[LOGS] Summary of large-scale portscanning detects
[email protected] Sat, 12 Mar 2005 07:26:23 -0600 (CST)
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Mar 11 14:26:32 222.164.10.70:2734 -> xxx.yyy.1.0:1433 SYN ******S* Mar 11 14:26:33 222.164.10.70:2735 -> xxx.yyy.1.1:1433 SYN ******S* Mar 11 14:26:30 222.164.10.70:2736 -> xxx.yyy.1.2:1433 SYN ******S* Mar 11 14:26:33 222.164.10.70:2737 -> xxx.yyy.1.3:1433 SYN ******S* Mar 11 14:26:33 222.164.10.70:2738 -> xxx.yyy.1.4:1433 SYN ******S* Mar 11 14:26:33 222.164.10.70:2740 -> xxx.yyy.1.6:1433 SYN ******S* Mar 11 14:26:33 222.164.10.70:2741 -> xxx.yyy.1.7:1433 SYN ******S* Mar 11 14:26:33 222.164.10.70:2744 -> xxx.yyy.1.9:1433 SYN ******S* [...] Mar 11 18:15:16 222.164.10.70:2394 -> xxx.yyy.255.246:1433 SYN ******S* Mar 11 18:15:16 222.164.10.70:2395 -> xxx.yyy.255.247:1433 SYN ******S* Mar 11 18:15:16 222.164.10.70:2397 -> xxx.yyy.255.248:1433 SYN ******S* Mar 11 18:15:16 222.164.10.70:2428 -> xxx.yyy.255.249:1433 SYN ******S* Mar 11 18:15:17 222.164.10.70:2435 -> xxx.yyy.255.250:1433 SYN ******S* Mar 11 18:15:17 222.164.10.70:2437 -> xxx.yyy.255.251:1433 SYN ******S* Mar 11 18:15:17 222.164.10.70:2454 -> xxx.yyy.255.252:1433 SYN ******S* Mar 11 18:15:17 222.164.10.70:2482 -> xxx.yyy.255.253:1433 SYN ******S* Mar 11 18:15:17 222.164.10.70:2530 -> xxx.yyy.255.254:1433 SYN ******S* 106683 Mar 11 05:39:15 61.97.158.121:3566 -> xxx.yyy.1.0:443 SYN 12****S* Mar 11 05:39:15 61.97.158.121:3569 -> xxx.yyy.1.3:443 SYN 12****S* Mar 11 05:39:18 61.97.158.121:3590 -> xxx.yyy.1.24:443 SYN 12****S* Mar 11 05:39:18 61.97.158.121:3573 -> xxx.yyy.1.7:443 SYN 12****S* Mar 11 05:39:18 61.97.158.121:3576 -> xxx.yyy.1.10:443 SYN 12****S* Mar 11 05:39:15 61.97.158.121:3592 -> xxx.yyy.1.26:443 SYN 12****S* Mar 11 05:39:15 61.97.158.121:3611 -> xxx.yyy.1.26:80 SYN 12****S* Mar 11 05:39:18 61.97.158.121:3570 -> xxx.yyy.1.4:443 SYN 12****S* [...] Mar 11 06:14:13 61.97.158.121:3029 -> xxx.yyy.255.254:443 SYN 12****S* Mar 11 06:14:13 61.97.158.121:3022 -> xxx.yyy.255.247:443 SYN 12****S* Mar 11 06:14:13 61.97.158.121:3023 -> xxx.yyy.255.248:443 SYN 12****S* Mar 11 06:14:13 61.97.158.121:3026 -> xxx.yyy.255.251:443 SYN 12****S* Mar 11 06:14:13 61.97.158.121:3028 -> xxx.yyy.255.253:443 SYN 12****S* Mar 11 06:14:13 61.97.158.121:3027 -> xxx.yyy.255.252:443 SYN 12****S* Mar 11 06:14:13 61.97.158.121:3025 -> xxx.yyy.255.250:443 SYN 12****S* Mar 11 06:14:13 61.97.158.121:3021 -> xxx.yyy.255.246:443 SYN 12****S* 99924 Mar 11 03:56:19 61.175.235.78:3417 -> xxx.yyy.1.1:10203 SYN ******S* Mar 11 03:56:18 61.175.235.78:3418 -> xxx.yyy.1.2:10203 SYN ******S* Mar 11 03:56:19 61.175.235.78:3419 -> xxx.yyy.1.3:10203 SYN ******S* Mar 11 03:56:20 61.175.235.78:3420 -> xxx.yyy.1.4:10203 SYN ******S* Mar 11 03:56:18 61.175.235.78:3421 -> xxx.yyy.1.5:10203 SYN ******S* Mar 11 03:56:20 61.175.235.78:3422 -> xxx.yyy.1.6:10203 SYN ******S* Mar 11 03:56:19 61.175.235.78:3424 -> xxx.yyy.1.8:10203 SYN ******S* Mar 11 03:56:20 61.175.235.78:3423 -> xxx.yyy.1.7:10203 SYN ******S* [...] Mar 11 04:11:53 61.175.235.78:3233 -> xxx.yyy.255.234:10203 SYN ******S* Mar 11 04:11:53 61.175.235.78:3246 -> xxx.yyy.255.247:10203 SYN ******S* Mar 11 04:11:53 61.175.235.78:3230 -> xxx.yyy.255.231:10203 SYN ******S* Mar 11 04:11:53 61.175.235.78:3227 -> xxx.yyy.255.228:10203 SYN ******S* Mar 11 04:11:53 61.175.235.78:3243 -> xxx.yyy.255.244:10203 SYN ******S* Mar 11 04:11:53 61.175.235.78:3240 -> xxx.yyy.255.241:10203 SYN ******S* Mar 11 04:11:53 61.175.235.78:3253 -> xxx.yyy.255.254:10203 SYN ******S* Mar 11 04:11:53 61.175.235.78:3237 -> xxx.yyy.255.238:10203 SYN ******S* 97871 Mar 11 11:32:48 137.82.14.103:4356 -> xxx.yyy.1.4:3306 SYN ******S* Mar 11 11:32:51 137.82.14.103:4365 -> xxx.yyy.1.8:3306 SYN ******S* Mar 11 11:32:51 137.82.14.103:4367 -> xxx.yyy.1.9:3306 SYN ******S* Mar 11 11:32:48 137.82.14.103:4374 -> xxx.yyy.1.12:3306 SYN ******S* Mar 11 11:32:51 137.82.14.103:4376 -> xxx.yyy.1.13:3306 SYN ******S* Mar 11 11:32:51 137.82.14.103:4380 -> xxx.yyy.1.15:3306 SYN ******S* Mar 11 11:32:51 137.82.14.103:4386 -> xxx.yyy.1.18:3306 SYN ******S* Mar 11 11:32:51 137.82.14.103:4409 -> xxx.yyy.1.29:3306 SYN ******S* [...] Mar 11 11:51:15 137.82.14.103:4049 -> xxx.yyy.255.209:3306 SYN ******S* Mar 11 11:51:15 137.82.14.103:4078 -> xxx.yyy.255.238:3306 SYN ******S* Mar 11 11:51:15 137.82.14.103:4046 -> xxx.yyy.255.206:3306 SYN ******S* Mar 11 11:51:15 137.82.14.103:4094 -> xxx.yyy.255.254:3306 SYN ******S* Mar 11 11:51:15 137.82.14.103:4062 -> xxx.yyy.255.222:3306 SYN ******S* Mar 11 11:51:15 137.82.14.103:4059 -> xxx.yyy.255.219:3306 SYN ******S* Mar 11 11:51:15 137.82.14.103:4071 -> xxx.yyy.255.232:3306 SYN ******S* Mar 11 11:51:15 137.82.14.103:4054 -> xxx.yyy.255.214:3306 SYN ******S* Mar 11 11:51:15 137.82.14.103:4070 -> xxx.yyy.255.230:3306 SYN ******S* 79281 Mar 11 07:40:12 218.65.242.211:3859 -> xxx.yyy.64.0:1433 SYN ******S* Mar 11 07:40:09 218.65.242.211:3905 -> xxx.yyy.64.1:1433 SYN ******S* Mar 11 07:40:12 218.65.242.211:3922 -> xxx.yyy.64.3:1433 SYN ******S* Mar 11 07:40:09 218.65.242.211:3932 -> xxx.yyy.64.4:1433 SYN ******S* Mar 11 07:40:12 218.65.242.211:3943 -> xxx.yyy.64.5:1433 SYN ******S* Mar 11 07:40:09 218.65.242.211:3945 -> xxx.yyy.64.6:1433 SYN ******S* Mar 11 07:40:09 218.65.242.211:3948 -> xxx.yyy.64.7:1433 SYN ******S* Mar 11 07:40:12 218.65.242.211:3952 -> xxx.yyy.64.8:1433 SYN ******S* [...] Mar 11 10:33:29 218.65.242.211:1052 -> xxx.yyy.255.240:1433 SYN ******S* Mar 11 10:33:30 218.65.242.211:1066 -> xxx.yyy.255.242:1433 SYN ******S* Mar 11 10:33:30 218.65.242.211:1166 -> xxx.yyy.255.245:1433 SYN ******S* Mar 11 10:33:31 218.65.242.211:1197 -> xxx.yyy.255.246:1433 SYN ******S* Mar 11 10:33:31 218.65.242.211:1357 -> xxx.yyy.255.249:1433 SYN ******S* Mar 11 10:33:31 218.65.242.211:1520 -> xxx.yyy.255.252:1433 SYN ******S* Mar 11 10:33:31 218.65.242.211:1535 -> xxx.yyy.255.253:1433 SYN ******S* Mar 11 10:33:31 218.65.242.211:1509 -> xxx.yyy.255.251:1433 SYN ******S* 75538 Mar 11 23:39:56 62.119.28.210:2998 -> xxx.yyy.1.1:3306 SYN ******S* Mar 11 23:39:56 62.119.28.210:2999 -> xxx.yyy.1.2:3306 SYN ******S* Mar 11 23:39:56 62.119.28.210:3000 -> xxx.yyy.1.3:3306 SYN ******S* Mar 11 23:39:56 62.119.28.210:3001 -> xxx.yyy.1.4:3306 SYN ******S* Mar 11 23:39:56 62.119.28.210:3002 -> xxx.yyy.1.5:3306 SYN ******S* Mar 11 23:39:56 62.119.28.210:3003 -> xxx.yyy.1.6:3306 SYN ******S* Mar 11 23:39:56 62.119.28.210:3004 -> xxx.yyy.1.7:3306 SYN ******S* Mar 11 23:39:56 62.119.28.210:3005 -> xxx.yyy.1.8:3306 SYN ******S* [...] Mar 11 23:51:40 62.119.28.210:1599 -> xxx.yyy.255.234:3306 SYN ******S* Mar 11 23:51:40 62.119.28.210:1606 -> xxx.yyy.255.241:3306 SYN ******S* Mar 11 23:51:40 62.119.28.210:1608 -> xxx.yyy.255.243:3306 SYN ******S* Mar 11 23:51:40 62.119.28.210:1610 -> xxx.yyy.255.245:3306 SYN ******S* Mar 11 23:51:40 62.119.28.210:1609 -> xxx.yyy.255.244:3306 SYN ******S* Mar 11 23:51:40 62.119.28.210:1611 -> xxx.yyy.255.246:3306 SYN ******S* Mar 11 23:51:40 62.119.28.210:1612 -> xxx.yyy.255.247:3306 SYN ******S* Mar 11 23:51:40 62.119.28.210:1607 -> xxx.yyy.255.242:3306 SYN ******S* Mar 11 23:51:40 62.119.28.210:1616 -> xxx.yyy.255.251:3306 SYN ******S* 70525 Mar 11 06:28:25 195.19.199.123:3058 -> xxx.yyy.1.1:21 SYN ******S* Mar 11 06:28:25 195.19.199.123:3059 -> xxx.yyy.1.2:21 SYN ******S* Mar 11 06:28:25 195.19.199.123:3060 -> xxx.yyy.1.3:21 SYN ******S* Mar 11 06:28:25 195.19.199.123:3061 -> xxx.yyy.1.4:21 SYN ******S* Mar 11 06:28:25 195.19.199.123:3062 -> xxx.yyy.1.5:21 SYN ******S* Mar 11 06:28:25 195.19.199.123:3063 -> xxx.yyy.1.6:21 SYN ******S* Mar 11 06:28:25 195.19.199.123:3064 -> xxx.yyy.1.7:21 SYN ******S* Mar 11 06:28:22 195.19.199.123:3065 -> xxx.yyy.1.8:21 SYN ******S* [...] Mar 11 06:40:13 195.19.199.123:1412 -> xxx.yyy.255.210:21 SYN ******S* Mar 11 06:40:13 195.19.199.123:1409 -> xxx.yyy.255.207:21 SYN ******S* Mar 11 06:40:13 195.19.199.123:1413 -> xxx.yyy.255.211:21 SYN ******S* Mar 11 06:40:13 195.19.199.123:1410 -> xxx.yyy.255.208:21 SYN ******S* Mar 11 06:40:14 195.19.199.123:1454 -> xxx.yyy.255.251:21 SYN ******S* Mar 11 06:40:14 195.19.199.123:1451 -> xxx.yyy.255.248:21 SYN ******S* Mar 11 06:40:14 195.19.199.123:1452 -> xxx.yyy.255.249:21 SYN ******S* Mar 11 06:40:14 195.19.199.123:1457 -> xxx.yyy.255.254:21 SYN ******S* 68408 Mar 11 07:18:24 218.114.124.110:1786 -> xxx.yyy.1.1:3306 SYN ******S* Mar 11 07:18:24 218.114.124.110:1789 -> xxx.yyy.1.2:3306 SYN ******S* Mar 11 07:18:24 218.114.124.110:1795 -> xxx.yyy.1.3:3306 SYN ******S* Mar 11 07:18:24 218.114.124.110:1800 -> xxx.yyy.1.4:3306 SYN ******S* Mar 11 07:18:24 218.114.124.110:1806 -> xxx.yyy.1.5:3306 SYN ******S* Mar 11 07:18:24 218.114.124.110:1811 -> xxx.yyy.1.6:3306 SYN ******S* Mar 11 07:18:24 218.114.124.110:1816 -> xxx.yyy.1.7:3306 SYN ******S* Mar 11 07:18:24 218.114.124.110:1819 -> xxx.yyy.1.8:3306 SYN ******S* [...] Mar 11 07:32:18 218.114.124.110:3276 -> xxx.yyy.255.245:3306 SYN ******S* Mar 11 07:32:18 218.114.124.110:3280 -> xxx.yyy.255.249:3306 SYN ******S* Mar 11 07:32:18 218.114.124.110:3277 -> xxx.yyy.255.246:3306 SYN ******S* Mar 11 07:32:18 218.114.124.110:3274 -> xxx.yyy.255.243:3306 SYN ******S* Mar 11 07:32:18 218.114.124.110:3281 -> xxx.yyy.255.250:3306 SYN ******S* Mar 11 07:32:18 218.114.124.110:3275 -> xxx.yyy.255.244:3306 SYN ******S* Mar 11 07:32:18 218.114.124.110:3282 -> xxx.yyy.255.251:3306 SYN ******S* Mar 11 07:32:18 218.114.124.110:3284 -> xxx.yyy.255.253:3306 SYN ******S* Mar 11 07:32:18 218.114.124.110:3285 -> xxx.yyy.255.254:3306 SYN ******S* 67304 Mar 11 19:39:22 202.147.99.26:3658 -> xxx.yyy.1.1:1433 SYN ******S* Mar 11 19:39:22 202.147.99.26:3669 -> xxx.yyy.1.2:1433 SYN ******S* Mar 11 19:39:22 202.147.99.26:3652 -> xxx.yyy.1.0:1433 SYN ******S* Mar 11 19:39:22 202.147.99.26:3700 -> xxx.yyy.1.8:1433 SYN ******S* Mar 11 19:39:22 202.147.99.26:3707 -> xxx.yyy.1.10:1433 SYN ******S* Mar 11 19:39:22 202.147.99.26:3716 -> xxx.yyy.1.12:1433 SYN ******S* Mar 11 19:39:22 202.147.99.26:3722 -> xxx.yyy.1.14:1433 SYN ******S* Mar 11 19:39:22 202.147.99.26:3735 -> xxx.yyy.1.19:1433 SYN ******S* [...] Mar 11 23:28:02 202.147.99.26:1200 -> xxx.yyy.255.236:1433 SYN ******S* Mar 11 23:28:03 202.147.99.26:1217 -> xxx.yyy.255.237:1433 SYN ******S* Mar 11 23:28:03 202.147.99.26:1224 -> xxx.yyy.255.238:1433 SYN ******S* Mar 11 23:28:03 202.147.99.26:1260 -> xxx.yyy.255.241:1433 SYN ******S* Mar 11 23:28:03 202.147.99.26:1256 -> xxx.yyy.255.240:1433 SYN ******S* Mar 11 23:28:04 202.147.99.26:1304 -> xxx.yyy.255.246:1433 SYN ******S* Mar 11 23:28:04 202.147.99.26:1303 -> xxx.yyy.255.245:1433 SYN ******S* Mar 11 23:28:04 202.147.99.26:1308 -> xxx.yyy.255.248:1433 SYN ******S* Mar 11 23:28:04 202.147.99.26:1313 -> xxx.yyy.255.249:1433 SYN ******S* 57907 Mar 11 19:39:22 202.126.109.42:3674 -> xxx.yyy.1.4:1433 SYN ******S* Mar 11 19:39:22 202.126.109.42:3673 -> xxx.yyy.1.3:1433 SYN ******S* Mar 11 19:39:22 202.126.109.42:3679 -> xxx.yyy.1.5:1433 SYN ******S* Mar 11 19:39:22 202.126.109.42:3686 -> xxx.yyy.1.6:1433 SYN ******S* Mar 11 19:39:22 202.126.109.42:3688 -> xxx.yyy.1.7:1433 SYN ******S* Mar 11 19:39:22 202.126.109.42:3704 -> xxx.yyy.1.9:1433 SYN ******S* Mar 11 19:39:22 202.126.109.42:3709 -> xxx.yyy.1.11:1433 SYN ******S* Mar 11 19:39:22 202.126.109.42:3727 -> xxx.yyy.1.15:1433 SYN ******S* [...] Mar 11 23:28:03 202.126.109.42:1283 -> xxx.yyy.255.243:1433 SYN ******S* Mar 11 23:28:03 202.126.109.42:1293 -> xxx.yyy.255.244:1433 SYN ******S* Mar 11 23:28:04 202.126.109.42:1306 -> xxx.yyy.255.247:1433 SYN ******S* Mar 11 23:28:04 202.126.109.42:1316 -> xxx.yyy.255.251:1433 SYN ******S* Mar 11 23:28:04 202.126.109.42:1314 -> xxx.yyy.255.250:1433 SYN ******S* Mar 11 23:28:04 202.126.109.42:1324 -> xxx.yyy.255.252:1433 SYN ******S* Mar 11 23:28:04 202.126.109.42:1328 -> xxx.yyy.255.253:1433 SYN ******S* Mar 11 23:28:05 202.126.109.42:1333 -> xxx.yyy.255.254:1433 SYN ******S* 57373 Mar 11 14:28:39 140.247.37.246:4339 -> xxx.yyy.1.1:5477 SYN ******S* Mar 11 14:28:39 140.247.37.246:4340 -> xxx.yyy.1.2:5477 SYN ******S* Mar 11 14:28:38 140.247.37.246:4344 -> xxx.yyy.1.6:5477 SYN ******S* Mar 11 14:28:38 140.247.37.246:4345 -> xxx.yyy.1.7:5477 SYN ******S* Mar 11 14:28:39 140.247.37.246:4346 -> xxx.yyy.1.8:5477 SYN ******S* Mar 11 14:28:38 140.247.37.246:4347 -> xxx.yyy.1.9:5477 SYN ******S* Mar 11 14:28:38 140.247.37.246:4348 -> xxx.yyy.1.10:5477 SYN ******S* Mar 11 14:28:38 140.247.37.246:4349 -> xxx.yyy.1.11:5477 SYN ******S* [...] Mar 11 14:40:19 140.247.37.246:2939 -> xxx.yyy.255.228:5477 SYN ******S* Mar 11 14:40:19 140.247.37.246:2942 -> xxx.yyy.255.231:5477 SYN ******S* Mar 11 14:40:20 140.247.37.246:2951 -> xxx.yyy.255.240:5477 SYN ******S* Mar 11 14:40:20 140.247.37.246:2946 -> xxx.yyy.255.235:5477 SYN ******S* Mar 11 14:40:20 140.247.37.246:2945 -> xxx.yyy.255.234:5477 SYN ******S* Mar 11 14:40:20 140.247.37.246:2949 -> xxx.yyy.255.238:5477 SYN ******S* Mar 11 14:40:20 140.247.37.246:2948 -> xxx.yyy.255.237:5477 SYN ******S* Mar 11 14:40:20 140.247.37.246:2964 -> xxx.yyy.255.253:5477 SYN ******S* 53776 Mar 11 11:26:29 192.150.249.113:2406 -> xxx.yyy.1.8:21 SYN ******S* Mar 11 11:26:29 192.150.249.113:2407 -> xxx.yyy.1.9:21 SYN ******S* Mar 11 11:26:26 192.150.249.113:2408 -> xxx.yyy.1.10:21 SYN ******S* Mar 11 11:26:26 192.150.249.113:2409 -> xxx.yyy.1.11:21 SYN ******S* Mar 11 11:26:29 192.150.249.113:2410 -> xxx.yyy.1.12:21 SYN ******S* Mar 11 11:26:26 192.150.249.113:2411 -> xxx.yyy.1.13:21 SYN ******S* Mar 11 11:26:26 192.150.249.113:2412 -> xxx.yyy.1.14:21 SYN ******S* Mar 11 11:26:29 192.150.249.113:2413 -> xxx.yyy.1.15:21 SYN ******S* [...] Mar 11 11:37:21 192.150.249.113:2164 -> xxx.yyy.255.222:21 SYN ******S* Mar 11 11:37:21 192.150.249.113:2165 -> xxx.yyy.255.223:21 SYN ******S* Mar 11 11:37:21 192.150.249.113:2162 -> xxx.yyy.255.220:21 SYN ******S* Mar 11 11:37:21 192.150.249.113:2168 -> xxx.yyy.255.226:21 SYN ******S* Mar 11 11:37:21 192.150.249.113:2161 -> xxx.yyy.255.219:21 SYN ******S* Mar 11 11:37:22 192.150.249.113:2189 -> xxx.yyy.255.247:21 SYN ******S* Mar 11 11:37:22 192.150.249.113:2181 -> xxx.yyy.255.239:21 SYN ******S* Mar 11 11:37:22 192.150.249.113:2191 -> xxx.yyy.255.249:21 SYN ******S* Mar 11 11:37:22 192.150.249.113:2196 -> xxx.yyy.255.254:21 SYN ******S* 51526 Mar 11 03:10:59 221.239.8.243:32067 -> xxx.yyy.1.0:1433 SYN ******S* Mar 11 03:11:00 221.239.8.243:32068 -> xxx.yyy.1.1:1433 SYN ******S* Mar 11 03:11:00 221.239.8.243:58099 -> xxx.yyy.1.2:1433 SYN ******S* Mar 11 03:11:00 221.239.8.243:30228 -> xxx.yyy.1.3:1433 SYN ******S* Mar 11 03:10:57 221.239.8.243:37891 -> xxx.yyy.1.4:1433 SYN ******S* Mar 11 03:11:00 221.239.8.243:32070 -> xxx.yyy.1.5:1433 SYN ******S* Mar 11 03:11:00 221.239.8.243:32071 -> xxx.yyy.1.6:1433 SYN ******S* Mar 11 03:11:00 221.239.8.243:32073 -> xxx.yyy.1.7:1433 SYN ******S* [...] Mar 11 06:59:42 221.239.8.243:35447 -> xxx.yyy.255.231:1433 SYN ******S* Mar 11 06:59:43 221.239.8.243:48509 -> xxx.yyy.255.238:1433 SYN ******S* Mar 11 06:59:43 221.239.8.243:45450 -> xxx.yyy.255.239:1433 SYN ******S* Mar 11 06:59:43 221.239.8.243:50809 -> xxx.yyy.255.236:1433 SYN ******S* Mar 11 06:59:44 221.239.8.243:37600 -> xxx.yyy.255.240:1433 SYN ******S* Mar 11 06:59:45 221.239.8.243:51905 -> xxx.yyy.255.250:1433 SYN ******S* Mar 11 06:59:46 221.239.8.243:33163 -> xxx.yyy.255.252:1433 SYN ******S* Mar 11 06:59:46 221.239.8.243:60809 -> xxx.yyy.255.253:1433 SYN ******S* 50883 Mar 11 15:01:22 128.122.78.15:4797 -> xxx.yyy.1.3:1433 SYN ******S* Mar 11 15:01:22 128.122.78.15:4799 -> xxx.yyy.1.6:1433 SYN ******S* Mar 11 15:01:22 128.122.78.15:4796 -> xxx.yyy.1.4:1433 SYN ******S* Mar 11 15:01:19 128.122.78.15:4795 -> xxx.yyy.1.2:1433 SYN ******S* Mar 11 15:01:22 128.122.78.15:4800 -> xxx.yyy.1.7:1433 SYN ******S* Mar 11 15:01:19 128.122.78.15:4803 -> xxx.yyy.1.8:1433 SYN ******S* Mar 11 15:01:22 128.122.78.15:4804 -> xxx.yyy.1.9:1433 SYN ******S* Mar 11 15:01:22 128.122.78.15:4812 -> xxx.yyy.1.13:1433 SYN ******S* [...] Mar 11 15:06:19 128.122.78.15:2009 -> xxx.yyy.255.252:1433 SYN ******S* Mar 11 15:06:19 128.122.78.15:2006 -> xxx.yyy.255.249:1433 SYN ******S* Mar 11 15:06:19 128.122.78.15:1993 -> xxx.yyy.255.236:1433 SYN ******S* Mar 11 15:06:19 128.122.78.15:2003 -> xxx.yyy.255.246:1433 SYN ******S* Mar 11 15:06:19 128.122.78.15:1997 -> xxx.yyy.255.240:1433 SYN ******S* Mar 11 15:06:19 128.122.78.15:2000 -> xxx.yyy.255.243:1433 SYN ******S* Mar 11 15:06:19 128.122.78.15:2010 -> xxx.yyy.255.253:1433 SYN ******S* Mar 11 15:06:19 128.122.78.15:2007 -> xxx.yyy.255.250:1433 SYN ******S* Mar 11 15:06:19 128.122.78.15:1994 -> xxx.yyy.255.237:1433 SYN ******S* 44158 Mar 11 13:38:01 207.50.193.211:1692 -> xxx.yyy.1.3:3306 SYN ******S* Mar 11 13:38:01 207.50.193.211:1690 -> xxx.yyy.1.1:3306 SYN ******S* Mar 11 13:38:01 207.50.193.211:1694 -> xxx.yyy.1.5:3306 SYN ******S* Mar 11 13:38:01 207.50.193.211:1695 -> xxx.yyy.1.6:3306 SYN ******S* Mar 11 13:38:01 207.50.193.211:1698 -> xxx.yyy.1.9:3306 SYN ******S* Mar 11 13:38:01 207.50.193.211:1699 -> xxx.yyy.1.10:3306 SYN ******S* Mar 11 13:38:01 207.50.193.211:1700 -> xxx.yyy.1.11:3306 SYN ******S* Mar 11 13:37:59 207.50.193.211:1702 -> xxx.yyy.1.13:3306 SYN ******S* [...] Mar 11 13:46:53 207.50.193.211:2944 -> xxx.yyy.255.226:3306 SYN ******S* Mar 11 13:46:53 207.50.193.211:2945 -> xxx.yyy.255.227:3306 SYN ******S* Mar 11 13:46:53 207.50.193.211:2946 -> xxx.yyy.255.228:3306 SYN ******S* Mar 11 13:46:53 207.50.193.211:2947 -> xxx.yyy.255.229:3306 SYN ******S* Mar 11 13:46:53 207.50.193.211:2948 -> xxx.yyy.255.230:3306 SYN ******S* Mar 11 13:46:53 207.50.193.211:2956 -> xxx.yyy.255.238:3306 SYN ******S* Mar 11 13:46:53 207.50.193.211:2960 -> xxx.yyy.255.242:3306 SYN ******S* Mar 11 13:46:53 207.50.193.211:2954 -> xxx.yyy.255.236:3306 SYN ******S* 41378 Mar 11 16:48:10 209.175.103.226:4601 -> xxx.yyy.1.1:3306 SYN ******S* Mar 11 16:48:13 209.175.103.226:4602 -> xxx.yyy.1.2:3306 SYN ******S* Mar 11 16:48:10 209.175.103.226:4604 -> xxx.yyy.1.4:3306 SYN ******S* Mar 11 16:48:10 209.175.103.226:4603 -> xxx.yyy.1.3:3306 SYN ******S* Mar 11 16:48:10 209.175.103.226:4605 -> xxx.yyy.1.5:3306 SYN ******S* Mar 11 16:48:10 209.175.103.226:4606 -> xxx.yyy.1.6:3306 SYN ******S* Mar 11 16:48:10 209.175.103.226:4607 -> xxx.yyy.1.7:3306 SYN ******S* Mar 11 16:48:10 209.175.103.226:4608 -> xxx.yyy.1.8:3306 SYN ******S* [...] Mar 11 17:07:20 209.175.103.226:4331 -> xxx.yyy.255.235:3306 SYN ******S* Mar 11 17:07:20 209.175.103.226:4332 -> xxx.yyy.255.236:3306 SYN ******S* Mar 11 17:07:20 209.175.103.226:4333 -> xxx.yyy.255.237:3306 SYN ******S* Mar 11 17:07:20 209.175.103.226:4334 -> xxx.yyy.255.238:3306 SYN ******S* Mar 11 17:07:20 209.175.103.226:4335 -> xxx.yyy.255.239:3306 SYN ******S* Mar 11 17:07:20 209.175.103.226:4336 -> xxx.yyy.255.240:3306 SYN ******S* Mar 11 17:07:20 209.175.103.226:4337 -> xxx.yyy.255.241:3306 SYN ******S* Mar 11 17:07:20 209.175.103.226:4338 -> xxx.yyy.255.242:3306 SYN ******S* Mar 11 17:07:22 209.175.103.226:4319 -> xxx.yyy.255.223:3306 SYN ******S* 32970 [...] 21397 Mar 11 23:52:30 218.93.164.199:1398 -> xxx.yyy.71.160:5554 SYN ******S* Mar 11 23:52:33 218.93.164.199:2878 -> xxx.yyy.71.160:9898 SYN ******S* Mar 11 23:52:30 218.93.164.199:1401 -> xxx.yyy.71.162:5554 SYN ******S* Mar 11 23:52:31 218.93.164.199:1968 -> xxx.yyy.71.162:1023 SYN ******S* Mar 11 23:52:30 218.93.164.199:1402 -> xxx.yyy.71.163:5554 SYN ******S* Mar 11 23:52:31 218.93.164.199:1969 -> xxx.yyy.71.163:1023 SYN ******S* Mar 11 23:52:33 218.93.164.199:2882 -> xxx.yyy.71.163:9898 SYN ******S* Mar 11 23:52:30 218.93.164.199:1403 -> xxx.yyy.71.164:5554 SYN ******S* [...] Mar 11 23:53:55 218.93.164.199:2313 -> xxx.yyy.11.63:9898 SYN ******S* Mar 11 23:53:52 218.93.164.199:4641 -> xxx.yyy.11.58:5554 SYN ******S* Mar 11 23:53:53 218.93.164.199:1403 -> xxx.yyy.11.58:1023 SYN ******S* Mar 11 23:53:55 218.93.164.199:2314 -> xxx.yyy.11.58:9898 SYN ******S* Mar 11 23:53:52 218.93.164.199:4673 -> xxx.yyy.11.60:5554 SYN ******S* Mar 11 23:53:55 218.93.164.199:2315 -> xxx.yyy.11.60:9898 SYN ******S* Mar 11 23:53:52 218.93.164.199:4674 -> xxx.yyy.11.61:5554 SYN ******S* Mar 11 23:53:53 218.93.164.199:1406 -> xxx.yyy.11.61:1023 SYN ******S* Mar 11 23:53:55 218.93.164.199:2317 -> xxx.yyy.11.61:9898 SYN ******S* 16350 [...] 15975 Mar 11 22:54:15 61.211.37.52:2662 -> xxx.yyy.174.222:5554 SYN ******S* Mar 11 22:54:16 61.211.37.52:2969 -> xxx.yyy.174.222:1023 SYN ******S* Mar 11 22:54:18 61.211.37.52:3719 -> xxx.yyy.174.222:9898 SYN ******S* Mar 11 22:54:15 61.211.37.52:2663 -> xxx.yyy.174.223:5554 SYN ******S* Mar 11 22:54:16 61.211.37.52:2970 -> xxx.yyy.174.223:1023 SYN ******S* Mar 11 22:54:18 61.211.37.52:3720 -> xxx.yyy.174.223:9898 SYN ******S* Mar 11 22:54:15 61.211.37.52:2665 -> xxx.yyy.174.224:5554 SYN ******S* Mar 11 22:54:16 61.211.37.52:2972 -> xxx.yyy.174.224:1023 SYN ******S* [...] Mar 11 22:55:16 61.211.37.52:2265 -> xxx.yyy.195.51:9898 SYN ******S* Mar 11 22:55:16 61.211.37.52:2266 -> xxx.yyy.195.52:9898 SYN ******S* Mar 11 22:55:16 61.211.37.52:2267 -> xxx.yyy.195.54:9898 SYN ******S* Mar 11 22:55:16 61.211.37.52:2268 -> xxx.yyy.195.55:9898 SYN ******S* Mar 11 22:55:16 61.211.37.52:2269 -> xxx.yyy.195.56:9898 SYN ******S* Mar 11 22:55:16 61.211.37.52:2270 -> xxx.yyy.195.57:9898 SYN ******S* Mar 11 22:55:16 61.211.37.52:2271 -> xxx.yyy.195.58:9898 SYN ******S* Mar 11 22:55:18 61.211.37.52:2717 -> xxx.yyy.195.68:9898 SYN ******S* Mar 11 22:55:18 61.211.37.52:2729 -> xxx.yyy.195.80:9898 SYN ******S* 14679 Mar 11 00:00:04 82.216.77.112:4822 -> xxx.yyy.225.50:1433 SYN ******S* Mar 11 00:00:05 82.216.77.112:1590 -> xxx.yyy.225.51:1433 SYN ******S* Mar 11 00:00:08 82.216.77.112:4850 -> xxx.yyy.225.71:1433 SYN ******S* Mar 11 00:00:08 82.216.77.112:4812 -> xxx.yyy.225.70:1433 SYN ******S* Mar 11 00:00:05 82.216.77.112:1996 -> xxx.yyy.225.65:1433 SYN ******S* Mar 11 00:00:05 82.216.77.112:2844 -> xxx.yyy.225.52:1433 SYN ******S* Mar 11 00:00:05 82.216.77.112:2841 -> xxx.yyy.225.53:1433 SYN ******S* Mar 11 00:00:06 82.216.77.112:3711 -> xxx.yyy.225.55:1433 SYN ******S* [...] Mar 11 01:14:09 82.216.77.112:1407 -> xxx.yyy.255.254:1433 SYN ******S* Mar 11 01:14:09 82.216.77.112:1288 -> xxx.yyy.255.243:1433 SYN ******S* Mar 11 01:14:10 82.216.77.112:1875 -> xxx.yyy.255.244:1433 SYN ******S* Mar 11 01:14:11 82.216.77.112:2541 -> xxx.yyy.255.246:1433 SYN ******S* Mar 11 01:14:12 82.216.77.112:2786 -> xxx.yyy.255.247:1433 SYN ******S* Mar 11 01:14:12 82.216.77.112:3206 -> xxx.yyy.255.248:1433 SYN ******S* Mar 11 01:14:13 82.216.77.112:3417 -> xxx.yyy.255.249:1433 SYN ******S* Mar 11 01:14:14 82.216.77.112:4658 -> xxx.yyy.255.252:1433 SYN ******S* Mar 11 01:14:15 82.216.77.112:1191 -> xxx.yyy.255.253:1433 SYN ******S* 14467 Mar 11 22:46:20 60.42.170.80:1566 -> xxx.yyy.214.246:5554 SYN ******S* Mar 11 22:46:21 60.42.170.80:2184 -> xxx.yyy.214.246:1023 SYN ******S* Mar 11 22:46:23 60.42.170.80:3331 -> xxx.yyy.214.246:9898 SYN ******S* Mar 11 22:46:20 60.42.170.80:1567 -> xxx.yyy.214.247:5554 SYN ******S* Mar 11 22:46:21 60.42.170.80:2174 -> xxx.yyy.214.247:1023 SYN ******S* Mar 11 22:46:23 60.42.170.80:3278 -> xxx.yyy.214.247:9898 SYN ******S* Mar 11 22:46:20 60.42.170.80:1570 -> xxx.yyy.214.248:5554 SYN ******S* Mar 11 22:46:21 60.42.170.80:2188 -> xxx.yyy.214.248:1023 SYN ******S* [...] Mar 11 22:47:04 60.42.170.80:1075 -> xxx.yyy.235.112:9898 SYN ******S* Mar 11 22:47:04 60.42.170.80:1057 -> xxx.yyy.235.100:9898 SYN ******S* Mar 11 22:47:04 60.42.170.80:1059 -> xxx.yyy.235.102:9898 SYN ******S* Mar 11 22:47:04 60.42.170.80:1060 -> xxx.yyy.235.103:9898 SYN ******S* Mar 11 22:47:04 60.42.170.80:1069 -> xxx.yyy.235.107:9898 SYN ******S* Mar 11 22:47:04 60.42.170.80:1072 -> xxx.yyy.235.105:9898 SYN ******S* Mar 11 22:47:04 60.42.170.80:1076 -> xxx.yyy.235.106:9898 SYN ******S* Mar 11 22:47:04 60.42.170.80:1089 -> xxx.yyy.235.101:9898 SYN ******S* 14149 Mar 11 17:26:08 219.235.233.194:44072 -> xxx.yyy.1.0:1433 SYN ******S* Mar 11 17:26:08 219.235.233.194:44075 -> xxx.yyy.1.1:1433 SYN ******S* Mar 11 17:26:05 219.235.233.194:44082 -> xxx.yyy.1.3:1433 SYN ******S* Mar 11 17:26:08 219.235.233.194:44085 -> xxx.yyy.1.4:1433 SYN ******S* Mar 11 17:26:05 219.235.233.194:44091 -> xxx.yyy.1.6:1433 SYN ******S* Mar 11 17:26:08 219.235.233.194:44079 -> xxx.yyy.1.2:1433 SYN ******S* Mar 11 17:26:08 219.235.233.194:44094 -> xxx.yyy.1.7:1433 SYN ******S* Mar 11 17:26:08 219.235.233.194:44097 -> xxx.yyy.1.8:1433 SYN ******S* [...] Mar 11 18:30:25 219.235.233.194:20874 -> xxx.yyy.73.94:1433 SYN ******S* Mar 11 18:30:25 219.235.233.194:20869 -> xxx.yyy.73.93:1433 SYN ******S* Mar 11 18:30:25 219.235.233.194:20925 -> xxx.yyy.73.97:1433 SYN ******S* Mar 11 18:30:25 219.235.233.194:20916 -> xxx.yyy.73.95:1433 SYN ******S* Mar 11 18:30:25 219.235.233.194:20921 -> xxx.yyy.73.96:1433 SYN ******S* Mar 11 18:30:25 219.235.233.194:20929 -> xxx.yyy.73.98:1433 SYN ******S* Mar 11 18:30:25 219.235.233.194:20998 -> xxx.yyy.73.99:1433 SYN ******S* Mar 11 18:30:25 219.235.233.194:21009 -> xxx.yyy.73.100:1433 SYN ******S* Mar 11 18:30:25 219.235.233.194:21036 -> xxx.yyy.73.101:1433 SYN ******S* 13878 Mar 11 22:55:05 221.152.196.49:4476 -> xxx.yyy.154.101:5554 SYN ******S* Mar 11 22:55:06 221.152.196.49:1582 -> xxx.yyy.154.101:1023 SYN ******S* Mar 11 22:55:08 221.152.196.49:3942 -> xxx.yyy.154.101:9898 SYN ******S* Mar 11 22:55:05 221.152.196.49:4509 -> xxx.yyy.154.106:5554 SYN ******S* Mar 11 22:55:06 221.152.196.49:1598 -> xxx.yyy.154.106:1023 SYN ******S* Mar 11 22:55:08 221.152.196.49:3970 -> xxx.yyy.154.106:9898 SYN ******S* Mar 11 22:55:05 221.152.196.49:4583 -> xxx.yyy.154.118:5554 SYN ******S* Mar 11 22:55:06 221.152.196.49:1660 -> xxx.yyy.154.118:1023 SYN ******S* [...] Mar 11 22:58:13 221.152.196.49:4637 -> xxx.yyy.155.149:9898 SYN ******S* Mar 11 22:58:13 221.152.196.49:4638 -> xxx.yyy.155.150:9898 SYN ******S* Mar 11 22:58:13 221.152.196.49:4640 -> xxx.yyy.155.151:9898 SYN ******S* Mar 11 22:58:13 221.152.196.49:4648 -> xxx.yyy.155.153:9898 SYN ******S* Mar 11 22:58:13 221.152.196.49:4641 -> xxx.yyy.155.152:9898 SYN ******S* Mar 11 22:58:13 221.152.196.49:4651 -> xxx.yyy.155.155:9898 SYN ******S* Mar 11 22:58:13 221.152.196.49:4650 -> xxx.yyy.155.154:9898 SYN ******S* Mar 11 22:58:13 221.152.196.49:4667 -> xxx.yyy.155.160:9898 SYN ******S* 13514 Mar 11 14:45:34 203.234.115.35:4314 -> xxx.yyy.1.0:21 SYN ******S* Mar 11 14:45:35 203.234.115.35:4318 -> xxx.yyy.1.4:21 SYN ******S* Mar 11 14:45:35 203.234.115.35:4292 -> xxx.yyy.1.28:21 SYN ******S* Mar 11 14:45:35 203.234.115.35:4304 -> xxx.yyy.1.40:21 SYN ******S* Mar 11 14:45:35 203.234.115.35:4305 -> xxx.yyy.1.41:21 SYN ******S* Mar 11 14:45:35 203.234.115.35:4308 -> xxx.yyy.1.44:21 SYN ******S* Mar 11 14:45:35 203.234.115.35:4310 -> xxx.yyy.1.46:21 SYN ******S* Mar 11 14:45:35 203.234.115.35:4309 -> xxx.yyy.1.45:21 SYN ******S* [...] Mar 11 15:28:00 203.234.115.35:4282 -> xxx.yyy.254.33:3306 SYN ******S* Mar 11 15:28:00 203.234.115.35:4322 -> xxx.yyy.253.228:3306 SYN ******S* Mar 11 15:28:00 203.234.115.35:4324 -> xxx.yyy.253.230:3306 SYN ******S* Mar 11 15:28:00 203.234.115.35:4286 -> xxx.yyy.254.37:3306 SYN ******S* Mar 11 15:28:00 203.234.115.35:4296 -> xxx.yyy.253.252:3306 SYN ******S* Mar 11 15:28:00 203.234.115.35:4323 -> xxx.yyy.254.124:3306 SYN ******S* Mar 11 15:28:00 203.234.115.35:4298 -> xxx.yyy.253.254:3306 SYN ******S* Mar 11 15:28:00 203.234.115.35:4297 -> xxx.yyy.253.253:3306 SYN ******S* 13303 Mar 11 00:00:04 213.154.78.228:4805 -> xxx.yyy.79.144:1433 SYN ******S* Mar 11 00:00:07 213.154.78.228:4809 -> xxx.yyy.79.147:1433 SYN ******S* Mar 11 00:00:05 213.154.78.228:4807 -> xxx.yyy.79.145:1433 SYN ******S* Mar 11 00:00:05 213.154.78.228:4808 -> xxx.yyy.79.146:1433 SYN ******S* Mar 11 00:00:06 213.154.78.228:4781 -> xxx.yyy.79.138:1433 SYN ******S* Mar 11 00:00:07 213.154.78.228:4783 -> xxx.yyy.79.139:1433 SYN ******S* Mar 11 00:00:07 213.154.78.228:4785 -> xxx.yyy.79.140:1433 SYN ******S* Mar 11 00:00:08 213.154.78.228:4789 -> xxx.yyy.79.141:1433 SYN ******S* [...] Mar 11 05:52:14 213.154.78.228:4304 -> xxx.yyy.111.201:1433 SYN ******S* Mar 11 05:52:18 213.154.78.228:4320 -> xxx.yyy.111.202:1433 SYN ******S* Mar 11 05:52:21 213.154.78.228:4328 -> xxx.yyy.111.203:1433 SYN ******S* Mar 11 05:52:24 213.154.78.228:4328 -> xxx.yyy.111.203:1433 SYN ******S* Mar 11 05:52:24 213.154.78.228:4320 -> xxx.yyy.111.202:1433 SYN ******S* Mar 11 05:52:25 213.154.78.228:4336 -> xxx.yyy.111.204:1433 SYN ******S* Mar 11 05:52:25 213.154.78.228:4338 -> xxx.yyy.111.205:1433 SYN ******S* Mar 11 05:52:26 213.154.78.228:4339 -> xxx.yyy.111.206:1433 SYN ******S* 13087 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions