[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Jan 6 05:37:33 61.44.103.89:22002 -> xxx.yyy.1.0:3127 SYN ******S* Jan 6 05:37:33 61.44.103.89:22002 -> xxx.yyy.1.0:1080 SYN ******S* Jan 6 05:37:33 61.44.103.89:22002 -> xxx.yyy.1.0:10080 SYN ******S* Jan 6 05:37:34 61.44.103.89:22002 -> xxx.yyy.1.0:3128 SYN ******S* Jan 6 05:37:34 61.44.103.89:22002 -> xxx.yyy.1.1:3127 SYN ******S* Jan 6 05:37:34 61.44.103.89:22002 -> xxx.yyy.1.1:1080 SYN ******S* Jan 6 05:37:34 61.44.103.89:22002 -> xxx.yyy.1.1:10080 SYN ******S* Jan 6 05:37:34 61.44.103.89:22002 -> xxx.yyy.1.1:3128 SYN ******S* [...] Jan 6 13:35:05 61.44.103.89:22002 -> xxx.yyy.255.253:10080 SYN ******S* Jan 6 13:35:05 61.44.103.89:22002 -> xxx.yyy.255.253:3128 SYN ******S* Jan 6 13:35:05 61.44.103.89:22002 -> xxx.yyy.255.254:3127 SYN ******S* Jan 6 13:35:05 61.44.103.89:22002 -> xxx.yyy.255.254:1080 SYN ******S* Jan 6 13:35:05 61.44.103.89:22002 -> xxx.yyy.255.254:10080 SYN ******S* Jan 6 13:35:05 61.44.103.89:22002 -> xxx.yyy.255.254:3128 SYN ******S* Jan 6 13:35:05 61.44.103.89:22002 -> xxx.yyy.255.255:3127 SYN ******S* Jan 6 13:35:06 61.44.103.89:22002 -> xxx.yyy.255.255:3128 SYN ******S* 169362 Jan 6 03:23:49 221.163.146.77:3426 -> xxx.yyy.1.0:1433 SYN ******S* Jan 6 03:23:49 221.163.146.77:3428 -> xxx.yyy.1.2:1433 SYN ******S* Jan 6 03:23:49 221.163.146.77:3427 -> xxx.yyy.1.1:1433 SYN ******S* Jan 6 03:23:49 221.163.146.77:3429 -> xxx.yyy.1.3:1433 SYN ******S* Jan 6 03:23:49 221.163.146.77:3431 -> xxx.yyy.1.4:1433 SYN ******S* Jan 6 03:23:49 221.163.146.77:3434 -> xxx.yyy.1.6:1433 SYN ******S* Jan 6 03:23:49 221.163.146.77:3433 -> xxx.yyy.1.5:1433 SYN ******S* Jan 6 03:23:49 221.163.146.77:3435 -> xxx.yyy.1.7:1433 SYN ******S* [...] Jan 6 07:13:00 221.163.146.77:3215 -> xxx.yyy.255.248:1433 SYN ******S* Jan 6 07:13:00 221.163.146.77:3212 -> xxx.yyy.255.246:1433 SYN ******S* Jan 6 07:13:00 221.163.146.77:3217 -> xxx.yyy.255.249:1433 SYN ******S* Jan 6 07:13:01 221.163.146.77:3223 -> xxx.yyy.255.250:1433 SYN ******S* Jan 6 07:13:01 221.163.146.77:3229 -> xxx.yyy.255.251:1433 SYN ******S* Jan 6 07:13:01 221.163.146.77:3234 -> xxx.yyy.255.253:1433 SYN ******S* Jan 6 07:13:01 221.163.146.77:3233 -> xxx.yyy.255.252:1433 SYN ******S* Jan 6 07:13:01 221.163.146.77:3237 -> xxx.yyy.255.254:1433 SYN ******S* 123825 Jan 6 13:44:14 193.175.214.148:1059 -> xxx.yyy.1.1:4899 SYN ******S* Jan 6 13:44:15 193.175.214.148:1060 -> xxx.yyy.1.2:4899 SYN ******S* Jan 6 13:44:14 193.175.214.148:1061 -> xxx.yyy.1.3:4899 SYN ******S* Jan 6 13:44:17 193.175.214.148:1062 -> xxx.yyy.1.4:4899 SYN ******S* Jan 6 13:44:17 193.175.214.148:1063 -> xxx.yyy.1.5:4899 SYN ******S* Jan 6 13:44:17 193.175.214.148:1064 -> xxx.yyy.1.6:4899 SYN ******S* Jan 6 13:44:17 193.175.214.148:1065 -> xxx.yyy.1.7:4899 SYN ******S* Jan 6 13:44:15 193.175.214.148:1066 -> xxx.yyy.1.8:4899 SYN ******S* [...] Jan 6 13:58:23 193.175.214.148:1403 -> xxx.yyy.255.229:4899 SYN ******S* Jan 6 13:58:23 193.175.214.148:1384 -> xxx.yyy.255.210:4899 SYN ******S* Jan 6 13:58:23 193.175.214.148:1368 -> xxx.yyy.255.194:4899 SYN ******S* Jan 6 13:58:23 193.175.214.148:1426 -> xxx.yyy.255.252:4899 SYN ******S* Jan 6 13:58:23 193.175.214.148:1314 -> xxx.yyy.255.140:4899 SYN ******S* Jan 6 13:58:23 193.175.214.148:1346 -> xxx.yyy.255.172:4899 SYN ******S* Jan 6 13:58:23 193.175.214.148:1394 -> xxx.yyy.255.220:4899 SYN ******S* Jan 6 13:58:23 193.175.214.148:1340 -> xxx.yyy.255.166:4899 SYN ******S* Jan 6 13:58:23 193.175.214.148:1374 -> xxx.yyy.255.200:4899 SYN ******S* 73753 Jan 6 21:13:28 24.77.178.163:3281 -> xxx.yyy.1.1:3306 SYN ******S* Jan 6 21:13:28 24.77.178.163:3282 -> xxx.yyy.1.2:3306 SYN ******S* Jan 6 21:13:28 24.77.178.163:3283 -> xxx.yyy.1.3:3306 SYN ******S* Jan 6 21:13:30 24.77.178.163:3284 -> xxx.yyy.1.4:3306 SYN ******S* Jan 6 21:13:30 24.77.178.163:3286 -> xxx.yyy.1.6:3306 SYN ******S* Jan 6 21:13:30 24.77.178.163:3287 -> xxx.yyy.1.7:3306 SYN ******S* Jan 6 21:13:28 24.77.178.163:3288 -> xxx.yyy.1.8:3306 SYN ******S* Jan 6 21:13:28 24.77.178.163:3289 -> xxx.yyy.1.9:3306 SYN ******S* [...] Jan 6 21:24:23 24.77.178.163:2323 -> xxx.yyy.255.242:3306 SYN ******S* Jan 6 21:24:23 24.77.178.163:2320 -> xxx.yyy.255.239:3306 SYN ******S* Jan 6 21:24:23 24.77.178.163:2334 -> xxx.yyy.255.253:3306 SYN ******S* Jan 6 21:24:23 24.77.178.163:2331 -> xxx.yyy.255.250:3306 SYN ******S* Jan 6 21:24:23 24.77.178.163:2335 -> xxx.yyy.255.254:3306 SYN ******S* Jan 6 21:24:23 24.77.178.163:2332 -> xxx.yyy.255.251:3306 SYN ******S* Jan 6 21:24:23 24.77.178.163:2329 -> xxx.yyy.255.248:3306 SYN ******S* Jan 6 21:24:23 24.77.178.163:2333 -> xxx.yyy.255.252:3306 SYN ******S* Jan 6 21:24:23 24.77.178.163:2330 -> xxx.yyy.255.249:3306 SYN ******S* 72970 Jan 6 07:02:22 220.66.110.198:3975 -> xxx.yyy.1.3:1433 SYN ******S* Jan 6 07:02:22 220.66.110.198:3973 -> xxx.yyy.1.1:1433 SYN ******S* Jan 6 07:02:22 220.66.110.198:3974 -> xxx.yyy.1.2:1433 SYN ******S* Jan 6 07:02:22 220.66.110.198:3976 -> xxx.yyy.1.4:1433 SYN ******S* Jan 6 07:02:19 220.66.110.198:3978 -> xxx.yyy.1.6:1433 SYN ******S* Jan 6 07:02:22 220.66.110.198:3977 -> xxx.yyy.1.5:1433 SYN ******S* Jan 6 07:02:22 220.66.110.198:3979 -> xxx.yyy.1.7:1433 SYN ******S* Jan 6 07:02:22 220.66.110.198:3981 -> xxx.yyy.1.9:1433 SYN ******S* [...] Jan 6 07:14:02 220.66.110.198:2947 -> xxx.yyy.255.185:1433 SYN ******S* Jan 6 07:14:02 220.66.110.198:2945 -> xxx.yyy.255.183:1433 SYN ******S* Jan 6 07:14:02 220.66.110.198:2943 -> xxx.yyy.255.181:1433 SYN ******S* Jan 6 07:14:02 220.66.110.198:2940 -> xxx.yyy.255.178:1433 SYN ******S* Jan 6 07:14:02 220.66.110.198:2946 -> xxx.yyy.255.184:1433 SYN ******S* Jan 6 07:14:02 220.66.110.198:2941 -> xxx.yyy.255.179:1433 SYN ******S* Jan 6 07:14:02 220.66.110.198:2942 -> xxx.yyy.255.180:1433 SYN ******S* Jan 6 07:14:02 220.66.110.198:2944 -> xxx.yyy.255.182:1433 SYN ******S* 72024 Jan 6 21:54:57 211.235.31.225:4326 -> xxx.yyy.1.1:23 SYN ******S* Jan 6 21:54:57 211.235.31.225:4327 -> xxx.yyy.1.2:23 SYN ******S* Jan 6 21:54:57 211.235.31.225:4329 -> xxx.yyy.1.4:23 SYN ******S* Jan 6 21:54:57 211.235.31.225:4328 -> xxx.yyy.1.3:23 SYN ******S* Jan 6 21:54:57 211.235.31.225:4330 -> xxx.yyy.1.5:23 SYN ******S* Jan 6 21:54:57 211.235.31.225:4331 -> xxx.yyy.1.6:23 SYN ******S* Jan 6 21:54:57 211.235.31.225:4332 -> xxx.yyy.1.7:23 SYN ******S* Jan 6 21:55:00 211.235.31.225:4335 -> xxx.yyy.1.10:23 SYN ******S* [...] Jan 6 22:06:45 211.235.31.225:4270 -> xxx.yyy.255.248:23 SYN ******S* Jan 6 22:06:45 211.235.31.225:4268 -> xxx.yyy.255.246:23 SYN ******S* Jan 6 22:06:45 211.235.31.225:4263 -> xxx.yyy.255.241:23 SYN ******S* Jan 6 22:06:45 211.235.31.225:4265 -> xxx.yyy.255.243:23 SYN ******S* Jan 6 22:06:45 211.235.31.225:4276 -> xxx.yyy.255.254:23 SYN ******S* Jan 6 22:06:45 211.235.31.225:4275 -> xxx.yyy.255.253:23 SYN ******S* Jan 6 22:06:45 211.235.31.225:4274 -> xxx.yyy.255.252:23 SYN ******S* Jan 6 22:06:45 211.235.31.225:4273 -> xxx.yyy.255.251:23 SYN ******S* 70273 Jan 6 00:49:23 206.13.56.94:4364 -> xxx.yyy.1.1:80 SYN ******S* Jan 6 00:49:23 206.13.56.94:4365 -> xxx.yyy.1.2:80 SYN ******S* Jan 6 00:49:23 206.13.56.94:4366 -> xxx.yyy.1.3:80 SYN ******S* Jan 6 00:49:25 206.13.56.94:4367 -> xxx.yyy.1.4:80 SYN ******S* Jan 6 00:49:25 206.13.56.94:4369 -> xxx.yyy.1.5:80 SYN ******S* Jan 6 00:49:25 206.13.56.94:4370 -> xxx.yyy.1.6:80 SYN ******S* Jan 6 00:49:25 206.13.56.94:4371 -> xxx.yyy.1.7:80 SYN ******S* Jan 6 00:49:25 206.13.56.94:4373 -> xxx.yyy.1.8:80 SYN ******S* [...] Jan 6 00:53:32 206.13.56.94:1407 -> xxx.yyy.255.247:80 SYN ******S* Jan 6 00:53:32 206.13.56.94:1406 -> xxx.yyy.255.246:80 SYN ******S* Jan 6 00:53:32 206.13.56.94:1408 -> xxx.yyy.255.248:80 SYN ******S* Jan 6 00:53:32 206.13.56.94:1409 -> xxx.yyy.255.249:80 SYN ******S* Jan 6 00:53:32 206.13.56.94:1410 -> xxx.yyy.255.250:80 SYN ******S* Jan 6 00:53:32 206.13.56.94:1411 -> xxx.yyy.255.251:80 SYN ******S* Jan 6 00:53:32 206.13.56.94:1413 -> xxx.yyy.255.253:80 SYN ******S* Jan 6 00:53:32 206.13.56.94:1412 -> xxx.yyy.255.252:80 SYN ******S* 69891 Jan 6 09:50:39 206.251.235.166:4005 -> xxx.yyy.1.1:1433 SYN ******S* Jan 6 09:50:39 206.251.235.166:4006 -> xxx.yyy.1.2:1433 SYN ******S* Jan 6 09:50:39 206.251.235.166:4007 -> xxx.yyy.1.3:1433 SYN ******S* Jan 6 09:50:39 206.251.235.166:4008 -> xxx.yyy.1.4:1433 SYN ******S* Jan 6 09:50:39 206.251.235.166:4009 -> xxx.yyy.1.5:1433 SYN ******S* Jan 6 09:50:39 206.251.235.166:4010 -> xxx.yyy.1.6:1433 SYN ******S* Jan 6 09:50:36 206.251.235.166:4011 -> xxx.yyy.1.7:1433 SYN ******S* Jan 6 09:50:39 206.251.235.166:4012 -> xxx.yyy.1.8:1433 SYN ******S* [...] Jan 6 10:02:25 206.251.235.166:2893 -> xxx.yyy.255.239:1433 SYN ******S* Jan 6 10:02:25 206.251.235.166:2908 -> xxx.yyy.255.253:1433 SYN ******S* Jan 6 10:02:25 206.251.235.166:2906 -> xxx.yyy.255.251:1433 SYN ******S* Jan 6 10:02:25 206.251.235.166:2903 -> xxx.yyy.255.248:1433 SYN ******S* Jan 6 10:02:25 206.251.235.166:2904 -> xxx.yyy.255.249:1433 SYN ******S* Jan 6 10:02:25 206.251.235.166:2909 -> xxx.yyy.255.254:1433 SYN ******S* Jan 6 10:02:25 206.251.235.166:2905 -> xxx.yyy.255.250:1433 SYN ******S* Jan 6 10:02:25 206.251.235.166:2902 -> xxx.yyy.255.247:1433 SYN ******S* Jan 6 10:02:25 206.251.235.166:2907 -> xxx.yyy.255.252:1433 SYN ******S* 69461 Jan 6 15:18:03 62.238.64.230:3546 -> xxx.yyy.1.1:42 SYN ******S* Jan 6 15:18:03 62.238.64.230:3547 -> xxx.yyy.1.2:42 SYN ******S* Jan 6 15:18:03 62.238.64.230:3548 -> xxx.yyy.1.3:42 SYN ******S* Jan 6 15:18:03 62.238.64.230:3549 -> xxx.yyy.1.4:42 SYN ******S* Jan 6 15:18:03 62.238.64.230:3550 -> xxx.yyy.1.5:42 SYN ******S* Jan 6 15:18:03 62.238.64.230:3551 -> xxx.yyy.1.6:42 SYN ******S* Jan 6 15:18:03 62.238.64.230:3553 -> xxx.yyy.1.8:42 SYN ******S* Jan 6 15:18:03 62.238.64.230:3554 -> xxx.yyy.1.9:42 SYN ******S* [...] Jan 6 15:29:14 62.238.64.230:3971 -> xxx.yyy.255.251:42 SYN ******S* Jan 6 15:29:14 62.238.64.230:3968 -> xxx.yyy.255.248:42 SYN ******S* Jan 6 15:29:14 62.238.64.230:3972 -> xxx.yyy.255.252:42 SYN ******S* Jan 6 15:29:14 62.238.64.230:3969 -> xxx.yyy.255.249:42 SYN ******S* Jan 6 15:29:14 62.238.64.230:3966 -> xxx.yyy.255.246:42 SYN ******S* Jan 6 15:29:14 62.238.64.230:3973 -> xxx.yyy.255.253:42 SYN ******S* Jan 6 15:29:14 62.238.64.230:3970 -> xxx.yyy.255.250:42 SYN ******S* Jan 6 15:29:14 62.238.64.230:3967 -> xxx.yyy.255.247:42 SYN ******S* Jan 6 15:29:14 62.238.64.230:3974 -> xxx.yyy.255.254:42 SYN ******S* 66762 Jan 6 00:57:37 207.0.16.136:3278 -> xxx.yyy.1.1:3306 SYN ******S* Jan 6 00:57:37 207.0.16.136:3281 -> xxx.yyy.1.2:3306 SYN ******S* Jan 6 00:57:37 207.0.16.136:3284 -> xxx.yyy.1.3:3306 SYN ******S* Jan 6 00:57:39 207.0.16.136:3287 -> xxx.yyy.1.4:3306 SYN ******S* Jan 6 00:57:39 207.0.16.136:3290 -> xxx.yyy.1.5:3306 SYN ******S* Jan 6 00:57:39 207.0.16.136:3293 -> xxx.yyy.1.6:3306 SYN ******S* Jan 6 00:57:39 207.0.16.136:3296 -> xxx.yyy.1.7:3306 SYN ******S* Jan 6 00:57:39 207.0.16.136:3299 -> xxx.yyy.1.8:3306 SYN ******S* [...] Jan 6 01:09:18 207.0.16.136:1056 -> xxx.yyy.255.247:3306 SYN ******S* Jan 6 01:09:18 207.0.16.136:1051 -> xxx.yyy.255.245:3306 SYN ******S* Jan 6 01:09:18 207.0.16.136:1048 -> xxx.yyy.255.244:3306 SYN ******S* Jan 6 01:09:18 207.0.16.136:1053 -> xxx.yyy.255.246:3306 SYN ******S* Jan 6 01:09:18 207.0.16.136:1059 -> xxx.yyy.255.248:3306 SYN ******S* Jan 6 01:09:18 207.0.16.136:1078 -> xxx.yyy.255.254:3306 SYN ******S* Jan 6 01:09:18 207.0.16.136:1072 -> xxx.yyy.255.252:3306 SYN ******S* Jan 6 01:09:18 207.0.16.136:1075 -> xxx.yyy.255.253:3306 SYN ******S* 65636 Jan 6 21:24:46 212.217.40.8:3868 -> xxx.yyy.1.1:1433 SYN ******S* Jan 6 21:24:46 212.217.40.8:3869 -> xxx.yyy.1.2:1433 SYN ******S* Jan 6 21:24:46 212.217.40.8:3870 -> xxx.yyy.1.3:1433 SYN ******S* Jan 6 21:24:46 212.217.40.8:3871 -> xxx.yyy.1.4:1433 SYN ******S* Jan 6 21:24:46 212.217.40.8:3872 -> xxx.yyy.1.5:1433 SYN ******S* Jan 6 21:24:46 212.217.40.8:3873 -> xxx.yyy.1.6:1433 SYN ******S* Jan 6 21:24:46 212.217.40.8:3874 -> xxx.yyy.1.7:1433 SYN ******S* Jan 6 21:24:46 212.217.40.8:3875 -> xxx.yyy.1.8:1433 SYN ******S* [...] Jan 6 21:35:29 212.217.40.8:4039 -> xxx.yyy.232.236:1433 SYN ******S* Jan 6 21:35:29 212.217.40.8:4043 -> xxx.yyy.232.240:1433 SYN ******S* Jan 6 21:35:29 212.217.40.8:4037 -> xxx.yyy.232.234:1433 SYN ******S* Jan 6 21:35:29 212.217.40.8:4040 -> xxx.yyy.232.237:1433 SYN ******S* Jan 6 21:35:29 212.217.40.8:4312 -> xxx.yyy.233.254:1433 SYN ******S* Jan 6 21:35:29 212.217.40.8:4313 -> xxx.yyy.233.255:1433 SYN ******S* Jan 6 21:35:29 212.217.40.8:4314 -> xxx.yyy.234.1:1433 SYN ******S* Jan 6 21:35:29 212.217.40.8:4315 -> xxx.yyy.234.2:1433 SYN ******S* 62278 Jan 6 23:11:26 211.147.224.44:1108 -> xxx.yyy.1.1:1433 SYN ******S* Jan 6 23:11:23 211.147.224.44:1109 -> xxx.yyy.1.2:1433 SYN ******S* Jan 6 23:11:23 211.147.224.44:1111 -> xxx.yyy.1.4:1433 SYN ******S* Jan 6 23:11:23 211.147.224.44:1112 -> xxx.yyy.1.5:1433 SYN ******S* Jan 6 23:11:26 211.147.224.44:1113 -> xxx.yyy.1.6:1433 SYN ******S* Jan 6 23:11:26 211.147.224.44:1114 -> xxx.yyy.1.7:1433 SYN ******S* Jan 6 23:11:26 211.147.224.44:1115 -> xxx.yyy.1.8:1433 SYN ******S* Jan 6 23:11:23 211.147.224.44:1116 -> xxx.yyy.1.9:1433 SYN ******S* [...] Jan 6 23:23:21 211.147.224.44:3144 -> xxx.yyy.255.137:1433 SYN ******S* Jan 6 23:23:21 211.147.224.44:3152 -> xxx.yyy.255.145:1433 SYN ******S* Jan 6 23:23:21 211.147.224.44:3163 -> xxx.yyy.255.156:1433 SYN ******S* Jan 6 23:23:21 211.147.224.44:3176 -> xxx.yyy.255.169:1433 SYN ******S* Jan 6 23:23:21 211.147.224.44:3185 -> xxx.yyy.255.178:1433 SYN ******S* Jan 6 23:23:21 211.147.224.44:3183 -> xxx.yyy.255.176:1433 SYN ******S* Jan 6 23:23:21 211.147.224.44:3194 -> xxx.yyy.255.187:1433 SYN ******S* Jan 6 23:23:21 211.147.224.44:3191 -> xxx.yyy.255.184:1433 SYN ******S* 61387 Jan 6 20:14:44 200.204.154.92:3683 -> xxx.yyy.1.1:1433 SYN ******S* Jan 6 20:14:44 200.204.154.92:3684 -> xxx.yyy.1.2:1433 SYN ******S* Jan 6 20:14:44 200.204.154.92:3687 -> xxx.yyy.1.3:1433 SYN ******S* Jan 6 20:14:47 200.204.154.92:3690 -> xxx.yyy.1.4:1433 SYN ******S* Jan 6 20:14:45 200.204.154.92:3692 -> xxx.yyy.1.5:1433 SYN ******S* Jan 6 20:14:47 200.204.154.92:3694 -> xxx.yyy.1.6:1433 SYN ******S* Jan 6 20:14:45 200.204.154.92:3695 -> xxx.yyy.1.7:1433 SYN ******S* Jan 6 20:14:45 200.204.154.92:3698 -> xxx.yyy.1.8:1433 SYN ******S* [...] Jan 6 20:26:45 200.204.154.92:4072 -> xxx.yyy.255.234:1433 SYN ******S* Jan 6 20:26:45 200.204.154.92:4077 -> xxx.yyy.255.237:1433 SYN ******S* Jan 6 20:26:45 200.204.154.92:4068 -> xxx.yyy.255.232:1433 SYN ******S* Jan 6 20:26:45 200.204.154.92:4074 -> xxx.yyy.255.235:1433 SYN ******S* Jan 6 20:26:45 200.204.154.92:4085 -> xxx.yyy.255.243:1433 SYN ******S* Jan 6 20:26:45 200.204.154.92:4081 -> xxx.yyy.255.240:1433 SYN ******S* Jan 6 20:26:45 200.204.154.92:4104 -> xxx.yyy.255.250:1433 SYN ******S* Jan 6 20:26:45 200.204.154.92:4109 -> xxx.yyy.255.253:1433 SYN ******S* 52534 Jan 6 18:09:16 65.93.114.10:3262 -> xxx.yyy.1.2:1433 SYN ******S* Jan 6 18:09:16 65.93.114.10:3089 -> xxx.yyy.1.1:1433 SYN ******S* Jan 6 18:09:16 65.93.114.10:3394 -> xxx.yyy.1.0:1433 SYN ******S* Jan 6 18:09:16 65.93.114.10:4568 -> xxx.yyy.1.3:1433 SYN ******S* Jan 6 18:09:16 65.93.114.10:4774 -> xxx.yyy.1.4:1433 SYN ******S* Jan 6 18:09:16 65.93.114.10:4940 -> xxx.yyy.1.5:1433 SYN ******S* Jan 6 18:09:16 65.93.114.10:3387 -> xxx.yyy.1.6:1433 SYN ******S* Jan 6 18:09:16 65.93.114.10:3470 -> xxx.yyy.1.7:1433 SYN ******S* [...] Jan 6 23:59:48 65.93.114.10:4047 -> xxx.yyy.166.226:1433 SYN ******S* Jan 6 23:59:48 65.93.114.10:3712 -> xxx.yyy.166.221:1433 SYN ******S* Jan 6 23:59:49 65.93.114.10:3754 -> xxx.yyy.166.222:1433 SYN ******S* Jan 6 23:59:50 65.93.114.10:3863 -> xxx.yyy.166.223:1433 SYN ******S* Jan 6 23:59:51 65.93.114.10:3879 -> xxx.yyy.166.224:1433 SYN ******S* Jan 6 23:59:54 65.93.114.10:4047 -> xxx.yyy.166.226:1433 SYN ******S* Jan 6 23:59:54 65.93.114.10:4039 -> xxx.yyy.166.225:1433 SYN ******S* Jan 6 23:59:56 65.93.114.10:4085 -> xxx.yyy.166.227:1433 SYN ******S* 44377 Jan 6 17:22:31 168.126.220.130:3134 -> xxx.yyy.1.3:42 SYN ******S* Jan 6 17:22:31 168.126.220.130:3135 -> xxx.yyy.1.4:42 SYN ******S* Jan 6 17:22:31 168.126.220.130:3132 -> xxx.yyy.1.1:42 SYN ******S* Jan 6 17:22:31 168.126.220.130:3131 -> xxx.yyy.1.0:42 SYN ******S* Jan 6 17:22:31 168.126.220.130:3133 -> xxx.yyy.1.2:42 SYN ******S* Jan 6 17:22:31 168.126.220.130:3136 -> xxx.yyy.1.5:42 SYN ******S* Jan 6 17:22:31 168.126.220.130:3145 -> xxx.yyy.1.14:42 SYN ******S* Jan 6 17:22:31 168.126.220.130:3137 -> xxx.yyy.1.6:42 SYN ******S* [...] Jan 6 17:25:55 168.126.220.130:3151 -> xxx.yyy.255.250:42 SYN ******S* Jan 6 17:25:55 168.126.220.130:3149 -> xxx.yyy.255.248:42 SYN ******S* Jan 6 17:25:55 168.126.220.130:3147 -> xxx.yyy.255.246:42 SYN ******S* Jan 6 17:25:55 168.126.220.130:3146 -> xxx.yyy.255.245:42 SYN ******S* Jan 6 17:25:55 168.126.220.130:3150 -> xxx.yyy.255.249:42 SYN ******S* Jan 6 17:25:55 168.126.220.130:3153 -> xxx.yyy.255.252:42 SYN ******S* Jan 6 17:25:55 168.126.220.130:3154 -> xxx.yyy.255.253:42 SYN ******S* Jan 6 17:25:55 168.126.220.130:3155 -> xxx.yyy.255.254:42 SYN ******S* Jan 6 17:25:55 168.126.220.130:3152 -> xxx.yyy.255.251:42 SYN ******S* 42039 Jan 6 07:08:41 82.160.13.4:1882 -> xxx.yyy.1.0:1433 SYN ******S* Jan 6 07:08:41 82.160.13.4:1888 -> xxx.yyy.1.2:1433 SYN ******S* Jan 6 07:08:41 82.160.13.4:1885 -> xxx.yyy.1.1:1433 SYN ******S* Jan 6 07:08:41 82.160.13.4:1895 -> xxx.yyy.1.4:1433 SYN ******S* Jan 6 07:08:41 82.160.13.4:1898 -> xxx.yyy.1.5:1433 SYN ******S* Jan 6 07:08:41 82.160.13.4:1892 -> xxx.yyy.1.3:1433 SYN ******S* Jan 6 07:08:41 82.160.13.4:1905 -> xxx.yyy.1.7:1433 SYN ******S* Jan 6 07:08:41 82.160.13.4:1902 -> xxx.yyy.1.6:1433 SYN ******S* [...] Jan 6 09:14:17 82.160.13.4:3237 -> xxx.yyy.136.0:1433 SYN ******S* Jan 6 09:14:17 82.160.13.4:3367 -> xxx.yyy.136.27:1433 SYN ******S* Jan 6 09:14:17 82.160.13.4:3242 -> xxx.yyy.136.1:1433 SYN ******S* Jan 6 09:14:17 82.160.13.4:3245 -> xxx.yyy.136.3:1433 SYN ******S* Jan 6 09:14:17 82.160.13.4:3243 -> xxx.yyy.136.2:1433 SYN ******S* Jan 6 09:14:18 82.160.13.4:3254 -> xxx.yyy.136.5:1433 SYN ******S* Jan 6 09:14:18 82.160.13.4:3255 -> xxx.yyy.136.6:1433 SYN ******S* Jan 6 09:14:18 82.160.13.4:3249 -> xxx.yyy.136.4:1433 SYN ******S* Jan 6 09:14:18 82.160.13.4:3258 -> xxx.yyy.136.7:1433 SYN ******S* 39808 [...] 38535 [...] 37445 Jan 6 17:46:59 195.80.28.236:10802 -> xxx.yyy.1.1:1433 SYN ******S* Jan 6 17:46:59 195.80.28.236:10803 -> xxx.yyy.1.2:1433 SYN ******S* Jan 6 17:46:59 195.80.28.236:10804 -> xxx.yyy.1.24:1433 SYN ******S* Jan 6 17:46:59 195.80.28.236:10805 -> xxx.yyy.1.25:1433 SYN ******S* Jan 6 17:46:59 195.80.28.236:10806 -> xxx.yyy.1.26:1433 SYN ******S* Jan 6 17:47:02 195.80.28.236:10807 -> xxx.yyy.1.27:1433 SYN ******S* Jan 6 17:47:02 195.80.28.236:10808 -> xxx.yyy.1.28:1433 SYN ******S* Jan 6 17:46:59 195.80.28.236:8417 -> xxx.yyy.1.29:1433 SYN ******S* [...] Jan 6 21:53:21 195.80.28.236:3878 -> xxx.yyy.254.178:1433 SYN ******S* Jan 6 21:53:22 195.80.28.236:3886 -> xxx.yyy.254.186:1433 SYN ******S* Jan 6 21:53:22 195.80.28.236:3898 -> xxx.yyy.254.198:1433 SYN ******S* Jan 6 21:53:22 195.80.28.236:3920 -> xxx.yyy.254.211:1433 SYN ******S* Jan 6 21:53:55 195.80.28.236:1132 -> xxx.yyy.255.131:1433 SYN ******S* Jan 6 21:53:55 195.80.28.236:4795 -> xxx.yyy.255.22:1433 SYN ******S* Jan 6 21:53:56 195.80.28.236:4813 -> xxx.yyy.255.27:1433 SYN ******S* Jan 6 21:53:56 195.80.28.236:4823 -> xxx.yyy.255.30:1433 SYN ******S* Jan 6 21:53:57 195.80.28.236:4909 -> xxx.yyy.255.62:1433 SYN ******S* 37038 Jan 6 18:09:36 211.142.113.146:34118 -> xxx.yyy.1.2:1433 SYN ******S* Jan 6 18:09:36 211.142.113.146:34175 -> xxx.yyy.1.5:1433 SYN ******S* Jan 6 18:09:37 211.142.113.146:34191 -> xxx.yyy.1.6:1433 SYN ******S* Jan 6 18:09:38 211.142.113.146:34273 -> xxx.yyy.1.10:1433 SYN ******S* Jan 6 18:09:38 211.142.113.146:34277 -> xxx.yyy.1.11:1433 SYN ******S* Jan 6 18:09:36 211.142.113.146:34101 -> xxx.yyy.1.1:1433 SYN ******S* Jan 6 18:09:36 211.142.113.146:34148 -> xxx.yyy.1.3:1433 SYN ******S* Jan 6 18:09:36 211.142.113.146:34161 -> xxx.yyy.1.4:1433 SYN ******S* [...] Jan 6 21:27:51 211.142.113.146:46539 -> xxx.yyy.111.248:1433 SYN ******S* Jan 6 21:27:51 211.142.113.146:32800 -> xxx.yyy.111.249:1433 SYN ******S* Jan 6 21:27:51 211.142.113.146:48168 -> xxx.yyy.111.250:1433 SYN ******S* Jan 6 21:27:52 211.142.113.146:38630 -> xxx.yyy.111.251:1433 SYN ******S* Jan 6 21:27:52 211.142.113.146:41757 -> xxx.yyy.111.252:1433 SYN ******S* Jan 6 21:27:53 211.142.113.146:34390 -> xxx.yyy.111.253:1433 SYN ******S* Jan 6 21:27:54 211.142.113.146:53983 -> xxx.yyy.111.254:1433 SYN ******S* Jan 6 21:27:55 211.142.113.146:58844 -> xxx.yyy.111.255:1433 SYN ******S* 32621 Jan 6 00:00:05 211.158.42.185:1637 -> xxx.yyy.168.101:1433 SYN ******S* Jan 6 00:00:06 211.158.42.185:1591 -> xxx.yyy.168.104:1433 SYN ******S* Jan 6 00:00:06 211.158.42.185:1992 -> xxx.yyy.168.102:1433 SYN ******S* Jan 6 00:00:10 211.158.42.185:1783 -> xxx.yyy.168.121:1433 SYN ******S* Jan 6 00:00:10 211.158.42.185:1892 -> xxx.yyy.168.122:1433 SYN ******S* Jan 6 00:00:10 211.158.42.185:1896 -> xxx.yyy.168.123:1433 SYN ******S* Jan 6 00:00:08 211.158.42.185:1930 -> xxx.yyy.168.126:1433 SYN ******S* Jan 6 00:00:08 211.158.42.185:1946 -> xxx.yyy.168.127:1433 SYN ******S* [...] Jan 6 01:18:46 211.158.42.185:1272 -> xxx.yyy.255.246:1433 SYN ******S* Jan 6 01:18:47 211.158.42.185:1961 -> xxx.yyy.255.239:1433 SYN ******S* Jan 6 01:18:47 211.158.42.185:1411 -> xxx.yyy.255.247:1433 SYN ******S* Jan 6 01:18:47 211.158.42.185:1327 -> xxx.yyy.255.248:1433 SYN ******S* Jan 6 01:18:47 211.158.42.185:1331 -> xxx.yyy.255.249:1433 SYN ******S* Jan 6 01:18:48 211.158.42.185:1558 -> xxx.yyy.255.252:1433 SYN ******S* Jan 6 01:18:48 211.158.42.185:1586 -> xxx.yyy.255.253:1433 SYN ******S* Jan 6 01:18:49 211.158.42.185:1663 -> xxx.yyy.255.254:1433 SYN ******S* 23020 Jan 6 22:32:48 132.234.195.236:3717 -> xxx.yyy.64.0:1433 SYN ******S* Jan 6 22:32:48 132.234.195.236:3719 -> xxx.yyy.64.2:1433 SYN ******S* Jan 6 22:32:48 132.234.195.236:3718 -> xxx.yyy.64.1:1433 SYN ******S* Jan 6 22:32:48 132.234.195.236:3720 -> xxx.yyy.64.3:1433 SYN ******S* Jan 6 22:32:48 132.234.195.236:3721 -> xxx.yyy.64.4:1433 SYN ******S* Jan 6 22:32:48 132.234.195.236:3722 -> xxx.yyy.64.5:1433 SYN ******S* Jan 6 22:32:48 132.234.195.236:3723 -> xxx.yyy.64.6:1433 SYN ******S* Jan 6 22:32:48 132.234.195.236:3724 -> xxx.yyy.64.7:1433 SYN ******S* [...] Jan 6 23:01:42 132.234.195.236:1760 -> xxx.yyy.95.248:1433 SYN ******S* Jan 6 23:01:43 132.234.195.236:1790 -> xxx.yyy.95.249:1433 SYN ******S* Jan 6 23:01:43 132.234.195.236:1794 -> xxx.yyy.95.250:1433 SYN ******S* Jan 6 23:01:44 132.234.195.236:1807 -> xxx.yyy.95.254:1433 SYN ******S* Jan 6 23:01:44 132.234.195.236:1804 -> xxx.yyy.95.253:1433 SYN ******S* Jan 6 23:01:44 132.234.195.236:1798 -> xxx.yyy.95.251:1433 SYN ******S* Jan 6 23:01:44 132.234.195.236:1800 -> xxx.yyy.95.252:1433 SYN ******S* Jan 6 23:01:44 132.234.195.236:1809 -> xxx.yyy.95.255:1433 SYN ******S* 21090 Jan 6 18:49:28 24.181.89.6:3916 -> xxx.yyy.1.0:1433 SYN ******S* Jan 6 18:49:28 24.181.89.6:3917 -> xxx.yyy.1.1:1433 SYN ******S* Jan 6 18:49:28 24.181.89.6:3918 -> xxx.yyy.1.2:1433 SYN ******S* Jan 6 18:49:28 24.181.89.6:3919 -> xxx.yyy.1.3:1433 SYN ******S* Jan 6 18:49:28 24.181.89.6:3921 -> xxx.yyy.1.4:1433 SYN ******S* Jan 6 18:49:28 24.181.89.6:3922 -> xxx.yyy.1.5:1433 SYN ******S* Jan 6 18:49:28 24.181.89.6:3923 -> xxx.yyy.1.6:1433 SYN ******S* Jan 6 18:49:28 24.181.89.6:3925 -> xxx.yyy.1.7:1433 SYN ******S* [...] Jan 6 19:58:04 24.181.89.6:4091 -> xxx.yyy.77.89:1433 SYN ******S* Jan 6 19:58:04 24.181.89.6:4087 -> xxx.yyy.77.88:1433 SYN ******S* Jan 6 19:58:04 24.181.89.6:4099 -> xxx.yyy.77.92:1433 SYN ******S* Jan 6 19:58:04 24.181.89.6:4097 -> xxx.yyy.77.91:1433 SYN ******S* Jan 6 19:58:04 24.181.89.6:4096 -> xxx.yyy.77.90:1433 SYN ******S* Jan 6 19:58:04 24.181.89.6:4736 -> xxx.yyy.77.96:1433 SYN ******S* Jan 6 19:58:04 24.181.89.6:4103 -> xxx.yyy.77.94:1433 SYN ******S* Jan 6 19:58:04 24.181.89.6:4101 -> xxx.yyy.77.93:1433 SYN ******S* Jan 6 19:58:04 24.181.89.6:4745 -> xxx.yyy.77.97:1433 SYN ******S* 18707 Jan 6 04:22:59 222.101.236.214:2718 -> xxx.yyy.174.224:5554 SYN ******S* Jan 6 04:23:00 222.101.236.214:3239 -> xxx.yyy.174.224:1023 SYN ******S* Jan 6 04:23:02 222.101.236.214:4231 -> xxx.yyy.174.224:9898 SYN ******S* Jan 6 04:22:59 222.101.236.214:2722 -> xxx.yyy.174.231:5554 SYN ******S* Jan 6 04:23:00 222.101.236.214:3243 -> xxx.yyy.174.231:1023 SYN ******S* Jan 6 04:23:02 222.101.236.214:4248 -> xxx.yyy.174.231:9898 SYN ******S* Jan 6 04:22:59 222.101.236.214:2725 -> xxx.yyy.174.241:5554 SYN ******S* Jan 6 04:23:00 222.101.236.214:3227 -> xxx.yyy.174.241:1023 SYN ******S* [...] Jan 6 04:24:31 222.101.236.214:2943 -> xxx.yyy.188.105:1023 SYN ******S* Jan 6 04:24:33 222.101.236.214:3856 -> xxx.yyy.188.105:9898 SYN ******S* Jan 6 04:24:30 222.101.236.214:2437 -> xxx.yyy.188.104:5554 SYN ******S* Jan 6 04:24:31 222.101.236.214:2942 -> xxx.yyy.188.104:1023 SYN ******S* Jan 6 04:24:33 222.101.236.214:3855 -> xxx.yyy.188.104:9898 SYN ******S* Jan 6 04:24:30 222.101.236.214:2435 -> xxx.yyy.188.102:5554 SYN ******S* Jan 6 04:24:33 222.101.236.214:3853 -> xxx.yyy.188.102:9898 SYN ******S* Jan 6 04:24:30 222.101.236.214:2436 -> xxx.yyy.188.103:5554 SYN ******S* Jan 6 04:24:33 222.101.236.214:3854 -> xxx.yyy.188.103:9898 SYN ******S* 14983 Jan 6 22:19:49 222.114.92.62:2504 -> xxx.yyy.194.126:5554 SYN ******S* Jan 6 22:19:50 222.114.92.62:3020 -> xxx.yyy.194.126:1023 SYN ******S* Jan 6 22:19:52 222.114.92.62:4033 -> xxx.yyy.194.126:9898 SYN ******S* Jan 6 22:19:49 222.114.92.62:2497 -> xxx.yyy.194.127:5554 SYN ******S* Jan 6 22:19:52 222.114.92.62:4056 -> xxx.yyy.194.127:9898 SYN ******S* Jan 6 22:19:49 222.114.92.62:2548 -> xxx.yyy.194.135:5554 SYN ******S* Jan 6 22:19:52 222.114.92.62:4082 -> xxx.yyy.194.135:9898 SYN ******S* Jan 6 22:19:49 222.114.92.62:2540 -> xxx.yyy.194.134:5554 SYN ******S* [...] Jan 6 22:20:38 222.114.92.62:3672 -> xxx.yyy.214.228:9898 SYN ******S* Jan 6 22:20:38 222.114.92.62:3675 -> xxx.yyy.214.234:9898 SYN ******S* Jan 6 22:20:38 222.114.92.62:3586 -> xxx.yyy.214.244:9898 SYN ******S* Jan 6 22:20:38 222.114.92.62:3676 -> xxx.yyy.214.237:9898 SYN ******S* Jan 6 22:20:38 222.114.92.62:3596 -> xxx.yyy.214.205:9898 SYN ******S* Jan 6 22:20:38 222.114.92.62:3588 -> xxx.yyy.214.246:9898 SYN ******S* Jan 6 22:20:38 222.114.92.62:3664 -> xxx.yyy.214.220:9898 SYN ******S* Jan 6 22:20:38 222.114.92.62:3671 -> xxx.yyy.214.223:9898 SYN ******S* Jan 6 22:20:38 222.114.92.62:3733 -> xxx.yyy.214.239:9898 SYN ******S* 14850 Jan 6 22:23:07 211.225.71.233:2634 -> xxx.yyy.236.90:5554 SYN ******S* Jan 6 22:23:08 211.225.71.233:3307 -> xxx.yyy.236.90:1023 SYN ******S* Jan 6 22:23:10 211.225.71.233:4578 -> xxx.yyy.236.90:9898 SYN ******S* Jan 6 22:23:07 211.225.71.233:2656 -> xxx.yyy.236.96:5554 SYN ******S* Jan 6 22:23:08 211.225.71.233:3326 -> xxx.yyy.236.96:1023 SYN ******S* Jan 6 22:23:10 211.225.71.233:4614 -> xxx.yyy.236.96:9898 SYN ******S* Jan 6 22:23:07 211.225.71.233:2658 -> xxx.yyy.236.97:5554 SYN ******S* Jan 6 22:23:08 211.225.71.233:3323 -> xxx.yyy.236.97:1023 SYN ******S* [...] Jan 6 22:23:49 211.225.71.233:4060 -> xxx.yyy.255.222:9898 SYN ******S* Jan 6 22:23:49 211.225.71.233:4046 -> xxx.yyy.255.214:9898 SYN ******S* Jan 6 22:23:49 211.225.71.233:3934 -> xxx.yyy.255.200:9898 SYN ******S* Jan 6 22:23:49 211.225.71.233:3935 -> xxx.yyy.255.203:9898 SYN ******S* Jan 6 22:23:49 211.225.71.233:3918 -> xxx.yyy.255.194:9898 SYN ******S* Jan 6 22:23:49 211.225.71.233:4023 -> xxx.yyy.255.213:9898 SYN ******S* Jan 6 22:23:49 211.225.71.233:4029 -> xxx.yyy.255.207:9898 SYN ******S* Jan 6 22:23:51 211.225.71.233:1621 -> xxx.yyy.236.77:9898 SYN ******S* 14468 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions