[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Mon Feb 14 16:10:17 GMT 2005
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Feb 13 09:53:24 83.65.124.105:48504 -> xxx.yyy.1.1:1433 SYN ******S*
Feb 13 09:53:24 83.65.124.105:48507 -> xxx.yyy.1.2:1433 SYN ******S*
Feb 13 09:53:24 83.65.124.105:48508 -> xxx.yyy.1.3:1433 SYN ******S*
Feb 13 09:53:24 83.65.124.105:48509 -> xxx.yyy.1.4:1433 SYN ******S*
Feb 13 09:53:24 83.65.124.105:48510 -> xxx.yyy.1.5:1433 SYN ******S*
Feb 13 09:53:24 83.65.124.105:48511 -> xxx.yyy.1.6:1433 SYN ******S*
Feb 13 09:53:24 83.65.124.105:48512 -> xxx.yyy.1.7:1433 SYN ******S*
Feb 13 09:53:24 83.65.124.105:48514 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
Feb 13 11:48:06 83.65.124.105:51846 -> xxx.yyy.255.247:1433 SYN ******S*
Feb 13 11:48:06 83.65.124.105:51847 -> xxx.yyy.255.248:1433 SYN ******S*
Feb 13 11:48:06 83.65.124.105:51858 -> xxx.yyy.255.249:1433 SYN ******S*
Feb 13 11:48:07 83.65.124.105:51860 -> xxx.yyy.255.250:1433 SYN ******S*
Feb 13 11:48:07 83.65.124.105:51862 -> xxx.yyy.255.251:1433 SYN ******S*
Feb 13 11:48:07 83.65.124.105:51869 -> xxx.yyy.255.252:1433 SYN ******S*
Feb 13 11:48:07 83.65.124.105:51874 -> xxx.yyy.255.253:1433 SYN ******S*
Feb 13 11:48:07 83.65.124.105:51885 -> xxx.yyy.255.254:1433 SYN ******S*
114318
Feb 13 09:50:50 69.226.77.201:4280 -> xxx.yyy.220.2:5900 SYN ******S*
Feb 13 09:50:50 69.226.77.201:4279 -> xxx.yyy.220.2:6101 SYN ******S*
Feb 13 09:50:50 69.226.77.201:4278 -> xxx.yyy.220.2:139 SYN ******S*
Feb 13 09:50:50 69.226.77.201:4277 -> xxx.yyy.220.2:42 SYN ******S*
Feb 13 09:50:47 69.226.77.201:4285 -> xxx.yyy.220.2:4899 SYN ******S*
Feb 13 09:50:50 69.226.77.201:4273 -> xxx.yyy.220.1:4899 SYN ******S*
Feb 13 09:50:50 69.226.77.201:4272 -> xxx.yyy.220.1:5900 SYN ******S*
Feb 13 09:50:50 69.226.77.201:4271 -> xxx.yyy.220.1:6101 SYN ******S*
[...]
Feb 13 16:23:14 69.226.77.201:3953 -> xxx.yyy.220.70:5900 SYN ******S*
Feb 13 16:23:15 69.226.77.201:4000 -> xxx.yyy.220.211:5900 SYN ******S*
Feb 13 16:23:19 69.226.77.201:4156 -> xxx.yyy.220.113:5900 SYN ******S*
Feb 13 16:23:20 69.226.77.201:4167 -> xxx.yyy.220.115:5900 SYN ******S*
Feb 13 16:23:20 69.226.77.201:4168 -> xxx.yyy.220.144:5900 SYN ******S*
Feb 13 16:23:21 69.226.77.201:4230 -> xxx.yyy.220.70:5900 SYN ******S*
Feb 13 16:23:27 69.226.77.201:4320 -> xxx.yyy.220.207:5900 SYN ******S*
Feb 13 16:23:27 69.226.77.201:4457 -> xxx.yyy.220.115:5900 SYN ******S*
Feb 13 16:23:30 69.226.77.201:4457 -> xxx.yyy.220.115:5900 SYN ******S*
89618
Feb 13 16:44:17 206.162.159.61:2709 -> xxx.yyy.1.2:3306 SYN ******S*
Feb 13 16:44:17 206.162.159.61:2713 -> xxx.yyy.1.6:3306 SYN ******S*
Feb 13 16:44:17 206.162.159.61:2714 -> xxx.yyy.1.7:3306 SYN ******S*
Feb 13 16:44:20 206.162.159.61:2715 -> xxx.yyy.1.8:3306 SYN ******S*
Feb 13 16:44:17 206.162.159.61:2717 -> xxx.yyy.1.10:3306 SYN ******S*
Feb 13 16:44:17 206.162.159.61:2720 -> xxx.yyy.1.13:3306 SYN ******S*
Feb 13 16:44:20 206.162.159.61:2722 -> xxx.yyy.1.15:3306 SYN ******S*
Feb 13 16:44:17 206.162.159.61:2723 -> xxx.yyy.1.16:3306 SYN ******S*
[...]
Feb 13 18:55:55 206.162.159.61:1954 -> xxx.yyy.255.243:3306 SYN ******S*
Feb 13 18:55:55 206.162.159.61:1950 -> xxx.yyy.255.239:3306 SYN ******S*
Feb 13 18:55:55 206.162.159.61:1955 -> xxx.yyy.255.244:3306 SYN ******S*
Feb 13 18:55:55 206.162.159.61:1956 -> xxx.yyy.255.245:3306 SYN ******S*
Feb 13 18:55:55 206.162.159.61:1948 -> xxx.yyy.255.237:3306 SYN ******S*
Feb 13 18:55:55 206.162.159.61:1952 -> xxx.yyy.255.241:3306 SYN ******S*
Feb 13 18:55:56 206.162.159.61:1965 -> xxx.yyy.255.254:3306 SYN ******S*
Feb 13 18:55:56 206.162.159.61:1961 -> xxx.yyy.255.250:3306 SYN ******S*
81316
Feb 13 06:50:20 61.249.236.140:2840 -> xxx.yyy.1.1:3306 SYN ******S*
Feb 13 06:50:17 61.249.236.140:2841 -> xxx.yyy.1.2:3306 SYN ******S*
Feb 13 06:50:17 61.249.236.140:2842 -> xxx.yyy.1.3:3306 SYN ******S*
Feb 13 06:50:20 61.249.236.140:2843 -> xxx.yyy.1.4:3306 SYN ******S*
Feb 13 06:50:20 61.249.236.140:2844 -> xxx.yyy.1.5:3306 SYN ******S*
Feb 13 06:50:20 61.249.236.140:2845 -> xxx.yyy.1.6:3306 SYN ******S*
Feb 13 06:50:20 61.249.236.140:2846 -> xxx.yyy.1.7:3306 SYN ******S*
Feb 13 06:50:20 61.249.236.140:2847 -> xxx.yyy.1.8:3306 SYN ******S*
[...]
Feb 13 07:02:04 61.249.236.140:1364 -> xxx.yyy.255.248:3306 SYN ******S*
Feb 13 07:02:04 61.249.236.140:1363 -> xxx.yyy.255.247:3306 SYN ******S*
Feb 13 07:02:04 61.249.236.140:1365 -> xxx.yyy.255.249:3306 SYN ******S*
Feb 13 07:02:04 61.249.236.140:1362 -> xxx.yyy.255.246:3306 SYN ******S*
Feb 13 07:02:04 61.249.236.140:1361 -> xxx.yyy.255.245:3306 SYN ******S*
Feb 13 07:02:04 61.249.236.140:1369 -> xxx.yyy.255.253:3306 SYN ******S*
Feb 13 07:02:04 61.249.236.140:1368 -> xxx.yyy.255.252:3306 SYN ******S*
Feb 13 07:02:04 61.249.236.140:1370 -> xxx.yyy.255.254:3306 SYN ******S*
71900
Feb 13 05:19:23 80.75.10.67:2373 -> xxx.yyy.1.1:3306 SYN ******S*
Feb 13 05:19:23 80.75.10.67:2377 -> xxx.yyy.1.2:3306 SYN ******S*
Feb 13 05:19:26 80.75.10.67:2380 -> xxx.yyy.1.3:3306 SYN ******S*
Feb 13 05:19:26 80.75.10.67:2383 -> xxx.yyy.1.4:3306 SYN ******S*
Feb 13 05:19:26 80.75.10.67:2385 -> xxx.yyy.1.5:3306 SYN ******S*
Feb 13 05:19:26 80.75.10.67:2389 -> xxx.yyy.1.6:3306 SYN ******S*
Feb 13 05:19:26 80.75.10.67:2391 -> xxx.yyy.1.7:3306 SYN ******S*
Feb 13 05:19:26 80.75.10.67:2394 -> xxx.yyy.1.8:3306 SYN ******S*
[...]
Feb 13 05:31:06 80.75.10.67:3966 -> xxx.yyy.255.200:3306 SYN ******S*
Feb 13 05:31:06 80.75.10.67:3979 -> xxx.yyy.255.213:3306 SYN ******S*
Feb 13 05:31:06 80.75.10.67:3978 -> xxx.yyy.255.212:3306 SYN ******S*
Feb 13 05:31:06 80.75.10.67:3976 -> xxx.yyy.255.210:3306 SYN ******S*
Feb 13 05:31:06 80.75.10.67:3975 -> xxx.yyy.255.209:3306 SYN ******S*
Feb 13 05:31:06 80.75.10.67:3977 -> xxx.yyy.255.211:3306 SYN ******S*
Feb 13 05:31:07 80.75.10.67:3984 -> xxx.yyy.255.218:3306 SYN ******S*
Feb 13 05:31:07 80.75.10.67:3986 -> xxx.yyy.255.220:3306 SYN ******S*
Feb 13 05:31:07 80.75.10.67:3985 -> xxx.yyy.255.219:3306 SYN ******S*
71264
Feb 13 18:43:26 211.90.248.108:3128 -> xxx.yyy.1.0:3306 SYN ******S*
Feb 13 18:43:29 211.90.248.108:3133 -> xxx.yyy.1.5:3306 SYN ******S*
Feb 13 18:43:26 211.90.248.108:3131 -> xxx.yyy.1.3:3306 SYN ******S*
Feb 13 18:43:26 211.90.248.108:3136 -> xxx.yyy.1.8:3306 SYN ******S*
Feb 13 18:43:26 211.90.248.108:3134 -> xxx.yyy.1.6:3306 SYN ******S*
Feb 13 18:43:30 211.90.248.108:3137 -> xxx.yyy.1.9:3306 SYN ******S*
Feb 13 18:43:27 211.90.248.108:3139 -> xxx.yyy.1.11:3306 SYN ******S*
Feb 13 18:43:27 211.90.248.108:3142 -> xxx.yyy.1.14:3306 SYN ******S*
[...]
Feb 13 20:33:23 211.90.248.108:3281 -> xxx.yyy.255.244:3306 SYN ******S*
Feb 13 20:33:23 211.90.248.108:3275 -> xxx.yyy.255.238:3306 SYN ******S*
Feb 13 20:33:23 211.90.248.108:3285 -> xxx.yyy.255.248:3306 SYN ******S*
Feb 13 20:33:23 211.90.248.108:3286 -> xxx.yyy.255.249:3306 SYN ******S*
Feb 13 20:33:23 211.90.248.108:3287 -> xxx.yyy.255.250:3306 SYN ******S*
Feb 13 20:33:24 211.90.248.108:3289 -> xxx.yyy.255.252:3306 SYN ******S*
Feb 13 20:33:24 211.90.248.108:3290 -> xxx.yyy.255.253:3306 SYN ******S*
Feb 13 20:33:24 211.90.248.108:3291 -> xxx.yyy.255.254:3306 SYN ******S*
67450
Feb 13 13:10:21 136.206.182.52:1891 -> xxx.yyy.1.1:3306 SYN ******S*
Feb 13 13:10:21 136.206.182.52:1892 -> xxx.yyy.1.2:3306 SYN ******S*
Feb 13 13:10:18 136.206.182.52:1893 -> xxx.yyy.1.3:3306 SYN ******S*
Feb 13 13:10:21 136.206.182.52:1894 -> xxx.yyy.1.4:3306 SYN ******S*
Feb 13 13:10:21 136.206.182.52:1896 -> xxx.yyy.1.6:3306 SYN ******S*
Feb 13 13:10:21 136.206.182.52:1897 -> xxx.yyy.1.7:3306 SYN ******S*
Feb 13 13:10:21 136.206.182.52:1900 -> xxx.yyy.1.10:3306 SYN ******S*
Feb 13 13:10:21 136.206.182.52:1901 -> xxx.yyy.1.11:3306 SYN ******S*
[...]
Feb 13 13:15:09 136.206.182.52:3250 -> xxx.yyy.255.242:3306 SYN ******S*
Feb 13 13:15:09 136.206.182.52:3244 -> xxx.yyy.255.236:3306 SYN ******S*
Feb 13 13:15:09 136.206.182.52:3241 -> xxx.yyy.255.233:3306 SYN ******S*
Feb 13 13:15:09 136.206.182.52:3257 -> xxx.yyy.255.249:3306 SYN ******S*
Feb 13 13:15:09 136.206.182.52:3238 -> xxx.yyy.255.230:3306 SYN ******S*
Feb 13 13:15:09 136.206.182.52:3261 -> xxx.yyy.255.253:3306 SYN ******S*
Feb 13 13:15:09 136.206.182.52:3260 -> xxx.yyy.255.252:3306 SYN ******S*
Feb 13 13:15:09 136.206.182.52:3262 -> xxx.yyy.255.254:3306 SYN ******S*
53386
Feb 13 13:25:25 216.85.114.90:1396 -> xxx.yyy.1.1:1433 SYN ******S*
Feb 13 13:25:28 216.85.114.90:1397 -> xxx.yyy.1.2:1433 SYN ******S*
Feb 13 13:25:28 216.85.114.90:1398 -> xxx.yyy.1.3:1433 SYN ******S*
Feb 13 13:25:28 216.85.114.90:1400 -> xxx.yyy.1.5:1433 SYN ******S*
Feb 13 13:25:25 216.85.114.90:1402 -> xxx.yyy.1.7:1433 SYN ******S*
Feb 13 13:25:28 216.85.114.90:1404 -> xxx.yyy.1.9:1433 SYN ******S*
Feb 13 13:25:26 216.85.114.90:1405 -> xxx.yyy.1.10:1433 SYN ******S*
Feb 13 13:25:28 216.85.114.90:1406 -> xxx.yyy.1.11:1433 SYN ******S*
[...]
Feb 13 13:36:34 216.85.114.90:3401 -> xxx.yyy.255.236:1433 SYN ******S*
Feb 13 13:36:34 216.85.114.90:3406 -> xxx.yyy.255.241:1433 SYN ******S*
Feb 13 13:36:34 216.85.114.90:3402 -> xxx.yyy.255.237:1433 SYN ******S*
Feb 13 13:36:34 216.85.114.90:3411 -> xxx.yyy.255.245:1433 SYN ******S*
Feb 13 13:36:34 216.85.114.90:3420 -> xxx.yyy.255.250:1433 SYN ******S*
Feb 13 13:36:34 216.85.114.90:3417 -> xxx.yyy.255.247:1433 SYN ******S*
Feb 13 13:36:34 216.85.114.90:3418 -> xxx.yyy.255.248:1433 SYN ******S*
Feb 13 13:36:34 216.85.114.90:3419 -> xxx.yyy.255.249:1433 SYN ******S*
Feb 13 13:36:34 216.85.114.90:3423 -> xxx.yyy.255.253:1433 SYN ******S*
48461
Feb 13 17:52:32 129.120.128.212:2040 -> xxx.yyy.1.1:41523 SYN ******S*
Feb 13 17:52:32 129.120.128.212:2041 -> xxx.yyy.1.2:41523 SYN ******S*
Feb 13 17:52:32 129.120.128.212:2042 -> xxx.yyy.1.3:41523 SYN ******S*
Feb 13 17:52:34 129.120.128.212:2044 -> xxx.yyy.1.5:41523 SYN ******S*
Feb 13 17:52:34 129.120.128.212:2045 -> xxx.yyy.1.6:41523 SYN ******S*
Feb 13 17:52:34 129.120.128.212:2046 -> xxx.yyy.1.7:41523 SYN ******S*
Feb 13 17:52:32 129.120.128.212:2047 -> xxx.yyy.1.8:41523 SYN ******S*
Feb 13 17:52:34 129.120.128.212:2049 -> xxx.yyy.1.10:41523 SYN ******S*
[...]
Feb 13 18:03:29 129.120.128.212:1094 -> xxx.yyy.255.245:41523 SYN ******S*
Feb 13 18:03:29 129.120.128.212:1098 -> xxx.yyy.255.249:41523 SYN ******S*
Feb 13 18:03:29 129.120.128.212:1099 -> xxx.yyy.255.250:41523 SYN ******S*
Feb 13 18:03:29 129.120.128.212:1095 -> xxx.yyy.255.246:41523 SYN ******S*
Feb 13 18:03:29 129.120.128.212:1091 -> xxx.yyy.255.242:41523 SYN ******S*
Feb 13 18:03:29 129.120.128.212:1096 -> xxx.yyy.255.247:41523 SYN ******S*
Feb 13 18:03:29 129.120.128.212:1093 -> xxx.yyy.255.244:41523 SYN ******S*
Feb 13 18:03:29 129.120.128.212:1092 -> xxx.yyy.255.243:41523 SYN ******S*
46140
Feb 13 16:05:44 68.112.210.63:1879 -> xxx.yyy.1.1:4000 SYN ******S*
Feb 13 16:05:44 68.112.210.63:1882 -> xxx.yyy.1.2:4000 SYN ******S*
Feb 13 16:05:43 68.112.210.63:1885 -> xxx.yyy.1.3:4000 SYN ******S*
Feb 13 16:05:43 68.112.210.63:1890 -> xxx.yyy.1.5:4000 SYN ******S*
Feb 13 16:05:44 68.112.210.63:1902 -> xxx.yyy.1.9:4000 SYN ******S*
Feb 13 16:05:46 68.112.210.63:1906 -> xxx.yyy.1.10:4000 SYN ******S*
Feb 13 16:05:44 68.112.210.63:1908 -> xxx.yyy.1.11:4000 SYN ******S*
Feb 13 16:05:46 68.112.210.63:1910 -> xxx.yyy.1.12:4000 SYN ******S*
[...]
Feb 13 16:56:45 68.112.210.63:4441 -> xxx.yyy.255.237:4000 SYN ******S*
Feb 13 16:56:45 68.112.210.63:4455 -> xxx.yyy.255.242:4000 SYN ******S*
Feb 13 16:56:46 68.112.210.63:4464 -> xxx.yyy.255.245:4000 SYN ******S*
Feb 13 16:56:46 68.112.210.63:4462 -> xxx.yyy.255.244:4000 SYN ******S*
Feb 13 16:56:46 68.112.210.63:4468 -> xxx.yyy.255.246:4000 SYN ******S*
Feb 13 16:56:46 68.112.210.63:4474 -> xxx.yyy.255.248:4000 SYN ******S*
Feb 13 16:56:46 68.112.210.63:4477 -> xxx.yyy.255.249:4000 SYN ******S*
Feb 13 16:56:46 68.112.210.63:4489 -> xxx.yyy.255.253:4000 SYN ******S*
Feb 13 16:56:46 68.112.210.63:4490 -> xxx.yyy.255.254:4000 SYN ******S*
43070
Feb 13 14:00:22 61.108.9.202:3543 -> xxx.yyy.1.7:3306 SYN ******S*
Feb 13 14:00:22 61.108.9.202:3544 -> xxx.yyy.1.8:3306 SYN ******S*
Feb 13 14:00:22 61.108.9.202:3549 -> xxx.yyy.1.13:3306 SYN ******S*
Feb 13 14:00:25 61.108.9.202:3550 -> xxx.yyy.1.14:3306 SYN ******S*
Feb 13 14:00:25 61.108.9.202:3554 -> xxx.yyy.1.18:3306 SYN ******S*
Feb 13 14:00:25 61.108.9.202:3555 -> xxx.yyy.1.19:3306 SYN ******S*
Feb 13 14:00:25 61.108.9.202:3556 -> xxx.yyy.1.20:3306 SYN ******S*
Feb 13 14:00:23 61.108.9.202:3562 -> xxx.yyy.1.26:3306 SYN ******S*
[...]
Feb 13 14:12:04 61.108.9.202:2321 -> xxx.yyy.255.247:3306 SYN ******S*
Feb 13 14:12:04 61.108.9.202:2315 -> xxx.yyy.255.241:3306 SYN ******S*
Feb 13 14:12:04 61.108.9.202:2319 -> xxx.yyy.255.245:3306 SYN ******S*
Feb 13 14:12:04 61.108.9.202:2320 -> xxx.yyy.255.246:3306 SYN ******S*
Feb 13 14:12:04 61.108.9.202:2322 -> xxx.yyy.255.248:3306 SYN ******S*
Feb 13 14:12:04 61.108.9.202:2318 -> xxx.yyy.255.244:3306 SYN ******S*
Feb 13 14:12:04 61.108.9.202:2324 -> xxx.yyy.255.250:3306 SYN ******S*
Feb 13 14:12:04 61.108.9.202:2328 -> xxx.yyy.255.254:3306 SYN ******S*
41923
Feb 13 06:02:40 129.49.64.147:4995 -> xxx.yyy.1.0:4128 SYN ******S*
Feb 13 06:02:40 129.49.64.147:4996 -> xxx.yyy.1.1:4128 SYN ******S*
Feb 13 06:02:40 129.49.64.147:4997 -> xxx.yyy.1.2:4128 SYN ******S*
Feb 13 06:02:40 129.49.64.147:4998 -> xxx.yyy.1.3:4128 SYN ******S*
Feb 13 06:02:40 129.49.64.147:4999 -> xxx.yyy.1.4:4128 SYN ******S*
Feb 13 06:02:40 129.49.64.147:5000 -> xxx.yyy.1.5:4128 SYN ******S*
Feb 13 06:02:40 129.49.64.147:1025 -> xxx.yyy.1.6:4128 SYN ******S*
Feb 13 06:02:40 129.49.64.147:1026 -> xxx.yyy.1.7:4128 SYN ******S*
[...]
Feb 13 06:04:25 129.49.64.147:1051 -> xxx.yyy.255.162:4128 SYN ******S*
Feb 13 06:04:25 129.49.64.147:1052 -> xxx.yyy.255.163:4128 SYN ******S*
Feb 13 06:04:25 129.49.64.147:1053 -> xxx.yyy.255.164:4128 SYN ******S*
Feb 13 06:04:25 129.49.64.147:1054 -> xxx.yyy.255.165:4128 SYN ******S*
Feb 13 06:04:25 129.49.64.147:1055 -> xxx.yyy.255.166:4128 SYN ******S*
Feb 13 06:04:25 129.49.64.147:1056 -> xxx.yyy.255.167:4128 SYN ******S*
Feb 13 06:04:25 129.49.64.147:1057 -> xxx.yyy.255.168:4128 SYN ******S*
Feb 13 06:04:25 129.49.64.147:1058 -> xxx.yyy.255.169:4128 SYN ******S*
Feb 13 06:04:25 129.49.64.147:1059 -> xxx.yyy.255.170:4128 SYN ******S*
41360
Feb 13 02:10:08 67.149.173.16:4221 -> xxx.yyy.1.2:1433 SYN ******S*
Feb 13 02:10:08 67.149.173.16:4222 -> xxx.yyy.1.3:1433 SYN ******S*
Feb 13 02:10:08 67.149.173.16:4224 -> xxx.yyy.1.5:1433 SYN ******S*
Feb 13 02:10:08 67.149.173.16:4223 -> xxx.yyy.1.4:1433 SYN ******S*
Feb 13 02:10:08 67.149.173.16:4226 -> xxx.yyy.1.6:1433 SYN ******S*
Feb 13 02:10:08 67.149.173.16:4227 -> xxx.yyy.1.8:1433 SYN ******S*
Feb 13 02:10:08 67.149.173.16:4228 -> xxx.yyy.1.9:1433 SYN ******S*
Feb 13 02:10:08 67.149.173.16:4229 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
Feb 13 02:15:29 67.149.173.16:4307 -> xxx.yyy.255.239:1433 SYN ******S*
Feb 13 02:15:29 67.149.173.16:4319 -> xxx.yyy.255.241:1433 SYN ******S*
Feb 13 02:15:29 67.149.173.16:4355 -> xxx.yyy.255.244:1433 SYN ******S*
Feb 13 02:15:29 67.149.173.16:4357 -> xxx.yyy.255.246:1433 SYN ******S*
Feb 13 02:15:29 67.149.173.16:4270 -> xxx.yyy.255.233:1433 SYN ******S*
Feb 13 02:15:29 67.149.173.16:4278 -> xxx.yyy.255.236:1433 SYN ******S*
Feb 13 02:15:29 67.149.173.16:4309 -> xxx.yyy.255.240:1433 SYN ******S*
Feb 13 02:15:29 67.149.173.16:4356 -> xxx.yyy.255.245:1433 SYN ******S*
Feb 13 02:15:29 67.149.173.16:4382 -> xxx.yyy.255.248:1433 SYN ******S*
36378
Feb 13 22:40:34 200.63.30.224:3705 -> xxx.yyy.1.2:1433 SYN ******S*
Feb 13 22:40:34 200.63.30.224:3707 -> xxx.yyy.1.4:1433 SYN ******S*
Feb 13 22:40:34 200.63.30.224:3709 -> xxx.yyy.1.6:1433 SYN ******S*
Feb 13 22:40:34 200.63.30.224:3710 -> xxx.yyy.1.7:1433 SYN ******S*
Feb 13 22:40:37 200.63.30.224:3711 -> xxx.yyy.1.8:1433 SYN ******S*
Feb 13 22:40:34 200.63.30.224:3718 -> xxx.yyy.1.13:1433 SYN ******S*
Feb 13 22:40:37 200.63.30.224:3721 -> xxx.yyy.1.16:1433 SYN ******S*
Feb 13 22:40:37 200.63.30.224:3722 -> xxx.yyy.1.17:1433 SYN ******S*
[...]
Feb 13 22:51:41 200.63.30.224:4388 -> xxx.yyy.255.243:1433 SYN ******S*
Feb 13 22:51:41 200.63.30.224:4386 -> xxx.yyy.255.241:1433 SYN ******S*
Feb 13 22:51:41 200.63.30.224:4383 -> xxx.yyy.255.238:1433 SYN ******S*
Feb 13 22:51:41 200.63.30.224:4390 -> xxx.yyy.255.245:1433 SYN ******S*
Feb 13 22:51:41 200.63.30.224:4387 -> xxx.yyy.255.242:1433 SYN ******S*
Feb 13 22:51:41 200.63.30.224:4398 -> xxx.yyy.255.253:1433 SYN ******S*
Feb 13 22:51:41 200.63.30.224:4399 -> xxx.yyy.255.254:1433 SYN ******S*
Feb 13 22:51:41 200.63.30.224:4396 -> xxx.yyy.255.251:1433 SYN ******S*
Feb 13 22:51:41 200.63.30.224:4394 -> xxx.yyy.255.249:1433 SYN ******S*
35022
Feb 13 20:18:03 62.215.201.133:3431 -> xxx.yyy.1.3:1433 SYN ******S*
Feb 13 20:18:04 62.215.201.133:3447 -> xxx.yyy.1.19:1433 SYN ******S*
Feb 13 20:18:07 62.215.201.133:3437 -> xxx.yyy.1.9:1433 SYN ******S*
Feb 13 20:18:07 62.215.201.133:3440 -> xxx.yyy.1.12:1433 SYN ******S*
Feb 13 20:18:07 62.215.201.133:3454 -> xxx.yyy.1.26:1433 SYN ******S*
Feb 13 20:18:07 62.215.201.133:3442 -> xxx.yyy.1.14:1433 SYN ******S*
Feb 13 20:18:07 62.215.201.133:3446 -> xxx.yyy.1.18:1433 SYN ******S*
Feb 13 20:18:04 62.215.201.133:3459 -> xxx.yyy.1.31:1433 SYN ******S*
[...]
Feb 13 20:29:45 62.215.201.133:2063 -> xxx.yyy.255.230:1433 SYN ******S*
Feb 13 20:29:45 62.215.201.133:2078 -> xxx.yyy.255.245:1433 SYN ******S*
Feb 13 20:29:45 62.215.201.133:2075 -> xxx.yyy.255.242:1433 SYN ******S*
Feb 13 20:29:45 62.215.201.133:2065 -> xxx.yyy.255.232:1433 SYN ******S*
Feb 13 20:29:45 62.215.201.133:2080 -> xxx.yyy.255.247:1433 SYN ******S*
Feb 13 20:29:45 62.215.201.133:2070 -> xxx.yyy.255.237:1433 SYN ******S*
Feb 13 20:29:45 62.215.201.133:2079 -> xxx.yyy.255.246:1433 SYN ******S*
Feb 13 20:29:45 62.215.201.133:2086 -> xxx.yyy.255.253:1433 SYN ******S*
34671
[...]
33212
Feb 13 22:31:57 220.117.178.35:2945 -> xxx.yyy.1.1:3306 SYN ******S*
Feb 13 22:32:00 220.117.178.35:2951 -> xxx.yyy.1.6:3306 SYN ******S*
Feb 13 22:32:00 220.117.178.35:2952 -> xxx.yyy.1.7:3306 SYN ******S*
Feb 13 22:31:57 220.117.178.35:2957 -> xxx.yyy.1.12:3306 SYN ******S*
Feb 13 22:31:57 220.117.178.35:2960 -> xxx.yyy.1.14:3306 SYN ******S*
Feb 13 22:31:57 220.117.178.35:2963 -> xxx.yyy.1.17:3306 SYN ******S*
Feb 13 22:31:57 220.117.178.35:2964 -> xxx.yyy.1.18:3306 SYN ******S*
Feb 13 22:31:57 220.117.178.35:2965 -> xxx.yyy.1.19:3306 SYN ******S*
[...]
Feb 13 22:43:40 220.117.178.35:3105 -> xxx.yyy.255.212:3306 SYN ******S*
Feb 13 22:43:40 220.117.178.35:3106 -> xxx.yyy.255.213:3306 SYN ******S*
Feb 13 22:43:40 220.117.178.35:3102 -> xxx.yyy.255.209:3306 SYN ******S*
Feb 13 22:43:40 220.117.178.35:3103 -> xxx.yyy.255.210:3306 SYN ******S*
Feb 13 22:43:40 220.117.178.35:3101 -> xxx.yyy.255.208:3306 SYN ******S*
Feb 13 22:43:41 220.117.178.35:3113 -> xxx.yyy.255.219:3306 SYN ******S*
Feb 13 22:43:41 220.117.178.35:3124 -> xxx.yyy.255.229:3306 SYN ******S*
Feb 13 22:43:41 220.117.178.35:3152 -> xxx.yyy.255.254:3306 SYN ******S*
33187
Feb 13 20:16:08 202.190.210.149:4997 -> xxx.yyy.1.2:3306 SYN ******S*
Feb 13 20:16:08 202.190.210.149:1036 -> xxx.yyy.1.12:3306 SYN ******S*
Feb 13 20:16:11 202.190.210.149:1047 -> xxx.yyy.1.23:3306 SYN ******S*
Feb 13 20:16:08 202.190.210.149:1054 -> xxx.yyy.1.30:3306 SYN ******S*
Feb 13 20:16:08 202.190.210.149:1056 -> xxx.yyy.1.32:3306 SYN ******S*
Feb 13 20:16:08 202.190.210.149:1059 -> xxx.yyy.1.35:3306 SYN ******S*
Feb 13 20:16:11 202.190.210.149:1073 -> xxx.yyy.1.49:3306 SYN ******S*
Feb 13 20:16:11 202.190.210.149:1076 -> xxx.yyy.1.52:3306 SYN ******S*
[...]
Feb 13 20:19:18 202.190.210.149:4483 -> xxx.yyy.255.250:3306 SYN ******S*
Feb 13 20:19:18 202.190.210.149:4432 -> xxx.yyy.255.199:3306 SYN ******S*
Feb 13 20:19:18 202.190.210.149:4416 -> xxx.yyy.255.183:3306 SYN ******S*
Feb 13 20:19:18 202.190.210.149:4445 -> xxx.yyy.255.212:3306 SYN ******S*
Feb 13 20:19:18 202.190.210.149:4461 -> xxx.yyy.255.228:3306 SYN ******S*
Feb 13 20:19:18 202.190.210.149:4477 -> xxx.yyy.255.244:3306 SYN ******S*
Feb 13 20:19:18 202.190.210.149:4458 -> xxx.yyy.255.225:3306 SYN ******S*
Feb 13 20:19:18 202.190.210.149:4442 -> xxx.yyy.255.209:3306 SYN ******S*
Feb 13 20:19:18 202.190.210.149:4426 -> xxx.yyy.255.193:3306 SYN ******S*
25840
[...]
25270
Feb 13 18:44:49 203.197.125.98:4453 -> xxx.yyy.1.2:21 SYN ******S*
Feb 13 18:44:49 203.197.125.98:4455 -> xxx.yyy.1.4:21 SYN ******S*
Feb 13 18:44:49 203.197.125.98:4456 -> xxx.yyy.1.5:21 SYN ******S*
Feb 13 18:44:49 203.197.125.98:4474 -> xxx.yyy.1.23:21 SYN ******S*
Feb 13 18:44:49 203.197.125.98:4458 -> xxx.yyy.1.7:21 SYN ******S*
Feb 13 18:44:49 203.197.125.98:4459 -> xxx.yyy.1.8:21 SYN ******S*
Feb 13 18:44:49 203.197.125.98:4475 -> xxx.yyy.1.24:21 SYN ******S*
Feb 13 18:44:49 203.197.125.98:4476 -> xxx.yyy.1.25:21 SYN ******S*
[...]
Feb 13 18:55:41 203.197.125.98:2160 -> xxx.yyy.255.243:21 SYN ******S*
Feb 13 18:55:41 203.197.125.98:2159 -> xxx.yyy.255.242:21 SYN ******S*
Feb 13 18:55:41 203.197.125.98:2164 -> xxx.yyy.255.247:21 SYN ******S*
Feb 13 18:55:41 203.197.125.98:2165 -> xxx.yyy.255.248:21 SYN ******S*
Feb 13 18:55:41 203.197.125.98:2166 -> xxx.yyy.255.249:21 SYN ******S*
Feb 13 18:55:41 203.197.125.98:2167 -> xxx.yyy.255.250:21 SYN ******S*
Feb 13 18:55:41 203.197.125.98:2170 -> xxx.yyy.255.253:21 SYN ******S*
Feb 13 18:55:41 203.197.125.98:2171 -> xxx.yyy.255.254:21 SYN ******S*
23221
Feb 13 21:34:26 220.86.31.159:3813 -> xxx.yyy.1.5:4899 SYN ******S*
Feb 13 21:34:26 220.86.31.159:3814 -> xxx.yyy.1.6:4899 SYN ******S*
Feb 13 21:34:26 220.86.31.159:3821 -> xxx.yyy.1.12:4899 SYN ******S*
Feb 13 21:34:27 220.86.31.159:3823 -> xxx.yyy.1.14:4899 SYN ******S*
Feb 13 21:34:26 220.86.31.159:3833 -> xxx.yyy.1.24:4899 SYN ******S*
Feb 13 21:34:27 220.86.31.159:3843 -> xxx.yyy.1.34:4899 SYN ******S*
Feb 13 21:34:26 220.86.31.159:3809 -> xxx.yyy.1.1:4899 SYN ******S*
Feb 13 21:34:27 220.86.31.159:3846 -> xxx.yyy.1.37:4899 SYN ******S*
[...]
Feb 13 21:38:15 220.86.31.159:3622 -> xxx.yyy.255.237:4899 SYN ******S*
Feb 13 21:38:15 220.86.31.159:3615 -> xxx.yyy.255.230:4899 SYN ******S*
Feb 13 21:38:15 220.86.31.159:3625 -> xxx.yyy.255.240:4899 SYN ******S*
Feb 13 21:38:15 220.86.31.159:3626 -> xxx.yyy.255.241:4899 SYN ******S*
Feb 13 21:38:15 220.86.31.159:3630 -> xxx.yyy.255.245:4899 SYN ******S*
Feb 13 21:38:15 220.86.31.159:3631 -> xxx.yyy.255.246:4899 SYN ******S*
Feb 13 21:38:15 220.86.31.159:3633 -> xxx.yyy.255.248:4899 SYN ******S*
Feb 13 21:38:15 220.86.31.159:3634 -> xxx.yyy.255.249:4899 SYN ******S*
Feb 13 21:38:15 220.86.31.159:3635 -> xxx.yyy.255.250:4899 SYN ******S*
21765
Feb 13 07:47:01 128.122.185.88:4770 -> xxx.yyy.1.0:4000 SYN ******S*
Feb 13 07:47:01 128.122.185.88:4772 -> xxx.yyy.1.2:4000 SYN ******S*
Feb 13 07:47:01 128.122.185.88:4771 -> xxx.yyy.1.1:4000 SYN ******S*
Feb 13 07:47:01 128.122.185.88:4773 -> xxx.yyy.1.3:4000 SYN ******S*
Feb 13 07:47:01 128.122.185.88:4774 -> xxx.yyy.1.4:4000 SYN ******S*
Feb 13 07:47:01 128.122.185.88:4775 -> xxx.yyy.1.5:4000 SYN ******S*
Feb 13 07:47:01 128.122.185.88:4776 -> xxx.yyy.1.6:4000 SYN ******S*
Feb 13 07:47:01 128.122.185.88:4777 -> xxx.yyy.1.7:4000 SYN ******S*
[...]
Feb 13 07:47:23 128.122.185.88:4787 -> xxx.yyy.255.247:4000 SYN ******S*
Feb 13 07:47:23 128.122.185.88:4788 -> xxx.yyy.255.248:4000 SYN ******S*
Feb 13 07:47:23 128.122.185.88:4739 -> xxx.yyy.255.249:4000 SYN ******S*
Feb 13 07:47:23 128.122.185.88:4740 -> xxx.yyy.255.250:4000 SYN ******S*
Feb 13 07:47:23 128.122.185.88:4741 -> xxx.yyy.255.251:4000 SYN ******S*
Feb 13 07:47:23 128.122.185.88:4742 -> xxx.yyy.255.252:4000 SYN ******S*
Feb 13 07:47:23 128.122.185.88:4743 -> xxx.yyy.255.253:4000 SYN ******S*
Feb 13 07:47:23 128.122.185.88:4744 -> xxx.yyy.255.254:4000 SYN ******S*
20519
Feb 13 05:51:11 70.58.179.225:51544 -> xxx.yyy.1.5:3632 SYN ******S*
Feb 13 05:51:11 70.58.179.225:51552 -> xxx.yyy.1.13:3632 SYN ******S*
Feb 13 05:51:11 70.58.179.225:51560 -> xxx.yyy.1.21:3632 SYN ******S*
Feb 13 05:51:08 70.58.179.225:51561 -> xxx.yyy.1.22:3632 SYN ******S*
Feb 13 05:51:11 70.58.179.225:51564 -> xxx.yyy.1.25:3632 SYN ******S*
Feb 13 05:51:11 70.58.179.225:51576 -> xxx.yyy.1.37:3632 SYN ******S*
Feb 13 05:51:08 70.58.179.225:51577 -> xxx.yyy.1.38:3632 SYN ******S*
Feb 13 05:51:08 70.58.179.225:51593 -> xxx.yyy.1.54:3632 SYN ******S*
[...]
Feb 13 05:58:32 70.58.179.225:4133 -> xxx.yyy.255.195:3632 SYN ******S*
Feb 13 05:58:32 70.58.179.225:4136 -> xxx.yyy.255.198:3632 SYN ******S*
Feb 13 05:58:32 70.58.179.225:4140 -> xxx.yyy.255.202:3632 SYN ******S*
Feb 13 05:58:32 70.58.179.225:4142 -> xxx.yyy.255.204:3632 SYN ******S*
Feb 13 05:58:32 70.58.179.225:4143 -> xxx.yyy.255.205:3632 SYN ******S*
Feb 13 05:58:32 70.58.179.225:4148 -> xxx.yyy.255.210:3632 SYN ******S*
Feb 13 05:58:32 70.58.179.225:4164 -> xxx.yyy.255.226:3632 SYN ******S*
Feb 13 05:58:32 70.58.179.225:4168 -> xxx.yyy.255.230:3632 SYN ******S*
Feb 13 05:58:32 70.58.179.225:4192 -> xxx.yyy.255.254:3632 SYN ******S*
19289
Feb 13 17:20:24 129.241.82.82:2494 -> xxx.yyy.1.0:6101 SYN ******S*
Feb 13 17:20:24 129.241.82.82:2495 -> xxx.yyy.1.1:6101 SYN ******S*
Feb 13 17:20:24 129.241.82.82:2496 -> xxx.yyy.1.2:6101 SYN ******S*
Feb 13 17:20:24 129.241.82.82:2497 -> xxx.yyy.1.3:6101 SYN ******S*
Feb 13 17:20:24 129.241.82.82:2498 -> xxx.yyy.1.4:6101 SYN ******S*
Feb 13 17:20:24 129.241.82.82:2499 -> xxx.yyy.1.5:6101 SYN ******S*
Feb 13 17:20:24 129.241.82.82:2500 -> xxx.yyy.1.6:6101 SYN ******S*
Feb 13 17:20:24 129.241.82.82:2501 -> xxx.yyy.1.7:6101 SYN ******S*
[...]
Feb 13 17:21:17 129.241.82.82:2500 -> xxx.yyy.255.186:6101 SYN ******S*
Feb 13 17:21:17 129.241.82.82:2473 -> xxx.yyy.255.209:6101 SYN ******S*
Feb 13 17:21:17 129.241.82.82:2474 -> xxx.yyy.255.210:6101 SYN ******S*
Feb 13 17:21:17 129.241.82.82:2475 -> xxx.yyy.255.211:6101 SYN ******S*
Feb 13 17:21:17 129.241.82.82:2476 -> xxx.yyy.255.212:6101 SYN ******S*
Feb 13 17:21:17 129.241.82.82:2477 -> xxx.yyy.255.213:6101 SYN ******S*
Feb 13 17:21:17 129.241.82.82:2478 -> xxx.yyy.255.214:6101 SYN ******S*
Feb 13 17:21:17 129.241.82.82:2479 -> xxx.yyy.255.215:6101 SYN ******S*
Feb 13 17:21:17 129.241.82.82:2480 -> xxx.yyy.255.216:6101 SYN ******S*
18482
Feb 13 11:36:11 61.222.86.160:25191 -> xxx.yyy.1.31:1433 SYN ******S*
Feb 13 11:36:11 61.222.86.160:25192 -> xxx.yyy.1.32:1433 SYN ******S*
Feb 13 11:36:11 61.222.86.160:25194 -> xxx.yyy.1.34:1433 SYN ******S*
Feb 13 11:36:12 61.222.86.160:25195 -> xxx.yyy.1.35:1433 SYN ******S*
Feb 13 11:36:12 61.222.86.160:25196 -> xxx.yyy.1.36:1433 SYN ******S*
Feb 13 11:36:12 61.222.86.160:25197 -> xxx.yyy.1.37:1433 SYN ******S*
Feb 13 11:36:12 61.222.86.160:25198 -> xxx.yyy.1.38:1433 SYN ******S*
Feb 13 11:36:12 61.222.86.160:25199 -> xxx.yyy.1.39:1433 SYN ******S*
[...]
Feb 13 11:49:21 61.222.86.160:13169 -> xxx.yyy.255.246:1433 SYN ******S*
Feb 13 11:49:21 61.222.86.160:13170 -> xxx.yyy.255.243:1433 SYN ******S*
Feb 13 11:49:21 61.222.86.160:13172 -> xxx.yyy.255.240:1433 SYN ******S*
Feb 13 11:49:21 61.222.86.160:13176 -> xxx.yyy.255.250:1433 SYN ******S*
Feb 13 11:49:21 61.222.86.160:13183 -> xxx.yyy.255.254:1433 SYN ******S*
Feb 13 11:49:21 61.222.86.160:13185 -> xxx.yyy.255.251:1433 SYN ******S*
Feb 13 11:49:21 61.222.86.160:13195 -> xxx.yyy.255.249:1433 SYN ******S*
Feb 13 11:49:21 61.222.86.160:13197 -> xxx.yyy.255.252:1433 SYN ******S*
13382
[...]
12576
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list