[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Dec 31 17:45:57 222.104.208.84:3531 -> xxx.yyy.33.1:4899 SYN ******S* Dec 31 17:45:57 222.104.208.84:3532 -> xxx.yyy.33.1:5900 SYN ******S* Dec 31 17:45:58 222.104.208.84:3533 -> xxx.yyy.33.2:5900 SYN ******S* Dec 31 17:45:58 222.104.208.84:3534 -> xxx.yyy.33.2:4899 SYN ******S* Dec 31 17:45:58 222.104.208.84:3535 -> xxx.yyy.33.3:5900 SYN ******S* Dec 31 17:45:58 222.104.208.84:3536 -> xxx.yyy.33.3:4899 SYN ******S* Dec 31 17:45:58 222.104.208.84:3537 -> xxx.yyy.33.4:5900 SYN ******S* Dec 31 17:45:56 222.104.208.84:3538 -> xxx.yyy.33.4:4899 SYN ******S* [...] Dec 31 23:59:57 222.104.208.84:3553 -> xxx.yyy.221.88:5900 SYN ******S* Dec 31 23:59:58 222.104.208.84:3568 -> xxx.yyy.220.183:5900 SYN ******S* Dec 31 23:59:58 222.104.208.84:3569 -> xxx.yyy.220.126:5900 SYN ******S* Dec 31 23:59:58 222.104.208.84:3573 -> xxx.yyy.220.229:5900 SYN ******S* Dec 31 23:59:58 222.104.208.84:3576 -> xxx.yyy.132.33:5900 SYN ******S* Dec 31 23:59:59 222.104.208.84:3584 -> xxx.yyy.221.167:5900 SYN ******S* Dec 31 23:59:59 222.104.208.84:3595 -> xxx.yyy.222.16:5900 SYN ******S* Dec 31 23:59:59 222.104.208.84:3618 -> xxx.yyy.220.179:5900 SYN ******S* 434569 Dec 31 08:31:29 81.218.142.48:22002 -> xxx.yyy.1.0:3127 SYN ******S* Dec 31 08:31:29 81.218.142.48:22002 -> xxx.yyy.1.0:1080 SYN ******S* Dec 31 08:31:29 81.218.142.48:22002 -> xxx.yyy.1.0:10080 SYN ******S* Dec 31 08:31:29 81.218.142.48:22002 -> xxx.yyy.1.0:3128 SYN ******S* Dec 31 08:31:29 81.218.142.48:22002 -> xxx.yyy.1.1:3127 SYN ******S* Dec 31 08:31:30 81.218.142.48:22002 -> xxx.yyy.1.1:1080 SYN ******S* Dec 31 08:31:30 81.218.142.48:22002 -> xxx.yyy.1.1:10080 SYN ******S* Dec 31 08:31:30 81.218.142.48:22002 -> xxx.yyy.1.1:3128 SYN ******S* [...] Dec 31 17:38:19 81.218.142.48:22002 -> xxx.yyy.255.253:10080 SYN ******S* Dec 31 17:38:19 81.218.142.48:22002 -> xxx.yyy.255.253:3128 SYN ******S* Dec 31 17:38:19 81.218.142.48:22002 -> xxx.yyy.255.254:3127 SYN ******S* Dec 31 17:38:20 81.218.142.48:22002 -> xxx.yyy.255.254:1080 SYN ******S* Dec 31 17:38:20 81.218.142.48:22002 -> xxx.yyy.255.254:3128 SYN ******S* Dec 31 17:38:20 81.218.142.48:22002 -> xxx.yyy.255.255:3127 SYN ******S* Dec 31 17:38:20 81.218.142.48:22002 -> xxx.yyy.255.255:1080 SYN ******S* Dec 31 17:38:20 81.218.142.48:22002 -> xxx.yyy.255.255:10080 SYN ******S* Dec 31 17:38:20 81.218.142.48:22002 -> xxx.yyy.255.255:3128 SYN ******S* 177619 Dec 31 06:02:16 220.35.204.115:22002 -> xxx.yyy.1.0:3127 SYN ******S* Dec 31 06:02:16 220.35.204.115:22002 -> xxx.yyy.1.0:1080 SYN ******S* Dec 31 06:02:16 220.35.204.115:22002 -> xxx.yyy.1.0:10080 SYN ******S* Dec 31 06:02:17 220.35.204.115:22002 -> xxx.yyy.1.0:3128 SYN ******S* Dec 31 06:02:17 220.35.204.115:22002 -> xxx.yyy.1.1:3127 SYN ******S* Dec 31 06:02:17 220.35.204.115:22002 -> xxx.yyy.1.1:1080 SYN ******S* Dec 31 06:02:17 220.35.204.115:22002 -> xxx.yyy.1.1:10080 SYN ******S* Dec 31 06:02:17 220.35.204.115:22002 -> xxx.yyy.1.1:3128 SYN ******S* [...] Dec 31 13:21:20 220.35.204.115:22002 -> xxx.yyy.241.53:1080 SYN ******S* Dec 31 13:21:20 220.35.204.115:22002 -> xxx.yyy.241.53:10080 SYN ******S* Dec 31 13:21:21 220.35.204.115:22002 -> xxx.yyy.241.53:3128 SYN ******S* Dec 31 13:21:21 220.35.204.115:22002 -> xxx.yyy.241.54:3127 SYN ******S* Dec 31 13:21:21 220.35.204.115:22002 -> xxx.yyy.241.54:1080 SYN ******S* Dec 31 13:21:21 220.35.204.115:22002 -> xxx.yyy.241.54:10080 SYN ******S* Dec 31 13:21:21 220.35.204.115:22002 -> xxx.yyy.241.54:3128 SYN ******S* Dec 31 13:21:21 220.35.204.115:22002 -> xxx.yyy.241.55:3127 SYN ******S* Dec 31 13:21:21 220.35.204.115:22002 -> xxx.yyy.241.55:1080 SYN ******S* 156304 Dec 31 08:36:39 221.198.27.104:4249 -> xxx.yyy.1.0:1433 SYN ******S* Dec 31 08:36:40 221.198.27.104:4252 -> xxx.yyy.1.1:1433 SYN ******S* Dec 31 08:36:40 221.198.27.104:4253 -> xxx.yyy.1.2:1433 SYN ******S* Dec 31 08:36:40 221.198.27.104:4254 -> xxx.yyy.1.3:1433 SYN ******S* Dec 31 08:36:40 221.198.27.104:4255 -> xxx.yyy.1.4:1433 SYN ******S* Dec 31 08:36:40 221.198.27.104:4256 -> xxx.yyy.1.5:1433 SYN ******S* Dec 31 08:36:40 221.198.27.104:4257 -> xxx.yyy.1.6:1433 SYN ******S* Dec 31 08:36:37 221.198.27.104:4258 -> xxx.yyy.1.7:1433 SYN ******S* [...] Dec 31 12:30:07 221.198.27.104:3972 -> xxx.yyy.255.245:1433 SYN ******S* Dec 31 12:30:08 221.198.27.104:3985 -> xxx.yyy.255.246:1433 SYN ******S* Dec 31 12:30:08 221.198.27.104:3988 -> xxx.yyy.255.247:1433 SYN ******S* Dec 31 12:30:08 221.198.27.104:3989 -> xxx.yyy.255.248:1433 SYN ******S* Dec 31 12:30:09 221.198.27.104:3995 -> xxx.yyy.255.249:1433 SYN ******S* Dec 31 12:30:09 221.198.27.104:3998 -> xxx.yyy.255.250:1433 SYN ******S* Dec 31 12:30:10 221.198.27.104:4011 -> xxx.yyy.255.253:1433 SYN ******S* Dec 31 12:30:10 221.198.27.104:4013 -> xxx.yyy.255.254:1433 SYN ******S* 123262 Dec 31 10:37:16 80.8.36.16:2491 -> xxx.yyy.1.4:1433 SYN ******S* Dec 31 10:37:16 80.8.36.16:2492 -> xxx.yyy.1.1:1433 SYN ******S* Dec 31 10:37:16 80.8.36.16:2493 -> xxx.yyy.1.2:1433 SYN ******S* Dec 31 10:37:16 80.8.36.16:2494 -> xxx.yyy.1.5:1433 SYN ******S* Dec 31 10:37:16 80.8.36.16:2496 -> xxx.yyy.1.7:1433 SYN ******S* Dec 31 10:37:16 80.8.36.16:2495 -> xxx.yyy.1.6:1433 SYN ******S* Dec 31 10:37:16 80.8.36.16:2490 -> xxx.yyy.1.3:1433 SYN ******S* Dec 31 10:37:16 80.8.36.16:2497 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 31 12:33:24 80.8.36.16:1810 -> xxx.yyy.255.245:1433 SYN ******S* Dec 31 12:33:24 80.8.36.16:1811 -> xxx.yyy.255.246:1433 SYN ******S* Dec 31 12:33:24 80.8.36.16:1820 -> xxx.yyy.255.249:1433 SYN ******S* Dec 31 12:33:25 80.8.36.16:1822 -> xxx.yyy.255.250:1433 SYN ******S* Dec 31 12:33:25 80.8.36.16:1827 -> xxx.yyy.255.252:1433 SYN ******S* Dec 31 12:33:25 80.8.36.16:1826 -> xxx.yyy.255.251:1433 SYN ******S* Dec 31 12:33:25 80.8.36.16:1834 -> xxx.yyy.255.254:1433 SYN ******S* Dec 31 12:33:25 80.8.36.16:1833 -> xxx.yyy.255.253:1433 SYN ******S* 123178 Dec 31 07:31:21 151.197.187.9:2862 -> xxx.yyy.1.1:1433 SYN ******S* Dec 31 07:31:21 151.197.187.9:2863 -> xxx.yyy.1.2:1433 SYN ******S* Dec 31 07:31:21 151.197.187.9:2864 -> xxx.yyy.1.3:1433 SYN ******S* Dec 31 07:31:21 151.197.187.9:2865 -> xxx.yyy.1.4:1433 SYN ******S* Dec 31 07:31:21 151.197.187.9:2866 -> xxx.yyy.1.5:1433 SYN ******S* Dec 31 07:31:21 151.197.187.9:2867 -> xxx.yyy.1.6:1433 SYN ******S* Dec 31 07:31:21 151.197.187.9:2868 -> xxx.yyy.1.7:1433 SYN ******S* Dec 31 07:31:21 151.197.187.9:2869 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 31 09:26:00 151.197.187.9:4062 -> xxx.yyy.255.245:1433 SYN ******S* Dec 31 09:26:00 151.197.187.9:4067 -> xxx.yyy.255.248:1433 SYN ******S* Dec 31 09:26:00 151.197.187.9:4065 -> xxx.yyy.255.246:1433 SYN ******S* Dec 31 09:26:00 151.197.187.9:4066 -> xxx.yyy.255.247:1433 SYN ******S* Dec 31 09:26:00 151.197.187.9:4072 -> xxx.yyy.255.250:1433 SYN ******S* Dec 31 09:26:00 151.197.187.9:4071 -> xxx.yyy.255.249:1433 SYN ******S* Dec 31 09:26:00 151.197.187.9:4085 -> xxx.yyy.255.252:1433 SYN ******S* Dec 31 09:26:00 151.197.187.9:4080 -> xxx.yyy.255.251:1433 SYN ******S* Dec 31 09:26:00 151.197.187.9:4108 -> xxx.yyy.255.253:1433 SYN ******S* 122751 Dec 31 07:02:24 213.3.35.218:57462 -> xxx.yyy.10.0:1433 SYN ******S* Dec 31 07:02:24 213.3.35.218:57464 -> xxx.yyy.10.2:1433 SYN ******S* Dec 31 07:02:24 213.3.35.218:57463 -> xxx.yyy.10.1:1433 SYN ******S* Dec 31 07:02:24 213.3.35.218:57466 -> xxx.yyy.10.4:1433 SYN ******S* Dec 31 07:02:24 213.3.35.218:57465 -> xxx.yyy.10.3:1433 SYN ******S* Dec 31 07:02:24 213.3.35.218:57468 -> xxx.yyy.10.6:1433 SYN ******S* Dec 31 07:02:24 213.3.35.218:57467 -> xxx.yyy.10.5:1433 SYN ******S* Dec 31 07:02:24 213.3.35.218:57475 -> xxx.yyy.10.7:1433 SYN ******S* [...] Dec 31 10:43:07 213.3.35.218:61295 -> xxx.yyy.255.246:1433 SYN ******S* Dec 31 10:43:07 213.3.35.218:61297 -> xxx.yyy.255.247:1433 SYN ******S* Dec 31 10:43:07 213.3.35.218:61299 -> xxx.yyy.255.248:1433 SYN ******S* Dec 31 10:43:07 213.3.35.218:61306 -> xxx.yyy.255.249:1433 SYN ******S* Dec 31 10:43:08 213.3.35.218:61308 -> xxx.yyy.255.250:1433 SYN ******S* Dec 31 10:43:08 213.3.35.218:61311 -> xxx.yyy.255.252:1433 SYN ******S* Dec 31 10:43:08 213.3.35.218:61310 -> xxx.yyy.255.251:1433 SYN ******S* Dec 31 10:43:08 213.3.35.218:61316 -> xxx.yyy.255.253:1433 SYN ******S* Dec 31 10:43:08 213.3.35.218:61319 -> xxx.yyy.255.254:1433 SYN ******S* 122303 Dec 31 01:49:50 211.246.176.116:4277 -> xxx.yyy.64.0:1433 SYN ******S* Dec 31 01:49:50 211.246.176.116:4278 -> xxx.yyy.64.1:1433 SYN ******S* Dec 31 01:49:50 211.246.176.116:4279 -> xxx.yyy.64.2:1433 SYN ******S* Dec 31 01:49:50 211.246.176.116:4280 -> xxx.yyy.64.3:1433 SYN ******S* Dec 31 01:49:50 211.246.176.116:4281 -> xxx.yyy.64.4:1433 SYN ******S* Dec 31 01:49:50 211.246.176.116:4282 -> xxx.yyy.64.5:1433 SYN ******S* Dec 31 01:49:50 211.246.176.116:4283 -> xxx.yyy.64.6:1433 SYN ******S* Dec 31 01:49:50 211.246.176.116:4286 -> xxx.yyy.64.9:1433 SYN ******S* [...] Dec 31 04:20:33 211.246.176.116:2994 -> xxx.yyy.232.12:1433 SYN ******S* Dec 31 04:20:33 211.246.176.116:2995 -> xxx.yyy.232.13:1433 SYN ******S* Dec 31 04:20:33 211.246.176.116:2993 -> xxx.yyy.232.11:1433 SYN ******S* Dec 31 04:20:33 211.246.176.116:2999 -> xxx.yyy.232.17:1433 SYN ******S* Dec 31 04:20:33 211.246.176.116:3000 -> xxx.yyy.232.18:1433 SYN ******S* Dec 31 04:20:33 211.246.176.116:2998 -> xxx.yyy.232.16:1433 SYN ******S* Dec 31 04:20:33 211.246.176.116:3001 -> xxx.yyy.232.19:1433 SYN ******S* Dec 31 04:20:38 211.246.176.116:3007 -> xxx.yyy.232.21:1433 SYN ******S* Dec 31 04:20:38 211.246.176.116:3008 -> xxx.yyy.232.22:1433 SYN ******S* 96717 Dec 31 21:16:49 61.190.44.81:3200 -> xxx.yyy.184.5:5900 SYN ******S* Dec 31 21:16:49 61.190.44.81:3202 -> xxx.yyy.184.6:5900 SYN ******S* Dec 31 21:16:49 61.190.44.81:3206 -> xxx.yyy.184.8:5900 SYN ******S* Dec 31 21:16:49 61.190.44.81:3209 -> xxx.yyy.184.11:5900 SYN ******S* Dec 31 21:16:49 61.190.44.81:3210 -> xxx.yyy.184.10:5900 SYN ******S* Dec 31 21:16:49 61.190.44.81:3213 -> xxx.yyy.184.12:5900 SYN ******S* Dec 31 21:16:46 61.190.44.81:3215 -> xxx.yyy.184.13:5900 SYN ******S* Dec 31 21:16:49 61.190.44.81:3217 -> xxx.yyy.184.14:5900 SYN ******S* [...] Dec 31 22:49:02 61.190.44.81:2757 -> xxx.yyy.221.103:5900 SYN ******S* Dec 31 22:49:03 61.190.44.81:2781 -> xxx.yyy.222.25:5900 SYN ******S* Dec 31 22:49:05 61.190.44.81:2848 -> xxx.yyy.209.60:5900 SYN ******S* Dec 31 22:49:07 61.190.44.81:2919 -> xxx.yyy.221.48:5900 SYN ******S* Dec 31 22:49:08 61.190.44.81:2957 -> xxx.yyy.222.11:5900 SYN ******S* Dec 31 22:49:10 61.190.44.81:3032 -> xxx.yyy.221.103:5900 SYN ******S* Dec 31 22:49:12 61.190.44.81:3079 -> xxx.yyy.222.25:5900 SYN ******S* Dec 31 22:49:13 61.190.44.81:3130 -> xxx.yyy.209.60:5900 SYN ******S* 80438 Dec 31 04:15:10 217.141.204.70:52954 -> xxx.yyy.1.1:22 SYN ******S* Dec 31 04:15:13 217.141.204.70:52958 -> xxx.yyy.1.5:22 SYN ******S* Dec 31 04:15:13 217.141.204.70:52959 -> xxx.yyy.1.6:22 SYN ******S* Dec 31 04:15:10 217.141.204.70:52962 -> xxx.yyy.1.9:22 SYN ******S* Dec 31 04:15:13 217.141.204.70:52961 -> xxx.yyy.1.8:22 SYN ******S* Dec 31 04:15:13 217.141.204.70:52960 -> xxx.yyy.1.7:22 SYN ******S* Dec 31 04:15:13 217.141.204.70:52963 -> xxx.yyy.1.10:22 SYN ******S* Dec 31 04:15:13 217.141.204.70:52966 -> xxx.yyy.1.13:22 SYN ******S* [...] Dec 31 04:25:42 217.141.204.70:61000 -> xxx.yyy.254.244:22 SYN ******S* Dec 31 04:25:42 217.141.204.70:32774 -> xxx.yyy.254.249:22 SYN ******S* Dec 31 04:25:42 217.141.204.70:32770 -> xxx.yyy.254.245:22 SYN ******S* Dec 31 04:25:42 217.141.204.70:32772 -> xxx.yyy.254.247:22 SYN ******S* Dec 31 04:25:42 217.141.204.70:32779 -> xxx.yyy.254.254:22 SYN ******S* Dec 31 04:25:42 217.141.204.70:32773 -> xxx.yyy.254.248:22 SYN ******S* Dec 31 04:25:42 217.141.204.70:32778 -> xxx.yyy.254.253:22 SYN ******S* Dec 31 04:25:42 217.141.204.70:32776 -> xxx.yyy.254.251:22 SYN ******S* Dec 31 04:25:42 217.141.204.70:32777 -> xxx.yyy.254.252:22 SYN ******S* 63053 Dec 31 06:46:22 218.104.83.179:4630 -> xxx.yyy.1.0:1433 SYN ******S* Dec 31 06:46:22 218.104.83.179:4632 -> xxx.yyy.1.1:1433 SYN ******S* Dec 31 06:46:23 218.104.83.179:4634 -> xxx.yyy.1.2:1433 SYN ******S* Dec 31 06:46:23 218.104.83.179:4636 -> xxx.yyy.1.3:1433 SYN ******S* Dec 31 06:46:23 218.104.83.179:4640 -> xxx.yyy.1.4:1433 SYN ******S* Dec 31 06:46:23 218.104.83.179:4643 -> xxx.yyy.1.5:1433 SYN ******S* Dec 31 06:46:23 218.104.83.179:4644 -> xxx.yyy.1.6:1433 SYN ******S* Dec 31 06:46:23 218.104.83.179:4647 -> xxx.yyy.1.7:1433 SYN ******S* [...] Dec 31 09:00:44 218.104.83.179:37866 -> xxx.yyy.150.178:1433 SYN ******S* Dec 31 09:00:44 218.104.83.179:37867 -> xxx.yyy.150.179:1433 SYN ******S* Dec 31 09:00:44 218.104.83.179:37646 -> xxx.yyy.150.135:1433 SYN ******S* Dec 31 09:00:44 218.104.83.179:37871 -> xxx.yyy.150.180:1433 SYN ******S* Dec 31 09:00:44 218.104.83.179:37873 -> xxx.yyy.150.181:1433 SYN ******S* Dec 31 09:00:44 218.104.83.179:37874 -> xxx.yyy.150.182:1433 SYN ******S* Dec 31 09:00:44 218.104.83.179:37875 -> xxx.yyy.150.183:1433 SYN ******S* Dec 31 09:00:44 218.104.83.179:37876 -> xxx.yyy.150.184:1433 SYN ******S* Dec 31 09:00:45 218.104.83.179:37882 -> xxx.yyy.150.185:1433 SYN ******S* 49132 [...] 45176 [...] 41306 Dec 31 09:06:40 212.88.230.61:4224 -> xxx.yyy.1.0:1433 SYN ******S* Dec 31 09:06:40 212.88.230.61:4226 -> xxx.yyy.1.1:1433 SYN ******S* Dec 31 09:06:40 212.88.230.61:4227 -> xxx.yyy.1.2:1433 SYN ******S* Dec 31 09:06:40 212.88.230.61:4228 -> xxx.yyy.1.3:1433 SYN ******S* Dec 31 09:06:40 212.88.230.61:4229 -> xxx.yyy.1.4:1433 SYN ******S* Dec 31 09:06:40 212.88.230.61:4230 -> xxx.yyy.1.5:1433 SYN ******S* Dec 31 09:06:40 212.88.230.61:4232 -> xxx.yyy.1.7:1433 SYN ******S* Dec 31 09:06:40 212.88.230.61:4231 -> xxx.yyy.1.6:1433 SYN ******S* [...] Dec 31 11:09:07 212.88.230.61:2723 -> xxx.yyy.137.142:1433 SYN ******S* Dec 31 11:09:07 212.88.230.61:2725 -> xxx.yyy.137.143:1433 SYN ******S* Dec 31 11:09:08 212.88.230.61:2733 -> xxx.yyy.137.144:1433 SYN ******S* Dec 31 11:09:08 212.88.230.61:2734 -> xxx.yyy.137.145:1433 SYN ******S* Dec 31 11:09:08 212.88.230.61:2736 -> xxx.yyy.137.146:1433 SYN ******S* Dec 31 11:09:08 212.88.230.61:2738 -> xxx.yyy.137.147:1433 SYN ******S* Dec 31 11:09:08 212.88.230.61:2740 -> xxx.yyy.137.148:1433 SYN ******S* Dec 31 11:09:08 212.88.230.61:2743 -> xxx.yyy.137.149:1433 SYN ******S* Dec 31 11:09:08 212.88.230.61:2745 -> xxx.yyy.137.150:1433 SYN ******S* 41223 Dec 31 02:58:01 217.130.26.93:4677 -> xxx.yyy.1.1:1433 SYN ******S* Dec 31 02:58:01 217.130.26.93:4679 -> xxx.yyy.1.3:1433 SYN ******S* Dec 31 02:58:01 217.130.26.93:4676 -> xxx.yyy.1.0:1433 SYN ******S* Dec 31 02:58:01 217.130.26.93:4678 -> xxx.yyy.1.2:1433 SYN ******S* Dec 31 02:58:01 217.130.26.93:4680 -> xxx.yyy.1.4:1433 SYN ******S* Dec 31 02:58:01 217.130.26.93:4681 -> xxx.yyy.1.5:1433 SYN ******S* Dec 31 02:58:01 217.130.26.93:4685 -> xxx.yyy.1.9:1433 SYN ******S* Dec 31 02:58:01 217.130.26.93:4687 -> xxx.yyy.1.11:1433 SYN ******S* [...] Dec 31 02:59:56 217.130.26.93:4642 -> xxx.yyy.255.246:1433 SYN ******S* Dec 31 02:59:56 217.130.26.93:4643 -> xxx.yyy.255.247:1433 SYN ******S* Dec 31 02:59:56 217.130.26.93:4646 -> xxx.yyy.255.250:1433 SYN ******S* Dec 31 02:59:56 217.130.26.93:4644 -> xxx.yyy.255.248:1433 SYN ******S* Dec 31 02:59:56 217.130.26.93:4645 -> xxx.yyy.255.249:1433 SYN ******S* Dec 31 02:59:56 217.130.26.93:4647 -> xxx.yyy.255.251:1433 SYN ******S* Dec 31 02:59:56 217.130.26.93:4648 -> xxx.yyy.255.252:1433 SYN ******S* Dec 31 02:59:56 217.130.26.93:4649 -> xxx.yyy.255.253:1433 SYN ******S* Dec 31 02:59:56 217.130.26.93:4650 -> xxx.yyy.255.254:1433 SYN ******S* 39133 Dec 31 08:57:28 213.213.218.44:1852 -> xxx.yyy.1.0:1433 SYN ******S* Dec 31 08:57:28 213.213.218.44:1853 -> xxx.yyy.1.1:1433 SYN ******S* Dec 31 08:57:28 213.213.218.44:1855 -> xxx.yyy.1.2:1433 SYN ******S* Dec 31 08:57:28 213.213.218.44:1857 -> xxx.yyy.1.3:1433 SYN ******S* Dec 31 08:57:28 213.213.218.44:1859 -> xxx.yyy.1.4:1433 SYN ******S* Dec 31 08:57:28 213.213.218.44:1861 -> xxx.yyy.1.5:1433 SYN ******S* Dec 31 08:57:28 213.213.218.44:1863 -> xxx.yyy.1.6:1433 SYN ******S* Dec 31 08:57:26 213.213.218.44:1865 -> xxx.yyy.1.7:1433 SYN ******S* [...] Dec 31 10:48:12 213.213.218.44:4485 -> xxx.yyy.111.248:1433 SYN ******S* Dec 31 10:48:12 213.213.218.44:4534 -> xxx.yyy.111.249:1433 SYN ******S* Dec 31 10:48:13 213.213.218.44:4568 -> xxx.yyy.111.250:1433 SYN ******S* Dec 31 10:48:14 213.213.218.44:4648 -> xxx.yyy.111.251:1433 SYN ******S* Dec 31 10:48:14 213.213.218.44:4722 -> xxx.yyy.111.252:1433 SYN ******S* Dec 31 10:48:14 213.213.218.44:4768 -> xxx.yyy.111.253:1433 SYN ******S* Dec 31 10:48:14 213.213.218.44:4790 -> xxx.yyy.111.254:1433 SYN ******S* Dec 31 10:48:14 213.213.218.44:4812 -> xxx.yyy.111.255:1433 SYN ******S* 33847 Dec 31 02:39:34 69.41.170.124:1717 -> xxx.yyy.1.0:1433 SYN ******S* Dec 31 02:39:34 69.41.170.124:1718 -> xxx.yyy.1.1:1433 SYN ******S* Dec 31 02:39:34 69.41.170.124:1719 -> xxx.yyy.1.2:1433 SYN ******S* Dec 31 02:39:34 69.41.170.124:1720 -> xxx.yyy.1.3:1433 SYN ******S* Dec 31 02:39:34 69.41.170.124:1721 -> xxx.yyy.1.4:1433 SYN ******S* Dec 31 02:39:34 69.41.170.124:1722 -> xxx.yyy.1.5:1433 SYN ******S* Dec 31 02:39:34 69.41.170.124:1723 -> xxx.yyy.1.6:1433 SYN ******S* Dec 31 02:39:34 69.41.170.124:1724 -> xxx.yyy.1.7:1433 SYN ******S* [...] Dec 31 02:40:21 69.41.170.124:1733 -> xxx.yyy.255.246:1433 SYN ******S* Dec 31 02:40:21 69.41.170.124:1734 -> xxx.yyy.255.247:1433 SYN ******S* Dec 31 02:40:21 69.41.170.124:1735 -> xxx.yyy.255.248:1433 SYN ******S* Dec 31 02:40:21 69.41.170.124:1736 -> xxx.yyy.255.249:1433 SYN ******S* Dec 31 02:40:21 69.41.170.124:1737 -> xxx.yyy.255.250:1433 SYN ******S* Dec 31 02:40:21 69.41.170.124:1738 -> xxx.yyy.255.251:1433 SYN ******S* Dec 31 02:40:21 69.41.170.124:1739 -> xxx.yyy.255.252:1433 SYN ******S* Dec 31 02:40:21 69.41.170.124:1740 -> xxx.yyy.255.253:1433 SYN ******S* Dec 31 02:40:21 69.41.170.124:1741 -> xxx.yyy.255.254:1433 SYN ******S* 31805 Dec 31 08:21:27 218.154.192.194:47617 -> xxx.yyy.1.11:22 SYN ******S* Dec 31 08:21:31 218.154.192.194:47687 -> xxx.yyy.1.111:22 SYN ******S* Dec 31 08:21:28 218.154.192.194:47624 -> xxx.yyy.1.40:22 SYN ******S* Dec 31 08:21:31 218.154.192.194:47693 -> xxx.yyy.1.112:22 SYN ******S* Dec 31 08:21:28 218.154.192.194:47623 -> xxx.yyy.1.16:22 SYN ******S* Dec 31 08:21:28 218.154.192.194:47625 -> xxx.yyy.1.41:22 SYN ******S* Dec 31 08:21:30 218.154.192.194:47675 -> xxx.yyy.1.95:22 SYN ******S* Dec 31 08:21:34 218.154.192.194:47762 -> xxx.yyy.1.95:22 SYN ******S* [...] Dec 31 09:05:55 218.154.192.194:47006 -> xxx.yyy.243.45:22 SYN ******S* Dec 31 09:05:57 218.154.192.194:47071 -> xxx.yyy.241.184:22 SYN ******S* Dec 31 09:05:58 218.154.192.194:47092 -> xxx.yyy.241.36:22 SYN ******S* Dec 31 09:06:00 218.154.192.194:47155 -> xxx.yyy.243.45:22 SYN ******S* Dec 31 09:06:04 218.154.192.194:47308 -> xxx.yyy.243.45:22 SYN ******S* Dec 31 09:06:04 218.154.192.194:47313 -> xxx.yyy.241.184:22 SYN ******S* Dec 31 09:06:08 218.154.192.194:47465 -> xxx.yyy.243.45:22 SYN ******S* Dec 31 09:06:11 218.154.192.194:47559 -> xxx.yyy.241.184:22 SYN ******S* 30104 Dec 31 00:56:16 218.164.9.108:1341 -> xxx.yyy.1.2:1433 SYN ******S* Dec 31 00:56:16 218.164.9.108:1342 -> xxx.yyy.1.3:1433 SYN ******S* Dec 31 00:56:16 218.164.9.108:1343 -> xxx.yyy.1.4:1433 SYN ******S* Dec 31 00:56:16 218.164.9.108:1344 -> xxx.yyy.1.1:1433 SYN ******S* Dec 31 00:56:16 218.164.9.108:1345 -> xxx.yyy.1.5:1433 SYN ******S* Dec 31 00:56:16 218.164.9.108:1346 -> xxx.yyy.1.6:1433 SYN ******S* Dec 31 00:56:16 218.164.9.108:1347 -> xxx.yyy.1.7:1433 SYN ******S* Dec 31 00:56:16 218.164.9.108:1348 -> xxx.yyy.1.8:1433 SYN ******S* [...] Dec 31 01:36:09 218.164.9.108:2981 -> xxx.yyy.90.15:1433 SYN ******S* Dec 31 01:36:09 218.164.9.108:2982 -> xxx.yyy.90.16:1433 SYN ******S* Dec 31 01:36:09 218.164.9.108:2983 -> xxx.yyy.90.17:1433 SYN ******S* Dec 31 01:36:09 218.164.9.108:2988 -> xxx.yyy.90.22:1433 SYN ******S* Dec 31 01:36:09 218.164.9.108:2985 -> xxx.yyy.90.19:1433 SYN ******S* Dec 31 01:36:09 218.164.9.108:2989 -> xxx.yyy.90.23:1433 SYN ******S* Dec 31 01:36:09 218.164.9.108:2986 -> xxx.yyy.90.20:1433 SYN ******S* Dec 31 01:36:09 218.164.9.108:2987 -> xxx.yyy.90.21:1433 SYN ******S* Dec 31 01:36:09 218.164.9.108:2984 -> xxx.yyy.90.18:1433 SYN ******S* 27638 Dec 31 23:53:19 218.24.170.254:4303 -> xxx.yyy.153.137:5554 SYN ******S* Dec 31 23:53:20 218.24.170.254:1163 -> xxx.yyy.153.137:1023 SYN ******S* Dec 31 23:53:22 218.24.170.254:2092 -> xxx.yyy.153.137:9898 SYN ******S* Dec 31 23:53:19 218.24.170.254:4304 -> xxx.yyy.153.138:5554 SYN ******S* Dec 31 23:53:20 218.24.170.254:1164 -> xxx.yyy.153.138:1023 SYN ******S* Dec 31 23:53:22 218.24.170.254:2071 -> xxx.yyy.153.138:9898 SYN ******S* Dec 31 23:53:19 218.24.170.254:4302 -> xxx.yyy.153.136:5554 SYN ******S* Dec 31 23:53:20 218.24.170.254:1162 -> xxx.yyy.153.136:1023 SYN ******S* [...] Dec 31 23:54:04 218.24.170.254:1304 -> xxx.yyy.153.213:9898 SYN ******S* Dec 31 23:54:04 218.24.170.254:1306 -> xxx.yyy.153.215:9898 SYN ******S* Dec 31 23:54:04 218.24.170.254:1305 -> xxx.yyy.153.214:9898 SYN ******S* Dec 31 23:54:04 218.24.170.254:1307 -> xxx.yyy.153.216:9898 SYN ******S* Dec 31 23:54:04 218.24.170.254:1308 -> xxx.yyy.173.248:9898 SYN ******S* Dec 31 23:54:04 218.24.170.254:1309 -> xxx.yyy.174.0:9898 SYN ******S* Dec 31 23:54:04 218.24.170.254:1310 -> xxx.yyy.173.255:9898 SYN ******S* Dec 31 23:54:05 218.24.170.254:1333 -> xxx.yyy.153.209:9898 SYN ******S* 15132 Dec 31 22:51:10 220.116.144.23:2957 -> xxx.yyy.154.129:5554 SYN ******S* Dec 31 22:51:11 220.116.144.23:3379 -> xxx.yyy.154.129:1023 SYN ******S* Dec 31 22:51:13 220.116.144.23:4236 -> xxx.yyy.154.129:9898 SYN ******S* Dec 31 22:51:10 220.116.144.23:2955 -> xxx.yyy.154.131:5554 SYN ******S* Dec 31 22:51:11 220.116.144.23:3377 -> xxx.yyy.154.131:1023 SYN ******S* Dec 31 22:51:13 220.116.144.23:4234 -> xxx.yyy.154.131:9898 SYN ******S* Dec 31 22:51:10 220.116.144.23:2981 -> xxx.yyy.154.104:5554 SYN ******S* Dec 31 22:51:11 220.116.144.23:3397 -> xxx.yyy.154.104:1023 SYN ******S* [...] Dec 31 22:51:55 220.116.144.23:2691 -> xxx.yyy.174.6:9898 SYN ******S* Dec 31 22:51:55 220.116.144.23:2697 -> xxx.yyy.174.7:9898 SYN ******S* Dec 31 22:51:55 220.116.144.23:2700 -> xxx.yyy.174.9:9898 SYN ******S* Dec 31 22:51:55 220.116.144.23:2698 -> xxx.yyy.174.8:9898 SYN ******S* Dec 31 22:51:55 220.116.144.23:2704 -> xxx.yyy.174.10:9898 SYN ******S* Dec 31 22:51:55 220.116.144.23:2706 -> xxx.yyy.174.11:9898 SYN ******S* Dec 31 22:51:55 220.116.144.23:2718 -> xxx.yyy.174.12:9898 SYN ******S* Dec 31 22:51:55 220.116.144.23:2716 -> xxx.yyy.174.13:9898 SYN ******S* Dec 31 22:51:56 220.116.144.23:2862 -> xxx.yyy.174.14:9898 SYN ******S* 15122 Dec 31 23:56:32 221.127.95.139:4655 -> xxx.yyy.214.246:5554 SYN ******S* Dec 31 23:56:33 221.127.95.139:1225 -> xxx.yyy.214.246:1023 SYN ******S* Dec 31 23:56:35 221.127.95.139:2681 -> xxx.yyy.214.246:9898 SYN ******S* Dec 31 23:56:32 221.127.95.139:4680 -> xxx.yyy.214.247:5554 SYN ******S* Dec 31 23:56:33 221.127.95.139:1233 -> xxx.yyy.214.247:1023 SYN ******S* Dec 31 23:56:35 221.127.95.139:2684 -> xxx.yyy.214.247:9898 SYN ******S* Dec 31 23:56:32 221.127.95.139:4822 -> xxx.yyy.214.249:5554 SYN ******S* Dec 31 23:56:33 221.127.95.139:1386 -> xxx.yyy.214.249:1023 SYN ******S* [...] Dec 31 23:58:15 221.127.95.139:1401 -> xxx.yyy.235.112:9898 SYN ******S* Dec 31 23:58:13 221.127.95.139:4274 -> xxx.yyy.235.59:9898 SYN ******S* Dec 31 23:58:14 221.127.95.139:4831 -> xxx.yyy.235.70:9898 SYN ******S* Dec 31 23:58:14 221.127.95.139:4837 -> xxx.yyy.235.99:9898 SYN ******S* Dec 31 23:58:14 221.127.95.139:4849 -> xxx.yyy.235.76:9898 SYN ******S* Dec 31 23:58:14 221.127.95.139:4881 -> xxx.yyy.235.75:9898 SYN ******S* Dec 31 23:58:14 221.127.95.139:4883 -> xxx.yyy.235.74:9898 SYN ******S* Dec 31 23:58:14 221.127.95.139:4875 -> xxx.yyy.235.89:9898 SYN ******S* 14911 Dec 31 22:55:22 220.127.249.182:2604 -> xxx.yyy.71.160:5554 SYN ******S* Dec 31 22:55:23 220.127.249.182:3117 -> xxx.yyy.71.160:1023 SYN ******S* Dec 31 22:55:25 220.127.249.182:4083 -> xxx.yyy.71.160:9898 SYN ******S* Dec 31 22:55:22 220.127.249.182:2605 -> xxx.yyy.71.161:5554 SYN ******S* Dec 31 22:55:23 220.127.249.182:3118 -> xxx.yyy.71.161:1023 SYN ******S* Dec 31 22:55:25 220.127.249.182:4087 -> xxx.yyy.71.161:9898 SYN ******S* Dec 31 22:55:22 220.127.249.182:2606 -> xxx.yyy.71.162:5554 SYN ******S* Dec 31 22:55:23 220.127.249.182:3119 -> xxx.yyy.71.162:1023 SYN ******S* [...] Dec 31 22:56:11 220.127.249.182:2944 -> xxx.yyy.91.102:9898 SYN ******S* Dec 31 22:56:11 220.127.249.182:2937 -> xxx.yyy.91.68:9898 SYN ******S* Dec 31 22:56:11 220.127.249.182:2940 -> xxx.yyy.91.71:9898 SYN ******S* Dec 31 22:56:11 220.127.249.182:2934 -> xxx.yyy.91.65:9898 SYN ******S* Dec 31 22:56:11 220.127.249.182:2943 -> xxx.yyy.91.101:9898 SYN ******S* Dec 31 22:56:12 220.127.249.182:3318 -> xxx.yyy.92.21:9898 SYN ******S* Dec 31 22:56:12 220.127.249.182:3312 -> xxx.yyy.92.18:9898 SYN ******S* Dec 31 22:56:12 220.127.249.182:3309 -> xxx.yyy.92.12:9898 SYN ******S* 14510 Dec 31 23:56:36 218.25.12.200:2110 -> xxx.yyy.71.160:5554 SYN ******S* Dec 31 23:56:37 218.25.12.200:2730 -> xxx.yyy.71.160:1023 SYN ******S* Dec 31 23:56:39 218.25.12.200:3733 -> xxx.yyy.71.160:9898 SYN ******S* Dec 31 23:56:36 218.25.12.200:2113 -> xxx.yyy.71.163:5554 SYN ******S* Dec 31 23:56:39 218.25.12.200:3737 -> xxx.yyy.71.163:9898 SYN ******S* Dec 31 23:56:36 218.25.12.200:2112 -> xxx.yyy.71.162:5554 SYN ******S* Dec 31 23:56:39 218.25.12.200:3736 -> xxx.yyy.71.162:9898 SYN ******S* Dec 31 23:56:36 218.25.12.200:2111 -> xxx.yyy.71.161:5554 SYN ******S* [...] Dec 31 23:57:21 218.25.12.200:1337 -> xxx.yyy.91.217:9898 SYN ******S* Dec 31 23:57:21 218.25.12.200:1340 -> xxx.yyy.91.220:9898 SYN ******S* Dec 31 23:57:21 218.25.12.200:1341 -> xxx.yyy.91.221:9898 SYN ******S* Dec 31 23:57:21 218.25.12.200:1342 -> xxx.yyy.91.222:9898 SYN ******S* Dec 31 23:57:21 218.25.12.200:1345 -> xxx.yyy.91.223:9898 SYN ******S* Dec 31 23:57:21 218.25.12.200:1497 -> xxx.yyy.91.224:9898 SYN ******S* Dec 31 23:57:21 218.25.12.200:1499 -> xxx.yyy.91.225:9898 SYN ******S* Dec 31 23:57:21 218.25.12.200:1500 -> xxx.yyy.91.226:9898 SYN ******S* 14146 Dec 31 22:57:38 222.99.145.227:2613 -> xxx.yyy.174.225:5554 SYN ******S* Dec 31 22:57:39 222.99.145.227:3510 -> xxx.yyy.174.225:1023 SYN ******S* Dec 31 22:57:38 222.99.145.227:2620 -> xxx.yyy.174.227:5554 SYN ******S* Dec 31 22:57:39 222.99.145.227:3512 -> xxx.yyy.174.227:1023 SYN ******S* Dec 31 22:57:38 222.99.145.227:2629 -> xxx.yyy.174.231:5554 SYN ******S* Dec 31 22:57:41 222.99.145.227:1445 -> xxx.yyy.174.231:9898 SYN ******S* Dec 31 22:57:38 222.99.145.227:2616 -> xxx.yyy.174.223:5554 SYN ******S* Dec 31 22:57:39 222.99.145.227:3446 -> xxx.yyy.174.223:1023 SYN ******S* [...] Dec 31 22:58:50 222.99.145.227:4535 -> xxx.yyy.195.22:9898 SYN ******S* Dec 31 22:58:50 222.99.145.227:4538 -> xxx.yyy.195.23:9898 SYN ******S* Dec 31 22:58:50 222.99.145.227:4527 -> xxx.yyy.195.21:9898 SYN ******S* Dec 31 22:58:50 222.99.145.227:4539 -> xxx.yyy.195.28:9898 SYN ******S* Dec 31 22:58:50 222.99.145.227:4561 -> xxx.yyy.195.30:9898 SYN ******S* Dec 31 22:58:50 222.99.145.227:4563 -> xxx.yyy.195.32:9898 SYN ******S* Dec 31 22:58:50 222.99.145.227:4564 -> xxx.yyy.195.43:9898 SYN ******S* Dec 31 22:58:50 222.99.145.227:4562 -> xxx.yyy.195.31:9898 SYN ******S* Dec 31 22:58:51 222.99.145.227:4221 -> xxx.yyy.195.74:9898 SYN ******S* 13416 [...] 13187 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions