[LOGS] Summary of large-scale portscanning detects
[email protected] Tue, 22 Feb 2005 14:52:36 -0600 (CST)
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Feb 21 04:48:19 24.156.123.37:3564 -> xxx.yyy.1.1:42 SYN ******S* Feb 21 04:48:19 24.156.123.37:3565 -> xxx.yyy.1.2:42 SYN ******S* Feb 21 04:48:19 24.156.123.37:3566 -> xxx.yyy.1.3:42 SYN ******S* Feb 21 04:48:19 24.156.123.37:3567 -> xxx.yyy.1.4:42 SYN ******S* Feb 21 04:48:19 24.156.123.37:3568 -> xxx.yyy.1.5:42 SYN ******S* Feb 21 04:48:19 24.156.123.37:3570 -> xxx.yyy.1.7:42 SYN ******S* Feb 21 04:48:16 24.156.123.37:3571 -> xxx.yyy.1.8:42 SYN ******S* Feb 21 04:48:19 24.156.123.37:3572 -> xxx.yyy.1.9:42 SYN ******S* [...] Feb 21 05:01:43 24.156.123.37:4181 -> xxx.yyy.255.246:42 SYN ******S* Feb 21 05:01:43 24.156.123.37:4182 -> xxx.yyy.255.247:42 SYN ******S* Feb 21 05:01:43 24.156.123.37:4183 -> xxx.yyy.255.248:42 SYN ******S* Feb 21 05:01:43 24.156.123.37:4184 -> xxx.yyy.255.249:42 SYN ******S* Feb 21 05:01:43 24.156.123.37:4185 -> xxx.yyy.255.250:42 SYN ******S* Feb 21 05:01:43 24.156.123.37:4186 -> xxx.yyy.255.251:42 SYN ******S* Feb 21 05:01:43 24.156.123.37:4187 -> xxx.yyy.255.252:42 SYN ******S* Feb 21 05:01:43 24.156.123.37:4188 -> xxx.yyy.255.253:42 SYN ******S* Feb 21 05:01:43 24.156.123.37:4189 -> xxx.yyy.255.254:42 SYN ******S* 71517 Feb 21 06:02:15 65.162.1.154:3119 -> xxx.yyy.1.1:6101 SYN ******S* Feb 21 06:02:15 65.162.1.154:3122 -> xxx.yyy.1.2:6101 SYN ******S* Feb 21 06:02:15 65.162.1.154:3125 -> xxx.yyy.1.3:6101 SYN ******S* Feb 21 06:02:15 65.162.1.154:3130 -> xxx.yyy.1.4:6101 SYN ******S* Feb 21 06:02:15 65.162.1.154:3132 -> xxx.yyy.1.5:6101 SYN ******S* Feb 21 06:02:15 65.162.1.154:3138 -> xxx.yyy.1.6:6101 SYN ******S* Feb 21 06:02:15 65.162.1.154:3142 -> xxx.yyy.1.7:6101 SYN ******S* Feb 21 06:02:15 65.162.1.154:3149 -> xxx.yyy.1.8:6101 SYN ******S* [...] Feb 21 06:11:59 65.162.1.154:4538 -> xxx.yyy.255.184:6101 SYN ******S* Feb 21 06:11:59 65.162.1.154:4439 -> xxx.yyy.255.169:6101 SYN ******S* Feb 21 06:11:59 65.162.1.154:4474 -> xxx.yyy.255.174:6101 SYN ******S* Feb 21 06:11:59 65.162.1.154:4654 -> xxx.yyy.255.210:6101 SYN ******S* Feb 21 06:11:59 65.162.1.154:1930 -> xxx.yyy.255.233:6101 SYN ******S* Feb 21 06:11:59 65.162.1.154:4635 -> xxx.yyy.255.205:6101 SYN ******S* Feb 21 06:11:59 65.162.1.154:4591 -> xxx.yyy.255.195:6101 SYN ******S* Feb 21 06:11:59 65.162.1.154:2275 -> xxx.yyy.255.248:6101 SYN ******S* 59903 Feb 21 10:53:59 66.79.32.31:2837 -> xxx.yyy.1.6:1433 SYN ******S* Feb 21 10:53:59 66.79.32.31:2847 -> xxx.yyy.1.9:1433 SYN ******S* Feb 21 10:54:02 66.79.32.31:2849 -> xxx.yyy.1.10:1433 SYN ******S* Feb 21 10:54:02 66.79.32.31:2850 -> xxx.yyy.1.11:1433 SYN ******S* Feb 21 10:54:02 66.79.32.31:2852 -> xxx.yyy.1.12:1433 SYN ******S* Feb 21 10:54:02 66.79.32.31:2862 -> xxx.yyy.1.20:1433 SYN ******S* Feb 21 10:54:02 66.79.32.31:2863 -> xxx.yyy.1.21:1433 SYN ******S* Feb 21 10:53:59 66.79.32.31:2866 -> xxx.yyy.1.23:1433 SYN ******S* [...] Feb 21 14:55:38 66.79.32.31:2745 -> xxx.yyy.255.225:1433 SYN ******S* Feb 21 14:55:38 66.79.32.31:2753 -> xxx.yyy.255.228:1433 SYN ******S* Feb 21 14:55:39 66.79.32.31:2972 -> xxx.yyy.255.231:1433 SYN ******S* Feb 21 14:55:39 66.79.32.31:3099 -> xxx.yyy.255.234:1433 SYN ******S* Feb 21 14:55:39 66.79.32.31:3082 -> xxx.yyy.255.232:1433 SYN ******S* Feb 21 14:55:39 66.79.32.31:3200 -> xxx.yyy.255.236:1433 SYN ******S* Feb 21 14:55:39 66.79.32.31:3429 -> xxx.yyy.255.247:1433 SYN ******S* Feb 21 14:55:39 66.79.32.31:3425 -> xxx.yyy.255.245:1433 SYN ******S* Feb 21 14:55:40 66.79.32.31:3628 -> xxx.yyy.255.252:1433 SYN ******S* 55728 Feb 21 06:43:59 80.88.118.8:2074 -> xxx.yyy.1.1:3306 SYN ******S* Feb 21 06:43:59 80.88.118.8:2075 -> xxx.yyy.1.2:3306 SYN ******S* Feb 21 06:43:59 80.88.118.8:2077 -> xxx.yyy.1.4:3306 SYN ******S* Feb 21 06:43:59 80.88.118.8:2078 -> xxx.yyy.1.5:3306 SYN ******S* Feb 21 06:44:02 80.88.118.8:2079 -> xxx.yyy.1.6:3306 SYN ******S* Feb 21 06:43:59 80.88.118.8:2080 -> xxx.yyy.1.7:3306 SYN ******S* Feb 21 06:43:59 80.88.118.8:2081 -> xxx.yyy.1.8:3306 SYN ******S* Feb 21 06:44:02 80.88.118.8:2082 -> xxx.yyy.1.9:3306 SYN ******S* [...] Feb 21 06:55:07 80.88.118.8:4801 -> xxx.yyy.255.242:3306 SYN ******S* Feb 21 06:55:07 80.88.118.8:4798 -> xxx.yyy.255.239:3306 SYN ******S* Feb 21 06:55:07 80.88.118.8:4805 -> xxx.yyy.255.246:3306 SYN ******S* Feb 21 06:55:07 80.88.118.8:4802 -> xxx.yyy.255.243:3306 SYN ******S* Feb 21 06:55:07 80.88.118.8:4812 -> xxx.yyy.255.253:3306 SYN ******S* Feb 21 06:55:07 80.88.118.8:4809 -> xxx.yyy.255.250:3306 SYN ******S* Feb 21 06:55:07 80.88.118.8:4810 -> xxx.yyy.255.251:3306 SYN ******S* Feb 21 06:55:07 80.88.118.8:4811 -> xxx.yyy.255.252:3306 SYN ******S* Feb 21 06:55:07 80.88.118.8:4808 -> xxx.yyy.255.249:3306 SYN ******S* 48320 Feb 21 22:02:58 216.231.56.179:2523 -> xxx.yyy.1.4:6129 SYN ******S* Feb 21 22:02:55 216.231.56.179:2527 -> xxx.yyy.1.8:6129 SYN ******S* Feb 21 22:02:55 216.231.56.179:2530 -> xxx.yyy.1.11:6129 SYN ******S* Feb 21 22:02:55 216.231.56.179:2534 -> xxx.yyy.1.15:6129 SYN ******S* Feb 21 22:02:55 216.231.56.179:2536 -> xxx.yyy.1.17:6129 SYN ******S* Feb 21 22:02:55 216.231.56.179:2537 -> xxx.yyy.1.18:6129 SYN ******S* Feb 21 22:02:56 216.231.56.179:2540 -> xxx.yyy.1.21:6129 SYN ******S* Feb 21 22:02:56 216.231.56.179:2541 -> xxx.yyy.1.22:6129 SYN ******S* [...] Feb 21 22:27:48 216.231.56.179:3082 -> xxx.yyy.255.237:6129 SYN ******S* Feb 21 22:27:48 216.231.56.179:3080 -> xxx.yyy.255.235:6129 SYN ******S* Feb 21 22:27:48 216.231.56.179:3099 -> xxx.yyy.255.243:6129 SYN ******S* Feb 21 22:27:48 216.231.56.179:3104 -> xxx.yyy.255.246:6129 SYN ******S* Feb 21 22:27:48 216.231.56.179:3112 -> xxx.yyy.255.248:6129 SYN ******S* Feb 21 22:27:48 216.231.56.179:3134 -> xxx.yyy.255.253:6129 SYN ******S* Feb 21 22:27:48 216.231.56.179:3103 -> xxx.yyy.255.245:6129 SYN ******S* Feb 21 22:27:48 216.231.56.179:3125 -> xxx.yyy.255.252:6129 SYN ******S* 48263 Feb 21 06:09:25 216.57.65.117:3788 -> xxx.yyy.1.1:41523 SYN ******S* Feb 21 06:09:25 216.57.65.117:3789 -> xxx.yyy.1.2:41523 SYN ******S* Feb 21 06:09:25 216.57.65.117:3790 -> xxx.yyy.1.3:41523 SYN ******S* Feb 21 06:09:24 216.57.65.117:3791 -> xxx.yyy.1.4:41523 SYN ******S* Feb 21 06:09:24 216.57.65.117:3792 -> xxx.yyy.1.5:41523 SYN ******S* Feb 21 06:09:24 216.57.65.117:3793 -> xxx.yyy.1.6:41523 SYN ******S* Feb 21 06:09:24 216.57.65.117:3794 -> xxx.yyy.1.7:41523 SYN ******S* Feb 21 06:09:25 216.57.65.117:3796 -> xxx.yyy.1.9:41523 SYN ******S* [...] Feb 21 06:46:38 216.57.65.117:1453 -> xxx.yyy.255.247:41523 SYN ******S* Feb 21 06:46:38 216.57.65.117:1454 -> xxx.yyy.255.248:41523 SYN ******S* Feb 21 06:46:38 216.57.65.117:1455 -> xxx.yyy.255.249:41523 SYN ******S* Feb 21 06:46:38 216.57.65.117:1456 -> xxx.yyy.255.250:41523 SYN ******S* Feb 21 06:46:38 216.57.65.117:1457 -> xxx.yyy.255.251:41523 SYN ******S* Feb 21 06:46:38 216.57.65.117:1458 -> xxx.yyy.255.252:41523 SYN ******S* Feb 21 06:46:38 216.57.65.117:1459 -> xxx.yyy.255.253:41523 SYN ******S* Feb 21 06:46:38 216.57.65.117:1460 -> xxx.yyy.255.254:41523 SYN ******S* 44952 Feb 21 06:32:55 211.220.20.35:2398 -> xxx.yyy.1.1:4899 SYN ******S* Feb 21 06:32:55 211.220.20.35:2399 -> xxx.yyy.1.2:4899 SYN ******S* Feb 21 06:32:56 211.220.20.35:2400 -> xxx.yyy.1.3:4899 SYN ******S* Feb 21 06:32:53 211.220.20.35:2401 -> xxx.yyy.1.4:4899 SYN ******S* Feb 21 06:32:53 211.220.20.35:2402 -> xxx.yyy.1.5:4899 SYN ******S* Feb 21 06:32:53 211.220.20.35:2403 -> xxx.yyy.1.6:4899 SYN ******S* Feb 21 06:32:56 211.220.20.35:2408 -> xxx.yyy.1.11:4899 SYN ******S* Feb 21 06:32:53 211.220.20.35:2404 -> xxx.yyy.1.7:4899 SYN ******S* [...] Feb 21 06:38:00 211.220.20.35:4881 -> xxx.yyy.255.250:4899 SYN ******S* Feb 21 06:38:00 211.220.20.35:4859 -> xxx.yyy.255.242:4899 SYN ******S* Feb 21 06:38:00 211.220.20.35:4862 -> xxx.yyy.255.243:4899 SYN ******S* Feb 21 06:38:00 211.220.20.35:4867 -> xxx.yyy.255.245:4899 SYN ******S* Feb 21 06:38:00 211.220.20.35:4872 -> xxx.yyy.255.247:4899 SYN ******S* Feb 21 06:38:00 211.220.20.35:4880 -> xxx.yyy.255.249:4899 SYN ******S* Feb 21 06:38:00 211.220.20.35:4882 -> xxx.yyy.255.251:4899 SYN ******S* Feb 21 06:38:00 211.220.20.35:4883 -> xxx.yyy.255.252:4899 SYN ******S* Feb 21 06:38:00 211.220.20.35:4885 -> xxx.yyy.255.254:4899 SYN ******S* 42785 Feb 21 13:34:54 61.236.123.98:12466 -> xxx.yyy.139.248:80 SYN ******S* Feb 21 13:34:54 61.236.123.98:13917 -> xxx.yyy.139.248:10080 SYN ******S* Feb 21 13:34:54 61.236.123.98:12436 -> xxx.yyy.139.248:3128 SYN ******S* Feb 21 13:34:54 61.236.123.98:13138 -> xxx.yyy.139.248:23 SYN ******S* Feb 21 13:34:54 61.236.123.98:13062 -> xxx.yyy.139.248:21 SYN ******S* Feb 21 13:34:54 61.236.123.98:12910 -> xxx.yyy.139.248:8888 SYN ******S* Feb 21 13:34:54 61.236.123.98:13967 -> xxx.yyy.139.248:1080 SYN ******S* Feb 21 13:34:54 61.236.123.98:12808 -> xxx.yyy.139.248:8080 SYN ******S* [...] Feb 21 18:27:08 61.236.123.98:13866 -> xxx.yyy.150.133:21 SYN ******S* Feb 21 18:27:08 61.236.123.98:12491 -> xxx.yyy.150.133:3128 SYN ******S* Feb 21 18:27:08 61.236.123.98:13830 -> xxx.yyy.150.133:23 SYN ******S* Feb 21 18:27:08 61.236.123.98:12774 -> xxx.yyy.150.133:1080 SYN ******S* Feb 21 18:27:08 61.236.123.98:12836 -> xxx.yyy.150.133:8080 SYN ******S* Feb 21 18:27:08 61.236.123.98:12932 -> xxx.yyy.150.133:80 SYN ******S* Feb 21 18:27:08 61.236.123.98:12905 -> xxx.yyy.150.133:8000 SYN ******S* Feb 21 18:27:08 61.236.123.98:12671 -> xxx.yyy.150.133:10080 SYN ******S* Feb 21 18:27:08 61.236.123.98:12302 -> xxx.yyy.150.133:81 SYN ******S* 37864 Feb 21 01:12:59 81.215.224.29:4402 -> xxx.yyy.1.0:1433 SYN ******S* Feb 21 01:13:03 81.215.224.29:4405 -> xxx.yyy.1.2:1433 SYN ******S* Feb 21 01:13:03 81.215.224.29:4407 -> xxx.yyy.1.3:1433 SYN ******S* Feb 21 01:13:00 81.215.224.29:4411 -> xxx.yyy.1.5:1433 SYN ******S* Feb 21 01:13:03 81.215.224.29:4415 -> xxx.yyy.1.6:1433 SYN ******S* Feb 21 01:13:03 81.215.224.29:4421 -> xxx.yyy.1.8:1433 SYN ******S* Feb 21 01:13:00 81.215.224.29:4426 -> xxx.yyy.1.9:1433 SYN ******S* Feb 21 01:13:00 81.215.224.29:4434 -> xxx.yyy.1.11:1433 SYN ******S* [...] Feb 21 03:17:27 81.215.224.29:4489 -> xxx.yyy.139.195:1433 SYN ******S* Feb 21 03:17:27 81.215.224.29:3897 -> xxx.yyy.139.150:1433 SYN ******S* Feb 21 03:17:27 81.215.224.29:3896 -> xxx.yyy.139.149:1433 SYN ******S* Feb 21 03:17:28 81.215.224.29:4496 -> xxx.yyy.139.197:1433 SYN ******S* Feb 21 03:17:28 81.215.224.29:3914 -> xxx.yyy.139.151:1433 SYN ******S* Feb 21 03:17:28 81.215.224.29:3929 -> xxx.yyy.139.152:1433 SYN ******S* Feb 21 03:17:28 81.215.224.29:3939 -> xxx.yyy.139.153:1433 SYN ******S* Feb 21 03:17:28 81.215.224.29:3941 -> xxx.yyy.139.155:1433 SYN ******S* Feb 21 03:17:28 81.215.224.29:3940 -> xxx.yyy.139.154:1433 SYN ******S* 37332 Feb 21 15:40:48 196.15.143.153:1853 -> xxx.yyy.1.2:1433 SYN ******S* Feb 21 15:40:45 196.15.143.153:1865 -> xxx.yyy.1.4:1433 SYN ******S* Feb 21 15:40:45 196.15.143.153:1870 -> xxx.yyy.1.6:1433 SYN ******S* Feb 21 15:40:48 196.15.143.153:1871 -> xxx.yyy.1.7:1433 SYN ******S* Feb 21 15:40:48 196.15.143.153:1873 -> xxx.yyy.1.9:1433 SYN ******S* Feb 21 15:40:45 196.15.143.153:1874 -> xxx.yyy.1.10:1433 SYN ******S* Feb 21 15:40:45 196.15.143.153:1875 -> xxx.yyy.1.11:1433 SYN ******S* Feb 21 15:40:48 196.15.143.153:1877 -> xxx.yyy.1.13:1433 SYN ******S* [...] Feb 21 15:52:35 196.15.143.153:3879 -> xxx.yyy.255.225:1433 SYN ******S* Feb 21 15:52:35 196.15.143.153:3876 -> xxx.yyy.255.222:1433 SYN ******S* Feb 21 15:52:36 196.15.143.153:3888 -> xxx.yyy.255.234:1433 SYN ******S* Feb 21 15:52:36 196.15.143.153:3885 -> xxx.yyy.255.231:1433 SYN ******S* Feb 21 15:52:36 196.15.143.153:3893 -> xxx.yyy.255.239:1433 SYN ******S* Feb 21 15:52:36 196.15.143.153:3897 -> xxx.yyy.255.243:1433 SYN ******S* Feb 21 15:52:36 196.15.143.153:3894 -> xxx.yyy.255.240:1433 SYN ******S* Feb 21 15:52:36 196.15.143.153:3900 -> xxx.yyy.255.246:1433 SYN ******S* 29262 Feb 21 14:55:56 69.159.166.90:2295 -> xxx.yyy.1.0:139 SYN ******S* Feb 21 14:55:56 69.159.166.90:2297 -> xxx.yyy.1.2:139 SYN ******S* Feb 21 14:55:59 69.159.166.90:2298 -> xxx.yyy.1.3:139 SYN ******S* Feb 21 14:55:59 69.159.166.90:2301 -> xxx.yyy.1.6:139 SYN ******S* Feb 21 14:55:57 69.159.166.90:2312 -> xxx.yyy.1.17:139 SYN ******S* Feb 21 14:55:57 69.159.166.90:2313 -> xxx.yyy.1.18:139 SYN ******S* Feb 21 14:56:00 69.159.166.90:2315 -> xxx.yyy.1.20:139 SYN ******S* Feb 21 14:55:57 69.159.166.90:2316 -> xxx.yyy.1.21:139 SYN ******S* [...] Feb 21 19:44:47 69.159.166.90:3073 -> xxx.yyy.155.218:139 SYN ******S* Feb 21 19:44:47 69.159.166.90:3088 -> xxx.yyy.155.233:139 SYN ******S* Feb 21 19:44:47 69.159.166.90:3085 -> xxx.yyy.155.230:139 SYN ******S* Feb 21 19:44:47 69.159.166.90:3082 -> xxx.yyy.155.227:139 SYN ******S* Feb 21 19:44:47 69.159.166.90:3086 -> xxx.yyy.155.231:139 SYN ******S* Feb 21 19:44:47 69.159.166.90:3095 -> xxx.yyy.155.240:139 SYN ******S* Feb 21 19:44:47 69.159.166.90:3093 -> xxx.yyy.155.238:139 SYN ******S* Feb 21 19:44:47 69.159.166.90:3097 -> xxx.yyy.155.242:139 SYN ******S* 25104 Feb 21 17:41:36 69.157.85.232:3824 -> xxx.yyy.104.1:1433 SYN ******S* Feb 21 17:41:36 69.157.85.232:3885 -> xxx.yyy.104.2:1433 SYN ******S* Feb 21 17:41:36 69.157.85.232:3896 -> xxx.yyy.104.3:1433 SYN ******S* Feb 21 17:41:39 69.157.85.232:3900 -> xxx.yyy.104.4:1433 SYN ******S* Feb 21 17:41:39 69.157.85.232:3958 -> xxx.yyy.104.9:1433 SYN ******S* Feb 21 17:41:36 69.157.85.232:3963 -> xxx.yyy.104.10:1433 SYN ******S* Feb 21 17:41:37 69.157.85.232:3981 -> xxx.yyy.104.13:1433 SYN ******S* Feb 21 17:41:37 69.157.85.232:4010 -> xxx.yyy.104.14:1433 SYN ******S* [...] Feb 21 18:39:24 69.157.85.232:3141 -> xxx.yyy.168.110:1433 SYN ******S* Feb 21 18:39:24 69.157.85.232:3724 -> xxx.yyy.168.128:1433 SYN ******S* Feb 21 18:39:24 69.157.85.232:3177 -> xxx.yyy.168.112:1433 SYN ******S* Feb 21 18:39:24 69.157.85.232:3786 -> xxx.yyy.168.130:1433 SYN ******S* Feb 21 18:39:24 69.157.85.232:3789 -> xxx.yyy.168.131:1433 SYN ******S* Feb 21 18:39:24 69.157.85.232:3845 -> xxx.yyy.168.132:1433 SYN ******S* Feb 21 18:39:24 69.157.85.232:3860 -> xxx.yyy.168.133:1433 SYN ******S* Feb 21 18:39:25 69.157.85.232:4057 -> xxx.yyy.168.141:1433 SYN ******S* Feb 21 18:39:25 69.157.85.232:4368 -> xxx.yyy.168.145:1433 SYN ******S* 18082 Feb 21 20:24:33 218.0.112.149:1602 -> xxx.yyy.1.23:1433 SYN ******S* Feb 21 20:24:33 218.0.112.149:1610 -> xxx.yyy.1.27:1433 SYN ******S* Feb 21 20:24:33 218.0.112.149:1617 -> xxx.yyy.1.31:1433 SYN ******S* Feb 21 20:24:33 218.0.112.149:1619 -> xxx.yyy.1.32:1433 SYN ******S* Feb 21 20:24:33 218.0.112.149:1623 -> xxx.yyy.1.34:1433 SYN ******S* Feb 21 20:24:33 218.0.112.149:1629 -> xxx.yyy.1.37:1433 SYN ******S* Feb 21 20:24:33 218.0.112.149:1631 -> xxx.yyy.1.38:1433 SYN ******S* Feb 21 20:24:34 218.0.112.149:1653 -> xxx.yyy.1.49:1433 SYN ******S* [...] Feb 21 22:52:46 218.0.112.149:1262 -> xxx.yyy.144.65:1433 SYN ******S* Feb 21 22:52:46 218.0.112.149:1264 -> xxx.yyy.144.66:1433 SYN ******S* Feb 21 22:52:46 218.0.112.149:1261 -> xxx.yyy.144.64:1433 SYN ******S* Feb 21 22:52:46 218.0.112.149:1270 -> xxx.yyy.144.68:1433 SYN ******S* Feb 21 22:52:46 218.0.112.149:1381 -> xxx.yyy.144.84:1433 SYN ******S* Feb 21 22:52:46 218.0.112.149:1285 -> xxx.yyy.144.71:1433 SYN ******S* Feb 21 22:52:47 218.0.112.149:1389 -> xxx.yyy.144.85:1433 SYN ******S* Feb 21 22:52:47 218.0.112.149:1418 -> xxx.yyy.144.92:1433 SYN ******S* Feb 21 22:52:47 218.0.112.149:1427 -> xxx.yyy.144.95:1433 SYN ******S* 17803 Feb 21 16:50:21 211.244.129.203:4172 -> xxx.yyy.1.2:4899 SYN ******S* Feb 21 16:50:21 211.244.129.203:4171 -> xxx.yyy.1.1:4899 SYN ******S* Feb 21 16:50:20 211.244.129.203:4173 -> xxx.yyy.1.3:4899 SYN ******S* Feb 21 16:50:20 211.244.129.203:4174 -> xxx.yyy.1.4:4899 SYN ******S* Feb 21 16:50:20 211.244.129.203:4175 -> xxx.yyy.1.5:4899 SYN ******S* Feb 21 16:50:20 211.244.129.203:4176 -> xxx.yyy.1.6:4899 SYN ******S* Feb 21 16:50:20 211.244.129.203:4177 -> xxx.yyy.1.7:4899 SYN ******S* Feb 21 16:50:21 211.244.129.203:4178 -> xxx.yyy.1.8:4899 SYN ******S* [...] Feb 21 16:53:40 211.244.129.203:4460 -> xxx.yyy.254.243:4899 SYN ******S* Feb 21 16:53:40 211.244.129.203:4461 -> xxx.yyy.254.244:4899 SYN ******S* Feb 21 16:53:40 211.244.129.203:4465 -> xxx.yyy.254.248:4899 SYN ******S* Feb 21 16:53:40 211.244.129.203:4462 -> xxx.yyy.254.245:4899 SYN ******S* Feb 21 16:53:40 211.244.129.203:4468 -> xxx.yyy.254.250:4899 SYN ******S* Feb 21 16:53:40 211.244.129.203:4463 -> xxx.yyy.254.246:4899 SYN ******S* Feb 21 16:53:40 211.244.129.203:4492 -> xxx.yyy.254.253:4899 SYN ******S* Feb 21 16:53:43 211.244.129.203:4420 -> xxx.yyy.254.210:4899 SYN ******S* Feb 21 16:53:43 211.244.129.203:4415 -> xxx.yyy.254.209:4899 SYN ******S* 17135 Feb 21 20:43:11 81.196.20.194:4173 -> xxx.yyy.1.11:4899 SYN ******S* Feb 21 20:43:11 81.196.20.194:4175 -> xxx.yyy.1.13:4899 SYN ******S* Feb 21 20:43:11 81.196.20.194:4183 -> xxx.yyy.1.21:4899 SYN ******S* Feb 21 20:43:11 81.196.20.194:4203 -> xxx.yyy.1.30:4899 SYN ******S* Feb 21 20:43:11 81.196.20.194:4205 -> xxx.yyy.1.32:4899 SYN ******S* Feb 21 20:43:11 81.196.20.194:4206 -> xxx.yyy.1.33:4899 SYN ******S* Feb 21 20:43:11 81.196.20.194:4229 -> xxx.yyy.1.55:4899 SYN ******S* Feb 21 20:43:11 81.196.20.194:4230 -> xxx.yyy.1.56:4899 SYN ******S* [...] Feb 21 20:48:14 81.196.20.194:4700 -> xxx.yyy.255.151:4899 SYN ******S* Feb 21 20:48:14 81.196.20.194:4722 -> xxx.yyy.255.153:4899 SYN ******S* Feb 21 20:48:14 81.196.20.194:4727 -> xxx.yyy.255.157:4899 SYN ******S* Feb 21 20:48:14 81.196.20.194:4731 -> xxx.yyy.255.160:4899 SYN ******S* Feb 21 20:48:14 81.196.20.194:4725 -> xxx.yyy.255.155:4899 SYN ******S* Feb 21 20:48:14 81.196.20.194:4732 -> xxx.yyy.255.161:4899 SYN ******S* Feb 21 20:48:14 81.196.20.194:4680 -> xxx.yyy.255.149:4899 SYN ******S* Feb 21 20:48:14 81.196.20.194:4729 -> xxx.yyy.255.158:4899 SYN ******S* Feb 21 20:48:14 81.196.20.194:4721 -> xxx.yyy.255.152:4899 SYN ******S* 16923 Feb 21 19:10:11 82.138.232.34:58709 -> xxx.yyy.206.182:6101 SYN ******S* Feb 21 19:10:11 82.138.232.34:58705 -> xxx.yyy.187.238:6101 SYN ******S* Feb 21 19:10:11 82.138.232.34:58704 -> xxx.yyy.209.51:6101 SYN ******S* Feb 21 19:10:11 82.138.232.34:58706 -> xxx.yyy.105.20:6101 SYN ******S* Feb 21 19:10:11 82.138.232.34:58711 -> xxx.yyy.111.61:6101 SYN ******S* Feb 21 19:10:11 82.138.232.34:58715 -> xxx.yyy.83.131:6101 SYN ******S* Feb 21 19:10:11 82.138.232.34:58717 -> xxx.yyy.206.193:6101 SYN ******S* Feb 21 19:10:11 82.138.232.34:58718 -> xxx.yyy.244.69:6101 SYN ******S* [...] Feb 21 19:10:25 82.138.232.34:58723 -> xxx.yyy.94.105:6101 SYN ******S* Feb 21 19:10:25 82.138.232.34:58725 -> xxx.yyy.165.217:6101 SYN ******S* Feb 21 19:10:25 82.138.232.34:58728 -> xxx.yyy.225.198:6101 SYN ******S* Feb 21 19:10:25 82.138.232.34:58729 -> xxx.yyy.240.227:6101 SYN ******S* Feb 21 19:10:25 82.138.232.34:58731 -> xxx.yyy.178.214:6101 SYN ******S* Feb 21 19:10:25 82.138.232.34:58730 -> xxx.yyy.153.105:6101 SYN ******S* Feb 21 19:10:25 82.138.232.34:58727 -> xxx.yyy.244.84:6101 SYN ******S* Feb 21 19:10:27 82.138.232.34:58721 -> xxx.yyy.233.170:6101 SYN ******S* 11354 [...] 10817 [...] 10238 Feb 21 20:06:12 66.178.6.50:80 -> xxx.yyy.1.3:42 SYN ******S* Feb 21 20:06:12 66.178.6.50:80 -> xxx.yyy.1.2:42 SYN ******S* Feb 21 20:06:12 66.178.6.50:80 -> xxx.yyy.1.4:42 SYN ******S* Feb 21 20:06:12 66.178.6.50:80 -> xxx.yyy.1.5:42 SYN ******S* Feb 21 20:06:12 66.178.6.50:80 -> xxx.yyy.1.6:42 SYN ******S* Feb 21 20:06:12 66.178.6.50:80 -> xxx.yyy.1.18:42 SYN ******S* Feb 21 20:06:12 66.178.6.50:80 -> xxx.yyy.1.7:42 SYN ******S* Feb 21 20:06:12 66.178.6.50:80 -> xxx.yyy.1.8:42 SYN ******S* [...] Feb 21 20:06:30 66.178.6.50:80 -> xxx.yyy.255.241:42 SYN ******S* Feb 21 20:06:30 66.178.6.50:80 -> xxx.yyy.255.223:42 SYN ******S* Feb 21 20:06:30 66.178.6.50:80 -> xxx.yyy.255.242:42 SYN ******S* Feb 21 20:06:30 66.178.6.50:80 -> xxx.yyy.255.224:42 SYN ******S* Feb 21 20:06:30 66.178.6.50:80 -> xxx.yyy.255.226:42 SYN ******S* Feb 21 20:06:30 66.178.6.50:80 -> xxx.yyy.255.250:42 SYN ******S* Feb 21 20:06:30 66.178.6.50:80 -> xxx.yyy.255.251:42 SYN ******S* Feb 21 20:06:30 66.178.6.50:80 -> xxx.yyy.255.252:42 SYN ******S* Feb 21 20:06:30 66.178.6.50:80 -> xxx.yyy.255.254:42 SYN ******S* 9433 Feb 21 04:59:49 24.156.123.37:3845 -> xxx.yyy.220.147:42 SYN ******S* Feb 21 06:10:44 65.162.1.154:2367 -> xxx.yyy.220.147:6101 SYN ******S* Feb 21 06:10:47 65.162.1.154:2367 -> xxx.yyy.220.147:6101 SYN ******S* Feb 21 06:37:19 211.220.20.35:1528 -> xxx.yyy.220.147:4899 SYN ******S* Feb 21 06:41:26 216.57.65.117:3691 -> xxx.yyy.220.147:41523 SYN ******S* Feb 21 14:22:05 66.79.32.31:4994 -> xxx.yyy.220.147:1433 SYN ******S* Feb 21 19:38:04 xxx.yyy.220.147:3875 -> xxx.yyy.0.3:3389 SYN ******S* Feb 21 19:38:04 xxx.yyy.220.147:3877 -> xxx.yyy.0.5:3389 SYN ******S* [...] Feb 21 23:06:42 xxx.yyy.220.147:4245 -> xxx.yyy.127.242:3389 SYN ******S* Feb 21 23:06:43 xxx.yyy.220.147:4247 -> xxx.yyy.127.244:3389 SYN ******S* Feb 21 23:06:43 xxx.yyy.220.147:4248 -> xxx.yyy.127.245:3389 SYN ******S* Feb 21 23:06:43 xxx.yyy.220.147:4249 -> xxx.yyy.127.246:3389 SYN ******S* Feb 21 23:06:43 xxx.yyy.220.147:4251 -> xxx.yyy.127.248:3389 SYN ******S* Feb 21 23:06:43 xxx.yyy.220.147:4252 -> xxx.yyy.127.249:3389 SYN ******S* Feb 21 23:06:43 xxx.yyy.220.147:4253 -> xxx.yyy.127.250:3389 SYN ******S* Feb 21 23:06:43 xxx.yyy.220.147:4256 -> xxx.yyy.127.253:3389 SYN ******S* Feb 21 23:06:44 xxx.yyy.220.147:4257 -> xxx.yyy.127.254:3389 SYN ******S* 9042 [...] 8839 Feb 21 21:52:00 216.84.6.58:3978 -> xxx.yyy.222.1:5900 SYN ******S* Feb 21 21:52:00 216.84.6.58:3980 -> xxx.yyy.222.1:4899 SYN ******S* Feb 21 21:52:03 216.84.6.58:3988 -> xxx.yyy.222.1:139 SYN ******S* Feb 21 21:52:00 216.84.6.58:3987 -> xxx.yyy.222.1:42 SYN ******S* Feb 21 21:52:03 216.84.6.58:3985 -> xxx.yyy.222.1:6101 SYN ******S* Feb 21 21:52:03 216.84.6.58:3991 -> xxx.yyy.222.2:6101 SYN ******S* Feb 21 21:52:03 216.84.6.58:3993 -> xxx.yyy.222.2:139 SYN ******S* Feb 21 21:52:03 216.84.6.58:3996 -> xxx.yyy.222.2:5900 SYN ******S* [...] Feb 21 23:59:53 216.84.6.58:1786 -> xxx.yyy.222.38:5900 SYN ******S* Feb 21 23:59:55 216.84.6.58:1889 -> xxx.yyy.222.13:5900 SYN ******S* Feb 21 23:59:56 216.84.6.58:1971 -> xxx.yyy.222.35:5900 SYN ******S* Feb 21 23:59:57 216.84.6.58:2043 -> xxx.yyy.222.4:5900 SYN ******S* Feb 21 23:59:59 216.84.6.58:2110 -> xxx.yyy.222.16:5900 SYN ******S* Feb 21 23:59:59 216.84.6.58:2126 -> xxx.yyy.222.5:5900 SYN ******S* Feb 21 23:59:59 216.84.6.58:2143 -> xxx.yyy.222.32:5900 SYN ******S* Feb 21 23:59:59 216.84.6.58:2146 -> xxx.yyy.222.14:5900 SYN ******S* Feb 22 00:00:00 216.84.6.58:2155 -> xxx.yyy.222.38:5900 SYN ******S* 8222 Feb 21 05:27:13 202.38.59.102:3065 -> xxx.yyy.1.4:1433 SYN ******S* Feb 21 05:27:13 202.38.59.102:3064 -> xxx.yyy.1.1:1433 SYN ******S* Feb 21 05:27:13 202.38.59.102:3066 -> xxx.yyy.1.3:1433 SYN ******S* Feb 21 05:27:13 202.38.59.102:3067 -> xxx.yyy.1.2:1433 SYN ******S* Feb 21 05:27:13 202.38.59.102:3068 -> xxx.yyy.1.5:1433 SYN ******S* Feb 21 05:27:13 202.38.59.102:3069 -> xxx.yyy.1.6:1433 SYN ******S* Feb 21 05:27:13 202.38.59.102:3070 -> xxx.yyy.1.7:1433 SYN ******S* Feb 21 05:27:13 202.38.59.102:3071 -> xxx.yyy.1.8:1433 SYN ******S* [...] Feb 21 06:07:12 202.38.59.102:4046 -> xxx.yyy.64.39:1433 SYN ******S* Feb 21 06:07:12 202.38.59.102:4047 -> xxx.yyy.64.40:1433 SYN ******S* Feb 21 06:07:12 202.38.59.102:4044 -> xxx.yyy.64.37:1433 SYN ******S* Feb 21 06:07:12 202.38.59.102:4049 -> xxx.yyy.64.42:1433 SYN ******S* Feb 21 06:07:12 202.38.59.102:4050 -> xxx.yyy.64.43:1433 SYN ******S* Feb 21 06:07:12 202.38.59.102:4051 -> xxx.yyy.64.44:1433 SYN ******S* Feb 21 06:07:12 202.38.59.102:4052 -> xxx.yyy.64.45:1433 SYN ******S* Feb 21 06:07:12 202.38.59.102:4053 -> xxx.yyy.64.46:1433 SYN ******S* Feb 21 06:07:13 202.38.59.102:4054 -> xxx.yyy.64.47:1433 SYN ******S* 6634 Feb 21 23:08:00 220.87.206.162:1896 -> xxx.yyy.174.222:5554 SYN ******S* Feb 21 23:08:03 220.87.206.162:3014 -> xxx.yyy.174.222:9898 SYN ******S* Feb 21 23:08:00 220.87.206.162:2141 -> xxx.yyy.174.243:5554 SYN ******S* Feb 21 23:08:01 220.87.206.162:2427 -> xxx.yyy.174.243:1023 SYN ******S* Feb 21 23:08:03 220.87.206.162:3170 -> xxx.yyy.174.243:9898 SYN ******S* Feb 21 23:08:00 220.87.206.162:2146 -> xxx.yyy.174.247:5554 SYN ******S* Feb 21 23:08:00 220.87.206.162:2081 -> xxx.yyy.174.235:5554 SYN ******S* Feb 21 23:08:01 220.87.206.162:2401 -> xxx.yyy.174.235:1023 SYN ******S* [...] Feb 21 23:11:24 220.87.206.162:4980 -> xxx.yyy.194.231:9898 SYN ******S* Feb 21 23:11:24 220.87.206.162:4913 -> xxx.yyy.195.52:5554 SYN ******S* Feb 21 23:11:27 220.87.206.162:2149 -> xxx.yyy.195.52:9898 SYN ******S* Feb 21 23:11:24 220.87.206.162:4963 -> xxx.yyy.195.28:1023 SYN ******S* Feb 21 23:11:26 220.87.206.162:1708 -> xxx.yyy.195.28:9898 SYN ******S* Feb 21 23:11:24 220.87.206.162:4996 -> xxx.yyy.195.85:5554 SYN ******S* Feb 21 23:11:25 220.87.206.162:1445 -> xxx.yyy.195.85:1023 SYN ******S* Feb 21 23:11:25 220.87.206.162:1174 -> xxx.yyy.194.236:9898 SYN ******S* 6543 Feb 21 22:51:44 220.146.133.175:1442 -> xxx.yyy.195.88:5554 SYN ******S* Feb 21 22:51:45 220.146.133.175:1793 -> xxx.yyy.195.88:1023 SYN ******S* Feb 21 22:51:47 220.146.133.175:2293 -> xxx.yyy.195.88:9898 SYN ******S* Feb 21 22:51:44 220.146.133.175:1448 -> xxx.yyy.195.94:5554 SYN ******S* Feb 21 22:51:45 220.146.133.175:1799 -> xxx.yyy.195.94:1023 SYN ******S* Feb 21 22:51:44 220.146.133.175:1452 -> xxx.yyy.195.96:5554 SYN ******S* Feb 21 22:51:45 220.146.133.175:1803 -> xxx.yyy.195.96:1023 SYN ******S* Feb 21 22:51:47 220.146.133.175:2301 -> xxx.yyy.195.96:9898 SYN ******S* [...] Feb 21 22:52:59 220.146.133.175:4438 -> xxx.yyy.215.147:9898 SYN ******S* Feb 21 22:52:59 220.146.133.175:4648 -> xxx.yyy.215.183:9898 SYN ******S* Feb 21 22:52:59 220.146.133.175:4649 -> xxx.yyy.215.185:9898 SYN ******S* Feb 21 22:53:00 220.146.133.175:4832 -> xxx.yyy.215.196:9898 SYN ******S* Feb 21 22:53:04 220.146.133.175:4913 -> xxx.yyy.215.198:9898 SYN ******S* Feb 21 22:53:04 220.146.133.175:4928 -> xxx.yyy.215.210:9898 SYN ******S* Feb 21 22:53:04 220.146.133.175:4915 -> xxx.yyy.215.199:9898 SYN ******S* Feb 21 22:53:07 220.146.133.175:1153 -> xxx.yyy.215.192:9898 SYN ******S* Feb 21 22:53:06 220.146.133.175:4908 -> xxx.yyy.215.189:9898 SYN ******S* 6529 Feb 21 00:07:52 218.18.44.156:3144 -> xxx.yyy.133.240:5554 SYN ******S* Feb 21 00:07:55 218.18.44.156:1187 -> xxx.yyy.133.240:9898 SYN ******S* Feb 21 00:07:52 218.18.44.156:3149 -> xxx.yyy.133.245:5554 SYN ******S* Feb 21 00:07:53 218.18.44.156:3691 -> xxx.yyy.133.245:1023 SYN ******S* Feb 21 00:07:55 218.18.44.156:1204 -> xxx.yyy.133.245:9898 SYN ******S* Feb 21 00:07:52 218.18.44.156:3150 -> xxx.yyy.133.246:5554 SYN ******S* Feb 21 00:07:53 218.18.44.156:3140 -> xxx.yyy.133.236:5554 SYN ******S* Feb 21 00:07:54 218.18.44.156:3673 -> xxx.yyy.133.236:1023 SYN ******S* [...] Feb 21 00:08:36 218.18.44.156:4332 -> xxx.yyy.154.78:9898 SYN ******S* Feb 21 00:08:36 218.18.44.156:4347 -> xxx.yyy.154.77:9898 SYN ******S* Feb 21 00:08:36 218.18.44.156:4303 -> xxx.yyy.154.63:9898 SYN ******S* Feb 21 00:08:36 218.18.44.156:4330 -> xxx.yyy.154.73:9898 SYN ******S* Feb 21 00:08:37 218.18.44.156:4539 -> xxx.yyy.154.91:9898 SYN ******S* Feb 21 00:08:37 218.18.44.156:4540 -> xxx.yyy.154.92:9898 SYN ******S* Feb 21 00:08:37 218.18.44.156:4568 -> xxx.yyy.154.94:9898 SYN ******S* Feb 21 00:08:37 218.18.44.156:4570 -> xxx.yyy.154.96:9898 SYN ******S* Feb 21 00:08:37 218.18.44.156:4590 -> xxx.yyy.154.100:9898 SYN ******S* 6202 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list Send posts to: [email protected] To Unsubscribe or change your options, see: http://www.dshield.org/mailman/listinfo/intrusions