[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Jan 22 15:24:18 212.68.254.137:2021 -> xxx.yyy.1.1:1433 SYN ******S* Jan 22 15:24:18 212.68.254.137:2026 -> xxx.yyy.1.3:1433 SYN ******S* Jan 22 15:24:18 212.68.254.137:2032 -> xxx.yyy.1.5:1433 SYN ******S* Jan 22 15:24:18 212.68.254.137:2045 -> xxx.yyy.1.7:1433 SYN ******S* Jan 22 15:24:18 212.68.254.137:2049 -> xxx.yyy.1.8:1433 SYN ******S* Jan 22 15:24:18 212.68.254.137:2055 -> xxx.yyy.1.9:1433 SYN ******S* Jan 22 15:24:18 212.68.254.137:2060 -> xxx.yyy.1.11:1433 SYN ******S* Jan 22 15:24:18 212.68.254.137:2064 -> xxx.yyy.1.12:1433 SYN ******S* [...] Jan 22 23:11:26 212.68.254.137:2367 -> xxx.yyy.255.247:1433 SYN ******S* Jan 22 23:11:26 212.68.254.137:2389 -> xxx.yyy.255.248:1433 SYN ******S* Jan 22 23:11:26 212.68.254.137:2391 -> xxx.yyy.255.249:1433 SYN ******S* Jan 22 23:11:26 212.68.254.137:2392 -> xxx.yyy.255.250:1433 SYN ******S* Jan 22 23:11:26 212.68.254.137:2414 -> xxx.yyy.255.251:1433 SYN ******S* Jan 22 23:11:27 212.68.254.137:2438 -> xxx.yyy.255.252:1433 SYN ******S* Jan 22 23:11:27 212.68.254.137:2450 -> xxx.yyy.255.253:1433 SYN ******S* Jan 22 23:11:27 212.68.254.137:2453 -> xxx.yyy.255.254:1433 SYN ******S* 183615 Jan 22 06:04:35 62.233.233.50:3166 -> xxx.yyy.1.0:1433 SYN ******S* Jan 22 06:04:35 62.233.233.50:3171 -> xxx.yyy.1.1:1433 SYN ******S* Jan 22 06:04:35 62.233.233.50:3172 -> xxx.yyy.1.2:1433 SYN ******S* Jan 22 06:04:35 62.233.233.50:3174 -> xxx.yyy.1.3:1433 SYN ******S* Jan 22 06:04:35 62.233.233.50:3180 -> xxx.yyy.1.4:1433 SYN ******S* Jan 22 06:04:35 62.233.233.50:3186 -> xxx.yyy.1.5:1433 SYN ******S* Jan 22 06:04:35 62.233.233.50:3189 -> xxx.yyy.1.6:1433 SYN ******S* Jan 22 06:04:33 62.233.233.50:3194 -> xxx.yyy.1.7:1433 SYN ******S* [...] Jan 22 09:23:29 62.233.233.50:3791 -> xxx.yyy.222.44:1433 SYN ******S* Jan 22 09:23:29 62.233.233.50:3187 -> xxx.yyy.222.30:1433 SYN ******S* Jan 22 09:23:29 62.233.233.50:2336 -> xxx.yyy.222.8:1433 SYN ******S* Jan 22 09:23:29 62.233.233.50:3796 -> xxx.yyy.222.45:1433 SYN ******S* Jan 22 09:23:30 62.233.233.50:2341 -> xxx.yyy.222.9:1433 SYN ******S* Jan 22 09:23:30 62.233.233.50:3312 -> xxx.yyy.222.31:1433 SYN ******S* Jan 22 09:23:30 62.233.233.50:2436 -> xxx.yyy.222.10:1433 SYN ******S* Jan 22 09:23:30 62.233.233.50:4010 -> xxx.yyy.222.46:1433 SYN ******S* Jan 22 09:23:30 62.233.233.50:4021 -> xxx.yyy.222.47:1433 SYN ******S* 89122 Jan 22 12:47:22 67.71.133.47:4647 -> xxx.yyy.1.1:1433 SYN ******S* Jan 22 12:47:20 67.71.133.47:4661 -> xxx.yyy.1.2:1433 SYN ******S* Jan 22 12:47:23 67.71.133.47:4681 -> xxx.yyy.1.5:1433 SYN ******S* Jan 22 12:47:23 67.71.133.47:4686 -> xxx.yyy.1.6:1433 SYN ******S* Jan 22 12:47:20 67.71.133.47:4688 -> xxx.yyy.1.7:1433 SYN ******S* Jan 22 12:47:23 67.71.133.47:4719 -> xxx.yyy.1.9:1433 SYN ******S* Jan 22 12:47:23 67.71.133.47:4732 -> xxx.yyy.1.10:1433 SYN ******S* Jan 22 12:47:23 67.71.133.47:4759 -> xxx.yyy.1.12:1433 SYN ******S* [...] Jan 22 16:39:12 67.71.133.47:3219 -> xxx.yyy.255.236:1433 SYN ******S* Jan 22 16:39:12 67.71.133.47:3206 -> xxx.yyy.255.234:1433 SYN ******S* Jan 22 16:39:12 67.71.133.47:3279 -> xxx.yyy.255.238:1433 SYN ******S* Jan 22 16:39:13 67.71.133.47:3317 -> xxx.yyy.255.240:1433 SYN ******S* Jan 22 16:39:13 67.71.133.47:3318 -> xxx.yyy.255.241:1433 SYN ******S* Jan 22 16:39:15 67.71.133.47:3504 -> xxx.yyy.255.246:1433 SYN ******S* Jan 22 16:39:15 67.71.133.47:3550 -> xxx.yyy.255.248:1433 SYN ******S* Jan 22 16:39:17 67.71.133.47:3758 -> xxx.yyy.255.254:1433 SYN ******S* 81230 Jan 22 04:09:10 80.60.48.140:38507 -> xxx.yyy.1.0:22 SYN ******S* Jan 22 04:09:10 80.60.48.140:38508 -> xxx.yyy.1.1:22 SYN ******S* Jan 22 04:09:10 80.60.48.140:38509 -> xxx.yyy.1.2:22 SYN ******S* Jan 22 04:09:10 80.60.48.140:38510 -> xxx.yyy.1.3:22 SYN ******S* Jan 22 04:09:13 80.60.48.140:38511 -> xxx.yyy.1.4:22 SYN ******S* Jan 22 04:09:13 80.60.48.140:38512 -> xxx.yyy.1.5:22 SYN ******S* Jan 22 04:09:13 80.60.48.140:38513 -> xxx.yyy.1.6:22 SYN ******S* Jan 22 04:09:13 80.60.48.140:38514 -> xxx.yyy.1.7:22 SYN ******S* [...] Jan 22 04:36:07 80.60.48.140:59118 -> xxx.yyy.241.108:22 SYN ******S* Jan 22 04:36:07 80.60.48.140:59119 -> xxx.yyy.240.152:22 SYN ******S* Jan 22 04:36:07 80.60.48.140:59120 -> xxx.yyy.241.106:22 SYN ******S* Jan 22 04:36:07 80.60.48.140:59121 -> xxx.yyy.241.98:22 SYN ******S* Jan 22 04:36:08 80.60.48.140:59123 -> xxx.yyy.241.156:22 SYN ******S* Jan 22 04:36:08 80.60.48.140:59127 -> xxx.yyy.229.113:22 SYN ******S* Jan 22 04:36:08 80.60.48.140:59128 -> xxx.yyy.228.183:22 SYN ******S* Jan 22 04:36:08 80.60.48.140:59129 -> xxx.yyy.228.189:22 SYN ******S* Jan 22 04:36:08 80.60.48.140:59130 -> xxx.yyy.248.18:22 SYN ******S* 80314 Jan 22 07:51:08 195.14.168.163:3727 -> xxx.yyy.1.1:1521 SYN ******S* Jan 22 07:51:08 195.14.168.163:3728 -> xxx.yyy.1.2:1521 SYN ******S* Jan 22 07:51:07 195.14.168.163:3730 -> xxx.yyy.1.4:1521 SYN ******S* Jan 22 07:51:10 195.14.168.163:3731 -> xxx.yyy.1.5:1521 SYN ******S* Jan 22 07:51:10 195.14.168.163:3732 -> xxx.yyy.1.6:1521 SYN ******S* Jan 22 07:51:10 195.14.168.163:3733 -> xxx.yyy.1.7:1521 SYN ******S* Jan 22 07:51:08 195.14.168.163:3734 -> xxx.yyy.1.8:1521 SYN ******S* Jan 22 07:51:08 195.14.168.163:3735 -> xxx.yyy.1.9:1521 SYN ******S* [...] Jan 22 08:02:50 195.14.168.163:6531 -> xxx.yyy.255.244:1521 SYN ******S* Jan 22 08:02:50 195.14.168.163:6534 -> xxx.yyy.255.247:1521 SYN ******S* Jan 22 08:02:50 195.14.168.163:6535 -> xxx.yyy.255.248:1521 SYN ******S* Jan 22 08:02:50 195.14.168.163:6536 -> xxx.yyy.255.249:1521 SYN ******S* Jan 22 08:02:50 195.14.168.163:6541 -> xxx.yyy.255.254:1521 SYN ******S* Jan 22 08:02:50 195.14.168.163:6538 -> xxx.yyy.255.251:1521 SYN ******S* Jan 22 08:02:50 195.14.168.163:6537 -> xxx.yyy.255.250:1521 SYN ******S* Jan 22 08:02:50 195.14.168.163:6540 -> xxx.yyy.255.253:1521 SYN ******S* Jan 22 08:02:50 195.14.168.163:6539 -> xxx.yyy.255.252:1521 SYN ******S* 59169 Jan 22 23:26:06 140.78.42.2:1044 -> xxx.yyy.1.1:1521 SYN ******S* Jan 22 23:26:06 140.78.42.2:1046 -> xxx.yyy.1.3:1521 SYN ******S* Jan 22 23:26:05 140.78.42.2:1047 -> xxx.yyy.1.4:1521 SYN ******S* Jan 22 23:26:05 140.78.42.2:1048 -> xxx.yyy.1.5:1521 SYN ******S* Jan 22 23:26:05 140.78.42.2:1050 -> xxx.yyy.1.6:1521 SYN ******S* Jan 22 23:26:05 140.78.42.2:1051 -> xxx.yyy.1.7:1521 SYN ******S* Jan 22 23:26:07 140.78.42.2:1052 -> xxx.yyy.1.8:1521 SYN ******S* Jan 22 23:26:07 140.78.42.2:1053 -> xxx.yyy.1.9:1521 SYN ******S* [...] Jan 22 23:37:57 140.78.42.2:1991 -> xxx.yyy.255.212:1521 SYN ******S* Jan 22 23:37:58 140.78.42.2:1998 -> xxx.yyy.255.219:1521 SYN ******S* Jan 22 23:37:58 140.78.42.2:2001 -> xxx.yyy.255.222:1521 SYN ******S* Jan 22 23:37:58 140.78.42.2:1999 -> xxx.yyy.255.220:1521 SYN ******S* Jan 22 23:37:58 140.78.42.2:1996 -> xxx.yyy.255.217:1521 SYN ******S* Jan 22 23:37:58 140.78.42.2:2000 -> xxx.yyy.255.221:1521 SYN ******S* Jan 22 23:37:58 140.78.42.2:1997 -> xxx.yyy.255.218:1521 SYN ******S* Jan 22 23:37:58 140.78.42.2:2019 -> xxx.yyy.255.240:1521 SYN ******S* Jan 22 23:37:58 140.78.42.2:2033 -> xxx.yyy.255.254:1521 SYN ******S* 58241 Jan 22 09:21:00 222.36.61.135:1555 -> xxx.yyy.1.0:1433 SYN ******S* Jan 22 09:21:00 222.36.61.135:1557 -> xxx.yyy.1.1:1433 SYN ******S* Jan 22 09:21:00 222.36.61.135:1562 -> xxx.yyy.1.5:1433 SYN ******S* Jan 22 09:21:00 222.36.61.135:1561 -> xxx.yyy.1.4:1433 SYN ******S* Jan 22 09:21:00 222.36.61.135:1566 -> xxx.yyy.1.8:1433 SYN ******S* Jan 22 09:20:57 222.36.61.135:1567 -> xxx.yyy.1.9:1433 SYN ******S* Jan 22 09:21:00 222.36.61.135:1570 -> xxx.yyy.1.12:1433 SYN ******S* Jan 22 09:21:00 222.36.61.135:1572 -> xxx.yyy.1.13:1433 SYN ******S* [...] Jan 22 11:51:47 222.36.61.135:1076 -> xxx.yyy.169.41:1433 SYN ******S* Jan 22 11:51:47 222.36.61.135:1074 -> xxx.yyy.169.39:1433 SYN ******S* Jan 22 11:51:47 222.36.61.135:1075 -> xxx.yyy.169.40:1433 SYN ******S* Jan 22 11:51:47 222.36.61.135:1073 -> xxx.yyy.169.38:1433 SYN ******S* Jan 22 11:51:47 222.36.61.135:1071 -> xxx.yyy.169.37:1433 SYN ******S* Jan 22 11:51:47 222.36.61.135:1085 -> xxx.yyy.169.42:1433 SYN ******S* Jan 22 11:51:49 222.36.61.135:1422 -> xxx.yyy.169.44:1433 SYN ******S* Jan 22 11:51:50 222.36.61.135:1438 -> xxx.yyy.169.45:1433 SYN ******S* Jan 22 11:51:50 222.36.61.135:1447 -> xxx.yyy.169.46:1433 SYN ******S* 55950 Jan 22 11:35:15 130.39.8.18:3873 -> xxx.yyy.1.1:80 SYN ******S* Jan 22 11:35:15 130.39.8.18:3877 -> xxx.yyy.1.3:80 SYN ******S* Jan 22 11:35:14 130.39.8.18:3879 -> xxx.yyy.1.4:80 SYN ******S* Jan 22 11:35:14 130.39.8.18:3881 -> xxx.yyy.1.5:80 SYN ******S* Jan 22 11:35:14 130.39.8.18:3883 -> xxx.yyy.1.6:80 SYN ******S* Jan 22 11:35:14 130.39.8.18:3885 -> xxx.yyy.1.7:80 SYN ******S* Jan 22 11:35:14 130.39.8.18:3887 -> xxx.yyy.1.8:80 SYN ******S* Jan 22 11:35:14 130.39.8.18:3895 -> xxx.yyy.1.12:80 SYN ******S* [...] Jan 22 11:45:12 130.39.8.18:3525 -> xxx.yyy.255.249:80 SYN ******S* Jan 22 11:45:12 130.39.8.18:3526 -> xxx.yyy.255.250:80 SYN ******S* Jan 22 11:45:12 130.39.8.18:3527 -> xxx.yyy.255.251:80 SYN ******S* Jan 22 11:45:12 130.39.8.18:3529 -> xxx.yyy.255.253:80 SYN ******S* Jan 22 11:45:15 130.39.8.18:3503 -> xxx.yyy.255.227:80 SYN ******S* Jan 22 11:45:15 130.39.8.18:3504 -> xxx.yyy.255.228:80 SYN ******S* Jan 22 11:45:15 130.39.8.18:3501 -> xxx.yyy.255.225:80 SYN ******S* Jan 22 11:45:15 130.39.8.18:3514 -> xxx.yyy.255.238:80 SYN ******S* Jan 22 11:45:15 130.39.8.18:3502 -> xxx.yyy.255.226:80 SYN ******S* 55794 Jan 22 22:13:54 65.210.15.246:3863 -> xxx.yyy.1.1:3306 SYN ******S* Jan 22 22:13:54 65.210.15.246:3864 -> xxx.yyy.1.2:3306 SYN ******S* Jan 22 22:13:54 65.210.15.246:3865 -> xxx.yyy.1.3:3306 SYN ******S* Jan 22 22:13:56 65.210.15.246:3868 -> xxx.yyy.1.6:3306 SYN ******S* Jan 22 22:13:56 65.210.15.246:3869 -> xxx.yyy.1.7:3306 SYN ******S* Jan 22 22:13:54 65.210.15.246:3870 -> xxx.yyy.1.8:3306 SYN ******S* Jan 22 22:13:54 65.210.15.246:3871 -> xxx.yyy.1.9:3306 SYN ******S* Jan 22 22:13:54 65.210.15.246:3873 -> xxx.yyy.1.11:3306 SYN ******S* [...] Jan 22 22:24:52 65.210.15.246:2780 -> xxx.yyy.255.245:3306 SYN ******S* Jan 22 22:24:52 65.210.15.246:2781 -> xxx.yyy.255.246:3306 SYN ******S* Jan 22 22:24:52 65.210.15.246:2783 -> xxx.yyy.255.248:3306 SYN ******S* Jan 22 22:24:52 65.210.15.246:2784 -> xxx.yyy.255.249:3306 SYN ******S* Jan 22 22:24:52 65.210.15.246:2785 -> xxx.yyy.255.250:3306 SYN ******S* Jan 22 22:24:52 65.210.15.246:2786 -> xxx.yyy.255.251:3306 SYN ******S* Jan 22 22:24:52 65.210.15.246:2787 -> xxx.yyy.255.252:3306 SYN ******S* Jan 22 22:24:52 65.210.15.246:2788 -> xxx.yyy.255.253:3306 SYN ******S* Jan 22 22:24:52 65.210.15.246:2789 -> xxx.yyy.255.254:3306 SYN ******S* 52930 Jan 22 14:42:37 65.162.1.154:1227 -> xxx.yyy.1.4:3306 SYN ******S* Jan 22 14:42:34 65.162.1.154:1233 -> xxx.yyy.1.7:3306 SYN ******S* Jan 22 14:42:34 65.162.1.154:1246 -> xxx.yyy.1.14:3306 SYN ******S* Jan 22 14:42:34 65.162.1.154:1252 -> xxx.yyy.1.17:3306 SYN ******S* Jan 22 14:42:35 65.162.1.154:1256 -> xxx.yyy.1.19:3306 SYN ******S* Jan 22 14:42:35 65.162.1.154:1261 -> xxx.yyy.1.22:3306 SYN ******S* Jan 22 14:42:37 65.162.1.154:1265 -> xxx.yyy.1.24:3306 SYN ******S* Jan 22 14:42:34 65.162.1.154:1287 -> xxx.yyy.1.34:3306 SYN ******S* [...] Jan 22 14:48:17 65.162.1.154:2959 -> xxx.yyy.255.251:3306 SYN ******S* Jan 22 14:48:17 65.162.1.154:2895 -> xxx.yyy.255.221:3306 SYN ******S* Jan 22 14:48:17 65.162.1.154:2924 -> xxx.yyy.255.232:3306 SYN ******S* Jan 22 14:48:17 65.162.1.154:2893 -> xxx.yyy.255.220:3306 SYN ******S* Jan 22 14:48:17 65.162.1.154:2961 -> xxx.yyy.255.253:3306 SYN ******S* Jan 22 14:48:17 65.162.1.154:2910 -> xxx.yyy.255.226:3306 SYN ******S* Jan 22 14:48:17 65.162.1.154:2958 -> xxx.yyy.255.250:3306 SYN ******S* Jan 22 14:48:17 65.162.1.154:2938 -> xxx.yyy.255.237:3306 SYN ******S* 46759 Jan 22 16:11:35 213.42.70.97:2631 -> xxx.yyy.1.1:42 SYN ******S* Jan 22 16:11:35 213.42.70.97:2632 -> xxx.yyy.1.2:42 SYN ******S* Jan 22 16:11:35 213.42.70.97:2636 -> xxx.yyy.1.6:42 SYN ******S* Jan 22 16:11:38 213.42.70.97:2637 -> xxx.yyy.1.7:42 SYN ******S* Jan 22 16:11:35 213.42.70.97:2640 -> xxx.yyy.1.10:42 SYN ******S* Jan 22 16:11:38 213.42.70.97:2638 -> xxx.yyy.1.9:42 SYN ******S* Jan 22 16:11:38 213.42.70.97:2641 -> xxx.yyy.1.11:42 SYN ******S* Jan 22 16:11:35 213.42.70.97:2643 -> xxx.yyy.1.13:42 SYN ******S* [...] Jan 22 16:51:13 213.42.70.97:2761 -> xxx.yyy.255.229:42 SYN ******S* Jan 22 16:51:13 213.42.70.97:2745 -> xxx.yyy.255.213:42 SYN ******S* Jan 22 16:51:13 213.42.70.97:2758 -> xxx.yyy.255.226:42 SYN ******S* Jan 22 16:51:16 213.42.70.97:2782 -> xxx.yyy.255.250:42 SYN ******S* Jan 22 16:51:13 213.42.70.97:2783 -> xxx.yyy.255.251:42 SYN ******S* Jan 22 16:51:16 213.42.70.97:2784 -> xxx.yyy.255.252:42 SYN ******S* Jan 22 16:51:13 213.42.70.97:2786 -> xxx.yyy.255.254:42 SYN ******S* Jan 22 16:51:16 213.42.70.97:2785 -> xxx.yyy.255.253:42 SYN ******S* 46131 Jan 22 17:30:49 61.152.169.216:2740 -> xxx.yyy.1.3:1433 SYN ******S* Jan 22 17:30:49 61.152.169.216:2741 -> xxx.yyy.1.4:1433 SYN ******S* Jan 22 17:30:46 61.152.169.216:2744 -> xxx.yyy.1.7:1433 SYN ******S* Jan 22 17:30:49 61.152.169.216:2745 -> xxx.yyy.1.8:1433 SYN ******S* Jan 22 17:30:49 61.152.169.216:2747 -> xxx.yyy.1.10:1433 SYN ******S* Jan 22 17:30:49 61.152.169.216:2750 -> xxx.yyy.1.13:1433 SYN ******S* Jan 22 17:30:49 61.152.169.216:2755 -> xxx.yyy.1.18:1433 SYN ******S* Jan 22 17:30:46 61.152.169.216:2756 -> xxx.yyy.1.19:1433 SYN ******S* [...] Jan 22 17:42:29 61.152.169.216:1386 -> xxx.yyy.255.244:1433 SYN ******S* Jan 22 17:42:29 61.152.169.216:1389 -> xxx.yyy.255.247:1433 SYN ******S* Jan 22 17:42:29 61.152.169.216:1387 -> xxx.yyy.255.245:1433 SYN ******S* Jan 22 17:42:29 61.152.169.216:1390 -> xxx.yyy.255.248:1433 SYN ******S* Jan 22 17:42:29 61.152.169.216:1394 -> xxx.yyy.255.252:1433 SYN ******S* Jan 22 17:42:29 61.152.169.216:1395 -> xxx.yyy.255.253:1433 SYN ******S* Jan 22 17:42:29 61.152.169.216:1393 -> xxx.yyy.255.251:1433 SYN ******S* Jan 22 17:42:29 61.152.169.216:1396 -> xxx.yyy.255.254:1433 SYN ******S* 46099 Jan 22 01:48:16 211.111.166.121:4067 -> xxx.yyy.1.1:4000 SYN ******S* Jan 22 01:48:15 211.111.166.121:4071 -> xxx.yyy.1.5:4000 SYN ******S* Jan 22 01:48:15 211.111.166.121:4073 -> xxx.yyy.1.6:4000 SYN ******S* Jan 22 01:48:15 211.111.166.121:4070 -> xxx.yyy.1.4:4000 SYN ******S* Jan 22 01:48:16 211.111.166.121:4069 -> xxx.yyy.1.3:4000 SYN ******S* Jan 22 01:48:17 211.111.166.121:4075 -> xxx.yyy.1.8:4000 SYN ******S* Jan 22 01:48:15 211.111.166.121:4079 -> xxx.yyy.1.12:4000 SYN ******S* Jan 22 01:48:15 211.111.166.121:4085 -> xxx.yyy.1.18:4000 SYN ******S* [...] Jan 22 01:52:21 211.111.166.121:2457 -> xxx.yyy.255.184:4000 SYN ******S* Jan 22 01:52:21 211.111.166.121:2484 -> xxx.yyy.255.211:4000 SYN ******S* Jan 22 01:52:21 211.111.166.121:2524 -> xxx.yyy.255.251:4000 SYN ******S* Jan 22 01:52:21 211.111.166.121:2477 -> xxx.yyy.255.204:4000 SYN ******S* Jan 22 01:52:21 211.111.166.121:2445 -> xxx.yyy.255.172:4000 SYN ******S* Jan 22 01:52:21 211.111.166.121:2461 -> xxx.yyy.255.188:4000 SYN ******S* Jan 22 01:52:21 211.111.166.121:2437 -> xxx.yyy.255.164:4000 SYN ******S* Jan 22 01:52:21 211.111.166.121:2513 -> xxx.yyy.255.240:4000 SYN ******S* Jan 22 01:52:21 211.111.166.121:2469 -> xxx.yyy.255.196:4000 SYN ******S* 45631 Jan 22 12:13:38 212.25.121.49:63257 -> xxx.yyy.1.1:1433 SYN ******S* Jan 22 12:13:38 212.25.121.49:63260 -> xxx.yyy.1.4:1433 SYN ******S* Jan 22 12:13:38 212.25.121.49:63262 -> xxx.yyy.1.6:1433 SYN ******S* Jan 22 12:13:38 212.25.121.49:63263 -> xxx.yyy.1.7:1433 SYN ******S* Jan 22 12:13:38 212.25.121.49:63264 -> xxx.yyy.1.8:1433 SYN ******S* Jan 22 12:13:38 212.25.121.49:63265 -> xxx.yyy.1.9:1433 SYN ******S* Jan 22 12:13:38 212.25.121.49:63268 -> xxx.yyy.1.12:1433 SYN ******S* Jan 22 12:13:38 212.25.121.49:63267 -> xxx.yyy.1.11:1433 SYN ******S* [...] Jan 22 12:34:25 212.25.121.49:63374 -> xxx.yyy.255.245:1433 SYN ******S* Jan 22 12:34:25 212.25.121.49:63376 -> xxx.yyy.255.247:1433 SYN ******S* Jan 22 12:34:25 212.25.121.49:63375 -> xxx.yyy.255.246:1433 SYN ******S* Jan 22 12:34:25 212.25.121.49:63377 -> xxx.yyy.255.248:1433 SYN ******S* Jan 22 12:34:25 212.25.121.49:63378 -> xxx.yyy.255.249:1433 SYN ******S* Jan 22 12:34:25 212.25.121.49:63381 -> xxx.yyy.255.252:1433 SYN ******S* Jan 22 12:34:25 212.25.121.49:63379 -> xxx.yyy.255.250:1433 SYN ******S* Jan 22 12:34:25 212.25.121.49:63382 -> xxx.yyy.255.253:1433 SYN ******S* 45423 Jan 22 02:03:52 64.230.7.87:3252 -> xxx.yyy.10.0:1433 SYN ******S* Jan 22 02:03:52 64.230.7.87:3257 -> xxx.yyy.10.1:1433 SYN ******S* Jan 22 02:03:52 64.230.7.87:3273 -> xxx.yyy.10.2:1433 SYN ******S* Jan 22 02:03:52 64.230.7.87:3282 -> xxx.yyy.10.3:1433 SYN ******S* Jan 22 02:03:52 64.230.7.87:3284 -> xxx.yyy.10.4:1433 SYN ******S* Jan 22 02:03:52 64.230.7.87:3285 -> xxx.yyy.10.5:1433 SYN ******S* Jan 22 02:03:52 64.230.7.87:3286 -> xxx.yyy.10.6:1433 SYN ******S* Jan 22 02:03:52 64.230.7.87:3287 -> xxx.yyy.10.7:1433 SYN ******S* [...] Jan 22 04:07:05 64.230.7.87:3072 -> xxx.yyy.146.238:1433 SYN ******S* Jan 22 04:07:05 64.230.7.87:3074 -> xxx.yyy.146.239:1433 SYN ******S* Jan 22 04:07:05 64.230.7.87:3076 -> xxx.yyy.146.240:1433 SYN ******S* Jan 22 04:07:05 64.230.7.87:3126 -> xxx.yyy.146.251:1433 SYN ******S* Jan 22 04:07:05 64.230.7.87:3083 -> xxx.yyy.146.241:1433 SYN ******S* Jan 22 04:07:05 64.230.7.87:3084 -> xxx.yyy.146.242:1433 SYN ******S* Jan 22 04:07:05 64.230.7.87:3128 -> xxx.yyy.146.252:1433 SYN ******S* Jan 22 04:07:06 64.230.7.87:3138 -> xxx.yyy.146.253:1433 SYN ******S* Jan 22 04:07:06 64.230.7.87:3091 -> xxx.yyy.146.243:1433 SYN ******S* 45415 Jan 22 05:54:28 69.128.112.6:1590 -> xxx.yyy.1.1:1433 SYN ******S* Jan 22 05:54:29 69.128.112.6:1626 -> xxx.yyy.1.2:1433 SYN ******S* Jan 22 05:54:30 69.128.112.6:1774 -> xxx.yyy.1.3:1433 SYN ******S* Jan 22 05:54:30 69.128.112.6:1775 -> xxx.yyy.1.4:1433 SYN ******S* Jan 22 05:54:30 69.128.112.6:1776 -> xxx.yyy.1.5:1433 SYN ******S* Jan 22 05:54:30 69.128.112.6:1777 -> xxx.yyy.1.6:1433 SYN ******S* Jan 22 05:54:30 69.128.112.6:1778 -> xxx.yyy.1.7:1433 SYN ******S* Jan 22 05:54:30 69.128.112.6:1779 -> xxx.yyy.1.8:1433 SYN ******S* [...] Jan 22 06:28:28 69.128.112.6:3335 -> xxx.yyy.255.247:1433 SYN ******S* Jan 22 06:28:28 69.128.112.6:3336 -> xxx.yyy.255.248:1433 SYN ******S* Jan 22 06:28:28 69.128.112.6:3337 -> xxx.yyy.255.249:1433 SYN ******S* Jan 22 06:28:28 69.128.112.6:3341 -> xxx.yyy.255.250:1433 SYN ******S* Jan 22 06:28:28 69.128.112.6:3342 -> xxx.yyy.255.251:1433 SYN ******S* Jan 22 06:28:28 69.128.112.6:3343 -> xxx.yyy.255.252:1433 SYN ******S* Jan 22 06:28:28 69.128.112.6:3344 -> xxx.yyy.255.253:1433 SYN ******S* Jan 22 06:28:28 69.128.112.6:3357 -> xxx.yyy.255.254:1433 SYN ******S* 44118 Jan 22 18:39:53 212.50.178.199:2276 -> xxx.yyy.1.1:6101 SYN ******S* Jan 22 18:39:50 212.50.178.199:2278 -> xxx.yyy.1.3:6101 SYN ******S* Jan 22 18:39:50 212.50.178.199:2279 -> xxx.yyy.1.4:6101 SYN ******S* Jan 22 18:39:50 212.50.178.199:2283 -> xxx.yyy.1.8:6101 SYN ******S* Jan 22 18:39:50 212.50.178.199:2281 -> xxx.yyy.1.6:6101 SYN ******S* Jan 22 18:39:50 212.50.178.199:2280 -> xxx.yyy.1.5:6101 SYN ******S* Jan 22 18:39:50 212.50.178.199:2282 -> xxx.yyy.1.7:6101 SYN ******S* Jan 22 18:39:50 212.50.178.199:2287 -> xxx.yyy.1.12:6101 SYN ******S* [...] Jan 22 18:43:38 212.50.178.199:1930 -> xxx.yyy.255.160:6101 SYN ******S* Jan 22 18:43:38 212.50.178.199:1972 -> xxx.yyy.255.202:6101 SYN ******S* Jan 22 18:43:38 212.50.178.199:2004 -> xxx.yyy.255.234:6101 SYN ******S* Jan 22 18:43:38 212.50.178.199:1991 -> xxx.yyy.255.221:6101 SYN ******S* Jan 22 18:43:38 212.50.178.199:1944 -> xxx.yyy.255.174:6101 SYN ******S* Jan 22 18:43:38 212.50.178.199:1915 -> xxx.yyy.255.145:6101 SYN ******S* Jan 22 18:43:38 212.50.178.199:1989 -> xxx.yyy.255.219:6101 SYN ******S* Jan 22 18:43:38 212.50.178.199:2029 -> xxx.yyy.255.246:6101 SYN ******S* 42207 Jan 22 00:00:04 61.50.171.34:4547 -> xxx.yyy.185.153:1433 SYN ******S* Jan 22 00:00:04 61.50.171.34:4428 -> xxx.yyy.185.121:1433 SYN ******S* Jan 22 00:00:04 61.50.171.34:4432 -> xxx.yyy.185.122:1433 SYN ******S* Jan 22 00:00:04 61.50.171.34:4576 -> xxx.yyy.185.156:1433 SYN ******S* Jan 22 00:00:04 61.50.171.34:4438 -> xxx.yyy.185.124:1433 SYN ******S* Jan 22 00:00:04 61.50.171.34:4577 -> xxx.yyy.185.157:1433 SYN ******S* Jan 22 00:00:05 61.50.171.34:4581 -> xxx.yyy.185.159:1433 SYN ******S* Jan 22 00:00:05 61.50.171.34:4596 -> xxx.yyy.185.160:1433 SYN ******S* [...] Jan 22 01:03:16 61.50.171.34:3497 -> xxx.yyy.255.247:1433 SYN ******S* Jan 22 01:03:16 61.50.171.34:3501 -> xxx.yyy.255.248:1433 SYN ******S* Jan 22 01:03:16 61.50.171.34:3512 -> xxx.yyy.255.250:1433 SYN ******S* Jan 22 01:03:16 61.50.171.34:3513 -> xxx.yyy.255.251:1433 SYN ******S* Jan 22 01:03:16 61.50.171.34:3511 -> xxx.yyy.255.249:1433 SYN ******S* Jan 22 01:03:16 61.50.171.34:3516 -> xxx.yyy.255.252:1433 SYN ******S* Jan 22 01:03:17 61.50.171.34:3524 -> xxx.yyy.255.253:1433 SYN ******S* Jan 22 01:03:17 61.50.171.34:3527 -> xxx.yyy.255.254:1433 SYN ******S* 39855 Jan 22 17:35:22 146.164.16.214:4033 -> xxx.yyy.1.3:3306 SYN ******S* Jan 22 17:35:22 146.164.16.214:4032 -> xxx.yyy.1.2:3306 SYN ******S* Jan 22 17:35:20 146.164.16.214:4034 -> xxx.yyy.1.4:3306 SYN ******S* Jan 22 17:35:20 146.164.16.214:4037 -> xxx.yyy.1.7:3306 SYN ******S* Jan 22 17:35:22 146.164.16.214:4031 -> xxx.yyy.1.1:3306 SYN ******S* Jan 22 17:35:21 146.164.16.214:4039 -> xxx.yyy.1.9:3306 SYN ******S* Jan 22 17:35:20 146.164.16.214:4040 -> xxx.yyy.1.10:3306 SYN ******S* Jan 22 17:35:22 146.164.16.214:4046 -> xxx.yyy.1.16:3306 SYN ******S* [...] Jan 22 17:39:25 146.164.16.214:4932 -> xxx.yyy.255.206:3306 SYN ******S* Jan 22 17:39:25 146.164.16.214:4935 -> xxx.yyy.255.209:3306 SYN ******S* Jan 22 17:39:25 146.164.16.214:4975 -> xxx.yyy.255.247:3306 SYN ******S* Jan 22 17:39:25 146.164.16.214:4896 -> xxx.yyy.255.179:3306 SYN ******S* Jan 22 17:39:25 146.164.16.214:4979 -> xxx.yyy.255.251:3306 SYN ******S* Jan 22 17:39:25 146.164.16.214:4980 -> xxx.yyy.255.252:3306 SYN ******S* Jan 22 17:39:25 146.164.16.214:4982 -> xxx.yyy.255.254:3306 SYN ******S* Jan 22 17:39:25 146.164.16.214:4981 -> xxx.yyy.255.253:3306 SYN ******S* 39528 Jan 22 13:36:27 211.53.183.250:3063 -> xxx.yyy.1.2:139 SYN ******S* Jan 22 13:36:33 211.53.183.250:3066 -> xxx.yyy.1.3:139 SYN ******S* Jan 22 13:36:33 211.53.183.250:3108 -> xxx.yyy.1.9:139 SYN ******S* Jan 22 13:36:30 211.53.183.250:3068 -> xxx.yyy.1.5:139 SYN ******S* Jan 22 13:36:33 211.53.183.250:3106 -> xxx.yyy.1.7:139 SYN ******S* Jan 22 13:36:33 211.53.183.250:3109 -> xxx.yyy.1.10:139 SYN ******S* Jan 22 13:36:33 211.53.183.250:3107 -> xxx.yyy.1.8:139 SYN ******S* Jan 22 13:36:30 211.53.183.250:3119 -> xxx.yyy.1.20:139 SYN ******S* [...] Jan 22 13:45:21 211.53.183.250:1860 -> xxx.yyy.255.223:139 SYN ******S* Jan 22 13:45:21 211.53.183.250:1854 -> xxx.yyy.255.217:139 SYN ******S* Jan 22 13:45:21 211.53.183.250:1835 -> xxx.yyy.255.198:139 SYN ******S* Jan 22 13:45:21 211.53.183.250:1825 -> xxx.yyy.255.188:139 SYN ******S* Jan 22 13:45:21 211.53.183.250:1806 -> xxx.yyy.255.169:139 SYN ******S* Jan 22 13:45:21 211.53.183.250:1846 -> xxx.yyy.255.209:139 SYN ******S* Jan 22 13:45:21 211.53.183.250:1878 -> xxx.yyy.255.241:139 SYN ******S* Jan 22 13:45:21 211.53.183.250:1889 -> xxx.yyy.255.252:139 SYN ******S* Jan 22 13:45:21 211.53.183.250:1891 -> xxx.yyy.255.254:139 SYN ******S* 35699 Jan 22 23:23:04 211.63.95.57:3544 -> xxx.yyy.1.1:3306 SYN ******S* Jan 22 23:23:04 211.63.95.57:3548 -> xxx.yyy.1.5:3306 SYN ******S* Jan 22 23:23:07 211.63.95.57:3549 -> xxx.yyy.1.6:3306 SYN ******S* Jan 22 23:23:04 211.63.95.57:3545 -> xxx.yyy.1.2:3306 SYN ******S* Jan 22 23:23:05 211.63.95.57:3552 -> xxx.yyy.1.9:3306 SYN ******S* Jan 22 23:23:07 211.63.95.57:3556 -> xxx.yyy.1.13:3306 SYN ******S* Jan 22 23:23:04 211.63.95.57:3554 -> xxx.yyy.1.11:3306 SYN ******S* Jan 22 23:23:04 211.63.95.57:3551 -> xxx.yyy.1.8:3306 SYN ******S* [...] Jan 22 23:27:16 211.63.95.57:1613 -> xxx.yyy.255.242:3306 SYN ******S* Jan 22 23:27:16 211.63.95.57:1616 -> xxx.yyy.255.245:3306 SYN ******S* Jan 22 23:27:16 211.63.95.57:1620 -> xxx.yyy.255.249:3306 SYN ******S* Jan 22 23:27:16 211.63.95.57:1623 -> xxx.yyy.255.252:3306 SYN ******S* Jan 22 23:27:16 211.63.95.57:1617 -> xxx.yyy.255.246:3306 SYN ******S* Jan 22 23:27:16 211.63.95.57:1614 -> xxx.yyy.255.243:3306 SYN ******S* Jan 22 23:27:16 211.63.95.57:1610 -> xxx.yyy.255.239:3306 SYN ******S* Jan 22 23:27:16 211.63.95.57:1618 -> xxx.yyy.255.247:3306 SYN ******S* 28983 Jan 22 16:57:12 131.211.212.8:4402 -> xxx.yyy.1.1:3306 SYN ******S* Jan 22 16:57:12 131.211.212.8:4403 -> xxx.yyy.1.2:3306 SYN ******S* Jan 22 16:57:12 131.211.212.8:4415 -> xxx.yyy.1.5:3306 SYN ******S* Jan 22 16:57:12 131.211.212.8:4449 -> xxx.yyy.1.12:3306 SYN ******S* Jan 22 16:57:12 131.211.212.8:4452 -> xxx.yyy.1.13:3306 SYN ******S* Jan 22 16:57:12 131.211.212.8:4459 -> xxx.yyy.1.15:3306 SYN ******S* Jan 22 16:57:12 131.211.212.8:4499 -> xxx.yyy.1.23:3306 SYN ******S* Jan 22 16:57:12 131.211.212.8:4509 -> xxx.yyy.1.24:3306 SYN ******S* [...] Jan 22 17:14:08 131.211.212.8:1315 -> xxx.yyy.255.234:3306 SYN ******S* Jan 22 17:14:08 131.211.212.8:1321 -> xxx.yyy.255.237:3306 SYN ******S* Jan 22 17:14:08 131.211.212.8:1325 -> xxx.yyy.255.239:3306 SYN ******S* Jan 22 17:14:08 131.211.212.8:1327 -> xxx.yyy.255.240:3306 SYN ******S* Jan 22 17:14:08 131.211.212.8:1329 -> xxx.yyy.255.241:3306 SYN ******S* Jan 22 17:14:08 131.211.212.8:1335 -> xxx.yyy.255.244:3306 SYN ******S* Jan 22 17:14:08 131.211.212.8:1337 -> xxx.yyy.255.245:3306 SYN ******S* Jan 22 17:14:09 131.211.212.8:1353 -> xxx.yyy.255.253:3306 SYN ******S* Jan 22 17:14:09 131.211.212.8:1355 -> xxx.yyy.255.254:3306 SYN ******S* 28272 [...] 24119 [...] 21899 Jan 22 22:38:26 82.42.41.69:3102 -> xxx.yyy.1.0:1433 SYN ******S* Jan 22 22:38:26 82.42.41.69:3104 -> xxx.yyy.1.3:1433 SYN ******S* Jan 22 22:38:26 82.42.41.69:3106 -> xxx.yyy.1.1:1433 SYN ******S* Jan 22 22:38:26 82.42.41.69:3108 -> xxx.yyy.1.4:1433 SYN ******S* Jan 22 22:38:26 82.42.41.69:3111 -> xxx.yyy.1.5:1433 SYN ******S* Jan 22 22:38:29 82.42.41.69:3124 -> xxx.yyy.1.11:1433 SYN ******S* Jan 22 22:38:29 82.42.41.69:3120 -> xxx.yyy.1.10:1433 SYN ******S* Jan 22 22:38:29 82.42.41.69:3123 -> xxx.yyy.1.9:1433 SYN ******S* [...] Jan 23 00:00:01 82.42.41.69:3426 -> xxx.yyy.91.193:1433 SYN ******S* Jan 23 00:00:01 82.42.41.69:3450 -> xxx.yyy.91.205:1433 SYN ******S* Jan 23 00:00:01 82.42.41.69:3449 -> xxx.yyy.91.204:1433 SYN ******S* Jan 23 00:00:01 82.42.41.69:3448 -> xxx.yyy.91.203:1433 SYN ******S* Jan 23 00:00:01 82.42.41.69:3447 -> xxx.yyy.91.202:1433 SYN ******S* Jan 23 00:00:01 82.42.41.69:3445 -> xxx.yyy.91.201:1433 SYN ******S* Jan 23 00:00:01 82.42.41.69:3443 -> xxx.yyy.91.200:1433 SYN ******S* Jan 23 00:00:01 82.42.41.69:3453 -> xxx.yyy.91.207:1433 SYN ******S* 21823 Jan 22 10:15:15 211.141.89.73:43941 -> xxx.yyy.1.1:22 SYN ******S* Jan 22 10:15:15 211.141.89.73:43943 -> xxx.yyy.1.3:22 SYN ******S* Jan 22 10:15:15 211.141.89.73:43944 -> xxx.yyy.1.4:22 SYN ******S* Jan 22 10:15:15 211.141.89.73:43945 -> xxx.yyy.1.5:22 SYN ******S* Jan 22 10:15:15 211.141.89.73:43940 -> xxx.yyy.1.0:22 SYN ******S* Jan 22 10:15:15 211.141.89.73:43942 -> xxx.yyy.1.2:22 SYN ******S* Jan 22 10:15:15 211.141.89.73:43946 -> xxx.yyy.1.6:22 SYN ******S* Jan 22 10:15:15 211.141.89.73:43949 -> xxx.yyy.1.9:22 SYN ******S* [...] Jan 22 10:37:42 211.141.89.73:40856 -> xxx.yyy.206.216:22 SYN ******S* Jan 22 10:37:42 211.141.89.73:40857 -> xxx.yyy.229.98:22 SYN ******S* Jan 22 10:37:43 211.141.89.73:41755 -> xxx.yyy.140.99:22 SYN ******S* Jan 22 10:37:43 211.141.89.73:42154 -> xxx.yyy.230.40:22 SYN ******S* Jan 22 10:37:46 211.141.89.73:45234 -> xxx.yyy.232.147:22 SYN ******S* Jan 22 10:37:46 211.141.89.73:46044 -> xxx.yyy.248.18:22 SYN ******S* Jan 22 10:37:48 211.141.89.73:51921 -> xxx.yyy.229.98:22 SYN ******S* Jan 22 10:37:50 211.141.89.73:56739 -> xxx.yyy.230.40:22 SYN ******S* 20071 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions