[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Fri Feb 18 13:44:39 GMT 2005
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Feb 17 00:52:54 61.236.123.98:13020 -> xxx.yyy.64.0:8080 SYN ******S*
Feb 17 00:52:55 61.236.123.98:12572 -> xxx.yyy.64.0:80 SYN ******S*
Feb 17 00:52:55 61.236.123.98:12437 -> xxx.yyy.64.0:8000 SYN ******S*
Feb 17 00:52:52 61.236.123.98:13348 -> xxx.yyy.64.0:8888 SYN ******S*
Feb 17 00:52:52 61.236.123.98:13118 -> xxx.yyy.64.0:10080 SYN ******S*
Feb 17 00:52:52 61.236.123.98:13051 -> xxx.yyy.64.0:81 SYN ******S*
Feb 17 00:52:52 61.236.123.98:13485 -> xxx.yyy.64.0:3128 SYN ******S*
Feb 17 00:52:52 61.236.123.98:12883 -> xxx.yyy.64.0:23 SYN ******S*
[...]
Feb 17 05:15:09 61.236.123.98:12984 -> xxx.yyy.111.253:3128 SYN ******S*
Feb 17 05:15:09 61.236.123.98:12782 -> xxx.yyy.111.253:1080 SYN ******S*
Feb 17 05:15:10 61.236.123.98:12892 -> xxx.yyy.111.248:23 SYN ******S*
Feb 17 05:15:12 61.236.123.98:12463 -> xxx.yyy.111.250:23 SYN ******S*
Feb 17 05:15:15 61.236.123.98:13228 -> xxx.yyy.111.252:23 SYN ******S*
Feb 17 05:15:17 61.236.123.98:13330 -> xxx.yyy.111.255:1080 SYN ******S*
Feb 17 05:15:19 61.236.123.98:12765 -> xxx.yyy.111.255:23 SYN ******S*
Feb 17 05:15:17 61.236.123.98:12494 -> xxx.yyy.111.254:1080 SYN ******S*
Feb 17 05:15:18 61.236.123.98:12585 -> xxx.yyy.111.254:23 SYN ******S*
97535
Feb 17 17:17:05 64.175.240.110:2763 -> xxx.yyy.1.2:1433 SYN ******S*
Feb 17 17:17:05 64.175.240.110:2764 -> xxx.yyy.1.3:1433 SYN ******S*
Feb 17 17:17:06 64.175.240.110:2771 -> xxx.yyy.1.7:1433 SYN ******S*
Feb 17 17:17:06 64.175.240.110:2773 -> xxx.yyy.1.8:1433 SYN ******S*
Feb 17 17:17:06 64.175.240.110:2776 -> xxx.yyy.1.11:1433 SYN ******S*
Feb 17 17:17:06 64.175.240.110:2778 -> xxx.yyy.1.12:1433 SYN ******S*
Feb 17 17:17:06 64.175.240.110:2786 -> xxx.yyy.1.15:1433 SYN ******S*
Feb 17 17:17:06 64.175.240.110:2789 -> xxx.yyy.1.17:1433 SYN ******S*
[...]
Feb 17 21:06:15 64.175.240.110:1712 -> xxx.yyy.255.242:1433 SYN ******S*
Feb 17 21:06:16 64.175.240.110:1714 -> xxx.yyy.255.243:1433 SYN ******S*
Feb 17 21:06:16 64.175.240.110:1716 -> xxx.yyy.255.244:1433 SYN ******S*
Feb 17 21:06:16 64.175.240.110:1718 -> xxx.yyy.255.245:1433 SYN ******S*
Feb 17 21:06:16 64.175.240.110:1719 -> xxx.yyy.255.246:1433 SYN ******S*
Feb 17 21:06:16 64.175.240.110:1726 -> xxx.yyy.255.249:1433 SYN ******S*
Feb 17 21:06:17 64.175.240.110:1734 -> xxx.yyy.255.251:1433 SYN ******S*
Feb 17 21:06:17 64.175.240.110:1741 -> xxx.yyy.255.254:1433 SYN ******S*
69413
Feb 17 01:06:28 213.115.210.13:2734 -> xxx.yyy.1.2:42 SYN ******S*
Feb 17 01:06:28 213.115.210.13:2735 -> xxx.yyy.1.3:42 SYN ******S*
Feb 17 01:06:28 213.115.210.13:2738 -> xxx.yyy.1.6:42 SYN ******S*
Feb 17 01:06:28 213.115.210.13:2746 -> xxx.yyy.1.14:42 SYN ******S*
Feb 17 01:06:28 213.115.210.13:2747 -> xxx.yyy.1.15:42 SYN ******S*
Feb 17 01:06:28 213.115.210.13:2748 -> xxx.yyy.1.16:42 SYN ******S*
Feb 17 01:06:31 213.115.210.13:2751 -> xxx.yyy.1.19:42 SYN ******S*
Feb 17 01:06:31 213.115.210.13:2752 -> xxx.yyy.1.20:42 SYN ******S*
[...]
Feb 17 01:18:11 213.115.210.13:1550 -> xxx.yyy.255.240:42 SYN ******S*
Feb 17 01:18:11 213.115.210.13:1563 -> xxx.yyy.255.253:42 SYN ******S*
Feb 17 01:18:11 213.115.210.13:1560 -> xxx.yyy.255.250:42 SYN ******S*
Feb 17 01:18:11 213.115.210.13:1558 -> xxx.yyy.255.248:42 SYN ******S*
Feb 17 01:18:11 213.115.210.13:1561 -> xxx.yyy.255.251:42 SYN ******S*
Feb 17 01:18:11 213.115.210.13:1559 -> xxx.yyy.255.249:42 SYN ******S*
Feb 17 01:18:11 213.115.210.13:1564 -> xxx.yyy.255.254:42 SYN ******S*
Feb 17 01:18:11 213.115.210.13:1562 -> xxx.yyy.255.252:42 SYN ******S*
57378
Feb 17 07:04:51 207.179.138.6:1321 -> xxx.yyy.1.1:41523 SYN ******S*
Feb 17 07:04:50 207.179.138.6:1323 -> xxx.yyy.1.3:41523 SYN ******S*
Feb 17 07:04:51 207.179.138.6:1322 -> xxx.yyy.1.2:41523 SYN ******S*
Feb 17 07:04:50 207.179.138.6:1325 -> xxx.yyy.1.5:41523 SYN ******S*
Feb 17 07:04:50 207.179.138.6:1324 -> xxx.yyy.1.4:41523 SYN ******S*
Feb 17 07:04:50 207.179.138.6:1326 -> xxx.yyy.1.6:41523 SYN ******S*
Feb 17 07:04:53 207.179.138.6:1327 -> xxx.yyy.1.7:41523 SYN ******S*
Feb 17 07:04:53 207.179.138.6:1330 -> xxx.yyy.1.10:41523 SYN ******S*
[...]
Feb 17 07:09:17 207.179.138.6:2219 -> xxx.yyy.255.192:41523 SYN ******S*
Feb 17 07:09:17 207.179.138.6:2258 -> xxx.yyy.255.231:41523 SYN ******S*
Feb 17 07:09:17 207.179.138.6:2239 -> xxx.yyy.255.212:41523 SYN ******S*
Feb 17 07:09:17 207.179.138.6:2245 -> xxx.yyy.255.218:41523 SYN ******S*
Feb 17 07:09:17 207.179.138.6:2246 -> xxx.yyy.255.219:41523 SYN ******S*
Feb 17 07:09:17 207.179.138.6:2259 -> xxx.yyy.255.232:41523 SYN ******S*
Feb 17 07:09:17 207.179.138.6:2217 -> xxx.yyy.255.190:41523 SYN ******S*
Feb 17 07:09:17 207.179.138.6:2256 -> xxx.yyy.255.229:41523 SYN ******S*
51405
Feb 17 19:58:53 222.98.45.9:3650 -> xxx.yyy.1.5:1433 SYN ******S*
Feb 17 19:58:50 222.98.45.9:3648 -> xxx.yyy.1.3:1433 SYN ******S*
Feb 17 19:58:50 222.98.45.9:3653 -> xxx.yyy.1.8:1433 SYN ******S*
Feb 17 19:58:53 222.98.45.9:3655 -> xxx.yyy.1.10:1433 SYN ******S*
Feb 17 19:58:53 222.98.45.9:3654 -> xxx.yyy.1.9:1433 SYN ******S*
Feb 17 19:58:50 222.98.45.9:3656 -> xxx.yyy.1.11:1433 SYN ******S*
Feb 17 19:58:53 222.98.45.9:3659 -> xxx.yyy.1.14:1433 SYN ******S*
Feb 17 19:58:53 222.98.45.9:3661 -> xxx.yyy.1.16:1433 SYN ******S*
[...]
Feb 17 20:10:36 222.98.45.9:3093 -> xxx.yyy.255.247:1433 SYN ******S*
Feb 17 20:10:36 222.98.45.9:3090 -> xxx.yyy.255.244:1433 SYN ******S*
Feb 17 20:10:36 222.98.45.9:3086 -> xxx.yyy.255.240:1433 SYN ******S*
Feb 17 20:10:36 222.98.45.9:3092 -> xxx.yyy.255.246:1433 SYN ******S*
Feb 17 20:10:36 222.98.45.9:3096 -> xxx.yyy.255.250:1433 SYN ******S*
Feb 17 20:10:36 222.98.45.9:3098 -> xxx.yyy.255.252:1433 SYN ******S*
Feb 17 20:10:36 222.98.45.9:3100 -> xxx.yyy.255.254:1433 SYN ******S*
Feb 17 20:10:36 222.98.45.9:3097 -> xxx.yyy.255.251:1433 SYN ******S*
Feb 17 20:10:36 222.98.45.9:3095 -> xxx.yyy.255.249:1433 SYN ******S*
45944
Feb 17 09:28:11 219.79.74.42:4770 -> xxx.yyy.1.0:1433 SYN ******S*
Feb 17 09:28:11 219.79.74.42:4773 -> xxx.yyy.1.1:1433 SYN ******S*
Feb 17 09:28:12 219.79.74.42:4775 -> xxx.yyy.1.2:1433 SYN ******S*
Feb 17 09:28:09 219.79.74.42:4777 -> xxx.yyy.1.3:1433 SYN ******S*
Feb 17 09:28:12 219.79.74.42:4778 -> xxx.yyy.1.4:1433 SYN ******S*
Feb 17 09:28:09 219.79.74.42:4782 -> xxx.yyy.1.5:1433 SYN ******S*
Feb 17 09:28:12 219.79.74.42:4783 -> xxx.yyy.1.6:1433 SYN ******S*
Feb 17 09:28:12 219.79.74.42:4792 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Feb 17 12:18:59 219.79.74.42:4539 -> xxx.yyy.191.95:1433 SYN ******S*
Feb 17 12:18:59 219.79.74.42:4540 -> xxx.yyy.191.96:1433 SYN ******S*
Feb 17 12:18:59 219.79.74.42:4448 -> xxx.yyy.191.71:1433 SYN ******S*
Feb 17 12:18:59 219.79.74.42:4544 -> xxx.yyy.191.97:1433 SYN ******S*
Feb 17 12:18:59 219.79.74.42:4401 -> xxx.yyy.191.38:1433 SYN ******S*
Feb 17 12:18:59 219.79.74.42:4564 -> xxx.yyy.191.98:1433 SYN ******S*
Feb 17 12:18:59 219.79.74.42:4400 -> xxx.yyy.191.37:1433 SYN ******S*
Feb 17 12:18:59 219.79.74.42:4399 -> xxx.yyy.191.36:1433 SYN ******S*
Feb 17 12:18:59 219.79.74.42:4567 -> xxx.yyy.191.99:1433 SYN ******S*
41484
Feb 17 12:15:10 152.101.106.203:2194 -> xxx.yyy.1.4:3066 SYN ******S*
Feb 17 12:15:10 152.101.106.203:2195 -> xxx.yyy.1.5:3066 SYN ******S*
Feb 17 12:15:10 152.101.106.203:2196 -> xxx.yyy.1.6:3066 SYN ******S*
Feb 17 12:15:11 152.101.106.203:2198 -> xxx.yyy.1.8:3066 SYN ******S*
Feb 17 12:15:11 152.101.106.203:2199 -> xxx.yyy.1.9:3066 SYN ******S*
Feb 17 12:15:13 152.101.106.203:2200 -> xxx.yyy.1.10:3066 SYN ******S*
Feb 17 12:15:10 152.101.106.203:2202 -> xxx.yyy.1.12:3066 SYN ******S*
Feb 17 12:15:13 152.101.106.203:2203 -> xxx.yyy.1.13:3066 SYN ******S*
[...]
Feb 17 12:26:06 152.101.106.203:1176 -> xxx.yyy.255.222:3066 SYN ******S*
Feb 17 12:26:06 152.101.106.203:1183 -> xxx.yyy.255.229:3066 SYN ******S*
Feb 17 12:26:06 152.101.106.203:1190 -> xxx.yyy.255.236:3066 SYN ******S*
Feb 17 12:26:06 152.101.106.203:1188 -> xxx.yyy.255.234:3066 SYN ******S*
Feb 17 12:26:06 152.101.106.203:1185 -> xxx.yyy.255.231:3066 SYN ******S*
Feb 17 12:26:06 152.101.106.203:1193 -> xxx.yyy.255.239:3066 SYN ******S*
Feb 17 12:26:06 152.101.106.203:1200 -> xxx.yyy.255.246:3066 SYN ******S*
Feb 17 12:26:06 152.101.106.203:1203 -> xxx.yyy.255.249:3066 SYN ******S*
Feb 17 12:26:06 152.101.106.203:1207 -> xxx.yyy.255.253:3066 SYN ******S*
39363
Feb 17 18:16:03 64.53.18.249:1669 -> xxx.yyy.1.1:3306 SYN ******S*
Feb 17 18:16:06 64.53.18.249:1670 -> xxx.yyy.1.2:3306 SYN ******S*
Feb 17 18:16:03 64.53.18.249:1672 -> xxx.yyy.1.4:3306 SYN ******S*
Feb 17 18:16:03 64.53.18.249:1675 -> xxx.yyy.1.7:3306 SYN ******S*
Feb 17 18:16:06 64.53.18.249:1676 -> xxx.yyy.1.8:3306 SYN ******S*
Feb 17 18:16:03 64.53.18.249:1677 -> xxx.yyy.1.9:3306 SYN ******S*
Feb 17 18:16:03 64.53.18.249:1679 -> xxx.yyy.1.11:3306 SYN ******S*
Feb 17 18:16:03 64.53.18.249:1682 -> xxx.yyy.1.14:3306 SYN ******S*
[...]
Feb 17 18:27:23 64.53.18.249:4152 -> xxx.yyy.255.221:3306 SYN ******S*
Feb 17 18:27:23 64.53.18.249:4157 -> xxx.yyy.255.226:3306 SYN ******S*
Feb 17 18:27:23 64.53.18.249:4168 -> xxx.yyy.255.237:3306 SYN ******S*
Feb 17 18:27:23 64.53.18.249:4179 -> xxx.yyy.255.248:3306 SYN ******S*
Feb 17 18:27:23 64.53.18.249:4181 -> xxx.yyy.255.250:3306 SYN ******S*
Feb 17 18:27:23 64.53.18.249:4182 -> xxx.yyy.255.251:3306 SYN ******S*
Feb 17 18:27:23 64.53.18.249:4183 -> xxx.yyy.255.252:3306 SYN ******S*
Feb 17 18:27:23 64.53.18.249:4184 -> xxx.yyy.255.253:3306 SYN ******S*
36301
Feb 17 13:09:28 66.55.66.99:3129 -> xxx.yyy.1.1:3306 SYN ******S*
Feb 17 13:09:28 66.55.66.99:3130 -> xxx.yyy.1.2:3306 SYN ******S*
Feb 17 13:09:28 66.55.66.99:3131 -> xxx.yyy.1.3:3306 SYN ******S*
Feb 17 13:09:31 66.55.66.99:3132 -> xxx.yyy.1.4:3306 SYN ******S*
Feb 17 13:09:31 66.55.66.99:3136 -> xxx.yyy.1.8:3306 SYN ******S*
Feb 17 13:09:31 66.55.66.99:3137 -> xxx.yyy.1.9:3306 SYN ******S*
Feb 17 13:09:31 66.55.66.99:3138 -> xxx.yyy.1.10:3306 SYN ******S*
Feb 17 13:09:28 66.55.66.99:3140 -> xxx.yyy.1.12:3306 SYN ******S*
[...]
Feb 17 13:21:16 66.55.66.99:1929 -> xxx.yyy.255.237:3306 SYN ******S*
Feb 17 13:21:16 66.55.66.99:1943 -> xxx.yyy.255.251:3306 SYN ******S*
Feb 17 13:21:16 66.55.66.99:1941 -> xxx.yyy.255.249:3306 SYN ******S*
Feb 17 13:21:16 66.55.66.99:1940 -> xxx.yyy.255.248:3306 SYN ******S*
Feb 17 13:21:16 66.55.66.99:1944 -> xxx.yyy.255.252:3306 SYN ******S*
Feb 17 13:21:16 66.55.66.99:1939 -> xxx.yyy.255.247:3306 SYN ******S*
Feb 17 13:21:16 66.55.66.99:1942 -> xxx.yyy.255.250:3306 SYN ******S*
Feb 17 13:21:16 66.55.66.99:1938 -> xxx.yyy.255.246:3306 SYN ******S*
Feb 17 13:21:16 66.55.66.99:1945 -> xxx.yyy.255.253:3306 SYN ******S*
32350
Feb 17 04:30:41 210.211.147.89:3298 -> xxx.yyy.222.1:42 SYN ******S*
Feb 17 04:30:41 210.211.147.89:3299 -> xxx.yyy.222.1:139 SYN ******S*
Feb 17 04:30:41 210.211.147.89:3300 -> xxx.yyy.222.1:5900 SYN ******S*
Feb 17 04:30:41 210.211.147.89:3301 -> xxx.yyy.222.1:6101 SYN ******S*
Feb 17 04:30:41 210.211.147.89:3303 -> xxx.yyy.222.1:4899 SYN ******S*
Feb 17 04:30:38 210.211.147.89:3306 -> xxx.yyy.222.2:42 SYN ******S*
Feb 17 04:30:41 210.211.147.89:3307 -> xxx.yyy.222.2:139 SYN ******S*
Feb 17 04:30:41 210.211.147.89:3308 -> xxx.yyy.222.2:6101 SYN ******S*
[...]
Feb 17 10:48:50 210.211.147.89:4443 -> xxx.yyy.222.35:5900 SYN ******S*
Feb 17 10:48:51 210.211.147.89:4447 -> xxx.yyy.222.13:5900 SYN ******S*
Feb 17 10:48:52 210.211.147.89:4466 -> xxx.yyy.222.34:5900 SYN ******S*
Feb 17 10:48:52 210.211.147.89:4467 -> xxx.yyy.222.3:5900 SYN ******S*
Feb 17 10:59:51 210.211.147.89:3888 -> xxx.yyy.222.13:5900 SYN ******S*
Feb 17 10:59:51 210.211.147.89:3895 -> xxx.yyy.222.3:5900 SYN ******S*
Feb 17 10:59:54 210.211.147.89:3923 -> xxx.yyy.222.35:5900 SYN ******S*
Feb 17 10:59:54 210.211.147.89:3924 -> xxx.yyy.222.34:5900 SYN ******S*
Feb 17 10:59:54 210.211.147.89:3925 -> xxx.yyy.222.14:5900 SYN ******S*
27910
Feb 17 09:11:06 65.162.1.154:3708 -> xxx.yyy.1.3:4899 SYN ******S*
Feb 17 09:11:08 65.162.1.154:3715 -> xxx.yyy.1.4:4899 SYN ******S*
Feb 17 09:11:08 65.162.1.154:3730 -> xxx.yyy.1.5:4899 SYN ******S*
Feb 17 09:11:08 65.162.1.154:3737 -> xxx.yyy.1.6:4899 SYN ******S*
Feb 17 09:11:08 65.162.1.154:3771 -> xxx.yyy.1.13:4899 SYN ******S*
Feb 17 09:11:06 65.162.1.154:3782 -> xxx.yyy.1.16:4899 SYN ******S*
Feb 17 09:11:06 65.162.1.154:3796 -> xxx.yyy.1.17:4899 SYN ******S*
Feb 17 09:11:08 65.162.1.154:3829 -> xxx.yyy.1.23:4899 SYN ******S*
[...]
Feb 17 09:20:06 65.162.1.154:1254 -> xxx.yyy.255.161:4899 SYN ******S*
Feb 17 09:20:06 65.162.1.154:1371 -> xxx.yyy.255.146:4899 SYN ******S*
Feb 17 09:20:06 65.162.1.154:3644 -> xxx.yyy.255.156:4899 SYN ******S*
Feb 17 09:20:06 65.162.1.154:3886 -> xxx.yyy.255.200:4899 SYN ******S*
Feb 17 09:20:06 65.162.1.154:4663 -> xxx.yyy.255.193:4899 SYN ******S*
Feb 17 09:20:06 65.162.1.154:4815 -> xxx.yyy.255.173:4899 SYN ******S*
Feb 17 09:20:06 65.162.1.154:4957 -> xxx.yyy.255.204:4899 SYN ******S*
Feb 17 09:20:06 65.162.1.154:1167 -> xxx.yyy.255.220:4899 SYN ******S*
25342
Feb 17 00:22:16 24.236.164.193:2546 -> xxx.yyy.1.1:1433 SYN ******S*
Feb 17 00:22:16 24.236.164.193:2547 -> xxx.yyy.1.2:1433 SYN ******S*
Feb 17 00:22:13 24.236.164.193:2549 -> xxx.yyy.1.4:1433 SYN ******S*
Feb 17 00:22:13 24.236.164.193:2552 -> xxx.yyy.1.7:1433 SYN ******S*
Feb 17 00:22:13 24.236.164.193:2553 -> xxx.yyy.1.8:1433 SYN ******S*
Feb 17 00:22:13 24.236.164.193:2555 -> xxx.yyy.1.10:1433 SYN ******S*
Feb 17 00:22:13 24.236.164.193:2556 -> xxx.yyy.1.11:1433 SYN ******S*
Feb 17 00:22:13 24.236.164.193:2557 -> xxx.yyy.1.12:1433 SYN ******S*
[...]
Feb 17 00:25:56 24.236.164.193:1933 -> xxx.yyy.255.231:1433 SYN ******S*
Feb 17 00:25:56 24.236.164.193:1934 -> xxx.yyy.255.232:1433 SYN ******S*
Feb 17 00:25:56 24.236.164.193:1938 -> xxx.yyy.255.236:1433 SYN ******S*
Feb 17 00:25:56 24.236.164.193:1940 -> xxx.yyy.255.237:1433 SYN ******S*
Feb 17 00:25:56 24.236.164.193:1941 -> xxx.yyy.255.239:1433 SYN ******S*
Feb 17 00:25:56 24.236.164.193:1942 -> xxx.yyy.255.240:1433 SYN ******S*
Feb 17 00:25:56 24.236.164.193:1944 -> xxx.yyy.255.242:1433 SYN ******S*
Feb 17 00:25:56 24.236.164.193:1946 -> xxx.yyy.255.244:1433 SYN ******S*
22983
Feb 17 00:00:08 202.58.80.95:55805 -> xxx.yyy.223.43:1433 SYN ******S*
Feb 17 00:00:04 202.58.80.95:55188 -> xxx.yyy.223.44:1433 SYN ******S*
Feb 17 00:00:08 202.58.80.95:55806 -> xxx.yyy.223.45:1433 SYN ******S*
Feb 17 00:00:04 202.58.80.95:55807 -> xxx.yyy.223.46:1433 SYN ******S*
Feb 17 00:00:05 202.58.80.95:55730 -> xxx.yyy.223.28:1433 SYN ******S*
Feb 17 00:00:08 202.58.80.95:55201 -> xxx.yyy.223.51:1433 SYN ******S*
Feb 17 00:00:08 202.58.80.95:55820 -> xxx.yyy.223.52:1433 SYN ******S*
Feb 17 00:00:08 202.58.80.95:55207 -> xxx.yyy.223.54:1433 SYN ******S*
[...]
Feb 17 00:32:23 202.58.80.95:36880 -> xxx.yyy.255.244:1433 SYN ******S*
Feb 17 00:32:23 202.58.80.95:36885 -> xxx.yyy.255.245:1433 SYN ******S*
Feb 17 00:32:23 202.58.80.95:36886 -> xxx.yyy.255.246:1433 SYN ******S*
Feb 17 00:32:23 202.58.80.95:36904 -> xxx.yyy.255.248:1433 SYN ******S*
Feb 17 00:32:24 202.58.80.95:36911 -> xxx.yyy.255.249:1433 SYN ******S*
Feb 17 00:32:24 202.58.80.95:36932 -> xxx.yyy.255.251:1433 SYN ******S*
Feb 17 00:32:24 202.58.80.95:36935 -> xxx.yyy.255.252:1433 SYN ******S*
Feb 17 00:32:24 202.58.80.95:36937 -> xxx.yyy.255.254:1433 SYN ******S*
Feb 17 00:32:24 202.58.80.95:36936 -> xxx.yyy.255.253:1433 SYN ******S*
17306
Feb 17 11:43:40 82.33.204.85:61054 -> xxx.yyy.1.4:6101 SYN ******S*
Feb 17 11:43:40 82.33.204.85:61071 -> xxx.yyy.1.16:6101 SYN ******S*
Feb 17 11:43:43 82.33.204.85:61076 -> xxx.yyy.1.21:6101 SYN ******S*
Feb 17 11:43:40 82.33.204.85:61088 -> xxx.yyy.1.33:6101 SYN ******S*
Feb 17 11:43:40 82.33.204.85:61087 -> xxx.yyy.1.32:6101 SYN ******S*
Feb 17 11:43:40 82.33.204.85:61084 -> xxx.yyy.1.29:6101 SYN ******S*
Feb 17 11:43:40 82.33.204.85:61099 -> xxx.yyy.1.44:6101 SYN ******S*
Feb 17 11:43:40 82.33.204.85:61100 -> xxx.yyy.1.45:6101 SYN ******S*
[...]
Feb 17 11:59:13 82.33.204.85:4965 -> xxx.yyy.255.233:6101 SYN ******S*
Feb 17 11:59:13 82.33.204.85:4968 -> xxx.yyy.255.236:6101 SYN ******S*
Feb 17 11:59:13 82.33.204.85:4914 -> xxx.yyy.255.182:6101 SYN ******S*
Feb 17 11:59:13 82.33.204.85:4916 -> xxx.yyy.255.184:6101 SYN ******S*
Feb 17 11:59:13 82.33.204.85:4960 -> xxx.yyy.255.228:6101 SYN ******S*
Feb 17 11:59:13 82.33.204.85:4966 -> xxx.yyy.255.234:6101 SYN ******S*
Feb 17 11:59:13 82.33.204.85:4959 -> xxx.yyy.255.226:6101 SYN ******S*
Feb 17 11:59:13 82.33.204.85:4970 -> xxx.yyy.255.238:6101 SYN ******S*
Feb 17 11:59:13 82.33.204.85:4969 -> xxx.yyy.255.237:6101 SYN ******S*
14954
Feb 17 00:06:54 81.241.59.77:3807 -> xxx.yyy.75.141:10273 SYN ******S*
Feb 17 00:06:54 81.241.59.77:3845 -> xxx.yyy.75.141:10266 SYN ******S*
Feb 17 00:06:55 81.241.59.77:3818 -> xxx.yyy.75.141:10268 SYN ******S*
Feb 17 00:06:56 81.241.59.77:3823 -> xxx.yyy.75.141:10263 SYN ******S*
Feb 17 00:06:56 81.241.59.77:3824 -> xxx.yyy.75.141:10270 SYN ******S*
Feb 17 00:07:00 81.241.59.77:3845 -> xxx.yyy.75.141:10266 SYN ******S*
Feb 17 00:07:07 81.241.59.77:3926 -> xxx.yyy.75.141:10270 SYN ******S*
Feb 17 00:07:11 81.241.59.77:3973 -> xxx.yyy.75.141:10268 SYN ******S*
[...]
Feb 17 18:04:56 81.241.59.77:2430 -> xxx.yyy.75.141:10263 SYN ******S*
Feb 17 18:04:56 81.241.59.77:2435 -> xxx.yyy.75.141:10266 SYN ******S*
Feb 17 18:04:58 81.241.59.77:2462 -> xxx.yyy.75.141:10273 SYN ******S*
Feb 17 18:18:53 81.241.59.77:3446 -> xxx.yyy.75.141:10263 SYN ******S*
Feb 17 18:18:53 81.241.59.77:3444 -> xxx.yyy.75.141:10268 SYN ******S*
Feb 17 18:18:53 81.241.59.77:3407 -> xxx.yyy.75.141:10273 SYN ******S*
Feb 17 18:18:53 81.241.59.77:3413 -> xxx.yyy.75.141:10266 SYN ******S*
Feb 17 18:18:55 81.241.59.77:3422 -> xxx.yyy.75.141:10270 SYN ******S*
11799
[...]
11342
Feb 17 00:13:09 220.200.167.3:3467 -> xxx.yyy.154.100:5554 SYN ******S*
Feb 17 00:13:10 220.200.167.3:3733 -> xxx.yyy.154.100:1023 SYN ******S*
Feb 17 00:13:12 220.200.167.3:4397 -> xxx.yyy.154.100:9898 SYN ******S*
Feb 17 00:13:09 220.200.167.3:3469 -> xxx.yyy.154.101:5554 SYN ******S*
Feb 17 00:13:10 220.200.167.3:3736 -> xxx.yyy.154.101:1023 SYN ******S*
Feb 17 00:13:12 220.200.167.3:4398 -> xxx.yyy.154.101:9898 SYN ******S*
Feb 17 00:13:09 220.200.167.3:3471 -> xxx.yyy.154.103:5554 SYN ******S*
Feb 17 00:13:10 220.200.167.3:3738 -> xxx.yyy.154.103:1023 SYN ******S*
[...]
Feb 17 00:14:35 220.200.167.3:1573 -> xxx.yyy.155.230:9898 SYN ******S*
Feb 17 00:14:36 220.200.167.3:1585 -> xxx.yyy.155.243:9898 SYN ******S*
Feb 17 00:14:36 220.200.167.3:1589 -> xxx.yyy.155.236:9898 SYN ******S*
Feb 17 00:14:36 220.200.167.3:1591 -> xxx.yyy.155.238:9898 SYN ******S*
Feb 17 00:14:36 220.200.167.3:1618 -> xxx.yyy.155.249:9898 SYN ******S*
Feb 17 00:14:36 220.200.167.3:1617 -> xxx.yyy.155.254:9898 SYN ******S*
Feb 17 00:14:37 220.200.167.3:1766 -> xxx.yyy.156.36:9898 SYN ******S*
Feb 17 00:14:37 220.200.167.3:1770 -> xxx.yyy.156.37:9898 SYN ******S*
Feb 17 00:14:37 220.200.167.3:1773 -> xxx.yyy.156.17:9898 SYN ******S*
11257
[...]
10134
Feb 17 10:39:17 221.167.21.183:4094 -> xxx.yyy.1.2:17300 SYN ******S*
Feb 17 10:39:17 221.167.21.183:4099 -> xxx.yyy.1.7:17300 SYN ******S*
Feb 17 10:39:17 221.167.21.183:4100 -> xxx.yyy.1.8:17300 SYN ******S*
Feb 17 10:39:18 221.167.21.183:4101 -> xxx.yyy.1.9:17300 SYN ******S*
Feb 17 10:39:20 221.167.21.183:4104 -> xxx.yyy.1.12:17300 SYN ******S*
Feb 17 10:39:18 221.167.21.183:4095 -> xxx.yyy.1.3:17300 SYN ******S*
Feb 17 10:39:20 221.167.21.183:4098 -> xxx.yyy.1.6:17300 SYN ******S*
Feb 17 10:39:20 221.167.21.183:4102 -> xxx.yyy.1.10:17300 SYN ******S*
[...]
Feb 17 11:39:28 221.167.21.183:2325 -> xxx.yyy.106.64:17300 SYN ******S*
Feb 17 11:39:28 221.167.21.183:2326 -> xxx.yyy.106.65:17300 SYN ******S*
Feb 17 11:39:28 221.167.21.183:2327 -> xxx.yyy.106.66:17300 SYN ******S*
Feb 17 11:39:28 221.167.21.183:2328 -> xxx.yyy.106.67:17300 SYN ******S*
Feb 17 11:39:28 221.167.21.183:2333 -> xxx.yyy.106.72:17300 SYN ******S*
Feb 17 11:39:29 221.167.21.183:2307 -> xxx.yyy.106.46:17300 SYN ******S*
Feb 17 11:39:29 221.167.21.183:2306 -> xxx.yyy.106.45:17300 SYN ******S*
Feb 17 11:39:29 221.167.21.183:2321 -> xxx.yyy.106.60:17300 SYN ******S*
Feb 17 11:39:29 221.167.21.183:2315 -> xxx.yyy.106.54:17300 SYN ******S*
10109
Feb 17 00:00:07 210.99.2.5:3389 -> xxx.yyy.189.113:3306 SYN ******S*
Feb 17 00:00:04 210.99.2.5:3377 -> xxx.yyy.189.101:3306 SYN ******S*
Feb 17 00:00:04 210.99.2.5:3392 -> xxx.yyy.189.116:3306 SYN ******S*
Feb 17 00:00:04 210.99.2.5:3378 -> xxx.yyy.189.102:3306 SYN ******S*
Feb 17 00:00:04 210.99.2.5:3395 -> xxx.yyy.189.119:3306 SYN ******S*
Feb 17 00:00:07 210.99.2.5:3397 -> xxx.yyy.189.121:3306 SYN ******S*
Feb 17 00:00:04 210.99.2.5:3383 -> xxx.yyy.189.107:3306 SYN ******S*
Feb 17 00:00:04 210.99.2.5:3402 -> xxx.yyy.189.126:3306 SYN ******S*
[...]
Feb 17 00:05:09 210.99.2.5:2028 -> xxx.yyy.255.85:3306 SYN ******S*
Feb 17 00:05:09 210.99.2.5:1982 -> xxx.yyy.255.40:3306 SYN ******S*
Feb 17 00:05:09 210.99.2.5:2178 -> xxx.yyy.255.232:3306 SYN ******S*
Feb 17 00:05:09 210.99.2.5:1954 -> xxx.yyy.255.12:3306 SYN ******S*
Feb 17 00:05:09 210.99.2.5:2151 -> xxx.yyy.255.207:3306 SYN ******S*
Feb 17 00:05:09 210.99.2.5:2172 -> xxx.yyy.255.226:3306 SYN ******S*
Feb 17 00:05:09 210.99.2.5:2016 -> xxx.yyy.255.73:3306 SYN ******S*
Feb 17 00:05:09 210.99.2.5:2188 -> xxx.yyy.255.242:3306 SYN ******S*
9523
Feb 17 22:55:31 221.163.209.170:1634 -> xxx.yyy.153.139:5554 SYN ******S*
Feb 17 22:55:32 221.163.209.170:2276 -> xxx.yyy.153.139:1023 SYN ******S*
Feb 17 22:55:34 221.163.209.170:3270 -> xxx.yyy.153.139:9898 SYN ******S*
Feb 17 22:55:32 221.163.209.170:1679 -> xxx.yyy.153.154:5554 SYN ******S*
Feb 17 22:55:33 221.163.209.170:2315 -> xxx.yyy.153.154:1023 SYN ******S*
Feb 17 22:55:34 221.163.209.170:3306 -> xxx.yyy.153.154:9898 SYN ******S*
Feb 17 22:55:31 221.163.209.170:1654 -> xxx.yyy.153.138:5554 SYN ******S*
Feb 17 22:55:32 221.163.209.170:2291 -> xxx.yyy.153.138:1023 SYN ******S*
[...]
Feb 17 22:56:14 221.163.209.170:1141 -> xxx.yyy.173.199:9898 SYN ******S*
Feb 17 22:56:14 221.163.209.170:1156 -> xxx.yyy.173.223:9898 SYN ******S*
Feb 17 22:56:14 221.163.209.170:1176 -> xxx.yyy.173.241:9898 SYN ******S*
Feb 17 22:56:14 221.163.209.170:1178 -> xxx.yyy.173.207:9898 SYN ******S*
Feb 17 22:56:14 221.163.209.170:1180 -> xxx.yyy.173.209:9898 SYN ******S*
Feb 17 22:56:14 221.163.209.170:1182 -> xxx.yyy.173.211:9898 SYN ******S*
Feb 17 22:56:14 221.163.209.170:1184 -> xxx.yyy.173.213:9898 SYN ******S*
Feb 17 22:56:14 221.163.209.170:1186 -> xxx.yyy.173.215:9898 SYN ******S*
Feb 17 22:56:14 221.163.209.170:1194 -> xxx.yyy.173.248:9898 SYN ******S*
7187
Feb 17 22:55:37 220.84.75.135:3830 -> xxx.yyy.133.15:5554 SYN ******S*
Feb 17 22:55:38 220.84.75.135:4535 -> xxx.yyy.133.15:1023 SYN ******S*
Feb 17 22:55:37 220.84.75.135:3834 -> xxx.yyy.133.18:5554 SYN ******S*
Feb 17 22:55:38 220.84.75.135:4537 -> xxx.yyy.133.18:1023 SYN ******S*
Feb 17 22:55:40 220.84.75.135:1867 -> xxx.yyy.133.18:9898 SYN ******S*
Feb 17 22:55:37 220.84.75.135:3839 -> xxx.yyy.133.23:5554 SYN ******S*
Feb 17 22:55:38 220.84.75.135:4542 -> xxx.yyy.133.23:1023 SYN ******S*
Feb 17 22:55:37 220.84.75.135:3831 -> xxx.yyy.133.16:5554 SYN ******S*
[...]
Feb 17 22:56:22 220.84.75.135:1302 -> xxx.yyy.153.107:9898 SYN ******S*
Feb 17 22:56:22 220.84.75.135:1315 -> xxx.yyy.153.119:9898 SYN ******S*
Feb 17 22:56:22 220.84.75.135:1317 -> xxx.yyy.153.121:9898 SYN ******S*
Feb 17 22:56:22 220.84.75.135:1316 -> xxx.yyy.153.120:9898 SYN ******S*
Feb 17 22:56:22 220.84.75.135:1318 -> xxx.yyy.153.122:9898 SYN ******S*
Feb 17 22:56:22 220.84.75.135:1319 -> xxx.yyy.153.123:9898 SYN ******S*
Feb 17 22:56:22 220.84.75.135:1324 -> xxx.yyy.153.128:9898 SYN ******S*
Feb 17 22:56:22 220.84.75.135:1325 -> xxx.yyy.153.130:9898 SYN ******S*
Feb 17 22:56:22 220.84.75.135:1328 -> xxx.yyy.153.133:9898 SYN ******S*
7068
Feb 17 18:27:08 203.236.217.110:80 -> xxx.yyy.1.16:42 SYN ******S*
Feb 17 18:27:08 203.236.217.110:80 -> xxx.yyy.1.42:42 SYN ******S*
Feb 17 18:27:08 203.236.217.110:80 -> xxx.yyy.1.29:42 SYN ******S*
Feb 17 18:27:08 203.236.217.110:80 -> xxx.yyy.1.75:42 SYN ******S*
Feb 17 18:27:08 203.236.217.110:80 -> xxx.yyy.1.115:42 SYN ******S*
Feb 17 18:27:08 203.236.217.110:80 -> xxx.yyy.1.90:42 SYN ******S*
Feb 17 18:27:08 203.236.217.110:80 -> xxx.yyy.1.144:42 SYN ******S*
Feb 17 18:27:08 203.236.217.110:80 -> xxx.yyy.1.176:42 SYN ******S*
[...]
Feb 17 18:27:27 203.236.217.110:80 -> xxx.yyy.255.166:42 SYN ******S*
Feb 17 18:27:27 203.236.217.110:80 -> xxx.yyy.255.202:42 SYN ******S*
Feb 17 18:27:27 203.236.217.110:80 -> xxx.yyy.255.151:42 SYN ******S*
Feb 17 18:27:27 203.236.217.110:80 -> xxx.yyy.255.186:42 SYN ******S*
Feb 17 18:27:27 203.236.217.110:80 -> xxx.yyy.255.168:42 SYN ******S*
Feb 17 18:27:27 203.236.217.110:80 -> xxx.yyy.255.207:42 SYN ******S*
Feb 17 18:27:27 203.236.217.110:80 -> xxx.yyy.255.232:42 SYN ******S*
Feb 17 18:27:27 203.236.217.110:80 -> xxx.yyy.255.239:42 SYN ******S*
Feb 17 18:27:27 203.236.217.110:80 -> xxx.yyy.255.223:42 SYN ******S*
6520
Feb 17 23:56:35 218.75.75.59:2022 -> xxx.yyy.133.234:5554 SYN ******S*
Feb 17 23:56:38 218.75.75.59:1887 -> xxx.yyy.133.234:9898 SYN ******S*
Feb 17 23:56:35 218.75.75.59:2073 -> xxx.yyy.133.238:5554 SYN ******S*
Feb 17 23:56:36 218.75.75.59:2292 -> xxx.yyy.133.238:1023 SYN ******S*
Feb 17 23:56:35 218.75.75.59:2076 -> xxx.yyy.133.240:5554 SYN ******S*
Feb 17 23:56:38 218.75.75.59:1904 -> xxx.yyy.133.240:9898 SYN ******S*
Feb 17 23:56:35 218.75.75.59:2084 -> xxx.yyy.133.241:5554 SYN ******S*
Feb 17 23:56:35 218.75.75.59:2085 -> xxx.yyy.133.242:5554 SYN ******S*
[...]
Feb 17 23:58:20 218.75.75.59:2218 -> xxx.yyy.154.84:9898 SYN ******S*
Feb 17 23:58:20 218.75.75.59:2346 -> xxx.yyy.154.90:9898 SYN ******S*
Feb 17 23:58:21 218.75.75.59:2997 -> xxx.yyy.154.93:9898 SYN ******S*
Feb 17 23:58:21 218.75.75.59:2115 -> xxx.yyy.154.94:9898 SYN ******S*
Feb 17 23:58:21 218.75.75.59:2116 -> xxx.yyy.154.95:9898 SYN ******S*
Feb 17 23:58:21 218.75.75.59:2117 -> xxx.yyy.154.96:9898 SYN ******S*
Feb 17 23:58:21 218.75.75.59:2120 -> xxx.yyy.154.97:9898 SYN ******S*
Feb 17 23:58:21 218.75.75.59:2121 -> xxx.yyy.154.100:9898 SYN ******S*
5996
Feb 17 07:14:48 219.132.26.163:3325 -> xxx.yyy.1.0:1433 SYN ******S*
Feb 17 07:14:48 219.132.26.163:3327 -> xxx.yyy.1.2:1433 SYN ******S*
Feb 17 07:14:45 219.132.26.163:3328 -> xxx.yyy.1.3:1433 SYN ******S*
Feb 17 07:14:48 219.132.26.163:3329 -> xxx.yyy.1.4:1433 SYN ******S*
Feb 17 07:14:48 219.132.26.163:3330 -> xxx.yyy.1.5:1433 SYN ******S*
Feb 17 07:14:45 219.132.26.163:3331 -> xxx.yyy.1.6:1433 SYN ******S*
Feb 17 07:14:45 219.132.26.163:3333 -> xxx.yyy.1.8:1433 SYN ******S*
Feb 17 07:14:45 219.132.26.163:3335 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
Feb 17 07:44:41 219.132.26.163:3423 -> xxx.yyy.33.248:1433 SYN ******S*
Feb 17 07:44:41 219.132.26.163:3422 -> xxx.yyy.33.247:1433 SYN ******S*
Feb 17 07:44:41 219.132.26.163:3421 -> xxx.yyy.33.246:1433 SYN ******S*
Feb 17 07:44:41 219.132.26.163:3425 -> xxx.yyy.33.249:1433 SYN ******S*
Feb 17 07:44:41 219.132.26.163:3427 -> xxx.yyy.33.251:1433 SYN ******S*
Feb 17 07:44:41 219.132.26.163:3426 -> xxx.yyy.33.250:1433 SYN ******S*
Feb 17 07:44:42 219.132.26.163:3431 -> xxx.yyy.33.254:1433 SYN ******S*
Feb 17 07:44:42 219.132.26.163:3428 -> xxx.yyy.33.252:1433 SYN ******S*
Feb 17 07:44:42 219.132.26.163:3432 -> xxx.yyy.33.255:1433 SYN ******S*
5905
Feb 17 00:35:24 59.36.64.132:3959 -> xxx.yyy.239.33:1433 SYN ******S*
Feb 17 00:35:22 59.36.64.132:3968 -> xxx.yyy.239.36:1433 SYN ******S*
Feb 17 00:35:24 59.36.64.132:3974 -> xxx.yyy.239.38:1433 SYN ******S*
Feb 17 00:35:22 59.36.64.132:3989 -> xxx.yyy.239.43:1433 SYN ******S*
Feb 17 00:35:24 59.36.64.132:3995 -> xxx.yyy.239.45:1433 SYN ******S*
Feb 17 00:35:22 59.36.64.132:3721 -> xxx.yyy.238.211:1433 SYN ******S*
Feb 17 00:35:22 59.36.64.132:3724 -> xxx.yyy.238.212:1433 SYN ******S*
Feb 17 00:35:22 59.36.64.132:3737 -> xxx.yyy.238.215:1433 SYN ******S*
[...]
Feb 17 00:50:36 59.36.64.132:3220 -> xxx.yyy.255.229:1433 SYN ******S*
Feb 17 00:50:36 59.36.64.132:3219 -> xxx.yyy.255.228:1433 SYN ******S*
Feb 17 00:50:36 59.36.64.132:3228 -> xxx.yyy.255.237:1433 SYN ******S*
Feb 17 00:50:36 59.36.64.132:3225 -> xxx.yyy.255.234:1433 SYN ******S*
Feb 17 00:50:36 59.36.64.132:3226 -> xxx.yyy.255.235:1433 SYN ******S*
Feb 17 00:50:36 59.36.64.132:3224 -> xxx.yyy.255.233:1433 SYN ******S*
Feb 17 00:50:36 59.36.64.132:3269 -> xxx.yyy.255.252:1433 SYN ******S*
Feb 17 00:50:36 59.36.64.132:3271 -> xxx.yyy.255.254:1433 SYN ******S*
5733
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list