[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Sun Jan 23 13:09:52 GMT 2005
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Jan 22 15:24:18 212.68.254.137:2021 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 22 15:24:18 212.68.254.137:2026 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 22 15:24:18 212.68.254.137:2032 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 22 15:24:18 212.68.254.137:2045 -> xxx.yyy.1.7:1433 SYN ******S*
Jan 22 15:24:18 212.68.254.137:2049 -> xxx.yyy.1.8:1433 SYN ******S*
Jan 22 15:24:18 212.68.254.137:2055 -> xxx.yyy.1.9:1433 SYN ******S*
Jan 22 15:24:18 212.68.254.137:2060 -> xxx.yyy.1.11:1433 SYN ******S*
Jan 22 15:24:18 212.68.254.137:2064 -> xxx.yyy.1.12:1433 SYN ******S*
[...]
Jan 22 23:11:26 212.68.254.137:2367 -> xxx.yyy.255.247:1433 SYN ******S*
Jan 22 23:11:26 212.68.254.137:2389 -> xxx.yyy.255.248:1433 SYN ******S*
Jan 22 23:11:26 212.68.254.137:2391 -> xxx.yyy.255.249:1433 SYN ******S*
Jan 22 23:11:26 212.68.254.137:2392 -> xxx.yyy.255.250:1433 SYN ******S*
Jan 22 23:11:26 212.68.254.137:2414 -> xxx.yyy.255.251:1433 SYN ******S*
Jan 22 23:11:27 212.68.254.137:2438 -> xxx.yyy.255.252:1433 SYN ******S*
Jan 22 23:11:27 212.68.254.137:2450 -> xxx.yyy.255.253:1433 SYN ******S*
Jan 22 23:11:27 212.68.254.137:2453 -> xxx.yyy.255.254:1433 SYN ******S*
183615
Jan 22 06:04:35 62.233.233.50:3166 -> xxx.yyy.1.0:1433 SYN ******S*
Jan 22 06:04:35 62.233.233.50:3171 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 22 06:04:35 62.233.233.50:3172 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 22 06:04:35 62.233.233.50:3174 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 22 06:04:35 62.233.233.50:3180 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 22 06:04:35 62.233.233.50:3186 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 22 06:04:35 62.233.233.50:3189 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 22 06:04:33 62.233.233.50:3194 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Jan 22 09:23:29 62.233.233.50:3791 -> xxx.yyy.222.44:1433 SYN ******S*
Jan 22 09:23:29 62.233.233.50:3187 -> xxx.yyy.222.30:1433 SYN ******S*
Jan 22 09:23:29 62.233.233.50:2336 -> xxx.yyy.222.8:1433 SYN ******S*
Jan 22 09:23:29 62.233.233.50:3796 -> xxx.yyy.222.45:1433 SYN ******S*
Jan 22 09:23:30 62.233.233.50:2341 -> xxx.yyy.222.9:1433 SYN ******S*
Jan 22 09:23:30 62.233.233.50:3312 -> xxx.yyy.222.31:1433 SYN ******S*
Jan 22 09:23:30 62.233.233.50:2436 -> xxx.yyy.222.10:1433 SYN ******S*
Jan 22 09:23:30 62.233.233.50:4010 -> xxx.yyy.222.46:1433 SYN ******S*
Jan 22 09:23:30 62.233.233.50:4021 -> xxx.yyy.222.47:1433 SYN ******S*
89122
Jan 22 12:47:22 67.71.133.47:4647 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 22 12:47:20 67.71.133.47:4661 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 22 12:47:23 67.71.133.47:4681 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 22 12:47:23 67.71.133.47:4686 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 22 12:47:20 67.71.133.47:4688 -> xxx.yyy.1.7:1433 SYN ******S*
Jan 22 12:47:23 67.71.133.47:4719 -> xxx.yyy.1.9:1433 SYN ******S*
Jan 22 12:47:23 67.71.133.47:4732 -> xxx.yyy.1.10:1433 SYN ******S*
Jan 22 12:47:23 67.71.133.47:4759 -> xxx.yyy.1.12:1433 SYN ******S*
[...]
Jan 22 16:39:12 67.71.133.47:3219 -> xxx.yyy.255.236:1433 SYN ******S*
Jan 22 16:39:12 67.71.133.47:3206 -> xxx.yyy.255.234:1433 SYN ******S*
Jan 22 16:39:12 67.71.133.47:3279 -> xxx.yyy.255.238:1433 SYN ******S*
Jan 22 16:39:13 67.71.133.47:3317 -> xxx.yyy.255.240:1433 SYN ******S*
Jan 22 16:39:13 67.71.133.47:3318 -> xxx.yyy.255.241:1433 SYN ******S*
Jan 22 16:39:15 67.71.133.47:3504 -> xxx.yyy.255.246:1433 SYN ******S*
Jan 22 16:39:15 67.71.133.47:3550 -> xxx.yyy.255.248:1433 SYN ******S*
Jan 22 16:39:17 67.71.133.47:3758 -> xxx.yyy.255.254:1433 SYN ******S*
81230
Jan 22 04:09:10 80.60.48.140:38507 -> xxx.yyy.1.0:22 SYN ******S*
Jan 22 04:09:10 80.60.48.140:38508 -> xxx.yyy.1.1:22 SYN ******S*
Jan 22 04:09:10 80.60.48.140:38509 -> xxx.yyy.1.2:22 SYN ******S*
Jan 22 04:09:10 80.60.48.140:38510 -> xxx.yyy.1.3:22 SYN ******S*
Jan 22 04:09:13 80.60.48.140:38511 -> xxx.yyy.1.4:22 SYN ******S*
Jan 22 04:09:13 80.60.48.140:38512 -> xxx.yyy.1.5:22 SYN ******S*
Jan 22 04:09:13 80.60.48.140:38513 -> xxx.yyy.1.6:22 SYN ******S*
Jan 22 04:09:13 80.60.48.140:38514 -> xxx.yyy.1.7:22 SYN ******S*
[...]
Jan 22 04:36:07 80.60.48.140:59118 -> xxx.yyy.241.108:22 SYN ******S*
Jan 22 04:36:07 80.60.48.140:59119 -> xxx.yyy.240.152:22 SYN ******S*
Jan 22 04:36:07 80.60.48.140:59120 -> xxx.yyy.241.106:22 SYN ******S*
Jan 22 04:36:07 80.60.48.140:59121 -> xxx.yyy.241.98:22 SYN ******S*
Jan 22 04:36:08 80.60.48.140:59123 -> xxx.yyy.241.156:22 SYN ******S*
Jan 22 04:36:08 80.60.48.140:59127 -> xxx.yyy.229.113:22 SYN ******S*
Jan 22 04:36:08 80.60.48.140:59128 -> xxx.yyy.228.183:22 SYN ******S*
Jan 22 04:36:08 80.60.48.140:59129 -> xxx.yyy.228.189:22 SYN ******S*
Jan 22 04:36:08 80.60.48.140:59130 -> xxx.yyy.248.18:22 SYN ******S*
80314
Jan 22 07:51:08 195.14.168.163:3727 -> xxx.yyy.1.1:1521 SYN ******S*
Jan 22 07:51:08 195.14.168.163:3728 -> xxx.yyy.1.2:1521 SYN ******S*
Jan 22 07:51:07 195.14.168.163:3730 -> xxx.yyy.1.4:1521 SYN ******S*
Jan 22 07:51:10 195.14.168.163:3731 -> xxx.yyy.1.5:1521 SYN ******S*
Jan 22 07:51:10 195.14.168.163:3732 -> xxx.yyy.1.6:1521 SYN ******S*
Jan 22 07:51:10 195.14.168.163:3733 -> xxx.yyy.1.7:1521 SYN ******S*
Jan 22 07:51:08 195.14.168.163:3734 -> xxx.yyy.1.8:1521 SYN ******S*
Jan 22 07:51:08 195.14.168.163:3735 -> xxx.yyy.1.9:1521 SYN ******S*
[...]
Jan 22 08:02:50 195.14.168.163:6531 -> xxx.yyy.255.244:1521 SYN ******S*
Jan 22 08:02:50 195.14.168.163:6534 -> xxx.yyy.255.247:1521 SYN ******S*
Jan 22 08:02:50 195.14.168.163:6535 -> xxx.yyy.255.248:1521 SYN ******S*
Jan 22 08:02:50 195.14.168.163:6536 -> xxx.yyy.255.249:1521 SYN ******S*
Jan 22 08:02:50 195.14.168.163:6541 -> xxx.yyy.255.254:1521 SYN ******S*
Jan 22 08:02:50 195.14.168.163:6538 -> xxx.yyy.255.251:1521 SYN ******S*
Jan 22 08:02:50 195.14.168.163:6537 -> xxx.yyy.255.250:1521 SYN ******S*
Jan 22 08:02:50 195.14.168.163:6540 -> xxx.yyy.255.253:1521 SYN ******S*
Jan 22 08:02:50 195.14.168.163:6539 -> xxx.yyy.255.252:1521 SYN ******S*
59169
Jan 22 23:26:06 140.78.42.2:1044 -> xxx.yyy.1.1:1521 SYN ******S*
Jan 22 23:26:06 140.78.42.2:1046 -> xxx.yyy.1.3:1521 SYN ******S*
Jan 22 23:26:05 140.78.42.2:1047 -> xxx.yyy.1.4:1521 SYN ******S*
Jan 22 23:26:05 140.78.42.2:1048 -> xxx.yyy.1.5:1521 SYN ******S*
Jan 22 23:26:05 140.78.42.2:1050 -> xxx.yyy.1.6:1521 SYN ******S*
Jan 22 23:26:05 140.78.42.2:1051 -> xxx.yyy.1.7:1521 SYN ******S*
Jan 22 23:26:07 140.78.42.2:1052 -> xxx.yyy.1.8:1521 SYN ******S*
Jan 22 23:26:07 140.78.42.2:1053 -> xxx.yyy.1.9:1521 SYN ******S*
[...]
Jan 22 23:37:57 140.78.42.2:1991 -> xxx.yyy.255.212:1521 SYN ******S*
Jan 22 23:37:58 140.78.42.2:1998 -> xxx.yyy.255.219:1521 SYN ******S*
Jan 22 23:37:58 140.78.42.2:2001 -> xxx.yyy.255.222:1521 SYN ******S*
Jan 22 23:37:58 140.78.42.2:1999 -> xxx.yyy.255.220:1521 SYN ******S*
Jan 22 23:37:58 140.78.42.2:1996 -> xxx.yyy.255.217:1521 SYN ******S*
Jan 22 23:37:58 140.78.42.2:2000 -> xxx.yyy.255.221:1521 SYN ******S*
Jan 22 23:37:58 140.78.42.2:1997 -> xxx.yyy.255.218:1521 SYN ******S*
Jan 22 23:37:58 140.78.42.2:2019 -> xxx.yyy.255.240:1521 SYN ******S*
Jan 22 23:37:58 140.78.42.2:2033 -> xxx.yyy.255.254:1521 SYN ******S*
58241
Jan 22 09:21:00 222.36.61.135:1555 -> xxx.yyy.1.0:1433 SYN ******S*
Jan 22 09:21:00 222.36.61.135:1557 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 22 09:21:00 222.36.61.135:1562 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 22 09:21:00 222.36.61.135:1561 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 22 09:21:00 222.36.61.135:1566 -> xxx.yyy.1.8:1433 SYN ******S*
Jan 22 09:20:57 222.36.61.135:1567 -> xxx.yyy.1.9:1433 SYN ******S*
Jan 22 09:21:00 222.36.61.135:1570 -> xxx.yyy.1.12:1433 SYN ******S*
Jan 22 09:21:00 222.36.61.135:1572 -> xxx.yyy.1.13:1433 SYN ******S*
[...]
Jan 22 11:51:47 222.36.61.135:1076 -> xxx.yyy.169.41:1433 SYN ******S*
Jan 22 11:51:47 222.36.61.135:1074 -> xxx.yyy.169.39:1433 SYN ******S*
Jan 22 11:51:47 222.36.61.135:1075 -> xxx.yyy.169.40:1433 SYN ******S*
Jan 22 11:51:47 222.36.61.135:1073 -> xxx.yyy.169.38:1433 SYN ******S*
Jan 22 11:51:47 222.36.61.135:1071 -> xxx.yyy.169.37:1433 SYN ******S*
Jan 22 11:51:47 222.36.61.135:1085 -> xxx.yyy.169.42:1433 SYN ******S*
Jan 22 11:51:49 222.36.61.135:1422 -> xxx.yyy.169.44:1433 SYN ******S*
Jan 22 11:51:50 222.36.61.135:1438 -> xxx.yyy.169.45:1433 SYN ******S*
Jan 22 11:51:50 222.36.61.135:1447 -> xxx.yyy.169.46:1433 SYN ******S*
55950
Jan 22 11:35:15 130.39.8.18:3873 -> xxx.yyy.1.1:80 SYN ******S*
Jan 22 11:35:15 130.39.8.18:3877 -> xxx.yyy.1.3:80 SYN ******S*
Jan 22 11:35:14 130.39.8.18:3879 -> xxx.yyy.1.4:80 SYN ******S*
Jan 22 11:35:14 130.39.8.18:3881 -> xxx.yyy.1.5:80 SYN ******S*
Jan 22 11:35:14 130.39.8.18:3883 -> xxx.yyy.1.6:80 SYN ******S*
Jan 22 11:35:14 130.39.8.18:3885 -> xxx.yyy.1.7:80 SYN ******S*
Jan 22 11:35:14 130.39.8.18:3887 -> xxx.yyy.1.8:80 SYN ******S*
Jan 22 11:35:14 130.39.8.18:3895 -> xxx.yyy.1.12:80 SYN ******S*
[...]
Jan 22 11:45:12 130.39.8.18:3525 -> xxx.yyy.255.249:80 SYN ******S*
Jan 22 11:45:12 130.39.8.18:3526 -> xxx.yyy.255.250:80 SYN ******S*
Jan 22 11:45:12 130.39.8.18:3527 -> xxx.yyy.255.251:80 SYN ******S*
Jan 22 11:45:12 130.39.8.18:3529 -> xxx.yyy.255.253:80 SYN ******S*
Jan 22 11:45:15 130.39.8.18:3503 -> xxx.yyy.255.227:80 SYN ******S*
Jan 22 11:45:15 130.39.8.18:3504 -> xxx.yyy.255.228:80 SYN ******S*
Jan 22 11:45:15 130.39.8.18:3501 -> xxx.yyy.255.225:80 SYN ******S*
Jan 22 11:45:15 130.39.8.18:3514 -> xxx.yyy.255.238:80 SYN ******S*
Jan 22 11:45:15 130.39.8.18:3502 -> xxx.yyy.255.226:80 SYN ******S*
55794
Jan 22 22:13:54 65.210.15.246:3863 -> xxx.yyy.1.1:3306 SYN ******S*
Jan 22 22:13:54 65.210.15.246:3864 -> xxx.yyy.1.2:3306 SYN ******S*
Jan 22 22:13:54 65.210.15.246:3865 -> xxx.yyy.1.3:3306 SYN ******S*
Jan 22 22:13:56 65.210.15.246:3868 -> xxx.yyy.1.6:3306 SYN ******S*
Jan 22 22:13:56 65.210.15.246:3869 -> xxx.yyy.1.7:3306 SYN ******S*
Jan 22 22:13:54 65.210.15.246:3870 -> xxx.yyy.1.8:3306 SYN ******S*
Jan 22 22:13:54 65.210.15.246:3871 -> xxx.yyy.1.9:3306 SYN ******S*
Jan 22 22:13:54 65.210.15.246:3873 -> xxx.yyy.1.11:3306 SYN ******S*
[...]
Jan 22 22:24:52 65.210.15.246:2780 -> xxx.yyy.255.245:3306 SYN ******S*
Jan 22 22:24:52 65.210.15.246:2781 -> xxx.yyy.255.246:3306 SYN ******S*
Jan 22 22:24:52 65.210.15.246:2783 -> xxx.yyy.255.248:3306 SYN ******S*
Jan 22 22:24:52 65.210.15.246:2784 -> xxx.yyy.255.249:3306 SYN ******S*
Jan 22 22:24:52 65.210.15.246:2785 -> xxx.yyy.255.250:3306 SYN ******S*
Jan 22 22:24:52 65.210.15.246:2786 -> xxx.yyy.255.251:3306 SYN ******S*
Jan 22 22:24:52 65.210.15.246:2787 -> xxx.yyy.255.252:3306 SYN ******S*
Jan 22 22:24:52 65.210.15.246:2788 -> xxx.yyy.255.253:3306 SYN ******S*
Jan 22 22:24:52 65.210.15.246:2789 -> xxx.yyy.255.254:3306 SYN ******S*
52930
Jan 22 14:42:37 65.162.1.154:1227 -> xxx.yyy.1.4:3306 SYN ******S*
Jan 22 14:42:34 65.162.1.154:1233 -> xxx.yyy.1.7:3306 SYN ******S*
Jan 22 14:42:34 65.162.1.154:1246 -> xxx.yyy.1.14:3306 SYN ******S*
Jan 22 14:42:34 65.162.1.154:1252 -> xxx.yyy.1.17:3306 SYN ******S*
Jan 22 14:42:35 65.162.1.154:1256 -> xxx.yyy.1.19:3306 SYN ******S*
Jan 22 14:42:35 65.162.1.154:1261 -> xxx.yyy.1.22:3306 SYN ******S*
Jan 22 14:42:37 65.162.1.154:1265 -> xxx.yyy.1.24:3306 SYN ******S*
Jan 22 14:42:34 65.162.1.154:1287 -> xxx.yyy.1.34:3306 SYN ******S*
[...]
Jan 22 14:48:17 65.162.1.154:2959 -> xxx.yyy.255.251:3306 SYN ******S*
Jan 22 14:48:17 65.162.1.154:2895 -> xxx.yyy.255.221:3306 SYN ******S*
Jan 22 14:48:17 65.162.1.154:2924 -> xxx.yyy.255.232:3306 SYN ******S*
Jan 22 14:48:17 65.162.1.154:2893 -> xxx.yyy.255.220:3306 SYN ******S*
Jan 22 14:48:17 65.162.1.154:2961 -> xxx.yyy.255.253:3306 SYN ******S*
Jan 22 14:48:17 65.162.1.154:2910 -> xxx.yyy.255.226:3306 SYN ******S*
Jan 22 14:48:17 65.162.1.154:2958 -> xxx.yyy.255.250:3306 SYN ******S*
Jan 22 14:48:17 65.162.1.154:2938 -> xxx.yyy.255.237:3306 SYN ******S*
46759
Jan 22 16:11:35 213.42.70.97:2631 -> xxx.yyy.1.1:42 SYN ******S*
Jan 22 16:11:35 213.42.70.97:2632 -> xxx.yyy.1.2:42 SYN ******S*
Jan 22 16:11:35 213.42.70.97:2636 -> xxx.yyy.1.6:42 SYN ******S*
Jan 22 16:11:38 213.42.70.97:2637 -> xxx.yyy.1.7:42 SYN ******S*
Jan 22 16:11:35 213.42.70.97:2640 -> xxx.yyy.1.10:42 SYN ******S*
Jan 22 16:11:38 213.42.70.97:2638 -> xxx.yyy.1.9:42 SYN ******S*
Jan 22 16:11:38 213.42.70.97:2641 -> xxx.yyy.1.11:42 SYN ******S*
Jan 22 16:11:35 213.42.70.97:2643 -> xxx.yyy.1.13:42 SYN ******S*
[...]
Jan 22 16:51:13 213.42.70.97:2761 -> xxx.yyy.255.229:42 SYN ******S*
Jan 22 16:51:13 213.42.70.97:2745 -> xxx.yyy.255.213:42 SYN ******S*
Jan 22 16:51:13 213.42.70.97:2758 -> xxx.yyy.255.226:42 SYN ******S*
Jan 22 16:51:16 213.42.70.97:2782 -> xxx.yyy.255.250:42 SYN ******S*
Jan 22 16:51:13 213.42.70.97:2783 -> xxx.yyy.255.251:42 SYN ******S*
Jan 22 16:51:16 213.42.70.97:2784 -> xxx.yyy.255.252:42 SYN ******S*
Jan 22 16:51:13 213.42.70.97:2786 -> xxx.yyy.255.254:42 SYN ******S*
Jan 22 16:51:16 213.42.70.97:2785 -> xxx.yyy.255.253:42 SYN ******S*
46131
Jan 22 17:30:49 61.152.169.216:2740 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 22 17:30:49 61.152.169.216:2741 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 22 17:30:46 61.152.169.216:2744 -> xxx.yyy.1.7:1433 SYN ******S*
Jan 22 17:30:49 61.152.169.216:2745 -> xxx.yyy.1.8:1433 SYN ******S*
Jan 22 17:30:49 61.152.169.216:2747 -> xxx.yyy.1.10:1433 SYN ******S*
Jan 22 17:30:49 61.152.169.216:2750 -> xxx.yyy.1.13:1433 SYN ******S*
Jan 22 17:30:49 61.152.169.216:2755 -> xxx.yyy.1.18:1433 SYN ******S*
Jan 22 17:30:46 61.152.169.216:2756 -> xxx.yyy.1.19:1433 SYN ******S*
[...]
Jan 22 17:42:29 61.152.169.216:1386 -> xxx.yyy.255.244:1433 SYN ******S*
Jan 22 17:42:29 61.152.169.216:1389 -> xxx.yyy.255.247:1433 SYN ******S*
Jan 22 17:42:29 61.152.169.216:1387 -> xxx.yyy.255.245:1433 SYN ******S*
Jan 22 17:42:29 61.152.169.216:1390 -> xxx.yyy.255.248:1433 SYN ******S*
Jan 22 17:42:29 61.152.169.216:1394 -> xxx.yyy.255.252:1433 SYN ******S*
Jan 22 17:42:29 61.152.169.216:1395 -> xxx.yyy.255.253:1433 SYN ******S*
Jan 22 17:42:29 61.152.169.216:1393 -> xxx.yyy.255.251:1433 SYN ******S*
Jan 22 17:42:29 61.152.169.216:1396 -> xxx.yyy.255.254:1433 SYN ******S*
46099
Jan 22 01:48:16 211.111.166.121:4067 -> xxx.yyy.1.1:4000 SYN ******S*
Jan 22 01:48:15 211.111.166.121:4071 -> xxx.yyy.1.5:4000 SYN ******S*
Jan 22 01:48:15 211.111.166.121:4073 -> xxx.yyy.1.6:4000 SYN ******S*
Jan 22 01:48:15 211.111.166.121:4070 -> xxx.yyy.1.4:4000 SYN ******S*
Jan 22 01:48:16 211.111.166.121:4069 -> xxx.yyy.1.3:4000 SYN ******S*
Jan 22 01:48:17 211.111.166.121:4075 -> xxx.yyy.1.8:4000 SYN ******S*
Jan 22 01:48:15 211.111.166.121:4079 -> xxx.yyy.1.12:4000 SYN ******S*
Jan 22 01:48:15 211.111.166.121:4085 -> xxx.yyy.1.18:4000 SYN ******S*
[...]
Jan 22 01:52:21 211.111.166.121:2457 -> xxx.yyy.255.184:4000 SYN ******S*
Jan 22 01:52:21 211.111.166.121:2484 -> xxx.yyy.255.211:4000 SYN ******S*
Jan 22 01:52:21 211.111.166.121:2524 -> xxx.yyy.255.251:4000 SYN ******S*
Jan 22 01:52:21 211.111.166.121:2477 -> xxx.yyy.255.204:4000 SYN ******S*
Jan 22 01:52:21 211.111.166.121:2445 -> xxx.yyy.255.172:4000 SYN ******S*
Jan 22 01:52:21 211.111.166.121:2461 -> xxx.yyy.255.188:4000 SYN ******S*
Jan 22 01:52:21 211.111.166.121:2437 -> xxx.yyy.255.164:4000 SYN ******S*
Jan 22 01:52:21 211.111.166.121:2513 -> xxx.yyy.255.240:4000 SYN ******S*
Jan 22 01:52:21 211.111.166.121:2469 -> xxx.yyy.255.196:4000 SYN ******S*
45631
Jan 22 12:13:38 212.25.121.49:63257 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 22 12:13:38 212.25.121.49:63260 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 22 12:13:38 212.25.121.49:63262 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 22 12:13:38 212.25.121.49:63263 -> xxx.yyy.1.7:1433 SYN ******S*
Jan 22 12:13:38 212.25.121.49:63264 -> xxx.yyy.1.8:1433 SYN ******S*
Jan 22 12:13:38 212.25.121.49:63265 -> xxx.yyy.1.9:1433 SYN ******S*
Jan 22 12:13:38 212.25.121.49:63268 -> xxx.yyy.1.12:1433 SYN ******S*
Jan 22 12:13:38 212.25.121.49:63267 -> xxx.yyy.1.11:1433 SYN ******S*
[...]
Jan 22 12:34:25 212.25.121.49:63374 -> xxx.yyy.255.245:1433 SYN ******S*
Jan 22 12:34:25 212.25.121.49:63376 -> xxx.yyy.255.247:1433 SYN ******S*
Jan 22 12:34:25 212.25.121.49:63375 -> xxx.yyy.255.246:1433 SYN ******S*
Jan 22 12:34:25 212.25.121.49:63377 -> xxx.yyy.255.248:1433 SYN ******S*
Jan 22 12:34:25 212.25.121.49:63378 -> xxx.yyy.255.249:1433 SYN ******S*
Jan 22 12:34:25 212.25.121.49:63381 -> xxx.yyy.255.252:1433 SYN ******S*
Jan 22 12:34:25 212.25.121.49:63379 -> xxx.yyy.255.250:1433 SYN ******S*
Jan 22 12:34:25 212.25.121.49:63382 -> xxx.yyy.255.253:1433 SYN ******S*
45423
Jan 22 02:03:52 64.230.7.87:3252 -> xxx.yyy.10.0:1433 SYN ******S*
Jan 22 02:03:52 64.230.7.87:3257 -> xxx.yyy.10.1:1433 SYN ******S*
Jan 22 02:03:52 64.230.7.87:3273 -> xxx.yyy.10.2:1433 SYN ******S*
Jan 22 02:03:52 64.230.7.87:3282 -> xxx.yyy.10.3:1433 SYN ******S*
Jan 22 02:03:52 64.230.7.87:3284 -> xxx.yyy.10.4:1433 SYN ******S*
Jan 22 02:03:52 64.230.7.87:3285 -> xxx.yyy.10.5:1433 SYN ******S*
Jan 22 02:03:52 64.230.7.87:3286 -> xxx.yyy.10.6:1433 SYN ******S*
Jan 22 02:03:52 64.230.7.87:3287 -> xxx.yyy.10.7:1433 SYN ******S*
[...]
Jan 22 04:07:05 64.230.7.87:3072 -> xxx.yyy.146.238:1433 SYN ******S*
Jan 22 04:07:05 64.230.7.87:3074 -> xxx.yyy.146.239:1433 SYN ******S*
Jan 22 04:07:05 64.230.7.87:3076 -> xxx.yyy.146.240:1433 SYN ******S*
Jan 22 04:07:05 64.230.7.87:3126 -> xxx.yyy.146.251:1433 SYN ******S*
Jan 22 04:07:05 64.230.7.87:3083 -> xxx.yyy.146.241:1433 SYN ******S*
Jan 22 04:07:05 64.230.7.87:3084 -> xxx.yyy.146.242:1433 SYN ******S*
Jan 22 04:07:05 64.230.7.87:3128 -> xxx.yyy.146.252:1433 SYN ******S*
Jan 22 04:07:06 64.230.7.87:3138 -> xxx.yyy.146.253:1433 SYN ******S*
Jan 22 04:07:06 64.230.7.87:3091 -> xxx.yyy.146.243:1433 SYN ******S*
45415
Jan 22 05:54:28 69.128.112.6:1590 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 22 05:54:29 69.128.112.6:1626 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 22 05:54:30 69.128.112.6:1774 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 22 05:54:30 69.128.112.6:1775 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 22 05:54:30 69.128.112.6:1776 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 22 05:54:30 69.128.112.6:1777 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 22 05:54:30 69.128.112.6:1778 -> xxx.yyy.1.7:1433 SYN ******S*
Jan 22 05:54:30 69.128.112.6:1779 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Jan 22 06:28:28 69.128.112.6:3335 -> xxx.yyy.255.247:1433 SYN ******S*
Jan 22 06:28:28 69.128.112.6:3336 -> xxx.yyy.255.248:1433 SYN ******S*
Jan 22 06:28:28 69.128.112.6:3337 -> xxx.yyy.255.249:1433 SYN ******S*
Jan 22 06:28:28 69.128.112.6:3341 -> xxx.yyy.255.250:1433 SYN ******S*
Jan 22 06:28:28 69.128.112.6:3342 -> xxx.yyy.255.251:1433 SYN ******S*
Jan 22 06:28:28 69.128.112.6:3343 -> xxx.yyy.255.252:1433 SYN ******S*
Jan 22 06:28:28 69.128.112.6:3344 -> xxx.yyy.255.253:1433 SYN ******S*
Jan 22 06:28:28 69.128.112.6:3357 -> xxx.yyy.255.254:1433 SYN ******S*
44118
Jan 22 18:39:53 212.50.178.199:2276 -> xxx.yyy.1.1:6101 SYN ******S*
Jan 22 18:39:50 212.50.178.199:2278 -> xxx.yyy.1.3:6101 SYN ******S*
Jan 22 18:39:50 212.50.178.199:2279 -> xxx.yyy.1.4:6101 SYN ******S*
Jan 22 18:39:50 212.50.178.199:2283 -> xxx.yyy.1.8:6101 SYN ******S*
Jan 22 18:39:50 212.50.178.199:2281 -> xxx.yyy.1.6:6101 SYN ******S*
Jan 22 18:39:50 212.50.178.199:2280 -> xxx.yyy.1.5:6101 SYN ******S*
Jan 22 18:39:50 212.50.178.199:2282 -> xxx.yyy.1.7:6101 SYN ******S*
Jan 22 18:39:50 212.50.178.199:2287 -> xxx.yyy.1.12:6101 SYN ******S*
[...]
Jan 22 18:43:38 212.50.178.199:1930 -> xxx.yyy.255.160:6101 SYN ******S*
Jan 22 18:43:38 212.50.178.199:1972 -> xxx.yyy.255.202:6101 SYN ******S*
Jan 22 18:43:38 212.50.178.199:2004 -> xxx.yyy.255.234:6101 SYN ******S*
Jan 22 18:43:38 212.50.178.199:1991 -> xxx.yyy.255.221:6101 SYN ******S*
Jan 22 18:43:38 212.50.178.199:1944 -> xxx.yyy.255.174:6101 SYN ******S*
Jan 22 18:43:38 212.50.178.199:1915 -> xxx.yyy.255.145:6101 SYN ******S*
Jan 22 18:43:38 212.50.178.199:1989 -> xxx.yyy.255.219:6101 SYN ******S*
Jan 22 18:43:38 212.50.178.199:2029 -> xxx.yyy.255.246:6101 SYN ******S*
42207
Jan 22 00:00:04 61.50.171.34:4547 -> xxx.yyy.185.153:1433 SYN ******S*
Jan 22 00:00:04 61.50.171.34:4428 -> xxx.yyy.185.121:1433 SYN ******S*
Jan 22 00:00:04 61.50.171.34:4432 -> xxx.yyy.185.122:1433 SYN ******S*
Jan 22 00:00:04 61.50.171.34:4576 -> xxx.yyy.185.156:1433 SYN ******S*
Jan 22 00:00:04 61.50.171.34:4438 -> xxx.yyy.185.124:1433 SYN ******S*
Jan 22 00:00:04 61.50.171.34:4577 -> xxx.yyy.185.157:1433 SYN ******S*
Jan 22 00:00:05 61.50.171.34:4581 -> xxx.yyy.185.159:1433 SYN ******S*
Jan 22 00:00:05 61.50.171.34:4596 -> xxx.yyy.185.160:1433 SYN ******S*
[...]
Jan 22 01:03:16 61.50.171.34:3497 -> xxx.yyy.255.247:1433 SYN ******S*
Jan 22 01:03:16 61.50.171.34:3501 -> xxx.yyy.255.248:1433 SYN ******S*
Jan 22 01:03:16 61.50.171.34:3512 -> xxx.yyy.255.250:1433 SYN ******S*
Jan 22 01:03:16 61.50.171.34:3513 -> xxx.yyy.255.251:1433 SYN ******S*
Jan 22 01:03:16 61.50.171.34:3511 -> xxx.yyy.255.249:1433 SYN ******S*
Jan 22 01:03:16 61.50.171.34:3516 -> xxx.yyy.255.252:1433 SYN ******S*
Jan 22 01:03:17 61.50.171.34:3524 -> xxx.yyy.255.253:1433 SYN ******S*
Jan 22 01:03:17 61.50.171.34:3527 -> xxx.yyy.255.254:1433 SYN ******S*
39855
Jan 22 17:35:22 146.164.16.214:4033 -> xxx.yyy.1.3:3306 SYN ******S*
Jan 22 17:35:22 146.164.16.214:4032 -> xxx.yyy.1.2:3306 SYN ******S*
Jan 22 17:35:20 146.164.16.214:4034 -> xxx.yyy.1.4:3306 SYN ******S*
Jan 22 17:35:20 146.164.16.214:4037 -> xxx.yyy.1.7:3306 SYN ******S*
Jan 22 17:35:22 146.164.16.214:4031 -> xxx.yyy.1.1:3306 SYN ******S*
Jan 22 17:35:21 146.164.16.214:4039 -> xxx.yyy.1.9:3306 SYN ******S*
Jan 22 17:35:20 146.164.16.214:4040 -> xxx.yyy.1.10:3306 SYN ******S*
Jan 22 17:35:22 146.164.16.214:4046 -> xxx.yyy.1.16:3306 SYN ******S*
[...]
Jan 22 17:39:25 146.164.16.214:4932 -> xxx.yyy.255.206:3306 SYN ******S*
Jan 22 17:39:25 146.164.16.214:4935 -> xxx.yyy.255.209:3306 SYN ******S*
Jan 22 17:39:25 146.164.16.214:4975 -> xxx.yyy.255.247:3306 SYN ******S*
Jan 22 17:39:25 146.164.16.214:4896 -> xxx.yyy.255.179:3306 SYN ******S*
Jan 22 17:39:25 146.164.16.214:4979 -> xxx.yyy.255.251:3306 SYN ******S*
Jan 22 17:39:25 146.164.16.214:4980 -> xxx.yyy.255.252:3306 SYN ******S*
Jan 22 17:39:25 146.164.16.214:4982 -> xxx.yyy.255.254:3306 SYN ******S*
Jan 22 17:39:25 146.164.16.214:4981 -> xxx.yyy.255.253:3306 SYN ******S*
39528
Jan 22 13:36:27 211.53.183.250:3063 -> xxx.yyy.1.2:139 SYN ******S*
Jan 22 13:36:33 211.53.183.250:3066 -> xxx.yyy.1.3:139 SYN ******S*
Jan 22 13:36:33 211.53.183.250:3108 -> xxx.yyy.1.9:139 SYN ******S*
Jan 22 13:36:30 211.53.183.250:3068 -> xxx.yyy.1.5:139 SYN ******S*
Jan 22 13:36:33 211.53.183.250:3106 -> xxx.yyy.1.7:139 SYN ******S*
Jan 22 13:36:33 211.53.183.250:3109 -> xxx.yyy.1.10:139 SYN ******S*
Jan 22 13:36:33 211.53.183.250:3107 -> xxx.yyy.1.8:139 SYN ******S*
Jan 22 13:36:30 211.53.183.250:3119 -> xxx.yyy.1.20:139 SYN ******S*
[...]
Jan 22 13:45:21 211.53.183.250:1860 -> xxx.yyy.255.223:139 SYN ******S*
Jan 22 13:45:21 211.53.183.250:1854 -> xxx.yyy.255.217:139 SYN ******S*
Jan 22 13:45:21 211.53.183.250:1835 -> xxx.yyy.255.198:139 SYN ******S*
Jan 22 13:45:21 211.53.183.250:1825 -> xxx.yyy.255.188:139 SYN ******S*
Jan 22 13:45:21 211.53.183.250:1806 -> xxx.yyy.255.169:139 SYN ******S*
Jan 22 13:45:21 211.53.183.250:1846 -> xxx.yyy.255.209:139 SYN ******S*
Jan 22 13:45:21 211.53.183.250:1878 -> xxx.yyy.255.241:139 SYN ******S*
Jan 22 13:45:21 211.53.183.250:1889 -> xxx.yyy.255.252:139 SYN ******S*
Jan 22 13:45:21 211.53.183.250:1891 -> xxx.yyy.255.254:139 SYN ******S*
35699
Jan 22 23:23:04 211.63.95.57:3544 -> xxx.yyy.1.1:3306 SYN ******S*
Jan 22 23:23:04 211.63.95.57:3548 -> xxx.yyy.1.5:3306 SYN ******S*
Jan 22 23:23:07 211.63.95.57:3549 -> xxx.yyy.1.6:3306 SYN ******S*
Jan 22 23:23:04 211.63.95.57:3545 -> xxx.yyy.1.2:3306 SYN ******S*
Jan 22 23:23:05 211.63.95.57:3552 -> xxx.yyy.1.9:3306 SYN ******S*
Jan 22 23:23:07 211.63.95.57:3556 -> xxx.yyy.1.13:3306 SYN ******S*
Jan 22 23:23:04 211.63.95.57:3554 -> xxx.yyy.1.11:3306 SYN ******S*
Jan 22 23:23:04 211.63.95.57:3551 -> xxx.yyy.1.8:3306 SYN ******S*
[...]
Jan 22 23:27:16 211.63.95.57:1613 -> xxx.yyy.255.242:3306 SYN ******S*
Jan 22 23:27:16 211.63.95.57:1616 -> xxx.yyy.255.245:3306 SYN ******S*
Jan 22 23:27:16 211.63.95.57:1620 -> xxx.yyy.255.249:3306 SYN ******S*
Jan 22 23:27:16 211.63.95.57:1623 -> xxx.yyy.255.252:3306 SYN ******S*
Jan 22 23:27:16 211.63.95.57:1617 -> xxx.yyy.255.246:3306 SYN ******S*
Jan 22 23:27:16 211.63.95.57:1614 -> xxx.yyy.255.243:3306 SYN ******S*
Jan 22 23:27:16 211.63.95.57:1610 -> xxx.yyy.255.239:3306 SYN ******S*
Jan 22 23:27:16 211.63.95.57:1618 -> xxx.yyy.255.247:3306 SYN ******S*
28983
Jan 22 16:57:12 131.211.212.8:4402 -> xxx.yyy.1.1:3306 SYN ******S*
Jan 22 16:57:12 131.211.212.8:4403 -> xxx.yyy.1.2:3306 SYN ******S*
Jan 22 16:57:12 131.211.212.8:4415 -> xxx.yyy.1.5:3306 SYN ******S*
Jan 22 16:57:12 131.211.212.8:4449 -> xxx.yyy.1.12:3306 SYN ******S*
Jan 22 16:57:12 131.211.212.8:4452 -> xxx.yyy.1.13:3306 SYN ******S*
Jan 22 16:57:12 131.211.212.8:4459 -> xxx.yyy.1.15:3306 SYN ******S*
Jan 22 16:57:12 131.211.212.8:4499 -> xxx.yyy.1.23:3306 SYN ******S*
Jan 22 16:57:12 131.211.212.8:4509 -> xxx.yyy.1.24:3306 SYN ******S*
[...]
Jan 22 17:14:08 131.211.212.8:1315 -> xxx.yyy.255.234:3306 SYN ******S*
Jan 22 17:14:08 131.211.212.8:1321 -> xxx.yyy.255.237:3306 SYN ******S*
Jan 22 17:14:08 131.211.212.8:1325 -> xxx.yyy.255.239:3306 SYN ******S*
Jan 22 17:14:08 131.211.212.8:1327 -> xxx.yyy.255.240:3306 SYN ******S*
Jan 22 17:14:08 131.211.212.8:1329 -> xxx.yyy.255.241:3306 SYN ******S*
Jan 22 17:14:08 131.211.212.8:1335 -> xxx.yyy.255.244:3306 SYN ******S*
Jan 22 17:14:08 131.211.212.8:1337 -> xxx.yyy.255.245:3306 SYN ******S*
Jan 22 17:14:09 131.211.212.8:1353 -> xxx.yyy.255.253:3306 SYN ******S*
Jan 22 17:14:09 131.211.212.8:1355 -> xxx.yyy.255.254:3306 SYN ******S*
28272
[...]
24119
[...]
21899
Jan 22 22:38:26 82.42.41.69:3102 -> xxx.yyy.1.0:1433 SYN ******S*
Jan 22 22:38:26 82.42.41.69:3104 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 22 22:38:26 82.42.41.69:3106 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 22 22:38:26 82.42.41.69:3108 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 22 22:38:26 82.42.41.69:3111 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 22 22:38:29 82.42.41.69:3124 -> xxx.yyy.1.11:1433 SYN ******S*
Jan 22 22:38:29 82.42.41.69:3120 -> xxx.yyy.1.10:1433 SYN ******S*
Jan 22 22:38:29 82.42.41.69:3123 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
Jan 23 00:00:01 82.42.41.69:3426 -> xxx.yyy.91.193:1433 SYN ******S*
Jan 23 00:00:01 82.42.41.69:3450 -> xxx.yyy.91.205:1433 SYN ******S*
Jan 23 00:00:01 82.42.41.69:3449 -> xxx.yyy.91.204:1433 SYN ******S*
Jan 23 00:00:01 82.42.41.69:3448 -> xxx.yyy.91.203:1433 SYN ******S*
Jan 23 00:00:01 82.42.41.69:3447 -> xxx.yyy.91.202:1433 SYN ******S*
Jan 23 00:00:01 82.42.41.69:3445 -> xxx.yyy.91.201:1433 SYN ******S*
Jan 23 00:00:01 82.42.41.69:3443 -> xxx.yyy.91.200:1433 SYN ******S*
Jan 23 00:00:01 82.42.41.69:3453 -> xxx.yyy.91.207:1433 SYN ******S*
21823
Jan 22 10:15:15 211.141.89.73:43941 -> xxx.yyy.1.1:22 SYN ******S*
Jan 22 10:15:15 211.141.89.73:43943 -> xxx.yyy.1.3:22 SYN ******S*
Jan 22 10:15:15 211.141.89.73:43944 -> xxx.yyy.1.4:22 SYN ******S*
Jan 22 10:15:15 211.141.89.73:43945 -> xxx.yyy.1.5:22 SYN ******S*
Jan 22 10:15:15 211.141.89.73:43940 -> xxx.yyy.1.0:22 SYN ******S*
Jan 22 10:15:15 211.141.89.73:43942 -> xxx.yyy.1.2:22 SYN ******S*
Jan 22 10:15:15 211.141.89.73:43946 -> xxx.yyy.1.6:22 SYN ******S*
Jan 22 10:15:15 211.141.89.73:43949 -> xxx.yyy.1.9:22 SYN ******S*
[...]
Jan 22 10:37:42 211.141.89.73:40856 -> xxx.yyy.206.216:22 SYN ******S*
Jan 22 10:37:42 211.141.89.73:40857 -> xxx.yyy.229.98:22 SYN ******S*
Jan 22 10:37:43 211.141.89.73:41755 -> xxx.yyy.140.99:22 SYN ******S*
Jan 22 10:37:43 211.141.89.73:42154 -> xxx.yyy.230.40:22 SYN ******S*
Jan 22 10:37:46 211.141.89.73:45234 -> xxx.yyy.232.147:22 SYN ******S*
Jan 22 10:37:46 211.141.89.73:46044 -> xxx.yyy.248.18:22 SYN ******S*
Jan 22 10:37:48 211.141.89.73:51921 -> xxx.yyy.229.98:22 SYN ******S*
Jan 22 10:37:50 211.141.89.73:56739 -> xxx.yyy.230.40:22 SYN ******S*
20071
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list