[LOGS] Summary of large-scale portscanning detects
[email protected] Sat, 19 Feb 2005 08:39:43 -0600 (CST)
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Feb 18 19:59:09 63.200.36.15:1353 -> xxx.yyy.1.1:1433 SYN ******S* Feb 18 19:59:09 63.200.36.15:1356 -> xxx.yyy.1.2:1433 SYN ******S* Feb 18 19:59:06 63.200.36.15:1358 -> xxx.yyy.1.4:1433 SYN ******S* Feb 18 19:59:09 63.200.36.15:1359 -> xxx.yyy.1.5:1433 SYN ******S* Feb 18 19:59:09 63.200.36.15:1362 -> xxx.yyy.1.6:1433 SYN ******S* Feb 18 19:59:09 63.200.36.15:1363 -> xxx.yyy.1.7:1433 SYN ******S* Feb 18 19:59:06 63.200.36.15:1365 -> xxx.yyy.1.8:1433 SYN ******S* Feb 18 19:59:09 63.200.36.15:1366 -> xxx.yyy.1.9:1433 SYN ******S* [...] Feb 18 21:53:38 63.200.36.15:4336 -> xxx.yyy.255.247:1433 SYN ******S* Feb 18 21:53:38 63.200.36.15:4356 -> xxx.yyy.255.248:1433 SYN ******S* Feb 18 21:53:38 63.200.36.15:4367 -> xxx.yyy.255.252:1433 SYN ******S* Feb 18 21:53:38 63.200.36.15:4363 -> xxx.yyy.255.251:1433 SYN ******S* Feb 18 21:53:38 63.200.36.15:4359 -> xxx.yyy.255.250:1433 SYN ******S* Feb 18 21:53:38 63.200.36.15:4357 -> xxx.yyy.255.249:1433 SYN ******S* Feb 18 21:53:38 63.200.36.15:4376 -> xxx.yyy.255.254:1433 SYN ******S* Feb 18 21:53:38 63.200.36.15:4369 -> xxx.yyy.255.253:1433 SYN ******S* 99636 Feb 18 00:06:39 218.4.227.225:3132 -> xxx.yyy.64.0:1433 SYN ******S* Feb 18 00:06:39 218.4.227.225:3150 -> xxx.yyy.64.4:1433 SYN ******S* Feb 18 00:06:39 218.4.227.225:3152 -> xxx.yyy.64.5:1433 SYN ******S* Feb 18 00:06:36 218.4.227.225:3154 -> xxx.yyy.64.6:1433 SYN ******S* Feb 18 00:06:37 218.4.227.225:3160 -> xxx.yyy.64.8:1433 SYN ******S* Feb 18 00:06:40 218.4.227.225:3161 -> xxx.yyy.64.9:1433 SYN ******S* Feb 18 00:06:40 218.4.227.225:3165 -> xxx.yyy.64.11:1433 SYN ******S* Feb 18 00:06:37 218.4.227.225:3169 -> xxx.yyy.64.12:1433 SYN ******S* [...] Feb 18 02:58:50 218.4.227.225:3673 -> xxx.yyy.255.247:1433 SYN ******S* Feb 18 02:58:50 218.4.227.225:3672 -> xxx.yyy.255.246:1433 SYN ******S* Feb 18 02:58:50 218.4.227.225:3676 -> xxx.yyy.255.250:1433 SYN ******S* Feb 18 02:58:50 218.4.227.225:3675 -> xxx.yyy.255.249:1433 SYN ******S* Feb 18 02:58:50 218.4.227.225:3674 -> xxx.yyy.255.248:1433 SYN ******S* Feb 18 02:58:50 218.4.227.225:3681 -> xxx.yyy.255.251:1433 SYN ******S* Feb 18 02:58:50 218.4.227.225:3688 -> xxx.yyy.255.252:1433 SYN ******S* Feb 18 02:58:50 218.4.227.225:3697 -> xxx.yyy.255.253:1433 SYN ******S* Feb 18 02:58:50 218.4.227.225:3700 -> xxx.yyy.255.254:1433 SYN ******S* 90386 Feb 18 05:59:04 83.177.226.167:2371 -> xxx.yyy.22.85:1433 SYN ******S* Feb 18 05:59:01 83.177.226.167:2374 -> xxx.yyy.22.86:1433 SYN ******S* Feb 18 05:59:04 83.177.226.167:2377 -> xxx.yyy.22.87:1433 SYN ******S* Feb 18 05:59:04 83.177.226.167:2380 -> xxx.yyy.22.88:1433 SYN ******S* Feb 18 05:59:04 83.177.226.167:2383 -> xxx.yyy.22.89:1433 SYN ******S* Feb 18 05:59:04 83.177.226.167:2386 -> xxx.yyy.22.90:1433 SYN ******S* Feb 18 05:59:04 83.177.226.167:2389 -> xxx.yyy.22.91:1433 SYN ******S* Feb 18 05:59:01 83.177.226.167:2392 -> xxx.yyy.22.92:1433 SYN ******S* [...] Feb 18 09:10:24 83.177.226.167:4695 -> xxx.yyy.235.183:1433 SYN ******S* Feb 18 09:10:24 83.177.226.167:4694 -> xxx.yyy.235.182:1433 SYN ******S* Feb 18 09:10:24 83.177.226.167:4690 -> xxx.yyy.235.181:1433 SYN ******S* Feb 18 09:10:24 83.177.226.167:4684 -> xxx.yyy.235.179:1433 SYN ******S* Feb 18 09:10:24 83.177.226.167:4696 -> xxx.yyy.235.184:1433 SYN ******S* Feb 18 09:10:24 83.177.226.167:4699 -> xxx.yyy.235.185:1433 SYN ******S* Feb 18 09:10:25 83.177.226.167:4705 -> xxx.yyy.235.187:1433 SYN ******S* Feb 18 09:10:25 83.177.226.167:4704 -> xxx.yyy.235.186:1433 SYN ******S* 87650 Feb 18 05:48:23 61.222.221.227:618 -> xxx.yyy.1.0:111 SYN ******S* Feb 18 05:48:23 61.222.221.227:619 -> xxx.yyy.1.1:111 SYN ******S* Feb 18 05:48:23 61.222.221.227:620 -> xxx.yyy.1.2:111 SYN ******S* Feb 18 05:48:24 61.222.221.227:621 -> xxx.yyy.1.3:111 SYN ******S* Feb 18 05:48:20 61.222.221.227:622 -> xxx.yyy.1.4:111 SYN ******S* Feb 18 05:48:20 61.222.221.227:623 -> xxx.yyy.1.5:111 SYN ******S* Feb 18 05:48:20 61.222.221.227:624 -> xxx.yyy.1.6:111 SYN ******S* Feb 18 05:48:20 61.222.221.227:625 -> xxx.yyy.1.7:111 SYN ******S* [...] Feb 18 06:15:37 61.222.221.227:899 -> xxx.yyy.255.208:111 SYN ******S* Feb 18 06:15:37 61.222.221.227:901 -> xxx.yyy.255.209:111 SYN ******S* Feb 18 06:15:37 61.222.221.227:903 -> xxx.yyy.255.211:111 SYN ******S* Feb 18 06:15:37 61.222.221.227:904 -> xxx.yyy.255.212:111 SYN ******S* Feb 18 06:15:37 61.222.221.227:905 -> xxx.yyy.255.213:111 SYN ******S* Feb 18 06:15:37 61.222.221.227:906 -> xxx.yyy.255.214:111 SYN ******S* Feb 18 06:15:37 61.222.221.227:907 -> xxx.yyy.255.215:111 SYN ******S* Feb 18 06:15:37 61.222.221.227:908 -> xxx.yyy.255.216:111 SYN ******S* Feb 18 06:15:37 61.222.221.227:909 -> xxx.yyy.255.217:111 SYN ******S* 82398 Feb 18 02:57:38 203.118.37.243:1171 -> xxx.yyy.1.1:3306 SYN ******S* Feb 18 02:57:38 203.118.37.243:1172 -> xxx.yyy.1.2:3306 SYN ******S* Feb 18 02:57:38 203.118.37.243:1173 -> xxx.yyy.1.3:3306 SYN ******S* Feb 18 02:57:38 203.118.37.243:1174 -> xxx.yyy.1.4:3306 SYN ******S* Feb 18 02:57:38 203.118.37.243:1175 -> xxx.yyy.1.5:3306 SYN ******S* Feb 18 02:57:38 203.118.37.243:1176 -> xxx.yyy.1.6:3306 SYN ******S* Feb 18 02:57:38 203.118.37.243:1177 -> xxx.yyy.1.7:3306 SYN ******S* Feb 18 02:57:38 203.118.37.243:1179 -> xxx.yyy.1.8:3306 SYN ******S* [...] Feb 18 03:08:57 203.118.37.243:4296 -> xxx.yyy.255.254:3306 SYN ******S* Feb 18 03:08:57 203.118.37.243:4293 -> xxx.yyy.255.251:3306 SYN ******S* Feb 18 03:08:57 203.118.37.243:4290 -> xxx.yyy.255.248:3306 SYN ******S* Feb 18 03:08:57 203.118.37.243:4294 -> xxx.yyy.255.252:3306 SYN ******S* Feb 18 03:08:57 203.118.37.243:4291 -> xxx.yyy.255.249:3306 SYN ******S* Feb 18 03:08:57 203.118.37.243:4295 -> xxx.yyy.255.253:3306 SYN ******S* Feb 18 03:08:57 203.118.37.243:4292 -> xxx.yyy.255.250:3306 SYN ******S* Feb 18 03:08:57 203.118.37.243:4289 -> xxx.yyy.255.247:3306 SYN ******S* 73217 Feb 18 22:25:44 162.39.19.100:1093 -> xxx.yyy.1.1:139 SYN ******S* Feb 18 22:25:44 162.39.19.100:1094 -> xxx.yyy.1.2:139 SYN ******S* Feb 18 22:25:41 162.39.19.100:1095 -> xxx.yyy.1.3:139 SYN ******S* Feb 18 22:25:44 162.39.19.100:1096 -> xxx.yyy.1.4:139 SYN ******S* Feb 18 22:25:44 162.39.19.100:1097 -> xxx.yyy.1.5:139 SYN ******S* Feb 18 22:25:44 162.39.19.100:1098 -> xxx.yyy.1.6:139 SYN ******S* Feb 18 22:25:44 162.39.19.100:1100 -> xxx.yyy.1.7:139 SYN ******S* Feb 18 22:25:41 162.39.19.100:1101 -> xxx.yyy.1.8:139 SYN ******S* [...] Feb 18 22:45:29 162.39.19.100:2807 -> xxx.yyy.255.238:139 SYN ******S* Feb 18 22:45:29 162.39.19.100:2808 -> xxx.yyy.255.239:139 SYN ******S* Feb 18 22:45:29 162.39.19.100:2809 -> xxx.yyy.255.240:139 SYN ******S* Feb 18 22:45:29 162.39.19.100:2805 -> xxx.yyy.255.236:139 SYN ******S* Feb 18 22:45:29 162.39.19.100:2820 -> xxx.yyy.255.249:139 SYN ******S* Feb 18 22:45:29 162.39.19.100:2814 -> xxx.yyy.255.245:139 SYN ******S* Feb 18 22:45:29 162.39.19.100:2824 -> xxx.yyy.255.253:139 SYN ******S* Feb 18 22:45:29 162.39.19.100:2825 -> xxx.yyy.255.254:139 SYN ******S* 62107 Feb 18 20:32:31 194.79.160.7:2696 -> xxx.yyy.1.10:5900 SYN ******S* Feb 18 20:32:32 194.79.160.7:2697 -> xxx.yyy.1.11:5900 SYN ******S* Feb 18 20:32:34 194.79.160.7:2699 -> xxx.yyy.1.13:5900 SYN ******S* Feb 18 20:32:32 194.79.160.7:2700 -> xxx.yyy.1.14:5900 SYN ******S* Feb 18 20:32:32 194.79.160.7:2702 -> xxx.yyy.1.16:5900 SYN ******S* Feb 18 20:32:32 194.79.160.7:2703 -> xxx.yyy.1.17:5900 SYN ******S* Feb 18 20:32:34 194.79.160.7:2704 -> xxx.yyy.1.18:5900 SYN ******S* Feb 18 20:32:32 194.79.160.7:2706 -> xxx.yyy.1.20:5900 SYN ******S* [...] Feb 18 20:43:31 194.79.160.7:3018 -> xxx.yyy.255.249:5900 SYN ******S* Feb 18 20:43:31 194.79.160.7:3019 -> xxx.yyy.255.250:5900 SYN ******S* Feb 18 20:43:31 194.79.160.7:3016 -> xxx.yyy.255.247:5900 SYN ******S* Feb 18 20:43:31 194.79.160.7:3020 -> xxx.yyy.255.251:5900 SYN ******S* Feb 18 20:43:31 194.79.160.7:3014 -> xxx.yyy.255.245:5900 SYN ******S* Feb 18 20:43:31 194.79.160.7:3022 -> xxx.yyy.255.253:5900 SYN ******S* Feb 18 20:43:31 194.79.160.7:3023 -> xxx.yyy.255.254:5900 SYN ******S* Feb 18 20:43:31 194.79.160.7:3017 -> xxx.yyy.255.248:5900 SYN ******S* 60601 [...] 60588 Feb 18 23:11:13 64.219.159.245:2471 -> xxx.yyy.1.7:6101 SYN ******S* Feb 18 23:11:16 64.219.159.245:2473 -> xxx.yyy.1.9:6101 SYN ******S* Feb 18 23:11:16 64.219.159.245:2474 -> xxx.yyy.1.10:6101 SYN ******S* Feb 18 23:11:16 64.219.159.245:2480 -> xxx.yyy.1.16:6101 SYN ******S* Feb 18 23:11:13 64.219.159.245:2481 -> xxx.yyy.1.17:6101 SYN ******S* Feb 18 23:11:16 64.219.159.245:2482 -> xxx.yyy.1.18:6101 SYN ******S* Feb 18 23:11:14 64.219.159.245:2496 -> xxx.yyy.1.32:6101 SYN ******S* Feb 18 23:11:14 64.219.159.245:2497 -> xxx.yyy.1.33:6101 SYN ******S* [...] Feb 18 23:42:14 64.219.159.245:2967 -> xxx.yyy.255.249:6101 SYN ******S* Feb 18 23:42:14 64.219.159.245:2969 -> xxx.yyy.255.251:6101 SYN ******S* Feb 18 23:42:11 64.219.159.245:2971 -> xxx.yyy.255.253:6101 SYN ******S* Feb 18 23:42:14 64.219.159.245:2972 -> xxx.yyy.255.254:6101 SYN ******S* Feb 18 23:42:14 64.219.159.245:2953 -> xxx.yyy.255.235:6101 SYN ******S* Feb 18 23:42:14 64.219.159.245:2934 -> xxx.yyy.255.216:6101 SYN ******S* Feb 18 23:42:14 64.219.159.245:2970 -> xxx.yyy.255.252:6101 SYN ******S* Feb 18 23:42:14 64.219.159.245:2935 -> xxx.yyy.255.217:6101 SYN ******S* 57233 Feb 18 17:18:16 66.211.138.21:2657 -> xxx.yyy.1.1:21 SYN ******S* Feb 18 17:18:13 66.211.138.21:2659 -> xxx.yyy.1.3:21 SYN ******S* Feb 18 17:18:16 66.211.138.21:2660 -> xxx.yyy.1.4:21 SYN ******S* Feb 18 17:18:16 66.211.138.21:2663 -> xxx.yyy.1.7:21 SYN ******S* Feb 18 17:18:16 66.211.138.21:2664 -> xxx.yyy.1.8:21 SYN ******S* Feb 18 17:18:16 66.211.138.21:2665 -> xxx.yyy.1.9:21 SYN ******S* Feb 18 17:18:16 66.211.138.21:2666 -> xxx.yyy.1.10:21 SYN ******S* Feb 18 17:18:16 66.211.138.21:2667 -> xxx.yyy.1.11:21 SYN ******S* [...] Feb 18 17:29:30 66.211.138.21:1548 -> xxx.yyy.255.251:21 SYN ******S* Feb 18 17:29:30 66.211.138.21:1541 -> xxx.yyy.255.244:21 SYN ******S* Feb 18 17:29:30 66.211.138.21:1542 -> xxx.yyy.255.245:21 SYN ******S* Feb 18 17:29:30 66.211.138.21:1545 -> xxx.yyy.255.248:21 SYN ******S* Feb 18 17:29:30 66.211.138.21:1549 -> xxx.yyy.255.252:21 SYN ******S* Feb 18 17:29:30 66.211.138.21:1546 -> xxx.yyy.255.249:21 SYN ******S* Feb 18 17:29:30 66.211.138.21:1543 -> xxx.yyy.255.246:21 SYN ******S* Feb 18 17:29:30 66.211.138.21:1547 -> xxx.yyy.255.250:21 SYN ******S* Feb 18 17:29:30 66.211.138.21:1551 -> xxx.yyy.255.254:21 SYN ******S* 55478 Feb 18 08:55:55 203.233.194.221:3810 -> xxx.yyy.1.1:3306 SYN ******S* Feb 18 08:55:55 203.233.194.221:3811 -> xxx.yyy.1.3:3306 SYN ******S* Feb 18 08:55:55 203.233.194.221:3809 -> xxx.yyy.1.2:3306 SYN ******S* Feb 18 08:55:55 203.233.194.221:3812 -> xxx.yyy.1.4:3306 SYN ******S* Feb 18 08:55:55 203.233.194.221:3813 -> xxx.yyy.1.5:3306 SYN ******S* Feb 18 08:55:52 203.233.194.221:3814 -> xxx.yyy.1.6:3306 SYN ******S* Feb 18 08:55:52 203.233.194.221:3815 -> xxx.yyy.1.7:3306 SYN ******S* Feb 18 08:55:52 203.233.194.221:3816 -> xxx.yyy.1.8:3306 SYN ******S* [...] Feb 18 09:07:33 203.233.194.221:2739 -> xxx.yyy.255.237:3306 SYN ******S* Feb 18 09:07:33 203.233.194.221:2744 -> xxx.yyy.255.242:3306 SYN ******S* Feb 18 09:07:33 203.233.194.221:2742 -> xxx.yyy.255.240:3306 SYN ******S* Feb 18 09:07:33 203.233.194.221:2740 -> xxx.yyy.255.238:3306 SYN ******S* Feb 18 09:07:33 203.233.194.221:2751 -> xxx.yyy.255.249:3306 SYN ******S* Feb 18 09:07:33 203.233.194.221:2741 -> xxx.yyy.255.239:3306 SYN ******S* Feb 18 09:07:33 203.233.194.221:2743 -> xxx.yyy.255.241:3306 SYN ******S* Feb 18 09:07:33 203.233.194.221:2749 -> xxx.yyy.255.247:3306 SYN ******S* Feb 18 09:07:33 203.233.194.221:2756 -> xxx.yyy.255.254:3306 SYN ******S* 50949 Feb 18 15:19:38 206.162.159.61:3157 -> xxx.yyy.1.1:3306 SYN ******S* Feb 18 15:19:38 206.162.159.61:3159 -> xxx.yyy.1.3:3306 SYN ******S* Feb 18 15:19:35 206.162.159.61:3165 -> xxx.yyy.1.9:3306 SYN ******S* Feb 18 15:19:38 206.162.159.61:3166 -> xxx.yyy.1.10:3306 SYN ******S* Feb 18 15:19:35 206.162.159.61:3167 -> xxx.yyy.1.11:3306 SYN ******S* Feb 18 15:19:38 206.162.159.61:3169 -> xxx.yyy.1.13:3306 SYN ******S* Feb 18 15:19:35 206.162.159.61:3173 -> xxx.yyy.1.17:3306 SYN ******S* Feb 18 15:19:38 206.162.159.61:3174 -> xxx.yyy.1.18:3306 SYN ******S* [...] Feb 18 15:30:30 206.162.159.61:1054 -> xxx.yyy.255.205:3306 SYN ******S* Feb 18 15:30:30 206.162.159.61:1063 -> xxx.yyy.255.214:3306 SYN ******S* Feb 18 15:30:30 206.162.159.61:1064 -> xxx.yyy.255.215:3306 SYN ******S* Feb 18 15:30:31 206.162.159.61:1092 -> xxx.yyy.255.242:3306 SYN ******S* Feb 18 15:30:31 206.162.159.61:1089 -> xxx.yyy.255.239:3306 SYN ******S* Feb 18 15:30:31 206.162.159.61:1090 -> xxx.yyy.255.240:3306 SYN ******S* Feb 18 15:30:31 206.162.159.61:1094 -> xxx.yyy.255.244:3306 SYN ******S* Feb 18 15:30:31 206.162.159.61:1101 -> xxx.yyy.255.251:3306 SYN ******S* 39957 Feb 18 04:05:54 61.85.65.61:1748 -> xxx.yyy.1.37:1433 SYN ******S* Feb 18 04:05:51 61.85.65.61:1750 -> xxx.yyy.1.39:1433 SYN ******S* Feb 18 04:05:54 61.85.65.61:1751 -> xxx.yyy.1.40:1433 SYN ******S* Feb 18 04:05:51 61.85.65.61:1753 -> xxx.yyy.1.42:1433 SYN ******S* Feb 18 04:05:54 61.85.65.61:1754 -> xxx.yyy.1.43:1433 SYN ******S* Feb 18 04:05:51 61.85.65.61:1757 -> xxx.yyy.1.45:1433 SYN ******S* Feb 18 04:05:54 61.85.65.61:1758 -> xxx.yyy.1.46:1433 SYN ******S* Feb 18 04:05:54 61.85.65.61:1759 -> xxx.yyy.1.47:1433 SYN ******S* [...] Feb 18 04:10:17 61.85.65.61:2029 -> xxx.yyy.255.251:1433 SYN ******S* Feb 18 04:10:17 61.85.65.61:2034 -> xxx.yyy.255.254:1433 