[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Dec 20 03:05:49 221.194.22.194:2459 -> xxx.yyy.1.0:1433 SYN ******S* Dec 20 03:05:49 221.194.22.194:2460 -> xxx.yyy.1.1:1433 SYN ******S* Dec 20 03:05:49 221.194.22.194:2461 -> xxx.yyy.1.2:1433 SYN ******S* Dec 20 03:05:49 221.194.22.194:2462 -> xxx.yyy.1.3:1433 SYN ******S* Dec 20 03:05:49 221.194.22.194:2463 -> xxx.yyy.1.4:1433 SYN ******S* Dec 20 03:05:49 221.194.22.194:2464 -> xxx.yyy.1.5:1433 SYN ******S* Dec 20 03:05:49 221.194.22.194:2465 -> xxx.yyy.1.6:1433 SYN ******S* Dec 20 03:05:49 221.194.22.194:2466 -> xxx.yyy.1.7:1433 SYN ******S* [...] Dec 20 23:18:38 221.194.22.194:1258 -> xxx.yyy.196.12:1433 SYN ******S* Dec 20 23:18:38 221.194.22.194:4313 -> xxx.yyy.195.231:1433 SYN ******S* Dec 20 23:18:38 221.194.22.194:4383 -> xxx.yyy.195.232:1433 SYN ******S* Dec 20 23:18:38 221.194.22.194:4453 -> xxx.yyy.195.233:1433 SYN ******S* Dec 20 23:18:38 221.194.22.194:1321 -> xxx.yyy.196.14:1433 SYN ******S* Dec 20 23:18:38 221.194.22.194:1312 -> xxx.yyy.196.13:1433 SYN ******S* Dec 20 23:18:38 221.194.22.194:4459 -> xxx.yyy.195.234:1433 SYN ******S* Dec 20 23:18:38 221.194.22.194:1332 -> xxx.yyy.196.15:1433 SYN ******S* 200571 Dec 20 17:04:51 205.179.12.170:47494 -> xxx.yyy.4.1:80 SYN ******S* Dec 20 17:04:51 205.179.12.170:47497 -> xxx.yyy.10.1:80 SYN ******S* Dec 20 17:04:51 205.179.12.170:47499 -> xxx.yyy.14.1:80 SYN ******S* Dec 20 17:04:51 205.179.12.170:47500 -> xxx.yyy.16.1:80 SYN ******S* Dec 20 17:04:51 205.179.12.170:47502 -> xxx.yyy.20.1:80 SYN ******S* Dec 20 17:04:51 205.179.12.170:47503 -> xxx.yyy.22.1:80 SYN ******S* Dec 20 17:04:51 205.179.12.170:47508 -> xxx.yyy.32.1:80 SYN ******S* Dec 20 17:04:49 205.179.12.170:47524 -> xxx.yyy.64.1:80 SYN ******S* [...] Dec 20 23:59:54 205.179.12.170:64138 -> xxx.yyy.183.252:80 SYN ******S* Dec 20 23:59:57 205.179.12.170:64139 -> xxx.yyy.255.252:80 SYN ******S* Dec 20 23:59:57 205.179.12.170:64140 -> xxx.yyy.95.252:80 SYN ******S* Dec 20 23:59:57 205.179.12.170:64141 -> xxx.yyy.251.252:80 SYN ******S* Dec 20 23:59:57 205.179.12.170:64144 -> xxx.yyy.187.252:80 SYN ******S* Dec 20 23:59:57 205.179.12.170:64149 -> xxx.yyy.219.252:80 SYN ******S* Dec 20 23:59:57 205.179.12.170:64150 -> xxx.yyy.91.252:80 SYN ******S* Dec 20 23:59:57 205.179.12.170:64151 -> xxx.yyy.175.252:80 SYN ******S* Dec 20 23:59:56 205.179.12.170:64161 -> xxx.yyy.163.253:80 SYN ******S* 150377 Dec 20 03:32:21 81.172.76.42:1120 -> xxx.yyy.1.0:1433 SYN ******S* Dec 20 03:32:21 81.172.76.42:1121 -> xxx.yyy.1.1:1433 SYN ******S* Dec 20 03:32:21 81.172.76.42:1123 -> xxx.yyy.1.3:1433 SYN ******S* Dec 20 03:32:21 81.172.76.42:1122 -> xxx.yyy.1.2:1433 SYN ******S* Dec 20 03:32:21 81.172.76.42:1126 -> xxx.yyy.1.5:1433 SYN ******S* Dec 20 03:32:21 81.172.76.42:1124 -> xxx.yyy.1.4:1433 SYN ******S* Dec 20 03:32:21 81.172.76.42:1129 -> xxx.yyy.1.6:1433 SYN ******S* Dec 20 03:32:21 81.172.76.42:1133 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 20 07:30:54 81.172.76.42:2797 -> xxx.yyy.255.247:1433 SYN ******S* Dec 20 07:30:55 81.172.76.42:2866 -> xxx.yyy.255.248:1433 SYN ******S* Dec 20 07:30:55 81.172.76.42:2875 -> xxx.yyy.255.249:1433 SYN ******S* Dec 20 07:30:55 81.172.76.42:2891 -> xxx.yyy.255.250:1433 SYN ******S* Dec 20 07:30:55 81.172.76.42:2897 -> xxx.yyy.255.251:1433 SYN ******S* Dec 20 07:30:55 81.172.76.42:2902 -> xxx.yyy.255.252:1433 SYN ******S* Dec 20 07:30:55 81.172.76.42:2925 -> xxx.yyy.255.253:1433 SYN ******S* Dec 20 07:30:56 81.172.76.42:2939 -> xxx.yyy.255.254:1433 SYN ******S* 123982 Dec 20 06:36:02 200.104.224.173:4239 -> xxx.yyy.1.1:1433 SYN ******S* Dec 20 06:36:01 200.104.224.173:4240 -> xxx.yyy.1.2:1433 SYN ******S* Dec 20 06:36:01 200.104.224.173:4241 -> xxx.yyy.1.3:1433 SYN ******S* Dec 20 06:36:02 200.104.224.173:4242 -> xxx.yyy.1.4:1433 SYN ******S* Dec 20 06:36:01 200.104.224.173:4243 -> xxx.yyy.1.5:1433 SYN ******S* Dec 20 06:36:01 200.104.224.173:4246 -> xxx.yyy.1.6:1433 SYN ******S* Dec 20 06:36:02 200.104.224.173:4247 -> xxx.yyy.1.7:1433 SYN ******S* Dec 20 06:36:01 200.104.224.173:4248 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 20 14:20:26 200.104.224.173:3234 -> xxx.yyy.zzz.247:1433 SYN ******S* Dec 20 14:20:26 200.104.224.173:3231 -> xxx.yyy.zzz.245:1433 SYN ******S* Dec 20 14:20:26 200.104.224.173:3237 -> xxx.yyy.zzz.249:1433 SYN ******S* Dec 20 14:20:26 200.104.224.173:3238 -> xxx.yyy.zzz.250:1433 SYN ******S* Dec 20 14:20:26 200.104.224.173:3236 -> xxx.yyy.zzz.248:1433 SYN ******S* Dec 20 14:20:26 200.104.224.173:3243 -> xxx.yyy.zzz.251:1433 SYN ******S* Dec 20 14:20:27 200.104.224.173:3248 -> xxx.yyy.zzz.254:1433 SYN ******S* Dec 20 14:20:27 200.104.224.173:3246 -> xxx.yyy.zzz.252:1433 SYN ******S* Dec 20 14:20:27 200.104.224.173:3247 -> xxx.yyy.zzz.253:1433 SYN ******S* 123561 Dec 20 01:44:41 82.42.41.69:4204 -> xxx.yyy.1.0:1433 SYN ******S* Dec 20 01:44:41 82.42.41.69:4205 -> xxx.yyy.1.1:1433 SYN ******S* Dec 20 01:44:41 82.42.41.69:4206 -> xxx.yyy.1.2:1433 SYN ******S* Dec 20 01:44:41 82.42.41.69:4207 -> xxx.yyy.1.3:1433 SYN ******S* Dec 20 01:44:41 82.42.41.69:4208 -> xxx.yyy.1.4:1433 SYN ******S* Dec 20 01:44:41 82.42.41.69:4209 -> xxx.yyy.1.5:1433 SYN ******S* Dec 20 01:44:41 82.42.41.69:4210 -> xxx.yyy.1.6:1433 SYN ******S* Dec 20 01:44:41 82.42.41.69:4211 -> xxx.yyy.1.7:1433 SYN ******S* [...] Dec 20 05:33:19 82.42.41.69:4311 -> xxx.yyy.255.247:1433 SYN ******S* Dec 20 05:33:19 82.42.41.69:4315 -> xxx.yyy.255.250:1433 SYN ******S* Dec 20 05:33:19 82.42.41.69:4313 -> xxx.yyy.255.249:1433 SYN ******S* Dec 20 05:33:19 82.42.41.69:4312 -> xxx.yyy.255.248:1433 SYN ******S* Dec 20 05:33:19 82.42.41.69:4309 -> xxx.yyy.255.246:1433 SYN ******S* Dec 20 05:33:19 82.42.41.69:4318 -> xxx.yyy.255.253:1433 SYN ******S* Dec 20 05:33:19 82.42.41.69:4319 -> xxx.yyy.255.254:1433 SYN ******S* Dec 20 05:33:19 82.42.41.69:4317 -> xxx.yyy.255.252:1433 SYN ******S* Dec 20 05:33:19 82.42.41.69:4316 -> xxx.yyy.255.251:1433 SYN ******S* 118089 Dec 20 03:18:24 66.159.198.158:2641 -> xxx.yyy.1.1:4899 SYN ******S* Dec 20 03:18:24 66.159.198.158:2642 -> xxx.yyy.1.2:4899 SYN ******S* Dec 20 03:18:24 66.159.198.158:2643 -> xxx.yyy.1.3:4899 SYN ******S* Dec 20 03:18:25 66.159.198.158:2644 -> xxx.yyy.1.4:4899 SYN ******S* Dec 20 03:18:25 66.159.198.158:2645 -> xxx.yyy.1.5:4899 SYN ******S* Dec 20 03:18:25 66.159.198.158:2646 -> xxx.yyy.1.6:4899 SYN ******S* Dec 20 03:18:25 66.159.198.158:2647 -> xxx.yyy.1.7:4899 SYN ******S* Dec 20 03:18:25 66.159.198.158:2648 -> xxx.yyy.1.8:4899 SYN ******S* [...] Dec 20 03:43:56 66.159.198.158:1403 -> xxx.yyy.255.230:4899 SYN ******S* Dec 20 03:43:56 66.159.198.158:1387 -> xxx.yyy.255.214:4899 SYN ******S* Dec 20 03:43:56 66.159.198.158:1419 -> xxx.yyy.255.246:4899 SYN ******S* Dec 20 03:43:56 66.159.198.158:1416 -> xxx.yyy.255.243:4899 SYN ******S* Dec 20 03:43:56 66.159.198.158:1400 -> xxx.yyy.255.227:4899 SYN ******S* Dec 20 03:43:56 66.159.198.158:1384 -> xxx.yyy.255.211:4899 SYN ******S* Dec 20 03:43:56 66.159.198.158:1397 -> xxx.yyy.255.224:4899 SYN ******S* Dec 20 03:43:56 66.159.198.158:1413 -> xxx.yyy.255.240:4899 SYN ******S* 116814 Dec 20 04:47:22 203.231.180.193:1043 -> xxx.yyy.1.1:1433 SYN ******S* Dec 20 04:47:22 203.231.180.193:1042 -> xxx.yyy.1.0:1433 SYN ******S* Dec 20 04:47:22 203.231.180.193:1045 -> xxx.yyy.1.3:1433 SYN ******S* Dec 20 04:47:22 203.231.180.193:1044 -> xxx.yyy.1.2:1433 SYN ******S* Dec 20 04:47:22 203.231.180.193:1046 -> xxx.yyy.1.4:1433 SYN ******S* Dec 20 04:47:22 203.231.180.193:1047 -> xxx.yyy.1.5:1433 SYN ******S* Dec 20 04:47:22 203.231.180.193:1048 -> xxx.yyy.1.6:1433 SYN ******S* Dec 20 04:47:22 203.231.180.193:1050 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 20 08:36:00 203.231.180.193:4068 -> xxx.yyy.255.243:1433 SYN ******S* Dec 20 08:36:00 203.231.180.193:4073 -> xxx.yyy.255.247:1433 SYN ******S* Dec 20 08:36:00 203.231.180.193:4077 -> xxx.yyy.255.251:1433 SYN ******S* Dec 20 08:36:00 203.231.180.193:4075 -> xxx.yyy.255.249:1433 SYN ******S* Dec 20 08:36:00 203.231.180.193:4080 -> xxx.yyy.255.254:1433 SYN ******S* Dec 20 08:36:00 203.231.180.193:4078 -> xxx.yyy.255.252:1433 SYN ******S* Dec 20 08:36:00 203.231.180.193:4074 -> xxx.yyy.255.248:1433 SYN ******S* Dec 20 08:36:00 203.231.180.193:4079 -> xxx.yyy.255.253:1433 SYN ******S* Dec 20 08:36:00 203.231.180.193:4076 -> xxx.yyy.255.250:1433 SYN ******S* 116658 Dec 20 11:45:43 201.252.77.228:3042 -> xxx.yyy.1.1:1433 SYN ******S* Dec 20 11:45:46 201.252.77.228:3043 -> xxx.yyy.1.2:1433 SYN ******S* Dec 20 11:45:46 201.252.77.228:3044 -> xxx.yyy.1.3:1433 SYN ******S* Dec 20 11:45:43 201.252.77.228:3045 -> xxx.yyy.1.4:1433 SYN ******S* Dec 20 11:45:43 201.252.77.228:3046 -> xxx.yyy.1.5:1433 SYN ******S* Dec 20 11:45:43 201.252.77.228:3047 -> xxx.yyy.1.6:1433 SYN ******S* Dec 20 11:45:46 201.252.77.228:3048 -> xxx.yyy.1.7:1433 SYN ******S* Dec 20 11:45:43 201.252.77.228:3049 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 20 13:41:35 201.252.77.228:3182 -> xxx.yyy.255.249:1433 SYN ******S* Dec 20 13:41:35 201.252.77.228:3183 -> xxx.yyy.255.250:1433 SYN ******S* Dec 20 13:41:35 201.252.77.228:3180 -> xxx.yyy.255.247:1433 SYN ******S* Dec 20 13:41:35 201.252.77.228:3181 -> xxx.yyy.255.248:1433 SYN ******S* Dec 20 13:41:35 201.252.77.228:3185 -> xxx.yyy.255.252:1433 SYN ******S* Dec 20 13:41:35 201.252.77.228:3186 -> xxx.yyy.255.253:1433 SYN ******S* Dec 20 13:41:35 201.252.77.228:3187 -> xxx.yyy.255.254:1433 SYN ******S* Dec 20 13:41:35 201.252.77.228:3184 -> xxx.yyy.255.251:1433 SYN ******S* 113751 Dec 20 11:02:36 209.221.168.249:29170 -> xxx.yyy.1.1:1433 SYN ******S* Dec 20 11:02:36 209.221.168.249:29171 -> xxx.yyy.1.2:1433 SYN ******S* Dec 20 11:02:36 209.221.168.249:29172 -> xxx.yyy.1.3:1433 SYN ******S* Dec 20 11:02:36 209.221.168.249:29173 -> xxx.yyy.1.4:1433 SYN ******S* Dec 20 11:02:36 209.221.168.249:29174 -> xxx.yyy.1.5:1433 SYN ******S* Dec 20 11:02:36 209.221.168.249:29175 -> xxx.yyy.1.6:1433 SYN ******S* Dec 20 11:02:36 209.221.168.249:29176 -> xxx.yyy.1.7:1433 SYN ******S* Dec 20 11:02:36 209.221.168.249:29177 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 20 13:03:15 209.221.168.249:15626 -> xxx.yyy.255.248:1433 SYN ******S* Dec 20 13:03:15 209.221.168.249:15627 -> xxx.yyy.255.249:1433 SYN ******S* Dec 20 13:03:15 209.221.168.249:15625 -> xxx.yyy.255.247:1433 SYN ******S* Dec 20 13:03:15 209.221.168.249:15632 -> xxx.yyy.255.251:1433 SYN ******S* Dec 20 13:03:15 209.221.168.249:15630 -> xxx.yyy.255.250:1433 SYN ******S* Dec 20 13:03:15 209.221.168.249:15639 -> xxx.yyy.255.253:1433 SYN ******S* Dec 20 13:03:15 209.221.168.249:15638 -> xxx.yyy.255.252:1433 SYN ******S* Dec 20 13:03:16 209.221.168.249:15640 -> xxx.yyy.255.254:1433 SYN ******S* 108306 Dec 20 00:20:52 222.111.180.122:22002 -> xxx.yyy.128.0:1080 SYN ******S* Dec 20 00:20:52 222.111.180.122:22002 -> xxx.yyy.128.0:10080 SYN ******S* Dec 20 00:20:52 222.111.180.122:22002 -> xxx.yyy.128.0:3128 SYN ******S* Dec 20 00:20:53 222.111.180.122:22002 -> xxx.yyy.128.1:1080 SYN ******S* Dec 20 00:20:53 222.111.180.122:22002 -> xxx.yyy.128.1:10080 SYN ******S* Dec 20 00:20:53 222.111.180.122:22002 -> xxx.yyy.128.1:3128 SYN ******S* Dec 20 00:20:53 222.111.180.122:22002 -> xxx.yyy.128.2:1080 SYN ******S* Dec 20 00:20:53 222.111.180.122:22002 -> xxx.yyy.128.2:10080 SYN ******S* [...] Dec 20 04:13:07 222.111.180.122:22002 -> xxx.yyy.255.253:1080 SYN ******S* Dec 20 04:13:07 222.111.180.122:22002 -> xxx.yyy.255.253:10080 SYN ******S* Dec 20 04:13:07 222.111.180.122:22002 -> xxx.yyy.255.253:3128 SYN ******S* Dec 20 04:13:07 222.111.180.122:22002 -> xxx.yyy.255.254:1080 SYN ******S* Dec 20 04:13:07 222.111.180.122:22002 -> xxx.yyy.255.254:10080 SYN ******S* Dec 20 04:13:07 222.111.180.122:22002 -> xxx.yyy.255.254:3128 SYN ******S* Dec 20 04:13:08 222.111.180.122:22002 -> xxx.yyy.255.255:1080 SYN ******S* Dec 20 04:13:08 222.111.180.122:22002 -> xxx.yyy.255.255:10080 SYN ******S* Dec 20 04:13:08 222.111.180.122:22002 -> xxx.yyy.255.255:3128 SYN ******S* 96554 Dec 20 06:48:03 213.36.130.168:3424 -> xxx.yyy.1.0:1433 SYN ******S* Dec 20 06:48:02 213.36.130.168:3425 -> xxx.yyy.1.1:1433 SYN ******S* Dec 20 06:48:03 213.36.130.168:3427 -> xxx.yyy.1.2:1433 SYN ******S* Dec 20 06:48:03 213.36.130.168:3428 -> xxx.yyy.1.3:1433 SYN ******S* Dec 20 06:48:02 213.36.130.168:3429 -> xxx.yyy.1.4:1433 SYN ******S* Dec 20 06:48:03 213.36.130.168:3430 -> xxx.yyy.1.5:1433 SYN ******S* Dec 20 06:48:03 213.36.130.168:3431 -> xxx.yyy.1.6:1433 SYN ******S* Dec 20 06:48:03 213.36.130.168:3432 -> xxx.yyy.1.7:1433 SYN ******S* [...] Dec 20 10:16:56 213.36.130.168:4295 -> xxx.yyy.233.153:1433 SYN ******S* Dec 20 10:16:56 213.36.130.168:4294 -> xxx.yyy.233.152:1433 SYN ******S* Dec 20 10:16:56 213.36.130.168:4298 -> xxx.yyy.233.155:1433 SYN ******S* Dec 20 10:16:56 213.36.130.168:4299 -> xxx.yyy.233.156:1433 SYN ******S* Dec 20 10:16:56 213.36.130.168:4301 -> xxx.yyy.233.157:1433 SYN ******S* Dec 20 10:16:56 213.36.130.168:4302 -> xxx.yyy.233.158:1433 SYN ******S* Dec 20 10:16:56 213.36.130.168:4535 -> xxx.yyy.233.160:1433 SYN ******S* Dec 20 10:16:56 213.36.130.168:4574 -> xxx.yyy.233.164:1433 SYN ******S* 95986 Dec 20 13:09:31 139.30.17.230:3417 -> xxx.yyy.1.0:1433 SYN ******S* Dec 20 13:09:31 139.30.17.230:3418 -> xxx.yyy.1.1:1433 SYN ******S* Dec 20 13:09:31 139.30.17.230:3420 -> xxx.yyy.1.2:1433 SYN ******S* Dec 20 13:09:31 139.30.17.230:3423 -> xxx.yyy.1.3:1433 SYN ******S* Dec 20 13:09:31 139.30.17.230:3425 -> xxx.yyy.1.4:1433 SYN ******S* Dec 20 13:09:31 139.30.17.230:3426 -> xxx.yyy.1.5:1433 SYN ******S* Dec 20 13:09:31 139.30.17.230:3432 -> xxx.yyy.1.6:1433 SYN ******S* Dec 20 13:09:31 139.30.17.230:3435 -> xxx.yyy.1.7:1433 SYN ******S* [...] Dec 20 16:18:11 139.30.17.230:3586 -> xxx.yyy.211.117:1433 SYN ******S* Dec 20 16:18:11 139.30.17.230:3604 -> xxx.yyy.211.118:1433 SYN ******S* Dec 20 16:18:11 139.30.17.230:3615 -> xxx.yyy.211.120:1433 SYN ******S* Dec 20 16:18:11 139.30.17.230:3617 -> xxx.yyy.211.121:1433 SYN ******S* Dec 20 16:18:11 139.30.17.230:3625 -> xxx.yyy.211.122:1433 SYN ******S* Dec 20 16:18:11 139.30.17.230:3626 -> xxx.yyy.211.123:1433 SYN ******S* Dec 20 16:18:12 139.30.17.230:3487 -> xxx.yyy.211.98:1433 SYN ******S* Dec 20 16:18:12 139.30.17.230:3632 -> xxx.yyy.211.124:1433 SYN ******S* Dec 20 16:18:12 139.30.17.230:3634 -> xxx.yyy.211.125:1433 SYN ******S* 84495 Dec 20 13:28:26 65.244.206.86:4846 -> xxx.yyy.1.1:1433 SYN ******S* Dec 20 13:28:23 65.244.206.86:4850 -> xxx.yyy.1.2:1433 SYN ******S* Dec 20 13:28:26 65.244.206.86:4851 -> xxx.yyy.1.3:1433 SYN ******S* Dec 20 13:28:26 65.244.206.86:4854 -> xxx.yyy.1.4:1433 SYN ******S* Dec 20 13:28:26 65.244.206.86:4855 -> xxx.yyy.1.5:1433 SYN ******S* Dec 20 13:28:26 65.244.206.86:4856 -> xxx.yyy.1.6:1433 SYN ******S* Dec 20 13:28:26 65.244.206.86:4857 -> xxx.yyy.1.7:1433 SYN ******S* Dec 20 13:28:26 65.244.206.86:4858 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 20 13:40:10 65.244.206.86:3039 -> xxx.yyy.255.238:1433 SYN ******S* Dec 20 13:40:10 65.244.206.86:3070 -> xxx.yyy.255.251:1433 SYN ******S* Dec 20 13:40:10 65.244.206.86:3074 -> xxx.yyy.255.252:1433 SYN ******S* Dec 20 13:40:10 65.244.206.86:3064 -> xxx.yyy.255.249:1433 SYN ******S* Dec 20 13:40:10 65.244.206.86:3080 -> xxx.yyy.255.253:1433 SYN ******S* Dec 20 13:40:10 65.244.206.86:3059 -> xxx.yyy.255.247:1433 SYN ******S* Dec 20 13:40:10 65.244.206.86:3068 -> xxx.yyy.255.250:1433 SYN ******S* Dec 20 13:40:10 65.244.206.86:3061 -> xxx.yyy.255.248:1433 SYN ******S* Dec 20 13:40:10 65.244.206.86:3055 -> xxx.yyy.255.246:1433 SYN ******S* 66027 Dec 20 21:28:38 81.62.235.212:49316 -> xxx.yyy.1.0:1433 SYN ******S* Dec 20 21:28:38 81.62.235.212:49317 -> xxx.yyy.1.1:1433 SYN ******S* Dec 20 21:28:38 81.62.235.212:49318 -> xxx.yyy.1.2:1433 SYN ******S* Dec 20 21:28:38 81.62.235.212:49319 -> xxx.yyy.1.3:1433 SYN ******S* Dec 20 21:28:38 81.62.235.212:49321 -> xxx.yyy.1.4:1433 SYN ******S* Dec 20 21:28:38 81.62.235.212:49323 -> xxx.yyy.1.5:1433 SYN ******S* Dec 20 21:28:35 81.62.235.212:49325 -> xxx.yyy.1.6:1433 SYN ******S* Dec 20 21:28:38 81.62.235.212:49326 -> xxx.yyy.1.7:1433 SYN ******S* [...] Dec 20 23:59:59 81.62.235.212:62811 -> xxx.yyy.169.238:1433 SYN ******S* Dec 20 23:59:59 81.62.235.212:62812 -> xxx.yyy.169.239:1433 SYN ******S* Dec 20 23:59:59 81.62.235.212:62673 -> xxx.yyy.169.152:1433 SYN ******S* Dec 20 23:59:59 81.62.235.212:62813 -> xxx.yyy.169.240:1433 SYN ******S* Dec 20 23:59:59 81.62.235.212:62815 -> xxx.yyy.169.241:1433 SYN ******S* Dec 20 23:59:59 81.62.235.212:62818 -> xxx.yyy.169.242:1433 SYN ******S* Dec 20 23:59:59 81.62.235.212:62678 -> xxx.yyy.169.153:1433 SYN ******S* Dec 20 23:59:59 81.62.235.212:62684 -> xxx.yyy.169.154:1433 SYN ******S* 63345 Dec 20 14:27:26 65.162.1.154:3698 -> xxx.yyy.1.1:1433 SYN ******S* Dec 20 14:27:26 65.162.1.154:3702 -> xxx.yyy.1.5:1433 SYN ******S* Dec 20 14:27:26 65.162.1.154:3700 -> xxx.yyy.1.3:1433 SYN ******S* Dec 20 14:27:26 65.162.1.154:3703 -> xxx.yyy.1.6:1433 SYN ******S* Dec 20 14:27:26 65.162.1.154:3705 -> xxx.yyy.1.8:1433 SYN ******S* Dec 20 14:27:26 65.162.1.154:3706 -> xxx.yyy.1.9:1433 SYN ******S* Dec 20 14:27:26 65.162.1.154:3709 -> xxx.yyy.1.12:1433 SYN ******S* Dec 20 14:27:26 65.162.1.154:3707 -> xxx.yyy.1.10:1433 SYN ******S* [...] Dec 20 14:31:13 65.162.1.154:3439 -> xxx.yyy.255.184:1433 SYN ******S* Dec 20 14:31:13 65.162.1.154:3458 -> xxx.yyy.255.197:1433 SYN ******S* Dec 20 14:31:13 65.162.1.154:3499 -> xxx.yyy.255.229:1433 SYN ******S* Dec 20 14:31:13 65.162.1.154:3478 -> xxx.yyy.255.212:1433 SYN ******S* Dec 20 14:31:13 65.162.1.154:3491 -> xxx.yyy.255.223:1433 SYN ******S* Dec 20 14:31:13 65.162.1.154:3434 -> xxx.yyy.255.183:1433 SYN ******S* Dec 20 14:31:13 65.162.1.154:3447 -> xxx.yyy.255.190:1433 SYN ******S* Dec 20 14:31:13 65.162.1.154:3519 -> xxx.yyy.255.246:1433 SYN ******S* 63165 Dec 20 07:17:25 200.208.85.76:15011 -> xxx.yyy.65.254:1433 SYN ******S* Dec 20 07:17:26 200.208.85.76:15028 -> xxx.yyy.65.255:1433 SYN ******S* Dec 20 07:17:26 200.208.85.76:15033 -> xxx.yyy.66.0:1433 SYN ******S* Dec 20 07:17:26 200.208.85.76:15045 -> xxx.yyy.66.1:1433 SYN ******S* Dec 20 07:17:26 200.208.85.76:15047 -> xxx.yyy.66.2:1433 SYN ******S* Dec 20 07:17:26 200.208.85.76:15054 -> xxx.yyy.66.3:1433 SYN ******S* Dec 20 07:17:26 200.208.85.76:15055 -> xxx.yyy.66.4:1433 SYN ******S* Dec 20 07:17:26 200.208.85.76:15056 -> xxx.yyy.66.5:1433 SYN ******S* [...] Dec 20 09:00:01 200.208.85.76:62140 -> xxx.yyy.255.59:1433 SYN ******S* Dec 20 09:00:01 200.208.85.76:62144 -> xxx.yyy.255.63:1433 SYN ******S* Dec 20 09:00:01 200.208.85.76:62142 -> xxx.yyy.255.61:1433 SYN ******S* Dec 20 09:00:01 200.208.85.76:62143 -> xxx.yyy.255.62:1433 SYN ******S* Dec 20 09:00:01 200.208.85.76:62138 -> xxx.yyy.255.57:1433 SYN ******S* Dec 20 09:00:01 200.208.85.76:62141 -> xxx.yyy.255.60:1433 SYN ******S* Dec 20 09:00:01 200.208.85.76:62139 -> xxx.yyy.255.58:1433 SYN ******S* Dec 20 09:00:02 200.208.85.76:62146 -> xxx.yyy.255.65:1433 SYN ******S* Dec 20 09:00:02 200.208.85.76:62145 -> xxx.yyy.255.64:1433 SYN ******S* 53091 Dec 20 00:00:02 211.162.99.206:1405 -> xxx.yyy.194.248:1433 SYN ******S* Dec 20 00:00:03 211.162.99.206:1625 -> xxx.yyy.195.5:1433 SYN ******S* Dec 20 00:00:03 211.162.99.206:2234 -> xxx.yyy.195.46:1433 SYN ******S* Dec 20 00:00:04 211.162.99.206:1647 -> xxx.yyy.195.6:1433 SYN ******S* Dec 20 00:00:07 211.162.99.206:2244 -> xxx.yyy.195.47:1433 SYN ******S* Dec 20 00:00:04 211.162.99.206:1671 -> xxx.yyy.195.7:1433 SYN ******S* Dec 20 00:00:04 211.162.99.206:1672 -> xxx.yyy.195.8:1433 SYN ******S* Dec 20 00:00:04 211.162.99.206:1689 -> xxx.yyy.195.9:1433 SYN ******S* [...] Dec 20 01:00:05 211.162.99.206:2787 -> xxx.yyy.255.246:1433 SYN ******S* Dec 20 01:00:05 211.162.99.206:2847 -> xxx.yyy.255.250:1433 SYN ******S* Dec 20 01:00:05 211.162.99.206:2822 -> xxx.yyy.255.249:1433 SYN ******S* Dec 20 01:00:05 211.162.99.206:2807 -> xxx.yyy.255.248:1433 SYN ******S* Dec 20 01:00:05 211.162.99.206:2914 -> xxx.yyy.255.251:1433 SYN ******S* Dec 20 01:00:06 211.162.99.206:2925 -> xxx.yyy.255.253:1433 SYN ******S* Dec 20 01:00:06 211.162.99.206:2942 -> xxx.yyy.255.254:1433 SYN ******S* Dec 20 01:00:06 211.162.99.206:2921 -> xxx.yyy.255.252:1433 SYN ******S* 42767 Dec 20 15:01:55 216.205.93.58:4733 -> xxx.yyy.1.1:1433 SYN ******S* Dec 20 15:01:55 216.205.93.58:4734 -> xxx.yyy.1.2:1433 SYN ******S* Dec 20 15:01:56 216.205.93.58:4735 -> xxx.yyy.1.3:1433 SYN ******S* Dec 20 15:01:56 216.205.93.58:4738 -> xxx.yyy.1.4:1433 SYN ******S* Dec 20 15:01:56 216.205.93.58:4740 -> xxx.yyy.1.6:1433 SYN ******S* Dec 20 15:01:56 216.205.93.58:4739 -> xxx.yyy.1.5:1433 SYN ******S* Dec 20 15:01:56 216.205.93.58:4744 -> xxx.yyy.1.7:1433 SYN ******S* Dec 20 15:01:56 216.205.93.58:4746 -> xxx.yyy.1.9:1433 SYN ******S* [...] Dec 20 15:12:06 216.205.93.58:3961 -> xxx.yyy.255.245:1433 SYN ******S* Dec 20 15:12:06 216.205.93.58:3962 -> xxx.yyy.255.246:1433 SYN ******S* Dec 20 15:12:06 216.205.93.58:3963 -> xxx.yyy.255.247:1433 SYN ******S* Dec 20 15:12:06 216.205.93.58:3964 -> xxx.yyy.255.248:1433 SYN ******S* Dec 20 15:12:06 216.205.93.58:3965 -> xxx.yyy.255.249:1433 SYN ******S* Dec 20 15:12:06 216.205.93.58:3966 -> xxx.yyy.255.250:1433 SYN ******S* Dec 20 15:12:06 216.205.93.58:3967 -> xxx.yyy.255.251:1433 SYN ******S* Dec 20 15:12:06 216.205.93.58:3969 -> xxx.yyy.255.253:1433 SYN ******S* Dec 20 15:12:06 216.205.93.58:3970 -> xxx.yyy.255.254:1433 SYN ******S* 42155 Dec 20 12:13:23 66.12.184.102:3101 -> xxx.yyy.1.1:504 SYN ******S* Dec 20 12:13:23 66.12.184.102:3102 -> xxx.yyy.1.2:504 SYN ******S* Dec 20 12:13:25 66.12.184.102:3103 -> xxx.yyy.1.3:504 SYN ******S* Dec 20 12:13:23 66.12.184.102:3104 -> xxx.yyy.1.4:504 SYN ******S* Dec 20 12:13:23 66.12.184.102:3105 -> xxx.yyy.1.5:504 SYN ******S* Dec 20 12:13:23 66.12.184.102:3106 -> xxx.yyy.1.6:504 SYN ******S* Dec 20 12:13:23 66.12.184.102:3107 -> xxx.yyy.1.7:504 SYN ******S* Dec 20 12:13:23 66.12.184.102:3108 -> xxx.yyy.1.8:504 SYN ******S* [...] Dec 20 12:17:58 66.12.184.102:4678 -> xxx.yyy.254.186:504 SYN ******S* Dec 20 12:17:58 66.12.184.102:4711 -> xxx.yyy.254.219:504 SYN ******S* Dec 20 12:17:58 66.12.184.102:4705 -> xxx.yyy.254.213:504 SYN ******S* Dec 20 12:17:58 66.12.184.102:4722 -> xxx.yyy.254.229:504 SYN ******S* Dec 20 12:17:58 66.12.184.102:3004 -> xxx.yyy.254.242:504 SYN ******S* Dec 20 12:17:58 66.12.184.102:3001 -> xxx.yyy.254.239:504 SYN ******S* Dec 20 12:17:58 66.12.184.102:3013 -> xxx.yyy.254.248:504 SYN ******S* Dec 20 12:17:58 66.12.184.102:4983 -> xxx.yyy.254.238:504 SYN ******S* 39833 [...] 35853 Dec 20 07:49:24 210.51.208.6:8678 -> xxx.yyy.1.0:1433 SYN ******S* Dec 20 07:49:24 210.51.208.6:27884 -> xxx.yyy.1.1:1433 SYN ******S* Dec 20 07:49:24 210.51.208.6:8681 -> xxx.yyy.1.2:1433 SYN ******S* Dec 20 07:49:24 210.51.208.6:8682 -> xxx.yyy.1.3:1433 SYN ******S* Dec 20 07:49:24 210.51.208.6:8683 -> xxx.yyy.1.4:1433 SYN ******S* Dec 20 07:49:25 210.51.208.6:27886 -> xxx.yyy.1.6:1433 SYN ******S* Dec 20 07:49:25 210.51.208.6:16896 -> xxx.yyy.1.7:1433 SYN ******S* Dec 20 07:49:25 210.51.208.6:8691 -> xxx.yyy.1.9:1433 SYN ******S* [...] Dec 20 09:13:08 210.51.208.6:58249 -> xxx.yyy.94.60:1433 SYN ******S* Dec 20 09:13:08 210.51.208.6:10750 -> xxx.yyy.94.46:1433 SYN ******S* Dec 20 09:13:08 210.51.208.6:10806 -> xxx.yyy.94.61:1433 SYN ******S* Dec 20 09:13:09 210.51.208.6:10808 -> xxx.yyy.94.62:1433 SYN ******S* Dec 20 09:13:09 210.51.208.6:39494 -> xxx.yyy.94.42:1433 SYN ******S* Dec 20 09:13:09 210.51.208.6:16786 -> xxx.yyy.94.63:1433 SYN ******S* Dec 20 09:13:09 210.51.208.6:10813 -> xxx.yyy.94.64:1433 SYN ******S* Dec 20 09:13:09 210.51.208.6:10818 -> xxx.yyy.94.65:1433 SYN ******S* Dec 20 09:13:09 210.51.208.6:10819 -> xxx.yyy.94.66:1433 SYN ******S* 29686 Dec 20 06:41:14 60.223.22.173:4498 -> xxx.yyy.137.166:1433 SYN ******S* Dec 20 06:41:14 60.223.22.173:4501 -> xxx.yyy.137.167:1433 SYN ******S* Dec 20 06:41:14 60.223.22.173:4504 -> xxx.yyy.137.168:1433 SYN ******S* Dec 20 06:41:14 60.223.22.173:4506 -> xxx.yyy.137.169:1433 SYN ******S* Dec 20 06:41:14 60.223.22.173:4509 -> xxx.yyy.137.170:1433 SYN ******S* Dec 20 06:41:14 60.223.22.173:4512 -> xxx.yyy.137.171:1433 SYN ******S* Dec 20 06:41:14 60.223.22.173:4514 -> xxx.yyy.137.172:1433 SYN ******S* Dec 20 06:41:14 60.223.22.173:4517 -> xxx.yyy.137.173:1433 SYN ******S* [...] Dec 20 08:27:18 60.223.22.173:3848 -> xxx.yyy.255.253:1433 SYN ******S* Dec 20 08:27:19 60.223.22.173:3852 -> xxx.yyy.255.254:1433 SYN ******S* Dec 20 08:27:24 60.223.22.173:3839 -> xxx.yyy.255.248:1433 SYN ******S* Dec 20 08:27:24 60.223.22.173:3842 -> xxx.yyy.255.250:1433 SYN ******S* Dec 20 08:27:24 60.223.22.173:3841 -> xxx.yyy.255.249:1433 SYN ******S* Dec 20 08:27:24 60.223.22.173:3843 -> xxx.yyy.255.251:1433 SYN ******S* Dec 20 08:27:24 60.223.22.173:3845 -> xxx.yyy.255.252:1433 SYN ******S* Dec 20 08:27:24 60.223.22.173:3848 -> xxx.yyy.255.253:1433 SYN ******S* Dec 20 08:27:25 60.223.22.173:3852 -> xxx.yyy.255.254:1433 SYN ******S* 29363 Dec 20 01:47:34 61.51.217.25:4018 -> xxx.yyy.29.0:1433 SYN ******S* Dec 20 01:47:34 61.51.217.25:4020 -> xxx.yyy.29.1:1433 SYN ******S* Dec 20 01:47:34 61.51.217.25:4023 -> xxx.yyy.29.2:1433 SYN ******S* Dec 20 01:47:34 61.51.217.25:4026 -> xxx.yyy.29.3:1433 SYN ******S* Dec 20 01:47:34 61.51.217.25:4028 -> xxx.yyy.29.4:1433 SYN ******S* Dec 20 01:47:34 61.51.217.25:4032 -> xxx.yyy.29.5:1433 SYN ******S* Dec 20 01:47:34 61.51.217.25:4035 -> xxx.yyy.29.6:1433 SYN ******S* Dec 20 01:47:34 61.51.217.25:4038 -> xxx.yyy.29.7:1433 SYN ******S* [...] Dec 20 03:17:42 61.51.217.25:3273 -> xxx.yyy.129.62:1433 SYN ******S* Dec 20 03:17:42 61.51.217.25:3274 -> xxx.yyy.129.63:1433 SYN ******S* Dec 20 03:17:43 61.51.217.25:3275 -> xxx.yyy.129.64:1433 SYN ******S* Dec 20 03:17:43 61.51.217.25:3284 -> xxx.yyy.129.65:1433 SYN ******S* Dec 20 03:17:43 61.51.217.25:3285 -> xxx.yyy.129.66:1433 SYN ******S* Dec 20 03:17:43 61.51.217.25:3286 -> xxx.yyy.129.67:1433 SYN ******S* Dec 20 03:17:43 61.51.217.25:3293 -> xxx.yyy.129.68:1433 SYN ******S* Dec 20 03:17:43 61.51.217.25:3295 -> xxx.yyy.129.69:1433 SYN ******S* Dec 20 03:17:43 61.51.217.25:3297 -> xxx.yyy.129.70:1433 SYN ******S* 28181 Dec 20 00:00:07 218.7.134.17:1192 -> xxx.yyy.16.136:1433 SYN ******S* Dec 20 00:00:08 218.7.134.17:1197 -> xxx.yyy.16.137:1433 SYN ******S* Dec 20 00:00:05 218.7.134.17:1184 -> xxx.yyy.16.134:1433 SYN ******S* Dec 20 00:00:05 218.7.134.17:1165 -> xxx.yyy.16.129:1433 SYN ******S* Dec 20 00:00:08 218.7.134.17:1199 -> xxx.yyy.16.138:1433 SYN ******S* Dec 20 00:00:06 218.7.134.17:1168 -> xxx.yyy.16.130:1433 SYN ******S* Dec 20 00:00:06 218.7.134.17:1204 -> xxx.yyy.16.139:1433 SYN ******S* Dec 20 00:00:06 218.7.134.17:1190 -> xxx.yyy.16.135:1433 SYN ******S* [...] Dec 20 01:59:32 218.7.134.17:3746 -> xxx.yyy.111.248:1433 SYN ******S* Dec 20 01:59:32 218.7.134.17:3749 -> xxx.yyy.111.249:1433 SYN ******S* Dec 20 01:59:33 218.7.134.17:3753 -> xxx.yyy.111.250:1433 SYN ******S* Dec 20 01:59:33 218.7.134.17:3754 -> xxx.yyy.111.251:1433 SYN ******S* Dec 20 01:59:34 218.7.134.17:3759 -> xxx.yyy.111.252:1433 SYN ******S* Dec 20 01:59:34 218.7.134.17:3760 -> xxx.yyy.111.253:1433 SYN ******S* Dec 20 01:59:35 218.7.134.17:3763 -> xxx.yyy.111.254:1433 SYN ******S* Dec 20 01:59:35 218.7.134.17:3770 -> xxx.yyy.111.255:1433 SYN ******S* 27655 Dec 20 00:30:46 210.114.223.210:1483 -> xxx.yyy.14.134:20168 SYN ******S* Dec 20 00:30:46 210.114.223.210:1485 -> xxx.yyy.14.172:20168 SYN ******S* Dec 20 00:30:46 210.114.223.210:1486 -> xxx.yyy.14.173:20168 SYN ******S* Dec 20 00:30:46 210.114.223.210:1487 -> xxx.yyy.14.175:20168 SYN ******S* Dec 20 00:30:46 210.114.223.210:1488 -> xxx.yyy.14.177:20168 SYN ******S* Dec 20 00:30:46 210.114.223.210:1489 -> xxx.yyy.14.178:20168 SYN ******S* Dec 20 00:30:46 210.114.223.210:1491 -> xxx.yyy.14.185:20168 SYN ******S* Dec 20 00:30:46 210.114.223.210:1492 -> xxx.yyy.14.192:20168 SYN ******S* [...] Dec 20 00:33:12 210.114.223.210:3377 -> xxx.yyy.254.198:20168 SYN ******S* Dec 20 00:33:12 210.114.223.210:3381 -> xxx.yyy.254.202:20168 SYN ******S* Dec 20 00:33:12 210.114.223.210:3380 -> xxx.yyy.254.201:20168 SYN ******S* Dec 20 00:33:12 210.114.223.210:3378 -> xxx.yyy.254.199:20168 SYN ******S* Dec 20 00:33:12 210.114.223.210:3385 -> xxx.yyy.254.206:20168 SYN ******S* Dec 20 00:33:12 210.114.223.210:3386 -> xxx.yyy.254.207:20168 SYN ******S* Dec 20 00:33:12 210.114.223.210:3384 -> xxx.yyy.254.205:20168 SYN ******S* Dec 20 00:33:12 210.114.223.210:3383 -> xxx.yyy.254.204:20168 SYN ******S* 22258 Dec 20 00:00:03 220.213.193.198:2858 -> xxx.yyy.223.178:1433 SYN ******S* Dec 20 00:00:06 220.213.193.198:3022 -> xxx.yyy.223.204:1433 SYN ******S* Dec 20 00:00:06 220.213.193.198:3023 -> xxx.yyy.223.205:1433 SYN ******S* Dec 20 00:00:06 220.213.193.198:3029 -> xxx.yyy.223.208:1433 SYN ******S* Dec 20 00:00:06 220.213.193.198:3030 -> xxx.yyy.223.209:1433 SYN ******S* Dec 20 00:00:04 220.213.193.198:2867 -> xxx.yyy.223.179:1433 SYN ******S* Dec 20 00:00:06 220.213.193.198:3034 -> xxx.yyy.223.210:1433 SYN ******S* Dec 20 00:00:07 220.213.193.198:3035 -> xxx.yyy.223.211:1433 SYN ******S* [...] Dec 20 00:14:36 220.213.193.198:2786 -> xxx.yyy.255.249:1433 SYN ******S* Dec 20 00:14:36 220.213.193.198:2785 -> xxx.yyy.255.248:1433 SYN ******S* Dec 20 00:14:36 220.213.193.198:2784 -> xxx.yyy.255.247:1433 SYN ******S* Dec 20 00:14:36 220.213.193.198:2783 -> xxx.yyy.255.246:1433 SYN ******S* Dec 20 00:14:36 220.213.193.198:2788 -> xxx.yyy.255.250:1433 SYN ******S* Dec 20 00:14:36 220.213.193.198:2800 -> xxx.yyy.255.253:1433 SYN ******S* Dec 20 00:14:36 220.213.193.198:2796 -> xxx.yyy.255.252:1433 SYN ******S* Dec 20 00:14:36 220.213.193.198:2795 -> xxx.yyy.255.251:1433 SYN ******S* Dec 20 00:14:36 220.213.193.198:2804 -> xxx.yyy.255.254:1433 SYN ******S* 21503 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions