[LOGS] Summary of large-scale portscanning detects
[email protected] Wed, 02 Mar 2005 08:40:00 -0600 (CST)
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. [...] 87905 Mar 1 01:45:23 69.158.169.251:1955 -> xxx.yyy.1.1:139 SYN ******S* Mar 1 01:45:23 69.158.169.251:1958 -> xxx.yyy.1.4:139 SYN ******S* Mar 1 01:45:23 69.158.169.251:1959 -> xxx.yyy.1.5:139 SYN ******S* Mar 1 01:45:20 69.158.169.251:1965 -> xxx.yyy.1.11:139 SYN ******S* Mar 1 01:45:23 69.158.169.251:1966 -> xxx.yyy.1.12:139 SYN ******S* Mar 1 01:45:23 69.158.169.251:1971 -> xxx.yyy.1.17:139 SYN ******S* Mar 1 01:45:20 69.158.169.251:1972 -> xxx.yyy.1.18:139 SYN ******S* Mar 1 01:45:20 69.158.169.251:1973 -> xxx.yyy.1.19:139 SYN ******S* [...] Mar 1 08:49:04 69.158.169.251:4721 -> xxx.yyy.210.193:139 SYN ******S* Mar 1 08:49:07 69.158.169.251:4675 -> xxx.yyy.210.147:139 SYN ******S* Mar 1 08:49:07 69.158.169.251:4688 -> xxx.yyy.210.160:139 SYN ******S* Mar 1 08:49:07 69.158.169.251:4689 -> xxx.yyy.210.161:139 SYN ******S* Mar 1 08:49:07 69.158.169.251:4690 -> xxx.yyy.210.162:139 SYN ******S* Mar 1 08:49:07 69.158.169.251:4684 -> xxx.yyy.210.156:139 SYN ******S* Mar 1 08:49:07 69.158.169.251:4691 -> xxx.yyy.210.163:139 SYN ******S* Mar 1 08:49:07 69.158.169.251:4692 -> xxx.yyy.210.164:139 SYN ******S* Mar 1 08:49:07 69.158.169.251:4693 -> xxx.yyy.210.165:139 SYN ******S* 75060 Mar 1 20:26:13 211.237.116.89:3130 -> xxx.yyy.1.0:1433 SYN ******S* Mar 1 20:26:13 211.237.116.89:3132 -> xxx.yyy.1.1:1433 SYN ******S* Mar 1 20:26:16 211.237.116.89:3139 -> xxx.yyy.1.2:1433 SYN ******S* Mar 1 20:26:16 211.237.116.89:3150 -> xxx.yyy.1.3:1433 SYN ******S* Mar 1 20:26:16 211.237.116.89:3161 -> xxx.yyy.1.8:1433 SYN ******S* Mar 1 20:26:16 211.237.116.89:3165 -> xxx.yyy.1.9:1433 SYN ******S* Mar 1 20:26:13 211.237.116.89:3166 -> xxx.yyy.1.10:1433 SYN ******S* Mar 1 20:26:13 211.237.116.89:3167 -> xxx.yyy.1.11:1433 SYN ******S* [...] Mar 1 23:59:57 211.237.116.89:4176 -> xxx.yyy.238.170:1433 SYN ******S* Mar 1 23:59:58 211.237.116.89:3716 -> xxx.yyy.238.134:1433 SYN ******S* Mar 1 23:59:58 211.237.116.89:4562 -> xxx.yyy.238.190:1433 SYN ******S* Mar 1 23:59:58 211.237.116.89:3749 -> xxx.yyy.238.136:1433 SYN ******S* Mar 1 23:59:58 211.237.116.89:3746 -> xxx.yyy.238.135:1433 SYN ******S* Mar 1 23:59:58 211.237.116.89:3778 -> xxx.yyy.238.137:1433 SYN ******S* Mar 1 23:59:58 211.237.116.89:3810 -> xxx.yyy.238.140:1433 SYN ******S* Mar 1 23:59:58 211.237.116.89:3799 -> xxx.yyy.238.138:1433 SYN ******S* 70441 Mar 1 07:26:28 81.195.76.194:3030 -> xxx.yyy.1.1:3306 SYN ******S* Mar 1 07:26:25 81.195.76.194:3031 -> xxx.yyy.1.2:3306 SYN ******S* Mar 1 07:26:28 81.195.76.194:3032 -> xxx.yyy.1.3:3306 SYN ******S* Mar 1 07:26:28 81.195.76.194:3033 -> xxx.yyy.1.4:3306 SYN ******S* Mar 1 07:26:28 81.195.76.194:3034 -> xxx.yyy.1.5:3306 SYN ******S* Mar 1 07:26:28 81.195.76.194:3035 -> xxx.yyy.1.6:3306 SYN ******S* Mar 1 07:26:28 81.195.76.194:3036 -> xxx.yyy.1.7:3306 SYN ******S* Mar 1 07:26:28 81.195.76.194:3037 -> xxx.yyy.1.8:3306 SYN ******S* [...] Mar 1 07:37:41 81.195.76.194:4220 -> xxx.yyy.255.244:3306 SYN ******S* Mar 1 07:37:41 81.195.76.194:4217 -> xxx.yyy.255.241:3306 SYN ******S* Mar 1 07:37:41 81.195.76.194:4214 -> xxx.yyy.255.238:3306 SYN ******S* Mar 1 07:37:41 81.195.76.194:4224 -> xxx.yyy.255.248:3306 SYN ******S* Mar 1 07:37:41 81.195.76.194:4227 -> xxx.yyy.255.251:3306 SYN ******S* Mar 1 07:37:41 81.195.76.194:4228 -> xxx.yyy.255.252:3306 SYN ******S* Mar 1 07:37:41 81.195.76.194:4225 -> xxx.yyy.255.249:3306 SYN ******S* Mar 1 07:37:41 81.195.76.194:4229 -> xxx.yyy.255.253:3306 SYN ******S* Mar 1 07:37:41 81.195.76.194:4222 -> xxx.yyy.255.246:3306 SYN ******S* 69243 Mar 1 04:05:06 65.162.1.154:4129 -> xxx.yyy.1.1:6101 SYN ******S* Mar 1 04:05:06 65.162.1.154:4144 -> xxx.yyy.1.2:6101 SYN ******S* Mar 1 04:05:06 65.162.1.154:4146 -> xxx.yyy.1.3:6101 SYN ******S* Mar 1 04:05:03 65.162.1.154:4157 -> xxx.yyy.1.4:6101 SYN ******S* Mar 1 04:05:06 65.162.1.154:4171 -> xxx.yyy.1.5:6101 SYN ******S* Mar 1 04:05:06 65.162.1.154:4182 -> xxx.yyy.1.6:6101 SYN ******S* Mar 1 04:05:06 65.162.1.154:4189 -> xxx.yyy.1.7:6101 SYN ******S* Mar 1 04:05:03 65.162.1.154:4209 -> xxx.yyy.1.9:6101 SYN ******S* [...] Mar 1 04:14:37 65.162.1.154:4901 -> xxx.yyy.255.138:6101 SYN ******S* Mar 1 04:14:37 65.162.1.154:4962 -> xxx.yyy.255.142:6101 SYN ******S* Mar 1 04:14:37 65.162.1.154:4854 -> xxx.yyy.255.134:6101 SYN ******S* Mar 1 04:14:37 65.162.1.154:4883 -> xxx.yyy.255.135:6101 SYN ******S* Mar 1 04:14:37 65.162.1.154:4931 -> xxx.yyy.255.139:6101 SYN ******S* Mar 1 04:14:37 65.162.1.154:4944 -> xxx.yyy.255.140:6101 SYN ******S* Mar 1 04:14:37 65.162.1.154:4798 -> xxx.yyy.255.130:6101 SYN ******S* Mar 1 04:14:37 65.162.1.154:4840 -> xxx.yyy.255.132:6101 SYN ******S* 51761 Mar 1 02:27:38 198.209.42.14:3743 -> xxx.yyy.1.1:3306 SYN ******S* Mar 1 02:27:35 198.209.42.14:3744 -> xxx.yyy.1.2:3306 SYN ******S* Mar 1 02:27:38 198.209.42.14:3745 -> xxx.yyy.1.3:3306 SYN ******S* Mar 1 02:27:35 198.209.42.14:3746 -> xxx.yyy.1.4:3306 SYN ******S* Mar 1 02:27:35 198.209.42.14:3747 -> xxx.yyy.1.5:3306 SYN ******S* Mar 1 02:27:38 198.209.42.14:3748 -> xxx.yyy.1.6:3306 SYN ******S* Mar 1 02:27:38 198.209.42.14:3749 -> xxx.yyy.1.7:3306 SYN ******S* Mar 1 02:27:35 198.209.42.14:3750 -> xxx.yyy.1.8:3306 SYN ******S* [...] Mar 1 02:32:24 198.209.42.14:2193 -> xxx.yyy.255.186:3306 SYN ******S* Mar 1 02:32:24 198.209.42.14:2125 -> xxx.yyy.255.119:3306 SYN ******S* Mar 1 02:32:24 198.209.42.14:2209 -> xxx.yyy.255.202:3306 SYN ******S* Mar 1 02:32:24 198.209.42.14:2170 -> xxx.yyy.255.164:3306 SYN ******S* Mar 1 02:32:24 198.209.42.14:2259 -> xxx.yyy.255.251:3306 SYN ******S* Mar 1 02:32:24 198.209.42.14:2260 -> xxx.yyy.255.252:3306 SYN ******S* Mar 1 02:32:24 198.209.42.14:2261 -> xxx.yyy.255.253:3306 SYN ******S* Mar 1 02:32:24 198.209.42.14:2258 -> xxx.yyy.255.250:3306 SYN ******S* Mar 1 02:32:24 198.209.42.14:2262 -> xxx.yyy.255.254:3306 SYN ******S* 48108 Mar 1 15:58:35 66.117.219.228:22002 -> xxx.yyy.1.0:1080 SYN ******S* Mar 1 15:58:35 66.117.219.228:22002 -> xxx.yyy.1.1:1080 SYN ******S* Mar 1 15:58:35 66.117.219.228:22002 -> xxx.yyy.1.1:10080 SYN ******S* Mar 1 15:58:36 66.117.219.228:22002 -> xxx.yyy.1.2:3127 SYN ******S* Mar 1 15:58:36 66.117.219.228:22002 -> xxx.yyy.1.2:1080 SYN ******S* Mar 1 15:58:36 66.117.219.228:22002 -> xxx.yyy.1.2:10080 SYN ******S* Mar 1 15:58:36 66.117.219.228:22002 -> xxx.yyy.1.3:3128 SYN ******S* Mar 1 15:58:37 66.117.219.228:22002 -> xxx.yyy.1.5:3127 SYN ******S* [...] Mar 1 21:02:00 66.117.219.228:22002 -> xxx.yyy.162.87:3127 SYN ******S* Mar 1 21:02:00 66.117.219.228:22002 -> xxx.yyy.162.87:10080 SYN ******S* Mar 1 21:02:01 66.117.219.228:22002 -> xxx.yyy.162.87:3128 SYN ******S* Mar 1 21:02:01 66.117.219.228:22002 -> xxx.yyy.162.88:3128 SYN ******S* Mar 1 21:02:01 66.117.219.228:22002 -> xxx.yyy.162.89:3127 SYN ******S* Mar 1 21:02:01 66.117.219.228:22002 -> xxx.yyy.162.89:1080 SYN ******S* Mar 1 21:02:01 66.117.219.228:22002 -> xxx.yyy.162.89:3128 SYN ******S* Mar 1 21:02:02 66.117.219.228:22002 -> xxx.yyy.162.90:3127 SYN ******S* Mar 1 21:02:02 66.117.219.228:22002 -> xxx.yyy.162.90:1080 SYN ******S* 44840 Mar 1 17:07:01 202.60.229.68:2295 -> xxx.yyy.1.1:3306 SYN ******S* Mar 1 17:07:04 202.60.229.68:2298 -> xxx.yyy.1.4:3306 SYN ******S* Mar 1 17:07:04 202.60.229.68:2299 -> xxx.yyy.1.5:3306 SYN ******S* Mar 1 17:07:04 202.60.229.68:2300 -> xxx.yyy.1.6:3306 SYN ******S* Mar 1 17:07:04 202.60.229.68:2305 -> xxx.yyy.1.11:3306 SYN ******S* Mar 1 17:07:04 202.60.229.68:2306 -> xxx.yyy.1.12:3306 SYN ******S* Mar 1 17:07:01 202.60.229.68:2307 -> xxx.yyy.1.13:3306 SYN ******S* Mar 1 17:07:01 202.60.229.68:2308 -> xxx.yyy.1.14:3306 SYN ******S* [...] Mar 1 17:18:48 202.60.229.68:3842 -> xxx.yyy.255.228:3306 SYN ******S* Mar 1 17:18:48 202.60.229.68:3843 -> xxx.yyy.255.229:3306 SYN ******S* Mar 1 17:18:48 202.60.229.68:3847 -> xxx.yyy.255.233:3306 SYN ******S* Mar 1 17:18:48 202.60.229.68:3856 -> xxx.yyy.255.242:3306 SYN ******S* Mar 1 17:18:48 202.60.229.68:3852 -> xxx.yyy.255.238:3306 SYN ******S* Mar 1 17:18:48 202.60.229.68:3858 -> xxx.yyy.255.244:3306 SYN ******S* Mar 1 17:18:48 202.60.229.68:3854 -> xxx.yyy.255.240:3306 SYN ******S* Mar 1 17:18:48 202.60.229.68:3851 -> xxx.yyy.255.237:3306 SYN ******S* Mar 1 17:18:48 202.60.229.68:3855 -> xxx.yyy.255.241:3306 SYN ******S* 44701 Mar 1 20:03:11 210.0.214.171:4381 -> xxx.yyy.1.1:3306 SYN ******S* Mar 1 20:03:11 210.0.214.171:4383 -> xxx.yyy.1.2:3306 SYN ******S* Mar 1 20:03:12 210.0.214.171:4384 -> xxx.yyy.1.3:3306 SYN ******S* Mar 1 20:03:12 210.0.214.171:4386 -> xxx.yyy.1.5:3306 SYN ******S* Mar 1 20:03:11 210.0.214.171:4389 -> xxx.yyy.1.8:3306 SYN ******S* Mar 1 20:03:11 210.0.214.171:4390 -> xxx.yyy.1.9:3306 SYN ******S* Mar 1 20:03:12 210.0.214.171:4391 -> xxx.yyy.1.10:3306 SYN ******S* Mar 1 20:03:11 210.0.214.171:4392 -> xxx.yyy.1.11:3306 SYN ******S* [...] Mar 1 20:15:32 210.0.214.171:2334 -> xxx.yyy.255.206:3306 SYN ******S* Mar 1 20:15:32 210.0.214.171:2369 -> xxx.yyy.255.238:3306 SYN ******S* Mar 1 20:15:32 210.0.214.171:2366 -> xxx.yyy.255.235:3306 SYN ******S* Mar 1 20:15:32 210.0.214.171:2364 -> xxx.yyy.255.234:3306 SYN ******S* Mar 1 20:15:32 210.0.214.171:2348 -> xxx.yyy.255.219:3306 SYN ******S* Mar 1 20:15:32 210.0.214.171:2382 -> xxx.yyy.255.248:3306 SYN ******S* Mar 1 20:15:32 210.0.214.171:2381 -> xxx.yyy.255.247:3306 SYN ******S* Mar 1 20:15:32 210.0.214.171:2373 -> xxx.yyy.255.242:3306 SYN ******S* Mar 1 20:15:32 210.0.214.171:2374 -> xxx.yyy.255.243:3306 SYN ******S* 44664 Mar 1 01:16:57 196.15.229.175:4370 -> xxx.yyy.1.0:6101 SYN ******S* Mar 1 01:16:57 196.15.229.175:4371 -> xxx.yyy.1.1:6101 SYN ******S* Mar 1 01:16:57 196.15.229.175:4372 -> xxx.yyy.1.2:6101 SYN ******S* Mar 1 01:16:57 196.15.229.175:4373 -> xxx.yyy.1.3:6101 SYN ******S* Mar 1 01:16:57 196.15.229.175:4374 -> xxx.yyy.1.4:6101 SYN ******S* Mar 1 01:16:57 196.15.229.175:4376 -> xxx.yyy.1.6:6101 SYN ******S* Mar 1 01:16:57 196.15.229.175:4377 -> xxx.yyy.1.7:6101 SYN ******S* Mar 1 01:16:57 196.15.229.175:4378 -> xxx.yyy.1.8:6101 SYN ******S* [...] Mar 1 01:57:19 196.15.229.175:4448 -> xxx.yyy.255.249:6101 SYN ******S* Mar 1 01:57:19 196.15.229.175:4450 -> xxx.yyy.255.251:6101 SYN ******S* Mar 1 01:57:19 196.15.229.175:4447 -> xxx.yyy.255.248:6101 SYN ******S* Mar 1 01:57:19 196.15.229.175:4445 -> xxx.yyy.255.246:6101 SYN ******S* Mar 1 01:57:19 196.15.229.175:4451 -> xxx.yyy.255.252:6101 SYN ******S* Mar 1 01:57:19 196.15.229.175:4452 -> xxx.yyy.255.253:6101 SYN ******S* Mar 1 01:57:19 196.15.229.175:4449 -> xxx.yyy.255.250:6101 SYN ******S* Mar 1 01:57:19 196.15.229.175:4446 -> xxx.yyy.255.247:6101 SYN ******S* 44243 Mar 1 16:59:39 67.123.111.135:4375 -> xxx.yyy.1.1:3306 SYN ******S* Mar 1 16:59:36 67.123.111.135:4376 -> xxx.yyy.1.2:3306 SYN ******S* Mar 1 16:59:39 67.123.111.135:4379 -> xxx.yyy.1.5:3306 SYN ******S* Mar 1 16:59:39 67.123.111.135:4383 -> xxx.yyy.1.9:3306 SYN ******S* Mar 1 16:59:36 67.123.111.135:4384 -> xxx.yyy.1.10:3306 SYN ******S* Mar 1 16:59:39 67.123.111.135:4385 -> xxx.yyy.1.11:3306 SYN ******S* Mar 1 16:59:36 67.123.111.135:4386 -> xxx.yyy.1.12:3306 SYN ******S* Mar 1 16:59:39 67.123.111.135:4387 -> xxx.yyy.1.13:3306 SYN ******S* [...] Mar 1 17:11:18 67.123.111.135:3282 -> xxx.yyy.255.240:3306 SYN ******S* Mar 1 17:11:18 67.123.111.135:3279 -> xxx.yyy.255.237:3306 SYN ******S* Mar 1 17:11:18 67.123.111.135:3283 -> xxx.yyy.255.241:3306 SYN ******S* Mar 1 17:11:18 67.123.111.135:3277 -> xxx.yyy.255.235:3306 SYN ******S* Mar 1 17:11:18 67.123.111.135:3280 -> xxx.yyy.255.238:3306 SYN ******S* Mar 1 17:11:18 67.123.111.135:3281 -> xxx.yyy.255.239:3306 SYN ******S* Mar 1 17:11:18 67.123.111.135:3278 -> xxx.yyy.255.236:3306 SYN ******S* Mar 1 17:11:18 67.123.111.135:3296 -> xxx.yyy.255.254:3306 SYN ******S* 43611 Mar 1 04:01:59 210.91.64.20:4316 -> xxx.yyy.1.1:1433 SYN ******S* Mar 1 04:01:59 210.91.64.20:4324 -> xxx.yyy.1.9:1433 SYN ******S* Mar 1 04:01:59 210.91.64.20:4332 -> xxx.yyy.1.17:1433 SYN ******S* Mar 1 04:01:59 210.91.64.20:4334 -> xxx.yyy.1.19:1433 SYN ******S* Mar 1 04:01:59 210.91.64.20:4344 -> xxx.yyy.1.29:1433 SYN ******S* Mar 1 04:01:59 210.91.64.20:4320 -> xxx.yyy.1.5:1433 SYN ******S* Mar 1 04:01:59 210.91.64.20:4349 -> xxx.yyy.1.34:1433 SYN ******S* Mar 1 04:01:59 210.91.64.20:4353 -> xxx.yyy.1.38:1433 SYN ******S* [...] Mar 1 04:22:48 210.91.64.20:3593 -> xxx.yyy.255.205:1433 SYN ******S* Mar 1 04:22:48 210.91.64.20:3617 -> xxx.yyy.255.229:1433 SYN ******S* Mar 1 04:22:48 210.91.64.20:3603 -> xxx.yyy.255.215:1433 SYN ******S* Mar 1 04:22:48 210.91.64.20:3633 -> xxx.yyy.255.245:1433 SYN ******S* Mar 1 04:22:48 210.91.64.20:3619 -> xxx.yyy.255.231:1433 SYN ******S* Mar 1 04:22:48 210.91.64.20:3598 -> xxx.yyy.255.210:1433 SYN ******S* Mar 1 04:22:48 210.91.64.20:3630 -> xxx.yyy.255.242:1433 SYN ******S* Mar 1 04:22:48 210.91.64.20:3615 -> xxx.yyy.255.226:1433 SYN ******S* 40485 Mar 1 22:22:03 209.10.105.121:1569 -> xxx.yyy.1.2:3306 SYN ******S* Mar 1 22:22:06 209.10.105.121:1570 -> xxx.yyy.1.3:3306 SYN ******S* Mar 1 22:22:03 209.10.105.121:1571 -> xxx.yyy.1.4:3306 SYN ******S* Mar 1 22:22:06 209.10.105.121:1572 -> xxx.yyy.1.5:3306 SYN ******S* Mar 1 22:22:06 209.10.105.121:1573 -> xxx.yyy.1.6:3306 SYN ******S* Mar 1 22:22:03 209.10.105.121:1576 -> xxx.yyy.1.9:3306 SYN ******S* Mar 1 22:22:03 209.10.105.121:1577 -> xxx.yyy.1.10:3306 SYN ******S* Mar 1 22:22:03 209.10.105.121:1580 -> xxx.yyy.1.13:3306 SYN ******S* [...] Mar 1 22:33:45 209.10.105.121:4118 -> xxx.yyy.255.243:3306 SYN ******S* Mar 1 22:33:45 209.10.105.121:4116 -> xxx.yyy.255.241:3306 SYN ******S* Mar 1 22:33:45 209.10.105.121:4123 -> xxx.yyy.255.248:3306 SYN ******S* Mar 1 22:33:45 209.10.105.121:4119 -> xxx.yyy.255.244:3306 SYN ******S* Mar 1 22:33:45 209.10.105.121:4127 -> xxx.yyy.255.252:3306 SYN ******S* Mar 1 22:33:45 209.10.105.121:4125 -> xxx.yyy.255.250:3306 SYN ******S* Mar 1 22:33:45 209.10.105.121:4128 -> xxx.yyy.255.253:3306 SYN ******S* Mar 1 22:33:45 209.10.105.121:4129 -> xxx.yyy.255.254:3306 SYN ******S* 39526 Mar 1 22:21:33 216.86.223.4:3172 -> xxx.yyy.1.14:41523 SYN ******S* Mar 1 22:21:33 216.86.223.4:3175 -> xxx.yyy.1.17:41523 SYN ******S* Mar 1 22:21:35 216.86.223.4:3176 -> xxx.yyy.1.18:41523 SYN ******S* Mar 1 22:21:33 216.86.223.4:3179 -> xxx.yyy.1.21:41523 SYN ******S* Mar 1 22:21:32 216.86.223.4:3181 -> xxx.yyy.1.23:41523 SYN ******S* Mar 1 22:21:33 216.86.223.4:3186 -> xxx.yyy.1.28:41523 SYN ******S* Mar 1 22:21:33 216.86.223.4:3187 -> xxx.yyy.1.29:41523 SYN ******S* Mar 1 22:21:32 216.86.223.4:3188 -> xxx.yyy.1.30:41523 SYN ******S* [...] Mar 1 22:33:13 216.86.223.4:2085 -> xxx.yyy.255.238:41523 SYN ******S* Mar 1 22:33:13 216.86.223.4:2090 -> xxx.yyy.255.243:41523 SYN ******S* Mar 1 22:33:13 216.86.223.4:2097 -> xxx.yyy.255.250:41523 SYN ******S* Mar 1 22:33:13 216.86.223.4:2094 -> xxx.yyy.255.247:41523 SYN ******S* Mar 1 22:33:13 216.86.223.4:2091 -> xxx.yyy.255.244:41523 SYN ******S* Mar 1 22:33:13 216.86.223.4:2095 -> xxx.yyy.255.248:41523 SYN ******S* Mar 1 22:33:13 216.86.223.4:2092 -> xxx.yyy.255.245:41523 SYN ******S* Mar 1 22:33:13 216.86.223.4:2101 -> xxx.yyy.255.254:41523 SYN ******S* Mar 1 22:33:13 216.86.223.4:2100 -> xxx.yyy.255.253:41523 SYN ******S* 38884 Mar 1 18:21:04 160.218.76.30:4004 -> xxx.yyy.1.1:3306 SYN ******S* Mar 1 18:21:04 160.218.76.30:4058 -> xxx.yyy.1.5:3306 SYN ******S* Mar 1 18:21:07 160.218.76.30:4116 -> xxx.yyy.1.11:3306 SYN ******S* Mar 1 18:21:07 160.218.76.30:4177 -> xxx.yyy.1.19:3306 SYN ******S* Mar 1 18:21:04 160.218.76.30:4186 -> xxx.yyy.1.20:3306 SYN ******S* Mar 1 18:21:04 160.218.76.30:4187 -> xxx.yyy.1.21:3306 SYN ******S* Mar 1 18:21:07 160.218.76.30:4188 -> xxx.yyy.1.22:3306 SYN ******S* Mar 1 18:21:07 160.218.76.30:4232 -> xxx.yyy.1.23:3306 SYN ******S* [...] Mar 1 18:24:42 160.218.76.30:4824 -> xxx.yyy.255.245:3306 SYN ******S* Mar 1 18:24:42 160.218.76.30:4753 -> xxx.yyy.255.187:3306 SYN ******S* Mar 1 18:24:42 160.218.76.30:4793 -> xxx.yyy.255.221:3306 SYN ******S* Mar 1 18:24:42 160.218.76.30:4777 -> xxx.yyy.255.205:3306 SYN ******S* Mar 1 18:24:42 160.218.76.30:4790 -> xxx.yyy.255.218:3306 SYN ******S* Mar 1 18:24:42 160.218.76.30:4774 -> xxx.yyy.255.202:3306 SYN ******S* Mar 1 18:24:42 160.218.76.30:4750 -> xxx.yyy.255.184:3306 SYN ******S* Mar 1 18:24:42 160.218.76.30:4818 -> xxx.yyy.255.243:3306 SYN ******S* Mar 1 18:24:43 160.218.76.30:4833 -> xxx.yyy.255.254:3306 SYN ******S* 34154 Mar 1 17:24:20 202.154.234.66:3938 -> xxx.yyy.1.3:4899 SYN ******S* Mar 1 17:24:18 202.154.234.66:3944 -> xxx.yyy.1.6:4899 SYN ******S* Mar 1 17:24:18 202.154.234.66:3940 -> xxx.yyy.1.4:4899 SYN ******S* Mar 1 17:24:18 202.154.234.66:3946 -> xxx.yyy.1.7:4899 SYN ******S* Mar 1 17:24:18 202.154.234.66:3947 -> xxx.yyy.1.8:4899 SYN ******S* Mar 1 17:24:21 202.154.234.66:3950 -> xxx.yyy.1.9:4899 SYN ******S* Mar 1 17:24:18 202.154.234.66:3951 -> xxx.yyy.1.10:4899 SYN ******S* Mar 1 17:24:18 202.154.234.66:3957 -> xxx.yyy.1.14:4899 SYN ******S* [...] Mar 1 17:47:10 202.154.234.66:2429 -> xxx.yyy.255.240:4899 SYN ******S* Mar 1 17:47:10 202.154.234.66:2425 -> xxx.yyy.255.239:4899 SYN ******S* Mar 1 17:47:10 202.154.234.66:2434 -> xxx.yyy.255.242:4899 SYN ******S* Mar 1 17:47:10 202.154.234.66:2442 -> xxx.yyy.255.244:4899 SYN ******S* Mar 1 17:47:10 202.154.234.66:2447 -> xxx.yyy.255.246:4899 SYN ******S* Mar 1 17:47:10 202.154.234.66:2453 -> xxx.yyy.255.249:4899 SYN ******S* Mar 1 17:47:11 202.154.234.66:2459 -> xxx.yyy.255.253:4899 SYN ******S* Mar 1 17:47:11 202.154.234.66:2460 -> xxx.yyy.255.254:4899 SYN ******S* 30597 Mar 1 21:58:02 211.195.0.6:3605 -> xxx.yyy.220.2:5900 SYN ******S* Mar 1 21:58:06 211.195.0.6:3617 -> xxx.yyy.220.4:42 SYN ******S* Mar 1 21:58:04 211.195.0.6:3621 -> xxx.yyy.220.4:5900 SYN ******S* Mar 1 21:58:04 211.195.0.6:3622 -> xxx.yyy.220.4:4899 SYN ******S* Mar 1 21:58:05 211.195.0.6:3629 -> xxx.yyy.220.5:5900 SYN ******S* Mar 1 21:58:05 211.195.0.6:3630 -> xxx.yyy.220.5:4899 SYN ******S* Mar 1 21:58:03 211.195.0.6:3633 -> xxx.yyy.220.6:42 SYN ******S* Mar 1 21:58:03 211.195.0.6:3636 -> xxx.yyy.220.6:6101 SYN ******S* [...] Mar 1 23:59:57 211.195.0.6:3500 -> xxx.yyy.220.52:5900 SYN ******S* Mar 1 23:59:57 211.195.0.6:3501 -> xxx.yyy.220.95:5900 SYN ******S* Mar 1 23:59:58 211.195.0.6:3510 -> xxx.yyy.220.202:5900 SYN ******S* Mar 1 23:59:58 211.195.0.6:3512 -> xxx.yyy.220.44:5900 SYN ******S* Mar 1 23:59:58 211.195.0.6:3514 -> xxx.yyy.220.111:5900 SYN ******S* Mar 1 23:59:58 211.195.0.6:3521 -> xxx.yyy.220.144:5900 SYN ******S* Mar 1 23:59:58 211.195.0.6:3522 -> xxx.yyy.220.158:5900 SYN ******S* Mar 1 23:59:58 211.195.0.6:3555 -> xxx.yyy.220.62:5900 SYN ******S* Mar 1 23:59:58 211.195.0.6:3561 -> xxx.yyy.220.109:5900 SYN ******S* 29550 Mar 1 04:13:54 221.11.81.165:2176 -> xxx.yyy.32.0:1433 SYN ******S* Mar 1 04:13:51 221.11.81.165:2191 -> xxx.yyy.32.2:1433 SYN ******S* Mar 1 04:13:54 221.11.81.165:2196 -> xxx.yyy.32.4:1433 SYN ******S* Mar 1 04:13:54 221.11.81.165:2201 -> xxx.yyy.32.6:1433 SYN ******S* Mar 1 04:13:54 221.11.81.165:2207 -> xxx.yyy.32.8:1433 SYN ******S* Mar 1 04:13:54 221.11.81.165:2188 -> xxx.yyy.32.1:1433 SYN ******S* Mar 1 04:13:54 221.11.81.165:2193 -> xxx.yyy.32.3:1433 SYN ******S* Mar 1 04:13:54 221.11.81.165:2213 -> xxx.yyy.32.10:1433 SYN ******S* [...] Mar 1 05:42:44 221.11.81.165:4589 -> xxx.yyy.111.245:1433 SYN ******S* Mar 1 05:42:44 221.11.81.165:4596 -> xxx.yyy.111.248:1433 SYN ******S* Mar 1 05:42:44 221.11.81.165:4595 -> xxx.yyy.111.247:1433 SYN ******S* Mar 1 05:42:44 221.11.81.165:4599 -> xxx.yyy.111.250:1433 SYN ******S* Mar 1 05:42:45 221.11.81.165:4600 -> xxx.yyy.111.251:1433 SYN ******S* Mar 1 05:42:45 221.11.81.165:4603 -> xxx.yyy.111.252:1433 SYN ******S* Mar 1 05:42:45 221.11.81.165:4607 -> xxx.yyy.111.253:1433 SYN ******S* Mar 1 05:42:46 221.11.81.165:4611 -> xxx.yyy.111.254:1433 SYN ******S* Mar 1 05:42:46 221.11.81.165:4612 -> xxx.yyy.111.255:1433 SYN ******S* 26015 Mar 1 13:57:06 165.246.38.182:4295 -> xxx.yyy.222.1:42 SYN ******S* Mar 1 13:57:03 165.246.38.182:4318 -> xxx.yyy.222.2:5900 SYN ******S* Mar 1 13:57:06 165.246.38.182:4341 -> xxx.yyy.222.3:6101 SYN ******S* Mar 1 13:57:06 165.246.38.182:4336 -> xxx.yyy.222.3:42 SYN ******S* Mar 1 13:57:04 165.246.38.182:4372 -> xxx.yyy.222.4:6101 SYN ******S* Mar 1 13:57:04 165.246.38.182:4374 -> xxx.yyy.222.4:5900 SYN ******S* Mar 1 13:57:06 165.246.38.182:4362 -> xxx.yyy.222.4:42 SYN ******S* Mar 1 13:57:04 165.246.38.182:4402 -> xxx.yyy.222.5:42 SYN ******S* [...] Mar 1 20:58:19 165.246.38.182:2917 -> xxx.yyy.222.12:5900 SYN ******S* Mar 1 20:58:22 165.246.38.182:3101 -> xxx.yyy.222.13:5900 SYN ******S* Mar 1 20:58:23 165.246.38.182:3163 -> xxx.yyy.222.5:5900 SYN ******S* Mar 1 20:58:23 165.246.38.182:3184 -> xxx.yyy.222.34:5900 SYN ******S* Mar 1 20:58:26 165.246.38.182:3361 -> xxx.yyy.222.38:5900 SYN ******S* Mar 1 20:58:27 165.246.38.182:3374 -> xxx.yyy.222.3:5900 SYN ******S* Mar 1 20:58:27 165.246.38.182:3391 -> xxx.yyy.222.37:5900 SYN ******S* Mar 1 20:58:27 165.246.38.182:3392 -> xxx.yyy.222.32:5900 SYN ******S* Mar 1 20:58:27 165.246.38.182:3400 -> xxx.yyy.222.12:5900 SYN ******S* 23994 Mar 1 00:06:16 203.131.121.203:4573 -> xxx.yyy.1.0:139 SYN ******S* Mar 1 00:06:13 203.131.121.203:4576 -> xxx.yyy.1.3:139 SYN ******S* Mar 1 00:06:13 203.131.121.203:4578 -> xxx.yyy.1.5:139 SYN ******S* Mar 1 00:06:13 203.131.121.203:4583 -> xxx.yyy.1.10:139 SYN ******S* Mar 1 00:06:13 203.131.121.203:4588 -> xxx.yyy.1.15:139 SYN ******S* Mar 1 00:06:13 203.131.121.203:4592 -> xxx.yyy.1.19:139 SYN ******S* Mar 1 00:06:13 203.131.121.203:4593 -> xxx.yyy.1.20:139 SYN ******S* Mar 1 00:06:16 203.131.121.203:4596 -> xxx.yyy.1.23:139 SYN ******S* [...] Mar 1 02:59:58 203.131.121.203:3123 -> xxx.yyy.95.97:139 SYN ******S* Mar 1 02:59:58 203.131.121.203:3124 -> xxx.yyy.95.98:139 SYN ******S* Mar 1 02:59:58 203.131.121.203:3126 -> xxx.yyy.95.100:139 SYN ******S* Mar 1 02:59:58 203.131.121.203:3127 -> xxx.yyy.95.101:139 SYN ******S* Mar 1 02:59:58 203.131.121.203:3128 -> xxx.yyy.95.102:139 SYN ******S* Mar 1 02:59:58 203.131.121.203:3129 -> xxx.yyy.95.103:139 SYN ******S* Mar 1 02:59:58 203.131.121.203:3130 -> xxx.yyy.95.104:139 SYN ******S* Mar 1 02:59:58 203.131.121.203:3131 -> xxx.yyy.95.105:139 SYN ******S* Mar 1 02:59:58 203.131.121.203:3134 -> xxx.yyy.95.106:139 SYN ******S* 22894 Mar 1 01:55:23 196.15.229.175:1401 -> xxx.yyy.244.55:6101 SYN ******S* Mar 1 03:05:34 xxx.yyy.244.55:1114 -> xxx.yyy.0.1:3389 SYN ******S* Mar 1 03:05:34 xxx.yyy.244.55:1114 -> xxx.yyy.0.2:3389 SYN ******S* Mar 1 03:05:34 xxx.yyy.244.55:1114 -> xxx.yyy.0.3:3389 SYN ******S* Mar 1 03:05:34 xxx.yyy.244.55:1114 -> xxx.yyy.0.4:3389 SYN ******S* Mar 1 03:05:34 xxx.yyy.244.55:1114 -> xxx.yyy.0.5:3389 SYN ******S* Mar 1 03:05:34 xxx.yyy.244.55:1114 -> xxx.yyy.0.6:3389 SYN ******S* Mar 1 03:05:34 xxx.yyy.244.55:1114 -> xxx.yyy.0.7:3389 SYN ******S* [...] Mar 1 17:10:43 67.123.111.135:3965 -> xxx.yyy.244.55:3306 SYN ******S* Mar 1 17:10:46 67.123.111.135:3965 -> xxx.yyy.244.55:3306 SYN ******S* Mar 1 17:18:13 202.60.229.68:4830 -> xxx.yyy.244.55:3306 SYN ******S* Mar 1 17:46:10 202.154.234.66:4154 -> xxx.yyy.244.55:4899 SYN ******S* Mar 1 20:14:58 210.0.214.171:2771 -> xxx.yyy.244.55:3306 SYN ******S* Mar 1 22:32:38 216.86.223.4:2770 -> xxx.yyy.244.55:41523 SYN ******S* Mar 1 22:33:13 209.10.105.121:1111 -> xxx.yyy.244.55:3306 SYN ******S* Mar 1 22:57:02 218.147.87.5:3368 -> xxx.yyy.244.55:5554 SYN ******S* Mar 1 22:57:05 218.147.87.5:1188 -> xxx.yyy.244.55:9898 SYN ******S* 14472 Mar 1 21:34:31 218.218.143.175:1560 -> xxx.yyy.1.1:139 SYN ******S* Mar 1 21:34:34 218.218.143.175:1564 -> xxx.yyy.1.5:139 SYN ******S* Mar 1 21:34:34 218.218.143.175:1565 -> xxx.yyy.1.6:139 SYN ******S* Mar 1 21:34:31 218.218.143.175:1566 -> xxx.yyy.1.7:139 SYN ******S* Mar 1 21:34:34 218.218.143.175:1567 -> xxx.yyy.1.8:139 SYN ******S* Mar 1 21:34:31 218.218.143.175:1570 -> xxx.yyy.1.11:139 SYN ******S* Mar 1 21:34:34 218.218.143.175:1571 -> xxx.yyy.1.12:139 SYN ******S* Mar 1 21:34:31 218.218.143.175:1574 -> xxx.yyy.1.15:139 SYN ******S* [...] Mar 1 23:59:58 218.218.143.175:2549 -> xxx.yyy.79.79:139 SYN ******S* Mar 1 23:59:58 218.218.143.175:2550 -> xxx.yyy.79.80:139 SYN ******S* Mar 1 23:59:58 218.218.143.175:2551 -> xxx.yyy.79.81:139 SYN ******S* Mar 1 23:59:58 218.218.143.175:2552 -> xxx.yyy.79.82:139 SYN ******S* Mar 1 23:59:58 218.218.143.175:2553 -> xxx.yyy.79.83:139 SYN ******S* Mar 2 00:00:01 218.218.143.175:2556 -> xxx.yyy.79.86:139 SYN ******S* Mar 1 23:59:58 218.218.143.175:2557 -> xxx.yyy.79.87:139 SYN ******S* Mar 2 00:00:00 218.218.143.175:2508 -> xxx.yyy.79.38:139 SYN ******S* Mar 2 00:00:00 218.218.143.175:2512 -> xxx.yyy.79.42:139 SYN ******S* 11795 [...] 10954 Mar 1 21:13:20 211.39.130.233:3032 -> xxx.yyy.1.23:21 SYN ******S* Mar 1 21:13:20 211.39.130.233:3043 -> xxx.yyy.1.33:21 SYN ******S* Mar 1 21:13:20 211.39.130.233:3057 -> xxx.yyy.1.47:21 SYN ******S* Mar 1 21:13:20 211.39.130.233:3065 -> xxx.yyy.1.55:21 SYN ******S* Mar 1 21:13:20 211.39.130.233:3042 -> xxx.yyy.1.82:21 SYN ******S* Mar 1 21:13:20 211.39.130.233:3065 -> xxx.yyy.1.5:21 SYN ******S* Mar 1 21:13:20 211.39.130.233:3044 -> xxx.yyy.1.84:21 SYN ******S* Mar 1 21:13:20 211.39.130.233:3020 -> xxx.yyy.1.111:21 SYN ******S* [...] Mar 1 21:13:41 211.39.130.233:3062 -> xxx.yyy.255.232:21 SYN ******S* Mar 1 21:13:41 211.39.130.233:3019 -> xxx.yyy.255.240:21 SYN ******S* Mar 1 21:13:41 211.39.130.233:3068 -> xxx.yyy.255.238:21 SYN ******S* Mar 1 21:13:41 211.39.130.233:3069 -> xxx.yyy.255.239:21 SYN ******S* Mar 1 21:13:41 211.39.130.233:3064 -> xxx.yyy.255.234:21 SYN ******S* Mar 1 21:13:41 211.39.130.233:3065 -> xxx.yyy.255.235:21 SYN ******S* Mar 1 21:13:41 211.39.130.233:3028 -> xxx.yyy.255.249:21 SYN ******S* Mar 1 21:13:41 211.39.130.233:3029 -> xxx.yyy.255.250:21 SYN ******S* 10868 Mar 1 09:17:49 64.231.249.190:4426 -> xxx.yyy.224.230:139 SYN ******S* Mar 1 09:17:50 64.231.249.190:4430 -> xxx.yyy.224.234:139 SYN ******S* Mar 1 09:17:50 64.231.249.190:4433 -> xxx.yyy.224.237:139 SYN ******S* Mar 1 09:17:53 64.231.249.190:4434 -> xxx.yyy.224.238:139 SYN ******S* Mar 1 09:17:50 64.231.249.190:4443 -> xxx.yyy.224.247:139 SYN ******S* Mar 1 09:17:50 64.231.249.190:4444 -> xxx.yyy.224.248:139 SYN ******S* Mar 1 09:17:53 64.231.249.190:4446 -> xxx.yyy.224.250:139 SYN ******S* Mar 1 09:17:50 64.231.249.190:4447 -> xxx.yyy.224.251:139 SYN ******S* [...] Mar 1 10:20:03 64.231.249.190:4486 -> xxx.yyy.255.185:139 SYN ******S* Mar 1 10:20:03 64.231.249.190:4488 -> xxx.yyy.255.187:139 SYN ******S* Mar 1 10:20:09 64.231.249.190:4453 -> xxx.yyy.255.152:139 SYN ******S* Mar 1 10:20:09 64.231.249.190:4462 -> xxx.yyy.255.161:139 SYN ******S* Mar 1 10:20:09 64.231.249.190:4463 -> xxx.yyy.255.162:139 SYN ******S* Mar 1 10:20:09 64.231.249.190:4460 -> xxx.yyy.255.159:139 SYN ******S* Mar 1 10:20:09 64.231.249.190:4468 -> xxx.yyy.255.167:139 SYN ******S* Mar 1 10:20:09 64.231.249.190:4473 -> xxx.yyy.255.172:139 SYN ******S* Mar 1 10:20:09 64.231.249.190:4467 -> xxx.yyy.255.166:139 SYN ******S* 10684 [...] 10235 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions