[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Jan 11 02:19:20 64.146.5.115:8927 -> xxx.yyy.1.1:4899 SYN ******S* Jan 11 02:19:20 64.146.5.115:8928 -> xxx.yyy.1.2:4899 SYN ******S* Jan 11 02:19:20 64.146.5.115:8929 -> xxx.yyy.1.3:4899 SYN ******S* Jan 11 02:19:23 64.146.5.115:8931 -> xxx.yyy.1.5:4899 SYN ******S* Jan 11 02:19:23 64.146.5.115:8932 -> xxx.yyy.1.6:4899 SYN ******S* Jan 11 02:19:21 64.146.5.115:8934 -> xxx.yyy.1.8:4899 SYN ******S* Jan 11 02:19:21 64.146.5.115:8935 -> xxx.yyy.1.9:4899 SYN ******S* Jan 11 02:19:23 64.146.5.115:8936 -> xxx.yyy.1.10:4899 SYN ******S* [...] Jan 11 02:32:36 64.146.5.115:11208 -> xxx.yyy.255.222:4899 SYN ******S* Jan 11 02:32:36 64.146.5.115:11205 -> xxx.yyy.255.219:4899 SYN ******S* Jan 11 02:32:36 64.146.5.115:11202 -> xxx.yyy.255.216:4899 SYN ******S* Jan 11 02:32:36 64.146.5.115:11218 -> xxx.yyy.255.232:4899 SYN ******S* Jan 11 02:32:36 64.146.5.115:11215 -> xxx.yyy.255.229:4899 SYN ******S* Jan 11 02:32:36 64.146.5.115:11231 -> xxx.yyy.255.245:4899 SYN ******S* Jan 11 02:32:36 64.146.5.115:11212 -> xxx.yyy.255.226:4899 SYN ******S* Jan 11 02:32:36 64.146.5.115:11228 -> xxx.yyy.255.242:4899 SYN ******S* Jan 11 02:32:36 64.146.5.115:11225 -> xxx.yyy.255.239:4899 SYN ******S* 95313 Jan 11 20:44:22 81.130.10.251:32794 -> xxx.yyy.214.1:4899 SYN ******S* Jan 11 20:44:22 81.130.10.251:33176 -> xxx.yyy.214.1:5900 SYN ******S* Jan 11 20:44:22 81.130.10.251:33096 -> xxx.yyy.214.1:42 SYN ******S* Jan 11 20:44:19 81.130.10.251:34818 -> xxx.yyy.214.2:5900 SYN ******S* Jan 11 20:44:22 81.130.10.251:34813 -> xxx.yyy.214.2:4899 SYN ******S* Jan 11 20:44:22 81.130.10.251:33449 -> xxx.yyy.214.2:42 SYN ******S* Jan 11 20:44:22 81.130.10.251:35245 -> xxx.yyy.214.3:5900 SYN ******S* Jan 11 20:44:21 81.130.10.251:34299 -> xxx.yyy.214.9:5900 SYN ******S* [...] Jan 11 23:59:57 81.130.10.251:32999 -> xxx.yyy.250.240:139 SYN ******S* Jan 11 23:59:58 81.130.10.251:34068 -> xxx.yyy.251.6:5900 SYN ******S* Jan 11 23:59:58 81.130.10.251:34412 -> xxx.yyy.250.224:139 SYN ******S* Jan 11 23:59:58 81.130.10.251:32989 -> xxx.yyy.251.9:4899 SYN ******S* Jan 11 23:59:58 81.130.10.251:34175 -> xxx.yyy.251.9:5900 SYN ******S* Jan 11 23:59:58 81.130.10.251:33263 -> xxx.yyy.251.26:5900 SYN ******S* Jan 11 23:59:58 81.130.10.251:33064 -> xxx.yyy.250.244:139 SYN ******S* Jan 11 23:59:58 81.130.10.251:34938 -> xxx.yyy.251.27:42 SYN ******S* Jan 11 23:59:58 81.130.10.251:34159 -> xxx.yyy.250.229:139 SYN ******S* 92753 Jan 11 07:16:19 206.82.130.198:53316 -> xxx.yyy.1.0:111 SYN ******S* Jan 11 07:16:19 206.82.130.198:53317 -> xxx.yyy.1.1:111 SYN ******S* Jan 11 07:16:19 206.82.130.198:53319 -> xxx.yyy.1.3:111 SYN ******S* Jan 11 07:16:19 206.82.130.198:53320 -> xxx.yyy.1.4:111 SYN ******S* Jan 11 07:16:19 206.82.130.198:53321 -> xxx.yyy.1.5:111 SYN ******S* Jan 11 07:16:19 206.82.130.198:53322 -> xxx.yyy.1.6:111 SYN ******S* Jan 11 07:16:19 206.82.130.198:53323 -> xxx.yyy.1.7:111 SYN ******S* Jan 11 07:16:19 206.82.130.198:53324 -> xxx.yyy.1.8:111 SYN ******S* [...] Jan 11 07:33:55 206.82.130.198:53104 -> xxx.yyy.255.248:111 SYN ******S* Jan 11 07:33:55 206.82.130.198:53106 -> xxx.yyy.255.250:111 SYN ******S* Jan 11 07:33:55 206.82.130.198:53105 -> xxx.yyy.255.249:111 SYN ******S* Jan 11 07:33:55 206.82.130.198:53107 -> xxx.yyy.255.251:111 SYN ******S* Jan 11 07:33:55 206.82.130.198:53109 -> xxx.yyy.255.253:111 SYN ******S* Jan 11 07:33:55 206.82.130.198:53108 -> xxx.yyy.255.252:111 SYN ******S* Jan 11 07:33:55 206.82.130.198:53110 -> xxx.yyy.255.254:111 SYN ******S* Jan 11 07:33:55 206.82.130.198:53111 -> xxx.yyy.255.255:111 SYN ******S* 80312 Jan 11 12:17:19 146.145.218.34:41724 -> xxx.yyy.1.0:1433 SYN ******S* Jan 11 12:17:19 146.145.218.34:43486 -> xxx.yyy.1.4:1433 SYN ******S* Jan 11 12:17:16 146.145.218.34:43820 -> xxx.yyy.1.5:1433 SYN ******S* Jan 11 12:17:16 146.145.218.34:44050 -> xxx.yyy.1.6:1433 SYN ******S* Jan 11 12:17:19 146.145.218.34:45108 -> xxx.yyy.1.8:1433 SYN ******S* Jan 11 12:17:16 146.145.218.34:45202 -> xxx.yyy.1.10:1433 SYN ******S* Jan 11 12:17:19 146.145.218.34:45540 -> xxx.yyy.1.14:1433 SYN ******S* Jan 11 12:17:16 146.145.218.34:45846 -> xxx.yyy.1.15:1433 SYN ******S* [...] Jan 11 16:06:03 146.145.218.34:36686 -> xxx.yyy.255.238:1433 SYN ******S* Jan 11 16:06:04 146.145.218.34:36738 -> xxx.yyy.255.239:1433 SYN ******S* Jan 11 16:06:06 146.145.218.34:56432 -> xxx.yyy.255.243:1433 SYN ******S* Jan 11 16:06:06 146.145.218.34:44334 -> xxx.yyy.255.245:1433 SYN ******S* Jan 11 16:06:06 146.145.218.34:45546 -> xxx.yyy.255.247:1433 SYN ******S* Jan 11 16:06:06 146.145.218.34:48658 -> xxx.yyy.255.249:1433 SYN ******S* Jan 11 16:06:07 146.145.218.34:57446 -> xxx.yyy.255.251:1433 SYN ******S* Jan 11 16:06:08 146.145.218.34:6870 -> xxx.yyy.255.253:1433 SYN ******S* Jan 11 16:06:08 146.145.218.34:8570 -> xxx.yyy.255.254:1433 SYN ******S* 62255 Jan 11 09:03:51 64.29.217.43:3101 -> xxx.yyy.1.1:3306 SYN ******S* Jan 11 09:03:51 64.29.217.43:3102 -> xxx.yyy.1.2:3306 SYN ******S* Jan 11 09:03:53 64.29.217.43:3103 -> xxx.yyy.1.3:3306 SYN ******S* Jan 11 09:03:54 64.29.217.43:3104 -> xxx.yyy.1.4:3306 SYN ******S* Jan 11 09:03:54 64.29.217.43:3105 -> xxx.yyy.1.5:3306 SYN ******S* Jan 11 09:03:54 64.29.217.43:3106 -> xxx.yyy.1.6:3306 SYN ******S* Jan 11 09:03:52 64.29.217.43:3107 -> xxx.yyy.1.7:3306 SYN ******S* Jan 11 09:03:53 64.29.217.43:3108 -> xxx.yyy.1.8:3306 SYN ******S* [...] Jan 11 09:15:34 64.29.217.43:1764 -> xxx.yyy.255.236:3306 SYN ******S* Jan 11 09:15:34 64.29.217.43:1776 -> xxx.yyy.255.248:3306 SYN ******S* Jan 11 09:15:34 64.29.217.43:1771 -> xxx.yyy.255.243:3306 SYN ******S* Jan 11 09:15:34 64.29.217.43:1777 -> xxx.yyy.255.249:3306 SYN ******S* Jan 11 09:15:34 64.29.217.43:1774 -> xxx.yyy.255.246:3306 SYN ******S* Jan 11 09:15:34 64.29.217.43:1772 -> xxx.yyy.255.244:3306 SYN ******S* Jan 11 09:15:34 64.29.217.43:1773 -> xxx.yyy.255.245:3306 SYN ******S* Jan 11 09:15:34 64.29.217.43:1775 -> xxx.yyy.255.247:3306 SYN ******S* 51123 Jan 11 10:51:11 64.95.245.104:2278 -> xxx.yyy.1.3:1433 SYN ******S* Jan 11 10:51:14 64.95.245.104:2280 -> xxx.yyy.1.5:1433 SYN ******S* Jan 11 10:51:11 64.95.245.104:2283 -> xxx.yyy.1.8:1433 SYN ******S* Jan 11 10:51:14 64.95.245.104:2284 -> xxx.yyy.1.9:1433 SYN ******S* Jan 11 10:51:14 64.95.245.104:2286 -> xxx.yyy.1.11:1433 SYN ******S* Jan 11 10:51:14 64.95.245.104:2287 -> xxx.yyy.1.12:1433 SYN ******S* Jan 11 10:51:14 64.95.245.104:2288 -> xxx.yyy.1.13:1433 SYN ******S* Jan 11 10:51:14 64.95.245.104:2289 -> xxx.yyy.1.14:1433 SYN ******S* [...] Jan 11 11:02:53 64.95.245.104:4629 -> xxx.yyy.255.240:1433 SYN ******S* Jan 11 11:02:53 64.95.245.104:4638 -> xxx.yyy.255.249:1433 SYN ******S* Jan 11 11:02:53 64.95.245.104:4632 -> xxx.yyy.255.243:1433 SYN ******S* Jan 11 11:02:53 64.95.245.104:4633 -> xxx.yyy.255.244:1433 SYN ******S* Jan 11 11:02:53 64.95.245.104:4634 -> xxx.yyy.255.245:1433 SYN ******S* Jan 11 11:02:53 64.95.245.104:4637 -> xxx.yyy.255.248:1433 SYN ******S* Jan 11 11:02:53 64.95.245.104:4635 -> xxx.yyy.255.246:1433 SYN ******S* Jan 11 11:02:53 64.95.245.104:4639 -> xxx.yyy.255.250:1433 SYN ******S* Jan 11 11:02:53 64.95.245.104:4643 -> xxx.yyy.255.254:1433 SYN ******S* 41785 Jan 11 22:16:10 142.176.174.220:52645 -> xxx.yyy.1.1:6101 SYN ******S* Jan 11 22:16:10 142.176.174.220:52646 -> xxx.yyy.1.2:6101 SYN ******S* Jan 11 22:16:10 142.176.174.220:52647 -> xxx.yyy.1.3:6101 SYN ******S* Jan 11 22:16:10 142.176.174.220:52648 -> xxx.yyy.1.4:6101 SYN ******S* Jan 11 22:16:10 142.176.174.220:52649 -> xxx.yyy.1.5:6101 SYN ******S* Jan 11 22:16:10 142.176.174.220:52659 -> xxx.yyy.1.15:6101 SYN ******S* Jan 11 22:16:10 142.176.174.220:52660 -> xxx.yyy.1.16:6101 SYN ******S* Jan 11 22:16:10 142.176.174.220:52663 -> xxx.yyy.1.19:6101 SYN ******S* [...] Jan 11 22:19:39 142.176.174.220:50557 -> xxx.yyy.255.230:6101 SYN ******S* Jan 11 22:19:39 142.176.174.220:50556 -> xxx.yyy.255.229:6101 SYN ******S* Jan 11 22:19:39 142.176.174.220:50558 -> xxx.yyy.255.231:6101 SYN ******S* Jan 11 22:19:39 142.176.174.220:50566 -> xxx.yyy.255.239:6101 SYN ******S* Jan 11 22:19:39 142.176.174.220:50544 -> xxx.yyy.255.217:6101 SYN ******S* Jan 11 22:19:39 142.176.174.220:50545 -> xxx.yyy.255.218:6101 SYN ******S* Jan 11 22:19:39 142.176.174.220:50546 -> xxx.yyy.255.219:6101 SYN ******S* Jan 11 22:19:39 142.176.174.220:50547 -> xxx.yyy.255.220:6101 SYN ******S* 35708 Jan 11 12:03:14 218.212.195.29:4370 -> xxx.yyy.1.5:1433 SYN ******S* Jan 11 12:03:14 218.212.195.29:4371 -> xxx.yyy.1.6:1433 SYN ******S* Jan 11 12:03:14 218.212.195.29:4372 -> xxx.yyy.1.7:1433 SYN ******S* Jan 11 12:03:14 218.212.195.29:4374 -> xxx.yyy.1.9:1433 SYN ******S* Jan 11 12:03:17 218.212.195.29:4375 -> xxx.yyy.1.10:1433 SYN ******S* Jan 11 12:03:14 218.212.195.29:4376 -> xxx.yyy.1.11:1433 SYN ******S* Jan 11 12:03:14 218.212.195.29:4378 -> xxx.yyy.1.13:1433 SYN ******S* Jan 11 12:03:14 218.212.195.29:4383 -> xxx.yyy.1.18:1433 SYN ******S* [...] Jan 11 12:14:55 218.212.195.29:3934 -> xxx.yyy.255.221:1433 SYN ******S* Jan 11 12:14:55 218.212.195.29:3945 -> xxx.yyy.255.232:1433 SYN ******S* Jan 11 12:14:56 218.212.195.29:3956 -> xxx.yyy.255.239:1433 SYN ******S* Jan 11 12:14:56 218.212.195.29:3961 -> xxx.yyy.255.244:1433 SYN ******S* Jan 11 12:14:56 218.212.195.29:3969 -> xxx.yyy.255.252:1433 SYN ******S* Jan 11 12:14:56 218.212.195.29:3970 -> xxx.yyy.255.253:1433 SYN ******S* Jan 11 12:14:56 218.212.195.29:3966 -> xxx.yyy.255.249:1433 SYN ******S* Jan 11 12:14:56 218.212.195.29:3967 -> xxx.yyy.255.250:1433 SYN ******S* 35585 Jan 11 04:48:46 172.179.58.11:1969 -> xxx.yyy.1.6:1433 SYN ******S* Jan 11 04:48:46 172.179.58.11:1970 -> xxx.yyy.1.7:1433 SYN ******S* Jan 11 04:48:46 172.179.58.11:1972 -> xxx.yyy.1.9:1433 SYN ******S* Jan 11 04:48:46 172.179.58.11:1973 -> xxx.yyy.1.10:1433 SYN ******S* Jan 11 04:48:46 172.179.58.11:1974 -> xxx.yyy.1.11:1433 SYN ******S* Jan 11 04:48:46 172.179.58.11:1971 -> xxx.yyy.1.8:1433 SYN ******S* Jan 11 04:48:46 172.179.58.11:1979 -> xxx.yyy.1.16:1433 SYN ******S* Jan 11 04:48:46 172.179.58.11:1981 -> xxx.yyy.1.18:1433 SYN ******S* [...] Jan 11 04:59:42 172.179.58.11:1976 -> xxx.yyy.255.243:1433 SYN ******S* Jan 11 04:59:42 172.179.58.11:1982 -> xxx.yyy.255.249:1433 SYN ******S* Jan 11 04:59:42 172.179.58.11:1983 -> xxx.yyy.255.250:1433 SYN ******S* Jan 11 04:59:42 172.179.58.11:1984 -> xxx.yyy.255.251:1433 SYN ******S* Jan 11 04:59:42 172.179.58.11:1978 -> xxx.yyy.255.245:1433 SYN ******S* Jan 11 04:59:42 172.179.58.11:1980 -> xxx.yyy.255.247:1433 SYN ******S* Jan 11 04:59:42 172.179.58.11:1986 -> xxx.yyy.255.253:1433 SYN ******S* Jan 11 04:59:42 172.179.58.11:1987 -> xxx.yyy.255.254:1433 SYN ******S* Jan 11 04:59:42 172.179.58.11:1985 -> xxx.yyy.255.252:1433 SYN ******S* 33836 Jan 11 09:03:12 134.193.138.26:1420 -> xxx.yyy.1.2:6101 SYN ******S* Jan 11 09:03:11 134.193.138.26:1421 -> xxx.yyy.1.3:6101 SYN ******S* Jan 11 09:03:14 134.193.138.26:1422 -> xxx.yyy.1.4:6101 SYN ******S* Jan 11 09:03:14 134.193.138.26:1423 -> xxx.yyy.1.5:6101 SYN ******S* Jan 11 09:03:14 134.193.138.26:1424 -> xxx.yyy.1.6:6101 SYN ******S* Jan 11 09:03:11 134.193.138.26:1425 -> xxx.yyy.1.7:6101 SYN ******S* Jan 11 09:03:14 134.193.138.26:1433 -> xxx.yyy.1.15:6101 SYN ******S* Jan 11 09:03:14 134.193.138.26:1434 -> xxx.yyy.1.16:6101 SYN ******S* [...] Jan 11 09:06:46 134.193.138.26:2750 -> xxx.yyy.255.233:6101 SYN ******S* Jan 11 09:06:46 134.193.138.26:2702 -> xxx.yyy.255.196:6101 SYN ******S* Jan 11 09:06:46 134.193.138.26:2754 -> xxx.yyy.255.237:6101 SYN ******S* Jan 11 09:06:46 134.193.138.26:2768 -> xxx.yyy.255.251:6101 SYN ******S* Jan 11 09:06:46 134.193.138.26:2743 -> xxx.yyy.255.226:6101 SYN ******S* Jan 11 09:06:46 134.193.138.26:2759 -> xxx.yyy.255.242:6101 SYN ******S* Jan 11 09:06:46 134.193.138.26:2746 -> xxx.yyy.255.229:6101 SYN ******S* Jan 11 09:06:46 134.193.138.26:2751 -> xxx.yyy.255.234:6101 SYN ******S* 32798 Jan 11 09:08:09 84.128.84.111:61838 -> xxx.yyy.1.0:3306 SYN ******S* Jan 11 09:08:09 84.128.84.111:61839 -> xxx.yyy.1.0:1337 SYN ******S* Jan 11 09:08:09 84.128.84.111:61842 -> xxx.yyy.1.1:1337 SYN ******S* Jan 11 09:08:09 84.128.84.111:61843 -> xxx.yyy.1.1:31337 SYN ******S* Jan 11 09:08:09 84.128.84.111:61844 -> xxx.yyy.1.2:3306 SYN ******S* Jan 11 09:08:09 84.128.84.111:61845 -> xxx.yyy.1.2:1337 SYN ******S* Jan 11 09:08:09 84.128.84.111:61846 -> xxx.yyy.1.2:31337 SYN ******S* Jan 11 09:08:09 84.128.84.111:61849 -> xxx.yyy.1.3:31337 SYN ******S* [...] Jan 11 09:42:52 84.128.84.111:63173 -> xxx.yyy.20.250:31337 SYN ******S* Jan 11 09:42:52 84.128.84.111:63176 -> xxx.yyy.20.251:31337 SYN ******S* Jan 11 09:42:52 84.128.84.111:63177 -> xxx.yyy.20.252:3306 SYN ******S* Jan 11 09:42:52 84.128.84.111:63178 -> xxx.yyy.20.252:1337 SYN ******S* Jan 11 09:42:52 84.128.84.111:63179 -> xxx.yyy.20.252:31337 SYN ******S* Jan 11 09:42:52 84.128.84.111:63180 -> xxx.yyy.20.253:3306 SYN ******S* Jan 11 09:42:52 84.128.84.111:63182 -> xxx.yyy.20.253:31337 SYN ******S* Jan 11 09:42:52 84.128.84.111:63183 -> xxx.yyy.20.254:3306 SYN ******S* Jan 11 09:42:52 84.128.84.111:63185 -> xxx.yyy.20.254:31337 SYN ******S* 31211 Jan 11 07:31:27 206.107.110.254:26358 -> xxx.yyy.67.1:4899 SYN ******S* Jan 11 07:31:27 206.107.110.254:22897 -> xxx.yyy.67.1:42 SYN ******S* Jan 11 07:31:27 206.107.110.254:26369 -> xxx.yyy.67.2:4899 SYN ******S* Jan 11 07:31:27 206.107.110.254:26371 -> xxx.yyy.67.2:42 SYN ******S* Jan 11 07:31:27 206.107.110.254:26372 -> xxx.yyy.67.3:4899 SYN ******S* Jan 11 07:31:27 206.107.110.254:26374 -> xxx.yyy.67.3:42 SYN ******S* Jan 11 07:31:27 206.107.110.254:26375 -> xxx.yyy.67.4:4899 SYN ******S* Jan 11 07:31:27 206.107.110.254:26377 -> xxx.yyy.67.4:42 SYN ******S* [...] Jan 11 08:07:17 206.107.110.254:24622 -> xxx.yyy.168.99:42 SYN ******S* Jan 11 08:07:17 206.107.110.254:24620 -> xxx.yyy.168.98:42 SYN ******S* Jan 11 08:07:17 206.107.110.254:24721 -> xxx.yyy.168.111:42 SYN ******S* Jan 11 08:07:17 206.107.110.254:24722 -> xxx.yyy.168.112:4899 SYN ******S* Jan 11 08:07:17 206.107.110.254:24724 -> xxx.yyy.168.112:42 SYN ******S* Jan 11 08:07:17 206.107.110.254:24623 -> xxx.yyy.168.100:4899 SYN ******S* Jan 11 08:07:17 206.107.110.254:24726 -> xxx.yyy.168.113:4899 SYN ******S* Jan 11 08:07:17 206.107.110.254:24728 -> xxx.yyy.168.113:42 SYN ******S* 26978 Jan 11 00:00:04 200.216.155.80:3129 -> xxx.yyy.206.110:1433 SYN ******S* Jan 11 00:00:07 200.216.155.80:3313 -> xxx.yyy.206.153:1433 SYN ******S* Jan 11 00:00:05 200.216.155.80:3255 -> xxx.yyy.206.138:1433 SYN ******S* Jan 11 00:00:05 200.216.155.80:3261 -> xxx.yyy.206.139:1433 SYN ******S* Jan 11 00:00:08 200.216.155.80:3319 -> xxx.yyy.206.154:1433 SYN ******S* Jan 11 00:00:05 200.216.155.80:3137 -> xxx.yyy.206.112:1433 SYN ******S* Jan 11 00:00:05 200.216.155.80:3265 -> xxx.yyy.206.140:1433 SYN ******S* Jan 11 00:00:08 200.216.155.80:3325 -> xxx.yyy.206.155:1433 SYN ******S* [...] Jan 11 00:52:19 200.216.155.80:1969 -> xxx.yyy.255.244:1433 SYN ******S* Jan 11 00:52:19 200.216.155.80:1973 -> xxx.yyy.255.245:1433 SYN ******S* Jan 11 00:52:20 200.216.155.80:1980 -> xxx.yyy.255.246:1433 SYN ******S* Jan 11 00:52:21 200.216.155.80:1991 -> xxx.yyy.255.248:1433 SYN ******S* Jan 11 00:52:21 200.216.155.80:2003 -> xxx.yyy.255.250:1433 SYN ******S* Jan 11 00:52:22 200.216.155.80:2011 -> xxx.yyy.255.251:1433 SYN ******S* Jan 11 00:52:22 200.216.155.80:2017 -> xxx.yyy.255.252:1433 SYN ******S* Jan 11 00:52:23 200.216.155.80:2024 -> xxx.yyy.255.253:1433 SYN ******S* 26396 Jan 11 13:08:16 163.23.3.70:1347 -> xxx.yyy.1.104:6101 SYN ******S* Jan 11 13:08:16 163.23.3.70:1352 -> xxx.yyy.1.109:6101 SYN ******S* Jan 11 13:08:16 163.23.3.70:1355 -> xxx.yyy.1.112:6101 SYN ******S* Jan 11 13:08:16 163.23.3.70:1359 -> xxx.yyy.1.116:6101 SYN ******S* Jan 11 13:08:16 163.23.3.70:1358 -> xxx.yyy.1.115:6101 SYN ******S* Jan 11 13:08:16 163.23.3.70:1365 -> xxx.yyy.1.122:6101 SYN ******S* Jan 11 13:08:16 163.23.3.70:1366 -> xxx.yyy.1.123:6101 SYN ******S* Jan 11 13:08:16 163.23.3.70:1368 -> xxx.yyy.1.125:6101 SYN ******S* [...] Jan 11 13:23:45 163.23.3.70:4783 -> xxx.yyy.255.220:6101 SYN ******S* Jan 11 13:23:45 163.23.3.70:4791 -> xxx.yyy.255.223:6101 SYN ******S* Jan 11 13:23:45 163.23.3.70:4774 -> xxx.yyy.255.219:6101 SYN ******S* Jan 11 13:23:45 163.23.3.70:4805 -> xxx.yyy.255.237:6101 SYN ******S* Jan 11 13:23:45 163.23.3.70:4808 -> xxx.yyy.255.240:6101 SYN ******S* Jan 11 13:23:45 163.23.3.70:4812 -> xxx.yyy.255.244:6101 SYN ******S* Jan 11 13:23:45 163.23.3.70:4813 -> xxx.yyy.255.245:6101 SYN ******S* Jan 11 13:23:45 163.23.3.70:4821 -> xxx.yyy.255.253:6101 SYN ******S* Jan 11 13:23:45 163.23.3.70:4822 -> xxx.yyy.255.254:6101 SYN ******S* 23066 Jan 11 02:00:54 218.92.12.84:15203 -> xxx.yyy.1.0:1433 SYN ******S* Jan 11 02:00:52 218.92.12.84:15227 -> xxx.yyy.1.2:1433 SYN ******S* Jan 11 02:00:52 218.92.12.84:15228 -> xxx.yyy.1.1:1433 SYN ******S* Jan 11 02:00:56 218.92.12.84:15326 -> xxx.yyy.1.4:1433 SYN ******S* Jan 11 02:00:56 218.92.12.84:15335 -> xxx.yyy.1.5:1433 SYN ******S* Jan 11 02:00:53 218.92.12.84:15344 -> xxx.yyy.1.7:1433 SYN ******S* Jan 11 02:00:56 218.92.12.84:15350 -> xxx.yyy.1.6:1433 SYN ******S* Jan 11 02:00:57 218.92.12.84:15360 -> xxx.yyy.1.9:1433 SYN ******S* [...] Jan 11 03:54:27 218.92.12.84:22430 -> xxx.yyy.85.236:1433 SYN ******S* Jan 11 03:54:27 218.92.12.84:22433 -> xxx.yyy.85.235:1433 SYN ******S* Jan 11 03:54:27 218.92.12.84:22439 -> xxx.yyy.85.241:1433 SYN ******S* Jan 11 03:54:27 218.92.12.84:22453 -> xxx.yyy.85.238:1433 SYN ******S* Jan 11 03:54:27 218.92.12.84:22454 -> xxx.yyy.85.237:1433 SYN ******S* Jan 11 03:54:27 218.92.12.84:22011 -> xxx.yyy.85.174:1433 SYN ******S* Jan 11 03:54:27 218.92.12.84:22010 -> xxx.yyy.85.178:1433 SYN ******S* Jan 11 03:54:27 218.92.12.84:21995 -> xxx.yyy.85.175:1433 SYN ******S* 19820 Jan 11 21:14:46 65.166.97.230:4077 -> xxx.yyy.1.0:6101 SYN ******S* Jan 11 21:14:46 65.166.97.230:4078 -> xxx.yyy.1.1:6101 SYN ******S* Jan 11 21:14:46 65.166.97.230:4079 -> xxx.yyy.1.2:6101 SYN ******S* Jan 11 21:14:46 65.166.97.230:4080 -> xxx.yyy.1.3:6101 SYN ******S* Jan 11 21:14:46 65.166.97.230:4081 -> xxx.yyy.1.4:6101 SYN ******S* Jan 11 21:14:47 65.166.97.230:4082 -> xxx.yyy.1.5:6101 SYN ******S* Jan 11 21:14:47 65.166.97.230:4085 -> xxx.yyy.1.8:6101 SYN ******S* Jan 11 21:14:47 65.166.97.230:4086 -> xxx.yyy.1.9:6101 SYN ******S* [...] Jan 11 21:15:37 65.166.97.230:4074 -> xxx.yyy.255.227:6101 SYN ******S* Jan 11 21:15:37 65.166.97.230:4075 -> xxx.yyy.255.228:6101 SYN ******S* Jan 11 21:15:37 65.166.97.230:4076 -> xxx.yyy.255.229:6101 SYN ******S* Jan 11 21:15:37 65.166.97.230:4077 -> xxx.yyy.255.230:6101 SYN ******S* Jan 11 21:15:37 65.166.97.230:4078 -> xxx.yyy.255.231:6101 SYN ******S* Jan 11 21:15:37 65.166.97.230:4079 -> xxx.yyy.255.232:6101 SYN ******S* Jan 11 21:15:37 65.166.97.230:4080 -> xxx.yyy.255.233:6101 SYN ******S* Jan 11 21:15:37 65.166.97.230:4081 -> xxx.yyy.255.234:6101 SYN ******S* Jan 11 21:15:37 65.166.97.230:4082 -> xxx.yyy.255.235:6101 SYN ******S* 17788 Jan 11 15:39:30 66.139.75.11:2652 -> xxx.yyy.1.8:3306 SYN ******S* Jan 11 15:39:30 66.139.75.11:2622 -> xxx.yyy.1.28:3306 SYN ******S* Jan 11 15:39:30 66.139.75.11:2620 -> xxx.yyy.1.26:3306 SYN ******S* Jan 11 15:39:30 66.139.75.11:2653 -> xxx.yyy.1.9:3306 SYN ******S* Jan 11 15:39:30 66.139.75.11:2619 -> xxx.yyy.1.25:3306 SYN ******S* Jan 11 15:39:30 66.139.75.11:2621 -> xxx.yyy.1.27:3306 SYN ******S* Jan 11 15:39:30 66.139.75.11:2654 -> xxx.yyy.1.10:3306 SYN ******S* Jan 11 15:39:30 66.139.75.11:2655 -> xxx.yyy.1.11:3306 SYN ******S* [...] Jan 11 17:18:56 66.139.75.11:1129 -> xxx.yyy.255.246:3306 SYN ******S* Jan 11 17:18:56 66.139.75.11:1131 -> xxx.yyy.255.248:3306 SYN ******S* Jan 11 17:18:56 66.139.75.11:1132 -> xxx.yyy.255.249:3306 SYN ******S* Jan 11 17:18:56 66.139.75.11:1175 -> xxx.yyy.255.242:3306 SYN ******S* Jan 11 17:18:56 66.139.75.11:1176 -> xxx.yyy.255.243:3306 SYN ******S* Jan 11 17:18:56 66.139.75.11:1173 -> xxx.yyy.255.240:3306 SYN ******S* Jan 11 17:18:56 66.139.75.11:1134 -> xxx.yyy.255.251:3306 SYN ******S* Jan 11 17:18:56 66.139.75.11:1137 -> xxx.yyy.255.254:3306 SYN ******S* 15780 Jan 11 00:07:49 218.16.142.36:3630 -> xxx.yyy.217.87:1433 SYN ******S* Jan 11 00:07:49 218.16.142.36:3656 -> xxx.yyy.217.91:1433 SYN ******S* Jan 11 00:07:49 218.16.142.36:3676 -> xxx.yyy.217.95:1433 SYN ******S* Jan 11 00:07:49 218.16.142.36:3636 -> xxx.yyy.217.88:1433 SYN ******S* Jan 11 00:07:49 218.16.142.36:3651 -> xxx.yyy.217.90:1433 SYN ******S* Jan 11 00:07:49 218.16.142.36:3696 -> xxx.yyy.217.99:1433 SYN ******S* Jan 11 00:07:49 218.16.142.36:3671 -> xxx.yyy.217.94:1433 SYN ******S* Jan 11 00:07:49 218.16.142.36:3681 -> xxx.yyy.217.96:1433 SYN ******S* [...] Jan 11 00:37:24 218.16.142.36:4700 -> xxx.yyy.250.131:1433 SYN ******S* Jan 11 00:37:24 218.16.142.36:4723 -> xxx.yyy.250.136:1433 SYN ******S* Jan 11 00:37:24 218.16.142.36:4719 -> xxx.yyy.250.135:1433 SYN ******S* Jan 11 00:37:31 218.16.142.36:4825 -> xxx.yyy.250.138:1433 SYN ******S* Jan 11 00:37:31 218.16.142.36:4832 -> xxx.yyy.250.140:1433 SYN ******S* Jan 11 00:37:31 218.16.142.36:4826 -> xxx.yyy.250.139:1433 SYN ******S* Jan 11 00:37:31 218.16.142.36:4838 -> xxx.yyy.250.141:1433 SYN ******S* Jan 11 00:37:31 218.16.142.36:4849 -> xxx.yyy.250.143:1433 SYN ******S* Jan 11 00:37:31 218.16.142.36:4854 -> xxx.yyy.250.144:1433 SYN ******S* 14863 Jan 11 12:50:20 202.168.224.10:3933 -> xxx.yyy.1.4:1433 SYN ******S* Jan 11 12:50:20 202.168.224.10:3935 -> xxx.yyy.1.5:1433 SYN ******S* Jan 11 12:50:20 202.168.224.10:3927 -> xxx.yyy.1.1:1433 SYN ******S* Jan 11 12:50:20 202.168.224.10:3929 -> xxx.yyy.1.2:1433 SYN ******S* Jan 11 12:50:20 202.168.224.10:3937 -> xxx.yyy.1.6:1433 SYN ******S* Jan 11 12:50:20 202.168.224.10:3931 -> xxx.yyy.1.3:1433 SYN ******S* Jan 11 12:50:20 202.168.224.10:3953 -> xxx.yyy.1.12:1433 SYN ******S* Jan 11 12:50:20 202.168.224.10:3948 -> xxx.yyy.1.10:1433 SYN ******S* [...] Jan 11 13:02:04 202.168.224.10:4862 -> xxx.yyy.255.234:1433 SYN ******S* Jan 11 13:02:04 202.168.224.10:4840 -> xxx.yyy.255.229:1433 SYN ******S* Jan 11 13:02:04 202.168.224.10:4844 -> xxx.yyy.255.230:1433 SYN ******S* Jan 11 13:02:04 202.168.224.10:4848 -> xxx.yyy.255.231:1433 SYN ******S* Jan 11 13:02:04 202.168.224.10:4837 -> xxx.yyy.255.228:1433 SYN ******S* Jan 11 13:02:04 202.168.224.10:4900 -> xxx.yyy.255.244:1433 SYN ******S* Jan 11 13:02:04 202.168.224.10:4894 -> xxx.yyy.255.242:1433 SYN ******S* Jan 11 13:02:04 202.168.224.10:4913 -> xxx.yyy.255.247:1433 SYN ******S* 14260 Jan 11 06:57:32 60.42.83.115:1786 -> xxx.yyy.72.124:5554 SYN ******S* Jan 11 06:57:33 60.42.83.115:2283 -> xxx.yyy.72.124:1023 SYN ******S* Jan 11 06:57:32 60.42.83.115:1791 -> xxx.yyy.72.125:5554 SYN ******S* Jan 11 06:57:33 60.42.83.115:2286 -> xxx.yyy.72.125:1023 SYN ******S* Jan 11 06:57:32 60.42.83.115:1792 -> xxx.yyy.72.126:5554 SYN ******S* Jan 11 06:57:33 60.42.83.115:2287 -> xxx.yyy.72.126:1023 SYN ******S* Jan 11 06:57:32 60.42.83.115:1794 -> xxx.yyy.72.127:5554 SYN ******S* Jan 11 06:57:33 60.42.83.115:2288 -> xxx.yyy.72.127:1023 SYN ******S* [...] Jan 11 06:58:17 60.42.83.115:1314 -> xxx.yyy.92.244:9898 SYN ******S* Jan 11 06:58:17 60.42.83.115:1317 -> xxx.yyy.92.246:9898 SYN ******S* Jan 11 06:58:17 60.42.83.115:1300 -> xxx.yyy.92.237:9898 SYN ******S* Jan 11 06:58:17 60.42.83.115:1304 -> xxx.yyy.92.240:9898 SYN ******S* Jan 11 06:58:17 60.42.83.115:1301 -> xxx.yyy.92.239:9898 SYN ******S* Jan 11 06:58:17 60.42.83.115:1302 -> xxx.yyy.92.238:9898 SYN ******S* Jan 11 06:58:17 60.42.83.115:1306 -> xxx.yyy.92.241:9898 SYN ******S* Jan 11 06:58:17 60.42.83.115:1309 -> xxx.yyy.92.242:9898 SYN ******S* Jan 11 06:58:17 60.42.83.115:1313 -> xxx.yyy.92.243:9898 SYN ******S* 14141 Jan 11 12:16:54 218.22.120.178:44039 -> xxx.yyy.1.0:21 SYN ******S* Jan 11 12:16:54 218.22.120.178:44053 -> xxx.yyy.1.14:21 SYN ******S* Jan 11 12:16:54 218.22.120.178:44060 -> xxx.yyy.1.21:21 SYN ******S* Jan 11 12:16:54 218.22.120.178:44071 -> xxx.yyy.1.32:21 SYN ******S* Jan 11 12:16:54 218.22.120.178:44062 -> xxx.yyy.1.23:21 SYN ******S* Jan 11 12:16:54 218.22.120.178:44073 -> xxx.yyy.1.34:21 SYN ******S* Jan 11 12:16:54 218.22.120.178:44064 -> xxx.yyy.1.25:21 SYN ******S* Jan 11 12:16:54 218.22.120.178:44063 -> xxx.yyy.1.24:21 SYN ******S* [...] Jan 11 12:27:47 218.22.120.178:47761 -> xxx.yyy.255.246:21 SYN ******S* Jan 11 12:27:47 218.22.120.178:47763 -> xxx.yyy.255.248:21 SYN ******S* Jan 11 12:27:47 218.22.120.178:47767 -> xxx.yyy.255.252:21 SYN ******S* Jan 11 12:27:47 218.22.120.178:47764 -> xxx.yyy.255.249:21 SYN ******S* Jan 11 12:27:47 218.22.120.178:47768 -> xxx.yyy.255.253:21 SYN ******S* Jan 11 12:27:47 218.22.120.178:47770 -> xxx.yyy.255.255:21 SYN ******S* Jan 11 12:27:47 218.22.120.178:47769 -> xxx.yyy.255.254:21 SYN ******S* Jan 11 12:27:47 218.22.120.178:47762 -> xxx.yyy.255.247:21 SYN ******S* Jan 11 12:27:47 218.22.120.178:47765 -> xxx.yyy.255.250:21 SYN ******S* 12802 Jan 11 21:48:21 81.27.96.210:1869 -> xxx.yyy.1.0:6101 SYN ******S* Jan 11 21:48:21 81.27.96.210:1870 -> xxx.yyy.1.1:6101 SYN ******S* Jan 11 21:48:21 81.27.96.210:1872 -> xxx.yyy.1.3:6101 SYN ******S* Jan 11 21:48:21 81.27.96.210:1873 -> xxx.yyy.1.4:6101 SYN ******S* Jan 11 21:48:21 81.27.96.210:1878 -> xxx.yyy.1.9:6101 SYN ******S* Jan 11 21:48:21 81.27.96.210:1879 -> xxx.yyy.1.10:6101 SYN ******S* Jan 11 21:48:21 81.27.96.210:1868 -> xxx.yyy.1.49:6101 SYN ******S* Jan 11 21:48:21 81.27.96.210:1869 -> xxx.yyy.1.50:6101 SYN ******S* [...] Jan 11 21:48:42 81.27.96.210:1869 -> xxx.yyy.255.230:6101 SYN ******S* Jan 11 21:48:42 81.27.96.210:1880 -> xxx.yyy.255.241:6101 SYN ******S* Jan 11 21:48:42 81.27.96.210:1877 -> xxx.yyy.255.238:6101 SYN ******S* Jan 11 21:48:42 81.27.96.210:1883 -> xxx.yyy.255.244:6101 SYN ******S* Jan 11 21:48:42 81.27.96.210:1884 -> xxx.yyy.255.245:6101 SYN ******S* Jan 11 21:48:42 81.27.96.210:1878 -> xxx.yyy.255.239:6101 SYN ******S* Jan 11 21:48:42 81.27.96.210:1885 -> xxx.yyy.255.246:6101 SYN ******S* Jan 11 21:48:42 81.27.96.210:1886 -> xxx.yyy.255.247:6101 SYN ******S* 11817 Jan 11 00:56:28 222.114.251.76:4402 -> xxx.yyy.133.234:5554 SYN ******S* Jan 11 00:56:31 222.114.251.76:1817 -> xxx.yyy.133.234:9898 SYN ******S* Jan 11 00:56:28 222.114.251.76:4457 -> xxx.yyy.133.236:5554 SYN ******S* Jan 11 00:56:29 222.114.251.76:4973 -> xxx.yyy.133.236:1023 SYN ******S* Jan 11 00:56:28 222.114.251.76:4470 -> xxx.yyy.133.238:5554 SYN ******S* Jan 11 00:56:29 222.114.251.76:4981 -> xxx.yyy.133.238:1023 SYN ******S* Jan 11 00:56:29 222.114.251.76:4559 -> xxx.yyy.133.241:5554 SYN ******S* Jan 11 00:56:30 222.114.251.76:1058 -> xxx.yyy.133.241:1023 SYN ******S* [...] Jan 11 00:58:17 222.114.251.76:3432 -> xxx.yyy.154.97:9898 SYN ******S* Jan 11 00:58:17 222.114.251.76:3430 -> xxx.yyy.154.96:9898 SYN ******S* Jan 11 00:58:17 222.114.251.76:3374 -> xxx.yyy.154.83:9898 SYN ******S* Jan 11 00:58:17 222.114.251.76:3417 -> xxx.yyy.154.87:9898 SYN ******S* Jan 11 00:58:17 222.114.251.76:3419 -> xxx.yyy.154.89:9898 SYN ******S* Jan 11 00:58:17 222.114.251.76:3428 -> xxx.yyy.154.94:9898 SYN ******S* Jan 11 00:58:17 222.114.251.76:3439 -> xxx.yyy.154.100:9898 SYN ******S* Jan 11 00:58:17 222.114.251.76:3429 -> xxx.yyy.154.95:9898 SYN ******S* 9812 Jan 11 22:53:25 218.47.214.180:1628 -> xxx.yyy.235.112:5554 SYN ******S* Jan 11 22:53:25 218.47.214.180:1630 -> xxx.yyy.235.113:5554 SYN ******S* Jan 11 22:53:25 218.47.214.180:1631 -> xxx.yyy.235.114:5554 SYN ******S* Jan 11 22:53:27 218.47.214.180:2327 -> xxx.yyy.235.114:1023 SYN ******S* Jan 11 22:53:25 218.47.214.180:1632 -> xxx.yyy.235.115:5554 SYN ******S* Jan 11 22:53:26 218.47.214.180:2329 -> xxx.yyy.235.115:1023 SYN ******S* Jan 11 22:53:25 218.47.214.180:1644 -> xxx.yyy.235.124:5554 SYN ******S* Jan 11 22:53:25 218.47.214.180:1645 -> xxx.yyy.235.125:5554 SYN ******S* [...] Jan 11 22:54:23 218.47.214.180:1803 -> xxx.yyy.248.48:9898 SYN ******S* Jan 11 22:54:23 218.47.214.180:1844 -> xxx.yyy.248.27:9898 SYN ******S* Jan 11 22:54:23 218.47.214.180:1834 -> xxx.yyy.248.28:9898 SYN ******S* Jan 11 22:54:23 218.47.214.180:1837 -> xxx.yyy.248.30:9898 SYN ******S* Jan 11 22:54:24 218.47.214.180:1859 -> xxx.yyy.248.42:9898 SYN ******S* Jan 11 22:54:24 218.47.214.180:1858 -> xxx.yyy.248.44:9898 SYN ******S* Jan 11 22:54:24 218.47.214.180:1857 -> xxx.yyy.248.46:9898 SYN ******S* Jan 11 22:54:24 218.47.214.180:1861 -> xxx.yyy.248.45:9898 SYN ******S* 8304 [...] 7962 Jan 11 19:23:36 68.191.168.168:2098 -> xxx.yyy.1.211:6101 SYN ******S* Jan 11 19:23:36 68.191.168.168:2090 -> xxx.yyy.1.203:6101 SYN ******S* Jan 11 19:23:36 68.191.168.168:2106 -> xxx.yyy.1.219:6101 SYN ******S* Jan 11 19:23:36 68.191.168.168:2095 -> xxx.yyy.1.208:6101 SYN ******S* Jan 11 19:23:36 68.191.168.168:2101 -> xxx.yyy.1.214:6101 SYN ******S* Jan 11 19:23:36 68.191.168.168:2103 -> xxx.yyy.1.216:6101 SYN ******S* Jan 11 19:23:36 68.191.168.168:2105 -> xxx.yyy.1.218:6101 SYN ******S* Jan 11 19:23:36 68.191.168.168:2089 -> xxx.yyy.1.202:6101 SYN ******S* [...] Jan 11 19:27:46 68.191.168.168:1490 -> xxx.yyy.255.94:6101 SYN ******S* Jan 11 19:27:46 68.191.168.168:1494 -> xxx.yyy.255.98:6101 SYN ******S* Jan 11 19:27:46 68.191.168.168:1483 -> xxx.yyy.255.87:6101 SYN ******S* Jan 11 19:27:46 68.191.168.168:1485 -> xxx.yyy.255.89:6101 SYN ******S* Jan 11 19:27:46 68.191.168.168:1487 -> xxx.yyy.255.91:6101 SYN ******S* Jan 11 19:27:46 68.191.168.168:1492 -> xxx.yyy.255.96:6101 SYN ******S* Jan 11 19:27:46 68.191.168.168:1503 -> xxx.yyy.255.107:6101 SYN ******S* Jan 11 19:27:46 68.191.168.168:1504 -> xxx.yyy.255.108:6101 SYN ******S* 6789 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions