[LOGS] Summary of large-scale portscanning detects
[email protected] Thu, 10 Mar 2005 08:26:58 -0600 (CST)
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Mar 9 01:02:06 222.144.92.50:1399 -> xxx.yyy.1.0:1433 SYN ******S* Mar 9 01:02:06 222.144.92.50:1401 -> xxx.yyy.1.1:1433 SYN ******S* Mar 9 01:02:06 222.144.92.50:1404 -> xxx.yyy.1.2:1433 SYN ******S* Mar 9 01:02:09 222.144.92.50:1405 -> xxx.yyy.1.3:1433 SYN ******S* Mar 9 01:02:06 222.144.92.50:1406 -> xxx.yyy.1.4:1433 SYN ******S* Mar 9 01:02:09 222.144.92.50:1407 -> xxx.yyy.1.5:1433 SYN ******S* Mar 9 01:02:09 222.144.92.50:1414 -> xxx.yyy.1.12:1433 SYN ******S* Mar 9 01:02:09 222.144.92.50:1412 -> xxx.yyy.1.10:1433 SYN ******S* [...] Mar 9 04:50:54 222.144.92.50:4738 -> xxx.yyy.255.246:1433 SYN ******S* Mar 9 04:50:54 222.144.92.50:4739 -> xxx.yyy.255.247:1433 SYN ******S* Mar 9 04:50:54 222.144.92.50:4745 -> xxx.yyy.255.248:1433 SYN ******S* Mar 9 04:50:54 222.144.92.50:4748 -> xxx.yyy.255.249:1433 SYN ******S* Mar 9 04:50:55 222.144.92.50:4752 -> xxx.yyy.255.250:1433 SYN ******S* Mar 9 04:50:55 222.144.92.50:4755 -> xxx.yyy.255.251:1433 SYN ******S* Mar 9 04:50:55 222.144.92.50:4764 -> xxx.yyy.255.252:1433 SYN ******S* Mar 9 04:50:55 222.144.92.50:4771 -> xxx.yyy.255.253:1433 SYN ******S* Mar 9 04:50:55 222.144.92.50:4774 -> xxx.yyy.255.254:1433 SYN ******S* 115664 Mar 9 00:04:49 65.162.1.154:3767 -> xxx.yyy.1.1:6101 SYN ******S* Mar 9 00:04:49 65.162.1.154:3768 -> xxx.yyy.1.2:6101 SYN ******S* Mar 9 00:04:52 65.162.1.154:3770 -> xxx.yyy.1.4:6101 SYN ******S* Mar 9 00:04:52 65.162.1.154:3772 -> xxx.yyy.1.6:6101 SYN ******S* Mar 9 00:04:52 65.162.1.154:3774 -> xxx.yyy.1.7:6101 SYN ******S* Mar 9 00:04:52 65.162.1.154:3779 -> xxx.yyy.1.9:6101 SYN ******S* Mar 9 00:04:52 65.162.1.154:3785 -> xxx.yyy.1.13:6101 SYN ******S* Mar 9 00:04:52 65.162.1.154:3789 -> xxx.yyy.1.15:6101 SYN ******S* [...] Mar 9 00:10:41 65.162.1.154:4797 -> xxx.yyy.255.189:6101 SYN ******S* Mar 9 00:10:41 65.162.1.154:4817 -> xxx.yyy.255.202:6101 SYN ******S* Mar 9 00:10:41 65.162.1.154:4822 -> xxx.yyy.255.205:6101 SYN ******S* Mar 9 00:10:41 65.162.1.154:1067 -> xxx.yyy.255.226:6101 SYN ******S* Mar 9 00:10:41 65.162.1.154:1031 -> xxx.yyy.255.211:6101 SYN ******S* Mar 9 00:10:41 65.162.1.154:1027 -> xxx.yyy.255.210:6101 SYN ******S* Mar 9 00:10:41 65.162.1.154:4799 -> xxx.yyy.255.191:6101 SYN ******S* Mar 9 00:10:41 65.162.1.154:4807 -> xxx.yyy.255.199:6101 SYN ******S* 49518 Mar 9 19:54:03 80.88.192.61:2261 -> xxx.yyy.1.8:3306 SYN ******S* Mar 9 19:54:03 80.88.192.61:2262 -> xxx.yyy.1.9:3306 SYN ******S* Mar 9 19:54:03 80.88.192.61:2263 -> xxx.yyy.1.10:3306 SYN ******S* Mar 9 19:54:03 80.88.192.61:2265 -> xxx.yyy.1.12:3306 SYN ******S* Mar 9 19:54:03 80.88.192.61:2266 -> xxx.yyy.1.13:3306 SYN ******S* Mar 9 19:54:03 80.88.192.61:2267 -> xxx.yyy.1.14:3306 SYN ******S* Mar 9 19:54:03 80.88.192.61:2269 -> xxx.yyy.1.16:3306 SYN ******S* Mar 9 19:54:03 80.88.192.61:2270 -> xxx.yyy.1.17:3306 SYN ******S* [...] Mar 9 20:05:48 80.88.192.61:1506 -> xxx.yyy.255.215:3306 SYN ******S* Mar 9 20:05:49 80.88.192.61:1532 -> xxx.yyy.255.241:3306 SYN ******S* Mar 9 20:05:49 80.88.192.61:1530 -> xxx.yyy.255.239:3306 SYN ******S* Mar 9 20:05:49 80.88.192.61:1529 -> xxx.yyy.255.238:3306 SYN ******S* Mar 9 20:05:49 80.88.192.61:1543 -> xxx.yyy.255.252:3306 SYN ******S* Mar 9 20:05:49 80.88.192.61:1544 -> xxx.yyy.255.253:3306 SYN ******S* Mar 9 20:05:49 80.88.192.61:1542 -> xxx.yyy.255.251:3306 SYN ******S* Mar 9 20:05:49 80.88.192.61:1537 -> xxx.yyy.255.246:3306 SYN ******S* 37449 Mar 9 19:49:38 200.47.91.234:4634 -> xxx.yyy.1.1:139 SYN ******S* Mar 9 19:49:38 200.47.91.234:4740 -> xxx.yyy.1.3:139 SYN ******S* Mar 9 19:49:35 200.47.91.234:4752 -> xxx.yyy.1.6:139 SYN ******S* Mar 9 19:49:38 200.47.91.234:4759 -> xxx.yyy.1.10:139 SYN ******S* Mar 9 19:49:38 200.47.91.234:4773 -> xxx.yyy.1.15:139 SYN ******S* Mar 9 19:49:35 200.47.91.234:4776 -> xxx.yyy.1.16:139 SYN ******S* Mar 9 19:49:35 200.47.91.234:4780 -> xxx.yyy.1.18:139 SYN ******S* Mar 9 19:49:35 200.47.91.234:4777 -> xxx.yyy.1.17:139 SYN ******S* [...] Mar 9 20:01:27 200.47.91.234:1207 -> xxx.yyy.255.232:139 SYN ******S* Mar 9 20:01:28 200.47.91.234:1219 -> xxx.yyy.255.243:139 SYN ******S* Mar 9 20:01:28 200.47.91.234:1223 -> xxx.yyy.255.246:139 SYN ******S* Mar 9 20:01:28 200.47.91.234:1218 -> xxx.yyy.255.242:139 SYN ******S* Mar 9 20:01:28 200.47.91.234:1216 -> xxx.yyy.255.240:139 SYN ******S* Mar 9 20:01:28 200.47.91.234:1220 -> xxx.yyy.255.244:139 SYN ******S* Mar 9 20:01:28 200.47.91.234:1231 -> xxx.yyy.255.254:139 SYN ******S* Mar 9 20:01:28 200.47.91.234:1226 -> xxx.yyy.255.249:139 SYN ******S* 36520 Mar 9 01:43:15 217.238.193.120:3984 -> xxx.yyy.1.0:1433 SYN ******S* Mar 9 01:43:18 217.238.193.120:4157 -> xxx.yyy.1.6:1433 SYN ******S* Mar 9 01:43:18 217.238.193.120:4269 -> xxx.yyy.1.8:1433 SYN ******S* Mar 9 01:43:18 217.238.193.120:4331 -> xxx.yyy.1.10:1433 SYN ******S* Mar 9 01:43:18 217.238.193.120:4340 -> xxx.yyy.1.11:1433 SYN ******S* Mar 9 01:43:18 217.238.193.120:4366 -> xxx.yyy.1.12:1433 SYN ******S* Mar 9 01:43:18 217.238.193.120:4615 -> xxx.yyy.1.20:1433 SYN ******S* Mar 9 01:43:18 217.238.193.120:4633 -> xxx.yyy.1.21:1433 SYN ******S* [...] Mar 9 05:05:21 217.238.193.120:3290 -> xxx.yyy.212.230:1433 SYN ******S* Mar 9 05:05:21 217.238.193.120:4602 -> xxx.yyy.212.231:1433 SYN ******S* Mar 9 05:05:21 217.238.193.120:3600 -> xxx.yyy.212.232:1433 SYN ******S* Mar 9 05:05:22 217.238.193.120:3008 -> xxx.yyy.212.242:1433 SYN ******S* Mar 9 05:05:22 217.238.193.120:3990 -> xxx.yyy.212.208:1433 SYN ******S* Mar 9 05:05:22 217.238.193.120:4517 -> xxx.yyy.212.209:1433 SYN ******S* Mar 9 05:05:22 217.238.193.120:3656 -> xxx.yyy.212.243:1433 SYN ******S* Mar 9 05:05:22 217.238.193.120:4492 -> xxx.yyy.212.235:1433 SYN ******S* Mar 9 05:05:22 217.238.193.120:3540 -> xxx.yyy.212.210:1433 SYN ******S* 35699 Mar 9 06:12:59 150.254.151.8:33627 -> xxx.yyy.1.0:1433 SYN ******S* Mar 9 06:12:59 150.254.151.8:33627 -> xxx.yyy.1.1:1433 SYN ******S* Mar 9 06:12:59 150.254.151.8:33627 -> xxx.yyy.1.2:1433 SYN ******S* Mar 9 06:12:59 150.254.151.8:33627 -> xxx.yyy.1.3:1433 SYN ******S* Mar 9 06:12:59 150.254.151.8:33627 -> xxx.yyy.1.4:1433 SYN ******S* Mar 9 06:12:59 150.254.151.8:33627 -> xxx.yyy.1.5:1433 SYN ******S* Mar 9 06:12:59 150.254.151.8:33627 -> xxx.yyy.1.6:1433 SYN ******S* Mar 9 06:12:59 150.254.151.8:33627 -> xxx.yyy.1.7:1433 SYN ******S* [...] Mar 9 06:14:04 150.254.151.8:33627 -> xxx.yyy.253.225:1433 SYN ******S* Mar 9 06:14:04 150.254.151.8:33627 -> xxx.yyy.253.226:1433 SYN ******S* Mar 9 06:14:04 150.254.151.8:33627 -> xxx.yyy.253.227:1433 SYN ******S* Mar 9 06:14:04 150.254.151.8:33627 -> xxx.yyy.253.228:1433 SYN ******S* Mar 9 06:14:04 150.254.151.8:33627 -> xxx.yyy.253.229:1433 SYN ******S* Mar 9 06:14:04 150.254.151.8:33627 -> xxx.yyy.253.230:1433 SYN ******S* Mar 9 06:14:04 150.254.151.8:33627 -> xxx.yyy.253.231:1433 SYN ******S* Mar 9 06:14:04 150.254.151.8:33627 -> xxx.yyy.253.232:1433 SYN ******S* 35623 Mar 9 14:45:49 200.216.205.189:63027 -> xxx.yyy.1.1:3306 SYN ******S* Mar 9 14:45:52 200.216.205.189:63031 -> xxx.yyy.1.3:3306 SYN ******S* Mar 9 14:45:49 200.216.205.189:63035 -> xxx.yyy.1.5:3306 SYN ******S* Mar 9 14:45:52 200.216.205.189:63039 -> xxx.yyy.1.7:3306 SYN ******S* Mar 9 14:45:52 200.216.205.189:63043 -> xxx.yyy.1.9:3306 SYN ******S* Mar 9 14:45:49 200.216.205.189:63049 -> xxx.yyy.1.12:3306 SYN ******S* Mar 9 14:45:52 200.216.205.189:63061 -> xxx.yyy.1.18:3306 SYN ******S* Mar 9 14:45:49 200.216.205.189:63063 -> xxx.yyy.1.19:3306 SYN ******S* [...] Mar 9 14:57:05 200.216.205.189:7638 -> xxx.yyy.255.220:3306 SYN ******S* Mar 9 14:57:05 200.216.205.189:7664 -> xxx.yyy.255.233:3306 SYN ******S* Mar 9 14:57:05 200.216.205.189:7662 -> xxx.yyy.255.232:3306 SYN ******S* Mar 9 14:57:05 200.216.205.189:7686 -> xxx.yyy.255.244:3306 SYN ******S* Mar 9 14:57:05 200.216.205.189:7688 -> xxx.yyy.255.245:3306 SYN ******S* Mar 9 14:57:05 200.216.205.189:7690 -> xxx.yyy.255.246:3306 SYN ******S* Mar 9 14:57:05 200.216.205.189:7694 -> xxx.yyy.255.248:3306 SYN ******S* Mar 9 14:57:05 200.216.205.189:7682 -> xxx.yyy.255.242:3306 SYN ******S* Mar 9 14:57:05 200.216.205.189:7702 -> xxx.yyy.255.252:3306 SYN ******S* 28650 Mar 9 01:39:41 221.233.24.9:12524 -> xxx.yyy.1.1:1433 SYN ******S* Mar 9 01:39:38 221.233.24.9:12526 -> xxx.yyy.1.2:1433 SYN ******S* Mar 9 01:39:38 221.233.24.9:12527 -> xxx.yyy.1.3:1433 SYN ******S* Mar 9 01:39:41 221.233.24.9:12530 -> xxx.yyy.1.4:1433 SYN ******S* Mar 9 01:39:41 221.233.24.9:12555 -> xxx.yyy.1.6:1433 SYN ******S* Mar 9 01:39:41 221.233.24.9:12560 -> xxx.yyy.1.7:1433 SYN ******S* Mar 9 01:39:41 221.233.24.9:12564 -> xxx.yyy.1.8:1433 SYN ******S* Mar 9 01:39:41 221.233.24.9:12566 -> xxx.yyy.1.9:1433 SYN ******S* [...] Mar 9 03:36:14 221.233.24.9:11375 -> xxx.yyy.132.41:1433 SYN ******S* Mar 9 03:36:14 221.233.24.9:11381 -> xxx.yyy.132.47:1433 SYN ******S* Mar 9 03:36:14 221.233.24.9:11379 -> xxx.yyy.132.46:1433 SYN ******S* Mar 9 03:36:14 221.233.24.9:11377 -> xxx.yyy.132.44:1433 SYN ******S* Mar 9 03:36:14 221.233.24.9:11382 -> xxx.yyy.132.48:1433 SYN ******S* Mar 9 03:36:14 221.233.24.9:11383 -> xxx.yyy.132.49:1433 SYN ******S* Mar 9 03:36:14 221.233.24.9:12292 -> xxx.yyy.132.69:1433 SYN ******S* Mar 9 03:36:14 221.233.24.9:11480 -> xxx.yyy.132.50:1433 SYN ******S* Mar 9 03:36:14 221.233.24.9:11481 -> xxx.yyy.132.43:1433 SYN ******S* 27757 Mar 9 22:46:29 213.8.59.15:3915 -> xxx.yyy.1.3:1433 SYN ******S* Mar 9 22:46:29 213.8.59.15:3916 -> xxx.yyy.1.4:1433 SYN ******S* Mar 9 22:46:29 213.8.59.15:3919 -> xxx.yyy.1.7:1433 SYN ******S* Mar 9 22:46:29 213.8.59.15:3925 -> xxx.yyy.1.13:1433 SYN ******S* Mar 9 22:46:31 213.8.59.15:3926 -> xxx.yyy.1.14:1433 SYN ******S* Mar 9 22:46:31 213.8.59.15:3928 -> xxx.yyy.1.16:1433 SYN ******S* Mar 9 22:46:31 213.8.59.15:3930 -> xxx.yyy.1.18:1433 SYN ******S* Mar 9 22:46:29 213.8.59.15:3932 -> xxx.yyy.1.20:1433 SYN ******S* [...] Mar 9 22:58:11 213.8.59.15:2629 -> xxx.yyy.255.205:1433 SYN ******S* Mar 9 22:58:11 213.8.59.15:2635 -> xxx.yyy.255.211:1433 SYN ******S* Mar 9 22:58:11 213.8.59.15:2633 -> xxx.yyy.255.209:1433 SYN ******S* Mar 9 22:58:11 213.8.59.15:2644 -> xxx.yyy.255.220:1433 SYN ******S* Mar 9 22:58:11 213.8.59.15:2648 -> xxx.yyy.255.224:1433 SYN ******S* Mar 9 22:58:11 213.8.59.15:2649 -> xxx.yyy.255.225:1433 SYN ******S* Mar 9 22:58:11 213.8.59.15:2658 -> xxx.yyy.255.234:1433 SYN ******S* Mar 9 22:58:11 213.8.59.15:2666 -> xxx.yyy.255.242:1433 SYN ******S* Mar 9 22:58:11 213.8.59.15:2675 -> xxx.yyy.255.251:1433 SYN ******S* 27370 Mar 9 01:36:21 80.14.108.212:3665 -> xxx.yyy.75.178:10490 SYN ******S* Mar 9 01:36:21 80.14.108.212:3666 -> xxx.yyy.75.178:10492 SYN ******S* Mar 9 01:36:21 80.14.108.212:3667 -> xxx.yyy.75.178:10496 SYN ******S* Mar 9 01:36:21 80.14.108.212:3668 -> xxx.yyy.75.178:10499 SYN ******S* Mar 9 01:36:21 80.14.108.212:3670 -> xxx.yyy.75.178:10506 SYN ******S* Mar 9 01:36:21 80.14.108.212:3671 -> xxx.yyy.75.178:10507 SYN ******S* Mar 9 01:36:21 80.14.108.212:3672 -> xxx.yyy.75.178:10510 SYN ******S* Mar 9 01:36:19 80.14.108.212:3664 -> xxx.yyy.75.178:10486 SYN ******S* [...] Mar 9 06:51:55 80.14.108.212:3716 -> xxx.yyy.75.178:10507 SYN ******S* Mar 9 06:51:56 80.14.108.212:3720 -> xxx.yyy.75.178:10525 SYN ******S* Mar 9 06:51:53 80.14.108.212:3713 -> xxx.yyy.75.178:10532 SYN ******S* Mar 9 06:51:56 80.14.108.212:3718 -> xxx.yyy.75.178:10528 SYN ******S* Mar 9 06:57:54 80.14.108.212:4034 -> xxx.yyy.75.178:10507 SYN ******S* Mar 9 06:57:57 80.14.108.212:4039 -> xxx.yyy.75.178:10532 SYN ******S* Mar 9 06:57:54 80.14.108.212:4037 -> xxx.yyy.75.178:10528 SYN ******S* Mar 9 06:57:59 80.14.108.212:4042 -> xxx.yyy.75.178:10519 SYN ******S* Mar 9 06:57:59 80.14.108.212:4043 -> xxx.yyy.75.178:10525 SYN ******S* 24709 Mar 9 11:40:04 80.96.109.142:3887 -> xxx.yyy.1.3:1433 SYN ******S* Mar 9 11:40:01 80.96.109.142:3910 -> xxx.yyy.1.8:1433 SYN ******S* Mar 9 11:40:01 80.96.109.142:3919 -> xxx.yyy.1.10:1433 SYN ******S* Mar 9 11:40:01 80.96.109.142:3925 -> xxx.yyy.1.11:1433 SYN ******S* Mar 9 11:40:01 80.96.109.142:3930 -> xxx.yyy.1.12:1433 SYN ******S* Mar 9 11:40:01 80.96.109.142:3933 -> xxx.yyy.1.13:1433 SYN ******S* Mar 9 11:40:01 80.96.109.142:3946 -> xxx.yyy.1.15:1433 SYN ******S* Mar 9 11:40:02 80.96.109.142:3981 -> xxx.yyy.1.22:1433 SYN ******S* [...] Mar 9 14:17:16 80.96.109.142:2237 -> xxx.yyy.179.191:1433 SYN ******S* Mar 9 14:17:16 80.96.109.142:4707 -> xxx.yyy.179.201:1433 SYN ******S* Mar 9 14:17:16 80.96.109.142:1967 -> xxx.yyy.179.155:1433 SYN ******S* Mar 9 14:17:16 80.96.109.142:4748 -> xxx.yyy.179.202:1433 SYN ******S* Mar 9 14:17:16 80.96.109.142:2180 -> xxx.yyy.179.160:1433 SYN ******S* Mar 9 14:17:17 80.96.109.142:2483 -> xxx.yyy.179.158:1433 SYN ******S* Mar 9 14:17:17 80.96.109.142:2898 -> xxx.yyy.179.192:1433 SYN ******S* Mar 9 14:17:18 80.96.109.142:2924 -> xxx.yyy.179.162:1433 SYN ******S* Mar 9 14:17:18 80.96.109.142:3174 -> xxx.yyy.179.164:1433 SYN ******S* 22207 Mar 9 18:05:14 62.150.31.78:4642 -> xxx.yyy.1.2:3389 SYN ******S* Mar 9 18:05:14 62.150.31.78:4643 -> xxx.yyy.1.3:3389 SYN ******S* Mar 9 18:05:14 62.150.31.78:4645 -> xxx.yyy.1.5:3389 SYN ******S* Mar 9 18:05:14 62.150.31.78:4644 -> xxx.yyy.1.4:3389 SYN ******S* Mar 9 18:05:14 62.150.31.78:4646 -> xxx.yyy.1.6:3389 SYN ******S* Mar 9 18:05:14 62.150.31.78:4649 -> xxx.yyy.1.9:3389 SYN ******S* Mar 9 18:05:14 62.150.31.78:4648 -> xxx.yyy.1.8:3389 SYN ******S* Mar 9 18:05:14 62.150.31.78:4650 -> xxx.yyy.1.10:3389 SYN ******S* [...] Mar 9 18:06:39 62.150.31.78:4652 -> xxx.yyy.255.242:3389 SYN ******S* Mar 9 18:06:39 62.150.31.78:4659 -> xxx.yyy.255.249:3389 SYN ******S* Mar 9 18:06:39 62.150.31.78:4658 -> xxx.yyy.255.248:3389 SYN ******S* Mar 9 18:06:39 62.150.31.78:4662 -> xxx.yyy.255.252:3389 SYN ******S* Mar 9 18:06:39 62.150.31.78:4661 -> xxx.yyy.255.251:3389 SYN ******S* Mar 9 18:06:39 62.150.31.78:4660 -> xxx.yyy.255.250:3389 SYN ******S* Mar 9 18:06:39 62.150.31.78:4614 -> xxx.yyy.255.254:3389 SYN ******S* Mar 9 18:06:39 62.150.31.78:4663 -> xxx.yyy.255.253:3389 SYN ******S* 22106 Mar 9 11:55:26 213.180.210.35:60102 -> xxx.yyy.104.70:1080 SYN ******S* Mar 9 11:55:26 213.180.210.35:43637 -> xxx.yyy.104.70:1075 SYN ******S* Mar 9 11:55:26 213.180.210.35:57978 -> xxx.yyy.104.70:80 SYN ******S* Mar 9 11:55:26 213.180.210.35:58219 -> xxx.yyy.104.70:8000 SYN ******S* Mar 9 11:55:26 213.180.210.35:64433 -> xxx.yyy.104.70:4480 SYN ******S* Mar 9 11:55:26 213.180.210.35:40234 -> xxx.yyy.104.70:81 SYN ******S* Mar 9 11:55:26 213.180.210.35:61965 -> xxx.yyy.104.70:3128 SYN ******S* Mar 9 11:55:26 213.180.210.35:43838 -> xxx.yyy.104.70:6588 SYN ******S* [...] Mar 9 12:15:40 213.180.210.35:34306 -> xxx.yyy.104.70:6018 SYN ******S* Mar 9 12:15:40 213.180.210.35:34306 -> xxx.yyy.104.70:27374 SYN ******S* Mar 9 12:15:40 213.180.210.35:34306 -> xxx.yyy.104.70:593 SYN ******S* Mar 9 12:15:40 213.180.210.35:34306 -> xxx.yyy.104.70:6016 SYN ******S* Mar 9 12:38:26 213.180.210.35:57052 -> xxx.yyy.104.70:1976 SYN ******S* Mar 9 12:38:26 213.180.210.35:43203 -> xxx.yyy.104.70:1998 SYN ******S* Mar 9 12:38:26 213.180.210.35:43063 -> xxx.yyy.104.70:2001 SYN ******S* Mar 9 12:38:26 213.180.210.35:31651 -> xxx.yyy.104.70:3389 SYN ******S* Mar 9 12:38:26 213.180.210.35:51651 -> xxx.yyy.104.70:6500 SYN ******S* 20638 Mar 9 14:14:54 213.60.93.4:4698 -> xxx.yyy.1.21:1433 SYN ******S* Mar 9 14:14:56 213.60.93.4:3956 -> xxx.yyy.1.26:1433 SYN ******S* Mar 9 14:14:56 213.60.93.4:3790 -> xxx.yyy.1.35:1433 SYN ******S* Mar 9 14:14:57 213.60.93.4:4101 -> xxx.yyy.1.29:1433 SYN ******S* Mar 9 14:14:57 213.60.93.4:1429 -> xxx.yyy.1.37:1433 SYN ******S* Mar 9 14:15:00 213.60.93.4:1605 -> xxx.yyy.1.38:1433 SYN ******S* Mar 9 14:14:57 213.60.93.4:1076 -> xxx.yyy.1.15:1433 SYN ******S* Mar 9 14:14:58 213.60.93.4:3030 -> xxx.yyy.1.39:1433 SYN ******S* [...] Mar 9 17:57:47 213.60.93.4:4343 -> xxx.yyy.255.222:1433 SYN ******S* Mar 9 17:57:47 213.60.93.4:1755 -> xxx.yyy.255.252:1433 SYN ******S* Mar 9 17:57:48 213.60.93.4:3216 -> xxx.yyy.255.224:1433 SYN ******S* Mar 9 17:57:48 213.60.93.4:1671 -> xxx.yyy.255.227:1433 SYN ******S* Mar 9 17:57:49 213.60.93.4:1176 -> xxx.yyy.255.230:1433 SYN ******S* Mar 9 17:57:50 213.60.93.4:4100 -> xxx.yyy.255.238:1433 SYN ******S* Mar 9 17:57:51 213.60.93.4:4762 -> xxx.yyy.255.239:1433 SYN ******S* Mar 9 17:57:51 213.60.93.4:1470 -> xxx.yyy.255.244:1433 SYN ******S* Mar 9 17:57:52 213.60.93.4:3152 -> xxx.yyy.255.248:1433 SYN ******S* 20161 [...] 16826 Mar 9 14:31:30 82.39.9.99:1715 -> xxx.yyy.1.12:1433 SYN ******S* Mar 9 14:31:33 82.39.9.99:1953 -> xxx.yyy.1.18:1433 SYN ******S* Mar 9 14:31:30 82.39.9.99:3933 -> xxx.yyy.1.23:1433 SYN ******S* Mar 9 14:31:30 82.39.9.99:3954 -> xxx.yyy.1.24:1433 SYN ******S* Mar 9 14:31:30 82.39.9.99:4090 -> xxx.yyy.1.26:1433 SYN ******S* Mar 9 14:31:30 82.39.9.99:4386 -> xxx.yyy.1.28:1433 SYN ******S* Mar 9 14:31:30 82.39.9.99:4100 -> xxx.yyy.1.36:1433 SYN ******S* Mar 9 14:31:30 82.39.9.99:4111 -> xxx.yyy.1.37:1433 SYN ******S* [...] Mar 9 17:29:03 82.39.9.99:3225 -> xxx.yyy.255.212:1433 SYN ******S* Mar 9 17:29:04 82.39.9.99:3522 -> xxx.yyy.255.213:1433 SYN ******S* Mar 9 17:29:08 82.39.9.99:2308 -> xxx.yyy.255.231:1433 SYN ******S* Mar 9 17:29:08 82.39.9.99:1894 -> xxx.yyy.255.229:1433 SYN ******S* Mar 9 17:29:10 82.39.9.99:4340 -> xxx.yyy.255.245:1433 SYN ******S* Mar 9 17:29:10 82.39.9.99:4332 -> xxx.yyy.255.244:1433 SYN ******S* Mar 9 17:29:11 82.39.9.99:4503 -> xxx.yyy.255.247:1433 SYN ******S* Mar 9 17:29:11 82.39.9.99:4611 -> xxx.yyy.255.250:1433 SYN ******S* 15617 Mar 9 19:39:58 210.93.145.106:1279 -> xxx.yyy.1.0:1433 SYN ******S* Mar 9 19:39:58 210.93.145.106:1280 -> xxx.yyy.1.1:1433 SYN ******S* Mar 9 19:39:58 210.93.145.106:1283 -> xxx.yyy.1.4:1433 SYN ******S* Mar 9 19:39:58 210.93.145.106:1282 -> xxx.yyy.1.3:1433 SYN ******S* Mar 9 19:39:58 210.93.145.106:1281 -> xxx.yyy.1.2:1433 SYN ******S* Mar 9 19:39:58 210.93.145.106:1304 -> xxx.yyy.1.25:1433 SYN ******S* Mar 9 19:39:58 210.93.145.106:1308 -> xxx.yyy.1.29:1433 SYN ******S* Mar 9 19:39:58 210.93.145.106:1309 -> xxx.yyy.1.30:1433 SYN ******S* [...] Mar 9 19:40:45 210.93.145.106:1275 -> xxx.yyy.255.226:1433 SYN ******S* Mar 9 19:40:45 210.93.145.106:1272 -> xxx.yyy.255.223:1433 SYN ******S* Mar 9 19:40:45 210.93.145.106:1279 -> xxx.yyy.255.230:1433 SYN ******S* Mar 9 19:40:45 210.93.145.106:1277 -> xxx.yyy.255.228:1433 SYN ******S* Mar 9 19:40:45 210.93.145.106:1276 -> xxx.yyy.255.227:1433 SYN ******S* Mar 9 19:40:45 210.93.145.106:1278 -> xxx.yyy.255.229:1433 SYN ******S* Mar 9 19:40:45 210.93.145.106:1296 -> xxx.yyy.255.247:1433 SYN ******S* Mar 9 19:40:45 210.93.145.106:1299 -> xxx.yyy.255.250:1433 SYN ******S* 14801 Mar 9 22:08:35 61.153.214.228:3000 -> xxx.yyy.1.1:1433 SYN ******S* Mar 9 22:08:35 61.153.214.228:1026 -> xxx.yyy.1.2:1433 SYN ******S* Mar 9 22:08:35 61.153.214.228:1028 -> xxx.yyy.1.3:1433 SYN ******S* Mar 9 22:08:35 61.153.214.228:1031 -> xxx.yyy.1.5:1433 SYN ******S* Mar 9 22:08:35 61.153.214.228:1032 -> xxx.yyy.1.6:1433 SYN ******S* Mar 9 22:08:38 61.153.214.228:1033 -> xxx.yyy.1.7:1433 SYN ******S* Mar 9 22:08:35 61.153.214.228:1037 -> xxx.yyy.1.9:1433 SYN ******S* Mar 9 22:08:35 61.153.214.228:1040 -> xxx.yyy.1.11:1433 SYN ******S* [...] Mar 9 23:48:11 61.153.214.228:2635 -> xxx.yyy.111.233:1433 SYN ******S* Mar 9 23:48:12 61.153.214.228:2881 -> xxx.yyy.111.238:1433 SYN ******S* Mar 9 23:48:12 61.153.214.228:2935 -> xxx.yyy.111.240:1433 SYN ******S* Mar 9 23:48:12 61.153.214.228:2930 -> xxx.yyy.111.239:1433 SYN ******S* Mar 9 23:48:12 61.153.214.228:1824 -> xxx.yyy.111.250:1433 SYN ******S* Mar 9 23:48:12 61.153.214.228:1836 -> xxx.yyy.111.253:1433 SYN ******S* Mar 9 23:48:12 61.153.214.228:1834 -> xxx.yyy.111.252:1433 SYN ******S* Mar 9 23:48:12 61.153.214.228:1825 -> xxx.yyy.111.251:1433 SYN ******S* 13942 Mar 9 10:13:56 213.186.254.58:2590 -> xxx.yyy.1.2:1433 SYN ******S* Mar 9 10:13:56 213.186.254.58:2596 -> xxx.yyy.1.3:1433 SYN ******S* Mar 9 10:13:56 213.186.254.58:2597 -> xxx.yyy.1.4:1433 SYN ******S* Mar 9 10:13:56 213.186.254.58:2602 -> xxx.yyy.1.7:1433 SYN ******S* Mar 9 10:13:53 213.186.254.58:2607 -> xxx.yyy.1.8:1433 SYN ******S* Mar 9 10:13:56 213.186.254.58:2631 -> xxx.yyy.1.10:1433 SYN ******S* Mar 9 10:13:53 213.186.254.58:2634 -> xxx.yyy.1.11:1433 SYN ******S* Mar 9 10:13:53 213.186.254.58:2650 -> xxx.yyy.1.14:1433 SYN ******S* [...] Mar 9 11:59:50 213.186.254.58:3983 -> xxx.yyy.175.227:1433 SYN ******S* Mar 9 11:59:50 213.186.254.58:4930 -> xxx.yyy.176.3:1433 SYN ******S* Mar 9 11:59:50 213.186.254.58:2383 -> xxx.yyy.175.171:1433 SYN ******S* Mar 9 11:59:51 213.186.254.58:4530 -> xxx.yyy.176.9:1433 SYN ******S* Mar 9 11:59:51 213.186.254.58:1677 -> xxx.yyy.175.234:1433 SYN ******S* Mar 9 11:59:51 213.186.254.58:1922 -> xxx.yyy.176.10:1433 SYN ******S* Mar 9 11:59:51 213.186.254.58:4954 -> xxx.yyy.175.182:1433 SYN ******S* Mar 9 11:59:52 213.186.254.58:1618 -> xxx.yyy.176.17:1433 SYN ******S* 13084 Mar 9 21:02:57 203.67.79.223:1354 -> xxx.yyy.1.1:1433 SYN ******S* Mar 9 21:02:57 203.67.79.223:1358 -> xxx.yyy.1.5:1433 SYN ******S* Mar 9 21:02:57 203.67.79.223:1359 -> xxx.yyy.1.6:1433 SYN ******S* Mar 9 21:02:57 203.67.79.223:1360 -> xxx.yyy.1.7:1433 SYN ******S* Mar 9 21:02:57 203.67.79.223:1363 -> xxx.yyy.1.10:1433 SYN ******S* Mar 9 21:02:57 203.67.79.223:1364 -> xxx.yyy.1.11:1433 SYN ******S* Mar 9 21:02:54 203.67.79.223:1374 -> xxx.yyy.1.21:1433 SYN ******S* Mar 9 21:02:57 203.67.79.223:1376 -> xxx.yyy.1.23:1433 SYN ******S* [...] Mar 9 21:42:59 203.67.79.223:3144 -> xxx.yyy.90.3:1433 SYN ******S* Mar 9 21:42:59 203.67.79.223:3142 -> xxx.yyy.90.1:1433 SYN ******S* Mar 9 21:42:59 203.67.79.223:3147 -> xxx.yyy.90.6:1433 SYN ******S* Mar 9 21:42:59 203.67.79.223:3145 -> xxx.yyy.90.4:1433 SYN ******S* Mar 9 21:42:59 203.67.79.223:3149 -> xxx.yyy.90.8:1433 SYN ******S* Mar 9 21:42:59 203.67.79.223:3146 -> xxx.yyy.90.5:1433 SYN ******S* Mar 9 21:42:59 203.67.79.223:3154 -> xxx.yyy.90.13:1433 SYN ******S* Mar 9 21:42:59 203.67.79.223:3152 -> xxx.yyy.90.11:1433 SYN ******S* Mar 9 21:42:59 203.67.79.223:3161 -> xxx.yyy.90.20:1433 SYN ******S* 12586 Mar 9 03:29:28 212.102.30.114:2226 -> xxx.yyy.1.1:1433 SYN ******S* Mar 9 03:29:28 212.102.30.114:2268 -> xxx.yyy.1.2:1433 SYN ******S* Mar 9 03:29:28 212.102.30.114:2284 -> xxx.yyy.1.3:1433 SYN ******S* Mar 9 03:29:28 212.102.30.114:2384 -> xxx.yyy.1.4:1433 SYN ******S* Mar 9 03:29:28 212.102.30.114:2386 -> xxx.yyy.1.5:1433 SYN ******S* Mar 9 03:29:28 212.102.30.114:2405 -> xxx.yyy.1.6:1433 SYN ******S* Mar 9 03:29:28 212.102.30.114:2476 -> xxx.yyy.1.7:1433 SYN ******S* Mar 9 03:29:28 212.102.30.114:2483 -> xxx.yyy.1.8:1433 SYN ******S* [...] Mar 9 04:13:36 212.102.30.114:2398 -> xxx.yyy.95.216:1433 SYN ******S* Mar 9 04:13:36 212.102.30.114:2447 -> xxx.yyy.95.218:1433 SYN ******S* Mar 9 04:13:36 212.102.30.114:2502 -> xxx.yyy.95.219:1433 SYN ******S* Mar 9 04:13:36 212.102.30.114:2557 -> xxx.yyy.95.221:1433 SYN ******S* Mar 9 04:13:36 212.102.30.114:2552 -> xxx.yyy.95.220:1433 SYN ******S* Mar 9 04:13:37 212.102.30.114:2636 -> xxx.yyy.95.223:1433 SYN ******S* Mar 9 04:13:39 212.102.30.114:2917 -> xxx.yyy.95.229:1433 SYN ******S* Mar 9 04:13:40 212.102.30.114:1091 -> xxx.yyy.95.253:1433 SYN ******S* Mar 9 04:13:40 212.102.30.114:1063 -> xxx.yyy.95.255:1433 SYN ******S* 12157 [...] 11506 [...] 11013 Mar 9 14:57:45 85.202.140.142:3487 -> xxx.yyy.1.0:1433 SYN ******S* Mar 9 14:57:46 85.202.140.142:3525 -> xxx.yyy.1.10:1433 SYN ******S* Mar 9 14:57:43 85.202.140.142:3550 -> xxx.yyy.1.16:1433 SYN ******S* Mar 9 14:57:43 85.202.140.142:3552 -> xxx.yyy.1.17:1433 SYN ******S* Mar 9 14:57:44 85.202.140.142:3564 -> xxx.yyy.1.19:1433 SYN ******S* Mar 9 14:57:44 85.202.140.142:3594 -> xxx.yyy.1.24:1433 SYN ******S* Mar 9 14:57:44 85.202.140.142:3605 -> xxx.yyy.1.26:1433 SYN ******S* Mar 9 14:57:44 85.202.140.142:3611 -> xxx.yyy.1.27:1433 SYN ******S* [...] Mar 9 18:18:29 85.202.140.142:1447 -> xxx.yyy.202.219:1433 SYN ******S* Mar 9 18:18:30 85.202.140.142:1098 -> xxx.yyy.202.211:1433 SYN ******S* Mar 9 18:18:30 85.202.140.142:1192 -> xxx.yyy.202.213:1433 SYN ******S* Mar 9 18:18:30 85.202.140.142:1221 -> xxx.yyy.202.215:1433 SYN ******S* Mar 9 18:18:30 85.202.140.142:1680 -> xxx.yyy.202.222:1433 SYN ******S* Mar 9 18:18:31 85.202.140.142:1366 -> xxx.yyy.202.218:1433 SYN ******S* Mar 9 18:18:32 85.202.140.142:4008 -> xxx.yyy.202.191:1433 SYN ******S* Mar 9 18:18:32 85.202.140.142:1755 -> xxx.yyy.202.225:1433 SYN ******S* 10588 Mar 9 18:00:38 80.55.172.178:3949 -> xxx.yyy.1.2:3306 SYN ******S* Mar 9 18:00:35 80.55.172.178:3986 -> xxx.yyy.1.3:3306 SYN ******S* Mar 9 18:00:35 80.55.172.178:4076 -> xxx.yyy.1.5:3306 SYN ******S* Mar 9 18:00:36 80.55.172.178:4211 -> xxx.yyy.1.8:3306 SYN ******S* Mar 9 18:00:36 80.55.172.178:4254 -> xxx.yyy.1.9:3306 SYN ******S* Mar 9 18:00:36 80.55.172.178:4294 -> xxx.yyy.1.10:3306 SYN ******S* Mar 9 18:00:36 80.55.172.178:4322 -> xxx.yyy.1.11:3306 SYN ******S* Mar 9 18:00:36 80.55.172.178:4369 -> xxx.yyy.1.12:3306 SYN ******S* [...] Mar 9 19:45:25 80.55.172.178:4365 -> xxx.yyy.137.152:3306 SYN ******S* Mar 9 19:45:26 80.55.172.178:4631 -> xxx.yyy.137.154:3306 SYN ******S* Mar 9 19:45:26 80.55.172.178:4481 -> xxx.yyy.137.136:3306 SYN ******S* Mar 9 19:45:26 80.55.172.178:4541 -> xxx.yyy.137.137:3306 SYN ******S* Mar 9 19:45:26 80.55.172.178:4754 -> xxx.yyy.137.156:3306 SYN ******S* Mar 9 19:45:26 80.55.172.178:4684 -> xxx.yyy.137.139:3306 SYN ******S* Mar 9 19:45:26 80.55.172.178:4959 -> xxx.yyy.137.157:3306 SYN ******S* Mar 9 19:45:26 80.55.172.178:3005 -> xxx.yyy.137.140:3306 SYN ******S* Mar 9 19:45:27 80.55.172.178:3062 -> xxx.yyy.137.158:3306 SYN ******S* 10012 Mar 9 19:40:50 218.24.4.70:4260 -> xxx.yyy.64.6:1433 SYN ******S* Mar 9 19:40:48 218.24.4.70:4341 -> xxx.yyy.64.8:1433 SYN ******S* Mar 9 19:40:49 218.24.4.70:4175 -> xxx.yyy.64.5:1433 SYN ******S* Mar 9 19:40:51 218.24.4.70:4557 -> xxx.yyy.64.11:1433 SYN ******S* Mar 9 19:40:51 218.24.4.70:4595 -> xxx.yyy.64.12:1433 SYN ******S* Mar 9 19:40:51 218.24.4.70:4650 -> xxx.yyy.64.14:1433 SYN ******S* Mar 9 19:40:51 218.24.4.70:4769 -> xxx.yyy.64.17:1433 SYN ******S* Mar 9 19:40:52 218.24.4.70:1063 -> xxx.yyy.64.20:1433 SYN ******S* [...] Mar 9 22:33:50 218.24.4.70:1109 -> xxx.yyy.255.248:1433 SYN ******S* Mar 9 22:33:51 218.24.4.70:4520 -> xxx.yyy.255.233:1433 SYN ******S* Mar 9 22:33:52 218.24.4.70:3695 -> xxx.yyy.255.176:1433 SYN ******S* Mar 9 22:33:52 218.24.4.70:4787 -> xxx.yyy.255.242:1433 SYN ******S* Mar 9 22:33:52 218.24.4.70:3803 -> xxx.yyy.255.191:1433 SYN ******S* Mar 9 22:33:53 218.24.4.70:4928 -> xxx.yyy.255.244:1433 SYN ******S* Mar 9 22:33:54 218.24.4.70:4156 -> xxx.yyy.255.222:1433 SYN ******S* Mar 9 22:33:55 218.24.4.70:4197 -> xxx.yyy.255.225:1433 SYN ******S* Mar 9 22:33:59 218.24.4.70:1069 -> xxx.yyy.255.247:1433 SYN ******S* 9695 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions