[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Sat Feb 19 14:39:43 GMT 2005
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Feb 18 19:59:09 63.200.36.15:1353 -> xxx.yyy.1.1:1433 SYN ******S*
Feb 18 19:59:09 63.200.36.15:1356 -> xxx.yyy.1.2:1433 SYN ******S*
Feb 18 19:59:06 63.200.36.15:1358 -> xxx.yyy.1.4:1433 SYN ******S*
Feb 18 19:59:09 63.200.36.15:1359 -> xxx.yyy.1.5:1433 SYN ******S*
Feb 18 19:59:09 63.200.36.15:1362 -> xxx.yyy.1.6:1433 SYN ******S*
Feb 18 19:59:09 63.200.36.15:1363 -> xxx.yyy.1.7:1433 SYN ******S*
Feb 18 19:59:06 63.200.36.15:1365 -> xxx.yyy.1.8:1433 SYN ******S*
Feb 18 19:59:09 63.200.36.15:1366 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
Feb 18 21:53:38 63.200.36.15:4336 -> xxx.yyy.255.247:1433 SYN ******S*
Feb 18 21:53:38 63.200.36.15:4356 -> xxx.yyy.255.248:1433 SYN ******S*
Feb 18 21:53:38 63.200.36.15:4367 -> xxx.yyy.255.252:1433 SYN ******S*
Feb 18 21:53:38 63.200.36.15:4363 -> xxx.yyy.255.251:1433 SYN ******S*
Feb 18 21:53:38 63.200.36.15:4359 -> xxx.yyy.255.250:1433 SYN ******S*
Feb 18 21:53:38 63.200.36.15:4357 -> xxx.yyy.255.249:1433 SYN ******S*
Feb 18 21:53:38 63.200.36.15:4376 -> xxx.yyy.255.254:1433 SYN ******S*
Feb 18 21:53:38 63.200.36.15:4369 -> xxx.yyy.255.253:1433 SYN ******S*
99636
Feb 18 00:06:39 218.4.227.225:3132 -> xxx.yyy.64.0:1433 SYN ******S*
Feb 18 00:06:39 218.4.227.225:3150 -> xxx.yyy.64.4:1433 SYN ******S*
Feb 18 00:06:39 218.4.227.225:3152 -> xxx.yyy.64.5:1433 SYN ******S*
Feb 18 00:06:36 218.4.227.225:3154 -> xxx.yyy.64.6:1433 SYN ******S*
Feb 18 00:06:37 218.4.227.225:3160 -> xxx.yyy.64.8:1433 SYN ******S*
Feb 18 00:06:40 218.4.227.225:3161 -> xxx.yyy.64.9:1433 SYN ******S*
Feb 18 00:06:40 218.4.227.225:3165 -> xxx.yyy.64.11:1433 SYN ******S*
Feb 18 00:06:37 218.4.227.225:3169 -> xxx.yyy.64.12:1433 SYN ******S*
[...]
Feb 18 02:58:50 218.4.227.225:3673 -> xxx.yyy.255.247:1433 SYN ******S*
Feb 18 02:58:50 218.4.227.225:3672 -> xxx.yyy.255.246:1433 SYN ******S*
Feb 18 02:58:50 218.4.227.225:3676 -> xxx.yyy.255.250:1433 SYN ******S*
Feb 18 02:58:50 218.4.227.225:3675 -> xxx.yyy.255.249:1433 SYN ******S*
Feb 18 02:58:50 218.4.227.225:3674 -> xxx.yyy.255.248:1433 SYN ******S*
Feb 18 02:58:50 218.4.227.225:3681 -> xxx.yyy.255.251:1433 SYN ******S*
Feb 18 02:58:50 218.4.227.225:3688 -> xxx.yyy.255.252:1433 SYN ******S*
Feb 18 02:58:50 218.4.227.225:3697 -> xxx.yyy.255.253:1433 SYN ******S*
Feb 18 02:58:50 218.4.227.225:3700 -> xxx.yyy.255.254:1433 SYN ******S*
90386
Feb 18 05:59:04 83.177.226.167:2371 -> xxx.yyy.22.85:1433 SYN ******S*
Feb 18 05:59:01 83.177.226.167:2374 -> xxx.yyy.22.86:1433 SYN ******S*
Feb 18 05:59:04 83.177.226.167:2377 -> xxx.yyy.22.87:1433 SYN ******S*
Feb 18 05:59:04 83.177.226.167:2380 -> xxx.yyy.22.88:1433 SYN ******S*
Feb 18 05:59:04 83.177.226.167:2383 -> xxx.yyy.22.89:1433 SYN ******S*
Feb 18 05:59:04 83.177.226.167:2386 -> xxx.yyy.22.90:1433 SYN ******S*
Feb 18 05:59:04 83.177.226.167:2389 -> xxx.yyy.22.91:1433 SYN ******S*
Feb 18 05:59:01 83.177.226.167:2392 -> xxx.yyy.22.92:1433 SYN ******S*
[...]
Feb 18 09:10:24 83.177.226.167:4695 -> xxx.yyy.235.183:1433 SYN ******S*
Feb 18 09:10:24 83.177.226.167:4694 -> xxx.yyy.235.182:1433 SYN ******S*
Feb 18 09:10:24 83.177.226.167:4690 -> xxx.yyy.235.181:1433 SYN ******S*
Feb 18 09:10:24 83.177.226.167:4684 -> xxx.yyy.235.179:1433 SYN ******S*
Feb 18 09:10:24 83.177.226.167:4696 -> xxx.yyy.235.184:1433 SYN ******S*
Feb 18 09:10:24 83.177.226.167:4699 -> xxx.yyy.235.185:1433 SYN ******S*
Feb 18 09:10:25 83.177.226.167:4705 -> xxx.yyy.235.187:1433 SYN ******S*
Feb 18 09:10:25 83.177.226.167:4704 -> xxx.yyy.235.186:1433 SYN ******S*
87650
Feb 18 05:48:23 61.222.221.227:618 -> xxx.yyy.1.0:111 SYN ******S*
Feb 18 05:48:23 61.222.221.227:619 -> xxx.yyy.1.1:111 SYN ******S*
Feb 18 05:48:23 61.222.221.227:620 -> xxx.yyy.1.2:111 SYN ******S*
Feb 18 05:48:24 61.222.221.227:621 -> xxx.yyy.1.3:111 SYN ******S*
Feb 18 05:48:20 61.222.221.227:622 -> xxx.yyy.1.4:111 SYN ******S*
Feb 18 05:48:20 61.222.221.227:623 -> xxx.yyy.1.5:111 SYN ******S*
Feb 18 05:48:20 61.222.221.227:624 -> xxx.yyy.1.6:111 SYN ******S*
Feb 18 05:48:20 61.222.221.227:625 -> xxx.yyy.1.7:111 SYN ******S*
[...]
Feb 18 06:15:37 61.222.221.227:899 -> xxx.yyy.255.208:111 SYN ******S*
Feb 18 06:15:37 61.222.221.227:901 -> xxx.yyy.255.209:111 SYN ******S*
Feb 18 06:15:37 61.222.221.227:903 -> xxx.yyy.255.211:111 SYN ******S*
Feb 18 06:15:37 61.222.221.227:904 -> xxx.yyy.255.212:111 SYN ******S*
Feb 18 06:15:37 61.222.221.227:905 -> xxx.yyy.255.213:111 SYN ******S*
Feb 18 06:15:37 61.222.221.227:906 -> xxx.yyy.255.214:111 SYN ******S*
Feb 18 06:15:37 61.222.221.227:907 -> xxx.yyy.255.215:111 SYN ******S*
Feb 18 06:15:37 61.222.221.227:908 -> xxx.yyy.255.216:111 SYN ******S*
Feb 18 06:15:37 61.222.221.227:909 -> xxx.yyy.255.217:111 SYN ******S*
82398
Feb 18 02:57:38 203.118.37.243:1171 -> xxx.yyy.1.1:3306 SYN ******S*
Feb 18 02:57:38 203.118.37.243:1172 -> xxx.yyy.1.2:3306 SYN ******S*
Feb 18 02:57:38 203.118.37.243:1173 -> xxx.yyy.1.3:3306 SYN ******S*
Feb 18 02:57:38 203.118.37.243:1174 -> xxx.yyy.1.4:3306 SYN ******S*
Feb 18 02:57:38 203.118.37.243:1175 -> xxx.yyy.1.5:3306 SYN ******S*
Feb 18 02:57:38 203.118.37.243:1176 -> xxx.yyy.1.6:3306 SYN ******S*
Feb 18 02:57:38 203.118.37.243:1177 -> xxx.yyy.1.7:3306 SYN ******S*
Feb 18 02:57:38 203.118.37.243:1179 -> xxx.yyy.1.8:3306 SYN ******S*
[...]
Feb 18 03:08:57 203.118.37.243:4296 -> xxx.yyy.255.254:3306 SYN ******S*
Feb 18 03:08:57 203.118.37.243:4293 -> xxx.yyy.255.251:3306 SYN ******S*
Feb 18 03:08:57 203.118.37.243:4290 -> xxx.yyy.255.248:3306 SYN ******S*
Feb 18 03:08:57 203.118.37.243:4294 -> xxx.yyy.255.252:3306 SYN ******S*
Feb 18 03:08:57 203.118.37.243:4291 -> xxx.yyy.255.249:3306 SYN ******S*
Feb 18 03:08:57 203.118.37.243:4295 -> xxx.yyy.255.253:3306 SYN ******S*
Feb 18 03:08:57 203.118.37.243:4292 -> xxx.yyy.255.250:3306 SYN ******S*
Feb 18 03:08:57 203.118.37.243:4289 -> xxx.yyy.255.247:3306 SYN ******S*
73217
Feb 18 22:25:44 162.39.19.100:1093 -> xxx.yyy.1.1:139 SYN ******S*
Feb 18 22:25:44 162.39.19.100:1094 -> xxx.yyy.1.2:139 SYN ******S*
Feb 18 22:25:41 162.39.19.100:1095 -> xxx.yyy.1.3:139 SYN ******S*
Feb 18 22:25:44 162.39.19.100:1096 -> xxx.yyy.1.4:139 SYN ******S*
Feb 18 22:25:44 162.39.19.100:1097 -> xxx.yyy.1.5:139 SYN ******S*
Feb 18 22:25:44 162.39.19.100:1098 -> xxx.yyy.1.6:139 SYN ******S*
Feb 18 22:25:44 162.39.19.100:1100 -> xxx.yyy.1.7:139 SYN ******S*
Feb 18 22:25:41 162.39.19.100:1101 -> xxx.yyy.1.8:139 SYN ******S*
[...]
Feb 18 22:45:29 162.39.19.100:2807 -> xxx.yyy.255.238:139 SYN ******S*
Feb 18 22:45:29 162.39.19.100:2808 -> xxx.yyy.255.239:139 SYN ******S*
Feb 18 22:45:29 162.39.19.100:2809 -> xxx.yyy.255.240:139 SYN ******S*
Feb 18 22:45:29 162.39.19.100:2805 -> xxx.yyy.255.236:139 SYN ******S*
Feb 18 22:45:29 162.39.19.100:2820 -> xxx.yyy.255.249:139 SYN ******S*
Feb 18 22:45:29 162.39.19.100:2814 -> xxx.yyy.255.245:139 SYN ******S*
Feb 18 22:45:29 162.39.19.100:2824 -> xxx.yyy.255.253:139 SYN ******S*
Feb 18 22:45:29 162.39.19.100:2825 -> xxx.yyy.255.254:139 SYN ******S*
62107
Feb 18 20:32:31 194.79.160.7:2696 -> xxx.yyy.1.10:5900 SYN ******S*
Feb 18 20:32:32 194.79.160.7:2697 -> xxx.yyy.1.11:5900 SYN ******S*
Feb 18 20:32:34 194.79.160.7:2699 -> xxx.yyy.1.13:5900 SYN ******S*
Feb 18 20:32:32 194.79.160.7:2700 -> xxx.yyy.1.14:5900 SYN ******S*
Feb 18 20:32:32 194.79.160.7:2702 -> xxx.yyy.1.16:5900 SYN ******S*
Feb 18 20:32:32 194.79.160.7:2703 -> xxx.yyy.1.17:5900 SYN ******S*
Feb 18 20:32:34 194.79.160.7:2704 -> xxx.yyy.1.18:5900 SYN ******S*
Feb 18 20:32:32 194.79.160.7:2706 -> xxx.yyy.1.20:5900 SYN ******S*
[...]
Feb 18 20:43:31 194.79.160.7:3018 -> xxx.yyy.255.249:5900 SYN ******S*
Feb 18 20:43:31 194.79.160.7:3019 -> xxx.yyy.255.250:5900 SYN ******S*
Feb 18 20:43:31 194.79.160.7:3016 -> xxx.yyy.255.247:5900 SYN ******S*
Feb 18 20:43:31 194.79.160.7:3020 -> xxx.yyy.255.251:5900 SYN ******S*
Feb 18 20:43:31 194.79.160.7:3014 -> xxx.yyy.255.245:5900 SYN ******S*
Feb 18 20:43:31 194.79.160.7:3022 -> xxx.yyy.255.253:5900 SYN ******S*
Feb 18 20:43:31 194.79.160.7:3023 -> xxx.yyy.255.254:5900 SYN ******S*
Feb 18 20:43:31 194.79.160.7:3017 -> xxx.yyy.255.248:5900 SYN ******S*
60601
[...]
60588
Feb 18 23:11:13 64.219.159.245:2471 -> xxx.yyy.1.7:6101 SYN ******S*
Feb 18 23:11:16 64.219.159.245:2473 -> xxx.yyy.1.9:6101 SYN ******S*
Feb 18 23:11:16 64.219.159.245:2474 -> xxx.yyy.1.10:6101 SYN ******S*
Feb 18 23:11:16 64.219.159.245:2480 -> xxx.yyy.1.16:6101 SYN ******S*
Feb 18 23:11:13 64.219.159.245:2481 -> xxx.yyy.1.17:6101 SYN ******S*
Feb 18 23:11:16 64.219.159.245:2482 -> xxx.yyy.1.18:6101 SYN ******S*
Feb 18 23:11:14 64.219.159.245:2496 -> xxx.yyy.1.32:6101 SYN ******S*
Feb 18 23:11:14 64.219.159.245:2497 -> xxx.yyy.1.33:6101 SYN ******S*
[...]
Feb 18 23:42:14 64.219.159.245:2967 -> xxx.yyy.255.249:6101 SYN ******S*
Feb 18 23:42:14 64.219.159.245:2969 -> xxx.yyy.255.251:6101 SYN ******S*
Feb 18 23:42:11 64.219.159.245:2971 -> xxx.yyy.255.253:6101 SYN ******S*
Feb 18 23:42:14 64.219.159.245:2972 -> xxx.yyy.255.254:6101 SYN ******S*
Feb 18 23:42:14 64.219.159.245:2953 -> xxx.yyy.255.235:6101 SYN ******S*
Feb 18 23:42:14 64.219.159.245:2934 -> xxx.yyy.255.216:6101 SYN ******S*
Feb 18 23:42:14 64.219.159.245:2970 -> xxx.yyy.255.252:6101 SYN ******S*
Feb 18 23:42:14 64.219.159.245:2935 -> xxx.yyy.255.217:6101 SYN ******S*
57233
Feb 18 17:18:16 66.211.138.21:2657 -> xxx.yyy.1.1:21 SYN ******S*
Feb 18 17:18:13 66.211.138.21:2659 -> xxx.yyy.1.3:21 SYN ******S*
Feb 18 17:18:16 66.211.138.21:2660 -> xxx.yyy.1.4:21 SYN ******S*
Feb 18 17:18:16 66.211.138.21:2663 -> xxx.yyy.1.7:21 SYN ******S*
Feb 18 17:18:16 66.211.138.21:2664 -> xxx.yyy.1.8:21 SYN ******S*
Feb 18 17:18:16 66.211.138.21:2665 -> xxx.yyy.1.9:21 SYN ******S*
Feb 18 17:18:16 66.211.138.21:2666 -> xxx.yyy.1.10:21 SYN ******S*
Feb 18 17:18:16 66.211.138.21:2667 -> xxx.yyy.1.11:21 SYN ******S*
[...]
Feb 18 17:29:30 66.211.138.21:1548 -> xxx.yyy.255.251:21 SYN ******S*
Feb 18 17:29:30 66.211.138.21:1541 -> xxx.yyy.255.244:21 SYN ******S*
Feb 18 17:29:30 66.211.138.21:1542 -> xxx.yyy.255.245:21 SYN ******S*
Feb 18 17:29:30 66.211.138.21:1545 -> xxx.yyy.255.248:21 SYN ******S*
Feb 18 17:29:30 66.211.138.21:1549 -> xxx.yyy.255.252:21 SYN ******S*
Feb 18 17:29:30 66.211.138.21:1546 -> xxx.yyy.255.249:21 SYN ******S*
Feb 18 17:29:30 66.211.138.21:1543 -> xxx.yyy.255.246:21 SYN ******S*
Feb 18 17:29:30 66.211.138.21:1547 -> xxx.yyy.255.250:21 SYN ******S*
Feb 18 17:29:30 66.211.138.21:1551 -> xxx.yyy.255.254:21 SYN ******S*
55478
Feb 18 08:55:55 203.233.194.221:3810 -> xxx.yyy.1.1:3306 SYN ******S*
Feb 18 08:55:55 203.233.194.221:3811 -> xxx.yyy.1.3:3306 SYN ******S*
Feb 18 08:55:55 203.233.194.221:3809 -> xxx.yyy.1.2:3306 SYN ******S*
Feb 18 08:55:55 203.233.194.221:3812 -> xxx.yyy.1.4:3306 SYN ******S*
Feb 18 08:55:55 203.233.194.221:3813 -> xxx.yyy.1.5:3306 SYN ******S*
Feb 18 08:55:52 203.233.194.221:3814 -> xxx.yyy.1.6:3306 SYN ******S*
Feb 18 08:55:52 203.233.194.221:3815 -> xxx.yyy.1.7:3306 SYN ******S*
Feb 18 08:55:52 203.233.194.221:3816 -> xxx.yyy.1.8:3306 SYN ******S*
[...]
Feb 18 09:07:33 203.233.194.221:2739 -> xxx.yyy.255.237:3306 SYN ******S*
Feb 18 09:07:33 203.233.194.221:2744 -> xxx.yyy.255.242:3306 SYN ******S*
Feb 18 09:07:33 203.233.194.221:2742 -> xxx.yyy.255.240:3306 SYN ******S*
Feb 18 09:07:33 203.233.194.221:2740 -> xxx.yyy.255.238:3306 SYN ******S*
Feb 18 09:07:33 203.233.194.221:2751 -> xxx.yyy.255.249:3306 SYN ******S*
Feb 18 09:07:33 203.233.194.221:2741 -> xxx.yyy.255.239:3306 SYN ******S*
Feb 18 09:07:33 203.233.194.221:2743 -> xxx.yyy.255.241:3306 SYN ******S*
Feb 18 09:07:33 203.233.194.221:2749 -> xxx.yyy.255.247:3306 SYN ******S*
Feb 18 09:07:33 203.233.194.221:2756 -> xxx.yyy.255.254:3306 SYN ******S*
50949
Feb 18 15:19:38 206.162.159.61:3157 -> xxx.yyy.1.1:3306 SYN ******S*
Feb 18 15:19:38 206.162.159.61:3159 -> xxx.yyy.1.3:3306 SYN ******S*
Feb 18 15:19:35 206.162.159.61:3165 -> xxx.yyy.1.9:3306 SYN ******S*
Feb 18 15:19:38 206.162.159.61:3166 -> xxx.yyy.1.10:3306 SYN ******S*
Feb 18 15:19:35 206.162.159.61:3167 -> xxx.yyy.1.11:3306 SYN ******S*
Feb 18 15:19:38 206.162.159.61:3169 -> xxx.yyy.1.13:3306 SYN ******S*
Feb 18 15:19:35 206.162.159.61:3173 -> xxx.yyy.1.17:3306 SYN ******S*
Feb 18 15:19:38 206.162.159.61:3174 -> xxx.yyy.1.18:3306 SYN ******S*
[...]
Feb 18 15:30:30 206.162.159.61:1054 -> xxx.yyy.255.205:3306 SYN ******S*
Feb 18 15:30:30 206.162.159.61:1063 -> xxx.yyy.255.214:3306 SYN ******S*
Feb 18 15:30:30 206.162.159.61:1064 -> xxx.yyy.255.215:3306 SYN ******S*
Feb 18 15:30:31 206.162.159.61:1092 -> xxx.yyy.255.242:3306 SYN ******S*
Feb 18 15:30:31 206.162.159.61:1089 -> xxx.yyy.255.239:3306 SYN ******S*
Feb 18 15:30:31 206.162.159.61:1090 -> xxx.yyy.255.240:3306 SYN ******S*
Feb 18 15:30:31 206.162.159.61:1094 -> xxx.yyy.255.244:3306 SYN ******S*
Feb 18 15:30:31 206.162.159.61:1101 -> xxx.yyy.255.251:3306 SYN ******S*
39957
Feb 18 04:05:54 61.85.65.61:1748 -> xxx.yyy.1.37:1433 SYN ******S*
Feb 18 04:05:51 61.85.65.61:1750 -> xxx.yyy.1.39:1433 SYN ******S*
Feb 18 04:05:54 61.85.65.61:1751 -> xxx.yyy.1.40:1433 SYN ******S*
Feb 18 04:05:51 61.85.65.61:1753 -> xxx.yyy.1.42:1433 SYN ******S*
Feb 18 04:05:54 61.85.65.61:1754 -> xxx.yyy.1.43:1433 SYN ******S*
Feb 18 04:05:51 61.85.65.61:1757 -> xxx.yyy.1.45:1433 SYN ******S*
Feb 18 04:05:54 61.85.65.61:1758 -> xxx.yyy.1.46:1433 SYN ******S*
Feb 18 04:05:54 61.85.65.61:1759 -> xxx.yyy.1.47:1433 SYN ******S*
[...]
Feb 18 04:10:17 61.85.65.61:2029 -> xxx.yyy.255.251:1433 SYN ******S*
Feb 18 04:10:17 61.85.65.61:2034 -> xxx.yyy.255.254:1433 SYN ******S*
Feb 18 04:10:17 61.85.65.61:1947 -> xxx.yyy.255.196:1433 SYN ******S*
Feb 18 04:10:17 61.85.65.61:1929 -> xxx.yyy.255.184:1433 SYN ******S*
Feb 18 04:10:17 61.85.65.61:1935 -> xxx.yyy.255.187:1433 SYN ******S*
Feb 18 04:10:17 61.85.65.61:1939 -> xxx.yyy.255.190:1433 SYN ******S*
Feb 18 04:10:17 61.85.65.61:2019 -> xxx.yyy.255.242:1433 SYN ******S*
Feb 18 04:10:17 61.85.65.61:1943 -> xxx.yyy.255.193:1433 SYN ******S*
Feb 18 04:10:17 61.85.65.61:2023 -> xxx.yyy.255.245:1433 SYN ******S*
39083
Feb 18 13:21:20 211.238.38.34:1258 -> xxx.yyy.1.1:3306 SYN ******S*
Feb 18 13:21:20 211.238.38.34:1262 -> xxx.yyy.1.3:3306 SYN ******S*
Feb 18 13:21:20 211.238.38.34:1268 -> xxx.yyy.1.6:3306 SYN ******S*
Feb 18 13:21:23 211.238.38.34:1266 -> xxx.yyy.1.5:3306 SYN ******S*
Feb 18 13:21:23 211.238.38.34:1278 -> xxx.yyy.1.11:3306 SYN ******S*
Feb 18 13:21:20 211.238.38.34:1276 -> xxx.yyy.1.10:3306 SYN ******S*
Feb 18 13:21:23 211.238.38.34:1280 -> xxx.yyy.1.12:3306 SYN ******S*
Feb 18 13:21:23 211.238.38.34:1282 -> xxx.yyy.1.13:3306 SYN ******S*
[...]
Feb 18 13:33:25 211.238.38.34:4023 -> xxx.yyy.255.236:3306 SYN ******S*
Feb 18 13:33:25 211.238.38.34:4043 -> xxx.yyy.255.246:3306 SYN ******S*
Feb 18 13:33:25 211.238.38.34:4031 -> xxx.yyy.255.240:3306 SYN ******S*
Feb 18 13:33:25 211.238.38.34:4030 -> xxx.yyy.255.239:3306 SYN ******S*
Feb 18 13:33:25 211.238.38.34:4038 -> xxx.yyy.255.243:3306 SYN ******S*
Feb 18 13:33:26 211.238.38.34:4054 -> xxx.yyy.255.251:3306 SYN ******S*
Feb 18 13:33:26 211.238.38.34:4047 -> xxx.yyy.255.248:3306 SYN ******S*
Feb 18 13:33:26 211.238.38.34:4051 -> xxx.yyy.255.250:3306 SYN ******S*
Feb 18 13:33:26 211.238.38.34:4055 -> xxx.yyy.255.252:3306 SYN ******S*
37589
Feb 18 19:18:32 82.33.204.85:51813 -> xxx.yyy.1.5:1433 SYN ******S*
Feb 18 19:18:32 82.33.204.85:51817 -> xxx.yyy.1.9:1433 SYN ******S*
Feb 18 19:18:32 82.33.204.85:51814 -> xxx.yyy.1.6:1433 SYN ******S*
Feb 18 19:18:32 82.33.204.85:51811 -> xxx.yyy.1.3:1433 SYN ******S*
Feb 18 19:18:32 82.33.204.85:51812 -> xxx.yyy.1.4:1433 SYN ******S*
Feb 18 19:18:32 82.33.204.85:51815 -> xxx.yyy.1.7:1433 SYN ******S*
Feb 18 19:18:32 82.33.204.85:51816 -> xxx.yyy.1.8:1433 SYN ******S*
Feb 18 19:18:32 82.33.204.85:51822 -> xxx.yyy.1.14:1433 SYN ******S*
[...]
Feb 18 19:22:39 82.33.204.85:55850 -> xxx.yyy.255.231:1433 SYN ******S*
Feb 18 19:22:39 82.33.204.85:55851 -> xxx.yyy.255.232:1433 SYN ******S*
Feb 18 19:22:39 82.33.204.85:55852 -> xxx.yyy.255.233:1433 SYN ******S*
Feb 18 19:22:39 82.33.204.85:55804 -> xxx.yyy.255.185:1433 SYN ******S*
Feb 18 19:22:39 82.33.204.85:55872 -> xxx.yyy.255.253:1433 SYN ******S*
Feb 18 19:22:39 82.33.204.85:55869 -> xxx.yyy.255.250:1433 SYN ******S*
Feb 18 19:22:39 82.33.204.85:55808 -> xxx.yyy.255.189:1433 SYN ******S*
Feb 18 19:22:39 82.33.204.85:55815 -> xxx.yyy.255.196:1433 SYN ******S*
Feb 18 19:22:39 82.33.204.85:55867 -> xxx.yyy.255.248:1433 SYN ******S*
35895
Feb 18 10:14:44 65.162.1.154:1144 -> xxx.yyy.1.12:6101 SYN ******S*
Feb 18 10:14:44 65.162.1.154:1145 -> xxx.yyy.1.11:6101 SYN ******S*
Feb 18 10:14:47 65.162.1.154:1152 -> xxx.yyy.1.13:6101 SYN ******S*
Feb 18 10:14:44 65.162.1.154:1158 -> xxx.yyy.1.16:6101 SYN ******S*
Feb 18 10:14:47 65.162.1.154:1155 -> xxx.yyy.1.15:6101 SYN ******S*
Feb 18 10:14:47 65.162.1.154:1170 -> xxx.yyy.1.18:6101 SYN ******S*
Feb 18 10:14:44 65.162.1.154:1166 -> xxx.yyy.1.17:6101 SYN ******S*
Feb 18 10:14:44 65.162.1.154:1199 -> xxx.yyy.1.21:6101 SYN ******S*
[...]
Feb 18 10:24:31 65.162.1.154:3555 -> xxx.yyy.254.125:6101 SYN ******S*
Feb 18 10:24:31 65.162.1.154:3596 -> xxx.yyy.255.71:6101 SYN ******S*
Feb 18 10:24:31 65.162.1.154:3591 -> xxx.yyy.255.70:6101 SYN ******S*
Feb 18 10:24:31 65.162.1.154:3516 -> xxx.yyy.254.123:6101 SYN ******S*
Feb 18 10:24:31 65.162.1.154:4296 -> xxx.yyy.255.81:6101 SYN ******S*
Feb 18 10:24:31 65.162.1.154:4329 -> xxx.yyy.254.135:6101 SYN ******S*
Feb 18 10:24:31 65.162.1.154:4334 -> xxx.yyy.255.82:6101 SYN ******S*
Feb 18 10:24:31 65.162.1.154:3803 -> xxx.yyy.255.78:6101 SYN ******S*
31996
Feb 18 15:25:39 171.64.115.194:2585 -> xxx.yyy.1.0:6101 SYN ******S*
Feb 18 15:25:39 171.64.115.194:2586 -> xxx.yyy.1.1:6101 SYN ******S*
Feb 18 15:25:39 171.64.115.194:2590 -> xxx.yyy.1.5:6101 SYN ******S*
Feb 18 15:25:39 171.64.115.194:2591 -> xxx.yyy.1.6:6101 SYN ******S*
Feb 18 15:25:39 171.64.115.194:2592 -> xxx.yyy.1.7:6101 SYN ******S*
Feb 18 15:25:39 171.64.115.194:2593 -> xxx.yyy.1.8:6101 SYN ******S*
Feb 18 15:25:39 171.64.115.194:2594 -> xxx.yyy.1.9:6101 SYN ******S*
Feb 18 15:25:39 171.64.115.194:2595 -> xxx.yyy.1.10:6101 SYN ******S*
[...]
Feb 18 19:58:12 171.64.115.194:3622 -> xxx.yyy.255.123:45123 SYN ******S*
Feb 18 19:58:12 171.64.115.194:3623 -> xxx.yyy.255.124:45123 SYN ******S*
Feb 18 19:58:12 171.64.115.194:3574 -> xxx.yyy.255.125:45123 SYN ******S*
Feb 18 19:58:12 171.64.115.194:3575 -> xxx.yyy.255.126:45123 SYN ******S*
Feb 18 19:58:12 171.64.115.194:3576 -> xxx.yyy.255.127:45123 SYN ******S*
Feb 18 19:58:12 171.64.115.194:3577 -> xxx.yyy.255.128:45123 SYN ******S*
Feb 18 19:58:12 171.64.115.194:3578 -> xxx.yyy.255.129:45123 SYN ******S*
Feb 18 19:58:12 171.64.115.194:3579 -> xxx.yyy.255.130:45123 SYN ******S*
Feb 18 19:58:12 171.64.115.194:3580 -> xxx.yyy.255.131:45123 SYN ******S*
31141
Feb 18 16:37:56 205.209.186.10:40095 -> xxx.yyy.1.10:80 SYN ******S*
Feb 18 16:37:53 205.209.186.10:40096 -> xxx.yyy.1.11:80 SYN ******S*
Feb 18 16:37:55 205.209.186.10:48048 -> xxx.yyy.1.13:80 SYN ******S*
Feb 18 16:37:53 205.209.186.10:40100 -> xxx.yyy.1.15:80 SYN ******S*
Feb 18 16:37:53 205.209.186.10:40099 -> xxx.yyy.1.14:80 SYN ******S*
Feb 18 16:37:53 205.209.186.10:40103 -> xxx.yyy.1.18:80 SYN ******S*
Feb 18 16:37:53 205.209.186.10:40106 -> xxx.yyy.1.21:80 SYN ******S*
Feb 18 16:37:53 205.209.186.10:40107 -> xxx.yyy.1.22:80 SYN ******S*
[...]
Feb 18 17:35:28 205.209.186.10:58587 -> xxx.yyy.255.234:80 SYN ******S*
Feb 18 17:35:28 205.209.186.10:58586 -> xxx.yyy.255.233:80 SYN ******S*
Feb 18 17:35:34 205.209.186.10:58579 -> xxx.yyy.255.226:80 SYN ******S*
Feb 18 17:35:34 205.209.186.10:58577 -> xxx.yyy.255.224:80 SYN ******S*
Feb 18 17:35:34 205.209.186.10:58581 -> xxx.yyy.255.228:80 SYN ******S*
Feb 18 17:35:34 205.209.186.10:58584 -> xxx.yyy.255.231:80 SYN ******S*
Feb 18 17:35:34 205.209.186.10:58583 -> xxx.yyy.255.230:80 SYN ******S*
Feb 18 17:35:34 205.209.186.10:58588 -> xxx.yyy.255.235:80 SYN ******S*
Feb 18 17:35:34 205.209.186.10:58585 -> xxx.yyy.255.232:80 SYN ******S*
30077
Feb 18 21:39:35 221.4.146.22:1157 -> xxx.yyy.1.1:21 SYN ******S*
Feb 18 21:39:35 221.4.146.22:1160 -> xxx.yyy.1.4:21 SYN ******S*
Feb 18 21:39:35 221.4.146.22:1161 -> xxx.yyy.1.5:21 SYN ******S*
Feb 18 21:39:35 221.4.146.22:1164 -> xxx.yyy.1.8:21 SYN ******S*
Feb 18 21:39:35 221.4.146.22:1166 -> xxx.yyy.1.9:21 SYN ******S*
Feb 18 21:39:35 221.4.146.22:1167 -> xxx.yyy.1.10:21 SYN ******S*
Feb 18 21:39:35 221.4.146.22:1169 -> xxx.yyy.1.11:21 SYN ******S*
Feb 18 21:39:35 221.4.146.22:1170 -> xxx.yyy.1.12:21 SYN ******S*
[...]
Feb 18 21:40:29 221.4.146.22:1232 -> xxx.yyy.255.245:21 SYN ******S*
Feb 18 21:40:29 221.4.146.22:1233 -> xxx.yyy.255.246:21 SYN ******S*
Feb 18 21:40:29 221.4.146.22:1241 -> xxx.yyy.255.247:21 SYN ******S*
Feb 18 21:40:29 221.4.146.22:1244 -> xxx.yyy.255.250:21 SYN ******S*
Feb 18 21:40:29 221.4.146.22:1245 -> xxx.yyy.255.251:21 SYN ******S*
Feb 18 21:40:29 221.4.146.22:1246 -> xxx.yyy.255.252:21 SYN ******S*
Feb 18 21:40:29 221.4.146.22:1248 -> xxx.yyy.255.253:21 SYN ******S*
Feb 18 21:40:29 221.4.146.22:1249 -> xxx.yyy.255.254:21 SYN ******S*
23868
[...]
17670
[...]
13573
Feb 18 06:56:26 80.236.23.60:3345 -> xxx.yyy.174.5:5554 SYN ******S*
Feb 18 06:56:27 80.236.23.60:3612 -> xxx.yyy.174.5:1023 SYN ******S*
Feb 18 06:56:29 80.236.23.60:4204 -> xxx.yyy.174.5:9898 SYN ******S*
Feb 18 06:56:26 80.236.23.60:3344 -> xxx.yyy.174.4:5554 SYN ******S*
Feb 18 06:56:29 80.236.23.60:4196 -> xxx.yyy.174.4:9898 SYN ******S*
Feb 18 06:56:26 80.236.23.60:3347 -> xxx.yyy.174.7:5554 SYN ******S*
Feb 18 06:56:26 80.236.23.60:3346 -> xxx.yyy.174.6:5554 SYN ******S*
Feb 18 06:56:27 80.236.23.60:3613 -> xxx.yyy.174.6:1023 SYN ******S*
[...]
Feb 18 06:57:42 80.236.23.60:4306 -> xxx.yyy.194.120:9898 SYN ******S*
Feb 18 06:57:42 80.236.23.60:4308 -> xxx.yyy.194.121:9898 SYN ******S*
Feb 18 06:57:42 80.236.23.60:4309 -> xxx.yyy.194.122:9898 SYN ******S*
Feb 18 06:57:42 80.236.23.60:4311 -> xxx.yyy.194.123:9898 SYN ******S*
Feb 18 06:57:42 80.236.23.60:4313 -> xxx.yyy.194.119:9898 SYN ******S*
Feb 18 06:57:42 80.236.23.60:4320 -> xxx.yyy.194.118:9898 SYN ******S*
Feb 18 06:57:42 80.236.23.60:4319 -> xxx.yyy.194.117:9898 SYN ******S*
Feb 18 06:57:42 80.236.23.60:4321 -> xxx.yyy.194.124:9898 SYN ******S*
12418
Feb 18 23:50:12 220.184.43.197:1934 -> xxx.yyy.235.112:5554 SYN ******S*
Feb 18 23:50:13 220.184.43.197:2420 -> xxx.yyy.235.112:1023 SYN ******S*
Feb 18 23:50:15 220.184.43.197:3734 -> xxx.yyy.235.112:9898 SYN ******S*
Feb 18 23:50:12 220.184.43.197:1935 -> xxx.yyy.235.113:5554 SYN ******S*
Feb 18 23:50:13 220.184.43.197:2421 -> xxx.yyy.235.113:1023 SYN ******S*
Feb 18 23:50:12 220.184.43.197:1944 -> xxx.yyy.235.114:5554 SYN ******S*
Feb 18 23:50:13 220.184.43.197:2436 -> xxx.yyy.235.114:1023 SYN ******S*
Feb 18 23:50:15 220.184.43.197:3744 -> xxx.yyy.235.114:9898 SYN ******S*
[...]
Feb 18 23:50:56 220.184.43.197:2109 -> xxx.yyy.255.226:9898 SYN ******S*
Feb 18 23:50:56 220.184.43.197:2110 -> xxx.yyy.255.227:9898 SYN ******S*
Feb 18 23:50:56 220.184.43.197:2111 -> xxx.yyy.255.228:9898 SYN ******S*
Feb 18 23:50:56 220.184.43.197:2113 -> xxx.yyy.255.229:9898 SYN ******S*
Feb 18 23:50:56 220.184.43.197:2115 -> xxx.yyy.255.231:9898 SYN ******S*
Feb 18 23:50:56 220.184.43.197:2117 -> xxx.yyy.255.232:9898 SYN ******S*
Feb 18 23:50:56 220.184.43.197:2118 -> xxx.yyy.255.233:9898 SYN ******S*
Feb 18 23:50:56 220.184.43.197:2194 -> xxx.yyy.255.140:9898 SYN ******S*
11082
Feb 18 12:34:20 129.215.43.13:3312 -> xxx.yyy.1.7:4000 SYN ******S*
Feb 18 12:34:20 129.215.43.13:3313 -> xxx.yyy.1.8:4000 SYN ******S*
Feb 18 12:34:20 129.215.43.13:3314 -> xxx.yyy.1.9:4000 SYN ******S*
Feb 18 12:34:20 129.215.43.13:3315 -> xxx.yyy.1.10:4000 SYN ******S*
Feb 18 12:34:20 129.215.43.13:3316 -> xxx.yyy.1.11:4000 SYN ******S*
Feb 18 12:34:20 129.215.43.13:3317 -> xxx.yyy.1.12:4000 SYN ******S*
Feb 18 12:34:20 129.215.43.13:3318 -> xxx.yyy.1.13:4000 SYN ******S*
Feb 18 12:34:20 129.215.43.13:3346 -> xxx.yyy.1.41:4000 SYN ******S*
[...]
Feb 18 12:34:34 129.215.43.13:3326 -> xxx.yyy.255.201:4000 SYN ******S*
Feb 18 12:34:34 129.215.43.13:3346 -> xxx.yyy.255.221:4000 SYN ******S*
Feb 18 12:34:34 129.215.43.13:3323 -> xxx.yyy.255.248:4000 SYN ******S*
Feb 18 12:34:34 129.215.43.13:3324 -> xxx.yyy.255.249:4000 SYN ******S*
Feb 18 12:34:34 129.215.43.13:3325 -> xxx.yyy.255.250:4000 SYN ******S*
Feb 18 12:34:34 129.215.43.13:3326 -> xxx.yyy.255.251:4000 SYN ******S*
Feb 18 12:34:34 129.215.43.13:3327 -> xxx.yyy.255.252:4000 SYN ******S*
Feb 18 12:34:34 129.215.43.13:3328 -> xxx.yyy.255.253:4000 SYN ******S*
Feb 18 12:34:34 129.215.43.13:3329 -> xxx.yyy.255.254:4000 SYN ******S*
10028
Feb 18 23:56:55 221.200.80.95:2710 -> xxx.yyy.216.1:5554 SYN ******S*
Feb 18 23:56:56 221.200.80.95:3205 -> xxx.yyy.216.1:1023 SYN ******S*
Feb 18 23:56:58 221.200.80.95:4200 -> xxx.yyy.216.1:9898 SYN ******S*
Feb 18 23:56:55 221.200.80.95:2712 -> xxx.yyy.215.254:5554 SYN ******S*
Feb 18 23:56:56 221.200.80.95:3212 -> xxx.yyy.215.254:1023 SYN ******S*
Feb 18 23:56:58 221.200.80.95:4212 -> xxx.yyy.215.254:9898 SYN ******S*
Feb 18 23:56:55 221.200.80.95:2721 -> xxx.yyy.215.245:5554 SYN ******S*
Feb 18 23:56:56 221.200.80.95:3221 -> xxx.yyy.215.245:1023 SYN ******S*
[...]
Feb 18 23:57:41 221.200.80.95:1231 -> xxx.yyy.236.56:9898 SYN ******S*
Feb 18 23:57:41 221.200.80.95:1239 -> xxx.yyy.236.58:9898 SYN ******S*
Feb 18 23:57:41 221.200.80.95:1387 -> xxx.yyy.236.59:9898 SYN ******S*
Feb 18 23:57:41 221.200.80.95:1435 -> xxx.yyy.236.69:9898 SYN ******S*
Feb 18 23:57:41 221.200.80.95:1440 -> xxx.yyy.236.72:9898 SYN ******S*
Feb 18 23:57:41 221.200.80.95:1417 -> xxx.yyy.236.61:9898 SYN ******S*
Feb 18 23:57:41 221.200.80.95:1422 -> xxx.yyy.236.63:9898 SYN ******S*
Feb 18 23:57:41 221.200.80.95:1425 -> xxx.yyy.236.65:9898 SYN ******S*
Feb 18 23:57:41 221.200.80.95:1442 -> xxx.yyy.236.74:9898 SYN ******S*
9931
Feb 18 22:56:18 218.44.82.248:1442 -> xxx.yyy.133.21:5554 SYN ******S*
Feb 18 22:56:18 218.44.82.248:1445 -> xxx.yyy.133.24:5554 SYN ******S*
Feb 18 22:56:18 218.44.82.248:1446 -> xxx.yyy.133.25:5554 SYN ******S*
Feb 18 22:56:18 218.44.82.248:1450 -> xxx.yyy.133.29:5554 SYN ******S*
Feb 18 22:56:19 218.44.82.248:1455 -> xxx.yyy.133.18:5554 SYN ******S*
Feb 18 22:56:19 218.44.82.248:1470 -> xxx.yyy.133.99:5554 SYN ******S*
Feb 18 22:56:19 218.44.82.248:1469 -> xxx.yyy.133.98:5554 SYN ******S*
Feb 18 22:56:19 218.44.82.248:1472 -> xxx.yyy.133.101:5554 SYN ******S*
[...]
Feb 18 23:01:59 218.44.82.248:3576 -> xxx.yyy.133.91:9898 SYN ******S*
Feb 18 23:01:59 218.44.82.248:3580 -> xxx.yyy.133.92:9898 SYN ******S*
Feb 18 23:01:59 218.44.82.248:3581 -> xxx.yyy.133.93:9898 SYN ******S*
Feb 18 23:02:01 218.44.82.248:3668 -> xxx.yyy.153.2:9898 SYN ******S*
Feb 18 23:02:06 218.44.82.248:4006 -> xxx.yyy.153.93:9898 SYN ******S*
Feb 18 23:02:07 218.44.82.248:4083 -> xxx.yyy.153.119:9898 SYN ******S*
Feb 18 23:02:07 218.44.82.248:4084 -> xxx.yyy.153.120:9898 SYN ******S*
Feb 18 23:02:07 218.44.82.248:4086 -> xxx.yyy.153.122:9898 SYN ******S*
Feb 18 23:02:07 218.44.82.248:4087 -> xxx.yyy.153.123:9898 SYN ******S*
9784
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list