[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Jan 18 03:52:36 62.146.24.226:2456 -> xxx.yyy.1.1:6101 SYN ******S* Jan 18 03:52:36 62.146.24.226:2457 -> xxx.yyy.1.2:6101 SYN ******S* Jan 18 03:52:36 62.146.24.226:2459 -> xxx.yyy.1.3:6101 SYN ******S* Jan 18 03:52:36 62.146.24.226:2460 -> xxx.yyy.1.4:6101 SYN ******S* Jan 18 03:52:36 62.146.24.226:2462 -> xxx.yyy.1.5:6101 SYN ******S* Jan 18 03:52:36 62.146.24.226:2463 -> xxx.yyy.1.6:6101 SYN ******S* Jan 18 03:52:36 62.146.24.226:2465 -> xxx.yyy.1.7:6101 SYN ******S* Jan 18 03:52:36 62.146.24.226:2466 -> xxx.yyy.1.8:6101 SYN ******S* [...] Jan 18 04:34:15 62.146.24.226:1885 -> xxx.yyy.255.246:6101 SYN ******S* Jan 18 04:34:15 62.146.24.226:1849 -> xxx.yyy.255.211:6101 SYN ******S* Jan 18 04:34:15 62.146.24.226:1892 -> xxx.yyy.255.253:6101 SYN ******S* Jan 18 04:34:15 62.146.24.226:1886 -> xxx.yyy.255.247:6101 SYN ******S* Jan 18 04:34:15 62.146.24.226:1850 -> xxx.yyy.255.212:6101 SYN ******S* Jan 18 04:34:15 62.146.24.226:1847 -> xxx.yyy.255.209:6101 SYN ******S* Jan 18 04:34:15 62.146.24.226:1851 -> xxx.yyy.255.213:6101 SYN ******S* Jan 18 04:34:15 62.146.24.226:1887 -> xxx.yyy.255.248:6101 SYN ******S* Jan 18 04:34:15 62.146.24.226:1848 -> xxx.yyy.255.210:6101 SYN ******S* 74019 Jan 18 05:57:40 216.138.82.118:3392 -> xxx.yyy.1.1:42 SYN ******S* Jan 18 05:57:40 216.138.82.118:3393 -> xxx.yyy.1.2:42 SYN ******S* Jan 18 05:57:40 216.138.82.118:3394 -> xxx.yyy.1.3:42 SYN ******S* Jan 18 05:57:37 216.138.82.118:3395 -> xxx.yyy.1.4:42 SYN ******S* Jan 18 05:57:37 216.138.82.118:3396 -> xxx.yyy.1.5:42 SYN ******S* Jan 18 05:57:40 216.138.82.118:3397 -> xxx.yyy.1.6:42 SYN ******S* Jan 18 05:57:40 216.138.82.118:3398 -> xxx.yyy.1.7:42 SYN ******S* Jan 18 05:57:40 216.138.82.118:3399 -> xxx.yyy.1.8:42 SYN ******S* [...] Jan 18 06:09:19 216.138.82.118:2405 -> xxx.yyy.255.240:42 SYN ******S* Jan 18 06:09:19 216.138.82.118:2433 -> xxx.yyy.255.254:42 SYN ******S* Jan 18 06:09:19 216.138.82.118:2429 -> xxx.yyy.255.252:42 SYN ******S* Jan 18 06:09:19 216.138.82.118:2422 -> xxx.yyy.255.249:42 SYN ******S* Jan 18 06:09:19 216.138.82.118:2428 -> xxx.yyy.255.251:42 SYN ******S* Jan 18 06:09:19 216.138.82.118:2421 -> xxx.yyy.255.248:42 SYN ******S* Jan 18 06:09:19 216.138.82.118:2423 -> xxx.yyy.255.250:42 SYN ******S* Jan 18 06:09:19 216.138.82.118:2430 -> xxx.yyy.255.253:42 SYN ******S* 71642 Jan 18 02:50:26 65.41.172.15:2180 -> xxx.yyy.1.0:1433 SYN ******S* Jan 18 02:50:29 65.41.172.15:2181 -> xxx.yyy.1.1:1433 SYN ******S* Jan 18 02:50:29 65.41.172.15:2182 -> xxx.yyy.1.2:1433 SYN ******S* Jan 18 02:50:29 65.41.172.15:2183 -> xxx.yyy.1.3:1433 SYN ******S* Jan 18 02:50:29 65.41.172.15:2184 -> xxx.yyy.1.4:1433 SYN ******S* Jan 18 02:50:29 65.41.172.15:2185 -> xxx.yyy.1.5:1433 SYN ******S* Jan 18 02:50:29 65.41.172.15:2186 -> xxx.yyy.1.6:1433 SYN ******S* Jan 18 02:50:29 65.41.172.15:2187 -> xxx.yyy.1.7:1433 SYN ******S* [...] Jan 18 03:02:47 65.41.172.15:1376 -> xxx.yyy.255.239:1433 SYN ******S* Jan 18 03:02:47 65.41.172.15:1383 -> xxx.yyy.255.246:1433 SYN ******S* Jan 18 03:02:47 65.41.172.15:1390 -> xxx.yyy.255.253:1433 SYN ******S* Jan 18 03:02:47 65.41.172.15:1387 -> xxx.yyy.255.250:1433 SYN ******S* Jan 18 03:02:47 65.41.172.15:1391 -> xxx.yyy.255.254:1433 SYN ******S* Jan 18 03:02:47 65.41.172.15:1388 -> xxx.yyy.255.251:1433 SYN ******S* Jan 18 03:02:47 65.41.172.15:1389 -> xxx.yyy.255.252:1433 SYN ******S* Jan 18 03:02:47 65.41.172.15:1386 -> xxx.yyy.255.249:1433 SYN ******S* 71462 Jan 18 01:52:36 217.117.230.157:43018 -> xxx.yyy.1.1:139 SYN ******S* Jan 18 01:52:36 217.117.230.157:43019 -> xxx.yyy.1.2:139 SYN ******S* Jan 18 01:52:36 217.117.230.157:43020 -> xxx.yyy.1.3:139 SYN ******S* Jan 18 01:52:36 217.117.230.157:43023 -> xxx.yyy.1.4:139 SYN ******S* Jan 18 01:52:36 217.117.230.157:43029 -> xxx.yyy.1.6:139 SYN ******S* Jan 18 01:52:36 217.117.230.157:43026 -> xxx.yyy.1.5:139 SYN ******S* Jan 18 01:52:36 217.117.230.157:43031 -> xxx.yyy.1.8:139 SYN ******S* Jan 18 01:52:36 217.117.230.157:43033 -> xxx.yyy.1.10:139 SYN ******S* [...] Jan 18 02:04:24 217.117.230.157:52524 -> xxx.yyy.255.216:139 SYN ******S* Jan 18 02:04:24 217.117.230.157:52526 -> xxx.yyy.255.218:139 SYN ******S* Jan 18 02:04:24 217.117.230.157:52532 -> xxx.yyy.255.220:139 SYN ******S* Jan 18 02:04:24 217.117.230.157:52536 -> xxx.yyy.255.222:139 SYN ******S* Jan 18 02:04:24 217.117.230.157:52533 -> xxx.yyy.255.221:139 SYN ******S* Jan 18 02:04:24 217.117.230.157:52537 -> xxx.yyy.255.223:139 SYN ******S* Jan 18 02:04:25 217.117.230.157:52582 -> xxx.yyy.255.242:139 SYN ******S* Jan 18 02:04:25 217.117.230.157:52590 -> xxx.yyy.255.248:139 SYN ******S* Jan 18 02:04:25 217.117.230.157:52589 -> xxx.yyy.255.247:139 SYN ******S* 69269 Jan 18 08:21:45 67.108.156.194:3599 -> xxx.yyy.1.1:1433 SYN ******S* Jan 18 08:21:45 67.108.156.194:3600 -> xxx.yyy.1.2:1433 SYN ******S* Jan 18 08:21:45 67.108.156.194:3601 -> xxx.yyy.1.3:1433 SYN ******S* Jan 18 08:21:45 67.108.156.194:3602 -> xxx.yyy.1.4:1433 SYN ******S* Jan 18 08:21:45 67.108.156.194:3603 -> xxx.yyy.1.5:1433 SYN ******S* Jan 18 08:21:45 67.108.156.194:3604 -> xxx.yyy.1.6:1433 SYN ******S* Jan 18 08:21:45 67.108.156.194:3605 -> xxx.yyy.1.7:1433 SYN ******S* Jan 18 08:21:42 67.108.156.194:3607 -> xxx.yyy.1.9:1433 SYN ******S* [...] Jan 18 08:33:23 67.108.156.194:2238 -> xxx.yyy.255.238:1433 SYN ******S* Jan 18 08:33:23 67.108.156.194:2235 -> xxx.yyy.255.235:1433 SYN ******S* Jan 18 08:33:23 67.108.156.194:2245 -> xxx.yyy.255.245:1433 SYN ******S* Jan 18 08:33:23 67.108.156.194:2244 -> xxx.yyy.255.244:1433 SYN ******S* Jan 18 08:33:23 67.108.156.194:2246 -> xxx.yyy.255.246:1433 SYN ******S* Jan 18 08:33:23 67.108.156.194:2252 -> xxx.yyy.255.252:1433 SYN ******S* Jan 18 08:33:23 67.108.156.194:2253 -> xxx.yyy.255.253:1433 SYN ******S* Jan 18 08:33:23 67.108.156.194:2254 -> xxx.yyy.255.254:1433 SYN ******S* 63815 Jan 18 14:08:26 82.233.27.93:4855 -> xxx.yyy.1.1:6129 SYN ******S* Jan 18 14:08:25 82.233.27.93:4859 -> xxx.yyy.1.4:6129 SYN ******S* Jan 18 14:08:25 82.233.27.93:4863 -> xxx.yyy.1.8:6129 SYN ******S* Jan 18 14:08:28 82.233.27.93:4865 -> xxx.yyy.1.10:6129 SYN ******S* Jan 18 14:08:28 82.233.27.93:4867 -> xxx.yyy.1.12:6129 SYN ******S* Jan 18 14:08:25 82.233.27.93:4870 -> xxx.yyy.1.15:6129 SYN ******S* Jan 18 14:08:25 82.233.27.93:4872 -> xxx.yyy.1.17:6129 SYN ******S* Jan 18 14:08:25 82.233.27.93:4873 -> xxx.yyy.1.18:6129 SYN ******S* [...] Jan 18 14:32:35 82.233.27.93:3811 -> xxx.yyy.255.239:6129 SYN ******S* Jan 18 14:32:35 82.233.27.93:3802 -> xxx.yyy.255.234:6129 SYN ******S* Jan 18 14:32:35 82.233.27.93:3812 -> xxx.yyy.255.240:6129 SYN ******S* Jan 18 14:32:35 82.233.27.93:3820 -> xxx.yyy.255.247:6129 SYN ******S* Jan 18 14:32:35 82.233.27.93:3817 -> xxx.yyy.255.244:6129 SYN ******S* Jan 18 14:32:35 82.233.27.93:3813 -> xxx.yyy.255.241:6129 SYN ******S* Jan 18 14:32:35 82.233.27.93:3821 -> xxx.yyy.255.248:6129 SYN ******S* Jan 18 14:32:35 82.233.27.93:3827 -> xxx.yyy.255.253:6129 SYN ******S* 49192 Jan 18 01:23:16 193.171.249.30:4873 -> xxx.yyy.1.1:3306 SYN ******S* Jan 18 01:23:18 193.171.249.30:4877 -> xxx.yyy.1.2:3306 SYN ******S* Jan 18 01:23:16 193.171.249.30:4878 -> xxx.yyy.1.3:3306 SYN ******S* Jan 18 01:23:19 193.171.249.30:4879 -> xxx.yyy.1.4:3306 SYN ******S* Jan 18 01:23:19 193.171.249.30:4883 -> xxx.yyy.1.6:3306 SYN ******S* Jan 18 01:23:16 193.171.249.30:4884 -> xxx.yyy.1.7:3306 SYN ******S* Jan 18 01:23:16 193.171.249.30:4886 -> xxx.yyy.1.9:3306 SYN ******S* Jan 18 01:23:16 193.171.249.30:4887 -> xxx.yyy.1.10:3306 SYN ******S* [...] Jan 18 01:34:17 193.171.249.30:1219 -> xxx.yyy.255.205:3306 SYN ******S* Jan 18 01:34:17 193.171.249.30:1235 -> xxx.yyy.255.219:3306 SYN ******S* Jan 18 01:34:17 193.171.249.30:1226 -> xxx.yyy.255.210:3306 SYN ******S* Jan 18 01:34:17 193.171.249.30:1245 -> xxx.yyy.255.229:3306 SYN ******S* Jan 18 01:34:17 193.171.249.30:1239 -> xxx.yyy.255.223:3306 SYN ******S* Jan 18 01:34:17 193.171.249.30:1236 -> xxx.yyy.255.220:3306 SYN ******S* Jan 18 01:34:18 193.171.249.30:1267 -> xxx.yyy.255.251:3306 SYN ******S* Jan 18 01:34:18 193.171.249.30:1268 -> xxx.yyy.255.252:3306 SYN ******S* 46181 Jan 18 14:44:31 216.26.144.159:2460 -> xxx.yyy.1.1:4899 SYN ******S* Jan 18 14:44:30 216.26.144.159:2461 -> xxx.yyy.1.2:4899 SYN ******S* Jan 18 14:44:31 216.26.144.159:2462 -> xxx.yyy.1.3:4899 SYN ******S* Jan 18 14:44:33 216.26.144.159:2463 -> xxx.yyy.1.4:4899 SYN ******S* Jan 18 14:44:33 216.26.144.159:2464 -> xxx.yyy.1.5:4899 SYN ******S* Jan 18 14:44:33 216.26.144.159:2469 -> xxx.yyy.1.10:4899 SYN ******S* Jan 18 14:44:30 216.26.144.159:2476 -> xxx.yyy.1.17:4899 SYN ******S* Jan 18 14:44:31 216.26.144.159:2479 -> xxx.yyy.1.20:4899 SYN ******S* [...] Jan 18 15:09:20 216.26.144.159:1242 -> xxx.yyy.255.177:4899 SYN ******S* Jan 18 15:09:20 216.26.144.159:1226 -> xxx.yyy.255.161:4899 SYN ******S* Jan 18 15:09:20 216.26.144.159:1306 -> xxx.yyy.255.241:4899 SYN ******S* Jan 18 15:09:20 216.26.144.159:1316 -> xxx.yyy.255.251:4899 SYN ******S* Jan 18 15:09:20 216.26.144.159:1284 -> xxx.yyy.255.219:4899 SYN ******S* Jan 18 15:09:20 216.26.144.159:1255 -> xxx.yyy.255.190:4899 SYN ******S* Jan 18 15:09:20 216.26.144.159:1290 -> xxx.yyy.255.225:4899 SYN ******S* Jan 18 15:09:20 216.26.144.159:1258 -> xxx.yyy.255.193:4899 SYN ******S* 36514 [...] 35372 Jan 18 08:32:57 221.146.64.200:2561 -> xxx.yyy.1.4:4899 SYN ******S* Jan 18 08:32:59 221.146.64.200:2558 -> xxx.yyy.1.1:4899 SYN ******S* Jan 18 08:32:59 221.146.64.200:2559 -> xxx.yyy.1.2:4899 SYN ******S* Jan 18 08:32:57 221.146.64.200:2564 -> xxx.yyy.1.7:4899 SYN ******S* Jan 18 08:32:59 221.146.64.200:2566 -> xxx.yyy.1.9:4899 SYN ******S* Jan 18 08:32:59 221.146.64.200:2568 -> xxx.yyy.1.11:4899 SYN ******S* Jan 18 08:32:57 221.146.64.200:2563 -> xxx.yyy.1.6:4899 SYN ******S* Jan 18 08:32:57 221.146.64.200:2570 -> xxx.yyy.1.13:4899 SYN ******S* [...] Jan 18 08:36:11 221.146.64.200:4022 -> xxx.yyy.253.61:4899 SYN ******S* Jan 18 08:36:11 221.146.64.200:3909 -> xxx.yyy.253.3:4899 SYN ******S* Jan 18 08:36:11 221.146.64.200:4040 -> xxx.yyy.253.71:4899 SYN ******S* Jan 18 08:36:11 221.146.64.200:4058 -> xxx.yyy.253.80:4899 SYN ******S* Jan 18 08:36:11 221.146.64.200:4042 -> xxx.yyy.253.73:4899 SYN ******S* Jan 18 08:36:11 221.146.64.200:4003 -> xxx.yyy.253.51:4899 SYN ******S* Jan 18 08:36:13 221.146.64.200:4630 -> xxx.yyy.254.58:4899 SYN ******S* Jan 18 08:36:13 221.146.64.200:4638 -> xxx.yyy.254.59:4899 SYN ******S* Jan 18 08:36:13 221.146.64.200:4645 -> xxx.yyy.254.60:4899 SYN ******S* 33396 Jan 18 13:43:09 210.90.78.170:3859 -> xxx.yyy.1.1:1433 SYN ******S* Jan 18 13:43:06 210.90.78.170:3862 -> xxx.yyy.1.4:1433 SYN ******S* Jan 18 13:43:06 210.90.78.170:3864 -> xxx.yyy.1.6:1433 SYN ******S* Jan 18 13:43:09 210.90.78.170:3866 -> xxx.yyy.1.8:1433 SYN ******S* Jan 18 13:43:07 210.90.78.170:3869 -> xxx.yyy.1.11:1433 SYN ******S* Jan 18 13:43:07 210.90.78.170:3870 -> xxx.yyy.1.12:1433 SYN ******S* Jan 18 13:43:07 210.90.78.170:3875 -> xxx.yyy.1.17:1433 SYN ******S* Jan 18 13:43:10 210.90.78.170:3876 -> xxx.yyy.1.18:1433 SYN ******S* [...] Jan 18 13:54:19 210.90.78.170:4745 -> xxx.yyy.255.230:1433 SYN ******S* Jan 18 13:54:19 210.90.78.170:4741 -> xxx.yyy.255.226:1433 SYN ******S* Jan 18 13:54:19 210.90.78.170:4744 -> xxx.yyy.255.229:1433 SYN ******S* Jan 18 13:54:19 210.90.78.170:4747 -> xxx.yyy.255.232:1433 SYN ******S* Jan 18 13:54:19 210.90.78.170:4740 -> xxx.yyy.255.225:1433 SYN ******S* Jan 18 13:54:19 210.90.78.170:4752 -> xxx.yyy.255.237:1433 SYN ******S* Jan 18 13:54:19 210.90.78.170:4764 -> xxx.yyy.255.249:1433 SYN ******S* Jan 18 13:54:19 210.90.78.170:4759 -> xxx.yyy.255.244:1433 SYN ******S* Jan 18 13:54:19 210.90.78.170:4767 -> xxx.yyy.255.252:1433 SYN ******S* 33135 Jan 18 07:52:55 82.51.13.170:3632 -> xxx.yyy.1.0:6588 SYN ******S* Jan 18 07:52:55 82.51.13.170:3633 -> xxx.yyy.1.0:443 SYN ******S* Jan 18 07:52:55 82.51.13.170:3634 -> xxx.yyy.1.0:8021 SYN ******S* Jan 18 07:52:55 82.51.13.170:3635 -> xxx.yyy.1.0:8888 SYN ******S* Jan 18 07:52:55 82.51.13.170:3637 -> xxx.yyy.1.1:80 SYN ******S* Jan 18 07:52:55 82.51.13.170:3638 -> xxx.yyy.1.1:1080 SYN ******S* Jan 18 07:52:55 82.51.13.170:3639 -> xxx.yyy.1.1:3128 SYN ******S* Jan 18 07:52:55 82.51.13.170:3641 -> xxx.yyy.1.1:6588 SYN ******S* [...] Jan 18 08:53:36 82.51.13.170:1055 -> xxx.yyy.14.41:80 SYN ******S* Jan 18 08:53:37 82.51.13.170:1062 -> xxx.yyy.16.6:443 SYN ******S* Jan 18 08:53:37 82.51.13.170:1082 -> xxx.yyy.16.8:80 SYN ******S* Jan 18 08:53:37 82.51.13.170:1086 -> xxx.yyy.16.9:80 SYN ******S* Jan 18 08:53:37 82.51.13.170:1095 -> xxx.yyy.16.10:80 SYN ******S* Jan 18 08:53:37 82.51.13.170:4940 -> xxx.yyy.1.29:443 SYN ******S* Jan 18 08:53:37 82.51.13.170:1109 -> xxx.yyy.1.62:80 SYN ******S* Jan 18 08:53:39 82.51.13.170:1029 -> xxx.yyy.1.61:443 SYN ******S* Jan 18 08:53:39 82.51.13.170:1153 -> xxx.yyy.16.11:443 SYN ******S* 31341 Jan 18 00:00:04 61.152.226.114:30853 -> xxx.yyy.191.46:1433 SYN ******S* Jan 18 00:00:05 61.152.226.114:34457 -> xxx.yyy.191.16:1433 SYN ******S* Jan 18 00:00:05 61.152.226.114:31420 -> xxx.yyy.191.50:1433 SYN ******S* Jan 18 00:00:05 61.152.226.114:30622 -> xxx.yyy.191.52:1433 SYN ******S* Jan 18 00:00:05 61.152.226.114:30699 -> xxx.yyy.191.53:1433 SYN ******S* Jan 18 00:00:05 61.152.226.114:34475 -> xxx.yyy.191.61:1433 SYN ******S* Jan 18 00:00:05 61.152.226.114:33872 -> xxx.yyy.191.65:1433 SYN ******S* Jan 18 00:00:08 61.152.226.114:34262 -> xxx.yyy.191.67:1433 SYN ******S* [...] Jan 18 00:58:19 61.152.226.114:43191 -> xxx.yyy.255.245:1433 SYN ******S* Jan 18 00:58:19 61.152.226.114:45542 -> xxx.yyy.255.246:1433 SYN ******S* Jan 18 00:58:19 61.152.226.114:46199 -> xxx.yyy.255.247:1433 SYN ******S* Jan 18 00:58:19 61.152.226.114:45364 -> xxx.yyy.255.248:1433 SYN ******S* Jan 18 00:58:19 61.152.226.114:40580 -> xxx.yyy.255.249:1433 SYN ******S* Jan 18 00:58:20 61.152.226.114:41080 -> xxx.yyy.255.251:1433 SYN ******S* Jan 18 00:58:20 61.152.226.114:40209 -> xxx.yyy.255.253:1433 SYN ******S* Jan 18 00:58:20 61.152.226.114:44107 -> xxx.yyy.255.252:1433 SYN ******S* Jan 18 00:58:20 61.152.226.114:44738 -> xxx.yyy.255.254:1433 SYN ******S* 27696 Jan 18 12:36:34 193.248.217.124:3780 -> xxx.yyy.91.251:1433 SYN ******S* Jan 18 12:36:34 193.248.217.124:3786 -> xxx.yyy.91.253:1433 SYN ******S* Jan 18 12:36:31 193.248.217.124:3829 -> xxx.yyy.92.9:1433 SYN ******S* Jan 18 12:36:31 193.248.217.124:3832 -> xxx.yyy.92.10:1433 SYN ******S* Jan 18 12:36:31 193.248.217.124:3844 -> xxx.yyy.92.14:1433 SYN ******S* Jan 18 12:36:31 193.248.217.124:3841 -> xxx.yyy.92.13:1433 SYN ******S* Jan 18 12:36:31 193.248.217.124:3847 -> xxx.yyy.92.15:1433 SYN ******S* Jan 18 12:36:31 193.248.217.124:3859 -> xxx.yyy.92.19:1433 SYN ******S* [...] Jan 18 14:23:51 193.248.217.124:4659 -> xxx.yyy.210.211:1433 SYN ******S* Jan 18 14:23:51 193.248.217.124:4695 -> xxx.yyy.210.217:1433 SYN ******S* Jan 18 14:23:51 193.248.217.124:4587 -> xxx.yyy.210.200:1433 SYN ******S* Jan 18 14:23:51 193.248.217.124:4881 -> xxx.yyy.210.238:1433 SYN ******S* Jan 18 14:23:51 193.248.217.124:4678 -> xxx.yyy.210.214:1433 SYN ******S* Jan 18 14:23:51 193.248.217.124:4882 -> xxx.yyy.210.239:1433 SYN ******S* Jan 18 14:23:51 193.248.217.124:4885 -> xxx.yyy.210.240:1433 SYN ******S* Jan 18 14:23:51 193.248.217.124:4693 -> xxx.yyy.210.216:1433 SYN ******S* Jan 18 14:23:52 193.248.217.124:4790 -> xxx.yyy.210.227:1433 SYN ******S* 26237 Jan 18 15:50:37 194.219.232.8:4340 -> xxx.yyy.1.3:21 SYN ******S* Jan 18 15:50:37 194.219.232.8:4341 -> xxx.yyy.1.4:21 SYN ******S* Jan 18 15:50:37 194.219.232.8:4343 -> xxx.yyy.1.6:21 SYN ******S* Jan 18 15:50:37 194.219.232.8:4342 -> xxx.yyy.1.5:21 SYN ******S* Jan 18 15:50:37 194.219.232.8:4344 -> xxx.yyy.1.7:21 SYN ******S* Jan 18 15:50:37 194.219.232.8:4347 -> xxx.yyy.1.10:21 SYN ******S* Jan 18 15:50:37 194.219.232.8:4349 -> xxx.yyy.1.12:21 SYN ******S* Jan 18 15:50:37 194.219.232.8:4350 -> xxx.yyy.1.13:21 SYN ******S* [...] Jan 18 16:10:33 194.219.232.8:3731 -> xxx.yyy.255.148:21 SYN ******S* Jan 18 16:10:34 194.219.232.8:3760 -> xxx.yyy.255.177:21 SYN ******S* Jan 18 16:10:34 194.219.232.8:3824 -> xxx.yyy.255.241:21 SYN ******S* Jan 18 16:10:34 194.219.232.8:3792 -> xxx.yyy.255.209:21 SYN ******S* Jan 18 16:10:34 194.219.232.8:3834 -> xxx.yyy.255.251:21 SYN ******S* Jan 18 16:10:34 194.219.232.8:3802 -> xxx.yyy.255.219:21 SYN ******S* Jan 18 16:10:34 194.219.232.8:3770 -> xxx.yyy.255.187:21 SYN ******S* Jan 18 16:10:34 194.219.232.8:3786 -> xxx.yyy.255.203:21 SYN ******S* Jan 18 16:10:34 194.219.232.8:3777 -> xxx.yyy.255.194:21 SYN ******S* 21129 Jan 18 11:18:13 62.166.141.60:41147 -> xxx.yyy.1.1:139 SYN ******S* Jan 18 11:18:14 62.166.141.60:41149 -> xxx.yyy.1.3:139 SYN ******S* Jan 18 11:18:14 62.166.141.60:41150 -> xxx.yyy.1.4:139 SYN ******S* Jan 18 11:18:14 62.166.141.60:41151 -> xxx.yyy.1.5:139 SYN ******S* Jan 18 11:18:14 62.166.141.60:41152 -> xxx.yyy.1.6:139 SYN ******S* Jan 18 11:18:14 62.166.141.60:41154 -> xxx.yyy.1.8:139 SYN ******S* Jan 18 11:18:14 62.166.141.60:41155 -> xxx.yyy.1.9:139 SYN ******S* Jan 18 11:18:14 62.166.141.60:41157 -> xxx.yyy.1.11:139 SYN ******S* [...] Jan 18 11:30:18 62.166.141.60:41994 -> xxx.yyy.255.224:139 SYN ******S* Jan 18 11:30:18 62.166.141.60:41995 -> xxx.yyy.255.225:139 SYN ******S* Jan 18 11:30:18 62.166.141.60:41997 -> xxx.yyy.255.227:139 SYN ******S* Jan 18 11:30:18 62.166.141.60:42003 -> xxx.yyy.255.232:139 SYN ******S* Jan 18 11:30:18 62.166.141.60:42013 -> xxx.yyy.255.242:139 SYN ******S* Jan 18 11:30:18 62.166.141.60:42014 -> xxx.yyy.255.243:139 SYN ******S* Jan 18 11:30:18 62.166.141.60:42019 -> xxx.yyy.255.248:139 SYN ******S* Jan 18 11:30:18 62.166.141.60:42020 -> xxx.yyy.255.249:139 SYN ******S* Jan 18 11:30:18 62.166.141.60:42023 -> xxx.yyy.255.252:139 SYN ******S* 20734 Jan 18 14:54:34 200.213.207.211:2511 -> xxx.yyy.1.0:17300 SYN ******S* Jan 18 14:54:36 200.213.207.211:2718 -> xxx.yyy.1.6:17300 SYN ******S* Jan 18 14:54:36 200.213.207.211:2722 -> xxx.yyy.1.10:17300 SYN ******S* Jan 18 14:54:36 200.213.207.211:2724 -> xxx.yyy.1.12:17300 SYN ******S* Jan 18 14:54:36 200.213.207.211:2730 -> xxx.yyy.1.18:17300 SYN ******S* Jan 18 14:54:38 200.213.207.211:2731 -> xxx.yyy.1.19:17300 SYN ******S* Jan 18 14:54:37 200.213.207.211:2714 -> xxx.yyy.1.2:17300 SYN ******S* Jan 18 14:54:38 200.213.207.211:2715 -> xxx.yyy.1.3:17300 SYN ******S* [...] Jan 18 16:48:02 200.213.207.211:3258 -> xxx.yyy.254.240:17300 SYN ******S* Jan 18 16:48:02 200.213.207.211:3260 -> xxx.yyy.254.242:17300 SYN ******S* Jan 18 16:48:02 200.213.207.211:3261 -> xxx.yyy.254.243:17300 SYN ******S* Jan 18 16:48:02 200.213.207.211:3264 -> xxx.yyy.254.246:17300 SYN ******S* Jan 18 16:48:02 200.213.207.211:3267 -> xxx.yyy.254.249:17300 SYN ******S* Jan 18 16:48:02 200.213.207.211:3268 -> xxx.yyy.254.250:17300 SYN ******S* Jan 18 16:48:02 200.213.207.211:3269 -> xxx.yyy.254.251:17300 SYN ******S* Jan 18 16:48:03 200.213.207.211:3471 -> xxx.yyy.254.253:17300 SYN ******S* 20316 Jan 18 22:20:42 221.255.121.203:2483 -> xxx.yyy.1.1:1433 SYN ******S* Jan 18 22:20:42 221.255.121.203:2486 -> xxx.yyy.1.4:1433 SYN ******S* Jan 18 22:20:42 221.255.121.203:2487 -> xxx.yyy.1.5:1433 SYN ******S* Jan 18 22:20:42 221.255.121.203:2490 -> xxx.yyy.1.6:1433 SYN ******S* Jan 18 22:20:42 221.255.121.203:2491 -> xxx.yyy.1.7:1433 SYN ******S* Jan 18 22:20:42 221.255.121.203:2493 -> xxx.yyy.1.9:1433 SYN ******S* Jan 18 22:20:42 221.255.121.203:2498 -> xxx.yyy.1.14:1433 SYN ******S* Jan 18 22:20:42 221.255.121.203:2495 -> xxx.yyy.1.11:1433 SYN ******S* [...] Jan 18 22:31:22 221.255.121.203:2458 -> xxx.yyy.255.232:1433 SYN ******S* Jan 18 22:31:22 221.255.121.203:2460 -> xxx.yyy.255.234:1433 SYN ******S* Jan 18 22:31:22 221.255.121.203:2464 -> xxx.yyy.255.238:1433 SYN ******S* Jan 18 22:31:22 221.255.121.203:2471 -> xxx.yyy.255.245:1433 SYN ******S* Jan 18 22:31:22 221.255.121.203:2473 -> xxx.yyy.255.247:1433 SYN ******S* Jan 18 22:31:22 221.255.121.203:2474 -> xxx.yyy.255.248:1433 SYN ******S* Jan 18 22:31:22 221.255.121.203:2475 -> xxx.yyy.255.249:1433 SYN ******S* Jan 18 22:31:22 221.255.121.203:2478 -> xxx.yyy.255.252:1433 SYN ******S* Jan 18 22:31:22 221.255.121.203:2480 -> xxx.yyy.255.253:1433 SYN ******S* 19219 Jan 18 07:24:50 221.9.35.208:4018 -> xxx.yyy.1.2:1433 SYN ******S* Jan 18 07:24:51 221.9.35.208:3380 -> xxx.yyy.1.16:1433 SYN ******S* Jan 18 07:24:51 221.9.35.208:3226 -> xxx.yyy.1.27:1433 SYN ******S* Jan 18 07:24:51 221.9.35.208:3684 -> xxx.yyy.1.30:1433 SYN ******S* Jan 18 07:24:52 221.9.35.208:3555 -> xxx.yyy.1.36:1433 SYN ******S* Jan 18 07:24:52 221.9.35.208:3294 -> xxx.yyy.1.37:1433 SYN ******S* Jan 18 07:24:52 221.9.35.208:4194 -> xxx.yyy.1.38:1433 SYN ******S* Jan 18 07:24:52 221.9.35.208:3500 -> xxx.yyy.1.39:1433 SYN ******S* [...] Jan 18 08:23:12 221.9.35.208:4234 -> xxx.yyy.111.246:1433 SYN ******S* Jan 18 08:23:13 221.9.35.208:4979 -> xxx.yyy.111.247:1433 SYN ******S* Jan 18 08:23:13 221.9.35.208:4976 -> xxx.yyy.111.248:1433 SYN ******S* Jan 18 08:23:13 221.9.35.208:4180 -> xxx.yyy.111.249:1433 SYN ******S* Jan 18 08:23:14 221.9.35.208:4342 -> xxx.yyy.111.251:1433 SYN ******S* Jan 18 08:23:14 221.9.35.208:3509 -> xxx.yyy.111.250:1433 SYN ******S* Jan 18 08:23:14 221.9.35.208:3273 -> xxx.yyy.111.254:1433 SYN ******S* Jan 18 08:23:14 221.9.35.208:3377 -> xxx.yyy.111.255:1433 SYN ******S* 16781 Jan 18 11:53:25 207.18.68.225:80 -> xxx.yyy.1.3:80 SYN ******S* Jan 18 11:53:25 207.18.68.225:80 -> xxx.yyy.1.12:80 SYN ******S* Jan 18 11:53:26 207.18.68.225:56868 -> xxx.yyy.1.15:80 SYN ******S* Jan 18 11:53:26 207.18.68.225:56773 -> xxx.yyy.1.17:80 SYN ******S* Jan 18 11:53:26 207.18.68.225:56790 -> xxx.yyy.1.20:80 SYN ******S* Jan 18 11:53:27 207.18.68.225:56893 -> xxx.yyy.1.27:80 SYN ******S* Jan 18 11:53:25 207.18.68.225:80 -> xxx.yyy.1.49:80 SYN ******S* Jan 18 11:53:25 207.18.68.225:80 -> xxx.yyy.1.51:80 SYN ******S* [...] Jan 18 11:55:02 207.18.68.225:57517 -> xxx.yyy.220.98:80 SYN ******S* Jan 18 11:55:02 207.18.68.225:57518 -> xxx.yyy.220.68:80 SYN ******S* Jan 18 11:55:07 207.18.68.225:57529 -> xxx.yyy.248.33:80 SYN ******S* Jan 18 11:55:07 207.18.68.225:57531 -> xxx.yyy.248.45:80 SYN ******S* Jan 18 11:55:07 207.18.68.225:57535 -> xxx.yyy.248.165:80 SYN ******S* Jan 18 11:55:10 207.18.68.225:57537 -> xxx.yyy.210.5:80 SYN ******S* Jan 18 11:55:12 207.18.68.225:57538 -> xxx.yyy.220.98:80 SYN ******S* Jan 18 11:55:12 207.18.68.225:57539 -> xxx.yyy.220.68:80 SYN ******S* 15020 [...] 14415 [...] 13043 Jan 18 11:44:32 66.139.75.22:2091 -> xxx.yyy.1.2:3306 SYN ******S* Jan 18 11:44:32 66.139.75.22:2094 -> xxx.yyy.1.5:3306 SYN ******S* Jan 18 11:44:32 66.139.75.22:2095 -> xxx.yyy.1.6:3306 SYN ******S* Jan 18 11:44:32 66.139.75.22:2089 -> xxx.yyy.1.0:3306 SYN ******S* Jan 18 11:44:32 66.139.75.22:2097 -> xxx.yyy.1.8:3306 SYN ******S* Jan 18 11:44:32 66.139.75.22:2099 -> xxx.yyy.1.10:3306 SYN ******S* Jan 18 11:44:32 66.139.75.22:2090 -> xxx.yyy.1.1:3306 SYN ******S* Jan 18 11:44:32 66.139.75.22:2096 -> xxx.yyy.1.7:3306 SYN ******S* [...] Jan 18 12:47:37 66.139.75.22:2169 -> xxx.yyy.128.26:3306 SYN ******S* Jan 18 12:47:36 66.139.75.22:2219 -> xxx.yyy.224.141:3306 SYN ******S* Jan 18 12:47:35 66.139.75.22:2189 -> xxx.yyy.236.23:3306 SYN ******S* Jan 18 12:47:35 66.139.75.22:2193 -> xxx.yyy.237.7:3306 SYN ******S* Jan 18 12:47:35 66.139.75.22:2190 -> xxx.yyy.236.24:3306 SYN ******S* Jan 18 12:47:36 66.139.75.22:2238 -> xxx.yyy.236.22:3306 SYN ******S* Jan 18 12:47:37 66.139.75.22:2262 -> xxx.yyy.226.9:3306 SYN ******S* Jan 18 12:47:37 66.139.75.22:2263 -> xxx.yyy.212.75:3306 SYN ******S* 12535 Jan 18 01:04:55 218.59.177.205:3162 -> xxx.yyy.1.2:1433 SYN ******S* Jan 18 01:04:54 218.59.177.205:3857 -> xxx.yyy.1.15:1433 SYN ******S* Jan 18 01:04:54 218.59.177.205:4464 -> xxx.yyy.1.16:1433 SYN ******S* Jan 18 01:04:54 218.59.177.205:4828 -> xxx.yyy.1.17:1433 SYN ******S* Jan 18 01:04:56 218.59.177.205:3947 -> xxx.yyy.1.10:1433 SYN ******S* Jan 18 01:04:57 218.59.177.205:4156 -> xxx.yyy.1.39:1433 SYN ******S* Jan 18 01:05:00 218.59.177.205:3388 -> xxx.yyy.1.38:1433 SYN ******S* Jan 18 01:05:01 218.59.177.205:3162 -> xxx.yyy.1.2:1433 SYN ******S* [...] Jan 18 02:56:21 218.59.177.205:4008 -> xxx.yyy.255.161:1433 SYN ******S* Jan 18 02:56:22 218.59.177.205:3588 -> xxx.yyy.255.229:1433 SYN ******S* Jan 18 02:56:22 218.59.177.205:4972 -> xxx.yyy.255.230:1433 SYN ******S* Jan 18 02:56:24 218.59.177.205:3604 -> xxx.yyy.255.194:1433 SYN ******S* Jan 18 02:56:25 218.59.177.205:3063 -> xxx.yyy.255.206:1433 SYN ******S* Jan 18 02:56:26 218.59.177.205:3684 -> xxx.yyy.255.218:1433 SYN ******S* Jan 18 02:56:28 218.59.177.205:3588 -> xxx.yyy.255.229:1433 SYN ******S* Jan 18 02:56:28 218.59.177.205:4972 -> xxx.yyy.255.230:1433 SYN ******S* 10600 Jan 18 23:50:43 221.203.232.174:3469 -> xxx.yyy.236.78:5554 SYN ******S* Jan 18 23:50:45 221.203.232.174:4452 -> xxx.yyy.236.78:9898 SYN ******S* Jan 18 23:50:43 221.203.232.174:3471 -> xxx.yyy.236.77:5554 SYN ******S* Jan 18 23:50:46 221.203.232.174:4468 -> xxx.yyy.236.77:9898 SYN ******S* Jan 18 23:50:43 221.203.232.174:3476 -> xxx.yyy.236.248:5554 SYN ******S* Jan 18 23:50:44 221.203.232.174:3819 -> xxx.yyy.236.248:1023 SYN ******S* Jan 18 23:50:46 221.203.232.174:4471 -> xxx.yyy.236.248:9898 SYN ******S* Jan 18 23:50:43 221.203.232.174:3486 -> xxx.yyy.236.250:5554 SYN ******S* [...] Jan 18 23:52:49 221.203.232.174:2101 -> xxx.yyy.236.232:9898 SYN ******S* Jan 18 23:52:49 221.203.232.174:2110 -> xxx.yyy.236.230:9898 SYN ******S* Jan 18 23:52:49 221.203.232.174:2114 -> xxx.yyy.236.235:9898 SYN ******S* Jan 18 23:52:49 221.203.232.174:2122 -> xxx.yyy.236.239:9898 SYN ******S* Jan 18 23:52:49 221.203.232.174:2123 -> xxx.yyy.236.236:9898 SYN ******S* Jan 18 23:52:49 221.203.232.174:2128 -> xxx.yyy.236.234:9898 SYN ******S* Jan 18 23:52:49 221.203.232.174:2127 -> xxx.yyy.236.240:9898 SYN ******S* Jan 18 23:52:49 221.203.232.174:2137 -> xxx.yyy.236.242:9898 SYN ******S* Jan 18 23:52:49 221.203.232.174:2138 -> xxx.yyy.236.245:9898 SYN ******S* 9708 Jan 18 23:48:52 218.61.13.138:3850 -> xxx.yyy.154.100:5554 SYN ******S* Jan 18 23:48:53 218.61.13.138:4453 -> xxx.yyy.154.100:1023 SYN ******S* Jan 18 23:48:55 218.61.13.138:1644 -> xxx.yyy.154.100:9898 SYN ******S* Jan 18 23:48:52 218.61.13.138:3852 -> xxx.yyy.154.102:5554 SYN ******S* Jan 18 23:48:53 218.61.13.138:4455 -> xxx.yyy.154.102:1023 SYN ******S* Jan 18 23:48:52 218.61.13.138:3853 -> xxx.yyy.154.103:5554 SYN ******S* Jan 18 23:48:53 218.61.13.138:4456 -> xxx.yyy.154.103:1023 SYN ******S* Jan 18 23:48:55 218.61.13.138:1647 -> xxx.yyy.154.103:9898 SYN ******S* [...] Jan 18 23:49:37 218.61.13.138:1658 -> xxx.yyy.174.213:9898 SYN ******S* Jan 18 23:49:37 218.61.13.138:1659 -> xxx.yyy.174.214:9898 SYN ******S* Jan 18 23:49:37 218.61.13.138:1657 -> xxx.yyy.174.212:9898 SYN ******S* Jan 18 23:49:37 218.61.13.138:1660 -> xxx.yyy.174.215:9898 SYN ******S* Jan 18 23:49:37 218.61.13.138:1662 -> xxx.yyy.174.217:9898 SYN ******S* Jan 18 23:49:37 218.61.13.138:1661 -> xxx.yyy.174.216:9898 SYN ******S* Jan 18 23:49:37 218.61.13.138:1664 -> xxx.yyy.174.219:9898 SYN ******S* Jan 18 23:49:37 218.61.13.138:1665 -> xxx.yyy.174.220:9898 SYN ******S* Jan 18 23:49:37 218.61.13.138:1666 -> xxx.yyy.174.221:9898 SYN ******S* 9004 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions