[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Mon Jan 17 14:17:47 GMT 2005
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Jan 16 02:37:41 218.170.35.18:3461 -> xxx.yyy.1.0:1433 SYN ******S*
Jan 16 02:37:41 218.170.35.18:3462 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 16 02:37:41 218.170.35.18:3464 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 16 02:37:44 218.170.35.18:3465 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 16 02:37:44 218.170.35.18:3466 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 16 02:37:44 218.170.35.18:3467 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 16 02:37:44 218.170.35.18:3468 -> xxx.yyy.1.7:1433 SYN ******S*
Jan 16 02:37:44 218.170.35.18:3469 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Jan 16 06:26:46 218.170.35.18:3243 -> xxx.yyy.255.246:1433 SYN ******S*
Jan 16 06:26:46 218.170.35.18:3247 -> xxx.yyy.255.247:1433 SYN ******S*
Jan 16 06:26:47 218.170.35.18:3248 -> xxx.yyy.255.248:1433 SYN ******S*
Jan 16 06:26:47 218.170.35.18:3252 -> xxx.yyy.255.249:1433 SYN ******S*
Jan 16 06:26:48 218.170.35.18:3260 -> xxx.yyy.255.250:1433 SYN ******S*
Jan 16 06:26:48 218.170.35.18:3263 -> xxx.yyy.255.251:1433 SYN ******S*
Jan 16 06:26:49 218.170.35.18:3267 -> xxx.yyy.255.253:1433 SYN ******S*
Jan 16 06:26:49 218.170.35.18:3265 -> xxx.yyy.255.252:1433 SYN ******S*
Jan 16 06:26:49 218.170.35.18:3274 -> xxx.yyy.255.254:1433 SYN ******S*
117762
Jan 16 17:26:23 217.129.190.46:3685 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 16 17:26:23 217.129.190.46:3686 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 16 17:26:23 217.129.190.46:3687 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 16 17:26:23 217.129.190.46:3688 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 16 17:26:23 217.129.190.46:3689 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 16 17:26:23 217.129.190.46:3690 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 16 17:26:23 217.129.190.46:3691 -> xxx.yyy.1.7:1433 SYN ******S*
Jan 16 17:26:23 217.129.190.46:3692 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Jan 16 19:21:20 217.129.190.46:3096 -> xxx.yyy.255.247:1433 SYN ******S*
Jan 16 19:21:21 217.129.190.46:3098 -> xxx.yyy.255.248:1433 SYN ******S*
Jan 16 19:21:21 217.129.190.46:3103 -> xxx.yyy.255.249:1433 SYN ******S*
Jan 16 19:21:21 217.129.190.46:3104 -> xxx.yyy.255.250:1433 SYN ******S*
Jan 16 19:21:21 217.129.190.46:3106 -> xxx.yyy.255.251:1433 SYN ******S*
Jan 16 19:21:21 217.129.190.46:3112 -> xxx.yyy.255.252:1433 SYN ******S*
Jan 16 19:21:21 217.129.190.46:3114 -> xxx.yyy.255.253:1433 SYN ******S*
Jan 16 19:21:21 217.129.190.46:3122 -> xxx.yyy.255.254:1433 SYN ******S*
104135
Jan 16 15:53:19 200.30.155.108:49282 -> xxx.yyy.1.0:1433 SYN ******S*
Jan 16 15:53:20 200.30.155.108:49294 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 16 15:53:17 200.30.155.108:49305 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 16 15:53:17 200.30.155.108:49312 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 16 15:53:17 200.30.155.108:49318 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 16 15:53:17 200.30.155.108:49328 -> xxx.yyy.1.7:1433 SYN ******S*
Jan 16 15:53:18 200.30.155.108:49334 -> xxx.yyy.1.8:1433 SYN ******S*
Jan 16 15:53:18 200.30.155.108:49339 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
Jan 16 21:59:47 200.30.155.108:64098 -> xxx.yyy.255.245:1433 SYN ******S*
Jan 16 21:59:47 200.30.155.108:64104 -> xxx.yyy.255.247:1433 SYN ******S*
Jan 16 21:59:48 200.30.155.108:64110 -> xxx.yyy.255.248:1433 SYN ******S*
Jan 16 21:59:48 200.30.155.108:64116 -> xxx.yyy.255.249:1433 SYN ******S*
Jan 16 21:59:48 200.30.155.108:64122 -> xxx.yyy.255.250:1433 SYN ******S*
Jan 16 21:59:48 200.30.155.108:64128 -> xxx.yyy.255.251:1433 SYN ******S*
Jan 16 21:59:48 200.30.155.108:64134 -> xxx.yyy.255.252:1433 SYN ******S*
Jan 16 21:59:49 200.30.155.108:64143 -> xxx.yyy.255.253:1433 SYN ******S*
Jan 16 21:59:49 200.30.155.108:64149 -> xxx.yyy.255.254:1433 SYN ******S*
102206
Jan 16 15:03:38 216.243.190.198:3563 -> xxx.yyy.1.1:139 SYN ******S*
Jan 16 15:03:38 216.243.190.198:3567 -> xxx.yyy.1.2:139 SYN ******S*
Jan 16 15:03:39 216.243.190.198:3579 -> xxx.yyy.1.5:139 SYN ******S*
Jan 16 15:03:38 216.243.190.198:3583 -> xxx.yyy.1.6:139 SYN ******S*
Jan 16 15:03:39 216.243.190.198:3589 -> xxx.yyy.1.7:139 SYN ******S*
Jan 16 15:03:38 216.243.190.198:3593 -> xxx.yyy.1.8:139 SYN ******S*
Jan 16 15:03:38 216.243.190.198:3598 -> xxx.yyy.1.9:139 SYN ******S*
Jan 16 15:03:38 216.243.190.198:3601 -> xxx.yyy.1.10:139 SYN ******S*
[...]
Jan 16 15:31:18 216.243.190.198:2955 -> xxx.yyy.255.226:443 SYN ******S*
Jan 16 15:31:18 216.243.190.198:2958 -> xxx.yyy.255.227:443 SYN ******S*
Jan 16 15:31:18 216.243.190.198:2988 -> xxx.yyy.255.237:443 SYN ******S*
Jan 16 15:31:18 216.243.190.198:2994 -> xxx.yyy.255.239:443 SYN ******S*
Jan 16 15:31:18 216.243.190.198:2985 -> xxx.yyy.255.236:443 SYN ******S*
Jan 16 15:31:18 216.243.190.198:2991 -> xxx.yyy.255.238:443 SYN ******S*
Jan 16 15:31:18 216.243.190.198:3003 -> xxx.yyy.255.242:443 SYN ******S*
Jan 16 15:31:18 216.243.190.198:3018 -> xxx.yyy.255.247:443 SYN ******S*
95149
Jan 16 08:08:58 168.8.111.35:1436 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 16 08:08:58 168.8.111.35:1437 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 16 08:08:58 168.8.111.35:1438 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 16 08:08:58 168.8.111.35:1439 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 16 08:08:58 168.8.111.35:1440 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 16 08:08:58 168.8.111.35:1441 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 16 08:08:58 168.8.111.35:1442 -> xxx.yyy.1.7:1433 SYN ******S*
Jan 16 08:08:55 168.8.111.35:1443 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Jan 16 08:12:24 168.8.111.35:1145 -> xxx.yyy.255.244:1433 SYN ******S*
Jan 16 08:12:24 168.8.111.35:1154 -> xxx.yyy.255.253:1433 SYN ******S*
Jan 16 08:12:24 168.8.111.35:1150 -> xxx.yyy.255.249:1433 SYN ******S*
Jan 16 08:12:24 168.8.111.35:1146 -> xxx.yyy.255.245:1433 SYN ******S*
Jan 16 08:12:24 168.8.111.35:1155 -> xxx.yyy.255.254:1433 SYN ******S*
Jan 16 08:12:24 168.8.111.35:1151 -> xxx.yyy.255.250:1433 SYN ******S*
Jan 16 08:12:24 168.8.111.35:1147 -> xxx.yyy.255.246:1433 SYN ******S*
Jan 16 08:12:24 168.8.111.35:1152 -> xxx.yyy.255.251:1433 SYN ******S*
69150
Jan 16 10:13:41 131.183.97.117:3509 -> xxx.yyy.1.1:4000 SYN ******S*
Jan 16 10:13:41 131.183.97.117:3510 -> xxx.yyy.1.2:4000 SYN ******S*
Jan 16 10:13:41 131.183.97.117:3511 -> xxx.yyy.1.3:4000 SYN ******S*
Jan 16 10:13:43 131.183.97.117:3512 -> xxx.yyy.1.4:4000 SYN ******S*
Jan 16 10:13:43 131.183.97.117:3513 -> xxx.yyy.1.5:4000 SYN ******S*
Jan 16 10:13:43 131.183.97.117:3514 -> xxx.yyy.1.6:4000 SYN ******S*
Jan 16 10:13:40 131.183.97.117:3515 -> xxx.yyy.1.7:4000 SYN ******S*
Jan 16 10:13:41 131.183.97.117:3516 -> xxx.yyy.1.8:4000 SYN ******S*
[...]
Jan 16 10:25:22 131.183.97.117:2019 -> xxx.yyy.255.246:4000 SYN ******S*
Jan 16 10:25:22 131.183.97.117:2025 -> xxx.yyy.255.252:4000 SYN ******S*
Jan 16 10:25:22 131.183.97.117:2023 -> xxx.yyy.255.250:4000 SYN ******S*
Jan 16 10:25:22 131.183.97.117:2022 -> xxx.yyy.255.249:4000 SYN ******S*
Jan 16 10:25:22 131.183.97.117:2024 -> xxx.yyy.255.251:4000 SYN ******S*
Jan 16 10:25:22 131.183.97.117:2026 -> xxx.yyy.255.253:4000 SYN ******S*
Jan 16 10:25:22 131.183.97.117:2021 -> xxx.yyy.255.248:4000 SYN ******S*
Jan 16 10:25:22 131.183.97.117:2020 -> xxx.yyy.255.247:4000 SYN ******S*
66812
Jan 16 09:07:45 24.123.85.46:7937 -> xxx.yyy.1.1:4000 SYN ******S*
Jan 16 09:07:45 24.123.85.46:7938 -> xxx.yyy.1.2:4000 SYN ******S*
Jan 16 09:07:45 24.123.85.46:7939 -> xxx.yyy.1.3:4000 SYN ******S*
Jan 16 09:07:47 24.123.85.46:7940 -> xxx.yyy.1.4:4000 SYN ******S*
Jan 16 09:07:47 24.123.85.46:8378 -> xxx.yyy.1.5:4000 SYN ******S*
Jan 16 09:07:47 24.123.85.46:7942 -> xxx.yyy.1.6:4000 SYN ******S*
Jan 16 09:07:47 24.123.85.46:8372 -> xxx.yyy.1.7:4000 SYN ******S*
Jan 16 09:07:45 24.123.85.46:7944 -> xxx.yyy.1.8:4000 SYN ******S*
[...]
Jan 16 09:18:39 24.123.85.46:45762 -> xxx.yyy.255.236:4000 SYN ******S*
Jan 16 09:18:39 24.123.85.46:45760 -> xxx.yyy.255.234:4000 SYN ******S*
Jan 16 09:18:39 24.123.85.46:45764 -> xxx.yyy.255.238:4000 SYN ******S*
Jan 16 09:18:39 24.123.85.46:45774 -> xxx.yyy.255.248:4000 SYN ******S*
Jan 16 09:18:39 24.123.85.46:45772 -> xxx.yyy.255.246:4000 SYN ******S*
Jan 16 09:18:39 24.123.85.46:45768 -> xxx.yyy.255.242:4000 SYN ******S*
Jan 16 09:18:39 24.123.85.46:45770 -> xxx.yyy.255.244:4000 SYN ******S*
Jan 16 09:18:39 24.123.85.46:45778 -> xxx.yyy.255.252:4000 SYN ******S*
Jan 16 09:18:39 24.123.85.46:45780 -> xxx.yyy.255.254:4000 SYN ******S*
65475
Jan 16 09:00:44 81.21.166.26:13598 -> xxx.yyy.1.1:6101 SYN ******S*
Jan 16 09:00:44 81.21.166.26:13599 -> xxx.yyy.1.2:6101 SYN ******S*
Jan 16 09:00:44 81.21.166.26:13600 -> xxx.yyy.1.3:6101 SYN ******S*
Jan 16 09:00:44 81.21.166.26:13601 -> xxx.yyy.1.4:6101 SYN ******S*
Jan 16 09:00:44 81.21.166.26:13602 -> xxx.yyy.1.5:6101 SYN ******S*
Jan 16 09:00:44 81.21.166.26:13603 -> xxx.yyy.1.6:6101 SYN ******S*
Jan 16 09:00:41 81.21.166.26:13604 -> xxx.yyy.1.7:6101 SYN ******S*
Jan 16 09:00:41 81.21.166.26:13606 -> xxx.yyy.1.9:6101 SYN ******S*
[...]
Jan 16 09:12:23 81.21.166.26:16522 -> xxx.yyy.255.238:6101 SYN ******S*
Jan 16 09:12:23 81.21.166.26:16523 -> xxx.yyy.255.239:6101 SYN ******S*
Jan 16 09:12:23 81.21.166.26:16525 -> xxx.yyy.255.241:6101 SYN ******S*
Jan 16 09:12:23 81.21.166.26:16530 -> xxx.yyy.255.246:6101 SYN ******S*
Jan 16 09:12:23 81.21.166.26:16531 -> xxx.yyy.255.247:6101 SYN ******S*
Jan 16 09:12:23 81.21.166.26:16532 -> xxx.yyy.255.248:6101 SYN ******S*
Jan 16 09:12:23 81.21.166.26:16533 -> xxx.yyy.255.249:6101 SYN ******S*
Jan 16 09:12:23 81.21.166.26:16534 -> xxx.yyy.255.250:6101 SYN ******S*
Jan 16 09:12:23 81.21.166.26:16535 -> xxx.yyy.255.251:6101 SYN ******S*
62292
Jan 16 07:48:25 218.21.82.138:4161 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 16 07:48:25 218.21.82.138:4159 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 16 07:48:25 218.21.82.138:4165 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 16 07:48:25 218.21.82.138:4171 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 16 07:48:25 218.21.82.138:4166 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 16 07:48:25 218.21.82.138:4178 -> xxx.yyy.1.8:1433 SYN ******S*
Jan 16 07:48:22 218.21.82.138:4168 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 16 07:48:22 218.21.82.138:4174 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Jan 16 10:19:58 218.21.82.138:4174 -> xxx.yyy.197.116:1433 SYN ******S*
Jan 16 10:19:58 218.21.82.138:4181 -> xxx.yyy.197.119:1433 SYN ******S*
Jan 16 10:19:58 218.21.82.138:4184 -> xxx.yyy.197.121:1433 SYN ******S*
Jan 16 10:19:59 218.21.82.138:4187 -> xxx.yyy.197.122:1433 SYN ******S*
Jan 16 10:19:59 218.21.82.138:4199 -> xxx.yyy.197.123:1433 SYN ******S*
Jan 16 10:19:59 218.21.82.138:4129 -> xxx.yyy.197.109:1433 SYN ******S*
Jan 16 10:19:59 218.21.82.138:4201 -> xxx.yyy.197.125:1433 SYN ******S*
Jan 16 10:19:59 218.21.82.138:4128 -> xxx.yyy.197.108:1433 SYN ******S*
Jan 16 10:19:59 218.21.82.138:4202 -> xxx.yyy.197.126:1433 SYN ******S*
60207
Jan 16 06:27:14 198.109.51.10:2901 -> xxx.yyy.1.5:3306 SYN ******S*
Jan 16 06:27:12 198.109.51.10:2898 -> xxx.yyy.1.2:3306 SYN ******S*
Jan 16 06:27:12 198.109.51.10:2899 -> xxx.yyy.1.3:3306 SYN ******S*
Jan 16 06:27:14 198.109.51.10:2897 -> xxx.yyy.1.1:3306 SYN ******S*
Jan 16 06:27:14 198.109.51.10:2900 -> xxx.yyy.1.4:3306 SYN ******S*
Jan 16 06:27:14 198.109.51.10:2903 -> xxx.yyy.1.7:3306 SYN ******S*
Jan 16 06:27:14 198.109.51.10:2902 -> xxx.yyy.1.6:3306 SYN ******S*
Jan 16 06:27:12 198.109.51.10:2904 -> xxx.yyy.1.8:3306 SYN ******S*
[...]
Jan 16 06:31:37 198.109.51.10:1097 -> xxx.yyy.255.246:3306 SYN ******S*
Jan 16 06:31:37 198.109.51.10:1098 -> xxx.yyy.255.247:3306 SYN ******S*
Jan 16 06:31:37 198.109.51.10:1099 -> xxx.yyy.255.248:3306 SYN ******S*
Jan 16 06:31:37 198.109.51.10:1101 -> xxx.yyy.255.250:3306 SYN ******S*
Jan 16 06:31:37 198.109.51.10:1100 -> xxx.yyy.255.249:3306 SYN ******S*
Jan 16 06:31:37 198.109.51.10:1102 -> xxx.yyy.255.251:3306 SYN ******S*
Jan 16 06:31:37 198.109.51.10:1103 -> xxx.yyy.255.252:3306 SYN ******S*
Jan 16 06:31:37 198.109.51.10:1104 -> xxx.yyy.255.253:3306 SYN ******S*
Jan 16 06:31:37 198.109.51.10:1105 -> xxx.yyy.255.254:3306 SYN ******S*
59231
Jan 16 16:48:23 63.151.41.210:4407 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 16 16:48:23 63.151.41.210:4408 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 16 16:48:23 63.151.41.210:4409 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 16 16:48:20 63.151.41.210:4410 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 16 16:48:20 63.151.41.210:4411 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 16 16:48:23 63.151.41.210:4412 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 16 16:48:23 63.151.41.210:4413 -> xxx.yyy.1.7:1433 SYN ******S*
Jan 16 16:48:23 63.151.41.210:4414 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Jan 16 17:00:01 63.151.41.210:3299 -> xxx.yyy.255.235:1433 SYN ******S*
Jan 16 17:00:01 63.151.41.210:3309 -> xxx.yyy.255.245:1433 SYN ******S*
Jan 16 17:00:01 63.151.41.210:3310 -> xxx.yyy.255.246:1433 SYN ******S*
Jan 16 17:00:01 63.151.41.210:3311 -> xxx.yyy.255.247:1433 SYN ******S*
Jan 16 17:00:01 63.151.41.210:3313 -> xxx.yyy.255.249:1433 SYN ******S*
Jan 16 17:00:01 63.151.41.210:3315 -> xxx.yyy.255.251:1433 SYN ******S*
Jan 16 17:00:01 63.151.41.210:3312 -> xxx.yyy.255.248:1433 SYN ******S*
Jan 16 17:00:01 63.151.41.210:3314 -> xxx.yyy.255.250:1433 SYN ******S*
Jan 16 17:00:02 63.151.41.210:3318 -> xxx.yyy.255.254:1433 SYN ******S*
58916
Jan 16 08:23:45 163.20.67.5:1254 -> xxx.yyy.1.1:42 SYN ******S*
Jan 16 08:23:45 163.20.67.5:1255 -> xxx.yyy.1.2:42 SYN ******S*
Jan 16 08:23:48 163.20.67.5:1256 -> xxx.yyy.1.3:42 SYN ******S*
Jan 16 08:23:45 163.20.67.5:1257 -> xxx.yyy.1.4:42 SYN ******S*
Jan 16 08:23:45 163.20.67.5:1258 -> xxx.yyy.1.5:42 SYN ******S*
Jan 16 08:23:48 163.20.67.5:1259 -> xxx.yyy.1.6:42 SYN ******S*
Jan 16 08:23:45 163.20.67.5:1260 -> xxx.yyy.1.7:42 SYN ******S*
Jan 16 08:23:45 163.20.67.5:1261 -> xxx.yyy.1.8:42 SYN ******S*
[...]
Jan 16 08:27:54 163.20.67.5:2154 -> xxx.yyy.255.128:42 SYN ******S*
Jan 16 08:27:54 163.20.67.5:2138 -> xxx.yyy.255.124:42 SYN ******S*
Jan 16 08:27:54 163.20.67.5:2134 -> xxx.yyy.255.121:42 SYN ******S*
Jan 16 08:27:54 163.20.67.5:2206 -> xxx.yyy.255.147:42 SYN ******S*
Jan 16 08:27:54 163.20.67.5:2196 -> xxx.yyy.255.142:42 SYN ******S*
Jan 16 08:27:54 163.20.67.5:2309 -> xxx.yyy.255.190:42 SYN ******S*
Jan 16 08:27:54 163.20.67.5:2149 -> xxx.yyy.255.126:42 SYN ******S*
Jan 16 08:27:54 163.20.67.5:2250 -> xxx.yyy.255.161:42 SYN ******S*
Jan 16 08:27:55 163.20.67.5:2365 -> xxx.yyy.255.219:42 SYN ******S*
57905
Jan 16 23:24:47 212.128.161.15:2034 -> xxx.yyy.1.0:6101 SYN ******S*
Jan 16 23:24:47 212.128.161.15:2035 -> xxx.yyy.1.1:6101 SYN ******S*
Jan 16 23:24:44 212.128.161.15:2036 -> xxx.yyy.1.2:6101 SYN ******S*
Jan 16 23:24:47 212.128.161.15:2037 -> xxx.yyy.1.3:6101 SYN ******S*
Jan 16 23:24:47 212.128.161.15:2038 -> xxx.yyy.1.4:6101 SYN ******S*
Jan 16 23:24:44 212.128.161.15:2039 -> xxx.yyy.1.5:6101 SYN ******S*
Jan 16 23:24:47 212.128.161.15:2040 -> xxx.yyy.1.6:6101 SYN ******S*
Jan 16 23:24:47 212.128.161.15:2041 -> xxx.yyy.1.7:6101 SYN ******S*
[...]
Jan 16 23:35:43 212.128.161.15:1163 -> xxx.yyy.255.242:6101 SYN ******S*
Jan 16 23:35:43 212.128.161.15:1173 -> xxx.yyy.255.252:6101 SYN ******S*
Jan 16 23:35:43 212.128.161.15:1170 -> xxx.yyy.255.249:6101 SYN ******S*
Jan 16 23:35:43 212.128.161.15:1174 -> xxx.yyy.255.253:6101 SYN ******S*
Jan 16 23:35:43 212.128.161.15:1171 -> xxx.yyy.255.250:6101 SYN ******S*
Jan 16 23:35:43 212.128.161.15:1175 -> xxx.yyy.255.254:6101 SYN ******S*
Jan 16 23:35:43 212.128.161.15:1169 -> xxx.yyy.255.248:6101 SYN ******S*
Jan 16 23:35:43 212.128.161.15:1172 -> xxx.yyy.255.251:6101 SYN ******S*
56884
Jan 16 19:40:30 212.58.234.149:1750 -> xxx.yyy.1.0:3306 SYN ******S*
Jan 16 19:40:29 212.58.234.149:1755 -> xxx.yyy.1.5:3306 SYN ******S*
Jan 16 19:40:29 212.58.234.149:1756 -> xxx.yyy.1.6:3306 SYN ******S*
Jan 16 19:40:29 212.58.234.149:1757 -> xxx.yyy.1.7:3306 SYN ******S*
Jan 16 19:40:30 212.58.234.149:1758 -> xxx.yyy.1.8:3306 SYN ******S*
Jan 16 19:40:30 212.58.234.149:1759 -> xxx.yyy.1.9:3306 SYN ******S*
Jan 16 19:40:29 212.58.234.149:1760 -> xxx.yyy.1.10:3306 SYN ******S*
Jan 16 19:40:29 212.58.234.149:1761 -> xxx.yyy.1.11:3306 SYN ******S*
[...]
Jan 16 19:56:46 212.58.234.149:3111 -> xxx.yyy.255.221:3306 SYN ******S*
Jan 16 19:56:46 212.58.234.149:3107 -> xxx.yyy.255.217:3306 SYN ******S*
Jan 16 19:56:46 212.58.234.149:3104 -> xxx.yyy.255.214:3306 SYN ******S*
Jan 16 19:56:46 212.58.234.149:3120 -> xxx.yyy.255.230:3306 SYN ******S*
Jan 16 19:56:46 212.58.234.149:3124 -> xxx.yyy.255.234:3306 SYN ******S*
Jan 16 19:56:46 212.58.234.149:3127 -> xxx.yyy.255.237:3306 SYN ******S*
Jan 16 19:56:46 212.58.234.149:3117 -> xxx.yyy.255.227:3306 SYN ******S*
Jan 16 19:56:46 212.58.234.149:3121 -> xxx.yyy.255.231:3306 SYN ******S*
49720
Jan 16 02:12:36 61.84.110.111:1421 -> xxx.yyy.1.2:27374 SYN ******S*
Jan 16 02:12:36 61.84.110.111:1422 -> xxx.yyy.1.3:27374 SYN ******S*
Jan 16 02:12:36 61.84.110.111:1423 -> xxx.yyy.1.4:27374 SYN ******S*
Jan 16 02:12:34 61.84.110.111:1424 -> xxx.yyy.1.5:27374 SYN ******S*
Jan 16 02:12:37 61.84.110.111:1425 -> xxx.yyy.1.6:27374 SYN ******S*
Jan 16 02:12:34 61.84.110.111:1427 -> xxx.yyy.1.8:27374 SYN ******S*
Jan 16 02:12:35 61.84.110.111:1429 -> xxx.yyy.1.9:27374 SYN ******S*
Jan 16 02:12:35 61.84.110.111:1430 -> xxx.yyy.1.10:27374 SYN ******S*
[...]
Jan 16 06:31:20 61.84.110.111:4160 -> xxx.yyy.148.61:27374 SYN ******S*
Jan 16 06:31:21 61.84.110.111:4179 -> xxx.yyy.148.80:27374 SYN ******S*
Jan 16 06:31:21 61.84.110.111:4173 -> xxx.yyy.148.74:27374 SYN ******S*
Jan 16 06:31:21 61.84.110.111:4180 -> xxx.yyy.148.81:27374 SYN ******S*
Jan 16 06:31:21 61.84.110.111:4181 -> xxx.yyy.148.82:27374 SYN ******S*
Jan 16 06:31:21 61.84.110.111:4182 -> xxx.yyy.148.83:27374 SYN ******S*
Jan 16 06:31:21 61.84.110.111:4174 -> xxx.yyy.148.75:27374 SYN ******S*
Jan 16 06:31:22 61.84.110.111:4175 -> xxx.yyy.148.76:27374 SYN ******S*
Jan 16 06:31:22 61.84.110.111:4184 -> xxx.yyy.148.85:27374 SYN ******S*
47894
Jan 16 18:12:35 211.61.115.13:2974 -> xxx.yyy.1.0:1433 SYN ******S*
Jan 16 18:12:35 211.61.115.13:2983 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 16 18:12:35 211.61.115.13:2988 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 16 18:12:35 211.61.115.13:3001 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 16 18:12:35 211.61.115.13:3004 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 16 18:12:35 211.61.115.13:3009 -> xxx.yyy.1.7:1433 SYN ******S*
Jan 16 18:12:35 211.61.115.13:3011 -> xxx.yyy.1.9:1433 SYN ******S*
Jan 16 18:12:32 211.61.115.13:3012 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
Jan 16 20:37:52 211.61.115.13:2514 -> xxx.yyy.161.115:1433 SYN ******S*
Jan 16 20:37:52 211.61.115.13:2518 -> xxx.yyy.161.116:1433 SYN ******S*
Jan 16 20:37:52 211.61.115.13:2303 -> xxx.yyy.161.92:1433 SYN ******S*
Jan 16 20:37:52 211.61.115.13:2529 -> xxx.yyy.161.117:1433 SYN ******S*
Jan 16 20:37:52 211.61.115.13:2622 -> xxx.yyy.161.129:1433 SYN ******S*
Jan 16 20:37:52 211.61.115.13:2633 -> xxx.yyy.161.130:1433 SYN ******S*
Jan 16 20:37:53 211.61.115.13:2638 -> xxx.yyy.161.131:1433 SYN ******S*
Jan 16 20:37:53 211.61.115.13:2539 -> xxx.yyy.161.118:1433 SYN ******S*
Jan 16 20:37:53 211.61.115.13:2311 -> xxx.yyy.161.93:1433 SYN ******S*
47223
Jan 16 10:09:21 200.114.168.93:49457 -> xxx.yyy.1.146:22 SYN ******S*
Jan 16 10:09:21 200.114.168.93:49458 -> xxx.yyy.1.147:22 SYN ******S*
Jan 16 10:09:24 200.114.168.93:49459 -> xxx.yyy.1.148:22 SYN ******S*
Jan 16 10:09:24 200.114.168.93:49460 -> xxx.yyy.1.149:22 SYN ******S*
Jan 16 10:09:24 200.114.168.93:49461 -> xxx.yyy.1.150:22 SYN ******S*
Jan 16 10:09:21 200.114.168.93:49462 -> xxx.yyy.1.151:22 SYN ******S*
Jan 16 10:09:24 200.114.168.93:49463 -> xxx.yyy.1.152:22 SYN ******S*
Jan 16 10:09:21 200.114.168.93:49464 -> xxx.yyy.1.153:22 SYN ******S*
[...]
Jan 16 10:38:25 200.114.168.93:53381 -> xxx.yyy.241.24:22 SYN ******S*
Jan 16 10:38:28 200.114.168.93:53785 -> xxx.yyy.241.29:22 SYN ******S*
Jan 16 10:38:27 200.114.168.93:53783 -> xxx.yyy.241.27:22 SYN ******S*
Jan 16 10:38:27 200.114.168.93:53784 -> xxx.yyy.232.168:22 SYN ******S*
Jan 16 10:38:31 200.114.168.93:53786 -> xxx.yyy.241.27:22 SYN ******S*
Jan 16 10:38:32 200.114.168.93:54187 -> xxx.yyy.232.168:22 SYN ******S*
Jan 16 10:38:32 200.114.168.93:54188 -> xxx.yyy.241.29:22 SYN ******S*
Jan 16 10:38:34 200.114.168.93:54189 -> xxx.yyy.241.29:22 SYN ******S*
Jan 16 10:38:36 200.114.168.93:54190 -> xxx.yyy.241.27:22 SYN ******S*
44513
Jan 16 10:46:20 221.146.64.200:2574 -> xxx.yyy.1.2:4899 SYN ******S*
Jan 16 10:46:18 221.146.64.200:2576 -> xxx.yyy.1.4:4899 SYN ******S*
Jan 16 10:46:18 221.146.64.200:2578 -> xxx.yyy.1.6:4899 SYN ******S*
Jan 16 10:46:18 221.146.64.200:2579 -> xxx.yyy.1.7:4899 SYN ******S*
Jan 16 10:46:20 221.146.64.200:2581 -> xxx.yyy.1.9:4899 SYN ******S*
Jan 16 10:46:20 221.146.64.200:2573 -> xxx.yyy.1.1:4899 SYN ******S*
Jan 16 10:46:20 221.146.64.200:2583 -> xxx.yyy.1.11:4899 SYN ******S*
Jan 16 10:46:18 221.146.64.200:2585 -> xxx.yyy.1.13:4899 SYN ******S*
[...]
Jan 16 10:49:41 221.146.64.200:3105 -> xxx.yyy.254.239:4899 SYN ******S*
Jan 16 10:49:41 221.146.64.200:3111 -> xxx.yyy.254.245:4899 SYN ******S*
Jan 16 10:49:41 221.146.64.200:3114 -> xxx.yyy.254.248:4899 SYN ******S*
Jan 16 10:49:41 221.146.64.200:3118 -> xxx.yyy.254.250:4899 SYN ******S*
Jan 16 10:49:41 221.146.64.200:3119 -> xxx.yyy.254.251:4899 SYN ******S*
Jan 16 10:49:41 221.146.64.200:3117 -> xxx.yyy.254.249:4899 SYN ******S*
Jan 16 10:49:41 221.146.64.200:3121 -> xxx.yyy.254.253:4899 SYN ******S*
Jan 16 10:49:41 221.146.64.200:3120 -> xxx.yyy.254.252:4899 SYN ******S*
39970
[...]
26661
Jan 16 12:25:19 146.87.24.15:2668 -> xxx.yyy.1.0:3306 SYN ******S*
Jan 16 12:25:19 146.87.24.15:2669 -> xxx.yyy.1.1:3306 SYN ******S*
Jan 16 12:25:19 146.87.24.15:2670 -> xxx.yyy.1.2:3306 SYN ******S*
Jan 16 12:25:19 146.87.24.15:2671 -> xxx.yyy.1.3:3306 SYN ******S*
Jan 16 12:25:19 146.87.24.15:2674 -> xxx.yyy.1.6:3306 SYN ******S*
Jan 16 12:25:19 146.87.24.15:2675 -> xxx.yyy.1.7:3306 SYN ******S*
Jan 16 12:25:19 146.87.24.15:2676 -> xxx.yyy.1.8:3306 SYN ******S*
Jan 16 12:25:19 146.87.24.15:2677 -> xxx.yyy.1.9:3306 SYN ******S*
[...]
Jan 16 12:49:37 146.87.24.15:1216 -> xxx.yyy.241.179:3306 SYN ******S*
Jan 16 12:49:37 146.87.24.15:1111 -> xxx.yyy.1.35:3306 SYN ******S*
Jan 16 12:49:36 146.87.24.15:1193 -> xxx.yyy.224.141:3306 SYN ******S*
Jan 16 12:49:36 146.87.24.15:1198 -> xxx.yyy.212.75:3306 SYN ******S*
Jan 16 12:49:36 146.87.24.15:1199 -> xxx.yyy.236.22:3306 SYN ******S*
Jan 16 12:49:38 146.87.24.15:1163 -> xxx.yyy.226.9:3306 SYN ******S*
Jan 16 12:49:38 146.87.24.15:1167 -> xxx.yyy.236.23:3306 SYN ******S*
Jan 16 12:49:43 146.87.24.15:1336 -> xxx.yyy.240.211:3306 SYN ******S*
24421
Jan 16 12:31:29 62.214.58.4:2173 -> xxx.yyy.1.3:3306 SYN ******S*
Jan 16 12:31:29 62.214.58.4:2174 -> xxx.yyy.1.4:3306 SYN ******S*
Jan 16 12:31:29 62.214.58.4:2175 -> xxx.yyy.1.5:3306 SYN ******S*
Jan 16 12:31:29 62.214.58.4:2176 -> xxx.yyy.1.6:3306 SYN ******S*
Jan 16 12:31:29 62.214.58.4:2177 -> xxx.yyy.1.7:3306 SYN ******S*
Jan 16 12:31:29 62.214.58.4:2178 -> xxx.yyy.1.8:3306 SYN ******S*
Jan 16 12:31:29 62.214.58.4:2183 -> xxx.yyy.1.13:3306 SYN ******S*
Jan 16 12:31:29 62.214.58.4:2184 -> xxx.yyy.1.14:3306 SYN ******S*
[...]
Jan 16 12:33:48 62.214.58.4:2162 -> xxx.yyy.255.240:3306 SYN ******S*
Jan 16 12:33:48 62.214.58.4:2163 -> xxx.yyy.255.241:3306 SYN ******S*
Jan 16 12:33:48 62.214.58.4:2165 -> xxx.yyy.255.243:3306 SYN ******S*
Jan 16 12:33:48 62.214.58.4:2166 -> xxx.yyy.255.244:3306 SYN ******S*
Jan 16 12:33:48 62.214.58.4:2171 -> xxx.yyy.255.249:3306 SYN ******S*
Jan 16 12:33:48 62.214.58.4:2172 -> xxx.yyy.255.250:3306 SYN ******S*
Jan 16 12:33:48 62.214.58.4:2173 -> xxx.yyy.255.251:3306 SYN ******S*
Jan 16 12:33:48 62.214.58.4:2174 -> xxx.yyy.255.252:3306 SYN ******S*
Jan 16 12:33:48 62.214.58.4:2175 -> xxx.yyy.255.253:3306 SYN ******S*
22043
Jan 16 02:12:09 134.117.130.108:4170 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 16 02:12:09 134.117.130.108:4169 -> xxx.yyy.1.0:1433 SYN ******S*
Jan 16 02:12:09 134.117.130.108:4171 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 16 02:12:09 134.117.130.108:4173 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 16 02:12:09 134.117.130.108:4172 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 16 02:12:09 134.117.130.108:4174 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 16 02:12:09 134.117.130.108:4175 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 16 02:12:09 134.117.130.108:4176 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Jan 16 02:20:57 134.117.130.108:4747 -> xxx.yyy.255.218:1433 SYN ******S*
Jan 16 02:20:57 134.117.130.108:4748 -> xxx.yyy.255.219:1433 SYN ******S*
Jan 16 02:20:57 134.117.130.108:4749 -> xxx.yyy.255.220:1433 SYN ******S*
Jan 16 02:20:57 134.117.130.108:4750 -> xxx.yyy.255.221:1433 SYN ******S*
Jan 16 02:20:57 134.117.130.108:4751 -> xxx.yyy.255.222:1433 SYN ******S*
Jan 16 02:20:57 134.117.130.108:4752 -> xxx.yyy.255.223:1433 SYN ******S*
Jan 16 02:20:57 134.117.130.108:4753 -> xxx.yyy.255.224:1433 SYN ******S*
Jan 16 02:20:57 134.117.130.108:4754 -> xxx.yyy.255.225:1433 SYN ******S*
Jan 16 02:20:57 134.117.130.108:4755 -> xxx.yyy.255.226:1433 SYN ******S*
21705
Jan 16 13:45:11 213.56.215.228:3540 -> xxx.yyy.1.0:6101 SYN ******S*
Jan 16 13:45:11 213.56.215.228:3543 -> xxx.yyy.1.3:6101 SYN ******S*
Jan 16 13:45:11 213.56.215.228:3541 -> xxx.yyy.1.1:6101 SYN ******S*
Jan 16 13:45:11 213.56.215.228:3542 -> xxx.yyy.1.2:6101 SYN ******S*
Jan 16 13:45:11 213.56.215.228:3544 -> xxx.yyy.1.4:6101 SYN ******S*
Jan 16 13:45:11 213.56.215.228:3545 -> xxx.yyy.1.5:6101 SYN ******S*
Jan 16 13:45:11 213.56.215.228:3547 -> xxx.yyy.1.7:6101 SYN ******S*
Jan 16 13:45:11 213.56.215.228:3546 -> xxx.yyy.1.6:6101 SYN ******S*
[...]
Jan 16 13:45:41 213.56.215.228:3545 -> xxx.yyy.255.235:6101 SYN ******S*
Jan 16 13:45:41 213.56.215.228:3547 -> xxx.yyy.255.237:6101 SYN ******S*
Jan 16 13:45:41 213.56.215.228:3548 -> xxx.yyy.255.238:6101 SYN ******S*
Jan 16 13:45:41 213.56.215.228:3549 -> xxx.yyy.255.239:6101 SYN ******S*
Jan 16 13:45:41 213.56.215.228:3553 -> xxx.yyy.255.243:6101 SYN ******S*
Jan 16 13:45:41 213.56.215.228:3513 -> xxx.yyy.255.253:6101 SYN ******S*
Jan 16 13:45:41 213.56.215.228:3512 -> xxx.yyy.255.252:6101 SYN ******S*
Jan 16 13:45:41 213.56.215.228:3514 -> xxx.yyy.255.254:6101 SYN ******S*
18098
Jan 16 03:37:52 80.8.55.71:2257 -> xxx.yyy.1.3:21 SYN ******S*
Jan 16 03:37:52 80.8.55.71:2756 -> xxx.yyy.1.9:21 SYN ******S*
Jan 16 03:37:52 80.8.55.71:2791 -> xxx.yyy.1.10:21 SYN ******S*
Jan 16 03:37:52 80.8.55.71:3082 -> xxx.yyy.1.16:21 SYN ******S*
Jan 16 03:37:53 80.8.55.71:3271 -> xxx.yyy.1.22:21 SYN ******S*
Jan 16 03:37:53 80.8.55.71:3273 -> xxx.yyy.1.23:21 SYN ******S*
Jan 16 03:37:53 80.8.55.71:3443 -> xxx.yyy.1.29:21 SYN ******S*
Jan 16 03:37:53 80.8.55.71:3595 -> xxx.yyy.1.35:21 SYN ******S*
[...]
Jan 16 05:15:14 80.8.55.71:2880 -> xxx.yyy.255.81:21 SYN ******S*
Jan 16 05:15:14 80.8.55.71:2953 -> xxx.yyy.255.67:21 SYN ******S*
Jan 16 05:15:15 80.8.55.71:2991 -> xxx.yyy.255.55:21 SYN ******S*
Jan 16 05:15:15 80.8.55.71:3035 -> xxx.yyy.255.137:21 SYN ******S*
Jan 16 05:15:20 80.8.55.71:2880 -> xxx.yyy.255.81:21 SYN ******S*
Jan 16 05:15:20 80.8.55.71:2953 -> xxx.yyy.255.67:21 SYN ******S*
Jan 16 05:15:21 80.8.55.71:2991 -> xxx.yyy.255.55:21 SYN ******S*
Jan 16 05:15:21 80.8.55.71:3035 -> xxx.yyy.255.137:21 SYN ******S*
17891
[...]
17853
Jan 16 00:00:07 70.17.168.204:4347 -> xxx.yyy.221.180:1433 SYN ******S*
Jan 16 00:00:07 70.17.168.204:4193 -> xxx.yyy.221.181:1433 SYN ******S*
Jan 16 00:00:07 70.17.168.204:3640 -> xxx.yyy.221.182:1433 SYN ******S*
Jan 16 00:00:04 70.17.168.204:3233 -> xxx.yyy.221.160:1433 SYN ******S*
Jan 16 00:00:05 70.17.168.204:2561 -> xxx.yyy.221.128:1433 SYN ******S*
Jan 16 00:00:05 70.17.168.204:4811 -> xxx.yyy.221.162:1433 SYN ******S*
Jan 16 00:00:05 70.17.168.204:3490 -> xxx.yyy.221.163:1433 SYN ******S*
Jan 16 00:00:05 70.17.168.204:3539 -> xxx.yyy.221.164:1433 SYN ******S*
[...]
Jan 16 00:24:20 70.17.168.204:2648 -> xxx.yyy.255.233:1433 SYN ******S*
Jan 16 00:24:21 70.17.168.204:2323 -> xxx.yyy.255.235:1433 SYN ******S*
Jan 16 00:24:22 70.17.168.204:1496 -> xxx.yyy.255.241:1433 SYN ******S*
Jan 16 00:24:22 70.17.168.204:2802 -> xxx.yyy.255.242:1433 SYN ******S*
Jan 16 00:24:22 70.17.168.204:3572 -> xxx.yyy.255.243:1433 SYN ******S*
Jan 16 00:24:22 70.17.168.204:2161 -> xxx.yyy.255.245:1433 SYN ******S*
Jan 16 00:24:23 70.17.168.204:3524 -> xxx.yyy.255.248:1433 SYN ******S*
Jan 16 00:24:23 70.17.168.204:1114 -> xxx.yyy.255.251:1433 SYN ******S*
Jan 16 00:24:24 70.17.168.204:4965 -> xxx.yyy.255.254:1433 SYN ******S*
16637
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list