[LOGS] Summary of large-scale portscanning detects
[email protected] Tue, 01 Mar 2005 10:44:28 -0600 (CST)
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Feb 27 04:16:24 61.236.123.98:12438 -> xxx.yyy.150.134:8080 SYN ******S* Feb 27 04:16:24 61.236.123.98:12615 -> xxx.yyy.150.134:80 SYN ******S* Feb 27 04:16:21 61.236.123.98:12293 -> xxx.yyy.150.134:8000 SYN ******S* Feb 27 04:16:24 61.236.123.98:14118 -> xxx.yyy.150.134:8888 SYN ******S* Feb 27 04:16:24 61.236.123.98:13742 -> xxx.yyy.150.134:10080 SYN ******S* Feb 27 04:16:24 61.236.123.98:12460 -> xxx.yyy.150.134:81 SYN ******S* Feb 27 04:16:24 61.236.123.98:14072 -> xxx.yyy.150.134:3128 SYN ******S* Feb 27 04:16:24 61.236.123.98:13257 -> xxx.yyy.150.134:1080 SYN ******S* [...] Feb 27 07:36:26 61.236.123.98:13900 -> xxx.yyy.171.114:1080 SYN ******S* Feb 27 07:36:26 61.236.123.98:12869 -> xxx.yyy.171.114:80 SYN ******S* Feb 27 07:36:26 61.236.123.98:14087 -> xxx.yyy.171.114:8000 SYN ******S* Feb 27 07:36:26 61.236.123.98:12527 -> xxx.yyy.171.114:10080 SYN ******S* Feb 27 07:36:26 61.236.123.98:12380 -> xxx.yyy.171.115:8080 SYN ******S* Feb 27 07:36:26 61.236.123.98:13593 -> xxx.yyy.171.115:80 SYN ******S* Feb 27 07:36:26 61.236.123.98:13221 -> xxx.yyy.171.115:8000 SYN ******S* Feb 27 07:36:27 61.236.123.98:13066 -> xxx.yyy.171.115:8888 SYN ******S* Feb 27 07:36:27 61.236.123.98:12631 -> xxx.yyy.171.115:10080 SYN ******S* 143482 [...] 112299 Feb 27 05:58:06 151.201.138.122:3189 -> xxx.yyy.1.1:3306 SYN ******S* Feb 27 05:58:06 151.201.138.122:3259 -> xxx.yyy.1.3:3306 SYN ******S* Feb 27 05:58:07 151.201.138.122:3321 -> xxx.yyy.1.4:3306 SYN ******S* Feb 27 05:58:04 151.201.138.122:3404 -> xxx.yyy.1.5:3306 SYN ******S* Feb 27 05:58:07 151.201.138.122:3470 -> xxx.yyy.1.6:3306 SYN ******S* Feb 27 05:58:07 151.201.138.122:3614 -> xxx.yyy.1.7:3306 SYN ******S* Feb 27 05:58:08 151.201.138.122:3711 -> xxx.yyy.1.9:3306 SYN ******S* Feb 27 05:58:05 151.201.138.122:3734 -> xxx.yyy.1.10:3306 SYN ******S* [...] Feb 27 16:53:28 151.201.138.122:1219 -> xxx.yyy.255.233:3306 SYN ******S* Feb 27 16:53:28 151.201.138.122:1311 -> xxx.yyy.255.236:3306 SYN ******S* Feb 27 16:53:28 151.201.138.122:1335 -> xxx.yyy.255.238:3306 SYN ******S* Feb 27 16:53:28 151.201.138.122:1353 -> xxx.yyy.255.239:3306 SYN ******S* Feb 27 16:53:28 151.201.138.122:1399 -> xxx.yyy.255.241:3306 SYN ******S* Feb 27 16:53:29 151.201.138.122:1444 -> xxx.yyy.255.242:3306 SYN ******S* Feb 27 16:53:29 151.201.138.122:1515 -> xxx.yyy.255.245:3306 SYN ******S* Feb 27 16:53:29 151.201.138.122:1586 -> xxx.yyy.255.248:3306 SYN ******S* Feb 27 16:53:29 151.201.138.122:1725 -> xxx.yyy.255.254:3306 SYN ******S* 101906 Feb 27 04:19:58 61.138.238.195:1481 -> xxx.yyy.1.0:1433 SYN ******S* Feb 27 04:19:58 61.138.238.195:1486 -> xxx.yyy.1.2:1433 SYN ******S* Feb 27 04:19:58 61.138.238.195:1491 -> xxx.yyy.1.4:1433 SYN ******S* Feb 27 04:20:01 61.138.238.195:1493 -> xxx.yyy.1.5:1433 SYN ******S* Feb 27 04:20:01 61.138.238.195:1495 -> xxx.yyy.1.6:1433 SYN ******S* Feb 27 04:20:01 61.138.238.195:1496 -> xxx.yyy.1.7:1433 SYN ******S* Feb 27 04:20:01 61.138.238.195:1498 -> xxx.yyy.1.9:1433 SYN ******S* Feb 27 04:20:01 61.138.238.195:1500 -> xxx.yyy.1.10:1433 SYN ******S* [...] Feb 27 08:06:06 61.138.238.195:3008 -> xxx.yyy.253.50:1433 SYN ******S* Feb 27 08:06:06 61.138.238.195:3013 -> xxx.yyy.253.53:1433 SYN ******S* Feb 27 08:06:06 61.138.238.195:3016 -> xxx.yyy.253.54:1433 SYN ******S* Feb 27 08:06:06 61.138.238.195:3017 -> xxx.yyy.253.55:1433 SYN ******S* Feb 27 08:06:07 61.138.238.195:2968 -> xxx.yyy.253.37:1433 SYN ******S* Feb 27 08:06:07 61.138.238.195:2971 -> xxx.yyy.253.38:1433 SYN ******S* Feb 27 08:06:07 61.138.238.195:3020 -> xxx.yyy.253.56:1433 SYN ******S* Feb 27 08:06:07 61.138.238.195:3024 -> xxx.yyy.253.58:1433 SYN ******S* Feb 27 08:06:07 61.138.238.195:2978 -> xxx.yyy.253.39:1433 SYN ******S* 97643 Feb 27 03:45:21 128.218.125.46:1256 -> xxx.yyy.1.2:1433 SYN ******S* Feb 27 03:45:21 128.218.125.46:1257 -> xxx.yyy.1.3:1433 SYN ******S* Feb 27 03:45:21 128.218.125.46:1258 -> xxx.yyy.1.4:1433 SYN ******S* Feb 27 03:45:21 128.218.125.46:1259 -> xxx.yyy.1.5:1433 SYN ******S* Feb 27 03:45:18 128.218.125.46:1261 -> xxx.yyy.1.7:1433 SYN ******S* Feb 27 03:45:18 128.218.125.46:1262 -> xxx.yyy.1.8:1433 SYN ******S* Feb 27 03:45:21 128.218.125.46:1263 -> xxx.yyy.1.9:1433 SYN ******S* Feb 27 03:45:21 128.218.125.46:1264 -> xxx.yyy.1.10:1433 SYN ******S* [...] Feb 27 03:57:28 128.218.125.46:3451 -> xxx.yyy.255.241:1433 SYN ******S* Feb 27 03:57:28 128.218.125.46:3461 -> xxx.yyy.255.251:1433 SYN ******S* Feb 27 03:57:28 128.218.125.46:3458 -> xxx.yyy.255.248:1433 SYN ******S* Feb 27 03:57:28 128.218.125.46:3459 -> xxx.yyy.255.249:1433 SYN ******S* Feb 27 03:57:28 128.218.125.46:3456 -> xxx.yyy.255.246:1433 SYN ******S* Feb 27 03:57:28 128.218.125.46:3460 -> xxx.yyy.255.250:1433 SYN ******S* Feb 27 03:57:28 128.218.125.46:3457 -> xxx.yyy.255.247:1433 SYN ******S* Feb 27 03:57:28 128.218.125.46:3464 -> xxx.yyy.255.254:1433 SYN ******S* 70621 Feb 27 03:00:57 24.23.239.20:3277 -> xxx.yyy.1.1:3306 SYN ******S* Feb 27 03:00:57 24.23.239.20:3278 -> xxx.yyy.1.2:3306 SYN ******S* Feb 27 03:00:57 24.23.239.20:3279 -> xxx.yyy.1.3:3306 SYN ******S* Feb 27 03:00:57 24.23.239.20:3280 -> xxx.yyy.1.4:3306 SYN ******S* Feb 27 03:00:57 24.23.239.20:3281 -> xxx.yyy.1.5:3306 SYN ******S* Feb 27 03:00:57 24.23.239.20:3282 -> xxx.yyy.1.6:3306 SYN ******S* Feb 27 03:00:57 24.23.239.20:3283 -> xxx.yyy.1.7:3306 SYN ******S* Feb 27 03:00:54 24.23.239.20:3284 -> xxx.yyy.1.8:3306 SYN ******S* [...] Feb 27 03:12:35 24.23.239.20:2078 -> xxx.yyy.255.243:3306 SYN ******S* Feb 27 03:12:35 24.23.239.20:2086 -> xxx.yyy.255.251:3306 SYN ******S* Feb 27 03:12:35 24.23.239.20:2084 -> xxx.yyy.255.249:3306 SYN ******S* Feb 27 03:12:35 24.23.239.20:2083 -> xxx.yyy.255.248:3306 SYN ******S* Feb 27 03:12:35 24.23.239.20:2085 -> xxx.yyy.255.250:3306 SYN ******S* Feb 27 03:12:35 24.23.239.20:2089 -> xxx.yyy.255.254:3306 SYN ******S* Feb 27 03:12:35 24.23.239.20:2087 -> xxx.yyy.255.252:3306 SYN ******S* Feb 27 03:12:35 24.23.239.20:2088 -> xxx.yyy.255.253:3306 SYN ******S* 67930 Feb 27 20:49:50 24.173.5.111:2059 -> xxx.yyy.1.1:1433 SYN ******S* Feb 27 20:49:50 24.173.5.111:2062 -> xxx.yyy.1.4:1433 SYN ******S* Feb 27 20:49:47 24.173.5.111:2063 -> xxx.yyy.1.5:1433 SYN ******S* Feb 27 20:49:50 24.173.5.111:2064 -> xxx.yyy.1.6:1433 SYN ******S* Feb 27 20:49:50 24.173.5.111:2068 -> xxx.yyy.1.10:1433 SYN ******S* Feb 27 20:49:47 24.173.5.111:2067 -> xxx.yyy.1.9:1433 SYN ******S* Feb 27 20:49:50 24.173.5.111:2072 -> xxx.yyy.1.14:1433 SYN ******S* Feb 27 20:49:50 24.173.5.111:2074 -> xxx.yyy.1.15:1433 SYN ******S* [...] Feb 27 22:53:20 24.173.5.111:4272 -> xxx.yyy.255.245:1433 SYN ******S* Feb 27 22:53:20 24.173.5.111:4274 -> xxx.yyy.255.247:1433 SYN ******S* Feb 27 22:53:20 24.173.5.111:4271 -> xxx.yyy.255.244:1433 SYN ******S* Feb 27 22:53:20 24.173.5.111:4276 -> xxx.yyy.255.249:1433 SYN ******S* Feb 27 22:53:20 24.173.5.111:4275 -> xxx.yyy.255.248:1433 SYN ******S* Feb 27 22:53:20 24.173.5.111:4279 -> xxx.yyy.255.250:1433 SYN ******S* Feb 27 22:53:20 24.173.5.111:4296 -> xxx.yyy.255.253:1433 SYN ******S* Feb 27 22:53:20 24.173.5.111:4298 -> xxx.yyy.255.254:1433 SYN ******S* 65618 Feb 27 03:10:29 24.23.239.20:1394 -> xxx.yyy.209.254:3306 SYN ******S* Feb 27 03:55:14 128.218.125.46:2827 -> xxx.yyy.209.254:1433 SYN ******S* Feb 27 03:55:17 128.218.125.46:2827 -> xxx.yyy.209.254:1433 SYN ******S* Feb 27 07:27:20 61.138.238.195:1390 -> xxx.yyy.209.254:1433 SYN ******S* Feb 27 07:27:23 61.138.238.195:1390 -> xxx.yyy.209.254:1433 SYN ******S* Feb 27 07:27:29 61.138.238.195:1390 -> xxx.yyy.209.254:1433 SYN ******S* Feb 27 08:17:16 xxx.yyy.209.254:2716 -> xxx.yyy.0.1:135 SYN ******S* Feb 27 08:17:16 xxx.yyy.209.254:2717 -> xxx.yyy.0.2:135 SYN ******S* [...] Feb 27 08:49:04 xxx.yyy.209.254:3833 -> xxx.yyy.127.250:135 SYN ******S* Feb 27 08:49:04 xxx.yyy.209.254:3836 -> xxx.yyy.127.253:135 SYN ******S* Feb 27 08:49:04 xxx.yyy.209.254:3835 -> xxx.yyy.127.252:135 SYN ******S* Feb 27 08:49:04 xxx.yyy.209.254:3838 -> xxx.yyy.127.255:135 SYN ******S* Feb 27 08:49:04 xxx.yyy.209.254:3837 -> xxx.yyy.127.254:135 SYN ******S* Feb 27 16:12:52 62.58.132.37:4028 -> xxx.yyy.209.254:80 SYN ******S* Feb 27 20:09:56 61.250.149.104:3709 -> xxx.yyy.209.254:3306 SYN ******S* Feb 27 22:30:16 24.173.5.111:1284 -> xxx.yyy.209.254:1433 SYN ******S* Feb 27 23:42:51 216.176.188.82:2519 -> xxx.yyy.209.254:3306 SYN ******S* 45811 Feb 27 23:33:57 216.176.188.82:3494 -> xxx.yyy.1.1:3306 SYN ******S* Feb 27 23:33:57 216.176.188.82:3495 -> xxx.yyy.1.2:3306 SYN ******S* Feb 27 23:33:54 216.176.188.82:3500 -> xxx.yyy.1.7:3306 SYN ******S* Feb 27 23:33:54 216.176.188.82:3502 -> xxx.yyy.1.9:3306 SYN ******S* Feb 27 23:33:57 216.176.188.82:3504 -> xxx.yyy.1.11:3306 SYN ******S* Feb 27 23:33:57 216.176.188.82:3505 -> xxx.yyy.1.12:3306 SYN ******S* Feb 27 23:33:57 216.176.188.82:3506 -> xxx.yyy.1.13:3306 SYN ******S* Feb 27 23:33:54 216.176.188.82:3507 -> xxx.yyy.1.14:3306 SYN ******S* [...] Feb 27 23:44:54 216.176.188.82:3350 -> xxx.yyy.255.205:3306 SYN ******S* Feb 27 23:44:54 216.176.188.82:3341 -> xxx.yyy.255.197:3306 SYN ******S* Feb 27 23:44:54 216.176.188.82:3362 -> xxx.yyy.255.217:3306 SYN ******S* Feb 27 23:44:54 216.176.188.82:3363 -> xxx.yyy.255.218:3306 SYN ******S* Feb 27 23:44:54 216.176.188.82:3364 -> xxx.yyy.255.219:3306 SYN ******S* Feb 27 23:44:55 216.176.188.82:3398 -> xxx.yyy.255.252:3306 SYN ******S* Feb 27 23:44:55 216.176.188.82:3397 -> xxx.yyy.255.251:3306 SYN ******S* Feb 27 23:44:55 216.176.188.82:3399 -> xxx.yyy.255.253:3306 SYN ******S* 43432 Feb 27 20:00:20 61.250.149.104:2522 -> xxx.yyy.1.3:3306 SYN ******S* Feb 27 20:00:20 61.250.149.104:2523 -> xxx.yyy.1.4:3306 SYN ******S* Feb 27 20:00:20 61.250.149.104:2526 -> xxx.yyy.1.5:3306 SYN ******S* Feb 27 20:00:20 61.250.149.104:2527 -> xxx.yyy.1.6:3306 SYN ******S* Feb 27 20:00:23 61.250.149.104:2528 -> xxx.yyy.1.7:3306 SYN ******S* Feb 27 20:00:20 61.250.149.104:2529 -> xxx.yyy.1.8:3306 SYN ******S* Feb 27 20:00:23 61.250.149.104:2531 -> xxx.yyy.1.10:3306 SYN ******S* Feb 27 20:00:23 61.250.149.104:2533 -> xxx.yyy.1.12:3306 SYN ******S* [...] Feb 27 20:12:02 61.250.149.104:2690 -> xxx.yyy.255.241:3306 SYN ******S* Feb 27 20:12:02 61.250.149.104:2688 -> xxx.yyy.255.239:3306 SYN ******S* Feb 27 20:12:02 61.250.149.104:2703 -> xxx.yyy.255.254:3306 SYN ******S* Feb 27 20:12:02 61.250.149.104:2702 -> xxx.yyy.255.253:3306 SYN ******S* Feb 27 20:12:02 61.250.149.104:2699 -> xxx.yyy.255.250:3306 SYN ******S* Feb 27 20:12:02 61.250.149.104:2700 -> xxx.yyy.255.251:3306 SYN ******S* Feb 27 20:12:02 61.250.149.104:2701 -> xxx.yyy.255.252:3306 SYN ******S* Feb 27 20:12:02 61.250.149.104:2698 -> xxx.yyy.255.249:3306 SYN ******S* 42862 Feb 27 18:39:08 218.7.134.17:3800 -> xxx.yyy.1.1:1433 SYN ******S* Feb 27 18:39:08 218.7.134.17:3810 -> xxx.yyy.1.2:1433 SYN ******S* Feb 27 18:39:05 218.7.134.17:3816 -> xxx.yyy.1.5:1433 SYN ******S* Feb 27 18:39:05 218.7.134.17:3818 -> xxx.yyy.1.6:1433 SYN ******S* Feb 27 18:39:05 218.7.134.17:3820 -> xxx.yyy.1.7:1433 SYN ******S* Feb 27 18:39:08 218.7.134.17:3826 -> xxx.yyy.1.9:1433 SYN ******S* Feb 27 18:39:08 218.7.134.17:3829 -> xxx.yyy.1.10:1433 SYN ******S* Feb 27 18:39:08 218.7.134.17:3832 -> xxx.yyy.1.11:1433 SYN ******S* [...] Feb 27 21:13:08 218.7.134.17:4122 -> xxx.yyy.172.161:1433 SYN ******S* Feb 27 21:13:08 218.7.134.17:4123 -> xxx.yyy.172.162:1433 SYN ******S* Feb 27 21:13:08 218.7.134.17:4144 -> xxx.yyy.172.167:1433 SYN ******S* Feb 27 21:13:08 218.7.134.17:4143 -> xxx.yyy.172.166:1433 SYN ******S* Feb 27 21:13:08 218.7.134.17:4141 -> xxx.yyy.172.164:1433 SYN ******S* Feb 27 21:13:09 218.7.134.17:4145 -> xxx.yyy.172.168:1433 SYN ******S* Feb 27 21:13:09 218.7.134.17:4168 -> xxx.yyy.172.174:1433 SYN ******S* Feb 27 21:13:09 218.7.134.17:4166 -> xxx.yyy.172.173:1433 SYN ******S* 37871 Feb 27 12:15:50 159.178.101.50:1961 -> xxx.yyy.1.1:4899 SYN ******S* Feb 27 12:15:50 159.178.101.50:1962 -> xxx.yyy.1.2:4899 SYN ******S* Feb 27 12:15:50 159.178.101.50:1963 -> xxx.yyy.1.3:4899 SYN ******S* Feb 27 12:15:49 159.178.101.50:1964 -> xxx.yyy.1.4:4899 SYN ******S* Feb 27 12:15:52 159.178.101.50:1965 -> xxx.yyy.1.5:4899 SYN ******S* Feb 27 12:15:49 159.178.101.50:1966 -> xxx.yyy.1.6:4899 SYN ******S* Feb 27 12:15:52 159.178.101.50:1967 -> xxx.yyy.1.7:4899 SYN ******S* Feb 27 12:15:50 159.178.101.50:1968 -> xxx.yyy.1.8:4899 SYN ******S* [...] Feb 27 12:20:13 159.178.101.50:1919 -> xxx.yyy.255.201:4899 SYN ******S* Feb 27 12:20:13 159.178.101.50:1937 -> xxx.yyy.255.216:4899 SYN ******S* Feb 27 12:20:13 159.178.101.50:1945 -> xxx.yyy.255.219:4899 SYN ******S* Feb 27 12:20:14 159.178.101.50:1965 -> xxx.yyy.255.241:4899 SYN ******S* Feb 27 12:20:14 159.178.101.50:1970 -> xxx.yyy.255.244:4899 SYN ******S* Feb 27 12:20:14 159.178.101.50:1973 -> xxx.yyy.255.247:4899 SYN ******S* Feb 27 12:20:14 159.178.101.50:1960 -> xxx.yyy.255.239:4899 SYN ******S* Feb 27 12:20:14 159.178.101.50:1957 -> xxx.yyy.255.236:4899 SYN ******S* 36666 Feb 27 16:03:47 62.58.132.37:2162 -> xxx.yyy.1.1:80 SYN ******S* Feb 27 16:03:46 62.58.132.37:2163 -> xxx.yyy.1.2:80 SYN ******S* Feb 27 16:03:45 62.58.132.37:2166 -> xxx.yyy.1.5:80 SYN ******S* Feb 27 16:03:45 62.58.132.37:2167 -> xxx.yyy.1.6:80 SYN ******S* Feb 27 16:03:46 62.58.132.37:2171 -> xxx.yyy.1.10:80 SYN ******S* Feb 27 16:03:47 62.58.132.37:2177 -> xxx.yyy.1.16:80 SYN ******S* Feb 27 16:03:46 62.58.132.37:2183 -> xxx.yyy.1.22:80 SYN ******S* Feb 27 16:03:46 62.58.132.37:2184 -> xxx.yyy.1.23:80 SYN ******S* [...] Feb 27 16:14:53 62.58.132.37:4951 -> xxx.yyy.255.240:80 SYN ******S* Feb 27 16:14:53 62.58.132.37:4967 -> xxx.yyy.255.253:80 SYN ******S* Feb 27 16:14:53 62.58.132.37:4963 -> xxx.yyy.255.250:80 SYN ******S* Feb 27 16:14:53 62.58.132.37:4966 -> xxx.yyy.255.252:80 SYN ******S* Feb 27 16:14:53 62.58.132.37:4968 -> xxx.yyy.255.254:80 SYN ******S* Feb 27 16:14:53 62.58.132.37:4960 -> xxx.yyy.255.248:80 SYN ******S* Feb 27 16:14:53 62.58.132.37:4964 -> xxx.yyy.255.251:80 SYN ******S* Feb 27 16:14:53 62.58.132.37:4962 -> xxx.yyy.255.249:80 SYN ******S* 32212 [...] 20783 [...] 20731 [...] 18619 Feb 27 07:12:27 80.55.172.178:4002 -> xxx.yyy.1.2:3306 SYN ******S* Feb 27 07:12:28 80.55.172.178:4055 -> xxx.yyy.1.3:3306 SYN ******S* Feb 27 07:12:25 80.55.172.178:4092 -> xxx.yyy.1.4:3306 SYN ******S* Feb 27 07:12:25 80.55.172.178:4842 -> xxx.yyy.1.5:3306 SYN ******S* Feb 27 07:12:25 80.55.172.178:4898 -> xxx.yyy.1.6:3306 SYN ******S* Feb 27 07:12:26 80.55.172.178:3063 -> xxx.yyy.1.9:3306 SYN ******S* Feb 27 07:12:26 80.55.172.178:3405 -> xxx.yyy.1.10:3306 SYN ******S* Feb 27 07:12:26 80.55.172.178:3455 -> xxx.yyy.1.12:3306 SYN ******S* [...] Feb 27 18:10:42 80.55.172.178:4358 -> xxx.yyy.33.251:3306 SYN ******S* Feb 27 18:10:43 80.55.172.178:4263 -> xxx.yyy.33.249:3306 SYN ******S* Feb 27 18:10:46 80.55.172.178:4408 -> xxx.yyy.33.252:3306 SYN ******S* Feb 27 18:10:44 80.55.172.178:4455 -> xxx.yyy.33.253:3306 SYN ******S* Feb 27 18:10:44 80.55.172.178:4311 -> xxx.yyy.33.250:3306 SYN ******S* Feb 27 18:10:45 80.55.172.178:4503 -> xxx.yyy.33.254:3306 SYN ******S* Feb 27 18:10:47 80.55.172.178:4455 -> xxx.yyy.33.253:3306 SYN ******S* Feb 27 18:10:48 80.55.172.178:4503 -> xxx.yyy.33.254:3306 SYN ******S* 11622 [...] 8944 Feb 27 09:44:21 81.247.66.60:3122 -> xxx.yyy.10.0:1433 SYN ******S* Feb 27 09:44:21 81.247.66.60:3142 -> xxx.yyy.10.1:1433 SYN ******S* Feb 27 09:44:21 81.247.66.60:3149 -> xxx.yyy.10.2:1433 SYN ******S* Feb 27 09:44:22 81.247.66.60:3161 -> xxx.yyy.10.3:1433 SYN ******S* Feb 27 09:44:22 81.247.66.60:3162 -> xxx.yyy.10.4:1433 SYN ******S* Feb 27 09:44:22 81.247.66.60:3168 -> xxx.yyy.10.5:1433 SYN ******S* Feb 27 09:44:22 81.247.66.60:3188 -> xxx.yyy.10.6:1433 SYN ******S* Feb 27 09:44:22 81.247.66.60:3229 -> xxx.yyy.10.7:1433 SYN ******S* [...] Feb 27 10:06:17 81.247.66.60:3619 -> xxx.yyy.33.247:1433 SYN ******S* Feb 27 10:06:17 81.247.66.60:3626 -> xxx.yyy.33.248:1433 SYN ******S* Feb 27 10:06:18 81.247.66.60:3718 -> xxx.yyy.33.249:1433 SYN ******S* Feb 27 10:06:19 81.247.66.60:3787 -> xxx.yyy.33.250:1433 SYN ******S* Feb 27 10:06:19 81.247.66.60:3796 -> xxx.yyy.33.251:1433 SYN ******S* Feb 27 10:06:19 81.247.66.60:3828 -> xxx.yyy.33.252:1433 SYN ******S* Feb 27 10:06:19 81.247.66.60:3832 -> xxx.yyy.33.253:1433 SYN ******S* Feb 27 10:06:20 81.247.66.60:3867 -> xxx.yyy.33.254:1433 SYN ******S* Feb 27 10:06:20 81.247.66.60:3874 -> xxx.yyy.33.255:1433 SYN ******S* 8084 Feb 27 22:50:43 218.47.114.19:62232 -> xxx.yyy.72.164:5554 SYN ******S* Feb 27 22:50:43 218.47.114.19:62241 -> xxx.yyy.72.154:5554 SYN ******S* Feb 27 22:50:43 218.47.114.19:62243 -> xxx.yyy.72.152:5554 SYN ******S* Feb 27 22:50:43 218.47.114.19:62262 -> xxx.yyy.72.133:5554 SYN ******S* Feb 27 22:50:43 218.47.114.19:62275 -> xxx.yyy.72.169:5554 SYN ******S* Feb 27 22:50:43 218.47.114.19:62273 -> xxx.yyy.72.167:5554 SYN ******S* Feb 27 22:50:44 218.47.114.19:62440 -> xxx.yyy.72.167:1023 SYN ******S* Feb 27 22:50:46 218.47.114.19:62914 -> xxx.yyy.72.167:9898 SYN ******S* [...] Feb 27 22:52:48 218.47.114.19:64561 -> xxx.yyy.92.203:9898 SYN ******S* Feb 27 22:52:48 218.47.114.19:64580 -> xxx.yyy.92.210:9898 SYN ******S* Feb 27 22:52:48 218.47.114.19:64579 -> xxx.yyy.92.209:9898 SYN ******S* Feb 27 22:52:48 218.47.114.19:64572 -> xxx.yyy.92.202:9898 SYN ******S* Feb 27 22:52:48 218.47.114.19:64581 -> xxx.yyy.92.211:9898 SYN ******S* Feb 27 22:52:49 218.47.114.19:64724 -> xxx.yyy.92.214:9898 SYN ******S* Feb 27 22:52:49 218.47.114.19:64730 -> xxx.yyy.92.239:9898 SYN ******S* Feb 27 22:52:49 218.47.114.19:64739 -> xxx.yyy.92.238:9898 SYN ******S* Feb 27 22:52:49 218.47.114.19:64737 -> xxx.yyy.92.245:9898 SYN ******S* 7802 Feb 27 12:26:00 80.35.17.128:38999 -> xxx.yyy.1.12:1433 SYN ******S* Feb 27 12:26:00 80.35.17.128:38868 -> xxx.yyy.1.13:1433 SYN ******S* Feb 27 12:26:03 80.35.17.128:39001 -> xxx.yyy.1.20:1433 SYN ******S* Feb 27 12:26:03 80.35.17.128:39002 -> xxx.yyy.1.21:1433 SYN ******S* Feb 27 12:26:03 80.35.17.128:39003 -> xxx.yyy.1.22:1433 SYN ******S* Feb 27 12:26:00 80.35.17.128:38663 -> xxx.yyy.1.26:1433 SYN ******S* Feb 27 12:26:00 80.35.17.128:39004 -> xxx.yyy.1.27:1433 SYN ******S* Feb 27 12:26:00 80.35.17.128:38835 -> xxx.yyy.1.28:1433 SYN ******S* [...] Feb 27 12:47:49 80.35.17.128:38918 -> xxx.yyy.255.50:1433 SYN ******S* Feb 27 12:47:49 80.35.17.128:38534 -> xxx.yyy.255.49:1433 SYN ******S* Feb 27 12:47:50 80.35.17.128:39211 -> xxx.yyy.255.220:1433 SYN ******S* Feb 27 12:47:50 80.35.17.128:39228 -> xxx.yyy.255.223:1433 SYN ******S* Feb 27 12:47:50 80.35.17.128:39196 -> xxx.yyy.255.248:1433 SYN ******S* Feb 27 12:47:52 80.35.17.128:39197 -> xxx.yyy.255.166:1433 SYN ******S* Feb 27 12:47:52 80.35.17.128:39205 -> xxx.yyy.255.175:1433 SYN ******S* Feb 27 12:47:52 80.35.17.128:39225 -> xxx.yyy.255.187:1433 SYN ******S* Feb 27 12:47:52 80.35.17.128:39192 -> xxx.yyy.255.192:1433 SYN ******S* 7463 [...] 7233 Feb 27 22:57:35 222.117.14.223:3315 -> xxx.yyy.174.244:5554 SYN ******S* Feb 27 22:57:38 222.117.14.223:1884 -> xxx.yyy.174.244:9898 SYN ******S* Feb 27 22:57:35 222.117.14.223:3330 -> xxx.yyy.174.230:5554 SYN ******S* Feb 27 22:57:36 222.117.14.223:4100 -> xxx.yyy.174.230:1023 SYN ******S* Feb 27 22:57:35 222.117.14.223:3316 -> xxx.yyy.174.243:5554 SYN ******S* Feb 27 22:57:38 222.117.14.223:1886 -> xxx.yyy.174.243:9898 SYN ******S* Feb 27 22:57:35 222.117.14.223:3345 -> xxx.yyy.174.249:5554 SYN ******S* Feb 27 22:57:36 222.117.14.223:4132 -> xxx.yyy.174.249:1023 SYN ******S* [...] Feb 27 22:58:22 222.117.14.223:3612 -> xxx.yyy.195.2:9898 SYN ******S* Feb 27 22:58:22 222.117.14.223:3636 -> xxx.yyy.195.32:9898 SYN ******S* Feb 27 22:58:22 222.117.14.223:3631 -> xxx.yyy.195.28:9898 SYN ******S* Feb 27 22:58:22 222.117.14.223:3684 -> xxx.yyy.195.44:9898 SYN ******S* Feb 27 22:58:22 222.117.14.223:3623 -> xxx.yyy.195.55:9898 SYN ******S* Feb 27 22:58:22 222.117.14.223:3708 -> xxx.yyy.195.60:9898 SYN ******S* Feb 27 22:58:22 222.117.14.223:3812 -> xxx.yyy.195.85:9898 SYN ******S* Feb 27 22:58:22 222.117.14.223:3838 -> xxx.yyy.195.79:9898 SYN ******S* Feb 27 22:58:22 222.117.14.223:3834 -> xxx.yyy.195.74:9898 SYN ******S* 6218 Feb 27 22:56:31 220.86.186.29:1141 -> xxx.yyy.133.14:5554 SYN ******S* Feb 27 22:56:32 220.86.186.29:1204 -> xxx.yyy.133.24:5554 SYN ******S* Feb 27 22:56:32 220.86.186.29:1206 -> xxx.yyy.133.25:5554 SYN ******S* Feb 27 22:56:33 220.86.186.29:1395 -> xxx.yyy.133.25:1023 SYN ******S* Feb 27 22:56:32 220.86.186.29:1208 -> xxx.yyy.133.26:5554 SYN ******S* Feb 27 22:56:35 220.86.186.29:1772 -> xxx.yyy.133.26:9898 SYN ******S* Feb 27 22:56:32 220.86.186.29:1213 -> xxx.yyy.133.28:5554 SYN ******S* Feb 27 22:56:35 220.86.186.29:1781 -> xxx.yyy.133.28:9898 SYN ******S* [...] Feb 27 23:00:38 220.86.186.29:2541 -> xxx.yyy.152.135:9898 SYN ******S* Feb 27 23:00:36 220.86.186.29:2171 -> xxx.yyy.152.217:1023 SYN ******S* Feb 27 23:00:38 220.86.186.29:2544 -> xxx.yyy.152.217:9898 SYN ******S* Feb 27 23:00:36 220.86.186.29:2170 -> xxx.yyy.152.218:1023 SYN ******S* Feb 27 23:00:37 220.86.186.29:2311 -> xxx.yyy.151.80:9898 SYN ******S* Feb 27 23:00:38 220.86.186.29:2510 -> xxx.yyy.151.120:9898 SYN ******S* Feb 27 23:00:38 220.86.186.29:2517 -> xxx.yyy.151.159:9898 SYN ******S* Feb 27 23:00:38 220.86.186.29:2515 -> xxx.yyy.151.158:9898 SYN ******S* Feb 27 23:00:38 220.86.186.29:2527 -> xxx.yyy.152.21:9898 SYN ******S* 6147 Feb 27 22:56:59 210.91.30.67:2721 -> xxx.yyy.133.235:5554 SYN ******S* Feb 27 22:56:59 210.91.30.67:2732 -> xxx.yyy.133.245:5554 SYN ******S* Feb 27 22:56:59 210.91.30.67:2730 -> xxx.yyy.133.243:5554 SYN ******S* Feb 27 22:57:00 210.91.30.67:3274 -> xxx.yyy.133.243:1023 SYN ******S* Feb 27 22:56:59 210.91.30.67:2735 -> xxx.yyy.133.248:5554 SYN ******S* Feb 27 22:56:59 210.91.30.67:2734 -> xxx.yyy.133.247:5554 SYN ******S* Feb 27 22:57:00 210.91.30.67:3280 -> xxx.yyy.133.247:1023 SYN ******S* Feb 27 22:56:59 210.91.30.67:2737 -> xxx.yyy.133.250:5554 SYN ******S* [...] Feb 27 22:57:44 210.91.30.67:3612 -> xxx.yyy.154.82:9898 SYN ******S* Feb 27 22:57:44 210.91.30.67:3617 -> xxx.yyy.154.86:9898 SYN ******S* Feb 27 22:57:44 210.91.30.67:3625 -> xxx.yyy.154.87:9898 SYN ******S* Feb 27 22:57:44 210.91.30.67:3674 -> xxx.yyy.154.92:9898 SYN ******S* Feb 27 22:57:44 210.91.30.67:3679 -> xxx.yyy.154.93:9898 SYN ******S* Feb 27 22:57:44 210.91.30.67:3701 -> xxx.yyy.154.100:9898 SYN ******S* Feb 27 22:57:45 210.91.30.67:3688 -> xxx.yyy.154.95:9898 SYN ******S* Feb 27 22:57:45 210.91.30.67:3694 -> xxx.yyy.154.98:9898 SYN ******S* 5754 Feb 27 00:00:04 211.94.172.37:22002 -> xxx.yyy.246.118:3127 SYN ******S* Feb 27 00:00:05 211.94.172.37:22002 -> xxx.yyy.246.118:1080 SYN ******S* Feb 27 00:00:05 211.94.172.37:22002 -> xxx.yyy.246.118:3128 SYN ******S* Feb 27 00:00:05 211.94.172.37:22002 -> xxx.yyy.246.119:3127 SYN ******S* Feb 27 00:00:05 211.94.172.37:22002 -> xxx.yyy.246.119:10080 SYN ******S* Feb 27 00:00:05 211.94.172.37:22002 -> xxx.yyy.246.119:3128 SYN ******S* Feb 27 00:00:05 211.94.172.37:22002 -> xxx.yyy.246.120:3127 SYN ******S* Feb 27 00:00:06 211.94.172.37:22002 -> xxx.yyy.246.120:3128 SYN ******S* [...] Feb 27 00:17:52 211.94.172.37:22002 -> xxx.yyy.255.253:10080 SYN ******S* Feb 27 00:17:52 211.94.172.37:22002 -> xxx.yyy.255.253:3128 SYN ******S* Feb 27 00:17:53 211.94.172.37:22002 -> xxx.yyy.255.254:3127 SYN ******S* Feb 27 00:17:53 211.94.172.37:22002 -> xxx.yyy.255.254:1080 SYN ******S* Feb 27 00:17:53 211.94.172.37:22002 -> xxx.yyy.255.254:3128 SYN ******S* Feb 27 00:17:53 211.94.172.37:22002 -> xxx.yyy.255.255:3127 SYN ******S* Feb 27 00:17:53 211.94.172.37:22002 -> xxx.yyy.255.255:1080 SYN ******S* Feb 27 00:17:53 211.94.172.37:22002 -> xxx.yyy.255.255:10080 SYN ******S* Feb 27 00:17:53 211.94.172.37:22002 -> xxx.yyy.255.255:3128 SYN ******S* 5612 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions