[LOGS] Summary of large-scale portscanning detects
[email protected] Sun, 13 Feb 2005 07:56:45 -0600 (CST)
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Feb 12 05:48:14 216.231.56.179:2528 -> xxx.yyy.1.1:6129 SYN ******S* Feb 12 05:48:13 216.231.56.179:2529 -> xxx.yyy.1.2:6129 SYN ******S* Feb 12 05:48:14 216.231.56.179:2530 -> xxx.yyy.1.3:6129 SYN ******S* Feb 12 05:48:16 216.231.56.179:2531 -> xxx.yyy.1.4:6129 SYN ******S* Feb 12 05:48:16 216.231.56.179:2532 -> xxx.yyy.1.5:6129 SYN ******S* Feb 12 05:48:16 216.231.56.179:2533 -> xxx.yyy.1.6:6129 SYN ******S* Feb 12 05:48:16 216.231.56.179:2534 -> xxx.yyy.1.7:6129 SYN ******S* Feb 12 05:48:14 216.231.56.179:2535 -> xxx.yyy.1.8:6129 SYN ******S* [...] Feb 12 06:13:19 216.231.56.179:3165 -> xxx.yyy.255.249:6129 SYN ******S* Feb 12 06:13:19 216.231.56.179:3158 -> xxx.yyy.255.243:6129 SYN ******S* Feb 12 06:13:19 216.231.56.179:3162 -> xxx.yyy.255.246:6129 SYN ******S* Feb 12 06:13:19 216.231.56.179:3166 -> xxx.yyy.255.250:6129 SYN ******S* Feb 12 06:13:19 216.231.56.179:3159 -> xxx.yyy.255.244:6129 SYN ******S* Feb 12 06:13:19 216.231.56.179:3163 -> xxx.yyy.255.247:6129 SYN ******S* Feb 12 06:13:19 216.231.56.179:3170 -> xxx.yyy.255.254:6129 SYN ******S* Feb 12 06:13:19 216.231.56.179:3169 -> xxx.yyy.255.253:6129 SYN ******S* 113650 [...] 89919 Feb 12 01:24:57 221.194.228.83:2587 -> xxx.yyy.1.19:1433 SYN ******S* Feb 12 01:24:57 221.194.228.83:2590 -> xxx.yyy.1.22:1433 SYN ******S* Feb 12 01:24:54 221.194.228.83:2591 -> xxx.yyy.1.23:1433 SYN ******S* Feb 12 01:24:57 221.194.228.83:2595 -> xxx.yyy.1.27:1433 SYN ******S* Feb 12 01:24:54 221.194.228.83:2593 -> xxx.yyy.1.25:1433 SYN ******S* Feb 12 01:24:57 221.194.228.83:2596 -> xxx.yyy.1.28:1433 SYN ******S* Feb 12 01:24:57 221.194.228.83:2594 -> xxx.yyy.1.26:1433 SYN ******S* Feb 12 01:24:56 221.194.228.83:2600 -> xxx.yyy.1.32:1433 SYN ******S* [...] Feb 12 09:02:00 221.194.228.83:1257 -> xxx.yyy.255.254:1433 SYN ******S* Feb 12 09:02:01 221.194.228.83:1232 -> xxx.yyy.255.247:1433 SYN ******S* Feb 12 09:02:02 221.194.228.83:1236 -> xxx.yyy.255.248:1433 SYN ******S* Feb 12 09:02:03 221.194.228.83:1246 -> xxx.yyy.255.251:1433 SYN ******S* Feb 12 09:02:03 221.194.228.83:1242 -> xxx.yyy.255.250:1433 SYN ******S* Feb 12 09:02:04 221.194.228.83:1249 -> xxx.yyy.255.252:1433 SYN ******S* Feb 12 09:02:04 221.194.228.83:1252 -> xxx.yyy.255.253:1433 SYN ******S* Feb 12 09:02:06 221.194.228.83:1257 -> xxx.yyy.255.254:1433 SYN ******S* 88167 Feb 12 07:20:16 81.16.224.41:14752 -> xxx.yyy.1.1:1433 SYN ******S* Feb 12 07:20:16 81.16.224.41:14753 -> xxx.yyy.1.2:1433 SYN ******S* Feb 12 07:20:19 81.16.224.41:14754 -> xxx.yyy.1.3:1433 SYN ******S* Feb 12 07:20:19 81.16.224.41:14755 -> xxx.yyy.1.4:1433 SYN ******S* Feb 12 07:20:19 81.16.224.41:14756 -> xxx.yyy.1.5:1433 SYN ******S* Feb 12 07:20:19 81.16.224.41:14757 -> xxx.yyy.1.6:1433 SYN ******S* Feb 12 07:20:19 81.16.224.41:14759 -> xxx.yyy.1.8:1433 SYN ******S* Feb 12 07:20:19 81.16.224.41:14760 -> xxx.yyy.1.9:1433 SYN ******S* [...] Feb 12 07:31:58 81.16.224.41:22253 -> xxx.yyy.255.250:1433 SYN ******S* Feb 12 07:31:58 81.16.224.41:22254 -> xxx.yyy.255.251:1433 SYN ******S* Feb 12 07:31:58 81.16.224.41:22251 -> xxx.yyy.255.248:1433 SYN ******S* Feb 12 07:31:58 81.16.224.41:22249 -> xxx.yyy.255.246:1433 SYN ******S* Feb 12 07:31:58 81.16.224.41:22250 -> xxx.yyy.255.247:1433 SYN ******S* Feb 12 07:31:58 81.16.224.41:22247 -> xxx.yyy.255.244:1433 SYN ******S* Feb 12 07:31:58 81.16.224.41:22248 -> xxx.yyy.255.245:1433 SYN ******S* Feb 12 07:31:58 81.16.224.41:22257 -> xxx.yyy.255.254:1433 SYN ******S* Feb 12 07:31:58 81.16.224.41:22256 -> xxx.yyy.255.253:1433 SYN ******S* 71282 Feb 12 05:54:21 212.50.178.199:2869 -> xxx.yyy.1.1:6101 SYN ******S* Feb 12 05:54:21 212.50.178.199:2870 -> xxx.yyy.1.2:6101 SYN ******S* Feb 12 05:54:18 212.50.178.199:2871 -> xxx.yyy.1.3:6101 SYN ******S* Feb 12 05:54:21 212.50.178.199:2872 -> xxx.yyy.1.4:6101 SYN ******S* Feb 12 05:54:21 212.50.178.199:2875 -> xxx.yyy.1.7:6101 SYN ******S* Feb 12 05:54:21 212.50.178.199:2877 -> xxx.yyy.1.9:6101 SYN ******S* Feb 12 05:54:21 212.50.178.199:2880 -> xxx.yyy.1.12:6101 SYN ******S* Feb 12 05:54:21 212.50.178.199:2873 -> xxx.yyy.1.5:6101 SYN ******S* [...] Feb 12 06:00:20 212.50.178.199:3144 -> xxx.yyy.255.195:6101 SYN ******S* Feb 12 06:00:20 212.50.178.199:3195 -> xxx.yyy.255.220:6101 SYN ******S* Feb 12 06:00:20 212.50.178.199:3140 -> xxx.yyy.255.193:6101 SYN ******S* Feb 12 06:00:20 212.50.178.199:3146 -> xxx.yyy.255.196:6101 SYN ******S* Feb 12 06:00:20 212.50.178.199:3142 -> xxx.yyy.255.194:6101 SYN ******S* Feb 12 06:00:20 212.50.178.199:3148 -> xxx.yyy.255.197:6101 SYN ******S* Feb 12 06:00:20 212.50.178.199:3252 -> xxx.yyy.255.249:6101 SYN ******S* Feb 12 06:00:20 212.50.178.199:3254 -> xxx.yyy.255.250:6101 SYN ******S* 67479 Feb 12 19:57:00 221.2.240.236:1950 -> xxx.yyy.1.1:1433 SYN ******S* Feb 12 19:57:00 221.2.240.236:1953 -> xxx.yyy.1.2:1433 SYN ******S* Feb 12 19:57:00 221.2.240.236:1954 -> xxx.yyy.1.3:1433 SYN ******S* Feb 12 19:56:57 221.2.240.236:1958 -> xxx.yyy.1.4:1433 SYN ******S* Feb 12 19:56:57 221.2.240.236:1969 -> xxx.yyy.1.8:1433 SYN ******S* Feb 12 19:57:00 221.2.240.236:1961 -> xxx.yyy.1.5:1433 SYN ******S* Feb 12 19:57:00 221.2.240.236:1964 -> xxx.yyy.1.6:1433 SYN ******S* Feb 12 19:57:00 221.2.240.236:1972 -> xxx.yyy.1.9:1433 SYN ******S* [...] Feb 12 23:09:10 221.2.240.236:3213 -> xxx.yyy.210.21:1433 SYN ******S* Feb 12 23:09:11 221.2.240.236:3325 -> xxx.yyy.210.39:1433 SYN ******S* Feb 12 23:09:11 221.2.240.236:3232 -> xxx.yyy.210.23:1433 SYN ******S* Feb 12 23:09:11 221.2.240.236:3334 -> xxx.yyy.210.40:1433 SYN ******S* Feb 12 23:09:11 221.2.240.236:3244 -> xxx.yyy.210.24:1433 SYN ******S* Feb 12 23:09:11 221.2.240.236:3248 -> xxx.yyy.210.25:1433 SYN ******S* Feb 12 23:09:12 221.2.240.236:3360 -> xxx.yyy.210.43:1433 SYN ******S* Feb 12 23:09:12 221.2.240.236:3275 -> xxx.yyy.210.30:1433 SYN ******S* Feb 12 23:09:12 221.2.240.236:3271 -> xxx.yyy.210.29:1433 SYN ******S* 64304 Feb 12 20:06:57 212.214.41.161:2817 -> xxx.yyy.1.1:3306 SYN ******S* Feb 12 20:06:57 212.214.41.161:2818 -> xxx.yyy.1.2:3306 SYN ******S* Feb 12 20:06:57 212.214.41.161:2819 -> xxx.yyy.1.3:3306 SYN ******S* Feb 12 20:06:57 212.214.41.161:2820 -> xxx.yyy.1.4:3306 SYN ******S* Feb 12 20:07:00 212.214.41.161:2827 -> xxx.yyy.1.11:3306 SYN ******S* Feb 12 20:07:00 212.214.41.161:2828 -> xxx.yyy.1.12:3306 SYN ******S* Feb 12 20:06:58 212.214.41.161:2830 -> xxx.yyy.1.14:3306 SYN ******S* Feb 12 20:06:58 212.214.41.161:2831 -> xxx.yyy.1.15:3306 SYN ******S* [...] Feb 12 20:18:40 212.214.41.161:1459 -> xxx.yyy.255.250:3306 SYN ******S* Feb 12 20:18:40 212.214.41.161:1457 -> xxx.yyy.255.248:3306 SYN ******S* Feb 12 20:18:40 212.214.41.161:1454 -> xxx.yyy.255.245:3306 SYN ******S* Feb 12 20:18:40 212.214.41.161:1456 -> xxx.yyy.255.247:3306 SYN ******S* Feb 12 20:18:40 212.214.41.161:1458 -> xxx.yyy.255.249:3306 SYN ******S* Feb 12 20:18:40 212.214.41.161:1461 -> xxx.yyy.255.252:3306 SYN ******S* Feb 12 20:18:40 212.214.41.161:1463 -> xxx.yyy.255.254:3306 SYN ******S* Feb 12 20:18:40 212.214.41.161:1462 -> xxx.yyy.255.253:3306 SYN ******S* 58889 Feb 12 17:41:56 203.150.224.44:1942 -> xxx.yyy.1.1:1433 SYN ******S* Feb 12 17:41:56 203.150.224.44:1943 -> xxx.yyy.1.2:1433 SYN ******S* Feb 12 17:41:56 203.150.224.44:1944 -> xxx.yyy.1.3:1433 SYN ******S* Feb 12 17:41:53 203.150.224.44:1947 -> xxx.yyy.1.6:1433 SYN ******S* Feb 12 17:41:56 203.150.224.44:1945 -> xxx.yyy.1.4:1433 SYN ******S* Feb 12 17:41:53 203.150.224.44:1949 -> xxx.yyy.1.8:1433 SYN ******S* Feb 12 17:41:53 203.150.224.44:1955 -> xxx.yyy.1.14:1433 SYN ******S* Feb 12 17:41:53 203.150.224.44:1952 -> xxx.yyy.1.11:1433 SYN ******S* [...] Feb 12 17:46:23 203.150.224.44:3222 -> xxx.yyy.255.221:1433 SYN ******S* Feb 12 17:46:23 203.150.224.44:3184 -> xxx.yyy.255.183:1433 SYN ******S* Feb 12 17:46:23 203.150.224.44:3183 -> xxx.yyy.255.182:1433 SYN ******S* Feb 12 17:46:23 203.150.224.44:3167 -> xxx.yyy.255.166:1433 SYN ******S* Feb 12 17:46:23 203.150.224.44:3223 -> xxx.yyy.255.222:1433 SYN ******S* Feb 12 17:46:23 203.150.224.44:3207 -> xxx.yyy.255.206:1433 SYN ******S* Feb 12 17:46:23 203.150.224.44:3204 -> xxx.yyy.255.203:1433 SYN ******S* Feb 12 17:46:23 203.150.224.44:3212 -> xxx.yyy.255.211:1433 SYN ******S* 57916 Feb 12 13:42:46 211.162.14.20:3800 -> xxx.yyy.1.0:1433 SYN ******S* Feb 12 13:42:46 211.162.14.20:3820 -> xxx.yyy.1.2:1433 SYN ******S* Feb 12 13:42:46 211.162.14.20:3818 -> xxx.yyy.1.1:1433 SYN ******S* Feb 12 13:42:46 211.162.14.20:3828 -> xxx.yyy.1.4:1433 SYN ******S* Feb 12 13:42:46 211.162.14.20:3834 -> xxx.yyy.1.6:1433 SYN ******S* Feb 12 13:42:46 211.162.14.20:3858 -> xxx.yyy.1.14:1433 SYN ******S* Feb 12 13:42:46 211.162.14.20:3825 -> xxx.yyy.1.3:1433 SYN ******S* Feb 12 13:42:46 211.162.14.20:3846 -> xxx.yyy.1.10:1433 SYN ******S* [...] Feb 12 16:44:03 211.162.14.20:4716 -> xxx.yyy.195.68:1433 SYN ******S* Feb 12 16:44:03 211.162.14.20:4127 -> xxx.yyy.195.54:1433 SYN ******S* Feb 12 16:44:03 211.162.14.20:4120 -> xxx.yyy.195.52:1433 SYN ******S* Feb 12 16:44:03 211.162.14.20:4128 -> xxx.yyy.195.55:1433 SYN ******S* Feb 12 16:44:04 211.162.14.20:4740 -> xxx.yyy.195.72:1433 SYN ******S* Feb 12 16:44:04 211.162.14.20:4741 -> xxx.yyy.195.73:1433 SYN ******S* Feb 12 16:44:04 211.162.14.20:4535 -> xxx.yyy.195.64:1433 SYN ******S* Feb 12 16:44:04 211.162.14.20:4149 -> xxx.yyy.195.56:1433 SYN ******S* Feb 12 16:44:04 211.162.14.20:4150 -> xxx.yyy.195.57:1433 SYN ******S* 56606 Feb 12 13:15:47 216.141.160.82:4142 -> xxx.yyy.1.2:2050 SYN ******S* Feb 12 13:15:50 216.141.160.82:4144 -> xxx.yyy.1.4:2050 SYN ******S* Feb 12 13:15:50 216.141.160.82:4146 -> xxx.yyy.1.6:2050 SYN ******S* Feb 12 13:15:50 216.141.160.82:4147 -> xxx.yyy.1.7:2050 SYN ******S* Feb 12 13:15:48 216.141.160.82:4148 -> xxx.yyy.1.8:2050 SYN ******S* Feb 12 13:15:47 216.141.160.82:4149 -> xxx.yyy.1.9:2050 SYN ******S* Feb 12 13:15:48 216.141.160.82:4151 -> xxx.yyy.1.11:2050 SYN ******S* Feb 12 13:15:47 216.141.160.82:4152 -> xxx.yyy.1.12:2050 SYN ******S* [...] Feb 12 13:26:45 216.141.160.82:3297 -> xxx.yyy.255.253:2050 SYN ******S* Feb 12 13:26:45 216.141.160.82:3294 -> xxx.yyy.255.250:2050 SYN ******S* Feb 12 13:26:45 216.141.160.82:3293 -> xxx.yyy.255.249:2050 SYN ******S* Feb 12 15:02:01 216.141.160.82:4108 -> xxx.yyy.225.188:2050 SYN ******S* Feb 12 15:01:58 216.141.160.82:4110 -> xxx.yyy.236.22:2050 SYN ******S* Feb 12 15:01:58 216.141.160.82:4111 -> xxx.yyy.236.24:2050 SYN ******S* Feb 12 15:01:58 216.141.160.82:4114 -> xxx.yyy.237.7:2050 SYN ******S* Feb 12 15:01:58 216.141.160.82:4112 -> xxx.yyy.236.51:2050 SYN ******S* 56349 Feb 12 14:21:48 216.210.220.122:57003 -> xxx.yyy.1.1:3306 SYN ******S* Feb 12 14:21:48 216.210.220.122:57004 -> xxx.yyy.1.2:3306 SYN ******S* Feb 12 14:21:45 216.210.220.122:57005 -> xxx.yyy.1.3:3306 SYN ******S* Feb 12 14:21:45 216.210.220.122:57006 -> xxx.yyy.1.4:3306 SYN ******S* Feb 12 14:21:48 216.210.220.122:57007 -> xxx.yyy.1.5:3306 SYN ******S* Feb 12 14:21:48 216.210.220.122:57008 -> xxx.yyy.1.6:3306 SYN ******S* Feb 12 14:21:48 216.210.220.122:57009 -> xxx.yyy.1.7:3306 SYN ******S* Feb 12 14:21:48 216.210.220.122:57010 -> xxx.yyy.1.8:3306 SYN ******S* [...] Feb 12 14:25:40 216.210.220.122:58882 -> xxx.yyy.255.246:3306 SYN ******S* Feb 12 14:25:40 216.210.220.122:58838 -> xxx.yyy.255.202:3306 SYN ******S* Feb 12 14:25:40 216.210.220.122:58826 -> xxx.yyy.255.190:3306 SYN ******S* Feb 12 14:25:40 216.210.220.122:58891 -> xxx.yyy.255.254:3306 SYN ******S* Feb 12 14:25:40 216.210.220.122:58814 -> xxx.yyy.255.178:3306 SYN ******S* Feb 12 14:25:40 216.210.220.122:58808 -> xxx.yyy.255.172:3306 SYN ******S* Feb 12 14:25:40 216.210.220.122:58802 -> xxx.yyy.255.166:3306 SYN ******S* Feb 12 14:25:40 216.210.220.122:58790 -> xxx.yyy.255.154:3306 SYN ******S* 47522 Feb 12 14:44:14 203.228.32.132:4648 -> xxx.yyy.1.9:3306 SYN ******S* Feb 12 14:44:14 203.228.32.132:4650 -> xxx.yyy.1.11:3306 SYN ******S* Feb 12 14:44:17 203.228.32.132:4654 -> xxx.yyy.1.15:3306 SYN ******S* Feb 12 14:44:17 203.228.32.132:4656 -> xxx.yyy.1.17:3306 SYN ******S* Feb 12 14:44:17 203.228.32.132:4660 -> xxx.yyy.1.21:3306 SYN ******S* Feb 12 14:44:17 203.228.32.132:4658 -> xxx.yyy.1.19:3306 SYN ******S* Feb 12 14:44:17 203.228.32.132:4678 -> xxx.yyy.1.38:3306 SYN ******S* Feb 12 14:44:14 203.228.32.132:4643 -> xxx.yyy.1.4:3306 SYN ******S* [...] Feb 12 14:47:54 203.228.32.132:4960 -> xxx.yyy.255.231:3306 SYN ******S* Feb 12 14:47:54 203.228.32.132:4957 -> xxx.yyy.255.228:3306 SYN ******S* Feb 12 14:47:54 203.228.32.132:4956 -> xxx.yyy.255.227:3306 SYN ******S* Feb 12 14:47:54 203.228.32.132:4949 -> xxx.yyy.255.220:3306 SYN ******S* Feb 12 14:47:54 203.228.32.132:1032 -> xxx.yyy.255.248:3306 SYN ******S* Feb 12 14:47:54 203.228.32.132:1027 -> xxx.yyy.255.243:3306 SYN ******S* Feb 12 14:47:54 203.228.32.132:1028 -> xxx.yyy.255.244:3306 SYN ******S* Feb 12 14:47:54 203.228.32.132:1030 -> xxx.yyy.255.246:3306 SYN ******S* 46281 Feb 12 04:56:35 211.221.40.57:2388 -> xxx.yyy.1.4:4899 SYN ******S* Feb 12 04:56:36 211.221.40.57:2386 -> xxx.yyy.1.2:4899 SYN ******S* Feb 12 04:56:35 211.221.40.57:2390 -> xxx.yyy.1.6:4899 SYN ******S* Feb 12 04:56:36 211.221.40.57:2385 -> xxx.yyy.1.1:4899 SYN ******S* Feb 12 04:56:36 211.221.40.57:2387 -> xxx.yyy.1.3:4899 SYN ******S* Feb 12 04:56:36 211.221.40.57:2393 -> xxx.yyy.1.9:4899 SYN ******S* Feb 12 04:56:36 211.221.40.57:2395 -> xxx.yyy.1.11:4899 SYN ******S* Feb 12 04:56:35 211.221.40.57:2391 -> xxx.yyy.1.7:4899 SYN ******S* [...] Feb 12 05:01:38 211.221.40.57:3046 -> xxx.yyy.255.243:4899 SYN ******S* Feb 12 05:01:38 211.221.40.57:3047 -> xxx.yyy.255.244:4899 SYN ******S* Feb 12 05:01:38 211.221.40.57:3048 -> xxx.yyy.255.245:4899 SYN ******S* Feb 12 05:01:38 211.221.40.57:3049 -> xxx.yyy.255.246:4899 SYN ******S* Feb 12 05:01:38 211.221.40.57:3050 -> xxx.yyy.255.247:4899 SYN ******S* Feb 12 05:01:38 211.221.40.57:3051 -> xxx.yyy.255.248:4899 SYN ******S* Feb 12 05:01:38 211.221.40.57:3052 -> xxx.yyy.255.249:4899 SYN ******S* Feb 12 05:01:38 211.221.40.57:3053 -> xxx.yyy.255.250:4899 SYN ******S* Feb 12 05:01:38 211.221.40.57:3054 -> xxx.yyy.255.251:4899 SYN ******S* 43218 Feb 12 06:29:54 218.153.97.114:51861 -> xxx.yyy.1.5:1433 SYN ******S* Feb 12 06:29:51 218.153.97.114:51863 -> xxx.yyy.1.7:1433 SYN ******S* Feb 12 06:29:51 218.153.97.114:51868 -> xxx.yyy.1.12:1433 SYN ******S* Feb 12 06:29:51 218.153.97.114:51872 -> xxx.yyy.1.16:1433 SYN ******S* Feb 12 06:29:54 218.153.97.114:51874 -> xxx.yyy.1.18:1433 SYN ******S* Feb 12 06:29:54 218.153.97.114:51889 -> xxx.yyy.1.33:1433 SYN ******S* Feb 12 06:29:51 218.153.97.114:51891 -> xxx.yyy.1.35:1433 SYN ******S* Feb 12 06:29:51 218.153.97.114:51862 -> xxx.yyy.1.6:1433 SYN ******S* [...] Feb 12 06:33:22 218.153.97.114:58269 -> xxx.yyy.255.182:1433 SYN ******S* Feb 12 06:33:22 218.153.97.114:58285 -> xxx.yyy.255.198:1433 SYN ******S* Feb 12 06:33:22 218.153.97.114:58298 -> xxx.yyy.255.211:1433 SYN ******S* Feb 12 06:33:22 218.153.97.114:58266 -> xxx.yyy.255.179:1433 SYN ******S* Feb 12 06:33:22 218.153.97.114:58263 -> xxx.yyy.255.176:1433 SYN ******S* Feb 12 06:33:22 218.153.97.114:58231 -> xxx.yyy.255.144:1433 SYN ******S* Feb 12 06:33:22 218.153.97.114:58276 -> xxx.yyy.255.189:1433 SYN ******S* Feb 12 06:33:22 218.153.97.114:58334 -> xxx.yyy.255.247:1433 SYN ******S* Feb 12 06:33:22 218.153.97.114:58296 -> xxx.yyy.255.209:1433 SYN ******S* 41680 Feb 12 18:37:30 203.86.2.10:1366 -> xxx.yyy.1.1:1433 SYN ******S* Feb 12 18:37:30 203.86.2.10:1378 -> xxx.yyy.1.5:1433 SYN ******S* Feb 12 18:37:31 203.86.2.10:1396 -> xxx.yyy.1.7:1433 SYN ******S* Feb 12 18:37:31 203.86.2.10:1398 -> xxx.yyy.1.8:1433 SYN ******S* Feb 12 18:37:31 203.86.2.10:1368 -> xxx.yyy.1.2:1433 SYN ******S* Feb 12 18:37:31 203.86.2.10:1376 -> xxx.yyy.1.4:1433 SYN ******S* Feb 12 18:37:31 203.86.2.10:1436 -> xxx.yyy.1.18:1433 SYN ******S* Feb 12 18:37:31 203.86.2.10:1400 -> xxx.yyy.1.9:1433 SYN ******S* [...] Feb 12 18:49:16 203.86.2.10:2969 -> xxx.yyy.255.247:1433 SYN ******S* Feb 12 18:49:16 203.86.2.10:2925 -> xxx.yyy.255.238:1433 SYN ******S* Feb 12 18:49:16 203.86.2.10:2971 -> xxx.yyy.255.248:1433 SYN ******S* Feb 12 18:49:16 203.86.2.10:2991 -> xxx.yyy.255.251:1433 SYN ******S* Feb 12 18:49:16 203.86.2.10:2997 -> xxx.yyy.255.252:1433 SYN ******S* Feb 12 18:49:16 203.86.2.10:2951 -> xxx.yyy.255.243:1433 SYN ******S* Feb 12 18:49:16 203.86.2.10:3009 -> xxx.yyy.255.253:1433 SYN ******S* Feb 12 18:49:16 203.86.2.10:2973 -> xxx.yyy.255.249:1433 SYN ******S* Feb 12 18:49:16 203.86.2.10:2975 -> xxx.yyy.255.250:1433 SYN ******S* 32420 Feb 12 00:34:46 67.149.173.16:4235 -> xxx.yyy.1.2:1433 SYN ******S* Feb 12 00:34:46 67.149.173.16:4240 -> xxx.yyy.1.6:1433 SYN ******S* Feb 12 00:34:46 67.149.173.16:4238 -> xxx.yyy.1.5:1433 SYN ******S* Feb 12 00:34:43 67.149.173.16:4236 -> xxx.yyy.1.3:1433 SYN ******S* Feb 12 00:34:46 67.149.173.16:4242 -> xxx.yyy.1.9:1433 SYN ******S* Feb 12 00:34:43 67.149.173.16:4243 -> xxx.yyy.1.10:1433 SYN ******S* Feb 12 00:34:46 67.149.173.16:4249 -> xxx.yyy.1.15:1433 SYN ******S* Feb 12 00:34:43 67.149.173.16:4244 -> xxx.yyy.1.11:1433 SYN ******S* [...] Feb 12 00:40:07 67.149.173.16:4086 -> xxx.yyy.255.82:1433 SYN ******S* Feb 12 00:40:07 67.149.173.16:4339 -> xxx.yyy.255.242:1433 SYN ******S* Feb 12 00:40:07 67.149.173.16:4087 -> xxx.yyy.255.83:1433 SYN ******S* Feb 12 00:40:07 67.149.173.16:4138 -> xxx.yyy.255.130:1433 SYN ******S* Feb 12 00:40:07 67.149.173.16:4343 -> xxx.yyy.255.243:1433 SYN ******S* Feb 12 00:40:07 67.149.173.16:4408 -> xxx.yyy.255.252:1433 SYN ******S* Feb 12 00:40:07 67.149.173.16:4398 -> xxx.yyy.255.250:1433 SYN ******S* Feb 12 00:40:07 67.149.173.16:4407 -> xxx.yyy.255.251:1433 SYN ******S* Feb 12 00:40:07 67.149.173.16:4422 -> xxx.yyy.255.254:1433 SYN ******S* 31950 [...] 31085 [...] 25378 [...] 23532 [...] 15286 Feb 12 15:48:03 213.196.200.78:3053 -> xxx.yyy.155.235:1433 SYN ******S* Feb 12 15:48:03 213.196.200.78:3055 -> xxx.yyy.155.236:1433 SYN ******S* Feb 12 15:48:03 213.196.200.78:3059 -> xxx.yyy.155.239:1433 SYN ******S* Feb 12 15:48:03 213.196.200.78:3060 -> xxx.yyy.155.238:1433 SYN ******S* Feb 12 15:48:03 213.196.200.78:3063 -> xxx.yyy.155.240:1433 SYN ******S* Feb 12 15:48:03 213.196.200.78:3067 -> xxx.yyy.155.242:1433 SYN ******S* Feb 12 15:48:03 213.196.200.78:3069 -> xxx.yyy.155.243:1433 SYN ******S* Feb 12 15:48:01 213.196.200.78:3073 -> xxx.yyy.155.245:1433 SYN ******S* [...] Feb 12 16:20:39 213.196.200.78:4603 -> xxx.yyy.192.92:1433 SYN ******S* Feb 12 16:20:39 213.196.200.78:4604 -> xxx.yyy.192.93:1433 SYN ******S* Feb 12 16:20:39 213.196.200.78:4614 -> xxx.yyy.192.94:1433 SYN ******S* Feb 12 16:20:39 213.196.200.78:4677 -> xxx.yyy.192.95:1433 SYN ******S* Feb 12 16:20:39 213.196.200.78:4696 -> xxx.yyy.192.96:1433 SYN ******S* Feb 12 16:20:39 213.196.200.78:4768 -> xxx.yyy.192.97:1433 SYN ******S* Feb 12 16:20:40 213.196.200.78:4796 -> xxx.yyy.192.100:1433 SYN ******S* Feb 12 16:20:40 213.196.200.78:4800 -> xxx.yyy.192.102:1433 SYN ******S* 12859 Feb 12 22:59:43 220.220.125.16:3913 -> xxx.yyy.174.15:5554 SYN ******S* Feb 12 22:59:44 220.220.125.16:4571 -> xxx.yyy.174.15:1023 SYN ******S* Feb 12 22:59:46 220.220.125.16:1788 -> xxx.yyy.174.15:9898 SYN ******S* Feb 12 22:59:43 220.220.125.16:3912 -> xxx.yyy.174.14:5554 SYN ******S* Feb 12 22:59:44 220.220.125.16:4568 -> xxx.yyy.174.14:1023 SYN ******S* Feb 12 22:59:46 220.220.125.16:1787 -> xxx.yyy.174.14:9898 SYN ******S* Feb 12 22:59:43 220.220.125.16:3917 -> xxx.yyy.174.16:5554 SYN ******S* Feb 12 22:59:44 220.220.125.16:4582 -> xxx.yyy.174.16:1023 SYN ******S* [...] Feb 12 23:00:29 220.220.125.16:1412 -> xxx.yyy.194.87:9898 SYN ******S* Feb 12 23:00:29 220.220.125.16:1435 -> xxx.yyy.194.91:9898 SYN ******S* Feb 12 23:00:29 220.220.125.16:1434 -> xxx.yyy.194.90:9898 SYN ******S* Feb 12 23:00:29 220.220.125.16:1488 -> xxx.yyy.194.104:9898 SYN ******S* Feb 12 23:00:29 220.220.125.16:1506 -> xxx.yyy.194.107:9898 SYN ******S* Feb 12 23:00:29 220.220.125.16:1504 -> xxx.yyy.194.109:9898 SYN ******S* Feb 12 23:00:29 220.220.125.16:1511 -> xxx.yyy.194.110:9898 SYN ******S* Feb 12 23:00:29 220.220.125.16:1539 -> xxx.yyy.194.111:9898 SYN ******S* 12017 Feb 12 16:07:00 210.64.109.66:35907 -> xxx.yyy.1.0:22 SYN ******S* Feb 12 16:07:00 210.64.109.66:35907 -> xxx.yyy.1.1:22 SYN ******S* Feb 12 16:07:00 210.64.109.66:35907 -> xxx.yyy.1.3:22 SYN ******S* Feb 12 16:07:00 210.64.109.66:35907 -> xxx.yyy.1.4:22 SYN ******S* Feb 12 16:07:00 210.64.109.66:35907 -> xxx.yyy.1.5:22 SYN ******S* Feb 12 16:07:00 210.64.109.66:35907 -> xxx.yyy.1.6:22 SYN ******S* Feb 12 16:07:00 210.64.109.66:35907 -> xxx.yyy.1.7:22 SYN ******S* Feb 12 16:07:00 210.64.109.66:35907 -> xxx.yyy.1.8:22 SYN ******S* [...] Feb 12 16:08:58 210.64.109.66:48463 -> xxx.yyy.248.18:22 SYN ******S* Feb 12 16:08:58 210.64.109.66:48464 -> xxx.yyy.241.176:22 SYN ******S* Feb 12 16:08:58 210.64.109.66:48465 -> xxx.yyy.241.23:22 SYN ******S* Feb 12 16:08:58 210.64.109.66:48466 -> xxx.yyy.241.22:22 SYN ******S* Feb 12 16:08:58 210.64.109.66:48467 -> xxx.yyy.241.24:22 SYN ******S* Feb 12 16:08:59 210.64.109.66:48469 -> xxx.yyy.242.12:22 SYN ******S* Feb 12 16:08:59 210.64.109.66:48470 -> xxx.yyy.243.45:22 SYN ******S* Feb 12 16:08:59 210.64.109.66:48471 -> xxx.yyy.241.4:22 SYN ******S* 11451 Feb 12 16:45:48 128.255.119.246:2690 -> xxx.yyy.1.1:6101 SYN ******S* Feb 12 16:45:48 128.255.119.246:2689 -> xxx.yyy.1.0:6101 SYN ******S* Feb 12 16:45:48 128.255.119.246:2691 -> xxx.yyy.1.2:6101 SYN ******S* Feb 12 16:45:48 128.255.119.246:2694 -> xxx.yyy.1.5:6101 SYN ******S* Feb 12 16:45:48 128.255.119.246:2695 -> xxx.yyy.1.6:6101 SYN ******S* Feb 12 16:45:48 128.255.119.246:2696 -> xxx.yyy.1.7:6101 SYN ******S* Feb 12 16:45:48 128.255.119.246:2697 -> xxx.yyy.1.8:6101 SYN ******S* Feb 12 16:45:48 128.255.119.246:2698 -> xxx.yyy.1.9:6101 SYN ******S* [...] Feb 12 16:46:02 128.255.119.246:2670 -> xxx.yyy.255.161:6101 SYN ******S* Feb 12 16:46:02 128.255.119.246:2700 -> xxx.yyy.255.191:6101 SYN ******S* Feb 12 16:46:02 128.255.119.246:2680 -> xxx.yyy.255.221:6101 SYN ******S* Feb 12 16:46:02 128.255.119.246:2681 -> xxx.yyy.255.222:6101 SYN ******S* Feb 12 16:46:02 128.255.119.246:2682 -> xxx.yyy.255.223:6101 SYN ******S* Feb 12 16:46:02 128.255.119.246:2683 -> xxx.yyy.255.224:6101 SYN ******S* Feb 12 16:46:02 128.255.119.246:2684 -> xxx.yyy.255.225:6101 SYN ******S* Feb 12 16:46:02 128.255.119.246:2685 -> xxx.yyy.255.226:6101 SYN ******S* Feb 12 16:46:02 128.255.119.246:2686 -> xxx.yyy.255.227:6101 SYN ******S* 10879 Feb 12 14:13:53 64.47.81.131:80 -> xxx.yyy.1.1:42 SYN ******S* Feb 12 14:13:53 64.47.81.131:80 -> xxx.yyy.1.2:42 SYN ******S* Feb 12 14:13:53 64.47.81.131:80 -> xxx.yyy.1.3:42 SYN ******S* Feb 12 14:13:53 64.47.81.131:80 -> xxx.yyy.1.4:42 SYN ******S* Feb 12 14:13:53 64.47.81.131:80 -> xxx.yyy.1.7:42 SYN ******S* Feb 12 14:13:53 64.47.81.131:80 -> xxx.yyy.1.8:42 SYN ******S* Feb 12 14:13:53 64.47.81.131:80 -> xxx.yyy.1.10:42 SYN ******S* Feb 12 14:13:53 64.47.81.131:80 -> xxx.yyy.1.9:42 SYN ******S* [...] Feb 12 14:14:08 64.47.81.131:80 -> xxx.yyy.255.242:42 SYN ******S* Feb 12 14:14:08 64.47.81.131:80 -> xxx.yyy.255.241:42 SYN ******S* Feb 12 14:14:08 64.47.81.131:80 -> xxx.yyy.255.243:42 SYN ******S* Feb 12 14:14:08 64.47.81.131:80 -> xxx.yyy.255.244:42 SYN ******S* Feb 12 14:14:08 64.47.81.131:80 -> xxx.yyy.255.245:42 SYN ******S* Feb 12 14:14:08 64.47.81.131:80 -> xxx.yyy.255.246:42 SYN ******S* Feb 12 14:14:08 64.47.81.131:80 -> xxx.yyy.255.247:42 SYN ******S* Feb 12 14:14:08 64.47.81.131:80 -> xxx.yyy.255.248:42 SYN ******S* 9695 [...] 9529 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions