[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Tue Feb 1 14:43:45 GMT 2005
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Jan 31 00:00:07 61.186.94.251:1687 -> xxx.yyy.131.249:6129 SYN ******S*
Jan 31 00:00:07 61.186.94.251:1689 -> xxx.yyy.131.249:3410 SYN ******S*
Jan 31 00:00:07 61.186.94.251:1690 -> xxx.yyy.131.249:5554 SYN ******S*
Jan 31 00:00:07 61.186.94.251:1685 -> xxx.yyy.131.249:1025 SYN ******S*
Jan 31 00:00:07 61.186.94.251:1702 -> xxx.yyy.208.178:1025 SYN ******S*
Jan 31 00:00:07 61.186.94.251:1705 -> xxx.yyy.208.178:6129 SYN ******S*
Jan 31 00:00:07 61.186.94.251:1707 -> xxx.yyy.208.178:3410 SYN ******S*
Jan 31 00:00:07 61.186.94.251:1698 -> xxx.yyy.212.239:1025 SYN ******S*
[...]
Jan 31 17:09:28 61.186.94.251:3504 -> xxx.yyy.212.22:1025 SYN ******S*
Jan 31 17:09:29 61.186.94.251:3554 -> xxx.yyy.212.185:6129 SYN ******S*
Jan 31 17:09:29 61.186.94.251:3559 -> xxx.yyy.212.185:5554 SYN ******S*
Jan 31 17:09:30 61.186.94.251:3593 -> xxx.yyy.205.55:1025 SYN ******S*
Jan 31 17:09:30 61.186.94.251:3616 -> xxx.yyy.233.168:1025 SYN ******S*
Jan 31 17:09:32 61.186.94.251:3669 -> xxx.yyy.212.47:1025 SYN ******S*
Jan 31 17:09:32 61.186.94.251:3671 -> xxx.yyy.212.169:1025 SYN ******S*
Jan 31 17:09:33 61.186.94.251:3729 -> xxx.yyy.212.210:1025 SYN ******S*
Jan 31 17:09:33 61.186.94.251:3754 -> xxx.yyy.224.126:3410 SYN ******S*
897937
[...]
77436
Jan 31 09:15:57 199.243.67.162:30041 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 31 09:15:57 199.243.67.162:30040 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 31 09:15:57 199.243.67.162:30039 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 31 09:15:54 199.243.67.162:30043 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 31 09:15:54 199.243.67.162:30044 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 31 09:15:54 199.243.67.162:30046 -> xxx.yyy.1.8:1433 SYN ******S*
Jan 31 09:15:54 199.243.67.162:30047 -> xxx.yyy.1.9:1433 SYN ******S*
Jan 31 09:15:54 199.243.67.162:30049 -> xxx.yyy.1.11:1433 SYN ******S*
[...]
Jan 31 11:11:06 199.243.67.162:53262 -> xxx.yyy.255.236:1433 SYN ******S*
Jan 31 11:11:06 199.243.67.162:51963 -> xxx.yyy.255.238:1433 SYN ******S*
Jan 31 11:11:06 199.243.67.162:51966 -> xxx.yyy.255.240:1433 SYN ******S*
Jan 31 11:11:06 199.243.67.162:62364 -> xxx.yyy.255.243:1433 SYN ******S*
Jan 31 11:11:06 199.243.67.162:4979 -> xxx.yyy.255.244:1433 SYN ******S*
Jan 31 11:11:06 199.243.67.162:51978 -> xxx.yyy.255.245:1433 SYN ******S*
Jan 31 11:11:07 199.243.67.162:51979 -> xxx.yyy.255.246:1433 SYN ******S*
Jan 31 11:11:07 199.243.67.162:60686 -> xxx.yyy.255.248:1433 SYN ******S*
Jan 31 11:11:07 199.243.67.162:51988 -> xxx.yyy.255.251:1433 SYN ******S*
63930
Jan 31 07:53:58 80.80.19.6:1368 -> xxx.yyy.1.1:3306 SYN ******S*
Jan 31 07:53:55 80.80.19.6:1370 -> xxx.yyy.1.2:3306 SYN ******S*
Jan 31 07:53:55 80.80.19.6:1372 -> xxx.yyy.1.3:3306 SYN ******S*
Jan 31 07:53:56 80.80.19.6:1374 -> xxx.yyy.1.4:3306 SYN ******S*
Jan 31 07:53:58 80.80.19.6:1376 -> xxx.yyy.1.5:3306 SYN ******S*
Jan 31 07:53:56 80.80.19.6:1378 -> xxx.yyy.1.6:3306 SYN ******S*
Jan 31 07:53:56 80.80.19.6:1380 -> xxx.yyy.1.7:3306 SYN ******S*
Jan 31 07:53:56 80.80.19.6:1382 -> xxx.yyy.1.8:3306 SYN ******S*
[...]
Jan 31 08:05:50 80.80.19.6:1344 -> xxx.yyy.255.237:3306 SYN ******S*
Jan 31 08:05:50 80.80.19.6:1356 -> xxx.yyy.255.243:3306 SYN ******S*
Jan 31 08:05:50 80.80.19.6:1364 -> xxx.yyy.255.247:3306 SYN ******S*
Jan 31 08:05:50 80.80.19.6:1370 -> xxx.yyy.255.250:3306 SYN ******S*
Jan 31 08:05:50 80.80.19.6:1372 -> xxx.yyy.255.251:3306 SYN ******S*
Jan 31 08:05:50 80.80.19.6:1368 -> xxx.yyy.255.249:3306 SYN ******S*
Jan 31 08:05:50 80.80.19.6:1378 -> xxx.yyy.255.254:3306 SYN ******S*
Jan 31 08:05:50 80.80.19.6:1374 -> xxx.yyy.255.252:3306 SYN ******S*
59860
Jan 31 00:05:25 61.52.95.6:2486 -> xxx.yyy.104.0:1433 SYN ******S*
Jan 31 00:05:25 61.52.95.6:2509 -> xxx.yyy.104.3:1433 SYN ******S*
Jan 31 00:05:26 61.52.95.6:2511 -> xxx.yyy.104.4:1433 SYN ******S*
Jan 31 00:05:23 61.52.95.6:2527 -> xxx.yyy.104.6:1433 SYN ******S*
Jan 31 00:05:26 61.52.95.6:2546 -> xxx.yyy.104.9:1433 SYN ******S*
Jan 31 00:05:24 61.52.95.6:2585 -> xxx.yyy.104.14:1433 SYN ******S*
Jan 31 00:05:24 61.52.95.6:2606 -> xxx.yyy.104.16:1433 SYN ******S*
Jan 31 00:05:24 61.52.95.6:2621 -> xxx.yyy.104.21:1433 SYN ******S*
[...]
Jan 31 02:21:42 61.52.95.6:3843 -> xxx.yyy.255.245:1433 SYN ******S*
Jan 31 02:21:42 61.52.95.6:3841 -> xxx.yyy.255.244:1433 SYN ******S*
Jan 31 02:21:42 61.52.95.6:3847 -> xxx.yyy.255.246:1433 SYN ******S*
Jan 31 02:21:43 61.52.95.6:3858 -> xxx.yyy.255.250:1433 SYN ******S*
Jan 31 02:21:43 61.52.95.6:3856 -> xxx.yyy.255.248:1433 SYN ******S*
Jan 31 02:21:43 61.52.95.6:3860 -> xxx.yyy.255.251:1433 SYN ******S*
Jan 31 02:21:43 61.52.95.6:3868 -> xxx.yyy.255.252:1433 SYN ******S*
Jan 31 02:21:44 61.52.95.6:3874 -> xxx.yyy.255.254:1433 SYN ******S*
57113
Jan 31 14:15:25 134.129.138.197:1720 -> xxx.yyy.1.1:6129 SYN ******S*
Jan 31 14:15:26 134.129.138.197:1724 -> xxx.yyy.1.5:6129 SYN ******S*
Jan 31 14:15:26 134.129.138.197:1725 -> xxx.yyy.1.6:6129 SYN ******S*
Jan 31 14:15:26 134.129.138.197:1726 -> xxx.yyy.1.7:6129 SYN ******S*
Jan 31 14:15:27 134.129.138.197:1733 -> xxx.yyy.1.14:6129 SYN ******S*
Jan 31 14:15:27 134.129.138.197:1736 -> xxx.yyy.1.17:6129 SYN ******S*
Jan 31 14:15:27 134.129.138.197:1738 -> xxx.yyy.1.19:6129 SYN ******S*
Jan 31 14:15:26 134.129.138.197:1741 -> xxx.yyy.1.22:6129 SYN ******S*
[...]
Jan 31 14:38:03 134.129.138.197:3236 -> xxx.yyy.255.243:6129 SYN ******S*
Jan 31 14:38:03 134.129.138.197:3235 -> xxx.yyy.255.242:6129 SYN ******S*
Jan 31 14:38:03 134.129.138.197:3233 -> xxx.yyy.255.240:6129 SYN ******S*
Jan 31 14:38:03 134.129.138.197:3234 -> xxx.yyy.255.241:6129 SYN ******S*
Jan 31 14:38:03 134.129.138.197:3247 -> xxx.yyy.255.254:6129 SYN ******S*
Jan 31 14:38:03 134.129.138.197:3245 -> xxx.yyy.255.252:6129 SYN ******S*
Jan 31 14:38:03 134.129.138.197:3246 -> xxx.yyy.255.253:6129 SYN ******S*
Jan 31 14:38:03 134.129.138.197:3243 -> xxx.yyy.255.250:6129 SYN ******S*
Jan 31 14:38:03 134.129.138.197:3244 -> xxx.yyy.255.251:6129 SYN ******S*
46507
Jan 31 02:37:10 221.153.190.120:4863 -> xxx.yyy.1.1:4899 SYN ******S*
Jan 31 02:37:10 221.153.190.120:4864 -> xxx.yyy.1.2:4899 SYN ******S*
Jan 31 02:37:09 221.153.190.120:4869 -> xxx.yyy.1.6:4899 SYN ******S*
Jan 31 02:37:09 221.153.190.120:4866 -> xxx.yyy.1.4:4899 SYN ******S*
Jan 31 02:37:10 221.153.190.120:4865 -> xxx.yyy.1.3:4899 SYN ******S*
Jan 31 02:37:09 221.153.190.120:4868 -> xxx.yyy.1.5:4899 SYN ******S*
Jan 31 02:37:10 221.153.190.120:4872 -> xxx.yyy.1.9:4899 SYN ******S*
Jan 31 02:37:09 221.153.190.120:4870 -> xxx.yyy.1.7:4899 SYN ******S*
[...]
Jan 31 02:42:18 221.153.190.120:1595 -> xxx.yyy.255.4:4899 SYN ******S*
Jan 31 02:42:18 221.153.190.120:1597 -> xxx.yyy.255.6:4899 SYN ******S*
Jan 31 02:42:18 221.153.190.120:1599 -> xxx.yyy.255.8:4899 SYN ******S*
Jan 31 02:42:18 221.153.190.120:1600 -> xxx.yyy.255.9:4899 SYN ******S*
Jan 31 02:42:18 221.153.190.120:1602 -> xxx.yyy.255.11:4899 SYN ******S*
Jan 31 02:42:18 221.153.190.120:1601 -> xxx.yyy.255.10:4899 SYN ******S*
Jan 31 02:42:18 221.153.190.120:1598 -> xxx.yyy.255.7:4899 SYN ******S*
Jan 31 02:42:18 221.153.190.120:1594 -> xxx.yyy.255.3:4899 SYN ******S*
Jan 31 02:42:19 221.153.190.120:1839 -> xxx.yyy.255.247:4899 SYN ******S*
43162
Jan 31 18:14:00 195.159.72.70:3626 -> xxx.yyy.1.1:6101 SYN ******S*
Jan 31 18:14:00 195.159.72.70:3627 -> xxx.yyy.1.2:6101 SYN ******S*
Jan 31 18:13:57 195.159.72.70:3628 -> xxx.yyy.1.3:6101 SYN ******S*
Jan 31 18:14:00 195.159.72.70:3632 -> xxx.yyy.1.7:6101 SYN ******S*
Jan 31 18:13:57 195.159.72.70:3633 -> xxx.yyy.1.8:6101 SYN ******S*
Jan 31 18:13:57 195.159.72.70:3634 -> xxx.yyy.1.9:6101 SYN ******S*
Jan 31 18:13:57 195.159.72.70:3636 -> xxx.yyy.1.11:6101 SYN ******S*
Jan 31 18:14:00 195.159.72.70:3637 -> xxx.yyy.1.12:6101 SYN ******S*
[...]
Jan 31 18:38:04 195.159.72.70:4051 -> xxx.yyy.zzz.245:6101 SYN ******S*
Jan 31 18:38:04 195.159.72.70:4044 -> xxx.yyy.zzz.238:6101 SYN ******S*
Jan 31 18:38:04 195.159.72.70:4058 -> xxx.yyy.zzz.252:6101 SYN ******S*
Jan 31 18:38:04 195.159.72.70:4057 -> xxx.yyy.zzz.251:6101 SYN ******S*
Jan 31 18:38:04 195.159.72.70:4055 -> xxx.yyy.zzz.249:6101 SYN ******S*
Jan 31 18:38:04 195.159.72.70:4059 -> xxx.yyy.zzz.253:6101 SYN ******S*
Jan 31 18:38:04 195.159.72.70:4056 -> xxx.yyy.zzz.250:6101 SYN ******S*
Jan 31 18:38:04 195.159.72.70:4060 -> xxx.yyy.zzz.254:6101 SYN ******S*
Jan 31 18:38:04 195.159.72.70:4054 -> xxx.yyy.zzz.248:6101 SYN ******S*
42425
Jan 31 00:46:32 148.231.149.134:3343 -> xxx.yyy.1.1:3306 SYN ******S*
Jan 31 00:46:32 148.231.149.134:3344 -> xxx.yyy.1.2:3306 SYN ******S*
Jan 31 00:46:32 148.231.149.134:3350 -> xxx.yyy.1.8:3306 SYN ******S*
Jan 31 00:46:29 148.231.149.134:3353 -> xxx.yyy.1.11:3306 SYN ******S*
Jan 31 00:46:32 148.231.149.134:3354 -> xxx.yyy.1.12:3306 SYN ******S*
Jan 31 00:46:29 148.231.149.134:3357 -> xxx.yyy.1.15:3306 SYN ******S*
Jan 31 00:46:32 148.231.149.134:3363 -> xxx.yyy.1.21:3306 SYN ******S*
Jan 31 00:46:32 148.231.149.134:3364 -> xxx.yyy.1.22:3306 SYN ******S*
[...]
Jan 31 00:50:30 148.231.149.134:1543 -> xxx.yyy.255.236:3306 SYN ******S*
Jan 31 00:50:30 148.231.149.134:1553 -> xxx.yyy.255.246:3306 SYN ******S*
Jan 31 00:50:30 148.231.149.134:1550 -> xxx.yyy.255.243:3306 SYN ******S*
Jan 31 00:50:30 148.231.149.134:1552 -> xxx.yyy.255.245:3306 SYN ******S*
Jan 31 00:50:30 148.231.149.134:1547 -> xxx.yyy.255.240:3306 SYN ******S*
Jan 31 00:50:30 148.231.149.134:1557 -> xxx.yyy.255.250:3306 SYN ******S*
Jan 31 00:50:30 148.231.149.134:1560 -> xxx.yyy.255.253:3306 SYN ******S*
Jan 31 00:50:30 148.231.149.134:1544 -> xxx.yyy.255.237:3306 SYN ******S*
Jan 31 00:50:30 148.231.149.134:1554 -> xxx.yyy.255.247:3306 SYN ******S*
38894
Jan 31 11:12:09 196.41.25.162:62324 -> xxx.yyy.1.1:3306 SYN ******S*
Jan 31 11:12:09 196.41.25.162:62327 -> xxx.yyy.1.4:3306 SYN ******S*
Jan 31 11:12:06 196.41.25.162:62328 -> xxx.yyy.1.5:3306 SYN ******S*
Jan 31 11:12:06 196.41.25.162:62332 -> xxx.yyy.1.9:3306 SYN ******S*
Jan 31 11:12:09 196.41.25.162:62334 -> xxx.yyy.1.11:3306 SYN ******S*
Jan 31 11:12:09 196.41.25.162:62336 -> xxx.yyy.1.13:3306 SYN ******S*
Jan 31 11:12:06 196.41.25.162:62338 -> xxx.yyy.1.15:3306 SYN ******S*
Jan 31 11:12:09 196.41.25.162:62340 -> xxx.yyy.1.17:3306 SYN ******S*
[...]
Jan 31 11:23:48 196.41.25.162:61849 -> xxx.yyy.255.231:3306 SYN ******S*
Jan 31 11:23:48 196.41.25.162:61846 -> xxx.yyy.255.228:3306 SYN ******S*
Jan 31 11:23:48 196.41.25.162:61856 -> xxx.yyy.255.238:3306 SYN ******S*
Jan 31 11:23:48 196.41.25.162:61853 -> xxx.yyy.255.235:3306 SYN ******S*
Jan 31 11:23:48 196.41.25.162:61855 -> xxx.yyy.255.237:3306 SYN ******S*
Jan 31 11:23:48 196.41.25.162:61861 -> xxx.yyy.255.243:3306 SYN ******S*
Jan 31 11:23:48 196.41.25.162:61871 -> xxx.yyy.255.253:3306 SYN ******S*
Jan 31 11:23:48 196.41.25.162:61870 -> xxx.yyy.255.252:3306 SYN ******S*
33624
Jan 31 15:43:24 64.105.112.37:2821 -> xxx.yyy.1.2:139 SYN ******S*
Jan 31 15:43:24 64.105.112.37:2824 -> xxx.yyy.1.3:139 SYN ******S*
Jan 31 15:43:24 64.105.112.37:2842 -> xxx.yyy.1.9:139 SYN ******S*
Jan 31 15:43:24 64.105.112.37:2851 -> xxx.yyy.1.12:139 SYN ******S*
Jan 31 15:43:24 64.105.112.37:2857 -> xxx.yyy.1.14:139 SYN ******S*
Jan 31 15:43:24 64.105.112.37:2872 -> xxx.yyy.1.19:139 SYN ******S*
Jan 31 15:43:24 64.105.112.37:2875 -> xxx.yyy.1.20:139 SYN ******S*
Jan 31 15:43:24 64.105.112.37:2878 -> xxx.yyy.1.21:139 SYN ******S*
[...]
Jan 31 15:55:05 64.105.112.37:4619 -> xxx.yyy.255.219:139 SYN ******S*
Jan 31 15:55:05 64.105.112.37:4630 -> xxx.yyy.255.221:139 SYN ******S*
Jan 31 15:55:05 64.105.112.37:4644 -> xxx.yyy.255.224:139 SYN ******S*
Jan 31 15:55:05 64.105.112.37:4694 -> xxx.yyy.255.231:139 SYN ******S*
Jan 31 15:55:05 64.105.112.37:4710 -> xxx.yyy.255.233:139 SYN ******S*
Jan 31 15:55:05 64.105.112.37:4727 -> xxx.yyy.255.237:139 SYN ******S*
Jan 31 15:55:05 64.105.112.37:4797 -> xxx.yyy.255.248:139 SYN ******S*
Jan 31 15:55:05 64.105.112.37:4822 -> xxx.yyy.255.253:139 SYN ******S*
33251
Jan 31 16:00:29 216.141.160.82:2574 -> xxx.yyy.1.4:4000 SYN ******S*
Jan 31 16:00:29 216.141.160.82:2575 -> xxx.yyy.1.5:4000 SYN ******S*
Jan 31 16:00:29 216.141.160.82:2577 -> xxx.yyy.1.7:4000 SYN ******S*
Jan 31 16:00:29 216.141.160.82:2580 -> xxx.yyy.1.10:4000 SYN ******S*
Jan 31 16:00:30 216.141.160.82:2584 -> xxx.yyy.1.14:4000 SYN ******S*
Jan 31 16:00:29 216.141.160.82:2586 -> xxx.yyy.1.16:4000 SYN ******S*
Jan 31 16:00:30 216.141.160.82:2587 -> xxx.yyy.1.17:4000 SYN ******S*
Jan 31 16:00:29 216.141.160.82:2589 -> xxx.yyy.1.19:4000 SYN ******S*
[...]
Jan 31 16:11:26 216.141.160.82:1649 -> xxx.yyy.255.223:4000 SYN ******S*
Jan 31 16:11:26 216.141.160.82:1681 -> xxx.yyy.255.235:4000 SYN ******S*
Jan 31 16:11:26 216.141.160.82:1659 -> xxx.yyy.255.233:4000 SYN ******S*
Jan 31 16:11:26 216.141.160.82:1690 -> xxx.yyy.255.244:4000 SYN ******S*
Jan 31 16:11:26 216.141.160.82:1695 -> xxx.yyy.255.249:4000 SYN ******S*
Jan 31 16:11:26 216.141.160.82:1692 -> xxx.yyy.255.246:4000 SYN ******S*
Jan 31 16:11:27 216.141.160.82:1700 -> xxx.yyy.255.254:4000 SYN ******S*
Jan 31 16:11:27 216.141.160.82:1699 -> xxx.yyy.255.253:4000 SYN ******S*
31374
Jan 31 08:27:59 205.118.70.10:2978 -> xxx.yyy.10.1:6101 SYN ******S*
Jan 31 08:27:59 205.118.70.10:2979 -> xxx.yyy.10.2:6101 SYN ******S*
Jan 31 08:27:59 205.118.70.10:2980 -> xxx.yyy.10.3:6101 SYN ******S*
Jan 31 08:27:59 205.118.70.10:2981 -> xxx.yyy.10.4:6101 SYN ******S*
Jan 31 08:27:59 205.118.70.10:2982 -> xxx.yyy.10.5:6101 SYN ******S*
Jan 31 08:27:56 205.118.70.10:2983 -> xxx.yyy.10.6:6101 SYN ******S*
Jan 31 08:27:59 205.118.70.10:2985 -> xxx.yyy.10.8:6101 SYN ******S*
Jan 31 08:27:56 205.118.70.10:2986 -> xxx.yyy.10.9:6101 SYN ******S*
[...]
Jan 31 08:39:04 205.118.70.10:2366 -> xxx.yyy.253.4:6101 SYN ******S*
Jan 31 08:39:05 205.118.70.10:2390 -> xxx.yyy.253.28:6101 SYN ******S*
Jan 31 08:39:05 205.118.70.10:2392 -> xxx.yyy.253.30:6101 SYN ******S*
Jan 31 08:39:05 205.118.70.10:2388 -> xxx.yyy.253.26:6101 SYN ******S*
Jan 31 08:39:05 205.118.70.10:2387 -> xxx.yyy.253.25:6101 SYN ******S*
Jan 31 08:39:05 205.118.70.10:2393 -> xxx.yyy.253.31:6101 SYN ******S*
Jan 31 08:39:05 205.118.70.10:2389 -> xxx.yyy.253.27:6101 SYN ******S*
Jan 31 08:39:05 205.118.70.10:2394 -> xxx.yyy.253.32:6101 SYN ******S*
Jan 31 08:39:05 205.118.70.10:2391 -> xxx.yyy.253.29:6101 SYN ******S*
28487
Jan 31 03:25:25 82.138.243.89:3020 -> xxx.yyy.1.0:6101 SYN ******S*
Jan 31 03:25:25 82.138.243.89:3022 -> xxx.yyy.1.2:6101 SYN ******S*
Jan 31 03:25:25 82.138.243.89:3021 -> xxx.yyy.1.1:6101 SYN ******S*
Jan 31 03:25:25 82.138.243.89:3026 -> xxx.yyy.1.6:6101 SYN ******S*
Jan 31 03:25:25 82.138.243.89:3025 -> xxx.yyy.1.5:6101 SYN ******S*
Jan 31 03:25:25 82.138.243.89:3023 -> xxx.yyy.1.3:6101 SYN ******S*
Jan 31 03:25:25 82.138.243.89:3028 -> xxx.yyy.1.8:6101 SYN ******S*
Jan 31 03:25:25 82.138.243.89:3024 -> xxx.yyy.1.4:6101 SYN ******S*
[...]
Jan 31 03:25:58 82.138.243.89:3032 -> xxx.yyy.255.242:6101 SYN ******S*
Jan 31 03:25:58 82.138.243.89:2988 -> xxx.yyy.255.248:6101 SYN ******S*
Jan 31 03:25:58 82.138.243.89:2987 -> xxx.yyy.255.247:6101 SYN ******S*
Jan 31 03:25:58 82.138.243.89:2989 -> xxx.yyy.255.249:6101 SYN ******S*
Jan 31 03:25:58 82.138.243.89:2992 -> xxx.yyy.255.252:6101 SYN ******S*
Jan 31 03:25:58 82.138.243.89:2991 -> xxx.yyy.255.251:6101 SYN ******S*
Jan 31 03:25:58 82.138.243.89:2994 -> xxx.yyy.255.254:6101 SYN ******S*
Jan 31 03:25:58 82.138.243.89:2990 -> xxx.yyy.255.250:6101 SYN ******S*
Jan 31 03:25:58 82.138.243.89:2993 -> xxx.yyy.255.253:6101 SYN ******S*
27800
Jan 31 08:14:52 217.229.160.40:61594 -> xxx.yyy.1.0:1433 SYN ******S*
Jan 31 08:14:52 217.229.160.40:61595 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 31 08:14:52 217.229.160.40:61596 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 31 08:14:52 217.229.160.40:61598 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 31 08:14:52 217.229.160.40:61599 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 31 08:14:52 217.229.160.40:61600 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 31 08:14:52 217.229.160.40:61601 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 31 08:14:52 217.229.160.40:61602 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Jan 31 08:19:16 217.229.160.40:62490 -> xxx.yyy.255.241:1433 SYN ******S*
Jan 31 08:19:16 217.229.160.40:62491 -> xxx.yyy.255.242:1433 SYN ******S*
Jan 31 08:19:16 217.229.160.40:62492 -> xxx.yyy.255.243:1433 SYN ******S*
Jan 31 08:19:16 217.229.160.40:62495 -> xxx.yyy.255.246:1433 SYN ******S*
Jan 31 08:19:16 217.229.160.40:62496 -> xxx.yyy.255.247:1433 SYN ******S*
Jan 31 08:19:17 217.229.160.40:62497 -> xxx.yyy.255.248:1433 SYN ******S*
Jan 31 08:19:17 217.229.160.40:62498 -> xxx.yyy.255.249:1433 SYN ******S*
Jan 31 08:19:17 217.229.160.40:62502 -> xxx.yyy.255.253:1433 SYN ******S*
Jan 31 08:19:17 217.229.160.40:62503 -> xxx.yyy.255.254:1433 SYN ******S*
27006
Jan 31 08:27:34 66.237.84.29:4373 -> xxx.yyy.1.4:6101 SYN ******S*
Jan 31 08:27:34 66.237.84.29:4374 -> xxx.yyy.1.5:6101 SYN ******S*
Jan 31 08:27:34 66.237.84.29:4376 -> xxx.yyy.1.7:6101 SYN ******S*
Jan 31 08:27:34 66.237.84.29:4378 -> xxx.yyy.1.9:6101 SYN ******S*
Jan 31 08:27:34 66.237.84.29:4379 -> xxx.yyy.1.10:6101 SYN ******S*
Jan 31 08:27:34 66.237.84.29:4380 -> xxx.yyy.1.11:6101 SYN ******S*
Jan 31 08:27:34 66.237.84.29:4381 -> xxx.yyy.1.12:6101 SYN ******S*
Jan 31 08:27:34 66.237.84.29:4382 -> xxx.yyy.1.13:6101 SYN ******S*
[...]
Jan 31 08:39:12 66.237.84.29:3104 -> xxx.yyy.255.230:6101 SYN ******S*
Jan 31 08:39:12 66.237.84.29:3107 -> xxx.yyy.255.233:6101 SYN ******S*
Jan 31 08:39:12 66.237.84.29:3101 -> xxx.yyy.255.227:6101 SYN ******S*
Jan 31 08:39:12 66.237.84.29:3105 -> xxx.yyy.255.231:6101 SYN ******S*
Jan 31 08:39:12 66.237.84.29:3108 -> xxx.yyy.255.234:6101 SYN ******S*
Jan 31 08:39:12 66.237.84.29:3102 -> xxx.yyy.255.228:6101 SYN ******S*
Jan 31 08:39:12 66.237.84.29:3106 -> xxx.yyy.255.232:6101 SYN ******S*
Jan 31 08:39:12 66.237.84.29:3103 -> xxx.yyy.255.229:6101 SYN ******S*
26255
Jan 31 17:16:12 220.76.229.40:20498 -> xxx.yyy.1.7:4899 SYN ******S*
Jan 31 17:16:12 220.76.229.40:20501 -> xxx.yyy.1.10:4899 SYN ******S*
Jan 31 17:16:12 220.76.229.40:20506 -> xxx.yyy.1.15:4899 SYN ******S*
Jan 31 17:16:14 220.76.229.40:20500 -> xxx.yyy.1.9:4899 SYN ******S*
Jan 31 17:16:14 220.76.229.40:20507 -> xxx.yyy.1.16:4899 SYN ******S*
Jan 31 17:16:12 220.76.229.40:20502 -> xxx.yyy.1.11:4899 SYN ******S*
Jan 31 17:16:12 220.76.229.40:20499 -> xxx.yyy.1.8:4899 SYN ******S*
Jan 31 17:16:14 220.76.229.40:20512 -> xxx.yyy.1.21:4899 SYN ******S*
[...]
Jan 31 17:19:00 220.76.229.40:35248 -> xxx.yyy.255.241:4899 SYN ******S*
Jan 31 17:19:00 220.76.229.40:35254 -> xxx.yyy.255.247:4899 SYN ******S*
Jan 31 17:19:00 220.76.229.40:35247 -> xxx.yyy.255.240:4899 SYN ******S*
Jan 31 17:19:00 220.76.229.40:35255 -> xxx.yyy.255.248:4899 SYN ******S*
Jan 31 17:19:00 220.76.229.40:35257 -> xxx.yyy.255.250:4899 SYN ******S*
Jan 31 17:19:00 220.76.229.40:35261 -> xxx.yyy.255.254:4899 SYN ******S*
Jan 31 17:19:00 220.76.229.40:35260 -> xxx.yyy.255.253:4899 SYN ******S*
Jan 31 17:19:00 220.76.229.40:35259 -> xxx.yyy.255.252:4899 SYN ******S*
22720
Jan 31 16:57:55 217.229.163.9:62652 -> xxx.yyy.1.0:6129 SYN ******S*
Jan 31 16:57:55 217.229.163.9:62653 -> xxx.yyy.1.1:6129 SYN ******S*
Jan 31 16:57:55 217.229.163.9:62655 -> xxx.yyy.1.3:6129 SYN ******S*
Jan 31 16:57:55 217.229.163.9:62656 -> xxx.yyy.1.4:6129 SYN ******S*
Jan 31 16:57:55 217.229.163.9:62657 -> xxx.yyy.1.5:6129 SYN ******S*
Jan 31 16:57:55 217.229.163.9:62662 -> xxx.yyy.1.10:6129 SYN ******S*
Jan 31 16:57:55 217.229.163.9:62663 -> xxx.yyy.1.11:6129 SYN ******S*
Jan 31 16:57:55 217.229.163.9:62666 -> xxx.yyy.1.14:6129 SYN ******S*
[...]
Jan 31 17:04:41 217.229.163.9:62281 -> xxx.yyy.255.234:6129 SYN ******S*
Jan 31 17:04:41 217.229.163.9:62283 -> xxx.yyy.255.236:6129 SYN ******S*
Jan 31 17:04:42 217.229.163.9:62285 -> xxx.yyy.255.238:6129 SYN ******S*
Jan 31 17:04:42 217.229.163.9:62299 -> xxx.yyy.255.247:6129 SYN ******S*
Jan 31 17:04:42 217.229.163.9:62307 -> xxx.yyy.255.250:6129 SYN ******S*
Jan 31 17:04:42 217.229.163.9:62308 -> xxx.yyy.255.251:6129 SYN ******S*
Jan 31 17:04:42 217.229.163.9:62311 -> xxx.yyy.255.252:6129 SYN ******S*
Jan 31 17:04:42 217.229.163.9:62312 -> xxx.yyy.255.253:6129 SYN ******S*
22616
Jan 31 22:21:56 220.210.33.200:4893 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 31 22:21:59 220.210.33.200:4916 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 31 22:22:00 220.210.33.200:4967 -> xxx.yyy.1.9:1433 SYN ******S*
Jan 31 22:22:00 220.210.33.200:4988 -> xxx.yyy.1.11:1433 SYN ******S*
Jan 31 22:21:57 220.210.33.200:1038 -> xxx.yyy.1.14:1433 SYN ******S*
Jan 31 22:22:00 220.210.33.200:1048 -> xxx.yyy.1.15:1433 SYN ******S*
Jan 31 22:22:00 220.210.33.200:1058 -> xxx.yyy.1.16:1433 SYN ******S*
Jan 31 22:21:57 220.210.33.200:1064 -> xxx.yyy.1.18:1433 SYN ******S*
[...]
Jan 31 23:59:57 220.210.33.200:2210 -> xxx.yyy.104.10:1433 SYN ******S*
Jan 31 23:59:57 220.210.33.200:2230 -> xxx.yyy.104.11:1433 SYN ******S*
Jan 31 23:59:58 220.210.33.200:2261 -> xxx.yyy.104.13:1433 SYN ******S*
Jan 31 23:59:58 220.210.33.200:2070 -> xxx.yyy.104.2:1433 SYN ******S*
Jan 31 23:59:58 220.210.33.200:2278 -> xxx.yyy.104.14:1433 SYN ******S*
Jan 31 23:59:59 220.210.33.200:2306 -> xxx.yyy.104.16:1433 SYN ******S*
Jan 31 23:59:59 220.210.33.200:2320 -> xxx.yyy.104.17:1433 SYN ******S*
Jan 31 23:59:59 220.210.33.200:2349 -> xxx.yyy.104.19:1433 SYN ******S*
Jan 31 23:59:59 220.210.33.200:2364 -> xxx.yyy.104.20:1433 SYN ******S*
18592
Jan 31 22:46:27 64.65.193.200:4045 -> xxx.yyy.1.1:3306 SYN ******S*
Jan 31 22:46:27 64.65.193.200:4046 -> xxx.yyy.1.2:3306 SYN ******S*
Jan 31 22:46:30 64.65.193.200:4055 -> xxx.yyy.1.11:3306 SYN ******S*
Jan 31 22:46:27 64.65.193.200:4058 -> xxx.yyy.1.14:3306 SYN ******S*
Jan 31 22:46:27 64.65.193.200:4063 -> xxx.yyy.1.19:3306 SYN ******S*
Jan 31 22:46:27 64.65.193.200:4064 -> xxx.yyy.1.20:3306 SYN ******S*
Jan 31 22:46:28 64.65.193.200:4066 -> xxx.yyy.1.22:3306 SYN ******S*
Jan 31 22:46:28 64.65.193.200:4070 -> xxx.yyy.1.26:3306 SYN ******S*
[...]
Jan 31 23:01:30 64.65.193.200:1991 -> xxx.yyy.255.232:3306 SYN ******S*
Jan 31 23:01:30 64.65.193.200:1964 -> xxx.yyy.255.205:3306 SYN ******S*
Jan 31 23:01:30 64.65.193.200:1960 -> xxx.yyy.255.201:3306 SYN ******S*
Jan 31 23:01:30 64.65.193.200:1980 -> xxx.yyy.255.221:3306 SYN ******S*
Jan 31 23:01:30 64.65.193.200:2009 -> xxx.yyy.255.250:3306 SYN ******S*
Jan 31 23:01:30 64.65.193.200:2013 -> xxx.yyy.255.254:3306 SYN ******S*
Jan 31 23:01:30 64.65.193.200:2010 -> xxx.yyy.255.251:3306 SYN ******S*
Jan 31 23:01:30 64.65.193.200:2006 -> xxx.yyy.255.247:3306 SYN ******S*
Jan 31 23:01:30 64.65.193.200:2008 -> xxx.yyy.255.249:3306 SYN ******S*
16447
Jan 31 16:50:00 218.28.29.210:4013 -> xxx.yyy.1.2:4899 SYN ******S*
Jan 31 16:50:00 218.28.29.210:4014 -> xxx.yyy.1.3:4899 SYN ******S*
Jan 31 16:50:00 218.28.29.210:4015 -> xxx.yyy.1.4:4899 SYN ******S*
Jan 31 16:50:02 218.28.29.210:4012 -> xxx.yyy.1.1:4899 SYN ******S*
Jan 31 16:50:00 218.28.29.210:4017 -> xxx.yyy.1.6:4899 SYN ******S*
Jan 31 16:50:00 218.28.29.210:4018 -> xxx.yyy.1.7:4899 SYN ******S*
Jan 31 16:50:00 218.28.29.210:4019 -> xxx.yyy.1.8:4899 SYN ******S*
Jan 31 16:50:02 218.28.29.210:4025 -> xxx.yyy.1.14:4899 SYN ******S*
[...]
Jan 31 16:53:16 218.28.29.210:3277 -> xxx.yyy.255.219:4899 SYN ******S*
Jan 31 16:53:16 218.28.29.210:3285 -> xxx.yyy.255.227:4899 SYN ******S*
Jan 31 16:53:16 218.28.29.210:3291 -> xxx.yyy.255.233:4899 SYN ******S*
Jan 31 16:53:16 218.28.29.210:3295 -> xxx.yyy.255.237:4899 SYN ******S*
Jan 31 16:53:16 218.28.29.210:3293 -> xxx.yyy.255.235:4899 SYN ******S*
Jan 31 16:53:16 218.28.29.210:3296 -> xxx.yyy.255.238:4899 SYN ******S*
Jan 31 16:53:16 218.28.29.210:3301 -> xxx.yyy.255.243:4899 SYN ******S*
Jan 31 16:53:16 218.28.29.210:3305 -> xxx.yyy.255.247:4899 SYN ******S*
Jan 31 16:53:16 218.28.29.210:3309 -> xxx.yyy.255.251:4899 SYN ******S*
15693
Jan 31 08:48:52 148.223.248.188:26996 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 31 08:48:52 148.223.248.188:22446 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 31 08:48:52 148.223.248.188:22525 -> xxx.yyy.1.8:1433 SYN ******S*
Jan 31 08:48:52 148.223.248.188:27038 -> xxx.yyy.1.9:1433 SYN ******S*
Jan 31 08:48:55 148.223.248.188:27039 -> xxx.yyy.1.11:1433 SYN ******S*
Jan 31 08:48:53 148.223.248.188:22665 -> xxx.yyy.1.16:1433 SYN ******S*
Jan 31 08:48:53 148.223.248.188:23366 -> xxx.yyy.1.21:1433 SYN ******S*
Jan 31 08:48:53 148.223.248.188:27156 -> xxx.yyy.1.20:1433 SYN ******S*
[...]
Jan 31 11:21:02 148.223.248.188:57513 -> xxx.yyy.150.157:1433 SYN ******S*
Jan 31 11:21:02 148.223.248.188:58976 -> xxx.yyy.150.188:1433 SYN ******S*
Jan 31 11:21:02 148.223.248.188:38788 -> xxx.yyy.150.158:1433 SYN ******S*
Jan 31 11:21:02 148.223.248.188:63836 -> xxx.yyy.150.187:1433 SYN ******S*
Jan 31 11:21:03 148.223.248.188:57664 -> xxx.yyy.150.160:1433 SYN ******S*
Jan 31 11:21:03 148.223.248.188:9665 -> xxx.yyy.150.192:1433 SYN ******S*
Jan 31 11:21:03 148.223.248.188:9664 -> xxx.yyy.150.191:1433 SYN ******S*
Jan 31 11:21:03 148.223.248.188:57736 -> xxx.yyy.150.163:1433 SYN ******S*
Jan 31 11:21:03 148.223.248.188:57735 -> xxx.yyy.150.162:1433 SYN ******S*
14673
Jan 31 12:20:35 219.153.10.141:62911 -> xxx.yyy.1.23:25 SYN ******S*
Jan 31 12:20:35 219.153.10.141:62911 -> xxx.yyy.1.41:25 SYN ******S*
Jan 31 12:20:35 219.153.10.141:62911 -> xxx.yyy.1.43:25 SYN ******S*
Jan 31 12:20:35 219.153.10.141:62911 -> xxx.yyy.1.20:25 SYN ******S*
Jan 31 12:20:35 219.153.10.141:62911 -> xxx.yyy.1.1:25 SYN ******S*
Jan 31 12:20:35 219.153.10.141:62911 -> xxx.yyy.1.17:25 SYN ******S*
Jan 31 12:20:35 219.153.10.141:62911 -> xxx.yyy.1.26:25 SYN ******S*
Jan 31 12:20:35 219.153.10.141:62911 -> xxx.yyy.1.14:25 SYN ******S*
[...]
Jan 31 12:21:44 219.153.10.141:62911 -> xxx.yyy.255.198:25 SYN ******S*
Jan 31 12:21:44 219.153.10.141:62911 -> xxx.yyy.255.214:25 SYN ******S*
Jan 31 12:21:44 219.153.10.141:62911 -> xxx.yyy.255.235:25 SYN ******S*
Jan 31 12:21:44 219.153.10.141:62911 -> xxx.yyy.255.240:25 SYN ******S*
Jan 31 12:21:44 219.153.10.141:62911 -> xxx.yyy.255.249:25 SYN ******S*
Jan 31 12:21:44 219.153.10.141:62911 -> xxx.yyy.255.251:25 SYN ******S*
Jan 31 12:21:44 219.153.10.141:62911 -> xxx.yyy.255.242:25 SYN ******S*
Jan 31 12:21:44 219.153.10.141:62911 -> xxx.yyy.255.244:25 SYN ******S*
Jan 31 12:21:44 219.153.10.141:62911 -> xxx.yyy.255.250:25 SYN ******S*
14092
Jan 31 05:36:56 82.36.140.34:1825 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 31 05:36:59 82.36.140.34:1844 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 31 05:36:59 82.36.140.34:1846 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 31 05:36:59 82.36.140.34:1848 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 31 05:36:59 82.36.140.34:1847 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 31 05:36:59 82.36.140.34:1850 -> xxx.yyy.1.0:1433 SYN ******S*
Jan 31 05:36:59 82.36.140.34:1853 -> xxx.yyy.1.7:1433 SYN ******S*
Jan 31 05:36:59 82.36.140.34:1854 -> xxx.yyy.1.43:1433 SYN ******S*
[...]
Jan 31 07:51:32 82.36.140.34:3459 -> xxx.yyy.69.82:1433 SYN ******S*
Jan 31 07:51:33 82.36.140.34:3462 -> xxx.yyy.69.84:1433 SYN ******S*
Jan 31 07:51:33 82.36.140.34:3463 -> xxx.yyy.69.85:1433 SYN ******S*
Jan 31 07:51:33 82.36.140.34:3467 -> xxx.yyy.69.86:1433 SYN ******S*
Jan 31 07:51:33 82.36.140.34:3469 -> xxx.yyy.69.87:1433 SYN ******S*
Jan 31 07:51:33 82.36.140.34:3470 -> xxx.yyy.69.88:1433 SYN ******S*
Jan 31 07:51:34 82.36.140.34:3490 -> xxx.yyy.69.89:1433 SYN ******S*
Jan 31 07:51:34 82.36.140.34:3499 -> xxx.yyy.69.94:1433 SYN ******S*
Jan 31 07:51:34 82.36.140.34:3497 -> xxx.yyy.69.91:1433 SYN ******S*
12276
[...]
11774
Jan 31 05:42:08 193.17.67.13:20965 -> xxx.yyy.1.0:1433 SYN ******S*
Jan 31 05:42:08 193.17.67.13:20971 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 31 05:42:08 193.17.67.13:20974 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 31 05:42:08 193.17.67.13:20981 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 31 05:42:08 193.17.67.13:20991 -> xxx.yyy.1.8:1433 SYN ******S*
Jan 31 05:42:08 193.17.67.13:20994 -> xxx.yyy.1.9:1433 SYN ******S*
Jan 31 05:42:08 193.17.67.13:20998 -> xxx.yyy.1.10:1433 SYN ******S*
Jan 31 05:42:08 193.17.67.13:21001 -> xxx.yyy.1.11:1433 SYN ******S*
[...]
Jan 31 06:11:48 193.17.67.13:53550 -> xxx.yyy.33.251:1433 SYN ******S*
Jan 31 06:11:48 193.17.67.13:53548 -> xxx.yyy.33.250:1433 SYN ******S*
Jan 31 06:11:48 193.17.67.13:53547 -> xxx.yyy.33.249:1433 SYN ******S*
Jan 31 06:11:48 193.17.67.13:53546 -> xxx.yyy.33.248:1433 SYN ******S*
Jan 31 06:11:48 193.17.67.13:53554 -> xxx.yyy.33.252:1433 SYN ******S*
Jan 31 06:11:48 193.17.67.13:53555 -> xxx.yyy.33.253:1433 SYN ******S*
Jan 31 06:11:48 193.17.67.13:53556 -> xxx.yyy.33.254:1433 SYN ******S*
Jan 31 06:11:48 193.17.67.13:53558 -> xxx.yyy.33.255:1433 SYN ******S*
8911
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list