[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Jan 10 01:54:20 218.75.249.128:41726 -> xxx.yyy.1.1:1433 SYN ******S* Jan 10 01:54:23 218.75.249.128:41741 -> xxx.yyy.1.3:1433 SYN ******S* Jan 10 01:54:20 218.75.249.128:41754 -> xxx.yyy.1.5:1433 SYN ******S* Jan 10 01:54:23 218.75.249.128:41762 -> xxx.yyy.1.7:1433 SYN ******S* Jan 10 01:54:23 218.75.249.128:41764 -> xxx.yyy.1.9:1433 SYN ******S* Jan 10 01:54:23 218.75.249.128:41766 -> xxx.yyy.1.11:1433 SYN ******S* Jan 10 01:54:23 218.75.249.128:41744 -> xxx.yyy.1.4:1433 SYN ******S* Jan 10 01:54:23 218.75.249.128:41768 -> xxx.yyy.1.13:1433 SYN ******S* [...] Jan 10 05:43:04 218.75.249.128:45719 -> xxx.yyy.255.247:1433 SYN ******S* Jan 10 05:43:04 218.75.249.128:45717 -> xxx.yyy.255.245:1433 SYN ******S* Jan 10 05:43:04 218.75.249.128:45718 -> xxx.yyy.255.246:1433 SYN ******S* Jan 10 05:43:04 218.75.249.128:45714 -> xxx.yyy.255.242:1433 SYN ******S* Jan 10 05:43:04 218.75.249.128:45721 -> xxx.yyy.255.249:1433 SYN ******S* Jan 10 05:43:04 218.75.249.128:45722 -> xxx.yyy.255.250:1433 SYN ******S* Jan 10 05:43:04 218.75.249.128:45726 -> xxx.yyy.255.253:1433 SYN ******S* Jan 10 05:43:04 218.75.249.128:45727 -> xxx.yyy.255.254:1433 SYN ******S* Jan 10 05:43:06 218.75.249.128:45724 -> xxx.yyy.255.252:1433 SYN ******S* 106236 Jan 10 07:58:25 218.22.168.72:53145 -> xxx.yyy.1.0:1433 SYN ******S* Jan 10 07:58:25 218.22.168.72:53147 -> xxx.yyy.1.1:1433 SYN ******S* Jan 10 07:58:25 218.22.168.72:53148 -> xxx.yyy.1.2:1433 SYN ******S* Jan 10 07:58:25 218.22.168.72:53149 -> xxx.yyy.1.3:1433 SYN ******S* Jan 10 07:58:25 218.22.168.72:53151 -> xxx.yyy.1.4:1433 SYN ******S* Jan 10 07:58:26 218.22.168.72:53152 -> xxx.yyy.1.5:1433 SYN ******S* Jan 10 07:58:26 218.22.168.72:53153 -> xxx.yyy.1.6:1433 SYN ******S* Jan 10 07:58:23 218.22.168.72:53154 -> xxx.yyy.1.7:1433 SYN ******S* [...] Jan 10 11:47:11 218.22.168.72:51781 -> xxx.yyy.255.246:1433 SYN ******S* Jan 10 11:47:11 218.22.168.72:51780 -> xxx.yyy.255.245:1433 SYN ******S* Jan 10 11:47:11 218.22.168.72:51778 -> xxx.yyy.255.244:1433 SYN ******S* Jan 10 11:47:12 218.22.168.72:51790 -> xxx.yyy.255.247:1433 SYN ******S* Jan 10 11:47:12 218.22.168.72:51797 -> xxx.yyy.255.248:1433 SYN ******S* Jan 10 11:47:12 218.22.168.72:51806 -> xxx.yyy.255.249:1433 SYN ******S* Jan 10 11:47:13 218.22.168.72:51810 -> xxx.yyy.255.250:1433 SYN ******S* Jan 10 11:47:13 218.22.168.72:51823 -> xxx.yyy.255.253:1433 SYN ******S* 77793 Jan 10 06:19:11 195.251.210.217:3366 -> xxx.yyy.1.1:42 SYN ******S* Jan 10 06:19:11 195.251.210.217:3367 -> xxx.yyy.1.2:42 SYN ******S* Jan 10 06:19:11 195.251.210.217:3368 -> xxx.yyy.1.3:42 SYN ******S* Jan 10 06:19:11 195.251.210.217:3369 -> xxx.yyy.1.4:42 SYN ******S* Jan 10 06:19:14 195.251.210.217:3370 -> xxx.yyy.1.5:42 SYN ******S* Jan 10 06:19:14 195.251.210.217:3371 -> xxx.yyy.1.6:42 SYN ******S* Jan 10 06:19:14 195.251.210.217:3373 -> xxx.yyy.1.7:42 SYN ******S* Jan 10 06:19:14 195.251.210.217:3374 -> xxx.yyy.1.8:42 SYN ******S* [...] Jan 10 06:30:07 195.251.210.217:2432 -> xxx.yyy.255.248:42 SYN ******S* Jan 10 06:30:07 195.251.210.217:2427 -> xxx.yyy.255.243:42 SYN ******S* Jan 10 06:30:07 195.251.210.217:2429 -> xxx.yyy.255.245:42 SYN ******S* Jan 10 06:30:07 195.251.210.217:2433 -> xxx.yyy.255.249:42 SYN ******S* Jan 10 06:30:07 195.251.210.217:2431 -> xxx.yyy.255.247:42 SYN ******S* Jan 10 06:30:07 195.251.210.217:2428 -> xxx.yyy.255.244:42 SYN ******S* Jan 10 06:30:07 195.251.210.217:2425 -> xxx.yyy.255.241:42 SYN ******S* Jan 10 06:30:08 195.251.210.217:2435 -> xxx.yyy.255.251:42 SYN ******S* Jan 10 06:30:08 195.251.210.217:2436 -> xxx.yyy.255.252:42 SYN ******S* 74849 Jan 10 17:12:12 220.55.213.31:22002 -> xxx.yyy.1.0:1080 SYN ******S* Jan 10 17:12:13 220.55.213.31:22002 -> xxx.yyy.1.0:10080 SYN ******S* Jan 10 17:12:13 220.55.213.31:22002 -> xxx.yyy.1.1:1080 SYN ******S* Jan 10 17:12:13 220.55.213.31:22002 -> xxx.yyy.1.1:3127 SYN ******S* Jan 10 17:12:13 220.55.213.31:22002 -> xxx.yyy.1.1:10080 SYN ******S* Jan 10 17:12:14 220.55.213.31:22002 -> xxx.yyy.1.2:3128 SYN ******S* Jan 10 17:12:14 220.55.213.31:22002 -> xxx.yyy.1.3:1080 SYN ******S* Jan 10 17:12:14 220.55.213.31:22002 -> xxx.yyy.1.3:3127 SYN ******S* [...] Jan 10 21:52:11 220.55.213.31:22002 -> xxx.yyy.149.76:1080 SYN ******S* Jan 10 21:52:11 220.55.213.31:22002 -> xxx.yyy.149.76:10080 SYN ******S* Jan 10 21:52:11 220.55.213.31:22002 -> xxx.yyy.149.76:3128 SYN ******S* Jan 10 21:52:11 220.55.213.31:22002 -> xxx.yyy.149.112:3127 SYN ******S* Jan 10 21:52:11 220.55.213.31:22002 -> xxx.yyy.149.77:1080 SYN ******S* Jan 10 21:52:12 220.55.213.31:22002 -> xxx.yyy.149.112:10080 SYN ******S* Jan 10 21:52:12 220.55.213.31:22002 -> xxx.yyy.149.113:3127 SYN ******S* Jan 10 21:52:12 220.55.213.31:22002 -> xxx.yyy.149.113:10080 SYN ******S* Jan 10 21:52:12 220.55.213.31:22002 -> xxx.yyy.149.78:10080 SYN ******S* 74093 Jan 10 18:44:36 219.79.25.156:3306 -> xxx.yyy.12.39:1433 SYN ******S* Jan 10 18:44:36 219.79.25.156:3308 -> xxx.yyy.12.40:1433 SYN ******S* Jan 10 18:44:39 219.79.25.156:3310 -> xxx.yyy.12.41:1433 SYN ******S* Jan 10 18:44:36 219.79.25.156:3312 -> xxx.yyy.12.42:1433 SYN ******S* Jan 10 18:44:39 219.79.25.156:3317 -> xxx.yyy.12.44:1433 SYN ******S* Jan 10 18:44:39 219.79.25.156:3319 -> xxx.yyy.12.45:1433 SYN ******S* Jan 10 18:44:36 219.79.25.156:3321 -> xxx.yyy.12.46:1433 SYN ******S* Jan 10 18:44:36 219.79.25.156:3323 -> xxx.yyy.12.47:1433 SYN ******S* [...] Jan 10 22:25:36 219.79.25.156:3178 -> xxx.yyy.255.234:1433 SYN ******S* Jan 10 22:25:37 219.79.25.156:3200 -> xxx.yyy.255.236:1433 SYN ******S* Jan 10 22:25:37 219.79.25.156:3218 -> xxx.yyy.255.238:1433 SYN ******S* Jan 10 22:25:37 219.79.25.156:3235 -> xxx.yyy.255.239:1433 SYN ******S* Jan 10 22:25:38 219.79.25.156:3268 -> xxx.yyy.255.243:1433 SYN ******S* Jan 10 22:25:38 219.79.25.156:3286 -> xxx.yyy.255.247:1433 SYN ******S* Jan 10 22:25:38 219.79.25.156:3303 -> xxx.yyy.255.248:1433 SYN ******S* Jan 10 22:25:38 219.79.25.156:3340 -> xxx.yyy.255.252:1433 SYN ******S* Jan 10 22:25:38 219.79.25.156:3363 -> xxx.yyy.255.253:1433 SYN ******S* 66763 Jan 10 01:17:21 213.41.93.238:1515 -> xxx.yyy.1.1:1433 SYN ******S* Jan 10 01:17:24 213.41.93.238:1516 -> xxx.yyy.1.2:1433 SYN ******S* Jan 10 01:17:24 213.41.93.238:1517 -> xxx.yyy.1.3:1433 SYN ******S* Jan 10 01:17:21 213.41.93.238:1518 -> xxx.yyy.1.4:1433 SYN ******S* Jan 10 01:17:21 213.41.93.238:1519 -> xxx.yyy.1.5:1433 SYN ******S* Jan 10 01:17:24 213.41.93.238:1522 -> xxx.yyy.1.6:1433 SYN ******S* Jan 10 01:17:21 213.41.93.238:1523 -> xxx.yyy.1.7:1433 SYN ******S* Jan 10 01:17:24 213.41.93.238:1524 -> xxx.yyy.1.8:1433 SYN ******S* [...] Jan 10 01:46:23 213.41.93.238:2696 -> xxx.yyy.255.246:1433 SYN ******S* Jan 10 01:46:23 213.41.93.238:2697 -> xxx.yyy.255.247:1433 SYN ******S* Jan 10 01:46:23 213.41.93.238:2700 -> xxx.yyy.255.250:1433 SYN ******S* Jan 10 01:46:23 213.41.93.238:2695 -> xxx.yyy.255.245:1433 SYN ******S* Jan 10 01:46:23 213.41.93.238:2698 -> xxx.yyy.255.248:1433 SYN ******S* Jan 10 01:46:23 213.41.93.238:2701 -> xxx.yyy.255.251:1433 SYN ******S* Jan 10 01:46:23 213.41.93.238:2699 -> xxx.yyy.255.249:1433 SYN ******S* Jan 10 01:46:23 213.41.93.238:2702 -> xxx.yyy.255.252:1433 SYN ******S* Jan 10 01:46:23 213.41.93.238:2704 -> xxx.yyy.255.254:1433 SYN ******S* 65170 Jan 10 06:34:34 212.19.102.205:1800 -> xxx.yyy.1.1:80 SYN ******S* Jan 10 06:34:37 212.19.102.205:1804 -> xxx.yyy.1.5:80 SYN ******S* Jan 10 06:34:34 212.19.102.205:1801 -> xxx.yyy.1.2:80 SYN ******S* Jan 10 06:34:34 212.19.102.205:1802 -> xxx.yyy.1.3:80 SYN ******S* Jan 10 06:34:34 212.19.102.205:1803 -> xxx.yyy.1.4:80 SYN ******S* Jan 10 06:34:34 212.19.102.205:1805 -> xxx.yyy.1.6:80 SYN ******S* Jan 10 06:34:34 212.19.102.205:1806 -> xxx.yyy.1.7:80 SYN ******S* Jan 10 06:34:37 212.19.102.205:1807 -> xxx.yyy.1.8:80 SYN ******S* [...] Jan 10 06:42:58 212.19.102.205:3769 -> xxx.yyy.255.250:80 SYN ******S* Jan 10 06:42:58 212.19.102.205:3766 -> xxx.yyy.255.247:80 SYN ******S* Jan 10 06:42:58 212.19.102.205:3750 -> xxx.yyy.255.231:80 SYN ******S* Jan 10 06:42:58 212.19.102.205:3731 -> xxx.yyy.255.212:80 SYN ******S* Jan 10 06:42:58 212.19.102.205:3728 -> xxx.yyy.255.209:80 SYN ******S* Jan 10 06:42:58 212.19.102.205:3763 -> xxx.yyy.255.244:80 SYN ******S* Jan 10 06:42:58 212.19.102.205:3747 -> xxx.yyy.255.228:80 SYN ******S* Jan 10 06:42:58 212.19.102.205:3744 -> xxx.yyy.255.225:80 SYN ******S* 53738 Jan 10 22:23:56 200.216.155.80:2350 -> xxx.yyy.1.6:1433 SYN ******S* Jan 10 22:23:56 200.216.155.80:2352 -> xxx.yyy.1.7:1433 SYN ******S* Jan 10 22:23:56 200.216.155.80:2355 -> xxx.yyy.1.8:1433 SYN ******S* Jan 10 22:23:56 200.216.155.80:2356 -> xxx.yyy.1.9:1433 SYN ******S* Jan 10 22:23:56 200.216.155.80:2358 -> xxx.yyy.1.11:1433 SYN ******S* Jan 10 22:23:56 200.216.155.80:2360 -> xxx.yyy.1.13:1433 SYN ******S* Jan 10 22:23:56 200.216.155.80:2364 -> xxx.yyy.1.15:1433 SYN ******S* Jan 10 22:23:56 200.216.155.80:2365 -> xxx.yyy.1.16:1433 SYN ******S* [...] Jan 10 23:59:59 200.216.155.80:3042 -> xxx.yyy.206.90:1433 SYN ******S* Jan 11 00:00:00 200.216.155.80:3041 -> xxx.yyy.206.89:1433 SYN ******S* Jan 11 00:00:00 200.216.155.80:3149 -> xxx.yyy.206.114:1433 SYN ******S* Jan 11 00:00:00 200.216.155.80:3210 -> xxx.yyy.206.128:1433 SYN ******S* Jan 11 00:00:00 200.216.155.80:3214 -> xxx.yyy.206.129:1433 SYN ******S* Jan 11 00:00:00 200.216.155.80:3217 -> xxx.yyy.206.130:1433 SYN ******S* Jan 11 00:00:00 200.216.155.80:3052 -> xxx.yyy.206.92:1433 SYN ******S* Jan 11 00:00:00 200.216.155.80:3221 -> xxx.yyy.206.131:1433 SYN ******S* 51972 Jan 10 00:44:58 219.148.131.231:55364 -> xxx.yyy.1.2:4899 SYN ******S* Jan 10 00:44:56 219.148.131.231:55362 -> xxx.yyy.1.0:4899 SYN ******S* Jan 10 00:44:57 219.148.131.231:55372 -> xxx.yyy.1.8:4899 SYN ******S* Jan 10 00:44:59 219.148.131.231:55369 -> xxx.yyy.1.6:4899 SYN ******S* Jan 10 00:44:59 219.148.131.231:55376 -> xxx.yyy.1.12:4899 SYN ******S* Jan 10 00:44:57 219.148.131.231:55378 -> xxx.yyy.1.14:4899 SYN ******S* Jan 10 00:44:56 219.148.131.231:55391 -> xxx.yyy.1.20:4899 SYN ******S* Jan 10 00:44:59 219.148.131.231:55398 -> xxx.yyy.1.24:4899 SYN ******S* [...] Jan 10 00:51:30 219.148.131.231:11201 -> xxx.yyy.255.248:4899 SYN ******S* Jan 10 00:51:30 219.148.131.231:11057 -> xxx.yyy.255.254:4899 SYN ******S* Jan 10 00:51:30 219.148.131.231:11035 -> xxx.yyy.255.250:4899 SYN ******S* Jan 10 00:51:30 219.148.131.231:11264 -> xxx.yyy.255.252:4899 SYN ******S* Jan 10 00:51:30 219.148.131.231:11000 -> xxx.yyy.255.253:4899 SYN ******S* Jan 10 00:51:30 219.148.131.231:11043 -> xxx.yyy.255.247:4899 SYN ******S* Jan 10 00:51:30 219.148.131.231:11124 -> xxx.yyy.255.251:4899 SYN ******S* Jan 10 00:51:30 219.148.131.231:11435 -> xxx.yyy.255.249:4899 SYN ******S* 43824 Jan 10 03:48:25 172.182.93.14:3881 -> xxx.yyy.1.1:1433 SYN ******S* Jan 10 03:48:25 172.182.93.14:3882 -> xxx.yyy.1.2:1433 SYN ******S* Jan 10 03:48:25 172.182.93.14:3880 -> xxx.yyy.1.0:1433 SYN ******S* Jan 10 03:48:25 172.182.93.14:3883 -> xxx.yyy.1.3:1433 SYN ******S* Jan 10 03:48:25 172.182.93.14:3884 -> xxx.yyy.1.4:1433 SYN ******S* Jan 10 03:48:25 172.182.93.14:3885 -> xxx.yyy.1.5:1433 SYN ******S* Jan 10 03:48:25 172.182.93.14:3838 -> xxx.yyy.1.8:1433 SYN ******S* Jan 10 03:48:25 172.182.93.14:3840 -> xxx.yyy.1.10:1433 SYN ******S* [...] Jan 10 04:00:17 172.182.93.14:3846 -> xxx.yyy.255.246:1433 SYN ******S* Jan 10 04:00:17 172.182.93.14:3844 -> xxx.yyy.255.244:1433 SYN ******S* Jan 10 04:00:17 172.182.93.14:3848 -> xxx.yyy.255.248:1433 SYN ******S* Jan 10 04:00:17 172.182.93.14:3849 -> xxx.yyy.255.249:1433 SYN ******S* Jan 10 04:00:17 172.182.93.14:3850 -> xxx.yyy.255.250:1433 SYN ******S* Jan 10 04:00:17 172.182.93.14:3851 -> xxx.yyy.255.251:1433 SYN ******S* Jan 10 04:00:17 172.182.93.14:3853 -> xxx.yyy.255.253:1433 SYN ******S* Jan 10 04:00:17 172.182.93.14:3854 -> xxx.yyy.255.254:1433 SYN ******S* Jan 10 04:00:17 172.182.93.14:3852 -> xxx.yyy.255.252:1433 SYN ******S* 43424 Jan 10 09:56:05 209.163.129.24:4054 -> xxx.yyy.1.2:6101 SYN ******S* Jan 10 09:56:07 209.163.129.24:4057 -> xxx.yyy.1.5:6101 SYN ******S* Jan 10 09:56:05 209.163.129.24:4061 -> xxx.yyy.1.9:6101 SYN ******S* Jan 10 09:56:04 209.163.129.24:4062 -> xxx.yyy.1.10:6101 SYN ******S* Jan 10 09:56:05 209.163.129.24:4063 -> xxx.yyy.1.11:6101 SYN ******S* Jan 10 09:56:04 209.163.129.24:4065 -> xxx.yyy.1.13:6101 SYN ******S* Jan 10 09:56:04 209.163.129.24:4068 -> xxx.yyy.1.16:6101 SYN ******S* Jan 10 09:56:05 209.163.129.24:4069 -> xxx.yyy.1.17:6101 SYN ******S* [...] Jan 10 10:08:05 209.163.129.24:3131 -> xxx.yyy.255.186:6101 SYN ******S* Jan 10 10:08:05 209.163.129.24:3142 -> xxx.yyy.255.197:6101 SYN ******S* Jan 10 10:08:05 209.163.129.24:3137 -> xxx.yyy.255.192:6101 SYN ******S* Jan 10 10:08:05 209.163.129.24:3148 -> xxx.yyy.255.203:6101 SYN ******S* Jan 10 10:08:05 209.163.129.24:3169 -> xxx.yyy.255.224:6101 SYN ******S* Jan 10 10:08:05 209.163.129.24:3189 -> xxx.yyy.255.244:6101 SYN ******S* Jan 10 10:08:05 209.163.129.24:3186 -> xxx.yyy.255.241:6101 SYN ******S* Jan 10 10:08:05 209.163.129.24:3193 -> xxx.yyy.255.248:6101 SYN ******S* 42356 Jan 10 04:23:33 217.130.26.93:4657 -> xxx.yyy.1.1:6129 SYN ******S* Jan 10 04:23:33 217.130.26.93:4659 -> xxx.yyy.1.3:6129 SYN ******S* Jan 10 04:23:33 217.130.26.93:4660 -> xxx.yyy.1.4:6129 SYN ******S* Jan 10 04:23:33 217.130.26.93:4656 -> xxx.yyy.1.0:6129 SYN ******S* Jan 10 04:23:33 217.130.26.93:4658 -> xxx.yyy.1.2:6129 SYN ******S* Jan 10 04:23:33 217.130.26.93:4668 -> xxx.yyy.1.12:6129 SYN ******S* Jan 10 04:23:33 217.130.26.93:4665 -> xxx.yyy.1.9:6129 SYN ******S* Jan 10 04:23:33 217.130.26.93:4667 -> xxx.yyy.1.11:6129 SYN ******S* [...] Jan 10 04:24:57 217.130.26.93:4681 -> xxx.yyy.255.155:6129 SYN ******S* Jan 10 04:24:57 217.130.26.93:4683 -> xxx.yyy.255.157:6129 SYN ******S* Jan 10 04:24:57 217.130.26.93:4679 -> xxx.yyy.255.153:6129 SYN ******S* Jan 10 04:24:57 217.130.26.93:4685 -> xxx.yyy.255.159:6129 SYN ******S* Jan 10 04:24:57 217.130.26.93:4680 -> xxx.yyy.255.154:6129 SYN ******S* Jan 10 04:24:57 217.130.26.93:4678 -> xxx.yyy.255.152:6129 SYN ******S* Jan 10 04:24:57 217.130.26.93:4682 -> xxx.yyy.255.156:6129 SYN ******S* Jan 10 04:24:57 217.130.26.93:4684 -> xxx.yyy.255.158:6129 SYN ******S* Jan 10 04:24:57 217.130.26.93:4686 -> xxx.yyy.255.160:6129 SYN ******S* 38966 Jan 10 03:23:18 210.54.96.36:2341 -> xxx.yyy.1.0:1433 SYN ******S* Jan 10 03:23:18 210.54.96.36:2342 -> xxx.yyy.1.1:1433 SYN ******S* Jan 10 03:23:18 210.54.96.36:2343 -> xxx.yyy.1.2:1433 SYN ******S* Jan 10 03:23:18 210.54.96.36:2344 -> xxx.yyy.1.3:1433 SYN ******S* Jan 10 03:23:18 210.54.96.36:2345 -> xxx.yyy.1.4:1433 SYN ******S* Jan 10 03:23:18 210.54.96.36:2348 -> xxx.yyy.1.5:1433 SYN ******S* Jan 10 03:23:18 210.54.96.36:2350 -> xxx.yyy.1.7:1433 SYN ******S* Jan 10 03:23:18 210.54.96.36:2351 -> xxx.yyy.1.8:1433 SYN ******S* [...] Jan 10 05:18:47 210.54.96.36:1818 -> xxx.yyy.129.141:1433 SYN ******S* Jan 10 05:18:47 210.54.96.36:1821 -> xxx.yyy.129.142:1433 SYN ******S* Jan 10 05:18:47 210.54.96.36:1823 -> xxx.yyy.129.143:1433 SYN ******S* Jan 10 05:18:47 210.54.96.36:1736 -> xxx.yyy.129.113:1433 SYN ******S* Jan 10 05:18:47 210.54.96.36:1825 -> xxx.yyy.129.144:1433 SYN ******S* Jan 10 05:18:47 210.54.96.36:1826 -> xxx.yyy.129.145:1433 SYN ******S* Jan 10 05:18:47 210.54.96.36:1830 -> xxx.yyy.129.146:1433 SYN ******S* Jan 10 05:18:48 210.54.96.36:1739 -> xxx.yyy.129.114:1433 SYN ******S* 35205 Jan 10 21:19:20 211.105.96.171:58865 -> xxx.yyy.1.3:513 SYN ******S* Jan 10 21:19:21 211.105.96.171:58863 -> xxx.yyy.1.1:513 SYN ******S* Jan 10 21:19:21 211.105.96.171:58873 -> xxx.yyy.1.11:513 SYN ******S* Jan 10 21:19:20 211.105.96.171:58870 -> xxx.yyy.1.8:513 SYN ******S* Jan 10 21:19:20 211.105.96.171:58872 -> xxx.yyy.1.10:513 SYN ******S* Jan 10 21:19:20 211.105.96.171:58880 -> xxx.yyy.1.18:513 SYN ******S* Jan 10 21:19:20 211.105.96.171:58875 -> xxx.yyy.1.13:513 SYN ******S* Jan 10 21:19:21 211.105.96.171:58883 -> xxx.yyy.1.21:513 SYN ******S* [...] Jan 10 21:25:39 211.105.96.171:57839 -> xxx.yyy.254.225:513 SYN ******S* Jan 10 21:25:39 211.105.96.171:57837 -> xxx.yyy.254.223:513 SYN ******S* Jan 10 21:25:39 211.105.96.171:57790 -> xxx.yyy.254.176:513 SYN ******S* Jan 10 21:25:39 211.105.96.171:57802 -> xxx.yyy.254.188:513 SYN ******S* Jan 10 21:25:39 211.105.96.171:57804 -> xxx.yyy.254.190:513 SYN ******S* Jan 10 21:25:39 211.105.96.171:57867 -> xxx.yyy.254.253:513 SYN ******S* Jan 10 21:25:39 211.105.96.171:57861 -> xxx.yyy.254.247:513 SYN ******S* Jan 10 21:25:39 211.105.96.171:57818 -> xxx.yyy.254.204:513 SYN ******S* 33610 Jan 10 09:05:19 148.245.185.166:4175 -> xxx.yyy.1.1:3306 SYN ******S* Jan 10 09:05:19 148.245.185.166:4176 -> xxx.yyy.1.2:3306 SYN ******S* Jan 10 09:05:18 148.245.185.166:4180 -> xxx.yyy.1.6:3306 SYN ******S* Jan 10 09:05:18 148.245.185.166:4181 -> xxx.yyy.1.7:3306 SYN ******S* Jan 10 09:05:18 148.245.185.166:4182 -> xxx.yyy.1.8:3306 SYN ******S* Jan 10 09:05:19 148.245.185.166:4183 -> xxx.yyy.1.9:3306 SYN ******S* Jan 10 09:05:18 148.245.185.166:4187 -> xxx.yyy.1.13:3306 SYN ******S* Jan 10 09:05:19 148.245.185.166:4193 -> xxx.yyy.1.19:3306 SYN ******S* [...] Jan 10 09:09:56 148.245.185.166:1315 -> xxx.yyy.255.236:3306 SYN ******S* Jan 10 09:09:56 148.245.185.166:1283 -> xxx.yyy.255.204:3306 SYN ******S* Jan 10 09:09:56 148.245.185.166:1331 -> xxx.yyy.255.252:3306 SYN ******S* Jan 10 09:09:56 148.245.185.166:1299 -> xxx.yyy.255.220:3306 SYN ******S* Jan 10 09:09:56 148.245.185.166:1280 -> xxx.yyy.255.201:3306 SYN ******S* Jan 10 09:09:56 148.245.185.166:1328 -> xxx.yyy.255.249:3306 SYN ******S* Jan 10 09:09:56 148.245.185.166:1296 -> xxx.yyy.255.217:3306 SYN ******S* Jan 10 09:09:56 148.245.185.166:1303 -> xxx.yyy.255.224:3306 SYN ******S* Jan 10 09:09:56 148.245.185.166:1313 -> xxx.yyy.255.234:3306 SYN ******S* 32132 Jan 10 21:27:52 203.70.51.53:1487 -> xxx.yyy.151.189:25 SYN ******S* Jan 10 21:27:52 203.70.51.53:1488 -> xxx.yyy.151.190:25 SYN ******S* Jan 10 21:27:52 203.70.51.53:1489 -> xxx.yyy.151.191:25 SYN ******S* Jan 10 21:27:55 203.70.51.53:1491 -> xxx.yyy.151.193:25 SYN ******S* Jan 10 21:27:55 203.70.51.53:1492 -> xxx.yyy.151.194:25 SYN ******S* Jan 10 21:27:55 203.70.51.53:1494 -> xxx.yyy.151.197:25 SYN ******S* Jan 10 21:27:52 203.70.51.53:1497 -> xxx.yyy.151.196:25 SYN ******S* Jan 10 21:27:52 203.70.51.53:1501 -> xxx.yyy.151.203:25 SYN ******S* [...] Jan 10 22:08:37 203.70.51.53:3603 -> xxx.yyy.255.221:25 SYN ******S* Jan 10 22:08:37 203.70.51.53:3598 -> xxx.yyy.255.216:25 SYN ******S* Jan 10 22:08:37 203.70.51.53:3632 -> xxx.yyy.255.248:25 SYN ******S* Jan 10 22:08:37 203.70.51.53:3627 -> xxx.yyy.255.242:25 SYN ******S* Jan 10 22:08:37 203.70.51.53:3628 -> xxx.yyy.255.243:25 SYN ******S* Jan 10 22:08:37 203.70.51.53:3621 -> xxx.yyy.255.237:25 SYN ******S* Jan 10 22:08:37 203.70.51.53:3618 -> xxx.yyy.255.235:25 SYN ******S* Jan 10 22:08:37 203.70.51.53:3640 -> xxx.yyy.255.253:25 SYN ******S* 31173 Jan 10 17:06:30 216.85.193.2:59468 -> xxx.yyy.1.1:80 SYN ******S* Jan 10 17:06:29 216.85.193.2:63675 -> xxx.yyy.1.4:80 SYN ******S* Jan 10 17:06:30 216.85.193.2:59469 -> xxx.yyy.1.2:80 SYN ******S* Jan 10 17:06:30 216.85.193.2:59470 -> xxx.yyy.1.3:80 SYN ******S* Jan 10 17:06:32 216.85.193.2:59472 -> xxx.yyy.1.5:80 SYN ******S* Jan 10 17:06:29 216.85.193.2:59473 -> xxx.yyy.1.6:80 SYN ******S* Jan 10 17:06:29 216.85.193.2:63676 -> xxx.yyy.1.8:80 SYN ******S* Jan 10 17:06:29 216.85.193.2:59474 -> xxx.yyy.1.7:80 SYN ******S* [...] Jan 10 17:16:58 216.85.193.2:59805 -> xxx.yyy.255.184:80 SYN ******S* Jan 10 17:16:58 216.85.193.2:59837 -> xxx.yyy.255.216:80 SYN ******S* Jan 10 17:16:58 216.85.193.2:59860 -> xxx.yyy.255.239:80 SYN ******S* Jan 10 17:16:58 216.85.193.2:59844 -> xxx.yyy.255.223:80 SYN ******S* Jan 10 17:16:58 216.85.193.2:59848 -> xxx.yyy.255.227:80 SYN ******S* Jan 10 17:16:58 216.85.193.2:59797 -> xxx.yyy.255.176:80 SYN ******S* Jan 10 17:16:58 216.85.193.2:59829 -> xxx.yyy.255.208:80 SYN ******S* Jan 10 17:16:58 216.85.193.2:59810 -> xxx.yyy.255.189:80 SYN ******S* Jan 10 17:16:58 216.85.193.2:63704 -> xxx.yyy.255.205:80 SYN ******S* 22733 Jan 10 20:28:59 211.74.62.109:4119 -> xxx.yyy.1.3:25 SYN ******S* Jan 10 20:29:02 211.74.62.109:4121 -> xxx.yyy.1.8:25 SYN ******S* Jan 10 20:29:02 211.74.62.109:4122 -> xxx.yyy.1.10:25 SYN ******S* Jan 10 20:28:59 211.74.62.109:4124 -> xxx.yyy.1.12:25 SYN ******S* Jan 10 20:28:59 211.74.62.109:4125 -> xxx.yyy.1.13:25 SYN ******S* Jan 10 20:28:59 211.74.62.109:4126 -> xxx.yyy.1.14:25 SYN ******S* Jan 10 20:28:59 211.74.62.109:4128 -> xxx.yyy.1.16:25 SYN ******S* Jan 10 20:28:59 211.74.62.109:4133 -> xxx.yyy.1.20:25 SYN ******S* [...] Jan 10 21:22:51 211.74.62.109:1393 -> xxx.yyy.138.217:25 SYN ******S* Jan 10 21:22:51 211.74.62.109:1394 -> xxx.yyy.138.218:25 SYN ******S* Jan 10 21:22:51 211.74.62.109:1396 -> xxx.yyy.138.220:25 SYN ******S* Jan 10 21:22:51 211.74.62.109:1399 -> xxx.yyy.138.223:25 SYN ******S* Jan 10 21:22:51 211.74.62.109:1401 -> xxx.yyy.138.225:25 SYN ******S* Jan 10 21:22:51 211.74.62.109:1405 -> xxx.yyy.138.229:25 SYN ******S* Jan 10 21:22:51 211.74.62.109:1411 -> xxx.yyy.138.235:25 SYN ******S* Jan 10 21:22:52 211.74.62.109:1414 -> xxx.yyy.138.238:25 SYN ******S* Jan 10 21:22:52 211.74.62.109:1416 -> xxx.yyy.138.240:25 SYN ******S* 22295 Jan 10 14:40:16 65.171.136.8:1467 -> xxx.yyy.1.7:4000 SYN ******S* Jan 10 14:40:16 65.171.136.8:1477 -> xxx.yyy.1.17:4000 SYN ******S* Jan 10 14:40:16 65.171.136.8:1472 -> xxx.yyy.1.12:4000 SYN ******S* Jan 10 14:40:17 65.171.136.8:1479 -> xxx.yyy.1.19:4000 SYN ******S* Jan 10 14:40:16 65.171.136.8:1481 -> xxx.yyy.1.21:4000 SYN ******S* Jan 10 14:40:16 65.171.136.8:1482 -> xxx.yyy.1.22:4000 SYN ******S* Jan 10 14:40:17 65.171.136.8:1476 -> xxx.yyy.1.16:4000 SYN ******S* Jan 10 14:40:16 65.171.136.8:1483 -> xxx.yyy.1.23:4000 SYN ******S* [...] Jan 10 14:46:05 65.171.136.8:3275 -> xxx.yyy.255.222:4000 SYN ******S* Jan 10 14:46:05 65.171.136.8:3307 -> xxx.yyy.255.254:4000 SYN ******S* Jan 10 14:46:05 65.171.136.8:3292 -> xxx.yyy.255.239:4000 SYN ******S* Jan 10 14:46:05 65.171.136.8:3272 -> xxx.yyy.255.219:4000 SYN ******S* Jan 10 14:46:05 65.171.136.8:3276 -> xxx.yyy.255.223:4000 SYN ******S* Jan 10 14:46:05 65.171.136.8:3269 -> xxx.yyy.255.216:4000 SYN ******S* Jan 10 14:46:05 65.171.136.8:3266 -> xxx.yyy.255.213:4000 SYN ******S* Jan 10 14:46:05 65.171.136.8:3279 -> xxx.yyy.255.226:4000 SYN ******S* 19958 Jan 10 01:31:32 61.186.116.126:4841 -> xxx.yyy.137.228:6129 SYN ******S* Jan 10 01:31:34 61.186.116.126:4843 -> xxx.yyy.137.228:3410 SYN ******S* Jan 10 01:31:34 61.186.116.126:4844 -> xxx.yyy.137.228:5554 SYN ******S* Jan 10 01:31:35 61.186.116.126:4846 -> xxx.yyy.137.228:5000 SYN ******S* Jan 10 01:31:32 61.186.116.126:4847 -> xxx.yyy.137.228:80 SYN ******S* Jan 10 01:31:35 61.186.116.126:4839 -> xxx.yyy.137.228:1025 SYN ******S* Jan 10 01:31:35 61.186.116.126:4845 -> xxx.yyy.137.228:1433 SYN ******S* Jan 10 01:31:35 61.186.116.126:4871 -> xxx.yyy.193.43:6129 SYN ******S* [...] Jan 10 03:44:38 61.186.116.126:3712 -> xxx.yyy.195.48:1025 SYN ******S* Jan 10 03:44:40 61.186.116.126:3881 -> xxx.yyy.253.153:1025 SYN ******S* Jan 10 03:44:40 61.186.116.126:3900 -> xxx.yyy.249.45:1025 SYN ******S* Jan 10 03:44:40 61.186.116.126:3280 -> xxx.yyy.128.27:1025 SYN ******S* Jan 10 03:44:40 61.186.116.126:3294 -> xxx.yyy.13.195:1025 SYN ******S* Jan 10 03:44:41 61.186.116.126:3935 -> xxx.yyy.66.31:1025 SYN ******S* Jan 10 03:44:41 61.186.116.126:3352 -> xxx.yyy.33.36:1025 SYN ******S* Jan 10 03:44:41 61.186.116.126:3332 -> xxx.yyy.243.14:1025 SYN ******S* 17645 [...] 13987 Jan 10 01:32:59 218.7.134.17:3938 -> xxx.yyy.1.0:1433 SYN ******S* Jan 10 01:33:00 218.7.134.17:3940 -> xxx.yyy.1.1:1433 SYN ******S* Jan 10 01:33:00 218.7.134.17:3943 -> xxx.yyy.1.2:1433 SYN ******S* Jan 10 01:33:00 218.7.134.17:3947 -> xxx.yyy.1.4:1433 SYN ******S* Jan 10 01:33:00 218.7.134.17:3948 -> xxx.yyy.1.3:1433 SYN ******S* Jan 10 01:33:00 218.7.134.17:3953 -> xxx.yyy.1.6:1433 SYN ******S* Jan 10 01:33:00 218.7.134.17:3954 -> xxx.yyy.1.5:1433 SYN ******S* Jan 10 01:33:00 218.7.134.17:3958 -> xxx.yyy.1.7:1433 SYN ******S* [...] Jan 10 02:02:36 218.7.134.17:3814 -> xxx.yyy.33.247:1433 SYN ******S* Jan 10 02:02:36 218.7.134.17:3812 -> xxx.yyy.33.246:1433 SYN ******S* Jan 10 02:02:36 218.7.134.17:3822 -> xxx.yyy.33.249:1433 SYN ******S* Jan 10 02:02:36 218.7.134.17:3819 -> xxx.yyy.33.248:1433 SYN ******S* Jan 10 02:02:37 218.7.134.17:3835 -> xxx.yyy.33.253:1433 SYN ******S* Jan 10 02:02:37 218.7.134.17:3832 -> xxx.yyy.33.252:1433 SYN ******S* Jan 10 02:02:37 218.7.134.17:3828 -> xxx.yyy.33.251:1433 SYN ******S* Jan 10 02:02:37 218.7.134.17:3826 -> xxx.yyy.33.250:1433 SYN ******S* Jan 10 02:02:37 218.7.134.17:3857 -> xxx.yyy.33.254:1433 SYN ******S* 8809 Jan 10 22:40:37 220.221.238.56:1497 -> xxx.yyy.174.8:5554 SYN ******S* Jan 10 22:40:40 220.221.238.56:1824 -> xxx.yyy.174.8:9898 SYN ******S* Jan 10 22:40:37 220.221.238.56:1499 -> xxx.yyy.174.4:5554 SYN ******S* Jan 10 22:40:37 220.221.238.56:1496 -> xxx.yyy.174.7:5554 SYN ******S* Jan 10 22:40:38 220.221.238.56:1606 -> xxx.yyy.174.7:1023 SYN ******S* Jan 10 22:40:40 220.221.238.56:1822 -> xxx.yyy.174.7:9898 SYN ******S* Jan 10 22:40:37 220.221.238.56:1500 -> xxx.yyy.174.9:5554 SYN ******S* Jan 10 22:40:40 220.221.238.56:1826 -> xxx.yyy.174.9:9898 SYN ******S* [...] Jan 10 22:43:46 220.221.238.56:3401 -> xxx.yyy.175.105:9898 SYN ******S* Jan 10 22:43:46 220.221.238.56:3402 -> xxx.yyy.175.106:9898 SYN ******S* Jan 10 22:43:46 220.221.238.56:3398 -> xxx.yyy.175.102:9898 SYN ******S* Jan 10 22:43:46 220.221.238.56:3400 -> xxx.yyy.175.104:9898 SYN ******S* Jan 10 22:43:46 220.221.238.56:3403 -> xxx.yyy.175.107:9898 SYN ******S* Jan 10 22:43:46 220.221.238.56:3404 -> xxx.yyy.175.108:9898 SYN ******S* Jan 10 22:43:46 220.221.238.56:3405 -> xxx.yyy.175.109:9898 SYN ******S* Jan 10 22:43:47 220.221.238.56:3457 -> xxx.yyy.175.110:9898 SYN ******S* 8386 Jan 10 00:02:28 60.176.191.238:3384 -> xxx.yyy.154.112:5554 SYN ******S* Jan 10 00:02:31 60.176.191.238:4654 -> xxx.yyy.154.112:9898 SYN ******S* Jan 10 00:02:28 60.176.191.238:3385 -> xxx.yyy.154.113:5554 SYN ******S* Jan 10 00:02:29 60.176.191.238:3745 -> xxx.yyy.154.113:1023 SYN ******S* Jan 10 00:02:31 60.176.191.238:4655 -> xxx.yyy.154.113:9898 SYN ******S* Jan 10 00:02:28 60.176.191.238:3386 -> xxx.yyy.154.114:5554 SYN ******S* Jan 10 00:02:31 60.176.191.238:4656 -> xxx.yyy.154.114:9898 SYN ******S* Jan 10 00:02:28 60.176.191.238:3387 -> xxx.yyy.154.115:5554 SYN ******S* [...] Jan 10 00:03:19 60.176.191.238:3431 -> xxx.yyy.154.162:9898 SYN ******S* Jan 10 00:03:19 60.176.191.238:3432 -> xxx.yyy.154.163:9898 SYN ******S* Jan 10 00:03:19 60.176.191.238:3433 -> xxx.yyy.154.161:9898 SYN ******S* Jan 10 00:03:19 60.176.191.238:3434 -> xxx.yyy.154.164:9898 SYN ******S* Jan 10 00:03:19 60.176.191.238:3440 -> xxx.yyy.154.171:9898 SYN ******S* Jan 10 00:03:19 60.176.191.238:3441 -> xxx.yyy.154.172:9898 SYN ******S* Jan 10 00:03:19 60.176.191.238:3442 -> xxx.yyy.154.176:9898 SYN ******S* Jan 10 00:03:19 60.176.191.238:3499 -> xxx.yyy.154.200:9898 SYN ******S* 8226 Jan 10 22:54:41 222.117.19.190:2553 -> xxx.yyy.72.126:5554 SYN ******S* Jan 10 22:54:42 222.117.19.190:3602 -> xxx.yyy.72.126:1023 SYN ******S* Jan 10 22:54:41 222.117.19.190:2546 -> xxx.yyy.72.133:5554 SYN ******S* Jan 10 22:54:42 222.117.19.190:3587 -> xxx.yyy.72.133:1023 SYN ******S* Jan 10 22:54:44 222.117.19.190:2133 -> xxx.yyy.72.133:9898 SYN ******S* Jan 10 22:54:41 222.117.19.190:2547 -> xxx.yyy.72.132:5554 SYN ******S* Jan 10 22:54:42 222.117.19.190:3591 -> xxx.yyy.72.132:1023 SYN ******S* Jan 10 22:54:41 222.117.19.190:2560 -> xxx.yyy.72.143:5554 SYN ******S* [...] Jan 10 22:55:26 222.117.19.190:4620 -> xxx.yyy.92.219:9898 SYN ******S* Jan 10 22:55:26 222.117.19.190:4832 -> xxx.yyy.92.234:9898 SYN ******S* Jan 10 22:55:26 222.117.19.190:4804 -> xxx.yyy.92.222:9898 SYN ******S* Jan 10 22:55:26 222.117.19.190:4798 -> xxx.yyy.92.221:9898 SYN ******S* Jan 10 22:55:26 222.117.19.190:4805 -> xxx.yyy.92.223:9898 SYN ******S* Jan 10 22:55:26 222.117.19.190:4812 -> xxx.yyy.92.227:9898 SYN ******S* Jan 10 22:55:26 222.117.19.190:1058 -> xxx.yyy.92.238:9898 SYN ******S* Jan 10 22:55:26 222.117.19.190:1069 -> xxx.yyy.92.243:9898 SYN ******S* Jan 10 22:55:26 222.117.19.190:1079 -> xxx.yyy.92.245:9898 SYN ******S* 8123 [...] 7698 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions