[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Sat Jan 22 13:59:40 GMT 2005
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Jan 21 08:08:21 160.36.214.234:3159 -> xxx.yyy.1.1:6101 SYN ******S*
Jan 21 08:08:21 160.36.214.234:3160 -> xxx.yyy.1.2:6101 SYN ******S*
Jan 21 08:08:21 160.36.214.234:3161 -> xxx.yyy.1.3:6101 SYN ******S*
Jan 21 08:08:21 160.36.214.234:3162 -> xxx.yyy.1.4:6101 SYN ******S*
Jan 21 08:08:21 160.36.214.234:3163 -> xxx.yyy.1.5:6101 SYN ******S*
Jan 21 08:08:21 160.36.214.234:3164 -> xxx.yyy.1.6:6101 SYN ******S*
Jan 21 08:08:21 160.36.214.234:3165 -> xxx.yyy.1.7:6101 SYN ******S*
Jan 21 08:08:21 160.36.214.234:3168 -> xxx.yyy.1.10:6101 SYN ******S*
[...]
Jan 21 19:55:43 160.36.214.234:1306 -> xxx.yyy.255.245:6101 SYN ******S*
Jan 21 19:55:43 160.36.214.234:1287 -> xxx.yyy.255.226:6101 SYN ******S*
Jan 21 19:55:43 160.36.214.234:1303 -> xxx.yyy.255.242:6101 SYN ******S*
Jan 21 19:55:43 160.36.214.234:1271 -> xxx.yyy.255.210:6101 SYN ******S*
Jan 21 19:55:43 160.36.214.234:1268 -> xxx.yyy.255.207:6101 SYN ******S*
Jan 21 19:55:43 160.36.214.234:1300 -> xxx.yyy.255.239:6101 SYN ******S*
Jan 21 19:55:43 160.36.214.234:1310 -> xxx.yyy.255.249:6101 SYN ******S*
Jan 21 19:55:43 160.36.214.234:1275 -> xxx.yyy.255.214:6101 SYN ******S*
100521
Jan 21 01:16:21 61.145.180.129:1430 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 21 01:16:24 61.145.180.129:1432 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 21 01:16:21 61.145.180.129:1425 -> xxx.yyy.1.0:1433 SYN ******S*
Jan 21 01:16:24 61.145.180.129:1436 -> xxx.yyy.1.9:1433 SYN ******S*
Jan 21 01:16:24 61.145.180.129:1438 -> xxx.yyy.1.11:1433 SYN ******S*
Jan 21 01:16:24 61.145.180.129:1435 -> xxx.yyy.1.8:1433 SYN ******S*
Jan 21 01:16:24 61.145.180.129:1433 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 21 01:16:24 61.145.180.129:1437 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
Jan 21 04:28:05 61.145.180.129:2605 -> xxx.yyy.255.214:1433 SYN ******S*
Jan 21 04:28:05 61.145.180.129:2627 -> xxx.yyy.255.218:1433 SYN ******S*
Jan 21 04:28:05 61.145.180.129:2640 -> xxx.yyy.255.221:1433 SYN ******S*
Jan 21 04:28:05 61.145.180.129:2636 -> xxx.yyy.255.220:1433 SYN ******S*
Jan 21 04:28:05 61.145.180.129:2655 -> xxx.yyy.255.222:1433 SYN ******S*
Jan 21 04:28:05 61.145.180.129:2658 -> xxx.yyy.255.223:1433 SYN ******S*
Jan 21 04:28:05 61.145.180.129:2696 -> xxx.yyy.255.227:1433 SYN ******S*
Jan 21 04:28:05 61.145.180.129:2670 -> xxx.yyy.255.224:1433 SYN ******S*
81636
Jan 21 17:40:35 69.143.228.61:61893 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 21 17:40:34 69.143.228.61:61868 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 21 17:40:34 69.143.228.61:61654 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 21 17:40:32 69.143.228.61:61658 -> xxx.yyy.1.8:1433 SYN ******S*
Jan 21 17:40:32 69.143.228.61:61660 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 21 17:40:32 69.143.228.61:61655 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 21 17:40:34 69.143.228.61:61854 -> xxx.yyy.1.9:1433 SYN ******S*
Jan 21 17:40:35 69.143.228.61:61889 -> xxx.yyy.1.6:1433 SYN ******S*
[...]
Jan 21 18:29:30 69.143.228.61:62450 -> xxx.yyy.255.243:1433 SYN ******S*
Jan 21 18:29:30 69.143.228.61:62459 -> xxx.yyy.255.224:1433 SYN ******S*
Jan 21 18:29:30 69.143.228.61:62448 -> xxx.yyy.255.254:1433 SYN ******S*
Jan 21 18:29:30 69.143.228.61:62453 -> xxx.yyy.255.249:1433 SYN ******S*
Jan 21 18:29:30 69.143.228.61:62481 -> xxx.yyy.255.235:1433 SYN ******S*
Jan 21 18:29:31 69.143.228.61:61748 -> xxx.yyy.255.206:1433 SYN ******S*
Jan 21 18:29:31 69.143.228.61:62543 -> xxx.yyy.255.247:1433 SYN ******S*
Jan 21 18:29:32 69.143.228.61:62593 -> xxx.yyy.255.252:1433 SYN ******S*
81536
Jan 21 05:23:08 212.184.170.26:1978 -> xxx.yyy.1.1:3306 SYN ******S*
Jan 21 05:23:08 212.184.170.26:1979 -> xxx.yyy.1.2:3306 SYN ******S*
Jan 21 05:23:08 212.184.170.26:1980 -> xxx.yyy.1.3:3306 SYN ******S*
Jan 21 05:23:10 212.184.170.26:1981 -> xxx.yyy.1.4:3306 SYN ******S*
Jan 21 05:23:10 212.184.170.26:1982 -> xxx.yyy.1.5:3306 SYN ******S*
Jan 21 05:23:10 212.184.170.26:1983 -> xxx.yyy.1.6:3306 SYN ******S*
Jan 21 05:23:10 212.184.170.26:1984 -> xxx.yyy.1.7:3306 SYN ******S*
Jan 21 05:23:08 212.184.170.26:1985 -> xxx.yyy.1.8:3306 SYN ******S*
[...]
Jan 21 05:34:26 212.184.170.26:4630 -> xxx.yyy.255.177:3306 SYN ******S*
Jan 21 05:34:26 212.184.170.26:4627 -> xxx.yyy.255.174:3306 SYN ******S*
Jan 21 05:34:27 212.184.170.26:4638 -> xxx.yyy.255.185:3306 SYN ******S*
Jan 21 05:34:27 212.184.170.26:4635 -> xxx.yyy.255.182:3306 SYN ******S*
Jan 21 05:34:27 212.184.170.26:4639 -> xxx.yyy.255.186:3306 SYN ******S*
Jan 21 05:34:27 212.184.170.26:4636 -> xxx.yyy.255.183:3306 SYN ******S*
Jan 21 05:34:27 212.184.170.26:4640 -> xxx.yyy.255.187:3306 SYN ******S*
Jan 21 05:34:27 212.184.170.26:4637 -> xxx.yyy.255.184:3306 SYN ******S*
72457
Jan 21 03:58:28 207.21.209.120:2295 -> xxx.yyy.1.1:42 SYN ******S*
Jan 21 03:58:28 207.21.209.120:2296 -> xxx.yyy.1.2:42 SYN ******S*
Jan 21 03:58:25 207.21.209.120:2297 -> xxx.yyy.1.3:42 SYN ******S*
Jan 21 03:58:28 207.21.209.120:2298 -> xxx.yyy.1.4:42 SYN ******S*
Jan 21 03:58:28 207.21.209.120:2299 -> xxx.yyy.1.5:42 SYN ******S*
Jan 21 03:58:28 207.21.209.120:2300 -> xxx.yyy.1.6:42 SYN ******S*
Jan 21 03:58:28 207.21.209.120:2301 -> xxx.yyy.1.7:42 SYN ******S*
Jan 21 03:58:28 207.21.209.120:2302 -> xxx.yyy.1.8:42 SYN ******S*
[...]
Jan 21 04:09:20 207.21.209.120:1191 -> xxx.yyy.255.187:42 SYN ******S*
Jan 21 04:09:21 207.21.209.120:1197 -> xxx.yyy.255.193:42 SYN ******S*
Jan 21 04:09:21 207.21.209.120:1202 -> xxx.yyy.255.198:42 SYN ******S*
Jan 21 04:09:21 207.21.209.120:1203 -> xxx.yyy.255.199:42 SYN ******S*
Jan 21 04:09:21 207.21.209.120:1201 -> xxx.yyy.255.197:42 SYN ******S*
Jan 21 04:09:21 207.21.209.120:1200 -> xxx.yyy.255.196:42 SYN ******S*
Jan 21 04:09:21 207.21.209.120:1204 -> xxx.yyy.255.200:42 SYN ******S*
Jan 21 04:09:21 207.21.209.120:1199 -> xxx.yyy.255.195:42 SYN ******S*
72179
Jan 21 13:46:30 82.47.101.123:4853 -> xxx.yyy.1.0:1433 SYN ******S*
Jan 21 13:46:30 82.47.101.123:4878 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 21 13:46:30 82.47.101.123:4885 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 21 13:46:27 82.47.101.123:4909 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 21 13:46:27 82.47.101.123:4913 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 21 13:46:27 82.47.101.123:4914 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 21 13:46:27 82.47.101.123:4921 -> xxx.yyy.1.7:1433 SYN ******S*
Jan 21 13:46:30 82.47.101.123:4942 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Jan 21 17:35:24 82.47.101.123:2498 -> xxx.yyy.255.241:1433 SYN ******S*
Jan 21 17:35:24 82.47.101.123:2522 -> xxx.yyy.255.242:1433 SYN ******S*
Jan 21 17:35:26 82.47.101.123:2604 -> xxx.yyy.255.244:1433 SYN ******S*
Jan 21 17:35:26 82.47.101.123:2678 -> xxx.yyy.255.247:1433 SYN ******S*
Jan 21 17:35:26 82.47.101.123:2681 -> xxx.yyy.255.248:1433 SYN ******S*
Jan 21 17:35:27 82.47.101.123:2706 -> xxx.yyy.255.249:1433 SYN ******S*
Jan 21 17:35:27 82.47.101.123:2731 -> xxx.yyy.255.251:1433 SYN ******S*
Jan 21 17:35:27 82.47.101.123:2727 -> xxx.yyy.255.250:1433 SYN ******S*
Jan 21 17:35:27 82.47.101.123:2780 -> xxx.yyy.255.252:1433 SYN ******S*
69195
Jan 21 23:20:17 220.72.176.240:2447 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 21 23:20:17 220.72.176.240:2456 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 21 23:20:14 220.72.176.240:2465 -> xxx.yyy.1.9:1433 SYN ******S*
Jan 21 23:20:17 220.72.176.240:2468 -> xxx.yyy.1.10:1433 SYN ******S*
Jan 21 23:20:17 220.72.176.240:2471 -> xxx.yyy.1.11:1433 SYN ******S*
Jan 21 23:20:17 220.72.176.240:2450 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 21 23:20:17 220.72.176.240:2477 -> xxx.yyy.1.13:1433 SYN ******S*
Jan 21 23:20:14 220.72.176.240:2480 -> xxx.yyy.1.14:1433 SYN ******S*
[...]
Jan 21 23:32:14 220.72.176.240:2990 -> xxx.yyy.255.221:1433 SYN ******S*
Jan 21 23:32:14 220.72.176.240:3005 -> xxx.yyy.255.226:1433 SYN ******S*
Jan 21 23:32:14 220.72.176.240:3029 -> xxx.yyy.255.234:1433 SYN ******S*
Jan 21 23:32:14 220.72.176.240:3023 -> xxx.yyy.255.232:1433 SYN ******S*
Jan 21 23:32:14 220.72.176.240:3017 -> xxx.yyy.255.230:1433 SYN ******S*
Jan 21 23:32:14 220.72.176.240:3035 -> xxx.yyy.255.236:1433 SYN ******S*
Jan 21 23:32:14 220.72.176.240:3087 -> xxx.yyy.255.253:1433 SYN ******S*
Jan 21 23:32:14 220.72.176.240:3081 -> xxx.yyy.255.251:1433 SYN ******S*
58540
Jan 21 01:40:03 209.76.1.140:2531 -> xxx.yyy.1.2:6101 SYN ******S*
Jan 21 01:40:00 209.76.1.140:2540 -> xxx.yyy.1.10:6101 SYN ******S*
Jan 21 01:40:03 209.76.1.140:2533 -> xxx.yyy.1.4:6101 SYN ******S*
Jan 21 01:40:03 209.76.1.140:2532 -> xxx.yyy.1.1:6101 SYN ******S*
Jan 21 01:40:03 209.76.1.140:2536 -> xxx.yyy.1.6:6101 SYN ******S*
Jan 21 01:40:00 209.76.1.140:2534 -> xxx.yyy.1.3:6101 SYN ******S*
Jan 21 01:40:03 209.76.1.140:2535 -> xxx.yyy.1.5:6101 SYN ******S*
Jan 21 01:40:03 209.76.1.140:2539 -> xxx.yyy.1.9:6101 SYN ******S*
[...]
Jan 21 02:29:41 209.76.1.140:2599 -> xxx.yyy.255.243:6101 SYN ******S*
Jan 21 02:29:41 209.76.1.140:2606 -> xxx.yyy.255.252:6101 SYN ******S*
Jan 21 02:29:41 209.76.1.140:2604 -> xxx.yyy.255.250:6101 SYN ******S*
Jan 21 02:29:41 209.76.1.140:2605 -> xxx.yyy.255.249:6101 SYN ******S*
Jan 21 02:29:41 209.76.1.140:2603 -> xxx.yyy.255.248:6101 SYN ******S*
Jan 21 02:29:41 209.76.1.140:2607 -> xxx.yyy.255.251:6101 SYN ******S*
Jan 21 02:29:41 209.76.1.140:2608 -> xxx.yyy.255.253:6101 SYN ******S*
Jan 21 02:29:41 209.76.1.140:2609 -> xxx.yyy.255.254:6101 SYN ******S*
57622
Jan 21 17:45:43 210.74.97.66:4153 -> xxx.yyy.1.2:3306 SYN ******S*
Jan 21 17:45:44 210.74.97.66:4154 -> xxx.yyy.1.3:3306 SYN ******S*
Jan 21 17:45:42 210.74.97.66:4155 -> xxx.yyy.1.4:3306 SYN ******S*
Jan 21 17:45:45 210.74.97.66:4158 -> xxx.yyy.1.7:3306 SYN ******S*
Jan 21 17:45:44 210.74.97.66:4160 -> xxx.yyy.1.9:3306 SYN ******S*
Jan 21 17:45:45 210.74.97.66:4161 -> xxx.yyy.1.10:3306 SYN ******S*
Jan 21 17:45:44 210.74.97.66:4162 -> xxx.yyy.1.11:3306 SYN ******S*
Jan 21 17:45:45 210.74.97.66:4163 -> xxx.yyy.1.12:3306 SYN ******S*
[...]
Jan 21 17:57:27 210.74.97.66:3832 -> xxx.yyy.255.203:3306 SYN ******S*
Jan 21 17:57:27 210.74.97.66:3834 -> xxx.yyy.255.205:3306 SYN ******S*
Jan 21 17:57:27 210.74.97.66:3830 -> xxx.yyy.255.201:3306 SYN ******S*
Jan 21 17:57:27 210.74.97.66:3844 -> xxx.yyy.255.214:3306 SYN ******S*
Jan 21 17:57:27 210.74.97.66:3853 -> xxx.yyy.255.223:3306 SYN ******S*
Jan 21 17:57:27 210.74.97.66:3852 -> xxx.yyy.255.222:3306 SYN ******S*
Jan 21 17:57:27 210.74.97.66:3869 -> xxx.yyy.255.239:3306 SYN ******S*
Jan 21 17:57:27 210.74.97.66:3865 -> xxx.yyy.255.235:3306 SYN ******S*
56329
Jan 21 20:17:35 209.204.67.229:2859 -> xxx.yyy.1.1:6101 SYN ******S*
Jan 21 20:17:35 209.204.67.229:2860 -> xxx.yyy.1.2:6101 SYN ******S*
Jan 21 20:17:32 209.204.67.229:2861 -> xxx.yyy.1.3:6101 SYN ******S*
Jan 21 20:17:32 209.204.67.229:2862 -> xxx.yyy.1.4:6101 SYN ******S*
Jan 21 20:17:32 209.204.67.229:2863 -> xxx.yyy.1.5:6101 SYN ******S*
Jan 21 20:17:35 209.204.67.229:2865 -> xxx.yyy.1.7:6101 SYN ******S*
Jan 21 20:17:32 209.204.67.229:2864 -> xxx.yyy.1.6:6101 SYN ******S*
Jan 21 20:17:32 209.204.67.229:2866 -> xxx.yyy.1.8:6101 SYN ******S*
[...]
Jan 21 20:22:02 209.204.67.229:4899 -> xxx.yyy.255.202:6101 SYN ******S*
Jan 21 20:22:02 209.204.67.229:4939 -> xxx.yyy.255.222:6101 SYN ******S*
Jan 21 20:22:02 209.204.67.229:4871 -> xxx.yyy.255.185:6101 SYN ******S*
Jan 21 20:22:02 209.204.67.229:4891 -> xxx.yyy.255.198:6101 SYN ******S*
Jan 21 20:22:02 209.204.67.229:4994 -> xxx.yyy.255.241:6101 SYN ******S*
Jan 21 20:22:02 209.204.67.229:1032 -> xxx.yyy.255.252:6101 SYN ******S*
Jan 21 20:22:02 209.204.67.229:4997 -> xxx.yyy.255.243:6101 SYN ******S*
Jan 21 20:22:02 209.204.67.229:1034 -> xxx.yyy.255.254:6101 SYN ******S*
56182
Jan 21 22:29:41 195.62.234.104:4178 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 21 22:29:41 195.62.234.104:4183 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 21 22:29:38 195.62.234.104:4184 -> xxx.yyy.1.7:1433 SYN ******S*
Jan 21 22:29:41 195.62.234.104:4186 -> xxx.yyy.1.9:1433 SYN ******S*
Jan 21 22:29:41 195.62.234.104:4187 -> xxx.yyy.1.10:1433 SYN ******S*
Jan 21 22:29:41 195.62.234.104:4188 -> xxx.yyy.1.11:1433 SYN ******S*
Jan 21 22:29:41 195.62.234.104:4189 -> xxx.yyy.1.12:1433 SYN ******S*
Jan 21 22:29:41 195.62.234.104:4190 -> xxx.yyy.1.13:1433 SYN ******S*
[...]
Jan 21 22:42:22 195.62.234.104:2335 -> xxx.yyy.255.226:1433 SYN ******S*
Jan 21 22:42:22 195.62.234.104:2331 -> xxx.yyy.255.222:1433 SYN ******S*
Jan 21 22:42:22 195.62.234.104:2332 -> xxx.yyy.255.223:1433 SYN ******S*
Jan 21 22:42:22 195.62.234.104:2333 -> xxx.yyy.255.224:1433 SYN ******S*
Jan 21 22:42:22 195.62.234.104:2337 -> xxx.yyy.255.228:1433 SYN ******S*
Jan 21 22:42:22 195.62.234.104:2336 -> xxx.yyy.255.227:1433 SYN ******S*
Jan 21 22:42:22 195.62.234.104:2334 -> xxx.yyy.255.225:1433 SYN ******S*
Jan 21 22:42:23 195.62.234.104:2348 -> xxx.yyy.255.239:1433 SYN ******S*
55194
Jan 21 01:23:00 82.204.3.251:42830 -> xxx.yyy.1.1:4000 SYN ******S*
Jan 21 01:23:00 82.204.3.251:42832 -> xxx.yyy.1.2:4000 SYN ******S*
Jan 21 01:23:00 82.204.3.251:42834 -> xxx.yyy.1.3:4000 SYN ******S*
Jan 21 01:23:02 82.204.3.251:42836 -> xxx.yyy.1.4:4000 SYN ******S*
Jan 21 01:23:02 82.204.3.251:42838 -> xxx.yyy.1.5:4000 SYN ******S*
Jan 21 01:22:59 82.204.3.251:42842 -> xxx.yyy.1.7:4000 SYN ******S*
Jan 21 01:23:00 82.204.3.251:42844 -> xxx.yyy.1.8:4000 SYN ******S*
Jan 21 01:23:00 82.204.3.251:42846 -> xxx.yyy.1.9:4000 SYN ******S*
[...]
Jan 21 01:34:44 82.204.3.251:45079 -> xxx.yyy.255.210:4000 SYN ******S*
Jan 21 01:34:44 82.204.3.251:45081 -> xxx.yyy.255.211:4000 SYN ******S*
Jan 21 01:34:44 82.204.3.251:45083 -> xxx.yyy.255.212:4000 SYN ******S*
Jan 21 01:34:44 82.204.3.251:45085 -> xxx.yyy.255.213:4000 SYN ******S*
Jan 21 01:34:44 82.204.3.251:45087 -> xxx.yyy.255.214:4000 SYN ******S*
Jan 21 01:34:44 82.204.3.251:45089 -> xxx.yyy.255.215:4000 SYN ******S*
Jan 21 01:34:44 82.204.3.251:45091 -> xxx.yyy.255.216:4000 SYN ******S*
Jan 21 01:34:44 82.204.3.251:45093 -> xxx.yyy.255.217:4000 SYN ******S*
Jan 21 01:34:45 82.204.3.251:45099 -> xxx.yyy.255.220:4000 SYN ******S*
54183
Jan 21 19:46:01 213.246.36.204:3379 -> xxx.yyy.1.1:3306 SYN ******S*
Jan 21 19:46:01 213.246.36.204:3380 -> xxx.yyy.1.2:3306 SYN ******S*
Jan 21 19:46:01 213.246.36.204:3381 -> xxx.yyy.1.3:3306 SYN ******S*
Jan 21 19:46:02 213.246.36.204:3382 -> xxx.yyy.1.4:3306 SYN ******S*
Jan 21 19:46:02 213.246.36.204:3383 -> xxx.yyy.1.5:3306 SYN ******S*
Jan 21 19:46:02 213.246.36.204:3385 -> xxx.yyy.1.7:3306 SYN ******S*
Jan 21 19:46:00 213.246.36.204:3386 -> xxx.yyy.1.8:3306 SYN ******S*
Jan 21 19:46:00 213.246.36.204:3387 -> xxx.yyy.1.9:3306 SYN ******S*
[...]
Jan 21 19:51:30 213.246.36.204:1155 -> xxx.yyy.255.238:3306 SYN ******S*
Jan 21 19:51:30 213.246.36.204:1165 -> xxx.yyy.255.248:3306 SYN ******S*
Jan 21 19:51:30 213.246.36.204:1149 -> xxx.yyy.255.232:3306 SYN ******S*
Jan 21 19:51:30 213.246.36.204:1152 -> xxx.yyy.255.235:3306 SYN ******S*
Jan 21 19:51:30 213.246.36.204:1168 -> xxx.yyy.255.251:3306 SYN ******S*
Jan 21 19:51:30 213.246.36.204:1146 -> xxx.yyy.255.229:3306 SYN ******S*
Jan 21 19:51:30 213.246.36.204:1162 -> xxx.yyy.255.245:3306 SYN ******S*
Jan 21 19:51:30 213.246.36.204:1171 -> xxx.yyy.255.254:3306 SYN ******S*
53730
Jan 21 22:10:53 61.50.171.34:3317 -> xxx.yyy.64.0:1433 SYN ******S*
Jan 21 22:10:56 61.50.171.34:3318 -> xxx.yyy.64.1:1433 SYN ******S*
Jan 21 22:10:53 61.50.171.34:3325 -> xxx.yyy.64.5:1433 SYN ******S*
Jan 21 22:10:54 61.50.171.34:3335 -> xxx.yyy.64.11:1433 SYN ******S*
Jan 21 22:10:57 61.50.171.34:3338 -> xxx.yyy.64.12:1433 SYN ******S*
Jan 21 22:10:57 61.50.171.34:3342 -> xxx.yyy.64.14:1433 SYN ******S*
Jan 21 22:10:57 61.50.171.34:3344 -> xxx.yyy.64.15:1433 SYN ******S*
Jan 21 22:10:57 61.50.171.34:3346 -> xxx.yyy.64.16:1433 SYN ******S*
[...]
Jan 21 23:59:58 61.50.171.34:4336 -> xxx.yyy.185.88:1433 SYN ******S*
Jan 21 23:59:58 61.50.171.34:4468 -> xxx.yyy.185.133:1433 SYN ******S*
Jan 21 23:59:58 61.50.171.34:4470 -> xxx.yyy.185.134:1433 SYN ******S*
Jan 21 23:59:58 61.50.171.34:4340 -> xxx.yyy.185.89:1433 SYN ******S*
Jan 21 23:59:58 61.50.171.34:4345 -> xxx.yyy.185.90:1433 SYN ******S*
Jan 21 23:59:58 61.50.171.34:4471 -> xxx.yyy.185.135:1433 SYN ******S*
Jan 21 23:59:58 61.50.171.34:4346 -> xxx.yyy.185.91:1433 SYN ******S*
Jan 21 23:59:58 61.50.171.34:4352 -> xxx.yyy.185.92:1433 SYN ******S*
51676
Jan 21 23:34:54 61.175.235.78:4039 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 21 23:34:54 61.175.235.78:4040 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 21 23:34:51 61.175.235.78:4041 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 21 23:34:54 61.175.235.78:4044 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 21 23:34:51 61.175.235.78:4043 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 21 23:34:54 61.175.235.78:4045 -> xxx.yyy.1.7:1433 SYN ******S*
Jan 21 23:34:54 61.175.235.78:4047 -> xxx.yyy.1.9:1433 SYN ******S*
Jan 21 23:34:51 61.175.235.78:4046 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Jan 21 23:46:33 61.175.235.78:3474 -> xxx.yyy.255.226:1433 SYN ******S*
Jan 21 23:46:33 61.175.235.78:3459 -> xxx.yyy.255.211:1433 SYN ******S*
Jan 21 23:46:33 61.175.235.78:3466 -> xxx.yyy.255.218:1433 SYN ******S*
Jan 21 23:46:33 61.175.235.78:3473 -> xxx.yyy.255.225:1433 SYN ******S*
Jan 21 23:46:33 61.175.235.78:3490 -> xxx.yyy.255.242:1433 SYN ******S*
Jan 21 23:46:33 61.175.235.78:3498 -> xxx.yyy.255.250:1433 SYN ******S*
Jan 21 23:46:33 61.175.235.78:3489 -> xxx.yyy.255.241:1433 SYN ******S*
Jan 21 23:46:33 61.175.235.78:3496 -> xxx.yyy.255.248:1433 SYN ******S*
Jan 21 23:46:33 61.175.235.78:3499 -> xxx.yyy.255.251:1433 SYN ******S*
46069
Jan 21 00:49:56 213.235.217.218:22486 -> xxx.yyy.1.28:1433 SYN ******S*
Jan 21 00:49:56 213.235.217.218:22488 -> xxx.yyy.1.29:1433 SYN ******S*
Jan 21 00:49:56 213.235.217.218:22504 -> xxx.yyy.1.31:1433 SYN ******S*
Jan 21 00:49:55 213.235.217.218:22537 -> xxx.yyy.1.32:1433 SYN ******S*
Jan 21 00:49:56 213.235.217.218:22539 -> xxx.yyy.1.33:1433 SYN ******S*
Jan 21 00:49:56 213.235.217.218:22543 -> xxx.yyy.1.35:1433 SYN ******S*
Jan 21 00:49:56 213.235.217.218:22545 -> xxx.yyy.1.36:1433 SYN ******S*
Jan 21 00:49:56 213.235.217.218:22570 -> xxx.yyy.1.37:1433 SYN ******S*
[...]
Jan 21 01:15:11 213.235.217.218:13101 -> xxx.yyy.255.121:1433 SYN ******S*
Jan 21 01:15:11 213.235.217.218:13103 -> xxx.yyy.255.242:1433 SYN ******S*
Jan 21 01:15:11 213.235.217.218:13111 -> xxx.yyy.255.120:1433 SYN ******S*
Jan 21 01:15:11 213.235.217.218:13113 -> xxx.yyy.255.122:1433 SYN ******S*
Jan 21 01:15:11 213.235.217.218:13114 -> xxx.yyy.255.125:1433 SYN ******S*
Jan 21 01:15:11 213.235.217.218:12778 -> xxx.yyy.255.240:1433 SYN ******S*
Jan 21 01:15:11 213.235.217.218:12788 -> xxx.yyy.255.245:1433 SYN ******S*
Jan 21 01:15:11 213.235.217.218:12794 -> xxx.yyy.255.248:1433 SYN ******S*
37003
Jan 21 11:29:53 24.0.12.3:3412 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 21 11:29:56 24.0.12.3:3414 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 21 11:29:53 24.0.12.3:3418 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 21 11:29:53 24.0.12.3:3422 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 21 11:29:53 24.0.12.3:3420 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 21 11:29:53 24.0.12.3:3424 -> xxx.yyy.1.7:1433 SYN ******S*
Jan 21 11:29:53 24.0.12.3:3426 -> xxx.yyy.1.8:1433 SYN ******S*
Jan 21 11:29:53 24.0.12.3:3428 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
Jan 21 11:41:02 24.0.12.3:1753 -> xxx.yyy.255.247:1433 SYN ******S*
Jan 21 11:41:02 24.0.12.3:1749 -> xxx.yyy.255.245:1433 SYN ******S*
Jan 21 11:41:02 24.0.12.3:1737 -> xxx.yyy.255.239:1433 SYN ******S*
Jan 21 11:41:02 24.0.12.3:1745 -> xxx.yyy.255.243:1433 SYN ******S*
Jan 21 11:41:02 24.0.12.3:1743 -> xxx.yyy.255.242:1433 SYN ******S*
Jan 21 11:41:02 24.0.12.3:1741 -> xxx.yyy.255.241:1433 SYN ******S*
Jan 21 11:41:02 24.0.12.3:1739 -> xxx.yyy.255.240:1433 SYN ******S*
Jan 21 11:41:02 24.0.12.3:1747 -> xxx.yyy.255.244:1433 SYN ******S*
Jan 21 11:41:02 24.0.12.3:1751 -> xxx.yyy.255.246:1433 SYN ******S*
36691
Jan 21 15:42:25 203.145.188.211:3454 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 21 15:42:22 203.145.188.211:3453 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 21 15:42:22 203.145.188.211:3455 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 21 15:42:25 203.145.188.211:3456 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 21 15:42:22 203.145.188.211:3458 -> xxx.yyy.1.7:1433 SYN ******S*
Jan 21 15:42:22 203.145.188.211:3459 -> xxx.yyy.1.8:1433 SYN ******S*
Jan 21 15:42:25 203.145.188.211:3460 -> xxx.yyy.1.9:1433 SYN ******S*
Jan 21 15:42:22 203.145.188.211:3463 -> xxx.yyy.1.12:1433 SYN ******S*
[...]
Jan 21 15:53:19 203.145.188.211:1615 -> xxx.yyy.255.187:1433 SYN ******S*
Jan 21 15:53:19 203.145.188.211:1619 -> xxx.yyy.255.191:1433 SYN ******S*
Jan 21 15:53:19 203.145.188.211:1626 -> xxx.yyy.255.198:1433 SYN ******S*
Jan 21 15:53:19 203.145.188.211:1627 -> xxx.yyy.255.199:1433 SYN ******S*
Jan 21 15:53:19 203.145.188.211:1640 -> xxx.yyy.255.212:1433 SYN ******S*
Jan 21 15:53:19 203.145.188.211:1650 -> xxx.yyy.255.222:1433 SYN ******S*
Jan 21 15:53:19 203.145.188.211:1649 -> xxx.yyy.255.221:1433 SYN ******S*
Jan 21 15:53:19 203.145.188.211:1645 -> xxx.yyy.255.217:1433 SYN ******S*
Jan 21 15:53:20 203.145.188.211:1682 -> xxx.yyy.255.254:1433 SYN ******S*
35598
[...]
31242
Jan 21 13:19:56 200.89.38.91:1967 -> xxx.yyy.1.0:1433 SYN ******S*
Jan 21 13:19:56 200.89.38.91:1975 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 21 13:19:59 200.89.38.91:1982 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 21 13:19:56 200.89.38.91:1998 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 21 13:19:56 200.89.38.91:2011 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 21 13:19:56 200.89.38.91:2023 -> xxx.yyy.1.7:1433 SYN ******S*
Jan 21 13:19:56 200.89.38.91:2029 -> xxx.yyy.1.8:1433 SYN ******S*
Jan 21 13:19:56 200.89.38.91:2066 -> xxx.yyy.1.12:1433 SYN ******S*
[...]
Jan 21 16:30:35 200.89.38.91:3242 -> xxx.yyy.255.201:1433 SYN ******S*
Jan 21 16:30:36 200.89.38.91:1642 -> xxx.yyy.255.205:1433 SYN ******S*
Jan 21 16:30:37 200.89.38.91:3776 -> xxx.yyy.255.213:1433 SYN ******S*
Jan 21 16:30:38 200.89.38.91:4781 -> xxx.yyy.255.223:1433 SYN ******S*
Jan 21 16:30:38 200.89.38.91:3449 -> xxx.yyy.255.226:1433 SYN ******S*
Jan 21 16:30:38 200.89.38.91:4908 -> xxx.yyy.255.227:1433 SYN ******S*
Jan 21 16:30:40 200.89.38.91:4139 -> xxx.yyy.255.238:1433 SYN ******S*
Jan 21 16:30:42 200.89.38.91:2946 -> xxx.yyy.255.251:1433 SYN ******S*
29957
Jan 21 14:48:27 201.133.67.125:62725 -> xxx.yyy.168.99:1433 SYN ******S*
Jan 21 14:48:28 201.133.67.125:65407 -> xxx.yyy.168.104:1433 SYN ******S*
Jan 21 14:48:28 201.133.67.125:63815 -> xxx.yyy.168.68:1433 SYN ******S*
Jan 21 14:48:28 201.133.67.125:62127 -> xxx.yyy.168.105:1433 SYN ******S*
Jan 21 14:48:28 201.133.67.125:61545 -> xxx.yyy.168.69:1433 SYN ******S*
Jan 21 14:48:31 201.133.67.125:63217 -> xxx.yyy.168.106:1433 SYN ******S*
Jan 21 14:48:31 201.133.67.125:63007 -> xxx.yyy.168.112:1433 SYN ******S*
Jan 21 14:48:28 201.133.67.125:64535 -> xxx.yyy.168.71:1433 SYN ******S*
[...]
Jan 21 15:27:50 201.133.67.125:63297 -> xxx.yyy.255.228:1433 SYN ******S*
Jan 21 15:27:51 201.133.67.125:65311 -> xxx.yyy.255.232:1433 SYN ******S*
Jan 21 15:27:51 201.133.67.125:61877 -> xxx.yyy.255.236:1433 SYN ******S*
Jan 21 15:27:51 201.133.67.125:62399 -> xxx.yyy.255.233:1433 SYN ******S*
Jan 21 15:27:51 201.133.67.125:62971 -> xxx.yyy.255.246:1433 SYN ******S*
Jan 21 15:27:51 201.133.67.125:63835 -> xxx.yyy.255.245:1433 SYN ******S*
Jan 21 15:27:51 201.133.67.125:64667 -> xxx.yyy.255.248:1433 SYN ******S*
Jan 21 15:27:52 201.133.67.125:63999 -> xxx.yyy.255.250:1433 SYN ******S*
Jan 21 15:27:52 201.133.67.125:62775 -> xxx.yyy.255.253:1433 SYN ******S*
24639
Jan 21 10:01:37 65.166.97.230:3686 -> xxx.yyy.1.9:6101 SYN ******S*
Jan 21 10:01:37 65.166.97.230:3687 -> xxx.yyy.1.10:6101 SYN ******S*
Jan 21 10:01:37 65.166.97.230:3692 -> xxx.yyy.1.15:6101 SYN ******S*
Jan 21 10:01:37 65.166.97.230:3693 -> xxx.yyy.1.16:6101 SYN ******S*
Jan 21 10:01:37 65.166.97.230:3694 -> xxx.yyy.1.17:6101 SYN ******S*
Jan 21 10:01:37 65.166.97.230:3695 -> xxx.yyy.1.18:6101 SYN ******S*
Jan 21 10:01:37 65.166.97.230:3696 -> xxx.yyy.1.19:6101 SYN ******S*
Jan 21 10:01:37 65.166.97.230:3697 -> xxx.yyy.1.20:6101 SYN ******S*
[...]
Jan 21 10:03:03 65.166.97.230:3693 -> xxx.yyy.255.246:6101 SYN ******S*
Jan 21 10:03:03 65.166.97.230:3694 -> xxx.yyy.255.247:6101 SYN ******S*
Jan 21 10:03:03 65.166.97.230:3695 -> xxx.yyy.255.248:6101 SYN ******S*
Jan 21 10:03:03 65.166.97.230:3696 -> xxx.yyy.255.249:6101 SYN ******S*
Jan 21 10:03:03 65.166.97.230:3697 -> xxx.yyy.255.250:6101 SYN ******S*
Jan 21 10:03:03 65.166.97.230:3698 -> xxx.yyy.255.251:6101 SYN ******S*
Jan 21 10:03:03 65.166.97.230:3699 -> xxx.yyy.255.252:6101 SYN ******S*
Jan 21 10:03:03 65.166.97.230:3700 -> xxx.yyy.255.253:6101 SYN ******S*
Jan 21 10:03:03 65.166.97.230:3701 -> xxx.yyy.255.254:6101 SYN ******S*
24349
Jan 21 20:03:28 194.208.24.5:4387 -> xxx.yyy.1.1:80 SYN ******S*
Jan 21 20:03:28 194.208.24.5:4386 -> xxx.yyy.1.0:80 SYN ******S*
Jan 21 20:03:28 194.208.24.5:4388 -> xxx.yyy.1.2:80 SYN ******S*
Jan 21 20:03:28 194.208.24.5:4391 -> xxx.yyy.1.5:80 SYN ******S*
Jan 21 20:03:28 194.208.24.5:4393 -> xxx.yyy.1.7:80 SYN ******S*
Jan 21 20:03:28 194.208.24.5:4395 -> xxx.yyy.1.9:80 SYN ******S*
Jan 21 20:03:28 194.208.24.5:4396 -> xxx.yyy.1.10:80 SYN ******S*
Jan 21 20:03:28 194.208.24.5:4397 -> xxx.yyy.1.11:80 SYN ******S*
[...]
Jan 21 20:04:49 194.208.24.5:4351 -> xxx.yyy.255.245:80 SYN ******S*
Jan 21 20:04:49 194.208.24.5:4353 -> xxx.yyy.255.247:80 SYN ******S*
Jan 21 20:04:49 194.208.24.5:4354 -> xxx.yyy.255.248:80 SYN ******S*
Jan 21 20:04:49 194.208.24.5:4356 -> xxx.yyy.255.250:80 SYN ******S*
Jan 21 20:04:49 194.208.24.5:4358 -> xxx.yyy.255.252:80 SYN ******S*
Jan 21 20:04:49 194.208.24.5:4357 -> xxx.yyy.255.251:80 SYN ******S*
Jan 21 20:04:49 194.208.24.5:4359 -> xxx.yyy.255.253:80 SYN ******S*
Jan 21 20:04:49 194.208.24.5:4360 -> xxx.yyy.255.254:80 SYN ******S*
24145
Jan 21 21:56:03 130.91.75.67:1504 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 21 21:56:03 130.91.75.67:1505 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 21 21:56:03 130.91.75.67:1506 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 21 21:56:03 130.91.75.67:1507 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 21 21:56:03 130.91.75.67:1508 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 21 21:56:03 130.91.75.67:1509 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 21 21:56:03 130.91.75.67:1514 -> xxx.yyy.1.11:1433 SYN ******S*
Jan 21 21:56:03 130.91.75.67:1515 -> xxx.yyy.1.12:1433 SYN ******S*
[...]
Jan 21 22:07:26 130.91.75.67:4849 -> xxx.yyy.255.235:1433 SYN ******S*
Jan 21 22:07:26 130.91.75.67:4854 -> xxx.yyy.255.240:1433 SYN ******S*
Jan 21 22:07:26 130.91.75.67:4855 -> xxx.yyy.255.241:1433 SYN ******S*
Jan 21 22:07:26 130.91.75.67:4874 -> xxx.yyy.255.246:1433 SYN ******S*
Jan 21 22:07:26 130.91.75.67:4876 -> xxx.yyy.255.247:1433 SYN ******S*
Jan 21 22:07:26 130.91.75.67:4878 -> xxx.yyy.255.248:1433 SYN ******S*
Jan 21 22:07:26 130.91.75.67:4885 -> xxx.yyy.255.252:1433 SYN ******S*
Jan 21 22:07:26 130.91.75.67:4891 -> xxx.yyy.255.253:1433 SYN ******S*
22154
[...]
18481
Jan 21 13:33:31 201.128.63.239:63889 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 21 13:33:28 201.128.63.239:62483 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 21 13:33:31 201.128.63.239:65135 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 21 13:33:31 201.128.63.239:65133 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 21 13:33:31 201.128.63.239:61673 -> xxx.yyy.1.10:1433 SYN ******S*
Jan 21 13:33:31 201.128.63.239:62631 -> xxx.yyy.1.12:1433 SYN ******S*
Jan 21 13:33:31 201.128.63.239:64397 -> xxx.yyy.1.13:1433 SYN ******S*
Jan 21 13:33:28 201.128.63.239:63399 -> xxx.yyy.1.14:1433 SYN ******S*
[...]
Jan 21 14:23:08 201.128.63.239:65403 -> xxx.yyy.111.244:1433 SYN ******S*
Jan 21 14:23:12 201.128.63.239:63683 -> xxx.yyy.111.255:1433 SYN ******S*
Jan 21 14:23:14 201.128.63.239:63455 -> xxx.yyy.111.249:1433 SYN ******S*
Jan 21 14:23:15 201.128.63.239:61977 -> xxx.yyy.111.253:1433 SYN ******S*
Jan 21 14:23:19 201.128.63.239:62607 -> xxx.yyy.111.248:1433 SYN ******S*
Jan 21 14:23:20 201.128.63.239:63455 -> xxx.yyy.111.249:1433 SYN ******S*
Jan 21 14:23:20 201.128.63.239:62041 -> xxx.yyy.111.250:1433 SYN ******S*
Jan 21 14:23:21 201.128.63.239:63513 -> xxx.yyy.111.251:1433 SYN ******S*
Jan 21 14:23:21 201.128.63.239:63683 -> xxx.yyy.111.255:1433 SYN ******S*
15135
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list