[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Tue Jan 11 13:46:53 GMT 2005
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Jan 10 01:54:20 218.75.249.128:41726 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 10 01:54:23 218.75.249.128:41741 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 10 01:54:20 218.75.249.128:41754 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 10 01:54:23 218.75.249.128:41762 -> xxx.yyy.1.7:1433 SYN ******S*
Jan 10 01:54:23 218.75.249.128:41764 -> xxx.yyy.1.9:1433 SYN ******S*
Jan 10 01:54:23 218.75.249.128:41766 -> xxx.yyy.1.11:1433 SYN ******S*
Jan 10 01:54:23 218.75.249.128:41744 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 10 01:54:23 218.75.249.128:41768 -> xxx.yyy.1.13:1433 SYN ******S*
[...]
Jan 10 05:43:04 218.75.249.128:45719 -> xxx.yyy.255.247:1433 SYN ******S*
Jan 10 05:43:04 218.75.249.128:45717 -> xxx.yyy.255.245:1433 SYN ******S*
Jan 10 05:43:04 218.75.249.128:45718 -> xxx.yyy.255.246:1433 SYN ******S*
Jan 10 05:43:04 218.75.249.128:45714 -> xxx.yyy.255.242:1433 SYN ******S*
Jan 10 05:43:04 218.75.249.128:45721 -> xxx.yyy.255.249:1433 SYN ******S*
Jan 10 05:43:04 218.75.249.128:45722 -> xxx.yyy.255.250:1433 SYN ******S*
Jan 10 05:43:04 218.75.249.128:45726 -> xxx.yyy.255.253:1433 SYN ******S*
Jan 10 05:43:04 218.75.249.128:45727 -> xxx.yyy.255.254:1433 SYN ******S*
Jan 10 05:43:06 218.75.249.128:45724 -> xxx.yyy.255.252:1433 SYN ******S*
106236
Jan 10 07:58:25 218.22.168.72:53145 -> xxx.yyy.1.0:1433 SYN ******S*
Jan 10 07:58:25 218.22.168.72:53147 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 10 07:58:25 218.22.168.72:53148 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 10 07:58:25 218.22.168.72:53149 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 10 07:58:25 218.22.168.72:53151 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 10 07:58:26 218.22.168.72:53152 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 10 07:58:26 218.22.168.72:53153 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 10 07:58:23 218.22.168.72:53154 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Jan 10 11:47:11 218.22.168.72:51781 -> xxx.yyy.255.246:1433 SYN ******S*
Jan 10 11:47:11 218.22.168.72:51780 -> xxx.yyy.255.245:1433 SYN ******S*
Jan 10 11:47:11 218.22.168.72:51778 -> xxx.yyy.255.244:1433 SYN ******S*
Jan 10 11:47:12 218.22.168.72:51790 -> xxx.yyy.255.247:1433 SYN ******S*
Jan 10 11:47:12 218.22.168.72:51797 -> xxx.yyy.255.248:1433 SYN ******S*
Jan 10 11:47:12 218.22.168.72:51806 -> xxx.yyy.255.249:1433 SYN ******S*
Jan 10 11:47:13 218.22.168.72:51810 -> xxx.yyy.255.250:1433 SYN ******S*
Jan 10 11:47:13 218.22.168.72:51823 -> xxx.yyy.255.253:1433 SYN ******S*
77793
Jan 10 06:19:11 195.251.210.217:3366 -> xxx.yyy.1.1:42 SYN ******S*
Jan 10 06:19:11 195.251.210.217:3367 -> xxx.yyy.1.2:42 SYN ******S*
Jan 10 06:19:11 195.251.210.217:3368 -> xxx.yyy.1.3:42 SYN ******S*
Jan 10 06:19:11 195.251.210.217:3369 -> xxx.yyy.1.4:42 SYN ******S*
Jan 10 06:19:14 195.251.210.217:3370 -> xxx.yyy.1.5:42 SYN ******S*
Jan 10 06:19:14 195.251.210.217:3371 -> xxx.yyy.1.6:42 SYN ******S*
Jan 10 06:19:14 195.251.210.217:3373 -> xxx.yyy.1.7:42 SYN ******S*
Jan 10 06:19:14 195.251.210.217:3374 -> xxx.yyy.1.8:42 SYN ******S*
[...]
Jan 10 06:30:07 195.251.210.217:2432 -> xxx.yyy.255.248:42 SYN ******S*
Jan 10 06:30:07 195.251.210.217:2427 -> xxx.yyy.255.243:42 SYN ******S*
Jan 10 06:30:07 195.251.210.217:2429 -> xxx.yyy.255.245:42 SYN ******S*
Jan 10 06:30:07 195.251.210.217:2433 -> xxx.yyy.255.249:42 SYN ******S*
Jan 10 06:30:07 195.251.210.217:2431 -> xxx.yyy.255.247:42 SYN ******S*
Jan 10 06:30:07 195.251.210.217:2428 -> xxx.yyy.255.244:42 SYN ******S*
Jan 10 06:30:07 195.251.210.217:2425 -> xxx.yyy.255.241:42 SYN ******S*
Jan 10 06:30:08 195.251.210.217:2435 -> xxx.yyy.255.251:42 SYN ******S*
Jan 10 06:30:08 195.251.210.217:2436 -> xxx.yyy.255.252:42 SYN ******S*
74849
Jan 10 17:12:12 220.55.213.31:22002 -> xxx.yyy.1.0:1080 SYN ******S*
Jan 10 17:12:13 220.55.213.31:22002 -> xxx.yyy.1.0:10080 SYN ******S*
Jan 10 17:12:13 220.55.213.31:22002 -> xxx.yyy.1.1:1080 SYN ******S*
Jan 10 17:12:13 220.55.213.31:22002 -> xxx.yyy.1.1:3127 SYN ******S*
Jan 10 17:12:13 220.55.213.31:22002 -> xxx.yyy.1.1:10080 SYN ******S*
Jan 10 17:12:14 220.55.213.31:22002 -> xxx.yyy.1.2:3128 SYN ******S*
Jan 10 17:12:14 220.55.213.31:22002 -> xxx.yyy.1.3:1080 SYN ******S*
Jan 10 17:12:14 220.55.213.31:22002 -> xxx.yyy.1.3:3127 SYN ******S*
[...]
Jan 10 21:52:11 220.55.213.31:22002 -> xxx.yyy.149.76:1080 SYN ******S*
Jan 10 21:52:11 220.55.213.31:22002 -> xxx.yyy.149.76:10080 SYN ******S*
Jan 10 21:52:11 220.55.213.31:22002 -> xxx.yyy.149.76:3128 SYN ******S*
Jan 10 21:52:11 220.55.213.31:22002 -> xxx.yyy.149.112:3127 SYN ******S*
Jan 10 21:52:11 220.55.213.31:22002 -> xxx.yyy.149.77:1080 SYN ******S*
Jan 10 21:52:12 220.55.213.31:22002 -> xxx.yyy.149.112:10080 SYN ******S*
Jan 10 21:52:12 220.55.213.31:22002 -> xxx.yyy.149.113:3127 SYN ******S*
Jan 10 21:52:12 220.55.213.31:22002 -> xxx.yyy.149.113:10080 SYN ******S*
Jan 10 21:52:12 220.55.213.31:22002 -> xxx.yyy.149.78:10080 SYN ******S*
74093
Jan 10 18:44:36 219.79.25.156:3306 -> xxx.yyy.12.39:1433 SYN ******S*
Jan 10 18:44:36 219.79.25.156:3308 -> xxx.yyy.12.40:1433 SYN ******S*
Jan 10 18:44:39 219.79.25.156:3310 -> xxx.yyy.12.41:1433 SYN ******S*
Jan 10 18:44:36 219.79.25.156:3312 -> xxx.yyy.12.42:1433 SYN ******S*
Jan 10 18:44:39 219.79.25.156:3317 -> xxx.yyy.12.44:1433 SYN ******S*
Jan 10 18:44:39 219.79.25.156:3319 -> xxx.yyy.12.45:1433 SYN ******S*
Jan 10 18:44:36 219.79.25.156:3321 -> xxx.yyy.12.46:1433 SYN ******S*
Jan 10 18:44:36 219.79.25.156:3323 -> xxx.yyy.12.47:1433 SYN ******S*
[...]
Jan 10 22:25:36 219.79.25.156:3178 -> xxx.yyy.255.234:1433 SYN ******S*
Jan 10 22:25:37 219.79.25.156:3200 -> xxx.yyy.255.236:1433 SYN ******S*
Jan 10 22:25:37 219.79.25.156:3218 -> xxx.yyy.255.238:1433 SYN ******S*
Jan 10 22:25:37 219.79.25.156:3235 -> xxx.yyy.255.239:1433 SYN ******S*
Jan 10 22:25:38 219.79.25.156:3268 -> xxx.yyy.255.243:1433 SYN ******S*
Jan 10 22:25:38 219.79.25.156:3286 -> xxx.yyy.255.247:1433 SYN ******S*
Jan 10 22:25:38 219.79.25.156:3303 -> xxx.yyy.255.248:1433 SYN ******S*
Jan 10 22:25:38 219.79.25.156:3340 -> xxx.yyy.255.252:1433 SYN ******S*
Jan 10 22:25:38 219.79.25.156:3363 -> xxx.yyy.255.253:1433 SYN ******S*
66763
Jan 10 01:17:21 213.41.93.238:1515 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 10 01:17:24 213.41.93.238:1516 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 10 01:17:24 213.41.93.238:1517 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 10 01:17:21 213.41.93.238:1518 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 10 01:17:21 213.41.93.238:1519 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 10 01:17:24 213.41.93.238:1522 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 10 01:17:21 213.41.93.238:1523 -> xxx.yyy.1.7:1433 SYN ******S*
Jan 10 01:17:24 213.41.93.238:1524 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Jan 10 01:46:23 213.41.93.238:2696 -> xxx.yyy.255.246:1433 SYN ******S*
Jan 10 01:46:23 213.41.93.238:2697 -> xxx.yyy.255.247:1433 SYN ******S*
Jan 10 01:46:23 213.41.93.238:2700 -> xxx.yyy.255.250:1433 SYN ******S*
Jan 10 01:46:23 213.41.93.238:2695 -> xxx.yyy.255.245:1433 SYN ******S*
Jan 10 01:46:23 213.41.93.238:2698 -> xxx.yyy.255.248:1433 SYN ******S*
Jan 10 01:46:23 213.41.93.238:2701 -> xxx.yyy.255.251:1433 SYN ******S*
Jan 10 01:46:23 213.41.93.238:2699 -> xxx.yyy.255.249:1433 SYN ******S*
Jan 10 01:46:23 213.41.93.238:2702 -> xxx.yyy.255.252:1433 SYN ******S*
Jan 10 01:46:23 213.41.93.238:2704 -> xxx.yyy.255.254:1433 SYN ******S*
65170
Jan 10 06:34:34 212.19.102.205:1800 -> xxx.yyy.1.1:80 SYN ******S*
Jan 10 06:34:37 212.19.102.205:1804 -> xxx.yyy.1.5:80 SYN ******S*
Jan 10 06:34:34 212.19.102.205:1801 -> xxx.yyy.1.2:80 SYN ******S*
Jan 10 06:34:34 212.19.102.205:1802 -> xxx.yyy.1.3:80 SYN ******S*
Jan 10 06:34:34 212.19.102.205:1803 -> xxx.yyy.1.4:80 SYN ******S*
Jan 10 06:34:34 212.19.102.205:1805 -> xxx.yyy.1.6:80 SYN ******S*
Jan 10 06:34:34 212.19.102.205:1806 -> xxx.yyy.1.7:80 SYN ******S*
Jan 10 06:34:37 212.19.102.205:1807 -> xxx.yyy.1.8:80 SYN ******S*
[...]
Jan 10 06:42:58 212.19.102.205:3769 -> xxx.yyy.255.250:80 SYN ******S*
Jan 10 06:42:58 212.19.102.205:3766 -> xxx.yyy.255.247:80 SYN ******S*
Jan 10 06:42:58 212.19.102.205:3750 -> xxx.yyy.255.231:80 SYN ******S*
Jan 10 06:42:58 212.19.102.205:3731 -> xxx.yyy.255.212:80 SYN ******S*
Jan 10 06:42:58 212.19.102.205:3728 -> xxx.yyy.255.209:80 SYN ******S*
Jan 10 06:42:58 212.19.102.205:3763 -> xxx.yyy.255.244:80 SYN ******S*
Jan 10 06:42:58 212.19.102.205:3747 -> xxx.yyy.255.228:80 SYN ******S*
Jan 10 06:42:58 212.19.102.205:3744 -> xxx.yyy.255.225:80 SYN ******S*
53738
Jan 10 22:23:56 200.216.155.80:2350 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 10 22:23:56 200.216.155.80:2352 -> xxx.yyy.1.7:1433 SYN ******S*
Jan 10 22:23:56 200.216.155.80:2355 -> xxx.yyy.1.8:1433 SYN ******S*
Jan 10 22:23:56 200.216.155.80:2356 -> xxx.yyy.1.9:1433 SYN ******S*
Jan 10 22:23:56 200.216.155.80:2358 -> xxx.yyy.1.11:1433 SYN ******S*
Jan 10 22:23:56 200.216.155.80:2360 -> xxx.yyy.1.13:1433 SYN ******S*
Jan 10 22:23:56 200.216.155.80:2364 -> xxx.yyy.1.15:1433 SYN ******S*
Jan 10 22:23:56 200.216.155.80:2365 -> xxx.yyy.1.16:1433 SYN ******S*
[...]
Jan 10 23:59:59 200.216.155.80:3042 -> xxx.yyy.206.90:1433 SYN ******S*
Jan 11 00:00:00 200.216.155.80:3041 -> xxx.yyy.206.89:1433 SYN ******S*
Jan 11 00:00:00 200.216.155.80:3149 -> xxx.yyy.206.114:1433 SYN ******S*
Jan 11 00:00:00 200.216.155.80:3210 -> xxx.yyy.206.128:1433 SYN ******S*
Jan 11 00:00:00 200.216.155.80:3214 -> xxx.yyy.206.129:1433 SYN ******S*
Jan 11 00:00:00 200.216.155.80:3217 -> xxx.yyy.206.130:1433 SYN ******S*
Jan 11 00:00:00 200.216.155.80:3052 -> xxx.yyy.206.92:1433 SYN ******S*
Jan 11 00:00:00 200.216.155.80:3221 -> xxx.yyy.206.131:1433 SYN ******S*
51972
Jan 10 00:44:58 219.148.131.231:55364 -> xxx.yyy.1.2:4899 SYN ******S*
Jan 10 00:44:56 219.148.131.231:55362 -> xxx.yyy.1.0:4899 SYN ******S*
Jan 10 00:44:57 219.148.131.231:55372 -> xxx.yyy.1.8:4899 SYN ******S*
Jan 10 00:44:59 219.148.131.231:55369 -> xxx.yyy.1.6:4899 SYN ******S*
Jan 10 00:44:59 219.148.131.231:55376 -> xxx.yyy.1.12:4899 SYN ******S*
Jan 10 00:44:57 219.148.131.231:55378 -> xxx.yyy.1.14:4899 SYN ******S*
Jan 10 00:44:56 219.148.131.231:55391 -> xxx.yyy.1.20:4899 SYN ******S*
Jan 10 00:44:59 219.148.131.231:55398 -> xxx.yyy.1.24:4899 SYN ******S*
[...]
Jan 10 00:51:30 219.148.131.231:11201 -> xxx.yyy.255.248:4899 SYN ******S*
Jan 10 00:51:30 219.148.131.231:11057 -> xxx.yyy.255.254:4899 SYN ******S*
Jan 10 00:51:30 219.148.131.231:11035 -> xxx.yyy.255.250:4899 SYN ******S*
Jan 10 00:51:30 219.148.131.231:11264 -> xxx.yyy.255.252:4899 SYN ******S*
Jan 10 00:51:30 219.148.131.231:11000 -> xxx.yyy.255.253:4899 SYN ******S*
Jan 10 00:51:30 219.148.131.231:11043 -> xxx.yyy.255.247:4899 SYN ******S*
Jan 10 00:51:30 219.148.131.231:11124 -> xxx.yyy.255.251:4899 SYN ******S*
Jan 10 00:51:30 219.148.131.231:11435 -> xxx.yyy.255.249:4899 SYN ******S*
43824
Jan 10 03:48:25 172.182.93.14:3881 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 10 03:48:25 172.182.93.14:3882 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 10 03:48:25 172.182.93.14:3880 -> xxx.yyy.1.0:1433 SYN ******S*
Jan 10 03:48:25 172.182.93.14:3883 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 10 03:48:25 172.182.93.14:3884 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 10 03:48:25 172.182.93.14:3885 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 10 03:48:25 172.182.93.14:3838 -> xxx.yyy.1.8:1433 SYN ******S*
Jan 10 03:48:25 172.182.93.14:3840 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
Jan 10 04:00:17 172.182.93.14:3846 -> xxx.yyy.255.246:1433 SYN ******S*
Jan 10 04:00:17 172.182.93.14:3844 -> xxx.yyy.255.244:1433 SYN ******S*
Jan 10 04:00:17 172.182.93.14:3848 -> xxx.yyy.255.248:1433 SYN ******S*
Jan 10 04:00:17 172.182.93.14:3849 -> xxx.yyy.255.249:1433 SYN ******S*
Jan 10 04:00:17 172.182.93.14:3850 -> xxx.yyy.255.250:1433 SYN ******S*
Jan 10 04:00:17 172.182.93.14:3851 -> xxx.yyy.255.251:1433 SYN ******S*
Jan 10 04:00:17 172.182.93.14:3853 -> xxx.yyy.255.253:1433 SYN ******S*
Jan 10 04:00:17 172.182.93.14:3854 -> xxx.yyy.255.254:1433 SYN ******S*
Jan 10 04:00:17 172.182.93.14:3852 -> xxx.yyy.255.252:1433 SYN ******S*
43424
Jan 10 09:56:05 209.163.129.24:4054 -> xxx.yyy.1.2:6101 SYN ******S*
Jan 10 09:56:07 209.163.129.24:4057 -> xxx.yyy.1.5:6101 SYN ******S*
Jan 10 09:56:05 209.163.129.24:4061 -> xxx.yyy.1.9:6101 SYN ******S*
Jan 10 09:56:04 209.163.129.24:4062 -> xxx.yyy.1.10:6101 SYN ******S*
Jan 10 09:56:05 209.163.129.24:4063 -> xxx.yyy.1.11:6101 SYN ******S*
Jan 10 09:56:04 209.163.129.24:4065 -> xxx.yyy.1.13:6101 SYN ******S*
Jan 10 09:56:04 209.163.129.24:4068 -> xxx.yyy.1.16:6101 SYN ******S*
Jan 10 09:56:05 209.163.129.24:4069 -> xxx.yyy.1.17:6101 SYN ******S*
[...]
Jan 10 10:08:05 209.163.129.24:3131 -> xxx.yyy.255.186:6101 SYN ******S*
Jan 10 10:08:05 209.163.129.24:3142 -> xxx.yyy.255.197:6101 SYN ******S*
Jan 10 10:08:05 209.163.129.24:3137 -> xxx.yyy.255.192:6101 SYN ******S*
Jan 10 10:08:05 209.163.129.24:3148 -> xxx.yyy.255.203:6101 SYN ******S*
Jan 10 10:08:05 209.163.129.24:3169 -> xxx.yyy.255.224:6101 SYN ******S*
Jan 10 10:08:05 209.163.129.24:3189 -> xxx.yyy.255.244:6101 SYN ******S*
Jan 10 10:08:05 209.163.129.24:3186 -> xxx.yyy.255.241:6101 SYN ******S*
Jan 10 10:08:05 209.163.129.24:3193 -> xxx.yyy.255.248:6101 SYN ******S*
42356
Jan 10 04:23:33 217.130.26.93:4657 -> xxx.yyy.1.1:6129 SYN ******S*
Jan 10 04:23:33 217.130.26.93:4659 -> xxx.yyy.1.3:6129 SYN ******S*
Jan 10 04:23:33 217.130.26.93:4660 -> xxx.yyy.1.4:6129 SYN ******S*
Jan 10 04:23:33 217.130.26.93:4656 -> xxx.yyy.1.0:6129 SYN ******S*
Jan 10 04:23:33 217.130.26.93:4658 -> xxx.yyy.1.2:6129 SYN ******S*
Jan 10 04:23:33 217.130.26.93:4668 -> xxx.yyy.1.12:6129 SYN ******S*
Jan 10 04:23:33 217.130.26.93:4665 -> xxx.yyy.1.9:6129 SYN ******S*
Jan 10 04:23:33 217.130.26.93:4667 -> xxx.yyy.1.11:6129 SYN ******S*
[...]
Jan 10 04:24:57 217.130.26.93:4681 -> xxx.yyy.255.155:6129 SYN ******S*
Jan 10 04:24:57 217.130.26.93:4683 -> xxx.yyy.255.157:6129 SYN ******S*
Jan 10 04:24:57 217.130.26.93:4679 -> xxx.yyy.255.153:6129 SYN ******S*
Jan 10 04:24:57 217.130.26.93:4685 -> xxx.yyy.255.159:6129 SYN ******S*
Jan 10 04:24:57 217.130.26.93:4680 -> xxx.yyy.255.154:6129 SYN ******S*
Jan 10 04:24:57 217.130.26.93:4678 -> xxx.yyy.255.152:6129 SYN ******S*
Jan 10 04:24:57 217.130.26.93:4682 -> xxx.yyy.255.156:6129 SYN ******S*
Jan 10 04:24:57 217.130.26.93:4684 -> xxx.yyy.255.158:6129 SYN ******S*
Jan 10 04:24:57 217.130.26.93:4686 -> xxx.yyy.255.160:6129 SYN ******S*
38966
Jan 10 03:23:18 210.54.96.36:2341 -> xxx.yyy.1.0:1433 SYN ******S*
Jan 10 03:23:18 210.54.96.36:2342 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 10 03:23:18 210.54.96.36:2343 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 10 03:23:18 210.54.96.36:2344 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 10 03:23:18 210.54.96.36:2345 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 10 03:23:18 210.54.96.36:2348 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 10 03:23:18 210.54.96.36:2350 -> xxx.yyy.1.7:1433 SYN ******S*
Jan 10 03:23:18 210.54.96.36:2351 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Jan 10 05:18:47 210.54.96.36:1818 -> xxx.yyy.129.141:1433 SYN ******S*
Jan 10 05:18:47 210.54.96.36:1821 -> xxx.yyy.129.142:1433 SYN ******S*
Jan 10 05:18:47 210.54.96.36:1823 -> xxx.yyy.129.143:1433 SYN ******S*
Jan 10 05:18:47 210.54.96.36:1736 -> xxx.yyy.129.113:1433 SYN ******S*
Jan 10 05:18:47 210.54.96.36:1825 -> xxx.yyy.129.144:1433 SYN ******S*
Jan 10 05:18:47 210.54.96.36:1826 -> xxx.yyy.129.145:1433 SYN ******S*
Jan 10 05:18:47 210.54.96.36:1830 -> xxx.yyy.129.146:1433 SYN ******S*
Jan 10 05:18:48 210.54.96.36:1739 -> xxx.yyy.129.114:1433 SYN ******S*
35205
Jan 10 21:19:20 211.105.96.171:58865 -> xxx.yyy.1.3:513 SYN ******S*
Jan 10 21:19:21 211.105.96.171:58863 -> xxx.yyy.1.1:513 SYN ******S*
Jan 10 21:19:21 211.105.96.171:58873 -> xxx.yyy.1.11:513 SYN ******S*
Jan 10 21:19:20 211.105.96.171:58870 -> xxx.yyy.1.8:513 SYN ******S*
Jan 10 21:19:20 211.105.96.171:58872 -> xxx.yyy.1.10:513 SYN ******S*
Jan 10 21:19:20 211.105.96.171:58880 -> xxx.yyy.1.18:513 SYN ******S*
Jan 10 21:19:20 211.105.96.171:58875 -> xxx.yyy.1.13:513 SYN ******S*
Jan 10 21:19:21 211.105.96.171:58883 -> xxx.yyy.1.21:513 SYN ******S*
[...]
Jan 10 21:25:39 211.105.96.171:57839 -> xxx.yyy.254.225:513 SYN ******S*
Jan 10 21:25:39 211.105.96.171:57837 -> xxx.yyy.254.223:513 SYN ******S*
Jan 10 21:25:39 211.105.96.171:57790 -> xxx.yyy.254.176:513 SYN ******S*
Jan 10 21:25:39 211.105.96.171:57802 -> xxx.yyy.254.188:513 SYN ******S*
Jan 10 21:25:39 211.105.96.171:57804 -> xxx.yyy.254.190:513 SYN ******S*
Jan 10 21:25:39 211.105.96.171:57867 -> xxx.yyy.254.253:513 SYN ******S*
Jan 10 21:25:39 211.105.96.171:57861 -> xxx.yyy.254.247:513 SYN ******S*
Jan 10 21:25:39 211.105.96.171:57818 -> xxx.yyy.254.204:513 SYN ******S*
33610
Jan 10 09:05:19 148.245.185.166:4175 -> xxx.yyy.1.1:3306 SYN ******S*
Jan 10 09:05:19 148.245.185.166:4176 -> xxx.yyy.1.2:3306 SYN ******S*
Jan 10 09:05:18 148.245.185.166:4180 -> xxx.yyy.1.6:3306 SYN ******S*
Jan 10 09:05:18 148.245.185.166:4181 -> xxx.yyy.1.7:3306 SYN ******S*
Jan 10 09:05:18 148.245.185.166:4182 -> xxx.yyy.1.8:3306 SYN ******S*
Jan 10 09:05:19 148.245.185.166:4183 -> xxx.yyy.1.9:3306 SYN ******S*
Jan 10 09:05:18 148.245.185.166:4187 -> xxx.yyy.1.13:3306 SYN ******S*
Jan 10 09:05:19 148.245.185.166:4193 -> xxx.yyy.1.19:3306 SYN ******S*
[...]
Jan 10 09:09:56 148.245.185.166:1315 -> xxx.yyy.255.236:3306 SYN ******S*
Jan 10 09:09:56 148.245.185.166:1283 -> xxx.yyy.255.204:3306 SYN ******S*
Jan 10 09:09:56 148.245.185.166:1331 -> xxx.yyy.255.252:3306 SYN ******S*
Jan 10 09:09:56 148.245.185.166:1299 -> xxx.yyy.255.220:3306 SYN ******S*
Jan 10 09:09:56 148.245.185.166:1280 -> xxx.yyy.255.201:3306 SYN ******S*
Jan 10 09:09:56 148.245.185.166:1328 -> xxx.yyy.255.249:3306 SYN ******S*
Jan 10 09:09:56 148.245.185.166:1296 -> xxx.yyy.255.217:3306 SYN ******S*
Jan 10 09:09:56 148.245.185.166:1303 -> xxx.yyy.255.224:3306 SYN ******S*
Jan 10 09:09:56 148.245.185.166:1313 -> xxx.yyy.255.234:3306 SYN ******S*
32132
Jan 10 21:27:52 203.70.51.53:1487 -> xxx.yyy.151.189:25 SYN ******S*
Jan 10 21:27:52 203.70.51.53:1488 -> xxx.yyy.151.190:25 SYN ******S*
Jan 10 21:27:52 203.70.51.53:1489 -> xxx.yyy.151.191:25 SYN ******S*
Jan 10 21:27:55 203.70.51.53:1491 -> xxx.yyy.151.193:25 SYN ******S*
Jan 10 21:27:55 203.70.51.53:1492 -> xxx.yyy.151.194:25 SYN ******S*
Jan 10 21:27:55 203.70.51.53:1494 -> xxx.yyy.151.197:25 SYN ******S*
Jan 10 21:27:52 203.70.51.53:1497 -> xxx.yyy.151.196:25 SYN ******S*
Jan 10 21:27:52 203.70.51.53:1501 -> xxx.yyy.151.203:25 SYN ******S*
[...]
Jan 10 22:08:37 203.70.51.53:3603 -> xxx.yyy.255.221:25 SYN ******S*
Jan 10 22:08:37 203.70.51.53:3598 -> xxx.yyy.255.216:25 SYN ******S*
Jan 10 22:08:37 203.70.51.53:3632 -> xxx.yyy.255.248:25 SYN ******S*
Jan 10 22:08:37 203.70.51.53:3627 -> xxx.yyy.255.242:25 SYN ******S*
Jan 10 22:08:37 203.70.51.53:3628 -> xxx.yyy.255.243:25 SYN ******S*
Jan 10 22:08:37 203.70.51.53:3621 -> xxx.yyy.255.237:25 SYN ******S*
Jan 10 22:08:37 203.70.51.53:3618 -> xxx.yyy.255.235:25 SYN ******S*
Jan 10 22:08:37 203.70.51.53:3640 -> xxx.yyy.255.253:25 SYN ******S*
31173
Jan 10 17:06:30 216.85.193.2:59468 -> xxx.yyy.1.1:80 SYN ******S*
Jan 10 17:06:29 216.85.193.2:63675 -> xxx.yyy.1.4:80 SYN ******S*
Jan 10 17:06:30 216.85.193.2:59469 -> xxx.yyy.1.2:80 SYN ******S*
Jan 10 17:06:30 216.85.193.2:59470 -> xxx.yyy.1.3:80 SYN ******S*
Jan 10 17:06:32 216.85.193.2:59472 -> xxx.yyy.1.5:80 SYN ******S*
Jan 10 17:06:29 216.85.193.2:59473 -> xxx.yyy.1.6:80 SYN ******S*
Jan 10 17:06:29 216.85.193.2:63676 -> xxx.yyy.1.8:80 SYN ******S*
Jan 10 17:06:29 216.85.193.2:59474 -> xxx.yyy.1.7:80 SYN ******S*
[...]
Jan 10 17:16:58 216.85.193.2:59805 -> xxx.yyy.255.184:80 SYN ******S*
Jan 10 17:16:58 216.85.193.2:59837 -> xxx.yyy.255.216:80 SYN ******S*
Jan 10 17:16:58 216.85.193.2:59860 -> xxx.yyy.255.239:80 SYN ******S*
Jan 10 17:16:58 216.85.193.2:59844 -> xxx.yyy.255.223:80 SYN ******S*
Jan 10 17:16:58 216.85.193.2:59848 -> xxx.yyy.255.227:80 SYN ******S*
Jan 10 17:16:58 216.85.193.2:59797 -> xxx.yyy.255.176:80 SYN ******S*
Jan 10 17:16:58 216.85.193.2:59829 -> xxx.yyy.255.208:80 SYN ******S*
Jan 10 17:16:58 216.85.193.2:59810 -> xxx.yyy.255.189:80 SYN ******S*
Jan 10 17:16:58 216.85.193.2:63704 -> xxx.yyy.255.205:80 SYN ******S*
22733
Jan 10 20:28:59 211.74.62.109:4119 -> xxx.yyy.1.3:25 SYN ******S*
Jan 10 20:29:02 211.74.62.109:4121 -> xxx.yyy.1.8:25 SYN ******S*
Jan 10 20:29:02 211.74.62.109:4122 -> xxx.yyy.1.10:25 SYN ******S*
Jan 10 20:28:59 211.74.62.109:4124 -> xxx.yyy.1.12:25 SYN ******S*
Jan 10 20:28:59 211.74.62.109:4125 -> xxx.yyy.1.13:25 SYN ******S*
Jan 10 20:28:59 211.74.62.109:4126 -> xxx.yyy.1.14:25 SYN ******S*
Jan 10 20:28:59 211.74.62.109:4128 -> xxx.yyy.1.16:25 SYN ******S*
Jan 10 20:28:59 211.74.62.109:4133 -> xxx.yyy.1.20:25 SYN ******S*
[...]
Jan 10 21:22:51 211.74.62.109:1393 -> xxx.yyy.138.217:25 SYN ******S*
Jan 10 21:22:51 211.74.62.109:1394 -> xxx.yyy.138.218:25 SYN ******S*
Jan 10 21:22:51 211.74.62.109:1396 -> xxx.yyy.138.220:25 SYN ******S*
Jan 10 21:22:51 211.74.62.109:1399 -> xxx.yyy.138.223:25 SYN ******S*
Jan 10 21:22:51 211.74.62.109:1401 -> xxx.yyy.138.225:25 SYN ******S*
Jan 10 21:22:51 211.74.62.109:1405 -> xxx.yyy.138.229:25 SYN ******S*
Jan 10 21:22:51 211.74.62.109:1411 -> xxx.yyy.138.235:25 SYN ******S*
Jan 10 21:22:52 211.74.62.109:1414 -> xxx.yyy.138.238:25 SYN ******S*
Jan 10 21:22:52 211.74.62.109:1416 -> xxx.yyy.138.240:25 SYN ******S*
22295
Jan 10 14:40:16 65.171.136.8:1467 -> xxx.yyy.1.7:4000 SYN ******S*
Jan 10 14:40:16 65.171.136.8:1477 -> xxx.yyy.1.17:4000 SYN ******S*
Jan 10 14:40:16 65.171.136.8:1472 -> xxx.yyy.1.12:4000 SYN ******S*
Jan 10 14:40:17 65.171.136.8:1479 -> xxx.yyy.1.19:4000 SYN ******S*
Jan 10 14:40:16 65.171.136.8:1481 -> xxx.yyy.1.21:4000 SYN ******S*
Jan 10 14:40:16 65.171.136.8:1482 -> xxx.yyy.1.22:4000 SYN ******S*
Jan 10 14:40:17 65.171.136.8:1476 -> xxx.yyy.1.16:4000 SYN ******S*
Jan 10 14:40:16 65.171.136.8:1483 -> xxx.yyy.1.23:4000 SYN ******S*
[...]
Jan 10 14:46:05 65.171.136.8:3275 -> xxx.yyy.255.222:4000 SYN ******S*
Jan 10 14:46:05 65.171.136.8:3307 -> xxx.yyy.255.254:4000 SYN ******S*
Jan 10 14:46:05 65.171.136.8:3292 -> xxx.yyy.255.239:4000 SYN ******S*
Jan 10 14:46:05 65.171.136.8:3272 -> xxx.yyy.255.219:4000 SYN ******S*
Jan 10 14:46:05 65.171.136.8:3276 -> xxx.yyy.255.223:4000 SYN ******S*
Jan 10 14:46:05 65.171.136.8:3269 -> xxx.yyy.255.216:4000 SYN ******S*
Jan 10 14:46:05 65.171.136.8:3266 -> xxx.yyy.255.213:4000 SYN ******S*
Jan 10 14:46:05 65.171.136.8:3279 -> xxx.yyy.255.226:4000 SYN ******S*
19958
Jan 10 01:31:32 61.186.116.126:4841 -> xxx.yyy.137.228:6129 SYN ******S*
Jan 10 01:31:34 61.186.116.126:4843 -> xxx.yyy.137.228:3410 SYN ******S*
Jan 10 01:31:34 61.186.116.126:4844 -> xxx.yyy.137.228:5554 SYN ******S*
Jan 10 01:31:35 61.186.116.126:4846 -> xxx.yyy.137.228:5000 SYN ******S*
Jan 10 01:31:32 61.186.116.126:4847 -> xxx.yyy.137.228:80 SYN ******S*
Jan 10 01:31:35 61.186.116.126:4839 -> xxx.yyy.137.228:1025 SYN ******S*
Jan 10 01:31:35 61.186.116.126:4845 -> xxx.yyy.137.228:1433 SYN ******S*
Jan 10 01:31:35 61.186.116.126:4871 -> xxx.yyy.193.43:6129 SYN ******S*
[...]
Jan 10 03:44:38 61.186.116.126:3712 -> xxx.yyy.195.48:1025 SYN ******S*
Jan 10 03:44:40 61.186.116.126:3881 -> xxx.yyy.253.153:1025 SYN ******S*
Jan 10 03:44:40 61.186.116.126:3900 -> xxx.yyy.249.45:1025 SYN ******S*
Jan 10 03:44:40 61.186.116.126:3280 -> xxx.yyy.128.27:1025 SYN ******S*
Jan 10 03:44:40 61.186.116.126:3294 -> xxx.yyy.13.195:1025 SYN ******S*
Jan 10 03:44:41 61.186.116.126:3935 -> xxx.yyy.66.31:1025 SYN ******S*
Jan 10 03:44:41 61.186.116.126:3352 -> xxx.yyy.33.36:1025 SYN ******S*
Jan 10 03:44:41 61.186.116.126:3332 -> xxx.yyy.243.14:1025 SYN ******S*
17645
[...]
13987
Jan 10 01:32:59 218.7.134.17:3938 -> xxx.yyy.1.0:1433 SYN ******S*
Jan 10 01:33:00 218.7.134.17:3940 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 10 01:33:00 218.7.134.17:3943 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 10 01:33:00 218.7.134.17:3947 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 10 01:33:00 218.7.134.17:3948 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 10 01:33:00 218.7.134.17:3953 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 10 01:33:00 218.7.134.17:3954 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 10 01:33:00 218.7.134.17:3958 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Jan 10 02:02:36 218.7.134.17:3814 -> xxx.yyy.33.247:1433 SYN ******S*
Jan 10 02:02:36 218.7.134.17:3812 -> xxx.yyy.33.246:1433 SYN ******S*
Jan 10 02:02:36 218.7.134.17:3822 -> xxx.yyy.33.249:1433 SYN ******S*
Jan 10 02:02:36 218.7.134.17:3819 -> xxx.yyy.33.248:1433 SYN ******S*
Jan 10 02:02:37 218.7.134.17:3835 -> xxx.yyy.33.253:1433 SYN ******S*
Jan 10 02:02:37 218.7.134.17:3832 -> xxx.yyy.33.252:1433 SYN ******S*
Jan 10 02:02:37 218.7.134.17:3828 -> xxx.yyy.33.251:1433 SYN ******S*
Jan 10 02:02:37 218.7.134.17:3826 -> xxx.yyy.33.250:1433 SYN ******S*
Jan 10 02:02:37 218.7.134.17:3857 -> xxx.yyy.33.254:1433 SYN ******S*
8809
Jan 10 22:40:37 220.221.238.56:1497 -> xxx.yyy.174.8:5554 SYN ******S*
Jan 10 22:40:40 220.221.238.56:1824 -> xxx.yyy.174.8:9898 SYN ******S*
Jan 10 22:40:37 220.221.238.56:1499 -> xxx.yyy.174.4:5554 SYN ******S*
Jan 10 22:40:37 220.221.238.56:1496 -> xxx.yyy.174.7:5554 SYN ******S*
Jan 10 22:40:38 220.221.238.56:1606 -> xxx.yyy.174.7:1023 SYN ******S*
Jan 10 22:40:40 220.221.238.56:1822 -> xxx.yyy.174.7:9898 SYN ******S*
Jan 10 22:40:37 220.221.238.56:1500 -> xxx.yyy.174.9:5554 SYN ******S*
Jan 10 22:40:40 220.221.238.56:1826 -> xxx.yyy.174.9:9898 SYN ******S*
[...]
Jan 10 22:43:46 220.221.238.56:3401 -> xxx.yyy.175.105:9898 SYN ******S*
Jan 10 22:43:46 220.221.238.56:3402 -> xxx.yyy.175.106:9898 SYN ******S*
Jan 10 22:43:46 220.221.238.56:3398 -> xxx.yyy.175.102:9898 SYN ******S*
Jan 10 22:43:46 220.221.238.56:3400 -> xxx.yyy.175.104:9898 SYN ******S*
Jan 10 22:43:46 220.221.238.56:3403 -> xxx.yyy.175.107:9898 SYN ******S*
Jan 10 22:43:46 220.221.238.56:3404 -> xxx.yyy.175.108:9898 SYN ******S*
Jan 10 22:43:46 220.221.238.56:3405 -> xxx.yyy.175.109:9898 SYN ******S*
Jan 10 22:43:47 220.221.238.56:3457 -> xxx.yyy.175.110:9898 SYN ******S*
8386
Jan 10 00:02:28 60.176.191.238:3384 -> xxx.yyy.154.112:5554 SYN ******S*
Jan 10 00:02:31 60.176.191.238:4654 -> xxx.yyy.154.112:9898 SYN ******S*
Jan 10 00:02:28 60.176.191.238:3385 -> xxx.yyy.154.113:5554 SYN ******S*
Jan 10 00:02:29 60.176.191.238:3745 -> xxx.yyy.154.113:1023 SYN ******S*
Jan 10 00:02:31 60.176.191.238:4655 -> xxx.yyy.154.113:9898 SYN ******S*
Jan 10 00:02:28 60.176.191.238:3386 -> xxx.yyy.154.114:5554 SYN ******S*
Jan 10 00:02:31 60.176.191.238:4656 -> xxx.yyy.154.114:9898 SYN ******S*
Jan 10 00:02:28 60.176.191.238:3387 -> xxx.yyy.154.115:5554 SYN ******S*
[...]
Jan 10 00:03:19 60.176.191.238:3431 -> xxx.yyy.154.162:9898 SYN ******S*
Jan 10 00:03:19 60.176.191.238:3432 -> xxx.yyy.154.163:9898 SYN ******S*
Jan 10 00:03:19 60.176.191.238:3433 -> xxx.yyy.154.161:9898 SYN ******S*
Jan 10 00:03:19 60.176.191.238:3434 -> xxx.yyy.154.164:9898 SYN ******S*
Jan 10 00:03:19 60.176.191.238:3440 -> xxx.yyy.154.171:9898 SYN ******S*
Jan 10 00:03:19 60.176.191.238:3441 -> xxx.yyy.154.172:9898 SYN ******S*
Jan 10 00:03:19 60.176.191.238:3442 -> xxx.yyy.154.176:9898 SYN ******S*
Jan 10 00:03:19 60.176.191.238:3499 -> xxx.yyy.154.200:9898 SYN ******S*
8226
Jan 10 22:54:41 222.117.19.190:2553 -> xxx.yyy.72.126:5554 SYN ******S*
Jan 10 22:54:42 222.117.19.190:3602 -> xxx.yyy.72.126:1023 SYN ******S*
Jan 10 22:54:41 222.117.19.190:2546 -> xxx.yyy.72.133:5554 SYN ******S*
Jan 10 22:54:42 222.117.19.190:3587 -> xxx.yyy.72.133:1023 SYN ******S*
Jan 10 22:54:44 222.117.19.190:2133 -> xxx.yyy.72.133:9898 SYN ******S*
Jan 10 22:54:41 222.117.19.190:2547 -> xxx.yyy.72.132:5554 SYN ******S*
Jan 10 22:54:42 222.117.19.190:3591 -> xxx.yyy.72.132:1023 SYN ******S*
Jan 10 22:54:41 222.117.19.190:2560 -> xxx.yyy.72.143:5554 SYN ******S*
[...]
Jan 10 22:55:26 222.117.19.190:4620 -> xxx.yyy.92.219:9898 SYN ******S*
Jan 10 22:55:26 222.117.19.190:4832 -> xxx.yyy.92.234:9898 SYN ******S*
Jan 10 22:55:26 222.117.19.190:4804 -> xxx.yyy.92.222:9898 SYN ******S*
Jan 10 22:55:26 222.117.19.190:4798 -> xxx.yyy.92.221:9898 SYN ******S*
Jan 10 22:55:26 222.117.19.190:4805 -> xxx.yyy.92.223:9898 SYN ******S*
Jan 10 22:55:26 222.117.19.190:4812 -> xxx.yyy.92.227:9898 SYN ******S*
Jan 10 22:55:26 222.117.19.190:1058 -> xxx.yyy.92.238:9898 SYN ******S*
Jan 10 22:55:26 222.117.19.190:1069 -> xxx.yyy.92.243:9898 SYN ******S*
Jan 10 22:55:26 222.117.19.190:1079 -> xxx.yyy.92.245:9898 SYN ******S*
8123
[...]
7698
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list