[LOGS] Summary of large-scale portscanning detects
[email protected] Fri, 04 Mar 2005 13:41:12 -0600 (CST)
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Mar 3 04:36:22 80.55.172.178:3946 -> xxx.yyy.1.1:3306 SYN ******S* Mar 3 04:36:25 80.55.172.178:3077 -> xxx.yyy.1.3:3306 SYN ******S* Mar 3 04:36:22 80.55.172.178:3121 -> xxx.yyy.1.5:3306 SYN ******S* Mar 3 04:36:22 80.55.172.178:3166 -> xxx.yyy.1.6:3306 SYN ******S* Mar 3 04:36:23 80.55.172.178:3916 -> xxx.yyy.1.8:3306 SYN ******S* Mar 3 04:36:23 80.55.172.178:4090 -> xxx.yyy.1.9:3306 SYN ******S* Mar 3 04:36:26 80.55.172.178:4142 -> xxx.yyy.1.11:3306 SYN ******S* Mar 3 04:36:24 80.55.172.178:4187 -> xxx.yyy.1.12:3306 SYN ******S* [...] Mar 3 19:15:07 80.55.172.178:4509 -> xxx.yyy.255.233:3306 SYN ******S* Mar 3 19:15:07 80.55.172.178:4782 -> xxx.yyy.255.252:3306 SYN ******S* Mar 3 19:15:07 80.55.172.178:4551 -> xxx.yyy.255.234:3306 SYN ******S* Mar 3 19:15:07 80.55.172.178:4826 -> xxx.yyy.255.253:3306 SYN ******S* Mar 3 19:15:07 80.55.172.178:4595 -> xxx.yyy.255.235:3306 SYN ******S* Mar 3 19:15:10 80.55.172.178:4855 -> xxx.yyy.255.254:3306 SYN ******S* Mar 3 19:15:07 80.55.172.178:4674 -> xxx.yyy.255.237:3306 SYN ******S* Mar 3 19:15:08 80.55.172.178:3638 -> xxx.yyy.255.243:3306 SYN ******S* Mar 3 19:15:09 80.55.172.178:4063 -> xxx.yyy.255.248:3306 SYN ******S* 114429 Mar 3 18:03:50 218.91.212.10:37590 -> xxx.yyy.14.202:1433 SYN ******S* Mar 3 18:03:50 218.91.212.10:37596 -> xxx.yyy.14.203:1433 SYN ******S* Mar 3 18:03:50 218.91.212.10:37608 -> xxx.yyy.14.205:1433 SYN ******S* Mar 3 18:03:50 218.91.212.10:37638 -> xxx.yyy.14.210:1433 SYN ******S* Mar 3 18:03:50 218.91.212.10:37644 -> xxx.yyy.14.211:1433 SYN ******S* Mar 3 18:03:50 218.91.212.10:37656 -> xxx.yyy.14.213:1433 SYN ******S* Mar 3 18:03:50 218.91.212.10:37686 -> xxx.yyy.14.218:1433 SYN ******S* Mar 3 18:03:50 218.91.212.10:37698 -> xxx.yyy.14.220:1433 SYN ******S* [...] Mar 3 21:38:44 218.91.212.10:63206 -> xxx.yyy.255.246:1433 SYN ******S* Mar 3 21:38:44 218.91.212.10:63256 -> xxx.yyy.255.247:1433 SYN ******S* Mar 3 21:38:45 218.91.212.10:63274 -> xxx.yyy.255.249:1433 SYN ******S* Mar 3 21:38:45 218.91.212.10:63272 -> xxx.yyy.255.248:1433 SYN ******S* Mar 3 21:38:45 218.91.212.10:63294 -> xxx.yyy.255.250:1433 SYN ******S* Mar 3 21:38:45 218.91.212.10:63338 -> xxx.yyy.255.252:1433 SYN ******S* Mar 3 21:38:45 218.91.212.10:63348 -> xxx.yyy.255.253:1433 SYN ******S* Mar 3 21:38:45 218.91.212.10:63390 -> xxx.yyy.255.254:1433 SYN ******S* 62454 [...] 55896 Mar 3 14:34:57 218.101.14.31:56661 -> xxx.yyy.1.0:1433 SYN ******S* Mar 3 14:34:57 218.101.14.31:56670 -> xxx.yyy.1.4:1433 SYN ******S* Mar 3 14:34:57 218.101.14.31:56672 -> xxx.yyy.1.5:1433 SYN ******S* Mar 3 14:34:57 218.101.14.31:56674 -> xxx.yyy.1.6:1433 SYN ******S* Mar 3 14:34:57 218.101.14.31:56676 -> xxx.yyy.1.8:1433 SYN ******S* Mar 3 14:34:58 218.101.14.31:56677 -> xxx.yyy.1.9:1433 SYN ******S* Mar 3 14:34:58 218.101.14.31:56680 -> xxx.yyy.1.12:1433 SYN ******S* Mar 3 14:34:58 218.101.14.31:56691 -> xxx.yyy.1.14:1433 SYN ******S* [...] Mar 3 18:08:20 218.101.14.31:54038 -> xxx.yyy.231.189:1433 SYN ******S* Mar 3 18:08:21 218.101.14.31:54047 -> xxx.yyy.231.195:1433 SYN ******S* Mar 3 18:08:22 218.101.14.31:54060 -> xxx.yyy.231.199:1433 SYN ******S* Mar 3 18:08:23 218.101.14.31:54074 -> xxx.yyy.231.204:1433 SYN ******S* Mar 3 18:08:24 218.101.14.31:54081 -> xxx.yyy.231.207:1433 SYN ******S* Mar 3 18:08:25 218.101.14.31:54092 -> xxx.yyy.231.211:1433 SYN ******S* Mar 3 18:08:26 218.101.14.31:54112 -> xxx.yyy.231.217:1433 SYN ******S* Mar 3 18:08:26 218.101.14.31:54114 -> xxx.yyy.231.218:1433 SYN ******S* 54807 Mar 3 01:53:23 203.234.2.180:1416 -> xxx.yyy.1.1:3306 SYN ******S* Mar 3 01:53:26 203.234.2.180:1419 -> xxx.yyy.1.4:3306 SYN ******S* Mar 3 01:53:26 203.234.2.180:1421 -> xxx.yyy.1.6:3306 SYN ******S* Mar 3 01:53:23 203.234.2.180:1422 -> xxx.yyy.1.7:3306 SYN ******S* Mar 3 01:53:26 203.234.2.180:1427 -> xxx.yyy.1.12:3306 SYN ******S* Mar 3 01:53:26 203.234.2.180:1428 -> xxx.yyy.1.13:3306 SYN ******S* Mar 3 01:53:26 203.234.2.180:1429 -> xxx.yyy.1.14:3306 SYN ******S* Mar 3 01:53:26 203.234.2.180:1431 -> xxx.yyy.1.16:3306 SYN ******S* [...] Mar 3 02:05:04 203.234.2.180:3690 -> xxx.yyy.255.232:3306 SYN ******S* Mar 3 02:05:04 203.234.2.180:3700 -> xxx.yyy.255.242:3306 SYN ******S* Mar 3 02:05:04 203.234.2.180:3701 -> xxx.yyy.255.243:3306 SYN ******S* Mar 3 02:05:04 203.234.2.180:3702 -> xxx.yyy.255.244:3306 SYN ******S* Mar 3 02:05:04 203.234.2.180:3699 -> xxx.yyy.255.241:3306 SYN ******S* Mar 3 02:05:04 203.234.2.180:3705 -> xxx.yyy.255.247:3306 SYN ******S* Mar 3 02:05:04 203.234.2.180:3704 -> xxx.yyy.255.246:3306 SYN ******S* Mar 3 02:05:04 203.234.2.180:3711 -> xxx.yyy.255.253:3306 SYN ******S* Mar 3 02:05:04 203.234.2.180:3708 -> xxx.yyy.255.250:3306 SYN ******S* 51314 [...] 43481 Mar 3 05:21:54 24.202.175.228:3846 -> xxx.yyy.222.1:42 SYN ******S* Mar 3 05:21:54 24.202.175.228:3849 -> xxx.yyy.222.1:6101 SYN ******S* Mar 3 05:21:54 24.202.175.228:3850 -> xxx.yyy.222.1:5900 SYN ******S* Mar 3 05:21:54 24.202.175.228:3852 -> xxx.yyy.222.1:4899 SYN ******S* Mar 3 05:21:54 24.202.175.228:3855 -> xxx.yyy.222.2:42 SYN ******S* Mar 3 05:21:54 24.202.175.228:3858 -> xxx.yyy.222.2:6101 SYN ******S* Mar 3 05:21:54 24.202.175.228:3859 -> xxx.yyy.222.2:5900 SYN ******S* Mar 3 05:21:54 24.202.175.228:3860 -> xxx.yyy.222.2:4899 SYN ******S* [...] Mar 3 15:44:13 24.202.175.228:3895 -> xxx.yyy.222.12:5900 SYN ******S* Mar 3 15:44:13 24.202.175.228:3899 -> xxx.yyy.222.38:5900 SYN ******S* Mar 3 15:44:15 24.202.175.228:3867 -> xxx.yyy.222.35:5900 SYN ******S* Mar 3 15:44:16 24.202.175.228:3899 -> xxx.yyy.222.38:5900 SYN ******S* Mar 3 15:44:16 24.202.175.228:3895 -> xxx.yyy.222.12:5900 SYN ******S* Mar 3 15:44:18 24.202.175.228:4039 -> xxx.yyy.222.39:5900 SYN ******S* Mar 3 15:44:18 24.202.175.228:3958 -> xxx.yyy.222.3:5900 SYN ******S* Mar 3 15:44:19 24.202.175.228:3977 -> xxx.yyy.222.5:5900 SYN ******S* Mar 3 15:44:19 24.202.175.228:3983 -> xxx.yyy.222.14:5900 SYN ******S* 39416 Mar 3 11:06:36 82.133.50.108:1075 -> xxx.yyy.1.2:81 SYN ******S* Mar 3 11:06:36 82.133.50.108:1076 -> xxx.yyy.1.3:81 SYN ******S* Mar 3 11:06:35 82.133.50.108:1078 -> xxx.yyy.1.5:81 SYN ******S* Mar 3 11:06:35 82.133.50.108:1079 -> xxx.yyy.1.6:81 SYN ******S* Mar 3 11:06:38 82.133.50.108:1088 -> xxx.yyy.1.15:81 SYN ******S* Mar 3 11:06:35 82.133.50.108:1089 -> xxx.yyy.1.16:81 SYN ******S* Mar 3 11:06:35 82.133.50.108:1091 -> xxx.yyy.1.18:81 SYN ******S* Mar 3 11:06:35 82.133.50.108:1093 -> xxx.yyy.1.20:81 SYN ******S* [...] Mar 3 11:17:31 82.133.50.108:3806 -> xxx.yyy.255.231:81 SYN ******S* Mar 3 11:17:31 82.133.50.108:3803 -> xxx.yyy.255.228:81 SYN ******S* Mar 3 11:17:31 82.133.50.108:3807 -> xxx.yyy.255.232:81 SYN ******S* Mar 3 11:17:31 82.133.50.108:3804 -> xxx.yyy.255.229:81 SYN ******S* Mar 3 11:17:32 82.133.50.108:3816 -> xxx.yyy.255.241:81 SYN ******S* Mar 3 11:17:32 82.133.50.108:3813 -> xxx.yyy.255.238:81 SYN ******S* Mar 3 11:17:32 82.133.50.108:3814 -> xxx.yyy.255.239:81 SYN ******S* Mar 3 11:17:32 82.133.50.108:3822 -> xxx.yyy.255.247:81 SYN ******S* Mar 3 11:17:32 82.133.50.108:3829 -> xxx.yyy.255.254:81 SYN ******S* 35836 Mar 3 12:05:40 148.223.12.162:4866 -> xxx.yyy.1.1:3306 SYN ******S* Mar 3 12:05:40 148.223.12.162:4868 -> xxx.yyy.1.3:3306 SYN ******S* Mar 3 12:05:41 148.223.12.162:4872 -> xxx.yyy.1.7:3306 SYN ******S* Mar 3 12:05:38 148.223.12.162:4875 -> xxx.yyy.1.10:3306 SYN ******S* Mar 3 12:05:38 148.223.12.162:4876 -> xxx.yyy.1.11:3306 SYN ******S* Mar 3 12:05:38 148.223.12.162:4879 -> xxx.yyy.1.14:3306 SYN ******S* Mar 3 12:05:38 148.223.12.162:4881 -> xxx.yyy.1.16:3306 SYN ******S* Mar 3 12:05:38 148.223.12.162:4882 -> xxx.yyy.1.17:3306 SYN ******S* [...] Mar 3 12:16:56 148.223.12.162:4550 -> xxx.yyy.255.236:3306 SYN ******S* Mar 3 12:16:56 148.223.12.162:4555 -> xxx.yyy.255.241:3306 SYN ******S* Mar 3 12:16:56 148.223.12.162:4560 -> xxx.yyy.255.246:3306 SYN ******S* Mar 3 12:16:56 148.223.12.162:4561 -> xxx.yyy.255.247:3306 SYN ******S* Mar 3 12:16:56 148.223.12.162:4558 -> xxx.yyy.255.244:3306 SYN ******S* Mar 3 12:16:56 148.223.12.162:4567 -> xxx.yyy.255.253:3306 SYN ******S* Mar 3 12:16:56 148.223.12.162:4563 -> xxx.yyy.255.249:3306 SYN ******S* Mar 3 12:16:56 148.223.12.162:4559 -> xxx.yyy.255.245:3306 SYN ******S* 34970 Mar 3 09:58:41 66.159.194.175:32012 -> xxx.yyy.1.0:3389 SYN ******S* Mar 3 09:58:41 66.159.194.175:32013 -> xxx.yyy.1.1:3389 SYN ******S* Mar 3 09:58:41 66.159.194.175:32014 -> xxx.yyy.1.2:3389 SYN ******S* Mar 3 09:58:41 66.159.194.175:32015 -> xxx.yyy.1.3:3389 SYN ******S* Mar 3 09:58:41 66.159.194.175:32018 -> xxx.yyy.1.6:3389 SYN ******S* Mar 3 09:58:41 66.159.194.175:32024 -> xxx.yyy.1.12:3389 SYN ******S* Mar 3 09:58:41 66.159.194.175:32026 -> xxx.yyy.1.14:3389 SYN ******S* Mar 3 09:58:41 66.159.194.175:31977 -> xxx.yyy.1.15:3389 SYN ******S* [...] Mar 3 10:00:47 66.159.194.175:32020 -> xxx.yyy.255.238:3389 SYN ******S* Mar 3 10:00:47 66.159.194.175:32021 -> xxx.yyy.255.239:3389 SYN ******S* Mar 3 10:00:47 66.159.194.175:32026 -> xxx.yyy.255.244:3389 SYN ******S* Mar 3 10:00:47 66.159.194.175:31977 -> xxx.yyy.255.245:3389 SYN ******S* Mar 3 10:00:47 66.159.194.175:31978 -> xxx.yyy.255.246:3389 SYN ******S* Mar 3 10:00:47 66.159.194.175:31982 -> xxx.yyy.255.250:3389 SYN ******S* Mar 3 10:00:47 66.159.194.175:31983 -> xxx.yyy.255.251:3389 SYN ******S* Mar 3 10:00:47 66.159.194.175:31984 -> xxx.yyy.255.252:3389 SYN ******S* Mar 3 10:00:47 66.159.194.175:31986 -> xxx.yyy.255.254:3389 SYN ******S* 21512 Mar 3 19:18:42 12.160.116.98:36211 -> xxx.yyy.1.0:33389 SYN ******S* Mar 3 19:18:42 12.160.116.98:36218 -> xxx.yyy.1.7:33389 SYN ******S* Mar 3 19:18:42 12.160.116.98:36220 -> xxx.yyy.1.9:33389 SYN ******S* Mar 3 19:18:42 12.160.116.98:36222 -> xxx.yyy.1.11:33389 SYN ******S* Mar 3 19:18:42 12.160.116.98:36225 -> xxx.yyy.1.14:33389 SYN ******S* Mar 3 19:18:42 12.160.116.98:36224 -> xxx.yyy.1.13:33389 SYN ******S* Mar 3 19:18:42 12.160.116.98:36217 -> xxx.yyy.1.6:33389 SYN ******S* Mar 3 19:18:42 12.160.116.98:36219 -> xxx.yyy.1.8:33389 SYN ******S* [...] Mar 3 19:19:40 12.160.116.98:36221 -> xxx.yyy.255.240:33389 SYN ******S* Mar 3 19:19:40 12.160.116.98:36225 -> xxx.yyy.255.244:33389 SYN ******S* Mar 3 19:19:40 12.160.116.98:36177 -> xxx.yyy.255.246:33389 SYN ******S* Mar 3 19:19:40 12.160.116.98:36179 -> xxx.yyy.255.248:33389 SYN ******S* Mar 3 19:19:40 12.160.116.98:36181 -> xxx.yyy.255.250:33389 SYN ******S* Mar 3 19:19:40 12.160.116.98:36222 -> xxx.yyy.255.241:33389 SYN ******S* Mar 3 19:19:40 12.160.116.98:36176 -> xxx.yyy.255.245:33389 SYN ******S* Mar 3 19:19:40 12.160.116.98:36180 -> xxx.yyy.255.249:33389 SYN ******S* Mar 3 19:19:40 12.160.116.98:36185 -> xxx.yyy.255.254:33389 SYN ******S* 19928 Mar 3 02:50:15 64.234.151.184:11082 -> xxx.yyy.1.1:3306 SYN ******S* Mar 3 02:50:15 64.234.151.184:11081 -> xxx.yyy.1.0:3306 SYN ******S* Mar 3 02:50:15 64.234.151.184:11086 -> xxx.yyy.1.5:3306 SYN ******S* Mar 3 02:50:15 64.234.151.184:11096 -> xxx.yyy.1.15:3306 SYN ******S* Mar 3 02:50:15 64.234.151.184:11097 -> xxx.yyy.1.16:3306 SYN ******S* Mar 3 02:50:15 64.234.151.184:11098 -> xxx.yyy.1.17:3306 SYN ******S* Mar 3 02:50:15 64.234.151.184:11099 -> xxx.yyy.1.18:3306 SYN ******S* Mar 3 02:50:15 64.234.151.184:11100 -> xxx.yyy.1.19:3306 SYN ******S* [...] Mar 3 02:50:28 64.234.151.184:11085 -> xxx.yyy.255.184:3306 SYN ******S* Mar 3 02:50:28 64.234.151.184:11084 -> xxx.yyy.255.183:3306 SYN ******S* Mar 3 02:50:28 64.234.151.184:11092 -> xxx.yyy.255.191:3306 SYN ******S* Mar 3 02:50:28 64.234.151.184:11093 -> xxx.yyy.255.192:3306 SYN ******S* Mar 3 02:50:28 64.234.151.184:11095 -> xxx.yyy.255.194:3306 SYN ******S* Mar 3 02:50:28 64.234.151.184:11094 -> xxx.yyy.255.193:3306 SYN ******S* Mar 3 02:50:28 64.234.151.184:11096 -> xxx.yyy.255.195:3306 SYN ******S* Mar 3 02:50:28 64.234.151.184:11082 -> xxx.yyy.255.231:3306 SYN ******S* Mar 3 02:50:28 64.234.151.184:11083 -> xxx.yyy.255.232:3306 SYN ******S* 13113 [...] 11264 Mar 3 22:56:18 220.85.132.33:1859 -> xxx.yyy.214.248:5554 SYN ******S* Mar 3 22:56:22 220.85.132.33:3437 -> xxx.yyy.214.248:9898 SYN ******S* Mar 3 22:56:19 220.85.132.33:1878 -> xxx.yyy.214.253:5554 SYN ******S* Mar 3 22:56:22 220.85.132.33:3445 -> xxx.yyy.214.253:9898 SYN ******S* Mar 3 22:56:19 220.85.132.33:1857 -> xxx.yyy.214.247:5554 SYN ******S* Mar 3 22:56:19 220.85.132.33:1880 -> xxx.yyy.214.254:5554 SYN ******S* Mar 3 22:56:20 220.85.132.33:2598 -> xxx.yyy.214.254:1023 SYN ******S* Mar 3 22:56:19 220.85.132.33:1869 -> xxx.yyy.214.251:5554 SYN ******S* [...] Mar 3 22:58:05 220.85.132.33:3798 -> xxx.yyy.235.86:9898 SYN ******S* Mar 3 22:58:05 220.85.132.33:3776 -> xxx.yyy.235.78:9898 SYN ******S* Mar 3 22:58:05 220.85.132.33:3777 -> xxx.yyy.235.79:9898 SYN ******S* Mar 3 22:58:05 220.85.132.33:3799 -> xxx.yyy.235.87:9898 SYN ******S* Mar 3 22:58:05 220.85.132.33:3796 -> xxx.yyy.235.85:9898 SYN ******S* Mar 3 22:58:05 220.85.132.33:3961 -> xxx.yyy.235.91:9898 SYN ******S* Mar 3 22:58:05 220.85.132.33:3975 -> xxx.yyy.235.100:9898 SYN ******S* Mar 3 22:58:05 220.85.132.33:4009 -> xxx.yyy.235.110:9898 SYN ******S* Mar 3 22:58:05 220.85.132.33:4016 -> xxx.yyy.235.112:9898 SYN ******S* 7039 Mar 3 22:56:12 222.148.176.17:2814 -> xxx.yyy.153.190:5554 SYN ******S* Mar 3 22:56:13 222.148.176.17:1364 -> xxx.yyy.153.190:1023 SYN ******S* Mar 3 22:56:15 222.148.176.17:1384 -> xxx.yyy.153.190:9898 SYN ******S* Mar 3 22:56:12 222.148.176.17:2827 -> xxx.yyy.153.194:5554 SYN ******S* Mar 3 22:56:13 222.148.176.17:1366 -> xxx.yyy.153.194:1023 SYN ******S* Mar 3 22:56:15 222.148.176.17:1393 -> xxx.yyy.153.194:9898 SYN ******S* Mar 3 22:56:12 222.148.176.17:2831 -> xxx.yyy.153.195:5554 SYN ******S* Mar 3 22:56:13 222.148.176.17:1369 -> xxx.yyy.153.195:1023 SYN ******S* [...] Mar 3 22:57:05 222.148.176.17:1709 -> xxx.yyy.173.222:1023 SYN ******S* Mar 3 22:57:04 222.148.176.17:2736 -> xxx.yyy.173.197:5554 SYN ******S* Mar 3 22:57:04 222.148.176.17:2740 -> xxx.yyy.173.199:5554 SYN ******S* Mar 3 22:57:04 222.148.176.17:2848 -> xxx.yyy.173.226:5554 SYN ******S* Mar 3 22:57:07 222.148.176.17:2166 -> xxx.yyy.173.226:9898 SYN ******S* Mar 3 22:57:05 222.148.176.17:4454 -> xxx.yyy.173.117:9898 SYN ******S* Mar 3 22:57:05 222.148.176.17:1706 -> xxx.yyy.173.200:1023 SYN ******S* Mar 3 22:57:05 222.148.176.17:1702 -> xxx.yyy.173.221:1023 SYN ******S* 6789 Mar 3 22:56:50 221.165.116.226:2359 -> xxx.yyy.133.239:5554 SYN ******S* Mar 3 22:56:50 221.165.116.226:2358 -> xxx.yyy.133.238:5554 SYN ******S* Mar 3 22:56:50 221.165.116.226:2380 -> xxx.yyy.133.240:5554 SYN ******S* Mar 3 22:56:53 221.165.116.226:3872 -> xxx.yyy.133.240:9898 SYN ******S* Mar 3 22:56:50 221.165.116.226:2401 -> xxx.yyy.133.241:5554 SYN ******S* Mar 3 22:56:51 221.165.116.226:2890 -> xxx.yyy.133.241:1023 SYN ******S* Mar 3 22:56:53 221.165.116.226:3908 -> xxx.yyy.133.241:9898 SYN ******S* Mar 3 22:56:50 221.165.116.226:2427 -> xxx.yyy.133.248:5554 SYN ******S* [...] Mar 3 22:57:35 221.165.116.226:3331 -> xxx.yyy.154.72:9898 SYN ******S* Mar 3 22:57:35 221.165.116.226:3335 -> xxx.yyy.154.75:9898 SYN ******S* Mar 3 22:57:35 221.165.116.226:3346 -> xxx.yyy.154.83:9898 SYN ******S* Mar 3 22:57:35 221.165.116.226:3369 -> xxx.yyy.154.91:9898 SYN ******S* Mar 3 22:57:35 221.165.116.226:3385 -> xxx.yyy.154.92:9898 SYN ******S* Mar 3 22:57:35 221.165.116.226:3388 -> xxx.yyy.154.94:9898 SYN ******S* Mar 3 22:57:35 221.165.116.226:3389 -> xxx.yyy.154.95:9898 SYN ******S* Mar 3 22:57:35 221.165.116.226:3407 -> xxx.yyy.154.98:9898 SYN ******S* Mar 3 22:57:35 221.165.116.226:3410 -> xxx.yyy.154.99:9898 SYN ******S* 6586 Mar 3 22:56:56 222.107.2.219:4109 -> xxx.yyy.195.90:5554 SYN ******S* Mar 3 22:56:59 222.107.2.219:2113 -> xxx.yyy.195.90:9898 SYN ******S* Mar 3 22:56:57 222.107.2.219:4125 -> xxx.yyy.195.96:5554 SYN ******S* Mar 3 22:56:57 222.107.2.219:4127 -> xxx.yyy.195.98:5554 SYN ******S* Mar 3 22:56:57 222.107.2.219:4129 -> xxx.yyy.195.100:5554 SYN ******S* Mar 3 22:56:57 222.107.2.219:4131 -> xxx.yyy.195.102:5554 SYN ******S* Mar 3 22:56:57 222.107.2.219:4154 -> xxx.yyy.195.111:5554 SYN ******S* Mar 3 22:56:57 222.107.2.219:4128 -> xxx.yyy.195.99:5554 SYN ******S* [...] Mar 3 22:57:42 222.107.2.219:1522 -> xxx.yyy.215.197:9898 SYN ******S* Mar 3 22:57:42 222.107.2.219:1523 -> xxx.yyy.215.198:9898 SYN ******S* Mar 3 22:57:42 222.107.2.219:1526 -> xxx.yyy.215.203:9898 SYN ******S* Mar 3 22:57:42 222.107.2.219:1535 -> xxx.yyy.215.204:9898 SYN ******S* Mar 3 22:57:42 222.107.2.219:1537 -> xxx.yyy.215.206:9898 SYN ******S* Mar 3 22:57:42 222.107.2.219:1556 -> xxx.yyy.215.208:9898 SYN ******S* Mar 3 22:57:42 222.107.2.219:1559 -> xxx.yyy.215.210:9898 SYN ******S* Mar 3 22:57:42 222.107.2.219:1536 -> xxx.yyy.215.205:9898 SYN ******S* Mar 3 22:57:42 222.107.2.219:1557 -> xxx.yyy.215.209:9898 SYN ******S* 6533 Mar 3 23:53:57 61.187.239.140:1083 -> xxx.yyy.72.126:5554 SYN ******S* Mar 3 23:53:58 61.187.239.140:1628 -> xxx.yyy.72.126:1023 SYN ******S* Mar 3 23:53:57 61.187.239.140:1082 -> xxx.yyy.72.125:5554 SYN ******S* Mar 3 23:53:57 61.187.239.140:1084 -> xxx.yyy.72.127:5554 SYN ******S* Mar 3 23:53:57 61.187.239.140:1085 -> xxx.yyy.72.128:5554 SYN ******S* Mar 3 23:53:57 61.187.239.140:1086 -> xxx.yyy.72.129:5554 SYN ******S* Mar 3 23:53:57 61.187.239.140:1087 -> xxx.yyy.72.130:5554 SYN ******S* Mar 3 23:53:57 61.187.239.140:1088 -> xxx.yyy.72.131:5554 SYN ******S* [...] Mar 3 23:54:38 61.187.239.140:1214 -> xxx.yyy.92.227:9898 SYN ******S* Mar 3 23:54:38 61.187.239.140:1213 -> xxx.yyy.92.226:9898 SYN ******S* Mar 3 23:54:38 61.187.239.140:1216 -> xxx.yyy.92.229:9898 SYN ******S* Mar 3 23:54:38 61.187.239.140:1215 -> xxx.yyy.92.228:9898 SYN ******S* Mar 3 23:54:38 61.187.239.140:1217 -> xxx.yyy.92.230:9898 SYN ******S* Mar 3 23:54:38 61.187.239.140:1249 -> xxx.yyy.92.232:9898 SYN ******S* Mar 3 23:54:38 61.187.239.140:1264 -> xxx.yyy.92.233:9898 SYN ******S* Mar 3 23:54:39 61.187.239.140:1411 -> xxx.yyy.92.241:9898 SYN ******S* Mar 3 23:54:39 61.187.239.140:1420 -> xxx.yyy.92.243:9898 SYN ******S* 6406 Mar 3 23:33:11 220.163.90.105:3468 -> xxx.yyy.133.65:5554 SYN ******S* Mar 3 23:33:14 220.163.90.105:1529 -> xxx.yyy.133.65:9898 SYN ******S* Mar 3 23:33:11 220.163.90.105:3480 -> xxx.yyy.133.67:5554 SYN ******S* Mar 3 23:33:11 220.163.90.105:3484 -> xxx.yyy.133.71:5554 SYN ******S* Mar 3 23:33:11 220.163.90.105:3486 -> xxx.yyy.133.72:5554 SYN ******S* Mar 3 23:33:11 220.163.90.105:3445 -> xxx.yyy.133.19:5554 SYN ******S* Mar 3 23:33:14 220.163.90.105:1520 -> xxx.yyy.133.19:9898 SYN ******S* Mar 3 23:33:11 220.163.90.105:3487 -> xxx.yyy.133.73:5554 SYN ******S* [...] Mar 3 23:33:56 220.163.90.105:2950 -> xxx.yyy.133.38:9898 SYN ******S* Mar 3 23:33:56 220.163.90.105:2952 -> xxx.yyy.133.40:9898 SYN ******S* Mar 3 23:33:56 220.163.90.105:2957 -> xxx.yyy.133.50:9898 SYN ******S* Mar 3 23:33:56 220.163.90.105:2958 -> xxx.yyy.133.51:9898 SYN ******S* Mar 3 23:33:56 220.163.90.105:2966 -> xxx.yyy.133.57:9898 SYN ******S* Mar 3 23:33:56 220.163.90.105:2972 -> xxx.yyy.133.54:9898 SYN ******S* Mar 3 23:33:56 220.163.90.105:2975 -> xxx.yyy.133.59:9898 SYN ******S* Mar 3 23:33:56 220.163.90.105:2976 -> xxx.yyy.133.61:9898 SYN ******S* Mar 3 23:33:56 220.163.90.105:2987 -> xxx.yyy.133.55:9898 SYN ******S* 6185 Mar 3 06:56:49 84.72.116.243:4445 -> xxx.yyy.72.125:5554 SYN ******S* Mar 3 06:56:49 84.72.116.243:4404 -> xxx.yyy.72.124:5554 SYN ******S* Mar 3 06:56:49 84.72.116.243:4591 -> xxx.yyy.72.129:5554 SYN ******S* Mar 3 06:56:49 84.72.116.243:4840 -> xxx.yyy.72.142:5554 SYN ******S* Mar 3 06:56:49 84.72.116.243:4838 -> xxx.yyy.72.141:5554 SYN ******S* Mar 3 06:56:49 84.72.116.243:4584 -> xxx.yyy.72.127:5554 SYN ******S* Mar 3 06:56:49 84.72.116.243:4590 -> xxx.yyy.72.128:5554 SYN ******S* Mar 3 06:56:49 84.72.116.243:4583 -> xxx.yyy.72.126:5554 SYN ******S* [...] Mar 3 06:57:46 84.72.116.243:1152 -> xxx.yyy.91.13:9898 SYN ******S* Mar 3 06:57:46 84.72.116.243:1225 -> xxx.yyy.92.5:1023 SYN ******S* Mar 3 06:57:47 84.72.116.243:1540 -> xxx.yyy.92.24:1023 SYN ******S* Mar 3 06:57:48 84.72.116.243:2720 -> xxx.yyy.92.165:1023 SYN ******S* Mar 3 06:57:48 84.72.116.243:2721 -> xxx.yyy.92.166:1023 SYN ******S* Mar 3 06:57:50 84.72.116.243:1253 -> xxx.yyy.92.91:9898 SYN ******S* Mar 3 06:57:50 84.72.116.243:1248 -> xxx.yyy.92.90:9898 SYN ******S* Mar 3 06:57:50 84.72.116.243:1556 -> xxx.yyy.92.166:9898 SYN ******S* 6091 Mar 3 22:56:56 220.126.109.17:3874 -> xxx.yyy.72.127:5554 SYN ******S* Mar 3 22:56:57 220.126.109.17:4365 -> xxx.yyy.72.127:1023 SYN ******S* Mar 3 22:56:56 220.126.109.17:3878 -> xxx.yyy.72.154:5554 SYN ******S* Mar 3 22:56:57 220.126.109.17:4377 -> xxx.yyy.72.154:1023 SYN ******S* Mar 3 22:56:56 220.126.109.17:3862 -> xxx.yyy.72.139:5554 SYN ******S* Mar 3 22:56:56 220.126.109.17:3866 -> xxx.yyy.72.135:5554 SYN ******S* Mar 3 22:56:56 220.126.109.17:3864 -> xxx.yyy.72.137:5554 SYN ******S* Mar 3 22:56:56 220.126.109.17:3875 -> xxx.yyy.72.126:5554 SYN ******S* [...] Mar 3 22:57:42 220.126.109.17:1045 -> xxx.yyy.92.226:9898 SYN ******S* Mar 3 22:57:42 220.126.109.17:1046 -> xxx.yyy.92.229:9898 SYN ******S* Mar 3 22:57:42 220.126.109.17:1054 -> xxx.yyy.92.240:9898 SYN ******S* Mar 3 22:59:51 220.126.109.17:2197 -> xxx.yyy.72.124:5554 SYN ******S* Mar 3 22:59:52 220.126.109.17:2619 -> xxx.yyy.72.124:1023 SYN ******S* Mar 3 22:59:54 220.126.109.17:3642 -> xxx.yyy.72.124:9898 SYN ******S* Mar 3 22:59:51 220.126.109.17:2205 -> xxx.yyy.72.151:5554 SYN ******S* Mar 3 22:59:52 220.126.109.17:2625 -> xxx.yyy.72.151:1023 SYN ******S* Mar 3 22:59:54 220.126.109.17:3658 -> xxx.yyy.72.151:9898 SYN ******S* 5939 [...] 5752 Mar 3 23:02:00 220.150.210.86:2770 -> xxx.yyy.194.124:1023 SYN ******S* Mar 3 23:02:02 220.150.210.86:3624 -> xxx.yyy.194.124:9898 SYN ******S* Mar 3 23:02:00 220.150.210.86:2782 -> xxx.yyy.194.126:1023 SYN ******S* Mar 3 23:02:02 220.150.210.86:3632 -> xxx.yyy.194.126:9898 SYN ******S* Mar 3 23:02:00 220.150.210.86:2795 -> xxx.yyy.194.128:1023 SYN ******S* Mar 3 23:02:00 220.150.210.86:2794 -> xxx.yyy.194.127:1023 SYN ******S* Mar 3 23:02:02 220.150.210.86:3649 -> xxx.yyy.194.127:9898 SYN ******S* Mar 3 23:02:00 220.150.210.86:2796 -> xxx.yyy.194.129:1023 SYN ******S* [...] Mar 3 23:02:46 220.150.210.86:2961 -> xxx.yyy.214.225:9898 SYN ******S* Mar 3 23:02:46 220.150.210.86:2964 -> xxx.yyy.214.228:9898 SYN ******S* Mar 3 23:02:46 220.150.210.86:2968 -> xxx.yyy.214.229:9898 SYN ******S* Mar 3 23:02:46 220.150.210.86:2974 -> xxx.yyy.214.231:9898 SYN ******S* Mar 3 23:02:46 220.150.210.86:2987 -> xxx.yyy.214.234:9898 SYN ******S* Mar 3 23:02:46 220.150.210.86:3009 -> xxx.yyy.214.237:9898 SYN ******S* Mar 3 23:02:46 220.150.210.86:3008 -> xxx.yyy.214.236:9898 SYN ******S* Mar 3 23:02:46 220.150.210.86:3019 -> xxx.yyy.214.239:9898 SYN ******S* 5739 [...] 5578 Mar 3 22:56:59 59.17.59.6:1491 -> xxx.yyy.133.234:5554 SYN ******S* Mar 3 22:56:59 59.17.59.6:1494 -> xxx.yyy.133.237:5554 SYN ******S* Mar 3 22:56:59 59.17.59.6:1499 -> xxx.yyy.133.242:5554 SYN ******S* Mar 3 22:57:00 59.17.59.6:1997 -> xxx.yyy.133.242:1023 SYN ******S* Mar 3 22:56:59 59.17.59.6:1501 -> xxx.yyy.133.244:5554 SYN ******S* Mar 3 22:57:00 59.17.59.6:1999 -> xxx.yyy.133.244:1023 SYN ******S* Mar 3 22:56:59 59.17.59.6:1492 -> xxx.yyy.133.235:5554 SYN ******S* Mar 3 22:56:59 59.17.59.6:1504 -> xxx.yyy.133.247:5554 SYN ******S* [...] Mar 3 22:57:41 59.17.59.6:1755 -> xxx.yyy.154.37:9898 SYN ******S* Mar 3 22:57:41 59.17.59.6:1790 -> xxx.yyy.154.66:9898 SYN ******S* Mar 3 22:57:41 59.17.59.6:1773 -> xxx.yyy.154.48:9898 SYN ******S* Mar 3 22:57:41 59.17.59.6:1775 -> xxx.yyy.154.52:9898 SYN ******S* Mar 3 22:57:41 59.17.59.6:1797 -> xxx.yyy.154.70:9898 SYN ******S* Mar 3 22:57:41 59.17.59.6:1798 -> xxx.yyy.154.71:9898 SYN ******S* Mar 3 22:57:41 59.17.59.6:1923 -> xxx.yyy.154.89:9898 SYN ******S* Mar 3 22:57:41 59.17.59.6:1966 -> xxx.yyy.154.97:9898 SYN ******S* Mar 3 22:57:41 59.17.59.6:1968 -> xxx.yyy.154.99:9898 SYN ******S* 5230 Mar 3 10:23:24 221.192.208.248:1397 -> xxx.yyy.190.60:1433 SYN ******S* Mar 3 10:23:24 221.192.208.248:1400 -> xxx.yyy.190.61:1433 SYN ******S* Mar 3 10:23:29 221.192.208.248:1431 -> xxx.yyy.190.68:1433 SYN ******S* Mar 3 10:23:29 221.192.208.248:1442 -> xxx.yyy.190.70:1433 SYN ******S* Mar 3 10:23:29 221.192.208.248:1448 -> xxx.yyy.190.71:1433 SYN ******S* Mar 3 10:23:26 221.192.208.248:1452 -> xxx.yyy.190.73:1433 SYN ******S* Mar 3 10:23:27 221.192.208.248:1472 -> xxx.yyy.190.76:1433 SYN ******S* Mar 3 10:23:27 221.192.208.248:1522 -> xxx.yyy.190.86:1433 SYN ******S* [...] Mar 3 10:42:04 221.192.208.248:3481 -> xxx.yyy.211.30:1433 SYN ******S* Mar 3 10:42:04 221.192.208.248:3488 -> xxx.yyy.211.31:1433 SYN ******S* Mar 3 10:42:04 221.192.208.248:3497 -> xxx.yyy.211.34:1433 SYN ******S* Mar 3 10:42:04 221.192.208.248:2936 -> xxx.yyy.211.9:1433 SYN ******S* Mar 3 10:42:04 221.192.208.248:3536 -> xxx.yyy.211.37:1433 SYN ******S* Mar 3 10:42:04 221.192.208.248:3539 -> xxx.yyy.211.38:1433 SYN ******S* Mar 3 10:42:04 221.192.208.248:3563 -> xxx.yyy.211.40:1433 SYN ******S* Mar 3 10:42:05 221.192.208.248:3668 -> xxx.yyy.211.44:1433 SYN ******S* Mar 3 10:42:05 221.192.208.248:3662 -> xxx.yyy.211.43:1433 SYN ******S* 5218 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions