[LOGS] Summary of large-scale portscanning detects
[email protected] Sun, 06 Mar 2005 07:36:50 -0600 (CST)
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Mar 5 04:23:34 80.55.172.178:3344 -> xxx.yyy.1.2:3306 SYN ******S* Mar 5 04:23:34 80.55.172.178:3977 -> xxx.yyy.1.3:3306 SYN ******S* Mar 5 04:23:32 80.55.172.178:4021 -> xxx.yyy.1.5:3306 SYN ******S* Mar 5 04:23:35 80.55.172.178:4104 -> xxx.yyy.1.6:3306 SYN ******S* Mar 5 04:23:35 80.55.172.178:4806 -> xxx.yyy.1.8:3306 SYN ******S* Mar 5 04:23:35 80.55.172.178:4848 -> xxx.yyy.1.9:3306 SYN ******S* Mar 5 04:23:33 80.55.172.178:4942 -> xxx.yyy.1.11:3306 SYN ******S* Mar 5 04:23:33 80.55.172.178:4985 -> xxx.yyy.1.12:3306 SYN ******S* [...] Mar 5 23:52:21 80.55.172.178:4835 -> xxx.yyy.255.253:3306 SYN ******S* Mar 5 23:52:21 80.55.172.178:4042 -> xxx.yyy.255.254:3306 SYN ******S* Mar 5 23:52:21 80.55.172.178:4667 -> xxx.yyy.255.236:3306 SYN ******S* Mar 5 23:52:23 80.55.172.178:4664 -> xxx.yyy.255.244:3306 SYN ******S* Mar 5 23:52:23 80.55.172.178:4076 -> xxx.yyy.255.246:3306 SYN ******S* Mar 5 23:52:23 80.55.172.178:4854 -> xxx.yyy.255.247:3306 SYN ******S* Mar 5 23:52:23 80.55.172.178:3880 -> xxx.yyy.255.248:3306 SYN ******S* Mar 5 23:52:24 80.55.172.178:4528 -> xxx.yyy.255.251:3306 SYN ******S* Mar 5 23:52:24 80.55.172.178:4042 -> xxx.yyy.255.254:3306 SYN ******S* 175278 Mar 5 10:58:38 211.101.228.166:4940 -> xxx.yyy.1.0:80 SYN ******S* Mar 5 10:58:38 211.101.228.166:4941 -> xxx.yyy.1.1:80 SYN ******S* Mar 5 10:58:38 211.101.228.166:4942 -> xxx.yyy.1.2:80 SYN ******S* Mar 5 10:58:38 211.101.228.166:4943 -> xxx.yyy.1.3:80 SYN ******S* Mar 5 10:58:41 211.101.228.166:4946 -> xxx.yyy.1.6:80 SYN ******S* Mar 5 10:58:41 211.101.228.166:4944 -> xxx.yyy.1.4:80 SYN ******S* Mar 5 10:58:41 211.101.228.166:4945 -> xxx.yyy.1.5:80 SYN ******S* Mar 5 10:58:41 211.101.228.166:4948 -> xxx.yyy.1.8:80 SYN ******S* [...] Mar 5 11:40:24 211.101.228.166:3554 -> xxx.yyy.255.245:80 SYN ******S* Mar 5 11:40:24 211.101.228.166:3550 -> xxx.yyy.255.241:80 SYN ******S* Mar 5 11:40:24 211.101.228.166:3556 -> xxx.yyy.255.247:80 SYN ******S* Mar 5 11:40:24 211.101.228.166:3555 -> xxx.yyy.255.246:80 SYN ******S* Mar 5 11:40:24 211.101.228.166:3557 -> xxx.yyy.255.248:80 SYN ******S* Mar 5 11:40:24 211.101.228.166:3559 -> xxx.yyy.255.250:80 SYN ******S* Mar 5 11:40:24 211.101.228.166:3558 -> xxx.yyy.255.249:80 SYN ******S* Mar 5 11:40:24 211.101.228.166:3560 -> xxx.yyy.255.251:80 SYN ******S* Mar 5 11:40:24 211.101.228.166:3562 -> xxx.yyy.255.253:80 SYN ******S* 73984 Mar 5 03:50:14 202.60.229.68:3860 -> xxx.yyy.1.1:3306 SYN ******S* Mar 5 03:50:14 202.60.229.68:3861 -> xxx.yyy.1.2:3306 SYN ******S* Mar 5 03:50:14 202.60.229.68:3862 -> xxx.yyy.1.3:3306 SYN ******S* Mar 5 03:50:14 202.60.229.68:3863 -> xxx.yyy.1.4:3306 SYN ******S* Mar 5 03:50:14 202.60.229.68:3864 -> xxx.yyy.1.5:3306 SYN ******S* Mar 5 03:50:14 202.60.229.68:3866 -> xxx.yyy.1.7:3306 SYN ******S* Mar 5 03:50:14 202.60.229.68:3867 -> xxx.yyy.1.8:3306 SYN ******S* Mar 5 03:50:11 202.60.229.68:3868 -> xxx.yyy.1.9:3306 SYN ******S* [...] Mar 5 04:02:57 202.60.229.68:1457 -> xxx.yyy.255.237:3306 SYN ******S* Mar 5 04:02:57 202.60.229.68:1461 -> xxx.yyy.255.241:3306 SYN ******S* Mar 5 04:02:57 202.60.229.68:1470 -> xxx.yyy.255.250:3306 SYN ******S* Mar 5 04:02:57 202.60.229.68:1466 -> xxx.yyy.255.246:3306 SYN ******S* Mar 5 04:02:57 202.60.229.68:1467 -> xxx.yyy.255.247:3306 SYN ******S* Mar 5 04:02:57 202.60.229.68:1468 -> xxx.yyy.255.248:3306 SYN ******S* Mar 5 04:02:57 202.60.229.68:1464 -> xxx.yyy.255.244:3306 SYN ******S* Mar 5 04:02:57 202.60.229.68:1469 -> xxx.yyy.255.249:3306 SYN ******S* Mar 5 04:02:57 202.60.229.68:1465 -> xxx.yyy.255.245:3306 SYN ******S* 70331 Mar 5 06:58:58 82.156.131.205:4850 -> xxx.yyy.1.0:1433 SYN ******S* Mar 5 06:58:58 82.156.131.205:4892 -> xxx.yyy.1.2:1433 SYN ******S* Mar 5 06:58:58 82.156.131.205:4868 -> xxx.yyy.1.1:1433 SYN ******S* Mar 5 06:58:58 82.156.131.205:4928 -> xxx.yyy.1.3:1433 SYN ******S* Mar 5 06:58:58 82.156.131.205:4929 -> xxx.yyy.1.4:1433 SYN ******S* Mar 5 06:58:58 82.156.131.205:4931 -> xxx.yyy.1.5:1433 SYN ******S* Mar 5 06:58:58 82.156.131.205:4936 -> xxx.yyy.1.6:1433 SYN ******S* Mar 5 06:58:58 82.156.131.205:4942 -> xxx.yyy.1.8:1433 SYN ******S* [...] Mar 5 09:35:44 82.156.131.205:3476 -> xxx.yyy.175.208:1433 SYN ******S* Mar 5 09:35:44 82.156.131.205:3147 -> xxx.yyy.175.186:1433 SYN ******S* Mar 5 09:35:44 82.156.131.205:3495 -> xxx.yyy.175.209:1433 SYN ******S* Mar 5 09:35:44 82.156.131.205:3503 -> xxx.yyy.175.210:1433 SYN ******S* Mar 5 09:35:44 82.156.131.205:3155 -> xxx.yyy.175.187:1433 SYN ******S* Mar 5 09:35:44 82.156.131.205:3161 -> xxx.yyy.175.189:1433 SYN ******S* Mar 5 09:35:44 82.156.131.205:3160 -> xxx.yyy.175.188:1433 SYN ******S* Mar 5 09:35:45 82.156.131.205:3174 -> xxx.yyy.175.190:1433 SYN ******S* 65718 Mar 5 14:17:55 194.195.145.67:1423 -> xxx.yyy.1.2:1433 SYN ******S* Mar 5 14:17:55 194.195.145.67:1425 -> xxx.yyy.1.4:1433 SYN ******S* Mar 5 14:17:55 194.195.145.67:1426 -> xxx.yyy.1.5:1433 SYN ******S* Mar 5 14:17:55 194.195.145.67:1427 -> xxx.yyy.1.6:1433 SYN ******S* Mar 5 14:17:55 194.195.145.67:1428 -> xxx.yyy.1.7:1433 SYN ******S* Mar 5 14:17:55 194.195.145.67:1429 -> xxx.yyy.1.8:1433 SYN ******S* Mar 5 14:17:55 194.195.145.67:1430 -> xxx.yyy.1.9:1433 SYN ******S* Mar 5 14:17:55 194.195.145.67:1431 -> xxx.yyy.1.10:1433 SYN ******S* [...] Mar 5 14:29:36 194.195.145.67:4054 -> xxx.yyy.255.232:1433 SYN ******S* Mar 5 14:29:37 194.195.145.67:4071 -> xxx.yyy.255.249:1433 SYN ******S* Mar 5 14:29:37 194.195.145.67:4074 -> xxx.yyy.255.252:1433 SYN ******S* Mar 5 14:29:37 194.195.145.67:4072 -> xxx.yyy.255.250:1433 SYN ******S* Mar 5 14:29:37 194.195.145.67:4073 -> xxx.yyy.255.251:1433 SYN ******S* Mar 5 14:29:37 194.195.145.67:4075 -> xxx.yyy.255.253:1433 SYN ******S* Mar 5 14:29:37 194.195.145.67:4070 -> xxx.yyy.255.248:1433 SYN ******S* Mar 5 14:29:37 194.195.145.67:4076 -> xxx.yyy.255.254:1433 SYN ******S* 53105 Mar 5 16:15:24 200.124.34.145:3576 -> xxx.yyy.1.0:1433 SYN ******S* Mar 5 16:15:24 200.124.34.145:3577 -> xxx.yyy.1.1:1433 SYN ******S* Mar 5 16:15:21 200.124.34.145:3579 -> xxx.yyy.1.3:1433 SYN ******S* Mar 5 16:15:21 200.124.34.145:3580 -> xxx.yyy.1.4:1433 SYN ******S* Mar 5 16:15:24 200.124.34.145:3584 -> xxx.yyy.1.6:1433 SYN ******S* Mar 5 16:15:24 200.124.34.145:3585 -> xxx.yyy.1.7:1433 SYN ******S* Mar 5 16:15:21 200.124.34.145:3587 -> xxx.yyy.1.8:1433 SYN ******S* Mar 5 16:15:21 200.124.34.145:3588 -> xxx.yyy.1.9:1433 SYN ******S* [...] Mar 5 18:25:55 200.124.34.145:4391 -> xxx.yyy.146.122:1433 SYN ******S* Mar 5 18:25:55 200.124.34.145:4390 -> xxx.yyy.146.121:1433 SYN ******S* Mar 5 18:25:55 200.124.34.145:4389 -> xxx.yyy.146.120:1433 SYN ******S* Mar 5 18:25:55 200.124.34.145:4394 -> xxx.yyy.146.125:1433 SYN ******S* Mar 5 18:25:55 200.124.34.145:4393 -> xxx.yyy.146.124:1433 SYN ******S* Mar 5 18:25:55 200.124.34.145:4392 -> xxx.yyy.146.123:1433 SYN ******S* Mar 5 18:25:55 200.124.34.145:4396 -> xxx.yyy.146.127:1433 SYN ******S* Mar 5 18:25:56 200.124.34.145:4711 -> xxx.yyy.146.128:1433 SYN ******S* 34572 Mar 5 07:04:39 216.85.164.10:2755 -> xxx.yyy.64.1:6893 SYN ******S* Mar 5 07:04:39 216.85.164.10:2756 -> xxx.yyy.64.2:6893 SYN ******S* Mar 5 07:04:39 216.85.164.10:2757 -> xxx.yyy.64.3:6893 SYN ******S* Mar 5 07:04:36 216.85.164.10:2758 -> xxx.yyy.64.4:6893 SYN ******S* Mar 5 07:04:39 216.85.164.10:2759 -> xxx.yyy.64.5:6893 SYN ******S* Mar 5 07:04:39 216.85.164.10:2760 -> xxx.yyy.64.6:6893 SYN ******S* Mar 5 07:04:39 216.85.164.10:2761 -> xxx.yyy.64.7:6893 SYN ******S* Mar 5 07:04:39 216.85.164.10:2762 -> xxx.yyy.64.8:6893 SYN ******S* [...] Mar 5 07:08:33 216.85.164.10:2805 -> xxx.yyy.255.248:6893 SYN ******S* Mar 5 07:08:33 216.85.164.10:2802 -> xxx.yyy.255.245:6893 SYN ******S* Mar 5 07:08:33 216.85.164.10:2809 -> xxx.yyy.255.251:6893 SYN ******S* Mar 5 07:08:33 216.85.164.10:2807 -> xxx.yyy.255.250:6893 SYN ******S* Mar 5 07:08:33 216.85.164.10:2811 -> xxx.yyy.255.253:6893 SYN ******S* Mar 5 07:08:33 216.85.164.10:2803 -> xxx.yyy.255.247:6893 SYN ******S* Mar 5 07:08:33 216.85.164.10:2810 -> xxx.yyy.255.254:6893 SYN ******S* Mar 5 07:08:33 216.85.164.10:2808 -> xxx.yyy.255.252:6893 SYN ******S* Mar 5 07:08:33 216.85.164.10:2806 -> xxx.yyy.255.249:6893 SYN ******S* 32250 Mar 5 21:00:58 24.19.140.113:2206 -> xxx.yyy.1.0:1433 SYN ******S* Mar 5 21:00:58 24.19.140.113:2207 -> xxx.yyy.1.1:1433 SYN ******S* Mar 5 21:00:58 24.19.140.113:2208 -> xxx.yyy.1.2:1433 SYN ******S* Mar 5 21:00:58 24.19.140.113:2210 -> xxx.yyy.1.4:1433 SYN ******S* Mar 5 21:00:58 24.19.140.113:2211 -> xxx.yyy.1.5:1433 SYN ******S* Mar 5 21:00:58 24.19.140.113:2214 -> xxx.yyy.1.7:1433 SYN ******S* Mar 5 21:00:58 24.19.140.113:2219 -> xxx.yyy.1.9:1433 SYN ******S* Mar 5 21:00:58 24.19.140.113:2220 -> xxx.yyy.1.10:1433 SYN ******S* [...] Mar 5 22:42:44 24.19.140.113:4725 -> xxx.yyy.111.249:1433 SYN ******S* Mar 5 22:42:45 24.19.140.113:4869 -> xxx.yyy.111.252:1433 SYN ******S* Mar 5 22:42:47 24.19.140.113:1399 -> xxx.yyy.111.253:1433 SYN ******S* Mar 5 22:42:47 24.19.140.113:1420 -> xxx.yyy.111.254:1433 SYN ******S* Mar 5 22:42:47 24.19.140.113:1427 -> xxx.yyy.111.255:1433 SYN ******S* Mar 5 22:42:50 24.19.140.113:1420 -> xxx.yyy.111.254:1433 SYN ******S* Mar 5 22:42:50 24.19.140.113:1427 -> xxx.yyy.111.255:1433 SYN ******S* Mar 5 22:42:56 24.19.140.113:1399 -> xxx.yyy.111.253:1433 SYN ******S* Mar 5 22:42:56 24.19.140.113:1427 -> xxx.yyy.111.255:1433 SYN ******S* 27828 Mar 5 01:12:14 220.111.220.218:4044 -> xxx.yyy.1.2:1433 SYN ******S* Mar 5 01:12:14 220.111.220.218:4055 -> xxx.yyy.1.6:1433 SYN ******S* Mar 5 01:12:11 220.111.220.218:4061 -> xxx.yyy.1.8:1433 SYN ******S* Mar 5 01:12:14 220.111.220.218:4091 -> xxx.yyy.1.21:1433 SYN ******S* Mar 5 01:12:14 220.111.220.218:4104 -> xxx.yyy.1.30:1433 SYN ******S* Mar 5 01:12:14 220.111.220.218:4105 -> xxx.yyy.1.31:1433 SYN ******S* Mar 5 01:12:11 220.111.220.218:4113 -> xxx.yyy.1.39:1433 SYN ******S* Mar 5 01:12:11 220.111.220.218:4114 -> xxx.yyy.1.40:1433 SYN ******S* [...] Mar 5 02:25:15 220.111.220.218:1045 -> xxx.yyy.164.12:1433 SYN ******S* Mar 5 02:25:15 220.111.220.218:1048 -> xxx.yyy.164.13:1433 SYN ******S* Mar 5 02:25:15 220.111.220.218:1051 -> xxx.yyy.164.14:1433 SYN ******S* Mar 5 02:25:15 220.111.220.218:1054 -> xxx.yyy.164.15:1433 SYN ******S* Mar 5 02:25:15 220.111.220.218:1064 -> xxx.yyy.164.16:1433 SYN ******S* Mar 5 02:25:15 220.111.220.218:1068 -> xxx.yyy.164.17:1433 SYN ******S* Mar 5 02:25:15 220.111.220.218:1071 -> xxx.yyy.164.18:1433 SYN ******S* Mar 5 02:25:16 220.111.220.218:1074 -> xxx.yyy.164.19:1433 SYN ******S* Mar 5 02:25:16 220.111.220.218:1077 -> xxx.yyy.164.20:1433 SYN ******S* 26446 Mar 5 07:03:34 216.85.163.10:1211 -> xxx.yyy.10.1:6893 SYN ******S* Mar 5 07:03:32 216.85.163.10:1212 -> xxx.yyy.10.2:6893 SYN ******S* Mar 5 07:03:32 216.85.163.10:1213 -> xxx.yyy.10.3:6893 SYN ******S* Mar 5 07:03:32 216.85.163.10:1214 -> xxx.yyy.10.4:6893 SYN ******S* Mar 5 07:03:32 216.85.163.10:1215 -> xxx.yyy.10.5:6893 SYN ******S* Mar 5 07:03:34 216.85.163.10:1216 -> xxx.yyy.10.6:6893 SYN ******S* Mar 5 07:03:34 216.85.163.10:1217 -> xxx.yyy.10.7:6893 SYN ******S* Mar 5 07:03:34 216.85.163.10:1218 -> xxx.yyy.10.8:6893 SYN ******S* [...] Mar 5 07:07:35 216.85.163.10:3081 -> xxx.yyy.207.184:6893 SYN ******S* Mar 5 07:07:35 216.85.163.10:3097 -> xxx.yyy.207.198:6893 SYN ******S* Mar 5 07:07:35 216.85.163.10:3093 -> xxx.yyy.207.195:6893 SYN ******S* Mar 5 07:07:35 216.85.163.10:3096 -> xxx.yyy.207.199:6893 SYN ******S* Mar 5 07:07:35 216.85.163.10:3094 -> xxx.yyy.207.197:6893 SYN ******S* Mar 5 07:07:35 216.85.163.10:3092 -> xxx.yyy.207.194:6893 SYN ******S* Mar 5 07:07:35 216.85.163.10:3091 -> xxx.yyy.207.192:6893 SYN ******S* Mar 5 07:07:35 216.85.163.10:3083 -> xxx.yyy.207.186:6893 SYN ******S* Mar 5 07:07:35 216.85.163.10:3080 -> xxx.yyy.207.183:6893 SYN ******S* 26092 Mar 5 05:04:49 210.212.206.68:51197 -> xxx.yyy.1.2:111 SYN ******S* Mar 5 05:04:49 210.212.206.68:51203 -> xxx.yyy.1.8:111 SYN ******S* Mar 5 05:04:49 210.212.206.68:51202 -> xxx.yyy.1.7:111 SYN ******S* Mar 5 05:04:49 210.212.206.68:51199 -> xxx.yyy.1.4:111 SYN ******S* Mar 5 05:04:49 210.212.206.68:51196 -> xxx.yyy.1.1:111 SYN ******S* Mar 5 05:04:49 210.212.206.68:51209 -> xxx.yyy.1.14:111 SYN ******S* Mar 5 05:04:49 210.212.206.68:51337 -> xxx.yyy.1.142:111 SYN ******S* Mar 5 05:04:49 210.212.206.68:51208 -> xxx.yyy.1.13:111 SYN ******S* [...] Mar 5 05:08:04 210.212.206.68:60006 -> xxx.yyy.255.252:111 SYN ******S* Mar 5 05:08:04 210.212.206.68:60004 -> xxx.yyy.255.250:111 SYN ******S* Mar 5 05:08:04 210.212.206.68:60002 -> xxx.yyy.255.248:111 SYN ******S* Mar 5 05:08:04 210.212.206.68:60000 -> xxx.yyy.255.246:111 SYN ******S* Mar 5 05:08:04 210.212.206.68:59998 -> xxx.yyy.255.244:111 SYN ******S* Mar 5 05:08:04 210.212.206.68:59996 -> xxx.yyy.255.242:111 SYN ******S* Mar 5 05:08:04 210.212.206.68:59994 -> xxx.yyy.255.240:111 SYN ******S* Mar 5 05:08:04 210.212.206.68:59992 -> xxx.yyy.255.238:111 SYN ******S* 24399 Mar 5 22:56:34 211.45.7.88:2717 -> xxx.yyy.220.1:4899 SYN ******S* Mar 5 22:56:34 211.45.7.88:2724 -> xxx.yyy.220.2:42 SYN ******S* Mar 5 22:56:37 211.45.7.88:2730 -> xxx.yyy.220.2:5900 SYN ******S* Mar 5 22:56:37 211.45.7.88:2729 -> xxx.yyy.220.2:6101 SYN ******S* Mar 5 22:56:34 211.45.7.88:2760 -> xxx.yyy.220.3:4899 SYN ******S* Mar 5 22:56:37 211.45.7.88:2752 -> xxx.yyy.220.3:6101 SYN ******S* Mar 5 22:56:38 211.45.7.88:2792 -> xxx.yyy.220.5:6101 SYN ******S* Mar 5 22:56:36 211.45.7.88:2795 -> xxx.yyy.220.5:4899 SYN ******S* [...] Mar 5 23:59:56 211.45.7.88:1459 -> xxx.yyy.220.180:5900 SYN ******S* Mar 5 23:59:56 211.45.7.88:1462 -> xxx.yyy.220.191:5900 SYN ******S* Mar 5 23:59:56 211.45.7.88:1465 -> xxx.yyy.220.252:5900 SYN ******S* Mar 5 23:59:57 211.45.7.88:1502 -> xxx.yyy.220.248:5900 SYN ******S* Mar 5 23:59:57 211.45.7.88:1538 -> xxx.yyy.220.159:5900 SYN ******S* Mar 5 23:59:57 211.45.7.88:1551 -> xxx.yyy.220.58:5900 SYN ******S* Mar 5 23:59:57 211.45.7.88:1559 -> xxx.yyy.220.46:5900 SYN ******S* Mar 5 23:59:58 211.45.7.88:1598 -> xxx.yyy.220.208:5900 SYN ******S* Mar 5 23:59:58 211.45.7.88:1654 -> xxx.yyy.220.156:5900 SYN ******S* 21182 [...] 20977 Mar 5 07:39:27 219.141.60.130:3014 -> xxx.yyy.1.1:111 SYN ******S* Mar 5 07:39:27 219.141.60.130:3013 -> xxx.yyy.1.0:111 SYN ******S* Mar 5 07:39:27 219.141.60.130:3015 -> xxx.yyy.1.2:111 SYN ******S* Mar 5 07:39:24 219.141.60.130:3017 -> xxx.yyy.1.4:111 SYN ******S* Mar 5 07:39:24 219.141.60.130:3019 -> xxx.yyy.1.6:111 SYN ******S* Mar 5 07:39:24 219.141.60.130:3021 -> xxx.yyy.1.8:111 SYN ******S* Mar 5 07:39:27 219.141.60.130:3016 -> xxx.yyy.1.3:111 SYN ******S* Mar 5 07:39:24 219.141.60.130:3023 -> xxx.yyy.1.10:111 SYN ******S* [...] Mar 5 07:42:40 219.141.60.130:3631 -> xxx.yyy.252.197:111 SYN ******S* Mar 5 07:42:41 219.141.60.130:3821 -> xxx.yyy.253.132:111 SYN ******S* Mar 5 07:42:42 219.141.60.130:4401 -> xxx.yyy.255.202:111 SYN ******S* Mar 5 07:42:42 219.141.60.130:4404 -> xxx.yyy.255.205:111 SYN ******S* Mar 5 07:42:42 219.141.60.130:4407 -> xxx.yyy.255.208:111 SYN ******S* Mar 5 07:42:42 219.141.60.130:4402 -> xxx.yyy.255.203:111 SYN ******S* Mar 5 07:42:42 219.141.60.130:4403 -> xxx.yyy.255.204:111 SYN ******S* Mar 5 07:42:42 219.141.60.130:4438 -> xxx.yyy.255.239:111 SYN ******S* Mar 5 07:42:42 219.141.60.130:4451 -> xxx.yyy.255.252:111 SYN ******S* 20229 Mar 5 19:40:51 200.74.190.5:3616 -> xxx.yyy.166.84:1433 SYN ******S* Mar 5 19:40:51 200.74.190.5:3621 -> xxx.yyy.166.85:1433 SYN ******S* Mar 5 19:40:51 200.74.190.5:3626 -> xxx.yyy.166.86:1433 SYN ******S* Mar 5 19:40:51 200.74.190.5:3631 -> xxx.yyy.166.87:1433 SYN ******S* Mar 5 19:40:51 200.74.190.5:3636 -> xxx.yyy.166.88:1433 SYN ******S* Mar 5 19:40:54 200.74.190.5:3643 -> xxx.yyy.166.89:1433 SYN ******S* Mar 5 19:40:54 200.74.190.5:3648 -> xxx.yyy.166.90:1433 SYN ******S* Mar 5 19:40:51 200.74.190.5:3660 -> xxx.yyy.166.92:1433 SYN ******S* [...] Mar 5 20:22:14 200.74.190.5:4092 -> xxx.yyy.212.131:1433 SYN ******S* Mar 5 20:22:14 200.74.190.5:4094 -> xxx.yyy.212.132:1433 SYN ******S* Mar 5 20:22:14 200.74.190.5:4095 -> xxx.yyy.212.133:1433 SYN ******S* Mar 5 20:22:14 200.74.190.5:4099 -> xxx.yyy.212.134:1433 SYN ******S* Mar 5 20:22:14 200.74.190.5:3987 -> xxx.yyy.212.106:1433 SYN ******S* Mar 5 20:22:14 200.74.190.5:4111 -> xxx.yyy.212.138:1433 SYN ******S* Mar 5 20:22:14 200.74.190.5:4115 -> xxx.yyy.212.139:1433 SYN ******S* Mar 5 20:22:14 200.74.190.5:4116 -> xxx.yyy.212.140:1433 SYN ******S* 19456 [...] 17800 Mar 5 17:15:33 80.201.246.213:2151 -> xxx.yyy.1.211:22 SYN ******S* Mar 5 17:15:33 80.201.246.213:2152 -> xxx.yyy.1.212:22 SYN ******S* Mar 5 17:15:33 80.201.246.213:2153 -> xxx.yyy.1.213:22 SYN ******S* Mar 5 17:15:30 80.201.246.213:2155 -> xxx.yyy.1.215:22 SYN ******S* Mar 5 17:15:33 80.201.246.213:2156 -> xxx.yyy.1.216:22 SYN ******S* Mar 5 17:15:30 80.201.246.213:2157 -> xxx.yyy.1.217:22 SYN ******S* Mar 5 17:15:30 80.201.246.213:2143 -> xxx.yyy.1.203:22 SYN ******S* Mar 5 17:15:33 80.201.246.213:2179 -> xxx.yyy.1.239:22 SYN ******S* [...] Mar 5 18:36:44 80.201.246.213:1170 -> xxx.yyy.233.168:22 SYN ******S* Mar 5 18:36:46 80.201.246.213:1166 -> xxx.yyy.236.24:22 SYN ******S* Mar 5 18:36:46 80.201.246.213:1448 -> xxx.yyy.237.7:22 SYN ******S* Mar 5 18:36:47 80.201.246.213:1169 -> xxx.yyy.241.98:22 SYN ******S* Mar 5 18:36:47 80.201.246.213:1450 -> xxx.yyy.241.106:22 SYN ******S* Mar 5 18:36:47 80.201.246.213:1451 -> xxx.yyy.241.72:22 SYN ******S* Mar 5 18:36:49 80.201.246.213:1452 -> xxx.yyy.233.168:22 SYN ******S* Mar 5 18:36:52 80.201.246.213:1859 -> xxx.yyy.241.98:22 SYN ******S* Mar 5 18:36:52 80.201.246.213:1860 -> xxx.yyy.241.72:22 SYN ******S* 16665 Mar 5 18:36:27 206.74.118.157:2645 -> xxx.yyy.1.1:1433 SYN ******S* Mar 5 18:36:30 206.74.118.157:2647 -> xxx.yyy.1.2:1433 SYN ******S* Mar 5 18:36:30 206.74.118.157:2654 -> xxx.yyy.1.4:1433 SYN ******S* Mar 5 18:36:30 206.74.118.157:2661 -> xxx.yyy.1.5:1433 SYN ******S* Mar 5 18:36:30 206.74.118.157:2663 -> xxx.yyy.1.6:1433 SYN ******S* Mar 5 18:36:28 206.74.118.157:2668 -> xxx.yyy.1.7:1433 SYN ******S* Mar 5 18:36:28 206.74.118.157:2670 -> xxx.yyy.1.8:1433 SYN ******S* Mar 5 18:36:28 206.74.118.157:2674 -> xxx.yyy.1.9:1433 SYN ******S* [...] Mar 5 19:47:18 206.74.118.157:2208 -> xxx.yyy.79.206:1433 SYN ******S* Mar 5 19:47:18 206.74.118.157:2210 -> xxx.yyy.79.207:1433 SYN ******S* Mar 5 19:47:18 206.74.118.157:2212 -> xxx.yyy.79.208:1433 SYN ******S* Mar 5 19:47:19 206.74.118.157:2228 -> xxx.yyy.79.209:1433 SYN ******S* Mar 5 19:47:19 206.74.118.157:2230 -> xxx.yyy.79.210:1433 SYN ******S* Mar 5 19:47:19 206.74.118.157:2240 -> xxx.yyy.79.211:1433 SYN ******S* Mar 5 19:47:19 206.74.118.157:1932 -> xxx.yyy.79.196:1433 SYN ******S* Mar 5 19:47:19 206.74.118.157:1933 -> xxx.yyy.79.197:1433 SYN ******S* Mar 5 19:47:19 206.74.118.157:1947 -> xxx.yyy.79.198:1433 SYN ******S* 15484 Mar 5 19:28:21 202.113.31.179:4545 -> xxx.yyy.1.0:21 SYN ******S* Mar 5 19:28:21 202.113.31.179:4546 -> xxx.yyy.1.1:21 SYN ******S* Mar 5 19:28:21 202.113.31.179:4547 -> xxx.yyy.1.2:21 SYN ******S* Mar 5 19:28:21 202.113.31.179:4549 -> xxx.yyy.1.4:21 SYN ******S* Mar 5 19:28:21 202.113.31.179:4548 -> xxx.yyy.1.3:21 SYN ******S* Mar 5 19:28:21 202.113.31.179:4550 -> xxx.yyy.1.5:21 SYN ******S* Mar 5 19:28:21 202.113.31.179:4560 -> xxx.yyy.1.15:21 SYN ******S* Mar 5 19:28:21 202.113.31.179:4563 -> xxx.yyy.1.18:21 SYN ******S* [...] Mar 5 19:28:40 202.113.31.179:4551 -> xxx.yyy.255.236:21 SYN ******S* Mar 5 19:28:40 202.113.31.179:4556 -> xxx.yyy.255.241:21 SYN ******S* Mar 5 19:28:40 202.113.31.179:4550 -> xxx.yyy.255.235:21 SYN ******S* Mar 5 19:28:40 202.113.31.179:4554 -> xxx.yyy.255.239:21 SYN ******S* Mar 5 19:28:40 202.113.31.179:4553 -> xxx.yyy.255.238:21 SYN ******S* Mar 5 19:28:40 202.113.31.179:4557 -> xxx.yyy.255.242:21 SYN ******S* Mar 5 19:28:40 202.113.31.179:4559 -> xxx.yyy.255.244:21 SYN ******S* Mar 5 19:28:40 202.113.31.179:4558 -> xxx.yyy.255.243:21 SYN ******S* 14398 Mar 5 17:24:32 201.4.237.246:3638 -> xxx.yyy.64.1:1433 SYN ******S* Mar 5 17:24:32 201.4.237.246:3642 -> xxx.yyy.64.3:1433 SYN ******S* Mar 5 17:24:32 201.4.237.246:3643 -> xxx.yyy.64.4:1433 SYN ******S* Mar 5 17:24:32 201.4.237.246:3644 -> xxx.yyy.64.5:1433 SYN ******S* Mar 5 17:24:32 201.4.237.246:3646 -> xxx.yyy.64.7:1433 SYN ******S* Mar 5 17:24:32 201.4.237.246:3645 -> xxx.yyy.64.6:1433 SYN ******S* Mar 5 17:24:32 201.4.237.246:3647 -> xxx.yyy.64.8:1433 SYN ******S* Mar 5 17:24:32 201.4.237.246:3649 -> xxx.yyy.64.9:1433 SYN ******S* [...] Mar 5 17:48:21 201.4.237.246:3247 -> xxx.yyy.90.148:1433 SYN ******S* Mar 5 17:48:22 201.4.237.246:3253 -> xxx.yyy.90.152:1433 SYN ******S* Mar 5 17:48:22 201.4.237.246:3063 -> xxx.yyy.90.69:1433 SYN ******S* Mar 5 17:48:22 201.4.237.246:3060 -> xxx.yyy.90.67:1433 SYN ******S* Mar 5 17:48:22 201.4.237.246:3263 -> xxx.yyy.90.158:1433 SYN ******S* Mar 5 17:48:22 201.4.237.246:3264 -> xxx.yyy.90.159:1433 SYN ******S* Mar 5 17:48:22 201.4.237.246:3265 -> xxx.yyy.90.160:1433 SYN ******S* Mar 5 17:48:22 201.4.237.246:3267 -> xxx.yyy.90.162:1433 SYN ******S* 12704 Mar 5 23:05:54 60.40.152.254:3248 -> xxx.yyy.194.127:5554 SYN ******S* Mar 5 23:05:55 60.40.152.254:3403 -> xxx.yyy.194.127:1023 SYN ******S* Mar 5 23:05:54 60.40.152.254:3249 -> xxx.yyy.194.128:5554 SYN ******S* Mar 5 23:05:55 60.40.152.254:3404 -> xxx.yyy.194.128:1023 SYN ******S* Mar 5 23:05:54 60.40.152.254:3256 -> xxx.yyy.194.124:5554 SYN ******S* Mar 5 23:05:55 60.40.152.254:3406 -> xxx.yyy.194.124:1023 SYN ******S* Mar 5 23:05:57 60.40.152.254:4122 -> xxx.yyy.194.124:9898 SYN ******S* Mar 5 23:05:54 60.40.152.254:3257 -> xxx.yyy.194.125:5554 SYN ******S* [...] Mar 5 23:09:24 60.40.152.254:2305 -> xxx.yyy.196.49:9898 SYN ******S* Mar 5 23:09:24 60.40.152.254:2311 -> xxx.yyy.196.55:9898 SYN ******S* Mar 5 23:09:24 60.40.152.254:2312 -> xxx.yyy.196.57:9898 SYN ******S* Mar 5 23:09:24 60.40.152.254:2315 -> xxx.yyy.196.58:9898 SYN ******S* Mar 5 23:09:24 60.40.152.254:2323 -> xxx.yyy.196.52:9898 SYN ******S* Mar 5 23:09:24 60.40.152.254:2324 -> xxx.yyy.196.60:9898 SYN ******S* Mar 5 23:09:24 60.40.152.254:2332 -> xxx.yyy.196.56:9898 SYN ******S* Mar 5 23:09:24 60.40.152.254:2334 -> xxx.yyy.196.59:9898 SYN ******S* Mar 5 23:09:25 60.40.152.254:2434 -> xxx.yyy.196.61:9898 SYN ******S* 12104 Mar 5 07:03:23 216.85.162.18:1961 -> xxx.yyy.1.1:6893 SYN ******S* Mar 5 07:03:23 216.85.162.18:1962 -> xxx.yyy.1.2:6893 SYN ******S* Mar 5 07:03:23 216.85.162.18:1963 -> xxx.yyy.1.3:6893 SYN ******S* Mar 5 07:03:25 216.85.162.18:1964 -> xxx.yyy.1.4:6893 SYN ******S* Mar 5 07:03:25 216.85.162.18:1965 -> xxx.yyy.1.5:6893 SYN ******S* Mar 5 07:03:22 216.85.162.18:1966 -> xxx.yyy.1.6:6893 SYN ******S* Mar 5 07:03:25 216.85.162.18:1967 -> xxx.yyy.1.7:6893 SYN ******S* Mar 5 07:03:23 216.85.162.18:1968 -> xxx.yyy.1.8:6893 SYN ******S* [...] Mar 5 07:06:30 216.85.162.18:1493 -> xxx.yyy.154.88:6893 SYN ******S* Mar 5 07:06:30 216.85.162.18:1509 -> xxx.yyy.154.104:6893 SYN ******S* Mar 5 07:06:30 216.85.162.18:1570 -> xxx.yyy.154.164:6893 SYN ******S* Mar 5 07:06:30 216.85.162.18:1569 -> xxx.yyy.154.163:6893 SYN ******S* Mar 5 07:06:30 216.85.162.18:1612 -> xxx.yyy.154.205:6893 SYN ******S* Mar 5 07:06:30 216.85.162.18:1655 -> xxx.yyy.154.248:6893 SYN ******S* Mar 5 07:06:30 216.85.162.18:1657 -> xxx.yyy.154.250:6893 SYN ******S* Mar 5 07:06:30 216.85.162.18:1672 -> xxx.yyy.155.12:6893 SYN ******S* Mar 5 07:06:30 216.85.162.18:1656 -> xxx.yyy.154.249:6893 SYN ******S* 11962 Mar 5 08:39:10 64.229.143.173:1956 -> xxx.yyy.15.26:139 SYN ******S* Mar 5 08:39:10 64.229.143.173:1957 -> xxx.yyy.15.27:139 SYN ******S* Mar 5 08:39:10 64.229.143.173:1958 -> xxx.yyy.15.28:139 SYN ******S* Mar 5 08:39:10 64.229.143.173:1959 -> xxx.yyy.15.29:139 SYN ******S* Mar 5 08:39:10 64.229.143.173:1961 -> xxx.yyy.15.31:139 SYN ******S* Mar 5 08:39:10 64.229.143.173:1960 -> xxx.yyy.15.30:139 SYN ******S* Mar 5 08:39:10 64.229.143.173:1962 -> xxx.yyy.15.32:139 SYN ******S* Mar 5 08:39:10 64.229.143.173:1970 -> xxx.yyy.15.40:139 SYN ******S* [...] Mar 5 10:31:29 64.229.143.173:4771 -> xxx.yyy.76.79:139 SYN ******S* Mar 5 10:31:30 64.229.143.173:4778 -> xxx.yyy.76.86:139 SYN ******S* Mar 5 10:31:30 64.229.143.173:4775 -> xxx.yyy.76.83:139 SYN ******S* Mar 5 10:31:30 64.229.143.173:4779 -> xxx.yyy.76.87:139 SYN ******S* Mar 5 10:31:30 64.229.143.173:4773 -> xxx.yyy.76.81:139 SYN ******S* Mar 5 10:31:30 64.229.143.173:4777 -> xxx.yyy.76.85:139 SYN ******S* Mar 5 10:31:30 64.229.143.173:4774 -> xxx.yyy.76.82:139 SYN ******S* Mar 5 10:31:30 64.229.143.173:4781 -> xxx.yyy.76.89:139 SYN ******S* Mar 5 10:31:30 64.229.143.173:4780 -> xxx.yyy.76.88:139 SYN ******S* 11784 Mar 5 22:57:57 220.73.98.128:4385 -> xxx.yyy.215.239:5554 SYN ******S* Mar 5 22:57:57 220.73.98.128:4375 -> xxx.yyy.215.246:5554 SYN ******S* Mar 5 22:57:58 220.73.98.128:1194 -> xxx.yyy.215.246:1023 SYN ******S* Mar 5 22:57:57 220.73.98.128:4380 -> xxx.yyy.215.243:5554 SYN ******S* Mar 5 22:57:58 220.73.98.128:1198 -> xxx.yyy.215.243:1023 SYN ******S* Mar 5 22:58:01 220.73.98.128:2224 -> xxx.yyy.215.243:9898 SYN ******S* Mar 5 22:57:57 220.73.98.128:4382 -> xxx.yyy.215.241:5554 SYN ******S* Mar 5 22:57:58 220.73.98.128:1210 -> xxx.yyy.215.241:1023 SYN ******S* [...] Mar 5 22:58:48 220.73.98.128:3014 -> xxx.yyy.235.221:9898 SYN ******S* Mar 5 22:58:48 220.73.98.128:3040 -> xxx.yyy.235.229:9898 SYN ******S* Mar 5 22:58:48 220.73.98.128:3087 -> xxx.yyy.235.235:9898 SYN ******S* Mar 5 22:58:48 220.73.98.128:3080 -> xxx.yyy.235.233:9898 SYN ******S* Mar 5 22:58:48 220.73.98.128:3099 -> xxx.yyy.235.231:9898 SYN ******S* Mar 5 22:58:48 220.73.98.128:3104 -> xxx.yyy.236.1:9898 SYN ******S* Mar 5 22:58:48 220.73.98.128:3107 -> xxx.yyy.235.252:9898 SYN ******S* Mar 5 22:58:48 220.73.98.128:3135 -> xxx.yyy.235.255:9898 SYN ******S* Mar 5 22:58:48 220.73.98.128:3210 -> xxx.yyy.236.19:9898 SYN ******S* 10814 Mar 5 14:15:40 202.51.98.216:3036 -> xxx.yyy.1.2:6101 SYN ******S* Mar 5 14:15:40 202.51.98.216:3037 -> xxx.yyy.1.3:6101 SYN ******S* Mar 5 14:15:40 202.51.98.216:3045 -> xxx.yyy.1.10:6101 SYN ******S* Mar 5 14:15:40 202.51.98.216:3051 -> xxx.yyy.1.16:6101 SYN ******S* Mar 5 14:15:40 202.51.98.216:3052 -> xxx.yyy.1.17:6101 SYN ******S* Mar 5 14:15:40 202.51.98.216:3059 -> xxx.yyy.1.24:6101 SYN ******S* Mar 5 14:15:40 202.51.98.216:3068 -> xxx.yyy.1.33:6101 SYN ******S* Mar 5 14:15:40 202.51.98.216:3069 -> xxx.yyy.1.34:6101 SYN ******S* [...] Mar 5 14:26:40 202.51.98.216:2128 -> xxx.yyy.255.226:6101 SYN ******S* Mar 5 14:26:40 202.51.98.216:2132 -> xxx.yyy.255.230:6101 SYN ******S* Mar 5 14:26:40 202.51.98.216:2133 -> xxx.yyy.255.231:6101 SYN ******S* Mar 5 14:26:40 202.51.98.216:2142 -> xxx.yyy.255.240:6101 SYN ******S* Mar 5 14:26:40 202.51.98.216:2143 -> xxx.yyy.255.241:6101 SYN ******S* Mar 5 14:26:40 202.51.98.216:2146 -> xxx.yyy.255.244:6101 SYN ******S* Mar 5 14:26:40 202.51.98.216:2147 -> xxx.yyy.255.245:6101 SYN ******S* Mar 5 14:26:40 202.51.98.216:2149 -> xxx.yyy.255.247:6101 SYN ******S* Mar 5 14:26:40 202.51.98.216:2159 -> xxx.yyy.255.254:6101 SYN ******S* 10498 Mar 5 22:55:04 60.236.27.115:2344 -> xxx.yyy.236.78:5554 SYN ******S* Mar 5 22:55:05 60.236.27.115:2802 -> xxx.yyy.236.78:1023 SYN ******S* Mar 5 22:55:04 60.236.27.115:2339 -> xxx.yyy.236.76:5554 SYN ******S* Mar 5 22:55:05 60.236.27.115:2799 -> xxx.yyy.236.76:1023 SYN ******S* Mar 5 22:55:05 60.236.27.115:2392 -> xxx.yyy.236.80:5554 SYN ******S* Mar 5 22:55:05 60.236.27.115:2423 -> xxx.yyy.236.83:5554 SYN ******S* Mar 5 22:55:06 60.236.27.115:2902 -> xxx.yyy.236.83:1023 SYN ******S* Mar 5 22:55:08 60.236.27.115:3891 -> xxx.yyy.236.83:9898 SYN ******S* [...] Mar 5 22:55:50 60.236.27.115:2820 -> xxx.yyy.255.244:9898 SYN ******S* Mar 5 22:55:50 60.236.27.115:2822 -> xxx.yyy.255.245:9898 SYN ******S* Mar 5 22:55:50 60.236.27.115:2823 -> xxx.yyy.255.246:9898 SYN ******S* Mar 5 22:55:50 60.236.27.115:2825 -> xxx.yyy.255.248:9898 SYN ******S* Mar 5 22:55:50 60.236.27.115:2828 -> xxx.yyy.255.251:9898 SYN ******S* Mar 5 22:55:50 60.236.27.115:2826 -> xxx.yyy.255.249:9898 SYN ******S* Mar 5 22:55:50 60.236.27.115:2827 -> xxx.yyy.255.250:9898 SYN ******S* Mar 5 22:55:50 60.236.27.115:2829 -> xxx.yyy.255.252:9898 SYN ******S* Mar 5 22:55:50 60.236.27.115:2842 -> xxx.yyy.255.254:9898 SYN ******S* 10427 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions