[LOGS] Summary of large-scale portscanning detects
[email protected] Fri, 11 Mar 2005 09:08:48 -0600 (CST)
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Mar 10 00:53:40 221.161.134.190:2301 -> xxx.yyy.1.0:12345 SYN ******S* Mar 10 00:53:37 221.161.134.190:2303 -> xxx.yyy.1.0:27374 SYN ******S* Mar 10 00:53:38 221.161.134.190:2305 -> xxx.yyy.1.0:3410 SYN ******S* Mar 10 00:53:38 221.161.134.190:2304 -> xxx.yyy.1.0:901 SYN ******S* Mar 10 00:53:40 221.161.134.190:2306 -> xxx.yyy.1.1:12345 SYN ******S* Mar 10 00:53:40 221.161.134.190:2308 -> xxx.yyy.1.1:27374 SYN ******S* Mar 10 00:53:39 221.161.134.190:2310 -> xxx.yyy.1.1:3410 SYN ******S* Mar 10 00:53:39 221.161.134.190:2309 -> xxx.yyy.1.1:901 SYN ******S* [...] Mar 10 05:04:22 221.161.134.190:2492 -> xxx.yyy.194.119:901 SYN ******S* Mar 10 05:04:22 221.161.134.190:2493 -> xxx.yyy.194.119:3410 SYN ******S* Mar 10 05:04:22 221.161.134.190:2550 -> xxx.yyy.194.134:12345 SYN ******S* Mar 10 05:04:22 221.161.134.190:2551 -> xxx.yyy.194.134:27374 SYN ******S* Mar 10 05:04:22 221.161.134.190:2552 -> xxx.yyy.194.134:901 SYN ******S* Mar 10 05:04:22 221.161.134.190:2553 -> xxx.yyy.194.134:3410 SYN ******S* Mar 10 05:04:23 221.161.134.190:2554 -> xxx.yyy.194.135:12345 SYN ******S* Mar 10 05:04:23 221.161.134.190:2555 -> xxx.yyy.194.135:27374 SYN ******S* 185582 Mar 10 00:18:11 66.57.130.143:4645 -> xxx.yyy.1.1:1433 SYN ******S* Mar 10 00:18:08 66.57.130.143:4649 -> xxx.yyy.1.2:1433 SYN ******S* Mar 10 00:18:11 66.57.130.143:4656 -> xxx.yyy.1.4:1433 SYN ******S* Mar 10 00:18:11 66.57.130.143:4660 -> xxx.yyy.1.5:1433 SYN ******S* Mar 10 00:18:08 66.57.130.143:4668 -> xxx.yyy.1.6:1433 SYN ******S* Mar 10 00:18:11 66.57.130.143:4676 -> xxx.yyy.1.8:1433 SYN ******S* Mar 10 00:18:11 66.57.130.143:4679 -> xxx.yyy.1.9:1433 SYN ******S* Mar 10 00:18:11 66.57.130.143:4680 -> xxx.yyy.1.10:1433 SYN ******S* [...] Mar 10 04:14:08 66.57.130.143:3326 -> xxx.yyy.255.244:1433 SYN ******S* Mar 10 04:14:09 66.57.130.143:3336 -> xxx.yyy.255.247:1433 SYN ******S* Mar 10 04:14:09 66.57.130.143:3341 -> xxx.yyy.255.248:1433 SYN ******S* Mar 10 04:14:09 66.57.130.143:3345 -> xxx.yyy.255.249:1433 SYN ******S* Mar 10 04:14:09 66.57.130.143:3346 -> xxx.yyy.255.250:1433 SYN ******S* Mar 10 04:14:10 66.57.130.143:3353 -> xxx.yyy.255.251:1433 SYN ******S* Mar 10 04:14:10 66.57.130.143:3354 -> xxx.yyy.255.252:1433 SYN ******S* Mar 10 04:14:10 66.57.130.143:3366 -> xxx.yyy.255.253:1433 SYN ******S* Mar 10 04:14:10 66.57.130.143:3372 -> xxx.yyy.255.254:1433 SYN ******S* 104525 Mar 10 01:19:19 80.55.172.178:3096 -> xxx.yyy.1.2:3306 SYN ******S* Mar 10 01:19:17 80.55.172.178:3274 -> xxx.yyy.1.6:3306 SYN ******S* Mar 10 01:19:17 80.55.172.178:3325 -> xxx.yyy.1.7:3306 SYN ******S* Mar 10 01:19:20 80.55.172.178:3475 -> xxx.yyy.1.8:3306 SYN ******S* Mar 10 01:19:18 80.55.172.178:4643 -> xxx.yyy.1.10:3306 SYN ******S* Mar 10 01:19:18 80.55.172.178:4885 -> xxx.yyy.1.15:3306 SYN ******S* Mar 10 01:19:19 80.55.172.178:3073 -> xxx.yyy.1.16:3306 SYN ******S* Mar 10 01:19:19 80.55.172.178:3514 -> xxx.yyy.1.19:3306 SYN ******S* [...] Mar 10 17:07:51 80.55.172.178:3795 -> xxx.yyy.169.240:3306 SYN ******S* Mar 10 17:07:51 80.55.172.178:3686 -> xxx.yyy.169.228:3306 SYN ******S* Mar 10 17:07:51 80.55.172.178:3922 -> xxx.yyy.169.242:3306 SYN ******S* Mar 10 17:07:51 80.55.172.178:3970 -> xxx.yyy.169.243:3306 SYN ******S* Mar 10 17:07:52 80.55.172.178:4113 -> xxx.yyy.169.246:3306 SYN ******S* Mar 10 17:07:52 80.55.172.178:4202 -> xxx.yyy.169.247:3306 SYN ******S* Mar 10 17:07:53 80.55.172.178:4232 -> xxx.yyy.169.250:3306 SYN ******S* Mar 10 17:07:54 80.55.172.178:4317 -> xxx.yyy.169.253:3306 SYN ******S* Mar 10 17:07:54 80.55.172.178:3533 -> xxx.yyy.169.238:3306 SYN ******S* 101287 Mar 10 00:57:00 134.156.42.35:1820 -> xxx.yyy.1.0:1433 SYN ******S* Mar 10 00:57:00 134.156.42.35:1821 -> xxx.yyy.1.1:1433 SYN ******S* Mar 10 00:57:00 134.156.42.35:1822 -> xxx.yyy.1.2:1433 SYN ******S* Mar 10 00:57:00 134.156.42.35:1823 -> xxx.yyy.1.3:1433 SYN ******S* Mar 10 00:57:03 134.156.42.35:1824 -> xxx.yyy.1.4:1433 SYN ******S* Mar 10 00:57:03 134.156.42.35:1825 -> xxx.yyy.1.5:1433 SYN ******S* Mar 10 00:57:03 134.156.42.35:1827 -> xxx.yyy.1.7:1433 SYN ******S* Mar 10 00:57:03 134.156.42.35:1828 -> xxx.yyy.1.8:1433 SYN ******S* [...] Mar 10 18:41:37 134.156.42.35:4515 -> xxx.yyy.255.226:1433 SYN ******S* Mar 10 18:41:37 134.156.42.35:4530 -> xxx.yyy.255.241:1433 SYN ******S* Mar 10 18:41:37 134.156.42.35:4534 -> xxx.yyy.255.245:1433 SYN ******S* Mar 10 18:41:37 134.156.42.35:4533 -> xxx.yyy.255.244:1433 SYN ******S* Mar 10 18:41:37 134.156.42.35:4535 -> xxx.yyy.255.246:1433 SYN ******S* Mar 10 18:41:39 134.156.42.35:4540 -> xxx.yyy.255.252:1433 SYN ******S* Mar 10 18:41:39 134.156.42.35:4541 -> xxx.yyy.255.251:1433 SYN ******S* Mar 10 18:41:39 134.156.42.35:4543 -> xxx.yyy.255.254:1433 SYN ******S* Mar 10 18:41:39 134.156.42.35:4544 -> xxx.yyy.255.253:1433 SYN ******S* 100302 Mar 10 00:41:12 81.214.71.205:1337 -> xxx.yyy.1.1:3306 SYN ******S* Mar 10 00:41:09 81.214.71.205:1339 -> xxx.yyy.1.3:3306 SYN ******S* Mar 10 00:41:09 81.214.71.205:1341 -> xxx.yyy.1.5:3306 SYN ******S* Mar 10 00:41:12 81.214.71.205:1342 -> xxx.yyy.1.6:3306 SYN ******S* Mar 10 00:41:12 81.214.71.205:1343 -> xxx.yyy.1.7:3306 SYN ******S* Mar 10 00:41:12 81.214.71.205:1344 -> xxx.yyy.1.8:3306 SYN ******S* Mar 10 00:41:09 81.214.71.205:1346 -> xxx.yyy.1.10:3306 SYN ******S* Mar 10 00:41:09 81.214.71.205:1347 -> xxx.yyy.1.11:3306 SYN ******S* [...] Mar 10 02:39:56 81.214.71.205:2674 -> xxx.yyy.255.245:3306 SYN ******S* Mar 10 02:39:56 81.214.71.205:2675 -> xxx.yyy.255.246:3306 SYN ******S* Mar 10 02:39:56 81.214.71.205:2676 -> xxx.yyy.255.247:3306 SYN ******S* Mar 10 02:39:57 81.214.71.205:2677 -> xxx.yyy.255.248:3306 SYN ******S* Mar 10 02:39:57 81.214.71.205:2678 -> xxx.yyy.255.249:3306 SYN ******S* Mar 10 02:39:57 81.214.71.205:2679 -> xxx.yyy.255.250:3306 SYN ******S* Mar 10 02:39:57 81.214.71.205:2680 -> xxx.yyy.255.251:3306 SYN ******S* Mar 10 02:39:57 81.214.71.205:2681 -> xxx.yyy.255.252:3306 SYN ******S* Mar 10 02:39:57 81.214.71.205:2682 -> xxx.yyy.255.253:3306 SYN ******S* 96105 Mar 10 17:22:28 207.162.57.107:4369 -> xxx.yyy.1.2:3006 SYN ******S* Mar 10 17:22:28 207.162.57.107:4373 -> xxx.yyy.1.3:3006 SYN ******S* Mar 10 17:22:27 207.162.57.107:4377 -> xxx.yyy.1.4:3006 SYN ******S* Mar 10 17:22:28 207.162.57.107:4397 -> xxx.yyy.1.9:3006 SYN ******S* Mar 10 17:22:27 207.162.57.107:4405 -> xxx.yyy.1.11:3006 SYN ******S* Mar 10 17:22:27 207.162.57.107:4409 -> xxx.yyy.1.12:3006 SYN ******S* Mar 10 17:22:27 207.162.57.107:4421 -> xxx.yyy.1.15:3006 SYN ******S* Mar 10 17:22:28 207.162.57.107:4425 -> xxx.yyy.1.16:3006 SYN ******S* [...] Mar 10 17:35:18 207.162.57.107:1615 -> xxx.yyy.255.226:3306 SYN ******S* Mar 10 17:35:18 207.162.57.107:1639 -> xxx.yyy.255.238:3306 SYN ******S* Mar 10 17:35:18 207.162.57.107:1647 -> xxx.yyy.255.242:3306 SYN ******S* Mar 10 17:35:18 207.162.57.107:1643 -> xxx.yyy.255.240:3306 SYN ******S* Mar 10 17:35:18 207.162.57.107:1641 -> xxx.yyy.255.239:3306 SYN ******S* Mar 10 17:35:18 207.162.57.107:1633 -> xxx.yyy.255.235:3306 SYN ******S* Mar 10 17:35:18 207.162.57.107:1649 -> xxx.yyy.255.243:3306 SYN ******S* Mar 10 17:35:18 207.162.57.107:1667 -> xxx.yyy.255.252:3306 SYN ******S* 86750 Mar 10 03:48:46 60.13.130.65:2782 -> xxx.yyy.1.0:1433 SYN ******S* Mar 10 03:48:46 60.13.130.65:2784 -> xxx.yyy.1.2:1433 SYN ******S* Mar 10 03:48:46 60.13.130.65:2788 -> xxx.yyy.1.6:1433 SYN ******S* Mar 10 03:48:46 60.13.130.65:2790 -> xxx.yyy.1.8:1433 SYN ******S* Mar 10 03:48:43 60.13.130.65:2789 -> xxx.yyy.1.7:1433 SYN ******S* Mar 10 03:48:43 60.13.130.65:2791 -> xxx.yyy.1.9:1433 SYN ******S* Mar 10 03:48:43 60.13.130.65:2793 -> xxx.yyy.1.11:1433 SYN ******S* Mar 10 03:48:43 60.13.130.65:2792 -> xxx.yyy.1.10:1433 SYN ******S* [...] Mar 10 07:38:36 60.13.130.65:1850 -> xxx.yyy.255.241:1433 SYN ******S* Mar 10 07:38:36 60.13.130.65:1855 -> xxx.yyy.255.242:1433 SYN ******S* Mar 10 07:38:37 60.13.130.65:1878 -> xxx.yyy.255.246:1433 SYN ******S* Mar 10 07:38:37 60.13.130.65:1891 -> xxx.yyy.255.250:1433 SYN ******S* Mar 10 07:38:37 60.13.130.65:1889 -> xxx.yyy.255.249:1433 SYN ******S* Mar 10 07:38:37 60.13.130.65:1895 -> xxx.yyy.255.251:1433 SYN ******S* Mar 10 07:38:38 60.13.130.65:1900 -> xxx.yyy.255.252:1433 SYN ******S* Mar 10 07:38:38 60.13.130.65:1911 -> xxx.yyy.255.254:1433 SYN ******S* 78054 Mar 10 21:48:43 145.253.125.77:3624 -> xxx.yyy.1.0:4000 SYN ******S* Mar 10 21:48:43 145.253.125.77:3625 -> xxx.yyy.1.0:6129 SYN ******S* Mar 10 21:48:43 145.253.125.77:3626 -> xxx.yyy.1.0:6101 SYN ******S* Mar 10 21:48:43 145.253.125.77:3627 -> xxx.yyy.1.1:4000 SYN ******S* Mar 10 21:48:43 145.253.125.77:3628 -> xxx.yyy.1.1:6129 SYN ******S* Mar 10 21:48:43 145.253.125.77:3629 -> xxx.yyy.1.1:6101 SYN ******S* Mar 10 21:48:43 145.253.125.77:3632 -> xxx.yyy.1.2:6101 SYN ******S* Mar 10 21:48:43 145.253.125.77:3636 -> xxx.yyy.1.4:4000 SYN ******S* [...] Mar 10 21:52:22 145.253.125.77:3637 -> xxx.yyy.255.251:4000 SYN ******S* Mar 10 21:52:22 145.253.125.77:3638 -> xxx.yyy.255.251:6129 SYN ******S* Mar 10 21:52:22 145.253.125.77:3639 -> xxx.yyy.255.251:6101 SYN ******S* Mar 10 21:52:22 145.253.125.77:3645 -> xxx.yyy.255.253:6101 SYN ******S* Mar 10 21:52:22 145.253.125.77:3644 -> xxx.yyy.255.253:6129 SYN ******S* Mar 10 21:52:22 145.253.125.77:3646 -> xxx.yyy.255.254:4000 SYN ******S* Mar 10 21:52:22 145.253.125.77:3647 -> xxx.yyy.255.254:6129 SYN ******S* Mar 10 21:52:22 145.253.125.77:3648 -> xxx.yyy.255.254:6101 SYN ******S* 73522 Mar 10 03:17:55 218.74.111.105:2432 -> xxx.yyy.64.3:1433 SYN ******S* Mar 10 03:17:55 218.74.111.105:2440 -> xxx.yyy.64.5:1433 SYN ******S* Mar 10 03:17:52 218.74.111.105:2442 -> xxx.yyy.64.6:1433 SYN ******S* Mar 10 03:17:55 218.74.111.105:2456 -> xxx.yyy.64.10:1433 SYN ******S* Mar 10 03:17:53 218.74.111.105:2460 -> xxx.yyy.64.11:1433 SYN ******S* Mar 10 03:17:56 218.74.111.105:2511 -> xxx.yyy.64.18:1433 SYN ******S* Mar 10 03:17:56 218.74.111.105:2514 -> xxx.yyy.64.19:1433 SYN ******S* Mar 10 03:17:56 218.74.111.105:2516 -> xxx.yyy.64.20:1433 SYN ******S* [...] Mar 10 05:40:48 218.74.111.105:1946 -> xxx.yyy.223.100:1433 SYN ******S* Mar 10 05:40:48 218.74.111.105:1341 -> xxx.yyy.223.82:1433 SYN ******S* Mar 10 05:40:49 218.74.111.105:1477 -> xxx.yyy.223.88:1433 SYN ******S* Mar 10 05:40:49 218.74.111.105:1479 -> xxx.yyy.223.89:1433 SYN ******S* Mar 10 05:40:49 218.74.111.105:1483 -> xxx.yyy.223.90:1433 SYN ******S* Mar 10 05:40:50 218.74.111.105:1572 -> xxx.yyy.223.96:1433 SYN ******S* Mar 10 05:40:50 218.74.111.105:1610 -> xxx.yyy.223.97:1433 SYN ******S* Mar 10 05:40:51 218.74.111.105:1946 -> xxx.yyy.223.100:1433 SYN ******S* 61553 Mar 10 11:07:45 81.59.181.177:3503 -> xxx.yyy.1.0:1433 SYN ******S* Mar 10 11:07:42 81.59.181.177:3507 -> xxx.yyy.1.3:1433 SYN ******S* Mar 10 11:07:42 81.59.181.177:3517 -> xxx.yyy.1.5:1433 SYN ******S* Mar 10 11:07:42 81.59.181.177:3520 -> xxx.yyy.1.8:1433 SYN ******S* Mar 10 11:07:45 81.59.181.177:3522 -> xxx.yyy.1.9:1433 SYN ******S* Mar 10 11:07:42 81.59.181.177:3527 -> xxx.yyy.1.14:1433 SYN ******S* Mar 10 11:07:42 81.59.181.177:3536 -> xxx.yyy.1.19:1433 SYN ******S* Mar 10 11:07:42 81.59.181.177:3544 -> xxx.yyy.1.21:1433 SYN ******S* [...] Mar 10 14:58:32 81.59.181.177:3168 -> xxx.yyy.255.235:1433 SYN ******S* Mar 10 14:58:33 81.59.181.177:3176 -> xxx.yyy.255.237:1433 SYN ******S* Mar 10 14:58:33 81.59.181.177:3189 -> xxx.yyy.255.241:1433 SYN ******S* Mar 10 14:58:33 81.59.181.177:3191 -> xxx.yyy.255.242:1433 SYN ******S* Mar 10 14:58:33 81.59.181.177:3201 -> xxx.yyy.255.245:1433 SYN ******S* Mar 10 14:58:33 81.59.181.177:3206 -> xxx.yyy.255.247:1433 SYN ******S* Mar 10 14:58:33 81.59.181.177:3207 -> xxx.yyy.255.248:1433 SYN ******S* Mar 10 14:58:34 81.59.181.177:3224 -> xxx.yyy.255.254:1433 SYN ******S* Mar 10 14:58:34 81.59.181.177:3214 -> xxx.yyy.255.251:1433 SYN ******S* 54903 Mar 10 12:28:42 82.216.77.112:1873 -> xxx.yyy.1.3:1433 SYN ******S* Mar 10 12:28:40 82.216.77.112:2226 -> xxx.yyy.1.5:1433 SYN ******S* Mar 10 12:28:44 82.216.77.112:2409 -> xxx.yyy.1.6:1433 SYN ******S* Mar 10 12:28:42 82.216.77.112:2565 -> xxx.yyy.1.8:1433 SYN ******S* Mar 10 12:28:43 82.216.77.112:2078 -> xxx.yyy.1.4:1433 SYN ******S* Mar 10 12:28:46 82.216.77.112:2638 -> xxx.yyy.1.9:1433 SYN ******S* Mar 10 12:28:45 82.216.77.112:3077 -> xxx.yyy.1.11:1433 SYN ******S* Mar 10 12:28:45 82.216.77.112:3186 -> xxx.yyy.1.12:1433 SYN ******S* [...] Mar 10 23:59:59 82.216.77.112:2844 -> xxx.yyy.225.52:1433 SYN ******S* Mar 10 23:59:59 82.216.77.112:3450 -> xxx.yyy.225.41:1433 SYN ******S* Mar 10 23:59:59 82.216.77.112:3292 -> xxx.yyy.225.54:1433 SYN ******S* Mar 11 00:00:00 82.216.77.112:4462 -> xxx.yyy.225.42:1433 SYN ******S* Mar 11 00:00:00 82.216.77.112:3711 -> xxx.yyy.225.55:1433 SYN ******S* Mar 11 00:00:00 82.216.77.112:4684 -> xxx.yyy.225.60:1433 SYN ******S* Mar 11 00:00:00 82.216.77.112:3521 -> xxx.yyy.225.61:1433 SYN ******S* Mar 11 00:00:01 82.216.77.112:4042 -> xxx.yyy.225.62:1433 SYN ******S* Mar 11 00:00:01 82.216.77.112:1142 -> xxx.yyy.225.64:1433 SYN ******S* 52122 Mar 10 01:04:26 134.156.65.9:4595 -> xxx.yyy.1.2:1433 SYN ******S* Mar 10 01:04:26 134.156.65.9:4596 -> xxx.yyy.1.3:1433 SYN ******S* Mar 10 01:04:26 134.156.65.9:4597 -> xxx.yyy.1.5:1433 SYN ******S* Mar 10 01:04:26 134.156.65.9:4598 -> xxx.yyy.1.4:1433 SYN ******S* Mar 10 01:04:27 134.156.65.9:4602 -> xxx.yyy.1.10:1433 SYN ******S* Mar 10 01:04:27 134.156.65.9:4603 -> xxx.yyy.1.8:1433 SYN ******S* Mar 10 01:04:27 134.156.65.9:4601 -> xxx.yyy.1.9:1433 SYN ******S* Mar 10 01:04:24 134.156.65.9:4604 -> xxx.yyy.1.12:1433 SYN ******S* [...] Mar 10 02:11:47 134.156.65.9:3644 -> xxx.yyy.255.241:1433 SYN ******S* Mar 10 02:11:47 134.156.65.9:3643 -> xxx.yyy.255.242:1433 SYN ******S* Mar 10 02:11:47 134.156.65.9:3647 -> xxx.yyy.255.245:1433 SYN ******S* Mar 10 02:11:47 134.156.65.9:3649 -> xxx.yyy.255.246:1433 SYN ******S* Mar 10 02:11:47 134.156.65.9:3648 -> xxx.yyy.255.247:1433 SYN ******S* Mar 10 02:11:48 134.156.65.9:3652 -> xxx.yyy.255.250:1433 SYN ******S* Mar 10 02:11:48 134.156.65.9:3653 -> xxx.yyy.255.251:1433 SYN ******S* Mar 10 02:11:48 134.156.65.9:3654 -> xxx.yyy.255.252:1433 SYN ******S* 51851 Mar 10 09:19:58 59.33.202.233:1877 -> xxx.yyy.1.1:1433 SYN ******S* Mar 10 09:19:58 59.33.202.233:1883 -> xxx.yyy.1.2:1433 SYN ******S* Mar 10 09:20:01 59.33.202.233:1890 -> xxx.yyy.1.3:1433 SYN ******S* Mar 10 09:19:58 59.33.202.233:1901 -> xxx.yyy.1.5:1433 SYN ******S* Mar 10 09:20:01 59.33.202.233:1906 -> xxx.yyy.1.6:1433 SYN ******S* Mar 10 09:20:01 59.33.202.233:1915 -> xxx.yyy.1.7:1433 SYN ******S* Mar 10 09:20:01 59.33.202.233:1922 -> xxx.yyy.1.8:1433 SYN ******S* Mar 10 09:19:59 59.33.202.233:1929 -> xxx.yyy.1.9:1433 SYN ******S* [...] Mar 10 13:09:21 59.33.202.233:2687 -> xxx.yyy.255.230:1433 SYN ******S* Mar 10 13:09:21 59.33.202.233:2698 -> xxx.yyy.255.232:1433 SYN ******S* Mar 10 13:09:21 59.33.202.233:3046 -> xxx.yyy.255.253:1433 SYN ******S* Mar 10 13:09:21 59.33.202.233:2709 -> xxx.yyy.255.234:1433 SYN ******S* Mar 10 13:09:21 59.33.202.233:2706 -> xxx.yyy.255.233:1433 SYN ******S* Mar 10 13:09:22 59.33.202.233:2713 -> xxx.yyy.255.235:1433 SYN ******S* Mar 10 13:09:22 59.33.202.233:2735 -> xxx.yyy.255.237:1433 SYN ******S* Mar 10 13:09:24 59.33.202.233:2915 -> xxx.yyy.255.243:1433 SYN ******S* Mar 10 13:09:24 59.33.202.233:2924 -> xxx.yyy.255.244:1433 SYN ******S* 51577 Mar 10 00:02:28 61.153.214.228:1624 -> xxx.yyy.128.4:1433 SYN ******S* Mar 10 00:02:25 61.153.214.228:1627 -> xxx.yyy.128.5:1433 SYN ******S* Mar 10 00:02:25 61.153.214.228:1651 -> xxx.yyy.128.8:1433 SYN ******S* Mar 10 00:02:25 61.153.214.228:1659 -> xxx.yyy.128.12:1433 SYN ******S* Mar 10 00:02:25 61.153.214.228:1662 -> xxx.yyy.128.14:1433 SYN ******S* Mar 10 00:02:25 61.153.214.228:1668 -> xxx.yyy.128.16:1433 SYN ******S* Mar 10 00:02:28 61.153.214.228:1697 -> xxx.yyy.128.19:1433 SYN ******S* Mar 10 00:02:26 61.153.214.228:1706 -> xxx.yyy.128.20:1433 SYN ******S* [...] Mar 10 01:57:18 61.153.214.228:2661 -> xxx.yyy.255.243:1433 SYN ******S* Mar 10 01:57:18 61.153.214.228:2679 -> xxx.yyy.255.246:1433 SYN ******S* Mar 10 01:57:18 61.153.214.228:2680 -> xxx.yyy.255.247:1433 SYN ******S* Mar 10 01:57:18 61.153.214.228:2693 -> xxx.yyy.255.249:1433 SYN ******S* Mar 10 01:57:18 61.153.214.228:2692 -> xxx.yyy.255.248:1433 SYN ******S* Mar 10 01:57:18 61.153.214.228:2696 -> xxx.yyy.255.251:1433 SYN ******S* Mar 10 01:57:18 61.153.214.228:2695 -> xxx.yyy.255.250:1433 SYN ******S* Mar 10 01:57:19 61.153.214.228:2708 -> xxx.yyy.255.252:1433 SYN ******S* 51325 Mar 10 19:16:34 128.122.161.81:4069 -> xxx.yyy.1.2:1433 SYN ******S* Mar 10 19:16:35 128.122.161.81:4072 -> xxx.yyy.1.6:1433 SYN ******S* Mar 10 19:16:35 128.122.161.81:4075 -> xxx.yyy.1.9:1433 SYN ******S* Mar 10 19:16:35 128.122.161.81:4076 -> xxx.yyy.1.10:1433 SYN ******S* Mar 10 19:16:33 128.122.161.81:4078 -> xxx.yyy.1.12:1433 SYN ******S* Mar 10 19:16:33 128.122.161.81:4079 -> xxx.yyy.1.13:1433 SYN ******S* Mar 10 19:16:33 128.122.161.81:4082 -> xxx.yyy.1.16:1433 SYN ******S* Mar 10 19:16:33 128.122.161.81:4084 -> xxx.yyy.1.18:1433 SYN ******S* [...] Mar 10 19:27:29 128.122.161.81:2490 -> xxx.yyy.255.202:1433 SYN ******S* Mar 10 19:27:29 128.122.161.81:2516 -> xxx.yyy.255.228:1433 SYN ******S* Mar 10 19:27:29 128.122.161.81:2481 -> xxx.yyy.255.193:1433 SYN ******S* Mar 10 19:27:29 128.122.161.81:2478 -> xxx.yyy.255.190:1433 SYN ******S* Mar 10 19:27:29 128.122.161.81:2462 -> xxx.yyy.255.174:1433 SYN ******S* Mar 10 19:27:29 128.122.161.81:2504 -> xxx.yyy.255.216:1433 SYN ******S* Mar 10 19:27:29 128.122.161.81:2520 -> xxx.yyy.255.232:1433 SYN ******S* Mar 10 19:27:29 128.122.161.81:2533 -> xxx.yyy.255.245:1433 SYN ******S* 50480 Mar 10 01:26:50 134.156.63.5:4549 -> xxx.yyy.1.3:1433 SYN ******S* Mar 10 01:26:47 134.156.63.5:4555 -> xxx.yyy.1.9:1433 SYN ******S* Mar 10 01:26:50 134.156.63.5:4557 -> xxx.yyy.1.10:1433 SYN ******S* Mar 10 01:26:50 134.156.63.5:4560 -> xxx.yyy.1.15:1433 SYN ******S* Mar 10 01:26:50 134.156.63.5:4561 -> xxx.yyy.1.14:1433 SYN ******S* Mar 10 01:26:50 134.156.63.5:4563 -> xxx.yyy.1.16:1433 SYN ******S* Mar 10 01:26:50 134.156.63.5:4562 -> xxx.yyy.1.17:1433 SYN ******S* Mar 10 01:26:50 134.156.63.5:4567 -> xxx.yyy.1.21:1433 SYN ******S* [...] Mar 10 02:34:47 134.156.63.5:1694 -> xxx.yyy.255.234:1433 SYN ******S* Mar 10 02:34:47 134.156.63.5:1698 -> xxx.yyy.255.237:1433 SYN ******S* Mar 10 02:34:47 134.156.63.5:1696 -> xxx.yyy.255.236:1433 SYN ******S* Mar 10 02:34:47 134.156.63.5:1700 -> xxx.yyy.255.239:1433 SYN ******S* Mar 10 02:34:47 134.156.63.5:1704 -> xxx.yyy.255.243:1433 SYN ******S* Mar 10 02:34:47 134.156.63.5:1708 -> xxx.yyy.255.245:1433 SYN ******S* Mar 10 02:34:48 134.156.63.5:1714 -> xxx.yyy.255.249:1433 SYN ******S* Mar 10 02:34:48 134.156.63.5:1713 -> xxx.yyy.255.250:1433 SYN ******S* 49961 Mar 10 00:42:36 134.156.12.69:3608 -> xxx.yyy.1.1:1433 SYN ******S* Mar 10 00:42:33 134.156.12.69:3609 -> xxx.yyy.1.2:1433 SYN ******S* Mar 10 00:42:33 134.156.12.69:3611 -> xxx.yyy.1.3:1433 SYN ******S* Mar 10 00:42:36 134.156.12.69:3610 -> xxx.yyy.1.4:1433 SYN ******S* Mar 10 00:42:36 134.156.12.69:3612 -> xxx.yyy.1.5:1433 SYN ******S* Mar 10 00:42:36 134.156.12.69:3616 -> xxx.yyy.1.9:1433 SYN ******S* Mar 10 00:42:36 134.156.12.69:3617 -> xxx.yyy.1.10:1433 SYN ******S* Mar 10 00:42:34 134.156.12.69:3623 -> xxx.yyy.1.16:1433 SYN ******S* [...] Mar 10 01:48:11 134.156.12.69:3563 -> xxx.yyy.255.232:1433 SYN ******S* Mar 10 01:48:11 134.156.12.69:3565 -> xxx.yyy.255.234:1433 SYN ******S* Mar 10 01:48:11 134.156.12.69:3569 -> xxx.yyy.255.238:1433 SYN ******S* Mar 10 01:48:11 134.156.12.69:3571 -> xxx.yyy.255.240:1433 SYN ******S* Mar 10 01:48:11 134.156.12.69:3570 -> xxx.yyy.255.239:1433 SYN ******S* Mar 10 01:48:11 134.156.12.69:3572 -> xxx.yyy.255.241:1433 SYN ******S* Mar 10 01:48:11 134.156.12.69:3573 -> xxx.yyy.255.242:1433 SYN ******S* Mar 10 01:48:11 134.156.12.69:3578 -> xxx.yyy.255.247:1433 SYN ******S* Mar 10 01:48:11 134.156.12.69:3577 -> xxx.yyy.255.246:1433 SYN ******S* 49487 Mar 10 00:37:59 134.156.4.33:3063 -> xxx.yyy.1.0:1433 SYN ******S* Mar 10 00:37:59 134.156.4.33:3066 -> xxx.yyy.1.3:1433 SYN ******S* Mar 10 00:37:59 134.156.4.33:3067 -> xxx.yyy.1.4:1433 SYN ******S* Mar 10 00:37:59 134.156.4.33:3068 -> xxx.yyy.1.5:1433 SYN ******S* Mar 10 00:38:00 134.156.4.33:3072 -> xxx.yyy.1.9:1433 SYN ******S* Mar 10 00:38:00 134.156.4.33:3071 -> xxx.yyy.1.8:1433 SYN ******S* Mar 10 00:38:00 134.156.4.33:3073 -> xxx.yyy.1.10:1433 SYN ******S* Mar 10 00:37:57 134.156.4.33:3074 -> xxx.yyy.1.11:1433 SYN ******S* [...] Mar 10 01:43:19 134.156.4.33:4159 -> xxx.yyy.255.250:1433 SYN ******S* Mar 10 01:43:19 134.156.4.33:4162 -> xxx.yyy.255.252:1433 SYN ******S* Mar 10 01:43:19 134.156.4.33:4165 -> xxx.yyy.255.254:1433 SYN ******S* Mar 10 01:43:21 134.156.4.33:4130 -> xxx.yyy.255.227:1433 SYN ******S* Mar 10 01:43:21 134.156.4.33:4129 -> xxx.yyy.255.225:1433 SYN ******S* Mar 10 01:43:22 134.156.4.33:4162 -> xxx.yyy.255.252:1433 SYN ******S* Mar 10 01:43:22 134.156.4.33:4163 -> xxx.yyy.255.253:1433 SYN ******S* Mar 10 01:43:22 134.156.4.33:4159 -> xxx.yyy.255.250:1433 SYN ******S* 49055 Mar 10 10:11:57 82.37.211.25:3079 -> xxx.yyy.1.2:1433 SYN ******S* Mar 10 10:11:57 82.37.211.25:3088 -> xxx.yyy.1.10:1433 SYN ******S* Mar 10 10:11:57 82.37.211.25:3087 -> xxx.yyy.1.9:1433 SYN ******S* Mar 10 10:11:57 82.37.211.25:3089 -> xxx.yyy.1.11:1433 SYN ******S* Mar 10 10:11:57 82.37.211.25:3086 -> xxx.yyy.1.8:1433 SYN ******S* Mar 10 10:11:57 82.37.211.25:3092 -> xxx.yyy.1.12:1433 SYN ******S* Mar 10 10:11:55 82.37.211.25:3100 -> xxx.yyy.1.16:1433 SYN ******S* Mar 10 10:11:55 82.37.211.25:3096 -> xxx.yyy.1.14:1433 SYN ******S* [...] Mar 10 14:01:05 82.37.211.25:2148 -> xxx.yyy.255.246:1433 SYN ******S* Mar 10 14:01:05 82.37.211.25:2150 -> xxx.yyy.255.247:1433 SYN ******S* Mar 10 14:01:05 82.37.211.25:2158 -> xxx.yyy.255.249:1433 SYN ******S* Mar 10 14:01:05 82.37.211.25:2156 -> xxx.yyy.255.248:1433 SYN ******S* Mar 10 14:01:05 82.37.211.25:2166 -> xxx.yyy.255.251:1433 SYN ******S* Mar 10 14:01:05 82.37.211.25:2183 -> xxx.yyy.255.252:1433 SYN ******S* Mar 10 14:01:06 82.37.211.25:2189 -> xxx.yyy.255.253:1433 SYN ******S* Mar 10 14:01:06 82.37.211.25:2200 -> xxx.yyy.255.254:1433 SYN ******S* 48759 Mar 10 00:30:45 163.13.92.170:2586 -> xxx.yyy.1.1:6101 SYN ******S* Mar 10 00:30:45 163.13.92.170:2587 -> xxx.yyy.1.2:6101 SYN ******S* Mar 10 00:30:45 163.13.92.170:2588 -> xxx.yyy.1.3:6101 SYN ******S* Mar 10 00:30:45 163.13.92.170:2589 -> xxx.yyy.1.4:6101 SYN ******S* Mar 10 00:30:45 163.13.92.170:2591 -> xxx.yyy.1.6:6101 SYN ******S* Mar 10 00:30:42 163.13.92.170:2592 -> xxx.yyy.1.7:6101 SYN ******S* Mar 10 00:30:45 163.13.92.170:2598 -> xxx.yyy.1.13:6101 SYN ******S* Mar 10 00:30:45 163.13.92.170:2599 -> xxx.yyy.1.14:6101 SYN ******S* [...] Mar 10 00:46:51 163.13.92.170:1854 -> xxx.yyy.255.245:6101 SYN ******S* Mar 10 00:46:51 163.13.92.170:1856 -> xxx.yyy.255.247:6101 SYN ******S* Mar 10 00:46:51 163.13.92.170:1860 -> xxx.yyy.255.251:6101 SYN ******S* Mar 10 00:46:51 163.13.92.170:1843 -> xxx.yyy.255.234:6101 SYN ******S* Mar 10 00:46:51 163.13.92.170:1847 -> xxx.yyy.255.238:6101 SYN ******S* Mar 10 00:46:51 163.13.92.170:1851 -> xxx.yyy.255.242:6101 SYN ******S* Mar 10 00:46:51 163.13.92.170:1859 -> xxx.yyy.255.250:6101 SYN ******S* Mar 10 00:46:51 163.13.92.170:1842 -> xxx.yyy.255.233:6101 SYN ******S* Mar 10 00:46:51 163.13.92.170:1857 -> xxx.yyy.255.248:6101 SYN ******S* 46161 Mar 10 12:56:26 213.60.84.110:4287 -> xxx.yyy.1.6:1433 SYN ******S* Mar 10 12:56:26 213.60.84.110:4262 -> xxx.yyy.1.4:1433 SYN ******S* Mar 10 12:56:26 213.60.84.110:4327 -> xxx.yyy.1.9:1433 SYN ******S* Mar 10 12:56:26 213.60.84.110:4338 -> xxx.yyy.1.10:1433 SYN ******S* Mar 10 12:56:26 213.60.84.110:4257 -> xxx.yyy.1.3:1433 SYN ******S* Mar 10 12:56:27 213.60.84.110:4485 -> xxx.yyy.1.16:1433 SYN ******S* Mar 10 12:56:27 213.60.84.110:4356 -> xxx.yyy.1.11:1433 SYN ******S* Mar 10 12:56:27 213.60.84.110:4459 -> xxx.yyy.1.15:1433 SYN ******S* [...] Mar 10 16:45:08 213.60.84.110:3772 -> xxx.yyy.255.251:1433 SYN ******S* Mar 10 16:45:08 213.60.84.110:4609 -> xxx.yyy.255.253:1433 SYN ******S* Mar 10 16:45:08 213.60.84.110:4197 -> xxx.yyy.255.230:1433 SYN ******S* Mar 10 16:45:09 213.60.84.110:3095 -> xxx.yyy.255.233:1433 SYN ******S* Mar 10 16:45:10 213.60.84.110:3815 -> xxx.yyy.255.235:1433 SYN ******S* Mar 10 16:45:11 213.60.84.110:4891 -> xxx.yyy.255.239:1433 SYN ******S* Mar 10 16:45:12 213.60.84.110:3393 -> xxx.yyy.255.242:1433 SYN ******S* Mar 10 16:45:13 213.60.84.110:3131 -> xxx.yyy.255.247:1433 SYN ******S* Mar 10 16:45:14 213.60.84.110:4863 -> xxx.yyy.255.254:1433 SYN ******S* 45303 Mar 10 02:06:42 134.156.240.155:2956 -> xxx.yyy.1.0:1433 SYN ******S* Mar 10 02:06:42 134.156.240.155:2957 -> xxx.yyy.1.1:1433 SYN ******S* Mar 10 02:06:42 134.156.240.155:2958 -> xxx.yyy.1.2:1433 SYN ******S* Mar 10 02:06:42 134.156.240.155:2960 -> xxx.yyy.1.3:1433 SYN ******S* Mar 10 02:06:42 134.156.240.155:2961 -> xxx.yyy.1.4:1433 SYN ******S* Mar 10 02:06:42 134.156.240.155:2962 -> xxx.yyy.1.5:1433 SYN ******S* Mar 10 02:06:42 134.156.240.155:2963 -> xxx.yyy.1.6:1433 SYN ******S* Mar 10 02:06:42 134.156.240.155:2968 -> xxx.yyy.1.11:1433 SYN ******S* [...] Mar 10 03:14:41 134.156.240.155:4654 -> xxx.yyy.255.244:1433 SYN ******S* Mar 10 03:14:41 134.156.240.155:4655 -> xxx.yyy.255.246:1433 SYN ******S* Mar 10 03:14:42 134.156.240.155:4657 -> xxx.yyy.255.248:1433 SYN ******S* Mar 10 03:14:42 134.156.240.155:4658 -> xxx.yyy.255.249:1433 SYN ******S* Mar 10 03:14:42 134.156.240.155:4659 -> xxx.yyy.255.250:1433 SYN ******S* Mar 10 03:14:42 134.156.240.155:4660 -> xxx.yyy.255.252:1433 SYN ******S* Mar 10 03:14:42 134.156.240.155:4661 -> xxx.yyy.255.251:1433 SYN ******S* Mar 10 03:14:42 134.156.240.155:4662 -> xxx.yyy.255.254:1433 SYN ******S* Mar 10 03:14:42 134.156.240.155:4663 -> xxx.yyy.255.253:1433 SYN ******S* 39835 Mar 10 17:53:46 217.84.33.31:1924 -> xxx.yyy.10.1:1433 SYN ******S* Mar 10 17:53:46 217.84.33.31:1934 -> xxx.yyy.10.2:1433 SYN ******S* Mar 10 17:53:49 217.84.33.31:2069 -> xxx.yyy.10.6:1433 SYN ******S* Mar 10 17:53:49 217.84.33.31:2129 -> xxx.yyy.10.7:1433 SYN ******S* Mar 10 17:53:49 217.84.33.31:2135 -> xxx.yyy.10.8:1433 SYN ******S* Mar 10 17:53:46 217.84.33.31:2151 -> xxx.yyy.10.9:1433 SYN ******S* Mar 10 17:53:49 217.84.33.31:2187 -> xxx.yyy.10.13:1433 SYN ******S* Mar 10 17:53:47 217.84.33.31:2291 -> xxx.yyy.10.19:1433 SYN ******S* [...] Mar 10 20:14:42 217.84.33.31:1970 -> xxx.yyy.255.222:1433 SYN ******S* Mar 10 20:14:42 217.84.33.31:3501 -> xxx.yyy.255.223:1433 SYN ******S* Mar 10 20:14:42 217.84.33.31:3750 -> xxx.yyy.255.225:1433 SYN ******S* Mar 10 20:14:43 217.84.33.31:2231 -> xxx.yyy.255.236:1433 SYN ******S* Mar 10 20:14:43 217.84.33.31:1374 -> xxx.yyy.255.242:1433 SYN ******S* Mar 10 20:14:43 217.84.33.31:4501 -> xxx.yyy.255.251:1433 SYN ******S* Mar 10 20:14:43 217.84.33.31:2743 -> xxx.yyy.255.250:1433 SYN ******S* Mar 10 20:14:44 217.84.33.31:3104 -> xxx.yyy.255.254:1433 SYN ******S* 37295 Mar 10 10:11:14 65.23.114.185:1843 -> xxx.yyy.1.9:4000 SYN ******S* Mar 10 10:11:14 65.23.114.185:1851 -> xxx.yyy.1.17:4000 SYN ******S* Mar 10 10:11:13 65.23.114.185:1856 -> xxx.yyy.1.23:4000 SYN ******S* Mar 10 10:11:13 65.23.114.185:1857 -> xxx.yyy.1.24:4000 SYN ******S* Mar 10 10:11:13 65.23.114.185:1858 -> xxx.yyy.1.25:4000 SYN ******S* Mar 10 10:11:13 65.23.114.185:1835 -> xxx.yyy.1.0:4000 SYN ******S* Mar 10 10:11:13 65.23.114.185:1838 -> xxx.yyy.1.3:4000 SYN ******S* Mar 10 10:11:14 65.23.114.185:1866 -> xxx.yyy.1.2:4000 SYN ******S* [...] Mar 10 11:08:02 65.23.114.185:3203 -> xxx.yyy.zzz.233:4000 SYN ******S* Mar 10 11:08:02 65.23.114.185:3207 -> xxx.yyy.zzz.236:4000 SYN ******S* Mar 10 11:08:03 65.23.114.185:3213 -> xxx.yyy.zzz.238:4000 SYN ******S* Mar 10 11:08:03 65.23.114.185:3212 -> xxx.yyy.zzz.239:4000 SYN ******S* Mar 10 11:08:03 65.23.114.185:3214 -> xxx.yyy.zzz.243:4000 SYN ******S* Mar 10 11:08:03 65.23.114.185:3217 -> xxx.yyy.zzz.245:4000 SYN ******S* Mar 10 11:08:03 65.23.114.185:3216 -> xxx.yyy.zzz.244:4000 SYN ******S* Mar 10 11:08:03 65.23.114.185:3215 -> xxx.yyy.zzz.242:4000 SYN ******S* Mar 10 11:08:03 65.23.114.185:3227 -> xxx.yyy.zzz.253:4000 SYN ******S* 37271 Mar 10 11:46:49 161.57.44.79:1223 -> xxx.yyy.1.7:554 SYN ******S* Mar 10 11:46:50 161.57.44.79:1224 -> xxx.yyy.1.8:554 SYN ******S* Mar 10 11:46:49 161.57.44.79:1227 -> xxx.yyy.1.11:554 SYN ******S* Mar 10 11:46:50 161.57.44.79:1238 -> xxx.yyy.1.22:554 SYN ******S* Mar 10 11:46:52 161.57.44.79:1239 -> xxx.yyy.1.23:554 SYN ******S* Mar 10 11:46:52 161.57.44.79:1241 -> xxx.yyy.1.25:554 SYN ******S* Mar 10 11:46:50 161.57.44.79:1246 -> xxx.yyy.1.30:554 SYN ******S* Mar 10 11:46:50 161.57.44.79:1248 -> xxx.yyy.1.32:554 SYN ******S* [...] Mar 10 11:57:44 161.57.44.79:4558 -> xxx.yyy.255.231:554 SYN ******S* Mar 10 11:57:44 161.57.44.79:4555 -> xxx.yyy.255.228:554 SYN ******S* Mar 10 11:57:44 161.57.44.79:4562 -> xxx.yyy.255.235:554 SYN ******S* Mar 10 11:57:44 161.57.44.79:4564 -> xxx.yyy.255.237:554 SYN ******S* Mar 10 11:57:44 161.57.44.79:4568 -> xxx.yyy.255.241:554 SYN ******S* Mar 10 11:57:44 161.57.44.79:4565 -> xxx.yyy.255.238:554 SYN ******S* Mar 10 11:57:45 161.57.44.79:4576 -> xxx.yyy.255.249:554 SYN ******S* Mar 10 11:57:45 161.57.44.79:4578 -> xxx.yyy.255.251:554 SYN ******S* Mar 10 11:57:45 161.57.44.79:4574 -> xxx.yyy.255.247:554 SYN ******S* 33431 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions