[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Jan 4 05:27:21 218.8.231.46:1697 -> xxx.yyy.1.0:1433 SYN ******S* Jan 4 05:27:18 218.8.231.46:1698 -> xxx.yyy.1.1:1433 SYN ******S* Jan 4 05:27:21 218.8.231.46:1699 -> xxx.yyy.1.2:1433 SYN ******S* Jan 4 05:27:21 218.8.231.46:1700 -> xxx.yyy.1.3:1433 SYN ******S* Jan 4 05:27:21 218.8.231.46:1701 -> xxx.yyy.1.4:1433 SYN ******S* Jan 4 05:27:21 218.8.231.46:1702 -> xxx.yyy.1.5:1433 SYN ******S* Jan 4 05:27:21 218.8.231.46:1703 -> xxx.yyy.1.6:1433 SYN ******S* Jan 4 05:27:21 218.8.231.46:1704 -> xxx.yyy.1.7:1433 SYN ******S* [...] Jan 4 09:17:05 218.8.231.46:2335 -> xxx.yyy.255.241:1433 SYN ******S* Jan 4 09:17:06 218.8.231.46:2510 -> xxx.yyy.255.243:1433 SYN ******S* Jan 4 09:17:06 218.8.231.46:2615 -> xxx.yyy.255.245:1433 SYN ******S* Jan 4 09:17:07 218.8.231.46:2684 -> xxx.yyy.255.248:1433 SYN ******S* Jan 4 09:17:07 218.8.231.46:2703 -> xxx.yyy.255.249:1433 SYN ******S* Jan 4 09:17:07 218.8.231.46:2717 -> xxx.yyy.255.250:1433 SYN ******S* Jan 4 09:17:07 218.8.231.46:2729 -> xxx.yyy.255.251:1433 SYN ******S* Jan 4 09:17:08 218.8.231.46:2767 -> xxx.yyy.255.252:1433 SYN ******S* 120253 Jan 4 08:24:20 82.41.107.215:3854 -> xxx.yyy.1.0:1433 SYN ******S* Jan 4 08:24:20 82.41.107.215:3856 -> xxx.yyy.1.1:1433 SYN ******S* Jan 4 08:24:20 82.41.107.215:3857 -> xxx.yyy.1.2:1433 SYN ******S* Jan 4 08:24:20 82.41.107.215:3858 -> xxx.yyy.1.3:1433 SYN ******S* Jan 4 08:24:20 82.41.107.215:3861 -> xxx.yyy.1.4:1433 SYN ******S* Jan 4 08:24:20 82.41.107.215:3864 -> xxx.yyy.1.5:1433 SYN ******S* Jan 4 08:24:20 82.41.107.215:3867 -> xxx.yyy.1.6:1433 SYN ******S* Jan 4 08:24:20 82.41.107.215:3868 -> xxx.yyy.1.7:1433 SYN ******S* [...] Jan 4 12:13:00 82.41.107.215:3975 -> xxx.yyy.255.243:1433 SYN ******S* Jan 4 12:13:00 82.41.107.215:4008 -> xxx.yyy.255.244:1433 SYN ******S* Jan 4 12:13:00 82.41.107.215:4062 -> xxx.yyy.255.246:1433 SYN ******S* Jan 4 12:13:00 82.41.107.215:4104 -> xxx.yyy.255.247:1433 SYN ******S* Jan 4 12:13:01 82.41.107.215:4135 -> xxx.yyy.255.249:1433 SYN ******S* Jan 4 12:13:01 82.41.107.215:4196 -> xxx.yyy.255.251:1433 SYN ******S* Jan 4 12:13:01 82.41.107.215:4226 -> xxx.yyy.255.252:1433 SYN ******S* Jan 4 12:13:01 82.41.107.215:4253 -> xxx.yyy.255.253:1433 SYN ******S* Jan 4 12:13:01 82.41.107.215:4337 -> xxx.yyy.255.254:1433 SYN ******S* 107730 Jan 4 13:34:44 84.121.227.106:3283 -> xxx.yyy.1.15:1433 SYN ******S* Jan 4 13:34:46 84.121.227.106:3266 -> xxx.yyy.1.0:1433 SYN ******S* Jan 4 13:34:44 84.121.227.106:3284 -> xxx.yyy.1.16:1433 SYN ******S* Jan 4 13:34:46 84.121.227.106:3267 -> xxx.yyy.1.1:1433 SYN ******S* Jan 4 13:34:46 84.121.227.106:3268 -> xxx.yyy.1.2:1433 SYN ******S* Jan 4 13:34:46 84.121.227.106:3269 -> xxx.yyy.1.3:1433 SYN ******S* Jan 4 13:34:46 84.121.227.106:3272 -> xxx.yyy.1.5:1433 SYN ******S* Jan 4 13:34:46 84.121.227.106:3275 -> xxx.yyy.1.7:1433 SYN ******S* [...] Jan 4 17:23:36 84.121.227.106:1739 -> xxx.yyy.255.245:1433 SYN ******S* Jan 4 17:23:37 84.121.227.106:1763 -> xxx.yyy.255.247:1433 SYN ******S* Jan 4 17:23:38 84.121.227.106:1765 -> xxx.yyy.255.248:1433 SYN ******S* Jan 4 17:23:38 84.121.227.106:1767 -> xxx.yyy.255.249:1433 SYN ******S* Jan 4 17:23:38 84.121.227.106:1769 -> xxx.yyy.255.251:1433 SYN ******S* Jan 4 17:23:38 84.121.227.106:1768 -> xxx.yyy.255.250:1433 SYN ******S* Jan 4 17:23:38 84.121.227.106:1770 -> xxx.yyy.255.252:1433 SYN ******S* Jan 4 17:23:40 84.121.227.106:1780 -> xxx.yyy.255.254:1433 SYN ******S* 90774 Jan 4 06:26:10 221.192.33.251:4004 -> xxx.yyy.1.1:1433 SYN ******S* Jan 4 06:26:10 221.192.33.251:4005 -> xxx.yyy.1.2:1433 SYN ******S* Jan 4 06:26:10 221.192.33.251:4010 -> xxx.yyy.1.3:1433 SYN ******S* Jan 4 06:26:10 221.192.33.251:4013 -> xxx.yyy.1.4:1433 SYN ******S* Jan 4 06:26:10 221.192.33.251:4015 -> xxx.yyy.1.5:1433 SYN ******S* Jan 4 06:26:07 221.192.33.251:4023 -> xxx.yyy.1.7:1433 SYN ******S* Jan 4 06:26:10 221.192.33.251:4024 -> xxx.yyy.1.8:1433 SYN ******S* Jan 4 06:26:10 221.192.33.251:4025 -> xxx.yyy.1.9:1433 SYN ******S* [...] Jan 4 09:20:38 221.192.33.251:2944 -> xxx.yyy.194.252:1433 SYN ******S* Jan 4 09:20:38 221.192.33.251:2645 -> xxx.yyy.194.217:1433 SYN ******S* Jan 4 09:20:38 221.192.33.251:2649 -> xxx.yyy.194.218:1433 SYN ******S* Jan 4 09:20:39 221.192.33.251:2946 -> xxx.yyy.194.253:1433 SYN ******S* Jan 4 09:20:39 221.192.33.251:3095 -> xxx.yyy.195.6:1433 SYN ******S* Jan 4 09:20:39 221.192.33.251:2666 -> xxx.yyy.194.220:1433 SYN ******S* Jan 4 09:20:39 221.192.33.251:2977 -> xxx.yyy.194.255:1433 SYN ******S* Jan 4 09:20:39 221.192.33.251:2978 -> xxx.yyy.195.0:1433 SYN ******S* 74582 Jan 4 22:23:12 67.83.131.67:1788 -> xxx.yyy.1.1:4000 SYN ******S* Jan 4 22:23:13 67.83.131.67:1789 -> xxx.yyy.1.2:4000 SYN ******S* Jan 4 22:23:13 67.83.131.67:1790 -> xxx.yyy.1.3:4000 SYN ******S* Jan 4 22:23:14 67.83.131.67:1791 -> xxx.yyy.1.4:4000 SYN ******S* Jan 4 22:23:14 67.83.131.67:1792 -> xxx.yyy.1.5:4000 SYN ******S* Jan 4 22:23:14 67.83.131.67:1793 -> xxx.yyy.1.6:4000 SYN ******S* Jan 4 22:23:14 67.83.131.67:1794 -> xxx.yyy.1.7:4000 SYN ******S* Jan 4 22:23:14 67.83.131.67:1795 -> xxx.yyy.1.8:4000 SYN ******S* [...] Jan 4 22:34:16 67.83.131.67:4348 -> xxx.yyy.255.216:4000 SYN ******S* Jan 4 22:34:16 67.83.131.67:4345 -> xxx.yyy.255.213:4000 SYN ******S* Jan 4 22:34:16 67.83.131.67:4342 -> xxx.yyy.255.210:4000 SYN ******S* Jan 4 22:34:16 67.83.131.67:4346 -> xxx.yyy.255.214:4000 SYN ******S* Jan 4 22:34:16 67.83.131.67:4343 -> xxx.yyy.255.211:4000 SYN ******S* Jan 4 22:34:16 67.83.131.67:4344 -> xxx.yyy.255.212:4000 SYN ******S* Jan 4 22:34:16 67.83.131.67:4347 -> xxx.yyy.255.215:4000 SYN ******S* Jan 4 22:34:16 67.83.131.67:4340 -> xxx.yyy.255.208:4000 SYN ******S* 73322 Jan 4 03:24:32 195.102.240.104:4855 -> xxx.yyy.1.1:42 SYN ******S* Jan 4 03:24:32 195.102.240.104:4856 -> xxx.yyy.1.2:42 SYN ******S* Jan 4 03:24:32 195.102.240.104:4857 -> xxx.yyy.1.3:42 SYN ******S* Jan 4 03:24:32 195.102.240.104:4861 -> xxx.yyy.1.4:42 SYN ******S* Jan 4 03:24:32 195.102.240.104:4867 -> xxx.yyy.1.5:42 SYN ******S* Jan 4 03:24:32 195.102.240.104:4869 -> xxx.yyy.1.6:42 SYN ******S* Jan 4 03:24:32 195.102.240.104:4872 -> xxx.yyy.1.7:42 SYN ******S* Jan 4 03:24:29 195.102.240.104:4891 -> xxx.yyy.1.8:42 SYN ******S* [...] Jan 4 03:36:11 195.102.240.104:3786 -> xxx.yyy.255.247:42 SYN ******S* Jan 4 03:36:11 195.102.240.104:3784 -> xxx.yyy.255.245:42 SYN ******S* Jan 4 03:36:11 195.102.240.104:3783 -> xxx.yyy.255.244:42 SYN ******S* Jan 4 03:36:11 195.102.240.104:3781 -> xxx.yyy.255.242:42 SYN ******S* Jan 4 03:36:11 195.102.240.104:3787 -> xxx.yyy.255.248:42 SYN ******S* Jan 4 03:36:11 195.102.240.104:3791 -> xxx.yyy.255.252:42 SYN ******S* Jan 4 03:36:11 195.102.240.104:3793 -> xxx.yyy.255.254:42 SYN ******S* Jan 4 03:36:11 195.102.240.104:3790 -> xxx.yyy.255.251:42 SYN ******S* Jan 4 03:36:11 195.102.240.104:3792 -> xxx.yyy.255.253:42 SYN ******S* 71817 Jan 4 04:27:26 66.192.233.197:4077 -> xxx.yyy.1.1:3306 SYN ******S* Jan 4 04:27:26 66.192.233.197:4078 -> xxx.yyy.1.2:3306 SYN ******S* Jan 4 04:27:26 66.192.233.197:4079 -> xxx.yyy.1.3:3306 SYN ******S* Jan 4 04:27:28 66.192.233.197:4080 -> xxx.yyy.1.4:3306 SYN ******S* Jan 4 04:27:28 66.192.233.197:4081 -> xxx.yyy.1.5:3306 SYN ******S* Jan 4 04:27:28 66.192.233.197:4082 -> xxx.yyy.1.6:3306 SYN ******S* Jan 4 04:27:28 66.192.233.197:4083 -> xxx.yyy.1.7:3306 SYN ******S* Jan 4 04:27:28 66.192.233.197:4084 -> xxx.yyy.1.8:3306 SYN ******S* [...] Jan 4 04:39:07 66.192.233.197:2776 -> xxx.yyy.255.250:3306 SYN ******S* Jan 4 04:39:07 66.192.233.197:2777 -> xxx.yyy.255.251:3306 SYN ******S* Jan 4 04:39:07 66.192.233.197:2779 -> xxx.yyy.255.253:3306 SYN ******S* Jan 4 04:39:07 66.192.233.197:2773 -> xxx.yyy.255.247:3306 SYN ******S* Jan 4 04:39:07 66.192.233.197:2774 -> xxx.yyy.255.248:3306 SYN ******S* Jan 4 04:39:07 66.192.233.197:2775 -> xxx.yyy.255.249:3306 SYN ******S* Jan 4 04:39:07 66.192.233.197:2778 -> xxx.yyy.255.252:3306 SYN ******S* Jan 4 04:39:07 66.192.233.197:2772 -> xxx.yyy.255.246:3306 SYN ******S* 71557 Jan 4 21:14:39 220.112.22.112:4887 -> xxx.yyy.1.1:1433 SYN ******S* Jan 4 21:14:39 220.112.22.112:4927 -> xxx.yyy.1.2:1433 SYN ******S* Jan 4 21:14:42 220.112.22.112:4949 -> xxx.yyy.1.3:1433 SYN ******S* Jan 4 21:14:42 220.112.22.112:4950 -> xxx.yyy.1.4:1433 SYN ******S* Jan 4 21:14:42 220.112.22.112:4951 -> xxx.yyy.1.5:1433 SYN ******S* Jan 4 21:14:42 220.112.22.112:4956 -> xxx.yyy.1.6:1433 SYN ******S* Jan 4 21:14:42 220.112.22.112:4957 -> xxx.yyy.1.7:1433 SYN ******S* Jan 4 21:14:42 220.112.22.112:4960 -> xxx.yyy.1.8:1433 SYN ******S* [...] Jan 4 21:26:21 220.112.22.112:3315 -> xxx.yyy.255.248:1433 SYN ******S* Jan 4 21:26:21 220.112.22.112:3318 -> xxx.yyy.255.251:1433 SYN ******S* Jan 4 21:26:21 220.112.22.112:3319 -> xxx.yyy.255.252:1433 SYN ******S* Jan 4 21:26:21 220.112.22.112:3321 -> xxx.yyy.255.254:1433 SYN ******S* Jan 4 21:26:21 220.112.22.112:3316 -> xxx.yyy.255.249:1433 SYN ******S* Jan 4 21:26:21 220.112.22.112:3320 -> xxx.yyy.255.253:1433 SYN ******S* Jan 4 21:26:21 220.112.22.112:3317 -> xxx.yyy.255.250:1433 SYN ******S* Jan 4 21:26:21 220.112.22.112:3314 -> xxx.yyy.255.247:1433 SYN ******S* 70488 Jan 4 02:16:50 61.222.172.50:16998 -> xxx.yyy.1.1:443 SYN ******S* Jan 4 02:16:50 61.222.172.50:16999 -> xxx.yyy.1.2:443 SYN ******S* Jan 4 02:16:50 61.222.172.50:17000 -> xxx.yyy.1.3:443 SYN ******S* Jan 4 02:16:52 61.222.172.50:17001 -> xxx.yyy.1.4:443 SYN ******S* Jan 4 02:16:49 61.222.172.50:17002 -> xxx.yyy.1.5:443 SYN ******S* Jan 4 02:16:49 61.222.172.50:17003 -> xxx.yyy.1.6:443 SYN ******S* Jan 4 02:16:52 61.222.172.50:17004 -> xxx.yyy.1.7:443 SYN ******S* Jan 4 02:16:52 61.222.172.50:17005 -> xxx.yyy.1.8:443 SYN ******S* [...] Jan 4 22:00:08 61.222.172.50:37055 -> xxx.yyy.zzz.241:443 SYN ******S* Jan 4 22:00:08 61.222.172.50:37057 -> xxx.yyy.zzz.243:443 SYN ******S* Jan 4 22:00:08 61.222.172.50:37054 -> xxx.yyy.zzz.240:443 SYN ******S* Jan 4 22:00:09 61.222.172.50:37067 -> xxx.yyy.zzz.252:443 SYN ******S* Jan 4 22:00:09 61.222.172.50:37063 -> xxx.yyy.zzz.249:443 SYN ******S* Jan 4 22:00:09 61.222.172.50:37065 -> xxx.yyy.zzz.251:443 SYN ******S* Jan 4 22:00:09 61.222.172.50:37062 -> xxx.yyy.zzz.248:443 SYN ******S* Jan 4 22:00:09 61.222.172.50:37061 -> xxx.yyy.zzz.247:443 SYN ******S* Jan 4 22:00:09 61.222.172.50:37069 -> xxx.yyy.zzz.254:443 SYN ******S* 69899 Jan 4 14:56:55 66.139.77.153:3584 -> xxx.yyy.1.1:3306 SYN ******S* Jan 4 14:56:55 66.139.77.153:3585 -> xxx.yyy.1.2:3306 SYN ******S* Jan 4 14:56:55 66.139.77.153:3586 -> xxx.yyy.1.3:3306 SYN ******S* Jan 4 14:56:57 66.139.77.153:3587 -> xxx.yyy.1.4:3306 SYN ******S* Jan 4 14:56:57 66.139.77.153:3588 -> xxx.yyy.1.5:3306 SYN ******S* Jan 4 14:56:57 66.139.77.153:3589 -> xxx.yyy.1.6:3306 SYN ******S* Jan 4 14:56:57 66.139.77.153:3590 -> xxx.yyy.1.7:3306 SYN ******S* Jan 4 14:56:57 66.139.77.153:3591 -> xxx.yyy.1.8:3306 SYN ******S* [...] Jan 4 15:07:51 66.139.77.153:2558 -> xxx.yyy.255.249:3306 SYN ******S* Jan 4 15:07:51 66.139.77.153:2560 -> xxx.yyy.255.251:3306 SYN ******S* Jan 4 15:07:51 66.139.77.153:2553 -> xxx.yyy.255.244:3306 SYN ******S* Jan 4 15:07:51 66.139.77.153:2557 -> xxx.yyy.255.248:3306 SYN ******S* Jan 4 15:07:51 66.139.77.153:2561 -> xxx.yyy.255.252:3306 SYN ******S* Jan 4 15:07:51 66.139.77.153:2556 -> xxx.yyy.255.247:3306 SYN ******S* Jan 4 15:07:51 66.139.77.153:2559 -> xxx.yyy.255.250:3306 SYN ******S* Jan 4 15:07:51 66.139.77.153:2563 -> xxx.yyy.255.254:3306 SYN ******S* Jan 4 15:07:51 66.139.77.153:2562 -> xxx.yyy.255.253:3306 SYN ******S* 67344 Jan 4 16:58:53 217.171.183.36:3734 -> xxx.yyy.1.1:1433 SYN ******S* Jan 4 16:58:53 217.171.183.36:3735 -> xxx.yyy.1.2:1433 SYN ******S* Jan 4 16:58:53 217.171.183.36:3736 -> xxx.yyy.1.3:1433 SYN ******S* Jan 4 16:58:53 217.171.183.36:3737 -> xxx.yyy.1.4:1433 SYN ******S* Jan 4 16:58:53 217.171.183.36:3738 -> xxx.yyy.1.5:1433 SYN ******S* Jan 4 16:58:53 217.171.183.36:3739 -> xxx.yyy.1.6:1433 SYN ******S* Jan 4 16:58:53 217.171.183.36:3740 -> xxx.yyy.1.7:1433 SYN ******S* Jan 4 16:58:53 217.171.183.36:3741 -> xxx.yyy.1.8:1433 SYN ******S* [...] Jan 4 17:09:49 217.171.183.36:3024 -> xxx.yyy.255.245:1433 SYN ******S* Jan 4 17:09:49 217.171.183.36:3027 -> xxx.yyy.255.248:1433 SYN ******S* Jan 4 17:09:49 217.171.183.36:3026 -> xxx.yyy.255.247:1433 SYN ******S* Jan 4 17:09:49 217.171.183.36:3023 -> xxx.yyy.255.244:1433 SYN ******S* Jan 4 17:09:49 217.171.183.36:3022 -> xxx.yyy.255.243:1433 SYN ******S* Jan 4 17:09:49 217.171.183.36:3034 -> xxx.yyy.255.254:1433 SYN ******S* Jan 4 17:09:49 217.171.183.36:3031 -> xxx.yyy.255.252:1433 SYN ******S* Jan 4 17:09:49 217.171.183.36:3033 -> xxx.yyy.255.253:1433 SYN ******S* 63880 Jan 4 15:27:53 64.241.177.25:4621 -> xxx.yyy.1.1:4000 SYN ******S* Jan 4 15:27:53 64.241.177.25:4622 -> xxx.yyy.1.2:4000 SYN ******S* Jan 4 15:27:52 64.241.177.25:4625 -> xxx.yyy.1.5:4000 SYN ******S* Jan 4 15:27:52 64.241.177.25:4626 -> xxx.yyy.1.6:4000 SYN ******S* Jan 4 15:27:55 64.241.177.25:4627 -> xxx.yyy.1.7:4000 SYN ******S* Jan 4 15:27:52 64.241.177.25:4628 -> xxx.yyy.1.8:4000 SYN ******S* Jan 4 15:27:53 64.241.177.25:4631 -> xxx.yyy.1.11:4000 SYN ******S* Jan 4 15:27:52 64.241.177.25:4632 -> xxx.yyy.1.12:4000 SYN ******S* [...] Jan 4 15:39:41 64.241.177.25:1211 -> xxx.yyy.255.243:4000 SYN ******S* Jan 4 15:39:41 64.241.177.25:1212 -> xxx.yyy.255.244:4000 SYN ******S* Jan 4 15:39:41 64.241.177.25:1217 -> xxx.yyy.255.248:4000 SYN ******S* Jan 4 15:39:41 64.241.177.25:1218 -> xxx.yyy.255.249:4000 SYN ******S* Jan 4 15:39:41 64.241.177.25:1213 -> xxx.yyy.255.245:4000 SYN ******S* Jan 4 15:39:41 64.241.177.25:1219 -> xxx.yyy.255.250:4000 SYN ******S* Jan 4 15:39:41 64.241.177.25:1214 -> xxx.yyy.255.246:4000 SYN ******S* Jan 4 15:39:41 64.241.177.25:1222 -> xxx.yyy.255.253:4000 SYN ******S* Jan 4 15:39:41 64.241.177.25:1223 -> xxx.yyy.255.254:4000 SYN ******S* 62001 Jan 4 00:00:07 210.82.103.62:51726 -> xxx.yyy.165.16:1433 SYN ******S* Jan 4 00:00:04 210.82.103.62:56408 -> xxx.yyy.164.247:1433 SYN ******S* Jan 4 00:00:04 210.82.103.62:56411 -> xxx.yyy.164.248:1433 SYN ******S* Jan 4 00:00:07 210.82.103.62:56524 -> xxx.yyy.165.17:1433 SYN ******S* Jan 4 00:00:04 210.82.103.62:42363 -> xxx.yyy.164.249:1433 SYN ******S* Jan 4 00:00:07 210.82.103.62:33693 -> xxx.yyy.165.18:1433 SYN ******S* Jan 4 00:00:07 210.82.103.62:48604 -> xxx.yyy.165.19:1433 SYN ******S* Jan 4 00:00:04 210.82.103.62:54853 -> xxx.yyy.164.250:1433 SYN ******S* [...] Jan 4 01:21:53 210.82.103.62:23987 -> xxx.yyy.255.248:1433 SYN ******S* Jan 4 01:21:53 210.82.103.62:18765 -> xxx.yyy.255.247:1433 SYN ******S* Jan 4 01:21:54 210.82.103.62:26970 -> xxx.yyy.255.250:1433 SYN ******S* Jan 4 01:21:54 210.82.103.62:11608 -> xxx.yyy.255.249:1433 SYN ******S* Jan 4 01:21:54 210.82.103.62:28341 -> xxx.yyy.255.251:1433 SYN ******S* Jan 4 01:21:54 210.82.103.62:24009 -> xxx.yyy.255.252:1433 SYN ******S* Jan 4 01:21:56 210.82.103.62:28403 -> xxx.yyy.255.253:1433 SYN ******S* Jan 4 01:21:56 210.82.103.62:28408 -> xxx.yyy.255.254:1433 SYN ******S* 59403 Jan 4 09:35:03 211.147.224.44:2841 -> xxx.yyy.1.1:1433 SYN ******S* Jan 4 09:35:03 211.147.224.44:2842 -> xxx.yyy.1.2:1433 SYN ******S* Jan 4 09:35:03 211.147.224.44:2844 -> xxx.yyy.1.4:1433 SYN ******S* Jan 4 09:35:03 211.147.224.44:2845 -> xxx.yyy.1.5:1433 SYN ******S* Jan 4 09:35:03 211.147.224.44:2851 -> xxx.yyy.1.11:1433 SYN ******S* Jan 4 09:35:03 211.147.224.44:2852 -> xxx.yyy.1.12:1433 SYN ******S* Jan 4 09:35:01 211.147.224.44:2860 -> xxx.yyy.1.20:1433 SYN ******S* Jan 4 09:35:01 211.147.224.44:2861 -> xxx.yyy.1.21:1433 SYN ******S* [...] Jan 4 09:47:05 211.147.224.44:1293 -> xxx.yyy.255.173:1433 SYN ******S* Jan 4 09:47:05 211.147.224.44:1292 -> xxx.yyy.255.172:1433 SYN ******S* Jan 4 09:47:05 211.147.224.44:1300 -> xxx.yyy.255.180:1433 SYN ******S* Jan 4 09:47:05 211.147.224.44:1302 -> xxx.yyy.255.182:1433 SYN ******S* Jan 4 09:47:05 211.147.224.44:1310 -> xxx.yyy.255.190:1433 SYN ******S* Jan 4 09:47:05 211.147.224.44:1308 -> xxx.yyy.255.188:1433 SYN ******S* Jan 4 09:47:06 211.147.224.44:1317 -> xxx.yyy.255.197:1433 SYN ******S* Jan 4 09:47:06 211.147.224.44:1325 -> xxx.yyy.255.205:1433 SYN ******S* 57290 Jan 4 09:28:18 66.12.177.121:2618 -> xxx.yyy.1.1:27015 SYN ******S* Jan 4 09:28:18 66.12.177.121:2619 -> xxx.yyy.1.2:27015 SYN ******S* Jan 4 09:28:18 66.12.177.121:2620 -> xxx.yyy.1.3:27015 SYN ******S* Jan 4 09:28:20 66.12.177.121:2621 -> xxx.yyy.1.4:27015 SYN ******S* Jan 4 09:28:20 66.12.177.121:2622 -> xxx.yyy.1.5:27015 SYN ******S* Jan 4 09:28:20 66.12.177.121:2623 -> xxx.yyy.1.6:27015 SYN ******S* Jan 4 09:28:20 66.12.177.121:2624 -> xxx.yyy.1.7:27015 SYN ******S* Jan 4 09:28:20 66.12.177.121:2625 -> xxx.yyy.1.8:27015 SYN ******S* [...] Jan 4 09:37:51 66.12.177.121:3110 -> xxx.yyy.254.242:27015 SYN ******S* Jan 4 09:37:51 66.12.177.121:3054 -> xxx.yyy.254.188:27015 SYN ******S* Jan 4 09:37:51 66.12.177.121:3034 -> xxx.yyy.254.169:27015 SYN ******S* Jan 4 09:37:51 66.12.177.121:3074 -> xxx.yyy.254.207:27015 SYN ******S* Jan 4 09:37:51 66.12.177.121:3070 -> xxx.yyy.254.204:27015 SYN ******S* Jan 4 09:37:51 66.12.177.121:3090 -> xxx.yyy.254.223:27015 SYN ******S* Jan 4 09:37:51 66.12.177.121:3050 -> xxx.yyy.254.185:27015 SYN ******S* Jan 4 09:37:51 66.12.177.121:3107 -> xxx.yyy.254.239:27015 SYN ******S* 55212 Jan 4 21:07:50 24.6.4.60:3193 -> xxx.yyy.1.1:4899 SYN ******S* Jan 4 21:07:50 24.6.4.60:3194 -> xxx.yyy.1.2:4899 SYN ******S* Jan 4 21:07:50 24.6.4.60:3195 -> xxx.yyy.1.3:4899 SYN ******S* Jan 4 21:07:49 24.6.4.60:3196 -> xxx.yyy.1.4:4899 SYN ******S* Jan 4 21:07:49 24.6.4.60:3197 -> xxx.yyy.1.5:4899 SYN ******S* Jan 4 21:07:49 24.6.4.60:3198 -> xxx.yyy.1.6:4899 SYN ******S* Jan 4 21:07:49 24.6.4.60:3199 -> xxx.yyy.1.7:4899 SYN ******S* Jan 4 21:07:49 24.6.4.60:3200 -> xxx.yyy.1.8:4899 SYN ******S* [...] Jan 4 21:15:59 24.6.4.60:2098 -> xxx.yyy.255.54:4899 SYN ******S* Jan 4 21:15:59 24.6.4.60:2102 -> xxx.yyy.255.58:4899 SYN ******S* Jan 4 21:15:59 24.6.4.60:2099 -> xxx.yyy.255.55:4899 SYN ******S* Jan 4 21:15:59 24.6.4.60:2100 -> xxx.yyy.255.56:4899 SYN ******S* Jan 4 21:15:59 24.6.4.60:2143 -> xxx.yyy.255.99:4899 SYN ******S* Jan 4 21:15:59 24.6.4.60:2137 -> xxx.yyy.255.93:4899 SYN ******S* Jan 4 21:15:59 24.6.4.60:2140 -> xxx.yyy.255.96:4899 SYN ******S* Jan 4 21:15:59 24.6.4.60:2141 -> xxx.yyy.255.97:4899 SYN ******S* Jan 4 21:15:59 24.6.4.60:2138 -> xxx.yyy.255.94:4899 SYN ******S* 46270 Jan 4 04:15:49 202.125.132.253:55029 -> xxx.yyy.1.1:4899 SYN ******S* Jan 4 04:15:49 202.125.132.253:55030 -> xxx.yyy.1.2:4899 SYN ******S* Jan 4 04:15:49 202.125.132.253:55031 -> xxx.yyy.1.3:4899 SYN ******S* Jan 4 04:15:47 202.125.132.253:55032 -> xxx.yyy.1.4:4899 SYN ******S* Jan 4 04:15:47 202.125.132.253:55033 -> xxx.yyy.1.5:4899 SYN ******S* Jan 4 04:15:47 202.125.132.253:55034 -> xxx.yyy.1.6:4899 SYN ******S* Jan 4 04:15:47 202.125.132.253:55035 -> xxx.yyy.1.7:4899 SYN ******S* Jan 4 04:15:47 202.125.132.253:55036 -> xxx.yyy.1.8:4899 SYN ******S* [...] Jan 4 04:20:55 202.125.132.253:60398 -> xxx.yyy.255.247:4899 SYN ******S* Jan 4 04:20:55 202.125.132.253:60399 -> xxx.yyy.255.248:4899 SYN ******S* Jan 4 04:20:55 202.125.132.253:60400 -> xxx.yyy.255.249:4899 SYN ******S* Jan 4 04:20:55 202.125.132.253:60401 -> xxx.yyy.255.250:4899 SYN ******S* Jan 4 04:20:55 202.125.132.253:60402 -> xxx.yyy.255.251:4899 SYN ******S* Jan 4 04:20:55 202.125.132.253:60403 -> xxx.yyy.255.252:4899 SYN ******S* Jan 4 04:20:55 202.125.132.253:60404 -> xxx.yyy.255.253:4899 SYN ******S* Jan 4 04:20:55 202.125.132.253:60405 -> xxx.yyy.255.254:4899 SYN ******S* 44479 Jan 4 07:45:53 217.130.26.93:4660 -> xxx.yyy.1.4:137 SYN ******S* Jan 4 07:45:53 217.130.26.93:4657 -> xxx.yyy.1.1:137 SYN ******S* Jan 4 07:45:53 217.130.26.93:4659 -> xxx.yyy.1.3:137 SYN ******S* Jan 4 07:45:53 217.130.26.93:4656 -> xxx.yyy.1.0:137 SYN ******S* Jan 4 07:45:53 217.130.26.93:4658 -> xxx.yyy.1.2:137 SYN ******S* Jan 4 07:45:53 217.130.26.93:4661 -> xxx.yyy.1.5:137 SYN ******S* Jan 4 07:45:53 217.130.26.93:4665 -> xxx.yyy.1.9:137 SYN ******S* Jan 4 07:45:53 217.130.26.93:4662 -> xxx.yyy.1.6:137 SYN ******S* [...] Jan 4 07:47:17 217.130.26.93:4675 -> xxx.yyy.255.249:137 SYN ******S* Jan 4 07:47:17 217.130.26.93:4670 -> xxx.yyy.255.244:137 SYN ******S* Jan 4 07:47:17 217.130.26.93:4672 -> xxx.yyy.255.246:137 SYN ******S* Jan 4 07:47:17 217.130.26.93:4674 -> xxx.yyy.255.248:137 SYN ******S* Jan 4 07:47:17 217.130.26.93:4677 -> xxx.yyy.255.251:137 SYN ******S* Jan 4 07:47:17 217.130.26.93:4679 -> xxx.yyy.255.253:137 SYN ******S* Jan 4 07:47:17 217.130.26.93:4678 -> xxx.yyy.255.252:137 SYN ******S* Jan 4 07:47:17 217.130.26.93:4680 -> xxx.yyy.255.254:137 SYN ******S* 42438 Jan 4 17:30:17 84.97.56.212:3451 -> xxx.yyy.1.2:21 SYN ******S* Jan 4 17:30:17 84.97.56.212:3452 -> xxx.yyy.1.3:21 SYN ******S* Jan 4 17:30:17 84.97.56.212:3450 -> xxx.yyy.1.1:21 SYN ******S* Jan 4 17:30:17 84.97.56.212:3453 -> xxx.yyy.1.4:21 SYN ******S* Jan 4 17:30:17 84.97.56.212:3455 -> xxx.yyy.1.6:21 SYN ******S* Jan 4 17:30:17 84.97.56.212:3456 -> xxx.yyy.1.7:21 SYN ******S* Jan 4 17:30:17 84.97.56.212:3454 -> xxx.yyy.1.5:21 SYN ******S* Jan 4 17:30:17 84.97.56.212:3457 -> xxx.yyy.1.8:21 SYN ******S* [...] Jan 4 17:53:25 84.97.56.212:3439 -> xxx.yyy.255.247:21 SYN ******S* Jan 4 17:53:25 84.97.56.212:3440 -> xxx.yyy.255.248:21 SYN ******S* Jan 4 17:53:25 84.97.56.212:3442 -> xxx.yyy.255.250:21 SYN ******S* Jan 4 17:53:25 84.97.56.212:3443 -> xxx.yyy.255.251:21 SYN ******S* Jan 4 17:53:25 84.97.56.212:3441 -> xxx.yyy.255.249:21 SYN ******S* Jan 4 17:53:25 84.97.56.212:3446 -> xxx.yyy.255.254:21 SYN ******S* Jan 4 17:53:25 84.97.56.212:3444 -> xxx.yyy.255.252:21 SYN ******S* Jan 4 17:53:25 84.97.56.212:3445 -> xxx.yyy.255.253:21 SYN ******S* 42422 Jan 4 20:55:17 213.23.57.8:65351 -> xxx.yyy.1.0:1433 SYN ******S* Jan 4 20:55:17 213.23.57.8:65295 -> xxx.yyy.1.1:1433 SYN ******S* Jan 4 20:55:17 213.23.57.8:65235 -> xxx.yyy.1.2:1433 SYN ******S* Jan 4 20:55:17 213.23.57.8:64813 -> xxx.yyy.1.5:1433 SYN ******S* Jan 4 20:55:17 213.23.57.8:65017 -> xxx.yyy.1.6:1433 SYN ******S* Jan 4 20:55:17 213.23.57.8:62131 -> xxx.yyy.1.7:1433 SYN ******S* Jan 4 20:55:17 213.23.57.8:62271 -> xxx.yyy.1.8:1433 SYN ******S* Jan 4 20:55:17 213.23.57.8:63181 -> xxx.yyy.1.9:1433 SYN ******S* [...] Jan 4 20:58:33 213.23.57.8:64607 -> xxx.yyy.255.246:1433 SYN ******S* Jan 4 20:58:33 213.23.57.8:65353 -> xxx.yyy.255.247:1433 SYN ******S* Jan 4 20:58:33 213.23.57.8:64751 -> xxx.yyy.255.248:1433 SYN ******S* Jan 4 20:58:33 213.23.57.8:61473 -> xxx.yyy.255.249:1433 SYN ******S* Jan 4 20:58:33 213.23.57.8:61525 -> xxx.yyy.255.251:1433 SYN ******S* Jan 4 20:58:33 213.23.57.8:63153 -> xxx.yyy.255.252:1433 SYN ******S* Jan 4 20:58:33 213.23.57.8:61609 -> xxx.yyy.255.253:1433 SYN ******S* Jan 4 20:58:33 213.23.57.8:64487 -> xxx.yyy.255.254:1433 SYN ******S* 34958 [...] 34624 [...] 33188 Jan 4 01:48:58 67.94.179.194:64538 -> xxx.yyy.1.7:1433 SYN ******S* Jan 4 01:48:58 67.94.179.194:64540 -> xxx.yyy.1.8:1433 SYN ******S* Jan 4 01:48:58 67.94.179.194:64535 -> xxx.yyy.1.6:1433 SYN ******S* Jan 4 01:48:58 67.94.179.194:64534 -> xxx.yyy.1.5:1433 SYN ******S* Jan 4 01:49:01 67.94.179.194:64545 -> xxx.yyy.1.9:1433 SYN ******S* Jan 4 01:48:59 67.94.179.194:64546 -> xxx.yyy.1.10:1433 SYN ******S* Jan 4 01:48:59 67.94.179.194:64547 -> xxx.yyy.1.11:1433 SYN ******S* Jan 4 01:48:59 67.94.179.194:64548 -> xxx.yyy.1.12:1433 SYN ******S* [...] Jan 4 12:55:42 67.94.179.194:61120 -> xxx.yyy.22.251:1433 SYN ******S* Jan 4 12:55:42 67.94.179.194:61096 -> xxx.yyy.22.249:1433 SYN ******S* Jan 4 12:55:44 67.94.179.194:61123 -> xxx.yyy.22.252:1433 SYN ******S* Jan 4 12:55:47 67.94.179.194:61149 -> xxx.yyy.22.253:1433 SYN ******S* Jan 4 12:55:47 67.94.179.194:61150 -> xxx.yyy.22.254:1433 SYN ******S* Jan 4 12:55:48 67.94.179.194:61118 -> xxx.yyy.22.250:1433 SYN ******S* Jan 4 12:55:50 67.94.179.194:61123 -> xxx.yyy.22.252:1433 SYN ******S* Jan 4 12:55:56 67.94.179.194:61149 -> xxx.yyy.22.253:1433 SYN ******S* Jan 4 12:55:57 67.94.179.194:61154 -> xxx.yyy.22.255:1433 SYN ******S* 21083 Jan 4 15:39:18 193.226.20.12:3263 -> xxx.yyy.1.1:4899 SYN ******S* Jan 4 15:39:18 193.226.20.12:3264 -> xxx.yyy.1.2:4899 SYN ******S* Jan 4 15:39:18 193.226.20.12:3265 -> xxx.yyy.1.3:4899 SYN ******S* Jan 4 15:39:20 193.226.20.12:3266 -> xxx.yyy.1.4:4899 SYN ******S* Jan 4 15:39:20 193.226.20.12:3267 -> xxx.yyy.1.5:4899 SYN ******S* Jan 4 15:39:20 193.226.20.12:3270 -> xxx.yyy.1.6:4899 SYN ******S* Jan 4 15:39:20 193.226.20.12:3272 -> xxx.yyy.1.8:4899 SYN ******S* Jan 4 15:39:18 193.226.20.12:3273 -> xxx.yyy.1.9:4899 SYN ******S* [...] Jan 4 15:41:42 193.226.20.12:4446 -> xxx.yyy.249.62:4899 SYN ******S* Jan 4 15:41:43 193.226.20.12:4932 -> xxx.yyy.251.53:4899 SYN ******S* Jan 4 15:41:43 193.226.20.12:4938 -> xxx.yyy.251.204:4899 SYN ******S* Jan 4 15:41:43 193.226.20.12:4931 -> xxx.yyy.251.203:4899 SYN ******S* Jan 4 15:41:44 193.226.20.12:4359 -> xxx.yyy.253.14:4899 SYN ******S* Jan 4 15:41:44 193.226.20.12:4375 -> xxx.yyy.253.63:4899 SYN ******S* Jan 4 15:41:44 193.226.20.12:4420 -> xxx.yyy.253.113:4899 SYN ******S* Jan 4 15:41:44 193.226.20.12:4414 -> xxx.yyy.253.112:4899 SYN ******S* Jan 4 15:41:44 193.226.20.12:3378 -> xxx.yyy.253.213:4899 SYN ******S* 17481 [...] 15252 Jan 4 04:22:01 222.101.236.214:2318 -> xxx.yyy.133.26:5554 SYN ******S* Jan 4 04:22:02 222.101.236.214:2739 -> xxx.yyy.133.26:1023 SYN ******S* Jan 4 04:22:04 222.101.236.214:3725 -> xxx.yyy.133.26:9898 SYN ******S* Jan 4 04:22:01 222.101.236.214:2314 -> xxx.yyy.133.16:5554 SYN ******S* Jan 4 04:22:02 222.101.236.214:2735 -> xxx.yyy.133.16:1023 SYN ******S* Jan 4 04:22:04 222.101.236.214:3720 -> xxx.yyy.133.16:9898 SYN ******S* Jan 4 04:22:01 222.101.236.214:2342 -> xxx.yyy.133.21:5554 SYN ******S* Jan 4 04:22:02 222.101.236.214:2761 -> xxx.yyy.133.21:1023 SYN ******S* [...] Jan 4 04:22:50 222.101.236.214:3928 -> xxx.yyy.153.128:9898 SYN ******S* Jan 4 04:22:50 222.101.236.214:3934 -> xxx.yyy.153.129:9898 SYN ******S* Jan 4 04:22:50 222.101.236.214:3935 -> xxx.yyy.153.130:9898 SYN ******S* Jan 4 04:22:50 222.101.236.214:3955 -> xxx.yyy.153.131:9898 SYN ******S* Jan 4 04:22:50 222.101.236.214:3958 -> xxx.yyy.153.134:9898 SYN ******S* Jan 4 04:22:50 222.101.236.214:3961 -> xxx.yyy.153.132:9898 SYN ******S* Jan 4 04:22:50 222.101.236.214:3959 -> xxx.yyy.153.135:9898 SYN ******S* Jan 4 04:22:50 222.101.236.214:3963 -> xxx.yyy.153.133:9898 SYN ******S* Jan 4 04:22:50 222.101.236.214:3967 -> xxx.yyy.153.136:9898 SYN ******S* 14935 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions