[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Jan 5 00:07:10 64.114.79.35:3212 -> xxx.yyy.1.1:1433 SYN ******S* Jan 5 00:07:10 64.114.79.35:3215 -> xxx.yyy.1.2:1433 SYN ******S* Jan 5 00:07:10 64.114.79.35:3218 -> xxx.yyy.1.3:1433 SYN ******S* Jan 5 00:07:10 64.114.79.35:3221 -> xxx.yyy.1.4:1433 SYN ******S* Jan 5 00:07:10 64.114.79.35:3222 -> xxx.yyy.1.5:1433 SYN ******S* Jan 5 00:07:10 64.114.79.35:3223 -> xxx.yyy.1.6:1433 SYN ******S* Jan 5 00:07:10 64.114.79.35:3224 -> xxx.yyy.1.7:1433 SYN ******S* Jan 5 00:07:10 64.114.79.35:3225 -> xxx.yyy.1.8:1433 SYN ******S* [...] Jan 5 02:01:31 64.114.79.35:1241 -> xxx.yyy.255.245:1433 SYN ******S* Jan 5 02:01:31 64.114.79.35:1247 -> xxx.yyy.255.249:1433 SYN ******S* Jan 5 02:01:31 64.114.79.35:1246 -> xxx.yyy.255.248:1433 SYN ******S* Jan 5 02:01:31 64.114.79.35:1250 -> xxx.yyy.255.250:1433 SYN ******S* Jan 5 02:01:31 64.114.79.35:1253 -> xxx.yyy.255.251:1433 SYN ******S* Jan 5 02:01:31 64.114.79.35:1256 -> xxx.yyy.255.252:1433 SYN ******S* Jan 5 02:01:31 64.114.79.35:1259 -> xxx.yyy.255.254:1433 SYN ******S* Jan 5 02:01:31 64.114.79.35:1258 -> xxx.yyy.255.253:1433 SYN ******S* 121232 Jan 5 00:10:13 143.233.187.252:3756 -> xxx.yyy.1.1:4899 SYN ******S* Jan 5 00:10:13 143.233.187.252:3757 -> xxx.yyy.1.2:4899 SYN ******S* Jan 5 00:10:13 143.233.187.252:3758 -> xxx.yyy.1.3:4899 SYN ******S* Jan 5 00:10:15 143.233.187.252:3759 -> xxx.yyy.1.4:4899 SYN ******S* Jan 5 00:10:15 143.233.187.252:3760 -> xxx.yyy.1.5:4899 SYN ******S* Jan 5 00:10:12 143.233.187.252:3761 -> xxx.yyy.1.6:4899 SYN ******S* Jan 5 00:10:15 143.233.187.252:3762 -> xxx.yyy.1.7:4899 SYN ******S* Jan 5 00:10:15 143.233.187.252:3763 -> xxx.yyy.1.8:4899 SYN ******S* [...] Jan 5 00:21:39 143.233.187.252:2365 -> xxx.yyy.255.232:4899 SYN ******S* Jan 5 00:21:39 143.233.187.252:2452 -> xxx.yyy.255.254:4899 SYN ******S* Jan 5 00:21:39 143.233.187.252:2373 -> xxx.yyy.255.234:4899 SYN ******S* Jan 5 00:21:39 143.233.187.252:2441 -> xxx.yyy.255.249:4899 SYN ******S* Jan 5 00:21:39 143.233.187.252:2277 -> xxx.yyy.255.202:4899 SYN ******S* Jan 5 00:21:39 143.233.187.252:2297 -> xxx.yyy.255.213:4899 SYN ******S* Jan 5 00:21:39 143.233.187.252:2241 -> xxx.yyy.255.187:4899 SYN ******S* Jan 5 00:21:39 143.233.187.252:2225 -> xxx.yyy.255.179:4899 SYN ******S* Jan 5 00:21:39 143.233.187.252:2429 -> xxx.yyy.255.244:4899 SYN ******S* 93307 Jan 5 12:26:38 82.216.10.76:2049 -> xxx.yyy.1.0:1433 SYN ******S* Jan 5 12:26:38 82.216.10.76:2052 -> xxx.yyy.1.1:1433 SYN ******S* Jan 5 12:26:38 82.216.10.76:2055 -> xxx.yyy.1.2:1433 SYN ******S* Jan 5 12:26:38 82.216.10.76:2058 -> xxx.yyy.1.3:1433 SYN ******S* Jan 5 12:26:38 82.216.10.76:2061 -> xxx.yyy.1.4:1433 SYN ******S* Jan 5 12:26:38 82.216.10.76:2070 -> xxx.yyy.1.7:1433 SYN ******S* Jan 5 12:26:38 82.216.10.76:2067 -> xxx.yyy.1.6:1433 SYN ******S* Jan 5 12:26:38 82.216.10.76:2064 -> xxx.yyy.1.5:1433 SYN ******S* [...] Jan 5 16:15:23 82.216.10.76:3051 -> xxx.yyy.255.242:1433 SYN ******S* Jan 5 16:15:23 82.216.10.76:3056 -> xxx.yyy.255.243:1433 SYN ******S* Jan 5 16:15:23 82.216.10.76:3060 -> xxx.yyy.255.244:1433 SYN ******S* Jan 5 16:15:24 82.216.10.76:3061 -> xxx.yyy.255.245:1433 SYN ******S* Jan 5 16:15:24 82.216.10.76:3088 -> xxx.yyy.255.251:1433 SYN ******S* Jan 5 16:15:25 82.216.10.76:3096 -> xxx.yyy.255.253:1433 SYN ******S* Jan 5 16:15:25 82.216.10.76:3093 -> xxx.yyy.255.252:1433 SYN ******S* Jan 5 16:15:25 82.216.10.76:3103 -> xxx.yyy.255.254:1433 SYN ******S* 75398 Jan 5 01:14:25 195.35.141.36:2692 -> xxx.yyy.1.1:6129 SYN ******S* Jan 5 01:14:25 195.35.141.36:2694 -> xxx.yyy.1.2:6129 SYN ******S* Jan 5 01:14:24 195.35.141.36:2698 -> xxx.yyy.1.4:6129 SYN ******S* Jan 5 01:14:24 195.35.141.36:2700 -> xxx.yyy.1.5:6129 SYN ******S* Jan 5 01:14:24 195.35.141.36:2702 -> xxx.yyy.1.6:6129 SYN ******S* Jan 5 01:14:27 195.35.141.36:2704 -> xxx.yyy.1.7:6129 SYN ******S* Jan 5 01:14:24 195.35.141.36:2706 -> xxx.yyy.1.8:6129 SYN ******S* Jan 5 01:14:25 195.35.141.36:2708 -> xxx.yyy.1.9:6129 SYN ******S* [...] Jan 5 01:26:38 195.35.141.36:1936 -> xxx.yyy.255.240:6129 SYN ******S* Jan 5 01:26:38 195.35.141.36:1942 -> xxx.yyy.255.243:6129 SYN ******S* Jan 5 01:26:38 195.35.141.36:1948 -> xxx.yyy.255.246:6129 SYN ******S* Jan 5 01:26:38 195.35.141.36:1938 -> xxx.yyy.255.241:6129 SYN ******S* Jan 5 01:26:38 195.35.141.36:1960 -> xxx.yyy.255.252:6129 SYN ******S* Jan 5 01:26:38 195.35.141.36:1956 -> xxx.yyy.255.250:6129 SYN ******S* Jan 5 01:26:38 195.35.141.36:1962 -> xxx.yyy.255.253:6129 SYN ******S* Jan 5 01:26:38 195.35.141.36:1958 -> xxx.yyy.255.251:6129 SYN ******S* Jan 5 01:26:38 195.35.141.36:1964 -> xxx.yyy.255.254:6129 SYN ******S* 72846 Jan 5 00:52:07 198.38.67.10:1927 -> xxx.yyy.1.2:42 SYN ******S* Jan 5 00:52:07 198.38.67.10:1926 -> xxx.yyy.1.1:42 SYN ******S* Jan 5 00:52:07 198.38.67.10:1929 -> xxx.yyy.1.3:42 SYN ******S* Jan 5 00:52:07 198.38.67.10:1931 -> xxx.yyy.1.4:42 SYN ******S* Jan 5 00:52:07 198.38.67.10:1933 -> xxx.yyy.1.5:42 SYN ******S* Jan 5 00:52:07 198.38.67.10:1934 -> xxx.yyy.1.6:42 SYN ******S* Jan 5 00:52:07 198.38.67.10:1935 -> xxx.yyy.1.7:42 SYN ******S* Jan 5 00:52:07 198.38.67.10:1936 -> xxx.yyy.1.8:42 SYN ******S* [...] Jan 5 01:11:24 198.38.67.10:1569 -> xxx.yyy.255.247:42 SYN ******S* Jan 5 01:11:24 198.38.67.10:1571 -> xxx.yyy.255.249:42 SYN ******S* Jan 5 01:11:24 198.38.67.10:1570 -> xxx.yyy.255.248:42 SYN ******S* Jan 5 01:11:24 198.38.67.10:1572 -> xxx.yyy.255.250:42 SYN ******S* Jan 5 01:11:24 198.38.67.10:1573 -> xxx.yyy.255.251:42 SYN ******S* Jan 5 01:11:24 198.38.67.10:1574 -> xxx.yyy.255.252:42 SYN ******S* Jan 5 01:11:24 198.38.67.10:1575 -> xxx.yyy.255.253:42 SYN ******S* Jan 5 01:11:24 198.38.67.10:1576 -> xxx.yyy.255.254:42 SYN ******S* 71278 Jan 5 08:13:12 67.68.161.227:3424 -> xxx.yyy.1.1:5900 SYN ******S* Jan 5 08:13:12 67.68.161.227:3427 -> xxx.yyy.1.2:5900 SYN ******S* Jan 5 08:13:12 67.68.161.227:3430 -> xxx.yyy.1.3:5900 SYN ******S* Jan 5 08:13:14 67.68.161.227:3436 -> xxx.yyy.1.5:5900 SYN ******S* Jan 5 08:13:14 67.68.161.227:3439 -> xxx.yyy.1.6:5900 SYN ******S* Jan 5 08:13:14 67.68.161.227:3442 -> xxx.yyy.1.7:5900 SYN ******S* Jan 5 08:13:14 67.68.161.227:3445 -> xxx.yyy.1.8:5900 SYN ******S* Jan 5 08:13:12 67.68.161.227:3448 -> xxx.yyy.1.9:5900 SYN ******S* [...] Jan 5 08:31:52 67.68.161.227:4314 -> xxx.yyy.252.238:5900 SYN ******S* Jan 5 08:31:52 67.68.161.227:4367 -> xxx.yyy.252.236:5900 SYN ******S* Jan 5 08:31:54 67.68.161.227:4488 -> xxx.yyy.252.240:5900 SYN ******S* Jan 5 08:31:56 67.68.161.227:4952 -> xxx.yyy.252.245:5900 SYN ******S* Jan 5 08:31:56 67.68.161.227:1054 -> xxx.yyy.252.242:5900 SYN ******S* Jan 5 08:31:57 67.68.161.227:1110 -> xxx.yyy.252.252:5900 SYN ******S* Jan 5 08:31:58 67.68.161.227:1162 -> xxx.yyy.253.47:5900 SYN ******S* Jan 5 08:31:58 67.68.161.227:1209 -> xxx.yyy.253.52:5900 SYN ******S* Jan 5 08:31:59 67.68.161.227:1263 -> xxx.yyy.253.81:5900 SYN ******S* 70839 Jan 5 01:32:25 202.41.106.11:4122 -> xxx.yyy.1.1:1433 SYN ******S* Jan 5 01:32:25 202.41.106.11:4123 -> xxx.yyy.1.2:1433 SYN ******S* Jan 5 01:32:25 202.41.106.11:4124 -> xxx.yyy.1.3:1433 SYN ******S* Jan 5 01:32:25 202.41.106.11:4125 -> xxx.yyy.1.4:1433 SYN ******S* Jan 5 01:32:25 202.41.106.11:4126 -> xxx.yyy.1.5:1433 SYN ******S* Jan 5 01:32:25 202.41.106.11:4127 -> xxx.yyy.1.6:1433 SYN ******S* Jan 5 01:32:22 202.41.106.11:4128 -> xxx.yyy.1.7:1433 SYN ******S* Jan 5 01:32:22 202.41.106.11:4129 -> xxx.yyy.1.8:1433 SYN ******S* [...] Jan 5 01:44:03 202.41.106.11:4059 -> xxx.yyy.255.243:1433 SYN ******S* Jan 5 01:44:03 202.41.106.11:4057 -> xxx.yyy.255.241:1433 SYN ******S* Jan 5 01:44:03 202.41.106.11:4061 -> xxx.yyy.255.245:1433 SYN ******S* Jan 5 01:44:03 202.41.106.11:4066 -> xxx.yyy.255.250:1433 SYN ******S* Jan 5 01:44:03 202.41.106.11:4070 -> xxx.yyy.255.254:1433 SYN ******S* Jan 5 01:44:03 202.41.106.11:4067 -> xxx.yyy.255.251:1433 SYN ******S* Jan 5 01:44:03 202.41.106.11:4068 -> xxx.yyy.255.252:1433 SYN ******S* Jan 5 01:44:03 202.41.106.11:4069 -> xxx.yyy.255.253:1433 SYN ******S* Jan 5 01:44:03 202.41.106.11:4065 -> xxx.yyy.255.249:1433 SYN ******S* 70036 Jan 5 14:41:00 80.94.198.210:2640 -> xxx.yyy.1.1:139 SYN ******S* Jan 5 14:41:00 80.94.198.210:2641 -> xxx.yyy.1.2:139 SYN ******S* Jan 5 14:41:00 80.94.198.210:2642 -> xxx.yyy.1.3:139 SYN ******S* Jan 5 14:41:00 80.94.198.210:2643 -> xxx.yyy.1.4:139 SYN ******S* Jan 5 14:41:00 80.94.198.210:2644 -> xxx.yyy.1.5:139 SYN ******S* Jan 5 14:41:00 80.94.198.210:2645 -> xxx.yyy.1.6:139 SYN ******S* Jan 5 14:41:00 80.94.198.210:2646 -> xxx.yyy.1.7:139 SYN ******S* Jan 5 14:41:00 80.94.198.210:2647 -> xxx.yyy.1.8:139 SYN ******S* [...] Jan 5 14:51:53 80.94.198.210:1652 -> xxx.yyy.255.238:139 SYN ******S* Jan 5 14:51:53 80.94.198.210:1655 -> xxx.yyy.255.241:139 SYN ******S* Jan 5 14:51:53 80.94.198.210:1657 -> xxx.yyy.255.243:139 SYN ******S* Jan 5 14:51:53 80.94.198.210:1654 -> xxx.yyy.255.240:139 SYN ******S* Jan 5 14:51:53 80.94.198.210:1658 -> xxx.yyy.255.244:139 SYN ******S* Jan 5 14:51:54 80.94.198.210:1660 -> xxx.yyy.255.246:139 SYN ******S* Jan 5 14:51:54 80.94.198.210:1661 -> xxx.yyy.255.247:139 SYN ******S* Jan 5 14:51:54 80.94.198.210:1662 -> xxx.yyy.255.248:139 SYN ******S* 69433 Jan 5 05:06:36 156.54.253.75:1275 -> xxx.yyy.1.1:42 SYN ******S* Jan 5 05:06:36 156.54.253.75:1276 -> xxx.yyy.1.2:42 SYN ******S* Jan 5 05:06:36 156.54.253.75:1277 -> xxx.yyy.1.3:42 SYN ******S* Jan 5 05:06:33 156.54.253.75:1278 -> xxx.yyy.1.4:42 SYN ******S* Jan 5 05:06:33 156.54.253.75:1279 -> xxx.yyy.1.5:42 SYN ******S* Jan 5 05:06:36 156.54.253.75:1280 -> xxx.yyy.1.6:42 SYN ******S* Jan 5 05:06:36 156.54.253.75:1281 -> xxx.yyy.1.7:42 SYN ******S* Jan 5 05:06:34 156.54.253.75:1282 -> xxx.yyy.1.8:42 SYN ******S* [...] Jan 5 05:18:23 156.54.253.75:3694 -> xxx.yyy.255.242:42 SYN ******S* Jan 5 05:18:23 156.54.253.75:3697 -> xxx.yyy.255.245:42 SYN ******S* Jan 5 05:18:23 156.54.253.75:3692 -> xxx.yyy.255.240:42 SYN ******S* Jan 5 05:18:23 156.54.253.75:3695 -> xxx.yyy.255.243:42 SYN ******S* Jan 5 05:18:23 156.54.253.75:3706 -> xxx.yyy.255.254:42 SYN ******S* Jan 5 05:18:23 156.54.253.75:3703 -> xxx.yyy.255.251:42 SYN ******S* Jan 5 05:18:23 156.54.253.75:3704 -> xxx.yyy.255.252:42 SYN ******S* Jan 5 05:18:23 156.54.253.75:3705 -> xxx.yyy.255.253:42 SYN ******S* Jan 5 05:18:23 156.54.253.75:3702 -> xxx.yyy.255.250:42 SYN ******S* 69277 Jan 5 06:38:23 202.64.60.179:3973 -> xxx.yyy.1.3:1433 SYN ******S* Jan 5 06:38:23 202.64.60.179:3912 -> xxx.yyy.1.2:1433 SYN ******S* Jan 5 06:38:25 202.64.60.179:1546 -> xxx.yyy.1.29:1433 SYN ******S* Jan 5 06:38:25 202.64.60.179:1535 -> xxx.yyy.1.27:1433 SYN ******S* Jan 5 06:38:25 202.64.60.179:4199 -> xxx.yyy.1.4:1433 SYN ******S* Jan 5 06:38:23 202.64.60.179:1548 -> xxx.yyy.1.30:1433 SYN ******S* Jan 5 06:38:23 202.64.60.179:1549 -> xxx.yyy.1.31:1433 SYN ******S* Jan 5 06:38:25 202.64.60.179:4381 -> xxx.yyy.1.19:1433 SYN ******S* [...] Jan 5 10:39:09 202.64.60.179:1423 -> xxx.yyy.255.244:1433 SYN ******S* Jan 5 10:39:09 202.64.60.179:1227 -> xxx.yyy.255.241:1433 SYN ******S* Jan 5 10:39:09 202.64.60.179:1969 -> xxx.yyy.255.252:1433 SYN ******S* Jan 5 10:39:09 202.64.60.179:1887 -> xxx.yyy.255.251:1433 SYN ******S* Jan 5 10:39:09 202.64.60.179:1825 -> xxx.yyy.255.250:1433 SYN ******S* Jan 5 10:39:09 202.64.60.179:2195 -> xxx.yyy.255.254:1433 SYN ******S* Jan 5 10:39:09 202.64.60.179:2133 -> xxx.yyy.255.253:1433 SYN ******S* Jan 5 10:39:10 202.64.60.179:1868 -> xxx.yyy.255.228:1433 SYN ******S* Jan 5 10:39:10 202.64.60.179:2067 -> xxx.yyy.255.249:1433 SYN ******S* 69033 Jan 5 12:56:01 217.118.63.164:1971 -> xxx.yyy.1.1:1433 SYN ******S* Jan 5 12:56:01 217.118.63.164:1972 -> xxx.yyy.1.2:1433 SYN ******S* Jan 5 12:56:01 217.118.63.164:1973 -> xxx.yyy.1.3:1433 SYN ******S* Jan 5 12:56:01 217.118.63.164:1974 -> xxx.yyy.1.4:1433 SYN ******S* Jan 5 12:56:01 217.118.63.164:1975 -> xxx.yyy.1.5:1433 SYN ******S* Jan 5 12:56:01 217.118.63.164:1976 -> xxx.yyy.1.6:1433 SYN ******S* Jan 5 12:56:01 217.118.63.164:1977 -> xxx.yyy.1.7:1433 SYN ******S* Jan 5 12:55:58 217.118.63.164:1978 -> xxx.yyy.1.8:1433 SYN ******S* [...] Jan 5 13:07:57 217.118.63.164:4071 -> xxx.yyy.255.229:1433 SYN ******S* Jan 5 13:07:57 217.118.63.164:4068 -> xxx.yyy.255.226:1433 SYN ******S* Jan 5 13:07:57 217.118.63.164:4075 -> xxx.yyy.255.233:1433 SYN ******S* Jan 5 13:07:58 217.118.63.164:4079 -> xxx.yyy.255.237:1433 SYN ******S* Jan 5 13:07:58 217.118.63.164:4080 -> xxx.yyy.255.238:1433 SYN ******S* Jan 5 13:07:58 217.118.63.164:4077 -> xxx.yyy.255.235:1433 SYN ******S* Jan 5 13:07:58 217.118.63.164:4081 -> xxx.yyy.255.239:1433 SYN ******S* Jan 5 13:07:58 217.118.63.164:4078 -> xxx.yyy.255.236:1433 SYN ******S* 67564 Jan 5 14:06:41 216.170.131.176:3134 -> xxx.yyy.1.1:1433 SYN ******S* Jan 5 14:06:41 216.170.131.176:3135 -> xxx.yyy.1.2:1433 SYN ******S* Jan 5 14:06:38 216.170.131.176:3136 -> xxx.yyy.1.3:1433 SYN ******S* Jan 5 14:06:38 216.170.131.176:3137 -> xxx.yyy.1.4:1433 SYN ******S* Jan 5 14:06:41 216.170.131.176:3138 -> xxx.yyy.1.5:1433 SYN ******S* Jan 5 14:06:41 216.170.131.176:3139 -> xxx.yyy.1.6:1433 SYN ******S* Jan 5 14:06:41 216.170.131.176:3141 -> xxx.yyy.1.8:1433 SYN ******S* Jan 5 14:06:41 216.170.131.176:3142 -> xxx.yyy.1.9:1433 SYN ******S* [...] Jan 5 14:18:37 216.170.131.176:2236 -> xxx.yyy.255.249:1433 SYN ******S* Jan 5 14:18:37 216.170.131.176:2233 -> xxx.yyy.255.246:1433 SYN ******S* Jan 5 14:18:37 216.170.131.176:2230 -> xxx.yyy.255.243:1433 SYN ******S* Jan 5 14:18:37 216.170.131.176:2237 -> xxx.yyy.255.250:1433 SYN ******S* Jan 5 14:18:37 216.170.131.176:2234 -> xxx.yyy.255.247:1433 SYN ******S* Jan 5 14:18:37 216.170.131.176:2231 -> xxx.yyy.255.244:1433 SYN ******S* Jan 5 14:18:37 216.170.131.176:2232 -> xxx.yyy.255.245:1433 SYN ******S* Jan 5 14:18:37 216.170.131.176:2240 -> xxx.yyy.255.253:1433 SYN ******S* Jan 5 14:18:37 216.170.131.176:2241 -> xxx.yyy.255.254:1433 SYN ******S* 65021 Jan 5 16:43:03 64.45.172.2:3078 -> xxx.yyy.1.2:3306 SYN ******S* Jan 5 16:43:03 64.45.172.2:3079 -> xxx.yyy.1.3:3306 SYN ******S* Jan 5 16:43:05 64.45.172.2:3080 -> xxx.yyy.1.4:3306 SYN ******S* Jan 5 16:43:05 64.45.172.2:3081 -> xxx.yyy.1.5:3306 SYN ******S* Jan 5 16:43:05 64.45.172.2:3083 -> xxx.yyy.1.7:3306 SYN ******S* Jan 5 16:43:05 64.45.172.2:3082 -> xxx.yyy.1.6:3306 SYN ******S* Jan 5 16:43:05 64.45.172.2:3084 -> xxx.yyy.1.8:3306 SYN ******S* Jan 5 16:43:02 64.45.172.2:3085 -> xxx.yyy.1.9:3306 SYN ******S* [...] Jan 5 17:20:57 64.45.172.2:2998 -> xxx.yyy.255.244:3306 SYN ******S* Jan 5 17:20:57 64.45.172.2:2999 -> xxx.yyy.255.245:3306 SYN ******S* Jan 5 17:20:57 64.45.172.2:3000 -> xxx.yyy.255.246:3306 SYN ******S* Jan 5 17:20:57 64.45.172.2:3005 -> xxx.yyy.255.251:3306 SYN ******S* Jan 5 17:20:57 64.45.172.2:3001 -> xxx.yyy.255.247:3306 SYN ******S* Jan 5 17:20:57 64.45.172.2:3007 -> xxx.yyy.255.253:3306 SYN ******S* Jan 5 17:20:57 64.45.172.2:3006 -> xxx.yyy.255.252:3306 SYN ******S* Jan 5 17:20:57 64.45.172.2:3003 -> xxx.yyy.255.249:3306 SYN ******S* Jan 5 17:20:57 64.45.172.2:3002 -> xxx.yyy.255.248:3306 SYN ******S* 62986 Jan 5 23:39:39 222.113.79.249:1699 -> xxx.yyy.1.1:4899 SYN ******S* Jan 5 23:39:38 222.113.79.249:1702 -> xxx.yyy.1.4:4899 SYN ******S* Jan 5 23:39:38 222.113.79.249:1713 -> xxx.yyy.1.15:4899 SYN ******S* Jan 5 23:39:38 222.113.79.249:1703 -> xxx.yyy.1.5:4899 SYN ******S* Jan 5 23:39:38 222.113.79.249:1706 -> xxx.yyy.1.8:4899 SYN ******S* Jan 5 23:39:39 222.113.79.249:1709 -> xxx.yyy.1.11:4899 SYN ******S* Jan 5 23:39:38 222.113.79.249:1710 -> xxx.yyy.1.12:4899 SYN ******S* Jan 5 23:39:39 222.113.79.249:1735 -> xxx.yyy.1.37:4899 SYN ******S* [...] Jan 5 23:45:56 222.113.79.249:2424 -> xxx.yyy.255.220:4899 SYN ******S* Jan 5 23:45:56 222.113.79.249:2427 -> xxx.yyy.255.223:4899 SYN ******S* Jan 5 23:45:56 222.113.79.249:2432 -> xxx.yyy.255.228:4899 SYN ******S* Jan 5 23:45:56 222.113.79.249:2435 -> xxx.yyy.255.231:4899 SYN ******S* Jan 5 23:45:56 222.113.79.249:2434 -> xxx.yyy.255.230:4899 SYN ******S* Jan 5 23:45:56 222.113.79.249:2445 -> xxx.yyy.255.241:4899 SYN ******S* Jan 5 23:45:56 222.113.79.249:2446 -> xxx.yyy.255.242:4899 SYN ******S* Jan 5 23:45:56 222.113.79.249:2449 -> xxx.yyy.255.245:4899 SYN ******S* 44487 Jan 5 07:48:47 61.37.196.55:2092 -> xxx.yyy.1.1:4899 SYN ******S* Jan 5 07:48:45 61.37.196.55:2095 -> xxx.yyy.1.4:4899 SYN ******S* Jan 5 07:48:45 61.37.196.55:2161 -> xxx.yyy.1.7:4899 SYN ******S* Jan 5 07:48:45 61.37.196.55:2162 -> xxx.yyy.1.8:4899 SYN ******S* Jan 5 07:48:46 61.37.196.55:2165 -> xxx.yyy.1.11:4899 SYN ******S* Jan 5 07:48:45 61.37.196.55:2166 -> xxx.yyy.1.12:4899 SYN ******S* Jan 5 07:48:47 61.37.196.55:2093 -> xxx.yyy.1.2:4899 SYN ******S* Jan 5 07:48:47 61.37.196.55:2094 -> xxx.yyy.1.3:4899 SYN ******S* [...] Jan 5 07:52:15 61.37.196.55:3667 -> xxx.yyy.255.251:4899 SYN ******S* Jan 5 07:52:15 61.37.196.55:3670 -> xxx.yyy.255.254:4899 SYN ******S* Jan 5 07:52:15 61.37.196.55:3663 -> xxx.yyy.255.247:4899 SYN ******S* Jan 5 07:52:15 61.37.196.55:3666 -> xxx.yyy.255.250:4899 SYN ******S* Jan 5 07:52:15 61.37.196.55:3658 -> xxx.yyy.255.242:4899 SYN ******S* Jan 5 07:52:15 61.37.196.55:3662 -> xxx.yyy.255.246:4899 SYN ******S* Jan 5 07:52:15 61.37.196.55:3664 -> xxx.yyy.255.248:4899 SYN ******S* Jan 5 07:52:15 61.37.196.55:3669 -> xxx.yyy.255.253:4899 SYN ******S* 43972 Jan 5 19:53:19 219.253.253.5:3947 -> xxx.yyy.1.1:4899 SYN ******S* Jan 5 19:53:17 219.253.253.5:3950 -> xxx.yyy.1.4:4899 SYN ******S* Jan 5 19:53:17 219.253.253.5:3951 -> xxx.yyy.1.5:4899 SYN ******S* Jan 5 19:53:17 219.253.253.5:3952 -> xxx.yyy.1.6:4899 SYN ******S* Jan 5 19:53:17 219.253.253.5:3953 -> xxx.yyy.1.7:4899 SYN ******S* Jan 5 19:53:17 219.253.253.5:3956 -> xxx.yyy.1.10:4899 SYN ******S* Jan 5 19:53:17 219.253.253.5:3954 -> xxx.yyy.1.8:4899 SYN ******S* Jan 5 19:53:19 219.253.253.5:3955 -> xxx.yyy.1.9:4899 SYN ******S* [...] Jan 5 19:57:30 219.253.253.5:1828 -> xxx.yyy.254.251:4899 SYN ******S* Jan 5 19:57:30 219.253.253.5:1825 -> xxx.yyy.254.248:4899 SYN ******S* Jan 5 19:57:30 219.253.253.5:1827 -> xxx.yyy.254.250:4899 SYN ******S* Jan 5 19:57:30 219.253.253.5:1829 -> xxx.yyy.254.252:4899 SYN ******S* Jan 5 19:57:30 219.253.253.5:1830 -> xxx.yyy.254.253:4899 SYN ******S* Jan 5 19:57:32 219.253.253.5:1573 -> xxx.yyy.253.249:4899 SYN ******S* Jan 5 19:57:32 219.253.253.5:1576 -> xxx.yyy.253.252:4899 SYN ******S* Jan 5 19:57:33 219.253.253.5:1819 -> xxx.yyy.254.242:4899 SYN ******S* Jan 5 19:57:33 219.253.253.5:1818 -> xxx.yyy.254.241:4899 SYN ******S* 43832 Jan 5 02:00:26 69.93.6.34:1812 -> xxx.yyy.1.0:3306 SYN ******S* Jan 5 02:00:26 69.93.6.34:1813 -> xxx.yyy.1.1:3306 SYN ******S* Jan 5 02:00:26 69.93.6.34:1814 -> xxx.yyy.1.2:3306 SYN ******S* Jan 5 02:00:26 69.93.6.34:1815 -> xxx.yyy.1.3:3306 SYN ******S* Jan 5 02:00:26 69.93.6.34:1816 -> xxx.yyy.1.4:3306 SYN ******S* Jan 5 02:00:26 69.93.6.34:1817 -> xxx.yyy.1.5:3306 SYN ******S* Jan 5 02:00:26 69.93.6.34:1818 -> xxx.yyy.1.6:3306 SYN ******S* Jan 5 02:00:26 69.93.6.34:1819 -> xxx.yyy.1.7:3306 SYN ******S* [...] Jan 5 12:04:13 69.93.6.34:2930 -> xxx.yyy.236.24:3306 SYN ******S* Jan 5 12:04:14 69.93.6.34:3053 -> xxx.yyy.237.7:3306 SYN ******S* Jan 5 12:04:15 69.93.6.34:3168 -> xxx.yyy.236.23:3306 SYN ******S* Jan 5 12:04:15 69.93.6.34:3210 -> xxx.yyy.241.179:3306 SYN ******S* Jan 5 12:04:17 69.93.6.34:3346 -> xxx.yyy.212.75:3306 SYN ******S* Jan 5 12:04:16 69.93.6.34:3313 -> xxx.yyy.224.141:3306 SYN ******S* Jan 5 12:04:17 69.93.6.34:3412 -> xxx.yyy.240.211:3306 SYN ******S* Jan 5 12:04:17 69.93.6.34:3421 -> xxx.yyy.236.22:3306 SYN ******S* 43829 Jan 5 08:27:17 68.255.154.122:2580 -> xxx.yyy.1.1:4899 SYN ******S* Jan 5 08:27:17 68.255.154.122:2581 -> xxx.yyy.1.2:4899 SYN ******S* Jan 5 08:27:17 68.255.154.122:2582 -> xxx.yyy.1.3:4899 SYN ******S* Jan 5 08:27:16 68.255.154.122:2583 -> xxx.yyy.1.4:4899 SYN ******S* Jan 5 08:27:16 68.255.154.122:2584 -> xxx.yyy.1.5:4899 SYN ******S* Jan 5 08:27:16 68.255.154.122:2586 -> xxx.yyy.1.6:4899 SYN ******S* Jan 5 08:27:16 68.255.154.122:2587 -> xxx.yyy.1.7:4899 SYN ******S* Jan 5 08:27:16 68.255.154.122:2588 -> xxx.yyy.1.8:4899 SYN ******S* [...] Jan 5 08:34:35 68.255.154.122:4528 -> xxx.yyy.255.247:4899 SYN ******S* Jan 5 08:34:35 68.255.154.122:4533 -> xxx.yyy.255.248:4899 SYN ******S* Jan 5 08:34:35 68.255.154.122:4538 -> xxx.yyy.255.249:4899 SYN ******S* Jan 5 08:34:35 68.255.154.122:4539 -> xxx.yyy.255.250:4899 SYN ******S* Jan 5 08:34:35 68.255.154.122:4541 -> xxx.yyy.255.251:4899 SYN ******S* Jan 5 08:34:35 68.255.154.122:4545 -> xxx.yyy.255.252:4899 SYN ******S* Jan 5 08:34:35 68.255.154.122:4546 -> xxx.yyy.255.253:4899 SYN ******S* Jan 5 08:34:35 68.255.154.122:4550 -> xxx.yyy.255.254:4899 SYN ******S* 43550 Jan 5 04:27:25 165.21.103.247:3022 -> xxx.yyy.1.2:22 SYN ******S* Jan 5 04:27:25 165.21.103.247:3022 -> xxx.yyy.1.5:22 SYN ******S* Jan 5 04:27:25 165.21.103.247:3022 -> xxx.yyy.1.9:22 SYN ******S* Jan 5 04:27:25 165.21.103.247:3022 -> xxx.yyy.1.12:22 SYN ******S* Jan 5 04:27:25 165.21.103.247:3022 -> xxx.yyy.1.13:22 SYN ******S* Jan 5 04:27:25 165.21.103.247:3022 -> xxx.yyy.1.16:22 SYN ******S* Jan 5 04:27:25 165.21.103.247:3022 -> xxx.yyy.1.17:22 SYN ******S* Jan 5 04:27:25 165.21.103.247:3022 -> xxx.yyy.1.18:22 SYN ******S* [...] Jan 5 04:29:09 165.21.103.247:3022 -> xxx.yyy.255.242:22 SYN ******S* Jan 5 04:29:09 165.21.103.247:3022 -> xxx.yyy.255.244:22 SYN ******S* Jan 5 04:29:09 165.21.103.247:3022 -> xxx.yyy.255.246:22 SYN ******S* Jan 5 04:29:09 165.21.103.247:3022 -> xxx.yyy.255.250:22 SYN ******S* Jan 5 04:29:09 165.21.103.247:3022 -> xxx.yyy.255.249:22 SYN ******S* Jan 5 04:29:09 165.21.103.247:3022 -> xxx.yyy.255.251:22 SYN ******S* Jan 5 04:29:09 165.21.103.247:3022 -> xxx.yyy.255.253:22 SYN ******S* Jan 5 04:29:09 165.21.103.247:3022 -> xxx.yyy.255.254:22 SYN ******S* 40592 Jan 5 16:11:33 172.167.204.158:4733 -> xxx.yyy.1.1:1433 SYN ******S* Jan 5 16:11:33 172.167.204.158:4735 -> xxx.yyy.1.2:1433 SYN ******S* Jan 5 16:11:33 172.167.204.158:4737 -> xxx.yyy.1.3:1433 SYN ******S* Jan 5 16:11:33 172.167.204.158:4740 -> xxx.yyy.1.4:1433 SYN ******S* Jan 5 16:11:33 172.167.204.158:4741 -> xxx.yyy.1.5:1433 SYN ******S* Jan 5 16:11:34 172.167.204.158:4750 -> xxx.yyy.1.8:1433 SYN ******S* Jan 5 16:11:34 172.167.204.158:4752 -> xxx.yyy.1.10:1433 SYN ******S* Jan 5 16:11:34 172.167.204.158:4751 -> xxx.yyy.1.9:1433 SYN ******S* [...] Jan 5 17:10:15 172.167.204.158:3999 -> xxx.yyy.132.67:1433 SYN ******S* Jan 5 17:10:15 172.167.204.158:4005 -> xxx.yyy.132.70:1433 SYN ******S* Jan 5 17:10:15 172.167.204.158:4007 -> xxx.yyy.132.71:1433 SYN ******S* Jan 5 17:10:15 172.167.204.158:3652 -> xxx.yyy.131.162:1433 SYN ******S* Jan 5 17:10:15 172.167.204.158:4009 -> xxx.yyy.132.72:1433 SYN ******S* Jan 5 17:10:15 172.167.204.158:3651 -> xxx.yyy.131.161:1433 SYN ******S* Jan 5 17:10:15 172.167.204.158:3657 -> xxx.yyy.131.163:1433 SYN ******S* Jan 5 17:10:15 172.167.204.158:3659 -> xxx.yyy.131.165:1433 SYN ******S* Jan 5 17:10:15 172.167.204.158:3658 -> xxx.yyy.131.164:1433 SYN ******S* 35576 Jan 5 10:49:58 213.39.138.21:4024 -> xxx.yyy.1.1:80 SYN ******S* Jan 5 10:50:00 213.39.138.21:4042 -> xxx.yyy.1.5:80 SYN ******S* Jan 5 10:50:00 213.39.138.21:4063 -> xxx.yyy.1.9:80 SYN ******S* Jan 5 10:49:57 213.39.138.21:4092 -> xxx.yyy.1.14:80 SYN ******S* Jan 5 10:50:00 213.39.138.21:4106 -> xxx.yyy.1.18:80 SYN ******S* Jan 5 10:49:57 213.39.138.21:4116 -> xxx.yyy.1.22:80 SYN ******S* Jan 5 10:49:57 213.39.138.21:4129 -> xxx.yyy.1.27:80 SYN ******S* Jan 5 10:50:00 213.39.138.21:4140 -> xxx.yyy.1.31:80 SYN ******S* [...] Jan 5 10:54:24 213.39.138.21:4716 -> xxx.yyy.255.216:80 SYN ******S* Jan 5 10:54:24 213.39.138.21:4722 -> xxx.yyy.255.220:80 SYN ******S* Jan 5 10:54:24 213.39.138.21:4729 -> xxx.yyy.255.225:80 SYN ******S* Jan 5 10:54:24 213.39.138.21:4733 -> xxx.yyy.255.229:80 SYN ******S* Jan 5 10:54:24 213.39.138.21:4740 -> xxx.yyy.255.233:80 SYN ******S* Jan 5 10:54:24 213.39.138.21:4746 -> xxx.yyy.255.238:80 SYN ******S* Jan 5 10:54:24 213.39.138.21:4750 -> xxx.yyy.255.242:80 SYN ******S* Jan 5 10:54:24 213.39.138.21:4755 -> xxx.yyy.255.246:80 SYN ******S* Jan 5 10:54:24 213.39.138.21:4763 -> xxx.yyy.255.251:80 SYN ******S* 35102 Jan 5 19:58:13 201.1.166.190:2311 -> xxx.yyy.1.0:1433 SYN ******S* Jan 5 19:58:10 201.1.166.190:2341 -> xxx.yyy.1.2:1433 SYN ******S* Jan 5 19:58:10 201.1.166.190:2347 -> xxx.yyy.1.5:1433 SYN ******S* Jan 5 19:58:10 201.1.166.190:2349 -> xxx.yyy.1.6:1433 SYN ******S* Jan 5 19:58:10 201.1.166.190:2362 -> xxx.yyy.1.7:1433 SYN ******S* Jan 5 19:58:10 201.1.166.190:2366 -> xxx.yyy.1.8:1433 SYN ******S* Jan 5 19:58:10 201.1.166.190:2367 -> xxx.yyy.1.9:1433 SYN ******S* Jan 5 19:58:13 201.1.166.190:2375 -> xxx.yyy.1.12:1433 SYN ******S* [...] Jan 5 22:47:13 201.1.166.190:2146 -> xxx.yyy.155.209:1433 SYN ******S* Jan 5 22:47:13 201.1.166.190:2214 -> xxx.yyy.155.210:1433 SYN ******S* Jan 5 22:47:14 201.1.166.190:1026 -> xxx.yyy.155.211:1433 SYN ******S* Jan 5 22:47:15 201.1.166.190:1554 -> xxx.yyy.155.192:1433 SYN ******S* Jan 5 22:47:15 201.1.166.190:1951 -> xxx.yyy.155.194:1433 SYN ******S* Jan 5 22:47:15 201.1.166.190:1565 -> xxx.yyy.155.195:1433 SYN ******S* Jan 5 22:47:15 201.1.166.190:1037 -> xxx.yyy.155.212:1433 SYN ******S* Jan 5 22:47:15 201.1.166.190:2146 -> xxx.yyy.155.209:1433 SYN ******S* Jan 5 22:47:15 201.1.166.190:2214 -> xxx.yyy.155.210:1433 SYN ******S* 19968 Jan 5 12:28:56 80.83.47.120:4749 -> xxx.yyy.1.0:80 SYN ******S* Jan 5 12:28:56 80.83.47.120:4750 -> xxx.yyy.1.1:80 SYN ******S* Jan 5 12:28:56 80.83.47.120:4751 -> xxx.yyy.1.2:80 SYN ******S* Jan 5 12:28:56 80.83.47.120:4752 -> xxx.yyy.1.3:80 SYN ******S* Jan 5 12:28:56 80.83.47.120:4753 -> xxx.yyy.1.4:80 SYN ******S* Jan 5 12:28:56 80.83.47.120:4755 -> xxx.yyy.1.6:80 SYN ******S* Jan 5 12:28:56 80.83.47.120:4754 -> xxx.yyy.1.5:80 SYN ******S* Jan 5 12:28:56 80.83.47.120:4756 -> xxx.yyy.1.7:80 SYN ******S* [...] Jan 5 12:29:26 80.83.47.120:1706 -> xxx.yyy.248.37:80 SYN ******S* Jan 5 12:29:27 80.83.47.120:1710 -> xxx.yyy.248.165:80 SYN ******S* Jan 5 12:29:27 80.83.47.120:1709 -> xxx.yyy.248.137:80 SYN ******S* Jan 5 12:29:27 80.83.47.120:1711 -> xxx.yyy.248.4:80 SYN ******S* Jan 5 12:29:27 80.83.47.120:1712 -> xxx.yyy.248.80:80 SYN ******S* Jan 5 12:29:29 80.83.47.120:1713 -> xxx.yyy.248.17:80 SYN ******S* Jan 5 12:29:29 80.83.47.120:1714 -> xxx.yyy.248.18:80 SYN ******S* Jan 5 12:29:29 80.83.47.120:1715 -> xxx.yyy.213.66:80 SYN ******S* 19492 [...] 19350 Jan 5 21:29:44 211.158.42.185:1975 -> xxx.yyy.1.0:1433 SYN ******S* Jan 5 21:29:45 211.158.42.185:2019 -> xxx.yyy.1.36:1433 SYN ******S* Jan 5 21:29:42 211.158.42.185:2038 -> xxx.yyy.1.38:1433 SYN ******S* Jan 5 21:29:45 211.158.42.185:1040 -> xxx.yyy.1.40:1433 SYN ******S* Jan 5 21:29:45 211.158.42.185:2039 -> xxx.yyy.1.39:1433 SYN ******S* Jan 5 21:29:42 211.158.42.185:2021 -> xxx.yyy.1.37:1433 SYN ******S* Jan 5 21:29:45 211.158.42.185:1083 -> xxx.yyy.1.42:1433 SYN ******S* Jan 5 21:29:45 211.158.42.185:1082 -> xxx.yyy.1.41:1433 SYN ******S* [...] Jan 5 23:59:59 211.158.42.185:1575 -> xxx.yyy.168.43:1433 SYN ******S* Jan 5 23:59:59 211.158.42.185:1984 -> xxx.yyy.168.45:1433 SYN ******S* Jan 6 00:00:00 211.158.42.185:1259 -> xxx.yyy.168.53:1433 SYN ******S* Jan 6 00:00:00 211.158.42.185:1581 -> xxx.yyy.168.44:1433 SYN ******S* Jan 6 00:00:00 211.158.42.185:1144 -> xxx.yyy.168.57:1433 SYN ******S* Jan 6 00:00:01 211.158.42.185:1303 -> xxx.yyy.168.66:1433 SYN ******S* Jan 6 00:00:01 211.158.42.185:1722 -> xxx.yyy.168.55:1433 SYN ******S* Jan 6 00:00:01 211.158.42.185:1709 -> xxx.yyy.168.54:1433 SYN ******S* Jan 6 00:00:01 211.158.42.185:1136 -> xxx.yyy.168.58:1433 SYN ******S* 18785 [...] 17474 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions