[LOGS] Summary of large-scale portscanning detects
[email protected] Mon, 14 Feb 2005 10:10:17 -0600 (CST)
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Feb 13 09:53:24 83.65.124.105:48504 -> xxx.yyy.1.1:1433 SYN ******S* Feb 13 09:53:24 83.65.124.105:48507 -> xxx.yyy.1.2:1433 SYN ******S* Feb 13 09:53:24 83.65.124.105:48508 -> xxx.yyy.1.3:1433 SYN ******S* Feb 13 09:53:24 83.65.124.105:48509 -> xxx.yyy.1.4:1433 SYN ******S* Feb 13 09:53:24 83.65.124.105:48510 -> xxx.yyy.1.5:1433 SYN ******S* Feb 13 09:53:24 83.65.124.105:48511 -> xxx.yyy.1.6:1433 SYN ******S* Feb 13 09:53:24 83.65.124.105:48512 -> xxx.yyy.1.7:1433 SYN ******S* Feb 13 09:53:24 83.65.124.105:48514 -> xxx.yyy.1.9:1433 SYN ******S* [...] Feb 13 11:48:06 83.65.124.105:51846 -> xxx.yyy.255.247:1433 SYN ******S* Feb 13 11:48:06 83.65.124.105:51847 -> xxx.yyy.255.248:1433 SYN ******S* Feb 13 11:48:06 83.65.124.105:51858 -> xxx.yyy.255.249:1433 SYN ******S* Feb 13 11:48:07 83.65.124.105:51860 -> xxx.yyy.255.250:1433 SYN ******S* Feb 13 11:48:07 83.65.124.105:51862 -> xxx.yyy.255.251:1433 SYN ******S* Feb 13 11:48:07 83.65.124.105:51869 -> xxx.yyy.255.252:1433 SYN ******S* Feb 13 11:48:07 83.65.124.105:51874 -> xxx.yyy.255.253:1433 SYN ******S* Feb 13 11:48:07 83.65.124.105:51885 -> xxx.yyy.255.254:1433 SYN ******S* 114318 Feb 13 09:50:50 69.226.77.201:4280 -> xxx.yyy.220.2:5900 SYN ******S* Feb 13 09:50:50 69.226.77.201:4279 -> xxx.yyy.220.2:6101 SYN ******S* Feb 13 09:50:50 69.226.77.201:4278 -> xxx.yyy.220.2:139 SYN ******S* Feb 13 09:50:50 69.226.77.201:4277 -> xxx.yyy.220.2:42 SYN ******S* Feb 13 09:50:47 69.226.77.201:4285 -> xxx.yyy.220.2:4899 SYN ******S* Feb 13 09:50:50 69.226.77.201:4273 -> xxx.yyy.220.1:4899 SYN ******S* Feb 13 09:50:50 69.226.77.201:4272 -> xxx.yyy.220.1:5900 SYN ******S* Feb 13 09:50:50 69.226.77.201:4271 -> xxx.yyy.220.1:6101 SYN ******S* [...] Feb 13 16:23:14 69.226.77.201:3953 -> xxx.yyy.220.70:5900 SYN ******S* Feb 13 16:23:15 69.226.77.201:4000 -> xxx.yyy.220.211:5900 SYN ******S* Feb 13 16:23:19 69.226.77.201:4156 -> xxx.yyy.220.113:5900 SYN ******S* Feb 13 16:23:20 69.226.77.201:4167 -> xxx.yyy.220.115:5900 SYN ******S* Feb 13 16:23:20 69.226.77.201:4168 -> xxx.yyy.220.144:5900 SYN ******S* Feb 13 16:23:21 69.226.77.201:4230 -> xxx.yyy.220.70:5900 SYN ******S* Feb 13 16:23:27 69.226.77.201:4320 -> xxx.yyy.220.207:5900 SYN ******S* Feb 13 16:23:27 69.226.77.201:4457 -> xxx.yyy.220.115:5900 SYN ******S* Feb 13 16:23:30 69.226.77.201:4457 -> xxx.yyy.220.115:5900 SYN ******S* 89618 Feb 13 16:44:17 206.162.159.61:2709 -> xxx.yyy.1.2:3306 SYN ******S* Feb 13 16:44:17 206.162.159.61:2713 -> xxx.yyy.1.6:3306 SYN ******S* Feb 13 16:44:17 206.162.159.61:2714 -> xxx.yyy.1.7:3306 SYN ******S* Feb 13 16:44:20 206.162.159.61:2715 -> xxx.yyy.1.8:3306 SYN ******S* Feb 13 16:44:17 206.162.159.61:2717 -> xxx.yyy.1.10:3306 SYN ******S* Feb 13 16:44:17 206.162.159.61:2720 -> xxx.yyy.1.13:3306 SYN ******S* Feb 13 16:44:20 206.162.159.61:2722 -> xxx.yyy.1.15:3306 SYN ******S* Feb 13 16:44:17 206.162.159.61:2723 -> xxx.yyy.1.16:3306 SYN ******S* [...] Feb 13 18:55:55 206.162.159.61:1954 -> xxx.yyy.255.243:3306 SYN ******S* Feb 13 18:55:55 206.162.159.61:1950 -> xxx.yyy.255.239:3306 SYN ******S* Feb 13 18:55:55 206.162.159.61:1955 -> xxx.yyy.255.244:3306 SYN ******S* Feb 13 18:55:55 206.162.159.61:1956 -> xxx.yyy.255.245:3306 SYN ******S* Feb 13 18:55:55 206.162.159.61:1948 -> xxx.yyy.255.237:3306 SYN ******S* Feb 13 18:55:55 206.162.159.61:1952 -> xxx.yyy.255.241:3306 SYN ******S* Feb 13 18:55:56 206.162.159.61:1965 -> xxx.yyy.255.254:3306 SYN ******S* Feb 13 18:55:56 206.162.159.61:1961 -> xxx.yyy.255.250:3306 SYN ******S* 81316 Feb 13 06:50:20 61.249.236.140:2840 -> xxx.yyy.1.1:3306 SYN ******S* Feb 13 06:50:17 61.249.236.140:2841 -> xxx.yyy.1.2:3306 SYN ******S* Feb 13 06:50:17 61.249.236.140:2842 -> xxx.yyy.1.3:3306 SYN ******S* Feb 13 06:50:20 61.249.236.140:2843 -> xxx.yyy.1.4:3306 SYN ******S* Feb 13 06:50:20 61.249.236.140:2844 -> xxx.yyy.1.5:3306 SYN ******S* Feb 13 06:50:20 61.249.236.140:2845 -> xxx.yyy.1.6:3306 SYN ******S* Feb 13 06:50:20 61.249.236.140:2846 -> xxx.yyy.1.7:3306 SYN ******S* Feb 13 06:50:20 61.249.236.140:2847 -> xxx.yyy.1.8:3306 SYN ******S* [...] Feb 13 07:02:04 61.249.236.140:1364 -> xxx.yyy.255.248:3306 SYN ******S* Feb 13 07:02:04 61.249.236.140:1363 -> xxx.yyy.255.247:3306 SYN ******S* Feb 13 07:02:04 61.249.236.140:1365 -> xxx.yyy.255.249:3306 SYN ******S* Feb 13 07:02:04 61.249.236.140:1362 -> xxx.yyy.255.246:3306 SYN ******S* Feb 13 07:02:04 61.249.236.140:1361 -> xxx.yyy.255.245:3306 SYN ******S* Feb 13 07:02:04 61.249.236.140:1369 -> xxx.yyy.255.253:3306 SYN ******S* Feb 13 07:02:04 61.249.236.140:1368 -> xxx.yyy.255.252:3306 SYN ******S* Feb 13 07:02:04 61.249.236.140:1370 -> xxx.yyy.255.254:3306 SYN ******S* 71900 Feb 13 05:19:23 80.75.10.67:2373 -> xxx.yyy.1.1:3306 SYN ******S* Feb 13 05:19:23 80.75.10.67:2377 -> xxx.yyy.1.2:3306 SYN ******S* Feb 13 05:19:26 80.75.10.67:2380 -> xxx.yyy.1.3:3306 SYN ******S* Feb 13 05:19:26 80.75.10.67:2383 -> xxx.yyy.1.4:3306 SYN ******S* Feb 13 05:19:26 80.75.10.67:2385 -> xxx.yyy.1.5:3306 SYN ******S* Feb 13 05:19:26 80.75.10.67:2389 -> xxx.yyy.1.6:3306 SYN ******S* Feb 13 05:19:26 80.75.10.67:2391 -> xxx.yyy.1.7:3306 SYN ******S* Feb 13 05:19:26 80.75.10.67:2394 -> xxx.yyy.1.8:3306 SYN ******S* [...] Feb 13 05:31:06 80.75.10.67:3966 -> xxx.yyy.255.200:3306 SYN ******S* Feb 13 05:31:06 80.75.10.67:3979 -> xxx.yyy.255.213:3306 SYN ******S* Feb 13 05:31:06 80.75.10.67:3978 -> xxx.yyy.255.212:3306 SYN ******S* Feb 13 05:31:06 80.75.10.67:3976 -> xxx.yyy.255.210:3306 SYN ******S* Feb 13 05:31:06 80.75.10.67:3975 -> xxx.yyy.255.209:3306 SYN ******S* Feb 13 05:31:06 80.75.10.67:3977 -> xxx.yyy.255.211:3306 SYN ******S* Feb 13 05:31:07 80.75.10.67:3984 -> xxx.yyy.255.218:3306 SYN ******S* Feb 13 05:31:07 80.75.10.67:3986 -> xxx.yyy.255.220:3306 SYN ******S* Feb 13 05:31:07 80.75.10.67:3985 -> xxx.yyy.255.219:3306 SYN ******S* 71264 Feb 13 18:43:26 211.90.248.108:3128 -> xxx.yyy.1.0:3306 SYN ******S* Feb 13 18:43:29 211.90.248.108:3133 -> xxx.yyy.1.5:3306 SYN ******S* Feb 13 18:43:26 211.90.248.108:3131 -> xxx.yyy.1.3:3306 SYN ******S* Feb 13 18:43:26 211.90.248.108:3136 -> xxx.yyy.1.8:3306 SYN ******S* Feb 13 18:43:26 211.90.248.108:3134 -> xxx.yyy.1.6:3306 SYN ******S* Feb 13 18:43:30 211.90.248.108:3137 -> xxx.yyy.1.9:3306 SYN ******S* Feb 13 18:43:27 211.90.248.108:3139 -> xxx.yyy.1.11:3306 SYN ******S* Feb 13 18:43:27 211.90.248.108:3142 -> xxx.yyy.1.14:3306 SYN ******S* [...] Feb 13 20:33:23 211.90.248.108:3281 -> xxx.yyy.255.244:3306 SYN ******S* Feb 13 20:33:23 211.90.248.108:3275 -> xxx.yyy.255.238:3306 SYN ******S* Feb 13 20:33:23 211.90.248.108:3285 -> xxx.yyy.255.248:3306 SYN ******S* Feb 13 20:33:23 211.90.248.108:3286 -> xxx.yyy.255.249:3306 SYN ******S* Feb 13 20:33:23 211.90.248.108:3287 -> xxx.yyy.255.250:3306 SYN ******S* Feb 13 20:33:24 211.90.248.108:3289 -> xxx.yyy.255.252:3306 SYN ******S* Feb 13 20:33:24 211.90.248.108:3290 -> xxx.yyy.255.253:3306 SYN ******S* Feb 13 20:33:24 211.90.248.108:3291 -> xxx.yyy.255.254:3306 SYN ******S* 67450 Feb 13 13:10:21 136.206.182.52:1891 -> xxx.yyy.1.1:3306 SYN ******S* Feb 13 13:10:21 136.206.182.52:1892 -> xxx.yyy.1.2:3306 SYN ******S* Feb 13 13:10:18 136.206.182.52:1893 -> xxx.yyy.1.3:3306 SYN ******S* Feb 13 13:10:21 136.206.182.52:1894 -> xxx.yyy.1.4:3306 SYN ******S* Feb 13 13:10:21 136.206.182.52:1896 -> xxx.yyy.1.6:3306 SYN ******S* Feb 13 13:10:21 136.206.182.52:1897 -> xxx.yyy.1.7:3306 SYN ******S* Feb 13 13:10:21 136.206.182.52:1900 -> xxx.yyy.1.10:3306 SYN ******S* Feb 13 13:10:21 136.206.182.52:1901 -> xxx.yyy.1.11:3306 SYN ******S* [...] Feb 13 13:15:09 136.206.182.52:3250 -> xxx.yyy.255.242:3306 SYN ******S* Feb 13 13:15:09 136.206.182.52:3244 -> xxx.yyy.255.236:3306 SYN ******S* Feb 13 13:15:09 136.206.182.52:3241 -> xxx.yyy.255.233:3306 SYN ******S* Feb 13 13:15:09 136.206.182.52:3257 -> xxx.yyy.255.249:3306 SYN ******S* Feb 13 13:15:09 136.206.182.52:3238 -> xxx.yyy.255.230:3306 SYN ******S* Feb 13 13:15:09 136.206.182.52:3261 -> xxx.yyy.255.253:3306 SYN ******S* Feb 13 13:15:09 136.206.182.52:3260 -> xxx.yyy.255.252:3306 SYN ******S* Feb 13 13:15:09 136.206.182.52:3262 -> xxx.yyy.255.254:3306 SYN ******S* 53386 Feb 13 13:25:25 216.85.114.90:1396 -> xxx.yyy.1.1:1433 SYN ******S* Feb 13 13:25:28 216.85.114.90:1397 -> xxx.yyy.1.2:1433 SYN ******S* Feb 13 13:25:28 216.85.114.90:1398 -> xxx.yyy.1.3:1433 SYN ******S* Feb 13 13:25:28 216.85.114.90:1400 -> xxx.yyy.1.5:1433 SYN ******S* Feb 13 13:25:25 216.85.114.90:1402 -> xxx.yyy.1.7:1433 SYN ******S* Feb 13 13:25:28 216.85.114.90:1404 -> xxx.yyy.1.9:1433 SYN ******S* Feb 13 13:25:26 216.85.114.90:1405 -> xxx.yyy.1.10:1433 SYN ******S* Feb 13 13:25:28 216.85.114.90:1406 -> xxx.yyy.1.11:1433 SYN ******S* [...] Feb 13 13:36:34 216.85.114.90:3401 -> xxx.yyy.255.236:1433 SYN ******S* Feb 13 13:36:34 216.85.114.90:3406 -> xxx.yyy.255.241:1433 SYN ******S* Feb 13 13:36:34 216.85.114.90:3402 -> xxx.yyy.255.237:1433 SYN ******S* Feb 13 13:36:34 216.85.114.90:3411 -> xxx.yyy.255.245:1433 SYN ******S* Feb 13 13:36:34 216.85.114.90:3420 -> xxx.yyy.255.250:1433 SYN ******S* Feb 13 13:36:34 216.85.114.90:3417 -> xxx.yyy.255.247:1433 SYN ******S* Feb 13 13:36:34 216.85.114.90:3418 -> xxx.yyy.255.248:1433 SYN ******S* Feb 13 13:36:34 216.85.114.90:3419 -> xxx.yyy.255.249:1433 SYN ******S* Feb 13 13:36:34 216.85.114.90:3423 -> xxx.yyy.255.253:1433 SYN ******S* 48461 Feb 13 17:52:32 129.120.128.212:2040 -> xxx.yyy.1.1:41523 SYN ******S* Feb 13 17:52:32 129.120.128.212:2041 -> xxx.yyy.1.2:41523 SYN ******S* Feb 13 17:52:32 129.120.128.212:2042 -> xxx.yyy.1.3:41523 SYN ******S* Feb 13 17:52:34 129.120.128.212:2044 -> xxx.yyy.1.5:41523 SYN ******S* Feb 13 17:52:34 129.120.128.212:2045 -> xxx.yyy.1.6:41523 SYN ******S* Feb 13 17:52:34 129.120.128.212:2046 -> xxx.yyy.1.7:41523 SYN ******S* Feb 13 17:52:32 129.120.128.212:2047 -> xxx.yyy.1.8:41523 SYN ******S* Feb 13 17:52:34 129.120.128.212:2049 -> xxx.yyy.1.10:41523 SYN ******S* [...] Feb 13 18:03:29 129.120.128.212:1094 -> xxx.yyy.255.245:41523 SYN ******S* Feb 13 18:03:29 129.120.128.212:1098 -> xxx.yyy.255.249:41523 SYN ******S* Feb 13 18:03:29 129.120.128.212:1099 -> xxx.yyy.255.250:41523 SYN ******S* Feb 13 18:03:29 129.120.128.212:1095 -> xxx.yyy.255.246:41523 SYN ******S* Feb 13 18:03:29 129.120.128.212:1091 -> xxx.yyy.255.242:41523 SYN ******S* Feb 13 18:03:29 129.120.128.212:1096 -> xxx.yyy.255.247:41523 SYN ******S* Feb 13 18:03:29 129.120.128.212:1093 -> xxx.yyy.255.244:41523 SYN ******S* Feb 13 18:03:29 129.120.128.212:1092 -> xxx.yyy.255.243:41523 SYN ******S* 46140 Feb 13 16:05:44 68.112.210.63:1879 -> xxx.yyy.1.1:4000 SYN ******S* Feb 13 16:05:44 68.112.210.63:1882 -> xxx.yyy.1.2:4000 SYN ******S* Feb 13 16:05:43 68.112.210.63:1885 -> xxx.yyy.1.3:4000 SYN ******S* Feb 13 16:05:43 68.112.210.63:1890 -> xxx.yyy.1.5:4000 SYN ******S* Feb 13 16:05:44 68.112.210.63:1902 -> xxx.yyy.1.9:4000 SYN ******S* Feb 13 16:05:46 68.112.210.63:1906 -> xxx.yyy.1.10:4000 SYN ******S* Feb 13 16:05:44 68.112.210.63:1908 -> xxx.yyy.1.11:4000 SYN ******S* Feb 13 16:05:46 68.112.210.63:1910 -> xxx.yyy.1.12:4000 SYN ******S* [...] Feb 13 16:56:45 68.112.210.63:4441 -> xxx.yyy.255.237:4000 SYN ******S* Feb 13 16:56:45 68.112.210.63:4455 -> xxx.yyy.255.242:4000 SYN ******S* Feb 13 16:56:46 68.112.210.63:4464 -> xxx.yyy.255.245:4000 SYN ******S* Feb 13 16:56:46 68.112.210.63:4462 -> xxx.yyy.255.244:4000 SYN ******S* Feb 13 16:56:46 68.112.210.63:4468 -> xxx.yyy.255.246:4000 SYN ******S* Feb 13 16:56:46 68.112.210.63:4474 -> xxx.yyy.255.248:4000 SYN ******S* Feb 13 16:56:46 68.112.210.63:4477 -> xxx.yyy.255.249:4000 SYN ******S* Feb 13 16:56:46 68.112.210.63:4489 -> xxx.yyy.255.253:4000 SYN ******S* Feb 13 16:56:46 68.112.210.63:4490 -> xxx.yyy.255.254:4000 SYN ******S* 43070 Feb 13 14:00:22 61.108.9.202:3543 -> xxx.yyy.1.7:3306 SYN ******S* Feb 13 14:00:22 61.108.9.202:3544 -> xxx.yyy.1.8:3306 SYN ******S* Feb 13 14:00:22 61.108.9.202:3549 -> xxx.yyy.1.13:3306 SYN ******S* Feb 13 14:00:25 61.108.9.202:3550 -> xxx.yyy.1.14:3306 SYN ******S* Feb 13 14:00:25 61.108.9.202:3554 -> xxx.yyy.1.18:3306 SYN ******S* Feb 13 14:00:25 61.108.9.202:3555 -> xxx.yyy.1.19:3306 SYN ******S* Feb 13 14:00:25 61.108.9.202:3556 -> xxx.yyy.1.20:3306 SYN ******S* Feb 13 14:00:23 61.108.9.202:3562 -> xxx.yyy.1.26:3306 SYN ******S* [...] Feb 13 14:12:04 61.108.9.202:2321 -> xxx.yyy.255.247:3306 SYN ******S* Feb 13 14:12:04 61.108.9.202:2315 -> xxx.yyy.255.241:3306 SYN ******S* Feb 13 14:12:04 61.108.9.202:2319 -> xxx.yyy.255.245:3306 SYN ******S* Feb 13 14:12:04 61.108.9.202:2320 -> xxx.yyy.255.246:3306 SYN ******S* Feb 13 14:12:04 61.108.9.202:2322 -> xxx.yyy.255.248:3306 SYN ******S* Feb 13 14:12:04 61.108.9.202:2318 -> xxx.yyy.255.244:3306 SYN ******S* Feb 13 14:12:04 61.108.9.202:2324 -> xxx.yyy.255.250:3306 SYN ******S* Feb 13 14:12:04 61.108.9.202:2328 -> xxx.yyy.255.254:3306 SYN ******S* 41923 Feb 13 06:02:40 129.49.64.147:4995 -> xxx.yyy.1.0:4128 SYN ******S* Feb 13 06:02:40 129.49.64.147:4996 -> xxx.yyy.1.1:4128 SYN ******S* Feb 13 06:02:40 129.49.64.147:4997 -> xxx.yyy.1.2:4128 SYN ******S* Feb 13 06:02:40 129.49.64.147:4998 -> xxx.yyy.1.3:4128 SYN ******S* Feb 13 06:02:40 129.49.64.147:4999 -> xxx.yyy.1.4:4128 SYN ******S* Feb 13 06:02:40 129.49.64.147:5000 -> xxx.yyy.1.5:4128 SYN ******S* Feb 13 06:02:40 129.49.64.147:1025 -> xxx.yyy.1.6:4128 SYN ******S* Feb 13 06:02:40 129.49.64.147:1026 -> xxx.yyy.1.7:4128 SYN ******S* [...] Feb 13 06:04:25 129.49.64.147:1051 -> xxx.yyy.255.162:4128 SYN ******S* Feb 13 06:04:25 129.49.64.147:1052 -> xxx.yyy.255.163:4128 SYN ******S* Feb 13 06:04:25 129.49.64.147:1053 -> xxx.yyy.255.164:4128 SYN ******S* Feb 13 06:04:25 129.49.64.147:1054 -> xxx.yyy.255.165:4128 SYN ******S* Feb 13 06:04:25 129.49.64.147:1055 -> xxx.yyy.255.166:4128 SYN ******S* Feb 13 06:04:25 129.49.64.147:1056 -> xxx.yyy.255.167:4128 SYN ******S* Feb 13 06:04:25 129.49.64.147:1057 -> xxx.yyy.255.168:4128 SYN ******S* Feb 13 06:04:25 129.49.64.147:1058 -> xxx.yyy.255.169:4128 SYN ******S* Feb 13 06:04:25 129.49.64.147:1059 -> xxx.yyy.255.170:4128 SYN ******S* 41360 Feb 13 02:10:08 67.149.173.16:4221 -> xxx.yyy.1.2:1433 SYN ******S* Feb 13 02:10:08 67.149.173.16:4222 -> xxx.yyy.1.3:1433 SYN ******S* Feb 13 02:10:08 67.149.173.16:4224 -> xxx.yyy.1.5:1433 SYN ******S* Feb 13 02:10:08 67.149.173.16:4223 -> xxx.yyy.1.4:1433 SYN ******S* Feb 13 02:10:08 67.149.173.16:4226 -> xxx.yyy.1.6:1433 SYN ******S* Feb 13 02:10:08 67.149.173.16:4227 -> xxx.yyy.1.8:1433 SYN ******S* Feb 13 02:10:08 67.149.173.16:4228 -> xxx.yyy.1.9:1433 SYN ******S* Feb 13 02:10:08 67.149.173.16:4229 -> xxx.yyy.1.10:1433 SYN ******S* [...] Feb 13 02:15:29 67.149.173.16:4307 -> xxx.yyy.255.239:1433 SYN ******S* Feb 13 02:15:29 67.149.173.16:4319 -> xxx.yyy.255.241:1433 SYN ******S* Feb 13 02:15:29 67.149.173.16:4355 -> xxx.yyy.255.244:1433 SYN ******S* Feb 13 02:15:29 67.149.173.16:4357 -> xxx.yyy.255.246:1433 SYN ******S* Feb 13 02:15:29 67.149.173.16:4270 -> xxx.yyy.255.233:1433 SYN ******S* Feb 13 02:15:29 67.149.173.16:4278 -> xxx.yyy.255.236:1433 SYN ******S* Feb 13 02:15:29 67.149.173.16:4309 -> xxx.yyy.255.240:1433 SYN ******S* Feb 13 02:15:29 67.149.173.16:4356 -> xxx.yyy.255.245:1433 SYN ******S* Feb 13 02:15:29 67.149.173.16:4382 -> xxx.yyy.255.248:1433 SYN ******S* 36378 Feb 13 22:40:34 200.63.30.224:3705 -> xxx.yyy.1.2:1433 SYN ******S* Feb 13 22:40:34 200.63.30.224:3707 -> xxx.yyy.1.4:1433 SYN ******S* Feb 13 22:40:34 200.63.30.224:3709 -> xxx.yyy.1.6:1433 SYN ******S* Feb 13 22:40:34 200.63.30.224:3710 -> xxx.yyy.1.7:1433 SYN ******S* Feb 13 22:40:37 200.63.30.224:3711 -> xxx.yyy.1.8:1433 SYN ******S* Feb 13 22:40:34 200.63.30.224:3718 -> xxx.yyy.1.13:1433 SYN ******S* Feb 13 22:40:37 200.63.30.224:3721 -> xxx.yyy.1.16:1433 SYN ******S* Feb 13 22:40:37 200.63.30.224:3722 -> xxx.yyy.1.17:1433 SYN ******S* [...] Feb 13 22:51:41 200.63.30.224:4388 -> xxx.yyy.255.243:1433 SYN ******S* Feb 13 22:51:41 200.63.30.224:4386 -> xxx.yyy.255.241:1433 SYN ******S* Feb 13 22:51:41 200.63.30.224:4383 -> xxx.yyy.255.238:1433 SYN ******S* Feb 13 22:51:41 200.63.30.224:4390 -> xxx.yyy.255.245:1433 SYN ******S* Feb 13 22:51:41 200.63.30.224:4387 -> xxx.yyy.255.242:1433 SYN ******S* Feb 13 22:51:41 200.63.30.224:4398 -> xxx.yyy.255.253:1433 SYN ******S* Feb 13 22:51:41 200.63.30.224:4399 -> xxx.yyy.255.254:1433 SYN ******S* Feb 13 22:51:41 200.63.30.224:4396 -> xxx.yyy.255.251:1433 SYN ******S* Feb 13 22:51:41 200.63.30.224:4394 -> xxx.yyy.255.249:1433 SYN ******S* 35022 Feb 13 20:18:03 62.215.201.133:3431 -> xxx.yyy.1.3:1433 SYN ******S* Feb 13 20:18:04 62.215.201.133:3447 -> xxx.yyy.1.19:1433 SYN ******S* Feb 13 20:18:07 62.215.201.133:3437 -> xxx.yyy.1.9:1433 SYN ******S* Feb 13 20:18:07 62.215.201.133:3440 -> xxx.yyy.1.12:1433 SYN ******S* Feb 13 20:18:07 62.215.201.133:3454 -> xxx.yyy.1.26:1433 SYN ******S* Feb 13 20:18:07 62.215.201.133:3442 -> xxx.yyy.1.14:1433 SYN ******S* Feb 13 20:18:07 62.215.201.133:3446 -> xxx.yyy.1.18:1433 SYN ******S* Feb 13 20:18:04 62.215.201.133:3459 -> xxx.yyy.1.31:1433 SYN ******S* [...] Feb 13 20:29:45 62.215.201.133:2063 -> xxx.yyy.255.230:1433 SYN ******S* Feb 13 20:29:45 62.215.201.133:2078 -> xxx.yyy.255.245:1433 SYN ******S* Feb 13 20:29:45 62.215.201.133:2075 -> xxx.yyy.255.242:1433 SYN ******S* Feb 13 20:29:45 62.215.201.133:2065 -> xxx.yyy.255.232:1433 SYN ******S* Feb 13 20:29:45 62.215.201.133:2080 -> xxx.yyy.255.247:1433 SYN ******S* Feb 13 20:29:45 62.215.201.133:2070 -> xxx.yyy.255.237:1433 SYN ******S* Feb 13 20:29:45 62.215.201.133:2079 -> xxx.yyy.255.246:1433 SYN ******S* Feb 13 20:29:45 62.215.201.133:2086 -> xxx.yyy.255.253:1433 SYN ******S* 34671 [...] 33212 Feb 13 22:31:57 220.117.178.35:2945 -> xxx.yyy.1.1:3306 SYN ******S* Feb 13 22:32:00 220.117.178.35:2951 -> xxx.yyy.1.6:3306 SYN ******S* Feb 13 22:32:00 220.117.178.35:2952 -> xxx.yyy.1.7:3306 SYN ******S* Feb 13 22:31:57 220.117.178.35:2957 -> xxx.yyy.1.12:3306 SYN ******S* Feb 13 22:31:57 220.117.178.35:2960 -> xxx.yyy.1.14:3306 SYN ******S* Feb 13 22:31:57 220.117.178.35:2963 -> xxx.yyy.1.17:3306 SYN ******S* Feb 13 22:31:57 220.117.178.35:2964 -> xxx.yyy.1.18:3306 SYN ******S* Feb 13 22:31:57 220.117.178.35:2965 -> xxx.yyy.1.19:3306 SYN ******S* [...] Feb 13 22:43:40 220.117.178.35:3105 -> xxx.yyy.255.212:3306 SYN ******S* Feb 13 22:43:40 220.117.178.35:3106 -> xxx.yyy.255.213:3306 SYN ******S* Feb 13 22:43:40 220.117.178.35:3102 -> xxx.yyy.255.209:3306 SYN ******S* Feb 13 22:43:40 220.117.178.35:3103 -> xxx.yyy.255.210:3306 SYN ******S* Feb 13 22:43:40 220.117.178.35:3101 -> xxx.yyy.255.208:3306 SYN ******S* Feb 13 22:43:41 220.117.178.35:3113 -> xxx.yyy.255.219:3306 SYN ******S* Feb 13 22:43:41 220.117.178.35:3124 -> xxx.yyy.255.229:3306 SYN ******S* Feb 13 22:43:41 220.117.178.35:3152 -> xxx.yyy.255.254:3306 SYN ******S* 33187 Feb 13 20:16:08 202.190.210.149:4997 -> xxx.yyy.1.2:3306 SYN ******S* Feb 13 20:16:08 202.190.210.149:1036 -> xxx.yyy.1.12:3306 SYN ******S* Feb 13 20:16:11 202.190.210.149:1047 -> xxx.yyy.1.23:3306 SYN ******S* Feb 13 20:16:08 202.190.210.149:1054 -> xxx.yyy.1.30:3306 SYN ******S* Feb 13 20:16:08 202.190.210.149:1056 -> xxx.yyy.1.32:3306 SYN ******S* Feb 13 20:16:08 202.190.210.149:1059 -> xxx.yyy.1.35:3306 SYN ******S* Feb 13 20:16:11 202.190.210.149:1073 -> xxx.yyy.1.49:3306 SYN ******S* Feb 13 20:16:11 202.190.210.149:1076 -> xxx.yyy.1.52:3306 SYN ******S* [...] Feb 13 20:19:18 202.190.210.149:4483 -> xxx.yyy.255.250:3306 SYN ******S* Feb 13 20:19:18 202.190.210.149:4432 -> xxx.yyy.255.199:3306 SYN ******S* Feb 13 20:19:18 202.190.210.149:4416 -> xxx.yyy.255.183:3306 SYN ******S* Feb 13 20:19:18 202.190.210.149:4445 -> xxx.yyy.255.212:3306 SYN ******S* Feb 13 20:19:18 202.190.210.149:4461 -> xxx.yyy.255.228:3306 SYN ******S* Feb 13 20:19:18 202.190.210.149:4477 -> xxx.yyy.255.244:3306 SYN ******S* Feb 13 20:19:18 202.190.210.149:4458 -> xxx.yyy.255.225:3306 SYN ******S* Feb 13 20:19:18 202.190.210.149:4442 -> xxx.yyy.255.209:3306 SYN ******S* Feb 13 20:19:18 202.190.210.149:4426 -> xxx.yyy.255.193:3306 SYN ******S* 25840 [...] 25270 Feb 13 18:44:49 203.197.125.98:4453 -> xxx.yyy.1.2:21 SYN ******S* Feb 13 18:44:49 203.197.125.98:4455 -> xxx.yyy.1.4:21 SYN ******S* Feb 13 18:44:49 203.197.125.98:4456 -> xxx.yyy.1.5:21 SYN ******S* Feb 13 18:44:49 203.197.125.98:4474 -> xxx.yyy.1.23:21 SYN ******S* Feb 13 18:44:49 203.197.125.98:4458 -> xxx.yyy.1.7:21 SYN ******S* Feb 13 18:44:49 203.197.125.98:4459 -> xxx.yyy.1.8:21 SYN ******S* Feb 13 18:44:49 203.197.125.98:4475 -> xxx.yyy.1.24:21 SYN ******S* Feb 13 18:44:49 203.197.125.98:4476 -> xxx.yyy.1.25:21 SYN ******S* [...] Feb 13 18:55:41 203.197.125.98:2160 -> xxx.yyy.255.243:21 SYN ******S* Feb 13 18:55:41 203.197.125.98:2159 -> xxx.yyy.255.242:21 SYN ******S* Feb 13 18:55:41 203.197.125.98:2164 -> xxx.yyy.255.247:21 SYN ******S* Feb 13 18:55:41 203.197.125.98:2165 -> xxx.yyy.255.248:21 SYN ******S* Feb 13 18:55:41 203.197.125.98:2166 -> xxx.yyy.255.249:21 SYN ******S* Feb 13 18:55:41 203.197.125.98:2167 -> xxx.yyy.255.250:21 SYN ******S* Feb 13 18:55:41 203.197.125.98:2170 -> xxx.yyy.255.253:21 SYN ******S* Feb 13 18:55:41 203.197.125.98:2171 -> xxx.yyy.255.254:21 SYN ******S* 23221 Feb 13 21:34:26 220.86.31.159:3813 -> xxx.yyy.1.5:4899 SYN ******S* Feb 13 21:34:26 220.86.31.159:3814 -> xxx.yyy.1.6:4899 SYN ******S* Feb 13 21:34:26 220.86.31.159:3821 -> xxx.yyy.1.12:4899 SYN ******S* Feb 13 21:34:27 220.86.31.159:3823 -> xxx.yyy.1.14:4899 SYN ******S* Feb 13 21:34:26 220.86.31.159:3833 -> xxx.yyy.1.24:4899 SYN ******S* Feb 13 21:34:27 220.86.31.159:3843 -> xxx.yyy.1.34:4899 SYN ******S* Feb 13 21:34:26 220.86.31.159:3809 -> xxx.yyy.1.1:4899 SYN ******S* Feb 13 21:34:27 220.86.31.159:3846 -> xxx.yyy.1.37:4899 SYN ******S* [...] Feb 13 21:38:15 220.86.31.159:3622 -> xxx.yyy.255.237:4899 SYN ******S* Feb 13 21:38:15 220.86.31.159:3615 -> xxx.yyy.255.230:4899 SYN ******S* Feb 13 21:38:15 220.86.31.159:3625 -> xxx.yyy.255.240:4899 SYN ******S* Feb 13 21:38:15 220.86.31.159:3626 -> xxx.yyy.255.241:4899 SYN ******S* Feb 13 21:38:15 220.86.31.159:3630 -> xxx.yyy.255.245:4899 SYN ******S* Feb 13 21:38:15 220.86.31.159:3631 -> xxx.yyy.255.246:4899 SYN ******S* Feb 13 21:38:15 220.86.31.159:3633 -> xxx.yyy.255.248:4899 SYN ******S* Feb 13 21:38:15 220.86.31.159:3634 -> xxx.yyy.255.249:4899 SYN ******S* Feb 13 21:38:15 220.86.31.159:3635 -> xxx.yyy.255.250:4899 SYN ******S* 21765 Feb 13 07:47:01 128.122.185.88:4770 -> xxx.yyy.1.0:4000 SYN ******S* Feb 13 07:47:01 128.122.185.88:4772 -> xxx.yyy.1.2:4000 SYN ******S* Feb 13 07:47:01 128.122.185.88:4771 -> xxx.yyy.1.1:4000 SYN ******S* Feb 13 07:47:01 128.122.185.88:4773 -> xxx.yyy.1.3:4000 SYN ******S* Feb 13 07:47:01 128.122.185.88:4774 -> xxx.yyy.1.4:4000 SYN ******S* Feb 13 07:47:01 128.122.185.88:4775 -> xxx.yyy.1.5:4000 SYN ******S* Feb 13 07:47:01 128.122.185.88:4776 -> xxx.yyy.1.6:4000 SYN ******S* Feb 13 07:47:01 128.122.185.88:4777 -> xxx.yyy.1.7:4000 SYN ******S* [...] Feb 13 07:47:23 128.122.185.88:4787 -> xxx.yyy.255.247:4000 SYN ******S* Feb 13 07:47:23 128.122.185.88:4788 -> xxx.yyy.255.248:4000 SYN ******S* Feb 13 07:47:23 128.122.185.88:4739 -> xxx.yyy.255.249:4000 SYN ******S* Feb 13 07:47:23 128.122.185.88:4740 -> xxx.yyy.255.250:4000 SYN ******S* Feb 13 07:47:23 128.122.185.88:4741 -> xxx.yyy.255.251:4000 SYN ******S* Feb 13 07:47:23 128.122.185.88:4742 -> xxx.yyy.255.252:4000 SYN ******S* Feb 13 07:47:23 128.122.185.88:4743 -> xxx.yyy.255.253:4000 SYN ******S* Feb 13 07:47:23 128.122.185.88:4744 -> xxx.yyy.255.254:4000 SYN ******S* 20519 Feb 13 05:51:11 70.58.179.225:51544 -> xxx.yyy.1.5:3632 SYN ******S* Feb 13 05:51:11 70.58.179.225:51552 -> xxx.yyy.1.13:3632 SYN ******S* Feb 13 05:51:11 70.58.179.225:51560 -> xxx.yyy.1.21:3632 SYN ******S* Feb 13 05:51:08 70.58.179.225:51561 -> xxx.yyy.1.22:3632 SYN ******S* Feb 13 05:51:11 70.58.179.225:51564 -> xxx.yyy.1.25:3632 SYN ******S* Feb 13 05:51:11 70.58.179.225:51576 -> xxx.yyy.1.37:3632 SYN ******S* Feb 13 05:51:08 70.58.179.225:51577 -> xxx.yyy.1.38:3632 SYN ******S* Feb 13 05:51:08 70.58.179.225:51593 -> xxx.yyy.1.54:3632 SYN ******S* [...] Feb 13 05:58:32 70.58.179.225:4133 -> xxx.yyy.255.195:3632 SYN ******S* Feb 13 05:58:32 70.58.179.225:4136 -> xxx.yyy.255.198:3632 SYN ******S* Feb 13 05:58:32 70.58.179.225:4140 -> xxx.yyy.255.202:3632 SYN ******S* Feb 13 05:58:32 70.58.179.225:4142 -> xxx.yyy.255.204:3632 SYN ******S* Feb 13 05:58:32 70.58.179.225:4143 -> xxx.yyy.255.205:3632 SYN ******S* Feb 13 05:58:32 70.58.179.225:4148 -> xxx.yyy.255.210:3632 SYN ******S* Feb 13 05:58:32 70.58.179.225:4164 -> xxx.yyy.255.226:3632 SYN ******S* Feb 13 05:58:32 70.58.179.225:4168 -> xxx.yyy.255.230:3632 SYN ******S* Feb 13 05:58:32 70.58.179.225:4192 -> xxx.yyy.255.254:3632 SYN ******S* 19289 Feb 13 17:20:24 129.241.82.82:2494 -> xxx.yyy.1.0:6101 SYN ******S* Feb 13 17:20:24 129.241.82.82:2495 -> xxx.yyy.1.1:6101 SYN ******S* Feb 13 17:20:24 129.241.82.82:2496 -> xxx.yyy.1.2:6101 SYN ******S* Feb 13 17:20:24 129.241.82.82:2497 -> xxx.yyy.1.3:6101 SYN ******S* Feb 13 17:20:24 129.241.82.82:2498 -> xxx.yyy.1.4:6101 SYN ******S* Feb 13 17:20:24 129.241.82.82:2499 -> xxx.yyy.1.5:6101 SYN ******S* Feb 13 17:20:24 129.241.82.82:2500 -> xxx.yyy.1.6:6101 SYN ******S* Feb 13 17:20:24 129.241.82.82:2501 -> xxx.yyy.1.7:6101 SYN ******S* [...] Feb 13 17:21:17 129.241.82.82:2500 -> xxx.yyy.255.186:6101 SYN ******S* Feb 13 17:21:17 129.241.82.82:2473 -> xxx.yyy.255.209:6101 SYN ******S* Feb 13 17:21:17 129.241.82.82:2474 -> xxx.yyy.255.210:6101 SYN ******S* Feb 13 17:21:17 129.241.82.82:2475 -> xxx.yyy.255.211:6101 SYN ******S* Feb 13 17:21:17 129.241.82.82:2476 -> xxx.yyy.255.212:6101 SYN ******S* Feb 13 17:21:17 129.241.82.82:2477 -> xxx.yyy.255.213:6101 SYN ******S* Feb 13 17:21:17 129.241.82.82:2478 -> xxx.yyy.255.214:6101 SYN ******S* Feb 13 17:21:17 129.241.82.82:2479 -> xxx.yyy.255.215:6101 SYN ******S* Feb 13 17:21:17 129.241.82.82:2480 -> xxx.yyy.255.216:6101 SYN ******S* 18482 Feb 13 11:36:11 61.222.86.160:25191 -> xxx.yyy.1.31:1433 SYN ******S* Feb 13 11:36:11 61.222.86.160:25192 -> xxx.yyy.1.32:1433 SYN ******S* Feb 13 11:36:11 61.222.86.160:25194 -> xxx.yyy.1.34:1433 SYN ******S* Feb 13 11:36:12 61.222.86.160:25195 -> xxx.yyy.1.35:1433 SYN ******S* Feb 13 11:36:12 61.222.86.160:25196 -> xxx.yyy.1.36:1433 SYN ******S* Feb 13 11:36:12 61.222.86.160:25197 -> xxx.yyy.1.37:1433 SYN ******S* Feb 13 11:36:12 61.222.86.160:25198 -> xxx.yyy.1.38:1433 SYN ******S* Feb 13 11:36:12 61.222.86.160:25199 -> xxx.yyy.1.39:1433 SYN ******S* [...] Feb 13 11:49:21 61.222.86.160:13169 -> xxx.yyy.255.246:1433 SYN ******S* Feb 13 11:49:21 61.222.86.160:13170 -> xxx.yyy.255.243:1433 SYN ******S* Feb 13 11:49:21 61.222.86.160:13172 -> xxx.yyy.255.240:1433 SYN ******S* Feb 13 11:49:21 61.222.86.160:13176 -> xxx.yyy.255.250:1433 SYN ******S* Feb 13 11:49:21 61.222.86.160:13183 -> xxx.yyy.255.254:1433 SYN ******S* Feb 13 11:49:21 61.222.86.160:13185 -> xxx.yyy.255.251:1433 SYN ******S* Feb 13 11:49:21 61.222.86.160:13195 -> xxx.yyy.255.249:1433 SYN ******S* Feb 13 11:49:21 61.222.86.160:13197 -> xxx.yyy.255.252:1433 SYN ******S* 13382 [...] 12576 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions