[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Dec 10 04:19:45 222.249.44.106:4004 -> xxx.yyy.1.0:1433 SYN ******S* Dec 10 04:19:42 222.249.44.106:4006 -> xxx.yyy.1.2:1433 SYN ******S* Dec 10 04:19:42 222.249.44.106:4008 -> xxx.yyy.1.3:1433 SYN ******S* Dec 10 04:19:42 222.249.44.106:4010 -> xxx.yyy.1.4:1433 SYN ******S* Dec 10 04:19:42 222.249.44.106:4014 -> xxx.yyy.1.8:1433 SYN ******S* Dec 10 04:19:42 222.249.44.106:4015 -> xxx.yyy.1.9:1433 SYN ******S* Dec 10 04:19:42 222.249.44.106:4018 -> xxx.yyy.1.12:1433 SYN ******S* Dec 10 04:19:43 222.249.44.106:4021 -> xxx.yyy.1.15:1433 SYN ******S* [...] Dec 10 08:29:56 222.249.44.106:1717 -> xxx.yyy.255.245:1433 SYN ******S* Dec 10 08:29:56 222.249.44.106:1719 -> xxx.yyy.255.246:1433 SYN ******S* Dec 10 08:29:57 222.249.44.106:1720 -> xxx.yyy.255.247:1433 SYN ******S* Dec 10 08:29:57 222.249.44.106:1726 -> xxx.yyy.255.248:1433 SYN ******S* Dec 10 08:29:58 222.249.44.106:1734 -> xxx.yyy.255.249:1433 SYN ******S* Dec 10 08:29:58 222.249.44.106:1736 -> xxx.yyy.255.250:1433 SYN ******S* Dec 10 08:29:58 222.249.44.106:1739 -> xxx.yyy.255.251:1433 SYN ******S* Dec 10 08:29:58 222.249.44.106:1742 -> xxx.yyy.255.252:1433 SYN ******S* 114982 Dec 10 05:51:15 219.159.35.98:2639 -> xxx.yyy.1.0:1433 SYN ******S* Dec 10 05:51:15 219.159.35.98:2642 -> xxx.yyy.1.1:1433 SYN ******S* Dec 10 05:51:16 219.159.35.98:2650 -> xxx.yyy.1.2:1433 SYN ******S* Dec 10 05:51:16 219.159.35.98:2657 -> xxx.yyy.1.3:1433 SYN ******S* Dec 10 05:51:16 219.159.35.98:2664 -> xxx.yyy.1.4:1433 SYN ******S* Dec 10 05:51:16 219.159.35.98:2668 -> xxx.yyy.1.5:1433 SYN ******S* Dec 10 05:51:14 219.159.35.98:2674 -> xxx.yyy.1.6:1433 SYN ******S* Dec 10 05:51:14 219.159.35.98:2682 -> xxx.yyy.1.7:1433 SYN ******S* [...] Dec 10 09:40:14 219.159.35.98:2227 -> xxx.yyy.255.238:1433 SYN ******S* Dec 10 09:40:14 219.159.35.98:2241 -> xxx.yyy.255.241:1433 SYN ******S* Dec 10 09:40:14 219.159.35.98:2239 -> xxx.yyy.255.240:1433 SYN ******S* Dec 10 09:40:15 219.159.35.98:2252 -> xxx.yyy.255.243:1433 SYN ******S* Dec 10 09:40:15 219.159.35.98:2259 -> xxx.yyy.255.245:1433 SYN ******S* Dec 10 09:40:15 219.159.35.98:2267 -> xxx.yyy.255.246:1433 SYN ******S* Dec 10 09:40:16 219.159.35.98:2278 -> xxx.yyy.255.248:1433 SYN ******S* Dec 10 09:40:16 219.159.35.98:2282 -> xxx.yyy.255.249:1433 SYN ******S* Dec 10 09:40:17 219.159.35.98:2310 -> xxx.yyy.255.251:1433 SYN ******S* 100902 Dec 10 20:01:40 213.119.2.220:1122 -> xxx.yyy.1.0:1433 SYN ******S* Dec 10 20:01:40 213.119.2.220:1124 -> xxx.yyy.1.2:1433 SYN ******S* Dec 10 20:01:40 213.119.2.220:1125 -> xxx.yyy.1.3:1433 SYN ******S* Dec 10 20:01:40 213.119.2.220:1126 -> xxx.yyy.1.4:1433 SYN ******S* Dec 10 20:01:40 213.119.2.220:1128 -> xxx.yyy.1.5:1433 SYN ******S* Dec 10 20:01:37 213.119.2.220:1130 -> xxx.yyy.1.7:1433 SYN ******S* Dec 10 20:01:37 213.119.2.220:1132 -> xxx.yyy.1.8:1433 SYN ******S* Dec 10 20:01:37 213.119.2.220:1133 -> xxx.yyy.1.9:1433 SYN ******S* [...] Dec 10 23:51:59 213.119.2.220:4282 -> xxx.yyy.255.243:1433 SYN ******S* Dec 10 23:52:01 213.119.2.220:4306 -> xxx.yyy.255.246:1433 SYN ******S* Dec 10 23:52:01 213.119.2.220:4312 -> xxx.yyy.255.247:1433 SYN ******S* Dec 10 23:52:02 213.119.2.220:4331 -> xxx.yyy.255.249:1433 SYN ******S* Dec 10 23:52:02 213.119.2.220:4330 -> xxx.yyy.255.248:1433 SYN ******S* Dec 10 23:52:02 213.119.2.220:4342 -> xxx.yyy.255.251:1433 SYN ******S* Dec 10 23:52:02 213.119.2.220:4344 -> xxx.yyy.255.253:1433 SYN ******S* Dec 10 23:52:02 213.119.2.220:4343 -> xxx.yyy.255.252:1433 SYN ******S* Dec 10 23:52:03 213.119.2.220:4371 -> xxx.yyy.255.254:1433 SYN ******S* 75029 Dec 10 14:49:18 64.17.230.180:10305 -> xxx.yyy.1.0:1433 SYN ******S* Dec 10 14:49:18 64.17.230.180:10309 -> xxx.yyy.1.3:1433 SYN ******S* Dec 10 14:49:15 64.17.230.180:10311 -> xxx.yyy.1.4:1433 SYN ******S* Dec 10 14:49:15 64.17.230.180:10315 -> xxx.yyy.1.6:1433 SYN ******S* Dec 10 14:49:18 64.17.230.180:10316 -> xxx.yyy.1.7:1433 SYN ******S* Dec 10 14:49:18 64.17.230.180:10325 -> xxx.yyy.1.13:1433 SYN ******S* Dec 10 14:49:18 64.17.230.180:10327 -> xxx.yyy.1.14:1433 SYN ******S* Dec 10 14:49:18 64.17.230.180:10331 -> xxx.yyy.1.16:1433 SYN ******S* [...] Dec 10 18:38:02 64.17.230.180:39925 -> xxx.yyy.78.65:13745 SYN ******S* Dec 10 18:38:02 64.17.230.180:39953 -> xxx.yyy.255.238:1433 SYN ******S* Dec 10 18:38:02 64.17.230.180:39961 -> xxx.yyy.255.239:1433 SYN ******S* Dec 10 18:38:03 64.17.230.180:39999 -> xxx.yyy.255.241:1433 SYN ******S* Dec 10 18:38:03 64.17.230.180:40032 -> xxx.yyy.255.246:1433 SYN ******S* Dec 10 18:38:03 64.17.230.180:40049 -> xxx.yyy.255.248:1433 SYN ******S* Dec 10 18:38:04 64.17.230.180:40120 -> xxx.yyy.255.252:1433 SYN ******S* Dec 10 18:38:04 64.17.230.180:40354 -> xxx.yyy.255.254:1433 SYN ******S* 74990 Dec 10 08:51:19 200.161.150.237:3721 -> xxx.yyy.1.1:1433 SYN ******S* Dec 10 08:51:19 200.161.150.237:3749 -> xxx.yyy.1.3:1433 SYN ******S* Dec 10 08:51:16 200.161.150.237:3754 -> xxx.yyy.1.4:1433 SYN ******S* Dec 10 08:51:16 200.161.150.237:3763 -> xxx.yyy.1.6:1433 SYN ******S* Dec 10 08:51:16 200.161.150.237:3770 -> xxx.yyy.1.7:1433 SYN ******S* Dec 10 08:51:19 200.161.150.237:3816 -> xxx.yyy.1.8:1433 SYN ******S* Dec 10 08:51:19 200.161.150.237:3821 -> xxx.yyy.1.10:1433 SYN ******S* Dec 10 08:51:19 200.161.150.237:3822 -> xxx.yyy.1.11:1433 SYN ******S* [...] Dec 10 10:45:43 200.161.150.237:3052 -> xxx.yyy.255.231:1433 SYN ******S* Dec 10 10:45:43 200.161.150.237:3056 -> xxx.yyy.255.235:1433 SYN ******S* Dec 10 10:45:43 200.161.150.237:3077 -> xxx.yyy.255.240:1433 SYN ******S* Dec 10 10:45:44 200.161.150.237:3093 -> xxx.yyy.255.247:1433 SYN ******S* Dec 10 10:45:44 200.161.150.237:3091 -> xxx.yyy.255.245:1433 SYN ******S* Dec 10 10:45:44 200.161.150.237:3084 -> xxx.yyy.255.242:1433 SYN ******S* Dec 10 10:45:44 200.161.150.237:3107 -> xxx.yyy.255.251:1433 SYN ******S* Dec 10 10:45:44 200.161.150.237:3109 -> xxx.yyy.255.252:1433 SYN ******S* Dec 10 10:45:44 200.161.150.237:3118 -> xxx.yyy.255.254:1433 SYN ******S* 72039 Dec 10 15:22:05 213.60.236.124:1230 -> xxx.yyy.1.4:1433 SYN ******S* Dec 10 15:22:05 213.60.236.124:1231 -> xxx.yyy.1.5:1433 SYN ******S* Dec 10 15:22:05 213.60.236.124:1232 -> xxx.yyy.1.6:1433 SYN ******S* Dec 10 15:22:05 213.60.236.124:1227 -> xxx.yyy.1.1:1433 SYN ******S* Dec 10 15:22:05 213.60.236.124:1233 -> xxx.yyy.1.7:1433 SYN ******S* Dec 10 15:22:03 213.60.236.124:1238 -> xxx.yyy.1.12:1433 SYN ******S* Dec 10 15:22:03 213.60.236.124:1243 -> xxx.yyy.1.17:1433 SYN ******S* Dec 10 15:22:03 213.60.236.124:1242 -> xxx.yyy.1.16:1433 SYN ******S* [...] Dec 10 17:16:23 213.60.236.124:2225 -> xxx.yyy.255.235:1433 SYN ******S* Dec 10 17:16:23 213.60.236.124:2231 -> xxx.yyy.255.239:1433 SYN ******S* Dec 10 17:16:23 213.60.236.124:2235 -> xxx.yyy.255.241:1433 SYN ******S* Dec 10 17:16:23 213.60.236.124:2239 -> xxx.yyy.255.242:1433 SYN ******S* Dec 10 17:16:23 213.60.236.124:2241 -> xxx.yyy.255.243:1433 SYN ******S* Dec 10 17:16:24 213.60.236.124:2252 -> xxx.yyy.255.247:1433 SYN ******S* Dec 10 17:16:24 213.60.236.124:2245 -> xxx.yyy.255.246:1433 SYN ******S* Dec 10 17:16:24 213.60.236.124:2258 -> xxx.yyy.255.253:1433 SYN ******S* 63035 [...] 60561 Dec 10 18:04:49 66.37.71.92:32272 -> xxx.yyy.1.1:1433 SYN ******S* Dec 10 18:04:46 66.37.71.92:32273 -> xxx.yyy.1.2:1433 SYN ******S* Dec 10 18:04:46 66.37.71.92:32275 -> xxx.yyy.1.4:1433 SYN ******S* Dec 10 18:04:49 66.37.71.92:32276 -> xxx.yyy.1.5:1433 SYN ******S* Dec 10 18:04:46 66.37.71.92:32278 -> xxx.yyy.1.7:1433 SYN ******S* Dec 10 18:04:49 66.37.71.92:32279 -> xxx.yyy.1.8:1433 SYN ******S* Dec 10 18:04:49 66.37.71.92:32281 -> xxx.yyy.1.10:1433 SYN ******S* Dec 10 18:04:49 66.37.71.92:32283 -> xxx.yyy.1.12:1433 SYN ******S* [...] Dec 10 18:16:28 66.37.71.92:33074 -> xxx.yyy.255.236:1433 SYN ******S* Dec 10 18:16:28 66.37.71.92:33078 -> xxx.yyy.255.240:1433 SYN ******S* Dec 10 18:16:28 66.37.71.92:33075 -> xxx.yyy.255.237:1433 SYN ******S* Dec 10 18:16:28 66.37.71.92:33072 -> xxx.yyy.255.234:1433 SYN ******S* Dec 10 18:16:28 66.37.71.92:33084 -> xxx.yyy.255.246:1433 SYN ******S* Dec 10 18:16:28 66.37.71.92:33081 -> xxx.yyy.255.243:1433 SYN ******S* Dec 10 18:16:28 66.37.71.92:33086 -> xxx.yyy.255.248:1433 SYN ******S* Dec 10 18:16:28 66.37.71.92:33090 -> xxx.yyy.255.252:1433 SYN ******S* 47295 Dec 10 20:27:16 202.71.136.211:2631 -> xxx.yyy.1.1:65001 SYN ******S* Dec 10 20:27:16 202.71.136.211:2633 -> xxx.yyy.1.3:65001 SYN ******S* Dec 10 20:27:17 202.71.136.211:2634 -> xxx.yyy.1.4:65001 SYN ******S* Dec 10 20:27:14 202.71.136.211:2635 -> xxx.yyy.1.5:65001 SYN ******S* Dec 10 20:27:14 202.71.136.211:2637 -> xxx.yyy.1.7:65001 SYN ******S* Dec 10 20:27:16 202.71.136.211:2641 -> xxx.yyy.1.11:65001 SYN ******S* Dec 10 20:27:17 202.71.136.211:2640 -> xxx.yyy.1.10:65001 SYN ******S* Dec 10 20:27:14 202.71.136.211:2643 -> xxx.yyy.1.13:65001 SYN ******S* [...] Dec 10 20:39:21 202.71.136.211:4578 -> xxx.yyy.255.245:65001 SYN ******S* Dec 10 20:39:21 202.71.136.211:4576 -> xxx.yyy.255.243:65001 SYN ******S* Dec 10 20:39:21 202.71.136.211:4573 -> xxx.yyy.255.240:65001 SYN ******S* Dec 10 20:39:21 202.71.136.211:4583 -> xxx.yyy.255.250:65001 SYN ******S* Dec 10 20:39:21 202.71.136.211:4584 -> xxx.yyy.255.251:65001 SYN ******S* Dec 10 20:39:21 202.71.136.211:4582 -> xxx.yyy.255.249:65001 SYN ******S* Dec 10 20:39:21 202.71.136.211:4585 -> xxx.yyy.255.252:65001 SYN ******S* Dec 10 20:39:21 202.71.136.211:4586 -> xxx.yyy.255.253:65001 SYN ******S* Dec 10 20:39:21 202.71.136.211:4587 -> xxx.yyy.255.254:65001 SYN ******S* 46715 Dec 10 00:00:02 24.65.34.5:4015 -> xxx.yyy.141.246:1433 SYN ******S* Dec 10 00:00:05 24.65.34.5:3828 -> xxx.yyy.141.129:1433 SYN ******S* Dec 10 00:00:05 24.65.34.5:3829 -> xxx.yyy.141.130:1433 SYN ******S* Dec 10 00:00:05 24.65.34.5:3830 -> xxx.yyy.141.131:1433 SYN ******S* Dec 10 00:00:05 24.65.34.5:3834 -> xxx.yyy.141.135:1433 SYN ******S* Dec 10 00:00:05 24.65.34.5:3831 -> xxx.yyy.141.132:1433 SYN ******S* Dec 10 00:00:05 24.65.34.5:3832 -> xxx.yyy.141.133:1433 SYN ******S* Dec 10 00:00:05 24.65.34.5:3833 -> xxx.yyy.141.134:1433 SYN ******S* [...] Dec 10 00:53:15 24.65.34.5:1732 -> xxx.yyy.255.245:1433 SYN ******S* Dec 10 00:53:15 24.65.34.5:1734 -> xxx.yyy.255.247:1433 SYN ******S* Dec 10 00:53:15 24.65.34.5:1735 -> xxx.yyy.255.248:1433 SYN ******S* Dec 10 00:53:16 24.65.34.5:1737 -> xxx.yyy.255.250:1433 SYN ******S* Dec 10 00:53:16 24.65.34.5:1738 -> xxx.yyy.255.251:1433 SYN ******S* Dec 10 00:53:16 24.65.34.5:1739 -> xxx.yyy.255.252:1433 SYN ******S* Dec 10 00:53:16 24.65.34.5:1740 -> xxx.yyy.255.253:1433 SYN ******S* Dec 10 00:53:16 24.65.34.5:1741 -> xxx.yyy.255.254:1433 SYN ******S* 45772 Dec 10 08:27:24 169.226.39.218:1439 -> xxx.yyy.1.1:8000 SYN ******S* Dec 10 08:27:24 169.226.39.218:1440 -> xxx.yyy.1.2:8000 SYN ******S* Dec 10 08:27:25 169.226.39.218:1441 -> xxx.yyy.1.3:8000 SYN ******S* Dec 10 08:27:27 169.226.39.218:1442 -> xxx.yyy.1.4:8000 SYN ******S* Dec 10 08:27:27 169.226.39.218:1443 -> xxx.yyy.1.5:8000 SYN ******S* Dec 10 08:27:24 169.226.39.218:1444 -> xxx.yyy.1.6:8000 SYN ******S* Dec 10 08:27:27 169.226.39.218:1445 -> xxx.yyy.1.7:8000 SYN ******S* Dec 10 08:27:24 169.226.39.218:1449 -> xxx.yyy.1.11:8000 SYN ******S* [...] Dec 10 08:36:24 169.226.39.218:1388 -> xxx.yyy.255.252:8000 SYN ******S* Dec 10 08:36:24 169.226.39.218:1379 -> xxx.yyy.255.243:8000 SYN ******S* Dec 10 08:36:24 169.226.39.218:1389 -> xxx.yyy.255.253:8000 SYN ******S* Dec 10 08:36:24 169.226.39.218:1383 -> xxx.yyy.255.247:8000 SYN ******S* Dec 10 08:36:24 169.226.39.218:1380 -> xxx.yyy.255.244:8000 SYN ******S* Dec 10 08:36:24 169.226.39.218:1377 -> xxx.yyy.255.241:8000 SYN ******S* Dec 10 08:36:24 169.226.39.218:1390 -> xxx.yyy.255.254:8000 SYN ******S* Dec 10 08:36:24 169.226.39.218:1384 -> xxx.yyy.255.248:8000 SYN ******S* 45031 Dec 10 14:08:50 64.38.246.221:2984 -> xxx.yyy.1.14:80 SYN ******S* Dec 10 14:08:47 64.38.246.221:2847 -> xxx.yyy.1.32:80 SYN ******S* Dec 10 14:08:47 64.38.246.221:2914 -> xxx.yyy.1.36:80 SYN ******S* Dec 10 14:08:47 64.38.246.221:2915 -> xxx.yyy.1.37:80 SYN ******S* Dec 10 14:08:47 64.38.246.221:2910 -> xxx.yyy.1.27:80 SYN ******S* Dec 10 14:08:47 64.38.246.221:2858 -> xxx.yyy.1.43:80 SYN ******S* Dec 10 14:08:47 64.38.246.221:2856 -> xxx.yyy.1.41:80 SYN ******S* Dec 10 14:08:47 64.38.246.221:2857 -> xxx.yyy.1.42:80 SYN ******S* [...] Dec 10 15:11:58 64.38.246.221:4861 -> xxx.yyy.255.217:80 SYN ******S* Dec 10 15:11:58 64.38.246.221:4867 -> xxx.yyy.255.223:80 SYN ******S* Dec 10 15:11:58 64.38.246.221:4846 -> xxx.yyy.255.202:80 SYN ******S* Dec 10 15:11:59 64.38.246.221:4898 -> xxx.yyy.255.253:80 SYN ******S* Dec 10 15:12:00 64.38.246.221:4871 -> xxx.yyy.255.227:80 SYN ******S* Dec 10 15:12:00 64.38.246.221:4869 -> xxx.yyy.255.225:80 SYN ******S* Dec 10 15:12:00 64.38.246.221:4875 -> xxx.yyy.255.231:80 SYN ******S* Dec 10 15:12:00 64.38.246.221:4874 -> xxx.yyy.255.230:80 SYN ******S* Dec 10 15:12:00 64.38.246.221:4900 -> xxx.yyy.255.255:80 SYN ******S* 43003 Dec 10 21:17:05 62.80.67.101:3701 -> xxx.yyy.1.1:6129 SYN ******S* Dec 10 21:17:05 62.80.67.101:3702 -> xxx.yyy.1.2:6129 SYN ******S* Dec 10 21:17:05 62.80.67.101:3703 -> xxx.yyy.1.3:6129 SYN ******S* Dec 10 21:17:07 62.80.67.101:3704 -> xxx.yyy.1.4:6129 SYN ******S* Dec 10 21:17:07 62.80.67.101:3706 -> xxx.yyy.1.6:6129 SYN ******S* Dec 10 21:17:07 62.80.67.101:3707 -> xxx.yyy.1.7:6129 SYN ******S* Dec 10 21:17:07 62.80.67.101:3708 -> xxx.yyy.1.8:6129 SYN ******S* Dec 10 21:17:05 62.80.67.101:3714 -> xxx.yyy.1.14:6129 SYN ******S* [...] Dec 10 21:31:34 62.80.67.101:1452 -> xxx.yyy.255.251:6129 SYN ******S* Dec 10 21:31:34 62.80.67.101:1453 -> xxx.yyy.255.252:6129 SYN ******S* Dec 10 21:31:34 62.80.67.101:1450 -> xxx.yyy.255.249:6129 SYN ******S* Dec 10 21:31:34 62.80.67.101:1449 -> xxx.yyy.255.248:6129 SYN ******S* Dec 10 21:31:34 62.80.67.101:1454 -> xxx.yyy.255.253:6129 SYN ******S* Dec 10 21:31:34 62.80.67.101:1447 -> xxx.yyy.255.246:6129 SYN ******S* Dec 10 21:31:34 62.80.67.101:1451 -> xxx.yyy.255.250:6129 SYN ******S* Dec 10 21:31:34 62.80.67.101:1448 -> xxx.yyy.255.247:6129 SYN ******S* 42383 Dec 10 22:12:44 24.232.244.5:1646 -> xxx.yyy.1.1:1433 SYN ******S* Dec 10 22:12:47 24.232.244.5:1648 -> xxx.yyy.1.3:1433 SYN ******S* Dec 10 22:12:47 24.232.244.5:1650 -> xxx.yyy.1.5:1433 SYN ******S* Dec 10 22:12:47 24.232.244.5:1652 -> xxx.yyy.1.7:1433 SYN ******S* Dec 10 22:12:47 24.232.244.5:1653 -> xxx.yyy.1.8:1433 SYN ******S* Dec 10 22:12:47 24.232.244.5:1654 -> xxx.yyy.1.9:1433 SYN ******S* Dec 10 22:12:47 24.232.244.5:1655 -> xxx.yyy.1.10:1433 SYN ******S* Dec 10 22:12:47 24.232.244.5:1658 -> xxx.yyy.1.13:1433 SYN ******S* [...] Dec 10 22:23:43 24.232.244.5:4822 -> xxx.yyy.255.224:1433 SYN ******S* Dec 10 22:23:43 24.232.244.5:4827 -> xxx.yyy.255.229:1433 SYN ******S* Dec 10 22:23:43 24.232.244.5:4837 -> xxx.yyy.255.239:1433 SYN ******S* Dec 10 22:23:43 24.232.244.5:4833 -> xxx.yyy.255.235:1433 SYN ******S* Dec 10 22:23:43 24.232.244.5:4831 -> xxx.yyy.255.233:1433 SYN ******S* Dec 10 22:23:43 24.232.244.5:4836 -> xxx.yyy.255.238:1433 SYN ******S* Dec 10 22:23:43 24.232.244.5:4840 -> xxx.yyy.255.242:1433 SYN ******S* Dec 10 22:23:43 24.232.244.5:4850 -> xxx.yyy.255.252:1433 SYN ******S* 40487 Dec 10 06:30:23 69.93.54.186:2075 -> xxx.yyy.1.0:4000 SYN ******S* Dec 10 06:30:23 69.93.54.186:2076 -> xxx.yyy.1.0:3389 SYN ******S* Dec 10 06:30:23 69.93.54.186:2077 -> xxx.yyy.1.1:4000 SYN ******S* Dec 10 06:30:23 69.93.54.186:2078 -> xxx.yyy.1.1:3389 SYN ******S* Dec 10 06:30:23 69.93.54.186:2079 -> xxx.yyy.1.2:4000 SYN ******S* Dec 10 06:30:23 69.93.54.186:2080 -> xxx.yyy.1.2:3389 SYN ******S* Dec 10 06:30:23 69.93.54.186:2081 -> xxx.yyy.1.3:4000 SYN ******S* Dec 10 06:30:23 69.93.54.186:2082 -> xxx.yyy.1.3:3389 SYN ******S* [...] Dec 10 06:32:13 69.93.54.186:2109 -> xxx.yyy.255.247:4000 SYN ******S* Dec 10 06:32:13 69.93.54.186:2110 -> xxx.yyy.255.247:3389 SYN ******S* Dec 10 06:32:13 69.93.54.186:2111 -> xxx.yyy.255.248:4000 SYN ******S* Dec 10 06:32:13 69.93.54.186:2112 -> xxx.yyy.255.248:3389 SYN ******S* Dec 10 06:32:13 69.93.54.186:2113 -> xxx.yyy.255.249:4000 SYN ******S* Dec 10 06:32:13 69.93.54.186:2114 -> xxx.yyy.255.249:3389 SYN ******S* Dec 10 06:32:13 69.93.54.186:2065 -> xxx.yyy.255.250:4000 SYN ******S* Dec 10 06:32:13 69.93.54.186:2066 -> xxx.yyy.255.250:3389 SYN ******S* 39806 Dec 10 14:42:59 142.46.68.10:2467 -> xxx.yyy.1.1:5000 SYN ******S* Dec 10 14:42:59 142.46.68.10:2469 -> xxx.yyy.1.3:5000 SYN ******S* Dec 10 14:42:59 142.46.68.10:2470 -> xxx.yyy.1.4:5000 SYN ******S* Dec 10 14:42:56 142.46.68.10:2471 -> xxx.yyy.1.5:5000 SYN ******S* Dec 10 14:42:59 142.46.68.10:2472 -> xxx.yyy.1.6:5000 SYN ******S* Dec 10 14:42:59 142.46.68.10:2475 -> xxx.yyy.1.9:5000 SYN ******S* Dec 10 14:42:56 142.46.68.10:2476 -> xxx.yyy.1.10:5000 SYN ******S* Dec 10 14:42:59 142.46.68.10:2477 -> xxx.yyy.1.11:5000 SYN ******S* [...] Dec 10 14:49:00 142.46.68.10:4993 -> xxx.yyy.255.187:5000 SYN ******S* Dec 10 14:49:01 142.46.68.10:1075 -> xxx.yyy.255.236:5000 SYN ******S* Dec 10 14:49:01 142.46.68.10:1076 -> xxx.yyy.255.237:5000 SYN ******S* Dec 10 14:49:01 142.46.68.10:1079 -> xxx.yyy.255.240:5000 SYN ******S* Dec 10 14:49:01 142.46.68.10:1080 -> xxx.yyy.255.241:5000 SYN ******S* Dec 10 14:49:01 142.46.68.10:1081 -> xxx.yyy.255.242:5000 SYN ******S* Dec 10 14:49:01 142.46.68.10:1082 -> xxx.yyy.255.243:5000 SYN ******S* Dec 10 14:49:01 142.46.68.10:1083 -> xxx.yyy.255.244:5000 SYN ******S* 29645 Dec 10 05:10:42 217.94.99.138:62676 -> xxx.yyy.1.0:3306 SYN ******S* Dec 10 05:10:42 217.94.99.138:62681 -> xxx.yyy.1.5:3306 SYN ******S* Dec 10 05:10:42 217.94.99.138:62682 -> xxx.yyy.1.6:3306 SYN ******S* Dec 10 05:10:42 217.94.99.138:62683 -> xxx.yyy.1.7:3306 SYN ******S* Dec 10 05:10:42 217.94.99.138:62684 -> xxx.yyy.1.8:3306 SYN ******S* Dec 10 05:10:42 217.94.99.138:62685 -> xxx.yyy.1.9:3306 SYN ******S* Dec 10 05:10:42 217.94.99.138:62686 -> xxx.yyy.1.10:3306 SYN ******S* Dec 10 05:10:42 217.94.99.138:62691 -> xxx.yyy.1.15:3306 SYN ******S* [...] Dec 10 06:53:18 217.94.99.138:61896 -> xxx.yyy.236.51:3306 SYN ******S* Dec 10 06:53:18 217.94.99.138:61891 -> xxx.yyy.240.117:3306 SYN ******S* Dec 10 06:53:17 217.94.99.138:61880 -> xxx.yyy.240.211:3306 SYN ******S* Dec 10 06:53:18 217.94.99.138:61915 -> xxx.yyy.241.111:3306 SYN ******S* Dec 10 06:53:19 217.94.99.138:61933 -> xxx.yyy.240.117:3306 SYN ******S* Dec 10 06:53:19 217.94.99.138:61934 -> xxx.yyy.236.51:3306 SYN ******S* Dec 10 06:53:19 217.94.99.138:61938 -> xxx.yyy.226.9:3306 SYN ******S* Dec 10 06:53:20 217.94.99.138:61974 -> xxx.yyy.241.111:3306 SYN ******S* 25045 Dec 10 10:14:01 128.211.208.118:2169 -> xxx.yyy.1.6:80 SYN ******S* Dec 10 10:14:01 128.211.208.118:2171 -> xxx.yyy.1.8:80 SYN ******S* Dec 10 10:14:01 128.211.208.118:2170 -> xxx.yyy.1.7:80 SYN ******S* Dec 10 10:14:01 128.211.208.118:2172 -> xxx.yyy.1.9:80 SYN ******S* Dec 10 10:14:01 128.211.208.118:2173 -> xxx.yyy.1.10:80 SYN ******S* Dec 10 10:13:59 128.211.208.118:2174 -> xxx.yyy.1.11:80 SYN ******S* Dec 10 10:14:01 128.211.208.118:2175 -> xxx.yyy.1.12:80 SYN ******S* Dec 10 10:13:58 128.211.208.118:2176 -> xxx.yyy.1.13:80 SYN ******S* [...] Dec 10 10:37:24 128.211.208.118:2214 -> xxx.yyy.255.183:80 SYN ******S* Dec 10 10:37:24 128.211.208.118:2215 -> xxx.yyy.255.184:80 SYN ******S* Dec 10 10:37:24 128.211.208.118:2218 -> xxx.yyy.255.187:80 SYN ******S* Dec 10 10:37:24 128.211.208.118:2216 -> xxx.yyy.255.185:80 SYN ******S* Dec 10 10:37:24 128.211.208.118:2217 -> xxx.yyy.255.186:80 SYN ******S* Dec 10 10:37:24 128.211.208.118:2220 -> xxx.yyy.255.189:80 SYN ******S* Dec 10 10:37:24 128.211.208.118:2222 -> xxx.yyy.255.191:80 SYN ******S* Dec 10 10:37:24 128.211.208.118:2219 -> xxx.yyy.255.188:80 SYN ******S* Dec 10 10:37:24 128.211.208.118:2224 -> xxx.yyy.255.193:80 SYN ******S* 24706 Dec 10 10:14:45 84.128.91.138:63510 -> xxx.yyy.1.0:3306 SYN ******S* Dec 10 10:14:45 84.128.91.138:63511 -> xxx.yyy.1.1:3306 SYN ******S* Dec 10 10:14:45 84.128.91.138:63512 -> xxx.yyy.1.2:3306 SYN ******S* Dec 10 10:14:45 84.128.91.138:63516 -> xxx.yyy.1.6:3306 SYN ******S* Dec 10 10:14:45 84.128.91.138:63517 -> xxx.yyy.1.7:3306 SYN ******S* Dec 10 10:14:46 84.128.91.138:63520 -> xxx.yyy.1.10:3306 SYN ******S* Dec 10 10:14:46 84.128.91.138:63521 -> xxx.yyy.1.11:3306 SYN ******S* Dec 10 10:14:46 84.128.91.138:63522 -> xxx.yyy.1.12:3306 SYN ******S* [...] Dec 10 10:36:30 84.128.91.138:62989 -> xxx.yyy.255.235:3306 SYN ******S* Dec 10 10:36:30 84.128.91.138:62991 -> xxx.yyy.255.237:3306 SYN ******S* Dec 10 10:36:30 84.128.91.138:62993 -> xxx.yyy.255.239:3306 SYN ******S* Dec 10 10:36:30 84.128.91.138:62994 -> xxx.yyy.255.240:3306 SYN ******S* Dec 10 10:36:30 84.128.91.138:63000 -> xxx.yyy.255.246:3306 SYN ******S* Dec 10 10:36:30 84.128.91.138:63004 -> xxx.yyy.255.250:3306 SYN ******S* Dec 10 10:36:30 84.128.91.138:63005 -> xxx.yyy.255.251:3306 SYN ******S* Dec 10 10:36:30 84.128.91.138:63007 -> xxx.yyy.255.253:3306 SYN ******S* 21261 [...] 20645 Dec 10 07:42:59 213.136.120.217:59535 -> xxx.yyy.1.146:22 SYN ******S* Dec 10 07:42:59 213.136.120.217:59537 -> xxx.yyy.1.148:22 SYN ******S* Dec 10 07:42:59 213.136.120.217:59539 -> xxx.yyy.1.150:22 SYN ******S* Dec 10 07:42:59 213.136.120.217:59542 -> xxx.yyy.1.153:22 SYN ******S* Dec 10 07:42:59 213.136.120.217:59544 -> xxx.yyy.1.154:22 SYN ******S* Dec 10 07:42:56 213.136.120.217:59555 -> xxx.yyy.1.165:22 SYN ******S* Dec 10 07:42:56 213.136.120.217:59556 -> xxx.yyy.1.166:22 SYN ******S* Dec 10 07:42:59 213.136.120.217:59536 -> xxx.yyy.1.147:22 SYN ******S* [...] Dec 10 12:30:02 213.136.120.217:38011 -> xxx.yyy.243.45:22 SYN ******S* Dec 10 12:30:02 213.136.120.217:38050 -> xxx.yyy.229.182:22 SYN ******S* Dec 10 12:30:02 213.136.120.217:37679 -> xxx.yyy.230.70:22 SYN ******S* Dec 10 12:30:03 213.136.120.217:38204 -> xxx.yyy.229.247:22 SYN ******S* Dec 10 12:30:04 213.136.120.217:37913 -> xxx.yyy.241.108:22 SYN ******S* Dec 10 12:30:04 213.136.120.217:38474 -> xxx.yyy.229.228:22 SYN ******S* Dec 10 12:30:09 213.136.120.217:39174 -> xxx.yyy.243.45:22 SYN ******S* Dec 10 12:30:10 213.136.120.217:39299 -> xxx.yyy.236.22:22 SYN ******S* 18529 [...] 17545 [...] 13819 [...] 11173 [...] 10773 Dec 10 05:48:24 217.255.128.56:3618 -> xxx.yyy.1.6:1433 SYN ******S* Dec 10 05:48:27 217.255.128.56:3627 -> xxx.yyy.1.15:1433 SYN ******S* Dec 10 05:48:27 217.255.128.56:3633 -> xxx.yyy.1.21:1433 SYN ******S* Dec 10 05:48:24 217.255.128.56:3641 -> xxx.yyy.1.29:1433 SYN ******S* Dec 10 05:48:24 217.255.128.56:3648 -> xxx.yyy.1.36:1433 SYN ******S* Dec 10 05:48:24 217.255.128.56:3654 -> xxx.yyy.1.42:1433 SYN ******S* Dec 10 05:48:24 217.255.128.56:3661 -> xxx.yyy.1.49:1433 SYN ******S* Dec 10 05:48:24 217.255.128.56:3669 -> xxx.yyy.1.57:1433 SYN ******S* [...] Dec 10 05:52:50 217.255.128.56:4884 -> xxx.yyy.134.177:1433 SYN ******S* Dec 10 05:52:50 217.255.128.56:4890 -> xxx.yyy.134.183:1433 SYN ******S* Dec 10 05:52:50 217.255.128.56:4896 -> xxx.yyy.134.189:1433 SYN ******S* Dec 10 05:52:50 217.255.128.56:4900 -> xxx.yyy.134.193:1433 SYN ******S* Dec 10 05:52:50 217.255.128.56:4905 -> xxx.yyy.134.198:1433 SYN ******S* Dec 10 05:52:50 217.255.128.56:4911 -> xxx.yyy.134.204:1433 SYN ******S* Dec 10 05:52:50 217.255.128.56:4922 -> xxx.yyy.134.215:1433 SYN ******S* Dec 10 05:52:50 217.255.128.56:4931 -> xxx.yyy.134.224:1433 SYN ******S* 10119 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions