[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Mon Feb 7 14:31:49 GMT 2005
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Feb 6 00:31:25 82.33.28.26:3157 -> xxx.yyy.1.0:1433 SYN ******S*
Feb 6 00:31:25 82.33.28.26:3158 -> xxx.yyy.1.1:1433 SYN ******S*
Feb 6 00:31:25 82.33.28.26:3164 -> xxx.yyy.1.5:1433 SYN ******S*
Feb 6 00:31:25 82.33.28.26:3166 -> xxx.yyy.1.6:1433 SYN ******S*
Feb 6 00:31:25 82.33.28.26:3167 -> xxx.yyy.1.7:1433 SYN ******S*
Feb 6 00:31:25 82.33.28.26:3168 -> xxx.yyy.1.8:1433 SYN ******S*
Feb 6 00:31:25 82.33.28.26:3169 -> xxx.yyy.1.9:1433 SYN ******S*
Feb 6 00:31:25 82.33.28.26:3170 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
Feb 6 04:20:27 82.33.28.26:4047 -> xxx.yyy.255.245:1433 SYN ******S*
Feb 6 04:20:28 82.33.28.26:4055 -> xxx.yyy.255.248:1433 SYN ******S*
Feb 6 04:20:28 82.33.28.26:4057 -> xxx.yyy.255.250:1433 SYN ******S*
Feb 6 04:20:28 82.33.28.26:4054 -> xxx.yyy.255.247:1433 SYN ******S*
Feb 6 04:20:28 82.33.28.26:4056 -> xxx.yyy.255.249:1433 SYN ******S*
Feb 6 04:20:28 82.33.28.26:4065 -> xxx.yyy.255.251:1433 SYN ******S*
Feb 6 04:20:28 82.33.28.26:4067 -> xxx.yyy.255.252:1433 SYN ******S*
Feb 6 04:20:29 82.33.28.26:4071 -> xxx.yyy.255.253:1433 SYN ******S*
Feb 6 04:20:30 82.33.28.26:4076 -> xxx.yyy.255.254:1433 SYN ******S*
116634
Feb 6 02:44:59 66.102.199.16:1978 -> xxx.yyy.1.1:6129 SYN ******S*
Feb 6 02:44:59 66.102.199.16:1979 -> xxx.yyy.1.2:6129 SYN ******S*
Feb 6 02:44:59 66.102.199.16:1980 -> xxx.yyy.1.3:6129 SYN ******S*
Feb 6 02:45:01 66.102.199.16:1981 -> xxx.yyy.1.4:6129 SYN ******S*
Feb 6 02:45:01 66.102.199.16:1982 -> xxx.yyy.1.5:6129 SYN ******S*
Feb 6 02:45:01 66.102.199.16:1983 -> xxx.yyy.1.6:6129 SYN ******S*
Feb 6 02:45:01 66.102.199.16:1984 -> xxx.yyy.1.7:6129 SYN ******S*
Feb 6 02:44:59 66.102.199.16:1985 -> xxx.yyy.1.8:6129 SYN ******S*
[...]
Feb 6 03:09:26 66.102.199.16:2883 -> xxx.yyy.255.251:6129 SYN ******S*
Feb 6 03:09:26 66.102.199.16:2880 -> xxx.yyy.255.248:6129 SYN ******S*
Feb 6 03:09:26 66.102.199.16:2877 -> xxx.yyy.255.245:6129 SYN ******S*
Feb 6 03:09:26 66.102.199.16:2884 -> xxx.yyy.255.252:6129 SYN ******S*
Feb 6 03:09:26 66.102.199.16:2881 -> xxx.yyy.255.249:6129 SYN ******S*
Feb 6 03:09:26 66.102.199.16:2878 -> xxx.yyy.255.246:6129 SYN ******S*
Feb 6 03:09:26 66.102.199.16:2875 -> xxx.yyy.255.243:6129 SYN ******S*
Feb 6 03:09:26 66.102.199.16:2885 -> xxx.yyy.255.253:6129 SYN ******S*
Feb 6 03:09:26 66.102.199.16:2886 -> xxx.yyy.255.254:6129 SYN ******S*
113270
Feb 6 01:21:00 220.209.36.13:3679 -> xxx.yyy.64.1:1433 SYN ******S*
Feb 6 01:21:00 220.209.36.13:3678 -> xxx.yyy.64.0:1433 SYN ******S*
Feb 6 01:21:00 220.209.36.13:3680 -> xxx.yyy.64.2:1433 SYN ******S*
Feb 6 01:21:00 220.209.36.13:3681 -> xxx.yyy.64.3:1433 SYN ******S*
Feb 6 01:21:00 220.209.36.13:3691 -> xxx.yyy.64.4:1433 SYN ******S*
Feb 6 01:21:00 220.209.36.13:3692 -> xxx.yyy.64.5:1433 SYN ******S*
Feb 6 01:21:00 220.209.36.13:3693 -> xxx.yyy.64.6:1433 SYN ******S*
Feb 6 01:21:00 220.209.36.13:3695 -> xxx.yyy.64.7:1433 SYN ******S*
[...]
Feb 6 04:13:22 220.209.36.13:4734 -> xxx.yyy.255.244:1433 SYN ******S*
Feb 6 04:13:22 220.209.36.13:4758 -> xxx.yyy.255.245:1433 SYN ******S*
Feb 6 04:13:22 220.209.36.13:4760 -> xxx.yyy.255.246:1433 SYN ******S*
Feb 6 04:13:22 220.209.36.13:4769 -> xxx.yyy.255.247:1433 SYN ******S*
Feb 6 04:13:23 220.209.36.13:4784 -> xxx.yyy.255.248:1433 SYN ******S*
Feb 6 04:13:23 220.209.36.13:4788 -> xxx.yyy.255.249:1433 SYN ******S*
Feb 6 04:13:23 220.209.36.13:4790 -> xxx.yyy.255.250:1433 SYN ******S*
Feb 6 04:13:23 220.209.36.13:4796 -> xxx.yyy.255.252:1433 SYN ******S*
Feb 6 04:13:23 220.209.36.13:4799 -> xxx.yyy.255.254:1433 SYN ******S*
104605
Feb 6 07:10:43 81.172.69.197:3634 -> xxx.yyy.1.3:1433 SYN ******S*
Feb 6 07:10:43 81.172.69.197:3635 -> xxx.yyy.1.4:1433 SYN ******S*
Feb 6 07:10:43 81.172.69.197:3636 -> xxx.yyy.1.5:1433 SYN ******S*
Feb 6 07:10:40 81.172.69.197:3643 -> xxx.yyy.1.12:1433 SYN ******S*
Feb 6 07:10:40 81.172.69.197:3644 -> xxx.yyy.1.13:1433 SYN ******S*
Feb 6 07:10:40 81.172.69.197:3645 -> xxx.yyy.1.14:1433 SYN ******S*
Feb 6 07:10:40 81.172.69.197:3646 -> xxx.yyy.1.15:1433 SYN ******S*
Feb 6 07:10:40 81.172.69.197:3647 -> xxx.yyy.1.16:1433 SYN ******S*
[...]
Feb 6 11:01:55 81.172.69.197:3009 -> xxx.yyy.255.241:1433 SYN ******S*
Feb 6 11:01:55 81.172.69.197:3007 -> xxx.yyy.255.240:1433 SYN ******S*
Feb 6 11:01:55 81.172.69.197:3005 -> xxx.yyy.255.239:1433 SYN ******S*
Feb 6 11:01:55 81.172.69.197:3012 -> xxx.yyy.255.244:1433 SYN ******S*
Feb 6 11:01:55 81.172.69.197:3011 -> xxx.yyy.255.243:1433 SYN ******S*
Feb 6 11:01:55 81.172.69.197:3010 -> xxx.yyy.255.242:1433 SYN ******S*
Feb 6 11:01:55 81.172.69.197:3026 -> xxx.yyy.255.249:1433 SYN ******S*
Feb 6 11:01:55 81.172.69.197:3024 -> xxx.yyy.255.248:1433 SYN ******S*
Feb 6 11:01:56 81.172.69.197:3035 -> xxx.yyy.255.254:1433 SYN ******S*
85337
Feb 6 05:00:06 67.68.146.189:3897 -> xxx.yyy.1.0:1433 SYN ******S*
Feb 6 05:00:06 67.68.146.189:3904 -> xxx.yyy.1.1:1433 SYN ******S*
Feb 6 05:00:06 67.68.146.189:3906 -> xxx.yyy.1.2:1433 SYN ******S*
Feb 6 05:00:06 67.68.146.189:3914 -> xxx.yyy.1.3:1433 SYN ******S*
Feb 6 05:00:06 67.68.146.189:3917 -> xxx.yyy.1.4:1433 SYN ******S*
Feb 6 05:00:06 67.68.146.189:3919 -> xxx.yyy.1.5:1433 SYN ******S*
Feb 6 05:00:06 67.68.146.189:3926 -> xxx.yyy.1.6:1433 SYN ******S*
Feb 6 05:00:06 67.68.146.189:4054 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Feb 6 07:52:16 67.68.146.189:3912 -> xxx.yyy.189.3:1433 SYN ******S*
Feb 6 07:52:16 67.68.146.189:4351 -> xxx.yyy.189.19:1433 SYN ******S*
Feb 6 07:52:16 67.68.146.189:3038 -> xxx.yyy.188.239:1433 SYN ******S*
Feb 6 07:52:16 67.68.146.189:4356 -> xxx.yyy.189.20:1433 SYN ******S*
Feb 6 07:52:16 67.68.146.189:4358 -> xxx.yyy.189.21:1433 SYN ******S*
Feb 6 07:52:16 67.68.146.189:4361 -> xxx.yyy.189.22:1433 SYN ******S*
Feb 6 07:52:16 67.68.146.189:3985 -> xxx.yyy.189.4:1433 SYN ******S*
Feb 6 07:52:16 67.68.146.189:4365 -> xxx.yyy.189.23:1433 SYN ******S*
Feb 6 07:52:16 67.68.146.189:4367 -> xxx.yyy.189.24:1433 SYN ******S*
76552
Feb 6 03:14:05 206.59.11.11:1222 -> xxx.yyy.1.1:3306 SYN ******S*
Feb 6 03:14:03 206.59.11.11:1223 -> xxx.yyy.1.2:3306 SYN ******S*
Feb 6 03:14:06 206.59.11.11:1224 -> xxx.yyy.1.3:3306 SYN ******S*
Feb 6 03:14:06 206.59.11.11:1225 -> xxx.yyy.1.4:3306 SYN ******S*
Feb 6 03:14:06 206.59.11.11:1226 -> xxx.yyy.1.5:3306 SYN ******S*
Feb 6 03:14:06 206.59.11.11:1227 -> xxx.yyy.1.6:3306 SYN ******S*
Feb 6 03:14:06 206.59.11.11:1228 -> xxx.yyy.1.7:3306 SYN ******S*
Feb 6 03:14:06 206.59.11.11:1229 -> xxx.yyy.1.8:3306 SYN ******S*
[...]
Feb 6 03:25:01 206.59.11.11:3779 -> xxx.yyy.255.245:3306 SYN ******S*
Feb 6 03:25:01 206.59.11.11:3776 -> xxx.yyy.255.242:3306 SYN ******S*
Feb 6 03:25:01 206.59.11.11:3783 -> xxx.yyy.255.249:3306 SYN ******S*
Feb 6 03:25:01 206.59.11.11:3780 -> xxx.yyy.255.246:3306 SYN ******S*
Feb 6 03:25:01 206.59.11.11:3777 -> xxx.yyy.255.243:3306 SYN ******S*
Feb 6 03:25:01 206.59.11.11:3787 -> xxx.yyy.255.253:3306 SYN ******S*
Feb 6 03:25:01 206.59.11.11:3788 -> xxx.yyy.255.254:3306 SYN ******S*
Feb 6 03:25:01 206.59.11.11:3786 -> xxx.yyy.255.252:3306 SYN ******S*
71985
Feb 6 03:56:48 68.167.246.245:2056 -> xxx.yyy.1.1:3306 SYN ******S*
Feb 6 03:56:48 68.167.246.245:2057 -> xxx.yyy.1.2:3306 SYN ******S*
Feb 6 03:56:51 68.167.246.245:2058 -> xxx.yyy.1.3:3306 SYN ******S*
Feb 6 03:56:48 68.167.246.245:2059 -> xxx.yyy.1.4:3306 SYN ******S*
Feb 6 03:56:51 68.167.246.245:2060 -> xxx.yyy.1.5:3306 SYN ******S*
Feb 6 03:56:51 68.167.246.245:2062 -> xxx.yyy.1.7:3306 SYN ******S*
Feb 6 03:56:48 68.167.246.245:2063 -> xxx.yyy.1.8:3306 SYN ******S*
Feb 6 03:56:48 68.167.246.245:2064 -> xxx.yyy.1.9:3306 SYN ******S*
[...]
Feb 6 04:00:48 68.167.246.245:2926 -> xxx.yyy.255.221:3306 SYN ******S*
Feb 6 04:00:48 68.167.246.245:2958 -> xxx.yyy.255.253:3306 SYN ******S*
Feb 6 04:00:48 68.167.246.245:2914 -> xxx.yyy.255.209:3306 SYN ******S*
Feb 6 04:00:48 68.167.246.245:2934 -> xxx.yyy.255.229:3306 SYN ******S*
Feb 6 04:00:48 68.167.246.245:2942 -> xxx.yyy.255.237:3306 SYN ******S*
Feb 6 04:00:48 68.167.246.245:2954 -> xxx.yyy.255.249:3306 SYN ******S*
Feb 6 04:00:48 68.167.246.245:2922 -> xxx.yyy.255.217:3306 SYN ******S*
Feb 6 04:00:48 68.167.246.245:2918 -> xxx.yyy.255.213:3306 SYN ******S*
67509
Feb 6 04:46:05 69.226.49.65:3600 -> xxx.yyy.1.1:1433 SYN ******S*
Feb 6 04:46:05 69.226.49.65:3601 -> xxx.yyy.1.2:1433 SYN ******S*
Feb 6 04:46:05 69.226.49.65:3602 -> xxx.yyy.1.3:1433 SYN ******S*
Feb 6 04:46:05 69.226.49.65:3603 -> xxx.yyy.1.4:1433 SYN ******S*
Feb 6 04:46:05 69.226.49.65:3604 -> xxx.yyy.1.5:1433 SYN ******S*
Feb 6 04:46:02 69.226.49.65:3606 -> xxx.yyy.1.7:1433 SYN ******S*
Feb 6 04:46:05 69.226.49.65:3607 -> xxx.yyy.1.8:1433 SYN ******S*
Feb 6 04:46:05 69.226.49.65:3608 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
Feb 6 04:57:44 69.226.49.65:1400 -> xxx.yyy.255.246:1433 SYN ******S*
Feb 6 04:57:44 69.226.49.65:1415 -> xxx.yyy.255.251:1433 SYN ******S*
Feb 6 04:57:44 69.226.49.65:1409 -> xxx.yyy.255.249:1433 SYN ******S*
Feb 6 04:57:44 69.226.49.65:1403 -> xxx.yyy.255.247:1433 SYN ******S*
Feb 6 04:57:44 69.226.49.65:1396 -> xxx.yyy.255.245:1433 SYN ******S*
Feb 6 04:57:44 69.226.49.65:1418 -> xxx.yyy.255.252:1433 SYN ******S*
Feb 6 04:57:44 69.226.49.65:1412 -> xxx.yyy.255.250:1433 SYN ******S*
Feb 6 04:57:44 69.226.49.65:1406 -> xxx.yyy.255.248:1433 SYN ******S*
64835
Feb 6 11:23:14 211.111.175.252:1690 -> xxx.yyy.1.1:3306 SYN ******S*
Feb 6 11:23:17 211.111.175.252:1691 -> xxx.yyy.1.2:3306 SYN ******S*
Feb 6 11:23:17 211.111.175.252:1692 -> xxx.yyy.1.3:3306 SYN ******S*
Feb 6 11:23:17 211.111.175.252:1695 -> xxx.yyy.1.6:3306 SYN ******S*
Feb 6 11:23:17 211.111.175.252:1697 -> xxx.yyy.1.8:3306 SYN ******S*
Feb 6 11:23:17 211.111.175.252:1700 -> xxx.yyy.1.11:3306 SYN ******S*
Feb 6 11:23:17 211.111.175.252:1701 -> xxx.yyy.1.12:3306 SYN ******S*
Feb 6 11:23:17 211.111.175.252:1702 -> xxx.yyy.1.13:3306 SYN ******S*
[...]
Feb 6 11:34:56 211.111.175.252:1140 -> xxx.yyy.255.243:3306 SYN ******S*
Feb 6 11:34:56 211.111.175.252:1144 -> xxx.yyy.255.247:3306 SYN ******S*
Feb 6 11:34:56 211.111.175.252:1145 -> xxx.yyy.255.248:3306 SYN ******S*
Feb 6 11:34:56 211.111.175.252:1142 -> xxx.yyy.255.245:3306 SYN ******S*
Feb 6 11:34:56 211.111.175.252:1143 -> xxx.yyy.255.246:3306 SYN ******S*
Feb 6 11:34:56 211.111.175.252:1147 -> xxx.yyy.255.250:3306 SYN ******S*
Feb 6 11:34:56 211.111.175.252:1141 -> xxx.yyy.255.244:3306 SYN ******S*
Feb 6 11:34:56 211.111.175.252:1149 -> xxx.yyy.255.252:3306 SYN ******S*
Feb 6 11:34:56 211.111.175.252:1151 -> xxx.yyy.255.254:3306 SYN ******S*
63934
Feb 6 11:55:38 210.91.230.2:2135 -> xxx.yyy.1.5:3306 SYN ******S*
Feb 6 11:55:41 210.91.230.2:2134 -> xxx.yyy.1.4:3306 SYN ******S*
Feb 6 11:55:38 210.91.230.2:2137 -> xxx.yyy.1.7:3306 SYN ******S*
Feb 6 11:55:41 210.91.230.2:2136 -> xxx.yyy.1.6:3306 SYN ******S*
Feb 6 11:55:41 210.91.230.2:2138 -> xxx.yyy.1.8:3306 SYN ******S*
Feb 6 11:55:38 210.91.230.2:2143 -> xxx.yyy.1.13:3306 SYN ******S*
Feb 6 11:55:38 210.91.230.2:2140 -> xxx.yyy.1.10:3306 SYN ******S*
Feb 6 11:55:41 210.91.230.2:2141 -> xxx.yyy.1.11:3306 SYN ******S*
[...]
Feb 6 11:59:49 210.91.230.2:4390 -> xxx.yyy.255.214:3306 SYN ******S*
Feb 6 11:59:49 210.91.230.2:4404 -> xxx.yyy.255.227:3306 SYN ******S*
Feb 6 11:59:49 210.91.230.2:4414 -> xxx.yyy.255.235:3306 SYN ******S*
Feb 6 11:59:49 210.91.230.2:4402 -> xxx.yyy.255.225:3306 SYN ******S*
Feb 6 11:59:49 210.91.230.2:4426 -> xxx.yyy.255.242:3306 SYN ******S*
Feb 6 11:59:49 210.91.230.2:4434 -> xxx.yyy.255.248:3306 SYN ******S*
Feb 6 11:59:49 210.91.230.2:4422 -> xxx.yyy.255.240:3306 SYN ******S*
Feb 6 11:59:49 210.91.230.2:4433 -> xxx.yyy.255.247:3306 SYN ******S*
55315
Feb 6 13:04:31 210.183.177.143:3383 -> xxx.yyy.1.1:1433 SYN ******S*
Feb 6 13:04:31 210.183.177.143:3390 -> xxx.yyy.1.4:1433 SYN ******S*
Feb 6 13:04:34 210.183.177.143:3398 -> xxx.yyy.1.8:1433 SYN ******S*
Feb 6 13:04:34 210.183.177.143:3394 -> xxx.yyy.1.6:1433 SYN ******S*
Feb 6 13:04:34 210.183.177.143:3400 -> xxx.yyy.1.9:1433 SYN ******S*
Feb 6 13:04:31 210.183.177.143:3396 -> xxx.yyy.1.7:1433 SYN ******S*
Feb 6 13:04:34 210.183.177.143:3404 -> xxx.yyy.1.11:1433 SYN ******S*
Feb 6 13:04:34 210.183.177.143:3406 -> xxx.yyy.1.12:1433 SYN ******S*
[...]
Feb 6 13:15:33 210.183.177.143:3593 -> xxx.yyy.255.247:1433 SYN ******S*
Feb 6 13:15:33 210.183.177.143:3603 -> xxx.yyy.255.252:1433 SYN ******S*
Feb 6 13:15:33 210.183.177.143:3589 -> xxx.yyy.255.245:1433 SYN ******S*
Feb 6 13:15:33 210.183.177.143:3595 -> xxx.yyy.255.248:1433 SYN ******S*
Feb 6 13:15:33 210.183.177.143:3587 -> xxx.yyy.255.244:1433 SYN ******S*
Feb 6 13:15:33 210.183.177.143:3601 -> xxx.yyy.255.251:1433 SYN ******S*
Feb 6 13:15:33 210.183.177.143:3599 -> xxx.yyy.255.250:1433 SYN ******S*
Feb 6 13:15:33 210.183.177.143:3591 -> xxx.yyy.255.246:1433 SYN ******S*
Feb 6 13:15:33 210.183.177.143:3607 -> xxx.yyy.255.254:1433 SYN ******S*
54026
Feb 6 00:54:02 217.76.145.59:2381 -> xxx.yyy.1.30:1433 SYN ******S*
Feb 6 00:54:05 217.76.145.59:2383 -> xxx.yyy.1.31:1433 SYN ******S*
Feb 6 00:54:05 217.76.145.59:2385 -> xxx.yyy.1.32:1433 SYN ******S*
Feb 6 00:54:05 217.76.145.59:2387 -> xxx.yyy.1.33:1433 SYN ******S*
Feb 6 00:54:05 217.76.145.59:2393 -> xxx.yyy.1.36:1433 SYN ******S*
Feb 6 00:54:05 217.76.145.59:2395 -> xxx.yyy.1.37:1433 SYN ******S*
Feb 6 00:54:05 217.76.145.59:2397 -> xxx.yyy.1.38:1433 SYN ******S*
Feb 6 00:54:02 217.76.145.59:2399 -> xxx.yyy.1.39:1433 SYN ******S*
[...]
Feb 6 01:32:17 217.76.145.59:2331 -> xxx.yyy.255.215:1433 SYN ******S*
Feb 6 01:32:17 217.76.145.59:2327 -> xxx.yyy.255.213:1433 SYN ******S*
Feb 6 01:32:17 217.76.145.59:2333 -> xxx.yyy.255.216:1433 SYN ******S*
Feb 6 01:32:17 217.76.145.59:2337 -> xxx.yyy.255.218:1433 SYN ******S*
Feb 6 01:32:17 217.76.145.59:2339 -> xxx.yyy.255.219:1433 SYN ******S*
Feb 6 01:32:17 217.76.145.59:2351 -> xxx.yyy.255.225:1433 SYN ******S*
Feb 6 01:32:17 217.76.145.59:2353 -> xxx.yyy.255.226:1433 SYN ******S*
Feb 6 01:32:17 217.76.145.59:2357 -> xxx.yyy.255.228:1433 SYN ******S*
Feb 6 01:32:17 217.76.145.59:2347 -> xxx.yyy.255.223:1433 SYN ******S*
51367
Feb 6 16:13:18 69.213.196.97:43573 -> xxx.yyy.1.1:3306 SYN ******S*
Feb 6 16:13:21 69.213.196.97:43574 -> xxx.yyy.1.2:3306 SYN ******S*
Feb 6 16:13:21 69.213.196.97:43575 -> xxx.yyy.1.3:3306 SYN ******S*
Feb 6 16:13:21 69.213.196.97:43576 -> xxx.yyy.1.4:3306 SYN ******S*
Feb 6 16:13:21 69.213.196.97:43577 -> xxx.yyy.1.5:3306 SYN ******S*
Feb 6 16:13:21 69.213.196.97:43580 -> xxx.yyy.1.8:3306 SYN ******S*
Feb 6 16:13:18 69.213.196.97:43582 -> xxx.yyy.1.10:3306 SYN ******S*
Feb 6 16:13:18 69.213.196.97:43583 -> xxx.yyy.1.11:3306 SYN ******S*
[...]
Feb 6 16:26:35 69.213.196.97:50158 -> xxx.yyy.255.243:3306 SYN ******S*
Feb 6 16:26:35 69.213.196.97:50152 -> xxx.yyy.255.237:3306 SYN ******S*
Feb 6 16:26:35 69.213.196.97:50169 -> xxx.yyy.255.254:3306 SYN ******S*
Feb 6 16:26:35 69.213.196.97:50166 -> xxx.yyy.255.251:3306 SYN ******S*
Feb 6 16:26:35 69.213.196.97:50163 -> xxx.yyy.255.248:3306 SYN ******S*
Feb 6 16:26:35 69.213.196.97:50167 -> xxx.yyy.255.252:3306 SYN ******S*
Feb 6 16:26:35 69.213.196.97:50164 -> xxx.yyy.255.249:3306 SYN ******S*
Feb 6 16:26:35 69.213.196.97:50162 -> xxx.yyy.255.247:3306 SYN ******S*
50627
Feb 6 17:29:41 163.121.103.76:2778 -> xxx.yyy.1.1:1433 SYN ******S*
Feb 6 17:29:41 163.121.103.76:2779 -> xxx.yyy.1.2:1433 SYN ******S*
Feb 6 17:29:38 163.121.103.76:2783 -> xxx.yyy.1.6:1433 SYN ******S*
Feb 6 17:29:41 163.121.103.76:2782 -> xxx.yyy.1.5:1433 SYN ******S*
Feb 6 17:29:41 163.121.103.76:2784 -> xxx.yyy.1.7:1433 SYN ******S*
Feb 6 17:29:41 163.121.103.76:2789 -> xxx.yyy.1.12:1433 SYN ******S*
Feb 6 17:29:38 163.121.103.76:2792 -> xxx.yyy.1.15:1433 SYN ******S*
Feb 6 17:29:41 163.121.103.76:2781 -> xxx.yyy.1.4:1433 SYN ******S*
[...]
Feb 6 17:41:19 163.121.103.76:1369 -> xxx.yyy.255.226:1433 SYN ******S*
Feb 6 17:41:19 163.121.103.76:1373 -> xxx.yyy.255.230:1433 SYN ******S*
Feb 6 17:41:19 163.121.103.76:1368 -> xxx.yyy.255.225:1433 SYN ******S*
Feb 6 17:41:19 163.121.103.76:1385 -> xxx.yyy.255.242:1433 SYN ******S*
Feb 6 17:41:19 163.121.103.76:1383 -> xxx.yyy.255.240:1433 SYN ******S*
Feb 6 17:41:19 163.121.103.76:1393 -> xxx.yyy.255.250:1433 SYN ******S*
Feb 6 17:41:19 163.121.103.76:1397 -> xxx.yyy.255.254:1433 SYN ******S*
Feb 6 17:41:19 163.121.103.76:1392 -> xxx.yyy.255.249:1433 SYN ******S*
48534
Feb 6 15:11:40 168.115.117.62:3577 -> xxx.yyy.1.5:3306 SYN ******S*
Feb 6 15:11:40 168.115.117.62:3573 -> xxx.yyy.1.3:3306 SYN ******S*
Feb 6 15:11:41 168.115.117.62:3583 -> xxx.yyy.1.8:3306 SYN ******S*
Feb 6 15:11:41 168.115.117.62:3587 -> xxx.yyy.1.10:3306 SYN ******S*
Feb 6 15:11:44 168.115.117.62:3601 -> xxx.yyy.1.17:3306 SYN ******S*
Feb 6 15:11:44 168.115.117.62:3603 -> xxx.yyy.1.18:3306 SYN ******S*
Feb 6 15:11:44 168.115.117.62:3607 -> xxx.yyy.1.20:3306 SYN ******S*
Feb 6 15:11:41 168.115.117.62:3623 -> xxx.yyy.1.28:3306 SYN ******S*
[...]
Feb 6 15:25:21 168.115.117.62:4577 -> xxx.yyy.255.244:3306 SYN ******S*
Feb 6 15:25:21 168.115.117.62:4572 -> xxx.yyy.255.242:3306 SYN ******S*
Feb 6 15:25:21 168.115.117.62:4567 -> xxx.yyy.255.240:3306 SYN ******S*
Feb 6 15:25:21 168.115.117.62:4582 -> xxx.yyy.255.246:3306 SYN ******S*
Feb 6 15:25:21 168.115.117.62:4592 -> xxx.yyy.255.251:3306 SYN ******S*
Feb 6 15:25:21 168.115.117.62:4588 -> xxx.yyy.255.249:3306 SYN ******S*
Feb 6 15:25:21 168.115.117.62:4596 -> xxx.yyy.255.253:3306 SYN ******S*
Feb 6 15:25:21 168.115.117.62:4590 -> xxx.yyy.255.250:3306 SYN ******S*
47916
Feb 6 15:13:34 80.53.218.122:3414 -> xxx.yyy.1.1:3306 SYN ******S*
Feb 6 15:13:31 80.53.218.122:3415 -> xxx.yyy.1.2:3306 SYN ******S*
Feb 6 15:13:31 80.53.218.122:3417 -> xxx.yyy.1.4:3306 SYN ******S*
Feb 6 15:13:34 80.53.218.122:3421 -> xxx.yyy.1.6:3306 SYN ******S*
Feb 6 15:13:31 80.53.218.122:3423 -> xxx.yyy.1.8:3306 SYN ******S*
Feb 6 15:13:31 80.53.218.122:3426 -> xxx.yyy.1.11:3306 SYN ******S*
Feb 6 15:13:31 80.53.218.122:3435 -> xxx.yyy.1.20:3306 SYN ******S*
Feb 6 15:13:34 80.53.218.122:3436 -> xxx.yyy.1.21:3306 SYN ******S*
[...]
Feb 6 15:37:05 80.53.218.122:2398 -> xxx.yyy.255.228:3306 SYN ******S*
Feb 6 15:37:05 80.53.218.122:2420 -> xxx.yyy.255.248:3306 SYN ******S*
Feb 6 15:37:05 80.53.218.122:2424 -> xxx.yyy.255.252:3306 SYN ******S*
Feb 6 15:37:05 80.53.218.122:2410 -> xxx.yyy.255.240:3306 SYN ******S*
Feb 6 15:37:05 80.53.218.122:2399 -> xxx.yyy.255.229:3306 SYN ******S*
Feb 6 15:37:05 80.53.218.122:2416 -> xxx.yyy.255.245:3306 SYN ******S*
Feb 6 15:37:05 80.53.218.122:2421 -> xxx.yyy.255.249:3306 SYN ******S*
Feb 6 15:37:05 80.53.218.122:2407 -> xxx.yyy.255.237:3306 SYN ******S*
Feb 6 15:37:05 80.53.218.122:2411 -> xxx.yyy.255.241:3306 SYN ******S*
44344
Feb 6 20:31:11 212.143.187.64:36864 -> xxx.yyy.220.1:139 SYN ******S*
Feb 6 20:31:12 212.143.187.64:36867 -> xxx.yyy.220.1:5900 SYN ******S*
Feb 6 20:31:12 212.143.187.64:36865 -> xxx.yyy.220.1:6101 SYN ******S*
Feb 6 20:31:12 212.143.187.64:36872 -> xxx.yyy.220.2:42 SYN ******S*
Feb 6 20:31:12 212.143.187.64:36875 -> xxx.yyy.220.2:6101 SYN ******S*
Feb 6 20:31:12 212.143.187.64:36877 -> xxx.yyy.220.2:4899 SYN ******S*
Feb 6 20:31:09 212.143.187.64:36881 -> xxx.yyy.220.3:42 SYN ******S*
Feb 6 20:31:12 212.143.187.64:36882 -> xxx.yyy.220.3:139 SYN ******S*
[...]
Feb 6 23:51:09 212.143.187.64:52809 -> xxx.yyy.220.201:5900 SYN ******S*
Feb 6 23:51:10 212.143.187.64:52826 -> xxx.yyy.220.191:5900 SYN ******S*
Feb 6 23:51:10 212.143.187.64:52831 -> xxx.yyy.220.158:5900 SYN ******S*
Feb 6 23:51:10 212.143.187.64:52832 -> xxx.yyy.220.116:5900 SYN ******S*
Feb 6 23:51:10 212.143.187.64:52833 -> xxx.yyy.220.62:5900 SYN ******S*
Feb 6 23:51:10 212.143.187.64:52841 -> xxx.yyy.220.148:5900 SYN ******S*
Feb 6 23:51:10 212.143.187.64:52843 -> xxx.yyy.220.140:5900 SYN ******S*
Feb 6 23:51:11 212.143.187.64:52863 -> xxx.yyy.220.128:5900 SYN ******S*
Feb 6 23:51:11 212.143.187.64:52864 -> xxx.yyy.220.225:5900 SYN ******S*
42902
Feb 6 02:17:00 222.55.80.153:2654 -> xxx.yyy.64.1:1433 SYN ******S*
Feb 6 02:17:01 222.55.80.153:2657 -> xxx.yyy.64.2:1433 SYN ******S*
Feb 6 02:17:01 222.55.80.153:2662 -> xxx.yyy.64.4:1433 SYN ******S*
Feb 6 02:17:01 222.55.80.153:2665 -> xxx.yyy.64.5:1433 SYN ******S*
Feb 6 02:17:01 222.55.80.153:2667 -> xxx.yyy.64.7:1433 SYN ******S*
Feb 6 02:17:01 222.55.80.153:2672 -> xxx.yyy.64.8:1433 SYN ******S*
Feb 6 02:17:01 222.55.80.153:2673 -> xxx.yyy.64.9:1433 SYN ******S*
Feb 6 02:17:01 222.55.80.153:2674 -> xxx.yyy.64.10:1433 SYN ******S*
[...]
Feb 6 03:33:38 222.55.80.153:2758 -> xxx.yyy.149.26:1433 SYN ******S*
Feb 6 03:33:38 222.55.80.153:2768 -> xxx.yyy.149.27:1433 SYN ******S*
Feb 6 03:33:39 222.55.80.153:2784 -> xxx.yyy.149.28:1433 SYN ******S*
Feb 6 03:33:39 222.55.80.153:2789 -> xxx.yyy.149.29:1433 SYN ******S*
Feb 6 03:33:39 222.55.80.153:2790 -> xxx.yyy.149.30:1433 SYN ******S*
Feb 6 03:33:39 222.55.80.153:2795 -> xxx.yyy.149.32:1433 SYN ******S*
Feb 6 03:33:40 222.55.80.153:2854 -> xxx.yyy.149.40:1433 SYN ******S*
Feb 6 03:33:40 222.55.80.153:2715 -> xxx.yyy.149.22:1433 SYN ******S*
Feb 6 03:33:40 222.55.80.153:2856 -> xxx.yyy.149.41:1433 SYN ******S*
38231
Feb 6 02:52:05 83.89.157.118:2384 -> xxx.yyy.1.0:3306 SYN ******S*
Feb 6 02:52:05 83.89.157.118:2385 -> xxx.yyy.1.1:3306 SYN ******S*
Feb 6 02:52:05 83.89.157.118:2386 -> xxx.yyy.1.2:3306 SYN ******S*
Feb 6 02:52:05 83.89.157.118:2387 -> xxx.yyy.1.3:3306 SYN ******S*
Feb 6 02:52:05 83.89.157.118:2388 -> xxx.yyy.1.4:3306 SYN ******S*
Feb 6 02:52:05 83.89.157.118:2392 -> xxx.yyy.1.8:3306 SYN ******S*
Feb 6 02:52:05 83.89.157.118:2393 -> xxx.yyy.1.9:3306 SYN ******S*
Feb 6 02:52:05 83.89.157.118:2394 -> xxx.yyy.1.10:3306 SYN ******S*
[...]
Feb 6 02:53:32 83.89.157.118:2400 -> xxx.yyy.255.246:3306 SYN ******S*
Feb 6 02:53:32 83.89.157.118:2401 -> xxx.yyy.255.247:3306 SYN ******S*
Feb 6 02:53:32 83.89.157.118:2402 -> xxx.yyy.255.248:3306 SYN ******S*
Feb 6 02:53:32 83.89.157.118:2403 -> xxx.yyy.255.249:3306 SYN ******S*
Feb 6 02:53:32 83.89.157.118:2404 -> xxx.yyy.255.250:3306 SYN ******S*
Feb 6 02:53:32 83.89.157.118:2405 -> xxx.yyy.255.251:3306 SYN ******S*
Feb 6 02:53:32 83.89.157.118:2406 -> xxx.yyy.255.252:3306 SYN ******S*
Feb 6 02:53:32 83.89.157.118:2407 -> xxx.yyy.255.253:3306 SYN ******S*
Feb 6 02:53:32 83.89.157.118:2408 -> xxx.yyy.255.254:3306 SYN ******S*
36183
[...]
33706
Feb 6 17:22:13 207.218.157.100:2159 -> xxx.yyy.1.1:3306 SYN ******S*
Feb 6 17:22:13 207.218.157.100:2160 -> xxx.yyy.1.2:3306 SYN ******S*
Feb 6 17:22:10 207.218.157.100:2165 -> xxx.yyy.1.7:3306 SYN ******S*
Feb 6 17:22:10 207.218.157.100:2166 -> xxx.yyy.1.8:3306 SYN ******S*
Feb 6 17:22:10 207.218.157.100:2167 -> xxx.yyy.1.9:3306 SYN ******S*
Feb 6 17:22:10 207.218.157.100:2168 -> xxx.yyy.1.10:3306 SYN ******S*
Feb 6 17:22:13 207.218.157.100:2169 -> xxx.yyy.1.11:3306 SYN ******S*
Feb 6 17:22:10 207.218.157.100:2170 -> xxx.yyy.1.12:3306 SYN ******S*
[...]
Feb 6 17:39:33 207.218.157.100:1765 -> xxx.yyy.255.188:3306 SYN ******S*
Feb 6 17:39:33 207.218.157.100:1818 -> xxx.yyy.255.238:3306 SYN ******S*
Feb 6 17:39:33 207.218.157.100:1805 -> xxx.yyy.255.225:3306 SYN ******S*
Feb 6 17:39:33 207.218.157.100:1815 -> xxx.yyy.255.235:3306 SYN ******S*
Feb 6 17:39:33 207.218.157.100:1812 -> xxx.yyy.255.232:3306 SYN ******S*
Feb 6 17:39:33 207.218.157.100:1809 -> xxx.yyy.255.229:3306 SYN ******S*
Feb 6 17:39:33 207.218.157.100:1819 -> xxx.yyy.255.239:3306 SYN ******S*
Feb 6 17:39:33 207.218.157.100:1813 -> xxx.yyy.255.233:3306 SYN ******S*
Feb 6 17:39:33 207.218.157.100:1810 -> xxx.yyy.255.230:3306 SYN ******S*
32217
Feb 6 02:18:46 63.192.190.231:3927 -> xxx.yyy.1.6:3306 SYN ******S*
Feb 6 02:18:46 63.192.190.231:3930 -> xxx.yyy.1.9:3306 SYN ******S*
Feb 6 02:18:46 63.192.190.231:3924 -> xxx.yyy.1.3:3306 SYN ******S*
Feb 6 02:18:46 63.192.190.231:3942 -> xxx.yyy.1.21:3306 SYN ******S*
Feb 6 02:18:46 63.192.190.231:3945 -> xxx.yyy.1.24:3306 SYN ******S*
Feb 6 02:18:46 63.192.190.231:3933 -> xxx.yyy.1.12:3306 SYN ******S*
Feb 6 02:18:49 63.192.190.231:3948 -> xxx.yyy.1.27:3306 SYN ******S*
Feb 6 02:18:46 63.192.190.231:3936 -> xxx.yyy.1.15:3306 SYN ******S*
[...]
Feb 6 02:36:05 63.192.190.231:3479 -> xxx.yyy.255.237:3306 SYN ******S*
Feb 6 02:36:05 63.192.190.231:3431 -> xxx.yyy.255.189:3306 SYN ******S*
Feb 6 02:36:05 63.192.190.231:3399 -> xxx.yyy.255.157:3306 SYN ******S*
Feb 6 02:36:05 63.192.190.231:3495 -> xxx.yyy.255.253:3306 SYN ******S*
Feb 6 02:36:05 63.192.190.231:3415 -> xxx.yyy.255.173:3306 SYN ******S*
Feb 6 02:36:05 63.192.190.231:3447 -> xxx.yyy.255.205:3306 SYN ******S*
Feb 6 02:36:05 63.192.190.231:3492 -> xxx.yyy.255.250:3306 SYN ******S*
Feb 6 02:36:05 63.192.190.231:3460 -> xxx.yyy.255.218:3306 SYN ******S*
30270
Feb 6 20:31:59 210.91.64.20:4126 -> xxx.yyy.1.2:1433 SYN ******S*
Feb 6 20:32:00 210.91.64.20:4127 -> xxx.yyy.1.4:1433 SYN ******S*
Feb 6 20:32:00 210.91.64.20:4155 -> xxx.yyy.1.31:1433 SYN ******S*
Feb 6 20:32:00 210.91.64.20:4165 -> xxx.yyy.1.41:1433 SYN ******S*
Feb 6 20:31:59 210.91.64.20:4188 -> xxx.yyy.1.64:1433 SYN ******S*
Feb 6 20:31:59 210.91.64.20:4144 -> xxx.yyy.1.19:1433 SYN ******S*
Feb 6 20:32:00 210.91.64.20:4197 -> xxx.yyy.1.73:1433 SYN ******S*
Feb 6 20:31:59 210.91.64.20:4201 -> xxx.yyy.1.77:1433 SYN ******S*
[...]
Feb 6 20:55:35 210.91.64.20:3242 -> xxx.yyy.255.231:1433 SYN ******S*
Feb 6 20:55:35 210.91.64.20:3261 -> xxx.yyy.255.246:1433 SYN ******S*
Feb 6 20:55:35 210.91.64.20:3263 -> xxx.yyy.255.248:1433 SYN ******S*
Feb 6 20:55:35 210.91.64.20:3267 -> xxx.yyy.255.251:1433 SYN ******S*
Feb 6 20:55:35 210.91.64.20:3262 -> xxx.yyy.255.247:1433 SYN ******S*
Feb 6 20:55:35 210.91.64.20:3247 -> xxx.yyy.255.235:1433 SYN ******S*
Feb 6 20:55:35 210.91.64.20:3257 -> xxx.yyy.255.243:1433 SYN ******S*
Feb 6 20:55:35 210.91.64.20:3239 -> xxx.yyy.255.228:1433 SYN ******S*
26627
Feb 6 16:19:07 134.117.147.23:2260 -> xxx.yyy.1.3:554 SYN ******S*
Feb 6 16:19:06 134.117.147.23:2262 -> xxx.yyy.1.4:554 SYN ******S*
Feb 6 16:19:06 134.117.147.23:2263 -> xxx.yyy.1.5:554 SYN ******S*
Feb 6 16:19:06 134.117.147.23:2264 -> xxx.yyy.1.6:554 SYN ******S*
Feb 6 16:19:06 134.117.147.23:2265 -> xxx.yyy.1.7:554 SYN ******S*
Feb 6 16:19:07 134.117.147.23:2266 -> xxx.yyy.1.8:554 SYN ******S*
Feb 6 16:19:07 134.117.147.23:2267 -> xxx.yyy.1.9:554 SYN ******S*
Feb 6 16:19:06 134.117.147.23:2268 -> xxx.yyy.1.10:554 SYN ******S*
[...]
Feb 6 16:29:21 134.117.147.23:2249 -> xxx.yyy.255.244:554 SYN ******S*
Feb 6 16:29:21 134.117.147.23:2250 -> xxx.yyy.255.245:554 SYN ******S*
Feb 6 16:29:21 134.117.147.23:2251 -> xxx.yyy.255.246:554 SYN ******S*
Feb 6 16:29:21 134.117.147.23:2252 -> xxx.yyy.255.247:554 SYN ******S*
Feb 6 16:29:21 134.117.147.23:2253 -> xxx.yyy.255.248:554 SYN ******S*
Feb 6 16:29:21 134.117.147.23:2254 -> xxx.yyy.255.249:554 SYN ******S*
Feb 6 16:29:21 134.117.147.23:2255 -> xxx.yyy.255.250:554 SYN ******S*
Feb 6 16:29:21 134.117.147.23:2256 -> xxx.yyy.255.251:554 SYN ******S*
Feb 6 16:29:21 134.117.147.23:2260 -> xxx.yyy.255.254:554 SYN ******S*
22922
[...]
22598
[...]
20459
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list