[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Dec 11 06:40:37 203.172.35.10:3749 -> xxx.yyy.1.2:1433 SYN ******S* Dec 11 06:40:37 203.172.35.10:3744 -> xxx.yyy.1.1:1433 SYN ******S* Dec 11 06:40:37 203.172.35.10:3751 -> xxx.yyy.1.3:1433 SYN ******S* Dec 11 06:40:37 203.172.35.10:3752 -> xxx.yyy.1.4:1433 SYN ******S* Dec 11 06:40:37 203.172.35.10:3755 -> xxx.yyy.1.5:1433 SYN ******S* Dec 11 06:40:37 203.172.35.10:3758 -> xxx.yyy.1.7:1433 SYN ******S* Dec 11 06:40:37 203.172.35.10:3756 -> xxx.yyy.1.6:1433 SYN ******S* Dec 11 06:40:37 203.172.35.10:3776 -> xxx.yyy.1.9:1433 SYN ******S* [...] Dec 11 08:46:13 203.172.35.10:4131 -> xxx.yyy.255.246:1433 SYN ******S* Dec 11 08:46:13 203.172.35.10:4137 -> xxx.yyy.255.247:1433 SYN ******S* Dec 11 08:46:13 203.172.35.10:4242 -> xxx.yyy.255.248:1433 SYN ******S* Dec 11 08:46:13 203.172.35.10:4303 -> xxx.yyy.255.249:1433 SYN ******S* Dec 11 08:46:13 203.172.35.10:4417 -> xxx.yyy.255.250:1433 SYN ******S* Dec 11 08:46:13 203.172.35.10:4423 -> xxx.yyy.255.251:1433 SYN ******S* Dec 11 08:46:13 203.172.35.10:4442 -> xxx.yyy.255.252:1433 SYN ******S* Dec 11 08:46:13 203.172.35.10:4478 -> xxx.yyy.255.253:1433 SYN ******S* Dec 11 08:46:13 203.172.35.10:4483 -> xxx.yyy.255.254:1433 SYN ******S* 121815 Dec 11 07:26:26 216.123.209.87:1562 -> xxx.yyy.1.1:1433 SYN ******S* Dec 11 07:26:26 216.123.209.87:1565 -> xxx.yyy.1.2:1433 SYN ******S* Dec 11 07:26:26 216.123.209.87:1568 -> xxx.yyy.1.3:1433 SYN ******S* Dec 11 07:26:26 216.123.209.87:1569 -> xxx.yyy.1.4:1433 SYN ******S* Dec 11 07:26:26 216.123.209.87:1570 -> xxx.yyy.1.5:1433 SYN ******S* Dec 11 07:26:26 216.123.209.87:1571 -> xxx.yyy.1.6:1433 SYN ******S* Dec 11 07:26:26 216.123.209.87:1572 -> xxx.yyy.1.7:1433 SYN ******S* Dec 11 07:26:26 216.123.209.87:1574 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 11 09:20:45 216.123.209.87:1825 -> xxx.yyy.255.246:1433 SYN ******S* Dec 11 09:20:45 216.123.209.87:1833 -> xxx.yyy.255.248:1433 SYN ******S* Dec 11 09:20:45 216.123.209.87:1841 -> xxx.yyy.255.249:1433 SYN ******S* Dec 11 09:20:46 216.123.209.87:1848 -> xxx.yyy.255.254:1433 SYN ******S* Dec 11 09:20:46 216.123.209.87:1847 -> xxx.yyy.255.253:1433 SYN ******S* Dec 11 09:20:46 216.123.209.87:1846 -> xxx.yyy.255.252:1433 SYN ******S* Dec 11 09:20:46 216.123.209.87:1845 -> xxx.yyy.255.251:1433 SYN ******S* Dec 11 09:20:46 216.123.209.87:1843 -> xxx.yyy.255.250:1433 SYN ******S* 115910 Dec 11 07:26:43 201.240.19.96:3298 -> xxx.yyy.1.0:1433 SYN ******S* Dec 11 07:26:43 201.240.19.96:3300 -> xxx.yyy.1.1:1433 SYN ******S* Dec 11 07:26:43 201.240.19.96:3301 -> xxx.yyy.1.2:1433 SYN ******S* Dec 11 07:26:43 201.240.19.96:3303 -> xxx.yyy.1.4:1433 SYN ******S* Dec 11 07:26:43 201.240.19.96:3305 -> xxx.yyy.1.5:1433 SYN ******S* Dec 11 07:26:43 201.240.19.96:3306 -> xxx.yyy.1.6:1433 SYN ******S* Dec 11 07:26:43 201.240.19.96:3308 -> xxx.yyy.1.8:1433 SYN ******S* Dec 11 07:26:43 201.240.19.96:3310 -> xxx.yyy.1.10:1433 SYN ******S* [...] Dec 11 11:15:14 201.240.19.96:4188 -> xxx.yyy.255.246:1433 SYN ******S* Dec 11 11:15:14 201.240.19.96:4191 -> xxx.yyy.255.247:1433 SYN ******S* Dec 11 11:15:14 201.240.19.96:4195 -> xxx.yyy.255.250:1433 SYN ******S* Dec 11 11:15:14 201.240.19.96:4194 -> xxx.yyy.255.249:1433 SYN ******S* Dec 11 11:15:14 201.240.19.96:4192 -> xxx.yyy.255.248:1433 SYN ******S* Dec 11 11:15:14 201.240.19.96:4198 -> xxx.yyy.255.251:1433 SYN ******S* Dec 11 11:15:15 201.240.19.96:4202 -> xxx.yyy.255.253:1433 SYN ******S* Dec 11 11:15:15 201.240.19.96:4201 -> xxx.yyy.255.252:1433 SYN ******S* Dec 11 11:15:15 201.240.19.96:4203 -> xxx.yyy.255.254:1433 SYN ******S* 115162 Dec 11 01:10:46 172.170.50.93:3551 -> xxx.yyy.1.0:1433 SYN ******S* Dec 11 01:10:49 172.170.50.93:3553 -> xxx.yyy.1.2:1433 SYN ******S* Dec 11 01:10:49 172.170.50.93:3552 -> xxx.yyy.1.1:1433 SYN ******S* Dec 11 01:10:49 172.170.50.93:3554 -> xxx.yyy.1.3:1433 SYN ******S* Dec 11 01:10:46 172.170.50.93:3555 -> xxx.yyy.1.4:1433 SYN ******S* Dec 11 01:10:46 172.170.50.93:3558 -> xxx.yyy.1.7:1433 SYN ******S* Dec 11 01:10:46 172.170.50.93:3559 -> xxx.yyy.1.8:1433 SYN ******S* Dec 11 01:10:47 172.170.50.93:3565 -> xxx.yyy.1.13:1433 SYN ******S* [...] Dec 11 04:59:33 172.170.50.93:1575 -> xxx.yyy.255.245:1433 SYN ******S* Dec 11 04:59:33 172.170.50.93:1577 -> xxx.yyy.255.246:1433 SYN ******S* Dec 11 04:59:33 172.170.50.93:1578 -> xxx.yyy.255.247:1433 SYN ******S* Dec 11 04:59:34 172.170.50.93:1581 -> xxx.yyy.255.248:1433 SYN ******S* Dec 11 04:59:34 172.170.50.93:1586 -> xxx.yyy.255.249:1433 SYN ******S* Dec 11 04:59:34 172.170.50.93:1599 -> xxx.yyy.255.250:1433 SYN ******S* Dec 11 04:59:34 172.170.50.93:1608 -> xxx.yyy.255.251:1433 SYN ******S* Dec 11 04:59:35 172.170.50.93:1609 -> xxx.yyy.255.252:1433 SYN ******S* Dec 11 04:59:35 172.170.50.93:1618 -> xxx.yyy.255.254:1433 SYN ******S* 111520 Dec 11 04:31:23 24.153.48.23:65383 -> xxx.yyy.1.0:1433 SYN ******S* Dec 11 04:31:23 24.153.48.23:57687 -> xxx.yyy.1.1:1433 SYN ******S* Dec 11 04:31:23 24.153.48.23:63769 -> xxx.yyy.1.2:1433 SYN ******S* Dec 11 04:31:23 24.153.48.23:58499 -> xxx.yyy.1.3:1433 SYN ******S* Dec 11 04:31:23 24.153.48.23:64579 -> xxx.yyy.1.4:1433 SYN ******S* Dec 11 04:31:23 24.153.48.23:64833 -> xxx.yyy.1.5:1433 SYN ******S* Dec 11 04:31:23 24.153.48.23:64937 -> xxx.yyy.1.6:1433 SYN ******S* Dec 11 04:31:23 24.153.48.23:57327 -> xxx.yyy.1.7:1433 SYN ******S* [...] Dec 11 08:20:35 24.153.48.23:59201 -> xxx.yyy.255.246:1433 SYN ******S* Dec 11 08:20:35 24.153.48.23:62291 -> xxx.yyy.255.247:1433 SYN ******S* Dec 11 08:20:35 24.153.48.23:59255 -> xxx.yyy.255.248:1433 SYN ******S* Dec 11 08:20:35 24.153.48.23:58511 -> xxx.yyy.255.249:1433 SYN ******S* Dec 11 08:20:35 24.153.48.23:64177 -> xxx.yyy.255.250:1433 SYN ******S* Dec 11 08:20:35 24.153.48.23:62801 -> xxx.yyy.255.251:1433 SYN ******S* Dec 11 08:20:35 24.153.48.23:61549 -> xxx.yyy.255.253:1433 SYN ******S* Dec 11 08:20:35 24.153.48.23:63117 -> xxx.yyy.255.254:1433 SYN ******S* Dec 11 08:20:35 24.153.48.23:59997 -> xxx.yyy.255.252:1433 SYN ******S* 106345 Dec 11 21:04:49 81.36.24.176:3505 -> xxx.yyy.1.6:1433 SYN ******S* Dec 11 21:04:46 81.36.24.176:3504 -> xxx.yyy.1.5:1433 SYN ******S* Dec 11 21:04:46 81.36.24.176:3506 -> xxx.yyy.1.7:1433 SYN ******S* Dec 11 21:04:46 81.36.24.176:3510 -> xxx.yyy.1.9:1433 SYN ******S* Dec 11 21:04:49 81.36.24.176:3515 -> xxx.yyy.1.13:1433 SYN ******S* Dec 11 21:04:49 81.36.24.176:3522 -> xxx.yyy.1.19:1433 SYN ******S* Dec 11 21:04:47 81.36.24.176:3524 -> xxx.yyy.1.20:1433 SYN ******S* Dec 11 21:04:47 81.36.24.176:3526 -> xxx.yyy.1.22:1433 SYN ******S* [...] Dec 11 22:59:10 81.36.24.176:3451 -> xxx.yyy.255.243:1433 SYN ******S* Dec 11 22:59:11 81.36.24.176:3457 -> xxx.yyy.255.247:1433 SYN ******S* Dec 11 22:59:11 81.36.24.176:3463 -> xxx.yyy.255.251:1433 SYN ******S* Dec 11 22:59:11 81.36.24.176:3462 -> xxx.yyy.255.250:1433 SYN ******S* Dec 11 22:59:11 81.36.24.176:3461 -> xxx.yyy.255.249:1433 SYN ******S* Dec 11 22:59:11 81.36.24.176:3466 -> xxx.yyy.255.254:1433 SYN ******S* Dec 11 22:59:11 81.36.24.176:3465 -> xxx.yyy.255.253:1433 SYN ******S* Dec 11 22:59:11 81.36.24.176:3464 -> xxx.yyy.255.252:1433 SYN ******S* 82840 Dec 11 21:16:00 24.27.37.242:1909 -> xxx.yyy.1.4:1433 SYN ******S* Dec 11 21:16:04 24.27.37.242:1913 -> xxx.yyy.1.8:1433 SYN ******S* Dec 11 21:16:01 24.27.37.242:1917 -> xxx.yyy.1.11:1433 SYN ******S* Dec 11 21:16:04 24.27.37.242:1919 -> xxx.yyy.1.13:1433 SYN ******S* Dec 11 21:16:04 24.27.37.242:1922 -> xxx.yyy.1.16:1433 SYN ******S* Dec 11 21:16:01 24.27.37.242:1923 -> xxx.yyy.1.17:1433 SYN ******S* Dec 11 21:16:04 24.27.37.242:1924 -> xxx.yyy.1.18:1433 SYN ******S* Dec 11 21:16:04 24.27.37.242:1929 -> xxx.yyy.1.23:1433 SYN ******S* [...] Dec 11 23:10:45 24.27.37.242:4456 -> xxx.yyy.255.246:1433 SYN ******S* Dec 11 23:10:45 24.27.37.242:4453 -> xxx.yyy.255.245:1433 SYN ******S* Dec 11 23:10:45 24.27.37.242:4469 -> xxx.yyy.255.251:1433 SYN ******S* Dec 11 23:10:45 24.27.37.242:4466 -> xxx.yyy.255.248:1433 SYN ******S* Dec 11 23:10:45 24.27.37.242:4468 -> xxx.yyy.255.250:1433 SYN ******S* Dec 11 23:10:45 24.27.37.242:4473 -> xxx.yyy.255.254:1433 SYN ******S* Dec 11 23:10:45 24.27.37.242:4471 -> xxx.yyy.255.252:1433 SYN ******S* Dec 11 23:10:45 24.27.37.242:4472 -> xxx.yyy.255.253:1433 SYN ******S* 78520 [...] 77040 Dec 11 08:57:35 80.86.140.194:27122 -> xxx.yyy.1.1:4000 SYN ******S* Dec 11 08:57:35 80.86.140.194:27123 -> xxx.yyy.1.2:4000 SYN ******S* Dec 11 08:57:35 80.86.140.194:27124 -> xxx.yyy.1.3:4000 SYN ******S* Dec 11 08:57:33 80.86.140.194:27125 -> xxx.yyy.1.4:4000 SYN ******S* Dec 11 08:57:36 80.86.140.194:27126 -> xxx.yyy.1.5:4000 SYN ******S* Dec 11 08:57:36 80.86.140.194:27127 -> xxx.yyy.1.6:4000 SYN ******S* Dec 11 08:57:36 80.86.140.194:27128 -> xxx.yyy.1.7:4000 SYN ******S* Dec 11 08:57:36 80.86.140.194:27129 -> xxx.yyy.1.8:4000 SYN ******S* [...] Dec 11 09:09:17 80.86.140.194:30065 -> xxx.yyy.255.246:4000 SYN ******S* Dec 11 09:09:17 80.86.140.194:30066 -> xxx.yyy.255.247:4000 SYN ******S* Dec 11 09:09:17 80.86.140.194:30067 -> xxx.yyy.255.248:4000 SYN ******S* Dec 11 09:09:17 80.86.140.194:30068 -> xxx.yyy.255.249:4000 SYN ******S* Dec 11 09:09:17 80.86.140.194:30070 -> xxx.yyy.255.251:4000 SYN ******S* Dec 11 09:09:17 80.86.140.194:30069 -> xxx.yyy.255.250:4000 SYN ******S* Dec 11 09:09:17 80.86.140.194:30071 -> xxx.yyy.255.252:4000 SYN ******S* Dec 11 09:09:17 80.86.140.194:30072 -> xxx.yyy.255.253:4000 SYN ******S* 65925 Dec 11 04:48:06 202.38.59.202:9162 -> xxx.yyy.1.1:1433 SYN ******S* Dec 11 04:48:06 202.38.59.202:9163 -> xxx.yyy.1.2:1433 SYN ******S* Dec 11 04:48:06 202.38.59.202:9165 -> xxx.yyy.1.4:1433 SYN ******S* Dec 11 04:48:06 202.38.59.202:9166 -> xxx.yyy.1.5:1433 SYN ******S* Dec 11 04:48:06 202.38.59.202:9167 -> xxx.yyy.1.6:1433 SYN ******S* Dec 11 04:48:06 202.38.59.202:9168 -> xxx.yyy.1.7:1433 SYN ******S* Dec 11 04:48:06 202.38.59.202:9169 -> xxx.yyy.1.8:1433 SYN ******S* Dec 11 04:48:06 202.38.59.202:9170 -> xxx.yyy.1.9:1433 SYN ******S* [...] Dec 11 05:26:33 202.38.59.202:59330 -> xxx.yyy.255.202:1433 SYN ******S* Dec 11 05:26:33 202.38.59.202:59357 -> xxx.yyy.255.228:1433 SYN ******S* Dec 11 05:26:33 202.38.59.202:59331 -> xxx.yyy.255.203:1433 SYN ******S* Dec 11 05:26:33 202.38.59.202:59358 -> xxx.yyy.255.229:1433 SYN ******S* Dec 11 05:26:33 202.38.59.202:59332 -> xxx.yyy.255.204:1433 SYN ******S* Dec 11 05:26:33 202.38.59.202:59359 -> xxx.yyy.255.230:1433 SYN ******S* Dec 11 05:26:33 202.38.59.202:59333 -> xxx.yyy.255.205:1433 SYN ******S* Dec 11 05:26:33 202.38.59.202:59360 -> xxx.yyy.255.231:1433 SYN ******S* 59545 Dec 11 23:32:44 216.212.69.171:2687 -> xxx.yyy.1.1:1433 SYN ******S* Dec 11 23:32:44 216.212.69.171:2688 -> xxx.yyy.1.2:1433 SYN ******S* Dec 11 23:32:44 216.212.69.171:2689 -> xxx.yyy.1.3:1433 SYN ******S* Dec 11 23:32:47 216.212.69.171:2690 -> xxx.yyy.1.4:1433 SYN ******S* Dec 11 23:32:47 216.212.69.171:2691 -> xxx.yyy.1.5:1433 SYN ******S* Dec 11 23:32:47 216.212.69.171:2692 -> xxx.yyy.1.6:1433 SYN ******S* Dec 11 23:32:47 216.212.69.171:2695 -> xxx.yyy.1.9:1433 SYN ******S* Dec 11 23:32:47 216.212.69.171:2696 -> xxx.yyy.1.10:1433 SYN ******S* [...] Dec 11 23:44:29 216.212.69.171:1402 -> xxx.yyy.255.224:1433 SYN ******S* Dec 11 23:44:29 216.212.69.171:1399 -> xxx.yyy.255.221:1433 SYN ******S* Dec 11 23:44:29 216.212.69.171:1403 -> xxx.yyy.255.225:1433 SYN ******S* Dec 11 23:44:29 216.212.69.171:1414 -> xxx.yyy.255.236:1433 SYN ******S* Dec 11 23:44:29 216.212.69.171:1408 -> xxx.yyy.255.230:1433 SYN ******S* Dec 11 23:44:29 216.212.69.171:1409 -> xxx.yyy.255.231:1433 SYN ******S* Dec 11 23:44:29 216.212.69.171:1420 -> xxx.yyy.255.242:1433 SYN ******S* Dec 11 23:44:29 216.212.69.171:1422 -> xxx.yyy.255.244:1433 SYN ******S* 49715 Dec 11 07:33:42 203.253.64.6:43066 -> xxx.yyy.1.4:32773 SYN ******S* Dec 11 07:33:42 203.253.64.6:43068 -> xxx.yyy.1.6:32773 SYN ******S* Dec 11 07:33:39 203.253.64.6:43073 -> xxx.yyy.1.11:32773 SYN ******S* Dec 11 07:33:42 203.253.64.6:43077 -> xxx.yyy.1.15:32773 SYN ******S* Dec 11 07:33:42 203.253.64.6:43069 -> xxx.yyy.1.7:32773 SYN ******S* Dec 11 07:33:39 203.253.64.6:43078 -> xxx.yyy.1.16:32773 SYN ******S* Dec 11 07:33:39 203.253.64.6:43082 -> xxx.yyy.1.20:32773 SYN ******S* Dec 11 07:33:39 203.253.64.6:43085 -> xxx.yyy.1.23:32773 SYN ******S* [...] Dec 11 07:39:42 203.253.64.6:42601 -> xxx.yyy.255.250:32773 SYN ******S* Dec 11 07:39:42 203.253.64.6:42588 -> xxx.yyy.255.237:32773 SYN ******S* Dec 11 07:39:42 203.253.64.6:42600 -> xxx.yyy.255.249:32773 SYN ******S* Dec 11 07:39:42 203.253.64.6:42598 -> xxx.yyy.255.247:32773 SYN ******S* Dec 11 07:39:42 203.253.64.6:42602 -> xxx.yyy.255.251:32773 SYN ******S* Dec 11 07:39:42 203.253.64.6:42591 -> xxx.yyy.255.240:32773 SYN ******S* Dec 11 07:39:42 203.253.64.6:42590 -> xxx.yyy.255.239:32773 SYN ******S* Dec 11 07:39:42 203.253.64.6:42585 -> xxx.yyy.255.234:32773 SYN ******S* 47607 Dec 11 06:25:01 200.54.172.178:3189 -> xxx.yyy.1.1:4899 SYN ******S* Dec 11 06:25:02 200.54.172.178:3191 -> xxx.yyy.1.2:4899 SYN ******S* Dec 11 06:25:02 200.54.172.178:3192 -> xxx.yyy.1.3:4899 SYN ******S* Dec 11 06:25:01 200.54.172.178:3193 -> xxx.yyy.1.4:4899 SYN ******S* Dec 11 06:25:01 200.54.172.178:3194 -> xxx.yyy.1.5:4899 SYN ******S* Dec 11 06:25:01 200.54.172.178:3195 -> xxx.yyy.1.6:4899 SYN ******S* Dec 11 06:25:01 200.54.172.178:3196 -> xxx.yyy.1.7:4899 SYN ******S* Dec 11 06:25:01 200.54.172.178:3197 -> xxx.yyy.1.8:4899 SYN ******S* [...] Dec 11 06:36:07 200.54.172.178:3665 -> xxx.yyy.254.18:4899 SYN ******S* Dec 11 06:36:07 200.54.172.178:3676 -> xxx.yyy.254.28:4899 SYN ******S* Dec 11 06:36:07 200.54.172.178:3673 -> xxx.yyy.254.25:4899 SYN ******S* Dec 11 06:36:07 200.54.172.178:3670 -> xxx.yyy.254.22:4899 SYN ******S* Dec 11 06:36:07 200.54.172.178:3666 -> xxx.yyy.254.19:4899 SYN ******S* Dec 11 06:36:07 200.54.172.178:3674 -> xxx.yyy.254.26:4899 SYN ******S* Dec 11 06:36:07 200.54.172.178:3667 -> xxx.yyy.254.20:4899 SYN ******S* Dec 11 06:36:07 200.54.172.178:3671 -> xxx.yyy.254.23:4899 SYN ******S* Dec 11 06:36:07 200.54.172.178:3664 -> xxx.yyy.254.17:4899 SYN ******S* 46860 Dec 11 20:39:39 221.194.23.46:4980 -> xxx.yyy.1.1:80 SYN ******S* Dec 11 20:39:39 221.194.23.46:4979 -> xxx.yyy.1.0:80 SYN ******S* Dec 11 20:39:40 221.194.23.46:4987 -> xxx.yyy.1.4:80 SYN ******S* Dec 11 20:39:37 221.194.23.46:4986 -> xxx.yyy.1.3:80 SYN ******S* Dec 11 20:39:40 221.194.23.46:4990 -> xxx.yyy.1.6:80 SYN ******S* Dec 11 20:39:40 221.194.23.46:4996 -> xxx.yyy.1.9:80 SYN ******S* Dec 11 20:39:40 221.194.23.46:4997 -> xxx.yyy.1.10:80 SYN ******S* Dec 11 20:39:39 221.194.23.46:3005 -> xxx.yyy.1.11:80 SYN ******S* [...] Dec 11 21:10:34 221.194.23.46:3563 -> xxx.yyy.254.246:80 SYN ******S* Dec 11 21:10:34 221.194.23.46:3559 -> xxx.yyy.254.242:80 SYN ******S* Dec 11 21:10:34 221.194.23.46:3560 -> xxx.yyy.254.243:80 SYN ******S* Dec 11 21:10:34 221.194.23.46:3569 -> xxx.yyy.254.252:80 SYN ******S* Dec 11 21:10:34 221.194.23.46:3557 -> xxx.yyy.254.240:80 SYN ******S* Dec 11 21:10:34 221.194.23.46:3570 -> xxx.yyy.254.253:80 SYN ******S* Dec 11 21:10:41 221.194.23.46:3694 -> xxx.yyy.221.183:80 SYN ******S* Dec 11 21:10:45 221.194.23.46:3740 -> xxx.yyy.221.183:80 SYN ******S* Dec 11 21:10:47 221.194.23.46:3764 -> xxx.yyy.221.183:80 SYN ******S* 43100 Dec 11 19:45:05 210.18.64.116:3584 -> xxx.yyy.1.8:1433 SYN ******S* Dec 11 19:45:05 210.18.64.116:3585 -> xxx.yyy.1.9:1433 SYN ******S* Dec 11 19:45:05 210.18.64.116:3594 -> xxx.yyy.1.13:1433 SYN ******S* Dec 11 19:45:06 210.18.64.116:3596 -> xxx.yyy.1.15:1433 SYN ******S* Dec 11 19:45:06 210.18.64.116:3597 -> xxx.yyy.1.16:1433 SYN ******S* Dec 11 19:45:06 210.18.64.116:3600 -> xxx.yyy.1.17:1433 SYN ******S* Dec 11 19:45:06 210.18.64.116:3601 -> xxx.yyy.1.18:1433 SYN ******S* Dec 11 19:45:06 210.18.64.116:3603 -> xxx.yyy.1.20:1433 SYN ******S* [...] Dec 11 19:57:02 210.18.64.116:2202 -> xxx.yyy.255.236:1433 SYN ******S* Dec 11 19:57:02 210.18.64.116:2219 -> xxx.yyy.255.246:1433 SYN ******S* Dec 11 19:57:02 210.18.64.116:2216 -> xxx.yyy.255.243:1433 SYN ******S* Dec 11 19:57:02 210.18.64.116:2220 -> xxx.yyy.255.247:1433 SYN ******S* Dec 11 19:57:02 210.18.64.116:2213 -> xxx.yyy.255.240:1433 SYN ******S* Dec 11 19:57:02 210.18.64.116:2217 -> xxx.yyy.255.244:1433 SYN ******S* Dec 11 19:57:02 210.18.64.116:2214 -> xxx.yyy.255.241:1433 SYN ******S* Dec 11 19:57:02 210.18.64.116:2218 -> xxx.yyy.255.245:1433 SYN ******S* Dec 11 19:57:02 210.18.64.116:2215 -> xxx.yyy.255.242:1433 SYN ******S* 38640 Dec 11 13:13:37 222.136.14.187:2722 -> xxx.yyy.1.1:4899 SYN ******S* Dec 11 13:13:36 222.136.14.187:2724 -> xxx.yyy.1.3:4899 SYN ******S* Dec 11 13:13:36 222.136.14.187:2725 -> xxx.yyy.1.4:4899 SYN ******S* Dec 11 13:13:36 222.136.14.187:2727 -> xxx.yyy.1.6:4899 SYN ******S* Dec 11 13:13:36 222.136.14.187:2729 -> xxx.yyy.1.8:4899 SYN ******S* Dec 11 13:13:36 222.136.14.187:2734 -> xxx.yyy.1.13:4899 SYN ******S* Dec 11 13:13:36 222.136.14.187:2736 -> xxx.yyy.1.15:4899 SYN ******S* Dec 11 13:13:38 222.136.14.187:2738 -> xxx.yyy.1.17:4899 SYN ******S* [...] Dec 11 13:20:24 222.136.14.187:2668 -> xxx.yyy.254.62:4899 SYN ******S* Dec 11 13:20:24 222.136.14.187:2672 -> xxx.yyy.254.66:4899 SYN ******S* Dec 11 13:20:24 222.136.14.187:2675 -> xxx.yyy.254.69:4899 SYN ******S* Dec 11 13:20:24 222.136.14.187:2669 -> xxx.yyy.254.63:4899 SYN ******S* Dec 11 13:20:24 222.136.14.187:2679 -> xxx.yyy.254.73:4899 SYN ******S* Dec 11 13:20:24 222.136.14.187:2670 -> xxx.yyy.254.64:4899 SYN ******S* Dec 11 13:20:24 222.136.14.187:2667 -> xxx.yyy.254.61:4899 SYN ******S* Dec 11 13:20:24 222.136.14.187:2664 -> xxx.yyy.254.58:4899 SYN ******S* Dec 11 13:20:24 222.136.14.187:2677 -> xxx.yyy.254.71:4899 SYN ******S* 30623 Dec 11 06:24:07 220.70.167.67:11569 -> xxx.yyy.1.25:22 SYN ******S* Dec 11 06:24:07 220.70.167.67:11569 -> xxx.yyy.1.21:22 SYN ******S* Dec 11 06:24:07 220.70.167.67:11569 -> xxx.yyy.1.26:22 SYN ******S* Dec 11 06:24:07 220.70.167.67:11569 -> xxx.yyy.1.28:22 SYN ******S* Dec 11 06:24:07 220.70.167.67:11569 -> xxx.yyy.1.22:22 SYN ******S* Dec 11 06:24:07 220.70.167.67:11569 -> xxx.yyy.1.37:22 SYN ******S* Dec 11 06:24:07 220.70.167.67:11569 -> xxx.yyy.1.31:22 SYN ******S* Dec 11 06:24:07 220.70.167.67:11569 -> xxx.yyy.1.38:22 SYN ******S* [...] Dec 11 06:26:20 220.70.167.67:60696 -> xxx.yyy.241.36:22 SYN ******S* Dec 11 06:26:22 220.70.167.67:60697 -> xxx.yyy.243.45:22 SYN ******S* Dec 11 06:26:22 220.70.167.67:60698 -> xxx.yyy.241.176:22 SYN ******S* Dec 11 06:26:23 220.70.167.67:60699 -> xxx.yyy.241.72:22 SYN ******S* Dec 11 06:26:23 220.70.167.67:60700 -> xxx.yyy.241.87:22 SYN ******S* Dec 11 06:26:24 220.70.167.67:60701 -> xxx.yyy.241.184:22 SYN ******S* Dec 11 06:26:28 220.70.167.67:60702 -> xxx.yyy.241.87:22 SYN ******S* Dec 11 06:26:31 220.70.167.67:60703 -> xxx.yyy.241.184:22 SYN ******S* 29424 Dec 11 06:18:21 137.139.15.31:40492 -> xxx.yyy.1.20:111 SYN ******S* Dec 11 06:18:21 137.139.15.31:40493 -> xxx.yyy.1.21:111 SYN ******S* Dec 11 06:18:21 137.139.15.31:40494 -> xxx.yyy.1.22:111 SYN ******S* Dec 11 06:18:21 137.139.15.31:40495 -> xxx.yyy.1.23:111 SYN ******S* Dec 11 06:18:21 137.139.15.31:40496 -> xxx.yyy.1.24:111 SYN ******S* Dec 11 06:18:21 137.139.15.31:40497 -> xxx.yyy.1.25:111 SYN ******S* Dec 11 06:18:21 137.139.15.31:40498 -> xxx.yyy.1.26:111 SYN ******S* Dec 11 06:18:21 137.139.15.31:40500 -> xxx.yyy.1.28:111 SYN ******S* [...] Dec 11 06:35:52 137.139.15.31:40253 -> xxx.yyy.255.251:111 SYN ******S* Dec 11 06:35:52 137.139.15.31:40249 -> xxx.yyy.255.248:111 SYN ******S* Dec 11 06:35:52 137.139.15.31:40252 -> xxx.yyy.255.250:111 SYN ******S* Dec 11 06:35:52 137.139.15.31:40254 -> xxx.yyy.255.252:111 SYN ******S* Dec 11 06:35:52 137.139.15.31:40251 -> xxx.yyy.255.247:111 SYN ******S* Dec 11 06:35:52 137.139.15.31:40248 -> xxx.yyy.255.246:111 SYN ******S* Dec 11 06:35:52 137.139.15.31:40255 -> xxx.yyy.255.253:111 SYN ******S* Dec 11 06:35:52 137.139.15.31:40256 -> xxx.yyy.255.254:111 SYN ******S* Dec 11 06:35:52 137.139.15.31:40257 -> xxx.yyy.255.255:111 SYN ******S* 28594 Dec 11 06:02:04 212.181.210.223:2544 -> xxx.yyy.1.0:1433 SYN ******S* Dec 11 06:02:04 212.181.210.223:2545 -> xxx.yyy.1.1:1433 SYN ******S* Dec 11 06:02:04 212.181.210.223:2546 -> xxx.yyy.1.2:1433 SYN ******S* Dec 11 06:02:04 212.181.210.223:2547 -> xxx.yyy.1.3:1433 SYN ******S* Dec 11 06:02:01 212.181.210.223:2548 -> xxx.yyy.1.4:1433 SYN ******S* Dec 11 06:02:04 212.181.210.223:2549 -> xxx.yyy.1.5:1433 SYN ******S* Dec 11 06:02:04 212.181.210.223:2550 -> xxx.yyy.1.6:1433 SYN ******S* Dec 11 06:02:04 212.181.210.223:2551 -> xxx.yyy.1.7:1433 SYN ******S* [...] Dec 11 07:21:04 212.181.210.223:2690 -> xxx.yyy.89.9:1433 SYN ******S* Dec 11 07:21:04 212.181.210.223:2689 -> xxx.yyy.89.8:1433 SYN ******S* Dec 11 07:21:04 212.181.210.223:2695 -> xxx.yyy.89.14:1433 SYN ******S* Dec 11 07:21:04 212.181.210.223:2694 -> xxx.yyy.89.13:1433 SYN ******S* Dec 11 07:21:04 212.181.210.223:2701 -> xxx.yyy.89.19:1433 SYN ******S* Dec 11 07:21:04 212.181.210.223:2700 -> xxx.yyy.89.18:1433 SYN ******S* Dec 11 07:21:04 212.181.210.223:2699 -> xxx.yyy.89.17:1433 SYN ******S* Dec 11 07:21:04 212.181.210.223:2698 -> xxx.yyy.89.16:1433 SYN ******S* Dec 11 07:21:04 212.181.210.223:2697 -> xxx.yyy.89.15:1433 SYN ******S* 26320 Dec 11 11:37:48 207.234.185.131:25663 -> xxx.yyy.1.0:1434 SYN ******S* Dec 11 11:37:48 207.234.185.131:24510 -> xxx.yyy.1.0:1433 SYN ******S* Dec 11 11:37:48 207.234.185.131:21591 -> xxx.yyy.1.1:1434 SYN ******S* Dec 11 11:37:48 207.234.185.131:21664 -> xxx.yyy.1.1:1433 SYN ******S* Dec 11 11:37:48 207.234.185.131:26459 -> xxx.yyy.1.2:1434 SYN ******S* Dec 11 11:37:48 207.234.185.131:22496 -> xxx.yyy.1.2:1433 SYN ******S* Dec 11 11:37:48 207.234.185.131:23421 -> xxx.yyy.1.3:1434 SYN ******S* Dec 11 11:37:48 207.234.185.131:24775 -> xxx.yyy.1.3:1433 SYN ******S* [...] Dec 11 11:42:08 207.234.185.131:25980 -> xxx.yyy.247.142:1434 SYN ******S* Dec 11 11:42:08 207.234.185.131:24671 -> xxx.yyy.247.142:1433 SYN ******S* Dec 11 11:42:08 207.234.185.131:22864 -> xxx.yyy.247.143:1434 SYN ******S* Dec 11 11:42:08 207.234.185.131:26475 -> xxx.yyy.247.143:1433 SYN ******S* Dec 11 11:42:08 207.234.185.131:26062 -> xxx.yyy.247.144:1434 SYN ******S* Dec 11 11:42:08 207.234.185.131:24151 -> xxx.yyy.247.144:1433 SYN ******S* Dec 11 11:42:08 207.234.185.131:23105 -> xxx.yyy.247.145:1434 SYN ******S* Dec 11 11:42:08 207.234.185.131:22881 -> xxx.yyy.247.145:1433 SYN ******S* 25716 Dec 11 20:45:04 221.139.57.14:2079 -> xxx.yyy.1.6:1433 SYN ******S* Dec 11 20:45:01 221.139.57.14:2096 -> xxx.yyy.1.14:1433 SYN ******S* Dec 11 20:45:04 221.139.57.14:2104 -> xxx.yyy.1.16:1433 SYN ******S* Dec 11 20:45:04 221.139.57.14:2105 -> xxx.yyy.1.17:1433 SYN ******S* Dec 11 20:45:04 221.139.57.14:2196 -> xxx.yyy.1.18:1433 SYN ******S* Dec 11 20:45:02 221.139.57.14:2218 -> xxx.yyy.1.20:1433 SYN ******S* Dec 11 20:45:05 221.139.57.14:2226 -> xxx.yyy.1.21:1433 SYN ******S* Dec 11 20:45:02 221.139.57.14:2236 -> xxx.yyy.1.22:1433 SYN ******S* [...] Dec 11 22:25:22 221.139.57.14:3395 -> xxx.yyy.111.242:1433 SYN ******S* Dec 11 22:25:22 221.139.57.14:3424 -> xxx.yyy.111.243:1433 SYN ******S* Dec 11 22:25:22 221.139.57.14:3435 -> xxx.yyy.111.245:1433 SYN ******S* Dec 11 22:25:23 221.139.57.14:3602 -> xxx.yyy.111.248:1433 SYN ******S* Dec 11 22:25:23 221.139.57.14:3607 -> xxx.yyy.111.249:1433 SYN ******S* Dec 11 22:25:24 221.139.57.14:3633 -> xxx.yyy.111.250:1433 SYN ******S* Dec 11 22:25:24 221.139.57.14:3637 -> xxx.yyy.111.251:1433 SYN ******S* Dec 11 22:25:24 221.139.57.14:3659 -> xxx.yyy.111.253:1433 SYN ******S* Dec 11 22:25:25 221.139.57.14:3688 -> xxx.yyy.111.255:1433 SYN ******S* 22880 [...] 20588 Dec 11 10:53:47 67.68.11.155:2806 -> xxx.yyy.1.0:1433 SYN ******S* Dec 11 10:53:50 67.68.11.155:2808 -> xxx.yyy.1.1:1433 SYN ******S* Dec 11 10:53:51 67.68.11.155:2810 -> xxx.yyy.1.2:1433 SYN ******S* Dec 11 10:53:51 67.68.11.155:2812 -> xxx.yyy.1.3:1433 SYN ******S* Dec 11 10:53:51 67.68.11.155:2814 -> xxx.yyy.1.4:1433 SYN ******S* Dec 11 10:53:51 67.68.11.155:2816 -> xxx.yyy.1.5:1433 SYN ******S* Dec 11 10:53:51 67.68.11.155:2818 -> xxx.yyy.1.6:1433 SYN ******S* Dec 11 10:53:51 67.68.11.155:2819 -> xxx.yyy.1.7:1433 SYN ******S* [...] Dec 11 18:06:47 67.68.11.155:3601 -> xxx.yyy.204.62:1433 SYN ******S* Dec 11 18:06:48 67.68.11.155:3604 -> xxx.yyy.204.65:1433 SYN ******S* Dec 11 18:06:48 67.68.11.155:3611 -> xxx.yyy.204.67:1433 SYN ******S* Dec 11 18:06:55 67.68.11.155:3677 -> xxx.yyy.204.70:1433 SYN ******S* Dec 11 18:06:56 67.68.11.155:3678 -> xxx.yyy.204.71:1433 SYN ******S* Dec 11 18:06:56 67.68.11.155:3680 -> xxx.yyy.204.73:1433 SYN ******S* Dec 11 18:06:56 67.68.11.155:3684 -> xxx.yyy.204.77:1433 SYN ******S* Dec 11 18:06:57 67.68.11.155:3686 -> xxx.yyy.204.79:1433 SYN ******S* Dec 11 18:06:57 67.68.11.155:3687 -> xxx.yyy.204.80:1433 SYN ******S* 20137 [...] 17215 Dec 11 19:13:37 221.208.42.245:4988 -> xxx.yyy.10.0:1433 SYN ******S* Dec 11 19:13:37 221.208.42.245:4996 -> xxx.yyy.10.3:1433 SYN ******S* Dec 11 19:13:37 221.208.42.245:4997 -> xxx.yyy.10.4:1433 SYN ******S* Dec 11 19:13:37 221.208.42.245:4998 -> xxx.yyy.10.5:1433 SYN ******S* Dec 11 19:13:37 221.208.42.245:3004 -> xxx.yyy.10.6:1433 SYN ******S* Dec 11 19:13:37 221.208.42.245:3005 -> xxx.yyy.10.7:1433 SYN ******S* Dec 11 19:13:34 221.208.42.245:3016 -> xxx.yyy.10.9:1433 SYN ******S* Dec 11 19:13:34 221.208.42.245:3019 -> xxx.yyy.10.10:1433 SYN ******S* [...] Dec 11 20:32:18 221.208.42.245:4407 -> xxx.yyy.92.74:1433 SYN ******S* Dec 11 20:32:18 221.208.42.245:4409 -> xxx.yyy.92.75:1433 SYN ******S* Dec 11 20:32:18 221.208.42.245:4410 -> xxx.yyy.92.76:1433 SYN ******S* Dec 11 20:32:18 221.208.42.245:4438 -> xxx.yyy.92.80:1433 SYN ******S* Dec 11 20:32:18 221.208.42.245:4437 -> xxx.yyy.92.79:1433 SYN ******S* Dec 11 20:32:18 221.208.42.245:4449 -> xxx.yyy.92.85:1433 SYN ******S* Dec 11 20:32:18 221.208.42.245:4444 -> xxx.yyy.92.82:1433 SYN ******S* Dec 11 20:32:18 221.208.42.245:4442 -> xxx.yyy.92.81:1433 SYN ******S* Dec 11 20:32:18 221.208.42.245:4445 -> xxx.yyy.92.83:1433 SYN ******S* 16799 Dec 11 14:47:25 195.56.207.118:3360 -> xxx.yyy.1.0:1433 SYN ******S* Dec 11 14:47:22 195.56.207.118:3364 -> xxx.yyy.1.2:1433 SYN ******S* Dec 11 14:47:22 195.56.207.118:3367 -> xxx.yyy.1.3:1433 SYN ******S* Dec 11 14:47:22 195.56.207.118:3369 -> xxx.yyy.1.4:1433 SYN ******S* Dec 11 14:47:22 195.56.207.118:3378 -> xxx.yyy.1.8:1433 SYN ******S* Dec 11 14:47:25 195.56.207.118:3383 -> xxx.yyy.1.10:1433 SYN ******S* Dec 11 14:47:25 195.56.207.118:3385 -> xxx.yyy.1.11:1433 SYN ******S* Dec 11 14:47:22 195.56.207.118:3389 -> xxx.yyy.1.13:1433 SYN ******S* [...] Dec 11 16:01:50 195.56.207.118:4615 -> xxx.yyy.84.5:1433 SYN ******S* Dec 11 16:01:50 195.56.207.118:4310 -> xxx.yyy.83.225:1433 SYN ******S* Dec 11 16:01:50 195.56.207.118:4311 -> xxx.yyy.83.226:1433 SYN ******S* Dec 11 16:01:50 195.56.207.118:4632 -> xxx.yyy.84.7:1433 SYN ******S* Dec 11 16:01:50 195.56.207.118:4643 -> xxx.yyy.84.8:1433 SYN ******S* Dec 11 16:01:50 195.56.207.118:4645 -> xxx.yyy.84.9:1433 SYN ******S* Dec 11 16:01:50 195.56.207.118:4317 -> xxx.yyy.83.228:1433 SYN ******S* Dec 11 16:01:50 195.56.207.118:4315 -> xxx.yyy.83.227:1433 SYN ******S* Dec 11 16:01:51 195.56.207.118:4650 -> xxx.yyy.84.11:1433 SYN ******S* 16208 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions