[LOGS] Summary of large-scale portscanning detects
[email protected] Fri, 18 Feb 2005 07:44:39 -0600 (CST)
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Feb 17 00:52:54 61.236.123.98:13020 -> xxx.yyy.64.0:8080 SYN ******S* Feb 17 00:52:55 61.236.123.98:12572 -> xxx.yyy.64.0:80 SYN ******S* Feb 17 00:52:55 61.236.123.98:12437 -> xxx.yyy.64.0:8000 SYN ******S* Feb 17 00:52:52 61.236.123.98:13348 -> xxx.yyy.64.0:8888 SYN ******S* Feb 17 00:52:52 61.236.123.98:13118 -> xxx.yyy.64.0:10080 SYN ******S* Feb 17 00:52:52 61.236.123.98:13051 -> xxx.yyy.64.0:81 SYN ******S* Feb 17 00:52:52 61.236.123.98:13485 -> xxx.yyy.64.0:3128 SYN ******S* Feb 17 00:52:52 61.236.123.98:12883 -> xxx.yyy.64.0:23 SYN ******S* [...] Feb 17 05:15:09 61.236.123.98:12984 -> xxx.yyy.111.253:3128 SYN ******S* Feb 17 05:15:09 61.236.123.98:12782 -> xxx.yyy.111.253:1080 SYN ******S* Feb 17 05:15:10 61.236.123.98:12892 -> xxx.yyy.111.248:23 SYN ******S* Feb 17 05:15:12 61.236.123.98:12463 -> xxx.yyy.111.250:23 SYN ******S* Feb 17 05:15:15 61.236.123.98:13228 -> xxx.yyy.111.252:23 SYN ******S* Feb 17 05:15:17 61.236.123.98:13330 -> xxx.yyy.111.255:1080 SYN ******S* Feb 17 05:15:19 61.236.123.98:12765 -> xxx.yyy.111.255:23 SYN ******S* Feb 17 05:15:17 61.236.123.98:12494 -> xxx.yyy.111.254:1080 SYN ******S* Feb 17 05:15:18 61.236.123.98:12585 -> xxx.yyy.111.254:23 SYN ******S* 97535 Feb 17 17:17:05 64.175.240.110:2763 -> xxx.yyy.1.2:1433 SYN ******S* Feb 17 17:17:05 64.175.240.110:2764 -> xxx.yyy.1.3:1433 SYN ******S* Feb 17 17:17:06 64.175.240.110:2771 -> xxx.yyy.1.7:1433 SYN ******S* Feb 17 17:17:06 64.175.240.110:2773 -> xxx.yyy.1.8:1433 SYN ******S* Feb 17 17:17:06 64.175.240.110:2776 -> xxx.yyy.1.11:1433 SYN ******S* Feb 17 17:17:06 64.175.240.110:2778 -> xxx.yyy.1.12:1433 SYN ******S* Feb 17 17:17:06 64.175.240.110:2786 -> xxx.yyy.1.15:1433 SYN ******S* Feb 17 17:17:06 64.175.240.110:2789 -> xxx.yyy.1.17:1433 SYN ******S* [...] Feb 17 21:06:15 64.175.240.110:1712 -> xxx.yyy.255.242:1433 SYN ******S* Feb 17 21:06:16 64.175.240.110:1714 -> xxx.yyy.255.243:1433 SYN ******S* Feb 17 21:06:16 64.175.240.110:1716 -> xxx.yyy.255.244:1433 SYN ******S* Feb 17 21:06:16 64.175.240.110:1718 -> xxx.yyy.255.245:1433 SYN ******S* Feb 17 21:06:16 64.175.240.110:1719 -> xxx.yyy.255.246:1433 SYN ******S* Feb 17 21:06:16 64.175.240.110:1726 -> xxx.yyy.255.249:1433 SYN ******S* Feb 17 21:06:17 64.175.240.110:1734 -> xxx.yyy.255.251:1433 SYN ******S* Feb 17 21:06:17 64.175.240.110:1741 -> xxx.yyy.255.254:1433 SYN ******S* 69413 Feb 17 01:06:28 213.115.210.13:2734 -> xxx.yyy.1.2:42 SYN ******S* Feb 17 01:06:28 213.115.210.13:2735 -> xxx.yyy.1.3:42 SYN ******S* Feb 17 01:06:28 213.115.210.13:2738 -> xxx.yyy.1.6:42 SYN ******S* Feb 17 01:06:28 213.115.210.13:2746 -> xxx.yyy.1.14:42 SYN ******S* Feb 17 01:06:28 213.115.210.13:2747 -> xxx.yyy.1.15:42 SYN ******S* Feb 17 01:06:28 213.115.210.13:2748 -> xxx.yyy.1.16:42 SYN ******S* Feb 17 01:06:31 213.115.210.13:2751 -> xxx.yyy.1.19:42 SYN ******S* Feb 17 01:06:31 213.115.210.13:2752 -> xxx.yyy.1.20:42 SYN ******S* [...] Feb 17 01:18:11 213.115.210.13:1550 -> xxx.yyy.255.240:42 SYN ******S* Feb 17 01:18:11 213.115.210.13:1563 -> xxx.yyy.255.253:42 SYN ******S* Feb 17 01:18:11 213.115.210.13:1560 -> xxx.yyy.255.250:42 SYN ******S* Feb 17 01:18:11 213.115.210.13:1558 -> xxx.yyy.255.248:42 SYN ******S* Feb 17 01:18:11 213.115.210.13:1561 -> xxx.yyy.255.251:42 SYN ******S* Feb 17 01:18:11 213.115.210.13:1559 -> xxx.yyy.255.249:42 SYN ******S* Feb 17 01:18:11 213.115.210.13:1564 -> xxx.yyy.255.254:42 SYN ******S* Feb 17 01:18:11 213.115.210.13:1562 -> xxx.yyy.255.252:42 SYN ******S* 57378 Feb 17 07:04:51 207.179.138.6:1321 -> xxx.yyy.1.1:41523 SYN ******S* Feb 17 07:04:50 207.179.138.6:1323 -> xxx.yyy.1.3:41523 SYN ******S* Feb 17 07:04:51 207.179.138.6:1322 -> xxx.yyy.1.2:41523 SYN ******S* Feb 17 07:04:50 207.179.138.6:1325 -> xxx.yyy.1.5:41523 SYN ******S* Feb 17 07:04:50 207.179.138.6:1324 -> xxx.yyy.1.4:41523 SYN ******S* Feb 17 07:04:50 207.179.138.6:1326 -> xxx.yyy.1.6:41523 SYN ******S* Feb 17 07:04:53 207.179.138.6:1327 -> xxx.yyy.1.7:41523 SYN ******S* Feb 17 07:04:53 207.179.138.6:1330 -> xxx.yyy.1.10:41523 SYN ******S* [...] Feb 17 07:09:17 207.179.138.6:2219 -> xxx.yyy.255.192:41523 SYN ******S* Feb 17 07:09:17 207.179.138.6:2258 -> xxx.yyy.255.231:41523 SYN ******S* Feb 17 07:09:17 207.179.138.6:2239 -> xxx.yyy.255.212:41523 SYN ******S* Feb 17 07:09:17 207.179.138.6:2245 -> xxx.yyy.255.218:41523 SYN ******S* Feb 17 07:09:17 207.179.138.6:2246 -> xxx.yyy.255.219:41523 SYN ******S* Feb 17 07:09:17 207.179.138.6:2259 -> xxx.yyy.255.232:41523 SYN ******S* Feb 17 07:09:17 207.179.138.6:2217 -> xxx.yyy.255.190:41523 SYN ******S* Feb 17 07:09:17 207.179.138.6:2256 -> xxx.yyy.255.229:41523 SYN ******S* 51405 Feb 17 19:58:53 222.98.45.9:3650 -> xxx.yyy.1.5:1433 SYN ******S* Feb 17 19:58:50 222.98.45.9:3648 -> xxx.yyy.1.3:1433 SYN ******S* Feb 17 19:58:50 222.98.45.9:3653 -> xxx.yyy.1.8:1433 SYN ******S* Feb 17 19:58:53 222.98.45.9:3655 -> xxx.yyy.1.10:1433 SYN ******S* Feb 17 19:58:53 222.98.45.9:3654 -> xxx.yyy.1.9:1433 SYN ******S* Feb 17 19:58:50 222.98.45.9:3656 -> xxx.yyy.1.11:1433 SYN ******S* Feb 17 19:58:53 222.98.45.9:3659 -> xxx.yyy.1.14:1433 SYN ******S* Feb 17 19:58:53 222.98.45.9:3661 -> xxx.yyy.1.16:1433 SYN ******S* [...] Feb 17 20:10:36 222.98.45.9:3093 -> xxx.yyy.255.247:1433 SYN ******S* Feb 17 20:10:36 222.98.45.9:3090 -> xxx.yyy.255.244:1433 SYN ******S* Feb 17 20:10:36 222.98.45.9:3086 -> xxx.yyy.255.240:1433 SYN ******S* Feb 17 20:10:36 222.98.45.9:3092 -> xxx.yyy.255.246:1433 SYN ******S* Feb 17 20:10:36 222.98.45.9:3096 -> xxx.yyy.255.250:1433 SYN ******S* Feb 17 20:10:36 222.98.45.9:3098 -> xxx.yyy.255.252:1433 SYN ******S* Feb 17 20:10:36 222.98.45.9:3100 -> xxx.yyy.255.254:1433 SYN ******S* Feb 17 20:10:36 222.98.45.9:3097 -> xxx.yyy.255.251:1433 SYN ******S* Feb 17 20:10:36 222.98.45.9:3095 -> xxx.yyy.255.249:1433 SYN ******S* 45944 Feb 17 09:28:11 219.79.74.42:4770 -> xxx.yyy.1.0:1433 SYN ******S* Feb 17 09:28:11 219.79.74.42:4773 -> xxx.yyy.1.1:1433 SYN ******S* Feb 17 09:28:12 219.79.74.42:4775 -> xxx.yyy.1.2:1433 SYN ******S* Feb 17 09:28:09 219.79.74.42:4777 -> xxx.yyy.1.3:1433 SYN ******S* Feb 17 09:28:12 219.79.74.42:4778 -> xxx.yyy.1.4:1433 SYN ******S* Feb 17 09:28:09 219.79.74.42:4782 -> xxx.yyy.1.5:1433 SYN ******S* Feb 17 09:28:12 219.79.74.42:4783 -> xxx.yyy.1.6:1433 SYN ******S* Feb 17 09:28:12 219.79.74.42:4792 -> xxx.yyy.1.8:1433 SYN ******S* [...] Feb 17 12:18:59 219.79.74.42:4539 -> xxx.yyy.191.95:1433 SYN ******S* Feb 17 12:18:59 219.79.74.42:4540 -> xxx.yyy.191.96:1433 SYN ******S* Feb 17 12:18:59 219.79.74.42:4448 -> xxx.yyy.191.71:1433 SYN ******S* Feb 17 12:18:59 219.79.74.42:4544 -> xxx.yyy.191.97:1433 SYN ******S* Feb 17 12:18:59 219.79.74.42:4401 -> xxx.yyy.191.38:1433 SYN ******S* Feb 17 12:18:59 219.79.74.42:4564 -> xxx.yyy.191.98:1433 SYN ******S* Feb 17 12:18:59 219.79.74.42:4400 -> xxx.yyy.191.37:1433 SYN ******S* Feb 17 12:18:59 219.79.74.42:4399 -> xxx.yyy.191.36:1433 SYN ******S* Feb 17 12:18:59 219.79.74.42:4567 -> xxx.yyy.191.99:1433 SYN ******S* 41484 Feb 17 12:15:10 152.101.106.203:2194 -> xxx.yyy.1.4:3066 SYN ******S* Feb 17 12:15:10 152.101.106.203:2195 -> xxx.yyy.1.5:3066 SYN ******S* Feb 17 12:15:10 152.101.106.203:2196 -> xxx.yyy.1.6:3066 SYN ******S* Feb 17 12:15:11 152.101.106.203:2198 -> xxx.yyy.1.8:3066 SYN ******S* Feb 17 12:15:11 152.101.106.203:2199 -> xxx.yyy.1.9:3066 SYN ******S* Feb 17 12:15:13 152.101.106.203:2200 -> xxx.yyy.1.10:3066 SYN ******S* Feb 17 12:15:10 152.101.106.203:2202 -> xxx.yyy.1.12:3066 SYN ******S* Feb 17 12:15:13 152.101.106.203:2203 -> xxx.yyy.1.13:3066 SYN ******S* [...] Feb 17 12:26:06 152.101.106.203:1176 -> xxx.yyy.255.222:3066 SYN ******S* Feb 17 12:26:06 152.101.106.203:1183 -> xxx.yyy.255.229:3066 SYN ******S* Feb 17 12:26:06 152.101.106.203:1190 -> xxx.yyy.255.236:3066 SYN ******S* Feb 17 12:26:06 152.101.106.203:1188 -> xxx.yyy.255.234:3066 SYN ******S* Feb 17 12:26:06 152.101.106.203:1185 -> xxx.yyy.255.231:3066 SYN ******S* Feb 17 12:26:06 152.101.106.203:1193 -> xxx.yyy.255.239:3066 SYN ******S* Feb 17 12:26:06 152.101.106.203:1200 -> xxx.yyy.255.246:3066 SYN ******S* Feb 17 12:26:06 152.101.106.203:1203 -> xxx.yyy.255.249:3066 SYN ******S* Feb 17 12:26:06 152.101.106.203:1207 -> xxx.yyy.255.253:3066 SYN ******S* 39363 Feb 17 18:16:03 64.53.18.249:1669 -> xxx.yyy.1.1:3306 SYN ******S* Feb 17 18:16:06 64.53.18.249:1670 -> xxx.yyy.1.2:3306 SYN ******S* Feb 17 18:16:03 64.53.18.249:1672 -> xxx.yyy.1.4:3306 SYN ******S* Feb 17 18:16:03 64.53.18.249:1675 -> xxx.yyy.1.7:3306 SYN ******S* Feb 17 18:16:06 64.53.18.249:1676 -> xxx.yyy.1.8:3306 SYN ******S* Feb 17 18:16:03 64.53.18.249:1677 -> xxx.yyy.1.9:3306 SYN ******S* Feb 17 18:16:03 64.53.18.249:1679 -> xxx.yyy.1.11:3306 SYN ******S* Feb 17 18:16:03 64.53.18.249:1682 -> xxx.yyy.1.14:3306 SYN ******S* [...] Feb 17 18:27:23 64.53.18.249:4152 -> xxx.yyy.255.221:3306 SYN ******S* Feb 17 18:27:23 64.53.18.249:4157 -> xxx.yyy.255.226:3306 SYN ******S* Feb 17 18:27:23 64.53.18.249:4168 -> xxx.yyy.255.237:3306 SYN ******S* Feb 17 18:27:23 64.53.18.249:4179 -> xxx.yyy.255.248:3306 SYN ******S* Feb 17 18:27:23 64.53.18.249:4181 -> xxx.yyy.255.250:3306 SYN ******S* Feb 17 18:27:23 64.53.18.249:4182 -> xxx.yyy.255.251:3306 SYN ******S* Feb 17 18:27:23 64.53.18.249:4183 -> xxx.yyy.255.252:3306 SYN ******S* Feb 17 18:27:23 64.53.18.249:4184 -> xxx.yyy.255.253:3306 SYN ******S* 36301 Feb 17 13:09:28 66.55.66.99:3129 -> xxx.yyy.1.1:3306 SYN ******S* Feb 17 13:09:28 66.55.66.99:3130 -> xxx.yyy.1.2:3306 SYN ******S* Feb 17 13:09:28 66.55.66.99:3131 -> xxx.yyy.1.3:3306 SYN ******S* Feb 17 13:09:31 66.55.66.99:3132 -> xxx.yyy.1.4:3306 SYN ******S* Feb 17 13:09:31 66.55.66.99:3136 -> xxx.yyy.1.8:3306 SYN ******S* Feb 17 13:09:31 66.55.66.99:3137 -> xxx.yyy.1.9:3306 SYN ******S* Feb 17 13:09:31 66.55.66.99:3138 -> xxx.yyy.1.10:3306 SYN ******S* Feb 17 13:09:28 66.55.66.99:3140 -> xxx.yyy.1.12:3306 SYN ******S* [...] Feb 17 13:21:16 66.55.66.99:1929 -> xxx.yyy.255.237:3306 SYN ******S* Feb 17 13:21:16 66.55.66.99:1943 -> xxx.yyy.255.251:3306 SYN ******S* Feb 17 13:21:16 66.55.66.99:1941 -> xxx.yyy.255.249:3306 SYN ******S* Feb 17 13:21:16 66.55.66.99:1940 -> xxx.yyy.255.248:3306 SYN ******S* Feb 17 13:21:16 66.55.66.99:1944 -> xxx.yyy.255.252:3306 SYN ******S* Feb 17 13:21:16 66.55.66.99:1939 -> xxx.yyy.255.247:3306 SYN ******S* Feb 17 13:21:16 66.55.66.99:1942 -> xxx.yyy.255.250:3306 SYN ******S* Feb 17 13:21:16 66.55.66.99:1938 -> xxx.yyy.255.246:3306 SYN ******S* Feb 17 13:21:16 66.55.66.99:1945 -> xxx.yyy.255.253:3306 SYN ******S* 32350 Feb 17 04:30:41 210.211.147.89:3298 -> xxx.yyy.222.1:42 SYN ******S* Feb 17 04:30:41 210.211.147.89:3299 -> xxx.yyy.222.1:139 SYN ******S* Feb 17 04:30:41 210.211.147.89:3300 -> xxx.yyy.222.1:5900 SYN ******S* Feb 17 04:30:41 210.211.147.89:3301 -> xxx.yyy.222.1:6101 SYN ******S* Feb 17 04:30:41 210.211.147.89:3303 -> xxx.yyy.222.1:4899 SYN ******S* Feb 17 04:30:38 210.211.147.89:3306 -> xxx.yyy.222.2:42 SYN ******S* Feb 17 04:30:41 210.211.147.89:3307 -> xxx.yyy.222.2:139 SYN ******S* Feb 17 04:30:41 210.211.147.89:3308 -> xxx.yyy.222.2:6101 SYN ******S* [...] Feb 17 10:48:50 210.211.147.89:4443 -> xxx.yyy.222.35:5900 SYN ******S* Feb 17 10:48:51 210.211.147.89:4447 -> xxx.yyy.222.13:5900 SYN ******S* Feb 17 10:48:52 210.211.147.89:4466 -> xxx.yyy.222.34:5900 SYN ******S* Feb 17 10:48:52 210.211.147.89:4467 -> xxx.yyy.222.3:5900 SYN ******S* Feb 17 10:59:51 210.211.147.89:3888 -> xxx.yyy.222.13:5900 SYN ******S* Feb 17 10:59:51 210.211.147.89:3895 -> xxx.yyy.222.3:5900 SYN ******S* Feb 17 10:59:54 210.211.147.89:3923 -> xxx.yyy.222.35:5900 SYN ******S* Feb 17 10:59:54 210.211.147.89:3924 -> xxx.yyy.222.34:5900 SYN ******S* Feb 17 10:59:54 210.211.147.89:3925 -> xxx.yyy.222.14:5900 SYN ******S* 27910 Feb 17 09:11:06 65.162.1.154:3708 -> xxx.yyy.1.3:4899 SYN ******S* Feb 17 09:11:08 65.162.1.154:3715 -> xxx.yyy.1.4:4899 SYN ******S* Feb 17 09:11:08 65.162.1.154:3730 -> xxx.yyy.1.5:4899 SYN ******S* Feb 17 09:11:08 65.162.1.154:3737 -> xxx.yyy.1.6:4899 SYN ******S* Feb 17 09:11:08 65.162.1.154:3771 -> xxx.yyy.1.13:4899 SYN ******S* Feb 17 09:11:06 65.162.1.154:3782 -> xxx.yyy.1.16:4899 SYN ******S* Feb 17 09:11:06 65.162.1.154:3796 -> xxx.yyy.1.17:4899 SYN ******S* Feb 17 09:11:08 65.162.1.154:3829 -> xxx.yyy.1.23:4899 SYN ******S* [...] Feb 17 09:20:06 65.162.1.154:1254 -> xxx.yyy.255.161:4899 SYN ******S* Feb 17 09:20:06 65.162.1.154:1371 -> xxx.yyy.255.146:4899 SYN ******S* Feb 17 09:20:06 65.162.1.154:3644 -> xxx.yyy.255.156:4899 SYN ******S* Feb 17 09:20:06 65.162.1.154:3886 -> xxx.yyy.255.200:4899 SYN ******S* Feb 17 09:20:06 65.162.1.154:4663 -> xxx.yyy.255.193:4899 SYN ******S* Feb 17 09:20:06 65.162.1.154:4815 -> xxx.yyy.255.173:4899 SYN ******S* Feb 17 09:20:06 65.162.1.154:4957 -> xxx.yyy.255.204:4899 SYN ******S* Feb 17 09:20:06 65.162.1.154:1167 -> xxx.yyy.255.220:4899 SYN ******S* 25342 Feb 17 00:22:16 24.236.164.193:2546 -> xxx.yyy.1.1:1433 SYN ******S* Feb 17 00:22:16 24.236.164.193:2547 -> xxx.yyy.1.2:1433 SYN ******S* Feb 17 00:22:13 24.236.164.193:2549 -> xxx.yyy.1.4:1433 SYN ******S* Feb 17 00:22:13 24.236.164.193:2552 -> xxx.yyy.1.7:1433 SYN ******S* Feb 17 00:22:13 24.236.164.193:2553 -> xxx.yyy.1.8:1433 SYN ******S* Feb 17 00:22:13 24.236.164.193:2555 -> xxx.yyy.1.10:1433 SYN ******S* Feb 17 00:22:13 24.236.164.193:2556 -> xxx.yyy.1.11:1433 SYN ******S* Feb 17 00:22:13 24.236.164.193:2557 -> xxx.yyy.1.12:1433 SYN ******S* [...] Feb 17 00:25:56 24.236.164.193:1933 -> xxx.yyy.255.231:1433 SYN ******S* Feb 17 00:25:56 24.236.164.193:1934 -> xxx.yyy.255.232:1433 SYN ******S* Feb 17 00:25:56 24.236.164.193:1938 -> xxx.yyy.255.236:1433 SYN ******S* Feb 17 00:25:56 24.236.164.193:1940 -> xxx.yyy.255.237:1433 SYN ******S* Feb 17 00:25:56 24.236.164.193:1941 -> xxx.yyy.255.239:1433 SYN ******S* Feb 17 00:25:56 24.236.164.193:1942 -> xxx.yyy.255.240:1433 SYN ******S* Feb 17 00:25:56 24.236.164.193:1944 -> xxx.yyy.255.242:1433 SYN ******S* Feb 17 00:25:56 24.236.164.193:1946 -> xxx.yyy.255.244:1433 SYN ******S* 22983 Feb 17 00:00:08 202.58.80.95:55805 -> xxx.yyy.223.43:1433 SYN ******S* Feb 17 00:00:04 202.58.80.95:55188 -> xxx.yyy.223.44:1433 SYN ******S* Feb 17 00:00:08 202.58.80.95:55806 -> xxx.yyy.223.45:1433 SYN ******S* Feb 17 00:00:04 202.58.80.95:55807 -> xxx.yyy.223.46:1433 SYN ******S* Feb 17 00:00:05 202.58.80.95:55730 -> xxx.yyy.223.28:1433 SYN ******S* Feb 17 00:00:08 202.58.80.95:55201 -> xxx.yyy.223.51:1433 SYN ******S* Feb 17 00:00:08 202.58.80.95:55820 -> xxx.yyy.223.52:1433 SYN ******S* Feb 17 00:00:08 202.58.80.95:55207 -> xxx.yyy.223.54:1433 SYN ******S* [...] Feb 17 00:32:23 202.58.80.95:36880 -> xxx.yyy.255.244:1433 SYN ******S* Feb 17 00:32:23 202.58.80.95:36885 -> xxx.yyy.255.245:1433 SYN ******S* Feb 17 00:32:23 202.58.80.95:36886 -> xxx.yyy.255.246:1433 SYN ******S* Feb 17 00:32:23 202.58.80.95:36904 -> xxx.yyy.255.248:1433 SYN ******S* Feb 17 00:32:24 202.58.80.95:36911 -> xxx.yyy.255.249:1433 SYN ******S* Feb 17 00:32:24 202.58.80.95:36932 -> xxx.yyy.255.251:1433 SYN ******S* Feb 17 00:32:24 202.58.80.95:36935 -> xxx.yyy.255.252:1433 SYN ******S* Feb 17 00:32:24 202.58.80.95:36937 -> xxx.yyy.255.254:1433 SYN ******S* Feb 17 00:32:24 202.58.80.95:36936 -> xxx.yyy.255.253:1433 SYN ******S* 17306 Feb 17 11:43:40 82.33.204.85:61054 -> xxx.yyy.1.4:6101 SYN ******S* Feb 17 11:43:40 82.33.204.85:61071 -> xxx.yyy.1.16:6101 SYN ******S* Feb 17 11:43:43 82.33.204.85:61076 -> xxx.yyy.1.21:6101 SYN ******S* Feb 17 11:43:40 82.33.204.85:61088 -> xxx.yyy.1.33:6101 SYN ******S* Feb 17 11:43:40 82.33.204.85:61087 -> xxx.yyy.1.32:6101 SYN ******S* Feb 17 11:43:40 82.33.204.85:61084 -> xxx.yyy.1.29:6101 SYN ******S* Feb 17 11:43:40 82.33.204.85:61099 -> xxx.yyy.1.44:6101 SYN ******S* Feb 17 11:43:40 82.33.204.85:61100 -> xxx.yyy.1.45:6101 SYN ******S* [...] Feb 17 11:59:13 82.33.204.85:4965 -> xxx.yyy.255.233:6101 SYN ******S* Feb 17 11:59:13 82.33.204.85:4968 -> xxx.yyy.255.236:6101 SYN ******S* Feb 17 11:59:13 82.33.204.85:4914 -> xxx.yyy.255.182:6101 SYN ******S* Feb 17 11:59:13 82.33.204.85:4916 -> xxx.yyy.255.184:6101 SYN ******S* Feb 17 11:59:13 82.33.204.85:4960 -> xxx.yyy.255.228:6101 SYN ******S* Feb 17 11:59:13 82.33.204.85:4966 -> xxx.yyy.255.234:6101 SYN ******S* Feb 17 11:59:13 82.33.204.85:4959 -> xxx.yyy.255.226:6101 SYN ******S* Feb 17 11:59:13 82.33.204.85:4970 -> xxx.yyy.255.238:6101 SYN ******S* Feb 17 11:59:13 82.33.204.85:4969 -> xxx.yyy.255.237:6101 SYN ******S* 14954 Feb 17 00:06:54 81.241.59.77:3807 -> xxx.yyy.75.141:10273 SYN ******S* Feb 17 00:06:54 81.241.59.77:3845 -> xxx.yyy.75.141:10266 SYN ******S* Feb 17 00:06:55 81.241.59.77:3818 -> xxx.yyy.75.141:10268 SYN ******S* Feb 17 00:06:56 81.241.59.77:3823 -> xxx.yyy.75.141:10263 SYN ******S* Feb 17 00:06:56 81.241.59.77:3824 -> xxx.yyy.75.141:10270 SYN ******S* Feb 17 00:07:00 81.241.59.77:3845 -> xxx.yyy.75.141:10266 SYN ******S* Feb 17 00:07:07 81.241.59.77:3926 -> xxx.yyy.75.141:10270 SYN ******S* Feb 17 00:07:11 81.241.59.77:3973 -> xxx.yyy.75.141:10268 SYN ******S* [...] Feb 17 18:04:56 81.241.59.77:2430 -> xxx.yyy.75.141:10263 SYN ******S* Feb 17 18:04:56 81.241.59.77:2435 -> xxx.yyy.75.141:10266 SYN ******S* Feb 17 18:04:58 81.241.59.77:2462 -> xxx.yyy.75.141:10273 SYN ******S* Feb 17 18:18:53 81.241.59.77:3446 -> xxx.yyy.75.141:10263 SYN ******S* Feb 17 18:18:53 81.241.59.77:3444 -> xxx.yyy.75.141:10268 SYN ******S* Feb 17 18:18:53 81.241.59.77:3407 -> xxx.yyy.75.141:10273 SYN ******S* Feb 17 18:18:53 81.241.59.77:3413 -> xxx.yyy.75.141:10266 SYN ******S* Feb 17 18:18:55 81.241.59.77:3422 -> xxx.yyy.75.141:10270 SYN ******S* 11799 [...] 11342 Feb 17 00:13:09 220.200.167.3:3467 -> xxx.yyy.154.100:5554 SYN ******S* Feb 17 00:13:10 220.200.167.3:3733 -> xxx.yyy.154.100:1023 SYN ******S* Feb 17 00:13:12 220.200.167.3:4397 -> xxx.yyy.154.100:9898 SYN ******S* Feb 17 00:13:09 220.200.167.3:3469 -> xxx.yyy.154.101:5554 SYN ******S* Feb 17 00:13:10 220.200.167.3:3736 -> xxx.yyy.154.101:1023 SYN ******S* Feb 17 00:13:12 220.200.167.3:4398 -> xxx.yyy.154.101:9898 SYN ******S* Feb 17 00:13:09 220.200.167.3:3471 -> xxx.yyy.154.103:5554 SYN ******S* Feb 17 00:13:10 220.200.167.3:3738 -> xxx.yyy.154.103:1023 SYN ******S* [...] Feb 17 00:14:35 220.200.167.3:1573 -> xxx.yyy.155.230:9898 SYN ******S* Feb 17 00:14:36 220.200.167.3:1585 -> xxx.yyy.155.243:9898 SYN ******S* Feb 17 00:14:36 220.200.167.3:1589 -> xxx.yyy.155.236:9898 SYN ******S* Feb 17 00:14:36 220.200.167.3:1591 -> xxx.yyy.155.238:9898 SYN ******S* Feb 17 00:14:36 220.200.167.3:1618 -> xxx.yyy.155.249:9898 SYN ******S* Feb 17 00:14:36 220.200.167.3:1617 -> xxx.yyy.155.254:9898 SYN ******S* Feb 17 00:14:37 220.200.167.3:1766 -> xxx.yyy.156.36:9898 SYN ******S* Feb 17 00:14:37 220.200.167.3:1770 -> xxx.yyy.156.37:9898 SYN ******S* Feb 17 00:14:37 220.200.167.3:1773 -> xxx.yyy.156.17:9898 SYN ******S* 11257 [...] 10134 Feb 17 10:39:17 221.167.21.183:4094 -> xxx.yyy.1.2:17300 SYN ******S* Feb 17 10:39:17 221.167.21.183:4099 -> xxx.yyy.1.7:17300 SYN ******S* Feb 17 10:39:17 221.167.21.183:4100 -> xxx.yyy.1.8:17300 SYN ******S* Feb 17 10:39:18 221.167.21.183:4101 -> xxx.yyy.1.9:17300 SYN ******S* Feb 17 10:39:20 221.167.21.183:4104 -> xxx.yyy.1.12:17300 SYN ******S* Feb 17 10:39:18 221.167.21.183:4095 -> xxx.yyy.1.3:17300 SYN ******S* Feb 17 10:39:20 221.167.21.183:4098 -> xxx.yyy.1.6:17300 SYN ******S* Feb 17 10:39:20 221.167.21.183:4102 -> xxx.yyy.1.10:17300 SYN ******S* [...] Feb 17 11:39:28 221.167.21.183:2325 -> xxx.yyy.106.64:17300 SYN ******S* Feb 17 11:39:28 221.167.21.183:2326 -> xxx.yyy.106.65:17300 SYN ******S* Feb 17 11:39:28 221.167.21.183:2327 -> xxx.yyy.106.66:17300 SYN ******S* Feb 17 11:39:28 221.167.21.183:2328 -> xxx.yyy.106.67:17300 SYN ******S* Feb 17 11:39:28 221.167.21.183:2333 -> xxx.yyy.106.72:17300 SYN ******S* Feb 17 11:39:29 221.167.21.183:2307 -> xxx.yyy.106.46:17300 SYN ******S* Feb 17 11:39:29 221.167.21.183:2306 -> xxx.yyy.106.45:17300 SYN ******S* Feb 17 11:39:29 221.167.21.183:2321 -> xxx.yyy.106.60:17300 SYN ******S* Feb 17 11:39:29 221.167.21.183:2315 -> xxx.yyy.106.54:17300 SYN ******S* 10109 Feb 17 00:00:07 210.99.2.5:3389 -> xxx.yyy.189.113:3306 SYN ******S* Feb 17 00:00:04 210.99.2.5:3377 -> xxx.yyy.189.101:3306 SYN ******S* Feb 17 00:00:04 210.99.2.5:3392 -> xxx.yyy.189.116:3306 SYN ******S* Feb 17 00:00:04 210.99.2.5:3378 -> xxx.yyy.189.102:3306 SYN ******S* Feb 17 00:00:04 210.99.2.5:3395 -> xxx.yyy.189.119:3306 SYN ******S* Feb 17 00:00:07 210.99.2.5:3397 -> xxx.yyy.189.121:3306 SYN ******S* Feb 17 00:00:04 210.99.2.5:3383 -> xxx.yyy.189.107:3306 SYN ******S* Feb 17 00:00:04 210.99.2.5:3402 -> xxx.yyy.189.126:3306 SYN ******S* [...] Feb 17 00:05:09 210.99.2.5:2028 -> xxx.yyy.255.85:3306 SYN ******S* Feb 17 00:05:09 210.99.2.5:1982 -> xxx.yyy.255.40:3306 SYN ******S* Feb 17 00:05:09 210.99.2.5:2178 -> xxx.yyy.255.232:3306 SYN ******S* Feb 17 00:05:09 210.99.2.5:1954 -> xxx.yyy.255.12:3306 SYN ******S* Feb 17 00:05:09 210.99.2.5:2151 -> xxx.yyy.255.207:3306 SYN ******S* Feb 17 00:05:09 210.99.2.5:2172 -> xxx.yyy.255.226:3306 SYN ******S* Feb 17 00:05:09 210.99.2.5:2016 -> xxx.yyy.255.73:3306 SYN ******S* Feb 17 00:05:09 210.99.2.5:2188 -> xxx.yyy.255.242:3306 SYN ******S* 9523 Feb 17 22:55:31 221.163.209.170:1634 -> xxx.yyy.153.139:5554 SYN ******S* Feb 17 22:55:32 221.163.209.170:2276 -> xxx.yyy.153.139:1023 SYN ******S* Feb 17 22:55:34 221.163.209.170:3270 -> xxx.yyy.153.139:9898 SYN ******S* Feb 17 22:55:32 221.163.209.170:1679 -> xxx.yyy.153.154:5554 SYN ******S* Feb 17 22:55:33 221.163.209.170:2315 -> xxx.yyy.153.154:1023 SYN ******S* Feb 17 22:55:34 221.163.209.170:3306 -> xxx.yyy.153.154:9898 SYN ******S* Feb 17 22:55:31 221.163.209.170:1654 -> xxx.yyy.153.138:5554 SYN ******S* Feb 17 22:55:32 221.163.209.170:2291 -> xxx.yyy.153.138:1023 SYN ******S* [...] Feb 17 22:56:14 221.163.209.170:1141 -> xxx.yyy.173.199:9898 SYN ******S* Feb 17 22:56:14 221.163.209.170:1156 -> xxx.yyy.173.223:9898 SYN ******S* Feb 17 22:56:14 221.163.209.170:1176 -> xxx.yyy.173.241:9898 SYN ******S* Feb 17 22:56:14 221.163.209.170:1178 -> xxx.yyy.173.207:9898 SYN ******S* Feb 17 22:56:14 221.163.209.170:1180 -> xxx.yyy.173.209:9898 SYN ******S* Feb 17 22:56:14 221.163.209.170:1182 -> xxx.yyy.173.211:9898 SYN ******S* Feb 17 22:56:14 221.163.209.170:1184 -> xxx.yyy.173.213:9898 SYN ******S* Feb 17 22:56:14 221.163.209.170:1186 -> xxx.yyy.173.215:9898 SYN ******S* Feb 17 22:56:14 221.163.209.170:1194 -> xxx.yyy.173.248:9898 SYN ******S* 7187 Feb 17 22:55:37 220.84.75.135:3830 -> xxx.yyy.133.15:5554 SYN ******S* Feb 17 22:55:38 220.84.75.135:4535 -> xxx.yyy.133.15:1023 SYN ******S* Feb 17 22:55:37 220.84.75.135:3834 -> xxx.yyy.133.18:5554 SYN ******S* Feb 17 22:55:38 220.84.75.135:4537 -> xxx.yyy.133.18:1023 SYN ******S* Feb 17 22:55:40 220.84.75.135:1867 -> xxx.yyy.133.18:9898 SYN ******S* Feb 17 22:55:37 220.84.75.135:3839 -> xxx.yyy.133.23:5554 SYN ******S* Feb 17 22:55:38 220.84.75.135:4542 -> xxx.yyy.133.23:1023 SYN ******S* Feb 17 22:55:37 220.84.75.135:3831 -> xxx.yyy.133.16:5554 SYN ******S* [...] Feb 17 22:56:22 220.84.75.135:1302 -> xxx.yyy.153.107:9898 SYN ******S* Feb 17 22:56:22 220.84.75.135:1315 -> xxx.yyy.153.119:9898 SYN ******S* Feb 17 22:56:22 220.84.75.135:1317 -> xxx.yyy.153.121:9898 SYN ******S* Feb 17 22:56:22 220.84.75.135:1316 -> xxx.yyy.153.120:9898 SYN ******S* Feb 17 22:56:22 220.84.75.135:1318 -> xxx.yyy.153.122:9898 SYN ******S* Feb 17 22:56:22 220.84.75.135:1319 -> xxx.yyy.153.123:9898 SYN ******S* Feb 17 22:56:22 220.84.75.135:1324 -> xxx.yyy.153.128:9898 SYN ******S* Feb 17 22:56:22 220.84.75.135:1325 -> xxx.yyy.153.130:9898 SYN ******S* Feb 17 22:56:22 220.84.75.135:1328 -> xxx.yyy.153.133:9898 SYN ******S* 7068 Feb 17 18:27:08 203.236.217.110:80 -> xxx.yyy.1.16:42 SYN ******S* Feb 17 18:27:08 203.236.217.110:80 -> xxx.yyy.1.42:42 SYN ******S* Feb 17 18:27:08 203.236.217.110:80 -> xxx.yyy.1.29:42 SYN ******S* Feb 17 18:27:08 203.236.217.110:80 -> xxx.yyy.1.75:42 SYN ******S* Feb 17 18:27:08 203.236.217.110:80 -> xxx.yyy.1.115:42 SYN ******S* Feb 17 18:27:08 203.236.217.110:80 -> xxx.yyy.1.90:42 SYN ******S* Feb 17 18:27:08 203.236.217.110:80 -> xxx.yyy.1.144:42 SYN ******S* Feb 17 18:27:08 203.236.217.110:80 -> xxx.yyy.1.176:42 SYN ******S* [...] Feb 17 18:27:27 203.236.217.110:80 -> xxx.yyy.255.166:42 SYN ******S* Feb 17 18:27:27 203.236.217.110:80 -> xxx.yyy.255.202:42 SYN ******S* Feb 17 18:27:27 203.236.217.110:80 -> xxx.yyy.255.151:42 SYN ******S* Feb 17 18:27:27 203.236.217.110:80 -> xxx.yyy.255.186:42 SYN ******S* Feb 17 18:27:27 203.236.217.110:80 -> xxx.yyy.255.168:42 SYN ******S* Feb 17 18:27:27 203.236.217.110:80 -> xxx.yyy.255.207:42 SYN ******S* Feb 17 18:27:27 203.236.217.110:80 -> xxx.yyy.255.232:42 SYN ******S* Feb 17 18:27:27 203.236.217.110:80 -> xxx.yyy.255.239:42 SYN ******S* Feb 17 18:27:27 203.236.217.110:80 -> xxx.yyy.255.223:42 SYN ******S* 6520 Feb 17 23:56:35 218.75.75.59:2022 -> xxx.yyy.133.234:5554 SYN ******S* Feb 17 23:56:38 218.75.75.59:1887 -> xxx.yyy.133.234:9898 SYN ******S* Feb 17 23:56:35 218.75.75.59:2073 -> xxx.yyy.133.238:5554 SYN ******S* Feb 17 23:56:36 218.75.75.59:2292 -> xxx.yyy.133.238:1023 SYN ******S* Feb 17 23:56:35 218.75.75.59:2076 -> xxx.yyy.133.240:5554 SYN ******S* Feb 17 23:56:38 218.75.75.59:1904 -> xxx.yyy.133.240:9898 SYN ******S* Feb 17 23:56:35 218.75.75.59:2084 -> xxx.yyy.133.241:5554 SYN ******S* Feb 17 23:56:35 218.75.75.59:2085 -> xxx.yyy.133.242:5554 SYN ******S* [...] Feb 17 23:58:20 218.75.75.59:2218 -> xxx.yyy.154.84:9898 SYN ******S* Feb 17 23:58:20 218.75.75.59:2346 -> xxx.yyy.154.90:9898 SYN ******S* Feb 17 23:58:21 218.75.75.59:2997 -> xxx.yyy.154.93:9898 SYN ******S* Feb 17 23:58:21 218.75.75.59:2115 -> xxx.yyy.154.94:9898 SYN ******S* Feb 17 23:58:21 218.75.75.59:2116 -> xxx.yyy.154.95:9898 SYN ******S* Feb 17 23:58:21 218.75.75.59:2117 -> xxx.yyy.154.96:9898 SYN ******S* Feb 17 23:58:21 218.75.75.59:2120 -> xxx.yyy.154.97:9898 SYN ******S* Feb 17 23:58:21 218.75.75.59:2121 -> xxx.yyy.154.100:9898 SYN ******S* 5996 Feb 17 07:14:48 219.132.26.163:3325 -> xxx.yyy.1.0:1433 SYN ******S* Feb 17 07:14:48 219.132.26.163:3327 -> xxx.yyy.1.2:1433 SYN ******S* Feb 17 07:14:45 219.132.26.163:3328 -> xxx.yyy.1.3:1433 SYN ******S* Feb 17 07:14:48 219.132.26.163:3329 -> xxx.yyy.1.4:1433 SYN ******S* Feb 17 07:14:48 219.132.26.163:3330 -> xxx.yyy.1.5:1433 SYN ******S* Feb 17 07:14:45 219.132.26.163:3331 -> xxx.yyy.1.6:1433 SYN ******S* Feb 17 07:14:45 219.132.26.163:3333 -> xxx.yyy.1.8:1433 SYN ******S* Feb 17 07:14:45 219.132.26.163:3335 -> xxx.yyy.1.10:1433 SYN ******S* [...] Feb 17 07:44:41 219.132.26.163:3423 -> xxx.yyy.33.248:1433 SYN ******S* Feb 17 07:44:41 219.132.26.163:3422 -> xxx.yyy.33.247:1433 SYN ******S* Feb 17 07:44:41 219.132.26.163:3421 -> xxx.yyy.33.246:1433 SYN ******S* Feb 17 07:44:41 219.132.26.163:3425 -> xxx.yyy.33.249:1433 SYN ******S* Feb 17 07:44:41 219.132.26.163:3427 -> xxx.yyy.33.251:1433 SYN ******S* Feb 17 07:44:41 219.132.26.163:3426 -> xxx.yyy.33.250:1433 SYN ******S* Feb 17 07:44:42 219.132.26.163:3431 -> xxx.yyy.33.254:1433 SYN ******S* Feb 17 07:44:42 219.132.26.163:3428 -> xxx.yyy.33.252:1433 SYN ******S* Feb 17 07:44:42 219.132.26.163:3432 -> xxx.yyy.33.255:1433 SYN ******S* 5905 Feb 17 00:35:24 59.36.64.132:3959 -> xxx.yyy.239.33:1433 SYN ******S* Feb 17 00:35:22 59.36.64.132:3968 -> xxx.yyy.239.36:1433 SYN ******S* Feb 17 00:35:24 59.36.64.132:3974 -> xxx.yyy.239.38:1433 SYN ******S* Feb 17 00:35:22 59.36.64.132:3989 -> xxx.yyy.239.43:1433 SYN ******S* Feb 17 00:35:24 59.36.64.132:3995 -> xxx.yyy.239.45:1433 SYN ******S* Feb 17 00:35:22 59.36.64.132:3721 -> xxx.yyy.238.211:1433 SYN ******S* Feb 17 00:35:22 59.36.64.132:3724 -> xxx.yyy.238.212:1433 SYN ******S* Feb 17 00:35:22 59.36.64.132:3737 -> xxx.yyy.238.215:1433 SYN ******S* [...] Feb 17 00:50:36 59.36.64.132:3220 -> xxx.yyy.255.229:1433 SYN ******S* Feb 17 00:50:36 59.36.64.132:3219 -> xxx.yyy.255.228:1433 SYN ******S* Feb 17 00:50:36 59.36.64.132:3228 -> xxx.yyy.255.237:1433 SYN ******S* Feb 17 00:50:36 59.36.64.132:3225 -> xxx.yyy.255.234:1433 SYN ******S* Feb 17 00:50:36 59.36.64.132:3226 -> xxx.yyy.255.235:1433 SYN ******S* Feb 17 00:50:36 59.36.64.132:3224 -> xxx.yyy.255.233:1433 SYN ******S* Feb 17 00:50:36 59.36.64.132:3269 -> xxx.yyy.255.252:1433 SYN ******S* Feb 17 00:50:36 59.36.64.132:3271 -> xxx.yyy.255.254:1433 SYN ******S* 5733 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions