[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Dec 17 17:53:39 165.247.109.162:3415 -> xxx.yyy.1.6:1433 SYN ******S* Dec 17 17:53:39 165.247.109.162:3411 -> xxx.yyy.1.5:1433 SYN ******S* Dec 17 17:53:39 165.247.109.162:3413 -> xxx.yyy.1.3:1433 SYN ******S* Dec 17 17:53:39 165.247.109.162:3410 -> xxx.yyy.1.4:1433 SYN ******S* Dec 17 17:53:39 165.247.109.162:3412 -> xxx.yyy.1.1:1433 SYN ******S* Dec 17 17:53:39 165.247.109.162:3414 -> xxx.yyy.1.2:1433 SYN ******S* Dec 17 17:53:39 165.247.109.162:3416 -> xxx.yyy.1.7:1433 SYN ******S* Dec 17 17:53:39 165.247.109.162:3417 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 17 19:47:59 165.247.109.162:2244 -> xxx.yyy.255.212:1433 SYN ******S* Dec 17 19:48:00 165.247.109.162:2239 -> xxx.yyy.255.209:1433 SYN ******S* Dec 17 19:48:00 165.247.109.162:2245 -> xxx.yyy.255.213:1433 SYN ******S* Dec 17 19:48:00 165.247.109.162:2247 -> xxx.yyy.255.215:1433 SYN ******S* Dec 17 19:48:00 165.247.109.162:2248 -> xxx.yyy.255.216:1433 SYN ******S* Dec 17 19:48:00 165.247.109.162:2241 -> xxx.yyy.255.210:1433 SYN ******S* Dec 17 19:48:00 165.247.109.162:2246 -> xxx.yyy.255.214:1433 SYN ******S* Dec 17 19:48:00 165.247.109.162:2251 -> xxx.yyy.255.219:1433 SYN ******S* Dec 17 19:48:01 165.247.109.162:2253 -> xxx.yyy.255.220:1433 SYN ******S* 116307 Dec 17 01:53:03 62.203.225.114:60620 -> xxx.yyy.68.211:1433 SYN ******S* Dec 17 01:53:03 62.203.225.114:60624 -> xxx.yyy.68.213:1433 SYN ******S* Dec 17 01:53:03 62.203.225.114:60625 -> xxx.yyy.68.214:1433 SYN ******S* Dec 17 01:53:03 62.203.225.114:60628 -> xxx.yyy.68.215:1433 SYN ******S* Dec 17 01:53:03 62.203.225.114:60629 -> xxx.yyy.68.216:1433 SYN ******S* Dec 17 01:53:03 62.203.225.114:60630 -> xxx.yyy.68.217:1433 SYN ******S* Dec 17 01:53:01 62.203.225.114:60634 -> xxx.yyy.68.218:1433 SYN ******S* Dec 17 01:53:01 62.203.225.114:60642 -> xxx.yyy.68.219:1433 SYN ******S* [...] Dec 17 04:40:51 62.203.225.114:51984 -> xxx.yyy.255.246:1433 SYN ******S* Dec 17 04:40:52 62.203.225.114:51985 -> xxx.yyy.255.247:1433 SYN ******S* Dec 17 04:40:52 62.203.225.114:51994 -> xxx.yyy.255.248:1433 SYN ******S* Dec 17 04:40:52 62.203.225.114:51996 -> xxx.yyy.255.249:1433 SYN ******S* Dec 17 04:40:52 62.203.225.114:52001 -> xxx.yyy.255.250:1433 SYN ******S* Dec 17 04:40:52 62.203.225.114:52004 -> xxx.yyy.255.251:1433 SYN ******S* Dec 17 04:40:52 62.203.225.114:52006 -> xxx.yyy.255.252:1433 SYN ******S* Dec 17 04:40:53 62.203.225.114:52008 -> xxx.yyy.255.254:1433 SYN ******S* Dec 17 04:40:53 62.203.225.114:52007 -> xxx.yyy.255.253:1433 SYN ******S* 107586 Dec 17 21:30:19 62.90.76.120:4248 -> xxx.yyy.1.1:1433 SYN ******S* Dec 17 21:30:19 62.90.76.120:4252 -> xxx.yyy.1.2:1433 SYN ******S* Dec 17 21:30:19 62.90.76.120:4254 -> xxx.yyy.1.3:1433 SYN ******S* Dec 17 21:30:19 62.90.76.120:4256 -> xxx.yyy.1.4:1433 SYN ******S* Dec 17 21:30:19 62.90.76.120:4259 -> xxx.yyy.1.5:1433 SYN ******S* Dec 17 21:30:19 62.90.76.120:4261 -> xxx.yyy.1.6:1433 SYN ******S* Dec 17 21:30:19 62.90.76.120:4262 -> xxx.yyy.1.7:1433 SYN ******S* Dec 17 21:30:19 62.90.76.120:4265 -> xxx.yyy.1.9:1433 SYN ******S* [...] Dec 17 23:24:40 62.90.76.120:4514 -> xxx.yyy.255.246:1433 SYN ******S* Dec 17 23:24:40 62.90.76.120:4509 -> xxx.yyy.255.245:1433 SYN ******S* Dec 17 23:24:40 62.90.76.120:4540 -> xxx.yyy.255.247:1433 SYN ******S* Dec 17 23:24:41 62.90.76.120:4549 -> xxx.yyy.255.250:1433 SYN ******S* Dec 17 23:24:41 62.90.76.120:4551 -> xxx.yyy.255.251:1433 SYN ******S* Dec 17 23:24:41 62.90.76.120:4561 -> xxx.yyy.255.253:1433 SYN ******S* Dec 17 23:24:41 62.90.76.120:4557 -> xxx.yyy.255.252:1433 SYN ******S* Dec 17 23:24:41 62.90.76.120:4570 -> xxx.yyy.255.254:1433 SYN ******S* 106283 Dec 17 05:07:00 219.91.16.213:4912 -> xxx.yyy.128.0:1433 SYN ******S* Dec 17 05:07:00 219.91.16.213:4915 -> xxx.yyy.128.1:1433 SYN ******S* Dec 17 05:07:00 219.91.16.213:4918 -> xxx.yyy.128.2:1433 SYN ******S* Dec 17 05:07:00 219.91.16.213:4921 -> xxx.yyy.128.3:1433 SYN ******S* Dec 17 05:07:00 219.91.16.213:4924 -> xxx.yyy.128.4:1433 SYN ******S* Dec 17 05:07:00 219.91.16.213:4927 -> xxx.yyy.128.5:1433 SYN ******S* Dec 17 05:07:00 219.91.16.213:4930 -> xxx.yyy.128.6:1433 SYN ******S* Dec 17 05:07:00 219.91.16.213:4933 -> xxx.yyy.128.7:1433 SYN ******S* [...] Dec 17 07:01:57 219.91.16.213:3479 -> xxx.yyy.255.244:1433 SYN ******S* Dec 17 07:01:58 219.91.16.213:3482 -> xxx.yyy.255.247:1433 SYN ******S* Dec 17 07:01:58 219.91.16.213:3490 -> xxx.yyy.255.249:1433 SYN ******S* Dec 17 07:01:58 219.91.16.213:3489 -> xxx.yyy.255.248:1433 SYN ******S* Dec 17 07:01:58 219.91.16.213:3495 -> xxx.yyy.255.250:1433 SYN ******S* Dec 17 07:01:58 219.91.16.213:3498 -> xxx.yyy.255.251:1433 SYN ******S* Dec 17 07:01:58 219.91.16.213:3502 -> xxx.yyy.255.253:1433 SYN ******S* Dec 17 07:01:58 219.91.16.213:3501 -> xxx.yyy.255.252:1433 SYN ******S* Dec 17 07:01:58 219.91.16.213:3507 -> xxx.yyy.255.254:1433 SYN ******S* 92220 Dec 17 20:13:47 200.37.94.221:4027 -> xxx.yyy.1.18:1433 SYN ******S* Dec 17 20:13:47 200.37.94.221:4030 -> xxx.yyy.1.19:1433 SYN ******S* Dec 17 20:13:47 200.37.94.221:4031 -> xxx.yyy.1.36:1433 SYN ******S* Dec 17 20:13:47 200.37.94.221:4034 -> xxx.yyy.1.35:1433 SYN ******S* Dec 17 20:13:47 200.37.94.221:4035 -> xxx.yyy.1.34:1433 SYN ******S* Dec 17 20:13:47 200.37.94.221:4036 -> xxx.yyy.1.33:1433 SYN ******S* Dec 17 20:13:47 200.37.94.221:4049 -> xxx.yyy.1.28:1433 SYN ******S* Dec 17 20:13:44 200.37.94.221:4058 -> xxx.yyy.1.21:1433 SYN ******S* [...] Dec 17 23:01:06 200.37.94.221:3355 -> xxx.yyy.255.237:1433 SYN ******S* Dec 17 23:01:06 200.37.94.221:3640 -> xxx.yyy.255.247:1433 SYN ******S* Dec 17 23:01:06 200.37.94.221:3622 -> xxx.yyy.255.246:1433 SYN ******S* Dec 17 23:01:06 200.37.94.221:3611 -> xxx.yyy.255.245:1433 SYN ******S* Dec 17 23:01:06 200.37.94.221:3578 -> xxx.yyy.255.244:1433 SYN ******S* Dec 17 23:01:06 200.37.94.221:3710 -> xxx.yyy.255.248:1433 SYN ******S* Dec 17 23:01:07 200.37.94.221:3889 -> xxx.yyy.255.252:1433 SYN ******S* Dec 17 23:01:07 200.37.94.221:3815 -> xxx.yyy.255.250:1433 SYN ******S* Dec 17 23:01:07 200.37.94.221:4085 -> xxx.yyy.255.254:1433 SYN ******S* 89682 Dec 17 22:25:17 64.5.227.202:1111 -> xxx.yyy.1.2:1433 SYN ******S* Dec 17 22:25:17 64.5.227.202:1108 -> xxx.yyy.1.1:1433 SYN ******S* Dec 17 22:25:14 64.5.227.202:1112 -> xxx.yyy.1.3:1433 SYN ******S* Dec 17 22:25:17 64.5.227.202:1113 -> xxx.yyy.1.4:1433 SYN ******S* Dec 17 22:25:17 64.5.227.202:1114 -> xxx.yyy.1.5:1433 SYN ******S* Dec 17 22:25:17 64.5.227.202:1116 -> xxx.yyy.1.7:1433 SYN ******S* Dec 17 22:25:17 64.5.227.202:1115 -> xxx.yyy.1.6:1433 SYN ******S* Dec 17 22:25:17 64.5.227.202:1118 -> xxx.yyy.1.9:1433 SYN ******S* [...] Dec 17 22:55:47 64.5.227.202:1101 -> xxx.yyy.255.244:1433 SYN ******S* Dec 17 22:55:47 64.5.227.202:1069 -> xxx.yyy.255.212:1433 SYN ******S* Dec 17 22:55:47 64.5.227.202:1034 -> xxx.yyy.255.177:1433 SYN ******S* Dec 17 22:55:47 64.5.227.202:1053 -> xxx.yyy.255.196:1433 SYN ******S* Dec 17 22:55:47 64.5.227.202:1063 -> xxx.yyy.255.206:1433 SYN ******S* Dec 17 22:55:47 64.5.227.202:1050 -> xxx.yyy.255.193:1433 SYN ******S* Dec 17 22:55:47 64.5.227.202:1079 -> xxx.yyy.255.222:1433 SYN ******S* Dec 17 22:55:47 64.5.227.202:1031 -> xxx.yyy.255.174:1433 SYN ******S* 73629 Dec 17 11:44:20 128.93.23.80:39333 -> xxx.yyy.1.0:6112 SYN ******S* Dec 17 11:44:20 128.93.23.80:39335 -> xxx.yyy.1.2:6112 SYN ******S* Dec 17 11:44:23 128.93.23.80:39338 -> xxx.yyy.1.5:6112 SYN ******S* Dec 17 11:44:23 128.93.23.80:39339 -> xxx.yyy.1.6:6112 SYN ******S* Dec 17 11:44:20 128.93.23.80:39342 -> xxx.yyy.1.9:6112 SYN ******S* Dec 17 11:44:20 128.93.23.80:39343 -> xxx.yyy.1.10:6112 SYN ******S* Dec 17 11:44:20 128.93.23.80:39344 -> xxx.yyy.1.11:6112 SYN ******S* Dec 17 11:44:23 128.93.23.80:39345 -> xxx.yyy.1.12:6112 SYN ******S* [...] Dec 17 12:10:25 128.93.23.80:39081 -> xxx.yyy.255.246:6112 SYN ******S* Dec 17 12:10:25 128.93.23.80:39082 -> xxx.yyy.255.247:6112 SYN ******S* Dec 17 12:10:25 128.93.23.80:39083 -> xxx.yyy.255.248:6112 SYN ******S* Dec 17 12:10:25 128.93.23.80:39084 -> xxx.yyy.255.249:6112 SYN ******S* Dec 17 12:10:25 128.93.23.80:39085 -> xxx.yyy.255.250:6112 SYN ******S* Dec 17 12:10:25 128.93.23.80:39086 -> xxx.yyy.255.251:6112 SYN ******S* Dec 17 12:10:25 128.93.23.80:39087 -> xxx.yyy.255.252:6112 SYN ******S* Dec 17 12:10:25 128.93.23.80:39088 -> xxx.yyy.255.253:6112 SYN ******S* Dec 17 12:10:25 128.93.23.80:39089 -> xxx.yyy.255.254:6112 SYN ******S* 73117 Dec 17 04:08:16 199.174.241.87:2013 -> xxx.yyy.1.1:1433 SYN ******S* Dec 17 04:08:16 199.174.241.87:2014 -> xxx.yyy.1.2:1433 SYN ******S* Dec 17 04:08:16 199.174.241.87:2015 -> xxx.yyy.1.3:1433 SYN ******S* Dec 17 04:08:16 199.174.241.87:2016 -> xxx.yyy.1.4:1433 SYN ******S* Dec 17 04:08:16 199.174.241.87:2017 -> xxx.yyy.1.5:1433 SYN ******S* Dec 17 04:08:16 199.174.241.87:2019 -> xxx.yyy.1.7:1433 SYN ******S* Dec 17 04:08:16 199.174.241.87:2018 -> xxx.yyy.1.6:1433 SYN ******S* Dec 17 04:08:16 199.174.241.87:2020 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 17 05:27:37 199.174.241.87:1139 -> xxx.yyy.178.75:1433 SYN ******S* Dec 17 05:27:37 199.174.241.87:1150 -> xxx.yyy.178.86:1433 SYN ******S* Dec 17 05:27:37 199.174.241.87:1147 -> xxx.yyy.178.83:1433 SYN ******S* Dec 17 05:27:37 199.174.241.87:1151 -> xxx.yyy.178.87:1433 SYN ******S* Dec 17 05:27:37 199.174.241.87:1148 -> xxx.yyy.178.84:1433 SYN ******S* Dec 17 05:27:37 199.174.241.87:1152 -> xxx.yyy.178.88:1433 SYN ******S* Dec 17 05:27:37 199.174.241.87:1149 -> xxx.yyy.178.85:1433 SYN ******S* Dec 17 05:27:38 199.174.241.87:1216 -> xxx.yyy.178.94:1433 SYN ******S* Dec 17 05:27:38 199.174.241.87:1217 -> xxx.yyy.178.95:1433 SYN ******S* 72981 Dec 17 00:00:04 222.140.67.161:4208 -> xxx.yyy.138.26:1433 SYN ******S* Dec 17 00:00:07 222.140.67.161:4225 -> xxx.yyy.138.24:1433 SYN ******S* Dec 17 00:00:04 222.140.67.161:4250 -> xxx.yyy.138.27:1433 SYN ******S* Dec 17 00:00:04 222.140.67.161:4249 -> xxx.yyy.138.25:1433 SYN ******S* Dec 17 00:00:04 222.140.67.161:4024 -> xxx.yyy.137.230:1433 SYN ******S* Dec 17 00:00:07 222.140.67.161:4284 -> xxx.yyy.138.28:1433 SYN ******S* Dec 17 00:00:05 222.140.67.161:4162 -> xxx.yyy.138.9:1433 SYN ******S* Dec 17 00:00:05 222.140.67.161:4327 -> xxx.yyy.138.31:1433 SYN ******S* [...] Dec 17 01:47:27 222.140.67.161:3268 -> xxx.yyy.255.241:1433 SYN ******S* Dec 17 01:47:27 222.140.67.161:3277 -> xxx.yyy.255.243:1433 SYN ******S* Dec 17 01:47:28 222.140.67.161:3282 -> xxx.yyy.255.244:1433 SYN ******S* Dec 17 01:47:28 222.140.67.161:3283 -> xxx.yyy.255.245:1433 SYN ******S* Dec 17 01:47:28 222.140.67.161:3287 -> xxx.yyy.255.246:1433 SYN ******S* Dec 17 01:47:28 222.140.67.161:3290 -> xxx.yyy.255.247:1433 SYN ******S* Dec 17 01:47:28 222.140.67.161:3292 -> xxx.yyy.255.248:1433 SYN ******S* Dec 17 01:47:28 222.140.67.161:3301 -> xxx.yyy.255.249:1433 SYN ******S* 72752 Dec 17 06:48:35 194.96.35.43:3293 -> xxx.yyy.1.1:1433 SYN ******S* Dec 17 06:48:35 194.96.35.43:3294 -> xxx.yyy.1.2:1433 SYN ******S* Dec 17 06:48:35 194.96.35.43:3295 -> xxx.yyy.1.3:1433 SYN ******S* Dec 17 06:48:35 194.96.35.43:3296 -> xxx.yyy.1.4:1433 SYN ******S* Dec 17 06:48:35 194.96.35.43:3297 -> xxx.yyy.1.5:1433 SYN ******S* Dec 17 06:48:35 194.96.35.43:3298 -> xxx.yyy.1.6:1433 SYN ******S* Dec 17 06:48:39 194.96.35.43:3299 -> xxx.yyy.1.7:1433 SYN ******S* Dec 17 06:48:35 194.96.35.43:3300 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 17 06:59:45 194.96.35.43:1340 -> xxx.yyy.255.251:1433 SYN ******S* Dec 17 06:59:45 194.96.35.43:1336 -> xxx.yyy.255.247:1433 SYN ******S* Dec 17 06:59:45 194.96.35.43:1333 -> xxx.yyy.255.244:1433 SYN ******S* Dec 17 06:59:45 194.96.35.43:1341 -> xxx.yyy.255.252:1433 SYN ******S* Dec 17 06:59:45 194.96.35.43:1337 -> xxx.yyy.255.248:1433 SYN ******S* Dec 17 06:59:45 194.96.35.43:1334 -> xxx.yyy.255.245:1433 SYN ******S* Dec 17 06:59:45 194.96.35.43:1338 -> xxx.yyy.255.249:1433 SYN ******S* Dec 17 06:59:46 194.96.35.43:1343 -> xxx.yyy.255.254:1433 SYN ******S* 72686 Dec 17 00:59:56 208.218.73.138:3043 -> xxx.yyy.1.3:4899 SYN ******S* Dec 17 00:59:58 208.218.73.138:3044 -> xxx.yyy.1.4:4899 SYN ******S* Dec 17 00:59:58 208.218.73.138:3045 -> xxx.yyy.1.5:4899 SYN ******S* Dec 17 00:59:55 208.218.73.138:3046 -> xxx.yyy.1.6:4899 SYN ******S* Dec 17 00:59:56 208.218.73.138:3042 -> xxx.yyy.1.2:4899 SYN ******S* Dec 17 00:59:56 208.218.73.138:3049 -> xxx.yyy.1.9:4899 SYN ******S* Dec 17 00:59:58 208.218.73.138:3050 -> xxx.yyy.1.10:4899 SYN ******S* Dec 17 00:59:56 208.218.73.138:3051 -> xxx.yyy.1.11:4899 SYN ******S* [...] Dec 17 01:26:16 208.218.73.138:2629 -> xxx.yyy.255.245:4899 SYN ******S* Dec 17 01:26:16 208.218.73.138:2634 -> xxx.yyy.255.250:4899 SYN ******S* Dec 17 01:26:16 208.218.73.138:2635 -> xxx.yyy.255.251:4899 SYN ******S* Dec 17 01:26:16 208.218.73.138:2631 -> xxx.yyy.255.247:4899 SYN ******S* Dec 17 01:26:16 208.218.73.138:2628 -> xxx.yyy.255.244:4899 SYN ******S* Dec 17 01:26:16 208.218.73.138:2632 -> xxx.yyy.255.248:4899 SYN ******S* Dec 17 01:26:16 208.218.73.138:2626 -> xxx.yyy.255.242:4899 SYN ******S* Dec 17 01:26:16 208.218.73.138:2633 -> xxx.yyy.255.249:4899 SYN ******S* 71766 Dec 17 20:50:26 68.15.192.75:3121 -> xxx.yyy.1.1:4000 SYN ******S* Dec 17 20:50:26 68.15.192.75:3124 -> xxx.yyy.1.2:4000 SYN ******S* Dec 17 20:50:29 68.15.192.75:3128 -> xxx.yyy.1.4:4000 SYN ******S* Dec 17 20:50:29 68.15.192.75:3130 -> xxx.yyy.1.5:4000 SYN ******S* Dec 17 20:50:29 68.15.192.75:3132 -> xxx.yyy.1.6:4000 SYN ******S* Dec 17 20:50:29 68.15.192.75:3136 -> xxx.yyy.1.7:4000 SYN ******S* Dec 17 20:50:29 68.15.192.75:3139 -> xxx.yyy.1.8:4000 SYN ******S* Dec 17 20:50:29 68.15.192.75:3141 -> xxx.yyy.1.9:4000 SYN ******S* [...] Dec 17 21:02:19 68.15.192.75:3518 -> xxx.yyy.255.246:4000 SYN ******S* Dec 17 21:02:19 68.15.192.75:3520 -> xxx.yyy.255.247:4000 SYN ******S* Dec 17 21:02:19 68.15.192.75:3522 -> xxx.yyy.255.248:4000 SYN ******S* Dec 17 21:02:19 68.15.192.75:3524 -> xxx.yyy.255.249:4000 SYN ******S* Dec 17 21:02:19 68.15.192.75:3530 -> xxx.yyy.255.252:4000 SYN ******S* Dec 17 21:02:19 68.15.192.75:3526 -> xxx.yyy.255.250:4000 SYN ******S* Dec 17 21:02:19 68.15.192.75:3528 -> xxx.yyy.255.251:4000 SYN ******S* Dec 17 21:02:19 68.15.192.75:3532 -> xxx.yyy.255.253:4000 SYN ******S* 70360 Dec 17 19:25:36 217.66.251.29:1678 -> xxx.yyy.1.1:42 SYN ******S* Dec 17 19:25:39 217.66.251.29:1680 -> xxx.yyy.1.3:42 SYN ******S* Dec 17 19:25:39 217.66.251.29:1681 -> xxx.yyy.1.4:42 SYN ******S* Dec 17 19:25:39 217.66.251.29:1679 -> xxx.yyy.1.2:42 SYN ******S* Dec 17 19:25:39 217.66.251.29:1683 -> xxx.yyy.1.6:42 SYN ******S* Dec 17 19:25:39 217.66.251.29:1682 -> xxx.yyy.1.5:42 SYN ******S* Dec 17 19:25:36 217.66.251.29:1684 -> xxx.yyy.1.7:42 SYN ******S* Dec 17 19:25:36 217.66.251.29:1685 -> xxx.yyy.1.8:42 SYN ******S* [...] Dec 17 19:38:01 217.66.251.29:3757 -> xxx.yyy.255.247:42 SYN ******S* Dec 17 19:38:01 217.66.251.29:3755 -> xxx.yyy.255.245:42 SYN ******S* Dec 17 19:38:01 217.66.251.29:3754 -> xxx.yyy.255.244:42 SYN ******S* Dec 17 19:38:01 217.66.251.29:3762 -> xxx.yyy.255.252:42 SYN ******S* Dec 17 19:38:01 217.66.251.29:3763 -> xxx.yyy.255.253:42 SYN ******S* Dec 17 19:38:01 217.66.251.29:3759 -> xxx.yyy.255.249:42 SYN ******S* Dec 17 19:38:01 217.66.251.29:3764 -> xxx.yyy.255.254:42 SYN ******S* Dec 17 19:38:01 217.66.251.29:3761 -> xxx.yyy.255.251:42 SYN ******S* Dec 17 19:38:01 217.66.251.29:3760 -> xxx.yyy.255.250:42 SYN ******S* 69144 Dec 17 02:20:45 68.216.43.99:4966 -> xxx.yyy.1.1:6129 SYN ******S* Dec 17 02:20:45 68.216.43.99:4971 -> xxx.yyy.1.3:6129 SYN ******S* Dec 17 02:20:47 68.216.43.99:4973 -> xxx.yyy.1.4:6129 SYN ******S* Dec 17 02:20:47 68.216.43.99:4975 -> xxx.yyy.1.5:6129 SYN ******S* Dec 17 02:20:47 68.216.43.99:4977 -> xxx.yyy.1.6:6129 SYN ******S* Dec 17 02:20:47 68.216.43.99:4979 -> xxx.yyy.1.7:6129 SYN ******S* Dec 17 02:20:44 68.216.43.99:4981 -> xxx.yyy.1.8:6129 SYN ******S* Dec 17 02:20:45 68.216.43.99:4983 -> xxx.yyy.1.9:6129 SYN ******S* [...] Dec 17 02:32:33 68.216.43.99:3614 -> xxx.yyy.255.251:6129 SYN ******S* Dec 17 02:32:33 68.216.43.99:3611 -> xxx.yyy.255.248:6129 SYN ******S* Dec 17 02:32:33 68.216.43.99:3615 -> xxx.yyy.255.252:6129 SYN ******S* Dec 17 02:32:33 68.216.43.99:3612 -> xxx.yyy.255.249:6129 SYN ******S* Dec 17 02:32:33 68.216.43.99:3609 -> xxx.yyy.255.246:6129 SYN ******S* Dec 17 02:32:33 68.216.43.99:3616 -> xxx.yyy.255.253:6129 SYN ******S* Dec 17 02:32:33 68.216.43.99:3613 -> xxx.yyy.255.250:6129 SYN ******S* Dec 17 02:32:33 68.216.43.99:3610 -> xxx.yyy.255.247:6129 SYN ******S* 67116 Dec 17 12:54:06 80.171.42.132:3266 -> xxx.yyy.1.1:1433 SYN ******S* Dec 17 12:54:09 80.171.42.132:3267 -> xxx.yyy.1.2:1433 SYN ******S* Dec 17 12:54:09 80.171.42.132:3268 -> xxx.yyy.1.3:1433 SYN ******S* Dec 17 12:54:06 80.171.42.132:3269 -> xxx.yyy.1.4:1433 SYN ******S* Dec 17 12:54:06 80.171.42.132:3272 -> xxx.yyy.1.7:1433 SYN ******S* Dec 17 12:54:09 80.171.42.132:3273 -> xxx.yyy.1.8:1433 SYN ******S* Dec 17 12:54:09 80.171.42.132:3274 -> xxx.yyy.1.9:1433 SYN ******S* Dec 17 12:54:09 80.171.42.132:3276 -> xxx.yyy.1.11:1433 SYN ******S* [...] Dec 17 13:05:46 80.171.42.132:4383 -> xxx.yyy.255.236:1433 SYN ******S* Dec 17 13:05:46 80.171.42.132:4384 -> xxx.yyy.255.237:1433 SYN ******S* Dec 17 13:05:46 80.171.42.132:4388 -> xxx.yyy.255.241:1433 SYN ******S* Dec 17 13:05:46 80.171.42.132:4389 -> xxx.yyy.255.242:1433 SYN ******S* Dec 17 13:05:46 80.171.42.132:4392 -> xxx.yyy.255.245:1433 SYN ******S* Dec 17 13:05:46 80.171.42.132:4393 -> xxx.yyy.255.246:1433 SYN ******S* Dec 17 13:05:46 80.171.42.132:4394 -> xxx.yyy.255.247:1433 SYN ******S* Dec 17 13:05:46 80.171.42.132:4396 -> xxx.yyy.255.249:1433 SYN ******S* Dec 17 13:05:46 80.171.42.132:4406 -> xxx.yyy.255.254:1433 SYN ******S* 62776 Dec 17 15:03:43 144.96.164.183:4806 -> xxx.yyy.1.1:1433 SYN ******S* Dec 17 15:03:43 144.96.164.183:4807 -> xxx.yyy.1.2:1433 SYN ******S* Dec 17 15:03:43 144.96.164.183:4808 -> xxx.yyy.1.3:1433 SYN ******S* Dec 17 15:03:43 144.96.164.183:4809 -> xxx.yyy.1.4:1433 SYN ******S* Dec 17 15:03:43 144.96.164.183:4810 -> xxx.yyy.1.5:1433 SYN ******S* Dec 17 15:03:43 144.96.164.183:4811 -> xxx.yyy.1.6:1433 SYN ******S* Dec 17 15:03:43 144.96.164.183:4812 -> xxx.yyy.1.7:1433 SYN ******S* Dec 17 15:03:43 144.96.164.183:4815 -> xxx.yyy.1.10:1433 SYN ******S* [...] Dec 17 15:14:37 144.96.164.183:3453 -> xxx.yyy.255.240:1433 SYN ******S* Dec 17 15:14:37 144.96.164.183:3457 -> xxx.yyy.255.244:1433 SYN ******S* Dec 17 15:14:37 144.96.164.183:3464 -> xxx.yyy.255.251:1433 SYN ******S* Dec 17 15:14:37 144.96.164.183:3458 -> xxx.yyy.255.245:1433 SYN ******S* Dec 17 15:14:37 144.96.164.183:3461 -> xxx.yyy.255.248:1433 SYN ******S* Dec 17 15:14:37 144.96.164.183:3459 -> xxx.yyy.255.246:1433 SYN ******S* Dec 17 15:14:37 144.96.164.183:3463 -> xxx.yyy.255.250:1433 SYN ******S* Dec 17 15:14:37 144.96.164.183:3462 -> xxx.yyy.255.249:1433 SYN ******S* 61772 Dec 17 03:23:57 221.208.20.182:3724 -> xxx.yyy.1.21:1433 SYN ******S* Dec 17 03:24:00 221.208.20.182:3726 -> xxx.yyy.1.22:1433 SYN ******S* Dec 17 03:23:57 221.208.20.182:3719 -> xxx.yyy.1.20:1433 SYN ******S* Dec 17 03:23:57 221.208.20.182:3720 -> xxx.yyy.1.19:1433 SYN ******S* Dec 17 03:24:00 221.208.20.182:3733 -> xxx.yyy.1.24:1433 SYN ******S* Dec 17 03:23:58 221.208.20.182:3742 -> xxx.yyy.1.26:1433 SYN ******S* Dec 17 03:23:58 221.208.20.182:3732 -> xxx.yyy.1.23:1433 SYN ******S* Dec 17 03:23:58 221.208.20.182:3741 -> xxx.yyy.1.25:1433 SYN ******S* [...] Dec 17 05:37:23 221.208.20.182:3026 -> xxx.yyy.147.138:1433 SYN ******S* Dec 17 05:37:23 221.208.20.182:3345 -> xxx.yyy.147.197:1433 SYN ******S* Dec 17 05:37:23 221.208.20.182:3281 -> xxx.yyy.147.164:1433 SYN ******S* Dec 17 05:37:23 221.208.20.182:3346 -> xxx.yyy.147.198:1433 SYN ******S* Dec 17 05:37:23 221.208.20.182:3347 -> xxx.yyy.147.199:1433 SYN ******S* Dec 17 05:37:24 221.208.20.182:3288 -> xxx.yyy.147.167:1433 SYN ******S* Dec 17 05:37:24 221.208.20.182:3351 -> xxx.yyy.147.200:1433 SYN ******S* Dec 17 05:37:24 221.208.20.182:3352 -> xxx.yyy.147.201:1433 SYN ******S* 47924 Dec 17 12:29:42 200.54.172.178:3179 -> xxx.yyy.10.1:4899 SYN ******S* Dec 17 12:29:42 200.54.172.178:3180 -> xxx.yyy.10.2:4899 SYN ******S* Dec 17 12:29:42 200.54.172.178:3181 -> xxx.yyy.10.3:4899 SYN ******S* Dec 17 12:29:42 200.54.172.178:3182 -> xxx.yyy.10.4:4899 SYN ******S* Dec 17 12:29:41 200.54.172.178:3188 -> xxx.yyy.10.5:4899 SYN ******S* Dec 17 12:29:41 200.54.172.178:3189 -> xxx.yyy.10.6:4899 SYN ******S* Dec 17 12:29:41 200.54.172.178:3191 -> xxx.yyy.10.7:4899 SYN ******S* Dec 17 12:29:41 200.54.172.178:3192 -> xxx.yyy.10.8:4899 SYN ******S* [...] Dec 17 12:42:27 200.54.172.178:3807 -> xxx.yyy.254.248:4899 SYN ******S* Dec 17 12:42:27 200.54.172.178:3811 -> xxx.yyy.254.251:4899 SYN ******S* Dec 17 12:42:27 200.54.172.178:3812 -> xxx.yyy.254.252:4899 SYN ******S* Dec 17 12:42:27 200.54.172.178:3813 -> xxx.yyy.254.253:4899 SYN ******S* Dec 17 12:42:28 200.54.172.178:3509 -> xxx.yyy.254.65:4899 SYN ******S* Dec 17 12:42:28 200.54.172.178:3511 -> xxx.yyy.254.66:4899 SYN ******S* Dec 17 12:42:28 200.54.172.178:3508 -> xxx.yyy.254.64:4899 SYN ******S* Dec 17 12:42:28 200.54.172.178:3505 -> xxx.yyy.254.63:4899 SYN ******S* 45759 Dec 17 02:36:35 211.53.90.114:4546 -> xxx.yyy.1.1:4899 SYN ******S* Dec 17 02:36:35 211.53.90.114:4549 -> xxx.yyy.1.2:4899 SYN ******S* Dec 17 02:36:35 211.53.90.114:4550 -> xxx.yyy.1.3:4899 SYN ******S* Dec 17 02:36:34 211.53.90.114:4552 -> xxx.yyy.1.4:4899 SYN ******S* Dec 17 02:36:34 211.53.90.114:4553 -> xxx.yyy.1.5:4899 SYN ******S* Dec 17 02:36:34 211.53.90.114:4559 -> xxx.yyy.1.7:4899 SYN ******S* Dec 17 02:36:34 211.53.90.114:4558 -> xxx.yyy.1.6:4899 SYN ******S* Dec 17 02:36:34 211.53.90.114:4572 -> xxx.yyy.1.12:4899 SYN ******S* [...] Dec 17 02:41:32 211.53.90.114:1980 -> xxx.yyy.254.252:4899 SYN ******S* Dec 17 02:41:32 211.53.90.114:1972 -> xxx.yyy.254.245:4899 SYN ******S* Dec 17 02:41:32 211.53.90.114:1971 -> xxx.yyy.254.244:4899 SYN ******S* Dec 17 02:41:32 211.53.90.114:1961 -> xxx.yyy.254.236:4899 SYN ******S* Dec 17 02:41:32 211.53.90.114:1979 -> xxx.yyy.254.251:4899 SYN ******S* Dec 17 02:41:32 211.53.90.114:1981 -> xxx.yyy.254.253:4899 SYN ******S* Dec 17 02:41:32 211.53.90.114:1975 -> xxx.yyy.254.248:4899 SYN ******S* Dec 17 02:41:32 211.53.90.114:1977 -> xxx.yyy.254.249:4899 SYN ******S* Dec 17 02:41:32 211.53.90.114:1978 -> xxx.yyy.254.250:4899 SYN ******S* 41733 Dec 17 12:23:03 219.117.242.252:3163 -> xxx.yyy.1.1:4899 SYN ******S* Dec 17 12:23:03 219.117.242.252:3164 -> xxx.yyy.1.2:4899 SYN ******S* Dec 17 12:23:02 219.117.242.252:3166 -> xxx.yyy.1.4:4899 SYN ******S* Dec 17 12:23:03 219.117.242.252:3165 -> xxx.yyy.1.3:4899 SYN ******S* Dec 17 12:23:02 219.117.242.252:3177 -> xxx.yyy.1.7:4899 SYN ******S* Dec 17 12:23:02 219.117.242.252:3178 -> xxx.yyy.1.8:4899 SYN ******S* Dec 17 12:23:05 219.117.242.252:3184 -> xxx.yyy.1.11:4899 SYN ******S* Dec 17 12:23:02 219.117.242.252:3183 -> xxx.yyy.1.10:4899 SYN ******S* [...] Dec 17 12:39:21 219.117.242.252:2749 -> xxx.yyy.255.235:4899 SYN ******S* Dec 17 12:39:21 219.117.242.252:2756 -> xxx.yyy.255.238:4899 SYN ******S* Dec 17 12:39:21 219.117.242.252:2759 -> xxx.yyy.255.240:4899 SYN ******S* Dec 17 12:39:21 219.117.242.252:2764 -> xxx.yyy.255.243:4899 SYN ******S* Dec 17 12:39:21 219.117.242.252:2763 -> xxx.yyy.255.242:4899 SYN ******S* Dec 17 12:39:21 219.117.242.252:2767 -> xxx.yyy.255.244:4899 SYN ******S* Dec 17 12:39:21 219.117.242.252:2768 -> xxx.yyy.255.245:4899 SYN ******S* Dec 17 12:39:21 219.117.242.252:2781 -> xxx.yyy.255.253:4899 SYN ******S* Dec 17 12:39:21 219.117.242.252:2782 -> xxx.yyy.255.254:4899 SYN ******S* 38800 Dec 17 02:16:24 203.236.214.206:80 -> xxx.yyy.1.6:80 SYN ******S* Dec 17 02:16:24 203.236.214.206:80 -> xxx.yyy.1.1:80 SYN ******S* Dec 17 02:16:24 203.236.214.206:80 -> xxx.yyy.1.3:80 SYN ******S* Dec 17 02:16:24 203.236.214.206:80 -> xxx.yyy.1.4:80 SYN ******S* Dec 17 02:16:24 203.236.214.206:80 -> xxx.yyy.1.2:80 SYN ******S* Dec 17 02:16:24 203.236.214.206:80 -> xxx.yyy.1.5:80 SYN ******S* Dec 17 02:16:24 203.236.214.206:80 -> xxx.yyy.1.7:80 SYN ******S* Dec 17 02:16:24 203.236.214.206:80 -> xxx.yyy.1.8:80 SYN ******S* [...] Dec 17 02:18:31 203.236.214.206:4509 -> xxx.yyy.248.45:80 SYN ******S* Dec 17 02:18:31 203.236.214.206:4510 -> xxx.yyy.248.80:80 SYN ******S* Dec 17 02:18:31 203.236.214.206:4511 -> xxx.yyy.249.249:80 SYN ******S* Dec 17 02:18:31 203.236.214.206:4512 -> xxx.yyy.249.5:80 SYN ******S* Dec 17 02:18:31 203.236.214.206:4513 -> xxx.yyy.252.124:80 SYN ******S* Dec 17 02:18:31 203.236.214.206:4516 -> xxx.yyy.253.72:80 SYN ******S* Dec 17 02:18:31 203.236.214.206:4517 -> xxx.yyy.29.214:80 SYN ******S* Dec 17 02:18:31 203.236.214.206:4514 -> xxx.yyy.252.20:80 SYN ******S* Dec 17 02:18:31 203.236.214.206:4515 -> xxx.yyy.252.21:80 SYN ******S* 38617 Dec 17 14:31:26 200.217.52.196:4363 -> xxx.yyy.1.2:1433 SYN ******S* Dec 17 14:31:26 200.217.52.196:4364 -> xxx.yyy.1.3:1433 SYN ******S* Dec 17 14:31:26 200.217.52.196:4367 -> xxx.yyy.1.4:1433 SYN ******S* Dec 17 14:31:23 200.217.52.196:4370 -> xxx.yyy.1.5:1433 SYN ******S* Dec 17 14:31:26 200.217.52.196:4373 -> xxx.yyy.1.6:1433 SYN ******S* Dec 17 14:31:26 200.217.52.196:4374 -> xxx.yyy.1.7:1433 SYN ******S* Dec 17 14:31:26 200.217.52.196:4377 -> xxx.yyy.1.8:1433 SYN ******S* Dec 17 14:31:26 200.217.52.196:4380 -> xxx.yyy.1.9:1433 SYN ******S* [...] Dec 17 15:33:49 200.217.52.196:3396 -> xxx.yyy.138.79:1433 SYN ******S* Dec 17 15:33:49 200.217.52.196:3458 -> xxx.yyy.138.112:1433 SYN ******S* Dec 17 15:33:49 200.217.52.196:3280 -> xxx.yyy.138.33:1433 SYN ******S* Dec 17 15:33:49 200.217.52.196:3399 -> xxx.yyy.138.82:1433 SYN ******S* Dec 17 15:33:49 200.217.52.196:3283 -> xxx.yyy.138.34:1433 SYN ******S* Dec 17 15:33:49 200.217.52.196:3462 -> xxx.yyy.138.114:1433 SYN ******S* Dec 17 15:33:49 200.217.52.196:3463 -> xxx.yyy.138.115:1433 SYN ******S* Dec 17 15:33:49 200.217.52.196:3464 -> xxx.yyy.138.116:1433 SYN ******S* 36513 Dec 17 03:28:06 82.169.98.102:19368 -> xxx.yyy.1.3:1433 SYN ******S* Dec 17 03:28:06 82.169.98.102:19371 -> xxx.yyy.1.5:1433 SYN ******S* Dec 17 03:28:06 82.169.98.102:19377 -> xxx.yyy.1.7:1433 SYN ******S* Dec 17 03:28:07 82.169.98.102:19386 -> xxx.yyy.1.11:1433 SYN ******S* Dec 17 03:28:07 82.169.98.102:19391 -> xxx.yyy.1.13:1433 SYN ******S* Dec 17 03:28:07 82.169.98.102:19395 -> xxx.yyy.1.14:1433 SYN ******S* Dec 17 03:28:07 82.169.98.102:19397 -> xxx.yyy.1.16:1433 SYN ******S* Dec 17 03:28:07 82.169.98.102:19398 -> xxx.yyy.1.17:1433 SYN ******S* [...] Dec 17 07:31:48 82.169.98.102:20448 -> xxx.yyy.255.236:1433 SYN ******S* Dec 17 07:31:48 82.169.98.102:21117 -> xxx.yyy.255.237:1433 SYN ******S* Dec 17 07:31:49 82.169.98.102:20470 -> xxx.yyy.255.239:1433 SYN ******S* Dec 17 07:31:49 82.169.98.102:20201 -> xxx.yyy.255.240:1433 SYN ******S* Dec 17 07:31:49 82.169.98.102:20485 -> xxx.yyy.255.241:1433 SYN ******S* Dec 17 07:31:49 82.169.98.102:20493 -> xxx.yyy.255.242:1433 SYN ******S* Dec 17 07:31:50 82.169.98.102:20501 -> xxx.yyy.255.244:1433 SYN ******S* Dec 17 07:31:52 82.169.98.102:20904 -> xxx.yyy.255.252:1433 SYN ******S* 35311 Dec 17 20:46:04 60.185.20.90:2503 -> xxx.yyy.1.31:1433 SYN ******S* Dec 17 20:46:04 60.185.20.90:2505 -> xxx.yyy.1.32:1433 SYN ******S* Dec 17 20:46:05 60.185.20.90:2509 -> xxx.yyy.1.34:1433 SYN ******S* Dec 17 20:46:05 60.185.20.90:2512 -> xxx.yyy.1.35:1433 SYN ******S* Dec 17 20:46:02 60.185.20.90:2514 -> xxx.yyy.1.36:1433 SYN ******S* Dec 17 20:46:05 60.185.20.90:2518 -> xxx.yyy.1.38:1433 SYN ******S* Dec 17 20:46:05 60.185.20.90:2522 -> xxx.yyy.1.39:1433 SYN ******S* Dec 17 20:46:04 60.185.20.90:2452 -> xxx.yyy.1.1:1433 SYN ******S* [...] Dec 17 23:05:51 60.185.20.90:2521 -> xxx.yyy.156.168:1433 SYN ******S* Dec 17 23:05:51 60.185.20.90:2756 -> xxx.yyy.156.182:1433 SYN ******S* Dec 17 23:05:51 60.185.20.90:2763 -> xxx.yyy.156.184:1433 SYN ******S* Dec 17 23:05:52 60.185.20.90:2776 -> xxx.yyy.156.186:1433 SYN ******S* Dec 17 23:05:52 60.185.20.90:2778 -> xxx.yyy.156.188:1433 SYN ******S* Dec 17 23:05:52 60.185.20.90:2742 -> xxx.yyy.156.176:1433 SYN ******S* Dec 17 23:05:52 60.185.20.90:2743 -> xxx.yyy.156.177:1433 SYN ******S* Dec 17 23:05:52 60.185.20.90:2782 -> xxx.yyy.156.189:1433 SYN ******S* 32878 [...] 32516 Dec 17 03:08:41 211.161.88.128:2376 -> xxx.yyy.1.118:1433 SYN ******S* Dec 17 03:08:41 211.161.88.128:2377 -> xxx.yyy.1.119:1433 SYN ******S* Dec 17 03:08:41 211.161.88.128:2384 -> xxx.yyy.1.121:1433 SYN ******S* Dec 17 03:08:41 211.161.88.128:2382 -> xxx.yyy.1.120:1433 SYN ******S* Dec 17 03:08:41 211.161.88.128:2387 -> xxx.yyy.1.122:1433 SYN ******S* Dec 17 03:08:41 211.161.88.128:2401 -> xxx.yyy.1.123:1433 SYN ******S* Dec 17 03:08:41 211.161.88.128:2403 -> xxx.yyy.1.124:1433 SYN ******S* Dec 17 03:08:41 211.161.88.128:2405 -> xxx.yyy.1.125:1433 SYN ******S* [...] Dec 17 04:48:06 211.161.88.128:3426 -> xxx.yyy.111.248:1433 SYN ******S* Dec 17 04:48:06 211.161.88.128:3428 -> xxx.yyy.111.249:1433 SYN ******S* Dec 17 04:48:07 211.161.88.128:3441 -> xxx.yyy.111.250:1433 SYN ******S* Dec 17 04:48:07 211.161.88.128:3444 -> xxx.yyy.111.251:1433 SYN ******S* Dec 17 04:48:08 211.161.88.128:3449 -> xxx.yyy.111.252:1433 SYN ******S* Dec 17 04:48:08 211.161.88.128:3451 -> xxx.yyy.111.253:1433 SYN ******S* Dec 17 04:48:08 211.161.88.128:3456 -> xxx.yyy.111.255:1433 SYN ******S* Dec 17 04:48:08 211.161.88.128:3455 -> xxx.yyy.111.254:1433 SYN ******S* 32258 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions