[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Dec 23 11:48:02 211.243.160.117:4089 -> xxx.yyy.174.1:5900 SYN ******S* Dec 23 11:48:02 211.243.160.117:4091 -> xxx.yyy.174.2:5900 SYN ******S* Dec 23 11:48:02 211.243.160.117:4096 -> xxx.yyy.174.3:5900 SYN ******S* Dec 23 11:48:02 211.243.160.117:4100 -> xxx.yyy.174.4:5900 SYN ******S* Dec 23 11:48:03 211.243.160.117:4106 -> xxx.yyy.174.5:5900 SYN ******S* Dec 23 11:48:03 211.243.160.117:4110 -> xxx.yyy.174.6:5900 SYN ******S* Dec 23 11:48:03 211.243.160.117:4113 -> xxx.yyy.174.7:5900 SYN ******S* Dec 23 11:48:03 211.243.160.117:4118 -> xxx.yyy.174.8:5900 SYN ******S* [...] Dec 23 18:46:50 211.243.160.117:3659 -> xxx.yyy.220.203:5900 SYN ******S* Dec 23 18:46:50 211.243.160.117:3660 -> xxx.yyy.132.77:5900 SYN ******S* Dec 23 18:46:50 211.243.160.117:3666 -> xxx.yyy.220.209:5900 SYN ******S* Dec 23 18:46:50 211.243.160.117:3668 -> xxx.yyy.132.40:5900 SYN ******S* Dec 23 18:46:50 211.243.160.117:3670 -> xxx.yyy.206.248:5900 SYN ******S* Dec 23 18:46:50 211.243.160.117:3672 -> xxx.yyy.220.141:5900 SYN ******S* Dec 23 18:46:50 211.243.160.117:3674 -> xxx.yyy.221.189:5900 SYN ******S* Dec 23 18:46:51 211.243.160.117:3678 -> xxx.yyy.221.55:5900 SYN ******S* Dec 23 18:46:51 211.243.160.117:3682 -> xxx.yyy.132.19:5900 SYN ******S* 467895 [...] 291475 Dec 23 02:03:55 221.7.38.235:2150 -> xxx.yyy.1.0:1433 SYN ******S* Dec 23 02:03:55 221.7.38.235:2157 -> xxx.yyy.1.1:1433 SYN ******S* Dec 23 02:03:55 221.7.38.235:2158 -> xxx.yyy.1.2:1433 SYN ******S* Dec 23 02:03:55 221.7.38.235:2161 -> xxx.yyy.1.4:1433 SYN ******S* Dec 23 02:03:55 221.7.38.235:2175 -> xxx.yyy.1.7:1433 SYN ******S* Dec 23 02:03:52 221.7.38.235:2178 -> xxx.yyy.1.9:1433 SYN ******S* Dec 23 02:03:55 221.7.38.235:2159 -> xxx.yyy.1.3:1433 SYN ******S* Dec 23 02:03:55 221.7.38.235:2171 -> xxx.yyy.1.5:1433 SYN ******S* [...] Dec 23 05:53:06 221.7.38.235:3515 -> xxx.yyy.255.247:1433 SYN ******S* Dec 23 05:53:06 221.7.38.235:3520 -> xxx.yyy.255.249:1433 SYN ******S* Dec 23 05:53:06 221.7.38.235:3533 -> xxx.yyy.255.251:1433 SYN ******S* Dec 23 05:53:06 221.7.38.235:3519 -> xxx.yyy.255.248:1433 SYN ******S* Dec 23 05:53:06 221.7.38.235:3529 -> xxx.yyy.255.250:1433 SYN ******S* Dec 23 05:53:07 221.7.38.235:3573 -> xxx.yyy.255.252:1433 SYN ******S* Dec 23 05:53:07 221.7.38.235:3584 -> xxx.yyy.255.253:1433 SYN ******S* Dec 23 05:53:07 221.7.38.235:3586 -> xxx.yyy.255.254:1433 SYN ******S* 124147 Dec 23 00:17:44 218.17.92.109:56679 -> xxx.yyy.64.1:1433 SYN ******S* Dec 23 00:17:47 218.17.92.109:55655 -> xxx.yyy.64.0:1433 SYN ******S* Dec 23 00:17:47 218.17.92.109:104 -> xxx.yyy.64.3:1433 SYN ******S* Dec 23 00:17:47 218.17.92.109:65127 -> xxx.yyy.64.2:1433 SYN ******S* Dec 23 00:17:45 218.17.92.109:7528 -> xxx.yyy.64.5:1433 SYN ******S* Dec 23 00:17:48 218.17.92.109:16232 -> xxx.yyy.64.7:1433 SYN ******S* Dec 23 00:17:48 218.17.92.109:22632 -> xxx.yyy.64.9:1433 SYN ******S* Dec 23 00:17:48 218.17.92.109:24936 -> xxx.yyy.64.10:1433 SYN ******S* [...] Dec 23 03:10:09 218.17.92.109:17492 -> xxx.yyy.255.244:1433 SYN ******S* Dec 23 03:10:11 218.17.92.109:54869 -> xxx.yyy.255.249:1433 SYN ******S* Dec 23 03:10:11 218.17.92.109:16982 -> xxx.yyy.255.251:1433 SYN ******S* Dec 23 03:10:12 218.17.92.109:49493 -> xxx.yyy.255.248:1433 SYN ******S* Dec 23 03:10:12 218.17.92.109:54358 -> xxx.yyy.255.253:1433 SYN ******S* Dec 23 03:10:13 218.17.92.109:15190 -> xxx.yyy.255.250:1433 SYN ******S* Dec 23 03:10:13 218.17.92.109:42838 -> xxx.yyy.255.252:1433 SYN ******S* Dec 23 03:10:13 218.17.92.109:55126 -> xxx.yyy.255.254:1433 SYN ******S* 98070 Dec 23 21:18:49 70.177.33.2:4704 -> xxx.yyy.1.1:6129 SYN ******S* Dec 23 21:18:49 70.177.33.2:4705 -> xxx.yyy.1.2:6129 SYN ******S* Dec 23 21:18:49 70.177.33.2:4706 -> xxx.yyy.1.3:6129 SYN ******S* Dec 23 21:18:51 70.177.33.2:4707 -> xxx.yyy.1.4:6129 SYN ******S* Dec 23 21:18:51 70.177.33.2:4708 -> xxx.yyy.1.5:6129 SYN ******S* Dec 23 21:18:51 70.177.33.2:4709 -> xxx.yyy.1.6:6129 SYN ******S* Dec 23 21:18:51 70.177.33.2:4710 -> xxx.yyy.1.7:6129 SYN ******S* Dec 23 21:18:51 70.177.33.2:4711 -> xxx.yyy.1.8:6129 SYN ******S* [...] Dec 23 21:29:43 70.177.33.2:3346 -> xxx.yyy.255.204:6129 SYN ******S* Dec 23 21:29:43 70.177.33.2:3357 -> xxx.yyy.255.215:6129 SYN ******S* Dec 23 21:29:43 70.177.33.2:3360 -> xxx.yyy.255.218:6129 SYN ******S* Dec 23 21:29:43 70.177.33.2:3361 -> xxx.yyy.255.219:6129 SYN ******S* Dec 23 21:29:43 70.177.33.2:3355 -> xxx.yyy.255.213:6129 SYN ******S* Dec 23 21:29:43 70.177.33.2:3356 -> xxx.yyy.255.214:6129 SYN ******S* Dec 23 21:29:43 70.177.33.2:3363 -> xxx.yyy.255.221:6129 SYN ******S* Dec 23 21:29:43 70.177.33.2:3359 -> xxx.yyy.255.217:6129 SYN ******S* Dec 23 21:29:43 70.177.33.2:3362 -> xxx.yyy.255.220:6129 SYN ******S* 73340 Dec 23 20:06:22 213.132.39.162:1428 -> xxx.yyy.1.1:1433 SYN ******S* Dec 23 20:06:22 213.132.39.162:1430 -> xxx.yyy.1.2:1433 SYN ******S* Dec 23 20:06:22 213.132.39.162:1433 -> xxx.yyy.1.3:1433 SYN ******S* Dec 23 20:06:19 213.132.39.162:1436 -> xxx.yyy.1.4:1433 SYN ******S* Dec 23 20:06:22 213.132.39.162:1438 -> xxx.yyy.1.5:1433 SYN ******S* Dec 23 20:06:22 213.132.39.162:1600 -> xxx.yyy.1.6:1433 SYN ******S* Dec 23 20:06:22 213.132.39.162:1619 -> xxx.yyy.1.7:1433 SYN ******S* Dec 23 20:06:22 213.132.39.162:1621 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 23 21:49:03 213.132.39.162:2912 -> xxx.yyy.255.234:1433 SYN ******S* Dec 23 21:49:03 213.132.39.162:2920 -> xxx.yyy.255.236:1433 SYN ******S* Dec 23 21:49:03 213.132.39.162:2960 -> xxx.yyy.255.238:1433 SYN ******S* Dec 23 21:49:03 213.132.39.162:3055 -> xxx.yyy.255.239:1433 SYN ******S* Dec 23 21:49:03 213.132.39.162:3131 -> xxx.yyy.255.241:1433 SYN ******S* Dec 23 21:49:03 213.132.39.162:3140 -> xxx.yyy.255.242:1433 SYN ******S* Dec 23 21:49:03 213.132.39.162:3145 -> xxx.yyy.255.243:1433 SYN ******S* Dec 23 21:49:03 213.132.39.162:3147 -> xxx.yyy.255.244:1433 SYN ******S* 72778 Dec 23 09:08:48 147.9.109.21:3488 -> xxx.yyy.1.1:3306 SYN ******S* Dec 23 09:08:48 147.9.109.21:3489 -> xxx.yyy.1.2:3306 SYN ******S* Dec 23 09:08:48 147.9.109.21:3490 -> xxx.yyy.1.3:3306 SYN ******S* Dec 23 09:08:50 147.9.109.21:3491 -> xxx.yyy.1.4:3306 SYN ******S* Dec 23 09:08:50 147.9.109.21:3492 -> xxx.yyy.1.5:3306 SYN ******S* Dec 23 09:08:50 147.9.109.21:3493 -> xxx.yyy.1.6:3306 SYN ******S* Dec 23 09:08:50 147.9.109.21:3494 -> xxx.yyy.1.7:3306 SYN ******S* Dec 23 09:08:50 147.9.109.21:3495 -> xxx.yyy.1.8:3306 SYN ******S* [...] Dec 23 09:18:57 147.9.109.21:3512 -> xxx.yyy.255.205:3306 SYN ******S* Dec 23 09:18:57 147.9.109.21:3544 -> xxx.yyy.255.237:3306 SYN ******S* Dec 23 09:18:57 147.9.109.21:3560 -> xxx.yyy.255.253:3306 SYN ******S* Dec 23 09:18:57 147.9.109.21:3509 -> xxx.yyy.255.202:3306 SYN ******S* Dec 23 09:18:57 147.9.109.21:3528 -> xxx.yyy.255.221:3306 SYN ******S* Dec 23 09:18:57 147.9.109.21:3525 -> xxx.yyy.255.218:3306 SYN ******S* Dec 23 09:18:57 147.9.109.21:3541 -> xxx.yyy.255.234:3306 SYN ******S* Dec 23 09:18:57 147.9.109.21:3557 -> xxx.yyy.255.250:3306 SYN ******S* 72012 Dec 23 09:22:40 63.110.106.189:3494 -> xxx.yyy.1.1:1433 SYN ******S* Dec 23 09:22:37 63.110.106.189:3495 -> xxx.yyy.1.2:1433 SYN ******S* Dec 23 09:22:37 63.110.106.189:3496 -> xxx.yyy.1.3:1433 SYN ******S* Dec 23 09:22:40 63.110.106.189:3497 -> xxx.yyy.1.4:1433 SYN ******S* Dec 23 09:22:40 63.110.106.189:3498 -> xxx.yyy.1.5:1433 SYN ******S* Dec 23 09:22:40 63.110.106.189:3499 -> xxx.yyy.1.6:1433 SYN ******S* Dec 23 09:22:40 63.110.106.189:3500 -> xxx.yyy.1.7:1433 SYN ******S* Dec 23 09:22:40 63.110.106.189:3501 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 23 09:34:40 63.110.106.189:2028 -> xxx.yyy.255.239:1433 SYN ******S* Dec 23 09:34:41 63.110.106.189:2043 -> xxx.yyy.255.254:1433 SYN ******S* Dec 23 09:34:41 63.110.106.189:2040 -> xxx.yyy.255.251:1433 SYN ******S* Dec 23 09:34:41 63.110.106.189:2037 -> xxx.yyy.255.248:1433 SYN ******S* Dec 23 09:34:41 63.110.106.189:2041 -> xxx.yyy.255.252:1433 SYN ******S* Dec 23 09:34:41 63.110.106.189:2038 -> xxx.yyy.255.249:1433 SYN ******S* Dec 23 09:34:41 63.110.106.189:2042 -> xxx.yyy.255.253:1433 SYN ******S* Dec 23 09:34:41 63.110.106.189:2039 -> xxx.yyy.255.250:1433 SYN ******S* 71573 Dec 23 17:55:13 194.184.170.5:2846 -> xxx.yyy.1.1:1433 SYN ******S* Dec 23 17:55:13 194.184.170.5:2847 -> xxx.yyy.1.2:1433 SYN ******S* Dec 23 17:55:13 194.184.170.5:2848 -> xxx.yyy.1.3:1433 SYN ******S* Dec 23 17:55:13 194.184.170.5:2849 -> xxx.yyy.1.4:1433 SYN ******S* Dec 23 17:55:13 194.184.170.5:2850 -> xxx.yyy.1.5:1433 SYN ******S* Dec 23 17:55:13 194.184.170.5:2851 -> xxx.yyy.1.6:1433 SYN ******S* Dec 23 17:55:13 194.184.170.5:2852 -> xxx.yyy.1.7:1433 SYN ******S* Dec 23 17:55:13 194.184.170.5:2853 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 23 18:06:26 194.184.170.5:1751 -> xxx.yyy.255.251:1433 SYN ******S* Dec 23 18:06:26 194.184.170.5:1745 -> xxx.yyy.255.245:1433 SYN ******S* Dec 23 18:06:26 194.184.170.5:1749 -> xxx.yyy.255.249:1433 SYN ******S* Dec 23 18:06:26 194.184.170.5:1748 -> xxx.yyy.255.248:1433 SYN ******S* Dec 23 18:06:26 194.184.170.5:1750 -> xxx.yyy.255.250:1433 SYN ******S* Dec 23 18:06:26 194.184.170.5:1752 -> xxx.yyy.255.252:1433 SYN ******S* Dec 23 18:06:26 194.184.170.5:1746 -> xxx.yyy.255.246:1433 SYN ******S* Dec 23 18:06:26 194.184.170.5:1753 -> xxx.yyy.255.253:1433 SYN ******S* Dec 23 18:06:26 194.184.170.5:1747 -> xxx.yyy.255.247:1433 SYN ******S* 71310 Dec 23 09:46:58 207.234.146.40:2844 -> xxx.yyy.1.1:3306 SYN ******S* Dec 23 09:46:58 207.234.146.40:2847 -> xxx.yyy.1.2:3306 SYN ******S* Dec 23 09:46:58 207.234.146.40:2850 -> xxx.yyy.1.3:3306 SYN ******S* Dec 23 09:47:00 207.234.146.40:2853 -> xxx.yyy.1.4:3306 SYN ******S* Dec 23 09:47:00 207.234.146.40:2856 -> xxx.yyy.1.5:3306 SYN ******S* Dec 23 09:47:00 207.234.146.40:2859 -> xxx.yyy.1.6:3306 SYN ******S* Dec 23 09:47:00 207.234.146.40:2862 -> xxx.yyy.1.7:3306 SYN ******S* Dec 23 09:47:00 207.234.146.40:2865 -> xxx.yyy.1.8:3306 SYN ******S* [...] Dec 23 09:59:34 207.234.146.40:2759 -> xxx.yyy.255.245:3306 SYN ******S* Dec 23 09:59:34 207.234.146.40:2762 -> xxx.yyy.255.246:3306 SYN ******S* Dec 23 09:59:34 207.234.146.40:2765 -> xxx.yyy.255.247:3306 SYN ******S* Dec 23 09:59:35 207.234.146.40:2774 -> xxx.yyy.255.250:3306 SYN ******S* Dec 23 09:59:35 207.234.146.40:2777 -> xxx.yyy.255.251:3306 SYN ******S* Dec 23 09:59:35 207.234.146.40:2780 -> xxx.yyy.255.252:3306 SYN ******S* Dec 23 09:59:35 207.234.146.40:2783 -> xxx.yyy.255.253:3306 SYN ******S* Dec 23 09:59:35 207.234.146.40:2786 -> xxx.yyy.255.254:3306 SYN ******S* 70848 Dec 23 20:57:25 61.218.17.211:2717 -> xxx.yyy.1.1:2050 SYN ******S* Dec 23 20:57:25 61.218.17.211:2718 -> xxx.yyy.1.2:2050 SYN ******S* Dec 23 20:57:25 61.218.17.211:2719 -> xxx.yyy.1.3:2050 SYN ******S* Dec 23 20:57:26 61.218.17.211:2720 -> xxx.yyy.1.4:2050 SYN ******S* Dec 23 20:57:26 61.218.17.211:2721 -> xxx.yyy.1.5:2050 SYN ******S* Dec 23 20:57:26 61.218.17.211:2722 -> xxx.yyy.1.6:2050 SYN ******S* Dec 23 20:57:26 61.218.17.211:2723 -> xxx.yyy.1.7:2050 SYN ******S* Dec 23 20:57:26 61.218.17.211:2724 -> xxx.yyy.1.8:2050 SYN ******S* [...] Dec 23 21:15:55 61.218.17.211:2526 -> xxx.yyy.255.248:2050 SYN ******S* Dec 23 21:15:55 61.218.17.211:2523 -> xxx.yyy.255.245:2050 SYN ******S* Dec 23 21:15:55 61.218.17.211:2520 -> xxx.yyy.255.242:2050 SYN ******S* Dec 23 21:15:55 61.218.17.211:2524 -> xxx.yyy.255.246:2050 SYN ******S* Dec 23 21:15:55 61.218.17.211:2521 -> xxx.yyy.255.243:2050 SYN ******S* Dec 23 21:15:55 61.218.17.211:2531 -> xxx.yyy.255.253:2050 SYN ******S* Dec 23 21:15:55 61.218.17.211:2532 -> xxx.yyy.255.254:2050 SYN ******S* Dec 23 21:15:55 61.218.17.211:2529 -> xxx.yyy.255.251:2050 SYN ******S* Dec 23 21:15:55 61.218.17.211:2530 -> xxx.yyy.255.252:2050 SYN ******S* 70123 Dec 23 16:49:17 66.208.37.211:3396 -> xxx.yyy.1.1:1433 SYN ******S* Dec 23 16:49:17 66.208.37.211:3397 -> xxx.yyy.1.2:1433 SYN ******S* Dec 23 16:49:20 66.208.37.211:3398 -> xxx.yyy.1.3:1433 SYN ******S* Dec 23 16:49:17 66.208.37.211:3401 -> xxx.yyy.1.4:1433 SYN ******S* Dec 23 16:49:17 66.208.37.211:3403 -> xxx.yyy.1.5:1433 SYN ******S* Dec 23 16:49:20 66.208.37.211:3404 -> xxx.yyy.1.6:1433 SYN ******S* Dec 23 16:49:17 66.208.37.211:3406 -> xxx.yyy.1.7:1433 SYN ******S* Dec 23 16:49:17 66.208.37.211:3407 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 23 16:52:43 66.208.37.211:2051 -> xxx.yyy.255.84:1433 SYN ******S* Dec 23 16:52:43 66.208.37.211:2069 -> xxx.yyy.255.96:1433 SYN ******S* Dec 23 16:52:43 66.208.37.211:2066 -> xxx.yyy.255.93:1433 SYN ******S* Dec 23 16:52:43 66.208.37.211:2053 -> xxx.yyy.255.85:1433 SYN ******S* Dec 23 16:52:43 66.208.37.211:2074 -> xxx.yyy.255.100:1433 SYN ******S* Dec 23 16:52:43 66.208.37.211:2081 -> xxx.yyy.255.107:1433 SYN ******S* Dec 23 16:52:43 66.208.37.211:2050 -> xxx.yyy.255.83:1433 SYN ******S* Dec 23 16:52:43 66.208.37.211:2075 -> xxx.yyy.255.101:1433 SYN ******S* Dec 23 16:52:43 66.208.37.211:2211 -> xxx.yyy.255.179:1433 SYN ******S* 54218 Dec 23 19:43:59 212.247.171.244:2344 -> xxx.yyy.1.1:4899 SYN ******S* Dec 23 19:43:59 212.247.171.244:2347 -> xxx.yyy.1.2:4899 SYN ******S* Dec 23 19:43:59 212.247.171.244:2354 -> xxx.yyy.1.3:4899 SYN ******S* Dec 23 19:44:01 212.247.171.244:2369 -> xxx.yyy.1.7:4899 SYN ******S* Dec 23 19:44:01 212.247.171.244:2377 -> xxx.yyy.1.8:4899 SYN ******S* Dec 23 19:43:59 212.247.171.244:2379 -> xxx.yyy.1.9:4899 SYN ******S* Dec 23 19:44:01 212.247.171.244:2387 -> xxx.yyy.1.10:4899 SYN ******S* Dec 23 19:43:59 212.247.171.244:2397 -> xxx.yyy.1.11:4899 SYN ******S* [...] Dec 23 19:50:07 212.247.171.244:1485 -> xxx.yyy.255.48:4899 SYN ******S* Dec 23 19:50:07 212.247.171.244:1521 -> xxx.yyy.255.51:4899 SYN ******S* Dec 23 19:50:07 212.247.171.244:1514 -> xxx.yyy.255.50:4899 SYN ******S* Dec 23 19:50:07 212.247.171.244:1660 -> xxx.yyy.255.112:4899 SYN ******S* Dec 23 19:50:07 212.247.171.244:2771 -> xxx.yyy.255.181:4899 SYN ******S* Dec 23 19:50:07 212.247.171.244:2192 -> xxx.yyy.255.163:4899 SYN ******S* Dec 23 19:50:07 212.247.171.244:2766 -> xxx.yyy.255.165:4899 SYN ******S* Dec 23 19:50:07 212.247.171.244:1663 -> xxx.yyy.255.240:4899 SYN ******S* Dec 23 19:50:07 212.247.171.244:2816 -> xxx.yyy.255.241:4899 SYN ******S* 50485 Dec 23 17:27:24 204.95.154.177:3746 -> xxx.yyy.1.0:1433 SYN ******S* Dec 23 17:27:24 204.95.154.177:3747 -> xxx.yyy.1.1:1433 SYN ******S* Dec 23 17:27:24 204.95.154.177:3748 -> xxx.yyy.1.2:1433 SYN ******S* Dec 23 17:27:24 204.95.154.177:3749 -> xxx.yyy.1.3:1433 SYN ******S* Dec 23 17:27:24 204.95.154.177:3750 -> xxx.yyy.1.4:1433 SYN ******S* Dec 23 17:27:24 204.95.154.177:3751 -> xxx.yyy.1.5:1433 SYN ******S* Dec 23 17:27:24 204.95.154.177:3752 -> xxx.yyy.1.6:1433 SYN ******S* Dec 23 17:27:24 204.95.154.177:3754 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 23 17:28:47 204.95.154.177:3763 -> xxx.yyy.255.247:1433 SYN ******S* Dec 23 17:28:47 204.95.154.177:3764 -> xxx.yyy.255.248:1433 SYN ******S* Dec 23 17:28:47 204.95.154.177:3765 -> xxx.yyy.255.249:1433 SYN ******S* Dec 23 17:28:47 204.95.154.177:3766 -> xxx.yyy.255.250:1433 SYN ******S* Dec 23 17:28:47 204.95.154.177:3767 -> xxx.yyy.255.251:1433 SYN ******S* Dec 23 17:28:47 204.95.154.177:3768 -> xxx.yyy.255.252:1433 SYN ******S* Dec 23 17:28:47 204.95.154.177:3770 -> xxx.yyy.255.254:1433 SYN ******S* Dec 23 17:28:47 204.95.154.177:3769 -> xxx.yyy.255.253:1433 SYN ******S* 41528 [...] 40243 Dec 23 22:06:08 140.123.222.190:1685 -> xxx.yyy.1.0:1433 SYN ******S* Dec 23 22:06:08 140.123.222.190:1686 -> xxx.yyy.1.1:1433 SYN ******S* Dec 23 22:06:08 140.123.222.190:1687 -> xxx.yyy.1.2:1433 SYN ******S* Dec 23 22:06:08 140.123.222.190:1688 -> xxx.yyy.1.3:1433 SYN ******S* Dec 23 22:06:08 140.123.222.190:1689 -> xxx.yyy.1.4:1433 SYN ******S* Dec 23 22:06:08 140.123.222.190:1690 -> xxx.yyy.1.5:1433 SYN ******S* Dec 23 22:06:08 140.123.222.190:1691 -> xxx.yyy.1.6:1433 SYN ******S* Dec 23 22:06:08 140.123.222.190:1692 -> xxx.yyy.1.7:1433 SYN ******S* [...] Dec 23 23:45:55 140.123.222.190:2738 -> xxx.yyy.111.246:1433 SYN ******S* Dec 23 23:45:55 140.123.222.190:2742 -> xxx.yyy.111.249:1433 SYN ******S* Dec 23 23:45:55 140.123.222.190:2740 -> xxx.yyy.111.248:1433 SYN ******S* Dec 23 23:45:55 140.123.222.190:2747 -> xxx.yyy.111.252:1433 SYN ******S* Dec 23 23:45:55 140.123.222.190:2744 -> xxx.yyy.111.250:1433 SYN ******S* Dec 23 23:45:55 140.123.222.190:2746 -> xxx.yyy.111.251:1433 SYN ******S* Dec 23 23:45:55 140.123.222.190:2749 -> xxx.yyy.111.254:1433 SYN ******S* Dec 23 23:45:55 140.123.222.190:2750 -> xxx.yyy.111.255:1433 SYN ******S* Dec 23 23:45:55 140.123.222.190:2748 -> xxx.yyy.111.253:1433 SYN ******S* 35086 Dec 23 03:43:39 83.192.244.201:3312 -> xxx.yyy.192.173:1433 SYN ******S* Dec 23 03:43:39 83.192.244.201:3319 -> xxx.yyy.192.174:1433 SYN ******S* Dec 23 03:43:39 83.192.244.201:3325 -> xxx.yyy.192.175:1433 SYN ******S* Dec 23 03:43:39 83.192.244.201:3339 -> xxx.yyy.192.176:1433 SYN ******S* Dec 23 03:43:39 83.192.244.201:3346 -> xxx.yyy.192.177:1433 SYN ******S* Dec 23 03:43:39 83.192.244.201:3354 -> xxx.yyy.192.178:1433 SYN ******S* Dec 23 03:43:39 83.192.244.201:3358 -> xxx.yyy.192.179:1433 SYN ******S* Dec 23 03:43:37 83.192.244.201:3365 -> xxx.yyy.192.180:1433 SYN ******S* [...] Dec 23 04:41:21 83.192.244.201:4647 -> xxx.yyy.255.239:1433 SYN ******S* Dec 23 04:41:21 83.192.244.201:4677 -> xxx.yyy.255.240:1433 SYN ******S* Dec 23 04:41:21 83.192.244.201:4691 -> xxx.yyy.255.241:1433 SYN ******S* Dec 23 04:41:21 83.192.244.201:4726 -> xxx.yyy.255.242:1433 SYN ******S* Dec 23 04:41:21 83.192.244.201:4740 -> xxx.yyy.255.243:1433 SYN ******S* Dec 23 04:41:22 83.192.244.201:4753 -> xxx.yyy.255.244:1433 SYN ******S* Dec 23 04:41:22 83.192.244.201:4759 -> xxx.yyy.255.245:1433 SYN ******S* Dec 23 04:41:22 83.192.244.201:4764 -> xxx.yyy.255.246:1433 SYN ******S* 27630 Dec 23 01:27:07 82.127.232.247:4206 -> xxx.yyy.1.0:1433 SYN ******S* Dec 23 01:27:07 82.127.232.247:4209 -> xxx.yyy.1.1:1433 SYN ******S* Dec 23 01:27:07 82.127.232.247:4210 -> xxx.yyy.1.2:1433 SYN ******S* Dec 23 01:27:07 82.127.232.247:4214 -> xxx.yyy.1.3:1433 SYN ******S* Dec 23 01:27:07 82.127.232.247:4217 -> xxx.yyy.1.4:1433 SYN ******S* Dec 23 01:27:07 82.127.232.247:4218 -> xxx.yyy.1.5:1433 SYN ******S* Dec 23 01:27:07 82.127.232.247:4222 -> xxx.yyy.1.6:1433 SYN ******S* Dec 23 01:27:07 82.127.232.247:4224 -> xxx.yyy.1.7:1433 SYN ******S* [...] Dec 23 02:52:48 82.127.232.247:4743 -> xxx.yyy.95.248:1433 SYN ******S* Dec 23 02:52:48 82.127.232.247:4740 -> xxx.yyy.95.247:1433 SYN ******S* Dec 23 02:52:48 82.127.232.247:4762 -> xxx.yyy.95.251:1433 SYN ******S* Dec 23 02:52:48 82.127.232.247:4755 -> xxx.yyy.95.250:1433 SYN ******S* Dec 23 02:52:48 82.127.232.247:4753 -> xxx.yyy.95.249:1433 SYN ******S* Dec 23 02:52:48 82.127.232.247:4776 -> xxx.yyy.95.254:1433 SYN ******S* Dec 23 02:52:48 82.127.232.247:4772 -> xxx.yyy.95.253:1433 SYN ******S* Dec 23 02:52:48 82.127.232.247:4768 -> xxx.yyy.95.252:1433 SYN ******S* Dec 23 02:52:48 82.127.232.247:4787 -> xxx.yyy.95.255:1433 SYN ******S* 20674 Dec 23 22:58:34 220.127.236.205:1902 -> xxx.yyy.71.237:5554 SYN ******S* Dec 23 22:58:36 220.127.236.205:2707 -> xxx.yyy.71.237:1023 SYN ******S* Dec 23 22:58:34 220.127.236.205:1900 -> xxx.yyy.71.239:5554 SYN ******S* Dec 23 22:58:36 220.127.236.205:3239 -> xxx.yyy.71.239:1023 SYN ******S* Dec 23 22:58:34 220.127.236.205:1901 -> xxx.yyy.71.238:5554 SYN ******S* Dec 23 22:58:36 220.127.236.205:2706 -> xxx.yyy.71.238:1023 SYN ******S* Dec 23 22:58:34 220.127.236.205:1904 -> xxx.yyy.71.235:5554 SYN ******S* Dec 23 22:58:36 220.127.236.205:2710 -> xxx.yyy.71.235:1023 SYN ******S* [...] Dec 23 22:59:53 220.127.236.205:1316 -> xxx.yyy.91.216:9898 SYN ******S* Dec 23 22:59:53 220.127.236.205:1315 -> xxx.yyy.91.215:9898 SYN ******S* Dec 23 22:59:53 220.127.236.205:1321 -> xxx.yyy.91.221:9898 SYN ******S* Dec 23 22:59:53 220.127.236.205:1338 -> xxx.yyy.91.255:9898 SYN ******S* Dec 23 22:59:53 220.127.236.205:1339 -> xxx.yyy.91.254:9898 SYN ******S* Dec 23 22:59:53 220.127.236.205:1341 -> xxx.yyy.91.253:9898 SYN ******S* Dec 23 22:59:53 220.127.236.205:1343 -> xxx.yyy.91.251:9898 SYN ******S* Dec 23 22:59:53 220.127.236.205:1345 -> xxx.yyy.91.250:9898 SYN ******S* 15134 Dec 23 23:10:01 220.81.175.76:2457 -> xxx.yyy.235.116:5554 SYN ******S* Dec 23 23:10:02 220.81.175.76:3029 -> xxx.yyy.235.116:1023 SYN ******S* Dec 23 23:10:04 220.81.175.76:4800 -> xxx.yyy.235.116:9898 SYN ******S* Dec 23 23:10:01 220.81.175.76:2458 -> xxx.yyy.235.117:5554 SYN ******S* Dec 23 23:10:02 220.81.175.76:3030 -> xxx.yyy.235.117:1023 SYN ******S* Dec 23 23:10:04 220.81.175.76:4815 -> xxx.yyy.235.117:9898 SYN ******S* Dec 23 23:10:01 220.81.175.76:2459 -> xxx.yyy.235.118:5554 SYN ******S* Dec 23 23:10:02 220.81.175.76:2956 -> xxx.yyy.235.118:1023 SYN ******S* [...] Dec 23 23:10:48 220.81.175.76:4679 -> xxx.yyy.255.180:9898 SYN ******S* Dec 23 23:10:48 220.81.175.76:4700 -> xxx.yyy.255.188:9898 SYN ******S* Dec 23 23:10:48 220.81.175.76:4678 -> xxx.yyy.255.178:9898 SYN ******S* Dec 23 23:10:48 220.81.175.76:4686 -> xxx.yyy.255.183:9898 SYN ******S* Dec 23 23:10:48 220.81.175.76:4739 -> xxx.yyy.255.190:9898 SYN ******S* Dec 23 23:10:48 220.81.175.76:4744 -> xxx.yyy.255.191:9898 SYN ******S* Dec 23 23:10:48 220.81.175.76:4753 -> xxx.yyy.255.196:9898 SYN ******S* Dec 23 23:10:48 220.81.175.76:4752 -> xxx.yyy.255.195:9898 SYN ******S* Dec 23 23:10:49 220.81.175.76:1244 -> xxx.yyy.235.114:9898 SYN ******S* 14831 Dec 23 22:53:28 222.120.136.144:1648 -> xxx.yyy.215.0:5554 SYN ******S* Dec 23 22:53:29 222.120.136.144:2484 -> xxx.yyy.215.0:1023 SYN ******S* Dec 23 22:53:31 222.120.136.144:4028 -> xxx.yyy.215.0:9898 SYN ******S* Dec 23 22:53:28 222.120.136.144:1623 -> xxx.yyy.214.246:5554 SYN ******S* Dec 23 22:53:29 222.120.136.144:2453 -> xxx.yyy.214.246:1023 SYN ******S* Dec 23 22:53:31 222.120.136.144:4003 -> xxx.yyy.214.246:9898 SYN ******S* Dec 23 22:53:28 222.120.136.144:1626 -> xxx.yyy.214.248:5554 SYN ******S* Dec 23 22:53:29 222.120.136.144:2458 -> xxx.yyy.214.248:1023 SYN ******S* [...] Dec 23 22:55:10 222.120.136.144:1033 -> xxx.yyy.216.177:9898 SYN ******S* Dec 23 22:55:08 222.120.136.144:3426 -> xxx.yyy.216.178:1023 SYN ******S* Dec 23 22:55:10 222.120.136.144:1034 -> xxx.yyy.216.178:9898 SYN ******S* Dec 23 22:55:08 222.120.136.144:3440 -> xxx.yyy.216.180:1023 SYN ******S* Dec 23 22:55:10 222.120.136.144:1038 -> xxx.yyy.216.180:9898 SYN ******S* Dec 23 22:55:08 222.120.136.144:3468 -> xxx.yyy.216.182:1023 SYN ******S* Dec 23 22:55:10 222.120.136.144:1053 -> xxx.yyy.216.182:9898 SYN ******S* Dec 23 22:55:08 222.120.136.144:3433 -> xxx.yyy.216.179:1023 SYN ******S* Dec 23 22:55:10 222.120.136.144:1035 -> xxx.yyy.216.179:9898 SYN ******S* 14532 Dec 23 12:56:31 69.70.135.73:3350 -> xxx.yyy.154.101:5554 SYN ******S* Dec 23 12:56:32 69.70.135.73:4024 -> xxx.yyy.154.101:1023 SYN ******S* Dec 23 12:56:34 69.70.135.73:1689 -> xxx.yyy.154.101:9898 SYN ******S* Dec 23 12:56:31 69.70.135.73:3349 -> xxx.yyy.154.100:5554 SYN ******S* Dec 23 12:56:32 69.70.135.73:4023 -> xxx.yyy.154.100:1023 SYN ******S* Dec 23 12:56:34 69.70.135.73:1688 -> xxx.yyy.154.100:9898 SYN ******S* Dec 23 12:56:31 69.70.135.73:3369 -> xxx.yyy.154.102:5554 SYN ******S* Dec 23 12:56:32 69.70.135.73:4093 -> xxx.yyy.154.102:1023 SYN ******S* [...] Dec 23 12:57:15 69.70.135.73:3086 -> xxx.yyy.174.215:9898 SYN ******S* Dec 23 12:57:15 69.70.135.73:3085 -> xxx.yyy.174.214:9898 SYN ******S* Dec 23 12:57:15 69.70.135.73:3104 -> xxx.yyy.174.219:9898 SYN ******S* Dec 23 12:57:15 69.70.135.73:3102 -> xxx.yyy.174.217:9898 SYN ******S* Dec 23 12:57:15 69.70.135.73:3103 -> xxx.yyy.174.218:9898 SYN ******S* Dec 23 12:57:15 69.70.135.73:3105 -> xxx.yyy.174.220:9898 SYN ******S* Dec 23 12:57:15 69.70.135.73:3107 -> xxx.yyy.174.222:9898 SYN ******S* Dec 23 12:57:15 69.70.135.73:3106 -> xxx.yyy.174.221:9898 SYN ******S* 14129 Dec 23 10:22:21 81.83.68.230:3722 -> xxx.yyy.1.2:1433 SYN ******S* Dec 23 10:22:21 81.83.68.230:3726 -> xxx.yyy.1.6:1433 SYN ******S* Dec 23 10:22:21 81.83.68.230:3729 -> xxx.yyy.1.9:1433 SYN ******S* Dec 23 10:22:21 81.83.68.230:3732 -> xxx.yyy.1.12:1433 SYN ******S* Dec 23 10:22:21 81.83.68.230:3735 -> xxx.yyy.1.15:1433 SYN ******S* Dec 23 10:22:21 81.83.68.230:3739 -> xxx.yyy.1.19:1433 SYN ******S* Dec 23 10:22:21 81.83.68.230:3742 -> xxx.yyy.1.22:1433 SYN ******S* Dec 23 10:22:21 81.83.68.230:3745 -> xxx.yyy.1.25:1433 SYN ******S* [...] Dec 23 10:33:33 81.83.68.230:3078 -> xxx.yyy.255.228:1433 SYN ******S* Dec 23 10:33:33 81.83.68.230:3079 -> xxx.yyy.255.229:1433 SYN ******S* Dec 23 10:33:33 81.83.68.230:3087 -> xxx.yyy.255.237:1433 SYN ******S* Dec 23 10:33:33 81.83.68.230:3088 -> xxx.yyy.255.238:1433 SYN ******S* Dec 23 10:33:33 81.83.68.230:3089 -> xxx.yyy.255.239:1433 SYN ******S* Dec 23 10:33:33 81.83.68.230:3097 -> xxx.yyy.255.247:1433 SYN ******S* Dec 23 10:33:33 81.83.68.230:3098 -> xxx.yyy.255.248:1433 SYN ******S* Dec 23 10:33:33 81.83.68.230:3099 -> xxx.yyy.255.249:1433 SYN ******S* 13444 Dec 23 08:45:47 202.164.185.134:4272 -> xxx.yyy.1.1:1433 SYN ******S* Dec 23 08:45:47 202.164.185.134:4273 -> xxx.yyy.1.2:1433 SYN ******S* Dec 23 08:45:47 202.164.185.134:4274 -> xxx.yyy.1.3:1433 SYN ******S* Dec 23 08:45:47 202.164.185.134:4275 -> xxx.yyy.1.4:1433 SYN ******S* Dec 23 08:45:47 202.164.185.134:4276 -> xxx.yyy.1.5:1433 SYN ******S* Dec 23 08:45:47 202.164.185.134:4277 -> xxx.yyy.1.6:1433 SYN ******S* Dec 23 08:45:47 202.164.185.134:4278 -> xxx.yyy.1.7:1433 SYN ******S* Dec 23 08:45:47 202.164.185.134:4279 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 23 09:47:04 202.164.185.134:2003 -> xxx.yyy.69.34:1433 SYN ******S* Dec 23 09:47:04 202.164.185.134:2001 -> xxx.yyy.69.32:1433 SYN ******S* Dec 23 09:47:05 202.164.185.134:2008 -> xxx.yyy.69.39:1433 SYN ******S* Dec 23 09:47:05 202.164.185.134:2006 -> xxx.yyy.69.37:1433 SYN ******S* Dec 23 09:47:05 202.164.185.134:2007 -> xxx.yyy.69.38:1433 SYN ******S* Dec 23 09:47:05 202.164.185.134:2011 -> xxx.yyy.69.42:1433 SYN ******S* Dec 23 09:47:05 202.164.185.134:2005 -> xxx.yyy.69.36:1433 SYN ******S* Dec 23 09:47:05 202.164.185.134:2009 -> xxx.yyy.69.40:1433 SYN ******S* Dec 23 09:47:05 202.164.185.134:2010 -> xxx.yyy.69.41:1433 SYN ******S* 12931 Dec 23 23:56:29 218.66.95.161:3668 -> xxx.yyy.194.236:5554 SYN ******S* Dec 23 23:56:30 218.66.95.161:3133 -> xxx.yyy.194.236:1023 SYN ******S* Dec 23 23:56:32 218.66.95.161:2130 -> xxx.yyy.194.236:9898 SYN ******S* Dec 23 23:56:29 218.66.95.161:3672 -> xxx.yyy.194.235:5554 SYN ******S* Dec 23 23:56:30 218.66.95.161:3136 -> xxx.yyy.194.235:1023 SYN ******S* Dec 23 23:56:32 218.66.95.161:2150 -> xxx.yyy.194.235:9898 SYN ******S* Dec 23 23:56:29 218.66.95.161:3642 -> xxx.yyy.194.239:5554 SYN ******S* Dec 23 23:56:30 218.66.95.161:3143 -> xxx.yyy.194.239:1023 SYN ******S* [...] Dec 23 23:57:58 218.66.95.161:3794 -> xxx.yyy.194.172:9898 SYN ******S* Dec 23 23:57:58 218.66.95.161:3870 -> xxx.yyy.194.174:9898 SYN ******S* Dec 23 23:57:58 218.66.95.161:3894 -> xxx.yyy.194.179:9898 SYN ******S* Dec 23 23:57:58 218.66.95.161:3902 -> xxx.yyy.194.180:9898 SYN ******S* Dec 23 23:57:58 218.66.95.161:3763 -> xxx.yyy.194.167:9898 SYN ******S* Dec 23 23:57:58 218.66.95.161:3942 -> xxx.yyy.194.187:9898 SYN ******S* Dec 23 23:57:58 218.66.95.161:3857 -> xxx.yyy.194.173:9898 SYN ******S* Dec 23 23:57:59 218.66.95.161:4479 -> xxx.yyy.194.189:9898 SYN ******S* Dec 23 23:57:59 218.66.95.161:4480 -> xxx.yyy.194.190:9898 SYN ******S* 12497 Dec 23 23:56:02 218.93.11.10:4262 -> xxx.yyy.133.234:5554 SYN ******S* Dec 23 23:56:05 218.93.11.10:4930 -> xxx.yyy.133.234:9898 SYN ******S* Dec 23 23:56:02 218.93.11.10:4263 -> xxx.yyy.133.235:5554 SYN ******S* Dec 23 23:56:03 218.93.11.10:4434 -> xxx.yyy.133.235:1023 SYN ******S* Dec 23 23:56:05 218.93.11.10:4933 -> xxx.yyy.133.235:9898 SYN ******S* Dec 23 23:56:02 218.93.11.10:4273 -> xxx.yyy.133.236:5554 SYN ******S* Dec 23 23:56:03 218.93.11.10:4444 -> xxx.yyy.133.236:1023 SYN ******S* Dec 23 23:56:05 218.93.11.10:4972 -> xxx.yyy.133.236:9898 SYN ******S* [...] Dec 23 23:57:56 218.93.11.10:3392 -> xxx.yyy.154.12:9898 SYN ******S* Dec 23 23:57:56 218.93.11.10:3393 -> xxx.yyy.154.13:9898 SYN ******S* Dec 23 23:57:56 218.93.11.10:3395 -> xxx.yyy.154.15:9898 SYN ******S* Dec 23 23:57:56 218.93.11.10:3397 -> xxx.yyy.154.7:9898 SYN ******S* Dec 23 23:57:56 218.93.11.10:3457 -> xxx.yyy.154.35:9898 SYN ******S* Dec 23 23:57:56 218.93.11.10:3474 -> xxx.yyy.154.47:9898 SYN ******S* Dec 23 23:57:56 218.93.11.10:3476 -> xxx.yyy.154.49:9898 SYN ******S* Dec 23 23:57:56 218.93.11.10:3478 -> xxx.yyy.154.56:9898 SYN ******S* Dec 23 23:57:56 218.93.11.10:3483 -> xxx.yyy.154.61:9898 SYN ******S* 12127 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions