[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Jan 2 00:00:02 172.174.233.228:1447 -> xxx.yyy.174.87:4899 SYN ******S* Jan 2 00:00:04 172.174.233.228:1492 -> xxx.yyy.174.100:5900 SYN ******S* Jan 2 00:00:04 172.174.233.228:1493 -> xxx.yyy.174.100:4899 SYN ******S* Jan 2 00:00:07 172.174.233.228:1589 -> xxx.yyy.174.127:5900 SYN ******S* Jan 2 00:00:07 172.174.233.228:1591 -> xxx.yyy.174.127:4899 SYN ******S* Jan 2 00:00:04 172.174.233.228:1488 -> xxx.yyy.174.99:4899 SYN ******S* Jan 2 00:00:04 172.174.233.228:1592 -> xxx.yyy.132.73:5900 SYN ******S* Jan 2 00:00:07 172.174.233.228:1593 -> xxx.yyy.174.128:5900 SYN ******S* [...] Jan 2 10:08:03 172.174.233.228:3785 -> xxx.yyy.220.213:5900 SYN ******S* Jan 2 10:08:03 172.174.233.228:3787 -> xxx.yyy.221.183:5900 SYN ******S* Jan 2 10:08:03 172.174.233.228:3788 -> xxx.yyy.221.48:5900 SYN ******S* Jan 2 10:08:03 172.174.233.228:3789 -> xxx.yyy.209.60:5900 SYN ******S* Jan 2 10:08:03 172.174.233.228:3791 -> xxx.yyy.221.98:5900 SYN ******S* Jan 2 10:08:03 172.174.233.228:3792 -> xxx.yyy.222.15:5900 SYN ******S* Jan 2 10:08:04 172.174.233.228:3793 -> xxx.yyy.221.72:5900 SYN ******S* Jan 2 10:08:04 172.174.233.228:3794 -> xxx.yyy.220.212:5900 SYN ******S* Jan 2 10:08:04 172.174.233.228:3795 -> xxx.yyy.221.50:5900 SYN ******S* 541279 Jan 2 21:03:45 218.148.213.9:1259 -> xxx.yyy.232.1:5900 SYN ******S* Jan 2 21:03:43 218.148.213.9:1261 -> xxx.yyy.232.2:5900 SYN ******S* Jan 2 21:03:45 218.148.213.9:1265 -> xxx.yyy.232.4:5900 SYN ******S* Jan 2 21:03:45 218.148.213.9:1263 -> xxx.yyy.232.3:5900 SYN ******S* Jan 2 21:03:45 218.148.213.9:1267 -> xxx.yyy.232.5:5900 SYN ******S* Jan 2 21:03:45 218.148.213.9:1269 -> xxx.yyy.232.6:5900 SYN ******S* Jan 2 21:03:45 218.148.213.9:1271 -> xxx.yyy.232.7:5900 SYN ******S* Jan 2 21:03:45 218.148.213.9:1273 -> xxx.yyy.232.8:5900 SYN ******S* [...] Jan 2 23:59:57 218.148.213.9:2624 -> xxx.yyy.222.15:5900 SYN ******S* Jan 2 23:59:57 218.148.213.9:2628 -> xxx.yyy.206.242:5900 SYN ******S* Jan 2 23:59:57 218.148.213.9:2642 -> xxx.yyy.222.3:5900 SYN ******S* Jan 2 23:59:58 218.148.213.9:2740 -> xxx.yyy.220.66:5900 SYN ******S* Jan 2 23:59:58 218.148.213.9:2748 -> xxx.yyy.220.127:5900 SYN ******S* Jan 2 23:59:58 218.148.213.9:2754 -> xxx.yyy.222.38:5900 SYN ******S* Jan 2 23:59:58 218.148.213.9:2759 -> xxx.yyy.221.189:5900 SYN ******S* Jan 2 23:59:58 218.148.213.9:2764 -> xxx.yyy.220.114:5900 SYN ******S* Jan 2 23:59:59 218.148.213.9:2787 -> xxx.yyy.132.73:5900 SYN ******S* 148483 Jan 2 05:15:00 203.113.173.32:4621 -> xxx.yyy.1.2:1433 SYN ******S* Jan 2 05:15:00 203.113.173.32:4622 -> xxx.yyy.1.1:1433 SYN ******S* Jan 2 05:15:00 203.113.173.32:4624 -> xxx.yyy.1.4:1433 SYN ******S* Jan 2 05:15:00 203.113.173.32:4623 -> xxx.yyy.1.3:1433 SYN ******S* Jan 2 05:15:00 203.113.173.32:4625 -> xxx.yyy.1.5:1433 SYN ******S* Jan 2 05:15:00 203.113.173.32:4626 -> xxx.yyy.1.6:1433 SYN ******S* Jan 2 05:15:00 203.113.173.32:4627 -> xxx.yyy.1.7:1433 SYN ******S* Jan 2 05:15:00 203.113.173.32:4628 -> xxx.yyy.1.8:1433 SYN ******S* [...] Jan 2 07:10:00 203.113.173.32:15838 -> xxx.yyy.255.243:1433 SYN ******S* Jan 2 07:10:00 203.113.173.32:15842 -> xxx.yyy.255.244:1433 SYN ******S* Jan 2 07:10:00 203.113.173.32:15844 -> xxx.yyy.255.246:1433 SYN ******S* Jan 2 07:10:00 203.113.173.32:15843 -> xxx.yyy.255.245:1433 SYN ******S* Jan 2 07:10:00 203.113.173.32:15845 -> xxx.yyy.255.247:1433 SYN ******S* Jan 2 07:10:00 203.113.173.32:15849 -> xxx.yyy.255.248:1433 SYN ******S* Jan 2 07:10:00 203.113.173.32:15850 -> xxx.yyy.255.249:1433 SYN ******S* Jan 2 07:10:00 203.113.173.32:15855 -> xxx.yyy.255.252:1433 SYN ******S* Jan 2 07:10:01 203.113.173.32:15861 -> xxx.yyy.255.254:1433 SYN ******S* 124882 Jan 2 08:09:02 210.85.34.121:2880 -> xxx.yyy.1.0:1433 SYN ******S* Jan 2 08:09:02 210.85.34.121:2882 -> xxx.yyy.1.1:1433 SYN ******S* Jan 2 08:09:02 210.85.34.121:2884 -> xxx.yyy.1.2:1433 SYN ******S* Jan 2 08:09:02 210.85.34.121:2888 -> xxx.yyy.1.3:1433 SYN ******S* Jan 2 08:09:02 210.85.34.121:2889 -> xxx.yyy.1.4:1433 SYN ******S* Jan 2 08:09:02 210.85.34.121:2890 -> xxx.yyy.1.5:1433 SYN ******S* Jan 2 08:09:02 210.85.34.121:2891 -> xxx.yyy.1.6:1433 SYN ******S* Jan 2 08:09:02 210.85.34.121:2892 -> xxx.yyy.1.7:1433 SYN ******S* [...] Jan 2 11:58:21 210.85.34.121:26765 -> xxx.yyy.255.247:1433 SYN ******S* Jan 2 11:58:21 210.85.34.121:26785 -> xxx.yyy.255.249:1433 SYN ******S* Jan 2 11:58:21 210.85.34.121:26783 -> xxx.yyy.255.248:1433 SYN ******S* Jan 2 11:58:22 210.85.34.121:26840 -> xxx.yyy.255.251:1433 SYN ******S* Jan 2 11:58:22 210.85.34.121:26837 -> xxx.yyy.255.250:1433 SYN ******S* Jan 2 11:58:22 210.85.34.121:26852 -> xxx.yyy.255.252:1433 SYN ******S* Jan 2 11:58:22 210.85.34.121:26856 -> xxx.yyy.255.253:1433 SYN ******S* Jan 2 11:58:23 210.85.34.121:26885 -> xxx.yyy.255.254:1433 SYN ******S* 123862 Jan 2 10:13:47 195.23.5.33:54532 -> xxx.yyy.1.1:4899 SYN ******S* Jan 2 10:13:47 195.23.5.33:54533 -> xxx.yyy.1.2:4899 SYN ******S* Jan 2 10:13:49 195.23.5.33:54535 -> xxx.yyy.1.4:4899 SYN ******S* Jan 2 10:13:47 195.23.5.33:54534 -> xxx.yyy.1.3:4899 SYN ******S* Jan 2 10:13:49 195.23.5.33:54537 -> xxx.yyy.1.5:4899 SYN ******S* Jan 2 10:13:49 195.23.5.33:54538 -> xxx.yyy.1.6:4899 SYN ******S* Jan 2 10:13:49 195.23.5.33:54539 -> xxx.yyy.1.7:4899 SYN ******S* Jan 2 10:13:49 195.23.5.33:54540 -> xxx.yyy.1.8:4899 SYN ******S* [...] Jan 2 10:25:50 195.23.5.33:57290 -> xxx.yyy.255.227:4899 SYN ******S* Jan 2 10:25:50 195.23.5.33:57265 -> xxx.yyy.255.202:4899 SYN ******S* Jan 2 10:25:50 195.23.5.33:57317 -> xxx.yyy.255.254:4899 SYN ******S* Jan 2 10:25:50 195.23.5.33:57267 -> xxx.yyy.255.204:4899 SYN ******S* Jan 2 10:25:50 195.23.5.33:57291 -> xxx.yyy.255.228:4899 SYN ******S* Jan 2 10:25:50 195.23.5.33:57266 -> xxx.yyy.255.203:4899 SYN ******S* Jan 2 10:25:50 195.23.5.33:57239 -> xxx.yyy.255.176:4899 SYN ******S* Jan 2 10:25:50 195.23.5.33:57240 -> xxx.yyy.255.177:4899 SYN ******S* 99312 Jan 2 18:37:48 210.146.115.78:1082 -> xxx.yyy.83.1:1433 SYN ******S* Jan 2 18:37:48 210.146.115.78:1083 -> xxx.yyy.83.2:1433 SYN ******S* Jan 2 18:37:48 210.146.115.78:1084 -> xxx.yyy.83.3:1433 SYN ******S* Jan 2 18:37:48 210.146.115.78:1085 -> xxx.yyy.83.4:1433 SYN ******S* Jan 2 18:37:48 210.146.115.78:1086 -> xxx.yyy.83.5:1433 SYN ******S* Jan 2 18:37:48 210.146.115.78:1087 -> xxx.yyy.83.6:1433 SYN ******S* Jan 2 18:37:48 210.146.115.78:1088 -> xxx.yyy.83.7:1433 SYN ******S* Jan 2 18:37:48 210.146.115.78:1089 -> xxx.yyy.83.8:1433 SYN ******S* [...] Jan 2 22:14:27 210.146.115.78:3144 -> xxx.yyy.255.245:1433 SYN ******S* Jan 2 22:14:28 210.146.115.78:3147 -> xxx.yyy.255.248:1433 SYN ******S* Jan 2 22:14:28 210.146.115.78:3148 -> xxx.yyy.255.249:1433 SYN ******S* Jan 2 22:14:28 210.146.115.78:3149 -> xxx.yyy.255.250:1433 SYN ******S* Jan 2 22:14:28 210.146.115.78:3150 -> xxx.yyy.255.251:1433 SYN ******S* Jan 2 22:14:28 210.146.115.78:3152 -> xxx.yyy.255.253:1433 SYN ******S* Jan 2 22:14:28 210.146.115.78:3151 -> xxx.yyy.255.252:1433 SYN ******S* Jan 2 22:14:28 210.146.115.78:3153 -> xxx.yyy.255.254:1433 SYN ******S* 98484 Jan 2 10:48:16 82.36.144.173:3088 -> xxx.yyy.1.0:1433 SYN ******S* Jan 2 10:48:16 82.36.144.173:3093 -> xxx.yyy.1.2:1433 SYN ******S* Jan 2 10:48:16 82.36.144.173:3094 -> xxx.yyy.1.3:1433 SYN ******S* Jan 2 10:48:16 82.36.144.173:3092 -> xxx.yyy.1.1:1433 SYN ******S* Jan 2 10:48:16 82.36.144.173:3096 -> xxx.yyy.1.5:1433 SYN ******S* Jan 2 10:48:16 82.36.144.173:3095 -> xxx.yyy.1.4:1433 SYN ******S* Jan 2 10:48:16 82.36.144.173:3097 -> xxx.yyy.1.6:1433 SYN ******S* Jan 2 10:48:16 82.36.144.173:3101 -> xxx.yyy.1.9:1433 SYN ******S* [...] Jan 2 14:04:22 82.36.144.173:4418 -> xxx.yyy.219.102:1433 SYN ******S* Jan 2 14:04:22 82.36.144.173:4600 -> xxx.yyy.219.121:1433 SYN ******S* Jan 2 14:04:22 82.36.144.173:4430 -> xxx.yyy.219.103:1433 SYN ******S* Jan 2 14:04:22 82.36.144.173:4607 -> xxx.yyy.219.122:1433 SYN ******S* Jan 2 14:04:22 82.36.144.173:4433 -> xxx.yyy.219.104:1433 SYN ******S* Jan 2 14:04:22 82.36.144.173:4614 -> xxx.yyy.219.124:1433 SYN ******S* Jan 2 14:04:22 82.36.144.173:4611 -> xxx.yyy.219.123:1433 SYN ******S* Jan 2 14:04:22 82.36.144.173:4435 -> xxx.yyy.219.105:1433 SYN ******S* Jan 2 14:04:22 82.36.144.173:4617 -> xxx.yyy.219.125:1433 SYN ******S* 97374 Jan 2 11:00:27 24.228.4.1:2000 -> xxx.yyy.1.1:1433 SYN ******S* Jan 2 11:00:30 24.228.4.1:2001 -> xxx.yyy.1.2:1433 SYN ******S* Jan 2 11:00:30 24.228.4.1:2002 -> xxx.yyy.1.3:1433 SYN ******S* Jan 2 11:00:30 24.228.4.1:2003 -> xxx.yyy.1.4:1433 SYN ******S* Jan 2 11:00:30 24.228.4.1:2004 -> xxx.yyy.1.5:1433 SYN ******S* Jan 2 11:00:30 24.228.4.1:2005 -> xxx.yyy.1.6:1433 SYN ******S* Jan 2 11:00:30 24.228.4.1:2006 -> xxx.yyy.1.7:1433 SYN ******S* Jan 2 11:00:30 24.228.4.1:2007 -> xxx.yyy.1.8:1433 SYN ******S* [...] Jan 2 11:11:23 24.228.4.1:4827 -> xxx.yyy.255.244:1433 SYN ******S* Jan 2 11:11:23 24.228.4.1:4828 -> xxx.yyy.255.245:1433 SYN ******S* Jan 2 11:11:23 24.228.4.1:4829 -> xxx.yyy.255.246:1433 SYN ******S* Jan 2 11:11:23 24.228.4.1:4831 -> xxx.yyy.255.248:1433 SYN ******S* Jan 2 11:11:23 24.228.4.1:4830 -> xxx.yyy.255.247:1433 SYN ******S* Jan 2 11:11:24 24.228.4.1:4835 -> xxx.yyy.255.252:1433 SYN ******S* Jan 2 11:11:24 24.228.4.1:4836 -> xxx.yyy.255.253:1433 SYN ******S* Jan 2 11:11:24 24.228.4.1:4837 -> xxx.yyy.255.254:1433 SYN ******S* 75008 Jan 2 16:55:11 64.58.187.122:4093 -> xxx.yyy.1.1:1433 SYN ******S* Jan 2 16:55:11 64.58.187.122:4097 -> xxx.yyy.1.2:1433 SYN ******S* Jan 2 16:55:11 64.58.187.122:4101 -> xxx.yyy.1.3:1433 SYN ******S* Jan 2 16:55:11 64.58.187.122:4105 -> xxx.yyy.1.4:1433 SYN ******S* Jan 2 16:55:11 64.58.187.122:4109 -> xxx.yyy.1.5:1433 SYN ******S* Jan 2 16:55:11 64.58.187.122:4113 -> xxx.yyy.1.6:1433 SYN ******S* Jan 2 16:55:08 64.58.187.122:4117 -> xxx.yyy.1.7:1433 SYN ******S* Jan 2 16:55:11 64.58.187.122:4121 -> xxx.yyy.1.8:1433 SYN ******S* [...] Jan 2 17:06:46 64.58.187.122:4660 -> xxx.yyy.255.199:1433 SYN ******S* Jan 2 17:06:46 64.58.187.122:4672 -> xxx.yyy.255.201:1433 SYN ******S* Jan 2 17:06:46 64.58.187.122:4654 -> xxx.yyy.255.198:1433 SYN ******S* Jan 2 17:06:46 64.58.187.122:4684 -> xxx.yyy.255.203:1433 SYN ******S* Jan 2 17:06:46 64.58.187.122:4667 -> xxx.yyy.255.200:1433 SYN ******S* Jan 2 17:06:46 64.58.187.122:4677 -> xxx.yyy.255.202:1433 SYN ******S* Jan 2 17:06:47 64.58.187.122:4689 -> xxx.yyy.255.204:1433 SYN ******S* Jan 2 17:06:47 64.58.187.122:4701 -> xxx.yyy.255.206:1433 SYN ******S* Jan 2 17:06:47 64.58.187.122:4695 -> xxx.yyy.255.205:1433 SYN ******S* 74933 Jan 2 02:49:57 205.246.210.3:4443 -> xxx.yyy.1.1:42 SYN ******S* Jan 2 02:49:57 205.246.210.3:4444 -> xxx.yyy.1.2:42 SYN ******S* Jan 2 02:49:54 205.246.210.3:4458 -> xxx.yyy.1.3:42 SYN ******S* Jan 2 02:49:54 205.246.210.3:4459 -> xxx.yyy.1.4:42 SYN ******S* Jan 2 02:49:57 205.246.210.3:4460 -> xxx.yyy.1.5:42 SYN ******S* Jan 2 02:49:57 205.246.210.3:4461 -> xxx.yyy.1.6:42 SYN ******S* Jan 2 02:49:57 205.246.210.3:4462 -> xxx.yyy.1.7:42 SYN ******S* Jan 2 02:49:57 205.246.210.3:4463 -> xxx.yyy.1.8:42 SYN ******S* [...] Jan 2 03:01:40 205.246.210.3:3348 -> xxx.yyy.255.243:42 SYN ******S* Jan 2 03:01:40 205.246.210.3:3353 -> xxx.yyy.255.248:42 SYN ******S* Jan 2 03:01:40 205.246.210.3:3351 -> xxx.yyy.255.246:42 SYN ******S* Jan 2 03:01:40 205.246.210.3:3355 -> xxx.yyy.255.250:42 SYN ******S* Jan 2 03:01:40 205.246.210.3:3352 -> xxx.yyy.255.247:42 SYN ******S* Jan 2 03:01:40 205.246.210.3:3354 -> xxx.yyy.255.249:42 SYN ******S* Jan 2 03:01:40 205.246.210.3:3350 -> xxx.yyy.255.245:42 SYN ******S* Jan 2 03:01:40 205.246.210.3:3358 -> xxx.yyy.255.253:42 SYN ******S* Jan 2 03:01:40 205.246.210.3:3359 -> xxx.yyy.255.254:42 SYN ******S* 72157 Jan 2 23:09:47 68.192.108.36:4218 -> xxx.yyy.1.1:1433 SYN ******S* Jan 2 23:09:47 68.192.108.36:4219 -> xxx.yyy.1.2:1433 SYN ******S* Jan 2 23:09:47 68.192.108.36:4220 -> xxx.yyy.1.3:1433 SYN ******S* Jan 2 23:09:47 68.192.108.36:4221 -> xxx.yyy.1.4:1433 SYN ******S* Jan 2 23:09:47 68.192.108.36:4222 -> xxx.yyy.1.5:1433 SYN ******S* Jan 2 23:09:47 68.192.108.36:4223 -> xxx.yyy.1.6:1433 SYN ******S* Jan 2 23:09:44 68.192.108.36:4224 -> xxx.yyy.1.7:1433 SYN ******S* Jan 2 23:09:44 68.192.108.36:4225 -> xxx.yyy.1.8:1433 SYN ******S* [...] Jan 2 23:21:28 68.192.108.36:2825 -> xxx.yyy.255.172:1433 SYN ******S* Jan 2 23:21:28 68.192.108.36:2822 -> xxx.yyy.255.169:1433 SYN ******S* Jan 2 23:21:28 68.192.108.36:2826 -> xxx.yyy.255.173:1433 SYN ******S* Jan 2 23:21:28 68.192.108.36:2823 -> xxx.yyy.255.170:1433 SYN ******S* Jan 2 23:21:29 68.192.108.36:2833 -> xxx.yyy.255.180:1433 SYN ******S* Jan 2 23:21:29 68.192.108.36:2831 -> xxx.yyy.255.178:1433 SYN ******S* Jan 2 23:21:29 68.192.108.36:2835 -> xxx.yyy.255.182:1433 SYN ******S* Jan 2 23:21:29 68.192.108.36:2834 -> xxx.yyy.255.181:1433 SYN ******S* Jan 2 23:21:29 68.192.108.36:2832 -> xxx.yyy.255.179:1433 SYN ******S* 71995 Jan 2 16:13:43 220.68.56.21:3046 -> xxx.yyy.1.1:1433 SYN ******S* Jan 2 16:13:46 220.68.56.21:3047 -> xxx.yyy.1.2:1433 SYN ******S* Jan 2 16:13:46 220.68.56.21:3050 -> xxx.yyy.1.3:1433 SYN ******S* Jan 2 16:13:46 220.68.56.21:3051 -> xxx.yyy.1.4:1433 SYN ******S* Jan 2 16:13:46 220.68.56.21:3052 -> xxx.yyy.1.5:1433 SYN ******S* Jan 2 16:13:46 220.68.56.21:3053 -> xxx.yyy.1.6:1433 SYN ******S* Jan 2 16:13:46 220.68.56.21:3054 -> xxx.yyy.1.7:1433 SYN ******S* Jan 2 16:13:46 220.68.56.21:3055 -> xxx.yyy.1.8:1433 SYN ******S* [...] Jan 2 16:25:31 220.68.56.21:4732 -> xxx.yyy.255.245:1433 SYN ******S* Jan 2 16:25:31 220.68.56.21:4726 -> xxx.yyy.255.241:1433 SYN ******S* Jan 2 16:25:31 220.68.56.21:4743 -> xxx.yyy.255.252:1433 SYN ******S* Jan 2 16:25:31 220.68.56.21:4745 -> xxx.yyy.255.254:1433 SYN ******S* Jan 2 16:25:31 220.68.56.21:4741 -> xxx.yyy.255.250:1433 SYN ******S* Jan 2 16:25:31 220.68.56.21:4742 -> xxx.yyy.255.251:1433 SYN ******S* Jan 2 16:25:31 220.68.56.21:4744 -> xxx.yyy.255.253:1433 SYN ******S* Jan 2 16:25:31 220.68.56.21:4740 -> xxx.yyy.255.249:1433 SYN ******S* 71838 Jan 2 04:39:26 202.159.30.199:4053 -> xxx.yyy.1.1:554 SYN ******S* Jan 2 04:39:26 202.159.30.199:4054 -> xxx.yyy.1.2:554 SYN ******S* Jan 2 04:39:26 202.159.30.199:4056 -> xxx.yyy.1.3:554 SYN ******S* Jan 2 04:39:27 202.159.30.199:4057 -> xxx.yyy.1.4:554 SYN ******S* Jan 2 04:39:27 202.159.30.199:4058 -> xxx.yyy.1.5:554 SYN ******S* Jan 2 04:39:27 202.159.30.199:4060 -> xxx.yyy.1.7:554 SYN ******S* Jan 2 04:39:27 202.159.30.199:4059 -> xxx.yyy.1.6:554 SYN ******S* Jan 2 04:39:27 202.159.30.199:4061 -> xxx.yyy.1.8:554 SYN ******S* [...] Jan 2 04:48:23 202.159.30.199:1178 -> xxx.yyy.255.245:554 SYN ******S* Jan 2 04:48:23 202.159.30.199:1181 -> xxx.yyy.255.247:554 SYN ******S* Jan 2 04:48:23 202.159.30.199:1182 -> xxx.yyy.255.248:554 SYN ******S* Jan 2 04:48:23 202.159.30.199:1184 -> xxx.yyy.255.249:554 SYN ******S* Jan 2 04:48:23 202.159.30.199:1185 -> xxx.yyy.255.250:554 SYN ******S* Jan 2 04:48:23 202.159.30.199:1186 -> xxx.yyy.255.251:554 SYN ******S* Jan 2 04:48:23 202.159.30.199:1187 -> xxx.yyy.255.252:554 SYN ******S* Jan 2 04:48:23 202.159.30.199:1189 -> xxx.yyy.255.254:554 SYN ******S* Jan 2 04:48:23 202.159.30.199:1188 -> xxx.yyy.255.253:554 SYN ******S* 68305 Jan 2 15:36:42 131.183.161.89:4187 -> xxx.yyy.1.1:3306 SYN ******S* Jan 2 15:36:42 131.183.161.89:4188 -> xxx.yyy.1.2:3306 SYN ******S* Jan 2 15:36:42 131.183.161.89:4189 -> xxx.yyy.1.3:3306 SYN ******S* Jan 2 15:36:44 131.183.161.89:4191 -> xxx.yyy.1.5:3306 SYN ******S* Jan 2 15:36:44 131.183.161.89:4192 -> xxx.yyy.1.6:3306 SYN ******S* Jan 2 15:36:44 131.183.161.89:4193 -> xxx.yyy.1.7:3306 SYN ******S* Jan 2 15:36:44 131.183.161.89:4194 -> xxx.yyy.1.8:3306 SYN ******S* Jan 2 15:36:42 131.183.161.89:4195 -> xxx.yyy.1.9:3306 SYN ******S* [...] Jan 2 15:48:38 131.183.161.89:2602 -> xxx.yyy.255.242:3306 SYN ******S* Jan 2 15:48:38 131.183.161.89:2603 -> xxx.yyy.255.243:3306 SYN ******S* Jan 2 15:48:38 131.183.161.89:2607 -> xxx.yyy.255.247:3306 SYN ******S* Jan 2 15:48:38 131.183.161.89:2606 -> xxx.yyy.255.246:3306 SYN ******S* Jan 2 15:48:38 131.183.161.89:2604 -> xxx.yyy.255.244:3306 SYN ******S* Jan 2 15:48:38 131.183.161.89:2611 -> xxx.yyy.255.251:3306 SYN ******S* Jan 2 15:48:38 131.183.161.89:2612 -> xxx.yyy.255.252:3306 SYN ******S* Jan 2 15:48:38 131.183.161.89:2614 -> xxx.yyy.255.254:3306 SYN ******S* 59992 Jan 2 05:15:09 202.76.67.125:4104 -> xxx.yyy.1.6:139 SYN ******S* Jan 2 05:15:12 202.76.67.125:4106 -> xxx.yyy.1.8:139 SYN ******S* Jan 2 05:15:09 202.76.67.125:4107 -> xxx.yyy.1.9:139 SYN ******S* Jan 2 05:15:12 202.76.67.125:4109 -> xxx.yyy.1.11:139 SYN ******S* Jan 2 05:15:09 202.76.67.125:4110 -> xxx.yyy.1.12:139 SYN ******S* Jan 2 05:15:09 202.76.67.125:4112 -> xxx.yyy.1.14:139 SYN ******S* Jan 2 05:15:11 202.76.67.125:4114 -> xxx.yyy.1.16:139 SYN ******S* Jan 2 05:15:12 202.76.67.125:4115 -> xxx.yyy.1.17:139 SYN ******S* [...] Jan 2 05:35:02 202.76.67.125:2256 -> xxx.yyy.zzz.253:139 SYN ******S* Jan 2 05:35:02 202.76.67.125:2253 -> xxx.yyy.zzz.250:139 SYN ******S* Jan 2 05:35:02 202.76.67.125:2250 -> xxx.yyy.zzz.247:139 SYN ******S* Jan 2 05:35:02 202.76.67.125:2247 -> xxx.yyy.zzz.244:139 SYN ******S* Jan 2 05:35:02 202.76.67.125:2244 -> xxx.yyy.zzz.241:139 SYN ******S* Jan 2 05:35:02 202.76.67.125:2257 -> xxx.yyy.zzz.254:139 SYN ******S* Jan 2 05:35:02 202.76.67.125:2241 -> xxx.yyy.zzz.238:139 SYN ******S* Jan 2 05:35:02 202.76.67.125:2254 -> xxx.yyy.zzz.251:139 SYN ******S* Jan 2 05:35:02 202.76.67.125:2251 -> xxx.yyy.zzz.248:139 SYN ******S* 57986 Jan 2 09:01:26 206.207.108.180:3788 -> xxx.yyy.1.1:1433 SYN ******S* Jan 2 09:01:26 206.207.108.180:3789 -> xxx.yyy.1.2:1433 SYN ******S* Jan 2 09:01:26 206.207.108.180:3790 -> xxx.yyy.1.3:1433 SYN ******S* Jan 2 09:01:26 206.207.108.180:3791 -> xxx.yyy.1.4:1433 SYN ******S* Jan 2 09:01:26 206.207.108.180:3792 -> xxx.yyy.1.5:1433 SYN ******S* Jan 2 09:01:26 206.207.108.180:3793 -> xxx.yyy.1.6:1433 SYN ******S* Jan 2 09:01:26 206.207.108.180:3794 -> xxx.yyy.1.7:1433 SYN ******S* Jan 2 09:01:26 206.207.108.180:3795 -> xxx.yyy.1.8:1433 SYN ******S* [...] Jan 2 09:06:34 206.207.108.180:2250 -> xxx.yyy.255.246:1433 SYN ******S* Jan 2 09:06:34 206.207.108.180:2251 -> xxx.yyy.255.247:1433 SYN ******S* Jan 2 09:06:34 206.207.108.180:2252 -> xxx.yyy.255.248:1433 SYN ******S* Jan 2 09:06:34 206.207.108.180:2253 -> xxx.yyy.255.249:1433 SYN ******S* Jan 2 09:06:34 206.207.108.180:2254 -> xxx.yyy.255.250:1433 SYN ******S* Jan 2 09:06:34 206.207.108.180:2255 -> xxx.yyy.255.251:1433 SYN ******S* Jan 2 09:06:34 206.207.108.180:2256 -> xxx.yyy.255.252:1433 SYN ******S* Jan 2 09:06:34 206.207.108.180:2257 -> xxx.yyy.255.253:1433 SYN ******S* Jan 2 09:06:34 206.207.108.180:2258 -> xxx.yyy.255.254:1433 SYN ******S* 44036 [...] 36657 Jan 2 05:19:26 221.12.115.3:3363 -> xxx.yyy.1.1:1433 SYN ******S* Jan 2 05:19:26 221.12.115.3:3360 -> xxx.yyy.1.0:1433 SYN ******S* Jan 2 05:19:26 221.12.115.3:3378 -> xxx.yyy.1.2:1433 SYN ******S* Jan 2 05:19:26 221.12.115.3:3394 -> xxx.yyy.1.3:1433 SYN ******S* Jan 2 05:19:26 221.12.115.3:3416 -> xxx.yyy.1.5:1433 SYN ******S* Jan 2 05:19:26 221.12.115.3:3411 -> xxx.yyy.1.4:1433 SYN ******S* Jan 2 05:19:26 221.12.115.3:3446 -> xxx.yyy.1.7:1433 SYN ******S* Jan 2 05:19:26 221.12.115.3:3432 -> xxx.yyy.1.6:1433 SYN ******S* [...] Jan 2 07:00:06 221.12.115.3:2859 -> xxx.yyy.111.248:1433 SYN ******S* Jan 2 07:00:06 221.12.115.3:2873 -> xxx.yyy.111.251:1433 SYN ******S* Jan 2 07:00:06 221.12.115.3:2896 -> xxx.yyy.111.253:1433 SYN ******S* Jan 2 07:00:06 221.12.115.3:2894 -> xxx.yyy.111.252:1433 SYN ******S* Jan 2 07:00:06 221.12.115.3:2869 -> xxx.yyy.111.250:1433 SYN ******S* Jan 2 07:00:06 221.12.115.3:2862 -> xxx.yyy.111.249:1433 SYN ******S* Jan 2 07:00:06 221.12.115.3:2904 -> xxx.yyy.111.255:1433 SYN ******S* Jan 2 07:00:07 221.12.115.3:2902 -> xxx.yyy.111.254:1433 SYN ******S* 35522 Jan 2 12:20:43 209.15.115.42:80 -> xxx.yyy.189.147:42 SYN ******S* Jan 2 12:20:44 209.15.115.42:80 -> xxx.yyy.223.209:42 SYN ******S* Jan 2 12:20:44 209.15.115.42:80 -> xxx.yyy.227.177:42 SYN ******S* Jan 2 12:20:46 209.15.115.42:80 -> xxx.yyy.215.143:42 SYN ******S* Jan 2 12:20:46 209.15.115.42:80 -> xxx.yyy.1.153:42 SYN ******S* Jan 2 12:20:48 209.15.115.42:80 -> xxx.yyy.15.185:42 SYN ******S* Jan 2 12:20:49 209.15.115.42:80 -> xxx.yyy.169.211:42 SYN ******S* Jan 2 12:20:50 209.15.115.42:80 -> xxx.yyy.161.255:42 SYN ******S* [...] Jan 2 23:59:51 209.15.115.42:80 -> xxx.yyy.221.117:42 SYN ******S* Jan 2 23:59:51 209.15.115.42:80 -> xxx.yyy.223.117:42 SYN ******S* Jan 2 23:59:52 209.15.115.42:80 -> xxx.yyy.17.19:42 SYN ******S* Jan 2 23:59:55 209.15.115.42:80 -> xxx.yyy.219.131:42 SYN ******S* Jan 2 23:59:55 209.15.115.42:80 -> xxx.yyy.33.117:42 SYN ******S* Jan 2 23:59:56 209.15.115.42:80 -> xxx.yyy.149.131:42 SYN ******S* Jan 2 23:59:56 209.15.115.42:80 -> xxx.yyy.191.141:42 SYN ******S* Jan 2 23:59:56 209.15.115.42:80 -> xxx.yyy.253.179:42 SYN ******S* Jan 2 23:59:58 209.15.115.42:80 -> xxx.yyy.79.223:42 SYN ******S* 33445 [...] 21885 [...] 19227 Jan 2 12:20:06 206.130.11.232:80 -> xxx.yyy.245.31:42 SYN ******S* Jan 2 12:20:08 206.130.11.232:80 -> xxx.yyy.73.151:42 SYN ******S* Jan 2 12:20:08 206.130.11.232:80 -> xxx.yyy.65.3:42 SYN ******S* Jan 2 12:20:09 206.130.11.232:80 -> xxx.yyy.129.193:42 SYN ******S* Jan 2 12:20:09 206.130.11.232:80 -> xxx.yyy.131.181:42 SYN ******S* Jan 2 12:20:13 206.130.11.232:80 -> xxx.yyy.105.19:42 SYN ******S* Jan 2 12:21:10 206.130.11.232:80 -> xxx.yyy.197.109:42 SYN ******S* Jan 2 12:21:11 206.130.11.232:80 -> xxx.yyy.193.225:42 SYN ******S* [...] Jan 2 22:40:08 206.130.11.232:80 -> xxx.yyy.91.97:42 SYN ******S* Jan 2 22:40:12 206.130.11.232:80 -> xxx.yyy.241.209:42 SYN ******S* Jan 2 22:40:14 206.130.11.232:80 -> xxx.yyy.253.179:42 SYN ******S* Jan 2 22:40:15 206.130.11.232:80 -> xxx.yyy.147.35:42 SYN ******S* Jan 2 22:40:19 206.130.11.232:80 -> xxx.yyy.85.191:42 SYN ******S* Jan 2 22:40:19 206.130.11.232:80 -> xxx.yyy.95.71:42 SYN ******S* Jan 2 22:40:20 206.130.11.232:80 -> xxx.yyy.229.79:42 SYN ******S* Jan 2 22:40:21 206.130.11.232:80 -> xxx.yyy.181.95:42 SYN ******S* 17351 Jan 2 22:59:10 210.108.40.129:32654 -> xxx.yyy.174.3:5554 SYN ******S* Jan 2 22:59:11 210.108.40.129:32883 -> xxx.yyy.174.3:1023 SYN ******S* Jan 2 22:59:13 210.108.40.129:33361 -> xxx.yyy.174.3:9898 SYN ******S* Jan 2 22:59:10 210.108.40.129:32655 -> xxx.yyy.174.4:5554 SYN ******S* Jan 2 22:59:11 210.108.40.129:32884 -> xxx.yyy.174.4:1023 SYN ******S* Jan 2 22:59:13 210.108.40.129:33362 -> xxx.yyy.174.4:9898 SYN ******S* Jan 2 22:59:10 210.108.40.129:32653 -> xxx.yyy.174.2:5554 SYN ******S* Jan 2 22:59:11 210.108.40.129:32882 -> xxx.yyy.174.2:1023 SYN ******S* [...] Jan 2 23:00:59 210.108.40.129:57570 -> xxx.yyy.194.111:9898 SYN ******S* Jan 2 23:00:59 210.108.40.129:57571 -> xxx.yyy.194.112:9898 SYN ******S* Jan 2 23:00:59 210.108.40.129:57597 -> xxx.yyy.194.121:9898 SYN ******S* Jan 2 23:00:59 210.108.40.129:57598 -> xxx.yyy.194.122:9898 SYN ******S* Jan 2 23:00:59 210.108.40.129:57600 -> xxx.yyy.194.124:9898 SYN ******S* Jan 2 23:01:00 210.108.40.129:57574 -> xxx.yyy.194.115:9898 SYN ******S* Jan 2 23:01:00 210.108.40.129:57572 -> xxx.yyy.194.113:9898 SYN ******S* Jan 2 23:01:00 210.108.40.129:57596 -> xxx.yyy.194.120:9898 SYN ******S* Jan 2 23:01:00 210.108.40.129:57599 -> xxx.yyy.194.123:9898 SYN ******S* 15189 Jan 2 22:42:53 222.150.212.110:3115 -> xxx.yyy.174.3:5554 SYN ******S* Jan 2 22:42:54 222.150.212.110:3569 -> xxx.yyy.174.3:1023 SYN ******S* Jan 2 22:42:56 222.150.212.110:4540 -> xxx.yyy.174.3:9898 SYN ******S* Jan 2 22:42:53 222.150.212.110:3120 -> xxx.yyy.174.2:5554 SYN ******S* Jan 2 22:42:54 222.150.212.110:3548 -> xxx.yyy.174.2:1023 SYN ******S* Jan 2 22:42:56 222.150.212.110:4528 -> xxx.yyy.174.2:9898 SYN ******S* Jan 2 22:42:53 222.150.212.110:3149 -> xxx.yyy.174.4:5554 SYN ******S* Jan 2 22:42:54 222.150.212.110:3576 -> xxx.yyy.174.4:1023 SYN ******S* [...] Jan 2 22:43:46 222.150.212.110:3649 -> xxx.yyy.194.115:9898 SYN ******S* Jan 2 22:43:46 222.150.212.110:3636 -> xxx.yyy.194.116:9898 SYN ******S* Jan 2 22:43:46 222.150.212.110:3637 -> xxx.yyy.194.119:9898 SYN ******S* Jan 2 22:43:46 222.150.212.110:3643 -> xxx.yyy.194.122:9898 SYN ******S* Jan 2 22:43:46 222.150.212.110:3645 -> xxx.yyy.194.117:9898 SYN ******S* Jan 2 22:43:46 222.150.212.110:3641 -> xxx.yyy.194.120:9898 SYN ******S* Jan 2 22:43:46 222.150.212.110:3642 -> xxx.yyy.194.121:9898 SYN ******S* Jan 2 22:43:46 222.150.212.110:3646 -> xxx.yyy.194.118:9898 SYN ******S* Jan 2 22:43:46 222.150.212.110:3647 -> xxx.yyy.194.123:9898 SYN ******S* 14861 Jan 2 03:46:02 200.115.130.68:80 -> xxx.yyy.163.249:42 SYN ******S* Jan 2 03:46:02 200.115.130.68:80 -> xxx.yyy.167.223:42 SYN ******S* Jan 2 03:46:02 200.115.130.68:80 -> xxx.yyy.233.61:42 SYN ******S* Jan 2 03:46:04 200.115.130.68:80 -> xxx.yyy.189.153:42 SYN ******S* Jan 2 03:46:04 200.115.130.68:80 -> xxx.yyy.179.5:42 SYN ******S* Jan 2 03:46:06 200.115.130.68:80 -> xxx.yyy.179.11:42 SYN ******S* Jan 2 03:47:08 200.115.130.68:80 -> xxx.yyy.153.197:42 SYN ******S* Jan 2 03:47:10 200.115.130.68:80 -> xxx.yyy.185.65:42 SYN ******S* [...] Jan 2 23:59:37 200.115.130.68:80 -> xxx.yyy.153.107:42 SYN ******S* Jan 2 23:59:38 200.115.130.68:80 -> xxx.yyy.217.143:42 SYN ******S* Jan 2 23:59:38 200.115.130.68:80 -> xxx.yyy.69.171:42 SYN ******S* Jan 2 23:59:41 200.115.130.68:80 -> xxx.yyy.249.197:42 SYN ******S* Jan 2 23:59:41 200.115.130.68:80 -> xxx.yyy.67.87:42 SYN ******S* Jan 2 23:59:43 200.115.130.68:80 -> xxx.yyy.165.75:42 SYN ******S* Jan 2 23:59:44 200.115.130.68:80 -> xxx.yyy.215.53:42 SYN ******S* Jan 2 23:59:46 200.115.130.68:80 -> xxx.yyy.95.237:42 SYN ******S* 14621 Jan 2 12:21:17 209.237.246.101:80 -> xxx.yyy.17.173:42 SYN ******S* Jan 2 12:21:17 209.237.246.101:80 -> xxx.yyy.219.227:42 SYN ******S* Jan 2 12:21:17 209.237.246.101:80 -> xxx.yyy.219.131:42 SYN ******S* Jan 2 12:21:18 209.237.246.101:80 -> xxx.yyy.93.243:42 SYN ******S* Jan 2 12:21:20 209.237.246.101:80 -> xxx.yyy.207.251:42 SYN ******S* Jan 2 12:21:20 209.237.246.101:80 -> xxx.yyy.197.207:42 SYN ******S* Jan 2 12:21:21 209.237.246.101:80 -> xxx.yyy.77.139:42 SYN ******S* Jan 2 12:21:21 209.237.246.101:80 -> xxx.yyy.65.99:42 SYN ******S* [...] Jan 2 17:50:39 209.237.246.101:80 -> xxx.yyy.89.165:42 SYN ******S* Jan 2 17:50:41 209.237.246.101:80 -> xxx.yyy.93.83:42 SYN ******S* Jan 2 17:50:41 209.237.246.101:80 -> xxx.yyy.191.135:42 SYN ******S* Jan 2 17:50:44 209.237.246.101:80 -> xxx.yyy.15.191:42 SYN ******S* Jan 2 17:50:44 209.237.246.101:80 -> xxx.yyy.195.121:42 SYN ******S* Jan 2 17:50:44 209.237.246.101:80 -> xxx.yyy.153.203:42 SYN ******S* Jan 2 17:50:47 209.237.246.101:80 -> xxx.yyy.195.207:42 SYN ******S* Jan 2 17:50:48 209.237.246.101:80 -> xxx.yyy.151.215:42 SYN ******S* Jan 2 17:50:51 209.237.246.101:80 -> xxx.yyy.177.13:42 SYN ******S* 12817 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions