[LOGS] Summary of large-scale portscanning detects
[email protected] Sat, 05 Feb 2005 07:46:15 -0600 (CST)
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Feb 4 06:01:32 80.53.218.122:4530 -> xxx.yyy.1.1:3306 SYN ******S* Feb 4 06:01:32 80.53.218.122:4531 -> xxx.yyy.1.2:3306 SYN ******S* Feb 4 06:01:32 80.53.218.122:4532 -> xxx.yyy.1.3:3306 SYN ******S* Feb 4 06:01:32 80.53.218.122:4533 -> xxx.yyy.1.4:3306 SYN ******S* Feb 4 06:01:32 80.53.218.122:4534 -> xxx.yyy.1.5:3306 SYN ******S* Feb 4 06:01:32 80.53.218.122:4535 -> xxx.yyy.1.6:3306 SYN ******S* Feb 4 06:01:32 80.53.218.122:4536 -> xxx.yyy.1.7:3306 SYN ******S* Feb 4 06:01:32 80.53.218.122:4537 -> xxx.yyy.1.8:3306 SYN ******S* [...] Feb 4 06:24:42 80.53.218.122:2884 -> xxx.yyy.255.228:3306 SYN ******S* Feb 4 06:24:42 80.53.218.122:2895 -> xxx.yyy.255.237:3306 SYN ******S* Feb 4 06:24:42 80.53.218.122:2912 -> xxx.yyy.255.253:3306 SYN ******S* Feb 4 06:24:42 80.53.218.122:2891 -> xxx.yyy.255.233:3306 SYN ******S* Feb 4 06:24:42 80.53.218.122:2903 -> xxx.yyy.255.245:3306 SYN ******S* Feb 4 06:24:42 80.53.218.122:2899 -> xxx.yyy.255.241:3306 SYN ******S* Feb 4 06:24:42 80.53.218.122:2907 -> xxx.yyy.255.249:3306 SYN ******S* Feb 4 06:24:42 80.53.218.122:2885 -> xxx.yyy.255.229:3306 SYN ******S* Feb 4 06:24:42 80.53.218.122:2881 -> xxx.yyy.255.225:3306 SYN ******S* 75065 Feb 4 22:03:36 64.251.16.170:4482 -> xxx.yyy.1.1:4899 SYN ******S* Feb 4 22:03:36 64.251.16.170:4484 -> xxx.yyy.1.3:4899 SYN ******S* Feb 4 22:03:36 64.251.16.170:4483 -> xxx.yyy.1.2:4899 SYN ******S* Feb 4 22:03:38 64.251.16.170:4488 -> xxx.yyy.1.5:4899 SYN ******S* Feb 4 22:03:35 64.251.16.170:4486 -> xxx.yyy.1.4:4899 SYN ******S* Feb 4 22:03:38 64.251.16.170:4489 -> xxx.yyy.1.6:4899 SYN ******S* Feb 4 22:03:35 64.251.16.170:4490 -> xxx.yyy.1.7:4899 SYN ******S* Feb 4 22:03:36 64.251.16.170:4491 -> xxx.yyy.1.8:4899 SYN ******S* [...] Feb 4 22:15:16 64.251.16.170:3477 -> xxx.yyy.255.236:4899 SYN ******S* Feb 4 22:15:16 64.251.16.170:3502 -> xxx.yyy.255.240:4899 SYN ******S* Feb 4 22:15:16 64.251.16.170:3546 -> xxx.yyy.255.245:4899 SYN ******S* Feb 4 22:15:16 64.251.16.170:3481 -> xxx.yyy.255.238:4899 SYN ******S* Feb 4 22:15:16 64.251.16.170:3569 -> xxx.yyy.255.252:4899 SYN ******S* Feb 4 22:15:16 64.251.16.170:3525 -> xxx.yyy.255.243:4899 SYN ******S* Feb 4 22:15:16 64.251.16.170:3447 -> xxx.yyy.255.231:4899 SYN ******S* Feb 4 22:15:16 64.251.16.170:3563 -> xxx.yyy.255.250:4899 SYN ******S* Feb 4 22:15:16 64.251.16.170:3547 -> xxx.yyy.255.246:4899 SYN ******S* 71480 Feb 4 23:08:17 192.116.217.99:4527 -> xxx.yyy.1.4:1433 SYN ******S* Feb 4 23:08:17 192.116.217.99:4525 -> xxx.yyy.1.3:1433 SYN ******S* Feb 4 23:08:17 192.116.217.99:4518 -> xxx.yyy.1.2:1433 SYN ******S* Feb 4 23:08:15 192.116.217.99:4529 -> xxx.yyy.1.5:1433 SYN ******S* Feb 4 23:08:18 192.116.217.99:4536 -> xxx.yyy.1.6:1433 SYN ******S* Feb 4 23:08:18 192.116.217.99:4543 -> xxx.yyy.1.8:1433 SYN ******S* Feb 4 23:08:18 192.116.217.99:4545 -> xxx.yyy.1.9:1433 SYN ******S* Feb 4 23:08:18 192.116.217.99:4551 -> xxx.yyy.1.10:1433 SYN ******S* [...] Feb 4 23:19:11 192.116.217.99:3832 -> xxx.yyy.255.229:1433 SYN ******S* Feb 4 23:19:11 192.116.217.99:3834 -> xxx.yyy.255.230:1433 SYN ******S* Feb 4 23:19:11 192.116.217.99:3850 -> xxx.yyy.255.238:1433 SYN ******S* Feb 4 23:19:11 192.116.217.99:3838 -> xxx.yyy.255.232:1433 SYN ******S* Feb 4 23:19:11 192.116.217.99:3860 -> xxx.yyy.255.243:1433 SYN ******S* Feb 4 23:19:11 192.116.217.99:3866 -> xxx.yyy.255.246:1433 SYN ******S* Feb 4 23:19:11 192.116.217.99:3870 -> xxx.yyy.255.248:1433 SYN ******S* Feb 4 23:19:11 192.116.217.99:3877 -> xxx.yyy.255.251:1433 SYN ******S* 64526 Feb 4 03:22:24 81.192.195.212:1860 -> xxx.yyy.1.0:1433 SYN ******S* Feb 4 03:22:24 81.192.195.212:1863 -> xxx.yyy.1.1:1433 SYN ******S* Feb 4 03:22:24 81.192.195.212:1866 -> xxx.yyy.1.2:1433 SYN ******S* Feb 4 03:22:24 81.192.195.212:1869 -> xxx.yyy.1.3:1433 SYN ******S* Feb 4 03:22:24 81.192.195.212:1872 -> xxx.yyy.1.4:1433 SYN ******S* Feb 4 03:22:24 81.192.195.212:1875 -> xxx.yyy.1.5:1433 SYN ******S* Feb 4 03:22:24 81.192.195.212:1878 -> xxx.yyy.1.6:1433 SYN ******S* Feb 4 03:22:24 81.192.195.212:1881 -> xxx.yyy.1.7:1433 SYN ******S* [...] Feb 4 05:54:07 81.192.195.212:3116 -> xxx.yyy.170.49:1433 SYN ******S* Feb 4 05:54:07 81.192.195.212:2955 -> xxx.yyy.169.255:1433 SYN ******S* Feb 4 05:54:07 81.192.195.212:3226 -> xxx.yyy.170.80:1433 SYN ******S* Feb 4 05:54:07 81.192.195.212:3120 -> xxx.yyy.170.50:1433 SYN ******S* Feb 4 05:54:07 81.192.195.212:3232 -> xxx.yyy.170.81:1433 SYN ******S* Feb 4 05:54:07 81.192.195.212:3233 -> xxx.yyy.170.82:1433 SYN ******S* Feb 4 05:54:07 81.192.195.212:3124 -> xxx.yyy.170.51:1433 SYN ******S* Feb 4 05:54:07 81.192.195.212:2958 -> xxx.yyy.170.0:1433 SYN ******S* 63086 Feb 4 21:24:43 194.130.15.221:3923 -> xxx.yyy.1.1:3306 SYN ******S* Feb 4 21:24:46 194.130.15.221:3924 -> xxx.yyy.1.2:3306 SYN ******S* Feb 4 21:24:46 194.130.15.221:3925 -> xxx.yyy.1.3:3306 SYN ******S* Feb 4 21:24:46 194.130.15.221:3926 -> xxx.yyy.1.4:3306 SYN ******S* Feb 4 21:24:46 194.130.15.221:3928 -> xxx.yyy.1.6:3306 SYN ******S* Feb 4 21:24:46 194.130.15.221:3929 -> xxx.yyy.1.7:3306 SYN ******S* Feb 4 21:24:46 194.130.15.221:3930 -> xxx.yyy.1.8:3306 SYN ******S* Feb 4 21:24:43 194.130.15.221:3931 -> xxx.yyy.1.9:3306 SYN ******S* [...] Feb 4 21:36:25 194.130.15.221:2546 -> xxx.yyy.255.242:3306 SYN ******S* Feb 4 21:36:25 194.130.15.221:2550 -> xxx.yyy.255.246:3306 SYN ******S* Feb 4 21:36:25 194.130.15.221:2555 -> xxx.yyy.255.251:3306 SYN ******S* Feb 4 21:36:25 194.130.15.221:2556 -> xxx.yyy.255.252:3306 SYN ******S* Feb 4 21:36:25 194.130.15.221:2558 -> xxx.yyy.255.254:3306 SYN ******S* Feb 4 21:36:25 194.130.15.221:2557 -> xxx.yyy.255.253:3306 SYN ******S* Feb 4 21:36:25 194.130.15.221:2553 -> xxx.yyy.255.249:3306 SYN ******S* Feb 4 21:36:25 194.130.15.221:2554 -> xxx.yyy.255.250:3306 SYN ******S* 61436 Feb 4 23:02:52 216.141.160.82:3581 -> xxx.yyy.1.1:3306 SYN ******S* Feb 4 23:02:50 216.141.160.82:3583 -> xxx.yyy.1.3:3306 SYN ******S* Feb 4 23:02:53 216.141.160.82:3584 -> xxx.yyy.1.4:3306 SYN ******S* Feb 4 23:02:50 216.141.160.82:3585 -> xxx.yyy.1.5:3306 SYN ******S* Feb 4 23:02:53 216.141.160.82:3586 -> xxx.yyy.1.6:3306 SYN ******S* Feb 4 23:02:53 216.141.160.82:3587 -> xxx.yyy.1.7:3306 SYN ******S* Feb 4 23:02:50 216.141.160.82:3588 -> xxx.yyy.1.8:3306 SYN ******S* Feb 4 23:02:53 216.141.160.82:3590 -> xxx.yyy.1.10:3306 SYN ******S* [...] Feb 4 23:13:47 216.141.160.82:2646 -> xxx.yyy.255.202:3306 SYN ******S* Feb 4 23:13:47 216.141.160.82:2654 -> xxx.yyy.255.210:3306 SYN ******S* Feb 4 23:13:47 216.141.160.82:2660 -> xxx.yyy.255.216:3306 SYN ******S* Feb 4 23:13:47 216.141.160.82:2682 -> xxx.yyy.255.218:3306 SYN ******S* Feb 4 23:13:47 216.141.160.82:2696 -> xxx.yyy.255.232:3306 SYN ******S* Feb 4 23:13:47 216.141.160.82:2694 -> xxx.yyy.255.230:3306 SYN ******S* Feb 4 23:13:47 216.141.160.82:2706 -> xxx.yyy.255.242:3306 SYN ******S* Feb 4 23:13:47 216.141.160.82:2714 -> xxx.yyy.255.250:3306 SYN ******S* 61342 Feb 4 20:19:04 210.183.177.143:2782 -> xxx.yyy.1.1:1433 SYN ******S* Feb 4 20:19:02 210.183.177.143:2783 -> xxx.yyy.1.2:1433 SYN ******S* Feb 4 20:19:05 210.183.177.143:2784 -> xxx.yyy.1.3:1433 SYN ******S* Feb 4 20:19:02 210.183.177.143:2786 -> xxx.yyy.1.5:1433 SYN ******S* Feb 4 20:19:05 210.183.177.143:2789 -> xxx.yyy.1.8:1433 SYN ******S* Feb 4 20:19:05 210.183.177.143:2787 -> xxx.yyy.1.6:1433 SYN ******S* Feb 4 20:19:05 210.183.177.143:2790 -> xxx.yyy.1.9:1433 SYN ******S* Feb 4 20:19:05 210.183.177.143:2788 -> xxx.yyy.1.7:1433 SYN ******S* [...] Feb 4 20:29:59 210.183.177.143:1829 -> xxx.yyy.255.234:1433 SYN ******S* Feb 4 20:29:59 210.183.177.143:1836 -> xxx.yyy.255.241:1433 SYN ******S* Feb 4 20:29:59 210.183.177.143:1837 -> xxx.yyy.255.242:1433 SYN ******S* Feb 4 20:29:59 210.183.177.143:1834 -> xxx.yyy.255.239:1433 SYN ******S* Feb 4 20:29:59 210.183.177.143:1849 -> xxx.yyy.255.254:1433 SYN ******S* Feb 4 20:29:59 210.183.177.143:1846 -> xxx.yyy.255.251:1433 SYN ******S* Feb 4 20:29:59 210.183.177.143:1848 -> xxx.yyy.255.253:1433 SYN ******S* Feb 4 20:29:59 210.183.177.143:1847 -> xxx.yyy.255.252:1433 SYN ******S* Feb 4 20:29:59 210.183.177.143:1845 -> xxx.yyy.255.250:1433 SYN ******S* 61147 Feb 4 21:39:45 66.137.98.146:3169 -> xxx.yyy.1.1:3306 SYN ******S* Feb 4 21:39:45 66.137.98.146:3170 -> xxx.yyy.1.2:3306 SYN ******S* Feb 4 21:39:42 66.137.98.146:3172 -> xxx.yyy.1.4:3306 SYN ******S* Feb 4 21:39:42 66.137.98.146:3173 -> xxx.yyy.1.5:3306 SYN ******S* Feb 4 21:39:45 66.137.98.146:3174 -> xxx.yyy.1.6:3306 SYN ******S* Feb 4 21:39:45 66.137.98.146:3175 -> xxx.yyy.1.7:3306 SYN ******S* Feb 4 21:39:45 66.137.98.146:3176 -> xxx.yyy.1.8:3306 SYN ******S* Feb 4 21:39:45 66.137.98.146:3177 -> xxx.yyy.1.9:3306 SYN ******S* [...] Feb 4 21:51:24 66.137.98.146:1941 -> xxx.yyy.255.240:3306 SYN ******S* Feb 4 21:51:24 66.137.98.146:1945 -> xxx.yyy.255.244:3306 SYN ******S* Feb 4 21:51:24 66.137.98.146:1946 -> xxx.yyy.255.245:3306 SYN ******S* Feb 4 21:51:24 66.137.98.146:1953 -> xxx.yyy.255.252:3306 SYN ******S* Feb 4 21:51:24 66.137.98.146:1950 -> xxx.yyy.255.249:3306 SYN ******S* Feb 4 21:51:24 66.137.98.146:1954 -> xxx.yyy.255.253:3306 SYN ******S* Feb 4 21:51:24 66.137.98.146:1951 -> xxx.yyy.255.250:3306 SYN ******S* Feb 4 21:51:24 66.137.98.146:1955 -> xxx.yyy.255.254:3306 SYN ******S* Feb 4 21:51:24 66.137.98.146:1952 -> xxx.yyy.255.251:3306 SYN ******S* 60713 Feb 4 20:19:53 66.137.246.161:4515 -> xxx.yyy.1.2:3306 SYN ******S* Feb 4 20:19:56 66.137.246.161:4516 -> xxx.yyy.1.3:3306 SYN ******S* Feb 4 20:19:56 66.137.246.161:4517 -> xxx.yyy.1.4:3306 SYN ******S* Feb 4 20:19:56 66.137.246.161:4518 -> xxx.yyy.1.5:3306 SYN ******S* Feb 4 20:19:56 66.137.246.161:4519 -> xxx.yyy.1.6:3306 SYN ******S* Feb 4 20:19:53 66.137.246.161:4520 -> xxx.yyy.1.7:3306 SYN ******S* Feb 4 20:19:56 66.137.246.161:4522 -> xxx.yyy.1.9:3306 SYN ******S* Feb 4 20:19:53 66.137.246.161:4523 -> xxx.yyy.1.10:3306 SYN ******S* [...] Feb 4 20:31:50 66.137.246.161:2984 -> xxx.yyy.255.243:3306 SYN ******S* Feb 4 20:31:50 66.137.246.161:2988 -> xxx.yyy.255.247:3306 SYN ******S* Feb 4 20:31:50 66.137.246.161:2985 -> xxx.yyy.255.244:3306 SYN ******S* Feb 4 20:31:50 66.137.246.161:2982 -> xxx.yyy.255.241:3306 SYN ******S* Feb 4 20:31:50 66.137.246.161:2986 -> xxx.yyy.255.245:3306 SYN ******S* Feb 4 20:31:50 66.137.246.161:2993 -> xxx.yyy.255.252:3306 SYN ******S* Feb 4 20:31:50 66.137.246.161:2994 -> xxx.yyy.255.253:3306 SYN ******S* Feb 4 20:31:50 66.137.246.161:2995 -> xxx.yyy.255.254:3306 SYN ******S* 57360 Feb 4 18:31:01 64.4.80.118:3291 -> xxx.yyy.1.1:3306 SYN ******S* Feb 4 18:31:01 64.4.80.118:3292 -> xxx.yyy.1.2:3306 SYN ******S* Feb 4 18:31:01 64.4.80.118:3293 -> xxx.yyy.1.3:3306 SYN ******S* Feb 4 18:31:01 64.4.80.118:3295 -> xxx.yyy.1.5:3306 SYN ******S* Feb 4 18:31:01 64.4.80.118:3296 -> xxx.yyy.1.6:3306 SYN ******S* Feb 4 18:31:01 64.4.80.118:3298 -> xxx.yyy.1.8:3306 SYN ******S* Feb 4 18:31:01 64.4.80.118:3299 -> xxx.yyy.1.9:3306 SYN ******S* Feb 4 18:31:01 64.4.80.118:3300 -> xxx.yyy.1.10:3306 SYN ******S* [...] Feb 4 18:43:37 64.4.80.118:4312 -> xxx.yyy.255.188:3306 SYN ******S* Feb 4 18:43:37 64.4.80.118:4332 -> xxx.yyy.255.208:3306 SYN ******S* Feb 4 18:43:37 64.4.80.118:4331 -> xxx.yyy.255.207:3306 SYN ******S* Feb 4 18:43:37 64.4.80.118:4362 -> xxx.yyy.255.238:3306 SYN ******S* Feb 4 18:43:37 64.4.80.118:4360 -> xxx.yyy.255.236:3306 SYN ******S* Feb 4 18:43:38 64.4.80.118:4364 -> xxx.yyy.255.240:3306 SYN ******S* Feb 4 18:43:38 64.4.80.118:4367 -> xxx.yyy.255.243:3306 SYN ******S* Feb 4 18:43:38 64.4.80.118:4378 -> xxx.yyy.255.254:3306 SYN ******S* Feb 4 18:43:38 64.4.80.118:4375 -> xxx.yyy.255.251:3306 SYN ******S* 56774 Feb 4 23:39:02 140.122.123.247:1332 -> xxx.yyy.1.1:3306 SYN ******S* Feb 4 23:39:02 140.122.123.247:1333 -> xxx.yyy.1.2:3306 SYN ******S* Feb 4 23:39:02 140.122.123.247:1334 -> xxx.yyy.1.3:3306 SYN ******S* Feb 4 23:39:02 140.122.123.247:1335 -> xxx.yyy.1.4:3306 SYN ******S* Feb 4 23:39:02 140.122.123.247:1336 -> xxx.yyy.1.5:3306 SYN ******S* Feb 4 23:39:02 140.122.123.247:1338 -> xxx.yyy.1.6:3306 SYN ******S* Feb 4 23:39:02 140.122.123.247:1341 -> xxx.yyy.1.7:3306 SYN ******S* Feb 4 23:39:02 140.122.123.247:1342 -> xxx.yyy.1.8:3306 SYN ******S* [...] Feb 4 23:43:29 140.122.123.247:2255 -> xxx.yyy.255.253:3306 SYN ******S* Feb 4 23:43:29 140.122.123.247:2248 -> xxx.yyy.255.247:3306 SYN ******S* Feb 4 23:43:29 140.122.123.247:2245 -> xxx.yyy.255.244:3306 SYN ******S* Feb 4 23:43:29 140.122.123.247:2252 -> xxx.yyy.255.251:3306 SYN ******S* Feb 4 23:43:29 140.122.123.247:2256 -> xxx.yyy.255.254:3306 SYN ******S* Feb 4 23:43:29 140.122.123.247:2249 -> xxx.yyy.255.248:3306 SYN ******S* Feb 4 23:43:29 140.122.123.247:2246 -> xxx.yyy.255.245:3306 SYN ******S* Feb 4 23:43:29 140.122.123.247:2254 -> xxx.yyy.255.252:3306 SYN ******S* Feb 4 23:43:29 140.122.123.247:2250 -> xxx.yyy.255.249:3306 SYN ******S* 56372 Feb 4 04:13:04 148.245.185.166:4428 -> xxx.yyy.1.1:6101 SYN ******S* Feb 4 04:13:07 148.245.185.166:4429 -> xxx.yyy.1.2:6101 SYN ******S* Feb 4 04:13:07 148.245.185.166:4430 -> xxx.yyy.1.3:6101 SYN ******S* Feb 4 04:13:04 148.245.185.166:4431 -> xxx.yyy.1.4:6101 SYN ******S* Feb 4 04:13:07 148.245.185.166:4433 -> xxx.yyy.1.6:6101 SYN ******S* Feb 4 04:13:04 148.245.185.166:4432 -> xxx.yyy.1.5:6101 SYN ******S* Feb 4 04:13:04 148.245.185.166:4434 -> xxx.yyy.1.7:6101 SYN ******S* Feb 4 04:13:04 148.245.185.166:4437 -> xxx.yyy.1.10:6101 SYN ******S* [...] Feb 4 04:17:49 148.245.185.166:1678 -> xxx.yyy.254.174:6101 SYN ******S* Feb 4 04:17:49 148.245.185.166:1675 -> xxx.yyy.254.171:6101 SYN ******S* Feb 4 04:17:49 148.245.185.166:1734 -> xxx.yyy.254.230:6101 SYN ******S* Feb 4 04:17:49 148.245.185.166:1789 -> xxx.yyy.255.30:6101 SYN ******S* Feb 4 04:17:49 148.245.185.166:1770 -> xxx.yyy.255.11:6101 SYN ******S* Feb 4 04:17:49 148.245.185.166:1863 -> xxx.yyy.255.104:6101 SYN ******S* Feb 4 04:17:49 148.245.185.166:1790 -> xxx.yyy.255.31:6101 SYN ******S* Feb 4 04:17:49 148.245.185.166:1872 -> xxx.yyy.255.113:6101 SYN ******S* Feb 4 04:17:49 148.245.185.166:1898 -> xxx.yyy.255.139:6101 SYN ******S* 52376 Feb 4 04:54:17 68.191.99.229:3666 -> xxx.yyy.1.1:1433 SYN ******S* Feb 4 04:54:17 68.191.99.229:4322 -> xxx.yyy.1.2:1433 SYN ******S* Feb 4 04:54:17 68.191.99.229:4386 -> xxx.yyy.1.3:1433 SYN ******S* Feb 4 04:54:17 68.191.99.229:4763 -> xxx.yyy.1.4:1433 SYN ******S* Feb 4 04:54:17 68.191.99.229:3092 -> xxx.yyy.1.14:1433 SYN ******S* Feb 4 04:54:17 68.191.99.229:4965 -> xxx.yyy.1.16:1433 SYN ******S* Feb 4 04:54:17 68.191.99.229:3518 -> xxx.yyy.1.20:1433 SYN ******S* Feb 4 04:54:17 68.191.99.229:4080 -> xxx.yyy.1.21:1433 SYN ******S* [...] Feb 4 06:27:17 68.191.99.229:3499 -> xxx.yyy.255.196:1433 SYN ******S* Feb 4 06:27:17 68.191.99.229:4017 -> xxx.yyy.255.198:1433 SYN ******S* Feb 4 06:27:18 68.191.99.229:4136 -> xxx.yyy.255.215:1433 SYN ******S* Feb 4 06:27:18 68.191.99.229:4363 -> xxx.yyy.255.221:1433 SYN ******S* Feb 4 06:27:18 68.191.99.229:3503 -> xxx.yyy.255.220:1433 SYN ******S* Feb 4 06:27:18 68.191.99.229:3410 -> xxx.yyy.255.219:1433 SYN ******S* Feb 4 06:27:18 68.191.99.229:3213 -> xxx.yyy.255.227:1433 SYN ******S* Feb 4 06:27:18 68.191.99.229:4115 -> xxx.yyy.255.228:1433 SYN ******S* Feb 4 06:27:18 68.191.99.229:3015 -> xxx.yyy.255.231:1433 SYN ******S* 46727 Feb 4 16:06:22 66.28.236.193:4555 -> xxx.yyy.1.1:4000 SYN ******S* Feb 4 16:06:22 66.28.236.193:4558 -> xxx.yyy.1.2:4000 SYN ******S* Feb 4 16:06:22 66.28.236.193:4559 -> xxx.yyy.1.3:4000 SYN ******S* Feb 4 16:06:21 66.28.236.193:4563 -> xxx.yyy.1.4:4000 SYN ******S* Feb 4 16:06:21 66.28.236.193:4566 -> xxx.yyy.1.5:4000 SYN ******S* Feb 4 16:06:21 66.28.236.193:4714 -> xxx.yyy.1.14:4000 SYN ******S* Feb 4 16:06:21 66.28.236.193:4717 -> xxx.yyy.1.15:4000 SYN ******S* Feb 4 16:06:24 66.28.236.193:4725 -> xxx.yyy.1.18:4000 SYN ******S* [...] Feb 4 16:12:13 66.28.236.193:1883 -> xxx.yyy.255.245:4000 SYN ******S* Feb 4 16:12:13 66.28.236.193:1871 -> xxx.yyy.255.233:4000 SYN ******S* Feb 4 16:12:13 66.28.236.193:1884 -> xxx.yyy.255.246:4000 SYN ******S* Feb 4 16:12:13 66.28.236.193:1872 -> xxx.yyy.255.234:4000 SYN ******S* Feb 4 16:12:13 66.28.236.193:1886 -> xxx.yyy.255.248:4000 SYN ******S* Feb 4 16:12:13 66.28.236.193:1874 -> xxx.yyy.255.236:4000 SYN ******S* Feb 4 16:12:13 66.28.236.193:1887 -> xxx.yyy.255.249:4000 SYN ******S* Feb 4 16:12:13 66.28.236.193:1875 -> xxx.yyy.255.237:4000 SYN ******S* Feb 4 16:12:13 66.28.236.193:1888 -> xxx.yyy.255.250:4000 SYN ******S* 42991 Feb 4 02:19:53 62.215.200.13:2262 -> xxx.yyy.1.1:6666 SYN ******S* Feb 4 02:19:53 62.215.200.13:2264 -> xxx.yyy.1.3:6666 SYN ******S* Feb 4 02:19:51 62.215.200.13:2265 -> xxx.yyy.1.4:6666 SYN ******S* Feb 4 02:19:51 62.215.200.13:2267 -> xxx.yyy.1.6:6666 SYN ******S* Feb 4 02:19:53 62.215.200.13:2269 -> xxx.yyy.1.8:6666 SYN ******S* Feb 4 02:19:51 62.215.200.13:2271 -> xxx.yyy.1.10:6666 SYN ******S* Feb 4 02:19:53 62.215.200.13:2263 -> xxx.yyy.1.2:6666 SYN ******S* Feb 4 02:19:51 62.215.200.13:2274 -> xxx.yyy.1.13:6666 SYN ******S* [...] Feb 4 02:31:35 62.215.200.13:4862 -> xxx.yyy.255.251:6666 SYN ******S* Feb 4 02:31:35 62.215.200.13:4863 -> xxx.yyy.255.252:6666 SYN ******S* Feb 4 02:31:35 62.215.200.13:4851 -> xxx.yyy.255.243:6666 SYN ******S* Feb 4 02:31:35 62.215.200.13:4853 -> xxx.yyy.255.244:6666 SYN ******S* Feb 4 02:31:35 62.215.200.13:4865 -> xxx.yyy.255.254:6666 SYN ******S* Feb 4 02:31:35 62.215.200.13:4855 -> xxx.yyy.255.246:6666 SYN ******S* Feb 4 02:31:36 62.215.200.13:4859 -> xxx.yyy.255.248:6666 SYN ******S* Feb 4 02:31:36 62.215.200.13:4861 -> xxx.yyy.255.250:6666 SYN ******S* Feb 4 02:31:36 62.215.200.13:4864 -> xxx.yyy.255.253:6666 SYN ******S* 42462 Feb 4 17:56:45 213.180.210.35:43026 -> xxx.yyy.246.142:1080 SYN ******S* Feb 4 17:56:45 213.180.210.35:54169 -> xxx.yyy.246.142:1075 SYN ******S* Feb 4 17:56:45 213.180.210.35:46046 -> xxx.yyy.246.142:80 SYN ******S* Feb 4 17:56:45 213.180.210.35:60348 -> xxx.yyy.246.142:4480 SYN ******S* Feb 4 17:56:45 213.180.210.35:49558 -> xxx.yyy.246.142:81 SYN ******S* Feb 4 17:56:45 213.180.210.35:39193 -> xxx.yyy.246.142:3128 SYN ******S* Feb 4 17:56:45 213.180.210.35:34457 -> xxx.yyy.246.142:8000 SYN ******S* Feb 4 17:56:45 213.180.210.35:46786 -> xxx.yyy.246.142:6588 SYN ******S* [...] Feb 4 23:11:25 213.180.210.35:55947 -> xxx.yyy.246.142:6060 SYN ******S* Feb 4 23:11:25 213.180.210.35:55947 -> xxx.yyy.246.142:1434 SYN ******S* Feb 4 23:11:25 213.180.210.35:55947 -> xxx.yyy.246.142:512 SYN ******S* Feb 4 23:11:25 213.180.210.35:55947 -> xxx.yyy.246.142:6020 SYN ******S* Feb 4 23:11:25 213.180.210.35:55947 -> xxx.yyy.246.142:6014 SYN ******S* Feb 4 23:11:25 213.180.210.35:55947 -> xxx.yyy.246.142:6035 SYN ******S* Feb 4 23:11:25 213.180.210.35:55947 -> xxx.yyy.246.142:2049 SYN ******S* Feb 4 23:11:25 213.180.210.35:55947 -> xxx.yyy.246.142:6012 SYN ******S* Feb 4 23:11:25 213.180.210.35:55947 -> xxx.yyy.246.142:6030 SYN ******S* 42167 Feb 4 15:16:29 61.77.50.51:4019 -> xxx.yyy.1.9:42 SYN ******S* Feb 4 15:16:26 61.77.50.51:4021 -> xxx.yyy.1.11:42 SYN ******S* Feb 4 15:16:26 61.77.50.51:4025 -> xxx.yyy.1.15:42 SYN ******S* Feb 4 15:16:26 61.77.50.51:4023 -> xxx.yyy.1.13:42 SYN ******S* Feb 4 15:16:26 61.77.50.51:4026 -> xxx.yyy.1.16:42 SYN ******S* Feb 4 15:16:26 61.77.50.51:4024 -> xxx.yyy.1.14:42 SYN ******S* Feb 4 15:16:26 61.77.50.51:4030 -> xxx.yyy.1.20:42 SYN ******S* Feb 4 15:16:26 61.77.50.51:4011 -> xxx.yyy.1.1:42 SYN ******S* [...] Feb 4 15:20:14 61.77.50.51:3388 -> xxx.yyy.255.161:42 SYN ******S* Feb 4 15:20:14 61.77.50.51:3435 -> xxx.yyy.253.249:42 SYN ******S* Feb 4 15:20:14 61.77.50.51:3421 -> xxx.yyy.253.213:42 SYN ******S* Feb 4 15:20:14 61.77.50.51:3325 -> xxx.yyy.253.5:42 SYN ******S* Feb 4 15:20:14 61.77.50.51:3355 -> xxx.yyy.255.85:42 SYN ******S* Feb 4 15:20:15 61.77.50.51:3349 -> xxx.yyy.255.79:42 SYN ******S* Feb 4 15:20:15 61.77.50.51:3308 -> xxx.yyy.255.37:42 SYN ******S* Feb 4 15:20:15 61.77.50.51:3317 -> xxx.yyy.255.47:42 SYN ******S* Feb 4 15:20:15 61.77.50.51:3353 -> xxx.yyy.255.82:42 SYN ******S* 36760 [...] 31061 Feb 4 05:10:38 220.172.204.110:3316 -> xxx.yyy.20.0:1433 SYN ******S* Feb 4 05:10:38 220.172.204.110:3333 -> xxx.yyy.20.1:1433 SYN ******S* Feb 4 05:10:38 220.172.204.110:3335 -> xxx.yyy.20.2:1433 SYN ******S* Feb 4 05:10:38 220.172.204.110:3338 -> xxx.yyy.20.3:1433 SYN ******S* Feb 4 05:10:38 220.172.204.110:3341 -> xxx.yyy.20.5:1433 SYN ******S* Feb 4 05:10:38 220.172.204.110:3339 -> xxx.yyy.20.4:1433 SYN ******S* Feb 4 05:10:38 220.172.204.110:3345 -> xxx.yyy.20.7:1433 SYN ******S* Feb 4 05:10:38 220.172.204.110:3344 -> xxx.yyy.20.6:1433 SYN ******S* [...] Feb 4 06:53:48 220.172.204.110:3095 -> xxx.yyy.140.65:1433 SYN ******S* Feb 4 06:53:49 220.172.204.110:3119 -> xxx.yyy.140.67:1433 SYN ******S* Feb 4 06:53:49 220.172.204.110:3109 -> xxx.yyy.140.66:1433 SYN ******S* Feb 4 06:53:49 220.172.204.110:3132 -> xxx.yyy.140.69:1433 SYN ******S* Feb 4 06:53:49 220.172.204.110:3130 -> xxx.yyy.140.68:1433 SYN ******S* Feb 4 06:53:50 220.172.204.110:3269 -> xxx.yyy.140.76:1433 SYN ******S* Feb 4 06:53:50 220.172.204.110:3222 -> xxx.yyy.140.73:1433 SYN ******S* Feb 4 06:53:50 220.172.204.110:3230 -> xxx.yyy.140.72:1433 SYN ******S* Feb 4 06:53:50 220.172.204.110:3277 -> xxx.yyy.140.75:1433 SYN ******S* 25521 Feb 4 17:38:50 134.117.147.23:2489 -> xxx.yyy.1.0:554 SYN ******S* Feb 4 17:38:50 134.117.147.23:2490 -> xxx.yyy.1.1:554 SYN ******S* Feb 4 17:38:50 134.117.147.23:2491 -> xxx.yyy.1.2:554 SYN ******S* Feb 4 17:38:49 134.117.147.23:2494 -> xxx.yyy.1.5:554 SYN ******S* Feb 4 17:38:49 134.117.147.23:2495 -> xxx.yyy.1.6:554 SYN ******S* Feb 4 17:38:49 134.117.147.23:2496 -> xxx.yyy.1.7:554 SYN ******S* Feb 4 17:38:50 134.117.147.23:2497 -> xxx.yyy.1.8:554 SYN ******S* Feb 4 17:38:50 134.117.147.23:2498 -> xxx.yyy.1.9:554 SYN ******S* [...] Feb 4 17:48:08 134.117.147.23:3308 -> xxx.yyy.255.241:554 SYN ******S* Feb 4 17:48:08 134.117.147.23:3309 -> xxx.yyy.255.242:554 SYN ******S* Feb 4 17:48:08 134.117.147.23:3310 -> xxx.yyy.255.243:554 SYN ******S* Feb 4 17:48:08 134.117.147.23:3311 -> xxx.yyy.255.244:554 SYN ******S* Feb 4 17:48:08 134.117.147.23:3312 -> xxx.yyy.255.245:554 SYN ******S* Feb 4 17:48:08 134.117.147.23:3313 -> xxx.yyy.255.246:554 SYN ******S* Feb 4 17:48:08 134.117.147.23:3314 -> xxx.yyy.255.247:554 SYN ******S* Feb 4 17:48:08 134.117.147.23:3320 -> xxx.yyy.255.253:554 SYN ******S* Feb 4 17:48:08 134.117.147.23:3321 -> xxx.yyy.255.254:554 SYN ******S* 24251 Feb 4 10:39:21 63.192.190.231:2678 -> xxx.yyy.1.26:3306 SYN ******S* Feb 4 10:39:21 63.192.190.231:2671 -> xxx.yyy.1.19:3306 SYN ******S* Feb 4 10:39:24 63.192.190.231:2680 -> xxx.yyy.1.28:3306 SYN ******S* Feb 4 10:39:24 63.192.190.231:2689 -> xxx.yyy.1.37:3306 SYN ******S* Feb 4 10:39:21 63.192.190.231:2681 -> xxx.yyy.1.29:3306 SYN ******S* Feb 4 10:39:21 63.192.190.231:2691 -> xxx.yyy.1.39:3306 SYN ******S* Feb 4 10:39:21 63.192.190.231:2683 -> xxx.yyy.1.31:3306 SYN ******S* Feb 4 10:39:24 63.192.190.231:2693 -> xxx.yyy.1.41:3306 SYN ******S* [...] Feb 4 10:56:33 63.192.190.231:2399 -> xxx.yyy.255.218:3306 SYN ******S* Feb 4 10:56:33 63.192.190.231:2367 -> xxx.yyy.255.186:3306 SYN ******S* Feb 4 10:56:33 63.192.190.231:2332 -> xxx.yyy.255.151:3306 SYN ******S* Feb 4 10:56:33 63.192.190.231:2348 -> xxx.yyy.255.167:3306 SYN ******S* Feb 4 10:56:33 63.192.190.231:2396 -> xxx.yyy.255.215:3306 SYN ******S* Feb 4 10:56:33 63.192.190.231:2393 -> xxx.yyy.255.212:3306 SYN ******S* Feb 4 10:56:33 63.192.190.231:2377 -> xxx.yyy.255.196:3306 SYN ******S* Feb 4 10:56:33 63.192.190.231:2329 -> xxx.yyy.255.148:3306 SYN ******S* 19868 [...] 19762 Feb 4 13:57:19 222.177.175.133:59373 -> xxx.yyy.1.0:32773 SYN ******S* Feb 4 13:57:19 222.177.175.133:59377 -> xxx.yyy.1.4:32773 SYN ******S* Feb 4 13:57:19 222.177.175.133:59374 -> xxx.yyy.1.1:32773 SYN ******S* Feb 4 13:57:19 222.177.175.133:59378 -> xxx.yyy.1.5:32773 SYN ******S* Feb 4 13:57:19 222.177.175.133:59375 -> xxx.yyy.1.2:32773 SYN ******S* Feb 4 13:57:19 222.177.175.133:59376 -> xxx.yyy.1.3:32773 SYN ******S* Feb 4 13:57:20 222.177.175.133:59379 -> xxx.yyy.1.6:32773 SYN ******S* Feb 4 13:57:20 222.177.175.133:59382 -> xxx.yyy.1.9:32773 SYN ******S* [...] Feb 4 14:23:18 222.177.175.133:57852 -> xxx.yyy.255.37:32773 SYN ******S* Feb 4 14:23:18 222.177.175.133:57983 -> xxx.yyy.255.233:32773 SYN ******S* Feb 4 14:23:18 222.177.175.133:57997 -> xxx.yyy.255.247:32773 SYN ******S* Feb 4 14:23:18 222.177.175.133:58001 -> xxx.yyy.255.251:32773 SYN ******S* Feb 4 14:23:18 222.177.175.133:57994 -> xxx.yyy.255.244:32773 SYN ******S* Feb 4 14:23:18 222.177.175.133:57986 -> xxx.yyy.255.236:32773 SYN ******S* Feb 4 14:23:18 222.177.175.133:57998 -> xxx.yyy.255.248:32773 SYN ******S* Feb 4 14:23:18 222.177.175.133:58000 -> xxx.yyy.255.250:32773 SYN ******S* Feb 4 14:23:18 222.177.175.133:58002 -> xxx.yyy.255.252:32773 SYN ******S* 19300 Feb 4 08:10:21 220.93.60.203:4066 -> xxx.yyy.194.131:5554 SYN ******S* Feb 4 08:10:22 220.93.60.203:4800 -> xxx.yyy.194.131:1023 SYN ******S* Feb 4 08:10:21 220.93.60.203:4068 -> xxx.yyy.194.133:5554 SYN ******S* Feb 4 08:10:22 220.93.60.203:4803 -> xxx.yyy.194.133:1023 SYN ******S* Feb 4 08:10:24 220.93.60.203:1912 -> xxx.yyy.194.133:9898 SYN ******S* Feb 4 08:10:21 220.93.60.203:4099 -> xxx.yyy.194.140:5554 SYN ******S* Feb 4 08:10:21 220.93.60.203:4064 -> xxx.yyy.194.129:5554 SYN ******S* Feb 4 08:10:24 220.93.60.203:1907 -> xxx.yyy.194.129:9898 SYN ******S* [...] Feb 4 08:11:07 220.93.60.203:4772 -> xxx.yyy.214.127:9898 SYN ******S* Feb 4 08:11:07 220.93.60.203:4785 -> xxx.yyy.214.131:9898 SYN ******S* Feb 4 08:11:08 220.93.60.203:4799 -> xxx.yyy.214.133:9898 SYN ******S* Feb 4 08:11:08 220.93.60.203:4812 -> xxx.yyy.214.135:9898 SYN ******S* Feb 4 08:11:08 220.93.60.203:4813 -> xxx.yyy.214.136:9898 SYN ******S* Feb 4 08:11:08 220.93.60.203:4815 -> xxx.yyy.214.138:9898 SYN ******S* Feb 4 08:11:08 220.93.60.203:4814 -> xxx.yyy.214.137:9898 SYN ******S* Feb 4 08:11:08 220.93.60.203:4831 -> xxx.yyy.214.144:9898 SYN ******S* Feb 4 08:11:08 220.93.60.203:4849 -> xxx.yyy.214.155:9898 SYN ******S* 10905 [...] 10696 Feb 4 23:56:25 60.176.58.191:3000 -> xxx.yyy.215.0:5554 SYN ******S* Feb 4 23:56:26 60.176.58.191:3027 -> xxx.yyy.215.1:5554 SYN ******S* Feb 4 23:56:27 60.176.58.191:3537 -> xxx.yyy.215.1:1023 SYN ******S* Feb 4 23:56:26 60.176.58.191:3028 -> xxx.yyy.215.2:5554 SYN ******S* Feb 4 23:56:29 60.176.58.191:1082 -> xxx.yyy.215.2:9898 SYN ******S* Feb 4 23:56:26 60.176.58.191:3113 -> xxx.yyy.215.24:5554 SYN ******S* Feb 4 23:56:29 60.176.58.191:1172 -> xxx.yyy.215.24:9898 SYN ******S* Feb 4 23:56:26 60.176.58.191:3120 -> xxx.yyy.215.27:5554 SYN ******S* [...] Feb 4 23:57:12 60.176.58.191:2057 -> xxx.yyy.235.58:9898 SYN ******S* Feb 4 23:57:12 60.176.58.191:2136 -> xxx.yyy.235.77:9898 SYN ******S* Feb 4 23:57:12 60.176.58.191:2177 -> xxx.yyy.235.89:9898 SYN ******S* Feb 4 23:57:12 60.176.58.191:2184 -> xxx.yyy.235.91:9898 SYN ******S* Feb 4 23:57:12 60.176.58.191:2200 -> xxx.yyy.235.94:9898 SYN ******S* Feb 4 23:57:12 60.176.58.191:2273 -> xxx.yyy.235.87:9898 SYN ******S* Feb 4 23:57:12 60.176.58.191:2274 -> xxx.yyy.235.88:9898 SYN ******S* Feb 4 23:57:12 60.176.58.191:2311 -> xxx.yyy.235.98:9898 SYN ******S* Feb 4 23:57:12 60.176.58.191:2323 -> xxx.yyy.235.103:9898 SYN ******S* 9738 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions