[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Jan 3 04:55:58 207.178.136.169:3705 -> xxx.yyy.71.239:3127 SYN ******S* Jan 3 04:55:58 207.178.136.169:3709 -> xxx.yyy.66.103:3127 SYN ******S* Jan 3 04:55:58 207.178.136.169:3713 -> xxx.yyy.32.213:443 SYN ******S* Jan 3 04:55:58 207.178.136.169:3665 -> xxx.yyy.67.187:3127 SYN ******S* Jan 3 04:55:58 207.178.136.169:3664 -> xxx.yyy.29.141:443 SYN ******S* Jan 3 04:55:58 207.178.136.169:3666 -> xxx.yyy.64.92:443 SYN ******S* Jan 3 04:55:58 207.178.136.169:3670 -> xxx.yyy.12.179:1433 SYN ******S* Jan 3 04:55:58 207.178.136.169:3672 -> xxx.yyy.32.225:3127 SYN ******S* [...] Jan 3 05:02:49 207.178.136.169:3712 -> xxx.yyy.247.40:3127 SYN ******S* Jan 3 05:02:49 207.178.136.169:3667 -> xxx.yyy.252.0:443 SYN ******S* Jan 3 05:02:49 207.178.136.169:3701 -> xxx.yyy.248.28:1433 SYN ******S* Jan 3 05:02:49 207.178.136.169:3704 -> xxx.yyy.251.32:1433 SYN ******S* Jan 3 05:02:49 207.178.136.169:3677 -> xxx.yyy.252.67:3127 SYN ******S* Jan 3 05:02:49 207.178.136.169:3689 -> xxx.yyy.247.112:3127 SYN ******S* Jan 3 05:02:49 207.178.136.169:3693 -> xxx.yyy.248.53:1433 SYN ******S* Jan 3 05:02:49 207.178.136.169:3698 -> xxx.yyy.249.38:3127 SYN ******S* Jan 3 05:02:49 207.178.136.169:3708 -> xxx.yyy.251.11:1433 SYN ******S* 129122 Jan 3 00:00:05 220.135.254.19:22412 -> xxx.yyy.130.218:5900 SYN ******S* Jan 3 00:00:05 220.135.254.19:61836 -> xxx.yyy.209.18:5900 SYN ******S* Jan 3 00:00:05 220.135.254.19:59020 -> xxx.yyy.209.16:5900 SYN ******S* Jan 3 00:00:05 220.135.254.19:57996 -> xxx.yyy.209.15:5900 SYN ******S* Jan 3 00:00:07 220.135.254.19:16013 -> xxx.yyy.209.49:5900 SYN ******S* Jan 3 00:00:05 220.135.254.19:141 -> xxx.yyy.209.25:5900 SYN ******S* Jan 3 00:00:04 220.135.254.19:16012 -> xxx.yyy.130.209:5900 SYN ******S* Jan 3 00:00:07 220.135.254.19:16781 -> xxx.yyy.209.50:5900 SYN ******S* [...] Jan 3 03:31:11 220.135.254.19:31879 -> xxx.yyy.220.54:5900 SYN ******S* Jan 3 03:31:11 220.135.254.19:34951 -> xxx.yyy.220.87:5900 SYN ******S* Jan 3 03:31:14 220.135.254.19:34951 -> xxx.yyy.220.87:5900 SYN ******S* Jan 3 03:31:15 220.135.254.19:10124 -> xxx.yyy.220.150:5900 SYN ******S* Jan 3 03:31:15 220.135.254.19:17036 -> xxx.yyy.220.172:5900 SYN ******S* Jan 3 03:31:20 220.135.254.19:3213 -> xxx.yyy.220.54:5900 SYN ******S* Jan 3 03:31:23 220.135.254.19:30861 -> xxx.yyy.220.87:5900 SYN ******S* Jan 3 03:31:23 220.135.254.19:39565 -> xxx.yyy.220.150:5900 SYN ******S* Jan 3 03:31:23 220.135.254.19:41613 -> xxx.yyy.220.172:5900 SYN ******S* 120179 Jan 3 14:28:59 212.112.62.154:3868 -> xxx.yyy.1.0:1433 SYN ******S* Jan 3 14:28:59 212.112.62.154:3870 -> xxx.yyy.1.1:1433 SYN ******S* Jan 3 14:29:00 212.112.62.154:3873 -> xxx.yyy.1.2:1433 SYN ******S* Jan 3 14:29:00 212.112.62.154:3876 -> xxx.yyy.1.3:1433 SYN ******S* Jan 3 14:29:00 212.112.62.154:3879 -> xxx.yyy.1.4:1433 SYN ******S* Jan 3 14:29:00 212.112.62.154:3881 -> xxx.yyy.1.5:1433 SYN ******S* Jan 3 14:29:00 212.112.62.154:3884 -> xxx.yyy.1.6:1433 SYN ******S* Jan 3 14:29:00 212.112.62.154:3887 -> xxx.yyy.1.7:1433 SYN ******S* [...] Jan 3 18:18:49 212.112.62.154:3638 -> xxx.yyy.255.247:1433 SYN ******S* Jan 3 18:18:49 212.112.62.154:3644 -> xxx.yyy.255.248:1433 SYN ******S* Jan 3 18:18:49 212.112.62.154:3665 -> xxx.yyy.255.250:1433 SYN ******S* Jan 3 18:18:49 212.112.62.154:3662 -> xxx.yyy.255.249:1433 SYN ******S* Jan 3 18:18:50 212.112.62.154:3695 -> xxx.yyy.255.251:1433 SYN ******S* Jan 3 18:18:50 212.112.62.154:3696 -> xxx.yyy.255.252:1433 SYN ******S* Jan 3 18:18:50 212.112.62.154:3698 -> xxx.yyy.255.254:1433 SYN ******S* Jan 3 18:18:50 212.112.62.154:3697 -> xxx.yyy.255.253:1433 SYN ******S* 119766 Jan 3 15:37:25 4.64.14.207:2989 -> xxx.yyy.1.1:1433 SYN ******S* Jan 3 15:37:25 4.64.14.207:2992 -> xxx.yyy.1.5:1433 SYN ******S* Jan 3 15:37:25 4.64.14.207:2993 -> xxx.yyy.1.4:1433 SYN ******S* Jan 3 15:37:25 4.64.14.207:2994 -> xxx.yyy.1.3:1433 SYN ******S* Jan 3 15:37:25 4.64.14.207:2995 -> xxx.yyy.1.2:1433 SYN ******S* Jan 3 15:37:25 4.64.14.207:2990 -> xxx.yyy.1.6:1433 SYN ******S* Jan 3 15:37:25 4.64.14.207:2996 -> xxx.yyy.1.7:1433 SYN ******S* Jan 3 15:37:25 4.64.14.207:2997 -> xxx.yyy.1.8:1433 SYN ******S* [...] Jan 3 17:31:44 4.64.14.207:3316 -> xxx.yyy.255.245:1433 SYN ******S* Jan 3 17:31:44 4.64.14.207:3315 -> xxx.yyy.255.244:1433 SYN ******S* Jan 3 17:31:44 4.64.14.207:3321 -> xxx.yyy.255.250:1433 SYN ******S* Jan 3 17:31:44 4.64.14.207:3320 -> xxx.yyy.255.249:1433 SYN ******S* Jan 3 17:31:44 4.64.14.207:3319 -> xxx.yyy.255.248:1433 SYN ******S* Jan 3 17:31:44 4.64.14.207:3322 -> xxx.yyy.255.251:1433 SYN ******S* Jan 3 17:31:44 4.64.14.207:3325 -> xxx.yyy.255.252:1433 SYN ******S* Jan 3 17:31:44 4.64.14.207:3329 -> xxx.yyy.255.254:1433 SYN ******S* Jan 3 17:31:44 4.64.14.207:3328 -> xxx.yyy.255.253:1433 SYN ******S* 118553 Jan 3 11:09:00 210.85.34.121:31768 -> xxx.yyy.1.0:1433 SYN ******S* Jan 3 11:09:00 210.85.34.121:31769 -> xxx.yyy.1.1:1433 SYN ******S* Jan 3 11:09:00 210.85.34.121:31771 -> xxx.yyy.1.2:1433 SYN ******S* Jan 3 11:09:00 210.85.34.121:31777 -> xxx.yyy.1.3:1433 SYN ******S* Jan 3 11:09:00 210.85.34.121:31779 -> xxx.yyy.1.4:1433 SYN ******S* Jan 3 11:09:00 210.85.34.121:31781 -> xxx.yyy.1.5:1433 SYN ******S* Jan 3 11:09:00 210.85.34.121:31785 -> xxx.yyy.1.6:1433 SYN ******S* Jan 3 11:09:00 210.85.34.121:31789 -> xxx.yyy.1.7:1433 SYN ******S* [...] Jan 3 14:58:17 210.85.34.121:26479 -> xxx.yyy.255.243:1433 SYN ******S* Jan 3 14:58:18 210.85.34.121:26508 -> xxx.yyy.255.245:1433 SYN ******S* Jan 3 14:58:19 210.85.34.121:26553 -> xxx.yyy.255.247:1433 SYN ******S* Jan 3 14:58:19 210.85.34.121:26550 -> xxx.yyy.255.246:1433 SYN ******S* Jan 3 14:58:20 210.85.34.121:26577 -> xxx.yyy.255.250:1433 SYN ******S* Jan 3 14:58:20 210.85.34.121:26593 -> xxx.yyy.255.252:1433 SYN ******S* Jan 3 14:58:21 210.85.34.121:26609 -> xxx.yyy.255.253:1433 SYN ******S* Jan 3 14:58:21 210.85.34.121:26620 -> xxx.yyy.255.254:1433 SYN ******S* 117091 Jan 3 20:18:50 65.23.71.13:1576 -> xxx.yyy.1.0:1433 SYN ******S* Jan 3 20:18:50 65.23.71.13:1598 -> xxx.yyy.1.1:1433 SYN ******S* Jan 3 20:18:50 65.23.71.13:1613 -> xxx.yyy.1.2:1433 SYN ******S* Jan 3 20:18:50 65.23.71.13:1620 -> xxx.yyy.1.3:1433 SYN ******S* Jan 3 20:18:50 65.23.71.13:1627 -> xxx.yyy.1.4:1433 SYN ******S* Jan 3 20:18:50 65.23.71.13:1666 -> xxx.yyy.1.5:1433 SYN ******S* Jan 3 20:18:50 65.23.71.13:1684 -> xxx.yyy.1.6:1433 SYN ******S* Jan 3 20:18:50 65.23.71.13:1724 -> xxx.yyy.1.8:1433 SYN ******S* [...] Jan 3 23:59:59 65.23.71.13:3563 -> xxx.yyy.246.187:1433 SYN ******S* Jan 3 23:59:59 65.23.71.13:3618 -> xxx.yyy.246.188:1433 SYN ******S* Jan 3 23:59:59 65.23.71.13:3631 -> xxx.yyy.246.189:1433 SYN ******S* Jan 3 23:59:59 65.23.71.13:1036 -> xxx.yyy.246.150:1433 SYN ******S* Jan 3 23:59:59 65.23.71.13:1096 -> xxx.yyy.246.151:1433 SYN ******S* Jan 3 23:59:59 65.23.71.13:3727 -> xxx.yyy.246.190:1433 SYN ******S* Jan 3 23:59:59 65.23.71.13:3754 -> xxx.yyy.246.191:1433 SYN ******S* Jan 3 23:59:59 65.23.71.13:1149 -> xxx.yyy.246.152:1433 SYN ******S* Jan 3 23:59:59 65.23.71.13:3888 -> xxx.yyy.246.192:1433 SYN ******S* 114839 Jan 3 20:18:15 222.234.8.92:1562 -> xxx.yyy.1.0:1433 SYN ******S* Jan 3 20:18:15 222.234.8.92:1563 -> xxx.yyy.1.1:1433 SYN ******S* Jan 3 20:18:15 222.234.8.92:1565 -> xxx.yyy.1.2:1433 SYN ******S* Jan 3 20:18:15 222.234.8.92:1567 -> xxx.yyy.1.3:1433 SYN ******S* Jan 3 20:18:15 222.234.8.92:1569 -> xxx.yyy.1.4:1433 SYN ******S* Jan 3 20:18:15 222.234.8.92:1571 -> xxx.yyy.1.5:1433 SYN ******S* Jan 3 20:18:15 222.234.8.92:1572 -> xxx.yyy.1.6:1433 SYN ******S* Jan 3 20:18:15 222.234.8.92:1573 -> xxx.yyy.1.7:1433 SYN ******S* [...] Jan 3 23:59:59 222.234.8.92:1520 -> xxx.yyy.246.10:1433 SYN ******S* Jan 3 23:59:59 222.234.8.92:1523 -> xxx.yyy.246.12:1433 SYN ******S* Jan 3 23:59:59 222.234.8.92:1521 -> xxx.yyy.246.11:1433 SYN ******S* Jan 3 23:59:59 222.234.8.92:1526 -> xxx.yyy.246.13:1433 SYN ******S* Jan 3 23:59:59 222.234.8.92:1531 -> xxx.yyy.246.14:1433 SYN ******S* Jan 3 23:59:59 222.234.8.92:1436 -> xxx.yyy.245.248:1433 SYN ******S* Jan 3 23:59:59 222.234.8.92:1535 -> xxx.yyy.246.16:1433 SYN ******S* Jan 3 23:59:59 222.234.8.92:1533 -> xxx.yyy.246.15:1433 SYN ******S* 114235 Jan 3 18:04:58 133.87.97.53:3293 -> xxx.yyy.1.4:4899 SYN ******S* Jan 3 18:04:58 133.87.97.53:3294 -> xxx.yyy.1.5:4899 SYN ******S* Jan 3 18:04:57 133.87.97.53:3290 -> xxx.yyy.1.1:4899 SYN ******S* Jan 3 18:04:57 133.87.97.53:3291 -> xxx.yyy.1.2:4899 SYN ******S* Jan 3 18:04:57 133.87.97.53:3292 -> xxx.yyy.1.3:4899 SYN ******S* Jan 3 18:04:58 133.87.97.53:3295 -> xxx.yyy.1.6:4899 SYN ******S* Jan 3 18:04:58 133.87.97.53:3301 -> xxx.yyy.1.12:4899 SYN ******S* Jan 3 18:04:58 133.87.97.53:3296 -> xxx.yyy.1.7:4899 SYN ******S* [...] Jan 3 18:48:45 133.87.97.53:1429 -> xxx.yyy.255.222:4899 SYN ******S* Jan 3 18:48:45 133.87.97.53:1396 -> xxx.yyy.255.189:4899 SYN ******S* Jan 3 18:48:45 133.87.97.53:1426 -> xxx.yyy.255.219:4899 SYN ******S* Jan 3 18:48:45 133.87.97.53:1444 -> xxx.yyy.255.237:4899 SYN ******S* Jan 3 18:48:45 133.87.97.53:1397 -> xxx.yyy.255.190:4899 SYN ******S* Jan 3 18:48:45 133.87.97.53:1410 -> xxx.yyy.255.203:4899 SYN ******S* Jan 3 18:48:45 133.87.97.53:1435 -> xxx.yyy.255.228:4899 SYN ******S* Jan 3 18:48:45 133.87.97.53:1458 -> xxx.yyy.255.251:4899 SYN ******S* 113652 Jan 3 05:45:17 80.72.75.80:1816 -> xxx.yyy.1.1:1433 SYN ******S* Jan 3 05:45:14 80.72.75.80:1839 -> xxx.yyy.1.9:1433 SYN ******S* Jan 3 05:45:14 80.72.75.80:1813 -> xxx.yyy.1.0:1433 SYN ******S* Jan 3 05:45:14 80.72.75.80:1857 -> xxx.yyy.1.15:1433 SYN ******S* Jan 3 05:45:14 80.72.75.80:1854 -> xxx.yyy.1.14:1433 SYN ******S* Jan 3 05:45:14 80.72.75.80:1842 -> xxx.yyy.1.10:1433 SYN ******S* Jan 3 05:45:14 80.72.75.80:1872 -> xxx.yyy.1.20:1433 SYN ******S* Jan 3 05:45:14 80.72.75.80:1863 -> xxx.yyy.1.17:1433 SYN ******S* [...] Jan 3 09:34:08 80.72.75.80:2455 -> xxx.yyy.255.234:1433 SYN ******S* Jan 3 09:34:08 80.72.75.80:2457 -> xxx.yyy.255.236:1433 SYN ******S* Jan 3 09:34:09 80.72.75.80:2480 -> xxx.yyy.255.246:1433 SYN ******S* Jan 3 09:34:09 80.72.75.80:2482 -> xxx.yyy.255.248:1433 SYN ******S* Jan 3 09:34:09 80.72.75.80:2483 -> xxx.yyy.255.249:1433 SYN ******S* Jan 3 09:34:09 80.72.75.80:2484 -> xxx.yyy.255.250:1433 SYN ******S* Jan 3 09:34:09 80.72.75.80:2487 -> xxx.yyy.255.251:1433 SYN ******S* Jan 3 09:34:09 80.72.75.80:2491 -> xxx.yyy.255.253:1433 SYN ******S* Jan 3 09:34:09 80.72.75.80:2490 -> xxx.yyy.255.254:1433 SYN ******S* 93585 Jan 3 10:30:59 212.204.249.1:3441 -> xxx.yyy.1.1:42 SYN ******S* Jan 3 10:30:59 212.204.249.1:3443 -> xxx.yyy.1.2:42 SYN ******S* Jan 3 10:30:59 212.204.249.1:3445 -> xxx.yyy.1.3:42 SYN ******S* Jan 3 10:30:59 212.204.249.1:3447 -> xxx.yyy.1.4:42 SYN ******S* Jan 3 10:30:59 212.204.249.1:3453 -> xxx.yyy.1.7:42 SYN ******S* Jan 3 10:30:56 212.204.249.1:3455 -> xxx.yyy.1.8:42 SYN ******S* Jan 3 10:30:59 212.204.249.1:3457 -> xxx.yyy.1.9:42 SYN ******S* Jan 3 10:30:59 212.204.249.1:3459 -> xxx.yyy.1.10:42 SYN ******S* [...] Jan 3 10:42:00 212.204.249.1:1563 -> xxx.yyy.255.253:42 SYN ******S* Jan 3 10:42:00 212.204.249.1:1553 -> xxx.yyy.255.248:42 SYN ******S* Jan 3 10:42:00 212.204.249.1:1549 -> xxx.yyy.255.246:42 SYN ******S* Jan 3 10:42:00 212.204.249.1:1565 -> xxx.yyy.255.254:42 SYN ******S* Jan 3 10:42:00 212.204.249.1:1555 -> xxx.yyy.255.249:42 SYN ******S* Jan 3 10:42:00 212.204.249.1:1559 -> xxx.yyy.255.251:42 SYN ******S* Jan 3 10:42:00 212.204.249.1:1551 -> xxx.yyy.255.247:42 SYN ******S* Jan 3 10:42:00 212.204.249.1:1561 -> xxx.yyy.255.252:42 SYN ******S* Jan 3 10:42:00 212.204.249.1:1557 -> xxx.yyy.255.250:42 SYN ******S* 71881 Jan 3 19:15:05 61.17.123.136:4465 -> xxx.yyy.1.7:1433 SYN ******S* Jan 3 19:15:05 61.17.123.136:4464 -> xxx.yyy.1.6:1433 SYN ******S* Jan 3 19:15:05 61.17.123.136:4466 -> xxx.yyy.1.8:1433 SYN ******S* Jan 3 19:15:05 61.17.123.136:4467 -> xxx.yyy.1.9:1433 SYN ******S* Jan 3 19:15:02 61.17.123.136:4468 -> xxx.yyy.1.10:1433 SYN ******S* Jan 3 19:15:05 61.17.123.136:4470 -> xxx.yyy.1.12:1433 SYN ******S* Jan 3 19:15:05 61.17.123.136:4469 -> xxx.yyy.1.11:1433 SYN ******S* Jan 3 19:15:05 61.17.123.136:4473 -> xxx.yyy.1.14:1433 SYN ******S* [...] Jan 3 20:08:33 61.17.123.136:1880 -> xxx.yyy.255.208:1433 SYN ******S* Jan 3 20:08:33 61.17.123.136:1887 -> xxx.yyy.255.213:1433 SYN ******S* Jan 3 20:08:33 61.17.123.136:1881 -> xxx.yyy.255.209:1433 SYN ******S* Jan 3 20:08:33 61.17.123.136:1885 -> xxx.yyy.255.211:1433 SYN ******S* Jan 3 20:08:33 61.17.123.136:1882 -> xxx.yyy.255.210:1433 SYN ******S* Jan 3 20:08:33 61.17.123.136:1875 -> xxx.yyy.255.205:1433 SYN ******S* Jan 3 20:08:33 61.17.123.136:1879 -> xxx.yyy.255.207:1433 SYN ******S* Jan 3 20:08:33 61.17.123.136:1874 -> xxx.yyy.255.204:1433 SYN ******S* Jan 3 20:08:33 61.17.123.136:1886 -> xxx.yyy.255.212:1433 SYN ******S* 58611 Jan 3 21:32:57 210.82.103.62:1408 -> xxx.yyy.1.0:1433 SYN ******S* Jan 3 21:32:57 210.82.103.62:5763 -> xxx.yyy.1.1:1433 SYN ******S* Jan 3 21:32:57 210.82.103.62:5765 -> xxx.yyy.1.2:1433 SYN ******S* Jan 3 21:32:57 210.82.103.62:5767 -> xxx.yyy.1.3:1433 SYN ******S* Jan 3 21:32:57 210.82.103.62:5768 -> xxx.yyy.1.4:1433 SYN ******S* Jan 3 21:32:57 210.82.103.62:53781 -> xxx.yyy.1.5:1433 SYN ******S* Jan 3 21:32:57 210.82.103.62:53784 -> xxx.yyy.1.6:1433 SYN ******S* Jan 3 21:32:57 210.82.103.62:5769 -> xxx.yyy.1.7:1433 SYN ******S* [...] Jan 3 23:59:59 210.82.103.62:48427 -> xxx.yyy.164.231:1433 SYN ******S* Jan 3 23:59:59 210.82.103.62:54762 -> xxx.yyy.164.232:1433 SYN ******S* Jan 3 23:59:59 210.82.103.62:56333 -> xxx.yyy.164.233:1433 SYN ******S* Jan 3 23:59:59 210.82.103.62:48447 -> xxx.yyy.164.234:1433 SYN ******S* Jan 3 23:59:59 210.82.103.62:56334 -> xxx.yyy.164.235:1433 SYN ******S* Jan 3 23:59:59 210.82.103.62:54764 -> xxx.yyy.164.236:1433 SYN ******S* Jan 3 23:59:59 210.82.103.62:54766 -> xxx.yyy.164.237:1433 SYN ******S* Jan 3 23:59:59 210.82.103.62:49550 -> xxx.yyy.164.222:1433 SYN ******S* 58414 Jan 3 00:00:04 218.148.213.9:3014 -> xxx.yyy.221.176:5900 SYN ******S* Jan 3 00:00:04 218.148.213.9:3037 -> xxx.yyy.222.15:5900 SYN ******S* Jan 3 00:00:05 218.148.213.9:3060 -> xxx.yyy.206.242:5900 SYN ******S* Jan 3 00:00:05 218.148.213.9:3069 -> xxx.yyy.222.3:5900 SYN ******S* Jan 3 00:00:05 218.148.213.9:3077 -> xxx.yyy.220.66:5900 SYN ******S* Jan 3 00:00:06 218.148.213.9:3093 -> xxx.yyy.220.127:5900 SYN ******S* Jan 3 00:00:06 218.148.213.9:3095 -> xxx.yyy.222.38:5900 SYN ******S* Jan 3 00:00:06 218.148.213.9:3111 -> xxx.yyy.220.114:5900 SYN ******S* [...] Jan 3 05:10:14 218.148.213.9:3866 -> xxx.yyy.220.141:5900 SYN ******S* Jan 3 05:10:14 218.148.213.9:3907 -> xxx.yyy.221.103:5900 SYN ******S* Jan 3 05:10:15 218.148.213.9:3911 -> xxx.yyy.220.129:5900 SYN ******S* Jan 3 05:10:16 218.148.213.9:3976 -> xxx.yyy.132.143:5900 SYN ******S* Jan 3 05:10:16 218.148.213.9:3990 -> xxx.yyy.222.3:5900 SYN ******S* Jan 3 05:10:16 218.148.213.9:3998 -> xxx.yyy.220.61:5900 SYN ******S* Jan 3 05:10:16 218.148.213.9:4000 -> xxx.yyy.221.189:5900 SYN ******S* Jan 3 05:10:16 218.148.213.9:4003 -> xxx.yyy.222.32:5900 SYN ******S* Jan 3 05:10:17 218.148.213.9:4025 -> xxx.yyy.132.73:5900 SYN ******S* 50840 [...] 44709 Jan 3 07:39:56 210.112.233.47:3063 -> xxx.yyy.1.1:42 SYN ******S* Jan 3 07:39:56 210.112.233.47:3064 -> xxx.yyy.1.2:42 SYN ******S* Jan 3 07:39:57 210.112.233.47:3065 -> xxx.yyy.1.3:42 SYN ******S* Jan 3 07:39:57 210.112.233.47:3066 -> xxx.yyy.1.4:42 SYN ******S* Jan 3 07:39:57 210.112.233.47:3067 -> xxx.yyy.1.5:42 SYN ******S* Jan 3 07:39:57 210.112.233.47:3068 -> xxx.yyy.1.6:42 SYN ******S* Jan 3 07:39:57 210.112.233.47:3069 -> xxx.yyy.1.7:42 SYN ******S* Jan 3 07:39:57 210.112.233.47:3070 -> xxx.yyy.1.8:42 SYN ******S* [...] Jan 3 07:45:04 210.112.233.47:3825 -> xxx.yyy.255.247:42 SYN ******S* Jan 3 07:45:04 210.112.233.47:3826 -> xxx.yyy.255.248:42 SYN ******S* Jan 3 07:45:04 210.112.233.47:3827 -> xxx.yyy.255.249:42 SYN ******S* Jan 3 07:45:04 210.112.233.47:3828 -> xxx.yyy.255.250:42 SYN ******S* Jan 3 07:45:04 210.112.233.47:3829 -> xxx.yyy.255.251:42 SYN ******S* Jan 3 07:45:04 210.112.233.47:3830 -> xxx.yyy.255.252:42 SYN ******S* Jan 3 07:45:04 210.112.233.47:3831 -> xxx.yyy.255.253:42 SYN ******S* Jan 3 07:45:04 210.112.233.47:3832 -> xxx.yyy.255.254:42 SYN ******S* 43916 Jan 3 19:30:20 210.121.141.150:2738 -> xxx.yyy.1.0:21 SYN ******S* Jan 3 19:30:20 210.121.141.150:2739 -> xxx.yyy.1.1:21 SYN ******S* Jan 3 19:30:20 210.121.141.150:2741 -> xxx.yyy.1.2:21 SYN ******S* Jan 3 19:30:20 210.121.141.150:2743 -> xxx.yyy.1.4:21 SYN ******S* Jan 3 19:30:20 210.121.141.150:2742 -> xxx.yyy.1.3:21 SYN ******S* Jan 3 19:30:20 210.121.141.150:2745 -> xxx.yyy.1.6:21 SYN ******S* Jan 3 19:30:20 210.121.141.150:2744 -> xxx.yyy.1.5:21 SYN ******S* Jan 3 19:30:20 210.121.141.150:2746 -> xxx.yyy.1.7:21 SYN ******S* [...] Jan 3 19:42:42 210.121.141.150:2684 -> xxx.yyy.254.232:21 SYN ******S* Jan 3 19:42:42 210.121.141.150:2687 -> xxx.yyy.254.233:21 SYN ******S* Jan 3 19:42:42 210.121.141.150:2690 -> xxx.yyy.254.234:21 SYN ******S* Jan 3 19:42:42 210.121.141.150:2694 -> xxx.yyy.254.235:21 SYN ******S* Jan 3 19:42:42 210.121.141.150:2698 -> xxx.yyy.254.236:21 SYN ******S* Jan 3 19:42:42 210.121.141.150:2705 -> xxx.yyy.254.238:21 SYN ******S* Jan 3 19:42:42 210.121.141.150:2700 -> xxx.yyy.254.237:21 SYN ******S* Jan 3 19:42:42 210.121.141.150:2707 -> xxx.yyy.254.239:21 SYN ******S* Jan 3 19:42:43 210.121.141.150:2710 -> xxx.yyy.254.240:21 SYN ******S* 43320 Jan 3 12:40:42 216.205.93.58:1478 -> xxx.yyy.1.1:42 SYN ******S* Jan 3 12:40:42 216.205.93.58:1479 -> xxx.yyy.1.2:42 SYN ******S* Jan 3 12:40:42 216.205.93.58:1480 -> xxx.yyy.1.3:42 SYN ******S* Jan 3 12:40:42 216.205.93.58:1482 -> xxx.yyy.1.5:42 SYN ******S* Jan 3 12:40:42 216.205.93.58:1481 -> xxx.yyy.1.4:42 SYN ******S* Jan 3 12:40:42 216.205.93.58:1483 -> xxx.yyy.1.6:42 SYN ******S* Jan 3 12:40:42 216.205.93.58:1484 -> xxx.yyy.1.7:42 SYN ******S* Jan 3 12:40:42 216.205.93.58:1488 -> xxx.yyy.1.11:42 SYN ******S* [...] Jan 3 12:50:52 216.205.93.58:3846 -> xxx.yyy.255.246:42 SYN ******S* Jan 3 12:50:52 216.205.93.58:3847 -> xxx.yyy.255.247:42 SYN ******S* Jan 3 12:50:52 216.205.93.58:3848 -> xxx.yyy.255.248:42 SYN ******S* Jan 3 12:50:52 216.205.93.58:3849 -> xxx.yyy.255.249:42 SYN ******S* Jan 3 12:50:52 216.205.93.58:3850 -> xxx.yyy.255.250:42 SYN ******S* Jan 3 12:50:52 216.205.93.58:3851 -> xxx.yyy.255.251:42 SYN ******S* Jan 3 12:50:52 216.205.93.58:3852 -> xxx.yyy.255.252:42 SYN ******S* Jan 3 12:50:52 216.205.93.58:3853 -> xxx.yyy.255.253:42 SYN ******S* Jan 3 12:50:52 216.205.93.58:3854 -> xxx.yyy.255.254:42 SYN ******S* 42347 [...] 40243 Jan 3 00:00:05 209.15.115.42:80 -> xxx.yyy.157.11:42 SYN ******S* Jan 3 00:00:05 209.15.115.42:80 -> xxx.yyy.159.177:42 SYN ******S* Jan 3 00:00:06 209.15.115.42:80 -> xxx.yyy.241.43:42 SYN ******S* Jan 3 00:00:07 209.15.115.42:80 -> xxx.yyy.93.255:42 SYN ******S* Jan 3 00:00:07 209.15.115.42:80 -> xxx.yyy.15.25:42 SYN ******S* Jan 3 00:00:08 209.15.115.42:80 -> xxx.yyy.1.159:42 SYN ******S* Jan 3 00:00:08 209.15.115.42:80 -> xxx.yyy.209.245:42 SYN ******S* Jan 3 00:00:08 209.15.115.42:80 -> xxx.yyy.87.25:42 SYN ******S* [...] Jan 3 12:20:43 209.15.115.42:80 -> xxx.yyy.181.95:42 SYN ******S* Jan 3 12:20:45 209.15.115.42:80 -> xxx.yyy.155.189:42 SYN ******S* Jan 3 12:20:45 209.15.115.42:80 -> xxx.yyy.163.243:42 SYN ******S* Jan 3 12:20:46 209.15.115.42:80 -> xxx.yyy.231.157:42 SYN ******S* Jan 3 12:20:47 209.15.115.42:80 -> xxx.yyy.133.15:42 SYN ******S* Jan 3 12:20:48 209.15.115.42:80 -> xxx.yyy.15.191:42 SYN ******S* Jan 3 12:20:48 209.15.115.42:80 -> xxx.yyy.181.255:42 SYN ******S* Jan 3 12:20:48 209.15.115.42:80 -> xxx.yyy.143.157:42 SYN ******S* Jan 3 12:20:48 209.15.115.42:80 -> xxx.yyy.137.247:42 SYN ******S* 37247 Jan 3 06:19:46 62.16.211.125:2749 -> xxx.yyy.1.1:80 SYN ******S* Jan 3 06:19:46 62.16.211.125:2750 -> xxx.yyy.1.2:80 SYN ******S* Jan 3 06:19:46 62.16.211.125:2751 -> xxx.yyy.1.3:80 SYN ******S* Jan 3 06:19:44 62.16.211.125:2753 -> xxx.yyy.1.5:80 SYN ******S* Jan 3 06:19:44 62.16.211.125:2752 -> xxx.yyy.1.4:80 SYN ******S* Jan 3 06:19:44 62.16.211.125:2754 -> xxx.yyy.1.6:80 SYN ******S* Jan 3 06:19:44 62.16.211.125:2755 -> xxx.yyy.1.7:80 SYN ******S* Jan 3 06:19:44 62.16.211.125:2757 -> xxx.yyy.1.9:80 SYN ******S* [...] Jan 3 06:25:45 62.16.211.125:2455 -> xxx.yyy.255.200:80 SYN ******S* Jan 3 06:25:45 62.16.211.125:2487 -> xxx.yyy.255.232:80 SYN ******S* Jan 3 06:25:45 62.16.211.125:2423 -> xxx.yyy.255.168:80 SYN ******S* Jan 3 06:25:45 62.16.211.125:2507 -> xxx.yyy.255.251:80 SYN ******S* Jan 3 06:25:45 62.16.211.125:2439 -> xxx.yyy.255.184:80 SYN ******S* Jan 3 06:25:45 62.16.211.125:2375 -> xxx.yyy.255.120:80 SYN ******S* Jan 3 06:25:45 62.16.211.125:2436 -> xxx.yyy.255.181:80 SYN ******S* Jan 3 06:25:45 62.16.211.125:2420 -> xxx.yyy.255.165:80 SYN ******S* Jan 3 06:25:45 62.16.211.125:2340 -> xxx.yyy.255.85:80 SYN ******S* 36550 Jan 3 01:40:44 128.205.118.143:3114 -> xxx.yyy.1.1:42 SYN ******S* Jan 3 01:40:44 128.205.118.143:3115 -> xxx.yyy.1.2:42 SYN ******S* Jan 3 01:40:44 128.205.118.143:3116 -> xxx.yyy.1.3:42 SYN ******S* Jan 3 01:40:44 128.205.118.143:3117 -> xxx.yyy.1.4:42 SYN ******S* Jan 3 01:40:44 128.205.118.143:3118 -> xxx.yyy.1.5:42 SYN ******S* Jan 3 01:40:44 128.205.118.143:3119 -> xxx.yyy.1.6:42 SYN ******S* Jan 3 01:40:44 128.205.118.143:3120 -> xxx.yyy.1.7:42 SYN ******S* Jan 3 01:40:44 128.205.118.143:3121 -> xxx.yyy.1.8:42 SYN ******S* [...] Jan 3 01:51:38 128.205.118.143:2084 -> xxx.yyy.255.243:42 SYN ******S* Jan 3 01:51:38 128.205.118.143:2085 -> xxx.yyy.255.244:42 SYN ******S* Jan 3 01:51:38 128.205.118.143:2086 -> xxx.yyy.255.245:42 SYN ******S* Jan 3 01:51:39 128.205.118.143:2088 -> xxx.yyy.255.247:42 SYN ******S* Jan 3 01:51:39 128.205.118.143:2089 -> xxx.yyy.255.248:42 SYN ******S* Jan 3 01:51:39 128.205.118.143:2090 -> xxx.yyy.255.249:42 SYN ******S* Jan 3 01:51:39 128.205.118.143:2092 -> xxx.yyy.255.251:42 SYN ******S* Jan 3 01:51:39 128.205.118.143:2093 -> xxx.yyy.255.252:42 SYN ******S* Jan 3 01:51:39 128.205.118.143:2095 -> xxx.yyy.255.254:42 SYN ******S* 34827 Jan 3 17:08:35 68.126.246.116:2068 -> xxx.yyy.1.1:80 SYN ******S* Jan 3 17:08:33 68.126.246.116:2071 -> xxx.yyy.1.4:80 SYN ******S* Jan 3 17:08:33 68.126.246.116:2074 -> xxx.yyy.1.7:80 SYN ******S* Jan 3 17:08:33 68.126.246.116:2077 -> xxx.yyy.1.10:80 SYN ******S* Jan 3 17:08:36 68.126.246.116:2079 -> xxx.yyy.1.12:80 SYN ******S* Jan 3 17:08:33 68.126.246.116:2082 -> xxx.yyy.1.15:80 SYN ******S* Jan 3 17:08:36 68.126.246.116:2085 -> xxx.yyy.1.18:80 SYN ******S* Jan 3 17:08:33 68.126.246.116:2087 -> xxx.yyy.1.20:80 SYN ******S* [...] Jan 3 17:39:29 68.126.246.116:2861 -> xxx.yyy.254.249:80 SYN ******S* Jan 3 17:39:29 68.126.246.116:2858 -> xxx.yyy.254.246:80 SYN ******S* Jan 3 17:39:29 68.126.246.116:2855 -> xxx.yyy.254.243:80 SYN ******S* Jan 3 17:39:29 68.126.246.116:2852 -> xxx.yyy.254.240:80 SYN ******S* Jan 3 17:39:29 68.126.246.116:2865 -> xxx.yyy.254.253:80 SYN ******S* Jan 3 17:39:29 68.126.246.116:2862 -> xxx.yyy.254.250:80 SYN ******S* Jan 3 17:39:29 68.126.246.116:2856 -> xxx.yyy.254.244:80 SYN ******S* Jan 3 17:39:33 68.126.246.116:2949 -> xxx.yyy.224.96:80 SYN ******S* 34078 Jan 3 00:00:53 200.115.130.68:80 -> xxx.yyy.107.7:42 SYN ******S* Jan 3 00:00:53 200.115.130.68:80 -> xxx.yyy.255.173:42 SYN ******S* Jan 3 00:00:54 200.115.130.68:80 -> xxx.yyy.145.151:42 SYN ******S* Jan 3 00:00:54 200.115.130.68:80 -> xxx.yyy.249.113:42 SYN ******S* Jan 3 00:00:55 200.115.130.68:80 -> xxx.yyy.131.29:42 SYN ******S* Jan 3 00:00:55 200.115.130.68:80 -> xxx.yyy.223.111:42 SYN ******S* Jan 3 00:00:55 200.115.130.68:80 -> xxx.yyy.157.183:42 SYN ******S* Jan 3 00:00:57 200.115.130.68:80 -> xxx.yyy.143.67:42 SYN ******S* [...] Jan 3 23:59:08 200.115.130.68:80 -> xxx.yyy.211.67:42 SYN ******S* Jan 3 23:59:09 200.115.130.68:80 -> xxx.yyy.179.11:42 SYN ******S* Jan 3 23:59:39 200.115.130.68:80 -> xxx.yyy.69.75:42 SYN ******S* Jan 3 23:59:40 200.115.130.68:80 -> xxx.yyy.79.127:42 SYN ******S* Jan 3 23:59:40 200.115.130.68:80 -> xxx.yyy.171.147:42 SYN ******S* Jan 3 23:59:42 200.115.130.68:80 -> xxx.yyy.87.19:42 SYN ******S* Jan 3 23:59:42 200.115.130.68:80 -> xxx.yyy.217.131:42 SYN ******S* Jan 3 23:59:43 200.115.130.68:80 -> xxx.yyy.219.125:42 SYN ******S* 28087 Jan 3 08:19:04 205.155.219.70:1835 -> xxx.yyy.1.1:42 SYN ******S* Jan 3 08:19:04 205.155.219.70:1836 -> xxx.yyy.1.2:42 SYN ******S* Jan 3 08:19:04 205.155.219.70:1837 -> xxx.yyy.1.3:42 SYN ******S* Jan 3 08:19:04 205.155.219.70:1839 -> xxx.yyy.1.5:42 SYN ******S* Jan 3 08:19:04 205.155.219.70:1840 -> xxx.yyy.1.6:42 SYN ******S* Jan 3 08:19:01 205.155.219.70:1841 -> xxx.yyy.1.7:42 SYN ******S* Jan 3 08:19:01 205.155.219.70:1842 -> xxx.yyy.1.8:42 SYN ******S* Jan 3 08:19:04 205.155.219.70:1843 -> xxx.yyy.1.9:42 SYN ******S* [...] Jan 3 08:27:41 205.155.219.70:3608 -> xxx.yyy.255.254:42 SYN ******S* Jan 3 08:27:41 205.155.219.70:3605 -> xxx.yyy.255.251:42 SYN ******S* Jan 3 08:27:41 205.155.219.70:3602 -> xxx.yyy.255.248:42 SYN ******S* Jan 3 08:27:41 205.155.219.70:3606 -> xxx.yyy.255.252:42 SYN ******S* Jan 3 08:27:41 205.155.219.70:3603 -> xxx.yyy.255.249:42 SYN ******S* Jan 3 08:27:41 205.155.219.70:3600 -> xxx.yyy.255.246:42 SYN ******S* Jan 3 08:27:41 205.155.219.70:3607 -> xxx.yyy.255.253:42 SYN ******S* Jan 3 08:27:41 205.155.219.70:3604 -> xxx.yyy.255.250:42 SYN ******S* 21281 Jan 3 22:24:52 200.47.91.234:2848 -> xxx.yyy.1.249:8721 SYN ******S* Jan 3 22:24:53 200.47.91.234:2867 -> xxx.yyy.1.250:8721 SYN ******S* Jan 3 22:24:52 200.47.91.234:2989 -> xxx.yyy.1.254:8721 SYN ******S* Jan 3 22:24:53 200.47.91.234:2884 -> xxx.yyy.1.251:8721 SYN ******S* Jan 3 22:24:52 200.47.91.234:2907 -> xxx.yyy.1.252:8721 SYN ******S* Jan 3 22:24:52 200.47.91.234:2975 -> xxx.yyy.1.253:8721 SYN ******S* Jan 3 22:24:53 200.47.91.234:3002 -> xxx.yyy.1.255:8721 SYN ******S* Jan 3 22:24:58 200.47.91.234:3606 -> xxx.yyy.4.3:8721 SYN ******S* [...] Jan 3 22:35:15 200.47.91.234:3143 -> xxx.yyy.255.245:8721 SYN ******S* Jan 3 22:35:15 200.47.91.234:3177 -> xxx.yyy.255.246:8721 SYN ******S* Jan 3 22:35:15 200.47.91.234:3212 -> xxx.yyy.255.247:8721 SYN ******S* Jan 3 22:35:15 200.47.91.234:3606 -> xxx.yyy.255.254:8721 SYN ******S* Jan 3 22:35:15 200.47.91.234:3385 -> xxx.yyy.255.249:8721 SYN ******S* Jan 3 22:35:15 200.47.91.234:3437 -> xxx.yyy.255.250:8721 SYN ******S* Jan 3 22:35:15 200.47.91.234:3477 -> xxx.yyy.255.251:8721 SYN ******S* Jan 3 22:35:15 200.47.91.234:3541 -> xxx.yyy.255.252:8721 SYN ******S* Jan 3 22:35:15 200.47.91.234:3592 -> xxx.yyy.255.253:8721 SYN ******S* 19638 Jan 3 13:29:46 220.172.204.194:4323 -> xxx.yyy.1.1:1433 SYN ******S* Jan 3 13:29:46 220.172.204.194:4365 -> xxx.yyy.1.8:1433 SYN ******S* Jan 3 13:29:46 220.172.204.194:4827 -> xxx.yyy.1.9:1433 SYN ******S* Jan 3 13:29:46 220.172.204.194:4199 -> xxx.yyy.1.16:1433 SYN ******S* Jan 3 13:29:46 220.172.204.194:3603 -> xxx.yyy.1.26:1433 SYN ******S* Jan 3 13:29:44 220.172.204.194:4517 -> xxx.yyy.1.35:1433 SYN ******S* Jan 3 13:29:44 220.172.204.194:4213 -> xxx.yyy.1.37:1433 SYN ******S* Jan 3 13:29:44 220.172.204.194:4772 -> xxx.yyy.1.38:1433 SYN ******S* [...] Jan 3 14:10:02 220.172.204.194:3712 -> xxx.yyy.191.51:1433 SYN ******S* Jan 3 14:10:03 220.172.204.194:4446 -> xxx.yyy.191.184:1433 SYN ******S* Jan 3 14:10:03 220.172.204.194:3044 -> xxx.yyy.191.211:1433 SYN ******S* Jan 3 14:10:03 220.172.204.194:4101 -> xxx.yyy.191.204:1433 SYN ******S* Jan 3 14:10:03 220.172.204.194:3062 -> xxx.yyy.191.212:1433 SYN ******S* Jan 3 14:10:03 220.172.204.194:4890 -> xxx.yyy.191.163:1433 SYN ******S* Jan 3 14:10:03 220.172.204.194:3042 -> xxx.yyy.191.210:1433 SYN ******S* Jan 3 14:10:03 220.172.204.194:3837 -> xxx.yyy.191.169:1433 SYN ******S* Jan 3 14:10:04 220.172.204.194:4661 -> xxx.yyy.191.185:1433 SYN ******S* 17323 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions