[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Thu Feb 17 02:29:21 GMT 2005
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Feb 15 21:33:44 218.23.199.180:4482 -> xxx.yyy.1.0:2301 SYN ******S*
Feb 15 21:33:43 218.23.199.180:4485 -> xxx.yyy.1.0:8000 SYN ******S*
Feb 15 21:33:43 218.23.199.180:4506 -> xxx.yyy.1.1:8000 SYN ******S*
Feb 15 21:33:42 218.23.199.180:4510 -> xxx.yyy.1.1:80 SYN ******S*
Feb 15 21:33:42 218.23.199.180:4516 -> xxx.yyy.1.2:8080 SYN ******S*
Feb 15 21:33:43 218.23.199.180:4521 -> xxx.yyy.1.2:80 SYN ******S*
Feb 15 21:33:43 218.23.199.180:4535 -> xxx.yyy.1.4:2301 SYN ******S*
Feb 15 21:33:43 218.23.199.180:4539 -> xxx.yyy.1.4:8000 SYN ******S*
[...]
Feb 15 22:51:56 218.23.199.180:4946 -> xxx.yyy.253.68:8000 SYN ******S*
Feb 15 22:51:59 218.23.199.180:4947 -> xxx.yyy.253.72:80 SYN ******S*
Feb 15 22:51:57 218.23.199.180:4040 -> xxx.yyy.224.141:80 SYN ******S*
Feb 15 22:51:57 218.23.199.180:4129 -> xxx.yyy.227.9:8080 SYN ******S*
Feb 15 22:51:57 218.23.199.180:4287 -> xxx.yyy.236.22:80 SYN ******S*
Feb 15 22:51:58 218.23.199.180:4403 -> xxx.yyy.240.10:80 SYN ******S*
Feb 15 22:51:58 218.23.199.180:4805 -> xxx.yyy.241.184:80 SYN ******S*
Feb 15 22:51:59 218.23.199.180:4941 -> xxx.yyy.252.95:8000 SYN ******S*
Feb 15 22:52:01 218.23.199.180:3866 -> xxx.yyy.14.35:80 SYN ******S*
207982
Feb 15 05:50:21 82.213.100.7:4933 -> xxx.yyy.1.1:1433 SYN ******S*
Feb 15 05:50:21 82.213.100.7:4934 -> xxx.yyy.1.2:1433 SYN ******S*
Feb 15 05:50:21 82.213.100.7:4935 -> xxx.yyy.1.3:1433 SYN ******S*
Feb 15 05:50:21 82.213.100.7:4936 -> xxx.yyy.1.4:1433 SYN ******S*
Feb 15 05:50:21 82.213.100.7:4937 -> xxx.yyy.1.5:1433 SYN ******S*
Feb 15 05:50:21 82.213.100.7:4938 -> xxx.yyy.1.6:1433 SYN ******S*
Feb 15 05:50:21 82.213.100.7:4939 -> xxx.yyy.1.7:1433 SYN ******S*
Feb 15 05:50:18 82.213.100.7:4940 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Feb 15 06:01:59 82.213.100.7:3454 -> xxx.yyy.255.246:1433 SYN ******S*
Feb 15 06:01:59 82.213.100.7:3455 -> xxx.yyy.255.247:1433 SYN ******S*
Feb 15 06:01:59 82.213.100.7:3452 -> xxx.yyy.255.244:1433 SYN ******S*
Feb 15 06:01:59 82.213.100.7:3458 -> xxx.yyy.255.250:1433 SYN ******S*
Feb 15 06:01:59 82.213.100.7:3457 -> xxx.yyy.255.249:1433 SYN ******S*
Feb 15 06:01:59 82.213.100.7:3460 -> xxx.yyy.255.252:1433 SYN ******S*
Feb 15 06:01:59 82.213.100.7:3462 -> xxx.yyy.255.254:1433 SYN ******S*
Feb 15 06:01:59 82.213.100.7:3461 -> xxx.yyy.255.253:1433 SYN ******S*
71468
Feb 15 06:21:11 129.174.51.120:2138 -> xxx.yyy.1.1:4000 SYN ******S*
Feb 15 06:21:11 129.174.51.120:2139 -> xxx.yyy.1.2:4000 SYN ******S*
Feb 15 06:21:11 129.174.51.120:2140 -> xxx.yyy.1.3:4000 SYN ******S*
Feb 15 06:21:13 129.174.51.120:2141 -> xxx.yyy.1.4:4000 SYN ******S*
Feb 15 06:21:13 129.174.51.120:2142 -> xxx.yyy.1.5:4000 SYN ******S*
Feb 15 06:21:13 129.174.51.120:2143 -> xxx.yyy.1.6:4000 SYN ******S*
Feb 15 06:21:13 129.174.51.120:2144 -> xxx.yyy.1.7:4000 SYN ******S*
Feb 15 06:21:11 129.174.51.120:2145 -> xxx.yyy.1.8:4000 SYN ******S*
[...]
Feb 15 06:32:33 129.174.51.120:4564 -> xxx.yyy.255.247:4000 SYN ******S*
Feb 15 06:32:33 129.174.51.120:4565 -> xxx.yyy.255.248:4000 SYN ******S*
Feb 15 06:32:33 129.174.51.120:4561 -> xxx.yyy.255.244:4000 SYN ******S*
Feb 15 06:32:33 129.174.51.120:4559 -> xxx.yyy.255.242:4000 SYN ******S*
Feb 15 06:32:33 129.174.51.120:4562 -> xxx.yyy.255.245:4000 SYN ******S*
Feb 15 06:32:33 129.174.51.120:4571 -> xxx.yyy.255.252:4000 SYN ******S*
Feb 15 06:32:33 129.174.51.120:4573 -> xxx.yyy.255.254:4000 SYN ******S*
Feb 15 06:32:33 129.174.51.120:4572 -> xxx.yyy.255.253:4000 SYN ******S*
70089
Feb 15 03:41:23 211.198.225.48:3582 -> xxx.yyy.1.4:3306 SYN ******S*
Feb 15 03:41:26 211.198.225.48:3580 -> xxx.yyy.1.2:3306 SYN ******S*
Feb 15 03:41:26 211.198.225.48:3583 -> xxx.yyy.1.5:3306 SYN ******S*
Feb 15 03:41:26 211.198.225.48:3585 -> xxx.yyy.1.6:3306 SYN ******S*
Feb 15 03:41:26 211.198.225.48:3587 -> xxx.yyy.1.8:3306 SYN ******S*
Feb 15 03:41:26 211.198.225.48:3588 -> xxx.yyy.1.9:3306 SYN ******S*
Feb 15 03:41:26 211.198.225.48:3589 -> xxx.yyy.1.10:3306 SYN ******S*
Feb 15 03:41:26 211.198.225.48:3590 -> xxx.yyy.1.11:3306 SYN ******S*
[...]
Feb 15 03:53:10 211.198.225.48:2471 -> xxx.yyy.255.250:3306 SYN ******S*
Feb 15 03:53:10 211.198.225.48:2466 -> xxx.yyy.255.245:3306 SYN ******S*
Feb 15 03:53:10 211.198.225.48:2473 -> xxx.yyy.255.251:3306 SYN ******S*
Feb 15 03:53:10 211.198.225.48:2469 -> xxx.yyy.255.248:3306 SYN ******S*
Feb 15 03:53:10 211.198.225.48:2470 -> xxx.yyy.255.249:3306 SYN ******S*
Feb 15 03:53:11 211.198.225.48:2468 -> xxx.yyy.255.247:3306 SYN ******S*
Feb 15 03:53:11 211.198.225.48:2467 -> xxx.yyy.255.246:3306 SYN ******S*
Feb 15 03:53:11 211.198.225.48:2476 -> xxx.yyy.255.254:3306 SYN ******S*
68945
Feb 15 10:41:23 217.64.96.229:36795 -> xxx.yyy.234.110:80 SYN ******S*
Feb 15 10:41:23 217.64.96.229:36798 -> xxx.yyy.234.113:80 SYN ******S*
Feb 15 10:41:23 217.64.96.229:36799 -> xxx.yyy.234.114:80 SYN ******S*
Feb 15 10:41:23 217.64.96.229:36801 -> xxx.yyy.234.116:80 SYN ******S*
Feb 15 10:41:23 217.64.96.229:36800 -> xxx.yyy.234.115:80 SYN ******S*
Feb 15 10:41:23 217.64.96.229:36802 -> xxx.yyy.234.117:80 SYN ******S*
Feb 15 10:41:23 217.64.96.229:36804 -> xxx.yyy.234.119:80 SYN ******S*
Feb 15 10:41:26 217.64.96.229:36805 -> xxx.yyy.234.120:80 SYN ******S*
[...]
Feb 15 11:46:28 217.64.96.229:36427 -> xxx.yyy.255.241:80 SYN ******S*
Feb 15 11:46:28 217.64.96.229:36428 -> xxx.yyy.255.242:80 SYN ******S*
Feb 15 11:46:28 217.64.96.229:36429 -> xxx.yyy.255.243:80 SYN ******S*
Feb 15 11:46:28 217.64.96.229:36433 -> xxx.yyy.255.247:80 SYN ******S*
Feb 15 11:46:28 217.64.96.229:36434 -> xxx.yyy.255.248:80 SYN ******S*
Feb 15 11:46:28 217.64.96.229:36436 -> xxx.yyy.255.250:80 SYN ******S*
Feb 15 11:46:28 217.64.96.229:36437 -> xxx.yyy.255.251:80 SYN ******S*
Feb 15 11:46:28 217.64.96.229:36438 -> xxx.yyy.255.252:80 SYN ******S*
67415
Feb 15 01:42:52 24.232.211.16:2280 -> xxx.yyy.1.1:6106 SYN ******S*
Feb 15 01:42:52 24.232.211.16:2282 -> xxx.yyy.1.3:6106 SYN ******S*
Feb 15 01:42:52 24.232.211.16:2281 -> xxx.yyy.1.2:6106 SYN ******S*
Feb 15 01:42:54 24.232.211.16:2283 -> xxx.yyy.1.4:6106 SYN ******S*
Feb 15 01:42:51 24.232.211.16:2285 -> xxx.yyy.1.6:6106 SYN ******S*
Feb 15 01:42:52 24.232.211.16:2287 -> xxx.yyy.1.8:6106 SYN ******S*
Feb 15 01:42:51 24.232.211.16:2284 -> xxx.yyy.1.5:6106 SYN ******S*
Feb 15 01:42:54 24.232.211.16:2286 -> xxx.yyy.1.7:6106 SYN ******S*
[...]
Feb 15 01:55:08 24.232.211.16:4485 -> xxx.yyy.255.242:6106 SYN ******S*
Feb 15 01:55:08 24.232.211.16:4487 -> xxx.yyy.255.244:6106 SYN ******S*
Feb 15 01:55:08 24.232.211.16:4484 -> xxx.yyy.255.241:6106 SYN ******S*
Feb 15 01:55:08 24.232.211.16:4495 -> xxx.yyy.255.252:6106 SYN ******S*
Feb 15 01:55:08 24.232.211.16:4492 -> xxx.yyy.255.249:6106 SYN ******S*
Feb 15 01:55:08 24.232.211.16:4497 -> xxx.yyy.255.254:6106 SYN ******S*
Feb 15 01:55:08 24.232.211.16:4494 -> xxx.yyy.255.251:6106 SYN ******S*
Feb 15 01:55:08 24.232.211.16:4496 -> xxx.yyy.255.253:6106 SYN ******S*
Feb 15 01:55:08 24.232.211.16:4493 -> xxx.yyy.255.250:6106 SYN ******S*
64274
Feb 15 04:39:56 61.31.177.215:4142 -> xxx.yyy.170.39:1433 SYN ******S*
Feb 15 04:39:56 61.31.177.215:4144 -> xxx.yyy.170.40:1433 SYN ******S*
Feb 15 04:39:56 61.31.177.215:4147 -> xxx.yyy.170.41:1433 SYN ******S*
Feb 15 04:39:56 61.31.177.215:4149 -> xxx.yyy.170.42:1433 SYN ******S*
Feb 15 04:39:56 61.31.177.215:4151 -> xxx.yyy.170.43:1433 SYN ******S*
Feb 15 04:39:56 61.31.177.215:4153 -> xxx.yyy.170.44:1433 SYN ******S*
Feb 15 04:39:56 61.31.177.215:4155 -> xxx.yyy.170.45:1433 SYN ******S*
Feb 15 04:39:56 61.31.177.215:4157 -> xxx.yyy.170.46:1433 SYN ******S*
[...]
Feb 15 05:56:49 61.31.177.215:4123 -> xxx.yyy.255.244:1433 SYN ******S*
Feb 15 05:56:50 61.31.177.215:4130 -> xxx.yyy.255.250:1433 SYN ******S*
Feb 15 05:56:50 61.31.177.215:4129 -> xxx.yyy.255.249:1433 SYN ******S*
Feb 15 05:56:50 61.31.177.215:4128 -> xxx.yyy.255.248:1433 SYN ******S*
Feb 15 05:56:50 61.31.177.215:4127 -> xxx.yyy.255.247:1433 SYN ******S*
Feb 15 05:56:50 61.31.177.215:4133 -> xxx.yyy.255.253:1433 SYN ******S*
Feb 15 05:56:50 61.31.177.215:4132 -> xxx.yyy.255.252:1433 SYN ******S*
Feb 15 05:56:50 61.31.177.215:4131 -> xxx.yyy.255.251:1433 SYN ******S*
Feb 15 05:56:50 61.31.177.215:4134 -> xxx.yyy.255.254:1433 SYN ******S*
58686
Feb 15 06:51:28 81.101.153.18:3287 -> xxx.yyy.1.1:42 SYN ******S*
Feb 15 06:51:28 81.101.153.18:3288 -> xxx.yyy.1.2:42 SYN ******S*
Feb 15 06:51:28 81.101.153.18:3289 -> xxx.yyy.1.3:42 SYN ******S*
Feb 15 06:51:28 81.101.153.18:3290 -> xxx.yyy.1.4:42 SYN ******S*
Feb 15 06:51:28 81.101.153.18:3291 -> xxx.yyy.1.5:42 SYN ******S*
Feb 15 06:51:28 81.101.153.18:3292 -> xxx.yyy.1.6:42 SYN ******S*
Feb 15 06:51:28 81.101.153.18:3293 -> xxx.yyy.1.7:42 SYN ******S*
Feb 15 06:51:28 81.101.153.18:3294 -> xxx.yyy.1.8:42 SYN ******S*
[...]
Feb 15 07:08:24 81.101.153.18:4546 -> xxx.yyy.255.246:42 SYN ******S*
Feb 15 07:08:24 81.101.153.18:4547 -> xxx.yyy.255.247:42 SYN ******S*
Feb 15 07:08:24 81.101.153.18:4548 -> xxx.yyy.255.248:42 SYN ******S*
Feb 15 07:08:24 81.101.153.18:4549 -> xxx.yyy.255.249:42 SYN ******S*
Feb 15 07:08:24 81.101.153.18:4550 -> xxx.yyy.255.250:42 SYN ******S*
Feb 15 07:08:24 81.101.153.18:4551 -> xxx.yyy.255.251:42 SYN ******S*
Feb 15 07:08:24 81.101.153.18:4552 -> xxx.yyy.255.252:42 SYN ******S*
Feb 15 07:08:25 81.101.153.18:4553 -> xxx.yyy.255.253:42 SYN ******S*
Feb 15 07:08:25 81.101.153.18:4554 -> xxx.yyy.255.254:42 SYN ******S*
43875
Feb 15 02:29:57 61.31.169.94:1112 -> xxx.yyy.1.1:4899 SYN ******S*
Feb 15 02:29:56 61.31.169.94:1113 -> xxx.yyy.1.2:4899 SYN ******S*
Feb 15 02:29:57 61.31.169.94:1114 -> xxx.yyy.1.3:4899 SYN ******S*
Feb 15 02:29:56 61.31.169.94:1115 -> xxx.yyy.1.4:4899 SYN ******S*
Feb 15 02:29:56 61.31.169.94:1116 -> xxx.yyy.1.5:4899 SYN ******S*
Feb 15 02:29:59 61.31.169.94:1117 -> xxx.yyy.1.6:4899 SYN ******S*
Feb 15 02:29:59 61.31.169.94:1118 -> xxx.yyy.1.7:4899 SYN ******S*
Feb 15 02:29:56 61.31.169.94:1119 -> xxx.yyy.1.8:4899 SYN ******S*
[...]
Feb 15 02:33:49 61.31.169.94:2588 -> xxx.yyy.254.197:4899 SYN ******S*
Feb 15 02:33:49 61.31.169.94:2601 -> xxx.yyy.254.210:4899 SYN ******S*
Feb 15 02:33:49 61.31.169.94:2590 -> xxx.yyy.254.199:4899 SYN ******S*
Feb 15 02:33:49 61.31.169.94:2585 -> xxx.yyy.254.194:4899 SYN ******S*
Feb 15 02:33:49 61.31.169.94:2587 -> xxx.yyy.254.196:4899 SYN ******S*
Feb 15 02:33:49 61.31.169.94:2595 -> xxx.yyy.254.204:4899 SYN ******S*
Feb 15 02:33:49 61.31.169.94:2576 -> xxx.yyy.254.185:4899 SYN ******S*
Feb 15 02:33:49 61.31.169.94:2589 -> xxx.yyy.254.198:4899 SYN ******S*
37323
Feb 15 13:00:47 148.223.180.50:4732 -> xxx.yyy.1.3:1433 SYN ******S*
Feb 15 13:00:50 148.223.180.50:4733 -> xxx.yyy.1.4:1433 SYN ******S*
Feb 15 13:00:47 148.223.180.50:4737 -> xxx.yyy.1.6:1433 SYN ******S*
Feb 15 13:00:50 148.223.180.50:4756 -> xxx.yyy.1.10:1433 SYN ******S*
Feb 15 13:00:50 148.223.180.50:4760 -> xxx.yyy.1.11:1433 SYN ******S*
Feb 15 13:00:50 148.223.180.50:4762 -> xxx.yyy.1.12:1433 SYN ******S*
Feb 15 13:00:47 148.223.180.50:4775 -> xxx.yyy.1.16:1433 SYN ******S*
Feb 15 13:00:50 148.223.180.50:4781 -> xxx.yyy.1.17:1433 SYN ******S*
[...]
Feb 15 13:12:28 148.223.180.50:3104 -> xxx.yyy.255.250:1433 SYN ******S*
Feb 15 13:12:28 148.223.180.50:3101 -> xxx.yyy.255.247:1433 SYN ******S*
Feb 15 13:12:28 148.223.180.50:3100 -> xxx.yyy.255.246:1433 SYN ******S*
Feb 15 13:12:28 148.223.180.50:3097 -> xxx.yyy.255.243:1433 SYN ******S*
Feb 15 13:12:28 148.223.180.50:3107 -> xxx.yyy.255.253:1433 SYN ******S*
Feb 15 13:12:29 148.223.180.50:4682 -> xxx.yyy.255.21:1433 SYN ******S*
Feb 15 13:12:30 148.223.180.50:4666 -> xxx.yyy.255.10:1433 SYN ******S*
Feb 15 13:12:31 148.223.180.50:3012 -> xxx.yyy.255.162:1433 SYN ******S*
35262
Feb 15 17:16:53 66.15.67.64:57902 -> xxx.yyy.1.15:41523 SYN ******S*
Feb 15 17:16:51 66.15.67.64:57904 -> xxx.yyy.1.13:41523 SYN ******S*
Feb 15 17:16:52 66.15.67.64:57905 -> xxx.yyy.1.14:41523 SYN ******S*
Feb 15 17:16:51 66.15.67.64:57907 -> xxx.yyy.1.12:41523 SYN ******S*
Feb 15 17:16:52 66.15.67.64:57911 -> xxx.yyy.1.8:41523 SYN ******S*
Feb 15 17:16:51 66.15.67.64:57913 -> xxx.yyy.1.6:41523 SYN ******S*
Feb 15 17:16:52 66.15.67.64:57914 -> xxx.yyy.1.3:41523 SYN ******S*
Feb 15 17:16:52 66.15.67.64:57917 -> xxx.yyy.1.2:41523 SYN ******S*
[...]
Feb 15 17:26:19 66.15.67.64:53463 -> xxx.yyy.255.214:41523 SYN ******S*
Feb 15 17:26:19 66.15.67.64:53466 -> xxx.yyy.255.217:41523 SYN ******S*
Feb 15 17:26:19 66.15.67.64:53469 -> xxx.yyy.255.220:41523 SYN ******S*
Feb 15 17:26:19 66.15.67.64:53460 -> xxx.yyy.255.212:41523 SYN ******S*
Feb 15 17:26:19 66.15.67.64:53467 -> xxx.yyy.255.218:41523 SYN ******S*
Feb 15 17:26:19 66.15.67.64:53470 -> xxx.yyy.255.221:41523 SYN ******S*
Feb 15 17:26:19 66.15.67.64:53493 -> xxx.yyy.255.241:41523 SYN ******S*
Feb 15 17:26:19 66.15.67.64:53497 -> xxx.yyy.255.244:41523 SYN ******S*
Feb 15 17:26:19 66.15.67.64:53504 -> xxx.yyy.255.251:41523 SYN ******S*
33912
Feb 15 20:56:47 216.56.56.49:1972 -> xxx.yyy.1.1:5900 SYN ******S*
Feb 15 20:56:50 216.56.56.49:1975 -> xxx.yyy.1.4:5900 SYN ******S*
Feb 15 20:56:47 216.56.56.49:1980 -> xxx.yyy.1.9:5900 SYN ******S*
Feb 15 20:56:50 216.56.56.49:1981 -> xxx.yyy.1.10:5900 SYN ******S*
Feb 15 20:56:47 216.56.56.49:1983 -> xxx.yyy.1.12:5900 SYN ******S*
Feb 15 20:56:50 216.56.56.49:1984 -> xxx.yyy.1.13:5900 SYN ******S*
Feb 15 20:56:48 216.56.56.49:1985 -> xxx.yyy.1.14:5900 SYN ******S*
Feb 15 20:56:50 216.56.56.49:1986 -> xxx.yyy.1.15:5900 SYN ******S*
[...]
Feb 15 21:12:41 216.56.56.49:3574 -> xxx.yyy.255.129:5900 SYN ******S*
Feb 15 21:12:41 216.56.56.49:3660 -> xxx.yyy.255.214:5900 SYN ******S*
Feb 15 21:12:41 216.56.56.49:3607 -> xxx.yyy.255.161:5900 SYN ******S*
Feb 15 21:12:41 216.56.56.49:3523 -> xxx.yyy.255.78:5900 SYN ******S*
Feb 15 21:12:41 216.56.56.49:3631 -> xxx.yyy.255.185:5900 SYN ******S*
Feb 15 21:12:41 216.56.56.49:3610 -> xxx.yyy.255.162:5900 SYN ******S*
Feb 15 21:12:41 216.56.56.49:3550 -> xxx.yyy.255.105:5900 SYN ******S*
Feb 15 21:12:41 216.56.56.49:3679 -> xxx.yyy.255.231:5900 SYN ******S*
32938
Feb 15 21:38:17 216.90.232.73:4725 -> xxx.yyy.1.1:6101 SYN ******S*
Feb 15 21:38:17 216.90.232.73:4726 -> xxx.yyy.1.2:6101 SYN ******S*
Feb 15 21:38:17 216.90.232.73:4728 -> xxx.yyy.1.3:6101 SYN ******S*
Feb 15 21:38:20 216.90.232.73:4737 -> xxx.yyy.1.11:6101 SYN ******S*
Feb 15 21:38:17 216.90.232.73:4738 -> xxx.yyy.1.12:6101 SYN ******S*
Feb 15 21:38:17 216.90.232.73:4739 -> xxx.yyy.1.13:6101 SYN ******S*
Feb 15 21:38:20 216.90.232.73:4744 -> xxx.yyy.1.18:6101 SYN ******S*
Feb 15 21:38:17 216.90.232.73:4748 -> xxx.yyy.1.22:6101 SYN ******S*
[...]
Feb 15 21:54:15 216.90.232.73:2157 -> xxx.yyy.255.229:6101 SYN ******S*
Feb 15 21:54:15 216.90.232.73:2164 -> xxx.yyy.255.236:6101 SYN ******S*
Feb 15 21:54:15 216.90.232.73:2165 -> xxx.yyy.255.237:6101 SYN ******S*
Feb 15 21:54:15 216.90.232.73:2170 -> xxx.yyy.255.242:6101 SYN ******S*
Feb 15 21:54:15 216.90.232.73:2171 -> xxx.yyy.255.243:6101 SYN ******S*
Feb 15 21:54:15 216.90.232.73:2172 -> xxx.yyy.255.244:6101 SYN ******S*
Feb 15 21:54:15 216.90.232.73:2173 -> xxx.yyy.255.245:6101 SYN ******S*
Feb 15 21:54:15 216.90.232.73:2174 -> xxx.yyy.255.246:6101 SYN ******S*
Feb 15 21:54:15 216.90.232.73:2175 -> xxx.yyy.255.247:6101 SYN ******S*
28661
Feb 15 09:04:24 134.215.210.156:3324 -> xxx.yyy.1.1:1433 SYN ******S*
Feb 15 09:04:24 134.215.210.156:3325 -> xxx.yyy.1.2:1433 SYN ******S*
Feb 15 09:04:24 134.215.210.156:3326 -> xxx.yyy.1.3:1433 SYN ******S*
Feb 15 09:04:24 134.215.210.156:3327 -> xxx.yyy.1.4:1433 SYN ******S*
Feb 15 09:04:24 134.215.210.156:3328 -> xxx.yyy.1.5:1433 SYN ******S*
Feb 15 09:04:24 134.215.210.156:3329 -> xxx.yyy.1.6:1433 SYN ******S*
Feb 15 09:04:24 134.215.210.156:3330 -> xxx.yyy.1.7:1433 SYN ******S*
Feb 15 09:04:24 134.215.210.156:3332 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
Feb 15 09:10:30 134.215.210.156:4135 -> xxx.yyy.255.242:1433 SYN ******S*
Feb 15 09:10:30 134.215.210.156:4140 -> xxx.yyy.255.247:1433 SYN ******S*
Feb 15 09:10:30 134.215.210.156:4141 -> xxx.yyy.255.248:1433 SYN ******S*
Feb 15 09:10:30 134.215.210.156:4142 -> xxx.yyy.255.249:1433 SYN ******S*
Feb 15 09:10:30 134.215.210.156:4143 -> xxx.yyy.255.250:1433 SYN ******S*
Feb 15 09:10:30 134.215.210.156:4144 -> xxx.yyy.255.251:1433 SYN ******S*
Feb 15 09:10:30 134.215.210.156:4145 -> xxx.yyy.255.252:1433 SYN ******S*
Feb 15 09:10:30 134.215.210.156:4146 -> xxx.yyy.255.253:1433 SYN ******S*
Feb 15 09:10:30 134.215.210.156:4147 -> xxx.yyy.255.254:1433 SYN ******S*
26283
Feb 15 10:42:07 84.98.215.98:3079 -> xxx.yyy.1.0:1433 SYN ******S*
Feb 15 10:42:10 84.98.215.98:3090 -> xxx.yyy.1.1:1433 SYN ******S*
Feb 15 10:42:10 84.98.215.98:3107 -> xxx.yyy.1.2:1433 SYN ******S*
Feb 15 10:42:07 84.98.215.98:3114 -> xxx.yyy.1.5:1433 SYN ******S*
Feb 15 10:42:10 84.98.215.98:3118 -> xxx.yyy.1.7:1433 SYN ******S*
Feb 15 10:42:07 84.98.215.98:3126 -> xxx.yyy.1.9:1433 SYN ******S*
Feb 15 10:42:07 84.98.215.98:3172 -> xxx.yyy.1.11:1433 SYN ******S*
Feb 15 10:42:10 84.98.215.98:3181 -> xxx.yyy.1.15:1433 SYN ******S*
[...]
Feb 15 12:43:18 84.98.215.98:4786 -> xxx.yyy.135.183:1433 SYN ******S*
Feb 15 12:43:18 84.98.215.98:4770 -> xxx.yyy.135.192:1433 SYN ******S*
Feb 15 12:43:18 84.98.215.98:4859 -> xxx.yyy.135.134:1433 SYN ******S*
Feb 15 12:43:18 84.98.215.98:4837 -> xxx.yyy.135.146:1433 SYN ******S*
Feb 15 12:43:19 84.98.215.98:3288 -> xxx.yyy.135.112:1433 SYN ******S*
Feb 15 12:43:19 84.98.215.98:3282 -> xxx.yyy.135.109:1433 SYN ******S*
Feb 15 12:43:19 84.98.215.98:3277 -> xxx.yyy.135.101:1433 SYN ******S*
Feb 15 12:43:19 84.98.215.98:3387 -> xxx.yyy.135.191:1433 SYN ******S*
19654
Feb 15 21:50:28 67.155.156.197:3449 -> xxx.yyy.1.1:3306 SYN ******S*
Feb 15 21:50:28 67.155.156.197:3454 -> xxx.yyy.1.4:3306 SYN ******S*
Feb 15 21:50:28 67.155.156.197:3466 -> xxx.yyy.1.11:3306 SYN ******S*
Feb 15 21:50:28 67.155.156.197:3470 -> xxx.yyy.1.12:3306 SYN ******S*
Feb 15 21:50:28 67.155.156.197:3477 -> xxx.yyy.1.13:3306 SYN ******S*
Feb 15 21:50:28 67.155.156.197:3487 -> xxx.yyy.1.18:3306 SYN ******S*
Feb 15 21:50:28 67.155.156.197:3488 -> xxx.yyy.1.19:3306 SYN ******S*
Feb 15 21:50:28 67.155.156.197:3492 -> xxx.yyy.1.23:3306 SYN ******S*
[...]
Feb 15 21:53:48 67.155.156.197:4772 -> xxx.yyy.255.228:3306 SYN ******S*
Feb 15 21:53:48 67.155.156.197:4776 -> xxx.yyy.255.231:3306 SYN ******S*
Feb 15 21:53:48 67.155.156.197:4773 -> xxx.yyy.255.229:3306 SYN ******S*
Feb 15 21:53:48 67.155.156.197:4778 -> xxx.yyy.255.232:3306 SYN ******S*
Feb 15 21:53:48 67.155.156.197:4770 -> xxx.yyy.255.226:3306 SYN ******S*
Feb 15 21:53:48 67.155.156.197:4785 -> xxx.yyy.255.235:3306 SYN ******S*
Feb 15 21:53:48 67.155.156.197:4810 -> xxx.yyy.255.249:3306 SYN ******S*
Feb 15 21:53:48 67.155.156.197:4814 -> xxx.yyy.255.252:3306 SYN ******S*
18844
[...]
17492
[...]
13252
Feb 15 22:57:01 222.112.19.161:1962 -> xxx.yyy.154.105:5554 SYN ******S*
Feb 15 22:57:01 222.112.19.161:1963 -> xxx.yyy.154.106:5554 SYN ******S*
Feb 15 22:57:04 222.112.19.161:2716 -> xxx.yyy.154.106:9898 SYN ******S*
Feb 15 22:57:01 222.112.19.161:1965 -> xxx.yyy.154.107:5554 SYN ******S*
Feb 15 22:57:02 222.112.19.161:2075 -> xxx.yyy.154.121:5554 SYN ******S*
Feb 15 22:57:03 222.112.19.161:2306 -> xxx.yyy.154.121:1023 SYN ******S*
Feb 15 22:57:05 222.112.19.161:2771 -> xxx.yyy.154.121:9898 SYN ******S*
Feb 15 22:57:02 222.112.19.161:2056 -> xxx.yyy.154.116:5554 SYN ******S*
[...]
Feb 15 22:59:18 222.112.19.161:4632 -> xxx.yyy.174.210:9898 SYN ******S*
Feb 15 22:59:18 222.112.19.161:4643 -> xxx.yyy.174.214:9898 SYN ******S*
Feb 15 22:59:18 222.112.19.161:4644 -> xxx.yyy.174.215:9898 SYN ******S*
Feb 15 22:59:18 222.112.19.161:4673 -> xxx.yyy.174.217:9898 SYN ******S*
Feb 15 22:59:18 222.112.19.161:4692 -> xxx.yyy.174.220:9898 SYN ******S*
Feb 15 22:59:18 222.112.19.161:4691 -> xxx.yyy.174.219:9898 SYN ******S*
Feb 15 22:59:18 222.112.19.161:4752 -> xxx.yyy.174.221:9898 SYN ******S*
Feb 15 22:59:18 222.112.19.161:4754 -> xxx.yyy.174.222:9898 SYN ******S*
7337
[...]
6966
Feb 15 22:52:57 218.148.27.31:2596 -> xxx.yyy.133.52:5554 SYN ******S*
Feb 15 22:52:57 218.148.27.31:2604 -> xxx.yyy.133.43:5554 SYN ******S*
Feb 15 22:52:57 218.148.27.31:2610 -> xxx.yyy.133.38:5554 SYN ******S*
Feb 15 22:52:58 218.148.27.31:3155 -> xxx.yyy.133.38:1023 SYN ******S*
Feb 15 22:52:57 218.148.27.31:2605 -> xxx.yyy.133.42:5554 SYN ******S*
Feb 15 22:52:57 218.148.27.31:2597 -> xxx.yyy.133.50:5554 SYN ******S*
Feb 15 22:52:57 218.148.27.31:2599 -> xxx.yyy.133.48:5554 SYN ******S*
Feb 15 22:52:58 218.148.27.31:3144 -> xxx.yyy.133.48:1023 SYN ******S*
[...]
Feb 15 22:53:50 218.148.27.31:1878 -> xxx.yyy.153.108:9898 SYN ******S*
Feb 15 22:53:50 218.148.27.31:1893 -> xxx.yyy.153.129:9898 SYN ******S*
Feb 15 22:53:50 218.148.27.31:1896 -> xxx.yyy.153.103:9898 SYN ******S*
Feb 15 22:53:51 218.148.27.31:1937 -> xxx.yyy.153.136:9898 SYN ******S*
Feb 15 22:53:51 218.148.27.31:1977 -> xxx.yyy.133.51:9898 SYN ******S*
Feb 15 22:53:51 218.148.27.31:2027 -> xxx.yyy.153.124:9898 SYN ******S*
Feb 15 22:53:51 218.148.27.31:2028 -> xxx.yyy.153.112:9898 SYN ******S*
Feb 15 22:53:51 218.148.27.31:2029 -> xxx.yyy.153.111:9898 SYN ******S*
Feb 15 22:53:51 218.148.27.31:2030 -> xxx.yyy.153.115:9898 SYN ******S*
6688
Feb 15 23:00:57 218.228.211.22:3955 -> xxx.yyy.72.126:5554 SYN ******S*
Feb 15 23:00:58 218.228.211.22:4678 -> xxx.yyy.72.126:1023 SYN ******S*
Feb 15 23:00:57 218.228.211.22:3956 -> xxx.yyy.72.124:5554 SYN ******S*
Feb 15 23:00:58 218.228.211.22:4680 -> xxx.yyy.72.124:1023 SYN ******S*
Feb 15 23:00:59 218.228.211.22:1347 -> xxx.yyy.72.128:5554 SYN ******S*
Feb 15 23:01:00 218.228.211.22:2009 -> xxx.yyy.72.128:1023 SYN ******S*
Feb 15 23:00:59 218.228.211.22:1379 -> xxx.yyy.72.131:5554 SYN ******S*
Feb 15 23:00:59 218.228.211.22:1381 -> xxx.yyy.72.133:5554 SYN ******S*
[...]
Feb 15 23:01:40 218.228.211.22:2232 -> xxx.yyy.92.230:9898 SYN ******S*
Feb 15 23:01:40 218.228.211.22:2233 -> xxx.yyy.92.229:9898 SYN ******S*
Feb 15 23:01:40 218.228.211.22:2244 -> xxx.yyy.92.236:9898 SYN ******S*
Feb 15 23:01:40 218.228.211.22:2245 -> xxx.yyy.92.237:9898 SYN ******S*
Feb 15 23:01:40 218.228.211.22:2248 -> xxx.yyy.92.239:9898 SYN ******S*
Feb 15 23:01:40 218.228.211.22:2251 -> xxx.yyy.92.241:9898 SYN ******S*
Feb 15 23:01:40 218.228.211.22:2258 -> xxx.yyy.92.245:9898 SYN ******S*
Feb 15 23:01:40 218.228.211.22:2299 -> xxx.yyy.86.0:9898 SYN ******S*
Feb 15 23:01:40 218.228.211.22:2303 -> xxx.yyy.86.8:9898 SYN ******S*
6580
Feb 15 22:20:39 211.224.234.118:4234 -> xxx.yyy.72.10:5554 SYN ******S*
Feb 15 22:20:39 211.224.234.118:4236 -> xxx.yyy.72.12:5554 SYN ******S*
Feb 15 22:20:42 211.224.234.118:1876 -> xxx.yyy.72.12:9898 SYN ******S*
Feb 15 22:20:39 211.224.234.118:4237 -> xxx.yyy.72.13:5554 SYN ******S*
Feb 15 22:20:40 211.224.234.118:1048 -> xxx.yyy.72.13:1023 SYN ******S*
Feb 15 22:20:42 211.224.234.118:1879 -> xxx.yyy.72.13:9898 SYN ******S*
Feb 15 22:20:39 211.224.234.118:4211 -> xxx.yyy.71.161:5554 SYN ******S*
Feb 15 22:20:40 211.224.234.118:4980 -> xxx.yyy.71.161:1023 SYN ******S*
[...]
Feb 15 22:21:31 211.224.234.118:1258 -> xxx.yyy.71.239:9898 SYN ******S*
Feb 15 22:21:31 211.224.234.118:1263 -> xxx.yyy.71.245:9898 SYN ******S*
Feb 15 22:21:31 211.224.234.118:1269 -> xxx.yyy.71.247:9898 SYN ******S*
Feb 15 22:21:31 211.224.234.118:1272 -> xxx.yyy.71.248:9898 SYN ******S*
Feb 15 22:21:31 211.224.234.118:1318 -> xxx.yyy.71.253:9898 SYN ******S*
Feb 15 22:21:31 211.224.234.118:1319 -> xxx.yyy.71.251:9898 SYN ******S*
Feb 15 22:21:31 211.224.234.118:1315 -> xxx.yyy.71.250:9898 SYN ******S*
Feb 15 22:21:31 211.224.234.118:1323 -> xxx.yyy.72.1:9898 SYN ******S*
6271
Feb 15 23:17:47 61.208.200.214:6000 -> xxx.yyy.1.1:1433 SYN ******S*
Feb 15 23:17:47 61.208.200.214:6000 -> xxx.yyy.1.21:1433 SYN ******S*
Feb 15 23:17:47 61.208.200.214:6000 -> xxx.yyy.1.7:1433 SYN ******S*
Feb 15 23:17:47 61.208.200.214:6000 -> xxx.yyy.1.20:1433 SYN ******S*
Feb 15 23:17:47 61.208.200.214:6000 -> xxx.yyy.1.0:1433 SYN ******S*
Feb 15 23:17:47 61.208.200.214:6000 -> xxx.yyy.1.55:1433 SYN ******S*
Feb 15 23:17:47 61.208.200.214:6000 -> xxx.yyy.1.2:1433 SYN ******S*
Feb 15 23:17:47 61.208.200.214:6000 -> xxx.yyy.1.47:1433 SYN ******S*
[...]
Feb 15 23:17:55 61.208.200.214:6000 -> xxx.yyy.240.121:1433 SYN ******S*
Feb 15 23:17:55 61.208.200.214:6000 -> xxx.yyy.240.109:1433 SYN ******S*
Feb 15 23:17:55 61.208.200.214:6000 -> xxx.yyy.240.116:1433 SYN ******S*
Feb 15 23:17:55 61.208.200.214:6000 -> xxx.yyy.240.112:1433 SYN ******S*
Feb 15 23:17:55 61.208.200.214:6000 -> xxx.yyy.240.124:1433 SYN ******S*
Feb 15 23:17:55 61.208.200.214:6000 -> xxx.yyy.240.114:1433 SYN ******S*
Feb 15 23:17:55 61.208.200.214:6000 -> xxx.yyy.240.144:1433 SYN ******S*
Feb 15 23:17:55 61.208.200.214:6000 -> xxx.yyy.240.129:1433 SYN ******S*
6165
Feb 15 22:56:42 220.93.195.95:4516 -> xxx.yyy.154.100:5554 SYN ******S*
Feb 15 22:56:43 220.93.195.95:1140 -> xxx.yyy.154.100:1023 SYN ******S*
Feb 15 22:56:42 220.93.195.95:4536 -> xxx.yyy.154.101:5554 SYN ******S*
Feb 15 22:56:43 220.93.195.95:1149 -> xxx.yyy.154.101:1023 SYN ******S*
Feb 15 22:56:42 220.93.195.95:4562 -> xxx.yyy.154.105:5554 SYN ******S*
Feb 15 22:56:43 220.93.195.95:1168 -> xxx.yyy.154.105:1023 SYN ******S*
Feb 15 22:56:42 220.93.195.95:4546 -> xxx.yyy.154.104:5554 SYN ******S*
Feb 15 22:56:43 220.93.195.95:1161 -> xxx.yyy.154.104:1023 SYN ******S*
[...]
Feb 15 22:58:51 220.93.195.95:2669 -> xxx.yyy.174.5:9898 SYN ******S*
Feb 15 22:58:51 220.93.195.95:2647 -> xxx.yyy.173.160:9898 SYN ******S*
Feb 15 22:58:51 220.93.195.95:2646 -> xxx.yyy.173.159:9898 SYN ******S*
Feb 15 22:58:51 220.93.195.95:2710 -> xxx.yyy.174.208:5554 SYN ******S*
Feb 15 22:58:52 220.93.195.95:3007 -> xxx.yyy.174.208:1023 SYN ******S*
Feb 15 22:58:53 220.93.195.95:3012 -> xxx.yyy.174.115:9898 SYN ******S*
Feb 15 22:58:53 220.93.195.95:3011 -> xxx.yyy.174.116:9898 SYN ******S*
Feb 15 22:58:53 220.93.195.95:3049 -> xxx.yyy.174.117:9898 SYN ******S*
Feb 15 22:58:54 220.93.195.95:3433 -> xxx.yyy.174.206:9898 SYN ******S*
5969
Feb 15 22:56:02 220.87.4.28:2007 -> xxx.yyy.194.130:5554 SYN ******S*
Feb 15 22:56:02 220.87.4.28:2014 -> xxx.yyy.194.134:5554 SYN ******S*
Feb 15 22:56:05 220.87.4.28:3620 -> xxx.yyy.194.134:9898 SYN ******S*
Feb 15 22:56:02 220.87.4.28:2015 -> xxx.yyy.194.135:5554 SYN ******S*
Feb 15 22:56:03 220.87.4.28:2587 -> xxx.yyy.194.135:1023 SYN ******S*
Feb 15 22:56:02 220.87.4.28:2001 -> xxx.yyy.194.124:5554 SYN ******S*
Feb 15 22:56:05 220.87.4.28:3608 -> xxx.yyy.194.124:9898 SYN ******S*
Feb 15 22:56:02 220.87.4.28:2004 -> xxx.yyy.194.127:5554 SYN ******S*
[...]
Feb 15 22:56:44 220.87.4.28:3641 -> xxx.yyy.214.163:9898 SYN ******S*
Feb 15 22:56:44 220.87.4.28:3674 -> xxx.yyy.214.176:9898 SYN ******S*
Feb 15 22:56:44 220.87.4.28:3680 -> xxx.yyy.214.182:9898 SYN ******S*
Feb 15 22:56:45 220.87.4.28:3671 -> xxx.yyy.214.174:9898 SYN ******S*
Feb 15 22:56:45 220.87.4.28:3779 -> xxx.yyy.214.218:9898 SYN ******S*
Feb 15 22:56:45 220.87.4.28:3798 -> xxx.yyy.214.227:9898 SYN ******S*
Feb 15 22:56:45 220.87.4.28:3778 -> xxx.yyy.214.217:9898 SYN ******S*
Feb 15 22:56:45 220.87.4.28:3856 -> xxx.yyy.214.237:9898 SYN ******S*
Feb 15 22:56:45 220.87.4.28:3912 -> xxx.yyy.201.125:9898 SYN ******S*
5855
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list