[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Dec 12 04:44:30 210.82.175.253:47068 -> xxx.yyy.1.0:1433 SYN ******S* Dec 12 04:44:30 210.82.175.253:47069 -> xxx.yyy.1.1:1433 SYN ******S* Dec 12 04:44:30 210.82.175.253:43658 -> xxx.yyy.1.2:1433 SYN ******S* Dec 12 04:44:30 210.82.175.253:37077 -> xxx.yyy.1.4:1433 SYN ******S* Dec 12 04:44:30 210.82.175.253:40338 -> xxx.yyy.1.3:1433 SYN ******S* Dec 12 04:44:30 210.82.175.253:37079 -> xxx.yyy.1.5:1433 SYN ******S* Dec 12 04:44:30 210.82.175.253:33906 -> xxx.yyy.1.7:1433 SYN ******S* Dec 12 04:44:30 210.82.175.253:43659 -> xxx.yyy.1.6:1433 SYN ******S* [...] Dec 12 08:48:09 210.82.175.253:17692 -> xxx.yyy.255.246:1433 SYN ******S* Dec 12 08:48:09 210.82.175.253:17694 -> xxx.yyy.255.247:1433 SYN ******S* Dec 12 08:48:09 210.82.175.253:17704 -> xxx.yyy.255.248:1433 SYN ******S* Dec 12 08:48:09 210.82.175.253:17708 -> xxx.yyy.255.249:1433 SYN ******S* Dec 12 08:48:10 210.82.175.253:17713 -> xxx.yyy.255.251:1433 SYN ******S* Dec 12 08:48:10 210.82.175.253:17710 -> xxx.yyy.255.250:1433 SYN ******S* Dec 12 08:48:10 210.82.175.253:17723 -> xxx.yyy.255.252:1433 SYN ******S* Dec 12 08:48:10 210.82.175.253:14497 -> xxx.yyy.255.253:1433 SYN ******S* Dec 12 08:48:10 210.82.175.253:14526 -> xxx.yyy.255.254:1433 SYN ******S* 124687 Dec 12 08:12:18 82.76.12.62:2113 -> xxx.yyy.1.0:1433 SYN ******S* Dec 12 08:12:18 82.76.12.62:2119 -> xxx.yyy.1.1:1433 SYN ******S* Dec 12 08:12:18 82.76.12.62:2125 -> xxx.yyy.1.3:1433 SYN ******S* Dec 12 08:12:18 82.76.12.62:2127 -> xxx.yyy.1.4:1433 SYN ******S* Dec 12 08:12:18 82.76.12.62:2139 -> xxx.yyy.1.5:1433 SYN ******S* Dec 12 08:12:18 82.76.12.62:2141 -> xxx.yyy.1.6:1433 SYN ******S* Dec 12 08:12:15 82.76.12.62:2142 -> xxx.yyy.1.7:1433 SYN ******S* Dec 12 08:12:15 82.76.12.62:2146 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 12 12:23:56 82.76.12.62:1891 -> xxx.yyy.255.245:1433 SYN ******S* Dec 12 12:23:57 82.76.12.62:1966 -> xxx.yyy.255.246:1433 SYN ******S* Dec 12 12:23:57 82.76.12.62:1970 -> xxx.yyy.255.247:1433 SYN ******S* Dec 12 12:23:58 82.76.12.62:2264 -> xxx.yyy.255.249:1433 SYN ******S* Dec 12 12:23:58 82.76.12.62:2267 -> xxx.yyy.255.250:1433 SYN ******S* Dec 12 12:23:59 82.76.12.62:2270 -> xxx.yyy.255.251:1433 SYN ******S* Dec 12 12:24:00 82.76.12.62:3128 -> xxx.yyy.255.252:1433 SYN ******S* Dec 12 12:24:00 82.76.12.62:3787 -> xxx.yyy.255.253:1433 SYN ******S* Dec 12 12:24:00 82.76.12.62:4143 -> xxx.yyy.255.254:1433 SYN ******S* 114201 Dec 12 09:35:32 24.173.70.101:1320 -> xxx.yyy.1.1:1433 SYN ******S* Dec 12 09:35:32 24.173.70.101:1321 -> xxx.yyy.1.2:1433 SYN ******S* Dec 12 09:35:32 24.173.70.101:1324 -> xxx.yyy.1.3:1433 SYN ******S* Dec 12 09:35:32 24.173.70.101:1325 -> xxx.yyy.1.4:1433 SYN ******S* Dec 12 09:35:32 24.173.70.101:1327 -> xxx.yyy.1.5:1433 SYN ******S* Dec 12 09:35:32 24.173.70.101:1328 -> xxx.yyy.1.6:1433 SYN ******S* Dec 12 09:35:32 24.173.70.101:1329 -> xxx.yyy.1.7:1433 SYN ******S* Dec 12 09:35:32 24.173.70.101:1333 -> xxx.yyy.1.9:1433 SYN ******S* [...] Dec 12 13:13:44 24.173.70.101:3047 -> xxx.yyy.255.243:1433 SYN ******S* Dec 12 13:13:44 24.173.70.101:3060 -> xxx.yyy.255.244:1433 SYN ******S* Dec 12 13:13:44 24.173.70.101:3066 -> xxx.yyy.255.245:1433 SYN ******S* Dec 12 13:13:45 24.173.70.101:3087 -> xxx.yyy.255.249:1433 SYN ******S* Dec 12 13:13:45 24.173.70.101:3089 -> xxx.yyy.255.250:1433 SYN ******S* Dec 12 13:13:45 24.173.70.101:3096 -> xxx.yyy.255.251:1433 SYN ******S* Dec 12 13:13:45 24.173.70.101:3099 -> xxx.yyy.255.252:1433 SYN ******S* Dec 12 13:13:45 24.173.70.101:3102 -> xxx.yyy.255.253:1433 SYN ******S* Dec 12 13:13:46 24.173.70.101:3104 -> xxx.yyy.255.254:1433 SYN ******S* 108103 Dec 12 00:06:39 221.11.80.98:3018 -> xxx.yyy.64.2:1433 SYN ******S* Dec 12 00:06:39 221.11.80.98:3016 -> xxx.yyy.64.1:1433 SYN ******S* Dec 12 00:06:39 221.11.80.98:3036 -> xxx.yyy.64.6:1433 SYN ******S* Dec 12 00:06:39 221.11.80.98:3040 -> xxx.yyy.64.8:1433 SYN ******S* Dec 12 00:06:39 221.11.80.98:3042 -> xxx.yyy.64.9:1433 SYN ******S* Dec 12 00:06:39 221.11.80.98:3034 -> xxx.yyy.64.5:1433 SYN ******S* Dec 12 00:06:39 221.11.80.98:3054 -> xxx.yyy.64.13:1433 SYN ******S* Dec 12 00:06:37 221.11.80.98:3048 -> xxx.yyy.64.10:1433 SYN ******S* [...] Dec 12 02:58:22 221.11.80.98:4467 -> xxx.yyy.255.248:1433 SYN ******S* Dec 12 02:58:22 221.11.80.98:4445 -> xxx.yyy.255.247:1433 SYN ******S* Dec 12 02:58:23 221.11.80.98:4502 -> xxx.yyy.255.249:1433 SYN ******S* Dec 12 02:58:23 221.11.80.98:4506 -> xxx.yyy.255.250:1433 SYN ******S* Dec 12 02:58:23 221.11.80.98:4521 -> xxx.yyy.255.251:1433 SYN ******S* Dec 12 02:58:23 221.11.80.98:4546 -> xxx.yyy.255.252:1433 SYN ******S* Dec 12 02:58:23 221.11.80.98:4562 -> xxx.yyy.255.253:1433 SYN ******S* Dec 12 02:58:23 221.11.80.98:4576 -> xxx.yyy.255.254:1433 SYN ******S* 92362 Dec 12 11:01:07 64.229.158.172:3806 -> xxx.yyy.1.0:1433 SYN ******S* Dec 12 11:01:07 64.229.158.172:3807 -> xxx.yyy.1.1:1433 SYN ******S* Dec 12 11:01:07 64.229.158.172:3809 -> xxx.yyy.1.2:1433 SYN ******S* Dec 12 11:01:07 64.229.158.172:3810 -> xxx.yyy.1.3:1433 SYN ******S* Dec 12 11:01:07 64.229.158.172:3811 -> xxx.yyy.1.4:1433 SYN ******S* Dec 12 11:01:07 64.229.158.172:3819 -> xxx.yyy.1.6:1433 SYN ******S* Dec 12 11:01:07 64.229.158.172:3820 -> xxx.yyy.1.7:1433 SYN ******S* Dec 12 11:01:07 64.229.158.172:3822 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 12 14:40:30 64.229.158.172:4109 -> xxx.yyy.245.172:1433 SYN ******S* Dec 12 14:40:30 64.229.158.172:4110 -> xxx.yyy.245.173:1433 SYN ******S* Dec 12 14:40:30 64.229.158.172:4111 -> xxx.yyy.245.174:1433 SYN ******S* Dec 12 14:40:30 64.229.158.172:4129 -> xxx.yyy.245.181:1433 SYN ******S* Dec 12 14:40:30 64.229.158.172:4130 -> xxx.yyy.245.182:1433 SYN ******S* Dec 12 14:40:30 64.229.158.172:4146 -> xxx.yyy.245.184:1433 SYN ******S* Dec 12 14:40:30 64.229.158.172:4147 -> xxx.yyy.245.185:1433 SYN ******S* Dec 12 14:40:30 64.229.158.172:4154 -> xxx.yyy.245.186:1433 SYN ******S* 82442 Dec 12 00:09:54 219.162.222.188:4821 -> xxx.yyy.64.0:1433 SYN ******S* Dec 12 00:09:51 219.162.222.188:4824 -> xxx.yyy.64.1:1433 SYN ******S* Dec 12 00:09:51 219.162.222.188:4825 -> xxx.yyy.64.2:1433 SYN ******S* Dec 12 00:09:51 219.162.222.188:4826 -> xxx.yyy.64.3:1433 SYN ******S* Dec 12 00:09:54 219.162.222.188:4827 -> xxx.yyy.64.4:1433 SYN ******S* Dec 12 00:09:54 219.162.222.188:4834 -> xxx.yyy.64.6:1433 SYN ******S* Dec 12 00:09:54 219.162.222.188:4844 -> xxx.yyy.64.9:1433 SYN ******S* Dec 12 00:09:54 219.162.222.188:4845 -> xxx.yyy.64.10:1433 SYN ******S* [...] Dec 12 01:36:08 219.162.222.188:1967 -> xxx.yyy.255.247:1433 SYN ******S* Dec 12 01:36:08 219.162.222.188:1966 -> xxx.yyy.255.246:1433 SYN ******S* Dec 12 01:36:08 219.162.222.188:1977 -> xxx.yyy.255.252:1433 SYN ******S* Dec 12 01:36:08 219.162.222.188:1974 -> xxx.yyy.255.250:1433 SYN ******S* Dec 12 01:36:08 219.162.222.188:1973 -> xxx.yyy.255.249:1433 SYN ******S* Dec 12 01:36:08 219.162.222.188:1969 -> xxx.yyy.255.248:1433 SYN ******S* Dec 12 01:36:08 219.162.222.188:1975 -> xxx.yyy.255.251:1433 SYN ******S* Dec 12 01:36:08 219.162.222.188:1989 -> xxx.yyy.255.253:1433 SYN ******S* Dec 12 01:36:08 219.162.222.188:1997 -> xxx.yyy.255.254:1433 SYN ******S* 80237 Dec 12 12:15:25 4.5.250.215:1280 -> xxx.yyy.1.4:1433 SYN ******S* Dec 12 12:15:22 4.5.250.215:1282 -> xxx.yyy.1.6:1433 SYN ******S* Dec 12 12:15:25 4.5.250.215:1283 -> xxx.yyy.1.7:1433 SYN ******S* Dec 12 12:15:25 4.5.250.215:1285 -> xxx.yyy.1.8:1433 SYN ******S* Dec 12 12:15:22 4.5.250.215:1287 -> xxx.yyy.1.9:1433 SYN ******S* Dec 12 12:15:25 4.5.250.215:1290 -> xxx.yyy.1.11:1433 SYN ******S* Dec 12 12:15:25 4.5.250.215:1292 -> xxx.yyy.1.12:1433 SYN ******S* Dec 12 12:15:25 4.5.250.215:1293 -> xxx.yyy.1.13:1433 SYN ******S* [...] Dec 12 14:09:41 4.5.250.215:3766 -> xxx.yyy.255.238:1433 SYN ******S* Dec 12 14:09:42 4.5.250.215:3801 -> xxx.yyy.255.243:1433 SYN ******S* Dec 12 14:09:42 4.5.250.215:3806 -> xxx.yyy.255.246:1433 SYN ******S* Dec 12 14:09:42 4.5.250.215:3811 -> xxx.yyy.255.249:1433 SYN ******S* Dec 12 14:09:42 4.5.250.215:3808 -> xxx.yyy.255.248:1433 SYN ******S* Dec 12 14:09:42 4.5.250.215:3807 -> xxx.yyy.255.247:1433 SYN ******S* Dec 12 14:09:42 4.5.250.215:3822 -> xxx.yyy.255.252:1433 SYN ******S* Dec 12 14:09:42 4.5.250.215:3820 -> xxx.yyy.255.251:1433 SYN ******S* Dec 12 14:09:42 4.5.250.215:3828 -> xxx.yyy.255.253:1433 SYN ******S* 79996 Dec 12 10:39:10 80.171.79.22:3815 -> xxx.yyy.1.1:139 SYN ******S* Dec 12 10:39:10 80.171.79.22:3816 -> xxx.yyy.1.2:139 SYN ******S* Dec 12 10:39:10 80.171.79.22:3817 -> xxx.yyy.1.3:139 SYN ******S* Dec 12 10:39:10 80.171.79.22:3819 -> xxx.yyy.1.5:139 SYN ******S* Dec 12 10:39:10 80.171.79.22:3820 -> xxx.yyy.1.6:139 SYN ******S* Dec 12 10:39:10 80.171.79.22:3821 -> xxx.yyy.1.7:139 SYN ******S* Dec 12 10:39:10 80.171.79.22:3822 -> xxx.yyy.1.8:139 SYN ******S* Dec 12 10:39:10 80.171.79.22:3823 -> xxx.yyy.1.9:139 SYN ******S* [...] Dec 12 10:50:49 80.171.79.22:3633 -> xxx.yyy.255.243:139 SYN ******S* Dec 12 10:50:49 80.171.79.22:3635 -> xxx.yyy.255.245:139 SYN ******S* Dec 12 10:50:49 80.171.79.22:3636 -> xxx.yyy.255.246:139 SYN ******S* Dec 12 10:50:49 80.171.79.22:3649 -> xxx.yyy.255.249:139 SYN ******S* Dec 12 10:50:49 80.171.79.22:3650 -> xxx.yyy.255.250:139 SYN ******S* Dec 12 10:50:49 80.171.79.22:3651 -> xxx.yyy.255.251:139 SYN ******S* Dec 12 10:50:49 80.171.79.22:3652 -> xxx.yyy.255.252:139 SYN ******S* Dec 12 10:50:49 80.171.79.22:3653 -> xxx.yyy.255.253:139 SYN ******S* Dec 12 10:50:49 80.171.79.22:3654 -> xxx.yyy.255.254:139 SYN ******S* 65206 Dec 12 03:39:14 206.13.56.94:2848 -> xxx.yyy.1.58:1433 SYN ******S* Dec 12 03:39:14 206.13.56.94:2865 -> xxx.yyy.1.56:1433 SYN ******S* Dec 12 03:39:14 206.13.56.94:2873 -> xxx.yyy.1.55:1433 SYN ******S* Dec 12 03:39:14 206.13.56.94:2876 -> xxx.yyy.1.3:1433 SYN ******S* Dec 12 03:39:11 206.13.56.94:2882 -> xxx.yyy.1.54:1433 SYN ******S* Dec 12 03:39:14 206.13.56.94:2891 -> xxx.yyy.1.53:1433 SYN ******S* Dec 12 03:39:11 206.13.56.94:2899 -> xxx.yyy.1.52:1433 SYN ******S* Dec 12 03:39:14 206.13.56.94:2906 -> xxx.yyy.1.51:1433 SYN ******S* [...] Dec 12 04:01:31 206.13.56.94:2296 -> xxx.yyy.255.242:1433 SYN ******S* Dec 12 04:01:31 206.13.56.94:2297 -> xxx.yyy.255.243:1433 SYN ******S* Dec 12 04:01:31 206.13.56.94:2307 -> xxx.yyy.255.244:1433 SYN ******S* Dec 12 04:01:31 206.13.56.94:2315 -> xxx.yyy.255.245:1433 SYN ******S* Dec 12 04:01:31 206.13.56.94:2323 -> xxx.yyy.255.246:1433 SYN ******S* Dec 12 04:01:31 206.13.56.94:2574 -> xxx.yyy.255.251:1433 SYN ******S* Dec 12 04:01:31 206.13.56.94:2582 -> xxx.yyy.255.252:1433 SYN ******S* Dec 12 04:01:31 206.13.56.94:2590 -> xxx.yyy.255.253:1433 SYN ******S* 64593 Dec 12 11:05:51 143.107.193.64:3546 -> xxx.yyy.1.1:1433 SYN ******S* Dec 12 11:05:51 143.107.193.64:3547 -> xxx.yyy.1.2:1433 SYN ******S* Dec 12 11:05:51 143.107.193.64:3548 -> xxx.yyy.1.3:1433 SYN ******S* Dec 12 11:05:51 143.107.193.64:3550 -> xxx.yyy.1.5:1433 SYN ******S* Dec 12 11:05:51 143.107.193.64:3551 -> xxx.yyy.1.6:1433 SYN ******S* Dec 12 11:05:51 143.107.193.64:3553 -> xxx.yyy.1.8:1433 SYN ******S* Dec 12 11:05:51 143.107.193.64:3554 -> xxx.yyy.1.9:1433 SYN ******S* Dec 12 11:05:51 143.107.193.64:3555 -> xxx.yyy.1.10:1433 SYN ******S* [...] Dec 12 11:16:43 143.107.193.64:2651 -> xxx.yyy.255.194:1433 SYN ******S* Dec 12 11:16:43 143.107.193.64:2652 -> xxx.yyy.255.195:1433 SYN ******S* Dec 12 11:16:43 143.107.193.64:2649 -> xxx.yyy.255.192:1433 SYN ******S* Dec 12 11:16:43 143.107.193.64:2655 -> xxx.yyy.255.198:1433 SYN ******S* Dec 12 11:16:43 143.107.193.64:2653 -> xxx.yyy.255.196:1433 SYN ******S* Dec 12 11:16:43 143.107.193.64:2650 -> xxx.yyy.255.193:1433 SYN ******S* Dec 12 11:16:43 143.107.193.64:2647 -> xxx.yyy.255.190:1433 SYN ******S* Dec 12 11:16:44 143.107.193.64:2707 -> xxx.yyy.255.250:1433 SYN ******S* 64426 Dec 12 00:25:16 211.239.150.168:19212 -> xxx.yyy.1.1:4899 SYN ******S* Dec 12 00:25:16 211.239.150.168:19213 -> xxx.yyy.1.2:4899 SYN ******S* Dec 12 00:25:17 211.239.150.168:19214 -> xxx.yyy.1.3:4899 SYN ******S* Dec 12 00:25:15 211.239.150.168:19215 -> xxx.yyy.1.4:4899 SYN ******S* Dec 12 00:25:18 211.239.150.168:19216 -> xxx.yyy.1.5:4899 SYN ******S* Dec 12 00:25:18 211.239.150.168:19217 -> xxx.yyy.1.6:4899 SYN ******S* Dec 12 00:25:15 211.239.150.168:19218 -> xxx.yyy.1.7:4899 SYN ******S* Dec 12 00:25:15 211.239.150.168:19219 -> xxx.yyy.1.8:4899 SYN ******S* [...] Dec 12 00:37:37 211.239.150.168:21755 -> xxx.yyy.255.231:4899 SYN ******S* Dec 12 00:37:37 211.239.150.168:21759 -> xxx.yyy.255.235:4899 SYN ******S* Dec 12 00:37:37 211.239.150.168:21775 -> xxx.yyy.255.251:4899 SYN ******S* Dec 12 00:37:37 211.239.150.168:21771 -> xxx.yyy.255.247:4899 SYN ******S* Dec 12 00:37:37 211.239.150.168:21753 -> xxx.yyy.255.229:4899 SYN ******S* Dec 12 00:37:37 211.239.150.168:21740 -> xxx.yyy.255.216:4899 SYN ******S* Dec 12 00:37:37 211.239.150.168:21736 -> xxx.yyy.255.212:4899 SYN ******S* Dec 12 00:37:37 211.239.150.168:21743 -> xxx.yyy.255.219:4899 SYN ******S* 60231 Dec 12 10:44:39 193.147.116.117:2763 -> xxx.yyy.1.1:1433 SYN ******S* Dec 12 10:44:39 193.147.116.117:2764 -> xxx.yyy.1.2:1433 SYN ******S* Dec 12 10:44:39 193.147.116.117:2765 -> xxx.yyy.1.3:1433 SYN ******S* Dec 12 10:44:39 193.147.116.117:2766 -> xxx.yyy.1.4:1433 SYN ******S* Dec 12 10:44:39 193.147.116.117:2767 -> xxx.yyy.1.5:1433 SYN ******S* Dec 12 10:44:39 193.147.116.117:2768 -> xxx.yyy.1.6:1433 SYN ******S* Dec 12 10:44:39 193.147.116.117:2769 -> xxx.yyy.1.7:1433 SYN ******S* Dec 12 10:44:39 193.147.116.117:2770 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 12 11:01:38 193.147.116.117:3807 -> xxx.yyy.255.233:1433 SYN ******S* Dec 12 11:01:38 193.147.116.117:3810 -> xxx.yyy.255.236:1433 SYN ******S* Dec 12 11:01:38 193.147.116.117:3811 -> xxx.yyy.255.237:1433 SYN ******S* Dec 12 11:01:38 193.147.116.117:3813 -> xxx.yyy.255.239:1433 SYN ******S* Dec 12 11:01:38 193.147.116.117:3812 -> xxx.yyy.255.238:1433 SYN ******S* Dec 12 11:01:38 193.147.116.117:3814 -> xxx.yyy.255.240:1433 SYN ******S* Dec 12 11:01:38 193.147.116.117:3815 -> xxx.yyy.255.241:1433 SYN ******S* Dec 12 11:01:38 193.147.116.117:3816 -> xxx.yyy.255.242:1433 SYN ******S* Dec 12 11:01:38 193.147.116.117:3817 -> xxx.yyy.255.243:1433 SYN ******S* 59302 Dec 12 06:32:52 220.173.191.112:3877 -> xxx.yyy.1.1:4899 SYN ******S* Dec 12 06:32:53 220.173.191.112:3883 -> xxx.yyy.1.7:4899 SYN ******S* Dec 12 06:32:50 220.173.191.112:3878 -> xxx.yyy.1.2:4899 SYN ******S* Dec 12 06:32:50 220.173.191.112:3884 -> xxx.yyy.1.8:4899 SYN ******S* Dec 12 06:32:50 220.173.191.112:3879 -> xxx.yyy.1.3:4899 SYN ******S* Dec 12 06:32:53 220.173.191.112:3881 -> xxx.yyy.1.5:4899 SYN ******S* Dec 12 06:32:52 220.173.191.112:3888 -> xxx.yyy.1.11:4899 SYN ******S* Dec 12 06:32:53 220.173.191.112:3889 -> xxx.yyy.1.12:4899 SYN ******S* [...] Dec 12 06:42:09 220.173.191.112:4024 -> xxx.yyy.255.249:4899 SYN ******S* Dec 12 06:42:09 220.173.191.112:4021 -> xxx.yyy.255.246:4899 SYN ******S* Dec 12 06:42:09 220.173.191.112:4015 -> xxx.yyy.255.240:4899 SYN ******S* Dec 12 06:42:09 220.173.191.112:4011 -> xxx.yyy.255.237:4899 SYN ******S* Dec 12 06:42:09 220.173.191.112:4025 -> xxx.yyy.255.250:4899 SYN ******S* Dec 12 06:42:09 220.173.191.112:4019 -> xxx.yyy.255.244:4899 SYN ******S* Dec 12 06:42:09 220.173.191.112:4012 -> xxx.yyy.255.238:4899 SYN ******S* Dec 12 06:42:09 220.173.191.112:4009 -> xxx.yyy.255.235:4899 SYN ******S* Dec 12 06:42:09 220.173.191.112:4029 -> xxx.yyy.255.254:4899 SYN ******S* 51259 Dec 12 06:31:49 203.231.30.62:3450 -> xxx.yyy.1.1:4899 SYN ******S* Dec 12 06:31:49 203.231.30.62:3451 -> xxx.yyy.1.2:4899 SYN ******S* Dec 12 06:31:49 203.231.30.62:3452 -> xxx.yyy.1.3:4899 SYN ******S* Dec 12 06:31:47 203.231.30.62:3453 -> xxx.yyy.1.4:4899 SYN ******S* Dec 12 06:31:47 203.231.30.62:3454 -> xxx.yyy.1.5:4899 SYN ******S* Dec 12 06:31:47 203.231.30.62:3455 -> xxx.yyy.1.6:4899 SYN ******S* Dec 12 06:31:47 203.231.30.62:3456 -> xxx.yyy.1.7:4899 SYN ******S* Dec 12 06:31:47 203.231.30.62:3457 -> xxx.yyy.1.8:4899 SYN ******S* [...] Dec 12 06:41:03 203.231.30.62:4453 -> xxx.yyy.255.245:4899 SYN ******S* Dec 12 06:41:03 203.231.30.62:4454 -> xxx.yyy.255.246:4899 SYN ******S* Dec 12 06:41:03 203.231.30.62:4455 -> xxx.yyy.255.247:4899 SYN ******S* Dec 12 06:41:03 203.231.30.62:4456 -> xxx.yyy.255.248:4899 SYN ******S* Dec 12 06:41:03 203.231.30.62:4457 -> xxx.yyy.255.249:4899 SYN ******S* Dec 12 06:41:03 203.231.30.62:4458 -> xxx.yyy.255.250:4899 SYN ******S* Dec 12 06:41:03 203.231.30.62:4459 -> xxx.yyy.255.251:4899 SYN ******S* Dec 12 06:41:03 203.231.30.62:4460 -> xxx.yyy.255.252:4899 SYN ******S* Dec 12 06:41:03 203.231.30.62:4461 -> xxx.yyy.255.253:4899 SYN ******S* 47253 Dec 12 06:47:12 69.177.253.76:3687 -> xxx.yyy.1.1:4899 SYN ******S* Dec 12 06:47:12 69.177.253.76:3688 -> xxx.yyy.1.2:4899 SYN ******S* Dec 12 06:47:12 69.177.253.76:3689 -> xxx.yyy.1.3:4899 SYN ******S* Dec 12 06:47:10 69.177.253.76:3690 -> xxx.yyy.1.4:4899 SYN ******S* Dec 12 06:47:10 69.177.253.76:3691 -> xxx.yyy.1.5:4899 SYN ******S* Dec 12 06:47:10 69.177.253.76:3694 -> xxx.yyy.1.6:4899 SYN ******S* Dec 12 06:47:10 69.177.253.76:3695 -> xxx.yyy.1.7:4899 SYN ******S* Dec 12 06:47:10 69.177.253.76:3696 -> xxx.yyy.1.8:4899 SYN ******S* [...] Dec 12 06:56:57 69.177.253.76:3375 -> xxx.yyy.255.245:4899 SYN ******S* Dec 12 06:56:57 69.177.253.76:3379 -> xxx.yyy.255.246:4899 SYN ******S* Dec 12 06:56:57 69.177.253.76:3380 -> xxx.yyy.255.247:4899 SYN ******S* Dec 12 06:56:57 69.177.253.76:3381 -> xxx.yyy.255.248:4899 SYN ******S* Dec 12 06:56:57 69.177.253.76:3384 -> xxx.yyy.255.249:4899 SYN ******S* Dec 12 06:56:57 69.177.253.76:3386 -> xxx.yyy.255.251:4899 SYN ******S* Dec 12 06:56:57 69.177.253.76:3390 -> xxx.yyy.255.252:4899 SYN ******S* Dec 12 06:56:57 69.177.253.76:3391 -> xxx.yyy.255.253:4899 SYN ******S* Dec 12 06:56:57 69.177.253.76:3396 -> xxx.yyy.255.254:4899 SYN ******S* 45089 Dec 12 00:00:08 222.47.85.184:3432 -> xxx.yyy.87.51:1433 SYN ******S* Dec 12 00:00:05 222.47.85.184:3220 -> xxx.yyy.87.32:1433 SYN ******S* Dec 12 00:00:05 222.47.85.184:3232 -> xxx.yyy.87.33:1433 SYN ******S* Dec 12 00:00:08 222.47.85.184:3447 -> xxx.yyy.87.52:1433 SYN ******S* Dec 12 00:00:05 222.47.85.184:3236 -> xxx.yyy.87.34:1433 SYN ******S* Dec 12 00:00:05 222.47.85.184:3240 -> xxx.yyy.87.35:1433 SYN ******S* Dec 12 00:00:05 222.47.85.184:3245 -> xxx.yyy.87.36:1433 SYN ******S* Dec 12 00:00:08 222.47.85.184:3450 -> xxx.yyy.87.53:1433 SYN ******S* [...] Dec 12 01:46:55 222.47.85.184:4115 -> xxx.yyy.255.237:1433 SYN ******S* Dec 12 01:46:55 222.47.85.184:3769 -> xxx.yyy.255.236:1433 SYN ******S* Dec 12 01:46:55 222.47.85.184:4362 -> xxx.yyy.255.242:1433 SYN ******S* Dec 12 01:46:55 222.47.85.184:4211 -> xxx.yyy.255.241:1433 SYN ******S* Dec 12 01:46:56 222.47.85.184:4358 -> xxx.yyy.255.245:1433 SYN ******S* Dec 12 01:46:56 222.47.85.184:3090 -> xxx.yyy.255.247:1433 SYN ******S* Dec 12 01:46:57 222.47.85.184:3588 -> xxx.yyy.255.249:1433 SYN ******S* Dec 12 01:46:57 222.47.85.184:3065 -> xxx.yyy.255.251:1433 SYN ******S* Dec 12 01:46:57 222.47.85.184:4392 -> xxx.yyy.255.253:1433 SYN ******S* 42948 Dec 12 07:17:38 218.64.222.222:4991 -> xxx.yyy.1.2:4899 SYN ******S* Dec 12 07:17:35 218.64.222.222:4995 -> xxx.yyy.1.4:4899 SYN ******S* Dec 12 07:17:35 218.64.222.222:4999 -> xxx.yyy.1.5:4899 SYN ******S* Dec 12 07:17:35 218.64.222.222:3006 -> xxx.yyy.1.6:4899 SYN ******S* Dec 12 07:17:35 218.64.222.222:3007 -> xxx.yyy.1.7:4899 SYN ******S* Dec 12 07:17:35 218.64.222.222:3011 -> xxx.yyy.1.8:4899 SYN ******S* Dec 12 07:17:35 218.64.222.222:3013 -> xxx.yyy.1.9:4899 SYN ******S* Dec 12 07:17:35 218.64.222.222:3014 -> xxx.yyy.1.10:4899 SYN ******S* [...] Dec 12 07:28:17 218.64.222.222:3329 -> xxx.yyy.255.75:4899 SYN ******S* Dec 12 07:28:17 218.64.222.222:3336 -> xxx.yyy.255.76:4899 SYN ******S* Dec 12 07:28:17 218.64.222.222:3337 -> xxx.yyy.255.77:4899 SYN ******S* Dec 12 07:28:17 218.64.222.222:3339 -> xxx.yyy.255.78:4899 SYN ******S* Dec 12 07:28:17 218.64.222.222:3340 -> xxx.yyy.255.79:4899 SYN ******S* Dec 12 07:28:17 218.64.222.222:3342 -> xxx.yyy.255.80:4899 SYN ******S* Dec 12 07:28:17 218.64.222.222:3353 -> xxx.yyy.255.81:4899 SYN ******S* Dec 12 07:28:17 218.64.222.222:3354 -> xxx.yyy.255.82:4899 SYN ******S* Dec 12 07:28:17 218.64.222.222:3355 -> xxx.yyy.255.83:4899 SYN ******S* 41893 Dec 12 13:58:35 66.244.219.29:3464 -> xxx.yyy.1.1:1433 SYN ******S* Dec 12 13:58:32 66.244.219.29:3474 -> xxx.yyy.1.6:1433 SYN ******S* Dec 12 13:58:35 66.244.219.29:3478 -> xxx.yyy.1.8:1433 SYN ******S* Dec 12 13:58:35 66.244.219.29:3482 -> xxx.yyy.1.10:1433 SYN ******S* Dec 12 13:58:32 66.244.219.29:3496 -> xxx.yyy.1.17:1433 SYN ******S* Dec 12 13:58:32 66.244.219.29:3498 -> xxx.yyy.1.18:1433 SYN ******S* Dec 12 13:58:32 66.244.219.29:3508 -> xxx.yyy.1.23:1433 SYN ******S* Dec 12 13:58:32 66.244.219.29:3512 -> xxx.yyy.1.25:1433 SYN ******S* [...] Dec 12 14:10:15 66.244.219.29:3742 -> xxx.yyy.255.226:1433 SYN ******S* Dec 12 14:10:15 66.244.219.29:3732 -> xxx.yyy.255.221:1433 SYN ******S* Dec 12 14:10:15 66.244.219.29:3738 -> xxx.yyy.255.224:1433 SYN ******S* Dec 12 14:10:15 66.244.219.29:3754 -> xxx.yyy.255.232:1433 SYN ******S* Dec 12 14:10:15 66.244.219.29:3760 -> xxx.yyy.255.235:1433 SYN ******S* Dec 12 14:10:15 66.244.219.29:3750 -> xxx.yyy.255.230:1433 SYN ******S* Dec 12 14:10:15 66.244.219.29:3772 -> xxx.yyy.255.241:1433 SYN ******S* Dec 12 14:10:15 66.244.219.29:3766 -> xxx.yyy.255.238:1433 SYN ******S* Dec 12 14:10:16 66.244.219.29:3794 -> xxx.yyy.255.252:1433 SYN ******S* 41041 Dec 12 06:44:21 218.2.93.6:2439 -> xxx.yyy.1.2:1433 SYN ******S* Dec 12 06:44:19 218.2.93.6:2397 -> xxx.yyy.1.0:1433 SYN ******S* Dec 12 06:44:24 218.2.93.6:2547 -> xxx.yyy.1.11:1433 SYN ******S* Dec 12 06:44:24 218.2.93.6:2551 -> xxx.yyy.1.13:1433 SYN ******S* Dec 12 06:44:24 218.2.93.6:2472 -> xxx.yyy.1.6:1433 SYN ******S* Dec 12 06:44:22 218.2.93.6:3167 -> xxx.yyy.1.43:1433 SYN ******S* Dec 12 06:44:23 218.2.93.6:3156 -> xxx.yyy.1.35:1433 SYN ******S* Dec 12 06:44:23 218.2.93.6:3163 -> xxx.yyy.1.39:1433 SYN ******S* [...] Dec 12 09:04:54 218.2.93.6:3773 -> xxx.yyy.145.73:1433 SYN ******S* Dec 12 09:04:55 218.2.93.6:3774 -> xxx.yyy.145.74:1433 SYN ******S* Dec 12 09:04:55 218.2.93.6:3933 -> xxx.yyy.145.76:1433 SYN ******S* Dec 12 09:04:55 218.2.93.6:3924 -> xxx.yyy.145.75:1433 SYN ******S* Dec 12 09:04:55 218.2.93.6:3942 -> xxx.yyy.145.77:1433 SYN ******S* Dec 12 09:04:55 218.2.93.6:3958 -> xxx.yyy.145.78:1433 SYN ******S* Dec 12 09:04:55 218.2.93.6:3963 -> xxx.yyy.145.79:1433 SYN ******S* Dec 12 09:04:55 218.2.93.6:3966 -> xxx.yyy.145.81:1433 SYN ******S* Dec 12 09:04:55 218.2.93.6:3965 -> xxx.yyy.145.80:1433 SYN ******S* 41032 Dec 12 08:32:49 216.100.14.177:32459 -> xxx.yyy.1.1:4899 SYN ******S* Dec 12 08:32:49 216.100.14.177:32460 -> xxx.yyy.1.2:4899 SYN ******S* Dec 12 08:32:47 216.100.14.177:32462 -> xxx.yyy.1.4:4899 SYN ******S* Dec 12 08:32:47 216.100.14.177:32463 -> xxx.yyy.1.5:4899 SYN ******S* Dec 12 08:32:47 216.100.14.177:32465 -> xxx.yyy.1.6:4899 SYN ******S* Dec 12 08:32:47 216.100.14.177:32466 -> xxx.yyy.1.7:4899 SYN ******S* Dec 12 08:32:47 216.100.14.177:32467 -> xxx.yyy.1.8:4899 SYN ******S* Dec 12 08:32:47 216.100.14.177:32468 -> xxx.yyy.1.9:4899 SYN ******S* [...] Dec 12 08:36:37 216.100.14.177:55491 -> xxx.yyy.252.198:4899 SYN ******S* Dec 12 08:36:37 216.100.14.177:55493 -> xxx.yyy.252.199:4899 SYN ******S* Dec 12 08:36:37 216.100.14.177:55494 -> xxx.yyy.252.200:4899 SYN ******S* Dec 12 08:36:37 216.100.14.177:55495 -> xxx.yyy.252.201:4899 SYN ******S* Dec 12 08:36:37 216.100.14.177:55498 -> xxx.yyy.252.204:4899 SYN ******S* Dec 12 08:36:37 216.100.14.177:55502 -> xxx.yyy.252.206:4899 SYN ******S* Dec 12 08:36:37 216.100.14.177:55503 -> xxx.yyy.252.207:4899 SYN ******S* Dec 12 08:36:37 216.100.14.177:55504 -> xxx.yyy.252.208:4899 SYN ******S* Dec 12 08:36:37 216.100.14.177:55505 -> xxx.yyy.252.209:4899 SYN ******S* 39751 Dec 12 00:21:26 200.153.105.3:2638 -> xxx.yyy.1.1:1433 SYN ******S* Dec 12 00:21:29 200.153.105.3:2639 -> xxx.yyy.1.2:1433 SYN ******S* Dec 12 00:21:26 200.153.105.3:2640 -> xxx.yyy.1.3:1433 SYN ******S* Dec 12 00:21:26 200.153.105.3:2641 -> xxx.yyy.1.4:1433 SYN ******S* Dec 12 00:21:29 200.153.105.3:2642 -> xxx.yyy.1.5:1433 SYN ******S* Dec 12 00:21:29 200.153.105.3:2643 -> xxx.yyy.1.6:1433 SYN ******S* Dec 12 00:21:26 200.153.105.3:2644 -> xxx.yyy.1.7:1433 SYN ******S* Dec 12 00:21:29 200.153.105.3:2645 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 12 01:01:05 200.153.105.3:3799 -> xxx.yyy.255.201:1433 SYN ******S* Dec 12 01:01:05 200.153.105.3:3773 -> xxx.yyy.255.176:1433 SYN ******S* Dec 12 01:01:05 200.153.105.3:3832 -> xxx.yyy.255.230:1433 SYN ******S* Dec 12 01:01:05 200.153.105.3:3857 -> xxx.yyy.255.252:1433 SYN ******S* Dec 12 01:01:05 200.153.105.3:3821 -> xxx.yyy.255.221:1433 SYN ******S* Dec 12 01:01:05 200.153.105.3:3829 -> xxx.yyy.255.227:1433 SYN ******S* Dec 12 01:01:05 200.153.105.3:3854 -> xxx.yyy.255.249:1433 SYN ******S* Dec 12 01:01:05 200.153.105.3:3846 -> xxx.yyy.255.243:1433 SYN ******S* Dec 12 01:01:05 200.153.105.3:3826 -> xxx.yyy.255.224:1433 SYN ******S* 37703 [...] 30633 Dec 12 08:18:13 82.127.152.252:4550 -> xxx.yyy.1.0:1433 SYN ******S* Dec 12 08:18:13 82.127.152.252:4553 -> xxx.yyy.1.1:1433 SYN ******S* Dec 12 08:18:13 82.127.152.252:4555 -> xxx.yyy.1.2:1433 SYN ******S* Dec 12 08:18:13 82.127.152.252:4556 -> xxx.yyy.1.3:1433 SYN ******S* Dec 12 08:18:13 82.127.152.252:4557 -> xxx.yyy.1.4:1433 SYN ******S* Dec 12 08:18:13 82.127.152.252:4558 -> xxx.yyy.1.5:1433 SYN ******S* Dec 12 08:18:13 82.127.152.252:4559 -> xxx.yyy.1.6:1433 SYN ******S* Dec 12 08:18:13 82.127.152.252:4560 -> xxx.yyy.1.7:1433 SYN ******S* [...] Dec 12 09:40:40 82.127.152.252:3116 -> xxx.yyy.91.208:1433 SYN ******S* Dec 12 09:40:40 82.127.152.252:3115 -> xxx.yyy.91.207:1433 SYN ******S* Dec 12 09:40:40 82.127.152.252:3113 -> xxx.yyy.91.206:1433 SYN ******S* Dec 12 09:40:40 82.127.152.252:3132 -> xxx.yyy.91.212:1433 SYN ******S* Dec 12 09:40:40 82.127.152.252:3130 -> xxx.yyy.91.211:1433 SYN ******S* Dec 12 09:40:40 82.127.152.252:3136 -> xxx.yyy.91.215:1433 SYN ******S* Dec 12 09:40:40 82.127.152.252:3135 -> xxx.yyy.91.214:1433 SYN ******S* Dec 12 09:40:40 82.127.152.252:3134 -> xxx.yyy.91.213:1433 SYN ******S* Dec 12 09:40:40 82.127.152.252:3142 -> xxx.yyy.91.216:1433 SYN ******S* 28001 Dec 12 12:32:39 84.120.141.11:4728 -> xxx.yyy.1.0:1433 SYN ******S* Dec 12 12:32:39 84.120.141.11:4730 -> xxx.yyy.1.1:1433 SYN ******S* Dec 12 12:32:39 84.120.141.11:4736 -> xxx.yyy.1.3:1433 SYN ******S* Dec 12 12:32:39 84.120.141.11:4752 -> xxx.yyy.1.11:1433 SYN ******S* Dec 12 12:32:39 84.120.141.11:4757 -> xxx.yyy.1.14:1433 SYN ******S* Dec 12 12:32:42 84.120.141.11:4760 -> xxx.yyy.1.17:1433 SYN ******S* Dec 12 12:32:42 84.120.141.11:4761 -> xxx.yyy.1.18:1433 SYN ******S* Dec 12 12:32:39 84.120.141.11:4782 -> xxx.yyy.1.19:1433 SYN ******S* [...] Dec 12 14:40:31 84.120.141.11:1886 -> xxx.yyy.143.152:1433 SYN ******S* Dec 12 14:40:31 84.120.141.11:1893 -> xxx.yyy.143.153:1433 SYN ******S* Dec 12 14:40:31 84.120.141.11:1895 -> xxx.yyy.143.154:1433 SYN ******S* Dec 12 14:40:31 84.120.141.11:1899 -> xxx.yyy.143.156:1433 SYN ******S* Dec 12 14:40:31 84.120.141.11:1901 -> xxx.yyy.143.157:1433 SYN ******S* Dec 12 14:40:32 84.120.141.11:1987 -> xxx.yyy.143.160:1433 SYN ******S* Dec 12 14:40:32 84.120.141.11:2220 -> xxx.yyy.143.193:1433 SYN ******S* Dec 12 14:40:32 84.120.141.11:2037 -> xxx.yyy.143.167:1433 SYN ******S* Dec 12 14:40:32 84.120.141.11:2039 -> xxx.yyy.143.168:1433 SYN ******S* 27199 Dec 12 09:03:31 218.18.195.97:25784 -> xxx.yyy.1.0:1433 SYN ******S* Dec 12 09:03:34 218.18.195.97:25787 -> xxx.yyy.1.3:1433 SYN ******S* Dec 12 09:03:34 218.18.195.97:25786 -> xxx.yyy.1.2:1433 SYN ******S* Dec 12 09:03:34 218.18.195.97:25793 -> xxx.yyy.1.5:1433 SYN ******S* Dec 12 09:03:34 218.18.195.97:25792 -> xxx.yyy.1.4:1433 SYN ******S* Dec 12 09:03:34 218.18.195.97:25796 -> xxx.yyy.1.7:1433 SYN ******S* Dec 12 09:03:34 218.18.195.97:25795 -> xxx.yyy.1.6:1433 SYN ******S* Dec 12 09:03:34 218.18.195.97:25797 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 12 10:26:29 218.18.195.97:18846 -> xxx.yyy.93.29:1433 SYN ******S* Dec 12 10:26:29 218.18.195.97:18848 -> xxx.yyy.93.30:1433 SYN ******S* Dec 12 10:26:29 218.18.195.97:18854 -> xxx.yyy.93.35:1433 SYN ******S* Dec 12 10:26:29 218.18.195.97:18855 -> xxx.yyy.93.36:1433 SYN ******S* Dec 12 10:26:29 218.18.195.97:18853 -> xxx.yyy.93.34:1433 SYN ******S* Dec 12 10:26:30 218.18.195.97:18857 -> xxx.yyy.93.37:1433 SYN ******S* Dec 12 10:26:30 218.18.195.97:18860 -> xxx.yyy.93.40:1433 SYN ******S* Dec 12 10:26:30 218.18.195.97:18862 -> xxx.yyy.93.41:1433 SYN ******S* Dec 12 10:26:30 218.18.195.97:18851 -> xxx.yyy.93.32:1433 SYN ******S* 25654 [...] 21194 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions