[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Wed Mar 2 14:40:00 GMT 2005
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
[...]
87905
Mar 1 01:45:23 69.158.169.251:1955 -> xxx.yyy.1.1:139 SYN ******S*
Mar 1 01:45:23 69.158.169.251:1958 -> xxx.yyy.1.4:139 SYN ******S*
Mar 1 01:45:23 69.158.169.251:1959 -> xxx.yyy.1.5:139 SYN ******S*
Mar 1 01:45:20 69.158.169.251:1965 -> xxx.yyy.1.11:139 SYN ******S*
Mar 1 01:45:23 69.158.169.251:1966 -> xxx.yyy.1.12:139 SYN ******S*
Mar 1 01:45:23 69.158.169.251:1971 -> xxx.yyy.1.17:139 SYN ******S*
Mar 1 01:45:20 69.158.169.251:1972 -> xxx.yyy.1.18:139 SYN ******S*
Mar 1 01:45:20 69.158.169.251:1973 -> xxx.yyy.1.19:139 SYN ******S*
[...]
Mar 1 08:49:04 69.158.169.251:4721 -> xxx.yyy.210.193:139 SYN ******S*
Mar 1 08:49:07 69.158.169.251:4675 -> xxx.yyy.210.147:139 SYN ******S*
Mar 1 08:49:07 69.158.169.251:4688 -> xxx.yyy.210.160:139 SYN ******S*
Mar 1 08:49:07 69.158.169.251:4689 -> xxx.yyy.210.161:139 SYN ******S*
Mar 1 08:49:07 69.158.169.251:4690 -> xxx.yyy.210.162:139 SYN ******S*
Mar 1 08:49:07 69.158.169.251:4684 -> xxx.yyy.210.156:139 SYN ******S*
Mar 1 08:49:07 69.158.169.251:4691 -> xxx.yyy.210.163:139 SYN ******S*
Mar 1 08:49:07 69.158.169.251:4692 -> xxx.yyy.210.164:139 SYN ******S*
Mar 1 08:49:07 69.158.169.251:4693 -> xxx.yyy.210.165:139 SYN ******S*
75060
Mar 1 20:26:13 211.237.116.89:3130 -> xxx.yyy.1.0:1433 SYN ******S*
Mar 1 20:26:13 211.237.116.89:3132 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 1 20:26:16 211.237.116.89:3139 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 1 20:26:16 211.237.116.89:3150 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 1 20:26:16 211.237.116.89:3161 -> xxx.yyy.1.8:1433 SYN ******S*
Mar 1 20:26:16 211.237.116.89:3165 -> xxx.yyy.1.9:1433 SYN ******S*
Mar 1 20:26:13 211.237.116.89:3166 -> xxx.yyy.1.10:1433 SYN ******S*
Mar 1 20:26:13 211.237.116.89:3167 -> xxx.yyy.1.11:1433 SYN ******S*
[...]
Mar 1 23:59:57 211.237.116.89:4176 -> xxx.yyy.238.170:1433 SYN ******S*
Mar 1 23:59:58 211.237.116.89:3716 -> xxx.yyy.238.134:1433 SYN ******S*
Mar 1 23:59:58 211.237.116.89:4562 -> xxx.yyy.238.190:1433 SYN ******S*
Mar 1 23:59:58 211.237.116.89:3749 -> xxx.yyy.238.136:1433 SYN ******S*
Mar 1 23:59:58 211.237.116.89:3746 -> xxx.yyy.238.135:1433 SYN ******S*
Mar 1 23:59:58 211.237.116.89:3778 -> xxx.yyy.238.137:1433 SYN ******S*
Mar 1 23:59:58 211.237.116.89:3810 -> xxx.yyy.238.140:1433 SYN ******S*
Mar 1 23:59:58 211.237.116.89:3799 -> xxx.yyy.238.138:1433 SYN ******S*
70441
Mar 1 07:26:28 81.195.76.194:3030 -> xxx.yyy.1.1:3306 SYN ******S*
Mar 1 07:26:25 81.195.76.194:3031 -> xxx.yyy.1.2:3306 SYN ******S*
Mar 1 07:26:28 81.195.76.194:3032 -> xxx.yyy.1.3:3306 SYN ******S*
Mar 1 07:26:28 81.195.76.194:3033 -> xxx.yyy.1.4:3306 SYN ******S*
Mar 1 07:26:28 81.195.76.194:3034 -> xxx.yyy.1.5:3306 SYN ******S*
Mar 1 07:26:28 81.195.76.194:3035 -> xxx.yyy.1.6:3306 SYN ******S*
Mar 1 07:26:28 81.195.76.194:3036 -> xxx.yyy.1.7:3306 SYN ******S*
Mar 1 07:26:28 81.195.76.194:3037 -> xxx.yyy.1.8:3306 SYN ******S*
[...]
Mar 1 07:37:41 81.195.76.194:4220 -> xxx.yyy.255.244:3306 SYN ******S*
Mar 1 07:37:41 81.195.76.194:4217 -> xxx.yyy.255.241:3306 SYN ******S*
Mar 1 07:37:41 81.195.76.194:4214 -> xxx.yyy.255.238:3306 SYN ******S*
Mar 1 07:37:41 81.195.76.194:4224 -> xxx.yyy.255.248:3306 SYN ******S*
Mar 1 07:37:41 81.195.76.194:4227 -> xxx.yyy.255.251:3306 SYN ******S*
Mar 1 07:37:41 81.195.76.194:4228 -> xxx.yyy.255.252:3306 SYN ******S*
Mar 1 07:37:41 81.195.76.194:4225 -> xxx.yyy.255.249:3306 SYN ******S*
Mar 1 07:37:41 81.195.76.194:4229 -> xxx.yyy.255.253:3306 SYN ******S*
Mar 1 07:37:41 81.195.76.194:4222 -> xxx.yyy.255.246:3306 SYN ******S*
69243
Mar 1 04:05:06 65.162.1.154:4129 -> xxx.yyy.1.1:6101 SYN ******S*
Mar 1 04:05:06 65.162.1.154:4144 -> xxx.yyy.1.2:6101 SYN ******S*
Mar 1 04:05:06 65.162.1.154:4146 -> xxx.yyy.1.3:6101 SYN ******S*
Mar 1 04:05:03 65.162.1.154:4157 -> xxx.yyy.1.4:6101 SYN ******S*
Mar 1 04:05:06 65.162.1.154:4171 -> xxx.yyy.1.5:6101 SYN ******S*
Mar 1 04:05:06 65.162.1.154:4182 -> xxx.yyy.1.6:6101 SYN ******S*
Mar 1 04:05:06 65.162.1.154:4189 -> xxx.yyy.1.7:6101 SYN ******S*
Mar 1 04:05:03 65.162.1.154:4209 -> xxx.yyy.1.9:6101 SYN ******S*
[...]
Mar 1 04:14:37 65.162.1.154:4901 -> xxx.yyy.255.138:6101 SYN ******S*
Mar 1 04:14:37 65.162.1.154:4962 -> xxx.yyy.255.142:6101 SYN ******S*
Mar 1 04:14:37 65.162.1.154:4854 -> xxx.yyy.255.134:6101 SYN ******S*
Mar 1 04:14:37 65.162.1.154:4883 -> xxx.yyy.255.135:6101 SYN ******S*
Mar 1 04:14:37 65.162.1.154:4931 -> xxx.yyy.255.139:6101 SYN ******S*
Mar 1 04:14:37 65.162.1.154:4944 -> xxx.yyy.255.140:6101 SYN ******S*
Mar 1 04:14:37 65.162.1.154:4798 -> xxx.yyy.255.130:6101 SYN ******S*
Mar 1 04:14:37 65.162.1.154:4840 -> xxx.yyy.255.132:6101 SYN ******S*
51761
Mar 1 02:27:38 198.209.42.14:3743 -> xxx.yyy.1.1:3306 SYN ******S*
Mar 1 02:27:35 198.209.42.14:3744 -> xxx.yyy.1.2:3306 SYN ******S*
Mar 1 02:27:38 198.209.42.14:3745 -> xxx.yyy.1.3:3306 SYN ******S*
Mar 1 02:27:35 198.209.42.14:3746 -> xxx.yyy.1.4:3306 SYN ******S*
Mar 1 02:27:35 198.209.42.14:3747 -> xxx.yyy.1.5:3306 SYN ******S*
Mar 1 02:27:38 198.209.42.14:3748 -> xxx.yyy.1.6:3306 SYN ******S*
Mar 1 02:27:38 198.209.42.14:3749 -> xxx.yyy.1.7:3306 SYN ******S*
Mar 1 02:27:35 198.209.42.14:3750 -> xxx.yyy.1.8:3306 SYN ******S*
[...]
Mar 1 02:32:24 198.209.42.14:2193 -> xxx.yyy.255.186:3306 SYN ******S*
Mar 1 02:32:24 198.209.42.14:2125 -> xxx.yyy.255.119:3306 SYN ******S*
Mar 1 02:32:24 198.209.42.14:2209 -> xxx.yyy.255.202:3306 SYN ******S*
Mar 1 02:32:24 198.209.42.14:2170 -> xxx.yyy.255.164:3306 SYN ******S*
Mar 1 02:32:24 198.209.42.14:2259 -> xxx.yyy.255.251:3306 SYN ******S*
Mar 1 02:32:24 198.209.42.14:2260 -> xxx.yyy.255.252:3306 SYN ******S*
Mar 1 02:32:24 198.209.42.14:2261 -> xxx.yyy.255.253:3306 SYN ******S*
Mar 1 02:32:24 198.209.42.14:2258 -> xxx.yyy.255.250:3306 SYN ******S*
Mar 1 02:32:24 198.209.42.14:2262 -> xxx.yyy.255.254:3306 SYN ******S*
48108
Mar 1 15:58:35 66.117.219.228:22002 -> xxx.yyy.1.0:1080 SYN ******S*
Mar 1 15:58:35 66.117.219.228:22002 -> xxx.yyy.1.1:1080 SYN ******S*
Mar 1 15:58:35 66.117.219.228:22002 -> xxx.yyy.1.1:10080 SYN ******S*
Mar 1 15:58:36 66.117.219.228:22002 -> xxx.yyy.1.2:3127 SYN ******S*
Mar 1 15:58:36 66.117.219.228:22002 -> xxx.yyy.1.2:1080 SYN ******S*
Mar 1 15:58:36 66.117.219.228:22002 -> xxx.yyy.1.2:10080 SYN ******S*
Mar 1 15:58:36 66.117.219.228:22002 -> xxx.yyy.1.3:3128 SYN ******S*
Mar 1 15:58:37 66.117.219.228:22002 -> xxx.yyy.1.5:3127 SYN ******S*
[...]
Mar 1 21:02:00 66.117.219.228:22002 -> xxx.yyy.162.87:3127 SYN ******S*
Mar 1 21:02:00 66.117.219.228:22002 -> xxx.yyy.162.87:10080 SYN ******S*
Mar 1 21:02:01 66.117.219.228:22002 -> xxx.yyy.162.87:3128 SYN ******S*
Mar 1 21:02:01 66.117.219.228:22002 -> xxx.yyy.162.88:3128 SYN ******S*
Mar 1 21:02:01 66.117.219.228:22002 -> xxx.yyy.162.89:3127 SYN ******S*
Mar 1 21:02:01 66.117.219.228:22002 -> xxx.yyy.162.89:1080 SYN ******S*
Mar 1 21:02:01 66.117.219.228:22002 -> xxx.yyy.162.89:3128 SYN ******S*
Mar 1 21:02:02 66.117.219.228:22002 -> xxx.yyy.162.90:3127 SYN ******S*
Mar 1 21:02:02 66.117.219.228:22002 -> xxx.yyy.162.90:1080 SYN ******S*
44840
Mar 1 17:07:01 202.60.229.68:2295 -> xxx.yyy.1.1:3306 SYN ******S*
Mar 1 17:07:04 202.60.229.68:2298 -> xxx.yyy.1.4:3306 SYN ******S*
Mar 1 17:07:04 202.60.229.68:2299 -> xxx.yyy.1.5:3306 SYN ******S*
Mar 1 17:07:04 202.60.229.68:2300 -> xxx.yyy.1.6:3306 SYN ******S*
Mar 1 17:07:04 202.60.229.68:2305 -> xxx.yyy.1.11:3306 SYN ******S*
Mar 1 17:07:04 202.60.229.68:2306 -> xxx.yyy.1.12:3306 SYN ******S*
Mar 1 17:07:01 202.60.229.68:2307 -> xxx.yyy.1.13:3306 SYN ******S*
Mar 1 17:07:01 202.60.229.68:2308 -> xxx.yyy.1.14:3306 SYN ******S*
[...]
Mar 1 17:18:48 202.60.229.68:3842 -> xxx.yyy.255.228:3306 SYN ******S*
Mar 1 17:18:48 202.60.229.68:3843 -> xxx.yyy.255.229:3306 SYN ******S*
Mar 1 17:18:48 202.60.229.68:3847 -> xxx.yyy.255.233:3306 SYN ******S*
Mar 1 17:18:48 202.60.229.68:3856 -> xxx.yyy.255.242:3306 SYN ******S*
Mar 1 17:18:48 202.60.229.68:3852 -> xxx.yyy.255.238:3306 SYN ******S*
Mar 1 17:18:48 202.60.229.68:3858 -> xxx.yyy.255.244:3306 SYN ******S*
Mar 1 17:18:48 202.60.229.68:3854 -> xxx.yyy.255.240:3306 SYN ******S*
Mar 1 17:18:48 202.60.229.68:3851 -> xxx.yyy.255.237:3306 SYN ******S*
Mar 1 17:18:48 202.60.229.68:3855 -> xxx.yyy.255.241:3306 SYN ******S*
44701
Mar 1 20:03:11 210.0.214.171:4381 -> xxx.yyy.1.1:3306 SYN ******S*
Mar 1 20:03:11 210.0.214.171:4383 -> xxx.yyy.1.2:3306 SYN ******S*
Mar 1 20:03:12 210.0.214.171:4384 -> xxx.yyy.1.3:3306 SYN ******S*
Mar 1 20:03:12 210.0.214.171:4386 -> xxx.yyy.1.5:3306 SYN ******S*
Mar 1 20:03:11 210.0.214.171:4389 -> xxx.yyy.1.8:3306 SYN ******S*
Mar 1 20:03:11 210.0.214.171:4390 -> xxx.yyy.1.9:3306 SYN ******S*
Mar 1 20:03:12 210.0.214.171:4391 -> xxx.yyy.1.10:3306 SYN ******S*
Mar 1 20:03:11 210.0.214.171:4392 -> xxx.yyy.1.11:3306 SYN ******S*
[...]
Mar 1 20:15:32 210.0.214.171:2334 -> xxx.yyy.255.206:3306 SYN ******S*
Mar 1 20:15:32 210.0.214.171:2369 -> xxx.yyy.255.238:3306 SYN ******S*
Mar 1 20:15:32 210.0.214.171:2366 -> xxx.yyy.255.235:3306 SYN ******S*
Mar 1 20:15:32 210.0.214.171:2364 -> xxx.yyy.255.234:3306 SYN ******S*
Mar 1 20:15:32 210.0.214.171:2348 -> xxx.yyy.255.219:3306 SYN ******S*
Mar 1 20:15:32 210.0.214.171:2382 -> xxx.yyy.255.248:3306 SYN ******S*
Mar 1 20:15:32 210.0.214.171:2381 -> xxx.yyy.255.247:3306 SYN ******S*
Mar 1 20:15:32 210.0.214.171:2373 -> xxx.yyy.255.242:3306 SYN ******S*
Mar 1 20:15:32 210.0.214.171:2374 -> xxx.yyy.255.243:3306 SYN ******S*
44664
Mar 1 01:16:57 196.15.229.175:4370 -> xxx.yyy.1.0:6101 SYN ******S*
Mar 1 01:16:57 196.15.229.175:4371 -> xxx.yyy.1.1:6101 SYN ******S*
Mar 1 01:16:57 196.15.229.175:4372 -> xxx.yyy.1.2:6101 SYN ******S*
Mar 1 01:16:57 196.15.229.175:4373 -> xxx.yyy.1.3:6101 SYN ******S*
Mar 1 01:16:57 196.15.229.175:4374 -> xxx.yyy.1.4:6101 SYN ******S*
Mar 1 01:16:57 196.15.229.175:4376 -> xxx.yyy.1.6:6101 SYN ******S*
Mar 1 01:16:57 196.15.229.175:4377 -> xxx.yyy.1.7:6101 SYN ******S*
Mar 1 01:16:57 196.15.229.175:4378 -> xxx.yyy.1.8:6101 SYN ******S*
[...]
Mar 1 01:57:19 196.15.229.175:4448 -> xxx.yyy.255.249:6101 SYN ******S*
Mar 1 01:57:19 196.15.229.175:4450 -> xxx.yyy.255.251:6101 SYN ******S*
Mar 1 01:57:19 196.15.229.175:4447 -> xxx.yyy.255.248:6101 SYN ******S*
Mar 1 01:57:19 196.15.229.175:4445 -> xxx.yyy.255.246:6101 SYN ******S*
Mar 1 01:57:19 196.15.229.175:4451 -> xxx.yyy.255.252:6101 SYN ******S*
Mar 1 01:57:19 196.15.229.175:4452 -> xxx.yyy.255.253:6101 SYN ******S*
Mar 1 01:57:19 196.15.229.175:4449 -> xxx.yyy.255.250:6101 SYN ******S*
Mar 1 01:57:19 196.15.229.175:4446 -> xxx.yyy.255.247:6101 SYN ******S*
44243
Mar 1 16:59:39 67.123.111.135:4375 -> xxx.yyy.1.1:3306 SYN ******S*
Mar 1 16:59:36 67.123.111.135:4376 -> xxx.yyy.1.2:3306 SYN ******S*
Mar 1 16:59:39 67.123.111.135:4379 -> xxx.yyy.1.5:3306 SYN ******S*
Mar 1 16:59:39 67.123.111.135:4383 -> xxx.yyy.1.9:3306 SYN ******S*
Mar 1 16:59:36 67.123.111.135:4384 -> xxx.yyy.1.10:3306 SYN ******S*
Mar 1 16:59:39 67.123.111.135:4385 -> xxx.yyy.1.11:3306 SYN ******S*
Mar 1 16:59:36 67.123.111.135:4386 -> xxx.yyy.1.12:3306 SYN ******S*
Mar 1 16:59:39 67.123.111.135:4387 -> xxx.yyy.1.13:3306 SYN ******S*
[...]
Mar 1 17:11:18 67.123.111.135:3282 -> xxx.yyy.255.240:3306 SYN ******S*
Mar 1 17:11:18 67.123.111.135:3279 -> xxx.yyy.255.237:3306 SYN ******S*
Mar 1 17:11:18 67.123.111.135:3283 -> xxx.yyy.255.241:3306 SYN ******S*
Mar 1 17:11:18 67.123.111.135:3277 -> xxx.yyy.255.235:3306 SYN ******S*
Mar 1 17:11:18 67.123.111.135:3280 -> xxx.yyy.255.238:3306 SYN ******S*
Mar 1 17:11:18 67.123.111.135:3281 -> xxx.yyy.255.239:3306 SYN ******S*
Mar 1 17:11:18 67.123.111.135:3278 -> xxx.yyy.255.236:3306 SYN ******S*
Mar 1 17:11:18 67.123.111.135:3296 -> xxx.yyy.255.254:3306 SYN ******S*
43611
Mar 1 04:01:59 210.91.64.20:4316 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 1 04:01:59 210.91.64.20:4324 -> xxx.yyy.1.9:1433 SYN ******S*
Mar 1 04:01:59 210.91.64.20:4332 -> xxx.yyy.1.17:1433 SYN ******S*
Mar 1 04:01:59 210.91.64.20:4334 -> xxx.yyy.1.19:1433 SYN ******S*
Mar 1 04:01:59 210.91.64.20:4344 -> xxx.yyy.1.29:1433 SYN ******S*
Mar 1 04:01:59 210.91.64.20:4320 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 1 04:01:59 210.91.64.20:4349 -> xxx.yyy.1.34:1433 SYN ******S*
Mar 1 04:01:59 210.91.64.20:4353 -> xxx.yyy.1.38:1433 SYN ******S*
[...]
Mar 1 04:22:48 210.91.64.20:3593 -> xxx.yyy.255.205:1433 SYN ******S*
Mar 1 04:22:48 210.91.64.20:3617 -> xxx.yyy.255.229:1433 SYN ******S*
Mar 1 04:22:48 210.91.64.20:3603 -> xxx.yyy.255.215:1433 SYN ******S*
Mar 1 04:22:48 210.91.64.20:3633 -> xxx.yyy.255.245:1433 SYN ******S*
Mar 1 04:22:48 210.91.64.20:3619 -> xxx.yyy.255.231:1433 SYN ******S*
Mar 1 04:22:48 210.91.64.20:3598 -> xxx.yyy.255.210:1433 SYN ******S*
Mar 1 04:22:48 210.91.64.20:3630 -> xxx.yyy.255.242:1433 SYN ******S*
Mar 1 04:22:48 210.91.64.20:3615 -> xxx.yyy.255.226:1433 SYN ******S*
40485
Mar 1 22:22:03 209.10.105.121:1569 -> xxx.yyy.1.2:3306 SYN ******S*
Mar 1 22:22:06 209.10.105.121:1570 -> xxx.yyy.1.3:3306 SYN ******S*
Mar 1 22:22:03 209.10.105.121:1571 -> xxx.yyy.1.4:3306 SYN ******S*
Mar 1 22:22:06 209.10.105.121:1572 -> xxx.yyy.1.5:3306 SYN ******S*
Mar 1 22:22:06 209.10.105.121:1573 -> xxx.yyy.1.6:3306 SYN ******S*
Mar 1 22:22:03 209.10.105.121:1576 -> xxx.yyy.1.9:3306 SYN ******S*
Mar 1 22:22:03 209.10.105.121:1577 -> xxx.yyy.1.10:3306 SYN ******S*
Mar 1 22:22:03 209.10.105.121:1580 -> xxx.yyy.1.13:3306 SYN ******S*
[...]
Mar 1 22:33:45 209.10.105.121:4118 -> xxx.yyy.255.243:3306 SYN ******S*
Mar 1 22:33:45 209.10.105.121:4116 -> xxx.yyy.255.241:3306 SYN ******S*
Mar 1 22:33:45 209.10.105.121:4123 -> xxx.yyy.255.248:3306 SYN ******S*
Mar 1 22:33:45 209.10.105.121:4119 -> xxx.yyy.255.244:3306 SYN ******S*
Mar 1 22:33:45 209.10.105.121:4127 -> xxx.yyy.255.252:3306 SYN ******S*
Mar 1 22:33:45 209.10.105.121:4125 -> xxx.yyy.255.250:3306 SYN ******S*
Mar 1 22:33:45 209.10.105.121:4128 -> xxx.yyy.255.253:3306 SYN ******S*
Mar 1 22:33:45 209.10.105.121:4129 -> xxx.yyy.255.254:3306 SYN ******S*
39526
Mar 1 22:21:33 216.86.223.4:3172 -> xxx.yyy.1.14:41523 SYN ******S*
Mar 1 22:21:33 216.86.223.4:3175 -> xxx.yyy.1.17:41523 SYN ******S*
Mar 1 22:21:35 216.86.223.4:3176 -> xxx.yyy.1.18:41523 SYN ******S*
Mar 1 22:21:33 216.86.223.4:3179 -> xxx.yyy.1.21:41523 SYN ******S*
Mar 1 22:21:32 216.86.223.4:3181 -> xxx.yyy.1.23:41523 SYN ******S*
Mar 1 22:21:33 216.86.223.4:3186 -> xxx.yyy.1.28:41523 SYN ******S*
Mar 1 22:21:33 216.86.223.4:3187 -> xxx.yyy.1.29:41523 SYN ******S*
Mar 1 22:21:32 216.86.223.4:3188 -> xxx.yyy.1.30:41523 SYN ******S*
[...]
Mar 1 22:33:13 216.86.223.4:2085 -> xxx.yyy.255.238:41523 SYN ******S*
Mar 1 22:33:13 216.86.223.4:2090 -> xxx.yyy.255.243:41523 SYN ******S*
Mar 1 22:33:13 216.86.223.4:2097 -> xxx.yyy.255.250:41523 SYN ******S*
Mar 1 22:33:13 216.86.223.4:2094 -> xxx.yyy.255.247:41523 SYN ******S*
Mar 1 22:33:13 216.86.223.4:2091 -> xxx.yyy.255.244:41523 SYN ******S*
Mar 1 22:33:13 216.86.223.4:2095 -> xxx.yyy.255.248:41523 SYN ******S*
Mar 1 22:33:13 216.86.223.4:2092 -> xxx.yyy.255.245:41523 SYN ******S*
Mar 1 22:33:13 216.86.223.4:2101 -> xxx.yyy.255.254:41523 SYN ******S*
Mar 1 22:33:13 216.86.223.4:2100 -> xxx.yyy.255.253:41523 SYN ******S*
38884
Mar 1 18:21:04 160.218.76.30:4004 -> xxx.yyy.1.1:3306 SYN ******S*
Mar 1 18:21:04 160.218.76.30:4058 -> xxx.yyy.1.5:3306 SYN ******S*
Mar 1 18:21:07 160.218.76.30:4116 -> xxx.yyy.1.11:3306 SYN ******S*
Mar 1 18:21:07 160.218.76.30:4177 -> xxx.yyy.1.19:3306 SYN ******S*
Mar 1 18:21:04 160.218.76.30:4186 -> xxx.yyy.1.20:3306 SYN ******S*
Mar 1 18:21:04 160.218.76.30:4187 -> xxx.yyy.1.21:3306 SYN ******S*
Mar 1 18:21:07 160.218.76.30:4188 -> xxx.yyy.1.22:3306 SYN ******S*
Mar 1 18:21:07 160.218.76.30:4232 -> xxx.yyy.1.23:3306 SYN ******S*
[...]
Mar 1 18:24:42 160.218.76.30:4824 -> xxx.yyy.255.245:3306 SYN ******S*
Mar 1 18:24:42 160.218.76.30:4753 -> xxx.yyy.255.187:3306 SYN ******S*
Mar 1 18:24:42 160.218.76.30:4793 -> xxx.yyy.255.221:3306 SYN ******S*
Mar 1 18:24:42 160.218.76.30:4777 -> xxx.yyy.255.205:3306 SYN ******S*
Mar 1 18:24:42 160.218.76.30:4790 -> xxx.yyy.255.218:3306 SYN ******S*
Mar 1 18:24:42 160.218.76.30:4774 -> xxx.yyy.255.202:3306 SYN ******S*
Mar 1 18:24:42 160.218.76.30:4750 -> xxx.yyy.255.184:3306 SYN ******S*
Mar 1 18:24:42 160.218.76.30:4818 -> xxx.yyy.255.243:3306 SYN ******S*
Mar 1 18:24:43 160.218.76.30:4833 -> xxx.yyy.255.254:3306 SYN ******S*
34154
Mar 1 17:24:20 202.154.234.66:3938 -> xxx.yyy.1.3:4899 SYN ******S*
Mar 1 17:24:18 202.154.234.66:3944 -> xxx.yyy.1.6:4899 SYN ******S*
Mar 1 17:24:18 202.154.234.66:3940 -> xxx.yyy.1.4:4899 SYN ******S*
Mar 1 17:24:18 202.154.234.66:3946 -> xxx.yyy.1.7:4899 SYN ******S*
Mar 1 17:24:18 202.154.234.66:3947 -> xxx.yyy.1.8:4899 SYN ******S*
Mar 1 17:24:21 202.154.234.66:3950 -> xxx.yyy.1.9:4899 SYN ******S*
Mar 1 17:24:18 202.154.234.66:3951 -> xxx.yyy.1.10:4899 SYN ******S*
Mar 1 17:24:18 202.154.234.66:3957 -> xxx.yyy.1.14:4899 SYN ******S*
[...]
Mar 1 17:47:10 202.154.234.66:2429 -> xxx.yyy.255.240:4899 SYN ******S*
Mar 1 17:47:10 202.154.234.66:2425 -> xxx.yyy.255.239:4899 SYN ******S*
Mar 1 17:47:10 202.154.234.66:2434 -> xxx.yyy.255.242:4899 SYN ******S*
Mar 1 17:47:10 202.154.234.66:2442 -> xxx.yyy.255.244:4899 SYN ******S*
Mar 1 17:47:10 202.154.234.66:2447 -> xxx.yyy.255.246:4899 SYN ******S*
Mar 1 17:47:10 202.154.234.66:2453 -> xxx.yyy.255.249:4899 SYN ******S*
Mar 1 17:47:11 202.154.234.66:2459 -> xxx.yyy.255.253:4899 SYN ******S*
Mar 1 17:47:11 202.154.234.66:2460 -> xxx.yyy.255.254:4899 SYN ******S*
30597
Mar 1 21:58:02 211.195.0.6:3605 -> xxx.yyy.220.2:5900 SYN ******S*
Mar 1 21:58:06 211.195.0.6:3617 -> xxx.yyy.220.4:42 SYN ******S*
Mar 1 21:58:04 211.195.0.6:3621 -> xxx.yyy.220.4:5900 SYN ******S*
Mar 1 21:58:04 211.195.0.6:3622 -> xxx.yyy.220.4:4899 SYN ******S*
Mar 1 21:58:05 211.195.0.6:3629 -> xxx.yyy.220.5:5900 SYN ******S*
Mar 1 21:58:05 211.195.0.6:3630 -> xxx.yyy.220.5:4899 SYN ******S*
Mar 1 21:58:03 211.195.0.6:3633 -> xxx.yyy.220.6:42 SYN ******S*
Mar 1 21:58:03 211.195.0.6:3636 -> xxx.yyy.220.6:6101 SYN ******S*
[...]
Mar 1 23:59:57 211.195.0.6:3500 -> xxx.yyy.220.52:5900 SYN ******S*
Mar 1 23:59:57 211.195.0.6:3501 -> xxx.yyy.220.95:5900 SYN ******S*
Mar 1 23:59:58 211.195.0.6:3510 -> xxx.yyy.220.202:5900 SYN ******S*
Mar 1 23:59:58 211.195.0.6:3512 -> xxx.yyy.220.44:5900 SYN ******S*
Mar 1 23:59:58 211.195.0.6:3514 -> xxx.yyy.220.111:5900 SYN ******S*
Mar 1 23:59:58 211.195.0.6:3521 -> xxx.yyy.220.144:5900 SYN ******S*
Mar 1 23:59:58 211.195.0.6:3522 -> xxx.yyy.220.158:5900 SYN ******S*
Mar 1 23:59:58 211.195.0.6:3555 -> xxx.yyy.220.62:5900 SYN ******S*
Mar 1 23:59:58 211.195.0.6:3561 -> xxx.yyy.220.109:5900 SYN ******S*
29550
Mar 1 04:13:54 221.11.81.165:2176 -> xxx.yyy.32.0:1433 SYN ******S*
Mar 1 04:13:51 221.11.81.165:2191 -> xxx.yyy.32.2:1433 SYN ******S*
Mar 1 04:13:54 221.11.81.165:2196 -> xxx.yyy.32.4:1433 SYN ******S*
Mar 1 04:13:54 221.11.81.165:2201 -> xxx.yyy.32.6:1433 SYN ******S*
Mar 1 04:13:54 221.11.81.165:2207 -> xxx.yyy.32.8:1433 SYN ******S*
Mar 1 04:13:54 221.11.81.165:2188 -> xxx.yyy.32.1:1433 SYN ******S*
Mar 1 04:13:54 221.11.81.165:2193 -> xxx.yyy.32.3:1433 SYN ******S*
Mar 1 04:13:54 221.11.81.165:2213 -> xxx.yyy.32.10:1433 SYN ******S*
[...]
Mar 1 05:42:44 221.11.81.165:4589 -> xxx.yyy.111.245:1433 SYN ******S*
Mar 1 05:42:44 221.11.81.165:4596 -> xxx.yyy.111.248:1433 SYN ******S*
Mar 1 05:42:44 221.11.81.165:4595 -> xxx.yyy.111.247:1433 SYN ******S*
Mar 1 05:42:44 221.11.81.165:4599 -> xxx.yyy.111.250:1433 SYN ******S*
Mar 1 05:42:45 221.11.81.165:4600 -> xxx.yyy.111.251:1433 SYN ******S*
Mar 1 05:42:45 221.11.81.165:4603 -> xxx.yyy.111.252:1433 SYN ******S*
Mar 1 05:42:45 221.11.81.165:4607 -> xxx.yyy.111.253:1433 SYN ******S*
Mar 1 05:42:46 221.11.81.165:4611 -> xxx.yyy.111.254:1433 SYN ******S*
Mar 1 05:42:46 221.11.81.165:4612 -> xxx.yyy.111.255:1433 SYN ******S*
26015
Mar 1 13:57:06 165.246.38.182:4295 -> xxx.yyy.222.1:42 SYN ******S*
Mar 1 13:57:03 165.246.38.182:4318 -> xxx.yyy.222.2:5900 SYN ******S*
Mar 1 13:57:06 165.246.38.182:4341 -> xxx.yyy.222.3:6101 SYN ******S*
Mar 1 13:57:06 165.246.38.182:4336 -> xxx.yyy.222.3:42 SYN ******S*
Mar 1 13:57:04 165.246.38.182:4372 -> xxx.yyy.222.4:6101 SYN ******S*
Mar 1 13:57:04 165.246.38.182:4374 -> xxx.yyy.222.4:5900 SYN ******S*
Mar 1 13:57:06 165.246.38.182:4362 -> xxx.yyy.222.4:42 SYN ******S*
Mar 1 13:57:04 165.246.38.182:4402 -> xxx.yyy.222.5:42 SYN ******S*
[...]
Mar 1 20:58:19 165.246.38.182:2917 -> xxx.yyy.222.12:5900 SYN ******S*
Mar 1 20:58:22 165.246.38.182:3101 -> xxx.yyy.222.13:5900 SYN ******S*
Mar 1 20:58:23 165.246.38.182:3163 -> xxx.yyy.222.5:5900 SYN ******S*
Mar 1 20:58:23 165.246.38.182:3184 -> xxx.yyy.222.34:5900 SYN ******S*
Mar 1 20:58:26 165.246.38.182:3361 -> xxx.yyy.222.38:5900 SYN ******S*
Mar 1 20:58:27 165.246.38.182:3374 -> xxx.yyy.222.3:5900 SYN ******S*
Mar 1 20:58:27 165.246.38.182:3391 -> xxx.yyy.222.37:5900 SYN ******S*
Mar 1 20:58:27 165.246.38.182:3392 -> xxx.yyy.222.32:5900 SYN ******S*
Mar 1 20:58:27 165.246.38.182:3400 -> xxx.yyy.222.12:5900 SYN ******S*
23994
Mar 1 00:06:16 203.131.121.203:4573 -> xxx.yyy.1.0:139 SYN ******S*
Mar 1 00:06:13 203.131.121.203:4576 -> xxx.yyy.1.3:139 SYN ******S*
Mar 1 00:06:13 203.131.121.203:4578 -> xxx.yyy.1.5:139 SYN ******S*
Mar 1 00:06:13 203.131.121.203:4583 -> xxx.yyy.1.10:139 SYN ******S*
Mar 1 00:06:13 203.131.121.203:4588 -> xxx.yyy.1.15:139 SYN ******S*
Mar 1 00:06:13 203.131.121.203:4592 -> xxx.yyy.1.19:139 SYN ******S*
Mar 1 00:06:13 203.131.121.203:4593 -> xxx.yyy.1.20:139 SYN ******S*
Mar 1 00:06:16 203.131.121.203:4596 -> xxx.yyy.1.23:139 SYN ******S*
[...]
Mar 1 02:59:58 203.131.121.203:3123 -> xxx.yyy.95.97:139 SYN ******S*
Mar 1 02:59:58 203.131.121.203:3124 -> xxx.yyy.95.98:139 SYN ******S*
Mar 1 02:59:58 203.131.121.203:3126 -> xxx.yyy.95.100:139 SYN ******S*
Mar 1 02:59:58 203.131.121.203:3127 -> xxx.yyy.95.101:139 SYN ******S*
Mar 1 02:59:58 203.131.121.203:3128 -> xxx.yyy.95.102:139 SYN ******S*
Mar 1 02:59:58 203.131.121.203:3129 -> xxx.yyy.95.103:139 SYN ******S*
Mar 1 02:59:58 203.131.121.203:3130 -> xxx.yyy.95.104:139 SYN ******S*
Mar 1 02:59:58 203.131.121.203:3131 -> xxx.yyy.95.105:139 SYN ******S*
Mar 1 02:59:58 203.131.121.203:3134 -> xxx.yyy.95.106:139 SYN ******S*
22894
Mar 1 01:55:23 196.15.229.175:1401 -> xxx.yyy.244.55:6101 SYN ******S*
Mar 1 03:05:34 xxx.yyy.244.55:1114 -> xxx.yyy.0.1:3389 SYN ******S*
Mar 1 03:05:34 xxx.yyy.244.55:1114 -> xxx.yyy.0.2:3389 SYN ******S*
Mar 1 03:05:34 xxx.yyy.244.55:1114 -> xxx.yyy.0.3:3389 SYN ******S*
Mar 1 03:05:34 xxx.yyy.244.55:1114 -> xxx.yyy.0.4:3389 SYN ******S*
Mar 1 03:05:34 xxx.yyy.244.55:1114 -> xxx.yyy.0.5:3389 SYN ******S*
Mar 1 03:05:34 xxx.yyy.244.55:1114 -> xxx.yyy.0.6:3389 SYN ******S*
Mar 1 03:05:34 xxx.yyy.244.55:1114 -> xxx.yyy.0.7:3389 SYN ******S*
[...]
Mar 1 17:10:43 67.123.111.135:3965 -> xxx.yyy.244.55:3306 SYN ******S*
Mar 1 17:10:46 67.123.111.135:3965 -> xxx.yyy.244.55:3306 SYN ******S*
Mar 1 17:18:13 202.60.229.68:4830 -> xxx.yyy.244.55:3306 SYN ******S*
Mar 1 17:46:10 202.154.234.66:4154 -> xxx.yyy.244.55:4899 SYN ******S*
Mar 1 20:14:58 210.0.214.171:2771 -> xxx.yyy.244.55:3306 SYN ******S*
Mar 1 22:32:38 216.86.223.4:2770 -> xxx.yyy.244.55:41523 SYN ******S*
Mar 1 22:33:13 209.10.105.121:1111 -> xxx.yyy.244.55:3306 SYN ******S*
Mar 1 22:57:02 218.147.87.5:3368 -> xxx.yyy.244.55:5554 SYN ******S*
Mar 1 22:57:05 218.147.87.5:1188 -> xxx.yyy.244.55:9898 SYN ******S*
14472
Mar 1 21:34:31 218.218.143.175:1560 -> xxx.yyy.1.1:139 SYN ******S*
Mar 1 21:34:34 218.218.143.175:1564 -> xxx.yyy.1.5:139 SYN ******S*
Mar 1 21:34:34 218.218.143.175:1565 -> xxx.yyy.1.6:139 SYN ******S*
Mar 1 21:34:31 218.218.143.175:1566 -> xxx.yyy.1.7:139 SYN ******S*
Mar 1 21:34:34 218.218.143.175:1567 -> xxx.yyy.1.8:139 SYN ******S*
Mar 1 21:34:31 218.218.143.175:1570 -> xxx.yyy.1.11:139 SYN ******S*
Mar 1 21:34:34 218.218.143.175:1571 -> xxx.yyy.1.12:139 SYN ******S*
Mar 1 21:34:31 218.218.143.175:1574 -> xxx.yyy.1.15:139 SYN ******S*
[...]
Mar 1 23:59:58 218.218.143.175:2549 -> xxx.yyy.79.79:139 SYN ******S*
Mar 1 23:59:58 218.218.143.175:2550 -> xxx.yyy.79.80:139 SYN ******S*
Mar 1 23:59:58 218.218.143.175:2551 -> xxx.yyy.79.81:139 SYN ******S*
Mar 1 23:59:58 218.218.143.175:2552 -> xxx.yyy.79.82:139 SYN ******S*
Mar 1 23:59:58 218.218.143.175:2553 -> xxx.yyy.79.83:139 SYN ******S*
Mar 2 00:00:01 218.218.143.175:2556 -> xxx.yyy.79.86:139 SYN ******S*
Mar 1 23:59:58 218.218.143.175:2557 -> xxx.yyy.79.87:139 SYN ******S*
Mar 2 00:00:00 218.218.143.175:2508 -> xxx.yyy.79.38:139 SYN ******S*
Mar 2 00:00:00 218.218.143.175:2512 -> xxx.yyy.79.42:139 SYN ******S*
11795
[...]
10954
Mar 1 21:13:20 211.39.130.233:3032 -> xxx.yyy.1.23:21 SYN ******S*
Mar 1 21:13:20 211.39.130.233:3043 -> xxx.yyy.1.33:21 SYN ******S*
Mar 1 21:13:20 211.39.130.233:3057 -> xxx.yyy.1.47:21 SYN ******S*
Mar 1 21:13:20 211.39.130.233:3065 -> xxx.yyy.1.55:21 SYN ******S*
Mar 1 21:13:20 211.39.130.233:3042 -> xxx.yyy.1.82:21 SYN ******S*
Mar 1 21:13:20 211.39.130.233:3065 -> xxx.yyy.1.5:21 SYN ******S*
Mar 1 21:13:20 211.39.130.233:3044 -> xxx.yyy.1.84:21 SYN ******S*
Mar 1 21:13:20 211.39.130.233:3020 -> xxx.yyy.1.111:21 SYN ******S*
[...]
Mar 1 21:13:41 211.39.130.233:3062 -> xxx.yyy.255.232:21 SYN ******S*
Mar 1 21:13:41 211.39.130.233:3019 -> xxx.yyy.255.240:21 SYN ******S*
Mar 1 21:13:41 211.39.130.233:3068 -> xxx.yyy.255.238:21 SYN ******S*
Mar 1 21:13:41 211.39.130.233:3069 -> xxx.yyy.255.239:21 SYN ******S*
Mar 1 21:13:41 211.39.130.233:3064 -> xxx.yyy.255.234:21 SYN ******S*
Mar 1 21:13:41 211.39.130.233:3065 -> xxx.yyy.255.235:21 SYN ******S*
Mar 1 21:13:41 211.39.130.233:3028 -> xxx.yyy.255.249:21 SYN ******S*
Mar 1 21:13:41 211.39.130.233:3029 -> xxx.yyy.255.250:21 SYN ******S*
10868
Mar 1 09:17:49 64.231.249.190:4426 -> xxx.yyy.224.230:139 SYN ******S*
Mar 1 09:17:50 64.231.249.190:4430 -> xxx.yyy.224.234:139 SYN ******S*
Mar 1 09:17:50 64.231.249.190:4433 -> xxx.yyy.224.237:139 SYN ******S*
Mar 1 09:17:53 64.231.249.190:4434 -> xxx.yyy.224.238:139 SYN ******S*
Mar 1 09:17:50 64.231.249.190:4443 -> xxx.yyy.224.247:139 SYN ******S*
Mar 1 09:17:50 64.231.249.190:4444 -> xxx.yyy.224.248:139 SYN ******S*
Mar 1 09:17:53 64.231.249.190:4446 -> xxx.yyy.224.250:139 SYN ******S*
Mar 1 09:17:50 64.231.249.190:4447 -> xxx.yyy.224.251:139 SYN ******S*
[...]
Mar 1 10:20:03 64.231.249.190:4486 -> xxx.yyy.255.185:139 SYN ******S*
Mar 1 10:20:03 64.231.249.190:4488 -> xxx.yyy.255.187:139 SYN ******S*
Mar 1 10:20:09 64.231.249.190:4453 -> xxx.yyy.255.152:139 SYN ******S*
Mar 1 10:20:09 64.231.249.190:4462 -> xxx.yyy.255.161:139 SYN ******S*
Mar 1 10:20:09 64.231.249.190:4463 -> xxx.yyy.255.162:139 SYN ******S*
Mar 1 10:20:09 64.231.249.190:4460 -> xxx.yyy.255.159:139 SYN ******S*
Mar 1 10:20:09 64.231.249.190:4468 -> xxx.yyy.255.167:139 SYN ******S*
Mar 1 10:20:09 64.231.249.190:4473 -> xxx.yyy.255.172:139 SYN ******S*
Mar 1 10:20:09 64.231.249.190:4467 -> xxx.yyy.255.166:139 SYN ******S*
10684
[...]
10235
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list