[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Jan 21 08:08:21 160.36.214.234:3159 -> xxx.yyy.1.1:6101 SYN ******S* Jan 21 08:08:21 160.36.214.234:3160 -> xxx.yyy.1.2:6101 SYN ******S* Jan 21 08:08:21 160.36.214.234:3161 -> xxx.yyy.1.3:6101 SYN ******S* Jan 21 08:08:21 160.36.214.234:3162 -> xxx.yyy.1.4:6101 SYN ******S* Jan 21 08:08:21 160.36.214.234:3163 -> xxx.yyy.1.5:6101 SYN ******S* Jan 21 08:08:21 160.36.214.234:3164 -> xxx.yyy.1.6:6101 SYN ******S* Jan 21 08:08:21 160.36.214.234:3165 -> xxx.yyy.1.7:6101 SYN ******S* Jan 21 08:08:21 160.36.214.234:3168 -> xxx.yyy.1.10:6101 SYN ******S* [...] Jan 21 19:55:43 160.36.214.234:1306 -> xxx.yyy.255.245:6101 SYN ******S* Jan 21 19:55:43 160.36.214.234:1287 -> xxx.yyy.255.226:6101 SYN ******S* Jan 21 19:55:43 160.36.214.234:1303 -> xxx.yyy.255.242:6101 SYN ******S* Jan 21 19:55:43 160.36.214.234:1271 -> xxx.yyy.255.210:6101 SYN ******S* Jan 21 19:55:43 160.36.214.234:1268 -> xxx.yyy.255.207:6101 SYN ******S* Jan 21 19:55:43 160.36.214.234:1300 -> xxx.yyy.255.239:6101 SYN ******S* Jan 21 19:55:43 160.36.214.234:1310 -> xxx.yyy.255.249:6101 SYN ******S* Jan 21 19:55:43 160.36.214.234:1275 -> xxx.yyy.255.214:6101 SYN ******S* 100521 Jan 21 01:16:21 61.145.180.129:1430 -> xxx.yyy.1.3:1433 SYN ******S* Jan 21 01:16:24 61.145.180.129:1432 -> xxx.yyy.1.5:1433 SYN ******S* Jan 21 01:16:21 61.145.180.129:1425 -> xxx.yyy.1.0:1433 SYN ******S* Jan 21 01:16:24 61.145.180.129:1436 -> xxx.yyy.1.9:1433 SYN ******S* Jan 21 01:16:24 61.145.180.129:1438 -> xxx.yyy.1.11:1433 SYN ******S* Jan 21 01:16:24 61.145.180.129:1435 -> xxx.yyy.1.8:1433 SYN ******S* Jan 21 01:16:24 61.145.180.129:1433 -> xxx.yyy.1.6:1433 SYN ******S* Jan 21 01:16:24 61.145.180.129:1437 -> xxx.yyy.1.10:1433 SYN ******S* [...] Jan 21 04:28:05 61.145.180.129:2605 -> xxx.yyy.255.214:1433 SYN ******S* Jan 21 04:28:05 61.145.180.129:2627 -> xxx.yyy.255.218:1433 SYN ******S* Jan 21 04:28:05 61.145.180.129:2640 -> xxx.yyy.255.221:1433 SYN ******S* Jan 21 04:28:05 61.145.180.129:2636 -> xxx.yyy.255.220:1433 SYN ******S* Jan 21 04:28:05 61.145.180.129:2655 -> xxx.yyy.255.222:1433 SYN ******S* Jan 21 04:28:05 61.145.180.129:2658 -> xxx.yyy.255.223:1433 SYN ******S* Jan 21 04:28:05 61.145.180.129:2696 -> xxx.yyy.255.227:1433 SYN ******S* Jan 21 04:28:05 61.145.180.129:2670 -> xxx.yyy.255.224:1433 SYN ******S* 81636 Jan 21 17:40:35 69.143.228.61:61893 -> xxx.yyy.1.3:1433 SYN ******S* Jan 21 17:40:34 69.143.228.61:61868 -> xxx.yyy.1.4:1433 SYN ******S* Jan 21 17:40:34 69.143.228.61:61654 -> xxx.yyy.1.1:1433 SYN ******S* Jan 21 17:40:32 69.143.228.61:61658 -> xxx.yyy.1.8:1433 SYN ******S* Jan 21 17:40:32 69.143.228.61:61660 -> xxx.yyy.1.2:1433 SYN ******S* Jan 21 17:40:32 69.143.228.61:61655 -> xxx.yyy.1.5:1433 SYN ******S* Jan 21 17:40:34 69.143.228.61:61854 -> xxx.yyy.1.9:1433 SYN ******S* Jan 21 17:40:35 69.143.228.61:61889 -> xxx.yyy.1.6:1433 SYN ******S* [...] Jan 21 18:29:30 69.143.228.61:62450 -> xxx.yyy.255.243:1433 SYN ******S* Jan 21 18:29:30 69.143.228.61:62459 -> xxx.yyy.255.224:1433 SYN ******S* Jan 21 18:29:30 69.143.228.61:62448 -> xxx.yyy.255.254:1433 SYN ******S* Jan 21 18:29:30 69.143.228.61:62453 -> xxx.yyy.255.249:1433 SYN ******S* Jan 21 18:29:30 69.143.228.61:62481 -> xxx.yyy.255.235:1433 SYN ******S* Jan 21 18:29:31 69.143.228.61:61748 -> xxx.yyy.255.206:1433 SYN ******S* Jan 21 18:29:31 69.143.228.61:62543 -> xxx.yyy.255.247:1433 SYN ******S* Jan 21 18:29:32 69.143.228.61:62593 -> xxx.yyy.255.252:1433 SYN ******S* 81536 Jan 21 05:23:08 212.184.170.26:1978 -> xxx.yyy.1.1:3306 SYN ******S* Jan 21 05:23:08 212.184.170.26:1979 -> xxx.yyy.1.2:3306 SYN ******S* Jan 21 05:23:08 212.184.170.26:1980 -> xxx.yyy.1.3:3306 SYN ******S* Jan 21 05:23:10 212.184.170.26:1981 -> xxx.yyy.1.4:3306 SYN ******S* Jan 21 05:23:10 212.184.170.26:1982 -> xxx.yyy.1.5:3306 SYN ******S* Jan 21 05:23:10 212.184.170.26:1983 -> xxx.yyy.1.6:3306 SYN ******S* Jan 21 05:23:10 212.184.170.26:1984 -> xxx.yyy.1.7:3306 SYN ******S* Jan 21 05:23:08 212.184.170.26:1985 -> xxx.yyy.1.8:3306 SYN ******S* [...] Jan 21 05:34:26 212.184.170.26:4630 -> xxx.yyy.255.177:3306 SYN ******S* Jan 21 05:34:26 212.184.170.26:4627 -> xxx.yyy.255.174:3306 SYN ******S* Jan 21 05:34:27 212.184.170.26:4638 -> xxx.yyy.255.185:3306 SYN ******S* Jan 21 05:34:27 212.184.170.26:4635 -> xxx.yyy.255.182:3306 SYN ******S* Jan 21 05:34:27 212.184.170.26:4639 -> xxx.yyy.255.186:3306 SYN ******S* Jan 21 05:34:27 212.184.170.26:4636 -> xxx.yyy.255.183:3306 SYN ******S* Jan 21 05:34:27 212.184.170.26:4640 -> xxx.yyy.255.187:3306 SYN ******S* Jan 21 05:34:27 212.184.170.26:4637 -> xxx.yyy.255.184:3306 SYN ******S* 72457 Jan 21 03:58:28 207.21.209.120:2295 -> xxx.yyy.1.1:42 SYN ******S* Jan 21 03:58:28 207.21.209.120:2296 -> xxx.yyy.1.2:42 SYN ******S* Jan 21 03:58:25 207.21.209.120:2297 -> xxx.yyy.1.3:42 SYN ******S* Jan 21 03:58:28 207.21.209.120:2298 -> xxx.yyy.1.4:42 SYN ******S* Jan 21 03:58:28 207.21.209.120:2299 -> xxx.yyy.1.5:42 SYN ******S* Jan 21 03:58:28 207.21.209.120:2300 -> xxx.yyy.1.6:42 SYN ******S* Jan 21 03:58:28 207.21.209.120:2301 -> xxx.yyy.1.7:42 SYN ******S* Jan 21 03:58:28 207.21.209.120:2302 -> xxx.yyy.1.8:42 SYN ******S* [...] Jan 21 04:09:20 207.21.209.120:1191 -> xxx.yyy.255.187:42 SYN ******S* Jan 21 04:09:21 207.21.209.120:1197 -> xxx.yyy.255.193:42 SYN ******S* Jan 21 04:09:21 207.21.209.120:1202 -> xxx.yyy.255.198:42 SYN ******S* Jan 21 04:09:21 207.21.209.120:1203 -> xxx.yyy.255.199:42 SYN ******S* Jan 21 04:09:21 207.21.209.120:1201 -> xxx.yyy.255.197:42 SYN ******S* Jan 21 04:09:21 207.21.209.120:1200 -> xxx.yyy.255.196:42 SYN ******S* Jan 21 04:09:21 207.21.209.120:1204 -> xxx.yyy.255.200:42 SYN ******S* Jan 21 04:09:21 207.21.209.120:1199 -> xxx.yyy.255.195:42 SYN ******S* 72179 Jan 21 13:46:30 82.47.101.123:4853 -> xxx.yyy.1.0:1433 SYN ******S* Jan 21 13:46:30 82.47.101.123:4878 -> xxx.yyy.1.2:1433 SYN ******S* Jan 21 13:46:30 82.47.101.123:4885 -> xxx.yyy.1.3:1433 SYN ******S* Jan 21 13:46:27 82.47.101.123:4909 -> xxx.yyy.1.4:1433 SYN ******S* Jan 21 13:46:27 82.47.101.123:4913 -> xxx.yyy.1.5:1433 SYN ******S* Jan 21 13:46:27 82.47.101.123:4914 -> xxx.yyy.1.6:1433 SYN ******S* Jan 21 13:46:27 82.47.101.123:4921 -> xxx.yyy.1.7:1433 SYN ******S* Jan 21 13:46:30 82.47.101.123:4942 -> xxx.yyy.1.8:1433 SYN ******S* [...] Jan 21 17:35:24 82.47.101.123:2498 -> xxx.yyy.255.241:1433 SYN ******S* Jan 21 17:35:24 82.47.101.123:2522 -> xxx.yyy.255.242:1433 SYN ******S* Jan 21 17:35:26 82.47.101.123:2604 -> xxx.yyy.255.244:1433 SYN ******S* Jan 21 17:35:26 82.47.101.123:2678 -> xxx.yyy.255.247:1433 SYN ******S* Jan 21 17:35:26 82.47.101.123:2681 -> xxx.yyy.255.248:1433 SYN ******S* Jan 21 17:35:27 82.47.101.123:2706 -> xxx.yyy.255.249:1433 SYN ******S* Jan 21 17:35:27 82.47.101.123:2731 -> xxx.yyy.255.251:1433 SYN ******S* Jan 21 17:35:27 82.47.101.123:2727 -> xxx.yyy.255.250:1433 SYN ******S* Jan 21 17:35:27 82.47.101.123:2780 -> xxx.yyy.255.252:1433 SYN ******S* 69195 Jan 21 23:20:17 220.72.176.240:2447 -> xxx.yyy.1.3:1433 SYN ******S* Jan 21 23:20:17 220.72.176.240:2456 -> xxx.yyy.1.6:1433 SYN ******S* Jan 21 23:20:14 220.72.176.240:2465 -> xxx.yyy.1.9:1433 SYN ******S* Jan 21 23:20:17 220.72.176.240:2468 -> xxx.yyy.1.10:1433 SYN ******S* Jan 21 23:20:17 220.72.176.240:2471 -> xxx.yyy.1.11:1433 SYN ******S* Jan 21 23:20:17 220.72.176.240:2450 -> xxx.yyy.1.4:1433 SYN ******S* Jan 21 23:20:17 220.72.176.240:2477 -> xxx.yyy.1.13:1433 SYN ******S* Jan 21 23:20:14 220.72.176.240:2480 -> xxx.yyy.1.14:1433 SYN ******S* [...] Jan 21 23:32:14 220.72.176.240:2990 -> xxx.yyy.255.221:1433 SYN ******S* Jan 21 23:32:14 220.72.176.240:3005 -> xxx.yyy.255.226:1433 SYN ******S* Jan 21 23:32:14 220.72.176.240:3029 -> xxx.yyy.255.234:1433 SYN ******S* Jan 21 23:32:14 220.72.176.240:3023 -> xxx.yyy.255.232:1433 SYN ******S* Jan 21 23:32:14 220.72.176.240:3017 -> xxx.yyy.255.230:1433 SYN ******S* Jan 21 23:32:14 220.72.176.240:3035 -> xxx.yyy.255.236:1433 SYN ******S* Jan 21 23:32:14 220.72.176.240:3087 -> xxx.yyy.255.253:1433 SYN ******S* Jan 21 23:32:14 220.72.176.240:3081 -> xxx.yyy.255.251:1433 SYN ******S* 58540 Jan 21 01:40:03 209.76.1.140:2531 -> xxx.yyy.1.2:6101 SYN ******S* Jan 21 01:40:00 209.76.1.140:2540 -> xxx.yyy.1.10:6101 SYN ******S* Jan 21 01:40:03 209.76.1.140:2533 -> xxx.yyy.1.4:6101 SYN ******S* Jan 21 01:40:03 209.76.1.140:2532 -> xxx.yyy.1.1:6101 SYN ******S* Jan 21 01:40:03 209.76.1.140:2536 -> xxx.yyy.1.6:6101 SYN ******S* Jan 21 01:40:00 209.76.1.140:2534 -> xxx.yyy.1.3:6101 SYN ******S* Jan 21 01:40:03 209.76.1.140:2535 -> xxx.yyy.1.5:6101 SYN ******S* Jan 21 01:40:03 209.76.1.140:2539 -> xxx.yyy.1.9:6101 SYN ******S* [...] Jan 21 02:29:41 209.76.1.140:2599 -> xxx.yyy.255.243:6101 SYN ******S* Jan 21 02:29:41 209.76.1.140:2606 -> xxx.yyy.255.252:6101 SYN ******S* Jan 21 02:29:41 209.76.1.140:2604 -> xxx.yyy.255.250:6101 SYN ******S* Jan 21 02:29:41 209.76.1.140:2605 -> xxx.yyy.255.249:6101 SYN ******S* Jan 21 02:29:41 209.76.1.140:2603 -> xxx.yyy.255.248:6101 SYN ******S* Jan 21 02:29:41 209.76.1.140:2607 -> xxx.yyy.255.251:6101 SYN ******S* Jan 21 02:29:41 209.76.1.140:2608 -> xxx.yyy.255.253:6101 SYN ******S* Jan 21 02:29:41 209.76.1.140:2609 -> xxx.yyy.255.254:6101 SYN ******S* 57622 Jan 21 17:45:43 210.74.97.66:4153 -> xxx.yyy.1.2:3306 SYN ******S* Jan 21 17:45:44 210.74.97.66:4154 -> xxx.yyy.1.3:3306 SYN ******S* Jan 21 17:45:42 210.74.97.66:4155 -> xxx.yyy.1.4:3306 SYN ******S* Jan 21 17:45:45 210.74.97.66:4158 -> xxx.yyy.1.7:3306 SYN ******S* Jan 21 17:45:44 210.74.97.66:4160 -> xxx.yyy.1.9:3306 SYN ******S* Jan 21 17:45:45 210.74.97.66:4161 -> xxx.yyy.1.10:3306 SYN ******S* Jan 21 17:45:44 210.74.97.66:4162 -> xxx.yyy.1.11:3306 SYN ******S* Jan 21 17:45:45 210.74.97.66:4163 -> xxx.yyy.1.12:3306 SYN ******S* [...] Jan 21 17:57:27 210.74.97.66:3832 -> xxx.yyy.255.203:3306 SYN ******S* Jan 21 17:57:27 210.74.97.66:3834 -> xxx.yyy.255.205:3306 SYN ******S* Jan 21 17:57:27 210.74.97.66:3830 -> xxx.yyy.255.201:3306 SYN ******S* Jan 21 17:57:27 210.74.97.66:3844 -> xxx.yyy.255.214:3306 SYN ******S* Jan 21 17:57:27 210.74.97.66:3853 -> xxx.yyy.255.223:3306 SYN ******S* Jan 21 17:57:27 210.74.97.66:3852 -> xxx.yyy.255.222:3306 SYN ******S* Jan 21 17:57:27 210.74.97.66:3869 -> xxx.yyy.255.239:3306 SYN ******S* Jan 21 17:57:27 210.74.97.66:3865 -> xxx.yyy.255.235:3306 SYN ******S* 56329 Jan 21 20:17:35 209.204.67.229:2859 -> xxx.yyy.1.1:6101 SYN ******S* Jan 21 20:17:35 209.204.67.229:2860 -> xxx.yyy.1.2:6101 SYN ******S* Jan 21 20:17:32 209.204.67.229:2861 -> xxx.yyy.1.3:6101 SYN ******S* Jan 21 20:17:32 209.204.67.229:2862 -> xxx.yyy.1.4:6101 SYN ******S* Jan 21 20:17:32 209.204.67.229:2863 -> xxx.yyy.1.5:6101 SYN ******S* Jan 21 20:17:35 209.204.67.229:2865 -> xxx.yyy.1.7:6101 SYN ******S* Jan 21 20:17:32 209.204.67.229:2864 -> xxx.yyy.1.6:6101 SYN ******S* Jan 21 20:17:32 209.204.67.229:2866 -> xxx.yyy.1.8:6101 SYN ******S* [...] Jan 21 20:22:02 209.204.67.229:4899 -> xxx.yyy.255.202:6101 SYN ******S* Jan 21 20:22:02 209.204.67.229:4939 -> xxx.yyy.255.222:6101 SYN ******S* Jan 21 20:22:02 209.204.67.229:4871 -> xxx.yyy.255.185:6101 SYN ******S* Jan 21 20:22:02 209.204.67.229:4891 -> xxx.yyy.255.198:6101 SYN ******S* Jan 21 20:22:02 209.204.67.229:4994 -> xxx.yyy.255.241:6101 SYN ******S* Jan 21 20:22:02 209.204.67.229:1032 -> xxx.yyy.255.252:6101 SYN ******S* Jan 21 20:22:02 209.204.67.229:4997 -> xxx.yyy.255.243:6101 SYN ******S* Jan 21 20:22:02 209.204.67.229:1034 -> xxx.yyy.255.254:6101 SYN ******S* 56182 Jan 21 22:29:41 195.62.234.104:4178 -> xxx.yyy.1.1:1433 SYN ******S* Jan 21 22:29:41 195.62.234.104:4183 -> xxx.yyy.1.6:1433 SYN ******S* Jan 21 22:29:38 195.62.234.104:4184 -> xxx.yyy.1.7:1433 SYN ******S* Jan 21 22:29:41 195.62.234.104:4186 -> xxx.yyy.1.9:1433 SYN ******S* Jan 21 22:29:41 195.62.234.104:4187 -> xxx.yyy.1.10:1433 SYN ******S* Jan 21 22:29:41 195.62.234.104:4188 -> xxx.yyy.1.11:1433 SYN ******S* Jan 21 22:29:41 195.62.234.104:4189 -> xxx.yyy.1.12:1433 SYN ******S* Jan 21 22:29:41 195.62.234.104:4190 -> xxx.yyy.1.13:1433 SYN ******S* [...] Jan 21 22:42:22 195.62.234.104:2335 -> xxx.yyy.255.226:1433 SYN ******S* Jan 21 22:42:22 195.62.234.104:2331 -> xxx.yyy.255.222:1433 SYN ******S* Jan 21 22:42:22 195.62.234.104:2332 -> xxx.yyy.255.223:1433 SYN ******S* Jan 21 22:42:22 195.62.234.104:2333 -> xxx.yyy.255.224:1433 SYN ******S* Jan 21 22:42:22 195.62.234.104:2337 -> xxx.yyy.255.228:1433 SYN ******S* Jan 21 22:42:22 195.62.234.104:2336 -> xxx.yyy.255.227:1433 SYN ******S* Jan 21 22:42:22 195.62.234.104:2334 -> xxx.yyy.255.225:1433 SYN ******S* Jan 21 22:42:23 195.62.234.104:2348 -> xxx.yyy.255.239:1433 SYN ******S* 55194 Jan 21 01:23:00 82.204.3.251:42830 -> xxx.yyy.1.1:4000 SYN ******S* Jan 21 01:23:00 82.204.3.251:42832 -> xxx.yyy.1.2:4000 SYN ******S* Jan 21 01:23:00 82.204.3.251:42834 -> xxx.yyy.1.3:4000 SYN ******S* Jan 21 01:23:02 82.204.3.251:42836 -> xxx.yyy.1.4:4000 SYN ******S* Jan 21 01:23:02 82.204.3.251:42838 -> xxx.yyy.1.5:4000 SYN ******S* Jan 21 01:22:59 82.204.3.251:42842 -> xxx.yyy.1.7:4000 SYN ******S* Jan 21 01:23:00 82.204.3.251:42844 -> xxx.yyy.1.8:4000 SYN ******S* Jan 21 01:23:00 82.204.3.251:42846 -> xxx.yyy.1.9:4000 SYN ******S* [...] Jan 21 01:34:44 82.204.3.251:45079 -> xxx.yyy.255.210:4000 SYN ******S* Jan 21 01:34:44 82.204.3.251:45081 -> xxx.yyy.255.211:4000 SYN ******S* Jan 21 01:34:44 82.204.3.251:45083 -> xxx.yyy.255.212:4000 SYN ******S* Jan 21 01:34:44 82.204.3.251:45085 -> xxx.yyy.255.213:4000 SYN ******S* Jan 21 01:34:44 82.204.3.251:45087 -> xxx.yyy.255.214:4000 SYN ******S* Jan 21 01:34:44 82.204.3.251:45089 -> xxx.yyy.255.215:4000 SYN ******S* Jan 21 01:34:44 82.204.3.251:45091 -> xxx.yyy.255.216:4000 SYN ******S* Jan 21 01:34:44 82.204.3.251:45093 -> xxx.yyy.255.217:4000 SYN ******S* Jan 21 01:34:45 82.204.3.251:45099 -> xxx.yyy.255.220:4000 SYN ******S* 54183 Jan 21 19:46:01 213.246.36.204:3379 -> xxx.yyy.1.1:3306 SYN ******S* Jan 21 19:46:01 213.246.36.204:3380 -> xxx.yyy.1.2:3306 SYN ******S* Jan 21 19:46:01 213.246.36.204:3381 -> xxx.yyy.1.3:3306 SYN ******S* Jan 21 19:46:02 213.246.36.204:3382 -> xxx.yyy.1.4:3306 SYN ******S* Jan 21 19:46:02 213.246.36.204:3383 -> xxx.yyy.1.5:3306 SYN ******S* Jan 21 19:46:02 213.246.36.204:3385 -> xxx.yyy.1.7:3306 SYN ******S* Jan 21 19:46:00 213.246.36.204:3386 -> xxx.yyy.1.8:3306 SYN ******S* Jan 21 19:46:00 213.246.36.204:3387 -> xxx.yyy.1.9:3306 SYN ******S* [...] Jan 21 19:51:30 213.246.36.204:1155 -> xxx.yyy.255.238:3306 SYN ******S* Jan 21 19:51:30 213.246.36.204:1165 -> xxx.yyy.255.248:3306 SYN ******S* Jan 21 19:51:30 213.246.36.204:1149 -> xxx.yyy.255.232:3306 SYN ******S* Jan 21 19:51:30 213.246.36.204:1152 -> xxx.yyy.255.235:3306 SYN ******S* Jan 21 19:51:30 213.246.36.204:1168 -> xxx.yyy.255.251:3306 SYN ******S* Jan 21 19:51:30 213.246.36.204:1146 -> xxx.yyy.255.229:3306 SYN ******S* Jan 21 19:51:30 213.246.36.204:1162 -> xxx.yyy.255.245:3306 SYN ******S* Jan 21 19:51:30 213.246.36.204:1171 -> xxx.yyy.255.254:3306 SYN ******S* 53730 Jan 21 22:10:53 61.50.171.34:3317 -> xxx.yyy.64.0:1433 SYN ******S* Jan 21 22:10:56 61.50.171.34:3318 -> xxx.yyy.64.1:1433 SYN ******S* Jan 21 22:10:53 61.50.171.34:3325 -> xxx.yyy.64.5:1433 SYN ******S* Jan 21 22:10:54 61.50.171.34:3335 -> xxx.yyy.64.11:1433 SYN ******S* Jan 21 22:10:57 61.50.171.34:3338 -> xxx.yyy.64.12:1433 SYN ******S* Jan 21 22:10:57 61.50.171.34:3342 -> xxx.yyy.64.14:1433 SYN ******S* Jan 21 22:10:57 61.50.171.34:3344 -> xxx.yyy.64.15:1433 SYN ******S* Jan 21 22:10:57 61.50.171.34:3346 -> xxx.yyy.64.16:1433 SYN ******S* [...] Jan 21 23:59:58 61.50.171.34:4336 -> xxx.yyy.185.88:1433 SYN ******S* Jan 21 23:59:58 61.50.171.34:4468 -> xxx.yyy.185.133:1433 SYN ******S* Jan 21 23:59:58 61.50.171.34:4470 -> xxx.yyy.185.134:1433 SYN ******S* Jan 21 23:59:58 61.50.171.34:4340 -> xxx.yyy.185.89:1433 SYN ******S* Jan 21 23:59:58 61.50.171.34:4345 -> xxx.yyy.185.90:1433 SYN ******S* Jan 21 23:59:58 61.50.171.34:4471 -> xxx.yyy.185.135:1433 SYN ******S* Jan 21 23:59:58 61.50.171.34:4346 -> xxx.yyy.185.91:1433 SYN ******S* Jan 21 23:59:58 61.50.171.34:4352 -> xxx.yyy.185.92:1433 SYN ******S* 51676 Jan 21 23:34:54 61.175.235.78:4039 -> xxx.yyy.1.1:1433 SYN ******S* Jan 21 23:34:54 61.175.235.78:4040 -> xxx.yyy.1.2:1433 SYN ******S* Jan 21 23:34:51 61.175.235.78:4041 -> xxx.yyy.1.3:1433 SYN ******S* Jan 21 23:34:54 61.175.235.78:4044 -> xxx.yyy.1.6:1433 SYN ******S* Jan 21 23:34:51 61.175.235.78:4043 -> xxx.yyy.1.5:1433 SYN ******S* Jan 21 23:34:54 61.175.235.78:4045 -> xxx.yyy.1.7:1433 SYN ******S* Jan 21 23:34:54 61.175.235.78:4047 -> xxx.yyy.1.9:1433 SYN ******S* Jan 21 23:34:51 61.175.235.78:4046 -> xxx.yyy.1.8:1433 SYN ******S* [...] Jan 21 23:46:33 61.175.235.78:3474 -> xxx.yyy.255.226:1433 SYN ******S* Jan 21 23:46:33 61.175.235.78:3459 -> xxx.yyy.255.211:1433 SYN ******S* Jan 21 23:46:33 61.175.235.78:3466 -> xxx.yyy.255.218:1433 SYN ******S* Jan 21 23:46:33 61.175.235.78:3473 -> xxx.yyy.255.225:1433 SYN ******S* Jan 21 23:46:33 61.175.235.78:3490 -> xxx.yyy.255.242:1433 SYN ******S* Jan 21 23:46:33 61.175.235.78:3498 -> xxx.yyy.255.250:1433 SYN ******S* Jan 21 23:46:33 61.175.235.78:3489 -> xxx.yyy.255.241:1433 SYN ******S* Jan 21 23:46:33 61.175.235.78:3496 -> xxx.yyy.255.248:1433 SYN ******S* Jan 21 23:46:33 61.175.235.78:3499 -> xxx.yyy.255.251:1433 SYN ******S* 46069 Jan 21 00:49:56 213.235.217.218:22486 -> xxx.yyy.1.28:1433 SYN ******S* Jan 21 00:49:56 213.235.217.218:22488 -> xxx.yyy.1.29:1433 SYN ******S* Jan 21 00:49:56 213.235.217.218:22504 -> xxx.yyy.1.31:1433 SYN ******S* Jan 21 00:49:55 213.235.217.218:22537 -> xxx.yyy.1.32:1433 SYN ******S* Jan 21 00:49:56 213.235.217.218:22539 -> xxx.yyy.1.33:1433 SYN ******S* Jan 21 00:49:56 213.235.217.218:22543 -> xxx.yyy.1.35:1433 SYN ******S* Jan 21 00:49:56 213.235.217.218:22545 -> xxx.yyy.1.36:1433 SYN ******S* Jan 21 00:49:56 213.235.217.218:22570 -> xxx.yyy.1.37:1433 SYN ******S* [...] Jan 21 01:15:11 213.235.217.218:13101 -> xxx.yyy.255.121:1433 SYN ******S* Jan 21 01:15:11 213.235.217.218:13103 -> xxx.yyy.255.242:1433 SYN ******S* Jan 21 01:15:11 213.235.217.218:13111 -> xxx.yyy.255.120:1433 SYN ******S* Jan 21 01:15:11 213.235.217.218:13113 -> xxx.yyy.255.122:1433 SYN ******S* Jan 21 01:15:11 213.235.217.218:13114 -> xxx.yyy.255.125:1433 SYN ******S* Jan 21 01:15:11 213.235.217.218:12778 -> xxx.yyy.255.240:1433 SYN ******S* Jan 21 01:15:11 213.235.217.218:12788 -> xxx.yyy.255.245:1433 SYN ******S* Jan 21 01:15:11 213.235.217.218:12794 -> xxx.yyy.255.248:1433 SYN ******S* 37003 Jan 21 11:29:53 24.0.12.3:3412 -> xxx.yyy.1.1:1433 SYN ******S* Jan 21 11:29:56 24.0.12.3:3414 -> xxx.yyy.1.2:1433 SYN ******S* Jan 21 11:29:53 24.0.12.3:3418 -> xxx.yyy.1.4:1433 SYN ******S* Jan 21 11:29:53 24.0.12.3:3422 -> xxx.yyy.1.6:1433 SYN ******S* Jan 21 11:29:53 24.0.12.3:3420 -> xxx.yyy.1.5:1433 SYN ******S* Jan 21 11:29:53 24.0.12.3:3424 -> xxx.yyy.1.7:1433 SYN ******S* Jan 21 11:29:53 24.0.12.3:3426 -> xxx.yyy.1.8:1433 SYN ******S* Jan 21 11:29:53 24.0.12.3:3428 -> xxx.yyy.1.9:1433 SYN ******S* [...] Jan 21 11:41:02 24.0.12.3:1753 -> xxx.yyy.255.247:1433 SYN ******S* Jan 21 11:41:02 24.0.12.3:1749 -> xxx.yyy.255.245:1433 SYN ******S* Jan 21 11:41:02 24.0.12.3:1737 -> xxx.yyy.255.239:1433 SYN ******S* Jan 21 11:41:02 24.0.12.3:1745 -> xxx.yyy.255.243:1433 SYN ******S* Jan 21 11:41:02 24.0.12.3:1743 -> xxx.yyy.255.242:1433 SYN ******S* Jan 21 11:41:02 24.0.12.3:1741 -> xxx.yyy.255.241:1433 SYN ******S* Jan 21 11:41:02 24.0.12.3:1739 -> xxx.yyy.255.240:1433 SYN ******S* Jan 21 11:41:02 24.0.12.3:1747 -> xxx.yyy.255.244:1433 SYN ******S* Jan 21 11:41:02 24.0.12.3:1751 -> xxx.yyy.255.246:1433 SYN ******S* 36691 Jan 21 15:42:25 203.145.188.211:3454 -> xxx.yyy.1.3:1433 SYN ******S* Jan 21 15:42:22 203.145.188.211:3453 -> xxx.yyy.1.2:1433 SYN ******S* Jan 21 15:42:22 203.145.188.211:3455 -> xxx.yyy.1.4:1433 SYN ******S* Jan 21 15:42:25 203.145.188.211:3456 -> xxx.yyy.1.5:1433 SYN ******S* Jan 21 15:42:22 203.145.188.211:3458 -> xxx.yyy.1.7:1433 SYN ******S* Jan 21 15:42:22 203.145.188.211:3459 -> xxx.yyy.1.8:1433 SYN ******S* Jan 21 15:42:25 203.145.188.211:3460 -> xxx.yyy.1.9:1433 SYN ******S* Jan 21 15:42:22 203.145.188.211:3463 -> xxx.yyy.1.12:1433 SYN ******S* [...] Jan 21 15:53:19 203.145.188.211:1615 -> xxx.yyy.255.187:1433 SYN ******S* Jan 21 15:53:19 203.145.188.211:1619 -> xxx.yyy.255.191:1433 SYN ******S* Jan 21 15:53:19 203.145.188.211:1626 -> xxx.yyy.255.198:1433 SYN ******S* Jan 21 15:53:19 203.145.188.211:1627 -> xxx.yyy.255.199:1433 SYN ******S* Jan 21 15:53:19 203.145.188.211:1640 -> xxx.yyy.255.212:1433 SYN ******S* Jan 21 15:53:19 203.145.188.211:1650 -> xxx.yyy.255.222:1433 SYN ******S* Jan 21 15:53:19 203.145.188.211:1649 -> xxx.yyy.255.221:1433 SYN ******S* Jan 21 15:53:19 203.145.188.211:1645 -> xxx.yyy.255.217:1433 SYN ******S* Jan 21 15:53:20 203.145.188.211:1682 -> xxx.yyy.255.254:1433 SYN ******S* 35598 [...] 31242 Jan 21 13:19:56 200.89.38.91:1967 -> xxx.yyy.1.0:1433 SYN ******S* Jan 21 13:19:56 200.89.38.91:1975 -> xxx.yyy.1.1:1433 SYN ******S* Jan 21 13:19:59 200.89.38.91:1982 -> xxx.yyy.1.3:1433 SYN ******S* Jan 21 13:19:56 200.89.38.91:1998 -> xxx.yyy.1.4:1433 SYN ******S* Jan 21 13:19:56 200.89.38.91:2011 -> xxx.yyy.1.6:1433 SYN ******S* Jan 21 13:19:56 200.89.38.91:2023 -> xxx.yyy.1.7:1433 SYN ******S* Jan 21 13:19:56 200.89.38.91:2029 -> xxx.yyy.1.8:1433 SYN ******S* Jan 21 13:19:56 200.89.38.91:2066 -> xxx.yyy.1.12:1433 SYN ******S* [...] Jan 21 16:30:35 200.89.38.91:3242 -> xxx.yyy.255.201:1433 SYN ******S* Jan 21 16:30:36 200.89.38.91:1642 -> xxx.yyy.255.205:1433 SYN ******S* Jan 21 16:30:37 200.89.38.91:3776 -> xxx.yyy.255.213:1433 SYN ******S* Jan 21 16:30:38 200.89.38.91:4781 -> xxx.yyy.255.223:1433 SYN ******S* Jan 21 16:30:38 200.89.38.91:3449 -> xxx.yyy.255.226:1433 SYN ******S* Jan 21 16:30:38 200.89.38.91:4908 -> xxx.yyy.255.227:1433 SYN ******S* Jan 21 16:30:40 200.89.38.91:4139 -> xxx.yyy.255.238:1433 SYN ******S* Jan 21 16:30:42 200.89.38.91:2946 -> xxx.yyy.255.251:1433 SYN ******S* 29957 Jan 21 14:48:27 201.133.67.125:62725 -> xxx.yyy.168.99:1433 SYN ******S* Jan 21 14:48:28 201.133.67.125:65407 -> xxx.yyy.168.104:1433 SYN ******S* Jan 21 14:48:28 201.133.67.125:63815 -> xxx.yyy.168.68:1433 SYN ******S* Jan 21 14:48:28 201.133.67.125:62127 -> xxx.yyy.168.105:1433 SYN ******S* Jan 21 14:48:28 201.133.67.125:61545 -> xxx.yyy.168.69:1433 SYN ******S* Jan 21 14:48:31 201.133.67.125:63217 -> xxx.yyy.168.106:1433 SYN ******S* Jan 21 14:48:31 201.133.67.125:63007 -> xxx.yyy.168.112:1433 SYN ******S* Jan 21 14:48:28 201.133.67.125:64535 -> xxx.yyy.168.71:1433 SYN ******S* [...] Jan 21 15:27:50 201.133.67.125:63297 -> xxx.yyy.255.228:1433 SYN ******S* Jan 21 15:27:51 201.133.67.125:65311 -> xxx.yyy.255.232:1433 SYN ******S* Jan 21 15:27:51 201.133.67.125:61877 -> xxx.yyy.255.236:1433 SYN ******S* Jan 21 15:27:51 201.133.67.125:62399 -> xxx.yyy.255.233:1433 SYN ******S* Jan 21 15:27:51 201.133.67.125:62971 -> xxx.yyy.255.246:1433 SYN ******S* Jan 21 15:27:51 201.133.67.125:63835 -> xxx.yyy.255.245:1433 SYN ******S* Jan 21 15:27:51 201.133.67.125:64667 -> xxx.yyy.255.248:1433 SYN ******S* Jan 21 15:27:52 201.133.67.125:63999 -> xxx.yyy.255.250:1433 SYN ******S* Jan 21 15:27:52 201.133.67.125:62775 -> xxx.yyy.255.253:1433 SYN ******S* 24639 Jan 21 10:01:37 65.166.97.230:3686 -> xxx.yyy.1.9:6101 SYN ******S* Jan 21 10:01:37 65.166.97.230:3687 -> xxx.yyy.1.10:6101 SYN ******S* Jan 21 10:01:37 65.166.97.230:3692 -> xxx.yyy.1.15:6101 SYN ******S* Jan 21 10:01:37 65.166.97.230:3693 -> xxx.yyy.1.16:6101 SYN ******S* Jan 21 10:01:37 65.166.97.230:3694 -> xxx.yyy.1.17:6101 SYN ******S* Jan 21 10:01:37 65.166.97.230:3695 -> xxx.yyy.1.18:6101 SYN ******S* Jan 21 10:01:37 65.166.97.230:3696 -> xxx.yyy.1.19:6101 SYN ******S* Jan 21 10:01:37 65.166.97.230:3697 -> xxx.yyy.1.20:6101 SYN ******S* [...] Jan 21 10:03:03 65.166.97.230:3693 -> xxx.yyy.255.246:6101 SYN ******S* Jan 21 10:03:03 65.166.97.230:3694 -> xxx.yyy.255.247:6101 SYN ******S* Jan 21 10:03:03 65.166.97.230:3695 -> xxx.yyy.255.248:6101 SYN ******S* Jan 21 10:03:03 65.166.97.230:3696 -> xxx.yyy.255.249:6101 SYN ******S* Jan 21 10:03:03 65.166.97.230:3697 -> xxx.yyy.255.250:6101 SYN ******S* Jan 21 10:03:03 65.166.97.230:3698 -> xxx.yyy.255.251:6101 SYN ******S* Jan 21 10:03:03 65.166.97.230:3699 -> xxx.yyy.255.252:6101 SYN ******S* Jan 21 10:03:03 65.166.97.230:3700 -> xxx.yyy.255.253:6101 SYN ******S* Jan 21 10:03:03 65.166.97.230:3701 -> xxx.yyy.255.254:6101 SYN ******S* 24349 Jan 21 20:03:28 194.208.24.5:4387 -> xxx.yyy.1.1:80 SYN ******S* Jan 21 20:03:28 194.208.24.5:4386 -> xxx.yyy.1.0:80 SYN ******S* Jan 21 20:03:28 194.208.24.5:4388 -> xxx.yyy.1.2:80 SYN ******S* Jan 21 20:03:28 194.208.24.5:4391 -> xxx.yyy.1.5:80 SYN ******S* Jan 21 20:03:28 194.208.24.5:4393 -> xxx.yyy.1.7:80 SYN ******S* Jan 21 20:03:28 194.208.24.5:4395 -> xxx.yyy.1.9:80 SYN ******S* Jan 21 20:03:28 194.208.24.5:4396 -> xxx.yyy.1.10:80 SYN ******S* Jan 21 20:03:28 194.208.24.5:4397 -> xxx.yyy.1.11:80 SYN ******S* [...] Jan 21 20:04:49 194.208.24.5:4351 -> xxx.yyy.255.245:80 SYN ******S* Jan 21 20:04:49 194.208.24.5:4353 -> xxx.yyy.255.247:80 SYN ******S* Jan 21 20:04:49 194.208.24.5:4354 -> xxx.yyy.255.248:80 SYN ******S* Jan 21 20:04:49 194.208.24.5:4356 -> xxx.yyy.255.250:80 SYN ******S* Jan 21 20:04:49 194.208.24.5:4358 -> xxx.yyy.255.252:80 SYN ******S* Jan 21 20:04:49 194.208.24.5:4357 -> xxx.yyy.255.251:80 SYN ******S* Jan 21 20:04:49 194.208.24.5:4359 -> xxx.yyy.255.253:80 SYN ******S* Jan 21 20:04:49 194.208.24.5:4360 -> xxx.yyy.255.254:80 SYN ******S* 24145 Jan 21 21:56:03 130.91.75.67:1504 -> xxx.yyy.1.1:1433 SYN ******S* Jan 21 21:56:03 130.91.75.67:1505 -> xxx.yyy.1.2:1433 SYN ******S* Jan 21 21:56:03 130.91.75.67:1506 -> xxx.yyy.1.3:1433 SYN ******S* Jan 21 21:56:03 130.91.75.67:1507 -> xxx.yyy.1.4:1433 SYN ******S* Jan 21 21:56:03 130.91.75.67:1508 -> xxx.yyy.1.5:1433 SYN ******S* Jan 21 21:56:03 130.91.75.67:1509 -> xxx.yyy.1.6:1433 SYN ******S* Jan 21 21:56:03 130.91.75.67:1514 -> xxx.yyy.1.11:1433 SYN ******S* Jan 21 21:56:03 130.91.75.67:1515 -> xxx.yyy.1.12:1433 SYN ******S* [...] Jan 21 22:07:26 130.91.75.67:4849 -> xxx.yyy.255.235:1433 SYN ******S* Jan 21 22:07:26 130.91.75.67:4854 -> xxx.yyy.255.240:1433 SYN ******S* Jan 21 22:07:26 130.91.75.67:4855 -> xxx.yyy.255.241:1433 SYN ******S* Jan 21 22:07:26 130.91.75.67:4874 -> xxx.yyy.255.246:1433 SYN ******S* Jan 21 22:07:26 130.91.75.67:4876 -> xxx.yyy.255.247:1433 SYN ******S* Jan 21 22:07:26 130.91.75.67:4878 -> xxx.yyy.255.248:1433 SYN ******S* Jan 21 22:07:26 130.91.75.67:4885 -> xxx.yyy.255.252:1433 SYN ******S* Jan 21 22:07:26 130.91.75.67:4891 -> xxx.yyy.255.253:1433 SYN ******S* 22154 [...] 18481 Jan 21 13:33:31 201.128.63.239:63889 -> xxx.yyy.1.6:1433 SYN ******S* Jan 21 13:33:28 201.128.63.239:62483 -> xxx.yyy.1.1:1433 SYN ******S* Jan 21 13:33:31 201.128.63.239:65135 -> xxx.yyy.1.4:1433 SYN ******S* Jan 21 13:33:31 201.128.63.239:65133 -> xxx.yyy.1.3:1433 SYN ******S* Jan 21 13:33:31 201.128.63.239:61673 -> xxx.yyy.1.10:1433 SYN ******S* Jan 21 13:33:31 201.128.63.239:62631 -> xxx.yyy.1.12:1433 SYN ******S* Jan 21 13:33:31 201.128.63.239:64397 -> xxx.yyy.1.13:1433 SYN ******S* Jan 21 13:33:28 201.128.63.239:63399 -> xxx.yyy.1.14:1433 SYN ******S* [...] Jan 21 14:23:08 201.128.63.239:65403 -> xxx.yyy.111.244:1433 SYN ******S* Jan 21 14:23:12 201.128.63.239:63683 -> xxx.yyy.111.255:1433 SYN ******S* Jan 21 14:23:14 201.128.63.239:63455 -> xxx.yyy.111.249:1433 SYN ******S* Jan 21 14:23:15 201.128.63.239:61977 -> xxx.yyy.111.253:1433 SYN ******S* Jan 21 14:23:19 201.128.63.239:62607 -> xxx.yyy.111.248:1433 SYN ******S* Jan 21 14:23:20 201.128.63.239:63455 -> xxx.yyy.111.249:1433 SYN ******S* Jan 21 14:23:20 201.128.63.239:62041 -> xxx.yyy.111.250:1433 SYN ******S* Jan 21 14:23:21 201.128.63.239:63513 -> xxx.yyy.111.251:1433 SYN ******S* Jan 21 14:23:21 201.128.63.239:63683 -> xxx.yyy.111.255:1433 SYN ******S* 15135 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions