[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Jan 14 08:11:57 212.106.235.119:2501 -> xxx.yyy.111.1:5900 SYN ******S* Jan 14 08:11:58 212.106.235.119:2504 -> xxx.yyy.111.1:4899 SYN ******S* Jan 14 08:11:55 212.106.235.119:2508 -> xxx.yyy.111.1:6101 SYN ******S* Jan 14 08:11:58 212.106.235.119:2509 -> xxx.yyy.111.1:139 SYN ******S* Jan 14 08:11:58 212.106.235.119:2511 -> xxx.yyy.111.1:42 SYN ******S* Jan 14 08:11:58 212.106.235.119:2513 -> xxx.yyy.111.2:4899 SYN ******S* Jan 14 08:11:58 212.106.235.119:2516 -> xxx.yyy.111.2:139 SYN ******S* Jan 14 08:11:55 212.106.235.119:2517 -> xxx.yyy.111.2:6101 SYN ******S* [...] Jan 14 13:09:18 212.106.235.119:4698 -> xxx.yyy.220.167:5900 SYN ******S* Jan 14 13:09:19 212.106.235.119:4701 -> xxx.yyy.222.14:5900 SYN ******S* Jan 14 13:09:19 212.106.235.119:4703 -> xxx.yyy.220.111:5900 SYN ******S* Jan 14 13:09:19 212.106.235.119:4704 -> xxx.yyy.220.148:5900 SYN ******S* Jan 14 13:09:19 212.106.235.119:4706 -> xxx.yyy.226.239:6101 SYN ******S* Jan 14 13:09:19 212.106.235.119:4709 -> xxx.yyy.220.243:5900 SYN ******S* Jan 14 13:09:19 212.106.235.119:4710 -> xxx.yyy.220.160:5900 SYN ******S* Jan 14 13:09:19 212.106.235.119:4712 -> xxx.yyy.221.186:5900 SYN ******S* Jan 14 13:09:19 212.106.235.119:4714 -> xxx.yyy.220.51:5900 SYN ******S* 300355 Jan 14 02:37:31 61.62.95.168:4918 -> xxx.yyy.78.1:5900 SYN ******S* Jan 14 02:37:32 61.62.95.168:4921 -> xxx.yyy.78.1:4899 SYN ******S* Jan 14 02:37:32 61.62.95.168:4929 -> xxx.yyy.78.1:42 SYN ******S* Jan 14 02:37:32 61.62.95.168:4931 -> xxx.yyy.78.2:5900 SYN ******S* Jan 14 02:37:32 61.62.95.168:4933 -> xxx.yyy.78.2:4899 SYN ******S* Jan 14 02:37:32 61.62.95.168:4947 -> xxx.yyy.78.2:42 SYN ******S* Jan 14 02:37:32 61.62.95.168:4938 -> xxx.yyy.78.3:4899 SYN ******S* Jan 14 02:37:32 61.62.95.168:4946 -> xxx.yyy.78.3:42 SYN ******S* [...] Jan 14 04:28:55 61.62.95.168:3100 -> xxx.yyy.73.77:4899 SYN ******S* Jan 14 04:28:55 61.62.95.168:3104 -> xxx.yyy.73.77:42 SYN ******S* Jan 14 04:28:55 61.62.95.168:3105 -> xxx.yyy.132.93:5900 SYN ******S* Jan 14 04:28:55 61.62.95.168:3106 -> xxx.yyy.73.78:5900 SYN ******S* Jan 14 04:28:55 61.62.95.168:3107 -> xxx.yyy.73.78:4899 SYN ******S* Jan 14 04:28:55 61.62.95.168:3014 -> xxx.yyy.73.64:5900 SYN ******S* Jan 14 04:28:55 61.62.95.168:3019 -> xxx.yyy.73.64:42 SYN ******S* Jan 14 04:28:55 61.62.95.168:3020 -> xxx.yyy.73.65:5900 SYN ******S* Jan 14 04:28:55 61.62.95.168:3021 -> xxx.yyy.73.65:4899 SYN ******S* 109623 Jan 14 05:38:08 213.251.101.101:1772 -> xxx.yyy.1.0:1433 SYN ******S* Jan 14 05:38:08 213.251.101.101:1773 -> xxx.yyy.1.1:1433 SYN ******S* Jan 14 05:38:08 213.251.101.101:1775 -> xxx.yyy.1.2:1433 SYN ******S* Jan 14 05:38:08 213.251.101.101:1777 -> xxx.yyy.1.3:1433 SYN ******S* Jan 14 05:38:08 213.251.101.101:1779 -> xxx.yyy.1.4:1433 SYN ******S* Jan 14 05:38:08 213.251.101.101:1781 -> xxx.yyy.1.5:1433 SYN ******S* Jan 14 05:38:08 213.251.101.101:1783 -> xxx.yyy.1.6:1433 SYN ******S* Jan 14 05:38:08 213.251.101.101:1785 -> xxx.yyy.1.7:1433 SYN ******S* [...] Jan 14 09:28:19 213.251.101.101:1703 -> xxx.yyy.255.239:1433 SYN ******S* Jan 14 09:28:19 213.251.101.101:1707 -> xxx.yyy.255.241:1433 SYN ******S* Jan 14 09:28:19 213.251.101.101:1708 -> xxx.yyy.255.242:1433 SYN ******S* Jan 14 09:28:19 213.251.101.101:1712 -> xxx.yyy.255.245:1433 SYN ******S* Jan 14 09:28:19 213.251.101.101:1711 -> xxx.yyy.255.244:1433 SYN ******S* Jan 14 09:28:20 213.251.101.101:1714 -> xxx.yyy.255.246:1433 SYN ******S* Jan 14 09:28:20 213.251.101.101:1716 -> xxx.yyy.255.248:1433 SYN ******S* Jan 14 09:28:21 213.251.101.101:1720 -> xxx.yyy.255.250:1433 SYN ******S* Jan 14 09:28:22 213.251.101.101:1725 -> xxx.yyy.255.253:1433 SYN ******S* 106555 Jan 14 23:00:50 210.178.13.210:2092 -> xxx.yyy.1.1:3306 SYN ******S* Jan 14 23:00:50 210.178.13.210:2096 -> xxx.yyy.1.2:3306 SYN ******S* Jan 14 23:00:49 210.178.13.210:2100 -> xxx.yyy.1.3:3306 SYN ******S* Jan 14 23:00:49 210.178.13.210:2108 -> xxx.yyy.1.5:3306 SYN ******S* Jan 14 23:00:49 210.178.13.210:2112 -> xxx.yyy.1.6:3306 SYN ******S* Jan 14 23:00:52 210.178.13.210:2116 -> xxx.yyy.1.7:3306 SYN ******S* Jan 14 23:00:50 210.178.13.210:2120 -> xxx.yyy.1.8:3306 SYN ******S* Jan 14 23:00:49 210.178.13.210:2128 -> xxx.yyy.1.10:3306 SYN ******S* [...] Jan 14 23:12:30 210.178.13.210:2510 -> xxx.yyy.255.242:3306 SYN ******S* Jan 14 23:12:30 210.178.13.210:2514 -> xxx.yyy.255.243:3306 SYN ******S* Jan 14 23:12:30 210.178.13.210:2486 -> xxx.yyy.255.236:3306 SYN ******S* Jan 14 23:12:30 210.178.13.210:2490 -> xxx.yyy.255.237:3306 SYN ******S* Jan 14 23:12:30 210.178.13.210:2506 -> xxx.yyy.255.241:3306 SYN ******S* Jan 14 23:12:30 210.178.13.210:2502 -> xxx.yyy.255.240:3306 SYN ******S* Jan 14 23:12:30 210.178.13.210:2542 -> xxx.yyy.255.250:3306 SYN ******S* Jan 14 23:12:30 210.178.13.210:2550 -> xxx.yyy.255.252:3306 SYN ******S* 58399 Jan 14 22:32:06 24.14.127.189:3610 -> xxx.yyy.1.1:42 SYN ******S* Jan 14 22:32:06 24.14.127.189:3620 -> xxx.yyy.1.2:42 SYN ******S* Jan 14 22:32:06 24.14.127.189:3637 -> xxx.yyy.1.3:42 SYN ******S* Jan 14 22:32:06 24.14.127.189:3639 -> xxx.yyy.1.4:42 SYN ******S* Jan 14 22:32:04 24.14.127.189:3660 -> xxx.yyy.1.5:42 SYN ******S* Jan 14 22:32:07 24.14.127.189:3683 -> xxx.yyy.1.6:42 SYN ******S* Jan 14 22:32:07 24.14.127.189:3689 -> xxx.yyy.1.7:42 SYN ******S* Jan 14 22:32:04 24.14.127.189:3693 -> xxx.yyy.1.8:42 SYN ******S* [...] Jan 14 23:09:43 24.14.127.189:2699 -> xxx.yyy.255.246:42 SYN ******S* Jan 14 23:09:43 24.14.127.189:2703 -> xxx.yyy.255.247:42 SYN ******S* Jan 14 23:09:43 24.14.127.189:2705 -> xxx.yyy.255.248:42 SYN ******S* Jan 14 23:09:43 24.14.127.189:2706 -> xxx.yyy.255.249:42 SYN ******S* Jan 14 23:09:43 24.14.127.189:2707 -> xxx.yyy.255.250:42 SYN ******S* Jan 14 23:09:43 24.14.127.189:2716 -> xxx.yyy.255.251:42 SYN ******S* Jan 14 23:09:43 24.14.127.189:2717 -> xxx.yyy.255.252:42 SYN ******S* Jan 14 23:09:43 24.14.127.189:2720 -> xxx.yyy.255.253:42 SYN ******S* Jan 14 23:09:43 24.14.127.189:2723 -> xxx.yyy.255.254:42 SYN ******S* 57772 Jan 14 19:01:26 150.7.220.58:34300 -> xxx.yyy.1.5:513 SYN ******S* Jan 14 19:01:26 150.7.220.58:34299 -> xxx.yyy.1.4:513 SYN ******S* Jan 14 19:01:26 150.7.220.58:34297 -> xxx.yyy.1.2:513 SYN ******S* Jan 14 19:01:26 150.7.220.58:34298 -> xxx.yyy.1.3:513 SYN ******S* Jan 14 19:01:26 150.7.220.58:34301 -> xxx.yyy.1.6:513 SYN ******S* Jan 14 19:01:26 150.7.220.58:34309 -> xxx.yyy.1.14:513 SYN ******S* Jan 14 19:01:26 150.7.220.58:34313 -> xxx.yyy.1.18:513 SYN ******S* Jan 14 19:01:26 150.7.220.58:34314 -> xxx.yyy.1.19:513 SYN ******S* [...] Jan 14 19:37:48 150.7.220.58:43103 -> xxx.yyy.255.246:513 SYN ******S* Jan 14 19:37:48 150.7.220.58:43104 -> xxx.yyy.255.247:513 SYN ******S* Jan 14 19:37:48 150.7.220.58:43101 -> xxx.yyy.255.244:513 SYN ******S* Jan 14 19:37:48 150.7.220.58:43102 -> xxx.yyy.255.245:513 SYN ******S* Jan 14 19:37:48 150.7.220.58:43107 -> xxx.yyy.255.250:513 SYN ******S* Jan 14 19:37:48 150.7.220.58:43108 -> xxx.yyy.255.251:513 SYN ******S* Jan 14 19:37:48 150.7.220.58:43111 -> xxx.yyy.255.254:513 SYN ******S* Jan 14 19:37:48 150.7.220.58:43112 -> xxx.yyy.255.255:513 SYN ******S* 52584 Jan 14 10:31:13 164.8.24.220:3520 -> xxx.yyy.1.1:6101 SYN ******S* Jan 14 10:31:16 164.8.24.220:3522 -> xxx.yyy.1.3:6101 SYN ******S* Jan 14 10:31:16 164.8.24.220:3523 -> xxx.yyy.1.2:6101 SYN ******S* Jan 14 10:31:16 164.8.24.220:3524 -> xxx.yyy.1.5:6101 SYN ******S* Jan 14 10:31:16 164.8.24.220:3525 -> xxx.yyy.1.4:6101 SYN ******S* Jan 14 10:31:16 164.8.24.220:3526 -> xxx.yyy.1.7:6101 SYN ******S* Jan 14 10:31:14 164.8.24.220:3527 -> xxx.yyy.1.6:6101 SYN ******S* Jan 14 10:31:14 164.8.24.220:3528 -> xxx.yyy.1.9:6101 SYN ******S* [...] Jan 14 11:27:33 164.8.24.220:2408 -> xxx.yyy.255.238:6101 SYN ******S* Jan 14 11:27:34 164.8.24.220:2410 -> xxx.yyy.255.240:6101 SYN ******S* Jan 14 11:27:34 164.8.24.220:2412 -> xxx.yyy.255.242:6101 SYN ******S* Jan 14 11:27:34 164.8.24.220:2413 -> xxx.yyy.255.245:6101 SYN ******S* Jan 14 11:27:34 164.8.24.220:2414 -> xxx.yyy.255.244:6101 SYN ******S* Jan 14 11:27:34 164.8.24.220:2417 -> xxx.yyy.255.249:6101 SYN ******S* Jan 14 11:27:34 164.8.24.220:2418 -> xxx.yyy.255.251:6101 SYN ******S* Jan 14 11:27:34 164.8.24.220:2419 -> xxx.yyy.255.248:6101 SYN ******S* 47027 Jan 14 01:11:42 68.57.38.96:2024 -> xxx.yyy.1.2:42 SYN ******S* Jan 14 01:11:42 68.57.38.96:2023 -> xxx.yyy.1.1:42 SYN ******S* Jan 14 01:11:42 68.57.38.96:2025 -> xxx.yyy.1.3:42 SYN ******S* Jan 14 01:11:42 68.57.38.96:2028 -> xxx.yyy.1.6:42 SYN ******S* Jan 14 01:11:42 68.57.38.96:2042 -> xxx.yyy.1.20:42 SYN ******S* Jan 14 01:11:42 68.57.38.96:2052 -> xxx.yyy.1.30:42 SYN ******S* Jan 14 01:11:42 68.57.38.96:2056 -> xxx.yyy.1.34:42 SYN ******S* Jan 14 01:11:42 68.57.38.96:2050 -> xxx.yyy.1.28:42 SYN ******S* [...] Jan 14 01:24:33 68.57.38.96:3240 -> xxx.yyy.255.175:42 SYN ******S* Jan 14 01:24:33 68.57.38.96:3256 -> xxx.yyy.255.191:42 SYN ******S* Jan 14 01:24:33 68.57.38.96:3268 -> xxx.yyy.255.202:42 SYN ******S* Jan 14 01:24:33 68.57.38.96:3283 -> xxx.yyy.255.216:42 SYN ******S* Jan 14 01:24:33 68.57.38.96:3285 -> xxx.yyy.255.218:42 SYN ******S* Jan 14 01:24:33 68.57.38.96:3284 -> xxx.yyy.255.217:42 SYN ******S* Jan 14 01:24:33 68.57.38.96:3282 -> xxx.yyy.255.215:42 SYN ******S* Jan 14 01:24:33 68.57.38.96:3295 -> xxx.yyy.255.228:42 SYN ******S* Jan 14 01:24:33 68.57.38.96:3290 -> xxx.yyy.255.223:42 SYN ******S* 44527 Jan 14 16:33:40 216.243.190.198:1676 -> xxx.yyy.1.1:6101 SYN ******S* Jan 14 16:33:40 216.243.190.198:1677 -> xxx.yyy.1.2:6101 SYN ******S* Jan 14 16:33:40 216.243.190.198:1679 -> xxx.yyy.1.4:6101 SYN ******S* Jan 14 16:33:43 216.243.190.198:1682 -> xxx.yyy.1.7:6101 SYN ******S* Jan 14 16:33:40 216.243.190.198:1685 -> xxx.yyy.1.10:6101 SYN ******S* Jan 14 16:33:40 216.243.190.198:1688 -> xxx.yyy.1.13:6101 SYN ******S* Jan 14 16:33:40 216.243.190.198:1691 -> xxx.yyy.1.16:6101 SYN ******S* Jan 14 16:33:40 216.243.190.198:1692 -> xxx.yyy.1.17:6101 SYN ******S* [...] Jan 14 16:45:21 216.243.190.198:4058 -> xxx.yyy.255.243:6101 SYN ******S* Jan 14 16:45:21 216.243.190.198:4059 -> xxx.yyy.255.244:6101 SYN ******S* Jan 14 16:45:21 216.243.190.198:4065 -> xxx.yyy.255.250:6101 SYN ******S* Jan 14 16:45:21 216.243.190.198:4060 -> xxx.yyy.255.245:6101 SYN ******S* Jan 14 16:45:21 216.243.190.198:4064 -> xxx.yyy.255.249:6101 SYN ******S* Jan 14 16:45:21 216.243.190.198:4062 -> xxx.yyy.255.247:6101 SYN ******S* Jan 14 16:45:21 216.243.190.198:4057 -> xxx.yyy.255.242:6101 SYN ******S* Jan 14 16:45:21 216.243.190.198:4069 -> xxx.yyy.255.254:6101 SYN ******S* Jan 14 16:45:21 216.243.190.198:4067 -> xxx.yyy.255.252:6101 SYN ******S* 40623 Jan 14 15:00:58 65.41.172.15:3223 -> xxx.yyy.1.0:4000 SYN ******S* Jan 14 15:00:58 65.41.172.15:3224 -> xxx.yyy.1.1:4000 SYN ******S* Jan 14 15:00:58 65.41.172.15:3225 -> xxx.yyy.1.2:4000 SYN ******S* Jan 14 15:00:57 65.41.172.15:3228 -> xxx.yyy.1.5:4000 SYN ******S* Jan 14 15:01:00 65.41.172.15:3229 -> xxx.yyy.1.6:4000 SYN ******S* Jan 14 15:00:58 65.41.172.15:3232 -> xxx.yyy.1.9:4000 SYN ******S* Jan 14 15:00:57 65.41.172.15:3233 -> xxx.yyy.1.10:4000 SYN ******S* Jan 14 15:00:58 65.41.172.15:3234 -> xxx.yyy.1.11:4000 SYN ******S* [...] Jan 14 15:12:59 65.41.172.15:2509 -> xxx.yyy.255.232:4000 SYN ******S* Jan 14 15:12:59 65.41.172.15:2511 -> xxx.yyy.255.234:4000 SYN ******S* Jan 14 15:12:59 65.41.172.15:2518 -> xxx.yyy.255.241:4000 SYN ******S* Jan 14 15:12:59 65.41.172.15:2519 -> xxx.yyy.255.242:4000 SYN ******S* Jan 14 15:12:59 65.41.172.15:2523 -> xxx.yyy.255.246:4000 SYN ******S* Jan 14 15:12:59 65.41.172.15:2520 -> xxx.yyy.255.243:4000 SYN ******S* Jan 14 15:12:59 65.41.172.15:2524 -> xxx.yyy.255.247:4000 SYN ******S* Jan 14 15:13:00 65.41.172.15:2531 -> xxx.yyy.255.254:4000 SYN ******S* 38601 Jan 14 09:31:02 66.122.113.209:3247 -> xxx.yyy.1.2:42 SYN ******S* Jan 14 09:31:02 66.122.113.209:3249 -> xxx.yyy.1.4:42 SYN ******S* Jan 14 09:30:59 66.122.113.209:3250 -> xxx.yyy.1.5:42 SYN ******S* Jan 14 09:31:02 66.122.113.209:3251 -> xxx.yyy.1.6:42 SYN ******S* Jan 14 09:30:59 66.122.113.209:3254 -> xxx.yyy.1.9:42 SYN ******S* Jan 14 09:31:02 66.122.113.209:3255 -> xxx.yyy.1.10:42 SYN ******S* Jan 14 09:31:02 66.122.113.209:3257 -> xxx.yyy.1.12:42 SYN ******S* Jan 14 09:30:59 66.122.113.209:3258 -> xxx.yyy.1.13:42 SYN ******S* [...] Jan 14 23:59:57 66.122.113.209:1522 -> xxx.yyy.190.56:6101 SYN ******S* Jan 14 23:59:57 66.122.113.209:1523 -> xxx.yyy.190.57:6101 SYN ******S* Jan 14 23:59:57 66.122.113.209:1526 -> xxx.yyy.190.60:6101 SYN ******S* Jan 14 23:59:57 66.122.113.209:1527 -> xxx.yyy.190.61:6101 SYN ******S* Jan 14 23:59:57 66.122.113.209:1528 -> xxx.yyy.190.62:6101 SYN ******S* Jan 14 23:59:57 66.122.113.209:1529 -> xxx.yyy.190.63:6101 SYN ******S* Jan 14 23:59:57 66.122.113.209:1530 -> xxx.yyy.190.64:6101 SYN ******S* Jan 14 23:59:57 66.122.113.209:1531 -> xxx.yyy.190.65:6101 SYN ******S* Jan 14 23:59:57 66.122.113.209:1532 -> xxx.yyy.190.66:6101 SYN ******S* 38117 Jan 14 09:58:01 201.6.103.23:4940 -> xxx.yyy.1.9:6101 SYN ******S* Jan 14 09:58:04 201.6.103.23:4974 -> xxx.yyy.1.43:6101 SYN ******S* Jan 14 09:58:01 201.6.103.23:4973 -> xxx.yyy.1.42:6101 SYN ******S* Jan 14 09:58:01 201.6.103.23:4971 -> xxx.yyy.1.40:6101 SYN ******S* Jan 14 09:58:01 201.6.103.23:4970 -> xxx.yyy.1.39:6101 SYN ******S* Jan 14 09:58:04 201.6.103.23:4972 -> xxx.yyy.1.41:6101 SYN ******S* Jan 14 09:58:01 201.6.103.23:4976 -> xxx.yyy.1.45:6101 SYN ******S* Jan 14 09:58:01 201.6.103.23:4994 -> xxx.yyy.1.63:6101 SYN ******S* [...] Jan 14 10:17:31 201.6.103.23:3313 -> xxx.yyy.255.238:6101 SYN ******S* Jan 14 10:17:31 201.6.103.23:3197 -> xxx.yyy.255.123:6101 SYN ******S* Jan 14 10:17:31 201.6.103.23:3229 -> xxx.yyy.255.155:6101 SYN ******S* Jan 14 10:17:31 201.6.103.23:3314 -> xxx.yyy.255.239:6101 SYN ******S* Jan 14 10:17:31 201.6.103.23:3278 -> xxx.yyy.255.204:6101 SYN ******S* Jan 14 10:17:31 201.6.103.23:3211 -> xxx.yyy.255.137:6101 SYN ******S* Jan 14 10:17:31 201.6.103.23:3195 -> xxx.yyy.255.121:6101 SYN ******S* Jan 14 10:17:31 201.6.103.23:3227 -> xxx.yyy.255.153:6101 SYN ******S* 34662 Jan 14 23:02:29 61.55.196.95:3849 -> xxx.yyy.146.45:1433 SYN ******S* Jan 14 23:02:29 61.55.196.95:3852 -> xxx.yyy.146.46:1433 SYN ******S* Jan 14 23:02:29 61.55.196.95:3855 -> xxx.yyy.146.47:1433 SYN ******S* Jan 14 23:02:29 61.55.196.95:3858 -> xxx.yyy.146.48:1433 SYN ******S* Jan 14 23:02:29 61.55.196.95:3861 -> xxx.yyy.146.49:1433 SYN ******S* Jan 14 23:02:29 61.55.196.95:3864 -> xxx.yyy.146.50:1433 SYN ******S* Jan 14 23:02:29 61.55.196.95:3867 -> xxx.yyy.146.51:1433 SYN ******S* Jan 14 23:02:26 61.55.196.95:3870 -> xxx.yyy.146.52:1433 SYN ******S* [...] Jan 14 23:42:32 61.55.196.95:4623 -> xxx.yyy.190.190:1433 SYN ******S* Jan 14 23:42:32 61.55.196.95:3087 -> xxx.yyy.191.12:1433 SYN ******S* Jan 14 23:42:32 61.55.196.95:4628 -> xxx.yyy.190.191:1433 SYN ******S* Jan 14 23:42:32 61.55.196.95:3094 -> xxx.yyy.191.14:1433 SYN ******S* Jan 14 23:42:32 61.55.196.95:3098 -> xxx.yyy.191.15:1433 SYN ******S* Jan 14 23:42:32 61.55.196.95:3099 -> xxx.yyy.191.16:1433 SYN ******S* Jan 14 23:42:32 61.55.196.95:3100 -> xxx.yyy.191.17:1433 SYN ******S* Jan 14 23:42:32 61.55.196.95:4659 -> xxx.yyy.190.194:1433 SYN ******S* 27095 Jan 14 15:30:32 81.172.92.31:2065 -> xxx.yyy.1.1:1433 SYN ******S* Jan 14 15:30:32 81.172.92.31:2068 -> xxx.yyy.1.2:1433 SYN ******S* Jan 14 15:30:32 81.172.92.31:2077 -> xxx.yyy.1.5:1433 SYN ******S* Jan 14 15:30:29 81.172.92.31:2086 -> xxx.yyy.1.8:1433 SYN ******S* Jan 14 15:30:29 81.172.92.31:2090 -> xxx.yyy.1.9:1433 SYN ******S* Jan 14 15:30:29 81.172.92.31:2093 -> xxx.yyy.1.10:1433 SYN ******S* Jan 14 15:30:32 81.172.92.31:2096 -> xxx.yyy.1.11:1433 SYN ******S* Jan 14 15:30:29 81.172.92.31:2099 -> xxx.yyy.1.12:1433 SYN ******S* [...] Jan 14 17:06:35 81.172.92.31:1079 -> xxx.yyy.107.247:1433 SYN ******S* Jan 14 17:06:35 81.172.92.31:1077 -> xxx.yyy.107.246:1433 SYN ******S* Jan 14 17:06:36 81.172.92.31:1085 -> xxx.yyy.107.250:1433 SYN ******S* Jan 14 17:06:36 81.172.92.31:1084 -> xxx.yyy.107.249:1433 SYN ******S* Jan 14 17:06:36 81.172.92.31:1087 -> xxx.yyy.107.251:1433 SYN ******S* Jan 14 17:06:36 81.172.92.31:1088 -> xxx.yyy.107.252:1433 SYN ******S* Jan 14 17:06:36 81.172.92.31:1090 -> xxx.yyy.107.253:1433 SYN ******S* Jan 14 17:06:36 81.172.92.31:1094 -> xxx.yyy.107.255:1433 SYN ******S* 19876 Jan 14 01:00:55 64.215.244.5:2452 -> xxx.yyy.1.16:6101 SYN ******S* Jan 14 01:00:55 64.215.244.5:2453 -> xxx.yyy.1.17:6101 SYN ******S* Jan 14 01:00:55 64.215.244.5:2454 -> xxx.yyy.1.18:6101 SYN ******S* Jan 14 01:00:55 64.215.244.5:2455 -> xxx.yyy.1.19:6101 SYN ******S* Jan 14 01:00:55 64.215.244.5:2456 -> xxx.yyy.1.20:6101 SYN ******S* Jan 14 01:00:55 64.215.244.5:2457 -> xxx.yyy.1.21:6101 SYN ******S* Jan 14 01:00:55 64.215.244.5:2458 -> xxx.yyy.1.22:6101 SYN ******S* Jan 14 01:00:55 64.215.244.5:2459 -> xxx.yyy.1.23:6101 SYN ******S* [...] Jan 14 01:01:21 64.215.244.5:2444 -> xxx.yyy.255.238:6101 SYN ******S* Jan 14 01:01:21 64.215.244.5:2445 -> xxx.yyy.255.239:6101 SYN ******S* Jan 14 01:01:21 64.215.244.5:2446 -> xxx.yyy.255.240:6101 SYN ******S* Jan 14 01:01:21 64.215.244.5:2447 -> xxx.yyy.255.241:6101 SYN ******S* Jan 14 01:01:21 64.215.244.5:2457 -> xxx.yyy.255.251:6101 SYN ******S* Jan 14 01:01:21 64.215.244.5:2459 -> xxx.yyy.255.253:6101 SYN ******S* Jan 14 01:01:21 64.215.244.5:2458 -> xxx.yyy.255.252:6101 SYN ******S* Jan 14 01:01:21 64.215.244.5:2460 -> xxx.yyy.255.254:6101 SYN ******S* 17554 [...] 16171 Jan 14 01:25:03 221.160.179.158:1178 -> xxx.yyy.1.104:6106 SYN ******S* Jan 14 01:25:06 221.160.179.158:1179 -> xxx.yyy.1.105:6106 SYN ******S* Jan 14 01:25:06 221.160.179.158:1182 -> xxx.yyy.1.186:6106 SYN ******S* Jan 14 01:25:06 221.160.179.158:1183 -> xxx.yyy.1.187:6106 SYN ******S* Jan 14 01:25:06 221.160.179.158:1184 -> xxx.yyy.1.188:6106 SYN ******S* Jan 14 01:25:06 221.160.179.158:1187 -> xxx.yyy.1.190:6106 SYN ******S* Jan 14 01:25:06 221.160.179.158:1186 -> xxx.yyy.1.189:6106 SYN ******S* Jan 14 01:25:06 221.160.179.158:1401 -> xxx.yyy.4.44:6106 SYN ******S* [...] Jan 14 01:27:02 221.160.179.158:3479 -> xxx.yyy.255.248:6106 SYN ******S* Jan 14 01:27:02 221.160.179.158:3476 -> xxx.yyy.255.245:6106 SYN ******S* Jan 14 01:27:02 221.160.179.158:3470 -> xxx.yyy.255.239:6106 SYN ******S* Jan 14 01:27:02 221.160.179.158:3477 -> xxx.yyy.255.246:6106 SYN ******S* Jan 14 01:27:02 221.160.179.158:3465 -> xxx.yyy.255.234:6106 SYN ******S* Jan 14 01:27:02 221.160.179.158:3474 -> xxx.yyy.255.243:6106 SYN ******S* Jan 14 01:27:02 221.160.179.158:3463 -> xxx.yyy.255.232:6106 SYN ******S* Jan 14 01:27:02 221.160.179.158:3467 -> xxx.yyy.255.236:6106 SYN ******S* Jan 14 01:27:02 221.160.179.158:3461 -> xxx.yyy.255.230:6106 SYN ******S* 15339 Jan 14 23:02:01 222.144.36.194:2397 -> xxx.yyy.153.140:5554 SYN ******S* Jan 14 23:02:02 222.144.36.194:2621 -> xxx.yyy.153.140:1023 SYN ******S* Jan 14 23:02:04 222.144.36.194:2929 -> xxx.yyy.153.140:9898 SYN ******S* Jan 14 23:02:01 222.144.36.194:2400 -> xxx.yyy.153.143:5554 SYN ******S* Jan 14 23:02:02 222.144.36.194:2624 -> xxx.yyy.153.143:1023 SYN ******S* Jan 14 23:02:04 222.144.36.194:2934 -> xxx.yyy.153.143:9898 SYN ******S* Jan 14 23:02:02 222.144.36.194:2399 -> xxx.yyy.153.142:5554 SYN ******S* Jan 14 23:02:02 222.144.36.194:2623 -> xxx.yyy.153.142:1023 SYN ******S* [...] Jan 14 23:03:59 222.144.36.194:4371 -> xxx.yyy.154.198:9898 SYN ******S* Jan 14 23:03:59 222.144.36.194:4370 -> xxx.yyy.154.197:9898 SYN ******S* Jan 14 23:03:59 222.144.36.194:4357 -> xxx.yyy.154.188:9898 SYN ******S* Jan 14 23:03:59 222.144.36.194:4358 -> xxx.yyy.154.189:9898 SYN ******S* Jan 14 23:03:59 222.144.36.194:4361 -> xxx.yyy.154.172:9898 SYN ******S* Jan 14 23:03:59 222.144.36.194:4363 -> xxx.yyy.154.178:9898 SYN ******S* Jan 14 23:03:59 222.144.36.194:4368 -> xxx.yyy.154.195:9898 SYN ******S* Jan 14 23:03:59 222.144.36.194:4391 -> xxx.yyy.154.117:9898 SYN ******S* 12271 [...] 12183 Jan 14 23:54:54 218.88.106.253:3475 -> xxx.yyy.194.125:5554 SYN ******S* Jan 14 23:54:55 218.88.106.253:3190 -> xxx.yyy.194.125:1023 SYN ******S* Jan 14 23:54:57 218.88.106.253:4009 -> xxx.yyy.194.125:9898 SYN ******S* Jan 14 23:54:54 218.88.106.253:3474 -> xxx.yyy.194.124:5554 SYN ******S* Jan 14 23:54:55 218.88.106.253:3184 -> xxx.yyy.194.124:1023 SYN ******S* Jan 14 23:54:57 218.88.106.253:4006 -> xxx.yyy.194.124:9898 SYN ******S* Jan 14 23:54:55 218.88.106.253:2043 -> xxx.yyy.194.131:5554 SYN ******S* Jan 14 23:54:56 218.88.106.253:3762 -> xxx.yyy.194.131:1023 SYN ******S* [...] Jan 14 23:55:55 218.88.106.253:3615 -> xxx.yyy.214.222:9898 SYN ******S* Jan 14 23:55:55 218.88.106.253:2749 -> xxx.yyy.214.239:9898 SYN ******S* Jan 14 23:55:55 218.88.106.253:4550 -> xxx.yyy.214.230:9898 SYN ******S* Jan 14 23:55:55 218.88.106.253:2253 -> xxx.yyy.214.232:9898 SYN ******S* Jan 14 23:55:55 218.88.106.253:2736 -> xxx.yyy.214.238:9898 SYN ******S* Jan 14 23:55:55 218.88.106.253:2853 -> xxx.yyy.214.244:9898 SYN ******S* Jan 14 23:55:55 218.88.106.253:2381 -> xxx.yyy.214.236:9898 SYN ******S* Jan 14 23:55:56 218.88.106.253:2814 -> xxx.yyy.214.242:9898 SYN ******S* 9652 Jan 14 11:46:21 212.88.243.11:4536 -> xxx.yyy.1.2:1433 SYN ******S* Jan 14 11:46:21 212.88.243.11:4538 -> xxx.yyy.1.3:1433 SYN ******S* Jan 14 11:46:21 212.88.243.11:4541 -> xxx.yyy.1.6:1433 SYN ******S* Jan 14 11:46:21 212.88.243.11:4544 -> xxx.yyy.1.8:1433 SYN ******S* Jan 14 11:46:21 212.88.243.11:4545 -> xxx.yyy.1.9:1433 SYN ******S* Jan 14 11:46:21 212.88.243.11:4534 -> xxx.yyy.1.1:1433 SYN ******S* Jan 14 11:46:18 212.88.243.11:4546 -> xxx.yyy.1.10:1433 SYN ******S* Jan 14 11:46:22 212.88.243.11:4549 -> xxx.yyy.1.12:1433 SYN ******S* [...] Jan 14 12:51:55 212.88.243.11:2700 -> xxx.yyy.73.255:1433 SYN ******S* Jan 14 12:51:55 212.88.243.11:2694 -> xxx.yyy.73.252:1433 SYN ******S* Jan 14 12:51:55 212.88.243.11:2695 -> xxx.yyy.73.253:1433 SYN ******S* Jan 14 12:51:55 212.88.243.11:2710 -> xxx.yyy.74.1:1433 SYN ******S* Jan 14 12:51:56 212.88.243.11:2715 -> xxx.yyy.74.4:1433 SYN ******S* Jan 14 12:51:56 212.88.243.11:2712 -> xxx.yyy.74.2:1433 SYN ******S* Jan 14 12:51:56 212.88.243.11:2713 -> xxx.yyy.74.3:1433 SYN ******S* Jan 14 12:51:56 212.88.243.11:2720 -> xxx.yyy.74.5:1433 SYN ******S* 8531 Jan 14 23:06:34 219.91.19.153:3290 -> xxx.yyy.1.0:1433 SYN ******S* Jan 14 23:06:31 219.91.19.153:3291 -> xxx.yyy.1.1:1433 SYN ******S* Jan 14 23:06:34 219.91.19.153:3292 -> xxx.yyy.1.2:1433 SYN ******S* Jan 14 23:06:34 219.91.19.153:3293 -> xxx.yyy.1.3:1433 SYN ******S* Jan 14 23:06:34 219.91.19.153:3294 -> xxx.yyy.1.4:1433 SYN ******S* Jan 14 23:06:34 219.91.19.153:3295 -> xxx.yyy.1.5:1433 SYN ******S* Jan 14 23:06:34 219.91.19.153:3296 -> xxx.yyy.1.6:1433 SYN ******S* Jan 14 23:06:34 219.91.19.153:3297 -> xxx.yyy.1.7:1433 SYN ******S* [...] Jan 14 23:38:01 219.91.19.153:3010 -> xxx.yyy.33.244:1433 SYN ******S* Jan 14 23:38:01 219.91.19.153:3014 -> xxx.yyy.33.247:1433 SYN ******S* Jan 14 23:38:01 219.91.19.153:3013 -> xxx.yyy.33.246:1433 SYN ******S* Jan 14 23:38:01 219.91.19.153:3012 -> xxx.yyy.33.245:1433 SYN ******S* Jan 14 23:38:01 219.91.19.153:3020 -> xxx.yyy.33.252:1433 SYN ******S* Jan 14 23:38:01 219.91.19.153:3018 -> xxx.yyy.33.251:1433 SYN ******S* Jan 14 23:38:01 219.91.19.153:3028 -> xxx.yyy.33.255:1433 SYN ******S* Jan 14 23:38:01 219.91.19.153:3026 -> xxx.yyy.33.254:1433 SYN ******S* 8519 Jan 14 22:42:04 134.117.141.109:1830 -> xxx.yyy.132.33:1433 SYN ******S* Jan 14 22:42:04 134.117.141.109:1831 -> xxx.yyy.132.34:1433 SYN ******S* Jan 14 22:42:04 134.117.141.109:1835 -> xxx.yyy.132.37:1433 SYN ******S* Jan 14 22:42:04 134.117.141.109:1838 -> xxx.yyy.132.40:1433 SYN ******S* Jan 14 22:42:04 134.117.141.109:1842 -> xxx.yyy.132.43:1433 SYN ******S* Jan 14 22:42:04 134.117.141.109:1845 -> xxx.yyy.132.46:1433 SYN ******S* Jan 14 22:42:04 134.117.141.109:1833 -> xxx.yyy.132.35:1433 SYN ******S* Jan 14 22:42:04 134.117.141.109:1836 -> xxx.yyy.132.38:1433 SYN ******S* [...] Jan 14 22:46:44 134.117.141.109:1727 -> xxx.yyy.255.207:1433 SYN ******S* Jan 14 22:46:44 134.117.141.109:1730 -> xxx.yyy.255.209:1433 SYN ******S* Jan 14 22:46:44 134.117.141.109:1733 -> xxx.yyy.255.212:1433 SYN ******S* Jan 14 22:46:44 134.117.141.109:1736 -> xxx.yyy.255.215:1433 SYN ******S* Jan 14 22:46:44 134.117.141.109:1739 -> xxx.yyy.255.218:1433 SYN ******S* Jan 14 22:46:44 134.117.141.109:1742 -> xxx.yyy.255.221:1433 SYN ******S* Jan 14 22:46:44 134.117.141.109:1745 -> xxx.yyy.255.224:1433 SYN ******S* Jan 14 22:46:44 134.117.141.109:1748 -> xxx.yyy.255.227:1433 SYN ******S* Jan 14 22:46:44 134.117.141.109:1751 -> xxx.yyy.255.230:1433 SYN ******S* 8443 Jan 14 22:57:32 222.117.173.138:3479 -> xxx.yyy.153.149:5554 SYN ******S* Jan 14 22:57:35 222.117.173.138:1285 -> xxx.yyy.153.149:9898 SYN ******S* Jan 14 22:57:32 222.117.173.138:3467 -> xxx.yyy.153.138:5554 SYN ******S* Jan 14 22:57:35 222.117.173.138:1275 -> xxx.yyy.153.138:9898 SYN ******S* Jan 14 22:57:32 222.117.173.138:3468 -> xxx.yyy.153.136:5554 SYN ******S* Jan 14 22:57:32 222.117.173.138:3470 -> xxx.yyy.153.140:5554 SYN ******S* Jan 14 22:57:33 222.117.173.138:3943 -> xxx.yyy.153.140:1023 SYN ******S* Jan 14 22:57:35 222.117.173.138:1311 -> xxx.yyy.153.140:9898 SYN ******S* [...] Jan 14 22:58:20 222.117.173.138:4155 -> xxx.yyy.173.239:9898 SYN ******S* Jan 14 22:58:20 222.117.173.138:4228 -> xxx.yyy.173.248:9898 SYN ******S* Jan 14 22:58:20 222.117.173.138:4230 -> xxx.yyy.173.249:9898 SYN ******S* Jan 14 22:58:20 222.117.173.138:4236 -> xxx.yyy.173.252:9898 SYN ******S* Jan 14 22:58:20 222.117.173.138:4238 -> xxx.yyy.173.253:9898 SYN ******S* Jan 14 22:58:20 222.117.173.138:4235 -> xxx.yyy.173.251:9898 SYN ******S* Jan 14 22:58:20 222.117.173.138:4247 -> xxx.yyy.173.254:9898 SYN ******S* Jan 14 22:58:20 222.117.173.138:4249 -> xxx.yyy.174.0:9898 SYN ******S* Jan 14 22:58:20 222.117.173.138:4304 -> xxx.yyy.174.2:9898 SYN ******S* 8053 Jan 14 22:57:38 220.121.244.253:4634 -> xxx.yyy.73.3:5554 SYN ******S* Jan 14 22:57:40 220.121.244.253:2427 -> xxx.yyy.73.3:1023 SYN ******S* Jan 14 22:57:38 220.121.244.253:4646 -> xxx.yyy.72.249:5554 SYN ******S* Jan 14 22:57:38 220.121.244.253:4655 -> xxx.yyy.72.239:5554 SYN ******S* Jan 14 22:57:40 220.121.244.253:2438 -> xxx.yyy.72.239:1023 SYN ******S* Jan 14 22:57:38 220.121.244.253:4657 -> xxx.yyy.72.254:5554 SYN ******S* Jan 14 22:57:40 220.121.244.253:2439 -> xxx.yyy.72.254:1023 SYN ******S* Jan 14 22:57:38 220.121.244.253:4649 -> xxx.yyy.72.246:5554 SYN ******S* [...] Jan 14 22:58:36 220.121.244.253:1160 -> xxx.yyy.92.231:9898 SYN ******S* Jan 14 22:58:36 220.121.244.253:1135 -> xxx.yyy.92.211:9898 SYN ******S* Jan 14 22:58:36 220.121.244.253:1137 -> xxx.yyy.92.210:9898 SYN ******S* Jan 14 22:58:36 220.121.244.253:1139 -> xxx.yyy.92.208:9898 SYN ******S* Jan 14 22:58:36 220.121.244.253:1154 -> xxx.yyy.92.246:9898 SYN ******S* Jan 14 22:58:36 220.121.244.253:4585 -> xxx.yyy.92.240:9898 SYN ******S* Jan 14 22:58:36 220.121.244.253:4710 -> xxx.yyy.92.242:9898 SYN ******S* Jan 14 22:58:36 220.121.244.253:4700 -> xxx.yyy.92.235:9898 SYN ******S* 7998 [...] 7799 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions