[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Wed Jan 12 18:09:45 GMT 2005
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Jan 11 02:19:20 64.146.5.115:8927 -> xxx.yyy.1.1:4899 SYN ******S*
Jan 11 02:19:20 64.146.5.115:8928 -> xxx.yyy.1.2:4899 SYN ******S*
Jan 11 02:19:20 64.146.5.115:8929 -> xxx.yyy.1.3:4899 SYN ******S*
Jan 11 02:19:23 64.146.5.115:8931 -> xxx.yyy.1.5:4899 SYN ******S*
Jan 11 02:19:23 64.146.5.115:8932 -> xxx.yyy.1.6:4899 SYN ******S*
Jan 11 02:19:21 64.146.5.115:8934 -> xxx.yyy.1.8:4899 SYN ******S*
Jan 11 02:19:21 64.146.5.115:8935 -> xxx.yyy.1.9:4899 SYN ******S*
Jan 11 02:19:23 64.146.5.115:8936 -> xxx.yyy.1.10:4899 SYN ******S*
[...]
Jan 11 02:32:36 64.146.5.115:11208 -> xxx.yyy.255.222:4899 SYN ******S*
Jan 11 02:32:36 64.146.5.115:11205 -> xxx.yyy.255.219:4899 SYN ******S*
Jan 11 02:32:36 64.146.5.115:11202 -> xxx.yyy.255.216:4899 SYN ******S*
Jan 11 02:32:36 64.146.5.115:11218 -> xxx.yyy.255.232:4899 SYN ******S*
Jan 11 02:32:36 64.146.5.115:11215 -> xxx.yyy.255.229:4899 SYN ******S*
Jan 11 02:32:36 64.146.5.115:11231 -> xxx.yyy.255.245:4899 SYN ******S*
Jan 11 02:32:36 64.146.5.115:11212 -> xxx.yyy.255.226:4899 SYN ******S*
Jan 11 02:32:36 64.146.5.115:11228 -> xxx.yyy.255.242:4899 SYN ******S*
Jan 11 02:32:36 64.146.5.115:11225 -> xxx.yyy.255.239:4899 SYN ******S*
95313
Jan 11 20:44:22 81.130.10.251:32794 -> xxx.yyy.214.1:4899 SYN ******S*
Jan 11 20:44:22 81.130.10.251:33176 -> xxx.yyy.214.1:5900 SYN ******S*
Jan 11 20:44:22 81.130.10.251:33096 -> xxx.yyy.214.1:42 SYN ******S*
Jan 11 20:44:19 81.130.10.251:34818 -> xxx.yyy.214.2:5900 SYN ******S*
Jan 11 20:44:22 81.130.10.251:34813 -> xxx.yyy.214.2:4899 SYN ******S*
Jan 11 20:44:22 81.130.10.251:33449 -> xxx.yyy.214.2:42 SYN ******S*
Jan 11 20:44:22 81.130.10.251:35245 -> xxx.yyy.214.3:5900 SYN ******S*
Jan 11 20:44:21 81.130.10.251:34299 -> xxx.yyy.214.9:5900 SYN ******S*
[...]
Jan 11 23:59:57 81.130.10.251:32999 -> xxx.yyy.250.240:139 SYN ******S*
Jan 11 23:59:58 81.130.10.251:34068 -> xxx.yyy.251.6:5900 SYN ******S*
Jan 11 23:59:58 81.130.10.251:34412 -> xxx.yyy.250.224:139 SYN ******S*
Jan 11 23:59:58 81.130.10.251:32989 -> xxx.yyy.251.9:4899 SYN ******S*
Jan 11 23:59:58 81.130.10.251:34175 -> xxx.yyy.251.9:5900 SYN ******S*
Jan 11 23:59:58 81.130.10.251:33263 -> xxx.yyy.251.26:5900 SYN ******S*
Jan 11 23:59:58 81.130.10.251:33064 -> xxx.yyy.250.244:139 SYN ******S*
Jan 11 23:59:58 81.130.10.251:34938 -> xxx.yyy.251.27:42 SYN ******S*
Jan 11 23:59:58 81.130.10.251:34159 -> xxx.yyy.250.229:139 SYN ******S*
92753
Jan 11 07:16:19 206.82.130.198:53316 -> xxx.yyy.1.0:111 SYN ******S*
Jan 11 07:16:19 206.82.130.198:53317 -> xxx.yyy.1.1:111 SYN ******S*
Jan 11 07:16:19 206.82.130.198:53319 -> xxx.yyy.1.3:111 SYN ******S*
Jan 11 07:16:19 206.82.130.198:53320 -> xxx.yyy.1.4:111 SYN ******S*
Jan 11 07:16:19 206.82.130.198:53321 -> xxx.yyy.1.5:111 SYN ******S*
Jan 11 07:16:19 206.82.130.198:53322 -> xxx.yyy.1.6:111 SYN ******S*
Jan 11 07:16:19 206.82.130.198:53323 -> xxx.yyy.1.7:111 SYN ******S*
Jan 11 07:16:19 206.82.130.198:53324 -> xxx.yyy.1.8:111 SYN ******S*
[...]
Jan 11 07:33:55 206.82.130.198:53104 -> xxx.yyy.255.248:111 SYN ******S*
Jan 11 07:33:55 206.82.130.198:53106 -> xxx.yyy.255.250:111 SYN ******S*
Jan 11 07:33:55 206.82.130.198:53105 -> xxx.yyy.255.249:111 SYN ******S*
Jan 11 07:33:55 206.82.130.198:53107 -> xxx.yyy.255.251:111 SYN ******S*
Jan 11 07:33:55 206.82.130.198:53109 -> xxx.yyy.255.253:111 SYN ******S*
Jan 11 07:33:55 206.82.130.198:53108 -> xxx.yyy.255.252:111 SYN ******S*
Jan 11 07:33:55 206.82.130.198:53110 -> xxx.yyy.255.254:111 SYN ******S*
Jan 11 07:33:55 206.82.130.198:53111 -> xxx.yyy.255.255:111 SYN ******S*
80312
Jan 11 12:17:19 146.145.218.34:41724 -> xxx.yyy.1.0:1433 SYN ******S*
Jan 11 12:17:19 146.145.218.34:43486 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 11 12:17:16 146.145.218.34:43820 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 11 12:17:16 146.145.218.34:44050 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 11 12:17:19 146.145.218.34:45108 -> xxx.yyy.1.8:1433 SYN ******S*
Jan 11 12:17:16 146.145.218.34:45202 -> xxx.yyy.1.10:1433 SYN ******S*
Jan 11 12:17:19 146.145.218.34:45540 -> xxx.yyy.1.14:1433 SYN ******S*
Jan 11 12:17:16 146.145.218.34:45846 -> xxx.yyy.1.15:1433 SYN ******S*
[...]
Jan 11 16:06:03 146.145.218.34:36686 -> xxx.yyy.255.238:1433 SYN ******S*
Jan 11 16:06:04 146.145.218.34:36738 -> xxx.yyy.255.239:1433 SYN ******S*
Jan 11 16:06:06 146.145.218.34:56432 -> xxx.yyy.255.243:1433 SYN ******S*
Jan 11 16:06:06 146.145.218.34:44334 -> xxx.yyy.255.245:1433 SYN ******S*
Jan 11 16:06:06 146.145.218.34:45546 -> xxx.yyy.255.247:1433 SYN ******S*
Jan 11 16:06:06 146.145.218.34:48658 -> xxx.yyy.255.249:1433 SYN ******S*
Jan 11 16:06:07 146.145.218.34:57446 -> xxx.yyy.255.251:1433 SYN ******S*
Jan 11 16:06:08 146.145.218.34:6870 -> xxx.yyy.255.253:1433 SYN ******S*
Jan 11 16:06:08 146.145.218.34:8570 -> xxx.yyy.255.254:1433 SYN ******S*
62255
Jan 11 09:03:51 64.29.217.43:3101 -> xxx.yyy.1.1:3306 SYN ******S*
Jan 11 09:03:51 64.29.217.43:3102 -> xxx.yyy.1.2:3306 SYN ******S*
Jan 11 09:03:53 64.29.217.43:3103 -> xxx.yyy.1.3:3306 SYN ******S*
Jan 11 09:03:54 64.29.217.43:3104 -> xxx.yyy.1.4:3306 SYN ******S*
Jan 11 09:03:54 64.29.217.43:3105 -> xxx.yyy.1.5:3306 SYN ******S*
Jan 11 09:03:54 64.29.217.43:3106 -> xxx.yyy.1.6:3306 SYN ******S*
Jan 11 09:03:52 64.29.217.43:3107 -> xxx.yyy.1.7:3306 SYN ******S*
Jan 11 09:03:53 64.29.217.43:3108 -> xxx.yyy.1.8:3306 SYN ******S*
[...]
Jan 11 09:15:34 64.29.217.43:1764 -> xxx.yyy.255.236:3306 SYN ******S*
Jan 11 09:15:34 64.29.217.43:1776 -> xxx.yyy.255.248:3306 SYN ******S*
Jan 11 09:15:34 64.29.217.43:1771 -> xxx.yyy.255.243:3306 SYN ******S*
Jan 11 09:15:34 64.29.217.43:1777 -> xxx.yyy.255.249:3306 SYN ******S*
Jan 11 09:15:34 64.29.217.43:1774 -> xxx.yyy.255.246:3306 SYN ******S*
Jan 11 09:15:34 64.29.217.43:1772 -> xxx.yyy.255.244:3306 SYN ******S*
Jan 11 09:15:34 64.29.217.43:1773 -> xxx.yyy.255.245:3306 SYN ******S*
Jan 11 09:15:34 64.29.217.43:1775 -> xxx.yyy.255.247:3306 SYN ******S*
51123
Jan 11 10:51:11 64.95.245.104:2278 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 11 10:51:14 64.95.245.104:2280 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 11 10:51:11 64.95.245.104:2283 -> xxx.yyy.1.8:1433 SYN ******S*
Jan 11 10:51:14 64.95.245.104:2284 -> xxx.yyy.1.9:1433 SYN ******S*
Jan 11 10:51:14 64.95.245.104:2286 -> xxx.yyy.1.11:1433 SYN ******S*
Jan 11 10:51:14 64.95.245.104:2287 -> xxx.yyy.1.12:1433 SYN ******S*
Jan 11 10:51:14 64.95.245.104:2288 -> xxx.yyy.1.13:1433 SYN ******S*
Jan 11 10:51:14 64.95.245.104:2289 -> xxx.yyy.1.14:1433 SYN ******S*
[...]
Jan 11 11:02:53 64.95.245.104:4629 -> xxx.yyy.255.240:1433 SYN ******S*
Jan 11 11:02:53 64.95.245.104:4638 -> xxx.yyy.255.249:1433 SYN ******S*
Jan 11 11:02:53 64.95.245.104:4632 -> xxx.yyy.255.243:1433 SYN ******S*
Jan 11 11:02:53 64.95.245.104:4633 -> xxx.yyy.255.244:1433 SYN ******S*
Jan 11 11:02:53 64.95.245.104:4634 -> xxx.yyy.255.245:1433 SYN ******S*
Jan 11 11:02:53 64.95.245.104:4637 -> xxx.yyy.255.248:1433 SYN ******S*
Jan 11 11:02:53 64.95.245.104:4635 -> xxx.yyy.255.246:1433 SYN ******S*
Jan 11 11:02:53 64.95.245.104:4639 -> xxx.yyy.255.250:1433 SYN ******S*
Jan 11 11:02:53 64.95.245.104:4643 -> xxx.yyy.255.254:1433 SYN ******S*
41785
Jan 11 22:16:10 142.176.174.220:52645 -> xxx.yyy.1.1:6101 SYN ******S*
Jan 11 22:16:10 142.176.174.220:52646 -> xxx.yyy.1.2:6101 SYN ******S*
Jan 11 22:16:10 142.176.174.220:52647 -> xxx.yyy.1.3:6101 SYN ******S*
Jan 11 22:16:10 142.176.174.220:52648 -> xxx.yyy.1.4:6101 SYN ******S*
Jan 11 22:16:10 142.176.174.220:52649 -> xxx.yyy.1.5:6101 SYN ******S*
Jan 11 22:16:10 142.176.174.220:52659 -> xxx.yyy.1.15:6101 SYN ******S*
Jan 11 22:16:10 142.176.174.220:52660 -> xxx.yyy.1.16:6101 SYN ******S*
Jan 11 22:16:10 142.176.174.220:52663 -> xxx.yyy.1.19:6101 SYN ******S*
[...]
Jan 11 22:19:39 142.176.174.220:50557 -> xxx.yyy.255.230:6101 SYN ******S*
Jan 11 22:19:39 142.176.174.220:50556 -> xxx.yyy.255.229:6101 SYN ******S*
Jan 11 22:19:39 142.176.174.220:50558 -> xxx.yyy.255.231:6101 SYN ******S*
Jan 11 22:19:39 142.176.174.220:50566 -> xxx.yyy.255.239:6101 SYN ******S*
Jan 11 22:19:39 142.176.174.220:50544 -> xxx.yyy.255.217:6101 SYN ******S*
Jan 11 22:19:39 142.176.174.220:50545 -> xxx.yyy.255.218:6101 SYN ******S*
Jan 11 22:19:39 142.176.174.220:50546 -> xxx.yyy.255.219:6101 SYN ******S*
Jan 11 22:19:39 142.176.174.220:50547 -> xxx.yyy.255.220:6101 SYN ******S*
35708
Jan 11 12:03:14 218.212.195.29:4370 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 11 12:03:14 218.212.195.29:4371 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 11 12:03:14 218.212.195.29:4372 -> xxx.yyy.1.7:1433 SYN ******S*
Jan 11 12:03:14 218.212.195.29:4374 -> xxx.yyy.1.9:1433 SYN ******S*
Jan 11 12:03:17 218.212.195.29:4375 -> xxx.yyy.1.10:1433 SYN ******S*
Jan 11 12:03:14 218.212.195.29:4376 -> xxx.yyy.1.11:1433 SYN ******S*
Jan 11 12:03:14 218.212.195.29:4378 -> xxx.yyy.1.13:1433 SYN ******S*
Jan 11 12:03:14 218.212.195.29:4383 -> xxx.yyy.1.18:1433 SYN ******S*
[...]
Jan 11 12:14:55 218.212.195.29:3934 -> xxx.yyy.255.221:1433 SYN ******S*
Jan 11 12:14:55 218.212.195.29:3945 -> xxx.yyy.255.232:1433 SYN ******S*
Jan 11 12:14:56 218.212.195.29:3956 -> xxx.yyy.255.239:1433 SYN ******S*
Jan 11 12:14:56 218.212.195.29:3961 -> xxx.yyy.255.244:1433 SYN ******S*
Jan 11 12:14:56 218.212.195.29:3969 -> xxx.yyy.255.252:1433 SYN ******S*
Jan 11 12:14:56 218.212.195.29:3970 -> xxx.yyy.255.253:1433 SYN ******S*
Jan 11 12:14:56 218.212.195.29:3966 -> xxx.yyy.255.249:1433 SYN ******S*
Jan 11 12:14:56 218.212.195.29:3967 -> xxx.yyy.255.250:1433 SYN ******S*
35585
Jan 11 04:48:46 172.179.58.11:1969 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 11 04:48:46 172.179.58.11:1970 -> xxx.yyy.1.7:1433 SYN ******S*
Jan 11 04:48:46 172.179.58.11:1972 -> xxx.yyy.1.9:1433 SYN ******S*
Jan 11 04:48:46 172.179.58.11:1973 -> xxx.yyy.1.10:1433 SYN ******S*
Jan 11 04:48:46 172.179.58.11:1974 -> xxx.yyy.1.11:1433 SYN ******S*
Jan 11 04:48:46 172.179.58.11:1971 -> xxx.yyy.1.8:1433 SYN ******S*
Jan 11 04:48:46 172.179.58.11:1979 -> xxx.yyy.1.16:1433 SYN ******S*
Jan 11 04:48:46 172.179.58.11:1981 -> xxx.yyy.1.18:1433 SYN ******S*
[...]
Jan 11 04:59:42 172.179.58.11:1976 -> xxx.yyy.255.243:1433 SYN ******S*
Jan 11 04:59:42 172.179.58.11:1982 -> xxx.yyy.255.249:1433 SYN ******S*
Jan 11 04:59:42 172.179.58.11:1983 -> xxx.yyy.255.250:1433 SYN ******S*
Jan 11 04:59:42 172.179.58.11:1984 -> xxx.yyy.255.251:1433 SYN ******S*
Jan 11 04:59:42 172.179.58.11:1978 -> xxx.yyy.255.245:1433 SYN ******S*
Jan 11 04:59:42 172.179.58.11:1980 -> xxx.yyy.255.247:1433 SYN ******S*
Jan 11 04:59:42 172.179.58.11:1986 -> xxx.yyy.255.253:1433 SYN ******S*
Jan 11 04:59:42 172.179.58.11:1987 -> xxx.yyy.255.254:1433 SYN ******S*
Jan 11 04:59:42 172.179.58.11:1985 -> xxx.yyy.255.252:1433 SYN ******S*
33836
Jan 11 09:03:12 134.193.138.26:1420 -> xxx.yyy.1.2:6101 SYN ******S*
Jan 11 09:03:11 134.193.138.26:1421 -> xxx.yyy.1.3:6101 SYN ******S*
Jan 11 09:03:14 134.193.138.26:1422 -> xxx.yyy.1.4:6101 SYN ******S*
Jan 11 09:03:14 134.193.138.26:1423 -> xxx.yyy.1.5:6101 SYN ******S*
Jan 11 09:03:14 134.193.138.26:1424 -> xxx.yyy.1.6:6101 SYN ******S*
Jan 11 09:03:11 134.193.138.26:1425 -> xxx.yyy.1.7:6101 SYN ******S*
Jan 11 09:03:14 134.193.138.26:1433 -> xxx.yyy.1.15:6101 SYN ******S*
Jan 11 09:03:14 134.193.138.26:1434 -> xxx.yyy.1.16:6101 SYN ******S*
[...]
Jan 11 09:06:46 134.193.138.26:2750 -> xxx.yyy.255.233:6101 SYN ******S*
Jan 11 09:06:46 134.193.138.26:2702 -> xxx.yyy.255.196:6101 SYN ******S*
Jan 11 09:06:46 134.193.138.26:2754 -> xxx.yyy.255.237:6101 SYN ******S*
Jan 11 09:06:46 134.193.138.26:2768 -> xxx.yyy.255.251:6101 SYN ******S*
Jan 11 09:06:46 134.193.138.26:2743 -> xxx.yyy.255.226:6101 SYN ******S*
Jan 11 09:06:46 134.193.138.26:2759 -> xxx.yyy.255.242:6101 SYN ******S*
Jan 11 09:06:46 134.193.138.26:2746 -> xxx.yyy.255.229:6101 SYN ******S*
Jan 11 09:06:46 134.193.138.26:2751 -> xxx.yyy.255.234:6101 SYN ******S*
32798
Jan 11 09:08:09 84.128.84.111:61838 -> xxx.yyy.1.0:3306 SYN ******S*
Jan 11 09:08:09 84.128.84.111:61839 -> xxx.yyy.1.0:1337 SYN ******S*
Jan 11 09:08:09 84.128.84.111:61842 -> xxx.yyy.1.1:1337 SYN ******S*
Jan 11 09:08:09 84.128.84.111:61843 -> xxx.yyy.1.1:31337 SYN ******S*
Jan 11 09:08:09 84.128.84.111:61844 -> xxx.yyy.1.2:3306 SYN ******S*
Jan 11 09:08:09 84.128.84.111:61845 -> xxx.yyy.1.2:1337 SYN ******S*
Jan 11 09:08:09 84.128.84.111:61846 -> xxx.yyy.1.2:31337 SYN ******S*
Jan 11 09:08:09 84.128.84.111:61849 -> xxx.yyy.1.3:31337 SYN ******S*
[...]
Jan 11 09:42:52 84.128.84.111:63173 -> xxx.yyy.20.250:31337 SYN ******S*
Jan 11 09:42:52 84.128.84.111:63176 -> xxx.yyy.20.251:31337 SYN ******S*
Jan 11 09:42:52 84.128.84.111:63177 -> xxx.yyy.20.252:3306 SYN ******S*
Jan 11 09:42:52 84.128.84.111:63178 -> xxx.yyy.20.252:1337 SYN ******S*
Jan 11 09:42:52 84.128.84.111:63179 -> xxx.yyy.20.252:31337 SYN ******S*
Jan 11 09:42:52 84.128.84.111:63180 -> xxx.yyy.20.253:3306 SYN ******S*
Jan 11 09:42:52 84.128.84.111:63182 -> xxx.yyy.20.253:31337 SYN ******S*
Jan 11 09:42:52 84.128.84.111:63183 -> xxx.yyy.20.254:3306 SYN ******S*
Jan 11 09:42:52 84.128.84.111:63185 -> xxx.yyy.20.254:31337 SYN ******S*
31211
Jan 11 07:31:27 206.107.110.254:26358 -> xxx.yyy.67.1:4899 SYN ******S*
Jan 11 07:31:27 206.107.110.254:22897 -> xxx.yyy.67.1:42 SYN ******S*
Jan 11 07:31:27 206.107.110.254:26369 -> xxx.yyy.67.2:4899 SYN ******S*
Jan 11 07:31:27 206.107.110.254:26371 -> xxx.yyy.67.2:42 SYN ******S*
Jan 11 07:31:27 206.107.110.254:26372 -> xxx.yyy.67.3:4899 SYN ******S*
Jan 11 07:31:27 206.107.110.254:26374 -> xxx.yyy.67.3:42 SYN ******S*
Jan 11 07:31:27 206.107.110.254:26375 -> xxx.yyy.67.4:4899 SYN ******S*
Jan 11 07:31:27 206.107.110.254:26377 -> xxx.yyy.67.4:42 SYN ******S*
[...]
Jan 11 08:07:17 206.107.110.254:24622 -> xxx.yyy.168.99:42 SYN ******S*
Jan 11 08:07:17 206.107.110.254:24620 -> xxx.yyy.168.98:42 SYN ******S*
Jan 11 08:07:17 206.107.110.254:24721 -> xxx.yyy.168.111:42 SYN ******S*
Jan 11 08:07:17 206.107.110.254:24722 -> xxx.yyy.168.112:4899 SYN ******S*
Jan 11 08:07:17 206.107.110.254:24724 -> xxx.yyy.168.112:42 SYN ******S*
Jan 11 08:07:17 206.107.110.254:24623 -> xxx.yyy.168.100:4899 SYN ******S*
Jan 11 08:07:17 206.107.110.254:24726 -> xxx.yyy.168.113:4899 SYN ******S*
Jan 11 08:07:17 206.107.110.254:24728 -> xxx.yyy.168.113:42 SYN ******S*
26978
Jan 11 00:00:04 200.216.155.80:3129 -> xxx.yyy.206.110:1433 SYN ******S*
Jan 11 00:00:07 200.216.155.80:3313 -> xxx.yyy.206.153:1433 SYN ******S*
Jan 11 00:00:05 200.216.155.80:3255 -> xxx.yyy.206.138:1433 SYN ******S*
Jan 11 00:00:05 200.216.155.80:3261 -> xxx.yyy.206.139:1433 SYN ******S*
Jan 11 00:00:08 200.216.155.80:3319 -> xxx.yyy.206.154:1433 SYN ******S*
Jan 11 00:00:05 200.216.155.80:3137 -> xxx.yyy.206.112:1433 SYN ******S*
Jan 11 00:00:05 200.216.155.80:3265 -> xxx.yyy.206.140:1433 SYN ******S*
Jan 11 00:00:08 200.216.155.80:3325 -> xxx.yyy.206.155:1433 SYN ******S*
[...]
Jan 11 00:52:19 200.216.155.80:1969 -> xxx.yyy.255.244:1433 SYN ******S*
Jan 11 00:52:19 200.216.155.80:1973 -> xxx.yyy.255.245:1433 SYN ******S*
Jan 11 00:52:20 200.216.155.80:1980 -> xxx.yyy.255.246:1433 SYN ******S*
Jan 11 00:52:21 200.216.155.80:1991 -> xxx.yyy.255.248:1433 SYN ******S*
Jan 11 00:52:21 200.216.155.80:2003 -> xxx.yyy.255.250:1433 SYN ******S*
Jan 11 00:52:22 200.216.155.80:2011 -> xxx.yyy.255.251:1433 SYN ******S*
Jan 11 00:52:22 200.216.155.80:2017 -> xxx.yyy.255.252:1433 SYN ******S*
Jan 11 00:52:23 200.216.155.80:2024 -> xxx.yyy.255.253:1433 SYN ******S*
26396
Jan 11 13:08:16 163.23.3.70:1347 -> xxx.yyy.1.104:6101 SYN ******S*
Jan 11 13:08:16 163.23.3.70:1352 -> xxx.yyy.1.109:6101 SYN ******S*
Jan 11 13:08:16 163.23.3.70:1355 -> xxx.yyy.1.112:6101 SYN ******S*
Jan 11 13:08:16 163.23.3.70:1359 -> xxx.yyy.1.116:6101 SYN ******S*
Jan 11 13:08:16 163.23.3.70:1358 -> xxx.yyy.1.115:6101 SYN ******S*
Jan 11 13:08:16 163.23.3.70:1365 -> xxx.yyy.1.122:6101 SYN ******S*
Jan 11 13:08:16 163.23.3.70:1366 -> xxx.yyy.1.123:6101 SYN ******S*
Jan 11 13:08:16 163.23.3.70:1368 -> xxx.yyy.1.125:6101 SYN ******S*
[...]
Jan 11 13:23:45 163.23.3.70:4783 -> xxx.yyy.255.220:6101 SYN ******S*
Jan 11 13:23:45 163.23.3.70:4791 -> xxx.yyy.255.223:6101 SYN ******S*
Jan 11 13:23:45 163.23.3.70:4774 -> xxx.yyy.255.219:6101 SYN ******S*
Jan 11 13:23:45 163.23.3.70:4805 -> xxx.yyy.255.237:6101 SYN ******S*
Jan 11 13:23:45 163.23.3.70:4808 -> xxx.yyy.255.240:6101 SYN ******S*
Jan 11 13:23:45 163.23.3.70:4812 -> xxx.yyy.255.244:6101 SYN ******S*
Jan 11 13:23:45 163.23.3.70:4813 -> xxx.yyy.255.245:6101 SYN ******S*
Jan 11 13:23:45 163.23.3.70:4821 -> xxx.yyy.255.253:6101 SYN ******S*
Jan 11 13:23:45 163.23.3.70:4822 -> xxx.yyy.255.254:6101 SYN ******S*
23066
Jan 11 02:00:54 218.92.12.84:15203 -> xxx.yyy.1.0:1433 SYN ******S*
Jan 11 02:00:52 218.92.12.84:15227 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 11 02:00:52 218.92.12.84:15228 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 11 02:00:56 218.92.12.84:15326 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 11 02:00:56 218.92.12.84:15335 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 11 02:00:53 218.92.12.84:15344 -> xxx.yyy.1.7:1433 SYN ******S*
Jan 11 02:00:56 218.92.12.84:15350 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 11 02:00:57 218.92.12.84:15360 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
Jan 11 03:54:27 218.92.12.84:22430 -> xxx.yyy.85.236:1433 SYN ******S*
Jan 11 03:54:27 218.92.12.84:22433 -> xxx.yyy.85.235:1433 SYN ******S*
Jan 11 03:54:27 218.92.12.84:22439 -> xxx.yyy.85.241:1433 SYN ******S*
Jan 11 03:54:27 218.92.12.84:22453 -> xxx.yyy.85.238:1433 SYN ******S*
Jan 11 03:54:27 218.92.12.84:22454 -> xxx.yyy.85.237:1433 SYN ******S*
Jan 11 03:54:27 218.92.12.84:22011 -> xxx.yyy.85.174:1433 SYN ******S*
Jan 11 03:54:27 218.92.12.84:22010 -> xxx.yyy.85.178:1433 SYN ******S*
Jan 11 03:54:27 218.92.12.84:21995 -> xxx.yyy.85.175:1433 SYN ******S*
19820
Jan 11 21:14:46 65.166.97.230:4077 -> xxx.yyy.1.0:6101 SYN ******S*
Jan 11 21:14:46 65.166.97.230:4078 -> xxx.yyy.1.1:6101 SYN ******S*
Jan 11 21:14:46 65.166.97.230:4079 -> xxx.yyy.1.2:6101 SYN ******S*
Jan 11 21:14:46 65.166.97.230:4080 -> xxx.yyy.1.3:6101 SYN ******S*
Jan 11 21:14:46 65.166.97.230:4081 -> xxx.yyy.1.4:6101 SYN ******S*
Jan 11 21:14:47 65.166.97.230:4082 -> xxx.yyy.1.5:6101 SYN ******S*
Jan 11 21:14:47 65.166.97.230:4085 -> xxx.yyy.1.8:6101 SYN ******S*
Jan 11 21:14:47 65.166.97.230:4086 -> xxx.yyy.1.9:6101 SYN ******S*
[...]
Jan 11 21:15:37 65.166.97.230:4074 -> xxx.yyy.255.227:6101 SYN ******S*
Jan 11 21:15:37 65.166.97.230:4075 -> xxx.yyy.255.228:6101 SYN ******S*
Jan 11 21:15:37 65.166.97.230:4076 -> xxx.yyy.255.229:6101 SYN ******S*
Jan 11 21:15:37 65.166.97.230:4077 -> xxx.yyy.255.230:6101 SYN ******S*
Jan 11 21:15:37 65.166.97.230:4078 -> xxx.yyy.255.231:6101 SYN ******S*
Jan 11 21:15:37 65.166.97.230:4079 -> xxx.yyy.255.232:6101 SYN ******S*
Jan 11 21:15:37 65.166.97.230:4080 -> xxx.yyy.255.233:6101 SYN ******S*
Jan 11 21:15:37 65.166.97.230:4081 -> xxx.yyy.255.234:6101 SYN ******S*
Jan 11 21:15:37 65.166.97.230:4082 -> xxx.yyy.255.235:6101 SYN ******S*
17788
Jan 11 15:39:30 66.139.75.11:2652 -> xxx.yyy.1.8:3306 SYN ******S*
Jan 11 15:39:30 66.139.75.11:2622 -> xxx.yyy.1.28:3306 SYN ******S*
Jan 11 15:39:30 66.139.75.11:2620 -> xxx.yyy.1.26:3306 SYN ******S*
Jan 11 15:39:30 66.139.75.11:2653 -> xxx.yyy.1.9:3306 SYN ******S*
Jan 11 15:39:30 66.139.75.11:2619 -> xxx.yyy.1.25:3306 SYN ******S*
Jan 11 15:39:30 66.139.75.11:2621 -> xxx.yyy.1.27:3306 SYN ******S*
Jan 11 15:39:30 66.139.75.11:2654 -> xxx.yyy.1.10:3306 SYN ******S*
Jan 11 15:39:30 66.139.75.11:2655 -> xxx.yyy.1.11:3306 SYN ******S*
[...]
Jan 11 17:18:56 66.139.75.11:1129 -> xxx.yyy.255.246:3306 SYN ******S*
Jan 11 17:18:56 66.139.75.11:1131 -> xxx.yyy.255.248:3306 SYN ******S*
Jan 11 17:18:56 66.139.75.11:1132 -> xxx.yyy.255.249:3306 SYN ******S*
Jan 11 17:18:56 66.139.75.11:1175 -> xxx.yyy.255.242:3306 SYN ******S*
Jan 11 17:18:56 66.139.75.11:1176 -> xxx.yyy.255.243:3306 SYN ******S*
Jan 11 17:18:56 66.139.75.11:1173 -> xxx.yyy.255.240:3306 SYN ******S*
Jan 11 17:18:56 66.139.75.11:1134 -> xxx.yyy.255.251:3306 SYN ******S*
Jan 11 17:18:56 66.139.75.11:1137 -> xxx.yyy.255.254:3306 SYN ******S*
15780
Jan 11 00:07:49 218.16.142.36:3630 -> xxx.yyy.217.87:1433 SYN ******S*
Jan 11 00:07:49 218.16.142.36:3656 -> xxx.yyy.217.91:1433 SYN ******S*
Jan 11 00:07:49 218.16.142.36:3676 -> xxx.yyy.217.95:1433 SYN ******S*
Jan 11 00:07:49 218.16.142.36:3636 -> xxx.yyy.217.88:1433 SYN ******S*
Jan 11 00:07:49 218.16.142.36:3651 -> xxx.yyy.217.90:1433 SYN ******S*
Jan 11 00:07:49 218.16.142.36:3696 -> xxx.yyy.217.99:1433 SYN ******S*
Jan 11 00:07:49 218.16.142.36:3671 -> xxx.yyy.217.94:1433 SYN ******S*
Jan 11 00:07:49 218.16.142.36:3681 -> xxx.yyy.217.96:1433 SYN ******S*
[...]
Jan 11 00:37:24 218.16.142.36:4700 -> xxx.yyy.250.131:1433 SYN ******S*
Jan 11 00:37:24 218.16.142.36:4723 -> xxx.yyy.250.136:1433 SYN ******S*
Jan 11 00:37:24 218.16.142.36:4719 -> xxx.yyy.250.135:1433 SYN ******S*
Jan 11 00:37:31 218.16.142.36:4825 -> xxx.yyy.250.138:1433 SYN ******S*
Jan 11 00:37:31 218.16.142.36:4832 -> xxx.yyy.250.140:1433 SYN ******S*
Jan 11 00:37:31 218.16.142.36:4826 -> xxx.yyy.250.139:1433 SYN ******S*
Jan 11 00:37:31 218.16.142.36:4838 -> xxx.yyy.250.141:1433 SYN ******S*
Jan 11 00:37:31 218.16.142.36:4849 -> xxx.yyy.250.143:1433 SYN ******S*
Jan 11 00:37:31 218.16.142.36:4854 -> xxx.yyy.250.144:1433 SYN ******S*
14863
Jan 11 12:50:20 202.168.224.10:3933 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 11 12:50:20 202.168.224.10:3935 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 11 12:50:20 202.168.224.10:3927 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 11 12:50:20 202.168.224.10:3929 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 11 12:50:20 202.168.224.10:3937 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 11 12:50:20 202.168.224.10:3931 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 11 12:50:20 202.168.224.10:3953 -> xxx.yyy.1.12:1433 SYN ******S*
Jan 11 12:50:20 202.168.224.10:3948 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
Jan 11 13:02:04 202.168.224.10:4862 -> xxx.yyy.255.234:1433 SYN ******S*
Jan 11 13:02:04 202.168.224.10:4840 -> xxx.yyy.255.229:1433 SYN ******S*
Jan 11 13:02:04 202.168.224.10:4844 -> xxx.yyy.255.230:1433 SYN ******S*
Jan 11 13:02:04 202.168.224.10:4848 -> xxx.yyy.255.231:1433 SYN ******S*
Jan 11 13:02:04 202.168.224.10:4837 -> xxx.yyy.255.228:1433 SYN ******S*
Jan 11 13:02:04 202.168.224.10:4900 -> xxx.yyy.255.244:1433 SYN ******S*
Jan 11 13:02:04 202.168.224.10:4894 -> xxx.yyy.255.242:1433 SYN ******S*
Jan 11 13:02:04 202.168.224.10:4913 -> xxx.yyy.255.247:1433 SYN ******S*
14260
Jan 11 06:57:32 60.42.83.115:1786 -> xxx.yyy.72.124:5554 SYN ******S*
Jan 11 06:57:33 60.42.83.115:2283 -> xxx.yyy.72.124:1023 SYN ******S*
Jan 11 06:57:32 60.42.83.115:1791 -> xxx.yyy.72.125:5554 SYN ******S*
Jan 11 06:57:33 60.42.83.115:2286 -> xxx.yyy.72.125:1023 SYN ******S*
Jan 11 06:57:32 60.42.83.115:1792 -> xxx.yyy.72.126:5554 SYN ******S*
Jan 11 06:57:33 60.42.83.115:2287 -> xxx.yyy.72.126:1023 SYN ******S*
Jan 11 06:57:32 60.42.83.115:1794 -> xxx.yyy.72.127:5554 SYN ******S*
Jan 11 06:57:33 60.42.83.115:2288 -> xxx.yyy.72.127:1023 SYN ******S*
[...]
Jan 11 06:58:17 60.42.83.115:1314 -> xxx.yyy.92.244:9898 SYN ******S*
Jan 11 06:58:17 60.42.83.115:1317 -> xxx.yyy.92.246:9898 SYN ******S*
Jan 11 06:58:17 60.42.83.115:1300 -> xxx.yyy.92.237:9898 SYN ******S*
Jan 11 06:58:17 60.42.83.115:1304 -> xxx.yyy.92.240:9898 SYN ******S*
Jan 11 06:58:17 60.42.83.115:1301 -> xxx.yyy.92.239:9898 SYN ******S*
Jan 11 06:58:17 60.42.83.115:1302 -> xxx.yyy.92.238:9898 SYN ******S*
Jan 11 06:58:17 60.42.83.115:1306 -> xxx.yyy.92.241:9898 SYN ******S*
Jan 11 06:58:17 60.42.83.115:1309 -> xxx.yyy.92.242:9898 SYN ******S*
Jan 11 06:58:17 60.42.83.115:1313 -> xxx.yyy.92.243:9898 SYN ******S*
14141
Jan 11 12:16:54 218.22.120.178:44039 -> xxx.yyy.1.0:21 SYN ******S*
Jan 11 12:16:54 218.22.120.178:44053 -> xxx.yyy.1.14:21 SYN ******S*
Jan 11 12:16:54 218.22.120.178:44060 -> xxx.yyy.1.21:21 SYN ******S*
Jan 11 12:16:54 218.22.120.178:44071 -> xxx.yyy.1.32:21 SYN ******S*
Jan 11 12:16:54 218.22.120.178:44062 -> xxx.yyy.1.23:21 SYN ******S*
Jan 11 12:16:54 218.22.120.178:44073 -> xxx.yyy.1.34:21 SYN ******S*
Jan 11 12:16:54 218.22.120.178:44064 -> xxx.yyy.1.25:21 SYN ******S*
Jan 11 12:16:54 218.22.120.178:44063 -> xxx.yyy.1.24:21 SYN ******S*
[...]
Jan 11 12:27:47 218.22.120.178:47761 -> xxx.yyy.255.246:21 SYN ******S*
Jan 11 12:27:47 218.22.120.178:47763 -> xxx.yyy.255.248:21 SYN ******S*
Jan 11 12:27:47 218.22.120.178:47767 -> xxx.yyy.255.252:21 SYN ******S*
Jan 11 12:27:47 218.22.120.178:47764 -> xxx.yyy.255.249:21 SYN ******S*
Jan 11 12:27:47 218.22.120.178:47768 -> xxx.yyy.255.253:21 SYN ******S*
Jan 11 12:27:47 218.22.120.178:47770 -> xxx.yyy.255.255:21 SYN ******S*
Jan 11 12:27:47 218.22.120.178:47769 -> xxx.yyy.255.254:21 SYN ******S*
Jan 11 12:27:47 218.22.120.178:47762 -> xxx.yyy.255.247:21 SYN ******S*
Jan 11 12:27:47 218.22.120.178:47765 -> xxx.yyy.255.250:21 SYN ******S*
12802
Jan 11 21:48:21 81.27.96.210:1869 -> xxx.yyy.1.0:6101 SYN ******S*
Jan 11 21:48:21 81.27.96.210:1870 -> xxx.yyy.1.1:6101 SYN ******S*
Jan 11 21:48:21 81.27.96.210:1872 -> xxx.yyy.1.3:6101 SYN ******S*
Jan 11 21:48:21 81.27.96.210:1873 -> xxx.yyy.1.4:6101 SYN ******S*
Jan 11 21:48:21 81.27.96.210:1878 -> xxx.yyy.1.9:6101 SYN ******S*
Jan 11 21:48:21 81.27.96.210:1879 -> xxx.yyy.1.10:6101 SYN ******S*
Jan 11 21:48:21 81.27.96.210:1868 -> xxx.yyy.1.49:6101 SYN ******S*
Jan 11 21:48:21 81.27.96.210:1869 -> xxx.yyy.1.50:6101 SYN ******S*
[...]
Jan 11 21:48:42 81.27.96.210:1869 -> xxx.yyy.255.230:6101 SYN ******S*
Jan 11 21:48:42 81.27.96.210:1880 -> xxx.yyy.255.241:6101 SYN ******S*
Jan 11 21:48:42 81.27.96.210:1877 -> xxx.yyy.255.238:6101 SYN ******S*
Jan 11 21:48:42 81.27.96.210:1883 -> xxx.yyy.255.244:6101 SYN ******S*
Jan 11 21:48:42 81.27.96.210:1884 -> xxx.yyy.255.245:6101 SYN ******S*
Jan 11 21:48:42 81.27.96.210:1878 -> xxx.yyy.255.239:6101 SYN ******S*
Jan 11 21:48:42 81.27.96.210:1885 -> xxx.yyy.255.246:6101 SYN ******S*
Jan 11 21:48:42 81.27.96.210:1886 -> xxx.yyy.255.247:6101 SYN ******S*
11817
Jan 11 00:56:28 222.114.251.76:4402 -> xxx.yyy.133.234:5554 SYN ******S*
Jan 11 00:56:31 222.114.251.76:1817 -> xxx.yyy.133.234:9898 SYN ******S*
Jan 11 00:56:28 222.114.251.76:4457 -> xxx.yyy.133.236:5554 SYN ******S*
Jan 11 00:56:29 222.114.251.76:4973 -> xxx.yyy.133.236:1023 SYN ******S*
Jan 11 00:56:28 222.114.251.76:4470 -> xxx.yyy.133.238:5554 SYN ******S*
Jan 11 00:56:29 222.114.251.76:4981 -> xxx.yyy.133.238:1023 SYN ******S*
Jan 11 00:56:29 222.114.251.76:4559 -> xxx.yyy.133.241:5554 SYN ******S*
Jan 11 00:56:30 222.114.251.76:1058 -> xxx.yyy.133.241:1023 SYN ******S*
[...]
Jan 11 00:58:17 222.114.251.76:3432 -> xxx.yyy.154.97:9898 SYN ******S*
Jan 11 00:58:17 222.114.251.76:3430 -> xxx.yyy.154.96:9898 SYN ******S*
Jan 11 00:58:17 222.114.251.76:3374 -> xxx.yyy.154.83:9898 SYN ******S*
Jan 11 00:58:17 222.114.251.76:3417 -> xxx.yyy.154.87:9898 SYN ******S*
Jan 11 00:58:17 222.114.251.76:3419 -> xxx.yyy.154.89:9898 SYN ******S*
Jan 11 00:58:17 222.114.251.76:3428 -> xxx.yyy.154.94:9898 SYN ******S*
Jan 11 00:58:17 222.114.251.76:3439 -> xxx.yyy.154.100:9898 SYN ******S*
Jan 11 00:58:17 222.114.251.76:3429 -> xxx.yyy.154.95:9898 SYN ******S*
9812
Jan 11 22:53:25 218.47.214.180:1628 -> xxx.yyy.235.112:5554 SYN ******S*
Jan 11 22:53:25 218.47.214.180:1630 -> xxx.yyy.235.113:5554 SYN ******S*
Jan 11 22:53:25 218.47.214.180:1631 -> xxx.yyy.235.114:5554 SYN ******S*
Jan 11 22:53:27 218.47.214.180:2327 -> xxx.yyy.235.114:1023 SYN ******S*
Jan 11 22:53:25 218.47.214.180:1632 -> xxx.yyy.235.115:5554 SYN ******S*
Jan 11 22:53:26 218.47.214.180:2329 -> xxx.yyy.235.115:1023 SYN ******S*
Jan 11 22:53:25 218.47.214.180:1644 -> xxx.yyy.235.124:5554 SYN ******S*
Jan 11 22:53:25 218.47.214.180:1645 -> xxx.yyy.235.125:5554 SYN ******S*
[...]
Jan 11 22:54:23 218.47.214.180:1803 -> xxx.yyy.248.48:9898 SYN ******S*
Jan 11 22:54:23 218.47.214.180:1844 -> xxx.yyy.248.27:9898 SYN ******S*
Jan 11 22:54:23 218.47.214.180:1834 -> xxx.yyy.248.28:9898 SYN ******S*
Jan 11 22:54:23 218.47.214.180:1837 -> xxx.yyy.248.30:9898 SYN ******S*
Jan 11 22:54:24 218.47.214.180:1859 -> xxx.yyy.248.42:9898 SYN ******S*
Jan 11 22:54:24 218.47.214.180:1858 -> xxx.yyy.248.44:9898 SYN ******S*
Jan 11 22:54:24 218.47.214.180:1857 -> xxx.yyy.248.46:9898 SYN ******S*
Jan 11 22:54:24 218.47.214.180:1861 -> xxx.yyy.248.45:9898 SYN ******S*
8304
[...]
7962
Jan 11 19:23:36 68.191.168.168:2098 -> xxx.yyy.1.211:6101 SYN ******S*
Jan 11 19:23:36 68.191.168.168:2090 -> xxx.yyy.1.203:6101 SYN ******S*
Jan 11 19:23:36 68.191.168.168:2106 -> xxx.yyy.1.219:6101 SYN ******S*
Jan 11 19:23:36 68.191.168.168:2095 -> xxx.yyy.1.208:6101 SYN ******S*
Jan 11 19:23:36 68.191.168.168:2101 -> xxx.yyy.1.214:6101 SYN ******S*
Jan 11 19:23:36 68.191.168.168:2103 -> xxx.yyy.1.216:6101 SYN ******S*
Jan 11 19:23:36 68.191.168.168:2105 -> xxx.yyy.1.218:6101 SYN ******S*
Jan 11 19:23:36 68.191.168.168:2089 -> xxx.yyy.1.202:6101 SYN ******S*
[...]
Jan 11 19:27:46 68.191.168.168:1490 -> xxx.yyy.255.94:6101 SYN ******S*
Jan 11 19:27:46 68.191.168.168:1494 -> xxx.yyy.255.98:6101 SYN ******S*
Jan 11 19:27:46 68.191.168.168:1483 -> xxx.yyy.255.87:6101 SYN ******S*
Jan 11 19:27:46 68.191.168.168:1485 -> xxx.yyy.255.89:6101 SYN ******S*
Jan 11 19:27:46 68.191.168.168:1487 -> xxx.yyy.255.91:6101 SYN ******S*
Jan 11 19:27:46 68.191.168.168:1492 -> xxx.yyy.255.96:6101 SYN ******S*
Jan 11 19:27:46 68.191.168.168:1503 -> xxx.yyy.255.107:6101 SYN ******S*
Jan 11 19:27:46 68.191.168.168:1504 -> xxx.yyy.255.108:6101 SYN ******S*
6789
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list