433 SYN ******S* Dec 9 13:16:21 82.54.122.120:3990 -> xxx.yyy.10.2:1433 SYN ******S* Dec 9 13:16:24 82.54.122.120:3993 -> xxx.yyy.10.3:1433 SYN ******S* Dec 9 13:16:22 82.54.122.120:4012 -> xxx.yyy.10.7:1433 SYN ******S* Dec 9 13:16:22 82.54.122.120:4013 -> xxx.yyy.10.8:1433 SYN ******S* Dec 9 13:16:22 82.54.122.120:4037 -> xxx.yyy.10.13:1433 SYN ******S* Dec 9 13:16:23 82.54.122.120:4049 -> xxx.yyy.10.14:1433 SYN ******S* Dec 9 13:16:23 82.54.122.120:4050 -> xxx.yyy.10.15:1433 SYN ******S* [...] Dec 9 15:16:00 82.54.122.120:3373 -> xxx.yyy.142.242:1433 SYN ******S* Dec 9 15:16:00 82.54.122.120:3377 -> xxx.yyy.142.243:1433 SYN ******S* Dec 9 15:16:00 82.54.122.120:3348 -> xxx.yyy.142.229:1433 SYN ******S* Dec 9 15:16:01 82.54.122.120:3294 -> xxx.yyy.142.200:1433 SYN ******S* Dec 9 15:16:02 82.54.122.120:3298 -> xxx.yyy.142.201:1433 SYN ******S* Dec 9 15:16:02 82.54.122.120:3299 -> xxx.yyy.142.202:1433 SYN ******S* Dec 9 15:16:02 82.54.122.120:3396 -> xxx.yyy.142.244:1433 SYN ******S* Dec 9 15:16:02 82.54.122.120:3303 -> xxx.yyy.142.205:1433 SYN ******S* Dec 9 15:16:02 82.54.122.120:3309 -> xxx.yyy.142.207:1433 SYN ******S* 19635 Dec 9 15:37:58 80.44.221.222:3431 -> xxx.yyy.10.1:1433 SYN ******S* Dec 9 15:37:58 80.44.221.222:3435 -> xxx.yyy.10.3:1433 SYN ******S* Dec 9 15:37:58 80.44.221.222:3438 -> xxx.yyy.10.5:1433 SYN ******S* Dec 9 15:37:58 80.44.221.222:3439 -> xxx.yyy.10.6:1433 SYN ******S* Dec 9 15:37:58 80.44.221.222:3441 -> xxx.yyy.10.8:1433 SYN ******S* Dec 9 15:37:58 80.44.221.222:3442 -> xxx.yyy.10.9:1433 SYN ******S* Dec 9 15:38:01 80.44.221.222:3443 -> xxx.yyy.10.10:1433 SYN ******S* Dec 9 15:37:58 80.44.221.222:3444 -> xxx.yyy.10.11:1433 SYN ******S* [...] Dec 9 17:02:51 80.44.221.222:3472 -> xxx.yyy.104.137:1433 SYN ******S* Dec 9 17:02:52 80.44.221.222:3491 -> xxx.yyy.104.143:1433 SYN ******S* Dec 9 17:02:52 80.44.221.222:3499 -> xxx.yyy.104.145:1433 SYN ******S* Dec 9 17:02:52 80.44.221.222:3502 -> xxx.yyy.104.146:1433 SYN ******S* Dec 9 17:02:52 80.44.221.222:3511 -> xxx.yyy.104.153:1433 SYN ******S* Dec 9 17:02:52 80.44.221.222:3509 -> xxx.yyy.104.152:1433 SYN ******S* Dec 9 17:02:52 80.44.221.222:3516 -> xxx.yyy.104.155:1433 SYN ******S* Dec 9 17:02:52 80.44.221.222:3515 -> xxx.yyy.104.154:1433 SYN ******S* Dec 9 17:02:53 80.44.221.222:3522 -> xxx.yyy.104.158:1433 SYN ******S* 15404 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions