[LOGS] Summary of large-scale portscanning detects
[email protected] Wed, 23 Feb 2005 08:41:20 -0600 (CST)
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Feb 22 00:00:06 216.84.6.58:2457 -> xxx.yyy.222.34:5900 SYN ******S* Feb 22 00:00:06 216.84.6.58:2478 -> xxx.yyy.222.16:5900 SYN ******S* Feb 22 00:00:07 216.84.6.58:2514 -> xxx.yyy.222.32:5900 SYN ******S* Feb 22 00:00:07 216.84.6.58:2523 -> xxx.yyy.222.14:5900 SYN ******S* Feb 22 00:00:07 216.84.6.58:2568 -> xxx.yyy.222.38:5900 SYN ******S* Feb 22 00:00:09 216.84.6.58:2690 -> xxx.yyy.222.13:5900 SYN ******S* Feb 22 00:00:10 216.84.6.58:2739 -> xxx.yyy.222.35:5900 SYN ******S* Feb 22 00:00:11 216.84.6.58:2765 -> xxx.yyy.222.39:5900 SYN ******S* [...] Feb 22 13:23:49 216.84.6.58:4412 -> xxx.yyy.222.39:5900 SYN ******S* Feb 22 13:23:53 216.84.6.58:4586 -> xxx.yyy.222.5:5900 SYN ******S* Feb 22 13:23:53 216.84.6.58:4591 -> xxx.yyy.222.12:5900 SYN ******S* Feb 22 13:23:57 216.84.6.58:4783 -> xxx.yyy.222.16:5900 SYN ******S* Feb 22 13:23:58 216.84.6.58:4826 -> xxx.yyy.222.39:5900 SYN ******S* Feb 22 13:23:59 216.84.6.58:4894 -> xxx.yyy.222.4:5900 SYN ******S* Feb 22 13:24:01 216.84.6.58:1034 -> xxx.yyy.222.12:5900 SYN ******S* Feb 22 13:24:05 216.84.6.58:1209 -> xxx.yyy.222.14:5900 SYN ******S* 74990 Feb 22 19:30:55 159.178.206.251:3404 -> xxx.yyy.1.1:4899 SYN ******S* Feb 22 19:30:55 159.178.206.251:3414 -> xxx.yyy.1.5:4899 SYN ******S* Feb 22 19:30:55 159.178.206.251:3413 -> xxx.yyy.1.4:4899 SYN ******S* Feb 22 19:30:56 159.178.206.251:3417 -> xxx.yyy.1.8:4899 SYN ******S* Feb 22 19:30:55 159.178.206.251:3420 -> xxx.yyy.1.11:4899 SYN ******S* Feb 22 19:30:55 159.178.206.251:3421 -> xxx.yyy.1.12:4899 SYN ******S* Feb 22 19:30:56 159.178.206.251:3425 -> xxx.yyy.1.16:4899 SYN ******S* Feb 22 19:30:55 159.178.206.251:3427 -> xxx.yyy.1.17:4899 SYN ******S* [...] Feb 22 19:42:49 159.178.206.251:1138 -> xxx.yyy.254.246:4899 SYN ******S* Feb 22 19:42:49 159.178.206.251:1135 -> xxx.yyy.254.243:4899 SYN ******S* Feb 22 19:42:49 159.178.206.251:1132 -> xxx.yyy.254.240:4899 SYN ******S* Feb 22 19:42:49 159.178.206.251:1139 -> xxx.yyy.254.247:4899 SYN ******S* Feb 22 19:42:49 159.178.206.251:1136 -> xxx.yyy.254.244:4899 SYN ******S* Feb 22 19:42:49 159.178.206.251:1133 -> xxx.yyy.254.241:4899 SYN ******S* Feb 22 19:42:49 159.178.206.251:1137 -> xxx.yyy.254.245:4899 SYN ******S* Feb 22 19:42:49 159.178.206.251:1142 -> xxx.yyy.254.250:4899 SYN ******S* Feb 22 19:42:49 159.178.206.251:1143 -> xxx.yyy.254.251:4899 SYN ******S* 62900 Feb 22 05:22:27 128.138.98.45:4373 -> xxx.yyy.1.1:30 SYN ******S* Feb 22 05:22:27 128.138.98.45:4374 -> xxx.yyy.1.2:30 SYN ******S* Feb 22 05:22:27 128.138.98.45:4375 -> xxx.yyy.1.3:30 SYN ******S* Feb 22 05:22:29 128.138.98.45:4376 -> xxx.yyy.1.4:30 SYN ******S* Feb 22 05:22:29 128.138.98.45:4377 -> xxx.yyy.1.5:30 SYN ******S* Feb 22 05:22:29 128.138.98.45:4378 -> xxx.yyy.1.6:30 SYN ******S* Feb 22 05:22:29 128.138.98.45:4379 -> xxx.yyy.1.7:30 SYN ******S* Feb 22 05:22:27 128.138.98.45:4380 -> xxx.yyy.1.8:30 SYN ******S* [...] Feb 22 05:32:03 128.138.98.45:1776 -> xxx.yyy.255.238:30 SYN ******S* Feb 22 05:32:03 128.138.98.45:1744 -> xxx.yyy.255.206:30 SYN ******S* Feb 22 05:32:03 128.138.98.45:1789 -> xxx.yyy.255.251:30 SYN ******S* Feb 22 05:32:03 128.138.98.45:1773 -> xxx.yyy.255.235:30 SYN ******S* Feb 22 05:32:03 128.138.98.45:1741 -> xxx.yyy.255.203:30 SYN ******S* Feb 22 05:32:03 128.138.98.45:1757 -> xxx.yyy.255.219:30 SYN ******S* Feb 22 05:32:03 128.138.98.45:1786 -> xxx.yyy.255.248:30 SYN ******S* Feb 22 05:32:03 128.138.98.45:1770 -> xxx.yyy.255.232:30 SYN ******S* Feb 22 05:32:03 128.138.98.45:1754 -> xxx.yyy.255.216:30 SYN ******S* 54894 Feb 22 14:55:18 84.121.230.116:1102 -> xxx.yyy.1.4:1433 SYN ******S* Feb 22 14:55:18 84.121.230.116:1068 -> xxx.yyy.1.2:1433 SYN ******S* Feb 22 14:55:18 84.121.230.116:1158 -> xxx.yyy.1.6:1433 SYN ******S* Feb 22 14:55:18 84.121.230.116:1123 -> xxx.yyy.1.5:1433 SYN ******S* Feb 22 14:55:18 84.121.230.116:1160 -> xxx.yyy.1.7:1433 SYN ******S* Feb 22 14:55:18 84.121.230.116:1088 -> xxx.yyy.1.3:1433 SYN ******S* Feb 22 14:55:18 84.121.230.116:1267 -> xxx.yyy.1.8:1433 SYN ******S* Feb 22 14:55:21 84.121.230.116:1447 -> xxx.yyy.1.28:1433 SYN ******S* [...] Feb 22 18:36:50 84.121.230.116:1514 -> xxx.yyy.248.223:1433 SYN ******S* Feb 22 18:36:50 84.121.230.116:1512 -> xxx.yyy.248.222:1433 SYN ******S* Feb 22 18:36:50 84.121.230.116:1517 -> xxx.yyy.248.224:1433 SYN ******S* Feb 22 18:36:50 84.121.230.116:1521 -> xxx.yyy.248.225:1433 SYN ******S* Feb 22 18:36:50 84.121.230.116:1581 -> xxx.yyy.248.234:1433 SYN ******S* Feb 22 18:36:50 84.121.230.116:1567 -> xxx.yyy.248.232:1433 SYN ******S* Feb 22 18:36:50 84.121.230.116:1548 -> xxx.yyy.248.229:1433 SYN ******S* Feb 22 18:36:50 84.121.230.116:1556 -> xxx.yyy.248.231:1433 SYN ******S* 51036 Feb 22 02:29:38 192.112.243.30:3416 -> xxx.yyy.1.1:6101 SYN ******S* Feb 22 02:29:35 192.112.243.30:3418 -> xxx.yyy.1.2:6101 SYN ******S* Feb 22 02:29:38 192.112.243.30:3421 -> xxx.yyy.1.3:6101 SYN ******S* Feb 22 02:29:38 192.112.243.30:3424 -> xxx.yyy.1.4:6101 SYN ******S* Feb 22 02:29:35 192.112.243.30:3425 -> xxx.yyy.1.5:6101 SYN ******S* Feb 22 02:29:38 192.112.243.30:3427 -> xxx.yyy.1.6:6101 SYN ******S* Feb 22 02:29:35 192.112.243.30:3428 -> xxx.yyy.1.7:6101 SYN ******S* Feb 22 02:29:35 192.112.243.30:3429 -> xxx.yyy.1.8:6101 SYN ******S* [...] Feb 22 02:33:59 192.112.243.30:3625 -> xxx.yyy.255.197:6101 SYN ******S* Feb 22 02:33:59 192.112.243.30:3638 -> xxx.yyy.255.210:6101 SYN ******S* Feb 22 02:33:59 192.112.243.30:3619 -> xxx.yyy.255.191:6101 SYN ******S* Feb 22 02:33:59 192.112.243.30:3664 -> xxx.yyy.255.236:6101 SYN ******S* Feb 22 02:33:59 192.112.243.30:3681 -> xxx.yyy.255.252:6101 SYN ******S* Feb 22 02:33:59 192.112.243.30:3661 -> xxx.yyy.255.233:6101 SYN ******S* Feb 22 02:33:59 192.112.243.30:3658 -> xxx.yyy.255.230:6101 SYN ******S* Feb 22 02:33:59 192.112.243.30:3671 -> xxx.yyy.255.243:6101 SYN ******S* 44488 Feb 22 18:59:47 66.132.211.193:1744 -> xxx.yyy.1.1:1433 SYN ******S* Feb 22 18:59:44 66.132.211.193:1745 -> xxx.yyy.1.2:1433 SYN ******S* Feb 22 18:59:44 66.132.211.193:1746 -> xxx.yyy.1.3:1433 SYN ******S* Feb 22 18:59:44 66.132.211.193:1751 -> xxx.yyy.1.8:1433 SYN ******S* Feb 22 18:59:44 66.132.211.193:1752 -> xxx.yyy.1.9:1433 SYN ******S* Feb 22 18:59:44 66.132.211.193:1753 -> xxx.yyy.1.10:1433 SYN ******S* Feb 22 18:59:47 66.132.211.193:1754 -> xxx.yyy.1.11:1433 SYN ******S* Feb 22 18:59:47 66.132.211.193:1757 -> xxx.yyy.1.14:1433 SYN ******S* [...] Feb 22 19:11:33 66.132.211.193:2357 -> xxx.yyy.255.236:1433 SYN ******S* Feb 22 19:11:33 66.132.211.193:2360 -> xxx.yyy.255.239:1433 SYN ******S* Feb 22 19:11:33 66.132.211.193:2358 -> xxx.yyy.255.237:1433 SYN ******S* Feb 22 19:11:33 66.132.211.193:2353 -> xxx.yyy.255.232:1433 SYN ******S* Feb 22 19:11:33 66.132.211.193:2359 -> xxx.yyy.255.238:1433 SYN ******S* Feb 22 19:11:33 66.132.211.193:2355 -> xxx.yyy.255.234:1433 SYN ******S* Feb 22 19:11:33 66.132.211.193:2354 -> xxx.yyy.255.233:1433 SYN ******S* Feb 22 19:11:34 66.132.211.193:2375 -> xxx.yyy.255.254:1433 SYN ******S* 43343 Feb 22 11:09:30 24.173.36.193:2864 -> xxx.yyy.1.1:3306 SYN ******S* Feb 22 11:09:27 24.173.36.193:2865 -> xxx.yyy.1.2:3306 SYN ******S* Feb 22 11:09:27 24.173.36.193:2866 -> xxx.yyy.1.3:3306 SYN ******S* Feb 22 11:09:27 24.173.36.193:2871 -> xxx.yyy.1.8:3306 SYN ******S* Feb 22 11:09:30 24.173.36.193:2873 -> xxx.yyy.1.10:3306 SYN ******S* Feb 22 11:09:27 24.173.36.193:2875 -> xxx.yyy.1.12:3306 SYN ******S* Feb 22 11:09:27 24.173.36.193:2878 -> xxx.yyy.1.15:3306 SYN ******S* Feb 22 11:09:28 24.173.36.193:2880 -> xxx.yyy.1.17:3306 SYN ******S* [...] Feb 22 11:20:31 24.173.36.193:1624 -> xxx.yyy.255.219:3306 SYN ******S* Feb 22 11:20:31 24.173.36.193:1621 -> xxx.yyy.255.216:3306 SYN ******S* Feb 22 11:20:31 24.173.36.193:1618 -> xxx.yyy.255.213:3306 SYN ******S* Feb 22 11:20:31 24.173.36.193:1625 -> xxx.yyy.255.220:3306 SYN ******S* Feb 22 11:20:32 24.173.36.193:1639 -> xxx.yyy.255.234:3306 SYN ******S* Feb 22 11:20:32 24.173.36.193:1629 -> xxx.yyy.255.224:3306 SYN ******S* Feb 22 11:20:32 24.173.36.193:1645 -> xxx.yyy.255.240:3306 SYN ******S* Feb 22 11:20:32 24.173.36.193:1654 -> xxx.yyy.255.249:3306 SYN ******S* Feb 22 11:20:32 24.173.36.193:1651 -> xxx.yyy.255.246:3306 SYN ******S* 39534 Feb 22 21:08:43 213.179.239.20:3152 -> xxx.yyy.1.2:3306 SYN ******S* Feb 22 21:08:46 213.179.239.20:3158 -> xxx.yyy.1.5:3306 SYN ******S* Feb 22 21:08:46 213.179.239.20:3160 -> xxx.yyy.1.6:3306 SYN ******S* Feb 22 21:08:46 213.179.239.20:3166 -> xxx.yyy.1.9:3306 SYN ******S* Feb 22 21:08:43 213.179.239.20:3168 -> xxx.yyy.1.10:3306 SYN ******S* Feb 22 21:08:46 213.179.239.20:3170 -> xxx.yyy.1.11:3306 SYN ******S* Feb 22 21:08:44 213.179.239.20:3202 -> xxx.yyy.1.27:3306 SYN ******S* Feb 22 21:08:44 213.179.239.20:3206 -> xxx.yyy.1.29:3306 SYN ******S* [...] Feb 22 21:20:30 213.179.239.20:4639 -> xxx.yyy.255.227:3306 SYN ******S* Feb 22 21:20:30 213.179.239.20:4730 -> xxx.yyy.255.242:3306 SYN ******S* Feb 22 21:20:30 213.179.239.20:4689 -> xxx.yyy.255.237:3306 SYN ******S* Feb 22 21:20:30 213.179.239.20:4683 -> xxx.yyy.255.236:3306 SYN ******S* Feb 22 21:20:30 213.179.239.20:4701 -> xxx.yyy.255.238:3306 SYN ******S* Feb 22 21:20:30 213.179.239.20:4751 -> xxx.yyy.255.247:3306 SYN ******S* Feb 22 21:20:30 213.179.239.20:4757 -> xxx.yyy.255.249:3306 SYN ******S* Feb 22 21:20:30 213.179.239.20:4742 -> xxx.yyy.255.245:3306 SYN ******S* 38891 Feb 22 07:34:06 64.36.33.44:1400 -> xxx.yyy.1.1:139 SYN ******S* Feb 22 07:34:06 64.36.33.44:1401 -> xxx.yyy.1.2:139 SYN ******S* Feb 22 07:34:06 64.36.33.44:1402 -> xxx.yyy.1.3:139 SYN ******S* Feb 22 07:34:03 64.36.33.44:1403 -> xxx.yyy.1.4:139 SYN ******S* Feb 22 07:34:03 64.36.33.44:1404 -> xxx.yyy.1.5:139 SYN ******S* Feb 22 07:34:03 64.36.33.44:1405 -> xxx.yyy.1.6:139 SYN ******S* Feb 22 07:34:06 64.36.33.44:1406 -> xxx.yyy.1.7:139 SYN ******S* Feb 22 07:34:03 64.36.33.44:1407 -> xxx.yyy.1.8:139 SYN ******S* [...] Feb 22 07:45:46 64.36.33.44:3635 -> xxx.yyy.255.248:139 SYN ******S* Feb 22 07:45:46 64.36.33.44:3632 -> xxx.yyy.255.245:139 SYN ******S* Feb 22 07:45:46 64.36.33.44:3636 -> xxx.yyy.255.249:139 SYN ******S* Feb 22 07:45:46 64.36.33.44:3633 -> xxx.yyy.255.246:139 SYN ******S* Feb 22 07:45:46 64.36.33.44:3630 -> xxx.yyy.255.243:139 SYN ******S* Feb 22 07:45:46 64.36.33.44:3637 -> xxx.yyy.255.250:139 SYN ******S* Feb 22 07:45:46 64.36.33.44:3641 -> xxx.yyy.255.254:139 SYN ******S* Feb 22 07:45:46 64.36.33.44:3640 -> xxx.yyy.255.253:139 SYN ******S* 37760 Feb 22 20:57:04 207.234.225.99:3035 -> xxx.yyy.1.1:1433 SYN ******S* Feb 22 20:57:04 207.234.225.99:3036 -> xxx.yyy.1.2:1433 SYN ******S* Feb 22 20:57:04 207.234.225.99:3037 -> xxx.yyy.1.3:1433 SYN ******S* Feb 22 20:57:04 207.234.225.99:3038 -> xxx.yyy.1.4:1433 SYN ******S* Feb 22 20:57:04 207.234.225.99:3039 -> xxx.yyy.1.5:1433 SYN ******S* Feb 22 20:57:04 207.234.225.99:3046 -> xxx.yyy.1.12:1433 SYN ******S* Feb 22 20:57:04 207.234.225.99:3047 -> xxx.yyy.1.13:1433 SYN ******S* Feb 22 20:57:04 207.234.225.99:3048 -> xxx.yyy.1.14:1433 SYN ******S* [...] Feb 22 21:01:06 207.234.225.99:3844 -> xxx.yyy.255.243:1433 SYN ******S* Feb 22 21:01:06 207.234.225.99:3843 -> xxx.yyy.255.242:1433 SYN ******S* Feb 22 21:01:06 207.234.225.99:3838 -> xxx.yyy.255.240:1433 SYN ******S* Feb 22 21:01:06 207.234.225.99:3845 -> xxx.yyy.255.244:1433 SYN ******S* Feb 22 21:01:06 207.234.225.99:3847 -> xxx.yyy.255.246:1433 SYN ******S* Feb 22 21:01:06 207.234.225.99:3849 -> xxx.yyy.255.248:1433 SYN ******S* Feb 22 21:01:06 207.234.225.99:3848 -> xxx.yyy.255.247:1433 SYN ******S* Feb 22 21:01:06 207.234.225.99:3846 -> xxx.yyy.255.245:1433 SYN ******S* 34896 Feb 22 14:44:43 194.154.172.130:1932 -> xxx.yyy.1.1:1433 SYN ******S* Feb 22 14:44:43 194.154.172.130:1934 -> xxx.yyy.1.3:1433 SYN ******S* Feb 22 14:44:43 194.154.172.130:1935 -> xxx.yyy.1.4:1433 SYN ******S* Feb 22 14:44:46 194.154.172.130:1937 -> xxx.yyy.1.6:1433 SYN ******S* Feb 22 14:44:43 194.154.172.130:1939 -> xxx.yyy.1.8:1433 SYN ******S* Feb 22 14:44:43 194.154.172.130:1940 -> xxx.yyy.1.9:1433 SYN ******S* Feb 22 14:44:43 194.154.172.130:1943 -> xxx.yyy.1.12:1433 SYN ******S* Feb 22 14:44:46 194.154.172.130:1945 -> xxx.yyy.1.14:1433 SYN ******S* [...] Feb 22 14:56:24 194.154.172.130:1297 -> xxx.yyy.255.220:1433 SYN ******S* Feb 22 14:56:24 194.154.172.130:1303 -> xxx.yyy.255.226:1433 SYN ******S* Feb 22 14:56:24 194.154.172.130:1306 -> xxx.yyy.255.229:1433 SYN ******S* Feb 22 14:56:24 194.154.172.130:1309 -> xxx.yyy.255.232:1433 SYN ******S* Feb 22 14:56:24 194.154.172.130:1312 -> xxx.yyy.255.235:1433 SYN ******S* Feb 22 14:56:24 194.154.172.130:1327 -> xxx.yyy.255.250:1433 SYN ******S* Feb 22 14:56:24 194.154.172.130:1331 -> xxx.yyy.255.254:1433 SYN ******S* Feb 22 14:56:24 194.154.172.130:1326 -> xxx.yyy.255.249:1433 SYN ******S* Feb 22 14:56:24 194.154.172.130:1328 -> xxx.yyy.255.251:1433 SYN ******S* 32684 Feb 22 14:35:59 210.73.133.5:1346 -> xxx.yyy.1.4:6101 SYN ******S* Feb 22 14:35:59 210.73.133.5:1350 -> xxx.yyy.1.6:6101 SYN ******S* Feb 22 14:35:59 210.73.133.5:1356 -> xxx.yyy.1.9:6101 SYN ******S* Feb 22 14:35:59 210.73.133.5:1364 -> xxx.yyy.1.13:6101 SYN ******S* Feb 22 14:35:59 210.73.133.5:1368 -> xxx.yyy.1.15:6101 SYN ******S* Feb 22 14:35:59 210.73.133.5:1370 -> xxx.yyy.1.16:6101 SYN ******S* Feb 22 14:35:59 210.73.133.5:1380 -> xxx.yyy.1.21:6101 SYN ******S* Feb 22 14:35:59 210.73.133.5:1394 -> xxx.yyy.1.28:6101 SYN ******S* [...] Feb 22 14:47:40 210.73.133.5:3817 -> xxx.yyy.255.239:6101 SYN ******S* Feb 22 14:47:40 210.73.133.5:3829 -> xxx.yyy.255.245:6101 SYN ******S* Feb 22 14:47:40 210.73.133.5:3823 -> xxx.yyy.255.242:6101 SYN ******S* Feb 22 14:47:40 210.73.133.5:3819 -> xxx.yyy.255.240:6101 SYN ******S* Feb 22 14:47:40 210.73.133.5:3839 -> xxx.yyy.255.250:6101 SYN ******S* Feb 22 14:47:40 210.73.133.5:3833 -> xxx.yyy.255.247:6101 SYN ******S* Feb 22 14:47:40 210.73.133.5:3835 -> xxx.yyy.255.248:6101 SYN ******S* Feb 22 14:47:40 210.73.133.5:3845 -> xxx.yyy.255.253:6101 SYN ******S* 29318 Feb 22 01:42:33 216.177.115.137:1376 -> xxx.yyy.1.1:3306 SYN ******S* Feb 22 01:42:30 216.177.115.137:1377 -> xxx.yyy.1.2:3306 SYN ******S* Feb 22 01:42:30 216.177.115.137:1378 -> xxx.yyy.1.3:3306 SYN ******S* Feb 22 01:42:33 216.177.115.137:1379 -> xxx.yyy.1.4:3306 SYN ******S* Feb 22 01:42:30 216.177.115.137:1380 -> xxx.yyy.1.5:3306 SYN ******S* Feb 22 01:42:30 216.177.115.137:1381 -> xxx.yyy.1.6:3306 SYN ******S* Feb 22 01:42:30 216.177.115.137:1382 -> xxx.yyy.1.7:3306 SYN ******S* Feb 22 01:42:30 216.177.115.137:1383 -> xxx.yyy.1.8:3306 SYN ******S* [...] Feb 22 01:59:04 216.177.115.137:4244 -> xxx.yyy.254.237:3306 SYN ******S* Feb 22 01:59:04 216.177.115.137:4180 -> xxx.yyy.254.173:3306 SYN ******S* Feb 22 01:59:04 216.177.115.137:4225 -> xxx.yyy.254.218:3306 SYN ******S* Feb 22 01:59:04 216.177.115.137:4257 -> xxx.yyy.254.250:3306 SYN ******S* Feb 22 01:59:04 216.177.115.137:4177 -> xxx.yyy.254.170:3306 SYN ******S* Feb 22 01:59:04 216.177.115.137:4241 -> xxx.yyy.254.234:3306 SYN ******S* Feb 22 01:59:04 216.177.115.137:4238 -> xxx.yyy.254.231:3306 SYN ******S* Feb 22 01:59:04 216.177.115.137:4206 -> xxx.yyy.254.199:3306 SYN ******S* Feb 22 01:59:04 216.177.115.137:4222 -> xxx.yyy.254.215:3306 SYN ******S* 27079 Feb 22 08:22:04 81.192.247.62:4146 -> xxx.yyy.10.0:1433 SYN ******S* Feb 22 08:22:04 81.192.247.62:4147 -> xxx.yyy.10.1:1433 SYN ******S* Feb 22 08:22:04 81.192.247.62:4149 -> xxx.yyy.10.3:1433 SYN ******S* Feb 22 08:22:04 81.192.247.62:4150 -> xxx.yyy.10.4:1433 SYN ******S* Feb 22 08:22:04 81.192.247.62:4156 -> xxx.yyy.10.5:1433 SYN ******S* Feb 22 08:22:04 81.192.247.62:4157 -> xxx.yyy.10.6:1433 SYN ******S* Feb 22 08:22:04 81.192.247.62:4158 -> xxx.yyy.10.7:1433 SYN ******S* Feb 22 08:22:04 81.192.247.62:4159 -> xxx.yyy.10.8:1433 SYN ******S* [...] Feb 22 10:34:56 81.192.247.62:3112 -> xxx.yyy.130.173:1433 SYN ******S* Feb 22 10:34:56 81.192.247.62:3111 -> xxx.yyy.130.172:1433 SYN ******S* Feb 22 10:34:56 81.192.247.62:3110 -> xxx.yyy.130.171:1433 SYN ******S* Feb 22 10:34:56 81.192.247.62:3108 -> xxx.yyy.130.169:1433 SYN ******S* Feb 22 10:34:57 81.192.247.62:3121 -> xxx.yyy.130.182:1433 SYN ******S* Feb 22 10:34:57 81.192.247.62:3118 -> xxx.yyy.130.179:1433 SYN ******S* Feb 22 10:34:57 81.192.247.62:3117 -> xxx.yyy.130.178:1433 SYN ******S* Feb 22 10:34:57 81.192.247.62:3116 -> xxx.yyy.130.177:1433 SYN ******S* Feb 22 10:34:57 81.192.247.62:3122 -> xxx.yyy.130.183:1433 SYN ******S* 26877 Feb 22 16:24:42 211.219.71.147:1629 -> xxx.yyy.1.7:4899 SYN ******S* Feb 22 16:24:43 211.219.71.147:1626 -> xxx.yyy.1.4:4899 SYN ******S* Feb 22 16:24:45 211.219.71.147:1630 -> xxx.yyy.1.8:4899 SYN ******S* Feb 22 16:24:43 211.219.71.147:1631 -> xxx.yyy.1.9:4899 SYN ******S* Feb 22 16:24:43 211.219.71.147:1633 -> xxx.yyy.1.11:4899 SYN ******S* Feb 22 16:24:44 211.219.71.147:1648 -> xxx.yyy.1.17:4899 SYN ******S* Feb 22 16:24:44 211.219.71.147:1654 -> xxx.yyy.1.21:4899 SYN ******S* Feb 22 16:24:43 211.219.71.147:1655 -> xxx.yyy.1.22:4899 SYN ******S* [...] Feb 22 16:31:49 211.219.71.147:1275 -> xxx.yyy.255.247:4899 SYN ******S* Feb 22 16:31:49 211.219.71.147:1280 -> xxx.yyy.255.250:4899 SYN ******S* Feb 22 16:31:49 211.219.71.147:1281 -> xxx.yyy.255.251:4899 SYN ******S* Feb 22 16:31:49 211.219.71.147:1284 -> xxx.yyy.255.252:4899 SYN ******S* Feb 22 16:31:49 211.219.71.147:1290 -> xxx.yyy.255.254:4899 SYN ******S* Feb 22 16:31:49 211.219.71.147:1071 -> xxx.yyy.255.131:4899 SYN ******S* Feb 22 16:31:51 211.219.71.147:1158 -> xxx.yyy.255.176:4899 SYN ******S* Feb 22 16:31:51 211.219.71.147:1159 -> xxx.yyy.255.177:4899 SYN ******S* 22948 Feb 22 09:38:07 150.254.151.11:62493 -> xxx.yyy.1.0:1433 SYN ******S* Feb 22 09:38:07 150.254.151.11:62493 -> xxx.yyy.1.1:1433 SYN ******S* Feb 22 09:38:07 150.254.151.11:62493 -> xxx.yyy.1.2:1433 SYN ******S* Feb 22 09:38:07 150.254.151.11:62493 -> xxx.yyy.1.3:1433 SYN ******S* Feb 22 09:38:07 150.254.151.11:62493 -> xxx.yyy.1.8:1433 SYN ******S* Feb 22 09:38:07 150.254.151.11:62493 -> xxx.yyy.1.9:1433 SYN ******S* Feb 22 09:38:07 150.254.151.11:62493 -> xxx.yyy.1.10:1433 SYN ******S* Feb 22 09:38:07 150.254.151.11:62493 -> xxx.yyy.1.11:1433 SYN ******S* [...] Feb 22 09:39:12 150.254.151.11:62493 -> xxx.yyy.253.206:1433 SYN ******S* Feb 22 09:39:12 150.254.151.11:62493 -> xxx.yyy.253.219:1433 SYN ******S* Feb 22 09:39:12 150.254.151.11:62493 -> xxx.yyy.253.220:1433 SYN ******S* Feb 22 09:39:12 150.254.151.11:62493 -> xxx.yyy.253.224:1433 SYN ******S* Feb 22 09:39:12 150.254.151.11:62493 -> xxx.yyy.253.225:1433 SYN ******S* Feb 22 09:39:12 150.254.151.11:62493 -> xxx.yyy.253.226:1433 SYN ******S* Feb 22 09:39:12 150.254.151.11:62493 -> xxx.yyy.253.227:1433 SYN ******S* Feb 22 09:39:12 150.254.151.11:62493 -> xxx.yyy.253.228:1433 SYN ******S* Feb 22 09:39:12 150.254.151.11:62493 -> xxx.yyy.253.229:1433 SYN ******S* 22572 Feb 22 20:17:54 220.169.13.208:1482 -> xxx.yyy.143.89:27347 SYN ******S* Feb 22 20:17:55 220.169.13.208:1504 -> xxx.yyy.228.65:27347 SYN ******S* Feb 22 20:17:55 220.169.13.208:1533 -> xxx.yyy.248.107:27347 SYN ******S* Feb 22 20:17:55 220.169.13.208:1535 -> xxx.yyy.215.213:27347 SYN ******S* Feb 22 20:17:52 220.169.13.208:1539 -> xxx.yyy.81.247:27347 SYN ******S* Feb 22 20:17:55 220.169.13.208:1556 -> xxx.yyy.245.8:27347 SYN ******S* Feb 22 20:17:53 220.169.13.208:1566 -> xxx.yyy.70.223:27347 SYN ******S* Feb 22 20:17:53 220.169.13.208:1584 -> xxx.yyy.165.56:27347 SYN ******S* [...] Feb 22 21:14:02 220.169.13.208:1228 -> xxx.yyy.83.25:27347 SYN ******S* Feb 22 21:14:02 220.169.13.208:1266 -> xxx.yyy.13.23:27347 SYN ******S* Feb 22 21:14:03 220.169.13.208:1279 -> xxx.yyy.227.54:27347 SYN ******S* Feb 22 21:14:03 220.169.13.208:1274 -> xxx.yyy.209.148:27347 SYN ******S* Feb 22 21:14:03 220.169.13.208:1276 -> xxx.yyy.173.146:27347 SYN ******S* Feb 22 21:14:03 220.169.13.208:1310 -> xxx.yyy.150.242:27347 SYN ******S* Feb 22 21:14:03 220.169.13.208:1352 -> xxx.yyy.249.84:27347 SYN ******S* Feb 22 21:14:09 220.169.13.208:1301 -> xxx.yyy.215.51:27347 SYN ******S* Feb 22 21:14:10 220.169.13.208:1455 -> xxx.yyy.68.8:27347 SYN ******S* 21748 [...] 19295 Feb 22 01:27:05 170.224.180.81:3422 -> xxx.yyy.1.1:1433 SYN ******S* Feb 22 01:27:08 170.224.180.81:3423 -> xxx.yyy.1.1:3306 SYN ******S* Feb 22 01:27:09 170.224.180.81:3426 -> xxx.yyy.1.14:3306 SYN ******S* Feb 22 01:27:09 170.224.180.81:3427 -> xxx.yyy.1.19:1433 SYN ******S* Feb 22 01:27:09 170.224.180.81:3428 -> xxx.yyy.1.19:3306 SYN ******S* Feb 22 01:27:09 170.224.180.81:3430 -> xxx.yyy.1.20:3306 SYN ******S* Feb 22 01:27:09 170.224.180.81:4119 -> xxx.yyy.1.20:1433 SYN ******S* Feb 22 01:27:06 170.224.180.81:3431 -> xxx.yyy.1.21:1433 SYN ******S* [...] Feb 22 01:29:27 170.224.180.81:2783 -> xxx.yyy.255.75:3306 SYN ******S* Feb 22 01:29:27 170.224.180.81:2835 -> xxx.yyy.255.70:1433 SYN ******S* Feb 22 01:29:27 170.224.180.81:3276 -> xxx.yyy.255.156:1433 SYN ******S* Feb 22 01:29:27 170.224.180.81:3277 -> xxx.yyy.255.156:3306 SYN ******S* Feb 22 01:29:27 170.224.180.81:3271 -> xxx.yyy.255.153:3306 SYN ******S* Feb 22 01:29:27 170.224.180.81:2838 -> xxx.yyy.255.77:1433 SYN ******S* Feb 22 01:29:28 170.224.180.81:2839 -> xxx.yyy.255.77:3306 SYN ******S* Feb 22 01:29:28 170.224.180.81:2811 -> xxx.yyy.255.135:3306 SYN ******S* 15682 Feb 22 04:05:53 68.194.252.249:3471 -> xxx.yyy.1.56:5803 SYN ******S* Feb 22 04:05:53 68.194.252.249:3476 -> xxx.yyy.1.61:5803 SYN ******S* Feb 22 04:05:53 68.194.252.249:3480 -> xxx.yyy.1.65:5803 SYN ******S* Feb 22 04:05:53 68.194.252.249:3487 -> xxx.yyy.1.72:5803 SYN ******S* Feb 22 04:05:53 68.194.252.249:3491 -> xxx.yyy.1.76:5803 SYN ******S* Feb 22 04:05:53 68.194.252.249:3495 -> xxx.yyy.1.80:5803 SYN ******S* Feb 22 04:05:53 68.194.252.249:3500 -> xxx.yyy.1.85:5803 SYN ******S* Feb 22 04:05:53 68.194.252.249:3505 -> xxx.yyy.1.90:5803 SYN ******S* [...] Feb 22 04:10:59 68.194.252.249:3052 -> xxx.yyy.254.237:5803 SYN ******S* Feb 22 04:10:59 68.194.252.249:3032 -> xxx.yyy.254.218:5803 SYN ******S* Feb 22 04:10:59 68.194.252.249:3049 -> xxx.yyy.254.234:5803 SYN ******S* Feb 22 04:10:59 68.194.252.249:3013 -> xxx.yyy.254.199:5803 SYN ******S* Feb 22 04:10:59 68.194.252.249:3029 -> xxx.yyy.254.215:5803 SYN ******S* Feb 22 04:10:59 68.194.252.249:3062 -> xxx.yyy.254.247:5803 SYN ******S* Feb 22 04:10:59 68.194.252.249:3046 -> xxx.yyy.254.231:5803 SYN ******S* Feb 22 04:10:59 68.194.252.249:3026 -> xxx.yyy.254.212:5803 SYN ******S* 15429 Feb 22 23:59:31 218.234.217.62:6000 -> xxx.yyy.1.9:1433 SYN ******S* Feb 22 23:59:31 218.234.217.62:6000 -> xxx.yyy.1.6:1433 SYN ******S* Feb 22 23:59:31 218.234.217.62:6000 -> xxx.yyy.1.12:1433 SYN ******S* Feb 22 23:59:31 218.234.217.62:6000 -> xxx.yyy.1.34:1433 SYN ******S* Feb 22 23:59:31 218.234.217.62:6000 -> xxx.yyy.1.24:1433 SYN ******S* Feb 22 23:59:31 218.234.217.62:6000 -> xxx.yyy.1.10:1433 SYN ******S* Feb 22 23:59:31 218.234.217.62:6000 -> xxx.yyy.1.13:1433 SYN ******S* Feb 22 23:59:31 218.234.217.62:6000 -> xxx.yyy.1.3:1433 SYN ******S* [...] Feb 22 23:59:57 218.234.217.62:6000 -> xxx.yyy.255.229:1433 SYN ******S* Feb 22 23:59:57 218.234.217.62:6000 -> xxx.yyy.255.163:1433 SYN ******S* Feb 22 23:59:57 218.234.217.62:6000 -> xxx.yyy.255.205:1433 SYN ******S* Feb 22 23:59:57 218.234.217.62:6000 -> xxx.yyy.255.216:1433 SYN ******S* Feb 22 23:59:57 218.234.217.62:6000 -> xxx.yyy.255.219:1433 SYN ******S* Feb 22 23:59:57 218.234.217.62:6000 -> xxx.yyy.255.249:1433 SYN ******S* Feb 22 23:59:57 218.234.217.62:6000 -> xxx.yyy.255.240:1433 SYN ******S* Feb 22 23:59:57 218.234.217.62:6000 -> xxx.yyy.255.248:1433 SYN ******S* 13885 [...] 13093 Feb 22 04:45:32 195.161.132.135:4039 -> xxx.yyy.220.1:139 SYN ******S* Feb 22 04:45:32 195.161.132.135:4037 -> xxx.yyy.220.1:42 SYN ******S* Feb 22 04:45:32 195.161.132.135:4040 -> xxx.yyy.220.1:6101 SYN ******S* Feb 22 04:45:32 195.161.132.135:4041 -> xxx.yyy.220.1:5900 SYN ******S* Feb 22 04:45:32 195.161.132.135:4042 -> xxx.yyy.220.1:4899 SYN ******S* Feb 22 04:45:32 195.161.132.135:4047 -> xxx.yyy.220.2:139 SYN ******S* Feb 22 04:45:32 195.161.132.135:4046 -> xxx.yyy.220.2:42 SYN ******S* Feb 22 04:45:32 195.161.132.135:4048 -> xxx.yyy.220.2:6101 SYN ******S* [...] Feb 22 05:07:27 195.161.132.135:3503 -> xxx.yyy.220.116:5900 SYN ******S* Feb 22 05:07:28 195.161.132.135:3510 -> xxx.yyy.220.113:5900 SYN ******S* Feb 22 05:07:28 195.161.132.135:3512 -> xxx.yyy.220.209:5900 SYN ******S* Feb 22 05:07:28 195.161.132.135:3519 -> xxx.yyy.220.56:5900 SYN ******S* Feb 22 05:07:28 195.161.132.135:3522 -> xxx.yyy.220.115:5900 SYN ******S* Feb 22 05:07:28 195.161.132.135:3523 -> xxx.yyy.220.95:5900 SYN ******S* Feb 22 05:07:28 195.161.132.135:3524 -> xxx.yyy.220.44:5900 SYN ******S* Feb 22 05:07:28 195.161.132.135:3534 -> xxx.yyy.220.70:5900 SYN ******S* Feb 22 05:07:28 195.161.132.135:3532 -> xxx.yyy.220.111:5900 SYN ******S* 11235 [...] 11219 Feb 22 03:25:47 211.161.213.222:2301 -> xxx.yyy.1.144:1433 SYN ******S* Feb 22 03:25:48 211.161.213.222:2319 -> xxx.yyy.1.149:1433 SYN ******S* Feb 22 03:25:47 211.161.213.222:2310 -> xxx.yyy.1.146:1433 SYN ******S* Feb 22 03:25:48 211.161.213.222:2329 -> xxx.yyy.1.152:1433 SYN ******S* Feb 22 03:25:48 211.161.213.222:2330 -> xxx.yyy.1.153:1433 SYN ******S* Feb 22 03:25:48 211.161.213.222:2323 -> xxx.yyy.1.151:1433 SYN ******S* Feb 22 03:25:48 211.161.213.222:2337 -> xxx.yyy.1.156:1433 SYN ******S* Feb 22 03:25:45 211.161.213.222:2317 -> xxx.yyy.1.148:1433 SYN ******S* [...] Feb 22 04:26:29 211.161.213.222:1276 -> xxx.yyy.68.169:1433 SYN ******S* Feb 22 04:26:29 211.161.213.222:1296 -> xxx.yyy.68.173:1433 SYN ******S* Feb 22 04:26:29 211.161.213.222:1274 -> xxx.yyy.68.168:1433 SYN ******S* Feb 22 04:26:29 211.161.213.222:1295 -> xxx.yyy.68.172:1433 SYN ******S* Feb 22 04:26:30 211.161.213.222:1313 -> xxx.yyy.68.174:1433 SYN ******S* Feb 22 04:26:30 211.161.213.222:1314 -> xxx.yyy.68.175:1433 SYN ******S* Feb 22 04:26:30 211.161.213.222:1330 -> xxx.yyy.68.177:1433 SYN ******S* Feb 22 04:26:30 211.161.213.222:1337 -> xxx.yyy.68.178:1433 SYN ******S* 10547 Feb 22 16:34:54 64.229.169.92:1554 -> xxx.yyy.1.1:139 SYN ******S* Feb 22 16:34:54 64.229.169.92:1555 -> xxx.yyy.1.2:139 SYN ******S* Feb 22 16:34:54 64.229.169.92:1556 -> xxx.yyy.1.3:139 SYN ******S* Feb 22 16:34:54 64.229.169.92:1558 -> xxx.yyy.1.5:139 SYN ******S* Feb 22 16:34:54 64.229.169.92:1562 -> xxx.yyy.1.9:139 SYN ******S* Feb 22 16:34:57 64.229.169.92:1563 -> xxx.yyy.1.10:139 SYN ******S* Feb 22 16:34:57 64.229.169.92:1564 -> xxx.yyy.1.11:139 SYN ******S* Feb 22 16:34:54 64.229.169.92:1566 -> xxx.yyy.1.13:139 SYN ******S* [...] Feb 22 19:03:40 64.229.169.92:3242 -> xxx.yyy.81.177:139 SYN ******S* Feb 22 19:03:40 64.229.169.92:3244 -> xxx.yyy.81.179:139 SYN ******S* Feb 22 19:03:41 64.229.169.92:3250 -> xxx.yyy.81.185:139 SYN ******S* Feb 22 19:03:41 64.229.169.92:3262 -> xxx.yyy.81.197:139 SYN ******S* Feb 22 19:03:41 64.229.169.92:3275 -> xxx.yyy.81.210:139 SYN ******S* Feb 22 19:03:41 64.229.169.92:3272 -> xxx.yyy.81.207:139 SYN ******S* Feb 22 19:03:41 64.229.169.92:3285 -> xxx.yyy.81.220:139 SYN ******S* Feb 22 19:03:41 64.229.169.92:3282 -> xxx.yyy.81.217:139 SYN ******S* Feb 22 19:03:41 64.229.169.92:3280 -> xxx.yyy.81.215:139 SYN ******S* 10440 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list Send posts to: [email protected] To Unsubscribe or change your options, see: http://www.dshield.org/mailman/listinfo/intrusions