[LOGS] Summary of large-scale portscanning detects
[email protected] Tue, 15 Feb 2005 07:50:16 -0600 (CST)
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Feb 14 02:55:19 216.231.56.179:4340 -> xxx.yyy.1.1:6129 SYN ******S* Feb 14 02:55:19 216.231.56.179:4341 -> xxx.yyy.1.2:6129 SYN ******S* Feb 14 02:55:19 216.231.56.179:4342 -> xxx.yyy.1.3:6129 SYN ******S* Feb 14 02:55:21 216.231.56.179:4343 -> xxx.yyy.1.4:6129 SYN ******S* Feb 14 02:55:21 216.231.56.179:4345 -> xxx.yyy.1.5:6129 SYN ******S* Feb 14 02:55:21 216.231.56.179:4346 -> xxx.yyy.1.6:6129 SYN ******S* Feb 14 02:55:21 216.231.56.179:4349 -> xxx.yyy.1.7:6129 SYN ******S* Feb 14 02:55:19 216.231.56.179:4350 -> xxx.yyy.1.8:6129 SYN ******S* [...] Feb 14 03:20:21 216.231.56.179:4930 -> xxx.yyy.255.241:6129 SYN ******S* Feb 14 03:20:21 216.231.56.179:4935 -> xxx.yyy.255.244:6129 SYN ******S* Feb 14 03:20:21 216.231.56.179:4946 -> xxx.yyy.255.254:6129 SYN ******S* Feb 14 03:20:21 216.231.56.179:4942 -> xxx.yyy.255.251:6129 SYN ******S* Feb 14 03:20:21 216.231.56.179:4940 -> xxx.yyy.255.249:6129 SYN ******S* Feb 14 03:20:21 216.231.56.179:4944 -> xxx.yyy.255.252:6129 SYN ******S* Feb 14 03:20:21 216.231.56.179:4945 -> xxx.yyy.255.253:6129 SYN ******S* Feb 14 03:20:21 216.231.56.179:4941 -> xxx.yyy.255.250:6129 SYN ******S* 115017 Feb 14 03:32:02 69.22.67.247:2466 -> xxx.yyy.1.2:3306 SYN ******S* Feb 14 03:32:02 69.22.67.247:2465 -> xxx.yyy.1.1:3306 SYN ******S* Feb 14 03:32:05 69.22.67.247:2468 -> xxx.yyy.1.4:3306 SYN ******S* Feb 14 03:32:02 69.22.67.247:2467 -> xxx.yyy.1.3:3306 SYN ******S* Feb 14 03:32:02 69.22.67.247:2469 -> xxx.yyy.1.5:3306 SYN ******S* Feb 14 03:32:02 69.22.67.247:2470 -> xxx.yyy.1.6:3306 SYN ******S* Feb 14 03:32:05 69.22.67.247:2471 -> xxx.yyy.1.7:3306 SYN ******S* Feb 14 03:32:02 69.22.67.247:2472 -> xxx.yyy.1.8:3306 SYN ******S* [...] Feb 14 03:59:03 69.22.67.247:2988 -> xxx.yyy.255.197:3306 SYN ******S* Feb 14 03:59:03 69.22.67.247:3004 -> xxx.yyy.255.213:3306 SYN ******S* Feb 14 03:59:03 69.22.67.247:3001 -> xxx.yyy.255.210:3306 SYN ******S* Feb 14 03:59:03 69.22.67.247:2969 -> xxx.yyy.255.178:3306 SYN ******S* Feb 14 03:59:03 69.22.67.247:3023 -> xxx.yyy.255.232:3306 SYN ******S* Feb 14 03:59:03 69.22.67.247:3039 -> xxx.yyy.255.248:3306 SYN ******S* Feb 14 03:59:03 69.22.67.247:3036 -> xxx.yyy.255.245:3306 SYN ******S* Feb 14 03:59:03 69.22.67.247:3020 -> xxx.yyy.255.229:3306 SYN ******S* 47407 Feb 14 22:50:52 218.152.182.40:1973 -> xxx.yyy.1.8:4899 SYN ******S* Feb 14 22:50:52 218.152.182.40:1976 -> xxx.yyy.1.11:4899 SYN ******S* Feb 14 22:50:53 218.152.182.40:1966 -> xxx.yyy.1.1:4899 SYN ******S* Feb 14 22:50:52 218.152.182.40:1967 -> xxx.yyy.1.2:4899 SYN ******S* Feb 14 22:50:52 218.152.182.40:1968 -> xxx.yyy.1.3:4899 SYN ******S* Feb 14 22:50:52 218.152.182.40:1993 -> xxx.yyy.1.28:4899 SYN ******S* Feb 14 22:50:55 218.152.182.40:1994 -> xxx.yyy.1.31:4899 SYN ******S* Feb 14 22:50:52 218.152.182.40:1995 -> xxx.yyy.1.29:4899 SYN ******S* [...] Feb 14 23:07:47 218.152.182.40:4609 -> xxx.yyy.255.202:4899 SYN ******S* Feb 14 23:07:47 218.152.182.40:4629 -> xxx.yyy.255.219:4899 SYN ******S* Feb 14 23:07:47 218.152.182.40:4626 -> xxx.yyy.255.217:4899 SYN ******S* Feb 14 23:07:47 218.152.182.40:4680 -> xxx.yyy.255.248:4899 SYN ******S* Feb 14 23:07:47 218.152.182.40:4610 -> xxx.yyy.255.203:4899 SYN ******S* Feb 14 23:07:47 218.152.182.40:4640 -> xxx.yyy.255.228:4899 SYN ******S* Feb 14 23:07:47 218.152.182.40:4648 -> xxx.yyy.255.230:4899 SYN ******S* Feb 14 23:07:47 218.152.182.40:4646 -> xxx.yyy.255.229:4899 SYN ******S* 46582 Feb 14 01:14:57 69.1.56.143:14074 -> xxx.yyy.1.1:1433 SYN ******S* Feb 14 01:14:54 69.1.56.143:14075 -> xxx.yyy.1.2:1433 SYN ******S* Feb 14 01:14:54 69.1.56.143:14077 -> xxx.yyy.1.4:1433 SYN ******S* Feb 14 01:14:57 69.1.56.143:14078 -> xxx.yyy.1.5:1433 SYN ******S* Feb 14 01:14:57 69.1.56.143:14079 -> xxx.yyy.1.6:1433 SYN ******S* Feb 14 01:14:54 69.1.56.143:14080 -> xxx.yyy.1.7:1433 SYN ******S* Feb 14 01:14:54 69.1.56.143:14081 -> xxx.yyy.1.8:1433 SYN ******S* Feb 14 01:14:54 69.1.56.143:14083 -> xxx.yyy.1.10:1433 SYN ******S* [...] Feb 14 01:26:35 69.1.56.143:20523 -> xxx.yyy.255.234:1433 SYN ******S* Feb 14 01:26:35 69.1.56.143:20520 -> xxx.yyy.255.231:1433 SYN ******S* Feb 14 01:26:35 69.1.56.143:20518 -> xxx.yyy.255.229:1433 SYN ******S* Feb 14 01:26:35 69.1.56.143:20522 -> xxx.yyy.255.233:1433 SYN ******S* Feb 14 01:26:35 69.1.56.143:20529 -> xxx.yyy.255.240:1433 SYN ******S* Feb 14 01:26:35 69.1.56.143:20531 -> xxx.yyy.255.242:1433 SYN ******S* Feb 14 01:26:35 69.1.56.143:20534 -> xxx.yyy.255.245:1433 SYN ******S* Feb 14 01:26:35 69.1.56.143:20539 -> xxx.yyy.255.250:1433 SYN ******S* 46207 Feb 14 21:53:24 220.71.31.35:3566 -> xxx.yyy.1.3:3306 SYN ******S* Feb 14 21:53:27 220.71.31.35:3565 -> xxx.yyy.1.2:3306 SYN ******S* Feb 14 21:53:24 220.71.31.35:3578 -> xxx.yyy.1.12:3306 SYN ******S* Feb 14 21:53:24 220.71.31.35:3582 -> xxx.yyy.1.16:3306 SYN ******S* Feb 14 21:53:24 220.71.31.35:3579 -> xxx.yyy.1.13:3306 SYN ******S* Feb 14 21:53:27 220.71.31.35:3610 -> xxx.yyy.1.29:3306 SYN ******S* Feb 14 21:53:24 220.71.31.35:3611 -> xxx.yyy.1.30:3306 SYN ******S* Feb 14 21:53:27 220.71.31.35:3583 -> xxx.yyy.1.17:3306 SYN ******S* [...] Feb 14 22:33:15 220.71.31.35:4848 -> xxx.yyy.255.232:3306 SYN ******S* Feb 14 22:33:15 220.71.31.35:4827 -> xxx.yyy.255.216:3306 SYN ******S* Feb 14 22:33:15 220.71.31.35:4826 -> xxx.yyy.255.215:3306 SYN ******S* Feb 14 22:33:15 220.71.31.35:4842 -> xxx.yyy.255.227:3306 SYN ******S* Feb 14 22:33:15 220.71.31.35:4836 -> xxx.yyy.255.225:3306 SYN ******S* Feb 14 22:33:15 220.71.31.35:4846 -> xxx.yyy.255.231:3306 SYN ******S* Feb 14 22:33:15 220.71.31.35:4834 -> xxx.yyy.255.223:3306 SYN ******S* Feb 14 22:33:15 220.71.31.35:4877 -> xxx.yyy.255.253:3306 SYN ******S* 43368 Feb 14 00:26:38 203.85.122.28:3068 -> xxx.yyy.1.1:3306 SYN ******S* Feb 14 00:26:35 203.85.122.28:3069 -> xxx.yyy.1.2:3306 SYN ******S* Feb 14 00:26:35 203.85.122.28:3071 -> xxx.yyy.1.4:3306 SYN ******S* Feb 14 00:26:35 203.85.122.28:3070 -> xxx.yyy.1.3:3306 SYN ******S* Feb 14 00:26:38 203.85.122.28:3072 -> xxx.yyy.1.5:3306 SYN ******S* Feb 14 00:26:35 203.85.122.28:3073 -> xxx.yyy.1.6:3306 SYN ******S* Feb 14 00:26:35 203.85.122.28:3074 -> xxx.yyy.1.7:3306 SYN ******S* Feb 14 00:26:38 203.85.122.28:3076 -> xxx.yyy.1.9:3306 SYN ******S* [...] Feb 14 00:46:22 203.85.122.28:1403 -> xxx.yyy.255.220:3306 SYN ******S* Feb 14 00:46:22 203.85.122.28:1404 -> xxx.yyy.255.221:3306 SYN ******S* Feb 14 00:46:22 203.85.122.28:1437 -> xxx.yyy.255.253:3306 SYN ******S* Feb 14 00:46:22 203.85.122.28:1408 -> xxx.yyy.255.225:3306 SYN ******S* Feb 14 00:46:22 203.85.122.28:1425 -> xxx.yyy.255.241:3306 SYN ******S* Feb 14 00:46:22 203.85.122.28:1400 -> xxx.yyy.255.217:3306 SYN ******S* Feb 14 00:46:22 203.85.122.28:1412 -> xxx.yyy.255.229:3306 SYN ******S* Feb 14 00:46:22 203.85.122.28:1420 -> xxx.yyy.255.237:3306 SYN ******S* Feb 14 00:46:22 203.85.122.28:1396 -> xxx.yyy.255.213:3306 SYN ******S* 40309 Feb 14 23:50:20 209.233.143.131:49395 -> xxx.yyy.1.1:42 SYN ******S* Feb 14 23:50:20 209.233.143.131:49396 -> xxx.yyy.1.2:42 SYN ******S* Feb 14 23:50:17 209.233.143.131:49399 -> xxx.yyy.1.5:42 SYN ******S* Feb 14 23:50:17 209.233.143.131:49400 -> xxx.yyy.1.6:42 SYN ******S* Feb 14 23:50:17 209.233.143.131:49401 -> xxx.yyy.1.7:42 SYN ******S* Feb 14 23:50:17 209.233.143.131:49402 -> xxx.yyy.1.8:42 SYN ******S* Feb 14 23:50:17 209.233.143.131:49403 -> xxx.yyy.1.9:42 SYN ******S* Feb 14 23:50:17 209.233.143.131:49404 -> xxx.yyy.1.10:42 SYN ******S* [...] Feb 14 23:54:27 209.233.143.131:55853 -> xxx.yyy.255.242:42 SYN ******S* Feb 14 23:54:27 209.233.143.131:55854 -> xxx.yyy.255.243:42 SYN ******S* Feb 14 23:54:27 209.233.143.131:55855 -> xxx.yyy.255.244:42 SYN ******S* Feb 14 23:54:27 209.233.143.131:55856 -> xxx.yyy.255.245:42 SYN ******S* Feb 14 23:54:27 209.233.143.131:55859 -> xxx.yyy.255.248:42 SYN ******S* Feb 14 23:54:27 209.233.143.131:55861 -> xxx.yyy.255.250:42 SYN ******S* Feb 14 23:54:27 209.233.143.131:55863 -> xxx.yyy.255.252:42 SYN ******S* Feb 14 23:54:27 209.233.143.131:55864 -> xxx.yyy.255.253:42 SYN ******S* 40196 Feb 14 21:38:07 194.130.15.221:3342 -> xxx.yyy.1.2:3306 SYN ******S* Feb 14 21:38:04 194.130.15.221:3344 -> xxx.yyy.1.4:3306 SYN ******S* Feb 14 21:38:04 194.130.15.221:3345 -> xxx.yyy.1.5:3306 SYN ******S* Feb 14 21:38:07 194.130.15.221:3346 -> xxx.yyy.1.6:3306 SYN ******S* Feb 14 21:38:04 194.130.15.221:3348 -> xxx.yyy.1.8:3306 SYN ******S* Feb 14 21:38:04 194.130.15.221:3349 -> xxx.yyy.1.9:3306 SYN ******S* Feb 14 21:38:04 194.130.15.221:3351 -> xxx.yyy.1.11:3306 SYN ******S* Feb 14 21:38:04 194.130.15.221:3353 -> xxx.yyy.1.13:3306 SYN ******S* [...] Feb 14 21:49:46 194.130.15.221:2095 -> xxx.yyy.255.238:3306 SYN ******S* Feb 14 21:49:46 194.130.15.221:2104 -> xxx.yyy.255.247:3306 SYN ******S* Feb 14 21:49:46 194.130.15.221:2099 -> xxx.yyy.255.242:3306 SYN ******S* Feb 14 21:49:46 194.130.15.221:2101 -> xxx.yyy.255.244:3306 SYN ******S* Feb 14 21:49:46 194.130.15.221:2106 -> xxx.yyy.255.249:3306 SYN ******S* Feb 14 21:49:46 194.130.15.221:2111 -> xxx.yyy.255.254:3306 SYN ******S* Feb 14 21:49:46 194.130.15.221:2110 -> xxx.yyy.255.253:3306 SYN ******S* Feb 14 21:49:46 194.130.15.221:2109 -> xxx.yyy.255.252:3306 SYN ******S* 39966 Feb 14 18:00:27 151.201.216.90:2443 -> xxx.yyy.1.3:41523 SYN ******S* Feb 14 18:00:27 151.201.216.90:2445 -> xxx.yyy.1.5:41523 SYN ******S* Feb 14 18:00:28 151.201.216.90:2449 -> xxx.yyy.1.9:41523 SYN ******S* Feb 14 18:00:27 151.201.216.90:2453 -> xxx.yyy.1.13:41523 SYN ******S* Feb 14 18:00:30 151.201.216.90:2455 -> xxx.yyy.1.15:41523 SYN ******S* Feb 14 18:00:27 151.201.216.90:2457 -> xxx.yyy.1.17:41523 SYN ******S* Feb 14 18:00:27 151.201.216.90:2461 -> xxx.yyy.1.21:41523 SYN ******S* Feb 14 18:00:28 151.201.216.90:2462 -> xxx.yyy.1.22:41523 SYN ******S* [...] Feb 14 18:16:23 151.201.216.90:2976 -> xxx.yyy.255.224:41523 SYN ******S* Feb 14 18:16:23 151.201.216.90:2992 -> xxx.yyy.255.240:41523 SYN ******S* Feb 14 18:16:23 151.201.216.90:2960 -> xxx.yyy.255.208:41523 SYN ******S* Feb 14 18:16:23 151.201.216.90:2989 -> xxx.yyy.255.237:41523 SYN ******S* Feb 14 18:16:23 151.201.216.90:2986 -> xxx.yyy.255.234:41523 SYN ******S* Feb 14 18:16:23 151.201.216.90:2983 -> xxx.yyy.255.231:41523 SYN ******S* Feb 14 18:16:23 151.201.216.90:3003 -> xxx.yyy.255.250:41523 SYN ******S* Feb 14 18:16:24 151.201.216.90:2977 -> xxx.yyy.255.225:41523 SYN ******S* Feb 14 18:16:24 151.201.216.90:2961 -> xxx.yyy.255.209:41523 SYN ******S* 37562 Feb 14 16:39:45 66.23.215.196:2139 -> xxx.yyy.1.4:41523 SYN ******S* Feb 14 16:39:45 66.23.215.196:2140 -> xxx.yyy.1.5:41523 SYN ******S* Feb 14 16:39:45 66.23.215.196:2141 -> xxx.yyy.1.6:41523 SYN ******S* Feb 14 16:39:45 66.23.215.196:2150 -> xxx.yyy.1.15:41523 SYN ******S* Feb 14 16:39:46 66.23.215.196:2154 -> xxx.yyy.1.19:41523 SYN ******S* Feb 14 16:39:46 66.23.215.196:2155 -> xxx.yyy.1.20:41523 SYN ******S* Feb 14 16:39:45 66.23.215.196:2158 -> xxx.yyy.1.23:41523 SYN ******S* Feb 14 16:39:48 66.23.215.196:2160 -> xxx.yyy.1.25:41523 SYN ******S* [...] Feb 14 16:51:26 66.23.215.196:4730 -> xxx.yyy.255.230:41523 SYN ******S* Feb 14 16:51:26 66.23.215.196:4734 -> xxx.yyy.255.233:41523 SYN ******S* Feb 14 16:51:26 66.23.215.196:4746 -> xxx.yyy.255.245:41523 SYN ******S* Feb 14 16:51:26 66.23.215.196:4743 -> xxx.yyy.255.242:41523 SYN ******S* Feb 14 16:51:26 66.23.215.196:4756 -> xxx.yyy.255.254:41523 SYN ******S* Feb 14 16:51:26 66.23.215.196:4753 -> xxx.yyy.255.251:41523 SYN ******S* Feb 14 16:51:26 66.23.215.196:4750 -> xxx.yyy.255.248:41523 SYN ******S* Feb 14 16:51:26 66.23.215.196:4751 -> xxx.yyy.255.249:41523 SYN ******S* 37169 Feb 14 13:40:36 201.10.45.3:2672 -> xxx.yyy.1.2:3306 SYN ******S* Feb 14 13:40:36 201.10.45.3:2673 -> xxx.yyy.1.3:3306 SYN ******S* Feb 14 13:40:39 201.10.45.3:2679 -> xxx.yyy.1.8:3306 SYN ******S* Feb 14 13:40:36 201.10.45.3:2681 -> xxx.yyy.1.10:3306 SYN ******S* Feb 14 13:40:36 201.10.45.3:2682 -> xxx.yyy.1.11:3306 SYN ******S* Feb 14 13:40:39 201.10.45.3:2685 -> xxx.yyy.1.14:3306 SYN ******S* Feb 14 13:40:36 201.10.45.3:2687 -> xxx.yyy.1.16:3306 SYN ******S* Feb 14 13:40:39 201.10.45.3:2689 -> xxx.yyy.1.18:3306 SYN ******S* [...] Feb 14 13:53:19 201.10.45.3:1057 -> xxx.yyy.255.238:3306 SYN ******S* Feb 14 13:53:19 201.10.45.3:1054 -> xxx.yyy.255.235:3306 SYN ******S* Feb 14 13:53:19 201.10.45.3:1058 -> xxx.yyy.255.239:3306 SYN ******S* Feb 14 13:53:20 201.10.45.3:1062 -> xxx.yyy.255.243:3306 SYN ******S* Feb 14 13:53:20 201.10.45.3:1069 -> xxx.yyy.255.250:3306 SYN ******S* Feb 14 13:53:20 201.10.45.3:1066 -> xxx.yyy.255.247:3306 SYN ******S* Feb 14 13:53:20 201.10.45.3:1063 -> xxx.yyy.255.244:3306 SYN ******S* Feb 14 13:53:20 201.10.45.3:1067 -> xxx.yyy.255.248:3306 SYN ******S* Feb 14 13:53:20 201.10.45.3:1064 -> xxx.yyy.255.245:3306 SYN ******S* 34962 Feb 14 15:46:19 65.162.1.154:2280 -> xxx.yyy.1.1:4000 SYN ******S* Feb 14 15:46:19 65.162.1.154:2283 -> xxx.yyy.1.4:4000 SYN ******S* Feb 14 15:46:22 65.162.1.154:2284 -> xxx.yyy.1.5:4000 SYN ******S* Feb 14 15:46:19 65.162.1.154:2285 -> xxx.yyy.1.6:4000 SYN ******S* Feb 14 15:46:19 65.162.1.154:2286 -> xxx.yyy.1.7:4000 SYN ******S* Feb 14 15:46:19 65.162.1.154:2292 -> xxx.yyy.1.13:4000 SYN ******S* Feb 14 15:46:19 65.162.1.154:2293 -> xxx.yyy.1.14:4000 SYN ******S* Feb 14 15:46:22 65.162.1.154:2297 -> xxx.yyy.1.18:4000 SYN ******S* [...] Feb 14 15:50:07 65.162.1.154:3881 -> xxx.yyy.255.235:4000 SYN ******S* Feb 14 15:50:07 65.162.1.154:3873 -> xxx.yyy.255.227:4000 SYN ******S* Feb 14 15:50:07 65.162.1.154:3893 -> xxx.yyy.255.248:4000 SYN ******S* Feb 14 15:50:07 65.162.1.154:3846 -> xxx.yyy.255.200:4000 SYN ******S* Feb 14 15:50:07 65.162.1.154:3886 -> xxx.yyy.255.240:4000 SYN ******S* Feb 14 15:50:07 65.162.1.154:3851 -> xxx.yyy.255.205:4000 SYN ******S* Feb 14 15:50:07 65.162.1.154:3856 -> xxx.yyy.255.210:4000 SYN ******S* Feb 14 15:50:07 65.162.1.154:3896 -> xxx.yyy.255.250:4000 SYN ******S* 31651 Feb 14 21:38:06 24.117.104.163:3205 -> xxx.yyy.1.2:3306 SYN ******S* Feb 14 21:38:09 24.117.104.163:3319 -> xxx.yyy.1.3:3306 SYN ******S* Feb 14 21:38:09 24.117.104.163:3320 -> xxx.yyy.1.4:3306 SYN ******S* Feb 14 21:38:09 24.117.104.163:3321 -> xxx.yyy.1.5:3306 SYN ******S* Feb 14 21:38:09 24.117.104.163:3322 -> xxx.yyy.1.6:3306 SYN ******S* Feb 14 21:38:09 24.117.104.163:3323 -> xxx.yyy.1.7:3306 SYN ******S* Feb 14 21:38:09 24.117.104.163:3324 -> xxx.yyy.1.8:3306 SYN ******S* Feb 14 21:38:09 24.117.104.163:3325 -> xxx.yyy.1.9:3306 SYN ******S* [...] Feb 14 22:17:01 24.117.104.163:3977 -> xxx.yyy.255.244:3306 SYN ******S* Feb 14 22:17:01 24.117.104.163:4039 -> xxx.yyy.255.250:3306 SYN ******S* Feb 14 22:17:01 24.117.104.163:4040 -> xxx.yyy.255.251:3306 SYN ******S* Feb 14 22:17:01 24.117.104.163:4041 -> xxx.yyy.255.252:3306 SYN ******S* Feb 14 22:17:01 24.117.104.163:4042 -> xxx.yyy.255.253:3306 SYN ******S* Feb 14 22:17:04 24.117.104.163:4039 -> xxx.yyy.255.250:3306 SYN ******S* Feb 14 22:17:04 24.117.104.163:4041 -> xxx.yyy.255.252:3306 SYN ******S* Feb 14 22:17:04 24.117.104.163:4042 -> xxx.yyy.255.253:3306 SYN ******S* 30943 Feb 14 17:16:11 61.63.9.85:1548 -> xxx.yyy.1.0:22 SYN ******S* Feb 14 17:16:11 61.63.9.85:1548 -> xxx.yyy.1.14:22 SYN ******S* Feb 14 17:16:11 61.63.9.85:1548 -> xxx.yyy.1.15:22 SYN ******S* Feb 14 17:16:11 61.63.9.85:1548 -> xxx.yyy.1.6:22 SYN ******S* Feb 14 17:16:11 61.63.9.85:1548 -> xxx.yyy.1.5:22 SYN ******S* Feb 14 17:16:11 61.63.9.85:1548 -> xxx.yyy.1.21:22 SYN ******S* Feb 14 17:16:11 61.63.9.85:1548 -> xxx.yyy.1.31:22 SYN ******S* Feb 14 17:16:11 61.63.9.85:1548 -> xxx.yyy.1.29:22 SYN ******S* [...] Feb 14 17:24:54 61.63.9.85:37995 -> xxx.yyy.241.25:22 SYN ******S* Feb 14 17:24:55 61.63.9.85:37996 -> xxx.yyy.241.24:22 SYN ******S* Feb 14 17:24:55 61.63.9.85:37997 -> xxx.yyy.241.26:22 SYN ******S* Feb 14 17:24:55 61.63.9.85:37998 -> xxx.yyy.241.27:22 SYN ******S* Feb 14 17:24:55 61.63.9.85:37999 -> xxx.yyy.241.36:22 SYN ******S* Feb 14 17:24:55 61.63.9.85:38000 -> xxx.yyy.241.28:22 SYN ******S* Feb 14 17:24:56 61.63.9.85:38004 -> xxx.yyy.241.98:22 SYN ******S* Feb 14 17:24:56 61.63.9.85:38006 -> xxx.yyy.242.12:22 SYN ******S* Feb 14 17:24:56 61.63.9.85:38009 -> xxx.yyy.243.45:22 SYN ******S* 25316 Feb 14 12:27:08 64.89.115.227:3288 -> xxx.yyy.1.1:6101 SYN ******S* Feb 14 12:27:08 64.89.115.227:3289 -> xxx.yyy.1.2:6101 SYN ******S* Feb 14 12:27:11 64.89.115.227:3292 -> xxx.yyy.1.5:6101 SYN ******S* Feb 14 12:27:08 64.89.115.227:3293 -> xxx.yyy.1.6:6101 SYN ******S* Feb 14 12:27:08 64.89.115.227:3294 -> xxx.yyy.1.7:6101 SYN ******S* Feb 14 12:27:08 64.89.115.227:3295 -> xxx.yyy.1.8:6101 SYN ******S* Feb 14 12:27:08 64.89.115.227:3296 -> xxx.yyy.1.9:6101 SYN ******S* Feb 14 12:27:11 64.89.115.227:3297 -> xxx.yyy.1.10:6101 SYN ******S* [...] Feb 14 12:31:32 64.89.115.227:1321 -> xxx.yyy.255.17:6101 SYN ******S* Feb 14 12:31:32 64.89.115.227:1254 -> xxx.yyy.254.204:6101 SYN ******S* Feb 14 12:31:32 64.89.115.227:1412 -> xxx.yyy.255.108:6101 SYN ******S* Feb 14 12:31:32 64.89.115.227:1404 -> xxx.yyy.255.100:6101 SYN ******S* Feb 14 12:31:32 64.89.115.227:1408 -> xxx.yyy.255.105:6101 SYN ******S* Feb 14 12:31:32 64.89.115.227:1401 -> xxx.yyy.255.97:6101 SYN ******S* Feb 14 12:31:32 64.89.115.227:1369 -> xxx.yyy.255.65:6101 SYN ******S* Feb 14 12:31:32 64.89.115.227:1377 -> xxx.yyy.255.73:6101 SYN ******S* Feb 14 12:31:32 64.89.115.227:1444 -> xxx.yyy.255.140:6101 SYN ******S* 25241 Feb 14 00:09:35 67.97.5.197:2759 -> xxx.yyy.1.2:3632 SYN ******S* Feb 14 00:09:35 67.97.5.197:2708 -> xxx.yyy.1.0:3632 SYN ******S* Feb 14 00:09:35 67.97.5.197:2790 -> xxx.yyy.1.5:3632 SYN ******S* Feb 14 00:09:35 67.97.5.197:2801 -> xxx.yyy.1.8:3632 SYN ******S* Feb 14 00:09:35 67.97.5.197:2803 -> xxx.yyy.1.9:3632 SYN ******S* Feb 14 00:09:35 67.97.5.197:2794 -> xxx.yyy.1.6:3632 SYN ******S* Feb 14 00:09:35 67.97.5.197:2797 -> xxx.yyy.1.7:3632 SYN ******S* Feb 14 00:09:35 67.97.5.197:2355 -> xxx.yyy.1.16:3632 SYN ******S* [...] Feb 14 00:11:36 67.97.5.197:2384 -> xxx.yyy.255.248:3632 SYN ******S* Feb 14 00:11:36 67.97.5.197:2808 -> xxx.yyy.255.241:3632 SYN ******S* Feb 14 00:11:36 67.97.5.197:2812 -> xxx.yyy.255.242:3632 SYN ******S* Feb 14 00:11:36 67.97.5.197:2328 -> xxx.yyy.255.245:3632 SYN ******S* Feb 14 00:11:36 67.97.5.197:2355 -> xxx.yyy.255.246:3632 SYN ******S* Feb 14 00:11:36 67.97.5.197:2398 -> xxx.yyy.255.249:3632 SYN ******S* Feb 14 00:11:36 67.97.5.197:2424 -> xxx.yyy.255.251:3632 SYN ******S* Feb 14 00:11:36 67.97.5.197:2434 -> xxx.yyy.255.252:3632 SYN ******S* Feb 14 00:11:36 67.97.5.197:2444 -> xxx.yyy.255.253:3632 SYN ******S* 24052 Feb 14 06:40:06 200.173.156.100:31026 -> xxx.yyy.1.0:1433 SYN ******S* Feb 14 06:40:06 200.173.156.100:31032 -> xxx.yyy.1.1:1433 SYN ******S* Feb 14 06:40:06 200.173.156.100:31034 -> xxx.yyy.1.2:1433 SYN ******S* Feb 14 06:40:06 200.173.156.100:31036 -> xxx.yyy.1.3:1433 SYN ******S* Feb 14 06:40:06 200.173.156.100:31038 -> xxx.yyy.1.4:1433 SYN ******S* Feb 14 06:40:06 200.173.156.100:31040 -> xxx.yyy.1.5:1433 SYN ******S* Feb 14 06:40:06 200.173.156.100:31041 -> xxx.yyy.1.6:1433 SYN ******S* Feb 14 06:40:06 200.173.156.100:31042 -> xxx.yyy.1.7:1433 SYN ******S* [...] Feb 14 07:55:36 200.173.156.100:41834 -> xxx.yyy.93.59:1433 SYN ******S* Feb 14 07:55:36 200.173.156.100:41830 -> xxx.yyy.93.57:1433 SYN ******S* Feb 14 07:55:36 200.173.156.100:41828 -> xxx.yyy.93.56:1433 SYN ******S* Feb 14 07:55:36 200.173.156.100:41853 -> xxx.yyy.93.67:1433 SYN ******S* Feb 14 07:55:36 200.173.156.100:41845 -> xxx.yyy.93.63:1433 SYN ******S* Feb 14 07:55:36 200.173.156.100:41851 -> xxx.yyy.93.68:1433 SYN ******S* Feb 14 07:55:36 200.173.156.100:41842 -> xxx.yyy.93.64:1433 SYN ******S* Feb 14 07:55:36 200.173.156.100:38443 -> xxx.yyy.93.69:1433 SYN ******S* Feb 14 07:55:36 200.173.156.100:38434 -> xxx.yyy.93.66:1433 SYN ******S* 20958 Feb 14 17:15:43 81.41.38.58:1028 -> xxx.yyy.203.1:17300 SYN ******S* Feb 14 17:15:43 81.41.38.58:1029 -> xxx.yyy.203.2:17300 SYN ******S* Feb 14 17:15:40 81.41.38.58:1030 -> xxx.yyy.203.3:17300 SYN ******S* Feb 14 17:15:40 81.41.38.58:1033 -> xxx.yyy.203.6:17300 SYN ******S* Feb 14 17:15:43 81.41.38.58:1036 -> xxx.yyy.203.9:17300 SYN ******S* Feb 14 17:15:43 81.41.38.58:1038 -> xxx.yyy.203.11:17300 SYN ******S* Feb 14 17:15:40 81.41.38.58:1042 -> xxx.yyy.203.15:17300 SYN ******S* Feb 14 17:15:42 81.41.38.58:1078 -> xxx.yyy.203.21:17300 SYN ******S* [...] Feb 14 17:38:06 81.41.38.58:4557 -> xxx.yyy.254.246:17300 SYN ******S* Feb 14 17:38:06 81.41.38.58:4564 -> xxx.yyy.254.253:17300 SYN ******S* Feb 14 17:38:06 81.41.38.58:4558 -> xxx.yyy.254.247:17300 SYN ******S* Feb 14 17:38:06 81.41.38.58:4561 -> xxx.yyy.254.250:17300 SYN ******S* Feb 14 17:38:06 81.41.38.58:4565 -> xxx.yyy.254.254:17300 SYN ******S* Feb 14 17:38:06 81.41.38.58:4562 -> xxx.yyy.254.251:17300 SYN ******S* Feb 14 17:38:06 81.41.38.58:4556 -> xxx.yyy.254.245:17300 SYN ******S* Feb 14 17:38:06 81.41.38.58:4563 -> xxx.yyy.254.252:17300 SYN ******S* 20899 Feb 14 16:26:58 144.132.202.2:10374 -> xxx.yyy.76.141:6108 SYN ******S* Feb 14 16:26:59 144.132.202.2:10375 -> xxx.yyy.76.141:6111 SYN ******S* Feb 14 16:26:59 144.132.202.2:10377 -> xxx.yyy.76.141:6116 SYN ******S* Feb 14 16:26:59 144.132.202.2:10376 -> xxx.yyy.76.141:6112 SYN ******S* Feb 14 16:26:57 144.132.202.2:3980 -> xxx.yyy.78.56:6105 SYN ******S* Feb 14 16:26:59 144.132.202.2:3988 -> xxx.yyy.78.56:6123 SYN ******S* Feb 14 16:26:59 144.132.202.2:3989 -> xxx.yyy.78.56:6125 SYN ******S* Feb 14 16:27:02 144.132.202.2:3995 -> xxx.yyy.78.56:6128 SYN ******S* [...] Feb 14 22:41:26 144.132.202.2:4682 -> xxx.yyy.78.56:6120 SYN ******S* Feb 14 22:41:26 144.132.202.2:13835 -> xxx.yyy.76.141:6111 SYN ******S* Feb 14 22:41:23 144.132.202.2:13836 -> xxx.yyy.76.141:6116 SYN ******S* Feb 14 22:41:30 144.132.202.2:13836 -> xxx.yyy.76.141:6116 SYN ******S* Feb 14 22:41:30 144.132.202.2:13835 -> xxx.yyy.76.141:6111 SYN ******S* Feb 14 22:41:36 144.132.202.2:4685 -> xxx.yyy.78.56:6101 SYN ******S* Feb 14 22:41:39 144.132.202.2:4685 -> xxx.yyy.78.56:6101 SYN ******S* Feb 14 22:41:45 144.132.202.2:4686 -> xxx.yyy.78.56:6101 SYN ******S* Feb 14 22:41:48 144.132.202.2:4686 -> xxx.yyy.78.56:6101 SYN ******S* 20045 Feb 14 14:18:39 141.155.88.82:3919 -> xxx.yyy.1.0:3632 SYN ******S* Feb 14 14:18:39 141.155.88.82:3874 -> xxx.yyy.1.5:3632 SYN ******S* Feb 14 14:18:39 141.155.88.82:3877 -> xxx.yyy.1.8:3632 SYN ******S* Feb 14 14:18:39 141.155.88.82:3884 -> xxx.yyy.1.15:3632 SYN ******S* Feb 14 14:18:39 141.155.88.82:3890 -> xxx.yyy.1.21:3632 SYN ******S* Feb 14 14:18:39 141.155.88.82:3891 -> xxx.yyy.1.22:3632 SYN ******S* Feb 14 14:18:39 141.155.88.82:3892 -> xxx.yyy.1.23:3632 SYN ******S* Feb 14 14:18:39 141.155.88.82:3893 -> xxx.yyy.1.24:3632 SYN ******S* [...] Feb 14 14:23:27 141.155.88.82:3879 -> xxx.yyy.255.240:3632 SYN ******S* Feb 14 14:23:27 141.155.88.82:3880 -> xxx.yyy.255.241:3632 SYN ******S* Feb 14 14:23:27 141.155.88.82:3882 -> xxx.yyy.255.243:3632 SYN ******S* Feb 14 14:23:27 141.155.88.82:3884 -> xxx.yyy.255.245:3632 SYN ******S* Feb 14 14:23:27 141.155.88.82:3885 -> xxx.yyy.255.246:3632 SYN ******S* Feb 14 14:23:27 141.155.88.82:3886 -> xxx.yyy.255.247:3632 SYN ******S* Feb 14 14:23:27 141.155.88.82:3890 -> xxx.yyy.255.251:3632 SYN ******S* Feb 14 14:23:27 141.155.88.82:3891 -> xxx.yyy.255.252:3632 SYN ******S* Feb 14 14:23:27 141.155.88.82:3892 -> xxx.yyy.255.253:3632 SYN ******S* 18376 Feb 14 18:43:48 61.166.6.60:29890 -> xxx.yyy.1.0:22 SYN ******S* Feb 14 18:43:48 61.166.6.60:29890 -> xxx.yyy.1.12:22 SYN ******S* Feb 14 18:43:48 61.166.6.60:29890 -> xxx.yyy.1.13:22 SYN ******S* Feb 14 18:43:48 61.166.6.60:29890 -> xxx.yyy.1.14:22 SYN ******S* Feb 14 18:43:48 61.166.6.60:29890 -> xxx.yyy.1.15:22 SYN ******S* Feb 14 18:43:48 61.166.6.60:29890 -> xxx.yyy.1.19:22 SYN ******S* Feb 14 18:43:48 61.166.6.60:29890 -> xxx.yyy.1.25:22 SYN ******S* Feb 14 18:43:48 61.166.6.60:29890 -> xxx.yyy.1.32:22 SYN ******S* [...] Feb 14 18:44:38 61.166.6.60:29890 -> xxx.yyy.255.233:22 SYN ******S* Feb 14 18:44:38 61.166.6.60:29890 -> xxx.yyy.255.234:22 SYN ******S* Feb 14 18:44:38 61.166.6.60:29890 -> xxx.yyy.255.235:22 SYN ******S* Feb 14 18:44:38 61.166.6.60:29890 -> xxx.yyy.255.237:22 SYN ******S* Feb 14 18:44:38 61.166.6.60:29890 -> xxx.yyy.255.241:22 SYN ******S* Feb 14 18:44:38 61.166.6.60:29890 -> xxx.yyy.255.246:22 SYN ******S* Feb 14 18:44:38 61.166.6.60:29890 -> xxx.yyy.255.247:22 SYN ******S* Feb 14 18:44:38 61.166.6.60:29890 -> xxx.yyy.255.251:22 SYN ******S* 17478 Feb 14 17:17:17 67.92.11.133:21001 -> xxx.yyy.1.8:22 SYN ******S* Feb 14 17:17:17 67.92.11.133:21005 -> xxx.yyy.1.12:22 SYN ******S* Feb 14 17:17:17 67.92.11.133:21006 -> xxx.yyy.1.13:22 SYN ******S* Feb 14 17:17:17 67.92.11.133:21011 -> xxx.yyy.1.18:22 SYN ******S* Feb 14 17:17:17 67.92.11.133:21066 -> xxx.yyy.1.73:22 SYN ******S* Feb 14 17:17:17 67.92.11.133:21068 -> xxx.yyy.1.75:22 SYN ******S* Feb 14 17:17:17 67.92.11.133:21072 -> xxx.yyy.1.79:22 SYN ******S* Feb 14 17:17:17 67.92.11.133:21073 -> xxx.yyy.1.80:22 SYN ******S* [...] Feb 14 17:39:32 67.92.11.133:32929 -> xxx.yyy.243.45:22 SYN ******S* Feb 14 17:39:36 67.92.11.133:33342 -> xxx.yyy.243.45:22 SYN ******S* Feb 14 17:39:37 67.92.11.133:33347 -> xxx.yyy.213.66:22 SYN ******S* Feb 14 17:39:39 67.92.11.133:33749 -> xxx.yyy.242.12:22 SYN ******S* Feb 14 17:39:39 67.92.11.133:33750 -> xxx.yyy.243.45:22 SYN ******S* Feb 14 17:39:40 67.92.11.133:33751 -> xxx.yyy.241.72:22 SYN ******S* Feb 14 17:39:42 67.92.11.133:33758 -> xxx.yyy.243.45:22 SYN ******S* Feb 14 17:39:42 67.92.11.133:33759 -> xxx.yyy.242.12:22 SYN ******S* Feb 14 17:39:43 67.92.11.133:33760 -> xxx.yyy.241.72:22 SYN ******S* 16941 Feb 14 13:03:55 211.214.102.99:2911 -> xxx.yyy.1.26:3306 SYN ******S* Feb 14 13:03:58 211.214.102.99:2924 -> xxx.yyy.1.52:3306 SYN ******S* Feb 14 13:03:58 211.214.102.99:2930 -> xxx.yyy.1.70:3306 SYN ******S* Feb 14 13:03:55 211.214.102.99:2933 -> xxx.yyy.1.101:3306 SYN ******S* Feb 14 13:03:55 211.214.102.99:2934 -> xxx.yyy.1.102:3306 SYN ******S* Feb 14 13:03:55 211.214.102.99:2942 -> xxx.yyy.1.106:3306 SYN ******S* Feb 14 13:03:55 211.214.102.99:2944 -> xxx.yyy.1.121:3306 SYN ******S* Feb 14 13:03:55 211.214.102.99:2948 -> xxx.yyy.1.125:3306 SYN ******S* [...] Feb 14 13:10:31 211.214.102.99:1444 -> xxx.yyy.255.190:3306 SYN ******S* Feb 14 13:10:31 211.214.102.99:1442 -> xxx.yyy.255.188:3306 SYN ******S* Feb 14 13:10:31 211.214.102.99:1441 -> xxx.yyy.255.187:3306 SYN ******S* Feb 14 13:10:31 211.214.102.99:1457 -> xxx.yyy.255.200:3306 SYN ******S* Feb 14 13:10:31 211.214.102.99:1660 -> xxx.yyy.255.252:3306 SYN ******S* Feb 14 13:10:31 211.214.102.99:1647 -> xxx.yyy.255.239:3306 SYN ******S* Feb 14 13:10:31 211.214.102.99:1650 -> xxx.yyy.255.242:3306 SYN ******S* Feb 14 13:10:31 211.214.102.99:1639 -> xxx.yyy.255.233:3306 SYN ******S* 16446 [...] 12163 [...] 11612 Feb 14 17:50:42 210.64.109.66:62093 -> xxx.yyy.1.99:22 SYN ******S* Feb 14 17:50:42 210.64.109.66:62093 -> xxx.yyy.1.100:22 SYN ******S* Feb 14 17:50:42 210.64.109.66:62093 -> xxx.yyy.1.102:22 SYN ******S* Feb 14 17:50:42 210.64.109.66:62093 -> xxx.yyy.1.104:22 SYN ******S* Feb 14 17:50:42 210.64.109.66:62093 -> xxx.yyy.1.107:22 SYN ******S* Feb 14 17:50:42 210.64.109.66:62093 -> xxx.yyy.1.109:22 SYN ******S* Feb 14 17:50:42 210.64.109.66:62093 -> xxx.yyy.1.110:22 SYN ******S* Feb 14 17:50:42 210.64.109.66:62093 -> xxx.yyy.1.116:22 SYN ******S* [...] Feb 14 17:52:26 210.64.109.66:43717 -> xxx.yyy.241.98:22 SYN ******S* Feb 14 17:52:26 210.64.109.66:43719 -> xxx.yyy.248.17:22 SYN ******S* Feb 14 17:52:26 210.64.109.66:43720 -> xxx.yyy.248.18:22 SYN ******S* Feb 14 17:52:27 210.64.109.66:43722 -> xxx.yyy.230.181:22 SYN ******S* Feb 14 17:52:27 210.64.109.66:43723 -> xxx.yyy.230.39:22 SYN ******S* Feb 14 17:52:27 210.64.109.66:43724 -> xxx.yyy.243.45:22 SYN ******S* Feb 14 17:52:27 210.64.109.66:43725 -> xxx.yyy.229.41:22 SYN ******S* Feb 14 17:52:29 210.64.109.66:43726 -> xxx.yyy.241.72:22 SYN ******S* 11600 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions