[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Tue Feb 15 13:50:16 GMT 2005
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Feb 14 02:55:19 216.231.56.179:4340 -> xxx.yyy.1.1:6129 SYN ******S*
Feb 14 02:55:19 216.231.56.179:4341 -> xxx.yyy.1.2:6129 SYN ******S*
Feb 14 02:55:19 216.231.56.179:4342 -> xxx.yyy.1.3:6129 SYN ******S*
Feb 14 02:55:21 216.231.56.179:4343 -> xxx.yyy.1.4:6129 SYN ******S*
Feb 14 02:55:21 216.231.56.179:4345 -> xxx.yyy.1.5:6129 SYN ******S*
Feb 14 02:55:21 216.231.56.179:4346 -> xxx.yyy.1.6:6129 SYN ******S*
Feb 14 02:55:21 216.231.56.179:4349 -> xxx.yyy.1.7:6129 SYN ******S*
Feb 14 02:55:19 216.231.56.179:4350 -> xxx.yyy.1.8:6129 SYN ******S*
[...]
Feb 14 03:20:21 216.231.56.179:4930 -> xxx.yyy.255.241:6129 SYN ******S*
Feb 14 03:20:21 216.231.56.179:4935 -> xxx.yyy.255.244:6129 SYN ******S*
Feb 14 03:20:21 216.231.56.179:4946 -> xxx.yyy.255.254:6129 SYN ******S*
Feb 14 03:20:21 216.231.56.179:4942 -> xxx.yyy.255.251:6129 SYN ******S*
Feb 14 03:20:21 216.231.56.179:4940 -> xxx.yyy.255.249:6129 SYN ******S*
Feb 14 03:20:21 216.231.56.179:4944 -> xxx.yyy.255.252:6129 SYN ******S*
Feb 14 03:20:21 216.231.56.179:4945 -> xxx.yyy.255.253:6129 SYN ******S*
Feb 14 03:20:21 216.231.56.179:4941 -> xxx.yyy.255.250:6129 SYN ******S*
115017
Feb 14 03:32:02 69.22.67.247:2466 -> xxx.yyy.1.2:3306 SYN ******S*
Feb 14 03:32:02 69.22.67.247:2465 -> xxx.yyy.1.1:3306 SYN ******S*
Feb 14 03:32:05 69.22.67.247:2468 -> xxx.yyy.1.4:3306 SYN ******S*
Feb 14 03:32:02 69.22.67.247:2467 -> xxx.yyy.1.3:3306 SYN ******S*
Feb 14 03:32:02 69.22.67.247:2469 -> xxx.yyy.1.5:3306 SYN ******S*
Feb 14 03:32:02 69.22.67.247:2470 -> xxx.yyy.1.6:3306 SYN ******S*
Feb 14 03:32:05 69.22.67.247:2471 -> xxx.yyy.1.7:3306 SYN ******S*
Feb 14 03:32:02 69.22.67.247:2472 -> xxx.yyy.1.8:3306 SYN ******S*
[...]
Feb 14 03:59:03 69.22.67.247:2988 -> xxx.yyy.255.197:3306 SYN ******S*
Feb 14 03:59:03 69.22.67.247:3004 -> xxx.yyy.255.213:3306 SYN ******S*
Feb 14 03:59:03 69.22.67.247:3001 -> xxx.yyy.255.210:3306 SYN ******S*
Feb 14 03:59:03 69.22.67.247:2969 -> xxx.yyy.255.178:3306 SYN ******S*
Feb 14 03:59:03 69.22.67.247:3023 -> xxx.yyy.255.232:3306 SYN ******S*
Feb 14 03:59:03 69.22.67.247:3039 -> xxx.yyy.255.248:3306 SYN ******S*
Feb 14 03:59:03 69.22.67.247:3036 -> xxx.yyy.255.245:3306 SYN ******S*
Feb 14 03:59:03 69.22.67.247:3020 -> xxx.yyy.255.229:3306 SYN ******S*
47407
Feb 14 22:50:52 218.152.182.40:1973 -> xxx.yyy.1.8:4899 SYN ******S*
Feb 14 22:50:52 218.152.182.40:1976 -> xxx.yyy.1.11:4899 SYN ******S*
Feb 14 22:50:53 218.152.182.40:1966 -> xxx.yyy.1.1:4899 SYN ******S*
Feb 14 22:50:52 218.152.182.40:1967 -> xxx.yyy.1.2:4899 SYN ******S*
Feb 14 22:50:52 218.152.182.40:1968 -> xxx.yyy.1.3:4899 SYN ******S*
Feb 14 22:50:52 218.152.182.40:1993 -> xxx.yyy.1.28:4899 SYN ******S*
Feb 14 22:50:55 218.152.182.40:1994 -> xxx.yyy.1.31:4899 SYN ******S*
Feb 14 22:50:52 218.152.182.40:1995 -> xxx.yyy.1.29:4899 SYN ******S*
[...]
Feb 14 23:07:47 218.152.182.40:4609 -> xxx.yyy.255.202:4899 SYN ******S*
Feb 14 23:07:47 218.152.182.40:4629 -> xxx.yyy.255.219:4899 SYN ******S*
Feb 14 23:07:47 218.152.182.40:4626 -> xxx.yyy.255.217:4899 SYN ******S*
Feb 14 23:07:47 218.152.182.40:4680 -> xxx.yyy.255.248:4899 SYN ******S*
Feb 14 23:07:47 218.152.182.40:4610 -> xxx.yyy.255.203:4899 SYN ******S*
Feb 14 23:07:47 218.152.182.40:4640 -> xxx.yyy.255.228:4899 SYN ******S*
Feb 14 23:07:47 218.152.182.40:4648 -> xxx.yyy.255.230:4899 SYN ******S*
Feb 14 23:07:47 218.152.182.40:4646 -> xxx.yyy.255.229:4899 SYN ******S*
46582
Feb 14 01:14:57 69.1.56.143:14074 -> xxx.yyy.1.1:1433 SYN ******S*
Feb 14 01:14:54 69.1.56.143:14075 -> xxx.yyy.1.2:1433 SYN ******S*
Feb 14 01:14:54 69.1.56.143:14077 -> xxx.yyy.1.4:1433 SYN ******S*
Feb 14 01:14:57 69.1.56.143:14078 -> xxx.yyy.1.5:1433 SYN ******S*
Feb 14 01:14:57 69.1.56.143:14079 -> xxx.yyy.1.6:1433 SYN ******S*
Feb 14 01:14:54 69.1.56.143:14080 -> xxx.yyy.1.7:1433 SYN ******S*
Feb 14 01:14:54 69.1.56.143:14081 -> xxx.yyy.1.8:1433 SYN ******S*
Feb 14 01:14:54 69.1.56.143:14083 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
Feb 14 01:26:35 69.1.56.143:20523 -> xxx.yyy.255.234:1433 SYN ******S*
Feb 14 01:26:35 69.1.56.143:20520 -> xxx.yyy.255.231:1433 SYN ******S*
Feb 14 01:26:35 69.1.56.143:20518 -> xxx.yyy.255.229:1433 SYN ******S*
Feb 14 01:26:35 69.1.56.143:20522 -> xxx.yyy.255.233:1433 SYN ******S*
Feb 14 01:26:35 69.1.56.143:20529 -> xxx.yyy.255.240:1433 SYN ******S*
Feb 14 01:26:35 69.1.56.143:20531 -> xxx.yyy.255.242:1433 SYN ******S*
Feb 14 01:26:35 69.1.56.143:20534 -> xxx.yyy.255.245:1433 SYN ******S*
Feb 14 01:26:35 69.1.56.143:20539 -> xxx.yyy.255.250:1433 SYN ******S*
46207
Feb 14 21:53:24 220.71.31.35:3566 -> xxx.yyy.1.3:3306 SYN ******S*
Feb 14 21:53:27 220.71.31.35:3565 -> xxx.yyy.1.2:3306 SYN ******S*
Feb 14 21:53:24 220.71.31.35:3578 -> xxx.yyy.1.12:3306 SYN ******S*
Feb 14 21:53:24 220.71.31.35:3582 -> xxx.yyy.1.16:3306 SYN ******S*
Feb 14 21:53:24 220.71.31.35:3579 -> xxx.yyy.1.13:3306 SYN ******S*
Feb 14 21:53:27 220.71.31.35:3610 -> xxx.yyy.1.29:3306 SYN ******S*
Feb 14 21:53:24 220.71.31.35:3611 -> xxx.yyy.1.30:3306 SYN ******S*
Feb 14 21:53:27 220.71.31.35:3583 -> xxx.yyy.1.17:3306 SYN ******S*
[...]
Feb 14 22:33:15 220.71.31.35:4848 -> xxx.yyy.255.232:3306 SYN ******S*
Feb 14 22:33:15 220.71.31.35:4827 -> xxx.yyy.255.216:3306 SYN ******S*
Feb 14 22:33:15 220.71.31.35:4826 -> xxx.yyy.255.215:3306 SYN ******S*
Feb 14 22:33:15 220.71.31.35:4842 -> xxx.yyy.255.227:3306 SYN ******S*
Feb 14 22:33:15 220.71.31.35:4836 -> xxx.yyy.255.225:3306 SYN ******S*
Feb 14 22:33:15 220.71.31.35:4846 -> xxx.yyy.255.231:3306 SYN ******S*
Feb 14 22:33:15 220.71.31.35:4834 -> xxx.yyy.255.223:3306 SYN ******S*
Feb 14 22:33:15 220.71.31.35:4877 -> xxx.yyy.255.253:3306 SYN ******S*
43368
Feb 14 00:26:38 203.85.122.28:3068 -> xxx.yyy.1.1:3306 SYN ******S*
Feb 14 00:26:35 203.85.122.28:3069 -> xxx.yyy.1.2:3306 SYN ******S*
Feb 14 00:26:35 203.85.122.28:3071 -> xxx.yyy.1.4:3306 SYN ******S*
Feb 14 00:26:35 203.85.122.28:3070 -> xxx.yyy.1.3:3306 SYN ******S*
Feb 14 00:26:38 203.85.122.28:3072 -> xxx.yyy.1.5:3306 SYN ******S*
Feb 14 00:26:35 203.85.122.28:3073 -> xxx.yyy.1.6:3306 SYN ******S*
Feb 14 00:26:35 203.85.122.28:3074 -> xxx.yyy.1.7:3306 SYN ******S*
Feb 14 00:26:38 203.85.122.28:3076 -> xxx.yyy.1.9:3306 SYN ******S*
[...]
Feb 14 00:46:22 203.85.122.28:1403 -> xxx.yyy.255.220:3306 SYN ******S*
Feb 14 00:46:22 203.85.122.28:1404 -> xxx.yyy.255.221:3306 SYN ******S*
Feb 14 00:46:22 203.85.122.28:1437 -> xxx.yyy.255.253:3306 SYN ******S*
Feb 14 00:46:22 203.85.122.28:1408 -> xxx.yyy.255.225:3306 SYN ******S*
Feb 14 00:46:22 203.85.122.28:1425 -> xxx.yyy.255.241:3306 SYN ******S*
Feb 14 00:46:22 203.85.122.28:1400 -> xxx.yyy.255.217:3306 SYN ******S*
Feb 14 00:46:22 203.85.122.28:1412 -> xxx.yyy.255.229:3306 SYN ******S*
Feb 14 00:46:22 203.85.122.28:1420 -> xxx.yyy.255.237:3306 SYN ******S*
Feb 14 00:46:22 203.85.122.28:1396 -> xxx.yyy.255.213:3306 SYN ******S*
40309
Feb 14 23:50:20 209.233.143.131:49395 -> xxx.yyy.1.1:42 SYN ******S*
Feb 14 23:50:20 209.233.143.131:49396 -> xxx.yyy.1.2:42 SYN ******S*
Feb 14 23:50:17 209.233.143.131:49399 -> xxx.yyy.1.5:42 SYN ******S*
Feb 14 23:50:17 209.233.143.131:49400 -> xxx.yyy.1.6:42 SYN ******S*
Feb 14 23:50:17 209.233.143.131:49401 -> xxx.yyy.1.7:42 SYN ******S*
Feb 14 23:50:17 209.233.143.131:49402 -> xxx.yyy.1.8:42 SYN ******S*
Feb 14 23:50:17 209.233.143.131:49403 -> xxx.yyy.1.9:42 SYN ******S*
Feb 14 23:50:17 209.233.143.131:49404 -> xxx.yyy.1.10:42 SYN ******S*
[...]
Feb 14 23:54:27 209.233.143.131:55853 -> xxx.yyy.255.242:42 SYN ******S*
Feb 14 23:54:27 209.233.143.131:55854 -> xxx.yyy.255.243:42 SYN ******S*
Feb 14 23:54:27 209.233.143.131:55855 -> xxx.yyy.255.244:42 SYN ******S*
Feb 14 23:54:27 209.233.143.131:55856 -> xxx.yyy.255.245:42 SYN ******S*
Feb 14 23:54:27 209.233.143.131:55859 -> xxx.yyy.255.248:42 SYN ******S*
Feb 14 23:54:27 209.233.143.131:55861 -> xxx.yyy.255.250:42 SYN ******S*
Feb 14 23:54:27 209.233.143.131:55863 -> xxx.yyy.255.252:42 SYN ******S*
Feb 14 23:54:27 209.233.143.131:55864 -> xxx.yyy.255.253:42 SYN ******S*
40196
Feb 14 21:38:07 194.130.15.221:3342 -> xxx.yyy.1.2:3306 SYN ******S*
Feb 14 21:38:04 194.130.15.221:3344 -> xxx.yyy.1.4:3306 SYN ******S*
Feb 14 21:38:04 194.130.15.221:3345 -> xxx.yyy.1.5:3306 SYN ******S*
Feb 14 21:38:07 194.130.15.221:3346 -> xxx.yyy.1.6:3306 SYN ******S*
Feb 14 21:38:04 194.130.15.221:3348 -> xxx.yyy.1.8:3306 SYN ******S*
Feb 14 21:38:04 194.130.15.221:3349 -> xxx.yyy.1.9:3306 SYN ******S*
Feb 14 21:38:04 194.130.15.221:3351 -> xxx.yyy.1.11:3306 SYN ******S*
Feb 14 21:38:04 194.130.15.221:3353 -> xxx.yyy.1.13:3306 SYN ******S*
[...]
Feb 14 21:49:46 194.130.15.221:2095 -> xxx.yyy.255.238:3306 SYN ******S*
Feb 14 21:49:46 194.130.15.221:2104 -> xxx.yyy.255.247:3306 SYN ******S*
Feb 14 21:49:46 194.130.15.221:2099 -> xxx.yyy.255.242:3306 SYN ******S*
Feb 14 21:49:46 194.130.15.221:2101 -> xxx.yyy.255.244:3306 SYN ******S*
Feb 14 21:49:46 194.130.15.221:2106 -> xxx.yyy.255.249:3306 SYN ******S*
Feb 14 21:49:46 194.130.15.221:2111 -> xxx.yyy.255.254:3306 SYN ******S*
Feb 14 21:49:46 194.130.15.221:2110 -> xxx.yyy.255.253:3306 SYN ******S*
Feb 14 21:49:46 194.130.15.221:2109 -> xxx.yyy.255.252:3306 SYN ******S*
39966
Feb 14 18:00:27 151.201.216.90:2443 -> xxx.yyy.1.3:41523 SYN ******S*
Feb 14 18:00:27 151.201.216.90:2445 -> xxx.yyy.1.5:41523 SYN ******S*
Feb 14 18:00:28 151.201.216.90:2449 -> xxx.yyy.1.9:41523 SYN ******S*
Feb 14 18:00:27 151.201.216.90:2453 -> xxx.yyy.1.13:41523 SYN ******S*
Feb 14 18:00:30 151.201.216.90:2455 -> xxx.yyy.1.15:41523 SYN ******S*
Feb 14 18:00:27 151.201.216.90:2457 -> xxx.yyy.1.17:41523 SYN ******S*
Feb 14 18:00:27 151.201.216.90:2461 -> xxx.yyy.1.21:41523 SYN ******S*
Feb 14 18:00:28 151.201.216.90:2462 -> xxx.yyy.1.22:41523 SYN ******S*
[...]
Feb 14 18:16:23 151.201.216.90:2976 -> xxx.yyy.255.224:41523 SYN ******S*
Feb 14 18:16:23 151.201.216.90:2992 -> xxx.yyy.255.240:41523 SYN ******S*
Feb 14 18:16:23 151.201.216.90:2960 -> xxx.yyy.255.208:41523 SYN ******S*
Feb 14 18:16:23 151.201.216.90:2989 -> xxx.yyy.255.237:41523 SYN ******S*
Feb 14 18:16:23 151.201.216.90:2986 -> xxx.yyy.255.234:41523 SYN ******S*
Feb 14 18:16:23 151.201.216.90:2983 -> xxx.yyy.255.231:41523 SYN ******S*
Feb 14 18:16:23 151.201.216.90:3003 -> xxx.yyy.255.250:41523 SYN ******S*
Feb 14 18:16:24 151.201.216.90:2977 -> xxx.yyy.255.225:41523 SYN ******S*
Feb 14 18:16:24 151.201.216.90:2961 -> xxx.yyy.255.209:41523 SYN ******S*
37562
Feb 14 16:39:45 66.23.215.196:2139 -> xxx.yyy.1.4:41523 SYN ******S*
Feb 14 16:39:45 66.23.215.196:2140 -> xxx.yyy.1.5:41523 SYN ******S*
Feb 14 16:39:45 66.23.215.196:2141 -> xxx.yyy.1.6:41523 SYN ******S*
Feb 14 16:39:45 66.23.215.196:2150 -> xxx.yyy.1.15:41523 SYN ******S*
Feb 14 16:39:46 66.23.215.196:2154 -> xxx.yyy.1.19:41523 SYN ******S*
Feb 14 16:39:46 66.23.215.196:2155 -> xxx.yyy.1.20:41523 SYN ******S*
Feb 14 16:39:45 66.23.215.196:2158 -> xxx.yyy.1.23:41523 SYN ******S*
Feb 14 16:39:48 66.23.215.196:2160 -> xxx.yyy.1.25:41523 SYN ******S*
[...]
Feb 14 16:51:26 66.23.215.196:4730 -> xxx.yyy.255.230:41523 SYN ******S*
Feb 14 16:51:26 66.23.215.196:4734 -> xxx.yyy.255.233:41523 SYN ******S*
Feb 14 16:51:26 66.23.215.196:4746 -> xxx.yyy.255.245:41523 SYN ******S*
Feb 14 16:51:26 66.23.215.196:4743 -> xxx.yyy.255.242:41523 SYN ******S*
Feb 14 16:51:26 66.23.215.196:4756 -> xxx.yyy.255.254:41523 SYN ******S*
Feb 14 16:51:26 66.23.215.196:4753 -> xxx.yyy.255.251:41523 SYN ******S*
Feb 14 16:51:26 66.23.215.196:4750 -> xxx.yyy.255.248:41523 SYN ******S*
Feb 14 16:51:26 66.23.215.196:4751 -> xxx.yyy.255.249:41523 SYN ******S*
37169
Feb 14 13:40:36 201.10.45.3:2672 -> xxx.yyy.1.2:3306 SYN ******S*
Feb 14 13:40:36 201.10.45.3:2673 -> xxx.yyy.1.3:3306 SYN ******S*
Feb 14 13:40:39 201.10.45.3:2679 -> xxx.yyy.1.8:3306 SYN ******S*
Feb 14 13:40:36 201.10.45.3:2681 -> xxx.yyy.1.10:3306 SYN ******S*
Feb 14 13:40:36 201.10.45.3:2682 -> xxx.yyy.1.11:3306 SYN ******S*
Feb 14 13:40:39 201.10.45.3:2685 -> xxx.yyy.1.14:3306 SYN ******S*
Feb 14 13:40:36 201.10.45.3:2687 -> xxx.yyy.1.16:3306 SYN ******S*
Feb 14 13:40:39 201.10.45.3:2689 -> xxx.yyy.1.18:3306 SYN ******S*
[...]
Feb 14 13:53:19 201.10.45.3:1057 -> xxx.yyy.255.238:3306 SYN ******S*
Feb 14 13:53:19 201.10.45.3:1054 -> xxx.yyy.255.235:3306 SYN ******S*
Feb 14 13:53:19 201.10.45.3:1058 -> xxx.yyy.255.239:3306 SYN ******S*
Feb 14 13:53:20 201.10.45.3:1062 -> xxx.yyy.255.243:3306 SYN ******S*
Feb 14 13:53:20 201.10.45.3:1069 -> xxx.yyy.255.250:3306 SYN ******S*
Feb 14 13:53:20 201.10.45.3:1066 -> xxx.yyy.255.247:3306 SYN ******S*
Feb 14 13:53:20 201.10.45.3:1063 -> xxx.yyy.255.244:3306 SYN ******S*
Feb 14 13:53:20 201.10.45.3:1067 -> xxx.yyy.255.248:3306 SYN ******S*
Feb 14 13:53:20 201.10.45.3:1064 -> xxx.yyy.255.245:3306 SYN ******S*
34962
Feb 14 15:46:19 65.162.1.154:2280 -> xxx.yyy.1.1:4000 SYN ******S*
Feb 14 15:46:19 65.162.1.154:2283 -> xxx.yyy.1.4:4000 SYN ******S*
Feb 14 15:46:22 65.162.1.154:2284 -> xxx.yyy.1.5:4000 SYN ******S*
Feb 14 15:46:19 65.162.1.154:2285 -> xxx.yyy.1.6:4000 SYN ******S*
Feb 14 15:46:19 65.162.1.154:2286 -> xxx.yyy.1.7:4000 SYN ******S*
Feb 14 15:46:19 65.162.1.154:2292 -> xxx.yyy.1.13:4000 SYN ******S*
Feb 14 15:46:19 65.162.1.154:2293 -> xxx.yyy.1.14:4000 SYN ******S*
Feb 14 15:46:22 65.162.1.154:2297 -> xxx.yyy.1.18:4000 SYN ******S*
[...]
Feb 14 15:50:07 65.162.1.154:3881 -> xxx.yyy.255.235:4000 SYN ******S*
Feb 14 15:50:07 65.162.1.154:3873 -> xxx.yyy.255.227:4000 SYN ******S*
Feb 14 15:50:07 65.162.1.154:3893 -> xxx.yyy.255.248:4000 SYN ******S*
Feb 14 15:50:07 65.162.1.154:3846 -> xxx.yyy.255.200:4000 SYN ******S*
Feb 14 15:50:07 65.162.1.154:3886 -> xxx.yyy.255.240:4000 SYN ******S*
Feb 14 15:50:07 65.162.1.154:3851 -> xxx.yyy.255.205:4000 SYN ******S*
Feb 14 15:50:07 65.162.1.154:3856 -> xxx.yyy.255.210:4000 SYN ******S*
Feb 14 15:50:07 65.162.1.154:3896 -> xxx.yyy.255.250:4000 SYN ******S*
31651
Feb 14 21:38:06 24.117.104.163:3205 -> xxx.yyy.1.2:3306 SYN ******S*
Feb 14 21:38:09 24.117.104.163:3319 -> xxx.yyy.1.3:3306 SYN ******S*
Feb 14 21:38:09 24.117.104.163:3320 -> xxx.yyy.1.4:3306 SYN ******S*
Feb 14 21:38:09 24.117.104.163:3321 -> xxx.yyy.1.5:3306 SYN ******S*
Feb 14 21:38:09 24.117.104.163:3322 -> xxx.yyy.1.6:3306 SYN ******S*
Feb 14 21:38:09 24.117.104.163:3323 -> xxx.yyy.1.7:3306 SYN ******S*
Feb 14 21:38:09 24.117.104.163:3324 -> xxx.yyy.1.8:3306 SYN ******S*
Feb 14 21:38:09 24.117.104.163:3325 -> xxx.yyy.1.9:3306 SYN ******S*
[...]
Feb 14 22:17:01 24.117.104.163:3977 -> xxx.yyy.255.244:3306 SYN ******S*
Feb 14 22:17:01 24.117.104.163:4039 -> xxx.yyy.255.250:3306 SYN ******S*
Feb 14 22:17:01 24.117.104.163:4040 -> xxx.yyy.255.251:3306 SYN ******S*
Feb 14 22:17:01 24.117.104.163:4041 -> xxx.yyy.255.252:3306 SYN ******S*
Feb 14 22:17:01 24.117.104.163:4042 -> xxx.yyy.255.253:3306 SYN ******S*
Feb 14 22:17:04 24.117.104.163:4039 -> xxx.yyy.255.250:3306 SYN ******S*
Feb 14 22:17:04 24.117.104.163:4041 -> xxx.yyy.255.252:3306 SYN ******S*
Feb 14 22:17:04 24.117.104.163:4042 -> xxx.yyy.255.253:3306 SYN ******S*
30943
Feb 14 17:16:11 61.63.9.85:1548 -> xxx.yyy.1.0:22 SYN ******S*
Feb 14 17:16:11 61.63.9.85:1548 -> xxx.yyy.1.14:22 SYN ******S*
Feb 14 17:16:11 61.63.9.85:1548 -> xxx.yyy.1.15:22 SYN ******S*
Feb 14 17:16:11 61.63.9.85:1548 -> xxx.yyy.1.6:22 SYN ******S*
Feb 14 17:16:11 61.63.9.85:1548 -> xxx.yyy.1.5:22 SYN ******S*
Feb 14 17:16:11 61.63.9.85:1548 -> xxx.yyy.1.21:22 SYN ******S*
Feb 14 17:16:11 61.63.9.85:1548 -> xxx.yyy.1.31:22 SYN ******S*
Feb 14 17:16:11 61.63.9.85:1548 -> xxx.yyy.1.29:22 SYN ******S*
[...]
Feb 14 17:24:54 61.63.9.85:37995 -> xxx.yyy.241.25:22 SYN ******S*
Feb 14 17:24:55 61.63.9.85:37996 -> xxx.yyy.241.24:22 SYN ******S*
Feb 14 17:24:55 61.63.9.85:37997 -> xxx.yyy.241.26:22 SYN ******S*
Feb 14 17:24:55 61.63.9.85:37998 -> xxx.yyy.241.27:22 SYN ******S*
Feb 14 17:24:55 61.63.9.85:37999 -> xxx.yyy.241.36:22 SYN ******S*
Feb 14 17:24:55 61.63.9.85:38000 -> xxx.yyy.241.28:22 SYN ******S*
Feb 14 17:24:56 61.63.9.85:38004 -> xxx.yyy.241.98:22 SYN ******S*
Feb 14 17:24:56 61.63.9.85:38006 -> xxx.yyy.242.12:22 SYN ******S*
Feb 14 17:24:56 61.63.9.85:38009 -> xxx.yyy.243.45:22 SYN ******S*
25316
Feb 14 12:27:08 64.89.115.227:3288 -> xxx.yyy.1.1:6101 SYN ******S*
Feb 14 12:27:08 64.89.115.227:3289 -> xxx.yyy.1.2:6101 SYN ******S*
Feb 14 12:27:11 64.89.115.227:3292 -> xxx.yyy.1.5:6101 SYN ******S*
Feb 14 12:27:08 64.89.115.227:3293 -> xxx.yyy.1.6:6101 SYN ******S*
Feb 14 12:27:08 64.89.115.227:3294 -> xxx.yyy.1.7:6101 SYN ******S*
Feb 14 12:27:08 64.89.115.227:3295 -> xxx.yyy.1.8:6101 SYN ******S*
Feb 14 12:27:08 64.89.115.227:3296 -> xxx.yyy.1.9:6101 SYN ******S*
Feb 14 12:27:11 64.89.115.227:3297 -> xxx.yyy.1.10:6101 SYN ******S*
[...]
Feb 14 12:31:32 64.89.115.227:1321 -> xxx.yyy.255.17:6101 SYN ******S*
Feb 14 12:31:32 64.89.115.227:1254 -> xxx.yyy.254.204:6101 SYN ******S*
Feb 14 12:31:32 64.89.115.227:1412 -> xxx.yyy.255.108:6101 SYN ******S*
Feb 14 12:31:32 64.89.115.227:1404 -> xxx.yyy.255.100:6101 SYN ******S*
Feb 14 12:31:32 64.89.115.227:1408 -> xxx.yyy.255.105:6101 SYN ******S*
Feb 14 12:31:32 64.89.115.227:1401 -> xxx.yyy.255.97:6101 SYN ******S*
Feb 14 12:31:32 64.89.115.227:1369 -> xxx.yyy.255.65:6101 SYN ******S*
Feb 14 12:31:32 64.89.115.227:1377 -> xxx.yyy.255.73:6101 SYN ******S*
Feb 14 12:31:32 64.89.115.227:1444 -> xxx.yyy.255.140:6101 SYN ******S*
25241
Feb 14 00:09:35 67.97.5.197:2759 -> xxx.yyy.1.2:3632 SYN ******S*
Feb 14 00:09:35 67.97.5.197:2708 -> xxx.yyy.1.0:3632 SYN ******S*
Feb 14 00:09:35 67.97.5.197:2790 -> xxx.yyy.1.5:3632 SYN ******S*
Feb 14 00:09:35 67.97.5.197:2801 -> xxx.yyy.1.8:3632 SYN ******S*
Feb 14 00:09:35 67.97.5.197:2803 -> xxx.yyy.1.9:3632 SYN ******S*
Feb 14 00:09:35 67.97.5.197:2794 -> xxx.yyy.1.6:3632 SYN ******S*
Feb 14 00:09:35 67.97.5.197:2797 -> xxx.yyy.1.7:3632 SYN ******S*
Feb 14 00:09:35 67.97.5.197:2355 -> xxx.yyy.1.16:3632 SYN ******S*
[...]
Feb 14 00:11:36 67.97.5.197:2384 -> xxx.yyy.255.248:3632 SYN ******S*
Feb 14 00:11:36 67.97.5.197:2808 -> xxx.yyy.255.241:3632 SYN ******S*
Feb 14 00:11:36 67.97.5.197:2812 -> xxx.yyy.255.242:3632 SYN ******S*
Feb 14 00:11:36 67.97.5.197:2328 -> xxx.yyy.255.245:3632 SYN ******S*
Feb 14 00:11:36 67.97.5.197:2355 -> xxx.yyy.255.246:3632 SYN ******S*
Feb 14 00:11:36 67.97.5.197:2398 -> xxx.yyy.255.249:3632 SYN ******S*
Feb 14 00:11:36 67.97.5.197:2424 -> xxx.yyy.255.251:3632 SYN ******S*
Feb 14 00:11:36 67.97.5.197:2434 -> xxx.yyy.255.252:3632 SYN ******S*
Feb 14 00:11:36 67.97.5.197:2444 -> xxx.yyy.255.253:3632 SYN ******S*
24052
Feb 14 06:40:06 200.173.156.100:31026 -> xxx.yyy.1.0:1433 SYN ******S*
Feb 14 06:40:06 200.173.156.100:31032 -> xxx.yyy.1.1:1433 SYN ******S*
Feb 14 06:40:06 200.173.156.100:31034 -> xxx.yyy.1.2:1433 SYN ******S*
Feb 14 06:40:06 200.173.156.100:31036 -> xxx.yyy.1.3:1433 SYN ******S*
Feb 14 06:40:06 200.173.156.100:31038 -> xxx.yyy.1.4:1433 SYN ******S*
Feb 14 06:40:06 200.173.156.100:31040 -> xxx.yyy.1.5:1433 SYN ******S*
Feb 14 06:40:06 200.173.156.100:31041 -> xxx.yyy.1.6:1433 SYN ******S*
Feb 14 06:40:06 200.173.156.100:31042 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Feb 14 07:55:36 200.173.156.100:41834 -> xxx.yyy.93.59:1433 SYN ******S*
Feb 14 07:55:36 200.173.156.100:41830 -> xxx.yyy.93.57:1433 SYN ******S*
Feb 14 07:55:36 200.173.156.100:41828 -> xxx.yyy.93.56:1433 SYN ******S*
Feb 14 07:55:36 200.173.156.100:41853 -> xxx.yyy.93.67:1433 SYN ******S*
Feb 14 07:55:36 200.173.156.100:41845 -> xxx.yyy.93.63:1433 SYN ******S*
Feb 14 07:55:36 200.173.156.100:41851 -> xxx.yyy.93.68:1433 SYN ******S*
Feb 14 07:55:36 200.173.156.100:41842 -> xxx.yyy.93.64:1433 SYN ******S*
Feb 14 07:55:36 200.173.156.100:38443 -> xxx.yyy.93.69:1433 SYN ******S*
Feb 14 07:55:36 200.173.156.100:38434 -> xxx.yyy.93.66:1433 SYN ******S*
20958
Feb 14 17:15:43 81.41.38.58:1028 -> xxx.yyy.203.1:17300 SYN ******S*
Feb 14 17:15:43 81.41.38.58:1029 -> xxx.yyy.203.2:17300 SYN ******S*
Feb 14 17:15:40 81.41.38.58:1030 -> xxx.yyy.203.3:17300 SYN ******S*
Feb 14 17:15:40 81.41.38.58:1033 -> xxx.yyy.203.6:17300 SYN ******S*
Feb 14 17:15:43 81.41.38.58:1036 -> xxx.yyy.203.9:17300 SYN ******S*
Feb 14 17:15:43 81.41.38.58:1038 -> xxx.yyy.203.11:17300 SYN ******S*
Feb 14 17:15:40 81.41.38.58:1042 -> xxx.yyy.203.15:17300 SYN ******S*
Feb 14 17:15:42 81.41.38.58:1078 -> xxx.yyy.203.21:17300 SYN ******S*
[...]
Feb 14 17:38:06 81.41.38.58:4557 -> xxx.yyy.254.246:17300 SYN ******S*
Feb 14 17:38:06 81.41.38.58:4564 -> xxx.yyy.254.253:17300 SYN ******S*
Feb 14 17:38:06 81.41.38.58:4558 -> xxx.yyy.254.247:17300 SYN ******S*
Feb 14 17:38:06 81.41.38.58:4561 -> xxx.yyy.254.250:17300 SYN ******S*
Feb 14 17:38:06 81.41.38.58:4565 -> xxx.yyy.254.254:17300 SYN ******S*
Feb 14 17:38:06 81.41.38.58:4562 -> xxx.yyy.254.251:17300 SYN ******S*
Feb 14 17:38:06 81.41.38.58:4556 -> xxx.yyy.254.245:17300 SYN ******S*
Feb 14 17:38:06 81.41.38.58:4563 -> xxx.yyy.254.252:17300 SYN ******S*
20899
Feb 14 16:26:58 144.132.202.2:10374 -> xxx.yyy.76.141:6108 SYN ******S*
Feb 14 16:26:59 144.132.202.2:10375 -> xxx.yyy.76.141:6111 SYN ******S*
Feb 14 16:26:59 144.132.202.2:10377 -> xxx.yyy.76.141:6116 SYN ******S*
Feb 14 16:26:59 144.132.202.2:10376 -> xxx.yyy.76.141:6112 SYN ******S*
Feb 14 16:26:57 144.132.202.2:3980 -> xxx.yyy.78.56:6105 SYN ******S*
Feb 14 16:26:59 144.132.202.2:3988 -> xxx.yyy.78.56:6123 SYN ******S*
Feb 14 16:26:59 144.132.202.2:3989 -> xxx.yyy.78.56:6125 SYN ******S*
Feb 14 16:27:02 144.132.202.2:3995 -> xxx.yyy.78.56:6128 SYN ******S*
[...]
Feb 14 22:41:26 144.132.202.2:4682 -> xxx.yyy.78.56:6120 SYN ******S*
Feb 14 22:41:26 144.132.202.2:13835 -> xxx.yyy.76.141:6111 SYN ******S*
Feb 14 22:41:23 144.132.202.2:13836 -> xxx.yyy.76.141:6116 SYN ******S*
Feb 14 22:41:30 144.132.202.2:13836 -> xxx.yyy.76.141:6116 SYN ******S*
Feb 14 22:41:30 144.132.202.2:13835 -> xxx.yyy.76.141:6111 SYN ******S*
Feb 14 22:41:36 144.132.202.2:4685 -> xxx.yyy.78.56:6101 SYN ******S*
Feb 14 22:41:39 144.132.202.2:4685 -> xxx.yyy.78.56:6101 SYN ******S*
Feb 14 22:41:45 144.132.202.2:4686 -> xxx.yyy.78.56:6101 SYN ******S*
Feb 14 22:41:48 144.132.202.2:4686 -> xxx.yyy.78.56:6101 SYN ******S*
20045
Feb 14 14:18:39 141.155.88.82:3919 -> xxx.yyy.1.0:3632 SYN ******S*
Feb 14 14:18:39 141.155.88.82:3874 -> xxx.yyy.1.5:3632 SYN ******S*
Feb 14 14:18:39 141.155.88.82:3877 -> xxx.yyy.1.8:3632 SYN ******S*
Feb 14 14:18:39 141.155.88.82:3884 -> xxx.yyy.1.15:3632 SYN ******S*
Feb 14 14:18:39 141.155.88.82:3890 -> xxx.yyy.1.21:3632 SYN ******S*
Feb 14 14:18:39 141.155.88.82:3891 -> xxx.yyy.1.22:3632 SYN ******S*
Feb 14 14:18:39 141.155.88.82:3892 -> xxx.yyy.1.23:3632 SYN ******S*
Feb 14 14:18:39 141.155.88.82:3893 -> xxx.yyy.1.24:3632 SYN ******S*
[...]
Feb 14 14:23:27 141.155.88.82:3879 -> xxx.yyy.255.240:3632 SYN ******S*
Feb 14 14:23:27 141.155.88.82:3880 -> xxx.yyy.255.241:3632 SYN ******S*
Feb 14 14:23:27 141.155.88.82:3882 -> xxx.yyy.255.243:3632 SYN ******S*
Feb 14 14:23:27 141.155.88.82:3884 -> xxx.yyy.255.245:3632 SYN ******S*
Feb 14 14:23:27 141.155.88.82:3885 -> xxx.yyy.255.246:3632 SYN ******S*
Feb 14 14:23:27 141.155.88.82:3886 -> xxx.yyy.255.247:3632 SYN ******S*
Feb 14 14:23:27 141.155.88.82:3890 -> xxx.yyy.255.251:3632 SYN ******S*
Feb 14 14:23:27 141.155.88.82:3891 -> xxx.yyy.255.252:3632 SYN ******S*
Feb 14 14:23:27 141.155.88.82:3892 -> xxx.yyy.255.253:3632 SYN ******S*
18376
Feb 14 18:43:48 61.166.6.60:29890 -> xxx.yyy.1.0:22 SYN ******S*
Feb 14 18:43:48 61.166.6.60:29890 -> xxx.yyy.1.12:22 SYN ******S*
Feb 14 18:43:48 61.166.6.60:29890 -> xxx.yyy.1.13:22 SYN ******S*
Feb 14 18:43:48 61.166.6.60:29890 -> xxx.yyy.1.14:22 SYN ******S*
Feb 14 18:43:48 61.166.6.60:29890 -> xxx.yyy.1.15:22 SYN ******S*
Feb 14 18:43:48 61.166.6.60:29890 -> xxx.yyy.1.19:22 SYN ******S*
Feb 14 18:43:48 61.166.6.60:29890 -> xxx.yyy.1.25:22 SYN ******S*
Feb 14 18:43:48 61.166.6.60:29890 -> xxx.yyy.1.32:22 SYN ******S*
[...]
Feb 14 18:44:38 61.166.6.60:29890 -> xxx.yyy.255.233:22 SYN ******S*
Feb 14 18:44:38 61.166.6.60:29890 -> xxx.yyy.255.234:22 SYN ******S*
Feb 14 18:44:38 61.166.6.60:29890 -> xxx.yyy.255.235:22 SYN ******S*
Feb 14 18:44:38 61.166.6.60:29890 -> xxx.yyy.255.237:22 SYN ******S*
Feb 14 18:44:38 61.166.6.60:29890 -> xxx.yyy.255.241:22 SYN ******S*
Feb 14 18:44:38 61.166.6.60:29890 -> xxx.yyy.255.246:22 SYN ******S*
Feb 14 18:44:38 61.166.6.60:29890 -> xxx.yyy.255.247:22 SYN ******S*
Feb 14 18:44:38 61.166.6.60:29890 -> xxx.yyy.255.251:22 SYN ******S*
17478
Feb 14 17:17:17 67.92.11.133:21001 -> xxx.yyy.1.8:22 SYN ******S*
Feb 14 17:17:17 67.92.11.133:21005 -> xxx.yyy.1.12:22 SYN ******S*
Feb 14 17:17:17 67.92.11.133:21006 -> xxx.yyy.1.13:22 SYN ******S*
Feb 14 17:17:17 67.92.11.133:21011 -> xxx.yyy.1.18:22 SYN ******S*
Feb 14 17:17:17 67.92.11.133:21066 -> xxx.yyy.1.73:22 SYN ******S*
Feb 14 17:17:17 67.92.11.133:21068 -> xxx.yyy.1.75:22 SYN ******S*
Feb 14 17:17:17 67.92.11.133:21072 -> xxx.yyy.1.79:22 SYN ******S*
Feb 14 17:17:17 67.92.11.133:21073 -> xxx.yyy.1.80:22 SYN ******S*
[...]
Feb 14 17:39:32 67.92.11.133:32929 -> xxx.yyy.243.45:22 SYN ******S*
Feb 14 17:39:36 67.92.11.133:33342 -> xxx.yyy.243.45:22 SYN ******S*
Feb 14 17:39:37 67.92.11.133:33347 -> xxx.yyy.213.66:22 SYN ******S*
Feb 14 17:39:39 67.92.11.133:33749 -> xxx.yyy.242.12:22 SYN ******S*
Feb 14 17:39:39 67.92.11.133:33750 -> xxx.yyy.243.45:22 SYN ******S*
Feb 14 17:39:40 67.92.11.133:33751 -> xxx.yyy.241.72:22 SYN ******S*
Feb 14 17:39:42 67.92.11.133:33758 -> xxx.yyy.243.45:22 SYN ******S*
Feb 14 17:39:42 67.92.11.133:33759 -> xxx.yyy.242.12:22 SYN ******S*
Feb 14 17:39:43 67.92.11.133:33760 -> xxx.yyy.241.72:22 SYN ******S*
16941
Feb 14 13:03:55 211.214.102.99:2911 -> xxx.yyy.1.26:3306 SYN ******S*
Feb 14 13:03:58 211.214.102.99:2924 -> xxx.yyy.1.52:3306 SYN ******S*
Feb 14 13:03:58 211.214.102.99:2930 -> xxx.yyy.1.70:3306 SYN ******S*
Feb 14 13:03:55 211.214.102.99:2933 -> xxx.yyy.1.101:3306 SYN ******S*
Feb 14 13:03:55 211.214.102.99:2934 -> xxx.yyy.1.102:3306 SYN ******S*
Feb 14 13:03:55 211.214.102.99:2942 -> xxx.yyy.1.106:3306 SYN ******S*
Feb 14 13:03:55 211.214.102.99:2944 -> xxx.yyy.1.121:3306 SYN ******S*
Feb 14 13:03:55 211.214.102.99:2948 -> xxx.yyy.1.125:3306 SYN ******S*
[...]
Feb 14 13:10:31 211.214.102.99:1444 -> xxx.yyy.255.190:3306 SYN ******S*
Feb 14 13:10:31 211.214.102.99:1442 -> xxx.yyy.255.188:3306 SYN ******S*
Feb 14 13:10:31 211.214.102.99:1441 -> xxx.yyy.255.187:3306 SYN ******S*
Feb 14 13:10:31 211.214.102.99:1457 -> xxx.yyy.255.200:3306 SYN ******S*
Feb 14 13:10:31 211.214.102.99:1660 -> xxx.yyy.255.252:3306 SYN ******S*
Feb 14 13:10:31 211.214.102.99:1647 -> xxx.yyy.255.239:3306 SYN ******S*
Feb 14 13:10:31 211.214.102.99:1650 -> xxx.yyy.255.242:3306 SYN ******S*
Feb 14 13:10:31 211.214.102.99:1639 -> xxx.yyy.255.233:3306 SYN ******S*
16446
[...]
12163
[...]
11612
Feb 14 17:50:42 210.64.109.66:62093 -> xxx.yyy.1.99:22 SYN ******S*
Feb 14 17:50:42 210.64.109.66:62093 -> xxx.yyy.1.100:22 SYN ******S*
Feb 14 17:50:42 210.64.109.66:62093 -> xxx.yyy.1.102:22 SYN ******S*
Feb 14 17:50:42 210.64.109.66:62093 -> xxx.yyy.1.104:22 SYN ******S*
Feb 14 17:50:42 210.64.109.66:62093 -> xxx.yyy.1.107:22 SYN ******S*
Feb 14 17:50:42 210.64.109.66:62093 -> xxx.yyy.1.109:22 SYN ******S*
Feb 14 17:50:42 210.64.109.66:62093 -> xxx.yyy.1.110:22 SYN ******S*
Feb 14 17:50:42 210.64.109.66:62093 -> xxx.yyy.1.116:22 SYN ******S*
[...]
Feb 14 17:52:26 210.64.109.66:43717 -> xxx.yyy.241.98:22 SYN ******S*
Feb 14 17:52:26 210.64.109.66:43719 -> xxx.yyy.248.17:22 SYN ******S*
Feb 14 17:52:26 210.64.109.66:43720 -> xxx.yyy.248.18:22 SYN ******S*
Feb 14 17:52:27 210.64.109.66:43722 -> xxx.yyy.230.181:22 SYN ******S*
Feb 14 17:52:27 210.64.109.66:43723 -> xxx.yyy.230.39:22 SYN ******S*
Feb 14 17:52:27 210.64.109.66:43724 -> xxx.yyy.243.45:22 SYN ******S*
Feb 14 17:52:27 210.64.109.66:43725 -> xxx.yyy.229.41:22 SYN ******S*
Feb 14 17:52:29 210.64.109.66:43726 -> xxx.yyy.241.72:22 SYN ******S*
11600
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list