SYN ******S* Feb 18 04:10:17 61.85.65.61:1947 -> xxx.yyy.255.196:1433 SYN ******S* Feb 18 04:10:17 61.85.65.61:1929 -> xxx.yyy.255.184:1433 SYN ******S* Feb 18 04:10:17 61.85.65.61:1935 -> xxx.yyy.255.187:1433 SYN ******S* Feb 18 04:10:17 61.85.65.61:1939 -> xxx.yyy.255.190:1433 SYN ******S* Feb 18 04:10:17 61.85.65.61:2019 -> xxx.yyy.255.242:1433 SYN ******S* Feb 18 04:10:17 61.85.65.61:1943 -> xxx.yyy.255.193:1433 SYN ******S* Feb 18 04:10:17 61.85.65.61:2023 -> xxx.yyy.255.245:1433 SYN ******S* 39083 Feb 18 13:21:20 211.238.38.34:1258 -> xxx.yyy.1.1:3306 SYN ******S* Feb 18 13:21:20 211.238.38.34:1262 -> xxx.yyy.1.3:3306 SYN ******S* Feb 18 13:21:20 211.238.38.34:1268 -> xxx.yyy.1.6:3306 SYN ******S* Feb 18 13:21:23 211.238.38.34:1266 -> xxx.yyy.1.5:3306 SYN ******S* Feb 18 13:21:23 211.238.38.34:1278 -> xxx.yyy.1.11:3306 SYN ******S* Feb 18 13:21:20 211.238.38.34:1276 -> xxx.yyy.1.10:3306 SYN ******S* Feb 18 13:21:23 211.238.38.34:1280 -> xxx.yyy.1.12:3306 SYN ******S* Feb 18 13:21:23 211.238.38.34:1282 -> xxx.yyy.1.13:3306 SYN ******S* [...] Feb 18 13:33:25 211.238.38.34:4023 -> xxx.yyy.255.236:3306 SYN ******S* Feb 18 13:33:25 211.238.38.34:4043 -> xxx.yyy.255.246:3306 SYN ******S* Feb 18 13:33:25 211.238.38.34:4031 -> xxx.yyy.255.240:3306 SYN ******S* Feb 18 13:33:25 211.238.38.34:4030 -> xxx.yyy.255.239:3306 SYN ******S* Feb 18 13:33:25 211.238.38.34:4038 -> xxx.yyy.255.243:3306 SYN ******S* Feb 18 13:33:26 211.238.38.34:4054 -> xxx.yyy.255.251:3306 SYN ******S* Feb 18 13:33:26 211.238.38.34:4047 -> xxx.yyy.255.248:3306 SYN ******S* Feb 18 13:33:26 211.238.38.34:4051 -> xxx.yyy.255.250:3306 SYN ******S* Feb 18 13:33:26 211.238.38.34:4055 -> xxx.yyy.255.252:3306 SYN ******S* 37589 Feb 18 19:18:32 82.33.204.85:51813 -> xxx.yyy.1.5:1433 SYN ******S* Feb 18 19:18:32 82.33.204.85:51817 -> xxx.yyy.1.9:1433 SYN ******S* Feb 18 19:18:32 82.33.204.85:51814 -> xxx.yyy.1.6:1433 SYN ******S* Feb 18 19:18:32 82.33.204.85:51811 -> xxx.yyy.1.3:1433 SYN ******S* Feb 18 19:18:32 82.33.204.85:51812 -> xxx.yyy.1.4:1433 SYN ******S* Feb 18 19:18:32 82.33.204.85:51815 -> xxx.yyy.1.7:1433 SYN ******S* Feb 18 19:18:32 82.33.204.85:51816 -> xxx.yyy.1.8:1433 SYN ******S* Feb 18 19:18:32 82.33.204.85:51822 -> xxx.yyy.1.14:1433 SYN ******S* [...] Feb 18 19:22:39 82.33.204.85:55850 -> xxx.yyy.255.231:1433 SYN ******S* Feb 18 19:22:39 82.33.204.85:55851 -> xxx.yyy.255.232:1433 SYN ******S* Feb 18 19:22:39 82.33.204.85:55852 -> xxx.yyy.255.233:1433 SYN ******S* Feb 18 19:22:39 82.33.204.85:55804 -> xxx.yyy.255.185:1433 SYN ******S* Feb 18 19:22:39 82.33.204.85:55872 -> xxx.yyy.255.253:1433 SYN ******S* Feb 18 19:22:39 82.33.204.85:55869 -> xxx.yyy.255.250:1433 SYN ******S* Feb 18 19:22:39 82.33.204.85:55808 -> xxx.yyy.255.189:1433 SYN ******S* Feb 18 19:22:39 82.33.204.85:55815 -> xxx.yyy.255.196:1433 SYN ******S* Feb 18 19:22:39 82.33.204.85:55867 -> xxx.yyy.255.248:1433 SYN ******S* 35895 Feb 18 10:14:44 65.162.1.154:1144 -> xxx.yyy.1.12:6101 SYN ******S* Feb 18 10:14:44 65.162.1.154:1145 -> xxx.yyy.1.11:6101 SYN ******S* Feb 18 10:14:47 65.162.1.154:1152 -> xxx.yyy.1.13:6101 SYN ******S* Feb 18 10:14:44 65.162.1.154:1158 -> xxx.yyy.1.16:6101 SYN ******S* Feb 18 10:14:47 65.162.1.154:1155 -> xxx.yyy.1.15:6101 SYN ******S* Feb 18 10:14:47 65.162.1.154:1170 -> xxx.yyy.1.18:6101 SYN ******S* Feb 18 10:14:44 65.162.1.154:1166 -> xxx.yyy.1.17:6101 SYN ******S* Feb 18 10:14:44 65.162.1.154:1199 -> xxx.yyy.1.21:6101 SYN ******S* [...] Feb 18 10:24:31 65.162.1.154:3555 -> xxx.yyy.254.125:6101 SYN ******S* Feb 18 10:24:31 65.162.1.154:3596 -> xxx.yyy.255.71:6101 SYN ******S* Feb 18 10:24:31 65.162.1.154:3591 -> xxx.yyy.255.70:6101 SYN ******S* Feb 18 10:24:31 65.162.1.154:3516 -> xxx.yyy.254.123:6101 SYN ******S* Feb 18 10:24:31 65.162.1.154:4296 -> xxx.yyy.255.81:6101 SYN ******S* Feb 18 10:24:31 65.162.1.154:4329 -> xxx.yyy.254.135:6101 SYN ******S* Feb 18 10:24:31 65.162.1.154:4334 -> xxx.yyy.255.82:6101 SYN ******S* Feb 18 10:24:31 65.162.1.154:3803 -> xxx.yyy.255.78:6101 SYN ******S* 31996 Feb 18 15:25:39 171.64.115.194:2585 -> xxx.yyy.1.0:6101 SYN ******S* Feb 18 15:25:39 171.64.115.194:2586 -> xxx.yyy.1.1:6101 SYN ******S* Feb 18 15:25:39 171.64.115.194:2590 -> xxx.yyy.1.5:6101 SYN ******S* Feb 18 15:25:39 171.64.115.194:2591 -> xxx.yyy.1.6:6101 SYN ******S* Feb 18 15:25:39 171.64.115.194:2592 -> xxx.yyy.1.7:6101 SYN ******S* Feb 18 15:25:39 171.64.115.194:2593 -> xxx.yyy.1.8:6101 SYN ******S* Feb 18 15:25:39 171.64.115.194:2594 -> xxx.yyy.1.9:6101 SYN ******S* Feb 18 15:25:39 171.64.115.194:2595 -> xxx.yyy.1.10:6101 SYN ******S* [...] Feb 18 19:58:12 171.64.115.194:3622 -> xxx.yyy.255.123:45123 SYN ******S* Feb 18 19:58:12 171.64.115.194:3623 -> xxx.yyy.255.124:45123 SYN ******S* Feb 18 19:58:12 171.64.115.194:3574 -> xxx.yyy.255.125:45123 SYN ******S* Feb 18 19:58:12 171.64.115.194:3575 -> xxx.yyy.255.126:45123 SYN ******S* Feb 18 19:58:12 171.64.115.194:3576 -> xxx.yyy.255.127:45123 SYN ******S* Feb 18 19:58:12 171.64.115.194:3577 -> xxx.yyy.255.128:45123 SYN ******S* Feb 18 19:58:12 171.64.115.194:3578 -> xxx.yyy.255.129:45123 SYN ******S* Feb 18 19:58:12 171.64.115.194:3579 -> xxx.yyy.255.130:45123 SYN ******S* Feb 18 19:58:12 171.64.115.194:3580 -> xxx.yyy.255.131:45123 SYN ******S* 31141 Feb 18 16:37:56 205.209.186.10:40095 -> xxx.yyy.1.10:80 SYN ******S* Feb 18 16:37:53 205.209.186.10:40096 -> xxx.yyy.1.11:80 SYN ******S* Feb 18 16:37:55 205.209.186.10:48048 -> xxx.yyy.1.13:80 SYN ******S* Feb 18 16:37:53 205.209.186.10:40100 -> xxx.yyy.1.15:80 SYN ******S* Feb 18 16:37:53 205.209.186.10:40099 -> xxx.yyy.1.14:80 SYN ******S* Feb 18 16:37:53 205.209.186.10:40103 -> xxx.yyy.1.18:80 SYN ******S* Feb 18 16:37:53 205.209.186.10:40106 -> xxx.yyy.1.21:80 SYN ******S* Feb 18 16:37:53 205.209.186.10:40107 -> xxx.yyy.1.22:80 SYN ******S* [...] Feb 18 17:35:28 205.209.186.10:58587 -> xxx.yyy.255.234:80 SYN ******S* Feb 18 17:35:28 205.209.186.10:58586 -> xxx.yyy.255.233:80 SYN ******S* Feb 18 17:35:34 205.209.186.10:58579 -> xxx.yyy.255.226:80 SYN ******S* Feb 18 17:35:34 205.209.186.10:58577 -> xxx.yyy.255.224:80 SYN ******S* Feb 18 17:35:34 205.209.186.10:58581 -> xxx.yyy.255.228:80 SYN ******S* Feb 18 17:35:34 205.209.186.10:58584 -> xxx.yyy.255.231:80 SYN ******S* Feb 18 17:35:34 205.209.186.10:58583 -> xxx.yyy.255.230:80 SYN ******S* Feb 18 17:35:34 205.209.186.10:58588 -> xxx.yyy.255.235:80 SYN ******S* Feb 18 17:35:34 205.209.186.10:58585 -> xxx.yyy.255.232:80 SYN ******S* 30077 Feb 18 21:39:35 221.4.146.22:1157 -> xxx.yyy.1.1:21 SYN ******S* Feb 18 21:39:35 221.4.146.22:1160 -> xxx.yyy.1.4:21 SYN ******S* Feb 18 21:39:35 221.4.146.22:1161 -> xxx.yyy.1.5:21 SYN ******S* Feb 18 21:39:35 221.4.146.22:1164 -> xxx.yyy.1.8:21 SYN ******S* Feb 18 21:39:35 221.4.146.22:1166 -> xxx.yyy.1.9:21 SYN ******S* Feb 18 21:39:35 221.4.146.22:1167 -> xxx.yyy.1.10:21 SYN ******S* Feb 18 21:39:35 221.4.146.22:1169 -> xxx.yyy.1.11:21 SYN ******S* Feb 18 21:39:35 221.4.146.22:1170 -> xxx.yyy.1.12:21 SYN ******S* [...] Feb 18 21:40:29 221.4.146.22:1232 -> xxx.yyy.255.245:21 SYN ******S* Feb 18 21:40:29 221.4.146.22:1233 -> xxx.yyy.255.246:21 SYN ******S* Feb 18 21:40:29 221.4.146.22:1241 -> xxx.yyy.255.247:21 SYN ******S* Feb 18 21:40:29 221.4.146.22:1244 -> xxx.yyy.255.250:21 SYN ******S* Feb 18 21:40:29 221.4.146.22:1245 -> xxx.yyy.255.251:21 SYN ******S* Feb 18 21:40:29 221.4.146.22:1246 -> xxx.yyy.255.252:21 SYN ******S* Feb 18 21:40:29 221.4.146.22:1248 -> xxx.yyy.255.253:21 SYN ******S* Feb 18 21:40:29 221.4.146.22:1249 -> xxx.yyy.255.254:21 SYN ******S* 23868 [...] 17670 [...] 13573 Feb 18 06:56:26 80.236.23.60:3345 -> xxx.yyy.174.5:5554 SYN ******S* Feb 18 06:56:27 80.236.23.60:3612 -> xxx.yyy.174.5:1023 SYN ******S* Feb 18 06:56:29 80.236.23.60:4204 -> xxx.yyy.174.5:9898 SYN ******S* Feb 18 06:56:26 80.236.23.60:3344 -> xxx.yyy.174.4:5554 SYN ******S* Feb 18 06:56:29 80.236.23.60:4196 -> xxx.yyy.174.4:9898 SYN ******S* Feb 18 06:56:26 80.236.23.60:3347 -> xxx.yyy.174.7:5554 SYN ******S* Feb 18 06:56:26 80.236.23.60:3346 -> xxx.yyy.174.6:5554 SYN ******S* Feb 18 06:56:27 80.236.23.60:3613 -> xxx.yyy.174.6:1023 SYN ******S* [...] Feb 18 06:57:42 80.236.23.60:4306 -> xxx.yyy.194.120:9898 SYN ******S* Feb 18 06:57:42 80.236.23.60:4308 -> xxx.yyy.194.121:9898 SYN ******S* Feb 18 06:57:42 80.236.23.60:4309 -> xxx.yyy.194.122:9898 SYN ******S* Feb 18 06:57:42 80.236.23.60:4311 -> xxx.yyy.194.123:9898 SYN ******S* Feb 18 06:57:42 80.236.23.60:4313 -> xxx.yyy.194.119:9898 SYN ******S* Feb 18 06:57:42 80.236.23.60:4320 -> xxx.yyy.194.118:9898 SYN ******S* Feb 18 06:57:42 80.236.23.60:4319 -> xxx.yyy.194.117:9898 SYN ******S* Feb 18 06:57:42 80.236.23.60:4321 -> xxx.yyy.194.124:9898 SYN ******S* 12418 Feb 18 23:50:12 220.184.43.197:1934 -> xxx.yyy.235.112:5554 SYN ******S* Feb 18 23:50:13 220.184.43.197:2420 -> xxx.yyy.235.112:1023 SYN ******S* Feb 18 23:50:15 220.184.43.197:3734 -> xxx.yyy.235.112:9898 SYN ******S* Feb 18 23:50:12 220.184.43.197:1935 -> xxx.yyy.235.113:5554 SYN ******S* Feb 18 23:50:13 220.184.43.197:2421 -> xxx.yyy.235.113:1023 SYN ******S* Feb 18 23:50:12 220.184.43.197:1944 -> xxx.yyy.235.114:5554 SYN ******S* Feb 18 23:50:13 220.184.43.197:2436 -> xxx.yyy.235.114:1023 SYN ******S* Feb 18 23:50:15 220.184.43.197:3744 -> xxx.yyy.235.114:9898 SYN ******S* [...] Feb 18 23:50:56 220.184.43.197:2109 -> xxx.yyy.255.226:9898 SYN ******S* Feb 18 23:50:56 220.184.43.197:2110 -> xxx.yyy.255.227:9898 SYN ******S* Feb 18 23:50:56 220.184.43.197:2111 -> xxx.yyy.255.228:9898 SYN ******S* Feb 18 23:50:56 220.184.43.197:2113 -> xxx.yyy.255.229:9898 SYN ******S* Feb 18 23:50:56 220.184.43.197:2115 -> xxx.yyy.255.231:9898 SYN ******S* Feb 18 23:50:56 220.184.43.197:2117 -> xxx.yyy.255.232:9898 SYN ******S* Feb 18 23:50:56 220.184.43.197:2118 -> xxx.yyy.255.233:9898 SYN ******S* Feb 18 23:50:56 220.184.43.197:2194 -> xxx.yyy.255.140:9898 SYN ******S* 11082 Feb 18 12:34:20 129.215.43.13:3312 -> xxx.yyy.1.7:4000 SYN ******S* Feb 18 12:34:20 129.215.43.13:3313 -> xxx.yyy.1.8:4000 SYN ******S* Feb 18 12:34:20 129.215.43.13:3314 -> xxx.yyy.1.9:4000 SYN ******S* Feb 18 12:34:20 129.215.43.13:3315 -> xxx.yyy.1.10:4000 SYN ******S* Feb 18 12:34:20 129.215.43.13:3316 -> xxx.yyy.1.11:4000 SYN ******S* Feb 18 12:34:20 129.215.43.13:3317 -> xxx.yyy.1.12:4000 SYN ******S* Feb 18 12:34:20 129.215.43.13:3318 -> xxx.yyy.1.13:4000 SYN ******S* Feb 18 12:34:20 129.215.43.13:3346 -> xxx.yyy.1.41:4000 SYN ******S* [...] Feb 18 12:34:34 129.215.43.13:3326 -> xxx.yyy.255.201:4000 SYN ******S* Feb 18 12:34:34 129.215.43.13:3346 -> xxx.yyy.255.221:4000 SYN ******S* Feb 18 12:34:34 129.215.43.13:3323 -> xxx.yyy.255.248:4000 SYN ******S* Feb 18 12:34:34 129.215.43.13:3324 -> xxx.yyy.255.249:4000 SYN ******S* Feb 18 12:34:34 129.215.43.13:3325 -> xxx.yyy.255.250:4000 SYN ******S* Feb 18 12:34:34 129.215.43.13:3326 -> xxx.yyy.255.251:4000 SYN ******S* Feb 18 12:34:34 129.215.43.13:3327 -> xxx.yyy.255.252:4000 SYN ******S* Feb 18 12:34:34 129.215.43.13:3328 -> xxx.yyy.255.253:4000 SYN ******S* Feb 18 12:34:34 129.215.43.13:3329 -> xxx.yyy.255.254:4000 SYN ******S* 10028 Feb 18 23:56:55 221.200.80.95:2710 -> xxx.yyy.216.1:5554 SYN ******S* Feb 18 23:56:56 221.200.80.95:3205 -> xxx.yyy.216.1:1023 SYN ******S* Feb 18 23:56:58 221.200.80.95:4200 -> xxx.yyy.216.1:9898 SYN ******S* Feb 18 23:56:55 221.200.80.95:2712 -> xxx.yyy.215.254:5554 SYN ******S* Feb 18 23:56:56 221.200.80.95:3212 -> xxx.yyy.215.254:1023 SYN ******S* Feb 18 23:56:58 221.200.80.95:4212 -> xxx.yyy.215.254:9898 SYN ******S* Feb 18 23:56:55 221.200.80.95:2721 -> xxx.yyy.215.245:5554 SYN ******S* Feb 18 23:56:56 221.200.80.95:3221 -> xxx.yyy.215.245:1023 SYN ******S* [...] Feb 18 23:57:41 221.200.80.95:1231 -> xxx.yyy.236.56:9898 SYN ******S* Feb 18 23:57:41 221.200.80.95:1239 -> xxx.yyy.236.58:9898 SYN ******S* Feb 18 23:57:41 221.200.80.95:1387 -> xxx.yyy.236.59:9898 SYN ******S* Feb 18 23:57:41 221.200.80.95:1435 -> xxx.yyy.236.69:9898 SYN ******S* Feb 18 23:57:41 221.200.80.95:1440 -> xxx.yyy.236.72:9898 SYN ******S* Feb 18 23:57:41 221.200.80.95:1417 -> xxx.yyy.236.61:9898 SYN ******S* Feb 18 23:57:41 221.200.80.95:1422 -> xxx.yyy.236.63:9898 SYN ******S* Feb 18 23:57:41 221.200.80.95:1425 -> xxx.yyy.236.65:9898 SYN ******S* Feb 18 23:57:41 221.200.80.95:1442 -> xxx.yyy.236.74:9898 SYN ******S* 9931 Feb 18 22:56:18 218.44.82.248:1442 -> xxx.yyy.133.21:5554 SYN ******S* Feb 18 22:56:18 218.44.82.248:1445 -> xxx.yyy.133.24:5554 SYN ******S* Feb 18 22:56:18 218.44.82.248:1446 -> xxx.yyy.133.25:5554 SYN ******S* Feb 18 22:56:18 218.44.82.248:1450 -> xxx.yyy.133.29:5554 SYN ******S* Feb 18 22:56:19 218.44.82.248:1455 -> xxx.yyy.133.18:5554 SYN ******S* Feb 18 22:56:19 218.44.82.248:1470 -> xxx.yyy.133.99:5554 SYN ******S* Feb 18 22:56:19 218.44.82.248:1469 -> xxx.yyy.133.98:5554 SYN ******S* Feb 18 22:56:19 218.44.82.248:1472 -> xxx.yyy.133.101:5554 SYN ******S* [...] Feb 18 23:01:59 218.44.82.248:3576 -> xxx.yyy.133.91:9898 SYN ******S* Feb 18 23:01:59 218.44.82.248:3580 -> xxx.yyy.133.92:9898 SYN ******S* Feb 18 23:01:59 218.44.82.248:3581 -> xxx.yyy.133.93:9898 SYN ******S* Feb 18 23:02:01 218.44.82.248:3668 -> xxx.yyy.153.2:9898 SYN ******S* Feb 18 23:02:06 218.44.82.248:4006 -> xxx.yyy.153.93:9898 SYN ******S* Feb 18 23:02:07 218.44.82.248:4083 -> xxx.yyy.153.119:9898 SYN ******S* Feb 18 23:02:07 218.44.82.248:4084 -> xxx.yyy.153.120:9898 SYN ******S* Feb 18 23:02:07 218.44.82.248:4086 -> xxx.yyy.153.122:9898 SYN ******S* Feb 18 23:02:07 218.44.82.248:4087 -> xxx.yyy.153.123:9898 SYN ******S* 9784 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions