[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Tue Mar 1 16:44:28 GMT 2005
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Feb 27 04:16:24 61.236.123.98:12438 -> xxx.yyy.150.134:8080 SYN ******S*
Feb 27 04:16:24 61.236.123.98:12615 -> xxx.yyy.150.134:80 SYN ******S*
Feb 27 04:16:21 61.236.123.98:12293 -> xxx.yyy.150.134:8000 SYN ******S*
Feb 27 04:16:24 61.236.123.98:14118 -> xxx.yyy.150.134:8888 SYN ******S*
Feb 27 04:16:24 61.236.123.98:13742 -> xxx.yyy.150.134:10080 SYN ******S*
Feb 27 04:16:24 61.236.123.98:12460 -> xxx.yyy.150.134:81 SYN ******S*
Feb 27 04:16:24 61.236.123.98:14072 -> xxx.yyy.150.134:3128 SYN ******S*
Feb 27 04:16:24 61.236.123.98:13257 -> xxx.yyy.150.134:1080 SYN ******S*
[...]
Feb 27 07:36:26 61.236.123.98:13900 -> xxx.yyy.171.114:1080 SYN ******S*
Feb 27 07:36:26 61.236.123.98:12869 -> xxx.yyy.171.114:80 SYN ******S*
Feb 27 07:36:26 61.236.123.98:14087 -> xxx.yyy.171.114:8000 SYN ******S*
Feb 27 07:36:26 61.236.123.98:12527 -> xxx.yyy.171.114:10080 SYN ******S*
Feb 27 07:36:26 61.236.123.98:12380 -> xxx.yyy.171.115:8080 SYN ******S*
Feb 27 07:36:26 61.236.123.98:13593 -> xxx.yyy.171.115:80 SYN ******S*
Feb 27 07:36:26 61.236.123.98:13221 -> xxx.yyy.171.115:8000 SYN ******S*
Feb 27 07:36:27 61.236.123.98:13066 -> xxx.yyy.171.115:8888 SYN ******S*
Feb 27 07:36:27 61.236.123.98:12631 -> xxx.yyy.171.115:10080 SYN ******S*
143482
[...]
112299
Feb 27 05:58:06 151.201.138.122:3189 -> xxx.yyy.1.1:3306 SYN ******S*
Feb 27 05:58:06 151.201.138.122:3259 -> xxx.yyy.1.3:3306 SYN ******S*
Feb 27 05:58:07 151.201.138.122:3321 -> xxx.yyy.1.4:3306 SYN ******S*
Feb 27 05:58:04 151.201.138.122:3404 -> xxx.yyy.1.5:3306 SYN ******S*
Feb 27 05:58:07 151.201.138.122:3470 -> xxx.yyy.1.6:3306 SYN ******S*
Feb 27 05:58:07 151.201.138.122:3614 -> xxx.yyy.1.7:3306 SYN ******S*
Feb 27 05:58:08 151.201.138.122:3711 -> xxx.yyy.1.9:3306 SYN ******S*
Feb 27 05:58:05 151.201.138.122:3734 -> xxx.yyy.1.10:3306 SYN ******S*
[...]
Feb 27 16:53:28 151.201.138.122:1219 -> xxx.yyy.255.233:3306 SYN ******S*
Feb 27 16:53:28 151.201.138.122:1311 -> xxx.yyy.255.236:3306 SYN ******S*
Feb 27 16:53:28 151.201.138.122:1335 -> xxx.yyy.255.238:3306 SYN ******S*
Feb 27 16:53:28 151.201.138.122:1353 -> xxx.yyy.255.239:3306 SYN ******S*
Feb 27 16:53:28 151.201.138.122:1399 -> xxx.yyy.255.241:3306 SYN ******S*
Feb 27 16:53:29 151.201.138.122:1444 -> xxx.yyy.255.242:3306 SYN ******S*
Feb 27 16:53:29 151.201.138.122:1515 -> xxx.yyy.255.245:3306 SYN ******S*
Feb 27 16:53:29 151.201.138.122:1586 -> xxx.yyy.255.248:3306 SYN ******S*
Feb 27 16:53:29 151.201.138.122:1725 -> xxx.yyy.255.254:3306 SYN ******S*
101906
Feb 27 04:19:58 61.138.238.195:1481 -> xxx.yyy.1.0:1433 SYN ******S*
Feb 27 04:19:58 61.138.238.195:1486 -> xxx.yyy.1.2:1433 SYN ******S*
Feb 27 04:19:58 61.138.238.195:1491 -> xxx.yyy.1.4:1433 SYN ******S*
Feb 27 04:20:01 61.138.238.195:1493 -> xxx.yyy.1.5:1433 SYN ******S*
Feb 27 04:20:01 61.138.238.195:1495 -> xxx.yyy.1.6:1433 SYN ******S*
Feb 27 04:20:01 61.138.238.195:1496 -> xxx.yyy.1.7:1433 SYN ******S*
Feb 27 04:20:01 61.138.238.195:1498 -> xxx.yyy.1.9:1433 SYN ******S*
Feb 27 04:20:01 61.138.238.195:1500 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
Feb 27 08:06:06 61.138.238.195:3008 -> xxx.yyy.253.50:1433 SYN ******S*
Feb 27 08:06:06 61.138.238.195:3013 -> xxx.yyy.253.53:1433 SYN ******S*
Feb 27 08:06:06 61.138.238.195:3016 -> xxx.yyy.253.54:1433 SYN ******S*
Feb 27 08:06:06 61.138.238.195:3017 -> xxx.yyy.253.55:1433 SYN ******S*
Feb 27 08:06:07 61.138.238.195:2968 -> xxx.yyy.253.37:1433 SYN ******S*
Feb 27 08:06:07 61.138.238.195:2971 -> xxx.yyy.253.38:1433 SYN ******S*
Feb 27 08:06:07 61.138.238.195:3020 -> xxx.yyy.253.56:1433 SYN ******S*
Feb 27 08:06:07 61.138.238.195:3024 -> xxx.yyy.253.58:1433 SYN ******S*
Feb 27 08:06:07 61.138.238.195:2978 -> xxx.yyy.253.39:1433 SYN ******S*
97643
Feb 27 03:45:21 128.218.125.46:1256 -> xxx.yyy.1.2:1433 SYN ******S*
Feb 27 03:45:21 128.218.125.46:1257 -> xxx.yyy.1.3:1433 SYN ******S*
Feb 27 03:45:21 128.218.125.46:1258 -> xxx.yyy.1.4:1433 SYN ******S*
Feb 27 03:45:21 128.218.125.46:1259 -> xxx.yyy.1.5:1433 SYN ******S*
Feb 27 03:45:18 128.218.125.46:1261 -> xxx.yyy.1.7:1433 SYN ******S*
Feb 27 03:45:18 128.218.125.46:1262 -> xxx.yyy.1.8:1433 SYN ******S*
Feb 27 03:45:21 128.218.125.46:1263 -> xxx.yyy.1.9:1433 SYN ******S*
Feb 27 03:45:21 128.218.125.46:1264 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
Feb 27 03:57:28 128.218.125.46:3451 -> xxx.yyy.255.241:1433 SYN ******S*
Feb 27 03:57:28 128.218.125.46:3461 -> xxx.yyy.255.251:1433 SYN ******S*
Feb 27 03:57:28 128.218.125.46:3458 -> xxx.yyy.255.248:1433 SYN ******S*
Feb 27 03:57:28 128.218.125.46:3459 -> xxx.yyy.255.249:1433 SYN ******S*
Feb 27 03:57:28 128.218.125.46:3456 -> xxx.yyy.255.246:1433 SYN ******S*
Feb 27 03:57:28 128.218.125.46:3460 -> xxx.yyy.255.250:1433 SYN ******S*
Feb 27 03:57:28 128.218.125.46:3457 -> xxx.yyy.255.247:1433 SYN ******S*
Feb 27 03:57:28 128.218.125.46:3464 -> xxx.yyy.255.254:1433 SYN ******S*
70621
Feb 27 03:00:57 24.23.239.20:3277 -> xxx.yyy.1.1:3306 SYN ******S*
Feb 27 03:00:57 24.23.239.20:3278 -> xxx.yyy.1.2:3306 SYN ******S*
Feb 27 03:00:57 24.23.239.20:3279 -> xxx.yyy.1.3:3306 SYN ******S*
Feb 27 03:00:57 24.23.239.20:3280 -> xxx.yyy.1.4:3306 SYN ******S*
Feb 27 03:00:57 24.23.239.20:3281 -> xxx.yyy.1.5:3306 SYN ******S*
Feb 27 03:00:57 24.23.239.20:3282 -> xxx.yyy.1.6:3306 SYN ******S*
Feb 27 03:00:57 24.23.239.20:3283 -> xxx.yyy.1.7:3306 SYN ******S*
Feb 27 03:00:54 24.23.239.20:3284 -> xxx.yyy.1.8:3306 SYN ******S*
[...]
Feb 27 03:12:35 24.23.239.20:2078 -> xxx.yyy.255.243:3306 SYN ******S*
Feb 27 03:12:35 24.23.239.20:2086 -> xxx.yyy.255.251:3306 SYN ******S*
Feb 27 03:12:35 24.23.239.20:2084 -> xxx.yyy.255.249:3306 SYN ******S*
Feb 27 03:12:35 24.23.239.20:2083 -> xxx.yyy.255.248:3306 SYN ******S*
Feb 27 03:12:35 24.23.239.20:2085 -> xxx.yyy.255.250:3306 SYN ******S*
Feb 27 03:12:35 24.23.239.20:2089 -> xxx.yyy.255.254:3306 SYN ******S*
Feb 27 03:12:35 24.23.239.20:2087 -> xxx.yyy.255.252:3306 SYN ******S*
Feb 27 03:12:35 24.23.239.20:2088 -> xxx.yyy.255.253:3306 SYN ******S*
67930
Feb 27 20:49:50 24.173.5.111:2059 -> xxx.yyy.1.1:1433 SYN ******S*
Feb 27 20:49:50 24.173.5.111:2062 -> xxx.yyy.1.4:1433 SYN ******S*
Feb 27 20:49:47 24.173.5.111:2063 -> xxx.yyy.1.5:1433 SYN ******S*
Feb 27 20:49:50 24.173.5.111:2064 -> xxx.yyy.1.6:1433 SYN ******S*
Feb 27 20:49:50 24.173.5.111:2068 -> xxx.yyy.1.10:1433 SYN ******S*
Feb 27 20:49:47 24.173.5.111:2067 -> xxx.yyy.1.9:1433 SYN ******S*
Feb 27 20:49:50 24.173.5.111:2072 -> xxx.yyy.1.14:1433 SYN ******S*
Feb 27 20:49:50 24.173.5.111:2074 -> xxx.yyy.1.15:1433 SYN ******S*
[...]
Feb 27 22:53:20 24.173.5.111:4272 -> xxx.yyy.255.245:1433 SYN ******S*
Feb 27 22:53:20 24.173.5.111:4274 -> xxx.yyy.255.247:1433 SYN ******S*
Feb 27 22:53:20 24.173.5.111:4271 -> xxx.yyy.255.244:1433 SYN ******S*
Feb 27 22:53:20 24.173.5.111:4276 -> xxx.yyy.255.249:1433 SYN ******S*
Feb 27 22:53:20 24.173.5.111:4275 -> xxx.yyy.255.248:1433 SYN ******S*
Feb 27 22:53:20 24.173.5.111:4279 -> xxx.yyy.255.250:1433 SYN ******S*
Feb 27 22:53:20 24.173.5.111:4296 -> xxx.yyy.255.253:1433 SYN ******S*
Feb 27 22:53:20 24.173.5.111:4298 -> xxx.yyy.255.254:1433 SYN ******S*
65618
Feb 27 03:10:29 24.23.239.20:1394 -> xxx.yyy.209.254:3306 SYN ******S*
Feb 27 03:55:14 128.218.125.46:2827 -> xxx.yyy.209.254:1433 SYN ******S*
Feb 27 03:55:17 128.218.125.46:2827 -> xxx.yyy.209.254:1433 SYN ******S*
Feb 27 07:27:20 61.138.238.195:1390 -> xxx.yyy.209.254:1433 SYN ******S*
Feb 27 07:27:23 61.138.238.195:1390 -> xxx.yyy.209.254:1433 SYN ******S*
Feb 27 07:27:29 61.138.238.195:1390 -> xxx.yyy.209.254:1433 SYN ******S*
Feb 27 08:17:16 xxx.yyy.209.254:2716 -> xxx.yyy.0.1:135 SYN ******S*
Feb 27 08:17:16 xxx.yyy.209.254:2717 -> xxx.yyy.0.2:135 SYN ******S*
[...]
Feb 27 08:49:04 xxx.yyy.209.254:3833 -> xxx.yyy.127.250:135 SYN ******S*
Feb 27 08:49:04 xxx.yyy.209.254:3836 -> xxx.yyy.127.253:135 SYN ******S*
Feb 27 08:49:04 xxx.yyy.209.254:3835 -> xxx.yyy.127.252:135 SYN ******S*
Feb 27 08:49:04 xxx.yyy.209.254:3838 -> xxx.yyy.127.255:135 SYN ******S*
Feb 27 08:49:04 xxx.yyy.209.254:3837 -> xxx.yyy.127.254:135 SYN ******S*
Feb 27 16:12:52 62.58.132.37:4028 -> xxx.yyy.209.254:80 SYN ******S*
Feb 27 20:09:56 61.250.149.104:3709 -> xxx.yyy.209.254:3306 SYN ******S*
Feb 27 22:30:16 24.173.5.111:1284 -> xxx.yyy.209.254:1433 SYN ******S*
Feb 27 23:42:51 216.176.188.82:2519 -> xxx.yyy.209.254:3306 SYN ******S*
45811
Feb 27 23:33:57 216.176.188.82:3494 -> xxx.yyy.1.1:3306 SYN ******S*
Feb 27 23:33:57 216.176.188.82:3495 -> xxx.yyy.1.2:3306 SYN ******S*
Feb 27 23:33:54 216.176.188.82:3500 -> xxx.yyy.1.7:3306 SYN ******S*
Feb 27 23:33:54 216.176.188.82:3502 -> xxx.yyy.1.9:3306 SYN ******S*
Feb 27 23:33:57 216.176.188.82:3504 -> xxx.yyy.1.11:3306 SYN ******S*
Feb 27 23:33:57 216.176.188.82:3505 -> xxx.yyy.1.12:3306 SYN ******S*
Feb 27 23:33:57 216.176.188.82:3506 -> xxx.yyy.1.13:3306 SYN ******S*
Feb 27 23:33:54 216.176.188.82:3507 -> xxx.yyy.1.14:3306 SYN ******S*
[...]
Feb 27 23:44:54 216.176.188.82:3350 -> xxx.yyy.255.205:3306 SYN ******S*
Feb 27 23:44:54 216.176.188.82:3341 -> xxx.yyy.255.197:3306 SYN ******S*
Feb 27 23:44:54 216.176.188.82:3362 -> xxx.yyy.255.217:3306 SYN ******S*
Feb 27 23:44:54 216.176.188.82:3363 -> xxx.yyy.255.218:3306 SYN ******S*
Feb 27 23:44:54 216.176.188.82:3364 -> xxx.yyy.255.219:3306 SYN ******S*
Feb 27 23:44:55 216.176.188.82:3398 -> xxx.yyy.255.252:3306 SYN ******S*
Feb 27 23:44:55 216.176.188.82:3397 -> xxx.yyy.255.251:3306 SYN ******S*
Feb 27 23:44:55 216.176.188.82:3399 -> xxx.yyy.255.253:3306 SYN ******S*
43432
Feb 27 20:00:20 61.250.149.104:2522 -> xxx.yyy.1.3:3306 SYN ******S*
Feb 27 20:00:20 61.250.149.104:2523 -> xxx.yyy.1.4:3306 SYN ******S*
Feb 27 20:00:20 61.250.149.104:2526 -> xxx.yyy.1.5:3306 SYN ******S*
Feb 27 20:00:20 61.250.149.104:2527 -> xxx.yyy.1.6:3306 SYN ******S*
Feb 27 20:00:23 61.250.149.104:2528 -> xxx.yyy.1.7:3306 SYN ******S*
Feb 27 20:00:20 61.250.149.104:2529 -> xxx.yyy.1.8:3306 SYN ******S*
Feb 27 20:00:23 61.250.149.104:2531 -> xxx.yyy.1.10:3306 SYN ******S*
Feb 27 20:00:23 61.250.149.104:2533 -> xxx.yyy.1.12:3306 SYN ******S*
[...]
Feb 27 20:12:02 61.250.149.104:2690 -> xxx.yyy.255.241:3306 SYN ******S*
Feb 27 20:12:02 61.250.149.104:2688 -> xxx.yyy.255.239:3306 SYN ******S*
Feb 27 20:12:02 61.250.149.104:2703 -> xxx.yyy.255.254:3306 SYN ******S*
Feb 27 20:12:02 61.250.149.104:2702 -> xxx.yyy.255.253:3306 SYN ******S*
Feb 27 20:12:02 61.250.149.104:2699 -> xxx.yyy.255.250:3306 SYN ******S*
Feb 27 20:12:02 61.250.149.104:2700 -> xxx.yyy.255.251:3306 SYN ******S*
Feb 27 20:12:02 61.250.149.104:2701 -> xxx.yyy.255.252:3306 SYN ******S*
Feb 27 20:12:02 61.250.149.104:2698 -> xxx.yyy.255.249:3306 SYN ******S*
42862
Feb 27 18:39:08 218.7.134.17:3800 -> xxx.yyy.1.1:1433 SYN ******S*
Feb 27 18:39:08 218.7.134.17:3810 -> xxx.yyy.1.2:1433 SYN ******S*
Feb 27 18:39:05 218.7.134.17:3816 -> xxx.yyy.1.5:1433 SYN ******S*
Feb 27 18:39:05 218.7.134.17:3818 -> xxx.yyy.1.6:1433 SYN ******S*
Feb 27 18:39:05 218.7.134.17:3820 -> xxx.yyy.1.7:1433 SYN ******S*
Feb 27 18:39:08 218.7.134.17:3826 -> xxx.yyy.1.9:1433 SYN ******S*
Feb 27 18:39:08 218.7.134.17:3829 -> xxx.yyy.1.10:1433 SYN ******S*
Feb 27 18:39:08 218.7.134.17:3832 -> xxx.yyy.1.11:1433 SYN ******S*
[...]
Feb 27 21:13:08 218.7.134.17:4122 -> xxx.yyy.172.161:1433 SYN ******S*
Feb 27 21:13:08 218.7.134.17:4123 -> xxx.yyy.172.162:1433 SYN ******S*
Feb 27 21:13:08 218.7.134.17:4144 -> xxx.yyy.172.167:1433 SYN ******S*
Feb 27 21:13:08 218.7.134.17:4143 -> xxx.yyy.172.166:1433 SYN ******S*
Feb 27 21:13:08 218.7.134.17:4141 -> xxx.yyy.172.164:1433 SYN ******S*
Feb 27 21:13:09 218.7.134.17:4145 -> xxx.yyy.172.168:1433 SYN ******S*
Feb 27 21:13:09 218.7.134.17:4168 -> xxx.yyy.172.174:1433 SYN ******S*
Feb 27 21:13:09 218.7.134.17:4166 -> xxx.yyy.172.173:1433 SYN ******S*
37871
Feb 27 12:15:50 159.178.101.50:1961 -> xxx.yyy.1.1:4899 SYN ******S*
Feb 27 12:15:50 159.178.101.50:1962 -> xxx.yyy.1.2:4899 SYN ******S*
Feb 27 12:15:50 159.178.101.50:1963 -> xxx.yyy.1.3:4899 SYN ******S*
Feb 27 12:15:49 159.178.101.50:1964 -> xxx.yyy.1.4:4899 SYN ******S*
Feb 27 12:15:52 159.178.101.50:1965 -> xxx.yyy.1.5:4899 SYN ******S*
Feb 27 12:15:49 159.178.101.50:1966 -> xxx.yyy.1.6:4899 SYN ******S*
Feb 27 12:15:52 159.178.101.50:1967 -> xxx.yyy.1.7:4899 SYN ******S*
Feb 27 12:15:50 159.178.101.50:1968 -> xxx.yyy.1.8:4899 SYN ******S*
[...]
Feb 27 12:20:13 159.178.101.50:1919 -> xxx.yyy.255.201:4899 SYN ******S*
Feb 27 12:20:13 159.178.101.50:1937 -> xxx.yyy.255.216:4899 SYN ******S*
Feb 27 12:20:13 159.178.101.50:1945 -> xxx.yyy.255.219:4899 SYN ******S*
Feb 27 12:20:14 159.178.101.50:1965 -> xxx.yyy.255.241:4899 SYN ******S*
Feb 27 12:20:14 159.178.101.50:1970 -> xxx.yyy.255.244:4899 SYN ******S*
Feb 27 12:20:14 159.178.101.50:1973 -> xxx.yyy.255.247:4899 SYN ******S*
Feb 27 12:20:14 159.178.101.50:1960 -> xxx.yyy.255.239:4899 SYN ******S*
Feb 27 12:20:14 159.178.101.50:1957 -> xxx.yyy.255.236:4899 SYN ******S*
36666
Feb 27 16:03:47 62.58.132.37:2162 -> xxx.yyy.1.1:80 SYN ******S*
Feb 27 16:03:46 62.58.132.37:2163 -> xxx.yyy.1.2:80 SYN ******S*
Feb 27 16:03:45 62.58.132.37:2166 -> xxx.yyy.1.5:80 SYN ******S*
Feb 27 16:03:45 62.58.132.37:2167 -> xxx.yyy.1.6:80 SYN ******S*
Feb 27 16:03:46 62.58.132.37:2171 -> xxx.yyy.1.10:80 SYN ******S*
Feb 27 16:03:47 62.58.132.37:2177 -> xxx.yyy.1.16:80 SYN ******S*
Feb 27 16:03:46 62.58.132.37:2183 -> xxx.yyy.1.22:80 SYN ******S*
Feb 27 16:03:46 62.58.132.37:2184 -> xxx.yyy.1.23:80 SYN ******S*
[...]
Feb 27 16:14:53 62.58.132.37:4951 -> xxx.yyy.255.240:80 SYN ******S*
Feb 27 16:14:53 62.58.132.37:4967 -> xxx.yyy.255.253:80 SYN ******S*
Feb 27 16:14:53 62.58.132.37:4963 -> xxx.yyy.255.250:80 SYN ******S*
Feb 27 16:14:53 62.58.132.37:4966 -> xxx.yyy.255.252:80 SYN ******S*
Feb 27 16:14:53 62.58.132.37:4968 -> xxx.yyy.255.254:80 SYN ******S*
Feb 27 16:14:53 62.58.132.37:4960 -> xxx.yyy.255.248:80 SYN ******S*
Feb 27 16:14:53 62.58.132.37:4964 -> xxx.yyy.255.251:80 SYN ******S*
Feb 27 16:14:53 62.58.132.37:4962 -> xxx.yyy.255.249:80 SYN ******S*
32212
[...]
20783
[...]
20731
[...]
18619
Feb 27 07:12:27 80.55.172.178:4002 -> xxx.yyy.1.2:3306 SYN ******S*
Feb 27 07:12:28 80.55.172.178:4055 -> xxx.yyy.1.3:3306 SYN ******S*
Feb 27 07:12:25 80.55.172.178:4092 -> xxx.yyy.1.4:3306 SYN ******S*
Feb 27 07:12:25 80.55.172.178:4842 -> xxx.yyy.1.5:3306 SYN ******S*
Feb 27 07:12:25 80.55.172.178:4898 -> xxx.yyy.1.6:3306 SYN ******S*
Feb 27 07:12:26 80.55.172.178:3063 -> xxx.yyy.1.9:3306 SYN ******S*
Feb 27 07:12:26 80.55.172.178:3405 -> xxx.yyy.1.10:3306 SYN ******S*
Feb 27 07:12:26 80.55.172.178:3455 -> xxx.yyy.1.12:3306 SYN ******S*
[...]
Feb 27 18:10:42 80.55.172.178:4358 -> xxx.yyy.33.251:3306 SYN ******S*
Feb 27 18:10:43 80.55.172.178:4263 -> xxx.yyy.33.249:3306 SYN ******S*
Feb 27 18:10:46 80.55.172.178:4408 -> xxx.yyy.33.252:3306 SYN ******S*
Feb 27 18:10:44 80.55.172.178:4455 -> xxx.yyy.33.253:3306 SYN ******S*
Feb 27 18:10:44 80.55.172.178:4311 -> xxx.yyy.33.250:3306 SYN ******S*
Feb 27 18:10:45 80.55.172.178:4503 -> xxx.yyy.33.254:3306 SYN ******S*
Feb 27 18:10:47 80.55.172.178:4455 -> xxx.yyy.33.253:3306 SYN ******S*
Feb 27 18:10:48 80.55.172.178:4503 -> xxx.yyy.33.254:3306 SYN ******S*
11622
[...]
8944
Feb 27 09:44:21 81.247.66.60:3122 -> xxx.yyy.10.0:1433 SYN ******S*
Feb 27 09:44:21 81.247.66.60:3142 -> xxx.yyy.10.1:1433 SYN ******S*
Feb 27 09:44:21 81.247.66.60:3149 -> xxx.yyy.10.2:1433 SYN ******S*
Feb 27 09:44:22 81.247.66.60:3161 -> xxx.yyy.10.3:1433 SYN ******S*
Feb 27 09:44:22 81.247.66.60:3162 -> xxx.yyy.10.4:1433 SYN ******S*
Feb 27 09:44:22 81.247.66.60:3168 -> xxx.yyy.10.5:1433 SYN ******S*
Feb 27 09:44:22 81.247.66.60:3188 -> xxx.yyy.10.6:1433 SYN ******S*
Feb 27 09:44:22 81.247.66.60:3229 -> xxx.yyy.10.7:1433 SYN ******S*
[...]
Feb 27 10:06:17 81.247.66.60:3619 -> xxx.yyy.33.247:1433 SYN ******S*
Feb 27 10:06:17 81.247.66.60:3626 -> xxx.yyy.33.248:1433 SYN ******S*
Feb 27 10:06:18 81.247.66.60:3718 -> xxx.yyy.33.249:1433 SYN ******S*
Feb 27 10:06:19 81.247.66.60:3787 -> xxx.yyy.33.250:1433 SYN ******S*
Feb 27 10:06:19 81.247.66.60:3796 -> xxx.yyy.33.251:1433 SYN ******S*
Feb 27 10:06:19 81.247.66.60:3828 -> xxx.yyy.33.252:1433 SYN ******S*
Feb 27 10:06:19 81.247.66.60:3832 -> xxx.yyy.33.253:1433 SYN ******S*
Feb 27 10:06:20 81.247.66.60:3867 -> xxx.yyy.33.254:1433 SYN ******S*
Feb 27 10:06:20 81.247.66.60:3874 -> xxx.yyy.33.255:1433 SYN ******S*
8084
Feb 27 22:50:43 218.47.114.19:62232 -> xxx.yyy.72.164:5554 SYN ******S*
Feb 27 22:50:43 218.47.114.19:62241 -> xxx.yyy.72.154:5554 SYN ******S*
Feb 27 22:50:43 218.47.114.19:62243 -> xxx.yyy.72.152:5554 SYN ******S*
Feb 27 22:50:43 218.47.114.19:62262 -> xxx.yyy.72.133:5554 SYN ******S*
Feb 27 22:50:43 218.47.114.19:62275 -> xxx.yyy.72.169:5554 SYN ******S*
Feb 27 22:50:43 218.47.114.19:62273 -> xxx.yyy.72.167:5554 SYN ******S*
Feb 27 22:50:44 218.47.114.19:62440 -> xxx.yyy.72.167:1023 SYN ******S*
Feb 27 22:50:46 218.47.114.19:62914 -> xxx.yyy.72.167:9898 SYN ******S*
[...]
Feb 27 22:52:48 218.47.114.19:64561 -> xxx.yyy.92.203:9898 SYN ******S*
Feb 27 22:52:48 218.47.114.19:64580 -> xxx.yyy.92.210:9898 SYN ******S*
Feb 27 22:52:48 218.47.114.19:64579 -> xxx.yyy.92.209:9898 SYN ******S*
Feb 27 22:52:48 218.47.114.19:64572 -> xxx.yyy.92.202:9898 SYN ******S*
Feb 27 22:52:48 218.47.114.19:64581 -> xxx.yyy.92.211:9898 SYN ******S*
Feb 27 22:52:49 218.47.114.19:64724 -> xxx.yyy.92.214:9898 SYN ******S*
Feb 27 22:52:49 218.47.114.19:64730 -> xxx.yyy.92.239:9898 SYN ******S*
Feb 27 22:52:49 218.47.114.19:64739 -> xxx.yyy.92.238:9898 SYN ******S*
Feb 27 22:52:49 218.47.114.19:64737 -> xxx.yyy.92.245:9898 SYN ******S*
7802
Feb 27 12:26:00 80.35.17.128:38999 -> xxx.yyy.1.12:1433 SYN ******S*
Feb 27 12:26:00 80.35.17.128:38868 -> xxx.yyy.1.13:1433 SYN ******S*
Feb 27 12:26:03 80.35.17.128:39001 -> xxx.yyy.1.20:1433 SYN ******S*
Feb 27 12:26:03 80.35.17.128:39002 -> xxx.yyy.1.21:1433 SYN ******S*
Feb 27 12:26:03 80.35.17.128:39003 -> xxx.yyy.1.22:1433 SYN ******S*
Feb 27 12:26:00 80.35.17.128:38663 -> xxx.yyy.1.26:1433 SYN ******S*
Feb 27 12:26:00 80.35.17.128:39004 -> xxx.yyy.1.27:1433 SYN ******S*
Feb 27 12:26:00 80.35.17.128:38835 -> xxx.yyy.1.28:1433 SYN ******S*
[...]
Feb 27 12:47:49 80.35.17.128:38918 -> xxx.yyy.255.50:1433 SYN ******S*
Feb 27 12:47:49 80.35.17.128:38534 -> xxx.yyy.255.49:1433 SYN ******S*
Feb 27 12:47:50 80.35.17.128:39211 -> xxx.yyy.255.220:1433 SYN ******S*
Feb 27 12:47:50 80.35.17.128:39228 -> xxx.yyy.255.223:1433 SYN ******S*
Feb 27 12:47:50 80.35.17.128:39196 -> xxx.yyy.255.248:1433 SYN ******S*
Feb 27 12:47:52 80.35.17.128:39197 -> xxx.yyy.255.166:1433 SYN ******S*
Feb 27 12:47:52 80.35.17.128:39205 -> xxx.yyy.255.175:1433 SYN ******S*
Feb 27 12:47:52 80.35.17.128:39225 -> xxx.yyy.255.187:1433 SYN ******S*
Feb 27 12:47:52 80.35.17.128:39192 -> xxx.yyy.255.192:1433 SYN ******S*
7463
[...]
7233
Feb 27 22:57:35 222.117.14.223:3315 -> xxx.yyy.174.244:5554 SYN ******S*
Feb 27 22:57:38 222.117.14.223:1884 -> xxx.yyy.174.244:9898 SYN ******S*
Feb 27 22:57:35 222.117.14.223:3330 -> xxx.yyy.174.230:5554 SYN ******S*
Feb 27 22:57:36 222.117.14.223:4100 -> xxx.yyy.174.230:1023 SYN ******S*
Feb 27 22:57:35 222.117.14.223:3316 -> xxx.yyy.174.243:5554 SYN ******S*
Feb 27 22:57:38 222.117.14.223:1886 -> xxx.yyy.174.243:9898 SYN ******S*
Feb 27 22:57:35 222.117.14.223:3345 -> xxx.yyy.174.249:5554 SYN ******S*
Feb 27 22:57:36 222.117.14.223:4132 -> xxx.yyy.174.249:1023 SYN ******S*
[...]
Feb 27 22:58:22 222.117.14.223:3612 -> xxx.yyy.195.2:9898 SYN ******S*
Feb 27 22:58:22 222.117.14.223:3636 -> xxx.yyy.195.32:9898 SYN ******S*
Feb 27 22:58:22 222.117.14.223:3631 -> xxx.yyy.195.28:9898 SYN ******S*
Feb 27 22:58:22 222.117.14.223:3684 -> xxx.yyy.195.44:9898 SYN ******S*
Feb 27 22:58:22 222.117.14.223:3623 -> xxx.yyy.195.55:9898 SYN ******S*
Feb 27 22:58:22 222.117.14.223:3708 -> xxx.yyy.195.60:9898 SYN ******S*
Feb 27 22:58:22 222.117.14.223:3812 -> xxx.yyy.195.85:9898 SYN ******S*
Feb 27 22:58:22 222.117.14.223:3838 -> xxx.yyy.195.79:9898 SYN ******S*
Feb 27 22:58:22 222.117.14.223:3834 -> xxx.yyy.195.74:9898 SYN ******S*
6218
Feb 27 22:56:31 220.86.186.29:1141 -> xxx.yyy.133.14:5554 SYN ******S*
Feb 27 22:56:32 220.86.186.29:1204 -> xxx.yyy.133.24:5554 SYN ******S*
Feb 27 22:56:32 220.86.186.29:1206 -> xxx.yyy.133.25:5554 SYN ******S*
Feb 27 22:56:33 220.86.186.29:1395 -> xxx.yyy.133.25:1023 SYN ******S*
Feb 27 22:56:32 220.86.186.29:1208 -> xxx.yyy.133.26:5554 SYN ******S*
Feb 27 22:56:35 220.86.186.29:1772 -> xxx.yyy.133.26:9898 SYN ******S*
Feb 27 22:56:32 220.86.186.29:1213 -> xxx.yyy.133.28:5554 SYN ******S*
Feb 27 22:56:35 220.86.186.29:1781 -> xxx.yyy.133.28:9898 SYN ******S*
[...]
Feb 27 23:00:38 220.86.186.29:2541 -> xxx.yyy.152.135:9898 SYN ******S*
Feb 27 23:00:36 220.86.186.29:2171 -> xxx.yyy.152.217:1023 SYN ******S*
Feb 27 23:00:38 220.86.186.29:2544 -> xxx.yyy.152.217:9898 SYN ******S*
Feb 27 23:00:36 220.86.186.29:2170 -> xxx.yyy.152.218:1023 SYN ******S*
Feb 27 23:00:37 220.86.186.29:2311 -> xxx.yyy.151.80:9898 SYN ******S*
Feb 27 23:00:38 220.86.186.29:2510 -> xxx.yyy.151.120:9898 SYN ******S*
Feb 27 23:00:38 220.86.186.29:2517 -> xxx.yyy.151.159:9898 SYN ******S*
Feb 27 23:00:38 220.86.186.29:2515 -> xxx.yyy.151.158:9898 SYN ******S*
Feb 27 23:00:38 220.86.186.29:2527 -> xxx.yyy.152.21:9898 SYN ******S*
6147
Feb 27 22:56:59 210.91.30.67:2721 -> xxx.yyy.133.235:5554 SYN ******S*
Feb 27 22:56:59 210.91.30.67:2732 -> xxx.yyy.133.245:5554 SYN ******S*
Feb 27 22:56:59 210.91.30.67:2730 -> xxx.yyy.133.243:5554 SYN ******S*
Feb 27 22:57:00 210.91.30.67:3274 -> xxx.yyy.133.243:1023 SYN ******S*
Feb 27 22:56:59 210.91.30.67:2735 -> xxx.yyy.133.248:5554 SYN ******S*
Feb 27 22:56:59 210.91.30.67:2734 -> xxx.yyy.133.247:5554 SYN ******S*
Feb 27 22:57:00 210.91.30.67:3280 -> xxx.yyy.133.247:1023 SYN ******S*
Feb 27 22:56:59 210.91.30.67:2737 -> xxx.yyy.133.250:5554 SYN ******S*
[...]
Feb 27 22:57:44 210.91.30.67:3612 -> xxx.yyy.154.82:9898 SYN ******S*
Feb 27 22:57:44 210.91.30.67:3617 -> xxx.yyy.154.86:9898 SYN ******S*
Feb 27 22:57:44 210.91.30.67:3625 -> xxx.yyy.154.87:9898 SYN ******S*
Feb 27 22:57:44 210.91.30.67:3674 -> xxx.yyy.154.92:9898 SYN ******S*
Feb 27 22:57:44 210.91.30.67:3679 -> xxx.yyy.154.93:9898 SYN ******S*
Feb 27 22:57:44 210.91.30.67:3701 -> xxx.yyy.154.100:9898 SYN ******S*
Feb 27 22:57:45 210.91.30.67:3688 -> xxx.yyy.154.95:9898 SYN ******S*
Feb 27 22:57:45 210.91.30.67:3694 -> xxx.yyy.154.98:9898 SYN ******S*
5754
Feb 27 00:00:04 211.94.172.37:22002 -> xxx.yyy.246.118:3127 SYN ******S*
Feb 27 00:00:05 211.94.172.37:22002 -> xxx.yyy.246.118:1080 SYN ******S*
Feb 27 00:00:05 211.94.172.37:22002 -> xxx.yyy.246.118:3128 SYN ******S*
Feb 27 00:00:05 211.94.172.37:22002 -> xxx.yyy.246.119:3127 SYN ******S*
Feb 27 00:00:05 211.94.172.37:22002 -> xxx.yyy.246.119:10080 SYN ******S*
Feb 27 00:00:05 211.94.172.37:22002 -> xxx.yyy.246.119:3128 SYN ******S*
Feb 27 00:00:05 211.94.172.37:22002 -> xxx.yyy.246.120:3127 SYN ******S*
Feb 27 00:00:06 211.94.172.37:22002 -> xxx.yyy.246.120:3128 SYN ******S*
[...]
Feb 27 00:17:52 211.94.172.37:22002 -> xxx.yyy.255.253:10080 SYN ******S*
Feb 27 00:17:52 211.94.172.37:22002 -> xxx.yyy.255.253:3128 SYN ******S*
Feb 27 00:17:53 211.94.172.37:22002 -> xxx.yyy.255.254:3127 SYN ******S*
Feb 27 00:17:53 211.94.172.37:22002 -> xxx.yyy.255.254:1080 SYN ******S*
Feb 27 00:17:53 211.94.172.37:22002 -> xxx.yyy.255.254:3128 SYN ******S*
Feb 27 00:17:53 211.94.172.37:22002 -> xxx.yyy.255.255:3127 SYN ******S*
Feb 27 00:17:53 211.94.172.37:22002 -> xxx.yyy.255.255:1080 SYN ******S*
Feb 27 00:17:53 211.94.172.37:22002 -> xxx.yyy.255.255:10080 SYN ******S*
Feb 27 00:17:53 211.94.172.37:22002 -> xxx.yyy.255.255:3128 SYN ******S*
5612
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list