[LOGS] Summary of large-scale portscanning detects
[email protected] Tue, 01 Feb 2005 08:43:45 -0600 (CST)
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Jan 31 00:00:07 61.186.94.251:1687 -> xxx.yyy.131.249:6129 SYN ******S* Jan 31 00:00:07 61.186.94.251:1689 -> xxx.yyy.131.249:3410 SYN ******S* Jan 31 00:00:07 61.186.94.251:1690 -> xxx.yyy.131.249:5554 SYN ******S* Jan 31 00:00:07 61.186.94.251:1685 -> xxx.yyy.131.249:1025 SYN ******S* Jan 31 00:00:07 61.186.94.251:1702 -> xxx.yyy.208.178:1025 SYN ******S* Jan 31 00:00:07 61.186.94.251:1705 -> xxx.yyy.208.178:6129 SYN ******S* Jan 31 00:00:07 61.186.94.251:1707 -> xxx.yyy.208.178:3410 SYN ******S* Jan 31 00:00:07 61.186.94.251:1698 -> xxx.yyy.212.239:1025 SYN ******S* [...] Jan 31 17:09:28 61.186.94.251:3504 -> xxx.yyy.212.22:1025 SYN ******S* Jan 31 17:09:29 61.186.94.251:3554 -> xxx.yyy.212.185:6129 SYN ******S* Jan 31 17:09:29 61.186.94.251:3559 -> xxx.yyy.212.185:5554 SYN ******S* Jan 31 17:09:30 61.186.94.251:3593 -> xxx.yyy.205.55:1025 SYN ******S* Jan 31 17:09:30 61.186.94.251:3616 -> xxx.yyy.233.168:1025 SYN ******S* Jan 31 17:09:32 61.186.94.251:3669 -> xxx.yyy.212.47:1025 SYN ******S* Jan 31 17:09:32 61.186.94.251:3671 -> xxx.yyy.212.169:1025 SYN ******S* Jan 31 17:09:33 61.186.94.251:3729 -> xxx.yyy.212.210:1025 SYN ******S* Jan 31 17:09:33 61.186.94.251:3754 -> xxx.yyy.224.126:3410 SYN ******S* 897937 [...] 77436 Jan 31 09:15:57 199.243.67.162:30041 -> xxx.yyy.1.3:1433 SYN ******S* Jan 31 09:15:57 199.243.67.162:30040 -> xxx.yyy.1.2:1433 SYN ******S* Jan 31 09:15:57 199.243.67.162:30039 -> xxx.yyy.1.1:1433 SYN ******S* Jan 31 09:15:54 199.243.67.162:30043 -> xxx.yyy.1.5:1433 SYN ******S* Jan 31 09:15:54 199.243.67.162:30044 -> xxx.yyy.1.6:1433 SYN ******S* Jan 31 09:15:54 199.243.67.162:30046 -> xxx.yyy.1.8:1433 SYN ******S* Jan 31 09:15:54 199.243.67.162:30047 -> xxx.yyy.1.9:1433 SYN ******S* Jan 31 09:15:54 199.243.67.162:30049 -> xxx.yyy.1.11:1433 SYN ******S* [...] Jan 31 11:11:06 199.243.67.162:53262 -> xxx.yyy.255.236:1433 SYN ******S* Jan 31 11:11:06 199.243.67.162:51963 -> xxx.yyy.255.238:1433 SYN ******S* Jan 31 11:11:06 199.243.67.162:51966 -> xxx.yyy.255.240:1433 SYN ******S* Jan 31 11:11:06 199.243.67.162:62364 -> xxx.yyy.255.243:1433 SYN ******S* Jan 31 11:11:06 199.243.67.162:4979 -> xxx.yyy.255.244:1433 SYN ******S* Jan 31 11:11:06 199.243.67.162:51978 -> xxx.yyy.255.245:1433 SYN ******S* Jan 31 11:11:07 199.243.67.162:51979 -> xxx.yyy.255.246:1433 SYN ******S* Jan 31 11:11:07 199.243.67.162:60686 -> xxx.yyy.255.248:1433 SYN ******S* Jan 31 11:11:07 199.243.67.162:51988 -> xxx.yyy.255.251:1433 SYN ******S* 63930 Jan 31 07:53:58 80.80.19.6:1368 -> xxx.yyy.1.1:3306 SYN ******S* Jan 31 07:53:55 80.80.19.6:1370 -> xxx.yyy.1.2:3306 SYN ******S* Jan 31 07:53:55 80.80.19.6:1372 -> xxx.yyy.1.3:3306 SYN ******S* Jan 31 07:53:56 80.80.19.6:1374 -> xxx.yyy.1.4:3306 SYN ******S* Jan 31 07:53:58 80.80.19.6:1376 -> xxx.yyy.1.5:3306 SYN ******S* Jan 31 07:53:56 80.80.19.6:1378 -> xxx.yyy.1.6:3306 SYN ******S* Jan 31 07:53:56 80.80.19.6:1380 -> xxx.yyy.1.7:3306 SYN ******S* Jan 31 07:53:56 80.80.19.6:1382 -> xxx.yyy.1.8:3306 SYN ******S* [...] Jan 31 08:05:50 80.80.19.6:1344 -> xxx.yyy.255.237:3306 SYN ******S* Jan 31 08:05:50 80.80.19.6:1356 -> xxx.yyy.255.243:3306 SYN ******S* Jan 31 08:05:50 80.80.19.6:1364 -> xxx.yyy.255.247:3306 SYN ******S* Jan 31 08:05:50 80.80.19.6:1370 -> xxx.yyy.255.250:3306 SYN ******S* Jan 31 08:05:50 80.80.19.6:1372 -> xxx.yyy.255.251:3306 SYN ******S* Jan 31 08:05:50 80.80.19.6:1368 -> xxx.yyy.255.249:3306 SYN ******S* Jan 31 08:05:50 80.80.19.6:1378 -> xxx.yyy.255.254:3306 SYN ******S* Jan 31 08:05:50 80.80.19.6:1374 -> xxx.yyy.255.252:3306 SYN ******S* 59860 Jan 31 00:05:25 61.52.95.6:2486 -> xxx.yyy.104.0:1433 SYN ******S* Jan 31 00:05:25 61.52.95.6:2509 -> xxx.yyy.104.3:1433 SYN ******S* Jan 31 00:05:26 61.52.95.6:2511 -> xxx.yyy.104.4:1433 SYN ******S* Jan 31 00:05:23 61.52.95.6:2527 -> xxx.yyy.104.6:1433 SYN ******S* Jan 31 00:05:26 61.52.95.6:2546 -> xxx.yyy.104.9:1433 SYN ******S* Jan 31 00:05:24 61.52.95.6:2585 -> xxx.yyy.104.14:1433 SYN ******S* Jan 31 00:05:24 61.52.95.6:2606 -> xxx.yyy.104.16:1433 SYN ******S* Jan 31 00:05:24 61.52.95.6:2621 -> xxx.yyy.104.21:1433 SYN ******S* [...] Jan 31 02:21:42 61.52.95.6:3843 -> xxx.yyy.255.245:1433 SYN ******S* Jan 31 02:21:42 61.52.95.6:3841 -> xxx.yyy.255.244:1433 SYN ******S* Jan 31 02:21:42 61.52.95.6:3847 -> xxx.yyy.255.246:1433 SYN ******S* Jan 31 02:21:43 61.52.95.6:3858 -> xxx.yyy.255.250:1433 SYN ******S* Jan 31 02:21:43 61.52.95.6:3856 -> xxx.yyy.255.248:1433 SYN ******S* Jan 31 02:21:43 61.52.95.6:3860 -> xxx.yyy.255.251:1433 SYN ******S* Jan 31 02:21:43 61.52.95.6:3868 -> xxx.yyy.255.252:1433 SYN ******S* Jan 31 02:21:44 61.52.95.6:3874 -> xxx.yyy.255.254:1433 SYN ******S* 57113 Jan 31 14:15:25 134.129.138.197:1720 -> xxx.yyy.1.1:6129 SYN ******S* Jan 31 14:15:26 134.129.138.197:1724 -> xxx.yyy.1.5:6129 SYN ******S* Jan 31 14:15:26 134.129.138.197:1725 -> xxx.yyy.1.6:6129 SYN ******S* Jan 31 14:15:26 134.129.138.197:1726 -> xxx.yyy.1.7:6129 SYN ******S* Jan 31 14:15:27 134.129.138.197:1733 -> xxx.yyy.1.14:6129 SYN ******S* Jan 31 14:15:27 134.129.138.197:1736 -> xxx.yyy.1.17:6129 SYN ******S* Jan 31 14:15:27 134.129.138.197:1738 -> xxx.yyy.1.19:6129 SYN ******S* Jan 31 14:15:26 134.129.138.197:1741 -> xxx.yyy.1.22:6129 SYN ******S* [...] Jan 31 14:38:03 134.129.138.197:3236 -> xxx.yyy.255.243:6129 SYN ******S* Jan 31 14:38:03 134.129.138.197:3235 -> xxx.yyy.255.242:6129 SYN ******S* Jan 31 14:38:03 134.129.138.197:3233 -> xxx.yyy.255.240:6129 SYN ******S* Jan 31 14:38:03 134.129.138.197:3234 -> xxx.yyy.255.241:6129 SYN ******S* Jan 31 14:38:03 134.129.138.197:3247 -> xxx.yyy.255.254:6129 SYN ******S* Jan 31 14:38:03 134.129.138.197:3245 -> xxx.yyy.255.252:6129 SYN ******S* Jan 31 14:38:03 134.129.138.197:3246 -> xxx.yyy.255.253:6129 SYN ******S* Jan 31 14:38:03 134.129.138.197:3243 -> xxx.yyy.255.250:6129 SYN ******S* Jan 31 14:38:03 134.129.138.197:3244 -> xxx.yyy.255.251:6129 SYN ******S* 46507 Jan 31 02:37:10 221.153.190.120:4863 -> xxx.yyy.1.1:4899 SYN ******S* Jan 31 02:37:10 221.153.190.120:4864 -> xxx.yyy.1.2:4899 SYN ******S* Jan 31 02:37:09 221.153.190.120:4869 -> xxx.yyy.1.6:4899 SYN ******S* Jan 31 02:37:09 221.153.190.120:4866 -> xxx.yyy.1.4:4899 SYN ******S* Jan 31 02:37:10 221.153.190.120:4865 -> xxx.yyy.1.3:4899 SYN ******S* Jan 31 02:37:09 221.153.190.120:4868 -> xxx.yyy.1.5:4899 SYN ******S* Jan 31 02:37:10 221.153.190.120:4872 -> xxx.yyy.1.9:4899 SYN ******S* Jan 31 02:37:09 221.153.190.120:4870 -> xxx.yyy.1.7:4899 SYN ******S* [...] Jan 31 02:42:18 221.153.190.120:1595 -> xxx.yyy.255.4:4899 SYN ******S* Jan 31 02:42:18 221.153.190.120:1597 -> xxx.yyy.255.6:4899 SYN ******S* Jan 31 02:42:18 221.153.190.120:1599 -> xxx.yyy.255.8:4899 SYN ******S* Jan 31 02:42:18 221.153.190.120:1600 -> xxx.yyy.255.9:4899 SYN ******S* Jan 31 02:42:18 221.153.190.120:1602 -> xxx.yyy.255.11:4899 SYN ******S* Jan 31 02:42:18 221.153.190.120:1601 -> xxx.yyy.255.10:4899 SYN ******S* Jan 31 02:42:18 221.153.190.120:1598 -> xxx.yyy.255.7:4899 SYN ******S* Jan 31 02:42:18 221.153.190.120:1594 -> xxx.yyy.255.3:4899 SYN ******S* Jan 31 02:42:19 221.153.190.120:1839 -> xxx.yyy.255.247:4899 SYN ******S* 43162 Jan 31 18:14:00 195.159.72.70:3626 -> xxx.yyy.1.1:6101 SYN ******S* Jan 31 18:14:00 195.159.72.70:3627 -> xxx.yyy.1.2:6101 SYN ******S* Jan 31 18:13:57 195.159.72.70:3628 -> xxx.yyy.1.3:6101 SYN ******S* Jan 31 18:14:00 195.159.72.70:3632 -> xxx.yyy.1.7:6101 SYN ******S* Jan 31 18:13:57 195.159.72.70:3633 -> xxx.yyy.1.8:6101 SYN ******S* Jan 31 18:13:57 195.159.72.70:3634 -> xxx.yyy.1.9:6101 SYN ******S* Jan 31 18:13:57 195.159.72.70:3636 -> xxx.yyy.1.11:6101 SYN ******S* Jan 31 18:14:00 195.159.72.70:3637 -> xxx.yyy.1.12:6101 SYN ******S* [...] Jan 31 18:38:04 195.159.72.70:4051 -> xxx.yyy.zzz.245:6101 SYN ******S* Jan 31 18:38:04 195.159.72.70:4044 -> xxx.yyy.zzz.238:6101 SYN ******S* Jan 31 18:38:04 195.159.72.70:4058 -> xxx.yyy.zzz.252:6101 SYN ******S* Jan 31 18:38:04 195.159.72.70:4057 -> xxx.yyy.zzz.251:6101 SYN ******S* Jan 31 18:38:04 195.159.72.70:4055 -> xxx.yyy.zzz.249:6101 SYN ******S* Jan 31 18:38:04 195.159.72.70:4059 -> xxx.yyy.zzz.253:6101 SYN ******S* Jan 31 18:38:04 195.159.72.70:4056 -> xxx.yyy.zzz.250:6101 SYN ******S* Jan 31 18:38:04 195.159.72.70:4060 -> xxx.yyy.zzz.254:6101 SYN ******S* Jan 31 18:38:04 195.159.72.70:4054 -> xxx.yyy.zzz.248:6101 SYN ******S* 42425 Jan 31 00:46:32 148.231.149.134:3343 -> xxx.yyy.1.1:3306 SYN ******S* Jan 31 00:46:32 148.231.149.134:3344 -> xxx.yyy.1.2:3306 SYN ******S* Jan 31 00:46:32 148.231.149.134:3350 -> xxx.yyy.1.8:3306 SYN ******S* Jan 31 00:46:29 148.231.149.134:3353 -> xxx.yyy.1.11:3306 SYN ******S* Jan 31 00:46:32 148.231.149.134:3354 -> xxx.yyy.1.12:3306 SYN ******S* Jan 31 00:46:29 148.231.149.134:3357 -> xxx.yyy.1.15:3306 SYN ******S* Jan 31 00:46:32 148.231.149.134:3363 -> xxx.yyy.1.21:3306 SYN ******S* Jan 31 00:46:32 148.231.149.134:3364 -> xxx.yyy.1.22:3306 SYN ******S* [...] Jan 31 00:50:30 148.231.149.134:1543 -> xxx.yyy.255.236:3306 SYN ******S* Jan 31 00:50:30 148.231.149.134:1553 -> xxx.yyy.255.246:3306 SYN ******S* Jan 31 00:50:30 148.231.149.134:1550 -> xxx.yyy.255.243:3306 SYN ******S* Jan 31 00:50:30 148.231.149.134:1552 -> xxx.yyy.255.245:3306 SYN ******S* Jan 31 00:50:30 148.231.149.134:1547 -> xxx.yyy.255.240:3306 SYN ******S* Jan 31 00:50:30 148.231.149.134:1557 -> xxx.yyy.255.250:3306 SYN ******S* Jan 31 00:50:30 148.231.149.134:1560 -> xxx.yyy.255.253:3306 SYN ******S* Jan 31 00:50:30 148.231.149.134:1544 -> xxx.yyy.255.237:3306 SYN ******S* Jan 31 00:50:30 148.231.149.134:1554 -> xxx.yyy.255.247:3306 SYN ******S* 38894 Jan 31 11:12:09 196.41.25.162:62324 -> xxx.yyy.1.1:3306 SYN ******S* Jan 31 11:12:09 196.41.25.162:62327 -> xxx.yyy.1.4:3306 SYN ******S* Jan 31 11:12:06 196.41.25.162:62328 -> xxx.yyy.1.5:3306 SYN ******S* Jan 31 11:12:06 196.41.25.162:62332 -> xxx.yyy.1.9:3306 SYN ******S* Jan 31 11:12:09 196.41.25.162:62334 -> xxx.yyy.1.11:3306 SYN ******S* Jan 31 11:12:09 196.41.25.162:62336 -> xxx.yyy.1.13:3306 SYN ******S* Jan 31 11:12:06 196.41.25.162:62338 -> xxx.yyy.1.15:3306 SYN ******S* Jan 31 11:12:09 196.41.25.162:62340 -> xxx.yyy.1.17:3306 SYN ******S* [...] Jan 31 11:23:48 196.41.25.162:61849 -> xxx.yyy.255.231:3306 SYN ******S* Jan 31 11:23:48 196.41.25.162:61846 -> xxx.yyy.255.228:3306 SYN ******S* Jan 31 11:23:48 196.41.25.162:61856 -> xxx.yyy.255.238:3306 SYN ******S* Jan 31 11:23:48 196.41.25.162:61853 -> xxx.yyy.255.235:3306 SYN ******S* Jan 31 11:23:48 196.41.25.162:61855 -> xxx.yyy.255.237:3306 SYN ******S* Jan 31 11:23:48 196.41.25.162:61861 -> xxx.yyy.255.243:3306 SYN ******S* Jan 31 11:23:48 196.41.25.162:61871 -> xxx.yyy.255.253:3306 SYN ******S* Jan 31 11:23:48 196.41.25.162:61870 -> xxx.yyy.255.252:3306 SYN ******S* 33624 Jan 31 15:43:24 64.105.112.37:2821 -> xxx.yyy.1.2:139 SYN ******S* Jan 31 15:43:24 64.105.112.37:2824 -> xxx.yyy.1.3:139 SYN ******S* Jan 31 15:43:24 64.105.112.37:2842 -> xxx.yyy.1.9:139 SYN ******S* Jan 31 15:43:24 64.105.112.37:2851 -> xxx.yyy.1.12:139 SYN ******S* Jan 31 15:43:24 64.105.112.37:2857 -> xxx.yyy.1.14:139 SYN ******S* Jan 31 15:43:24 64.105.112.37:2872 -> xxx.yyy.1.19:139 SYN ******S* Jan 31 15:43:24 64.105.112.37:2875 -> xxx.yyy.1.20:139 SYN ******S* Jan 31 15:43:24 64.105.112.37:2878 -> xxx.yyy.1.21:139 SYN ******S* [...] Jan 31 15:55:05 64.105.112.37:4619 -> xxx.yyy.255.219:139 SYN ******S* Jan 31 15:55:05 64.105.112.37:4630 -> xxx.yyy.255.221:139 SYN ******S* Jan 31 15:55:05 64.105.112.37:4644 -> xxx.yyy.255.224:139 SYN ******S* Jan 31 15:55:05 64.105.112.37:4694 -> xxx.yyy.255.231:139 SYN ******S* Jan 31 15:55:05 64.105.112.37:4710 -> xxx.yyy.255.233:139 SYN ******S* Jan 31 15:55:05 64.105.112.37:4727 -> xxx.yyy.255.237:139 SYN ******S* Jan 31 15:55:05 64.105.112.37:4797 -> xxx.yyy.255.248:139 SYN ******S* Jan 31 15:55:05 64.105.112.37:4822 -> xxx.yyy.255.253:139 SYN ******S* 33251 Jan 31 16:00:29 216.141.160.82:2574 -> xxx.yyy.1.4:4000 SYN ******S* Jan 31 16:00:29 216.141.160.82:2575 -> xxx.yyy.1.5:4000 SYN ******S* Jan 31 16:00:29 216.141.160.82:2577 -> xxx.yyy.1.7:4000 SYN ******S* Jan 31 16:00:29 216.141.160.82:2580 -> xxx.yyy.1.10:4000 SYN ******S* Jan 31 16:00:30 216.141.160.82:2584 -> xxx.yyy.1.14:4000 SYN ******S* Jan 31 16:00:29 216.141.160.82:2586 -> xxx.yyy.1.16:4000 SYN ******S* Jan 31 16:00:30 216.141.160.82:2587 -> xxx.yyy.1.17:4000 SYN ******S* Jan 31 16:00:29 216.141.160.82:2589 -> xxx.yyy.1.19:4000 SYN ******S* [...] Jan 31 16:11:26 216.141.160.82:1649 -> xxx.yyy.255.223:4000 SYN ******S* Jan 31 16:11:26 216.141.160.82:1681 -> xxx.yyy.255.235:4000 SYN ******S* Jan 31 16:11:26 216.141.160.82:1659 -> xxx.yyy.255.233:4000 SYN ******S* Jan 31 16:11:26 216.141.160.82:1690 -> xxx.yyy.255.244:4000 SYN ******S* Jan 31 16:11:26 216.141.160.82:1695 -> xxx.yyy.255.249:4000 SYN ******S* Jan 31 16:11:26 216.141.160.82:1692 -> xxx.yyy.255.246:4000 SYN ******S* Jan 31 16:11:27 216.141.160.82:1700 -> xxx.yyy.255.254:4000 SYN ******S* Jan 31 16:11:27 216.141.160.82:1699 -> xxx.yyy.255.253:4000 SYN ******S* 31374 Jan 31 08:27:59 205.118.70.10:2978 -> xxx.yyy.10.1:6101 SYN ******S* Jan 31 08:27:59 205.118.70.10:2979 -> xxx.yyy.10.2:6101 SYN ******S* Jan 31 08:27:59 205.118.70.10:2980 -> xxx.yyy.10.3:6101 SYN ******S* Jan 31 08:27:59 205.118.70.10:2981 -> xxx.yyy.10.4:6101 SYN ******S* Jan 31 08:27:59 205.118.70.10:2982 -> xxx.yyy.10.5:6101 SYN ******S* Jan 31 08:27:56 205.118.70.10:2983 -> xxx.yyy.10.6:6101 SYN ******S* Jan 31 08:27:59 205.118.70.10:2985 -> xxx.yyy.10.8:6101 SYN ******S* Jan 31 08:27:56 205.118.70.10:2986 -> xxx.yyy.10.9:6101 SYN ******S* [...] Jan 31 08:39:04 205.118.70.10:2366 -> xxx.yyy.253.4:6101 SYN ******S* Jan 31 08:39:05 205.118.70.10:2390 -> xxx.yyy.253.28:6101 SYN ******S* Jan 31 08:39:05 205.118.70.10:2392 -> xxx.yyy.253.30:6101 SYN ******S* Jan 31 08:39:05 205.118.70.10:2388 -> xxx.yyy.253.26:6101 SYN ******S* Jan 31 08:39:05 205.118.70.10:2387 -> xxx.yyy.253.25:6101 SYN ******S* Jan 31 08:39:05 205.118.70.10:2393 -> xxx.yyy.253.31:6101 SYN ******S* Jan 31 08:39:05 205.118.70.10:2389 -> xxx.yyy.253.27:6101 SYN ******S* Jan 31 08:39:05 205.118.70.10:2394 -> xxx.yyy.253.32:6101 SYN ******S* Jan 31 08:39:05 205.118.70.10:2391 -> xxx.yyy.253.29:6101 SYN ******S* 28487 Jan 31 03:25:25 82.138.243.89:3020 -> xxx.yyy.1.0:6101 SYN ******S* Jan 31 03:25:25 82.138.243.89:3022 -> xxx.yyy.1.2:6101 SYN ******S* Jan 31 03:25:25 82.138.243.89:3021 -> xxx.yyy.1.1:6101 SYN ******S* Jan 31 03:25:25 82.138.243.89:3026 -> xxx.yyy.1.6:6101 SYN ******S* Jan 31 03:25:25 82.138.243.89:3025 -> xxx.yyy.1.5:6101 SYN ******S* Jan 31 03:25:25 82.138.243.89:3023 -> xxx.yyy.1.3:6101 SYN ******S* Jan 31 03:25:25 82.138.243.89:3028 -> xxx.yyy.1.8:6101 SYN ******S* Jan 31 03:25:25 82.138.243.89:3024 -> xxx.yyy.1.4:6101 SYN ******S* [...] Jan 31 03:25:58 82.138.243.89:3032 -> xxx.yyy.255.242:6101 SYN ******S* Jan 31 03:25:58 82.138.243.89:2988 -> xxx.yyy.255.248:6101 SYN ******S* Jan 31 03:25:58 82.138.243.89:2987 -> xxx.yyy.255.247:6101 SYN ******S* Jan 31 03:25:58 82.138.243.89:2989 -> xxx.yyy.255.249:6101 SYN ******S* Jan 31 03:25:58 82.138.243.89:2992 -> xxx.yyy.255.252:6101 SYN ******S* Jan 31 03:25:58 82.138.243.89:2991 -> xxx.yyy.255.251:6101 SYN ******S* Jan 31 03:25:58 82.138.243.89:2994 -> xxx.yyy.255.254:6101 SYN ******S* Jan 31 03:25:58 82.138.243.89:2990 -> xxx.yyy.255.250:6101 SYN ******S* Jan 31 03:25:58 82.138.243.89:2993 -> xxx.yyy.255.253:6101 SYN ******S* 27800 Jan 31 08:14:52 217.229.160.40:61594 -> xxx.yyy.1.0:1433 SYN ******S* Jan 31 08:14:52 217.229.160.40:61595 -> xxx.yyy.1.1:1433 SYN ******S* Jan 31 08:14:52 217.229.160.40:61596 -> xxx.yyy.1.2:1433 SYN ******S* Jan 31 08:14:52 217.229.160.40:61598 -> xxx.yyy.1.3:1433 SYN ******S* Jan 31 08:14:52 217.229.160.40:61599 -> xxx.yyy.1.4:1433 SYN ******S* Jan 31 08:14:52 217.229.160.40:61600 -> xxx.yyy.1.5:1433 SYN ******S* Jan 31 08:14:52 217.229.160.40:61601 -> xxx.yyy.1.6:1433 SYN ******S* Jan 31 08:14:52 217.229.160.40:61602 -> xxx.yyy.1.7:1433 SYN ******S* [...] Jan 31 08:19:16 217.229.160.40:62490 -> xxx.yyy.255.241:1433 SYN ******S* Jan 31 08:19:16 217.229.160.40:62491 -> xxx.yyy.255.242:1433 SYN ******S* Jan 31 08:19:16 217.229.160.40:62492 -> xxx.yyy.255.243:1433 SYN ******S* Jan 31 08:19:16 217.229.160.40:62495 -> xxx.yyy.255.246:1433 SYN ******S* Jan 31 08:19:16 217.229.160.40:62496 -> xxx.yyy.255.247:1433 SYN ******S* Jan 31 08:19:17 217.229.160.40:62497 -> xxx.yyy.255.248:1433 SYN ******S* Jan 31 08:19:17 217.229.160.40:62498 -> xxx.yyy.255.249:1433 SYN ******S* Jan 31 08:19:17 217.229.160.40:62502 -> xxx.yyy.255.253:1433 SYN ******S* Jan 31 08:19:17 217.229.160.40:62503 -> xxx.yyy.255.254:1433 SYN ******S* 27006 Jan 31 08:27:34 66.237.84.29:4373 -> xxx.yyy.1.4:6101 SYN ******S* Jan 31 08:27:34 66.237.84.29:4374 -> xxx.yyy.1.5:6101 SYN ******S* Jan 31 08:27:34 66.237.84.29:4376 -> xxx.yyy.1.7:6101 SYN ******S* Jan 31 08:27:34 66.237.84.29:4378 -> xxx.yyy.1.9:6101 SYN ******S* Jan 31 08:27:34 66.237.84.29:4379 -> xxx.yyy.1.10:6101 SYN ******S* Jan 31 08:27:34 66.237.84.29:4380 -> xxx.yyy.1.11:6101 SYN ******S* Jan 31 08:27:34 66.237.84.29:4381 -> xxx.yyy.1.12:6101 SYN ******S* Jan 31 08:27:34 66.237.84.29:4382 -> xxx.yyy.1.13:6101 SYN ******S* [...] Jan 31 08:39:12 66.237.84.29:3104 -> xxx.yyy.255.230:6101 SYN ******S* Jan 31 08:39:12 66.237.84.29:3107 -> xxx.yyy.255.233:6101 SYN ******S* Jan 31 08:39:12 66.237.84.29:3101 -> xxx.yyy.255.227:6101 SYN ******S* Jan 31 08:39:12 66.237.84.29:3105 -> xxx.yyy.255.231:6101 SYN ******S* Jan 31 08:39:12 66.237.84.29:3108 -> xxx.yyy.255.234:6101 SYN ******S* Jan 31 08:39:12 66.237.84.29:3102 -> xxx.yyy.255.228:6101 SYN ******S* Jan 31 08:39:12 66.237.84.29:3106 -> xxx.yyy.255.232:6101 SYN ******S* Jan 31 08:39:12 66.237.84.29:3103 -> xxx.yyy.255.229:6101 SYN ******S* 26255 Jan 31 17:16:12 220.76.229.40:20498 -> xxx.yyy.1.7:4899 SYN ******S* Jan 31 17:16:12 220.76.229.40:20501 -> xxx.yyy.1.10:4899 SYN ******S* Jan 31 17:16:12 220.76.229.40:20506 -> xxx.yyy.1.15:4899 SYN ******S* Jan 31 17:16:14 220.76.229.40:20500 -> xxx.yyy.1.9:4899 SYN ******S* Jan 31 17:16:14 220.76.229.40:20507 -> xxx.yyy.1.16:4899 SYN ******S* Jan 31 17:16:12 220.76.229.40:20502 -> xxx.yyy.1.11:4899 SYN ******S* Jan 31 17:16:12 220.76.229.40:20499 -> xxx.yyy.1.8:4899 SYN ******S* Jan 31 17:16:14 220.76.229.40:20512 -> xxx.yyy.1.21:4899 SYN ******S* [...] Jan 31 17:19:00 220.76.229.40:35248 -> xxx.yyy.255.241:4899 SYN ******S* Jan 31 17:19:00 220.76.229.40:35254 -> xxx.yyy.255.247:4899 SYN ******S* Jan 31 17:19:00 220.76.229.40:35247 -> xxx.yyy.255.240:4899 SYN ******S* Jan 31 17:19:00 220.76.229.40:35255 -> xxx.yyy.255.248:4899 SYN ******S* Jan 31 17:19:00 220.76.229.40:35257 -> xxx.yyy.255.250:4899 SYN ******S* Jan 31 17:19:00 220.76.229.40:35261 -> xxx.yyy.255.254:4899 SYN ******S* Jan 31 17:19:00 220.76.229.40:35260 -> xxx.yyy.255.253:4899 SYN ******S* Jan 31 17:19:00 220.76.229.40:35259 -> xxx.yyy.255.252:4899 SYN ******S* 22720 Jan 31 16:57:55 217.229.163.9:62652 -> xxx.yyy.1.0:6129 SYN ******S* Jan 31 16:57:55 217.229.163.9:62653 -> xxx.yyy.1.1:6129 SYN ******S* Jan 31 16:57:55 217.229.163.9:62655 -> xxx.yyy.1.3:6129 SYN ******S* Jan 31 16:57:55 217.229.163.9:62656 -> xxx.yyy.1.4:6129 SYN ******S* Jan 31 16:57:55 217.229.163.9:62657 -> xxx.yyy.1.5:6129 SYN ******S* Jan 31 16:57:55 217.229.163.9:62662 -> xxx.yyy.1.10:6129 SYN ******S* Jan 31 16:57:55 217.229.163.9:62663 -> xxx.yyy.1.11:6129 SYN ******S* Jan 31 16:57:55 217.229.163.9:62666 -> xxx.yyy.1.14:6129 SYN ******S* [...] Jan 31 17:04:41 217.229.163.9:62281 -> xxx.yyy.255.234:6129 SYN ******S* Jan 31 17:04:41 217.229.163.9:62283 -> xxx.yyy.255.236:6129 SYN ******S* Jan 31 17:04:42 217.229.163.9:62285 -> xxx.yyy.255.238:6129 SYN ******S* Jan 31 17:04:42 217.229.163.9:62299 -> xxx.yyy.255.247:6129 SYN ******S* Jan 31 17:04:42 217.229.163.9:62307 -> xxx.yyy.255.250:6129 SYN ******S* Jan 31 17:04:42 217.229.163.9:62308 -> xxx.yyy.255.251:6129 SYN ******S* Jan 31 17:04:42 217.229.163.9:62311 -> xxx.yyy.255.252:6129 SYN ******S* Jan 31 17:04:42 217.229.163.9:62312 -> xxx.yyy.255.253:6129 SYN ******S* 22616 Jan 31 22:21:56 220.210.33.200:4893 -> xxx.yyy.1.2:1433 SYN ******S* Jan 31 22:21:59 220.210.33.200:4916 -> xxx.yyy.1.6:1433 SYN ******S* Jan 31 22:22:00 220.210.33.200:4967 -> xxx.yyy.1.9:1433 SYN ******S* Jan 31 22:22:00 220.210.33.200:4988 -> xxx.yyy.1.11:1433 SYN ******S* Jan 31 22:21:57 220.210.33.200:1038 -> xxx.yyy.1.14:1433 SYN ******S* Jan 31 22:22:00 220.210.33.200:1048 -> xxx.yyy.1.15:1433 SYN ******S* Jan 31 22:22:00 220.210.33.200:1058 -> xxx.yyy.1.16:1433 SYN ******S* Jan 31 22:21:57 220.210.33.200:1064 -> xxx.yyy.1.18:1433 SYN ******S* [...] Jan 31 23:59:57 220.210.33.200:2210 -> xxx.yyy.104.10:1433 SYN ******S* Jan 31 23:59:57 220.210.33.200:2230 -> xxx.yyy.104.11:1433 SYN ******S* Jan 31 23:59:58 220.210.33.200:2261 -> xxx.yyy.104.13:1433 SYN ******S* Jan 31 23:59:58 220.210.33.200:2070 -> xxx.yyy.104.2:1433 SYN ******S* Jan 31 23:59:58 220.210.33.200:2278 -> xxx.yyy.104.14:1433 SYN ******S* Jan 31 23:59:59 220.210.33.200:2306 -> xxx.yyy.104.16:1433 SYN ******S* Jan 31 23:59:59 220.210.33.200:2320 -> xxx.yyy.104.17:1433 SYN ******S* Jan 31 23:59:59 220.210.33.200:2349 -> xxx.yyy.104.19:1433 SYN ******S* Jan 31 23:59:59 220.210.33.200:2364 -> xxx.yyy.104.20:1433 SYN ******S* 18592 Jan 31 22:46:27 64.65.193.200:4045 -> xxx.yyy.1.1:3306 SYN ******S* Jan 31 22:46:27 64.65.193.200:4046 -> xxx.yyy.1.2:3306 SYN ******S* Jan 31 22:46:30 64.65.193.200:4055 -> xxx.yyy.1.11:3306 SYN ******S* Jan 31 22:46:27 64.65.193.200:4058 -> xxx.yyy.1.14:3306 SYN ******S* Jan 31 22:46:27 64.65.193.200:4063 -> xxx.yyy.1.19:3306 SYN ******S* Jan 31 22:46:27 64.65.193.200:4064 -> xxx.yyy.1.20:3306 SYN ******S* Jan 31 22:46:28 64.65.193.200:4066 -> xxx.yyy.1.22:3306 SYN ******S* Jan 31 22:46:28 64.65.193.200:4070 -> xxx.yyy.1.26:3306 SYN ******S* [...] Jan 31 23:01:30 64.65.193.200:1991 -> xxx.yyy.255.232:3306 SYN ******S* Jan 31 23:01:30 64.65.193.200:1964 -> xxx.yyy.255.205:3306 SYN ******S* Jan 31 23:01:30 64.65.193.200:1960 -> xxx.yyy.255.201:3306 SYN ******S* Jan 31 23:01:30 64.65.193.200:1980 -> xxx.yyy.255.221:3306 SYN ******S* Jan 31 23:01:30 64.65.193.200:2009 -> xxx.yyy.255.250:3306 SYN ******S* Jan 31 23:01:30 64.65.193.200:2013 -> xxx.yyy.255.254:3306 SYN ******S* Jan 31 23:01:30 64.65.193.200:2010 -> xxx.yyy.255.251:3306 SYN ******S* Jan 31 23:01:30 64.65.193.200:2006 -> xxx.yyy.255.247:3306 SYN ******S* Jan 31 23:01:30 64.65.193.200:2008 -> xxx.yyy.255.249:3306 SYN ******S* 16447 Jan 31 16:50:00 218.28.29.210:4013 -> xxx.yyy.1.2:4899 SYN ******S* Jan 31 16:50:00 218.28.29.210:4014 -> xxx.yyy.1.3:4899 SYN ******S* Jan 31 16:50:00 218.28.29.210:4015 -> xxx.yyy.1.4:4899 SYN ******S* Jan 31 16:50:02 218.28.29.210:4012 -> xxx.yyy.1.1:4899 SYN ******S* Jan 31 16:50:00 218.28.29.210:4017 -> xxx.yyy.1.6:4899 SYN ******S* Jan 31 16:50:00 218.28.29.210:4018 -> xxx.yyy.1.7:4899 SYN ******S* Jan 31 16:50:00 218.28.29.210:4019 -> xxx.yyy.1.8:4899 SYN ******S* Jan 31 16:50:02 218.28.29.210:4025 -> xxx.yyy.1.14:4899 SYN ******S* [...] Jan 31 16:53:16 218.28.29.210:3277 -> xxx.yyy.255.219:4899 SYN ******S* Jan 31 16:53:16 218.28.29.210:3285 -> xxx.yyy.255.227:4899 SYN ******S* Jan 31 16:53:16 218.28.29.210:3291 -> xxx.yyy.255.233:4899 SYN ******S* Jan 31 16:53:16 218.28.29.210:3295 -> xxx.yyy.255.237:4899 SYN ******S* Jan 31 16:53:16 218.28.29.210:3293 -> xxx.yyy.255.235:4899 SYN ******S* Jan 31 16:53:16 218.28.29.210:3296 -> xxx.yyy.255.238:4899 SYN ******S* Jan 31 16:53:16 218.28.29.210:3301 -> xxx.yyy.255.243:4899 SYN ******S* Jan 31 16:53:16 218.28.29.210:3305 -> xxx.yyy.255.247:4899 SYN ******S* Jan 31 16:53:16 218.28.29.210:3309 -> xxx.yyy.255.251:4899 SYN ******S* 15693 Jan 31 08:48:52 148.223.248.188:26996 -> xxx.yyy.1.1:1433 SYN ******S* Jan 31 08:48:52 148.223.248.188:22446 -> xxx.yyy.1.5:1433 SYN ******S* Jan 31 08:48:52 148.223.248.188:22525 -> xxx.yyy.1.8:1433 SYN ******S* Jan 31 08:48:52 148.223.248.188:27038 -> xxx.yyy.1.9:1433 SYN ******S* Jan 31 08:48:55 148.223.248.188:27039 -> xxx.yyy.1.11:1433 SYN ******S* Jan 31 08:48:53 148.223.248.188:22665 -> xxx.yyy.1.16:1433 SYN ******S* Jan 31 08:48:53 148.223.248.188:23366 -> xxx.yyy.1.21:1433 SYN ******S* Jan 31 08:48:53 148.223.248.188:27156 -> xxx.yyy.1.20:1433 SYN ******S* [...] Jan 31 11:21:02 148.223.248.188:57513 -> xxx.yyy.150.157:1433 SYN ******S* Jan 31 11:21:02 148.223.248.188:58976 -> xxx.yyy.150.188:1433 SYN ******S* Jan 31 11:21:02 148.223.248.188:38788 -> xxx.yyy.150.158:1433 SYN ******S* Jan 31 11:21:02 148.223.248.188:63836 -> xxx.yyy.150.187:1433 SYN ******S* Jan 31 11:21:03 148.223.248.188:57664 -> xxx.yyy.150.160:1433 SYN ******S* Jan 31 11:21:03 148.223.248.188:9665 -> xxx.yyy.150.192:1433 SYN ******S* Jan 31 11:21:03 148.223.248.188:9664 -> xxx.yyy.150.191:1433 SYN ******S* Jan 31 11:21:03 148.223.248.188:57736 -> xxx.yyy.150.163:1433 SYN ******S* Jan 31 11:21:03 148.223.248.188:57735 -> xxx.yyy.150.162:1433 SYN ******S* 14673 Jan 31 12:20:35 219.153.10.141:62911 -> xxx.yyy.1.23:25 SYN ******S* Jan 31 12:20:35 219.153.10.141:62911 -> xxx.yyy.1.41:25 SYN ******S* Jan 31 12:20:35 219.153.10.141:62911 -> xxx.yyy.1.43:25 SYN ******S* Jan 31 12:20:35 219.153.10.141:62911 -> xxx.yyy.1.20:25 SYN ******S* Jan 31 12:20:35 219.153.10.141:62911 -> xxx.yyy.1.1:25 SYN ******S* Jan 31 12:20:35 219.153.10.141:62911 -> xxx.yyy.1.17:25 SYN ******S* Jan 31 12:20:35 219.153.10.141:62911 -> xxx.yyy.1.26:25 SYN ******S* Jan 31 12:20:35 219.153.10.141:62911 -> xxx.yyy.1.14:25 SYN ******S* [...] Jan 31 12:21:44 219.153.10.141:62911 -> xxx.yyy.255.198:25 SYN ******S* Jan 31 12:21:44 219.153.10.141:62911 -> xxx.yyy.255.214:25 SYN ******S* Jan 31 12:21:44 219.153.10.141:62911 -> xxx.yyy.255.235:25 SYN ******S* Jan 31 12:21:44 219.153.10.141:62911 -> xxx.yyy.255.240:25 SYN ******S* Jan 31 12:21:44 219.153.10.141:62911 -> xxx.yyy.255.249:25 SYN ******S* Jan 31 12:21:44 219.153.10.141:62911 -> xxx.yyy.255.251:25 SYN ******S* Jan 31 12:21:44 219.153.10.141:62911 -> xxx.yyy.255.242:25 SYN ******S* Jan 31 12:21:44 219.153.10.141:62911 -> xxx.yyy.255.244:25 SYN ******S* Jan 31 12:21:44 219.153.10.141:62911 -> xxx.yyy.255.250:25 SYN ******S* 14092 Jan 31 05:36:56 82.36.140.34:1825 -> xxx.yyy.1.5:1433 SYN ******S* Jan 31 05:36:59 82.36.140.34:1844 -> xxx.yyy.1.4:1433 SYN ******S* Jan 31 05:36:59 82.36.140.34:1846 -> xxx.yyy.1.3:1433 SYN ******S* Jan 31 05:36:59 82.36.140.34:1848 -> xxx.yyy.1.1:1433 SYN ******S* Jan 31 05:36:59 82.36.140.34:1847 -> xxx.yyy.1.2:1433 SYN ******S* Jan 31 05:36:59 82.36.140.34:1850 -> xxx.yyy.1.0:1433 SYN ******S* Jan 31 05:36:59 82.36.140.34:1853 -> xxx.yyy.1.7:1433 SYN ******S* Jan 31 05:36:59 82.36.140.34:1854 -> xxx.yyy.1.43:1433 SYN ******S* [...] Jan 31 07:51:32 82.36.140.34:3459 -> xxx.yyy.69.82:1433 SYN ******S* Jan 31 07:51:33 82.36.140.34:3462 -> xxx.yyy.69.84:1433 SYN ******S* Jan 31 07:51:33 82.36.140.34:3463 -> xxx.yyy.69.85:1433 SYN ******S* Jan 31 07:51:33 82.36.140.34:3467 -> xxx.yyy.69.86:1433 SYN ******S* Jan 31 07:51:33 82.36.140.34:3469 -> xxx.yyy.69.87:1433 SYN ******S* Jan 31 07:51:33 82.36.140.34:3470 -> xxx.yyy.69.88:1433 SYN ******S* Jan 31 07:51:34 82.36.140.34:3490 -> xxx.yyy.69.89:1433 SYN ******S* Jan 31 07:51:34 82.36.140.34:3499 -> xxx.yyy.69.94:1433 SYN ******S* Jan 31 07:51:34 82.36.140.34:3497 -> xxx.yyy.69.91:1433 SYN ******S* 12276 [...] 11774 Jan 31 05:42:08 193.17.67.13:20965 -> xxx.yyy.1.0:1433 SYN ******S* Jan 31 05:42:08 193.17.67.13:20971 -> xxx.yyy.1.2:1433 SYN ******S* Jan 31 05:42:08 193.17.67.13:20974 -> xxx.yyy.1.3:1433 SYN ******S* Jan 31 05:42:08 193.17.67.13:20981 -> xxx.yyy.1.5:1433 SYN ******S* Jan 31 05:42:08 193.17.67.13:20991 -> xxx.yyy.1.8:1433 SYN ******S* Jan 31 05:42:08 193.17.67.13:20994 -> xxx.yyy.1.9:1433 SYN ******S* Jan 31 05:42:08 193.17.67.13:20998 -> xxx.yyy.1.10:1433 SYN ******S* Jan 31 05:42:08 193.17.67.13:21001 -> xxx.yyy.1.11:1433 SYN ******S* [...] Jan 31 06:11:48 193.17.67.13:53550 -> xxx.yyy.33.251:1433 SYN ******S* Jan 31 06:11:48 193.17.67.13:53548 -> xxx.yyy.33.250:1433 SYN ******S* Jan 31 06:11:48 193.17.67.13:53547 -> xxx.yyy.33.249:1433 SYN ******S* Jan 31 06:11:48 193.17.67.13:53546 -> xxx.yyy.33.248:1433 SYN ******S* Jan 31 06:11:48 193.17.67.13:53554 -> xxx.yyy.33.252:1433 SYN ******S* Jan 31 06:11:48 193.17.67.13:53555 -> xxx.yyy.33.253:1433 SYN ******S* Jan 31 06:11:48 193.17.67.13:53556 -> xxx.yyy.33.254:1433 SYN ******S* Jan 31 06:11:48 193.17.67.13:53558 -> xxx.yyy.33.255:1433 SYN ******S* 8911 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions