[LOGS] Summary of large-scale portscanning detects
[email protected] Thu, 17 Feb 2005 06:46:32 -0600 (CST)
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Feb 16 00:00:30 67.94.15.131:1299 -> xxx.yyy.64.6:3306 SYN ******S* Feb 16 00:00:33 67.94.15.131:1300 -> xxx.yyy.64.7:3306 SYN ******S* Feb 16 00:00:33 67.94.15.131:1301 -> xxx.yyy.64.8:3306 SYN ******S* Feb 16 00:00:33 67.94.15.131:1307 -> xxx.yyy.64.12:3306 SYN ******S* Feb 16 00:00:30 67.94.15.131:1308 -> xxx.yyy.64.13:3306 SYN ******S* Feb 16 00:00:33 67.94.15.131:1309 -> xxx.yyy.64.14:3306 SYN ******S* Feb 16 00:00:30 67.94.15.131:1312 -> xxx.yyy.64.17:3306 SYN ******S* Feb 16 00:00:30 67.94.15.131:1313 -> xxx.yyy.64.18:3306 SYN ******S* [...] Feb 16 10:21:03 67.94.15.131:1221 -> xxx.yyy.255.251:3306 SYN ******S* Feb 16 10:21:03 67.94.15.131:1210 -> xxx.yyy.255.246:3306 SYN ******S* Feb 16 10:21:03 67.94.15.131:1214 -> xxx.yyy.255.249:3306 SYN ******S* Feb 16 10:21:03 67.94.15.131:1215 -> xxx.yyy.255.250:3306 SYN ******S* Feb 16 10:21:03 67.94.15.131:1211 -> xxx.yyy.255.247:3306 SYN ******S* Feb 16 10:21:03 67.94.15.131:1223 -> xxx.yyy.255.253:3306 SYN ******S* Feb 16 10:21:03 67.94.15.131:1212 -> xxx.yyy.255.248:3306 SYN ******S* Feb 16 10:21:03 67.94.15.131:1209 -> xxx.yyy.255.245:3306 SYN ******S* 131081 Feb 16 19:22:37 202.58.80.95:16716 -> xxx.yyy.1.0:1433 SYN ******S* Feb 16 19:22:37 202.58.80.95:16722 -> xxx.yyy.1.2:1433 SYN ******S* Feb 16 19:22:34 202.58.80.95:16731 -> xxx.yyy.1.5:1433 SYN ******S* Feb 16 19:22:34 202.58.80.95:16733 -> xxx.yyy.1.6:1433 SYN ******S* Feb 16 19:22:38 202.58.80.95:16738 -> xxx.yyy.1.8:1433 SYN ******S* Feb 16 19:22:38 202.58.80.95:16740 -> xxx.yyy.1.9:1433 SYN ******S* Feb 16 19:22:35 202.58.80.95:16746 -> xxx.yyy.1.11:1433 SYN ******S* Feb 16 19:22:35 202.58.80.95:16749 -> xxx.yyy.1.12:1433 SYN ******S* [...] Feb 16 23:59:58 202.58.80.95:55654 -> xxx.yyy.223.17:1433 SYN ******S* Feb 16 23:59:58 202.58.80.95:55495 -> xxx.yyy.223.5:1433 SYN ******S* Feb 16 23:59:58 202.58.80.95:55659 -> xxx.yyy.223.18:1433 SYN ******S* Feb 16 23:59:58 202.58.80.95:55498 -> xxx.yyy.223.6:1433 SYN ******S* Feb 16 23:59:58 202.58.80.95:55499 -> xxx.yyy.223.8:1433 SYN ******S* Feb 16 23:59:59 202.58.80.95:55507 -> xxx.yyy.223.13:1433 SYN ******S* Feb 16 23:59:59 202.58.80.95:55508 -> xxx.yyy.223.14:1433 SYN ******S* Feb 17 00:00:00 202.58.80.95:55519 -> xxx.yyy.223.16:1433 SYN ******S* Feb 17 00:00:00 202.58.80.95:55691 -> xxx.yyy.223.23:1433 SYN ******S* 127004 Feb 16 03:14:06 194.8.176.2:3544 -> xxx.yyy.1.1:42 SYN ******S* Feb 16 03:14:06 194.8.176.2:3545 -> xxx.yyy.1.2:42 SYN ******S* Feb 16 03:14:06 194.8.176.2:3546 -> xxx.yyy.1.3:42 SYN ******S* Feb 16 03:14:06 194.8.176.2:3547 -> xxx.yyy.1.4:42 SYN ******S* Feb 16 03:14:06 194.8.176.2:3548 -> xxx.yyy.1.5:42 SYN ******S* Feb 16 03:14:06 194.8.176.2:3549 -> xxx.yyy.1.6:42 SYN ******S* Feb 16 03:14:06 194.8.176.2:3550 -> xxx.yyy.1.7:42 SYN ******S* Feb 16 03:14:06 194.8.176.2:3551 -> xxx.yyy.1.8:42 SYN ******S* [...] Feb 16 03:45:08 194.8.176.2:3729 -> xxx.yyy.255.236:42 SYN ******S* Feb 16 03:45:08 194.8.176.2:3733 -> xxx.yyy.255.240:42 SYN ******S* Feb 16 03:45:08 194.8.176.2:3730 -> xxx.yyy.255.237:42 SYN ******S* Feb 16 03:45:08 194.8.176.2:3734 -> xxx.yyy.255.241:42 SYN ******S* Feb 16 03:45:09 194.8.176.2:3738 -> xxx.yyy.255.245:42 SYN ******S* Feb 16 03:45:09 194.8.176.2:3745 -> xxx.yyy.255.252:42 SYN ******S* Feb 16 03:45:09 194.8.176.2:3746 -> xxx.yyy.255.253:42 SYN ******S* Feb 16 03:45:09 194.8.176.2:3747 -> xxx.yyy.255.254:42 SYN ******S* Feb 16 03:45:09 194.8.176.2:3744 -> xxx.yyy.255.251:42 SYN ******S* 77609 Feb 16 01:33:22 67.155.156.197:1132 -> xxx.yyy.1.1:3306 SYN ******S* Feb 16 01:33:22 67.155.156.197:1133 -> xxx.yyy.1.2:3306 SYN ******S* Feb 16 01:33:22 67.155.156.197:1135 -> xxx.yyy.1.3:3306 SYN ******S* Feb 16 01:33:22 67.155.156.197:1139 -> xxx.yyy.1.4:3306 SYN ******S* Feb 16 01:33:22 67.155.156.197:1181 -> xxx.yyy.1.18:3306 SYN ******S* Feb 16 01:33:22 67.155.156.197:1183 -> xxx.yyy.1.19:3306 SYN ******S* Feb 16 01:33:22 67.155.156.197:1196 -> xxx.yyy.1.20:3306 SYN ******S* Feb 16 01:33:22 67.155.156.197:1199 -> xxx.yyy.1.21:3306 SYN ******S* [...] Feb 16 20:27:23 67.155.156.197:4856 -> xxx.yyy.254.82:3306 SYN ******S* Feb 16 20:27:23 67.155.156.197:4961 -> xxx.yyy.254.96:3306 SYN ******S* Feb 16 20:27:23 67.155.156.197:4989 -> xxx.yyy.254.101:3306 SYN ******S* Feb 16 20:27:23 67.155.156.197:4981 -> xxx.yyy.254.99:3306 SYN ******S* Feb 16 20:27:23 67.155.156.197:5000 -> xxx.yyy.254.103:3306 SYN ******S* Feb 16 20:27:23 67.155.156.197:4902 -> xxx.yyy.254.88:3306 SYN ******S* Feb 16 20:27:23 67.155.156.197:4784 -> xxx.yyy.254.66:3306 SYN ******S* Feb 16 20:27:23 67.155.156.197:4929 -> xxx.yyy.254.90:3306 SYN ******S* 75130 Feb 16 01:40:43 218.28.81.73:32881 -> xxx.yyy.1.0:1433 SYN ******S* Feb 16 01:40:43 218.28.81.73:44519 -> xxx.yyy.1.3:1433 SYN ******S* Feb 16 01:40:46 218.28.81.73:35965 -> xxx.yyy.1.4:1433 SYN ******S* Feb 16 01:40:47 218.28.81.73:61698 -> xxx.yyy.1.7:1433 SYN ******S* Feb 16 01:40:47 218.28.81.73:43966 -> xxx.yyy.1.9:1433 SYN ******S* Feb 16 01:40:47 218.28.81.73:21736 -> xxx.yyy.1.10:1433 SYN ******S* Feb 16 01:40:45 218.28.81.73:43832 -> xxx.yyy.1.13:1433 SYN ******S* Feb 16 01:40:45 218.28.81.73:31700 -> xxx.yyy.1.15:1433 SYN ******S* [...] Feb 16 04:31:13 218.28.81.73:5629 -> xxx.yyy.255.236:1433 SYN ******S* Feb 16 04:31:14 218.28.81.73:49045 -> xxx.yyy.255.242:1433 SYN ******S* Feb 16 04:31:14 218.28.81.73:58098 -> xxx.yyy.255.244:1433 SYN ******S* Feb 16 04:31:15 218.28.81.73:13923 -> xxx.yyy.255.247:1433 SYN ******S* Feb 16 04:31:15 218.28.81.73:3579 -> xxx.yyy.255.249:1433 SYN ******S* Feb 16 04:31:15 218.28.81.73:59114 -> xxx.yyy.255.248:1433 SYN ******S* Feb 16 04:31:15 218.28.81.73:11433 -> xxx.yyy.255.251:1433 SYN ******S* Feb 16 04:31:15 218.28.81.73:58444 -> xxx.yyy.255.252:1433 SYN ******S* Feb 16 04:31:16 218.28.81.73:5092 -> xxx.yyy.255.254:1433 SYN ******S* 62122 Feb 16 01:35:12 65.100.223.130:2791 -> xxx.yyy.1.1:139 SYN ******S* Feb 16 01:35:12 65.100.223.130:2792 -> xxx.yyy.1.2:139 SYN ******S* Feb 16 01:35:09 65.100.223.130:2793 -> xxx.yyy.1.3:139 SYN ******S* Feb 16 01:35:09 65.100.223.130:2794 -> xxx.yyy.1.4:139 SYN ******S* Feb 16 01:35:09 65.100.223.130:2795 -> xxx.yyy.1.5:139 SYN ******S* Feb 16 01:35:12 65.100.223.130:2796 -> xxx.yyy.1.6:139 SYN ******S* Feb 16 01:35:12 65.100.223.130:2797 -> xxx.yyy.1.7:139 SYN ******S* Feb 16 01:35:12 65.100.223.130:2798 -> xxx.yyy.1.8:139 SYN ******S* [...] Feb 16 01:46:07 65.100.223.130:2251 -> xxx.yyy.255.239:139 SYN ******S* Feb 16 01:46:07 65.100.223.130:2259 -> xxx.yyy.255.247:139 SYN ******S* Feb 16 01:46:07 65.100.223.130:2256 -> xxx.yyy.255.244:139 SYN ******S* Feb 16 01:46:07 65.100.223.130:2263 -> xxx.yyy.255.251:139 SYN ******S* Feb 16 01:46:07 65.100.223.130:2261 -> xxx.yyy.255.249:139 SYN ******S* Feb 16 01:46:07 65.100.223.130:2255 -> xxx.yyy.255.243:139 SYN ******S* Feb 16 01:46:07 65.100.223.130:2258 -> xxx.yyy.255.246:139 SYN ******S* Feb 16 01:46:07 65.100.223.130:2266 -> xxx.yyy.255.254:139 SYN ******S* Feb 16 01:46:07 65.100.223.130:2265 -> xxx.yyy.255.253:139 SYN ******S* 60175 Feb 16 08:16:33 148.208.170.6:1984 -> xxx.yyy.1.1:41523 SYN ******S* Feb 16 08:16:33 148.208.170.6:1986 -> xxx.yyy.1.3:41523 SYN ******S* Feb 16 08:16:35 148.208.170.6:1987 -> xxx.yyy.1.4:41523 SYN ******S* Feb 16 08:16:32 148.208.170.6:1988 -> xxx.yyy.1.5:41523 SYN ******S* Feb 16 08:16:35 148.208.170.6:1989 -> xxx.yyy.1.6:41523 SYN ******S* Feb 16 08:16:33 148.208.170.6:1992 -> xxx.yyy.1.9:41523 SYN ******S* Feb 16 08:16:35 148.208.170.6:1993 -> xxx.yyy.1.10:41523 SYN ******S* Feb 16 08:16:35 148.208.170.6:1996 -> xxx.yyy.1.13:41523 SYN ******S* [...] Feb 16 08:27:28 148.208.170.6:1274 -> xxx.yyy.255.197:41523 SYN ******S* Feb 16 08:27:28 148.208.170.6:1271 -> xxx.yyy.255.194:41523 SYN ******S* Feb 16 08:27:28 148.208.170.6:1278 -> xxx.yyy.255.201:41523 SYN ******S* Feb 16 08:27:28 148.208.170.6:1275 -> xxx.yyy.255.198:41523 SYN ******S* Feb 16 08:27:28 148.208.170.6:1272 -> xxx.yyy.255.195:41523 SYN ******S* Feb 16 08:27:28 148.208.170.6:1283 -> xxx.yyy.255.206:41523 SYN ******S* Feb 16 08:27:28 148.208.170.6:1281 -> xxx.yyy.255.204:41523 SYN ******S* Feb 16 08:27:28 148.208.170.6:1290 -> xxx.yyy.255.213:41523 SYN ******S* 52076 Feb 16 01:50:51 61.129.47.154:3120 -> xxx.yyy.1.3:1433 SYN ******S* Feb 16 01:50:51 61.129.47.154:3121 -> xxx.yyy.1.4:1433 SYN ******S* Feb 16 01:50:51 61.129.47.154:3123 -> xxx.yyy.1.6:1433 SYN ******S* Feb 16 01:50:51 61.129.47.154:3124 -> xxx.yyy.1.7:1433 SYN ******S* Feb 16 01:50:51 61.129.47.154:3125 -> xxx.yyy.1.8:1433 SYN ******S* Feb 16 01:50:51 61.129.47.154:3127 -> xxx.yyy.1.10:1433 SYN ******S* Feb 16 01:50:51 61.129.47.154:3128 -> xxx.yyy.1.11:1433 SYN ******S* Feb 16 01:50:54 61.129.47.154:3129 -> xxx.yyy.1.12:1433 SYN ******S* [...] Feb 16 02:02:32 61.129.47.154:1765 -> xxx.yyy.255.244:1433 SYN ******S* Feb 16 02:02:32 61.129.47.154:1764 -> xxx.yyy.255.243:1433 SYN ******S* Feb 16 02:02:32 61.129.47.154:1769 -> xxx.yyy.255.248:1433 SYN ******S* Feb 16 02:02:32 61.129.47.154:1767 -> xxx.yyy.255.246:1433 SYN ******S* Feb 16 02:02:32 61.129.47.154:1770 -> xxx.yyy.255.249:1433 SYN ******S* Feb 16 02:02:32 61.129.47.154:1768 -> xxx.yyy.255.247:1433 SYN ******S* Feb 16 02:02:32 61.129.47.154:1775 -> xxx.yyy.255.254:1433 SYN ******S* Feb 16 02:02:32 61.129.47.154:1773 -> xxx.yyy.255.252:1433 SYN ******S* Feb 16 02:02:32 61.129.47.154:1774 -> xxx.yyy.255.253:1433 SYN ******S* 49855 Feb 16 08:27:14 60.2.105.19:4053 -> xxx.yyy.128.0:1433 SYN ******S* Feb 16 08:27:17 60.2.105.19:4059 -> xxx.yyy.128.3:1433 SYN ******S* Feb 16 08:27:15 60.2.105.19:4065 -> xxx.yyy.128.7:1433 SYN ******S* Feb 16 08:27:18 60.2.105.19:4071 -> xxx.yyy.128.11:1433 SYN ******S* Feb 16 08:27:18 60.2.105.19:4072 -> xxx.yyy.128.12:1433 SYN ******S* Feb 16 08:27:18 60.2.105.19:4073 -> xxx.yyy.128.13:1433 SYN ******S* Feb 16 08:27:15 60.2.105.19:4076 -> xxx.yyy.128.16:1433 SYN ******S* Feb 16 08:27:15 60.2.105.19:4077 -> xxx.yyy.128.17:1433 SYN ******S* [...] Feb 16 10:22:04 60.2.105.19:4034 -> xxx.yyy.255.229:1433 SYN ******S* Feb 16 10:22:04 60.2.105.19:4029 -> xxx.yyy.255.227:1433 SYN ******S* Feb 16 10:22:04 60.2.105.19:4070 -> xxx.yyy.255.241:1433 SYN ******S* Feb 16 10:22:04 60.2.105.19:4083 -> xxx.yyy.255.247:1433 SYN ******S* Feb 16 10:22:04 60.2.105.19:4081 -> xxx.yyy.255.246:1433 SYN ******S* Feb 16 10:22:04 60.2.105.19:4072 -> xxx.yyy.255.242:1433 SYN ******S* Feb 16 10:22:04 60.2.105.19:4075 -> xxx.yyy.255.243:1433 SYN ******S* Feb 16 10:22:04 60.2.105.19:4091 -> xxx.yyy.255.251:1433 SYN ******S* Feb 16 10:22:04 60.2.105.19:4087 -> xxx.yyy.255.249:1433 SYN ******S* 46682 Feb 16 17:08:06 69.227.37.201:3130 -> xxx.yyy.1.1:41523 SYN ******S* Feb 16 17:08:06 69.227.37.201:3132 -> xxx.yyy.1.3:41523 SYN ******S* Feb 16 17:08:05 69.227.37.201:3135 -> xxx.yyy.1.6:41523 SYN ******S* Feb 16 17:08:06 69.227.37.201:3137 -> xxx.yyy.1.8:41523 SYN ******S* Feb 16 17:08:05 69.227.37.201:3139 -> xxx.yyy.1.10:41523 SYN ******S* Feb 16 17:08:06 69.227.37.201:3140 -> xxx.yyy.1.11:41523 SYN ******S* Feb 16 17:08:08 69.227.37.201:3141 -> xxx.yyy.1.12:41523 SYN ******S* Feb 16 17:08:08 69.227.37.201:3142 -> xxx.yyy.1.13:41523 SYN ******S* [...] Feb 16 17:19:47 69.227.37.201:4077 -> xxx.yyy.255.237:41523 SYN ******S* Feb 16 17:19:47 69.227.37.201:4085 -> xxx.yyy.255.245:41523 SYN ******S* Feb 16 17:19:47 69.227.37.201:4086 -> xxx.yyy.255.246:41523 SYN ******S* Feb 16 17:19:47 69.227.37.201:4087 -> xxx.yyy.255.247:41523 SYN ******S* Feb 16 17:19:47 69.227.37.201:4091 -> xxx.yyy.255.251:41523 SYN ******S* Feb 16 17:19:47 69.227.37.201:4088 -> xxx.yyy.255.248:41523 SYN ******S* Feb 16 17:19:47 69.227.37.201:4090 -> xxx.yyy.255.250:41523 SYN ******S* Feb 16 17:19:47 69.227.37.201:4084 -> xxx.yyy.255.244:41523 SYN ******S* 44444 Feb 16 09:57:03 163.17.74.215:2623 -> xxx.yyy.1.1:3306 SYN ******S* Feb 16 09:57:03 163.17.74.215:2624 -> xxx.yyy.1.2:3306 SYN ******S* Feb 16 09:57:00 163.17.74.215:2629 -> xxx.yyy.1.7:3306 SYN ******S* Feb 16 09:57:03 163.17.74.215:2630 -> xxx.yyy.1.8:3306 SYN ******S* Feb 16 09:57:00 163.17.74.215:2632 -> xxx.yyy.1.10:3306 SYN ******S* Feb 16 09:57:03 163.17.74.215:2633 -> xxx.yyy.1.11:3306 SYN ******S* Feb 16 09:57:00 163.17.74.215:2634 -> xxx.yyy.1.12:3306 SYN ******S* Feb 16 09:57:00 163.17.74.215:2635 -> xxx.yyy.1.13:3306 SYN ******S* [...] Feb 16 10:08:48 163.17.74.215:1287 -> xxx.yyy.255.226:3306 SYN ******S* Feb 16 10:08:48 163.17.74.215:1302 -> xxx.yyy.255.241:3306 SYN ******S* Feb 16 10:08:48 163.17.74.215:1308 -> xxx.yyy.255.247:3306 SYN ******S* Feb 16 10:08:48 163.17.74.215:1307 -> xxx.yyy.255.246:3306 SYN ******S* Feb 16 10:08:48 163.17.74.215:1305 -> xxx.yyy.255.244:3306 SYN ******S* Feb 16 10:08:48 163.17.74.215:1312 -> xxx.yyy.255.251:3306 SYN ******S* Feb 16 10:08:48 163.17.74.215:1306 -> xxx.yyy.255.245:3306 SYN ******S* Feb 16 10:08:48 163.17.74.215:1311 -> xxx.yyy.255.250:3306 SYN ******S* Feb 16 10:08:48 163.17.74.215:1315 -> xxx.yyy.255.254:3306 SYN ******S* 42249 Feb 16 16:56:52 200.52.33.65:3014 -> xxx.yyy.1.1:1433 SYN ******S* Feb 16 16:56:52 200.52.33.65:3015 -> xxx.yyy.1.2:1433 SYN ******S* Feb 16 16:56:52 200.52.33.65:3018 -> xxx.yyy.1.5:1433 SYN ******S* Feb 16 16:56:52 200.52.33.65:3019 -> xxx.yyy.1.6:1433 SYN ******S* Feb 16 16:56:52 200.52.33.65:3021 -> xxx.yyy.1.8:1433 SYN ******S* Feb 16 16:56:55 200.52.33.65:3023 -> xxx.yyy.1.10:1433 SYN ******S* Feb 16 16:56:52 200.52.33.65:3024 -> xxx.yyy.1.11:1433 SYN ******S* Feb 16 16:56:52 200.52.33.65:3025 -> xxx.yyy.1.12:1433 SYN ******S* [...] Feb 16 17:08:38 200.52.33.65:1720 -> xxx.yyy.255.212:1433 SYN ******S* Feb 16 17:08:38 200.52.33.65:1743 -> xxx.yyy.255.235:1433 SYN ******S* Feb 16 17:08:38 200.52.33.65:1738 -> xxx.yyy.255.230:1433 SYN ******S* Feb 16 17:08:38 200.52.33.65:1748 -> xxx.yyy.255.240:1433 SYN ******S* Feb 16 17:08:38 200.52.33.65:1751 -> xxx.yyy.255.243:1433 SYN ******S* Feb 16 17:08:38 200.52.33.65:1750 -> xxx.yyy.255.242:1433 SYN ******S* Feb 16 17:08:38 200.52.33.65:1747 -> xxx.yyy.255.239:1433 SYN ******S* Feb 16 17:08:38 200.52.33.65:1749 -> xxx.yyy.255.241:1433 SYN ******S* 41525 Feb 16 22:50:24 192.116.217.99:3557 -> xxx.yyy.1.3:4512 SYN ******S* Feb 16 22:50:24 192.116.217.99:3559 -> xxx.yyy.1.1:4512 SYN ******S* Feb 16 22:50:24 192.116.217.99:3564 -> xxx.yyy.1.6:4512 SYN ******S* Feb 16 22:50:27 192.116.217.99:3572 -> xxx.yyy.1.10:4512 SYN ******S* Feb 16 22:50:24 192.116.217.99:3576 -> xxx.yyy.1.12:4512 SYN ******S* Feb 16 22:50:24 192.116.217.99:3578 -> xxx.yyy.1.13:4512 SYN ******S* Feb 16 22:50:27 192.116.217.99:3582 -> xxx.yyy.1.15:4512 SYN ******S* Feb 16 22:50:25 192.116.217.99:3584 -> xxx.yyy.1.16:4512 SYN ******S* [...] Feb 16 23:01:20 192.116.217.99:3161 -> xxx.yyy.255.236:4512 SYN ******S* Feb 16 23:01:20 192.116.217.99:3167 -> xxx.yyy.255.239:4512 SYN ******S* Feb 16 23:01:20 192.116.217.99:3169 -> xxx.yyy.255.240:4512 SYN ******S* Feb 16 23:01:20 192.116.217.99:3153 -> xxx.yyy.255.232:4512 SYN ******S* Feb 16 23:01:20 192.116.217.99:3165 -> xxx.yyy.255.238:4512 SYN ******S* Feb 16 23:01:20 192.116.217.99:3177 -> xxx.yyy.255.244:4512 SYN ******S* Feb 16 23:01:20 192.116.217.99:3183 -> xxx.yyy.255.247:4512 SYN ******S* Feb 16 23:01:21 192.116.217.99:3193 -> xxx.yyy.255.252:4512 SYN ******S* 34803 Feb 16 04:45:34 211.175.183.250:1224 -> xxx.yyy.1.5:3306 SYN ******S* Feb 16 04:45:34 211.175.183.250:1221 -> xxx.yyy.1.2:3306 SYN ******S* Feb 16 04:45:34 211.175.183.250:1222 -> xxx.yyy.1.3:3306 SYN ******S* Feb 16 04:45:34 211.175.183.250:1223 -> xxx.yyy.1.4:3306 SYN ******S* Feb 16 04:45:34 211.175.183.250:1226 -> xxx.yyy.1.7:3306 SYN ******S* Feb 16 04:45:34 211.175.183.250:1225 -> xxx.yyy.1.6:3306 SYN ******S* Feb 16 04:45:34 211.175.183.250:1227 -> xxx.yyy.1.8:3306 SYN ******S* Feb 16 04:45:34 211.175.183.250:1189 -> xxx.yyy.1.20:3306 SYN ******S* [...] Feb 16 04:46:01 211.175.183.250:1228 -> xxx.yyy.253.49:3306 SYN ******S* Feb 16 04:46:02 211.175.183.250:1196 -> xxx.yyy.253.67:3306 SYN ******S* Feb 16 04:46:02 211.175.183.250:1185 -> xxx.yyy.253.56:3306 SYN ******S* Feb 16 04:46:02 211.175.183.250:1202 -> xxx.yyy.253.73:3306 SYN ******S* Feb 16 04:46:02 211.175.183.250:1215 -> xxx.yyy.253.86:3306 SYN ******S* Feb 16 04:46:02 211.175.183.250:1184 -> xxx.yyy.253.105:3306 SYN ******S* Feb 16 04:46:02 211.175.183.250:1186 -> xxx.yyy.253.107:3306 SYN ******S* Feb 16 04:46:02 211.175.183.250:1188 -> xxx.yyy.253.109:3306 SYN ******S* Feb 16 04:46:02 211.175.183.250:1216 -> xxx.yyy.253.87:3306 SYN ******S* 25794 Feb 16 06:47:36 194.63.230.177:43501 -> xxx.yyy.1.25:42 SYN ******S* Feb 16 06:47:33 194.63.230.177:43505 -> xxx.yyy.1.29:42 SYN ******S* Feb 16 06:47:33 194.63.230.177:43509 -> xxx.yyy.1.33:42 SYN ******S* Feb 16 06:47:33 194.63.230.177:43512 -> xxx.yyy.1.36:42 SYN ******S* Feb 16 06:47:33 194.63.230.177:43516 -> xxx.yyy.1.40:42 SYN ******S* Feb 16 06:47:33 194.63.230.177:43520 -> xxx.yyy.1.44:42 SYN ******S* Feb 16 06:47:33 194.63.230.177:43524 -> xxx.yyy.1.48:42 SYN ******S* Feb 16 06:47:33 194.63.230.177:43529 -> xxx.yyy.1.53:42 SYN ******S* [...] Feb 16 07:03:47 194.63.230.177:44177 -> xxx.yyy.255.122:42 SYN ******S* Feb 16 07:03:47 194.63.230.177:44178 -> xxx.yyy.255.123:42 SYN ******S* Feb 16 07:03:47 194.63.230.177:44285 -> xxx.yyy.255.229:42 SYN ******S* Feb 16 07:03:47 194.63.230.177:44259 -> xxx.yyy.255.204:42 SYN ******S* Feb 16 07:03:47 194.63.230.177:44286 -> xxx.yyy.255.230:42 SYN ******S* Feb 16 07:03:47 194.63.230.177:44260 -> xxx.yyy.255.205:42 SYN ******S* Feb 16 07:03:47 194.63.230.177:44287 -> xxx.yyy.255.231:42 SYN ******S* Feb 16 07:03:47 194.63.230.177:44301 -> xxx.yyy.255.245:42 SYN ******S* Feb 16 07:03:47 194.63.230.177:44310 -> xxx.yyy.255.254:42 SYN ******S* 25382 Feb 16 05:32:14 130.70.154.191:3001 -> xxx.yyy.1.105:53022 SYN ******S* Feb 16 05:32:14 130.70.154.191:3001 -> xxx.yyy.1.236:53022 SYN ******S* Feb 16 05:32:14 130.70.154.191:3001 -> xxx.yyy.10.28:53022 SYN ******S* Feb 16 05:32:14 130.70.154.191:3001 -> xxx.yyy.10.159:53022 SYN ******S* Feb 16 05:32:14 130.70.154.191:3001 -> xxx.yyy.11.34:53022 SYN ******S* Feb 16 05:32:14 130.70.154.191:3001 -> xxx.yyy.11.165:53022 SYN ******S* Feb 16 05:32:14 130.70.154.191:3001 -> xxx.yyy.12.40:53022 SYN ******S* Feb 16 05:32:14 130.70.154.191:3001 -> xxx.yyy.13.46:53022 SYN ******S* [...] Feb 16 06:01:04 130.70.154.191:3001 -> xxx.yyy.137.181:53022 SYN ******S* Feb 16 06:01:04 130.70.154.191:3001 -> xxx.yyy.138.56:53022 SYN ******S* Feb 16 06:01:04 130.70.154.191:3001 -> xxx.yyy.139.62:53022 SYN ******S* Feb 16 06:01:04 130.70.154.191:3001 -> xxx.yyy.138.187:53022 SYN ******S* Feb 16 06:01:04 130.70.154.191:3001 -> xxx.yyy.140.68:53022 SYN ******S* Feb 16 06:01:04 130.70.154.191:3001 -> xxx.yyy.139.193:53022 SYN ******S* Feb 16 06:01:04 130.70.154.191:3001 -> xxx.yyy.140.199:53022 SYN ******S* Feb 16 06:01:04 130.70.154.191:3001 -> xxx.yyy.141.74:53022 SYN ******S* Feb 16 06:01:04 130.70.154.191:3001 -> xxx.yyy.143.217:53022 SYN ******S* 20590 Feb 16 23:01:31 207.172.148.126:2758 -> xxx.yyy.1.1:4899 SYN ******S* Feb 16 23:01:32 207.172.148.126:2776 -> xxx.yyy.1.19:4899 SYN ******S* Feb 16 23:01:32 207.172.148.126:2777 -> xxx.yyy.1.20:4899 SYN ******S* Feb 16 23:01:32 207.172.148.126:2778 -> xxx.yyy.1.21:4899 SYN ******S* Feb 16 23:01:31 207.172.148.126:2780 -> xxx.yyy.1.23:4899 SYN ******S* Feb 16 23:01:31 207.172.148.126:2781 -> xxx.yyy.1.24:4899 SYN ******S* Feb 16 23:01:32 207.172.148.126:2783 -> xxx.yyy.1.26:4899 SYN ******S* Feb 16 23:01:31 207.172.148.126:2782 -> xxx.yyy.1.25:4899 SYN ******S* [...] Feb 16 23:07:57 207.172.148.126:3514 -> xxx.yyy.255.232:4899 SYN ******S* Feb 16 23:07:57 207.172.148.126:3519 -> xxx.yyy.255.237:4899 SYN ******S* Feb 16 23:07:57 207.172.148.126:3520 -> xxx.yyy.255.238:4899 SYN ******S* Feb 16 23:07:57 207.172.148.126:3527 -> xxx.yyy.255.245:4899 SYN ******S* Feb 16 23:07:57 207.172.148.126:3531 -> xxx.yyy.255.249:4899 SYN ******S* Feb 16 23:07:57 207.172.148.126:3532 -> xxx.yyy.255.250:4899 SYN ******S* Feb 16 23:07:57 207.172.148.126:3534 -> xxx.yyy.255.252:4899 SYN ******S* Feb 16 23:07:57 207.172.148.126:3535 -> xxx.yyy.255.253:4899 SYN ******S* Feb 16 23:07:57 207.172.148.126:3536 -> xxx.yyy.255.254:4899 SYN ******S* 18430 [...] 18254 Feb 16 19:58:27 61.236.123.98:12382 -> xxx.yyy.11.158:8000 SYN ******S* Feb 16 19:58:27 61.236.123.98:13394 -> xxx.yyy.11.158:10080 SYN ******S* Feb 16 19:58:27 61.236.123.98:13302 -> xxx.yyy.11.158:81 SYN ******S* Feb 16 19:58:30 61.236.123.98:13400 -> xxx.yyy.11.158:1080 SYN ******S* Feb 16 19:58:30 61.236.123.98:13335 -> xxx.yyy.11.158:21 SYN ******S* Feb 16 19:58:30 61.236.123.98:12327 -> xxx.yyy.11.158:80 SYN ******S* Feb 16 19:58:30 61.236.123.98:12857 -> xxx.yyy.11.158:3128 SYN ******S* Feb 16 19:58:30 61.236.123.98:12364 -> xxx.yyy.11.158:23 SYN ******S* [...] Feb 16 22:09:48 61.236.123.98:12906 -> xxx.yyy.33.253:1080 SYN ******S* Feb 16 22:09:49 61.236.123.98:13403 -> xxx.yyy.33.251:1080 SYN ******S* Feb 16 22:09:50 61.236.123.98:13479 -> xxx.yyy.33.251:23 SYN ******S* Feb 16 22:09:50 61.236.123.98:13430 -> xxx.yyy.33.252:23 SYN ******S* Feb 16 22:09:51 61.236.123.98:12906 -> xxx.yyy.33.253:1080 SYN ******S* Feb 16 22:09:51 61.236.123.98:13183 -> xxx.yyy.33.253:23 SYN ******S* Feb 16 22:09:53 61.236.123.98:13303 -> xxx.yyy.33.254:1080 SYN ******S* Feb 16 22:09:53 61.236.123.98:12903 -> xxx.yyy.33.254:23 SYN ******S* Feb 16 22:09:54 61.236.123.98:12877 -> xxx.yyy.33.255:23 SYN ******S* 18083 Feb 16 23:45:49 210.99.2.5:2870 -> xxx.yyy.1.12:3306 SYN ******S* Feb 16 23:45:49 210.99.2.5:2872 -> xxx.yyy.1.14:3306 SYN ******S* Feb 16 23:45:49 210.99.2.5:2864 -> xxx.yyy.1.6:3306 SYN ******S* Feb 16 23:45:49 210.99.2.5:2860 -> xxx.yyy.1.2:3306 SYN ******S* Feb 16 23:45:49 210.99.2.5:2874 -> xxx.yyy.1.16:3306 SYN ******S* Feb 16 23:45:52 210.99.2.5:2867 -> xxx.yyy.1.9:3306 SYN ******S* Feb 16 23:45:49 210.99.2.5:2859 -> xxx.yyy.1.1:3306 SYN ******S* Feb 16 23:45:49 210.99.2.5:2875 -> xxx.yyy.1.17:3306 SYN ******S* [...] Feb 16 23:59:57 210.99.2.5:3102 -> xxx.yyy.188.81:3306 SYN ******S* Feb 16 23:59:57 210.99.2.5:3098 -> xxx.yyy.188.77:3306 SYN ******S* Feb 16 23:59:57 210.99.2.5:3080 -> xxx.yyy.188.59:3306 SYN ******S* Feb 16 23:59:57 210.99.2.5:3103 -> xxx.yyy.188.82:3306 SYN ******S* Feb 16 23:59:57 210.99.2.5:3086 -> xxx.yyy.188.65:3306 SYN ******S* Feb 16 23:59:57 210.99.2.5:3084 -> xxx.yyy.188.63:3306 SYN ******S* Feb 16 23:59:57 210.99.2.5:3105 -> xxx.yyy.188.84:3306 SYN ******S* Feb 16 23:59:57 210.99.2.5:3090 -> xxx.yyy.188.69:3306 SYN ******S* Feb 16 23:59:57 210.99.2.5:3097 -> xxx.yyy.188.76:3306 SYN ******S* 15449 [...] 11650 [...] 8846 Feb 16 23:56:27 221.224.221.162:1712 -> xxx.yyy.153.136:5554 SYN ******S* Feb 16 23:56:28 221.224.221.162:2575 -> xxx.yyy.153.136:1023 SYN ******S* Feb 16 23:56:27 221.224.221.162:1713 -> xxx.yyy.153.138:5554 SYN ******S* Feb 16 23:56:30 221.224.221.162:4488 -> xxx.yyy.153.138:9898 SYN ******S* Feb 16 23:56:27 221.224.221.162:1714 -> xxx.yyy.153.137:5554 SYN ******S* Feb 16 23:56:27 221.224.221.162:1715 -> xxx.yyy.153.139:5554 SYN ******S* Feb 16 23:56:27 221.224.221.162:1716 -> xxx.yyy.153.140:5554 SYN ******S* Feb 16 23:56:28 221.224.221.162:2582 -> xxx.yyy.153.140:1023 SYN ******S* [...] Feb 16 23:57:11 221.224.221.162:3686 -> xxx.yyy.155.61:9898 SYN ******S* Feb 16 23:57:11 221.224.221.162:3687 -> xxx.yyy.155.62:9898 SYN ******S* Feb 16 23:57:11 221.224.221.162:3688 -> xxx.yyy.155.63:9898 SYN ******S* Feb 16 23:57:11 221.224.221.162:3689 -> xxx.yyy.155.64:9898 SYN ******S* Feb 16 23:57:11 221.224.221.162:3691 -> xxx.yyy.155.65:9898 SYN ******S* Feb 16 23:57:11 221.224.221.162:3693 -> xxx.yyy.155.66:9898 SYN ******S* Feb 16 23:57:11 221.224.221.162:3698 -> xxx.yyy.155.69:9898 SYN ******S* Feb 16 23:57:11 221.224.221.162:3699 -> xxx.yyy.155.70:9898 SYN ******S* Feb 16 23:57:11 221.224.221.162:3700 -> xxx.yyy.155.71:9898 SYN ******S* 7589 Feb 16 21:46:53 217.167.199.203:2468 -> xxx.yyy.11.250:554 SYN ******S* Feb 16 21:46:50 217.167.199.203:2478 -> xxx.yyy.12.3:554 SYN ******S* Feb 16 21:46:50 217.167.199.203:2482 -> xxx.yyy.12.7:554 SYN ******S* Feb 16 21:46:53 217.167.199.203:2483 -> xxx.yyy.12.8:554 SYN ******S* Feb 16 21:46:50 217.167.199.203:2484 -> xxx.yyy.12.9:554 SYN ******S* Feb 16 21:46:53 217.167.199.203:2491 -> xxx.yyy.12.15:554 SYN ******S* Feb 16 21:46:50 217.167.199.203:2492 -> xxx.yyy.12.16:554 SYN ******S* Feb 16 21:46:50 217.167.199.203:2493 -> xxx.yyy.12.17:554 SYN ******S* [...] Feb 16 22:05:44 217.167.199.203:1763 -> xxx.yyy.255.172:554 SYN ******S* Feb 16 22:05:44 217.167.199.203:1775 -> xxx.yyy.255.181:554 SYN ******S* Feb 16 22:05:44 217.167.199.203:1753 -> xxx.yyy.255.163:554 SYN ******S* Feb 16 22:05:44 217.167.199.203:1868 -> xxx.yyy.255.253:554 SYN ******S* Feb 16 22:05:44 217.167.199.203:1864 -> xxx.yyy.255.250:554 SYN ******S* Feb 16 22:05:44 217.167.199.203:1852 -> xxx.yyy.255.241:554 SYN ******S* Feb 16 22:05:44 217.167.199.203:1861 -> xxx.yyy.255.247:554 SYN ******S* Feb 16 22:05:45 217.167.199.203:1858 -> xxx.yyy.255.245:554 SYN ******S* 7553 Feb 16 23:55:39 221.200.166.209:1554 -> xxx.yyy.72.124:5554 SYN ******S* Feb 16 23:55:39 221.200.166.209:1561 -> xxx.yyy.72.126:5554 SYN ******S* Feb 16 23:55:40 221.200.166.209:2072 -> xxx.yyy.72.126:1023 SYN ******S* Feb 16 23:55:42 221.200.166.209:3049 -> xxx.yyy.72.126:9898 SYN ******S* Feb 16 23:55:39 221.200.166.209:1564 -> xxx.yyy.72.127:5554 SYN ******S* Feb 16 23:55:42 221.200.166.209:3051 -> xxx.yyy.72.127:9898 SYN ******S* Feb 16 23:55:39 221.200.166.209:1579 -> xxx.yyy.72.130:5554 SYN ******S* Feb 16 23:55:40 221.200.166.209:2089 -> xxx.yyy.72.130:1023 SYN ******S* [...] Feb 16 23:56:25 221.200.166.209:2757 -> xxx.yyy.92.208:9898 SYN ******S* Feb 16 23:56:25 221.200.166.209:2819 -> xxx.yyy.92.230:9898 SYN ******S* Feb 16 23:56:25 221.200.166.209:2775 -> xxx.yyy.92.213:9898 SYN ******S* Feb 16 23:56:25 221.200.166.209:2837 -> xxx.yyy.92.234:9898 SYN ******S* Feb 16 23:56:25 221.200.166.209:2786 -> xxx.yyy.92.215:9898 SYN ******S* Feb 16 23:56:25 221.200.166.209:2799 -> xxx.yyy.92.220:9898 SYN ******S* Feb 16 23:56:25 221.200.166.209:2828 -> xxx.yyy.92.232:9898 SYN ******S* Feb 16 23:56:25 221.200.166.209:2852 -> xxx.yyy.92.241:9898 SYN ******S* 7551 Feb 16 23:56:55 61.149.135.72:2357 -> xxx.yyy.236.110:5554 SYN ******S* Feb 16 23:56:58 61.149.135.72:4209 -> xxx.yyy.236.110:9898 SYN ******S* Feb 16 23:56:55 61.149.135.72:2359 -> xxx.yyy.236.108:5554 SYN ******S* Feb 16 23:56:58 61.149.135.72:4286 -> xxx.yyy.236.108:9898 SYN ******S* Feb 16 23:56:55 61.149.135.72:2355 -> xxx.yyy.236.112:5554 SYN ******S* Feb 16 23:56:58 61.149.135.72:4206 -> xxx.yyy.236.112:9898 SYN ******S* Feb 16 23:56:55 61.149.135.72:2364 -> xxx.yyy.236.104:5554 SYN ******S* Feb 16 23:56:55 61.149.135.72:2362 -> xxx.yyy.236.106:5554 SYN ******S* [...] Feb 16 23:57:41 61.149.135.72:3972 -> xxx.yyy.255.246:9898 SYN ******S* Feb 16 23:57:41 61.149.135.72:3975 -> xxx.yyy.255.248:9898 SYN ******S* Feb 16 23:57:41 61.149.135.72:3977 -> xxx.yyy.255.250:9898 SYN ******S* Feb 16 23:57:41 61.149.135.72:3869 -> xxx.yyy.255.240:9898 SYN ******S* Feb 16 23:57:41 61.149.135.72:3971 -> xxx.yyy.255.235:9898 SYN ******S* Feb 16 23:57:41 61.149.135.72:3974 -> xxx.yyy.255.247:9898 SYN ******S* Feb 16 23:57:41 61.149.135.72:3981 -> xxx.yyy.255.253:9898 SYN ******S* Feb 16 23:57:41 61.149.135.72:3976 -> xxx.yyy.255.249:9898 SYN ******S* Feb 16 23:57:43 61.149.135.72:1582 -> xxx.yyy.236.114:9898 SYN ******S* 7389 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions