[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Jan 24 01:59:19 211.142.52.122:1862 -> xxx.yyy.1.1:1433 SYN ******S* Jan 24 01:59:19 211.142.52.122:1863 -> xxx.yyy.1.2:1433 SYN ******S* Jan 24 01:59:19 211.142.52.122:1864 -> xxx.yyy.1.3:1433 SYN ******S* Jan 24 01:59:19 211.142.52.122:1865 -> xxx.yyy.1.4:1433 SYN ******S* Jan 24 01:59:16 211.142.52.122:1867 -> xxx.yyy.1.5:1433 SYN ******S* Jan 24 01:59:16 211.142.52.122:1868 -> xxx.yyy.1.6:1433 SYN ******S* Jan 24 01:59:16 211.142.52.122:1869 -> xxx.yyy.1.7:1433 SYN ******S* Jan 24 01:59:19 211.142.52.122:1870 -> xxx.yyy.1.8:1433 SYN ******S* [...] Jan 24 05:44:51 211.142.52.122:2264 -> xxx.yyy.252.58:1433 SYN ******S* Jan 24 05:44:51 211.142.52.122:2268 -> xxx.yyy.252.59:1433 SYN ******S* Jan 24 05:44:51 211.142.52.122:2278 -> xxx.yyy.252.60:1433 SYN ******S* Jan 24 05:44:53 211.142.52.122:2105 -> xxx.yyy.252.15:1433 SYN ******S* Jan 24 05:44:53 211.142.52.122:2103 -> xxx.yyy.252.14:1433 SYN ******S* Jan 24 05:44:53 211.142.52.122:2333 -> xxx.yyy.252.64:1433 SYN ******S* Jan 24 05:44:53 211.142.52.122:2240 -> xxx.yyy.252.50:1433 SYN ******S* Jan 24 05:44:53 211.142.52.122:2112 -> xxx.yyy.252.18:1433 SYN ******S* Jan 24 05:44:53 211.142.52.122:2110 -> xxx.yyy.252.17:1433 SYN ******S* 84483 Jan 24 07:11:10 69.28.64.23:65371 -> xxx.yyy.1.1:2433 SYN ******S* Jan 24 07:11:10 69.28.64.23:65372 -> xxx.yyy.1.2:2433 SYN ******S* Jan 24 07:11:11 69.28.64.23:65373 -> xxx.yyy.1.3:2433 SYN ******S* Jan 24 07:11:12 69.28.64.23:65374 -> xxx.yyy.1.4:2433 SYN ******S* Jan 24 07:11:12 69.28.64.23:65375 -> xxx.yyy.1.5:2433 SYN ******S* Jan 24 07:11:12 69.28.64.23:65376 -> xxx.yyy.1.6:2433 SYN ******S* Jan 24 07:11:12 69.28.64.23:65377 -> xxx.yyy.1.7:2433 SYN ******S* Jan 24 07:11:11 69.28.64.23:65380 -> xxx.yyy.1.8:2433 SYN ******S* [...] Jan 24 07:22:51 69.28.64.23:1681 -> xxx.yyy.255.245:2433 SYN ******S* Jan 24 07:22:51 69.28.64.23:1683 -> xxx.yyy.255.247:2433 SYN ******S* Jan 24 07:22:51 69.28.64.23:1685 -> xxx.yyy.255.249:2433 SYN ******S* Jan 24 07:22:51 69.28.64.23:1680 -> xxx.yyy.255.244:2433 SYN ******S* Jan 24 07:22:51 69.28.64.23:1682 -> xxx.yyy.255.246:2433 SYN ******S* Jan 24 07:22:51 69.28.64.23:1684 -> xxx.yyy.255.248:2433 SYN ******S* Jan 24 07:22:51 69.28.64.23:1688 -> xxx.yyy.255.252:2433 SYN ******S* Jan 24 07:22:51 69.28.64.23:1690 -> xxx.yyy.255.254:2433 SYN ******S* Jan 24 07:22:51 69.28.64.23:1689 -> xxx.yyy.255.253:2433 SYN ******S* 68119 Jan 24 02:21:39 194.145.160.119:1241 -> xxx.yyy.1.1:1433 SYN ******S* Jan 24 02:21:42 194.145.160.119:1245 -> xxx.yyy.1.2:1433 SYN ******S* Jan 24 02:21:42 194.145.160.119:1249 -> xxx.yyy.1.3:1433 SYN ******S* Jan 24 02:21:42 194.145.160.119:1257 -> xxx.yyy.1.5:1433 SYN ******S* Jan 24 02:21:42 194.145.160.119:1261 -> xxx.yyy.1.6:1433 SYN ******S* Jan 24 02:21:42 194.145.160.119:1253 -> xxx.yyy.1.4:1433 SYN ******S* Jan 24 02:21:42 194.145.160.119:1269 -> xxx.yyy.1.8:1433 SYN ******S* Jan 24 02:21:42 194.145.160.119:1265 -> xxx.yyy.1.7:1433 SYN ******S* [...] Jan 24 02:34:54 194.145.160.119:2099 -> xxx.yyy.255.245:1433 SYN ******S* Jan 24 02:34:54 194.145.160.119:2095 -> xxx.yyy.255.244:1433 SYN ******S* Jan 24 02:34:54 194.145.160.119:2119 -> xxx.yyy.255.250:1433 SYN ******S* Jan 24 02:34:54 194.145.160.119:2103 -> xxx.yyy.255.246:1433 SYN ******S* Jan 24 02:34:54 194.145.160.119:2107 -> xxx.yyy.255.247:1433 SYN ******S* Jan 24 02:34:54 194.145.160.119:2111 -> xxx.yyy.255.248:1433 SYN ******S* Jan 24 02:34:54 194.145.160.119:2115 -> xxx.yyy.255.249:1433 SYN ******S* Jan 24 02:34:54 194.145.160.119:2135 -> xxx.yyy.255.254:1433 SYN ******S* Jan 24 02:34:54 194.145.160.119:2131 -> xxx.yyy.255.253:1433 SYN ******S* 65148 Jan 24 06:50:30 221.2.240.236:2544 -> xxx.yyy.1.0:1433 SYN ******S* Jan 24 06:50:30 221.2.240.236:2546 -> xxx.yyy.1.1:1433 SYN ******S* Jan 24 06:50:30 221.2.240.236:2547 -> xxx.yyy.1.2:1433 SYN ******S* Jan 24 06:50:30 221.2.240.236:2551 -> xxx.yyy.1.3:1433 SYN ******S* Jan 24 06:50:30 221.2.240.236:2554 -> xxx.yyy.1.4:1433 SYN ******S* Jan 24 06:50:30 221.2.240.236:2558 -> xxx.yyy.1.6:1433 SYN ******S* Jan 24 06:50:30 221.2.240.236:2562 -> xxx.yyy.1.7:1433 SYN ******S* Jan 24 06:50:30 221.2.240.236:2563 -> xxx.yyy.1.8:1433 SYN ******S* [...] Jan 24 09:45:00 221.2.240.236:3672 -> xxx.yyy.188.100:1433 SYN ******S* Jan 24 09:45:00 221.2.240.236:3682 -> xxx.yyy.188.104:1433 SYN ******S* Jan 24 09:45:00 221.2.240.236:3676 -> xxx.yyy.188.102:1433 SYN ******S* Jan 24 09:45:00 221.2.240.236:3674 -> xxx.yyy.188.101:1433 SYN ******S* Jan 24 09:45:00 221.2.240.236:3685 -> xxx.yyy.188.105:1433 SYN ******S* Jan 24 09:45:00 221.2.240.236:3688 -> xxx.yyy.188.107:1433 SYN ******S* Jan 24 09:45:00 221.2.240.236:3687 -> xxx.yyy.188.106:1433 SYN ******S* Jan 24 09:45:01 221.2.240.236:3545 -> xxx.yyy.188.70:1433 SYN ******S* Jan 24 09:45:01 221.2.240.236:3549 -> xxx.yyy.188.71:1433 SYN ******S* 62450 Jan 24 13:43:17 80.235.116.2:56057 -> xxx.yyy.1.11:1433 SYN ******S* Jan 24 13:43:17 80.235.116.2:56063 -> xxx.yyy.1.15:1433 SYN ******S* Jan 24 13:43:17 80.235.116.2:56068 -> xxx.yyy.1.18:1433 SYN ******S* Jan 24 13:43:17 80.235.116.2:56070 -> xxx.yyy.1.19:1433 SYN ******S* Jan 24 13:43:17 80.235.116.2:56073 -> xxx.yyy.1.21:1433 SYN ******S* Jan 24 13:43:17 80.235.116.2:56075 -> xxx.yyy.1.22:1433 SYN ******S* Jan 24 13:43:17 80.235.116.2:56079 -> xxx.yyy.1.25:1433 SYN ******S* Jan 24 13:43:17 80.235.116.2:56103 -> xxx.yyy.1.39:1433 SYN ******S* [...] Jan 24 17:46:15 80.235.116.2:55350 -> xxx.yyy.255.232:1433 SYN ******S* Jan 24 17:46:15 80.235.116.2:55352 -> xxx.yyy.255.233:1433 SYN ******S* Jan 24 17:46:15 80.235.116.2:55359 -> xxx.yyy.255.237:1433 SYN ******S* Jan 24 17:46:15 80.235.116.2:55357 -> xxx.yyy.255.236:1433 SYN ******S* Jan 24 17:46:16 80.235.116.2:55365 -> xxx.yyy.255.238:1433 SYN ******S* Jan 24 17:46:16 80.235.116.2:55377 -> xxx.yyy.255.241:1433 SYN ******S* Jan 24 17:46:16 80.235.116.2:55383 -> xxx.yyy.255.247:1433 SYN ******S* Jan 24 17:46:16 80.235.116.2:55384 -> xxx.yyy.255.248:1433 SYN ******S* Jan 24 17:46:16 80.235.116.2:55381 -> xxx.yyy.255.245:1433 SYN ******S* 60386 Jan 24 00:55:23 217.46.206.85:1031 -> xxx.yyy.1.1:3306 SYN ******S* Jan 24 00:55:23 217.46.206.85:1032 -> xxx.yyy.1.2:3306 SYN ******S* Jan 24 00:55:23 217.46.206.85:1033 -> xxx.yyy.1.3:3306 SYN ******S* Jan 24 00:55:22 217.46.206.85:1034 -> xxx.yyy.1.4:3306 SYN ******S* Jan 24 00:55:25 217.46.206.85:1035 -> xxx.yyy.1.5:3306 SYN ******S* Jan 24 00:55:22 217.46.206.85:1037 -> xxx.yyy.1.6:3306 SYN ******S* Jan 24 00:55:25 217.46.206.85:1038 -> xxx.yyy.1.7:3306 SYN ******S* Jan 24 00:55:23 217.46.206.85:1039 -> xxx.yyy.1.8:3306 SYN ******S* [...] Jan 24 01:06:18 217.46.206.85:3572 -> xxx.yyy.255.231:3306 SYN ******S* Jan 24 01:06:18 217.46.206.85:3579 -> xxx.yyy.255.238:3306 SYN ******S* Jan 24 01:06:18 217.46.206.85:3576 -> xxx.yyy.255.235:3306 SYN ******S* Jan 24 01:06:18 217.46.206.85:3573 -> xxx.yyy.255.232:3306 SYN ******S* Jan 24 01:06:18 217.46.206.85:3577 -> xxx.yyy.255.236:3306 SYN ******S* Jan 24 01:06:18 217.46.206.85:3574 -> xxx.yyy.255.233:3306 SYN ******S* Jan 24 01:06:18 217.46.206.85:3578 -> xxx.yyy.255.237:3306 SYN ******S* Jan 24 01:06:19 217.46.206.85:3583 -> xxx.yyy.255.242:3306 SYN ******S* Jan 24 01:06:19 217.46.206.85:3595 -> xxx.yyy.255.254:3306 SYN ******S* 53733 Jan 24 04:40:53 67.68.215.83:4814 -> xxx.yyy.1.1:6101 SYN ******S* Jan 24 04:40:53 67.68.215.83:4815 -> xxx.yyy.1.2:6101 SYN ******S* Jan 24 04:40:53 67.68.215.83:4818 -> xxx.yyy.1.5:6101 SYN ******S* Jan 24 04:40:53 67.68.215.83:4820 -> xxx.yyy.1.7:6101 SYN ******S* Jan 24 04:40:53 67.68.215.83:4827 -> xxx.yyy.1.10:6101 SYN ******S* Jan 24 04:40:53 67.68.215.83:4830 -> xxx.yyy.1.13:6101 SYN ******S* Jan 24 04:40:53 67.68.215.83:4831 -> xxx.yyy.1.14:6101 SYN ******S* Jan 24 04:40:53 67.68.215.83:4834 -> xxx.yyy.1.17:6101 SYN ******S* [...] Jan 24 05:07:36 67.68.215.83:4046 -> xxx.yyy.255.235:6101 SYN ******S* Jan 24 05:07:36 67.68.215.83:4049 -> xxx.yyy.255.236:6101 SYN ******S* Jan 24 05:07:36 67.68.215.83:4051 -> xxx.yyy.255.237:6101 SYN ******S* Jan 24 05:07:36 67.68.215.83:4052 -> xxx.yyy.255.238:6101 SYN ******S* Jan 24 05:07:36 67.68.215.83:4053 -> xxx.yyy.255.239:6101 SYN ******S* Jan 24 05:07:36 67.68.215.83:4056 -> xxx.yyy.255.240:6101 SYN ******S* Jan 24 05:07:36 67.68.215.83:4058 -> xxx.yyy.255.241:6101 SYN ******S* Jan 24 05:07:36 67.68.215.83:4060 -> xxx.yyy.255.242:6101 SYN ******S* 44867 Jan 24 17:32:43 200.115.131.178:4660 -> xxx.yyy.1.2:3306 SYN ******S* Jan 24 17:32:42 200.115.131.178:4663 -> xxx.yyy.1.5:3306 SYN ******S* Jan 24 17:32:45 200.115.131.178:4664 -> xxx.yyy.1.6:3306 SYN ******S* Jan 24 17:32:42 200.115.131.178:4665 -> xxx.yyy.1.7:3306 SYN ******S* Jan 24 17:32:43 200.115.131.178:4666 -> xxx.yyy.1.8:3306 SYN ******S* Jan 24 17:32:45 200.115.131.178:4668 -> xxx.yyy.1.10:3306 SYN ******S* Jan 24 17:32:42 200.115.131.178:4670 -> xxx.yyy.1.12:3306 SYN ******S* Jan 24 17:32:44 200.115.131.178:4674 -> xxx.yyy.1.16:3306 SYN ******S* [...] Jan 24 17:45:34 200.115.131.178:4398 -> xxx.yyy.255.239:3306 SYN ******S* Jan 24 17:45:34 200.115.131.178:4396 -> xxx.yyy.255.237:3306 SYN ******S* Jan 24 17:45:34 200.115.131.178:4394 -> xxx.yyy.255.235:3306 SYN ******S* Jan 24 17:45:34 200.115.131.178:4416 -> xxx.yyy.255.249:3306 SYN ******S* Jan 24 17:45:34 200.115.131.178:4415 -> xxx.yyy.255.248:3306 SYN ******S* Jan 24 17:45:34 200.115.131.178:4410 -> xxx.yyy.255.243:3306 SYN ******S* Jan 24 17:45:34 200.115.131.178:4411 -> xxx.yyy.255.244:3306 SYN ******S* Jan 24 17:45:34 200.115.131.178:4412 -> xxx.yyy.255.245:3306 SYN ******S* Jan 24 17:45:34 200.115.131.178:4428 -> xxx.yyy.255.254:3306 SYN ******S* 42399 Jan 24 14:24:38 68.53.209.124:2259 -> xxx.yyy.1.2:6129 SYN ******S* Jan 24 14:24:41 68.53.209.124:2271 -> xxx.yyy.1.6:6129 SYN ******S* Jan 24 14:24:38 68.53.209.124:2256 -> xxx.yyy.1.1:6129 SYN ******S* Jan 24 14:24:41 68.53.209.124:2274 -> xxx.yyy.1.7:6129 SYN ******S* Jan 24 14:24:38 68.53.209.124:2262 -> xxx.yyy.1.3:6129 SYN ******S* Jan 24 14:24:38 68.53.209.124:2286 -> xxx.yyy.1.11:6129 SYN ******S* Jan 24 14:24:41 68.53.209.124:2289 -> xxx.yyy.1.12:6129 SYN ******S* Jan 24 14:24:39 68.53.209.124:2277 -> xxx.yyy.1.8:6129 SYN ******S* [...] Jan 24 16:04:50 68.53.209.124:4094 -> xxx.yyy.255.225:6129 SYN ******S* Jan 24 16:04:51 68.53.209.124:4109 -> xxx.yyy.255.230:6129 SYN ******S* Jan 24 16:04:51 68.53.209.124:4115 -> xxx.yyy.255.232:6129 SYN ******S* Jan 24 16:04:51 68.53.209.124:4118 -> xxx.yyy.255.233:6129 SYN ******S* Jan 24 16:04:51 68.53.209.124:4124 -> xxx.yyy.255.235:6129 SYN ******S* Jan 24 16:04:52 68.53.209.124:4136 -> xxx.yyy.255.239:6129 SYN ******S* Jan 24 16:04:52 68.53.209.124:4142 -> xxx.yyy.255.241:6129 SYN ******S* Jan 24 16:04:53 68.53.209.124:4163 -> xxx.yyy.255.248:6129 SYN ******S* Jan 24 16:04:53 68.53.209.124:4178 -> xxx.yyy.255.253:6129 SYN ******S* 34499 Jan 24 13:43:02 65.170.141.132:2854 -> xxx.yyy.1.1:1433 SYN ******S* Jan 24 13:43:02 65.170.141.132:2856 -> xxx.yyy.1.3:1433 SYN ******S* Jan 24 13:43:02 65.170.141.132:2858 -> xxx.yyy.1.5:1433 SYN ******S* Jan 24 13:43:02 65.170.141.132:2859 -> xxx.yyy.1.6:1433 SYN ******S* Jan 24 13:43:05 65.170.141.132:2862 -> xxx.yyy.1.9:1433 SYN ******S* Jan 24 13:43:02 65.170.141.132:2864 -> xxx.yyy.1.11:1433 SYN ******S* Jan 24 13:43:05 65.170.141.132:2865 -> xxx.yyy.1.12:1433 SYN ******S* Jan 24 13:43:05 65.170.141.132:2866 -> xxx.yyy.1.13:1433 SYN ******S* [...] Jan 24 13:54:52 65.170.141.132:1443 -> xxx.yyy.255.207:1433 SYN ******S* Jan 24 13:54:52 65.170.141.132:1453 -> xxx.yyy.255.217:1433 SYN ******S* Jan 24 13:54:52 65.170.141.132:1451 -> xxx.yyy.255.215:1433 SYN ******S* Jan 24 13:54:52 65.170.141.132:1463 -> xxx.yyy.255.227:1433 SYN ******S* Jan 24 13:54:52 65.170.141.132:1474 -> xxx.yyy.255.238:1433 SYN ******S* Jan 24 13:54:52 65.170.141.132:1475 -> xxx.yyy.255.239:1433 SYN ******S* Jan 24 13:54:52 65.170.141.132:1485 -> xxx.yyy.255.249:1433 SYN ******S* Jan 24 13:54:52 65.170.141.132:1478 -> xxx.yyy.255.242:1433 SYN ******S* 29216 Jan 24 08:57:12 213.180.210.35:53884 -> xxx.yyy.206.102:1080 SYN ******S* Jan 24 08:57:12 213.180.210.35:50569 -> xxx.yyy.206.102:1075 SYN ******S* Jan 24 08:57:09 213.180.210.35:32608 -> xxx.yyy.206.102:80 SYN ******S* Jan 24 08:57:09 213.180.210.35:30262 -> xxx.yyy.206.102:81 SYN ******S* Jan 24 08:57:12 213.180.210.35:56640 -> xxx.yyy.206.102:3128 SYN ******S* Jan 24 08:57:12 213.180.210.35:53389 -> xxx.yyy.206.102:4480 SYN ******S* Jan 24 08:57:12 213.180.210.35:40144 -> xxx.yyy.206.102:6588 SYN ******S* Jan 24 08:57:12 213.180.210.35:36639 -> xxx.yyy.206.102:8000 SYN ******S* [...] Jan 24 10:22:25 213.180.210.35:48850 -> xxx.yyy.206.102:20432 SYN ******S* Jan 24 10:22:25 213.180.210.35:48850 -> xxx.yyy.206.102:42 SYN ******S* Jan 24 10:22:25 213.180.210.35:48850 -> xxx.yyy.206.102:6004 SYN ******S* Jan 24 10:22:25 213.180.210.35:48850 -> xxx.yyy.206.102:6045 SYN ******S* Jan 24 10:22:26 213.180.210.35:48851 -> xxx.yyy.206.102:6013 SYN ******S* Jan 24 10:22:26 213.180.210.35:48851 -> xxx.yyy.206.102:6019 SYN ******S* Jan 24 10:22:25 213.180.210.35:48850 -> xxx.yyy.206.102:6044 SYN ******S* Jan 24 10:22:25 213.180.210.35:48850 -> xxx.yyy.206.102:6038 SYN ******S* 25777 Jan 24 13:53:04 144.118.170.243:3371 -> xxx.yyy.1.0:6101 SYN ******S* Jan 24 13:53:04 144.118.170.243:3372 -> xxx.yyy.1.1:6101 SYN ******S* Jan 24 13:53:04 144.118.170.243:3373 -> xxx.yyy.1.2:6101 SYN ******S* Jan 24 13:53:04 144.118.170.243:3374 -> xxx.yyy.1.3:6101 SYN ******S* Jan 24 13:53:04 144.118.170.243:3375 -> xxx.yyy.1.4:6101 SYN ******S* Jan 24 13:53:04 144.118.170.243:3382 -> xxx.yyy.1.11:6101 SYN ******S* Jan 24 13:53:04 144.118.170.243:3386 -> xxx.yyy.1.15:6101 SYN ******S* Jan 24 13:53:04 144.118.170.243:3387 -> xxx.yyy.1.16:6101 SYN ******S* [...] Jan 24 13:54:07 144.118.170.243:3380 -> xxx.yyy.255.139:6101 SYN ******S* Jan 24 13:54:07 144.118.170.243:3381 -> xxx.yyy.255.140:6101 SYN ******S* Jan 24 13:54:07 144.118.170.243:3382 -> xxx.yyy.255.141:6101 SYN ******S* Jan 24 13:54:07 144.118.170.243:3383 -> xxx.yyy.255.142:6101 SYN ******S* Jan 24 13:54:08 144.118.170.243:3386 -> xxx.yyy.255.145:6101 SYN ******S* Jan 24 13:54:08 144.118.170.243:3387 -> xxx.yyy.255.146:6101 SYN ******S* Jan 24 13:54:08 144.118.170.243:3388 -> xxx.yyy.255.147:6101 SYN ******S* Jan 24 13:54:08 144.118.170.243:3389 -> xxx.yyy.255.148:6101 SYN ******S* Jan 24 13:54:08 144.118.170.243:3390 -> xxx.yyy.255.149:6101 SYN ******S* 16847 Jan 24 15:02:40 212.205.234.64:4042 -> xxx.yyy.128.6:1433 SYN ******S* Jan 24 15:02:43 212.205.234.64:4049 -> xxx.yyy.128.7:1433 SYN ******S* Jan 24 15:02:43 212.205.234.64:4050 -> xxx.yyy.128.8:1433 SYN ******S* Jan 24 15:02:44 212.205.234.64:4141 -> xxx.yyy.128.12:1433 SYN ******S* Jan 24 15:02:41 212.205.234.64:4156 -> xxx.yyy.128.13:1433 SYN ******S* Jan 24 15:02:41 212.205.234.64:4194 -> xxx.yyy.128.15:1433 SYN ******S* Jan 24 15:02:41 212.205.234.64:4197 -> xxx.yyy.128.16:1433 SYN ******S* Jan 24 15:02:41 212.205.234.64:4255 -> xxx.yyy.128.18:1433 SYN ******S* [...] Jan 24 15:50:58 212.205.234.64:3471 -> xxx.yyy.181.143:1433 SYN ******S* Jan 24 15:50:59 212.205.234.64:3491 -> xxx.yyy.181.147:1433 SYN ******S* Jan 24 15:50:59 212.205.234.64:3483 -> xxx.yyy.181.146:1433 SYN ******S* Jan 24 15:50:59 212.205.234.64:3507 -> xxx.yyy.181.151:1433 SYN ******S* Jan 24 15:50:59 212.205.234.64:3536 -> xxx.yyy.181.154:1433 SYN ******S* Jan 24 15:50:59 212.205.234.64:3552 -> xxx.yyy.181.158:1433 SYN ******S* Jan 24 15:51:00 212.205.234.64:3572 -> xxx.yyy.181.159:1433 SYN ******S* Jan 24 15:51:00 212.205.234.64:3592 -> xxx.yyy.181.162:1433 SYN ******S* 15526 [...] 14234 Jan 24 14:32:07 144.118.188.81:2937 -> xxx.yyy.1.3:6101 SYN ******S* Jan 24 14:32:07 144.118.188.81:2938 -> xxx.yyy.1.4:6101 SYN ******S* Jan 24 14:32:07 144.118.188.81:2939 -> xxx.yyy.1.5:6101 SYN ******S* Jan 24 14:32:07 144.118.188.81:2940 -> xxx.yyy.1.6:6101 SYN ******S* Jan 24 14:32:07 144.118.188.81:2941 -> xxx.yyy.1.7:6101 SYN ******S* Jan 24 14:32:07 144.118.188.81:2942 -> xxx.yyy.1.8:6101 SYN ******S* Jan 24 14:32:07 144.118.188.81:2943 -> xxx.yyy.1.9:6101 SYN ******S* Jan 24 14:32:07 144.118.188.81:2944 -> xxx.yyy.1.10:6101 SYN ******S* [...] Jan 24 14:33:13 144.118.188.81:2941 -> xxx.yyy.255.237:6101 SYN ******S* Jan 24 14:33:13 144.118.188.81:2942 -> xxx.yyy.255.238:6101 SYN ******S* Jan 24 14:33:13 144.118.188.81:2943 -> xxx.yyy.255.239:6101 SYN ******S* Jan 24 14:33:13 144.118.188.81:2944 -> xxx.yyy.255.240:6101 SYN ******S* Jan 24 14:33:13 144.118.188.81:2945 -> xxx.yyy.255.241:6101 SYN ******S* Jan 24 14:33:13 144.118.188.81:2946 -> xxx.yyy.255.242:6101 SYN ******S* Jan 24 14:33:13 144.118.188.81:2947 -> xxx.yyy.255.243:6101 SYN ******S* Jan 24 14:33:13 144.118.188.81:2948 -> xxx.yyy.255.244:6101 SYN ******S* 12888 [...] 12026 [...] 11976 Jan 24 23:43:16 24.227.33.253:2427 -> xxx.yyy.1.1:1433 SYN ******S* Jan 24 23:43:15 24.227.33.253:2429 -> xxx.yyy.1.3:1433 SYN ******S* Jan 24 23:43:15 24.227.33.253:2432 -> xxx.yyy.1.6:1433 SYN ******S* Jan 24 23:43:13 24.227.33.253:2434 -> xxx.yyy.1.8:1433 SYN ******S* Jan 24 23:43:15 24.227.33.253:2435 -> xxx.yyy.1.9:1433 SYN ******S* Jan 24 23:43:16 24.227.33.253:2437 -> xxx.yyy.1.11:1433 SYN ******S* Jan 24 23:43:15 24.227.33.253:2438 -> xxx.yyy.1.12:1433 SYN ******S* Jan 24 23:43:13 24.227.33.253:2442 -> xxx.yyy.1.16:1433 SYN ******S* [...] Jan 24 23:59:33 24.227.33.253:2666 -> xxx.yyy.107.191:1433 SYN ******S* Jan 24 23:59:33 24.227.33.253:2618 -> xxx.yyy.107.143:1433 SYN ******S* Jan 24 23:59:33 24.227.33.253:2644 -> xxx.yyy.107.169:1433 SYN ******S* Jan 24 23:59:33 24.227.33.253:2660 -> xxx.yyy.107.185:1433 SYN ******S* Jan 24 23:59:33 24.227.33.253:2654 -> xxx.yyy.107.179:1433 SYN ******S* Jan 24 23:59:33 24.227.33.253:2717 -> xxx.yyy.107.242:1433 SYN ******S* Jan 24 23:59:33 24.227.33.253:2691 -> xxx.yyy.107.216:1433 SYN ******S* Jan 24 23:59:33 24.227.33.253:2649 -> xxx.yyy.107.174:1433 SYN ******S* Jan 24 23:59:33 24.227.33.253:2692 -> xxx.yyy.107.217:1433 SYN ******S* 11710 Jan 24 14:51:32 212.205.108.197:12636 -> xxx.yyy.1.5:1433 SYN ******S* Jan 24 14:51:32 212.205.108.197:12637 -> xxx.yyy.1.6:1433 SYN ******S* Jan 24 14:51:30 212.205.108.197:12494 -> xxx.yyy.1.9:1433 SYN ******S* Jan 24 14:51:30 212.205.108.197:12652 -> xxx.yyy.1.23:1433 SYN ******S* Jan 24 14:51:33 212.205.108.197:11876 -> xxx.yyy.1.26:1433 SYN ******S* Jan 24 14:51:30 212.205.108.197:12503 -> xxx.yyy.1.28:1433 SYN ******S* Jan 24 14:51:33 212.205.108.197:12662 -> xxx.yyy.1.45:1433 SYN ******S* Jan 24 14:51:30 212.205.108.197:12517 -> xxx.yyy.1.46:1433 SYN ******S* [...] Jan 24 15:03:57 212.205.108.197:13077 -> xxx.yyy.254.229:1433 SYN ******S* Jan 24 15:03:58 212.205.108.197:13085 -> xxx.yyy.255.6:1433 SYN ******S* Jan 24 15:03:58 212.205.108.197:13084 -> xxx.yyy.255.5:1433 SYN ******S* Jan 24 15:03:58 212.205.108.197:13123 -> xxx.yyy.255.19:1433 SYN ******S* Jan 24 15:03:58 212.205.108.197:13097 -> xxx.yyy.255.79:1433 SYN ******S* Jan 24 15:03:59 212.205.108.197:13125 -> xxx.yyy.255.112:1433 SYN ******S* Jan 24 15:03:59 212.205.108.197:13126 -> xxx.yyy.255.121:1433 SYN ******S* Jan 24 15:03:59 212.205.108.197:13108 -> xxx.yyy.255.169:1433 SYN ******S* 11452 Jan 24 23:53:08 218.63.99.38:3018 -> xxx.yyy.235.129:5554 SYN ******S* Jan 24 23:53:11 218.63.99.38:3702 -> xxx.yyy.235.129:9898 SYN ******S* Jan 24 23:53:08 218.63.99.38:3019 -> xxx.yyy.235.131:5554 SYN ******S* Jan 24 23:53:09 218.63.99.38:3299 -> xxx.yyy.235.131:1023 SYN ******S* Jan 24 23:53:11 218.63.99.38:3700 -> xxx.yyy.235.131:9898 SYN ******S* Jan 24 23:53:08 218.63.99.38:3020 -> xxx.yyy.235.132:5554 SYN ******S* Jan 24 23:53:11 218.63.99.38:3703 -> xxx.yyy.235.132:9898 SYN ******S* Jan 24 23:53:08 218.63.99.38:3024 -> xxx.yyy.235.135:5554 SYN ******S* [...] Jan 24 23:54:38 218.63.99.38:4638 -> xxx.yyy.255.220:9898 SYN ******S* Jan 24 23:54:38 218.63.99.38:4640 -> xxx.yyy.255.222:9898 SYN ******S* Jan 24 23:54:38 218.63.99.38:4647 -> xxx.yyy.255.226:9898 SYN ******S* Jan 24 23:54:38 218.63.99.38:4660 -> xxx.yyy.255.227:9898 SYN ******S* Jan 24 23:54:38 218.63.99.38:4658 -> xxx.yyy.255.219:9898 SYN ******S* Jan 24 23:54:38 218.63.99.38:4664 -> xxx.yyy.255.229:9898 SYN ******S* Jan 24 23:54:38 218.63.99.38:4648 -> xxx.yyy.255.230:9898 SYN ******S* Jan 24 23:54:38 218.63.99.38:4667 -> xxx.yyy.255.233:9898 SYN ******S* 8081 Jan 24 00:03:08 218.76.2.160:3184 -> xxx.yyy.235.117:5554 SYN ******S* Jan 24 00:03:09 218.76.2.160:3469 -> xxx.yyy.235.117:1023 SYN ******S* Jan 24 00:03:11 218.76.2.160:3928 -> xxx.yyy.235.117:9898 SYN ******S* Jan 24 00:03:08 218.76.2.160:3187 -> xxx.yyy.235.116:5554 SYN ******S* Jan 24 00:03:11 218.76.2.160:3929 -> xxx.yyy.235.116:9898 SYN ******S* Jan 24 00:03:08 218.76.2.160:3192 -> xxx.yyy.236.89:5554 SYN ******S* Jan 24 00:03:08 218.76.2.160:3186 -> xxx.yyy.235.112:5554 SYN ******S* Jan 24 00:03:09 218.76.2.160:3468 -> xxx.yyy.235.112:1023 SYN ******S* [...] Jan 24 00:07:10 218.76.2.160:3011 -> xxx.yyy.236.45:9898 SYN ******S* Jan 24 00:07:10 218.76.2.160:3028 -> xxx.yyy.236.64:9898 SYN ******S* Jan 24 00:07:10 218.76.2.160:3020 -> xxx.yyy.236.53:9898 SYN ******S* Jan 24 00:07:10 218.76.2.160:3022 -> xxx.yyy.236.55:9898 SYN ******S* Jan 24 00:07:10 218.76.2.160:3029 -> xxx.yyy.236.66:9898 SYN ******S* Jan 24 00:07:11 218.76.2.160:3259 -> xxx.yyy.236.84:9898 SYN ******S* Jan 24 00:07:11 218.76.2.160:3260 -> xxx.yyy.236.86:9898 SYN ******S* Jan 24 00:07:11 218.76.2.160:3261 -> xxx.yyy.236.83:9898 SYN ******S* Jan 24 00:07:11 218.76.2.160:3262 -> xxx.yyy.236.80:9898 SYN ******S* 7806 Jan 24 23:19:53 220.123.95.77:1678 -> xxx.yyy.133.36:5554 SYN ******S* Jan 24 23:19:56 220.123.95.77:3004 -> xxx.yyy.133.36:9898 SYN ******S* Jan 24 23:19:53 220.123.95.77:1674 -> xxx.yyy.133.32:5554 SYN ******S* Jan 24 23:19:56 220.123.95.77:2978 -> xxx.yyy.133.32:9898 SYN ******S* Jan 24 23:19:53 220.123.95.77:1676 -> xxx.yyy.133.34:5554 SYN ******S* Jan 24 23:19:53 220.123.95.77:1679 -> xxx.yyy.133.37:5554 SYN ******S* Jan 24 23:19:54 220.123.95.77:2132 -> xxx.yyy.133.37:1023 SYN ******S* Jan 24 23:19:56 220.123.95.77:3005 -> xxx.yyy.133.37:9898 SYN ******S* [...] Jan 24 23:20:38 220.123.95.77:2145 -> xxx.yyy.153.121:9898 SYN ******S* Jan 24 23:20:39 220.123.95.77:2361 -> xxx.yyy.133.234:9898 SYN ******S* Jan 24 23:20:39 220.123.95.77:2358 -> xxx.yyy.133.231:9898 SYN ******S* Jan 24 23:20:39 220.123.95.77:2363 -> xxx.yyy.133.236:9898 SYN ******S* Jan 24 23:20:39 220.123.95.77:2362 -> xxx.yyy.133.235:9898 SYN ******S* Jan 24 23:20:39 220.123.95.77:2365 -> xxx.yyy.133.238:9898 SYN ******S* Jan 24 23:20:39 220.123.95.77:2368 -> xxx.yyy.133.241:9898 SYN ******S* Jan 24 23:20:39 220.123.95.77:2369 -> xxx.yyy.133.242:9898 SYN ******S* Jan 24 23:20:39 220.123.95.77:2370 -> xxx.yyy.133.243:9898 SYN ******S* 7523 Jan 24 22:53:57 222.151.39.159:1336 -> xxx.yyy.174.3:5554 SYN ******S* Jan 24 22:53:58 222.151.39.159:1791 -> xxx.yyy.174.3:1023 SYN ******S* Jan 24 22:53:57 222.151.39.159:1348 -> xxx.yyy.174.2:5554 SYN ******S* Jan 24 22:53:58 222.151.39.159:1798 -> xxx.yyy.174.2:1023 SYN ******S* Jan 24 22:53:57 222.151.39.159:1337 -> xxx.yyy.174.4:5554 SYN ******S* Jan 24 22:54:00 222.151.39.159:2702 -> xxx.yyy.174.4:9898 SYN ******S* Jan 24 22:53:57 222.151.39.159:1338 -> xxx.yyy.174.5:5554 SYN ******S* Jan 24 22:53:58 222.151.39.159:1793 -> xxx.yyy.174.5:1023 SYN ******S* [...] Jan 24 22:54:45 222.151.39.159:2083 -> xxx.yyy.194.110:9898 SYN ******S* Jan 24 22:54:45 222.151.39.159:2167 -> xxx.yyy.194.112:9898 SYN ******S* Jan 24 22:54:45 222.151.39.159:2299 -> xxx.yyy.194.114:9898 SYN ******S* Jan 24 22:54:45 222.151.39.159:2310 -> xxx.yyy.194.116:9898 SYN ******S* Jan 24 22:54:45 222.151.39.159:2305 -> xxx.yyy.194.115:9898 SYN ******S* Jan 24 22:54:45 222.151.39.159:2325 -> xxx.yyy.194.119:9898 SYN ******S* Jan 24 22:54:45 222.151.39.159:2326 -> xxx.yyy.194.120:9898 SYN ******S* Jan 24 22:54:45 222.151.39.159:2333 -> xxx.yyy.194.124:9898 SYN ******S* 6693 Jan 24 22:53:49 220.93.21.243:1954 -> xxx.yyy.194.162:5554 SYN ******S* Jan 24 22:53:52 220.93.21.243:3818 -> xxx.yyy.194.162:9898 SYN ******S* Jan 24 22:53:49 220.93.21.243:1956 -> xxx.yyy.194.160:5554 SYN ******S* Jan 24 22:53:52 220.93.21.243:3820 -> xxx.yyy.194.160:9898 SYN ******S* Jan 24 22:53:49 220.93.21.243:1961 -> xxx.yyy.194.155:5554 SYN ******S* Jan 24 22:53:49 220.93.21.243:1963 -> xxx.yyy.194.153:5554 SYN ******S* Jan 24 22:53:49 220.93.21.243:1982 -> xxx.yyy.194.136:5554 SYN ******S* Jan 24 22:53:49 220.93.21.243:1994 -> xxx.yyy.194.126:5554 SYN ******S* [...] Jan 24 22:54:34 220.93.21.243:4182 -> xxx.yyy.214.203:9898 SYN ******S* Jan 24 22:54:34 220.93.21.243:4307 -> xxx.yyy.214.239:9898 SYN ******S* Jan 24 22:54:34 220.93.21.243:4335 -> xxx.yyy.214.243:9898 SYN ******S* Jan 24 22:54:34 220.93.21.243:4171 -> xxx.yyy.214.190:9898 SYN ******S* Jan 24 22:54:34 220.93.21.243:4258 -> xxx.yyy.214.228:9898 SYN ******S* Jan 24 22:54:34 220.93.21.243:4266 -> xxx.yyy.214.227:9898 SYN ******S* Jan 24 22:54:34 220.93.21.243:4293 -> xxx.yyy.214.238:9898 SYN ******S* Jan 24 22:54:34 220.93.21.243:4336 -> xxx.yyy.214.242:9898 SYN ******S* Jan 24 22:54:35 220.93.21.243:4338 -> xxx.yyy.214.245:9898 SYN ******S* 6580 Jan 24 00:00:09 63.216.177.166:35194 -> xxx.yyy.232.168:22 SYN ******S* Jan 24 00:00:09 63.216.177.166:35182 -> xxx.yyy.233.168:22 SYN ******S* Jan 24 00:00:09 63.216.177.166:35200 -> xxx.yyy.220.152:22 SYN ******S* Jan 24 00:00:06 63.216.177.166:35094 -> xxx.yyy.236.69:22 SYN ******S* Jan 24 00:00:10 63.216.177.166:35212 -> xxx.yyy.241.179:22 SYN ******S* Jan 24 00:00:06 63.216.177.166:35103 -> xxx.yyy.138.104:22 SYN ******S* Jan 24 00:00:07 63.216.177.166:35110 -> xxx.yyy.224.182:22 SYN ******S* Jan 24 00:00:09 63.216.177.166:35195 -> xxx.yyy.241.201:22 SYN ******S* [...] Jan 24 00:34:11 63.216.177.166:38030 -> xxx.yyy.236.22:22 SYN ******S* Jan 24 00:34:12 63.216.177.166:38060 -> xxx.yyy.220.152:22 SYN ******S* Jan 24 00:34:14 63.216.177.166:38105 -> xxx.yyy.236.22:22 SYN ******S* Jan 24 00:34:16 63.216.177.166:38175 -> xxx.yyy.236.23:22 SYN ******S* Jan 24 00:34:21 63.216.177.166:38285 -> xxx.yyy.220.152:22 SYN ******S* Jan 24 00:34:23 63.216.177.166:38332 -> xxx.yyy.236.23:22 SYN ******S* Jan 24 00:34:29 63.216.177.166:38491 -> xxx.yyy.236.22:22 SYN ******S* Jan 24 00:34:27 63.216.177.166:38433 -> xxx.yyy.220.152:22 SYN ******S* Jan 24 00:34:29 63.216.177.166:38487 -> xxx.yyy.236.23:22 SYN ******S* 6546 Jan 24 23:56:11 218.17.70.93:2831 -> xxx.yyy.235.115:5554 SYN ******S* Jan 24 23:56:12 218.17.70.93:1214 -> xxx.yyy.235.115:1023 SYN ******S* Jan 24 23:56:14 218.17.70.93:1153 -> xxx.yyy.235.115:9898 SYN ******S* Jan 24 23:56:11 218.17.70.93:2832 -> xxx.yyy.235.116:5554 SYN ******S* Jan 24 23:56:12 218.17.70.93:1215 -> xxx.yyy.235.116:1023 SYN ******S* Jan 24 23:56:11 218.17.70.93:2833 -> xxx.yyy.235.117:5554 SYN ******S* Jan 24 23:56:11 218.17.70.93:2894 -> xxx.yyy.235.123:5554 SYN ******S* Jan 24 23:56:12 218.17.70.93:1292 -> xxx.yyy.235.123:1023 SYN ******S* [...] Jan 24 23:58:18 218.17.70.93:2063 -> xxx.yyy.111.202:9898 SYN ******S* Jan 24 23:58:18 218.17.70.93:2072 -> xxx.yyy.111.211:9898 SYN ******S* Jan 24 23:58:18 218.17.70.93:2128 -> xxx.yyy.111.250:9898 SYN ******S* Jan 24 23:58:18 218.17.70.93:2095 -> xxx.yyy.111.219:9898 SYN ******S* Jan 24 23:58:18 218.17.70.93:2098 -> xxx.yyy.111.222:9898 SYN ******S* Jan 24 23:58:18 218.17.70.93:2110 -> xxx.yyy.111.231:9898 SYN ******S* Jan 24 23:58:18 218.17.70.93:2101 -> xxx.yyy.111.225:9898 SYN ******S* Jan 24 23:58:18 218.17.70.93:2121 -> xxx.yyy.111.244:9898 SYN ******S* 6481 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions