[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Dec 27 05:25:50 218.57.138.157:2736 -> xxx.yyy.1.1:3389 SYN ******S* Dec 27 05:25:51 218.57.138.157:4274 -> xxx.yyy.1.1:1433 SYN ******S* Dec 27 05:25:50 218.57.138.157:2789 -> xxx.yyy.1.2:3389 SYN ******S* Dec 27 05:25:51 218.57.138.157:4367 -> xxx.yyy.1.2:1433 SYN ******S* Dec 27 05:25:50 218.57.138.157:2845 -> xxx.yyy.1.3:3389 SYN ******S* Dec 27 05:25:51 218.57.138.157:4465 -> xxx.yyy.1.3:1433 SYN ******S* Dec 27 05:25:51 218.57.138.157:2948 -> xxx.yyy.1.4:3389 SYN ******S* Dec 27 05:25:51 218.57.138.157:4644 -> xxx.yyy.1.4:1433 SYN ******S* [...] Dec 27 06:46:56 218.57.138.157:2351 -> xxx.yyy.255.231:80 SYN ******S* Dec 27 06:46:57 218.57.138.157:2466 -> xxx.yyy.255.235:80 SYN ******S* Dec 27 06:46:57 218.57.138.157:2458 -> xxx.yyy.255.234:80 SYN ******S* Dec 27 06:46:57 218.57.138.157:2564 -> xxx.yyy.255.238:80 SYN ******S* Dec 27 06:46:57 218.57.138.157:2567 -> xxx.yyy.255.239:80 SYN ******S* Dec 27 06:46:57 218.57.138.157:2630 -> xxx.yyy.255.241:80 SYN ******S* Dec 27 06:46:57 218.57.138.157:2714 -> xxx.yyy.255.243:80 SYN ******S* Dec 27 06:46:59 218.57.138.157:3295 -> xxx.yyy.255.252:80 SYN ******S* Dec 27 06:46:59 218.57.138.157:3399 -> xxx.yyy.255.254:80 SYN ******S* 209844 [...] 192262 Dec 27 04:27:09 217.164.16.61:3937 -> xxx.yyy.1.1:1433 SYN ******S* Dec 27 04:27:09 217.164.16.61:3939 -> xxx.yyy.1.3:1433 SYN ******S* Dec 27 04:27:09 217.164.16.61:3940 -> xxx.yyy.1.4:1433 SYN ******S* Dec 27 04:27:09 217.164.16.61:3944 -> xxx.yyy.1.8:1433 SYN ******S* Dec 27 04:27:09 217.164.16.61:3942 -> xxx.yyy.1.6:1433 SYN ******S* Dec 27 04:27:09 217.164.16.61:3946 -> xxx.yyy.1.10:1433 SYN ******S* Dec 27 04:27:09 217.164.16.61:3938 -> xxx.yyy.1.2:1433 SYN ******S* Dec 27 04:27:09 217.164.16.61:3941 -> xxx.yyy.1.5:1433 SYN ******S* [...] Dec 27 06:21:32 217.164.16.61:4728 -> xxx.yyy.255.244:1433 SYN ******S* Dec 27 06:21:32 217.164.16.61:4727 -> xxx.yyy.255.243:1433 SYN ******S* Dec 27 06:21:32 217.164.16.61:4737 -> xxx.yyy.255.251:1433 SYN ******S* Dec 27 06:21:32 217.164.16.61:4735 -> xxx.yyy.255.249:1433 SYN ******S* Dec 27 06:21:32 217.164.16.61:4738 -> xxx.yyy.255.252:1433 SYN ******S* Dec 27 06:21:32 217.164.16.61:4734 -> xxx.yyy.255.248:1433 SYN ******S* Dec 27 06:21:32 217.164.16.61:4736 -> xxx.yyy.255.250:1433 SYN ******S* Dec 27 06:21:32 217.164.16.61:4740 -> xxx.yyy.255.254:1433 SYN ******S* Dec 27 06:21:33 217.164.16.61:4739 -> xxx.yyy.255.253:1433 SYN ******S* 125353 Dec 27 11:56:43 172.201.41.45:3297 -> xxx.yyy.1.4:1433 SYN ******S* Dec 27 11:56:43 172.201.41.45:3302 -> xxx.yyy.1.5:1433 SYN ******S* Dec 27 11:56:43 172.201.41.45:3303 -> xxx.yyy.1.1:1433 SYN ******S* Dec 27 11:56:43 172.201.41.45:3304 -> xxx.yyy.1.3:1433 SYN ******S* Dec 27 11:56:43 172.201.41.45:3305 -> xxx.yyy.1.2:1433 SYN ******S* Dec 27 11:56:43 172.201.41.45:3306 -> xxx.yyy.1.6:1433 SYN ******S* Dec 27 11:56:43 172.201.41.45:3307 -> xxx.yyy.1.7:1433 SYN ******S* Dec 27 11:56:43 172.201.41.45:3308 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 27 13:51:01 172.201.41.45:4415 -> xxx.yyy.255.247:1433 SYN ******S* Dec 27 13:51:01 172.201.41.45:4414 -> xxx.yyy.255.246:1433 SYN ******S* Dec 27 13:51:01 172.201.41.45:4419 -> xxx.yyy.255.248:1433 SYN ******S* Dec 27 13:51:01 172.201.41.45:4420 -> xxx.yyy.255.249:1433 SYN ******S* Dec 27 13:51:02 172.201.41.45:4423 -> xxx.yyy.255.250:1433 SYN ******S* Dec 27 13:51:02 172.201.41.45:4437 -> xxx.yyy.255.251:1433 SYN ******S* Dec 27 13:51:02 172.201.41.45:4443 -> xxx.yyy.255.254:1433 SYN ******S* Dec 27 13:51:02 172.201.41.45:4439 -> xxx.yyy.255.253:1433 SYN ******S* Dec 27 13:51:02 172.201.41.45:4438 -> xxx.yyy.255.252:1433 SYN ******S* 123189 Dec 27 13:19:46 207.237.199.126:3554 -> xxx.yyy.1.1:1433 SYN ******S* Dec 27 13:19:46 207.237.199.126:3556 -> xxx.yyy.1.2:1433 SYN ******S* Dec 27 13:19:46 207.237.199.126:3558 -> xxx.yyy.1.3:1433 SYN ******S* Dec 27 13:19:46 207.237.199.126:3562 -> xxx.yyy.1.6:1433 SYN ******S* Dec 27 13:19:46 207.237.199.126:3564 -> xxx.yyy.1.7:1433 SYN ******S* Dec 27 13:19:46 207.237.199.126:3566 -> xxx.yyy.1.8:1433 SYN ******S* Dec 27 13:19:46 207.237.199.126:3567 -> xxx.yyy.1.9:1433 SYN ******S* Dec 27 13:19:46 207.237.199.126:3569 -> xxx.yyy.1.10:1433 SYN ******S* [...] Dec 27 15:14:08 207.237.199.126:2573 -> xxx.yyy.255.247:1433 SYN ******S* Dec 27 15:14:08 207.237.199.126:2572 -> xxx.yyy.255.246:1433 SYN ******S* Dec 27 15:14:08 207.237.199.126:2571 -> xxx.yyy.255.245:1433 SYN ******S* Dec 27 15:14:09 207.237.199.126:2581 -> xxx.yyy.255.253:1433 SYN ******S* Dec 27 15:14:09 207.237.199.126:2580 -> xxx.yyy.255.252:1433 SYN ******S* Dec 27 15:14:09 207.237.199.126:2579 -> xxx.yyy.255.251:1433 SYN ******S* Dec 27 15:14:09 207.237.199.126:2578 -> xxx.yyy.255.250:1433 SYN ******S* Dec 27 15:14:09 207.237.199.126:2576 -> xxx.yyy.255.249:1433 SYN ******S* Dec 27 15:14:09 207.237.199.126:2584 -> xxx.yyy.255.254:1433 SYN ******S* 120461 Dec 27 00:20:52 218.62.60.254:3976 -> xxx.yyy.64.0:1433 SYN ******S* Dec 27 00:20:52 218.62.60.254:3977 -> xxx.yyy.64.1:1433 SYN ******S* Dec 27 00:20:52 218.62.60.254:3978 -> xxx.yyy.64.2:1433 SYN ******S* Dec 27 00:20:52 218.62.60.254:3979 -> xxx.yyy.64.3:1433 SYN ******S* Dec 27 00:20:52 218.62.60.254:3980 -> xxx.yyy.64.4:1433 SYN ******S* Dec 27 00:20:52 218.62.60.254:3981 -> xxx.yyy.64.5:1433 SYN ******S* Dec 27 00:20:52 218.62.60.254:3982 -> xxx.yyy.64.6:1433 SYN ******S* Dec 27 00:20:52 218.62.60.254:3983 -> xxx.yyy.64.7:1433 SYN ******S* [...] Dec 27 03:13:43 218.62.60.254:3929 -> xxx.yyy.255.246:1433 SYN ******S* Dec 27 03:13:43 218.62.60.254:3932 -> xxx.yyy.255.247:1433 SYN ******S* Dec 27 03:13:43 218.62.60.254:3933 -> xxx.yyy.255.248:1433 SYN ******S* Dec 27 03:13:43 218.62.60.254:3940 -> xxx.yyy.255.249:1433 SYN ******S* Dec 27 03:13:44 218.62.60.254:3941 -> xxx.yyy.255.250:1433 SYN ******S* Dec 27 03:13:44 218.62.60.254:3946 -> xxx.yyy.255.251:1433 SYN ******S* Dec 27 03:13:44 218.62.60.254:3947 -> xxx.yyy.255.252:1433 SYN ******S* Dec 27 03:13:44 218.62.60.254:3954 -> xxx.yyy.255.253:1433 SYN ******S* Dec 27 03:13:44 218.62.60.254:3955 -> xxx.yyy.255.254:1433 SYN ******S* 114584 Dec 27 15:20:57 64.1.133.150:2156 -> xxx.yyy.1.1:1433 SYN ******S* Dec 27 15:20:57 64.1.133.150:2158 -> xxx.yyy.1.2:1433 SYN ******S* Dec 27 15:20:57 64.1.133.150:2159 -> xxx.yyy.1.3:1433 SYN ******S* Dec 27 15:20:57 64.1.133.150:2170 -> xxx.yyy.1.4:1433 SYN ******S* Dec 27 15:20:57 64.1.133.150:2180 -> xxx.yyy.1.5:1433 SYN ******S* Dec 27 15:20:57 64.1.133.150:2185 -> xxx.yyy.1.6:1433 SYN ******S* Dec 27 15:20:57 64.1.133.150:2187 -> xxx.yyy.1.7:1433 SYN ******S* Dec 27 15:20:57 64.1.133.150:2188 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 27 17:06:35 64.1.133.150:1948 -> xxx.yyy.211.224:1433 SYN ******S* Dec 27 17:06:35 64.1.133.150:1943 -> xxx.yyy.211.222:1433 SYN ******S* Dec 27 17:06:35 64.1.133.150:1953 -> xxx.yyy.211.228:1433 SYN ******S* Dec 27 17:06:35 64.1.133.150:1951 -> xxx.yyy.211.226:1433 SYN ******S* Dec 27 17:06:35 64.1.133.150:1952 -> xxx.yyy.211.227:1433 SYN ******S* Dec 27 17:06:35 64.1.133.150:1958 -> xxx.yyy.211.231:1433 SYN ******S* Dec 27 17:06:35 64.1.133.150:1954 -> xxx.yyy.211.229:1433 SYN ******S* Dec 27 17:06:35 64.1.133.150:1955 -> xxx.yyy.211.230:1433 SYN ******S* 92973 Dec 27 21:53:27 220.95.72.252:41421 -> xxx.yyy.1.1:6112 SYN ******S* Dec 27 21:53:27 220.95.72.252:41422 -> xxx.yyy.1.0:6112 SYN ******S* Dec 27 21:53:27 220.95.72.252:41423 -> xxx.yyy.1.2:6112 SYN ******S* Dec 27 21:53:27 220.95.72.252:41424 -> xxx.yyy.1.3:6112 SYN ******S* Dec 27 21:53:30 220.95.72.252:41425 -> xxx.yyy.1.4:6112 SYN ******S* Dec 27 21:53:30 220.95.72.252:41426 -> xxx.yyy.1.5:6112 SYN ******S* Dec 27 21:53:30 220.95.72.252:41427 -> xxx.yyy.1.6:6112 SYN ******S* Dec 27 21:53:30 220.95.72.252:41428 -> xxx.yyy.1.7:6112 SYN ******S* [...] Dec 27 22:20:19 220.95.72.252:41151 -> xxx.yyy.255.236:6112 SYN ******S* Dec 27 22:20:19 220.95.72.252:41152 -> xxx.yyy.255.237:6112 SYN ******S* Dec 27 22:20:19 220.95.72.252:41153 -> xxx.yyy.255.238:6112 SYN ******S* Dec 27 22:20:19 220.95.72.252:41155 -> xxx.yyy.255.240:6112 SYN ******S* Dec 27 22:20:19 220.95.72.252:41156 -> xxx.yyy.255.241:6112 SYN ******S* Dec 27 22:20:19 220.95.72.252:41157 -> xxx.yyy.255.243:6112 SYN ******S* Dec 27 22:20:19 220.95.72.252:41158 -> xxx.yyy.255.242:6112 SYN ******S* Dec 27 22:20:19 220.95.72.252:41159 -> xxx.yyy.255.244:6112 SYN ******S* 81642 Dec 27 12:29:26 68.193.60.3:32893 -> xxx.yyy.1.0:6112 SYN ******S* Dec 27 12:29:26 68.193.60.3:32894 -> xxx.yyy.1.1:6112 SYN ******S* Dec 27 12:29:26 68.193.60.3:32896 -> xxx.yyy.1.2:6112 SYN ******S* Dec 27 12:29:26 68.193.60.3:32898 -> xxx.yyy.1.3:6112 SYN ******S* Dec 27 12:29:29 68.193.60.3:32900 -> xxx.yyy.1.4:6112 SYN ******S* Dec 27 12:29:29 68.193.60.3:32902 -> xxx.yyy.1.5:6112 SYN ******S* Dec 27 12:29:29 68.193.60.3:32903 -> xxx.yyy.1.6:6112 SYN ******S* Dec 27 12:29:29 68.193.60.3:32905 -> xxx.yyy.1.7:6112 SYN ******S* [...] Dec 27 12:56:00 68.193.60.3:55432 -> xxx.yyy.255.247:6112 SYN ******S* Dec 27 12:56:00 68.193.60.3:55434 -> xxx.yyy.255.249:6112 SYN ******S* Dec 27 12:56:00 68.193.60.3:55433 -> xxx.yyy.255.248:6112 SYN ******S* Dec 27 12:56:00 68.193.60.3:55437 -> xxx.yyy.255.250:6112 SYN ******S* Dec 27 12:56:00 68.193.60.3:55440 -> xxx.yyy.255.251:6112 SYN ******S* Dec 27 12:56:00 68.193.60.3:55442 -> xxx.yyy.255.252:6112 SYN ******S* Dec 27 12:56:00 68.193.60.3:55446 -> xxx.yyy.255.254:6112 SYN ******S* Dec 27 12:56:00 68.193.60.3:55445 -> xxx.yyy.255.253:6112 SYN ******S* 81012 Dec 27 05:33:32 195.132.49.69:3302 -> xxx.yyy.1.1:1433 SYN ******S* Dec 27 05:33:35 195.132.49.69:3309 -> xxx.yyy.1.2:1433 SYN ******S* Dec 27 05:33:35 195.132.49.69:3316 -> xxx.yyy.1.3:1433 SYN ******S* Dec 27 05:33:35 195.132.49.69:3323 -> xxx.yyy.1.4:1433 SYN ******S* Dec 27 05:33:35 195.132.49.69:3332 -> xxx.yyy.1.5:1433 SYN ******S* Dec 27 05:33:35 195.132.49.69:3360 -> xxx.yyy.1.9:1433 SYN ******S* Dec 27 05:33:35 195.132.49.69:3368 -> xxx.yyy.1.10:1433 SYN ******S* Dec 27 05:33:35 195.132.49.69:3375 -> xxx.yyy.1.11:1433 SYN ******S* [...] Dec 27 09:22:19 195.132.49.69:1172 -> xxx.yyy.255.246:1433 SYN ******S* Dec 27 09:22:19 195.132.49.69:1261 -> xxx.yyy.255.247:1433 SYN ******S* Dec 27 09:22:19 195.132.49.69:1331 -> xxx.yyy.255.248:1433 SYN ******S* Dec 27 09:22:19 195.132.49.69:1341 -> xxx.yyy.255.249:1433 SYN ******S* Dec 27 09:22:20 195.132.49.69:1596 -> xxx.yyy.255.251:1433 SYN ******S* Dec 27 09:22:20 195.132.49.69:1592 -> xxx.yyy.255.250:1433 SYN ******S* Dec 27 09:22:20 195.132.49.69:1600 -> xxx.yyy.255.252:1433 SYN ******S* Dec 27 09:22:20 195.132.49.69:1630 -> xxx.yyy.255.253:1433 SYN ******S* Dec 27 09:22:20 195.132.49.69:1685 -> xxx.yyy.255.254:1433 SYN ******S* 78306 Dec 27 05:57:23 202.110.225.195:51811 -> xxx.yyy.1.9:22 SYN ******S* Dec 27 05:57:26 202.110.225.195:51810 -> xxx.yyy.1.8:22 SYN ******S* Dec 27 05:57:26 202.110.225.195:51812 -> xxx.yyy.1.10:22 SYN ******S* Dec 27 05:57:23 202.110.225.195:51813 -> xxx.yyy.1.11:22 SYN ******S* Dec 27 05:57:26 202.110.225.195:51827 -> xxx.yyy.1.25:22 SYN ******S* Dec 27 05:57:26 202.110.225.195:51826 -> xxx.yyy.1.24:22 SYN ******S* Dec 27 05:57:26 202.110.225.195:51828 -> xxx.yyy.1.26:22 SYN ******S* Dec 27 05:57:23 202.110.225.195:51843 -> xxx.yyy.1.41:22 SYN ******S* [...] Dec 27 06:36:32 202.110.225.195:49574 -> xxx.yyy.229.249:22 SYN ******S* Dec 27 06:36:32 202.110.225.195:49575 -> xxx.yyy.229.254:22 SYN ******S* Dec 27 06:36:37 202.110.225.195:50378 -> xxx.yyy.229.228:22 SYN ******S* Dec 27 06:36:38 202.110.225.195:50774 -> xxx.yyy.229.249:22 SYN ******S* Dec 27 06:36:38 202.110.225.195:50775 -> xxx.yyy.229.254:22 SYN ******S* Dec 27 06:36:44 202.110.225.195:51576 -> xxx.yyy.229.249:22 SYN ******S* Dec 27 06:36:44 202.110.225.195:51578 -> xxx.yyy.229.228:22 SYN ******S* Dec 27 06:36:44 202.110.225.195:51579 -> xxx.yyy.229.254:22 SYN ******S* 76460 Dec 27 11:11:22 210.178.201.170:2034 -> xxx.yyy.1.2:1433 SYN ******S* Dec 27 11:11:22 210.178.201.170:2035 -> xxx.yyy.1.3:1433 SYN ******S* Dec 27 11:11:22 210.178.201.170:2033 -> xxx.yyy.1.1:1433 SYN ******S* Dec 27 11:11:19 210.178.201.170:2037 -> xxx.yyy.1.5:1433 SYN ******S* Dec 27 11:11:22 210.178.201.170:2036 -> xxx.yyy.1.4:1433 SYN ******S* Dec 27 11:11:22 210.178.201.170:2038 -> xxx.yyy.1.6:1433 SYN ******S* Dec 27 11:11:22 210.178.201.170:2040 -> xxx.yyy.1.8:1433 SYN ******S* Dec 27 11:11:22 210.178.201.170:2039 -> xxx.yyy.1.7:1433 SYN ******S* [...] Dec 27 11:22:35 210.178.201.170:4150 -> xxx.yyy.255.235:1433 SYN ******S* Dec 27 11:22:35 210.178.201.170:4153 -> xxx.yyy.255.238:1433 SYN ******S* Dec 27 11:22:35 210.178.201.170:4147 -> xxx.yyy.255.232:1433 SYN ******S* Dec 27 11:22:35 210.178.201.170:4154 -> xxx.yyy.255.239:1433 SYN ******S* Dec 27 11:22:35 210.178.201.170:4148 -> xxx.yyy.255.233:1433 SYN ******S* Dec 27 11:22:36 210.178.201.170:4160 -> xxx.yyy.255.245:1433 SYN ******S* Dec 27 11:22:36 210.178.201.170:4158 -> xxx.yyy.255.243:1433 SYN ******S* Dec 27 11:22:36 210.178.201.170:4159 -> xxx.yyy.255.244:1433 SYN ******S* Dec 27 11:22:36 210.178.201.170:4156 -> xxx.yyy.255.241:1433 SYN ******S* 74623 Dec 27 04:32:25 218.29.219.84:3090 -> xxx.yyy.1.0:1433 SYN ******S* Dec 27 04:32:25 218.29.219.84:3093 -> xxx.yyy.1.1:1433 SYN ******S* Dec 27 04:32:25 218.29.219.84:3098 -> xxx.yyy.1.2:1433 SYN ******S* Dec 27 04:32:25 218.29.219.84:3099 -> xxx.yyy.1.3:1433 SYN ******S* Dec 27 04:32:25 218.29.219.84:3104 -> xxx.yyy.1.5:1433 SYN ******S* Dec 27 04:32:25 218.29.219.84:3108 -> xxx.yyy.1.6:1433 SYN ******S* Dec 27 04:32:25 218.29.219.84:3109 -> xxx.yyy.1.7:1433 SYN ******S* Dec 27 04:32:25 218.29.219.84:3112 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 27 07:16:40 218.29.219.84:2153 -> xxx.yyy.185.253:1433 SYN ******S* Dec 27 07:16:40 218.29.219.84:2417 -> xxx.yyy.186.65:1433 SYN ******S* Dec 27 07:16:40 218.29.219.84:2420 -> xxx.yyy.186.66:1433 SYN ******S* Dec 27 07:16:40 218.29.219.84:2161 -> xxx.yyy.185.254:1433 SYN ******S* Dec 27 07:16:40 218.29.219.84:2425 -> xxx.yyy.186.67:1433 SYN ******S* Dec 27 07:16:40 218.29.219.84:2165 -> xxx.yyy.185.255:1433 SYN ******S* Dec 27 07:16:40 218.29.219.84:2170 -> xxx.yyy.186.0:1433 SYN ******S* Dec 27 07:16:41 218.29.219.84:2431 -> xxx.yyy.186.68:1433 SYN ******S* Dec 27 07:16:41 218.29.219.84:2180 -> xxx.yyy.186.1:1433 SYN ******S* 72504 Dec 27 18:18:20 212.223.135.70:4617 -> xxx.yyy.1.1:1433 SYN ******S* Dec 27 18:18:20 212.223.135.70:4618 -> xxx.yyy.1.2:1433 SYN ******S* Dec 27 18:18:20 212.223.135.70:4619 -> xxx.yyy.1.3:1433 SYN ******S* Dec 27 18:18:20 212.223.135.70:4620 -> xxx.yyy.1.4:1433 SYN ******S* Dec 27 18:18:20 212.223.135.70:4621 -> xxx.yyy.1.5:1433 SYN ******S* Dec 27 18:18:20 212.223.135.70:4622 -> xxx.yyy.1.6:1433 SYN ******S* Dec 27 18:18:20 212.223.135.70:4623 -> xxx.yyy.1.7:1433 SYN ******S* Dec 27 18:18:20 212.223.135.70:4624 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 27 18:21:55 212.223.135.70:2660 -> xxx.yyy.255.230:1433 SYN ******S* Dec 27 18:21:55 212.223.135.70:2676 -> xxx.yyy.255.246:1433 SYN ******S* Dec 27 18:21:55 212.223.135.70:2628 -> xxx.yyy.255.198:1433 SYN ******S* Dec 27 18:21:55 212.223.135.70:2657 -> xxx.yyy.255.227:1433 SYN ******S* Dec 27 18:21:55 212.223.135.70:2673 -> xxx.yyy.255.243:1433 SYN ******S* Dec 27 18:21:55 212.223.135.70:2625 -> xxx.yyy.255.195:1433 SYN ******S* Dec 27 18:21:55 212.223.135.70:2641 -> xxx.yyy.255.211:1433 SYN ******S* Dec 27 18:21:55 212.223.135.70:2670 -> xxx.yyy.255.240:1433 SYN ******S* 71729 Dec 27 12:51:28 210.54.12.146:3992 -> xxx.yyy.1.1:1433 SYN ******S* Dec 27 12:51:28 210.54.12.146:3993 -> xxx.yyy.1.2:1433 SYN ******S* Dec 27 12:51:28 210.54.12.146:3994 -> xxx.yyy.1.3:1433 SYN ******S* Dec 27 12:51:28 210.54.12.146:3995 -> xxx.yyy.1.4:1433 SYN ******S* Dec 27 12:51:28 210.54.12.146:3996 -> xxx.yyy.1.5:1433 SYN ******S* Dec 27 12:51:25 210.54.12.146:3997 -> xxx.yyy.1.6:1433 SYN ******S* Dec 27 12:51:25 210.54.12.146:3998 -> xxx.yyy.1.7:1433 SYN ******S* Dec 27 12:51:28 210.54.12.146:3999 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 27 13:03:06 210.54.12.146:3062 -> xxx.yyy.255.239:1433 SYN ******S* Dec 27 13:03:06 210.54.12.146:3075 -> xxx.yyy.255.252:1433 SYN ******S* Dec 27 13:03:06 210.54.12.146:3076 -> xxx.yyy.255.253:1433 SYN ******S* Dec 27 13:03:06 210.54.12.146:3073 -> xxx.yyy.255.250:1433 SYN ******S* Dec 27 13:03:06 210.54.12.146:3070 -> xxx.yyy.255.247:1433 SYN ******S* Dec 27 13:03:06 210.54.12.146:3074 -> xxx.yyy.255.251:1433 SYN ******S* Dec 27 13:03:06 210.54.12.146:3072 -> xxx.yyy.255.249:1433 SYN ******S* Dec 27 13:03:06 210.54.12.146:3077 -> xxx.yyy.255.254:1433 SYN ******S* Dec 27 13:03:06 210.54.12.146:3071 -> xxx.yyy.255.248:1433 SYN ******S* 70650 Dec 27 23:16:53 65.170.141.132:3958 -> xxx.yyy.1.1:1433 SYN ******S* Dec 27 23:16:56 65.170.141.132:3959 -> xxx.yyy.1.2:1433 SYN ******S* Dec 27 23:16:56 65.170.141.132:3960 -> xxx.yyy.1.3:1433 SYN ******S* Dec 27 23:16:53 65.170.141.132:3961 -> xxx.yyy.1.4:1433 SYN ******S* Dec 27 23:16:56 65.170.141.132:3962 -> xxx.yyy.1.5:1433 SYN ******S* Dec 27 23:16:53 65.170.141.132:3963 -> xxx.yyy.1.6:1433 SYN ******S* Dec 27 23:16:53 65.170.141.132:3964 -> xxx.yyy.1.7:1433 SYN ******S* Dec 27 23:16:56 65.170.141.132:3965 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 27 23:28:41 65.170.141.132:2598 -> xxx.yyy.255.240:1433 SYN ******S* Dec 27 23:28:41 65.170.141.132:2599 -> xxx.yyy.255.241:1433 SYN ******S* Dec 27 23:28:41 65.170.141.132:2603 -> xxx.yyy.255.244:1433 SYN ******S* Dec 27 23:28:41 65.170.141.132:2611 -> xxx.yyy.255.252:1433 SYN ******S* Dec 27 23:28:41 65.170.141.132:2608 -> xxx.yyy.255.249:1433 SYN ******S* Dec 27 23:28:41 65.170.141.132:2613 -> xxx.yyy.255.254:1433 SYN ******S* Dec 27 23:28:41 65.170.141.132:2610 -> xxx.yyy.255.251:1433 SYN ******S* Dec 27 23:28:41 65.170.141.132:2607 -> xxx.yyy.255.248:1433 SYN ******S* 62129 Dec 27 19:15:54 211.142.52.122:1842 -> xxx.yyy.1.11:1433 SYN ******S* Dec 27 19:15:54 211.142.52.122:1845 -> xxx.yyy.1.12:1433 SYN ******S* Dec 27 19:15:54 211.142.52.122:1848 -> xxx.yyy.1.13:1433 SYN ******S* Dec 27 19:15:57 211.142.52.122:1884 -> xxx.yyy.1.25:1433 SYN ******S* Dec 27 19:15:57 211.142.52.122:1886 -> xxx.yyy.1.26:1433 SYN ******S* Dec 27 19:15:57 211.142.52.122:1890 -> xxx.yyy.1.27:1433 SYN ******S* Dec 27 19:15:54 211.142.52.122:1907 -> xxx.yyy.1.33:1433 SYN ******S* Dec 27 19:15:57 211.142.52.122:1910 -> xxx.yyy.1.34:1433 SYN ******S* [...] Dec 27 21:22:15 211.142.52.122:1364 -> xxx.yyy.141.205:1433 SYN ******S* Dec 27 21:22:17 211.142.52.122:1472 -> xxx.yyy.141.209:1433 SYN ******S* Dec 27 21:22:17 211.142.52.122:1485 -> xxx.yyy.141.210:1433 SYN ******S* Dec 27 21:22:17 211.142.52.122:1494 -> xxx.yyy.141.211:1433 SYN ******S* Dec 27 21:22:18 211.142.52.122:1498 -> xxx.yyy.141.212:1433 SYN ******S* Dec 27 21:22:18 211.142.52.122:1367 -> xxx.yyy.141.206:1433 SYN ******S* Dec 27 21:22:18 211.142.52.122:1501 -> xxx.yyy.141.213:1433 SYN ******S* Dec 27 21:22:19 211.142.52.122:1553 -> xxx.yyy.141.217:1433 SYN ******S* 37030 Dec 27 18:16:39 66.244.88.25:1180 -> xxx.yyy.1.1:1433 SYN ******S* Dec 27 18:16:39 66.244.88.25:1183 -> xxx.yyy.1.4:1433 SYN ******S* Dec 27 18:16:39 66.244.88.25:1186 -> xxx.yyy.1.7:1433 SYN ******S* Dec 27 18:16:39 66.244.88.25:1189 -> xxx.yyy.1.10:1433 SYN ******S* Dec 27 18:16:42 66.244.88.25:1194 -> xxx.yyy.1.15:1433 SYN ******S* Dec 27 18:16:42 66.244.88.25:1196 -> xxx.yyy.1.16:1433 SYN ******S* Dec 27 18:16:42 66.244.88.25:1197 -> xxx.yyy.1.18:1433 SYN ******S* Dec 27 18:16:42 66.244.88.25:1200 -> xxx.yyy.1.21:1433 SYN ******S* [...] Dec 27 18:27:36 66.244.88.25:2260 -> xxx.yyy.255.244:1433 SYN ******S* Dec 27 18:27:36 66.244.88.25:2262 -> xxx.yyy.255.248:1433 SYN ******S* Dec 27 18:27:36 66.244.88.25:2264 -> xxx.yyy.255.249:1433 SYN ******S* Dec 27 18:27:36 66.244.88.25:2265 -> xxx.yyy.255.251:1433 SYN ******S* Dec 27 18:27:36 66.244.88.25:2270 -> xxx.yyy.255.254:1433 SYN ******S* Dec 27 18:27:38 66.244.88.25:1921 -> xxx.yyy.254.200:1433 SYN ******S* Dec 27 18:27:39 66.244.88.25:2088 -> xxx.yyy.255.98:1433 SYN ******S* Dec 27 18:27:39 66.244.88.25:2242 -> xxx.yyy.255.229:1433 SYN ******S* 20659 Dec 27 00:13:39 80.201.166.153:1836 -> xxx.yyy.75.141:10277 SYN ******S* Dec 27 00:13:39 80.201.166.153:1837 -> xxx.yyy.75.141:10274 SYN ******S* Dec 27 00:13:39 80.201.166.153:1838 -> xxx.yyy.75.141:10270 SYN ******S* Dec 27 00:13:39 80.201.166.153:1839 -> xxx.yyy.75.141:10279 SYN ******S* Dec 27 00:13:41 80.201.166.153:1844 -> xxx.yyy.75.141:10272 SYN ******S* Dec 27 00:13:45 80.201.166.153:1839 -> xxx.yyy.75.141:10279 SYN ******S* Dec 27 00:13:45 80.201.166.153:1838 -> xxx.yyy.75.141:10270 SYN ******S* Dec 27 00:13:45 80.201.166.153:1837 -> xxx.yyy.75.141:10274 SYN ******S* [...] Dec 27 12:22:23 80.201.166.153:1062 -> xxx.yyy.75.141:10277 SYN ******S* Dec 27 12:22:23 80.201.166.153:1038 -> xxx.yyy.75.141:10274 SYN ******S* Dec 27 12:22:25 80.201.166.153:1060 -> xxx.yyy.75.141:10270 SYN ******S* Dec 27 12:22:26 80.201.166.153:1062 -> xxx.yyy.75.141:10277 SYN ******S* Dec 27 12:22:32 80.201.166.153:1100 -> xxx.yyy.75.141:10274 SYN ******S* Dec 27 12:22:31 80.201.166.153:1060 -> xxx.yyy.75.141:10270 SYN ******S* Dec 27 12:22:32 80.201.166.153:1062 -> xxx.yyy.75.141:10277 SYN ******S* Dec 27 12:22:34 80.201.166.153:1129 -> xxx.yyy.75.141:10272 SYN ******S* 19376 Dec 27 00:30:47 203.240.197.156:2751 -> xxx.yyy.1.0:12345 SYN ******S* Dec 27 00:30:47 203.240.197.156:2752 -> xxx.yyy.1.0:27374 SYN ******S* Dec 27 00:30:45 203.240.197.156:2753 -> xxx.yyy.1.0:901 SYN ******S* Dec 27 00:30:45 203.240.197.156:2754 -> xxx.yyy.1.0:3410 SYN ******S* Dec 27 00:30:47 203.240.197.156:2755 -> xxx.yyy.1.1:12345 SYN ******S* Dec 27 00:30:47 203.240.197.156:2756 -> xxx.yyy.1.1:27374 SYN ******S* Dec 27 00:30:46 203.240.197.156:2757 -> xxx.yyy.1.1:901 SYN ******S* Dec 27 00:30:46 203.240.197.156:2758 -> xxx.yyy.1.1:3410 SYN ******S* [...] Dec 27 00:54:56 203.240.197.156:1489 -> xxx.yyy.22.248:901 SYN ******S* Dec 27 00:54:56 203.240.197.156:1490 -> xxx.yyy.22.248:3410 SYN ******S* Dec 27 00:54:56 203.240.197.156:1491 -> xxx.yyy.22.249:12345 SYN ******S* Dec 27 00:54:56 203.240.197.156:1492 -> xxx.yyy.22.249:27374 SYN ******S* Dec 27 00:54:56 203.240.197.156:1493 -> xxx.yyy.22.249:901 SYN ******S* Dec 27 00:54:56 203.240.197.156:1494 -> xxx.yyy.22.249:3410 SYN ******S* Dec 27 00:54:58 203.240.197.156:1516 -> xxx.yyy.22.255:27374 SYN ******S* Dec 27 00:54:58 203.240.197.156:1517 -> xxx.yyy.22.255:901 SYN ******S* Dec 27 00:54:58 203.240.197.156:1523 -> xxx.yyy.22.255:3410 SYN ******S* 19294 [...] 19006 Dec 27 22:52:20 203.228.118.107:2137 -> xxx.yyy.71.160:5554 SYN ******S* Dec 27 22:52:21 203.228.118.107:2286 -> xxx.yyy.71.160:1023 SYN ******S* Dec 27 22:52:23 203.228.118.107:2631 -> xxx.yyy.71.160:9898 SYN ******S* Dec 27 22:52:20 203.228.118.107:2139 -> xxx.yyy.71.162:5554 SYN ******S* Dec 27 22:52:21 203.228.118.107:2295 -> xxx.yyy.71.162:1023 SYN ******S* Dec 27 22:52:23 203.228.118.107:2640 -> xxx.yyy.71.162:9898 SYN ******S* Dec 27 22:52:20 203.228.118.107:2138 -> xxx.yyy.71.161:5554 SYN ******S* Dec 27 22:52:21 203.228.118.107:2293 -> xxx.yyy.71.161:1023 SYN ******S* [...] Dec 27 22:54:21 203.228.118.107:4427 -> xxx.yyy.91.240:9898 SYN ******S* Dec 27 22:54:21 203.228.118.107:4437 -> xxx.yyy.91.249:9898 SYN ******S* Dec 27 22:54:21 203.228.118.107:4441 -> xxx.yyy.92.0:9898 SYN ******S* Dec 27 22:54:21 203.228.118.107:4446 -> xxx.yyy.92.1:9898 SYN ******S* Dec 27 22:54:22 203.228.118.107:4453 -> xxx.yyy.92.4:9898 SYN ******S* Dec 27 22:54:22 203.228.118.107:4451 -> xxx.yyy.92.2:9898 SYN ******S* Dec 27 22:54:22 203.228.118.107:4452 -> xxx.yyy.92.3:9898 SYN ******S* Dec 27 22:54:22 203.228.118.107:4455 -> xxx.yyy.92.5:9898 SYN ******S* 15274 Dec 27 22:50:56 220.78.137.159:2810 -> xxx.yyy.153.169:5554 SYN ******S* Dec 27 22:50:57 220.78.137.159:3384 -> xxx.yyy.153.169:1023 SYN ******S* Dec 27 22:50:59 220.78.137.159:1216 -> xxx.yyy.153.169:9898 SYN ******S* Dec 27 22:50:56 220.78.137.159:2818 -> xxx.yyy.153.162:5554 SYN ******S* Dec 27 22:50:57 220.78.137.159:3389 -> xxx.yyy.153.162:1023 SYN ******S* Dec 27 22:50:59 220.78.137.159:1222 -> xxx.yyy.153.162:9898 SYN ******S* Dec 27 22:50:56 220.78.137.159:2811 -> xxx.yyy.153.168:5554 SYN ******S* Dec 27 22:50:57 220.78.137.159:3385 -> xxx.yyy.153.168:1023 SYN ******S* [...] Dec 27 22:52:24 220.78.137.159:2792 -> xxx.yyy.153.158:1023 SYN ******S* Dec 27 22:52:25 220.78.137.159:4378 -> xxx.yyy.153.158:9898 SYN ******S* Dec 27 22:52:22 220.78.137.159:2181 -> xxx.yyy.153.171:5554 SYN ******S* Dec 27 22:52:23 220.78.137.159:2796 -> xxx.yyy.153.171:1023 SYN ******S* Dec 27 22:52:25 220.78.137.159:4388 -> xxx.yyy.153.171:9898 SYN ******S* Dec 27 22:52:23 220.78.137.159:2180 -> xxx.yyy.153.159:5554 SYN ******S* Dec 27 22:52:24 220.78.137.159:2793 -> xxx.yyy.153.159:1023 SYN ******S* Dec 27 22:52:25 220.78.137.159:4379 -> xxx.yyy.153.159:9898 SYN ******S* 15062 Dec 27 22:58:10 220.70.94.143:1802 -> xxx.yyy.133.240:5554 SYN ******S* Dec 27 22:58:11 220.70.94.143:2425 -> xxx.yyy.133.240:1023 SYN ******S* Dec 27 22:58:13 220.70.94.143:3987 -> xxx.yyy.133.240:9898 SYN ******S* Dec 27 22:58:10 220.70.94.143:1798 -> xxx.yyy.133.237:5554 SYN ******S* Dec 27 22:58:11 220.70.94.143:2421 -> xxx.yyy.133.237:1023 SYN ******S* Dec 27 22:58:13 220.70.94.143:3903 -> xxx.yyy.133.237:9898 SYN ******S* Dec 27 22:58:10 220.70.94.143:1803 -> xxx.yyy.133.242:5554 SYN ******S* Dec 27 22:58:11 220.70.94.143:2426 -> xxx.yyy.133.242:1023 SYN ******S* [...] Dec 27 22:58:58 220.70.94.143:4335 -> xxx.yyy.154.73:9898 SYN ******S* Dec 27 22:58:58 220.70.94.143:4338 -> xxx.yyy.154.75:9898 SYN ******S* Dec 27 22:58:58 220.70.94.143:4337 -> xxx.yyy.154.74:9898 SYN ******S* Dec 27 22:58:58 220.70.94.143:4350 -> xxx.yyy.134.7:9898 SYN ******S* Dec 27 22:58:58 220.70.94.143:4348 -> xxx.yyy.134.5:9898 SYN ******S* Dec 27 22:58:58 220.70.94.143:4362 -> xxx.yyy.134.10:9898 SYN ******S* Dec 27 22:58:58 220.70.94.143:4341 -> xxx.yyy.154.77:9898 SYN ******S* Dec 27 22:58:58 220.70.94.143:4358 -> xxx.yyy.134.6:9898 SYN ******S* Dec 27 22:58:58 220.70.94.143:4372 -> xxx.yyy.154.51:9898 SYN ******S* 14621 Dec 27 23:56:35 218.11.241.83:1392 -> xxx.yyy.133.14:5554 SYN ******S* Dec 27 23:56:38 218.11.241.83:3509 -> xxx.yyy.133.14:9898 SYN ******S* Dec 27 23:56:35 218.11.241.83:1399 -> xxx.yyy.133.15:5554 SYN ******S* Dec 27 23:56:38 218.11.241.83:3512 -> xxx.yyy.133.15:9898 SYN ******S* Dec 27 23:56:35 218.11.241.83:1403 -> xxx.yyy.133.16:5554 SYN ******S* Dec 27 23:56:38 218.11.241.83:3520 -> xxx.yyy.133.16:9898 SYN ******S* Dec 27 23:56:35 218.11.241.83:1404 -> xxx.yyy.133.17:5554 SYN ******S* Dec 27 23:56:38 218.11.241.83:3521 -> xxx.yyy.133.17:9898 SYN ******S* [...] Dec 27 23:57:16 218.11.241.83:1687 -> xxx.yyy.153.129:9898 SYN ******S* Dec 27 23:57:16 218.11.241.83:1686 -> xxx.yyy.153.128:9898 SYN ******S* Dec 27 23:57:16 218.11.241.83:1700 -> xxx.yyy.153.130:9898 SYN ******S* Dec 27 23:57:16 218.11.241.83:1721 -> xxx.yyy.153.132:9898 SYN ******S* Dec 27 23:57:16 218.11.241.83:1715 -> xxx.yyy.153.131:9898 SYN ******S* Dec 27 23:57:16 218.11.241.83:1725 -> xxx.yyy.153.133:9898 SYN ******S* Dec 27 23:57:16 218.11.241.83:1728 -> xxx.yyy.153.134:9898 SYN ******S* Dec 27 23:57:16 218.11.241.83:1736 -> xxx.yyy.153.135:9898 SYN ******S* Dec 27 23:57:16 218.11.241.83:1738 -> xxx.yyy.153.136:9898 SYN ******S* 14007 Dec 27 00:05:13 220.169.37.171:50637 -> xxx.yyy.174.3:5554 SYN ******S* Dec 27 00:05:14 220.169.37.171:50086 -> xxx.yyy.174.3:1023 SYN ******S* Dec 27 00:05:16 220.169.37.171:50928 -> xxx.yyy.174.3:9898 SYN ******S* Dec 27 00:05:13 220.169.37.171:50656 -> xxx.yyy.174.5:5554 SYN ******S* Dec 27 00:05:14 220.169.37.171:50097 -> xxx.yyy.174.5:1023 SYN ******S* Dec 27 00:05:16 220.169.37.171:50934 -> xxx.yyy.174.5:9898 SYN ******S* Dec 27 00:05:13 220.169.37.171:50669 -> xxx.yyy.174.7:5554 SYN ******S* Dec 27 00:05:14 220.169.37.171:50104 -> xxx.yyy.174.7:1023 SYN ******S* [...] Dec 27 00:06:06 220.169.37.171:50427 -> xxx.yyy.194.120:9898 SYN ******S* Dec 27 00:06:06 220.169.37.171:50419 -> xxx.yyy.194.119:9898 SYN ******S* Dec 27 00:06:06 220.169.37.171:50432 -> xxx.yyy.194.124:9898 SYN ******S* Dec 27 00:06:06 220.169.37.171:50428 -> xxx.yyy.194.121:9898 SYN ******S* Dec 27 00:06:06 220.169.37.171:50431 -> xxx.yyy.194.123:9898 SYN ******S* Dec 27 00:06:06 220.169.37.171:50472 -> xxx.yyy.179.28:9898 SYN ******S* Dec 27 00:06:07 220.169.37.171:51020 -> xxx.yyy.194.2:9898 SYN ******S* Dec 27 00:06:07 220.169.37.171:51016 -> xxx.yyy.193.249:9898 SYN ******S* Dec 27 00:06:07 220.169.37.171:50019 -> xxx.yyy.194.14:9898 SYN ******S* 13408 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions