[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Sat Feb 12 13:46:13 GMT 2005
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Feb 11 02:43:50 62.87.160.70:11267 -> xxx.yyy.1.0:1433 SYN ******S*
Feb 11 02:43:50 62.87.160.70:11268 -> xxx.yyy.1.1:1433 SYN ******S*
Feb 11 02:43:50 62.87.160.70:11269 -> xxx.yyy.1.2:1433 SYN ******S*
Feb 11 02:43:50 62.87.160.70:11270 -> xxx.yyy.1.3:1433 SYN ******S*
Feb 11 02:43:50 62.87.160.70:11271 -> xxx.yyy.1.4:1433 SYN ******S*
Feb 11 02:43:50 62.87.160.70:11272 -> xxx.yyy.1.5:1433 SYN ******S*
Feb 11 02:43:50 62.87.160.70:11273 -> xxx.yyy.1.6:1433 SYN ******S*
Feb 11 02:43:50 62.87.160.70:11274 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Feb 11 06:32:41 62.87.160.70:5211 -> xxx.yyy.255.245:1433 SYN ******S*
Feb 11 06:32:42 62.87.160.70:5714 -> xxx.yyy.255.246:1433 SYN ******S*
Feb 11 06:32:42 62.87.160.70:5868 -> xxx.yyy.255.247:1433 SYN ******S*
Feb 11 06:32:42 62.87.160.70:5882 -> xxx.yyy.255.248:1433 SYN ******S*
Feb 11 06:32:42 62.87.160.70:5738 -> xxx.yyy.255.249:1433 SYN ******S*
Feb 11 06:32:43 62.87.160.70:5956 -> xxx.yyy.255.252:1433 SYN ******S*
Feb 11 06:32:43 62.87.160.70:5948 -> xxx.yyy.255.251:1433 SYN ******S*
Feb 11 06:32:43 62.87.160.70:5977 -> xxx.yyy.255.253:1433 SYN ******S*
Feb 11 06:32:43 62.87.160.70:3060 -> xxx.yyy.255.254:1433 SYN ******S*
103320
Feb 11 08:58:32 129.49.64.147:1627 -> xxx.yyy.1.1:4899 SYN ******S*
Feb 11 08:58:32 129.49.64.147:1628 -> xxx.yyy.1.64:4899 SYN ******S*
Feb 11 08:58:34 129.49.64.147:1629 -> xxx.yyy.1.24:4899 SYN ******S*
Feb 11 08:58:34 129.49.64.147:1630 -> xxx.yyy.1.65:4899 SYN ******S*
Feb 11 08:58:34 129.49.64.147:1631 -> xxx.yyy.1.25:4899 SYN ******S*
Feb 11 08:58:31 129.49.64.147:1634 -> xxx.yyy.1.67:4899 SYN ******S*
Feb 11 08:58:32 129.49.64.147:1635 -> xxx.yyy.1.28:4899 SYN ******S*
Feb 11 08:58:32 129.49.64.147:1636 -> xxx.yyy.1.29:4899 SYN ******S*
[...]
Feb 11 09:12:13 129.49.64.147:2574 -> xxx.yyy.255.246:4899 SYN ******S*
Feb 11 09:12:13 129.49.64.147:2578 -> xxx.yyy.255.249:4899 SYN ******S*
Feb 11 09:12:13 129.49.64.147:2570 -> xxx.yyy.255.243:4899 SYN ******S*
Feb 11 09:12:13 129.49.64.147:2572 -> xxx.yyy.255.244:4899 SYN ******S*
Feb 11 09:12:13 129.49.64.147:2581 -> xxx.yyy.255.250:4899 SYN ******S*
Feb 11 09:12:14 129.49.64.147:2583 -> xxx.yyy.255.252:4899 SYN ******S*
Feb 11 09:12:14 129.49.64.147:2584 -> xxx.yyy.255.253:4899 SYN ******S*
Feb 11 09:12:14 129.49.64.147:2585 -> xxx.yyy.255.254:4899 SYN ******S*
Feb 11 09:12:14 129.49.64.147:2582 -> xxx.yyy.255.251:4899 SYN ******S*
76649
Feb 11 11:48:46 168.223.44.165:1161 -> xxx.yyy.1.0:1433 SYN ******S*
Feb 11 11:48:46 168.223.44.165:1162 -> xxx.yyy.1.1:1433 SYN ******S*
Feb 11 11:48:46 168.223.44.165:1163 -> xxx.yyy.1.2:1433 SYN ******S*
Feb 11 11:48:49 168.223.44.165:1164 -> xxx.yyy.1.3:1433 SYN ******S*
Feb 11 11:48:46 168.223.44.165:1165 -> xxx.yyy.1.4:1433 SYN ******S*
Feb 11 11:48:46 168.223.44.165:1169 -> xxx.yyy.1.8:1433 SYN ******S*
Feb 11 11:48:49 168.223.44.165:1170 -> xxx.yyy.1.9:1433 SYN ******S*
Feb 11 11:48:46 168.223.44.165:1173 -> xxx.yyy.1.12:1433 SYN ******S*
[...]
Feb 11 16:14:59 168.223.44.165:1808 -> xxx.yyy.255.226:1433 SYN ******S*
Feb 11 16:15:00 168.223.44.165:1813 -> xxx.yyy.255.231:1433 SYN ******S*
Feb 11 16:15:00 168.223.44.165:1826 -> xxx.yyy.255.240:1433 SYN ******S*
Feb 11 16:15:01 168.223.44.165:1832 -> xxx.yyy.255.243:1433 SYN ******S*
Feb 11 16:15:01 168.223.44.165:1838 -> xxx.yyy.255.246:1433 SYN ******S*
Feb 11 16:15:01 168.223.44.165:1840 -> xxx.yyy.255.247:1433 SYN ******S*
Feb 11 16:15:01 168.223.44.165:1846 -> xxx.yyy.255.250:1433 SYN ******S*
Feb 11 16:15:02 168.223.44.165:1853 -> xxx.yyy.255.253:1433 SYN ******S*
66975
Feb 11 00:00:04 218.239.124.161:2843 -> xxx.yyy.145.52:1433 SYN ******S*
Feb 11 00:00:04 218.239.124.161:2850 -> xxx.yyy.145.54:1433 SYN ******S*
Feb 11 00:00:04 218.239.124.161:2847 -> xxx.yyy.145.53:1433 SYN ******S*
Feb 11 00:00:04 218.239.124.161:3207 -> xxx.yyy.145.103:1433 SYN ******S*
Feb 11 00:00:04 218.239.124.161:3218 -> xxx.yyy.145.105:1433 SYN ******S*
Feb 11 00:00:04 218.239.124.161:3220 -> xxx.yyy.145.106:1433 SYN ******S*
Feb 11 00:00:04 218.239.124.161:2870 -> xxx.yyy.145.56:1433 SYN ******S*
Feb 11 00:00:04 218.239.124.161:2869 -> xxx.yyy.145.55:1433 SYN ******S*
[...]
Feb 11 01:39:42 218.239.124.161:1848 -> xxx.yyy.255.245:1433 SYN ******S*
Feb 11 01:39:42 218.239.124.161:1850 -> xxx.yyy.255.246:1433 SYN ******S*
Feb 11 01:39:42 218.239.124.161:1864 -> xxx.yyy.255.247:1433 SYN ******S*
Feb 11 01:39:43 218.239.124.161:1889 -> xxx.yyy.255.248:1433 SYN ******S*
Feb 11 01:39:43 218.239.124.161:1920 -> xxx.yyy.255.250:1433 SYN ******S*
Feb 11 01:39:43 218.239.124.161:1916 -> xxx.yyy.255.249:1433 SYN ******S*
Feb 11 01:39:43 218.239.124.161:1939 -> xxx.yyy.255.251:1433 SYN ******S*
Feb 11 01:39:44 218.239.124.161:1964 -> xxx.yyy.255.253:1433 SYN ******S*
Feb 11 01:39:44 218.239.124.161:1981 -> xxx.yyy.255.254:1433 SYN ******S*
62849
Feb 11 05:00:08 203.101.66.59:2064 -> xxx.yyy.1.2:4000 SYN ******S*
Feb 11 05:00:08 203.101.66.59:2065 -> xxx.yyy.1.3:4000 SYN ******S*
Feb 11 05:00:09 203.101.66.59:2066 -> xxx.yyy.1.4:4000 SYN ******S*
Feb 11 05:00:08 203.101.66.59:2059 -> xxx.yyy.1.1:4000 SYN ******S*
Feb 11 05:00:09 203.101.66.59:2069 -> xxx.yyy.1.7:4000 SYN ******S*
Feb 11 05:00:08 203.101.66.59:2071 -> xxx.yyy.1.8:4000 SYN ******S*
Feb 11 05:00:08 203.101.66.59:2072 -> xxx.yyy.1.9:4000 SYN ******S*
Feb 11 05:00:09 203.101.66.59:2073 -> xxx.yyy.1.10:4000 SYN ******S*
[...]
Feb 11 05:07:04 203.101.66.59:2144 -> xxx.yyy.255.245:4000 SYN ******S*
Feb 11 05:07:04 203.101.66.59:2137 -> xxx.yyy.255.239:4000 SYN ******S*
Feb 11 05:07:04 203.101.66.59:2145 -> xxx.yyy.255.246:4000 SYN ******S*
Feb 11 05:07:04 203.101.66.59:2141 -> xxx.yyy.255.243:4000 SYN ******S*
Feb 11 05:07:04 203.101.66.59:2138 -> xxx.yyy.255.240:4000 SYN ******S*
Feb 11 05:07:04 203.101.66.59:2136 -> xxx.yyy.255.238:4000 SYN ******S*
Feb 11 05:07:04 203.101.66.59:2147 -> xxx.yyy.255.248:4000 SYN ******S*
Feb 11 05:07:04 203.101.66.59:2156 -> xxx.yyy.255.254:4000 SYN ******S*
Feb 11 05:07:04 203.101.66.59:2140 -> xxx.yyy.255.242:4000 SYN ******S*
61466
Feb 11 23:27:03 213.187.171.174:3162 -> xxx.yyy.1.1:3306 SYN ******S*
Feb 11 23:27:03 213.187.171.174:3163 -> xxx.yyy.1.2:3306 SYN ******S*
Feb 11 23:27:03 213.187.171.174:3166 -> xxx.yyy.1.3:3306 SYN ******S*
Feb 11 23:27:03 213.187.171.174:3167 -> xxx.yyy.1.4:3306 SYN ******S*
Feb 11 23:27:03 213.187.171.174:3168 -> xxx.yyy.1.5:3306 SYN ******S*
Feb 11 23:27:03 213.187.171.174:3170 -> xxx.yyy.1.6:3306 SYN ******S*
Feb 11 23:27:03 213.187.171.174:3171 -> xxx.yyy.1.7:3306 SYN ******S*
Feb 11 23:27:03 213.187.171.174:3172 -> xxx.yyy.1.8:3306 SYN ******S*
[...]
Feb 11 23:30:55 213.187.171.174:4710 -> xxx.yyy.255.197:3306 SYN ******S*
Feb 11 23:30:55 213.187.171.174:4711 -> xxx.yyy.255.198:3306 SYN ******S*
Feb 11 23:30:55 213.187.171.174:4735 -> xxx.yyy.255.219:3306 SYN ******S*
Feb 11 23:30:55 213.187.171.174:4753 -> xxx.yyy.255.225:3306 SYN ******S*
Feb 11 23:30:55 213.187.171.174:4757 -> xxx.yyy.255.227:3306 SYN ******S*
Feb 11 23:30:55 213.187.171.174:4773 -> xxx.yyy.255.243:3306 SYN ******S*
Feb 11 23:30:55 213.187.171.174:4776 -> xxx.yyy.255.246:3306 SYN ******S*
Feb 11 23:30:55 213.187.171.174:4778 -> xxx.yyy.255.248:3306 SYN ******S*
Feb 11 23:30:55 213.187.171.174:4779 -> xxx.yyy.255.249:3306 SYN ******S*
57830
Feb 11 09:12:38 140.78.42.10:3456 -> xxx.yyy.1.4:8080 SYN ******S*
Feb 11 09:12:36 140.78.42.10:3460 -> xxx.yyy.1.8:8080 SYN ******S*
Feb 11 09:12:37 140.78.42.10:3461 -> xxx.yyy.1.9:8080 SYN ******S*
Feb 11 09:12:37 140.78.42.10:3465 -> xxx.yyy.1.13:8080 SYN ******S*
Feb 11 09:12:35 140.78.42.10:3466 -> xxx.yyy.1.14:8080 SYN ******S*
Feb 11 09:12:36 140.78.42.10:3468 -> xxx.yyy.1.16:8080 SYN ******S*
Feb 11 09:12:38 140.78.42.10:3470 -> xxx.yyy.1.18:8080 SYN ******S*
Feb 11 09:12:36 140.78.42.10:3471 -> xxx.yyy.1.19:8080 SYN ******S*
[...]
Feb 11 09:23:34 140.78.42.10:2388 -> xxx.yyy.255.241:8080 SYN ******S*
Feb 11 09:23:34 140.78.42.10:2394 -> xxx.yyy.255.247:8080 SYN ******S*
Feb 11 09:23:34 140.78.42.10:2401 -> xxx.yyy.255.254:8080 SYN ******S*
Feb 11 09:23:34 140.78.42.10:2398 -> xxx.yyy.255.251:8080 SYN ******S*
Feb 11 09:23:34 140.78.42.10:2399 -> xxx.yyy.255.252:8080 SYN ******S*
Feb 11 09:23:34 140.78.42.10:2396 -> xxx.yyy.255.249:8080 SYN ******S*
Feb 11 09:23:34 140.78.42.10:2400 -> xxx.yyy.255.253:8080 SYN ******S*
Feb 11 09:23:34 140.78.42.10:2397 -> xxx.yyy.255.250:8080 SYN ******S*
51169
Feb 11 18:48:38 210.0.198.120:3826 -> xxx.yyy.1.1:80 SYN ******S*
Feb 11 18:48:38 210.0.198.120:3827 -> xxx.yyy.1.2:80 SYN ******S*
Feb 11 18:48:40 210.0.198.120:3831 -> xxx.yyy.1.6:80 SYN ******S*
Feb 11 18:48:40 210.0.198.120:3832 -> xxx.yyy.1.7:80 SYN ******S*
Feb 11 18:48:38 210.0.198.120:3828 -> xxx.yyy.1.3:80 SYN ******S*
Feb 11 18:48:40 210.0.198.120:3829 -> xxx.yyy.1.4:80 SYN ******S*
Feb 11 18:48:40 210.0.198.120:3830 -> xxx.yyy.1.5:80 SYN ******S*
Feb 11 18:48:40 210.0.198.120:3833 -> xxx.yyy.1.8:80 SYN ******S*
[...]
Feb 11 18:57:31 210.0.198.120:3702 -> xxx.yyy.255.253:80 SYN ******S*
Feb 11 18:57:31 210.0.198.120:3670 -> xxx.yyy.255.221:80 SYN ******S*
Feb 11 18:57:31 210.0.198.120:3682 -> xxx.yyy.255.233:80 SYN ******S*
Feb 11 18:57:31 210.0.198.120:3694 -> xxx.yyy.255.245:80 SYN ******S*
Feb 11 18:57:31 210.0.198.120:3698 -> xxx.yyy.255.249:80 SYN ******S*
Feb 11 18:57:31 210.0.198.120:3688 -> xxx.yyy.255.239:80 SYN ******S*
Feb 11 18:57:31 210.0.198.120:3676 -> xxx.yyy.255.227:80 SYN ******S*
Feb 11 18:57:31 210.0.198.120:3672 -> xxx.yyy.255.223:80 SYN ******S*
Feb 11 18:57:31 210.0.198.120:3684 -> xxx.yyy.255.235:80 SYN ******S*
46675
Feb 11 05:29:20 65.162.1.154:3855 -> xxx.yyy.1.1:3306 SYN ******S*
Feb 11 05:29:20 65.162.1.154:4239 -> xxx.yyy.1.6:3306 SYN ******S*
Feb 11 05:29:20 65.162.1.154:3947 -> xxx.yyy.1.10:3306 SYN ******S*
Feb 11 05:29:20 65.162.1.154:4130 -> xxx.yyy.1.13:3306 SYN ******S*
Feb 11 05:29:20 65.162.1.154:3999 -> xxx.yyy.1.16:3306 SYN ******S*
Feb 11 05:29:20 65.162.1.154:4099 -> xxx.yyy.1.23:3306 SYN ******S*
Feb 11 05:29:20 65.162.1.154:4150 -> xxx.yyy.1.28:3306 SYN ******S*
Feb 11 05:29:20 65.162.1.154:4165 -> xxx.yyy.1.2:3306 SYN ******S*
[...]
Feb 11 05:38:41 65.162.1.154:4184 -> xxx.yyy.255.179:3306 SYN ******S*
Feb 11 05:38:41 65.162.1.154:4204 -> xxx.yyy.255.181:3306 SYN ******S*
Feb 11 05:38:41 65.162.1.154:1180 -> xxx.yyy.255.186:3306 SYN ******S*
Feb 11 05:38:41 65.162.1.154:4784 -> xxx.yyy.255.183:3306 SYN ******S*
Feb 11 05:38:41 65.162.1.154:4953 -> xxx.yyy.255.187:3306 SYN ******S*
Feb 11 05:38:41 65.162.1.154:4933 -> xxx.yyy.255.184:3306 SYN ******S*
Feb 11 05:38:41 65.162.1.154:1373 -> xxx.yyy.255.188:3306 SYN ******S*
Feb 11 05:38:41 65.162.1.154:3814 -> xxx.yyy.255.182:3306 SYN ******S*
38019
Feb 11 06:59:57 218.36.16.14:2440 -> xxx.yyy.1.1:4899 SYN ******S*
Feb 11 06:59:57 218.36.16.14:2441 -> xxx.yyy.1.2:4899 SYN ******S*
Feb 11 06:59:57 218.36.16.14:2442 -> xxx.yyy.1.3:4899 SYN ******S*
Feb 11 06:59:55 218.36.16.14:2443 -> xxx.yyy.1.4:4899 SYN ******S*
Feb 11 06:59:55 218.36.16.14:2444 -> xxx.yyy.1.5:4899 SYN ******S*
Feb 11 06:59:55 218.36.16.14:2445 -> xxx.yyy.1.6:4899 SYN ******S*
Feb 11 06:59:55 218.36.16.14:2446 -> xxx.yyy.1.7:4899 SYN ******S*
Feb 11 06:59:57 218.36.16.14:2447 -> xxx.yyy.1.8:4899 SYN ******S*
[...]
Feb 11 07:02:54 218.36.16.14:4042 -> xxx.yyy.254.248:4899 SYN ******S*
Feb 11 07:02:54 218.36.16.14:4043 -> xxx.yyy.254.249:4899 SYN ******S*
Feb 11 07:02:54 218.36.16.14:4044 -> xxx.yyy.254.250:4899 SYN ******S*
Feb 11 07:02:54 218.36.16.14:4045 -> xxx.yyy.254.251:4899 SYN ******S*
Feb 11 07:02:54 218.36.16.14:4046 -> xxx.yyy.254.252:4899 SYN ******S*
Feb 11 07:02:54 218.36.16.14:4047 -> xxx.yyy.254.253:4899 SYN ******S*
Feb 11 07:02:54 218.36.16.14:3060 -> xxx.yyy.252.165:4899 SYN ******S*
Feb 11 07:02:54 218.36.16.14:3057 -> xxx.yyy.252.162:4899 SYN ******S*
36212
Feb 11 19:18:42 211.48.95.77:3918 -> xxx.yyy.1.2:4899 SYN ******S*
Feb 11 19:18:44 211.48.95.77:3914 -> xxx.yyy.1.1:4899 SYN ******S*
Feb 11 19:18:42 211.48.95.77:3924 -> xxx.yyy.1.4:4899 SYN ******S*
Feb 11 19:18:42 211.48.95.77:3925 -> xxx.yyy.1.5:4899 SYN ******S*
Feb 11 19:18:44 211.48.95.77:3936 -> xxx.yyy.1.9:4899 SYN ******S*
Feb 11 19:18:42 211.48.95.77:3937 -> xxx.yyy.1.10:4899 SYN ******S*
Feb 11 19:18:42 211.48.95.77:3928 -> xxx.yyy.1.6:4899 SYN ******S*
Feb 11 19:18:44 211.48.95.77:3938 -> xxx.yyy.1.11:4899 SYN ******S*
[...]
Feb 11 19:27:45 211.48.95.77:2604 -> xxx.yyy.255.252:4899 SYN ******S*
Feb 11 19:27:45 211.48.95.77:2605 -> xxx.yyy.255.253:4899 SYN ******S*
Feb 11 19:27:45 211.48.95.77:2594 -> xxx.yyy.255.245:4899 SYN ******S*
Feb 11 19:27:45 211.48.95.77:2595 -> xxx.yyy.255.246:4899 SYN ******S*
Feb 11 19:27:45 211.48.95.77:2606 -> xxx.yyy.255.254:4899 SYN ******S*
Feb 11 19:27:45 211.48.95.77:2598 -> xxx.yyy.255.248:4899 SYN ******S*
Feb 11 19:27:45 211.48.95.77:2599 -> xxx.yyy.255.249:4899 SYN ******S*
Feb 11 19:27:45 211.48.95.77:2601 -> xxx.yyy.255.251:4899 SYN ******S*
34951
Feb 11 19:09:37 218.51.69.136:1078 -> xxx.yyy.1.1:4899 SYN ******S*
Feb 11 19:09:36 218.51.69.136:1081 -> xxx.yyy.1.2:4899 SYN ******S*
Feb 11 19:09:36 218.51.69.136:1083 -> xxx.yyy.1.4:4899 SYN ******S*
Feb 11 19:09:36 218.51.69.136:1084 -> xxx.yyy.1.5:4899 SYN ******S*
Feb 11 19:09:36 218.51.69.136:1085 -> xxx.yyy.1.6:4899 SYN ******S*
Feb 11 19:09:36 218.51.69.136:1086 -> xxx.yyy.1.7:4899 SYN ******S*
Feb 11 19:09:36 218.51.69.136:1093 -> xxx.yyy.1.10:4899 SYN ******S*
Feb 11 19:09:36 218.51.69.136:1087 -> xxx.yyy.1.8:4899 SYN ******S*
[...]
Feb 11 19:13:50 218.51.69.136:3316 -> xxx.yyy.255.237:4899 SYN ******S*
Feb 11 19:13:50 218.51.69.136:3319 -> xxx.yyy.255.240:4899 SYN ******S*
Feb 11 19:13:50 218.51.69.136:3320 -> xxx.yyy.255.241:4899 SYN ******S*
Feb 11 19:13:50 218.51.69.136:3324 -> xxx.yyy.255.244:4899 SYN ******S*
Feb 11 19:13:50 218.51.69.136:3333 -> xxx.yyy.255.249:4899 SYN ******S*
Feb 11 19:13:50 218.51.69.136:3331 -> xxx.yyy.255.248:4899 SYN ******S*
Feb 11 19:13:50 218.51.69.136:3308 -> xxx.yyy.255.232:4899 SYN ******S*
Feb 11 19:13:50 218.51.69.136:3335 -> xxx.yyy.255.250:4899 SYN ******S*
Feb 11 19:13:50 218.51.69.136:3325 -> xxx.yyy.255.245:4899 SYN ******S*
30735
Feb 11 19:19:04 218.7.165.166:1937 -> xxx.yyy.1.1:4899 SYN ******S*
Feb 11 19:19:03 218.7.165.166:1939 -> xxx.yyy.1.3:4899 SYN ******S*
Feb 11 19:19:03 218.7.165.166:1941 -> xxx.yyy.1.5:4899 SYN ******S*
Feb 11 19:19:03 218.7.165.166:1942 -> xxx.yyy.1.6:4899 SYN ******S*
Feb 11 19:19:03 218.7.165.166:1944 -> xxx.yyy.1.8:4899 SYN ******S*
Feb 11 19:19:04 218.7.165.166:1945 -> xxx.yyy.1.9:4899 SYN ******S*
Feb 11 19:19:04 218.7.165.166:1947 -> xxx.yyy.1.11:4899 SYN ******S*
Feb 11 19:19:03 218.7.165.166:1948 -> xxx.yyy.1.12:4899 SYN ******S*
[...]
Feb 11 19:28:02 218.7.165.166:1392 -> xxx.yyy.255.62:4899 SYN ******S*
Feb 11 19:28:02 218.7.165.166:1385 -> xxx.yyy.255.55:4899 SYN ******S*
Feb 11 19:28:02 218.7.165.166:1406 -> xxx.yyy.255.74:4899 SYN ******S*
Feb 11 19:28:02 218.7.165.166:1408 -> xxx.yyy.255.76:4899 SYN ******S*
Feb 11 19:28:02 218.7.165.166:1416 -> xxx.yyy.255.84:4899 SYN ******S*
Feb 11 19:28:02 218.7.165.166:1419 -> xxx.yyy.255.87:4899 SYN ******S*
Feb 11 19:28:02 218.7.165.166:1420 -> xxx.yyy.255.88:4899 SYN ******S*
Feb 11 19:28:02 218.7.165.166:1414 -> xxx.yyy.255.82:4899 SYN ******S*
Feb 11 19:28:02 218.7.165.166:1418 -> xxx.yyy.255.86:4899 SYN ******S*
30567
Feb 11 19:13:31 61.90.81.77:2435 -> xxx.yyy.1.5:4899 SYN ******S*
Feb 11 19:13:31 61.90.81.77:2437 -> xxx.yyy.1.7:4899 SYN ******S*
Feb 11 19:13:31 61.90.81.77:2440 -> xxx.yyy.1.10:4899 SYN ******S*
Feb 11 19:13:33 61.90.81.77:2441 -> xxx.yyy.1.11:4899 SYN ******S*
Feb 11 19:13:33 61.90.81.77:2444 -> xxx.yyy.1.14:4899 SYN ******S*
Feb 11 19:13:31 61.90.81.77:2442 -> xxx.yyy.1.12:4899 SYN ******S*
Feb 11 19:13:32 61.90.81.77:2446 -> xxx.yyy.1.16:4899 SYN ******S*
Feb 11 19:13:31 61.90.81.77:2447 -> xxx.yyy.1.17:4899 SYN ******S*
[...]
Feb 11 19:19:38 61.90.81.77:3784 -> xxx.yyy.255.242:4899 SYN ******S*
Feb 11 19:19:38 61.90.81.77:3785 -> xxx.yyy.255.243:4899 SYN ******S*
Feb 11 19:19:38 61.90.81.77:3786 -> xxx.yyy.255.244:4899 SYN ******S*
Feb 11 19:19:38 61.90.81.77:3791 -> xxx.yyy.255.249:4899 SYN ******S*
Feb 11 19:19:38 61.90.81.77:3793 -> xxx.yyy.255.251:4899 SYN ******S*
Feb 11 19:19:38 61.90.81.77:3794 -> xxx.yyy.255.252:4899 SYN ******S*
Feb 11 19:19:38 61.90.81.77:3787 -> xxx.yyy.255.245:4899 SYN ******S*
Feb 11 19:19:38 61.90.81.77:3792 -> xxx.yyy.255.250:4899 SYN ******S*
Feb 11 19:19:38 61.90.81.77:3790 -> xxx.yyy.255.248:4899 SYN ******S*
30094
Feb 11 02:11:54 202.108.59.121:3017 -> xxx.yyy.1.5:443 SYN ******S*
Feb 11 02:11:54 202.108.59.121:3019 -> xxx.yyy.1.7:443 SYN ******S*
Feb 11 02:11:54 202.108.59.121:3022 -> xxx.yyy.1.10:443 SYN ******S*
Feb 11 02:11:51 202.108.59.121:3027 -> xxx.yyy.1.15:443 SYN ******S*
Feb 11 02:11:51 202.108.59.121:3037 -> xxx.yyy.1.25:443 SYN ******S*
Feb 11 02:11:51 202.108.59.121:3044 -> xxx.yyy.1.32:443 SYN ******S*
Feb 11 02:11:51 202.108.59.121:3047 -> xxx.yyy.1.35:443 SYN ******S*
Feb 11 02:11:51 202.108.59.121:3677 -> xxx.yyy.1.36:443 SYN ******S*
[...]
Feb 11 02:18:04 202.108.59.121:4521 -> xxx.yyy.255.163:443 SYN ******S*
Feb 11 02:18:04 202.108.59.121:4524 -> xxx.yyy.255.166:443 SYN ******S*
Feb 11 02:18:04 202.108.59.121:4522 -> xxx.yyy.255.164:443 SYN ******S*
Feb 11 02:18:04 202.108.59.121:4534 -> xxx.yyy.255.175:443 SYN ******S*
Feb 11 02:18:04 202.108.59.121:4535 -> xxx.yyy.255.176:443 SYN ******S*
Feb 11 02:18:04 202.108.59.121:4541 -> xxx.yyy.255.182:443 SYN ******S*
Feb 11 02:18:04 202.108.59.121:4557 -> xxx.yyy.255.198:443 SYN ******S*
Feb 11 02:18:04 202.108.59.121:4587 -> xxx.yyy.255.227:443 SYN ******S*
Feb 11 02:18:04 202.108.59.121:4488 -> xxx.yyy.255.130:443 SYN ******S*
28909
Feb 11 19:12:16 66.202.65.225:2976 -> xxx.yyy.1.36:4899 SYN ******S*
Feb 11 19:12:16 66.202.65.225:2977 -> xxx.yyy.1.37:4899 SYN ******S*
Feb 11 19:12:16 66.202.65.225:2979 -> xxx.yyy.1.39:4899 SYN ******S*
Feb 11 19:12:16 66.202.65.225:2980 -> xxx.yyy.1.40:4899 SYN ******S*
Feb 11 19:12:16 66.202.65.225:2983 -> xxx.yyy.1.43:4899 SYN ******S*
Feb 11 19:12:16 66.202.65.225:2985 -> xxx.yyy.1.45:4899 SYN ******S*
Feb 11 19:12:16 66.202.65.225:2986 -> xxx.yyy.1.46:4899 SYN ******S*
Feb 11 19:12:16 66.202.65.225:2990 -> xxx.yyy.1.50:4899 SYN ******S*
[...]
Feb 11 19:18:04 66.202.65.225:2221 -> xxx.yyy.255.228:4899 SYN ******S*
Feb 11 19:18:04 66.202.65.225:2222 -> xxx.yyy.255.229:4899 SYN ******S*
Feb 11 19:18:04 66.202.65.225:2224 -> xxx.yyy.255.231:4899 SYN ******S*
Feb 11 19:18:04 66.202.65.225:2227 -> xxx.yyy.255.234:4899 SYN ******S*
Feb 11 19:18:04 66.202.65.225:2233 -> xxx.yyy.255.240:4899 SYN ******S*
Feb 11 19:18:04 66.202.65.225:2234 -> xxx.yyy.255.241:4899 SYN ******S*
Feb 11 19:18:04 66.202.65.225:2235 -> xxx.yyy.255.242:4899 SYN ******S*
Feb 11 19:18:04 66.202.65.225:2243 -> xxx.yyy.255.250:4899 SYN ******S*
Feb 11 19:18:04 66.202.65.225:2244 -> xxx.yyy.255.251:4899 SYN ******S*
26059
Feb 11 10:01:04 210.27.143.8:4890 -> xxx.yyy.1.2:21 SYN ******S*
Feb 11 10:01:04 210.27.143.8:4891 -> xxx.yyy.1.3:21 SYN ******S*
Feb 11 10:01:04 210.27.143.8:4892 -> xxx.yyy.1.4:21 SYN ******S*
Feb 11 10:01:04 210.27.143.8:4893 -> xxx.yyy.1.5:21 SYN ******S*
Feb 11 10:01:04 210.27.143.8:4894 -> xxx.yyy.1.6:21 SYN ******S*
Feb 11 10:01:04 210.27.143.8:4895 -> xxx.yyy.1.7:21 SYN ******S*
Feb 11 10:01:04 210.27.143.8:4897 -> xxx.yyy.1.9:21 SYN ******S*
Feb 11 10:01:04 210.27.143.8:4898 -> xxx.yyy.1.10:21 SYN ******S*
[...]
Feb 11 10:03:03 210.27.143.8:2166 -> xxx.yyy.255.241:21 SYN ******S*
Feb 11 10:03:03 210.27.143.8:2169 -> xxx.yyy.255.244:21 SYN ******S*
Feb 11 10:03:03 210.27.143.8:2173 -> xxx.yyy.255.248:21 SYN ******S*
Feb 11 10:03:03 210.27.143.8:2174 -> xxx.yyy.255.249:21 SYN ******S*
Feb 11 10:03:03 210.27.143.8:2175 -> xxx.yyy.255.250:21 SYN ******S*
Feb 11 10:03:03 210.27.143.8:2177 -> xxx.yyy.255.252:21 SYN ******S*
Feb 11 10:03:03 210.27.143.8:2178 -> xxx.yyy.255.253:21 SYN ******S*
Feb 11 10:03:03 210.27.143.8:2179 -> xxx.yyy.255.254:21 SYN ******S*
24440
Feb 11 19:10:03 218.28.116.62:4738 -> xxx.yyy.1.2:4899 SYN ******S*
Feb 11 19:10:02 218.28.116.62:4741 -> xxx.yyy.1.5:4899 SYN ******S*
Feb 11 19:10:04 218.28.116.62:4745 -> xxx.yyy.1.9:4899 SYN ******S*
Feb 11 19:10:02 218.28.116.62:4748 -> xxx.yyy.1.12:4899 SYN ******S*
Feb 11 19:10:03 218.28.116.62:4747 -> xxx.yyy.1.11:4899 SYN ******S*
Feb 11 19:10:02 218.28.116.62:4754 -> xxx.yyy.1.18:4899 SYN ******S*
Feb 11 19:10:02 218.28.116.62:4761 -> xxx.yyy.1.25:4899 SYN ******S*
Feb 11 19:10:02 218.28.116.62:4766 -> xxx.yyy.1.30:4899 SYN ******S*
[...]
Feb 11 19:14:27 218.28.116.62:3493 -> xxx.yyy.255.210:4899 SYN ******S*
Feb 11 19:14:27 218.28.116.62:3500 -> xxx.yyy.255.217:4899 SYN ******S*
Feb 11 19:14:27 218.28.116.62:3502 -> xxx.yyy.255.219:4899 SYN ******S*
Feb 11 19:14:27 218.28.116.62:3507 -> xxx.yyy.255.224:4899 SYN ******S*
Feb 11 19:14:27 218.28.116.62:3518 -> xxx.yyy.255.235:4899 SYN ******S*
Feb 11 19:14:27 218.28.116.62:3521 -> xxx.yyy.255.238:4899 SYN ******S*
Feb 11 19:14:27 218.28.116.62:3523 -> xxx.yyy.255.240:4899 SYN ******S*
Feb 11 19:14:27 218.28.116.62:3530 -> xxx.yyy.255.247:4899 SYN ******S*
Feb 11 19:14:27 218.28.116.62:3532 -> xxx.yyy.255.249:4899 SYN ******S*
24381
Feb 11 19:07:12 218.28.29.210:4748 -> xxx.yyy.1.3:4899 SYN ******S*
Feb 11 19:07:12 218.28.29.210:4737 -> xxx.yyy.1.1:4899 SYN ******S*
Feb 11 19:07:12 218.28.29.210:4764 -> xxx.yyy.1.5:4899 SYN ******S*
Feb 11 19:07:12 218.28.29.210:4765 -> xxx.yyy.1.6:4899 SYN ******S*
Feb 11 19:07:12 218.28.29.210:4767 -> xxx.yyy.1.8:4899 SYN ******S*
Feb 11 19:07:12 218.28.29.210:3007 -> xxx.yyy.1.16:4899 SYN ******S*
Feb 11 19:07:12 218.28.29.210:3009 -> xxx.yyy.1.17:4899 SYN ******S*
Feb 11 19:07:13 218.28.29.210:3014 -> xxx.yyy.1.22:4899 SYN ******S*
[...]
Feb 11 19:10:13 218.28.29.210:4751 -> xxx.yyy.255.233:4899 SYN ******S*
Feb 11 19:10:13 218.28.29.210:4754 -> xxx.yyy.255.236:4899 SYN ******S*
Feb 11 19:10:13 218.28.29.210:4759 -> xxx.yyy.255.241:4899 SYN ******S*
Feb 11 19:10:13 218.28.29.210:4756 -> xxx.yyy.255.238:4899 SYN ******S*
Feb 11 19:10:13 218.28.29.210:4763 -> xxx.yyy.255.245:4899 SYN ******S*
Feb 11 19:10:13 218.28.29.210:4771 -> xxx.yyy.255.249:4899 SYN ******S*
Feb 11 19:10:13 218.28.29.210:4769 -> xxx.yyy.255.247:4899 SYN ******S*
Feb 11 19:10:13 218.28.29.210:4773 -> xxx.yyy.255.251:4899 SYN ******S*
Feb 11 19:10:13 218.28.29.210:4776 -> xxx.yyy.255.254:4899 SYN ******S*
24295
Feb 11 12:46:59 213.60.92.190:2083 -> xxx.yyy.191.235:1433 SYN ******S*
Feb 11 12:46:56 213.60.92.190:2084 -> xxx.yyy.191.236:1433 SYN ******S*
Feb 11 12:46:59 213.60.92.190:2088 -> xxx.yyy.191.240:1433 SYN ******S*
Feb 11 12:46:59 213.60.92.190:2093 -> xxx.yyy.191.245:1433 SYN ******S*
Feb 11 12:46:59 213.60.92.190:2094 -> xxx.yyy.191.246:1433 SYN ******S*
Feb 11 12:46:59 213.60.92.190:2095 -> xxx.yyy.191.247:1433 SYN ******S*
Feb 11 12:46:59 213.60.92.190:2097 -> xxx.yyy.191.249:1433 SYN ******S*
Feb 11 12:46:59 213.60.92.190:2100 -> xxx.yyy.191.252:1433 SYN ******S*
[...]
Feb 11 13:44:28 213.60.92.190:3804 -> xxx.yyy.255.224:1433 SYN ******S*
Feb 11 13:44:28 213.60.92.190:3862 -> xxx.yyy.255.226:1433 SYN ******S*
Feb 11 13:44:28 213.60.92.190:3887 -> xxx.yyy.255.228:1433 SYN ******S*
Feb 11 13:44:29 213.60.92.190:4103 -> xxx.yyy.255.236:1433 SYN ******S*
Feb 11 13:44:29 213.60.92.190:4150 -> xxx.yyy.255.238:1433 SYN ******S*
Feb 11 13:44:29 213.60.92.190:4194 -> xxx.yyy.255.240:1433 SYN ******S*
Feb 11 13:44:30 213.60.92.190:4198 -> xxx.yyy.255.242:1433 SYN ******S*
Feb 11 13:44:30 213.60.92.190:4223 -> xxx.yyy.255.244:1433 SYN ******S*
Feb 11 13:44:30 213.60.92.190:4285 -> xxx.yyy.255.254:1433 SYN ******S*
19330
Feb 11 00:00:07 203.85.122.28:1597 -> xxx.yyy.191.130:3306 SYN ******S*
Feb 11 00:00:07 203.85.122.28:1601 -> xxx.yyy.191.134:3306 SYN ******S*
Feb 11 00:00:07 203.85.122.28:1598 -> xxx.yyy.191.131:3306 SYN ******S*
Feb 11 00:00:07 203.85.122.28:1599 -> xxx.yyy.191.132:3306 SYN ******S*
Feb 11 00:00:07 203.85.122.28:1603 -> xxx.yyy.191.136:3306 SYN ******S*
Feb 11 00:00:07 203.85.122.28:1600 -> xxx.yyy.191.133:3306 SYN ******S*
Feb 11 00:00:07 203.85.122.28:1602 -> xxx.yyy.191.135:3306 SYN ******S*
Feb 11 00:00:07 203.85.122.28:1604 -> xxx.yyy.191.137:3306 SYN ******S*
[...]
Feb 11 00:05:04 203.85.122.28:2194 -> xxx.yyy.255.229:3306 SYN ******S*
Feb 11 00:05:04 203.85.122.28:2218 -> xxx.yyy.255.253:3306 SYN ******S*
Feb 11 00:05:04 203.85.122.28:2186 -> xxx.yyy.255.221:3306 SYN ******S*
Feb 11 00:05:04 203.85.122.28:2206 -> xxx.yyy.255.241:3306 SYN ******S*
Feb 11 00:05:04 203.85.122.28:2197 -> xxx.yyy.255.232:3306 SYN ******S*
Feb 11 00:05:04 203.85.122.28:2214 -> xxx.yyy.255.249:3306 SYN ******S*
Feb 11 00:05:04 203.85.122.28:2198 -> xxx.yyy.255.233:3306 SYN ******S*
Feb 11 00:05:04 203.85.122.28:2210 -> xxx.yyy.255.245:3306 SYN ******S*
Feb 11 00:05:04 203.85.122.28:2202 -> xxx.yyy.255.237:3306 SYN ******S*
18039
Feb 11 05:02:22 80.217.71.234:61481 -> xxx.yyy.1.0:1433 SYN ******S*
Feb 11 05:02:22 80.217.71.234:61366 -> xxx.yyy.1.1:1433 SYN ******S*
Feb 11 05:02:19 80.217.71.234:61369 -> xxx.yyy.1.2:1433 SYN ******S*
Feb 11 05:02:22 80.217.71.234:61370 -> xxx.yyy.1.3:1433 SYN ******S*
Feb 11 05:02:22 80.217.71.234:61488 -> xxx.yyy.1.4:1433 SYN ******S*
Feb 11 05:02:22 80.217.71.234:61372 -> xxx.yyy.1.5:1433 SYN ******S*
Feb 11 05:02:22 80.217.71.234:61374 -> xxx.yyy.1.6:1433 SYN ******S*
Feb 11 05:02:22 80.217.71.234:61376 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Feb 11 11:25:12 80.217.71.234:60097 -> xxx.yyy.111.230:1433 SYN ******S*
Feb 11 11:25:12 80.217.71.234:60111 -> xxx.yyy.111.231:1433 SYN ******S*
Feb 11 11:25:13 80.217.71.234:60123 -> xxx.yyy.111.232:1433 SYN ******S*
Feb 11 11:25:13 80.217.71.234:60140 -> xxx.yyy.111.233:1433 SYN ******S*
Feb 11 11:25:15 80.217.71.234:60283 -> xxx.yyy.111.238:1433 SYN ******S*
Feb 11 11:25:15 80.217.71.234:60302 -> xxx.yyy.111.240:1433 SYN ******S*
Feb 11 11:25:18 80.217.71.234:60465 -> xxx.yyy.111.250:1433 SYN ******S*
Feb 11 11:25:18 80.217.71.234:60521 -> xxx.yyy.111.254:1433 SYN ******S*
17872
Feb 11 07:14:35 203.81.217.91:1751 -> xxx.yyy.1.1:4899 SYN ******S*
Feb 11 07:14:35 203.81.217.91:1752 -> xxx.yyy.1.2:4899 SYN ******S*
Feb 11 07:14:35 203.81.217.91:1753 -> xxx.yyy.1.3:4899 SYN ******S*
Feb 11 07:14:35 203.81.217.91:1754 -> xxx.yyy.1.4:4899 SYN ******S*
Feb 11 07:14:35 203.81.217.91:1755 -> xxx.yyy.1.5:4899 SYN ******S*
Feb 11 07:14:35 203.81.217.91:1756 -> xxx.yyy.1.6:4899 SYN ******S*
Feb 11 07:14:35 203.81.217.91:1757 -> xxx.yyy.1.7:4899 SYN ******S*
Feb 11 07:14:36 203.81.217.91:1758 -> xxx.yyy.1.8:4899 SYN ******S*
[...]
Feb 11 07:17:55 203.81.217.91:3123 -> xxx.yyy.254.230:4899 SYN ******S*
Feb 11 07:17:55 203.81.217.91:2544 -> xxx.yyy.252.161:4899 SYN ******S*
Feb 11 07:17:55 203.81.217.91:2565 -> xxx.yyy.252.181:4899 SYN ******S*
Feb 11 07:17:55 203.81.217.91:2515 -> xxx.yyy.252.135:4899 SYN ******S*
Feb 11 07:17:55 203.81.217.91:2517 -> xxx.yyy.252.137:4899 SYN ******S*
Feb 11 07:17:55 203.81.217.91:2521 -> xxx.yyy.252.141:4899 SYN ******S*
Feb 11 07:17:55 203.81.217.91:2518 -> xxx.yyy.252.138:4899 SYN ******S*
Feb 11 07:17:55 203.81.217.91:2522 -> xxx.yyy.252.142:4899 SYN ******S*
Feb 11 07:17:55 203.81.217.91:2523 -> xxx.yyy.252.143:4899 SYN ******S*
15760
[...]
14703
[...]
14178
Feb 11 19:25:35 203.146.251.147:1702 -> xxx.yyy.1.1:4899 SYN ******S*
Feb 11 19:25:34 203.146.251.147:1704 -> xxx.yyy.1.2:4899 SYN ******S*
Feb 11 19:25:34 203.146.251.147:1670 -> xxx.yyy.1.3:4899 SYN ******S*
Feb 11 19:25:33 203.146.251.147:1708 -> xxx.yyy.1.4:4899 SYN ******S*
Feb 11 19:25:33 203.146.251.147:1710 -> xxx.yyy.1.5:4899 SYN ******S*
Feb 11 19:25:33 203.146.251.147:1712 -> xxx.yyy.1.6:4899 SYN ******S*
Feb 11 19:25:33 203.146.251.147:1714 -> xxx.yyy.1.7:4899 SYN ******S*
Feb 11 19:25:35 203.146.251.147:1716 -> xxx.yyy.1.8:4899 SYN ******S*
[...]
Feb 11 19:30:40 203.146.251.147:2243 -> xxx.yyy.107.93:4899 SYN ******S*
Feb 11 19:30:40 203.146.251.147:2241 -> xxx.yyy.107.92:4899 SYN ******S*
Feb 11 19:30:40 203.146.251.147:2247 -> xxx.yyy.107.95:4899 SYN ******S*
Feb 11 19:30:40 203.146.251.147:2249 -> xxx.yyy.107.96:4899 SYN ******S*
Feb 11 19:30:41 203.146.251.147:2469 -> xxx.yyy.107.205:4899 SYN ******S*
Feb 11 19:30:41 203.146.251.147:2471 -> xxx.yyy.107.206:4899 SYN ******S*
Feb 11 19:30:41 203.146.251.147:2475 -> xxx.yyy.107.208:4899 SYN ******S*
Feb 11 19:30:41 203.146.251.147:2473 -> xxx.yyy.107.207:4899 SYN ******S*
Feb 11 19:30:41 203.146.251.147:2477 -> xxx.yyy.107.209:4899 SYN ******S*
12636
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list