[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Thu Mar 10 14:26:58 GMT 2005
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Mar 9 01:02:06 222.144.92.50:1399 -> xxx.yyy.1.0:1433 SYN ******S*
Mar 9 01:02:06 222.144.92.50:1401 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 9 01:02:06 222.144.92.50:1404 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 9 01:02:09 222.144.92.50:1405 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 9 01:02:06 222.144.92.50:1406 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 9 01:02:09 222.144.92.50:1407 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 9 01:02:09 222.144.92.50:1414 -> xxx.yyy.1.12:1433 SYN ******S*
Mar 9 01:02:09 222.144.92.50:1412 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
Mar 9 04:50:54 222.144.92.50:4738 -> xxx.yyy.255.246:1433 SYN ******S*
Mar 9 04:50:54 222.144.92.50:4739 -> xxx.yyy.255.247:1433 SYN ******S*
Mar 9 04:50:54 222.144.92.50:4745 -> xxx.yyy.255.248:1433 SYN ******S*
Mar 9 04:50:54 222.144.92.50:4748 -> xxx.yyy.255.249:1433 SYN ******S*
Mar 9 04:50:55 222.144.92.50:4752 -> xxx.yyy.255.250:1433 SYN ******S*
Mar 9 04:50:55 222.144.92.50:4755 -> xxx.yyy.255.251:1433 SYN ******S*
Mar 9 04:50:55 222.144.92.50:4764 -> xxx.yyy.255.252:1433 SYN ******S*
Mar 9 04:50:55 222.144.92.50:4771 -> xxx.yyy.255.253:1433 SYN ******S*
Mar 9 04:50:55 222.144.92.50:4774 -> xxx.yyy.255.254:1433 SYN ******S*
115664
Mar 9 00:04:49 65.162.1.154:3767 -> xxx.yyy.1.1:6101 SYN ******S*
Mar 9 00:04:49 65.162.1.154:3768 -> xxx.yyy.1.2:6101 SYN ******S*
Mar 9 00:04:52 65.162.1.154:3770 -> xxx.yyy.1.4:6101 SYN ******S*
Mar 9 00:04:52 65.162.1.154:3772 -> xxx.yyy.1.6:6101 SYN ******S*
Mar 9 00:04:52 65.162.1.154:3774 -> xxx.yyy.1.7:6101 SYN ******S*
Mar 9 00:04:52 65.162.1.154:3779 -> xxx.yyy.1.9:6101 SYN ******S*
Mar 9 00:04:52 65.162.1.154:3785 -> xxx.yyy.1.13:6101 SYN ******S*
Mar 9 00:04:52 65.162.1.154:3789 -> xxx.yyy.1.15:6101 SYN ******S*
[...]
Mar 9 00:10:41 65.162.1.154:4797 -> xxx.yyy.255.189:6101 SYN ******S*
Mar 9 00:10:41 65.162.1.154:4817 -> xxx.yyy.255.202:6101 SYN ******S*
Mar 9 00:10:41 65.162.1.154:4822 -> xxx.yyy.255.205:6101 SYN ******S*
Mar 9 00:10:41 65.162.1.154:1067 -> xxx.yyy.255.226:6101 SYN ******S*
Mar 9 00:10:41 65.162.1.154:1031 -> xxx.yyy.255.211:6101 SYN ******S*
Mar 9 00:10:41 65.162.1.154:1027 -> xxx.yyy.255.210:6101 SYN ******S*
Mar 9 00:10:41 65.162.1.154:4799 -> xxx.yyy.255.191:6101 SYN ******S*
Mar 9 00:10:41 65.162.1.154:4807 -> xxx.yyy.255.199:6101 SYN ******S*
49518
Mar 9 19:54:03 80.88.192.61:2261 -> xxx.yyy.1.8:3306 SYN ******S*
Mar 9 19:54:03 80.88.192.61:2262 -> xxx.yyy.1.9:3306 SYN ******S*
Mar 9 19:54:03 80.88.192.61:2263 -> xxx.yyy.1.10:3306 SYN ******S*
Mar 9 19:54:03 80.88.192.61:2265 -> xxx.yyy.1.12:3306 SYN ******S*
Mar 9 19:54:03 80.88.192.61:2266 -> xxx.yyy.1.13:3306 SYN ******S*
Mar 9 19:54:03 80.88.192.61:2267 -> xxx.yyy.1.14:3306 SYN ******S*
Mar 9 19:54:03 80.88.192.61:2269 -> xxx.yyy.1.16:3306 SYN ******S*
Mar 9 19:54:03 80.88.192.61:2270 -> xxx.yyy.1.17:3306 SYN ******S*
[...]
Mar 9 20:05:48 80.88.192.61:1506 -> xxx.yyy.255.215:3306 SYN ******S*
Mar 9 20:05:49 80.88.192.61:1532 -> xxx.yyy.255.241:3306 SYN ******S*
Mar 9 20:05:49 80.88.192.61:1530 -> xxx.yyy.255.239:3306 SYN ******S*
Mar 9 20:05:49 80.88.192.61:1529 -> xxx.yyy.255.238:3306 SYN ******S*
Mar 9 20:05:49 80.88.192.61:1543 -> xxx.yyy.255.252:3306 SYN ******S*
Mar 9 20:05:49 80.88.192.61:1544 -> xxx.yyy.255.253:3306 SYN ******S*
Mar 9 20:05:49 80.88.192.61:1542 -> xxx.yyy.255.251:3306 SYN ******S*
Mar 9 20:05:49 80.88.192.61:1537 -> xxx.yyy.255.246:3306 SYN ******S*
37449
Mar 9 19:49:38 200.47.91.234:4634 -> xxx.yyy.1.1:139 SYN ******S*
Mar 9 19:49:38 200.47.91.234:4740 -> xxx.yyy.1.3:139 SYN ******S*
Mar 9 19:49:35 200.47.91.234:4752 -> xxx.yyy.1.6:139 SYN ******S*
Mar 9 19:49:38 200.47.91.234:4759 -> xxx.yyy.1.10:139 SYN ******S*
Mar 9 19:49:38 200.47.91.234:4773 -> xxx.yyy.1.15:139 SYN ******S*
Mar 9 19:49:35 200.47.91.234:4776 -> xxx.yyy.1.16:139 SYN ******S*
Mar 9 19:49:35 200.47.91.234:4780 -> xxx.yyy.1.18:139 SYN ******S*
Mar 9 19:49:35 200.47.91.234:4777 -> xxx.yyy.1.17:139 SYN ******S*
[...]
Mar 9 20:01:27 200.47.91.234:1207 -> xxx.yyy.255.232:139 SYN ******S*
Mar 9 20:01:28 200.47.91.234:1219 -> xxx.yyy.255.243:139 SYN ******S*
Mar 9 20:01:28 200.47.91.234:1223 -> xxx.yyy.255.246:139 SYN ******S*
Mar 9 20:01:28 200.47.91.234:1218 -> xxx.yyy.255.242:139 SYN ******S*
Mar 9 20:01:28 200.47.91.234:1216 -> xxx.yyy.255.240:139 SYN ******S*
Mar 9 20:01:28 200.47.91.234:1220 -> xxx.yyy.255.244:139 SYN ******S*
Mar 9 20:01:28 200.47.91.234:1231 -> xxx.yyy.255.254:139 SYN ******S*
Mar 9 20:01:28 200.47.91.234:1226 -> xxx.yyy.255.249:139 SYN ******S*
36520
Mar 9 01:43:15 217.238.193.120:3984 -> xxx.yyy.1.0:1433 SYN ******S*
Mar 9 01:43:18 217.238.193.120:4157 -> xxx.yyy.1.6:1433 SYN ******S*
Mar 9 01:43:18 217.238.193.120:4269 -> xxx.yyy.1.8:1433 SYN ******S*
Mar 9 01:43:18 217.238.193.120:4331 -> xxx.yyy.1.10:1433 SYN ******S*
Mar 9 01:43:18 217.238.193.120:4340 -> xxx.yyy.1.11:1433 SYN ******S*
Mar 9 01:43:18 217.238.193.120:4366 -> xxx.yyy.1.12:1433 SYN ******S*
Mar 9 01:43:18 217.238.193.120:4615 -> xxx.yyy.1.20:1433 SYN ******S*
Mar 9 01:43:18 217.238.193.120:4633 -> xxx.yyy.1.21:1433 SYN ******S*
[...]
Mar 9 05:05:21 217.238.193.120:3290 -> xxx.yyy.212.230:1433 SYN ******S*
Mar 9 05:05:21 217.238.193.120:4602 -> xxx.yyy.212.231:1433 SYN ******S*
Mar 9 05:05:21 217.238.193.120:3600 -> xxx.yyy.212.232:1433 SYN ******S*
Mar 9 05:05:22 217.238.193.120:3008 -> xxx.yyy.212.242:1433 SYN ******S*
Mar 9 05:05:22 217.238.193.120:3990 -> xxx.yyy.212.208:1433 SYN ******S*
Mar 9 05:05:22 217.238.193.120:4517 -> xxx.yyy.212.209:1433 SYN ******S*
Mar 9 05:05:22 217.238.193.120:3656 -> xxx.yyy.212.243:1433 SYN ******S*
Mar 9 05:05:22 217.238.193.120:4492 -> xxx.yyy.212.235:1433 SYN ******S*
Mar 9 05:05:22 217.238.193.120:3540 -> xxx.yyy.212.210:1433 SYN ******S*
35699
Mar 9 06:12:59 150.254.151.8:33627 -> xxx.yyy.1.0:1433 SYN ******S*
Mar 9 06:12:59 150.254.151.8:33627 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 9 06:12:59 150.254.151.8:33627 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 9 06:12:59 150.254.151.8:33627 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 9 06:12:59 150.254.151.8:33627 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 9 06:12:59 150.254.151.8:33627 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 9 06:12:59 150.254.151.8:33627 -> xxx.yyy.1.6:1433 SYN ******S*
Mar 9 06:12:59 150.254.151.8:33627 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Mar 9 06:14:04 150.254.151.8:33627 -> xxx.yyy.253.225:1433 SYN ******S*
Mar 9 06:14:04 150.254.151.8:33627 -> xxx.yyy.253.226:1433 SYN ******S*
Mar 9 06:14:04 150.254.151.8:33627 -> xxx.yyy.253.227:1433 SYN ******S*
Mar 9 06:14:04 150.254.151.8:33627 -> xxx.yyy.253.228:1433 SYN ******S*
Mar 9 06:14:04 150.254.151.8:33627 -> xxx.yyy.253.229:1433 SYN ******S*
Mar 9 06:14:04 150.254.151.8:33627 -> xxx.yyy.253.230:1433 SYN ******S*
Mar 9 06:14:04 150.254.151.8:33627 -> xxx.yyy.253.231:1433 SYN ******S*
Mar 9 06:14:04 150.254.151.8:33627 -> xxx.yyy.253.232:1433 SYN ******S*
35623
Mar 9 14:45:49 200.216.205.189:63027 -> xxx.yyy.1.1:3306 SYN ******S*
Mar 9 14:45:52 200.216.205.189:63031 -> xxx.yyy.1.3:3306 SYN ******S*
Mar 9 14:45:49 200.216.205.189:63035 -> xxx.yyy.1.5:3306 SYN ******S*
Mar 9 14:45:52 200.216.205.189:63039 -> xxx.yyy.1.7:3306 SYN ******S*
Mar 9 14:45:52 200.216.205.189:63043 -> xxx.yyy.1.9:3306 SYN ******S*
Mar 9 14:45:49 200.216.205.189:63049 -> xxx.yyy.1.12:3306 SYN ******S*
Mar 9 14:45:52 200.216.205.189:63061 -> xxx.yyy.1.18:3306 SYN ******S*
Mar 9 14:45:49 200.216.205.189:63063 -> xxx.yyy.1.19:3306 SYN ******S*
[...]
Mar 9 14:57:05 200.216.205.189:7638 -> xxx.yyy.255.220:3306 SYN ******S*
Mar 9 14:57:05 200.216.205.189:7664 -> xxx.yyy.255.233:3306 SYN ******S*
Mar 9 14:57:05 200.216.205.189:7662 -> xxx.yyy.255.232:3306 SYN ******S*
Mar 9 14:57:05 200.216.205.189:7686 -> xxx.yyy.255.244:3306 SYN ******S*
Mar 9 14:57:05 200.216.205.189:7688 -> xxx.yyy.255.245:3306 SYN ******S*
Mar 9 14:57:05 200.216.205.189:7690 -> xxx.yyy.255.246:3306 SYN ******S*
Mar 9 14:57:05 200.216.205.189:7694 -> xxx.yyy.255.248:3306 SYN ******S*
Mar 9 14:57:05 200.216.205.189:7682 -> xxx.yyy.255.242:3306 SYN ******S*
Mar 9 14:57:05 200.216.205.189:7702 -> xxx.yyy.255.252:3306 SYN ******S*
28650
Mar 9 01:39:41 221.233.24.9:12524 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 9 01:39:38 221.233.24.9:12526 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 9 01:39:38 221.233.24.9:12527 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 9 01:39:41 221.233.24.9:12530 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 9 01:39:41 221.233.24.9:12555 -> xxx.yyy.1.6:1433 SYN ******S*
Mar 9 01:39:41 221.233.24.9:12560 -> xxx.yyy.1.7:1433 SYN ******S*
Mar 9 01:39:41 221.233.24.9:12564 -> xxx.yyy.1.8:1433 SYN ******S*
Mar 9 01:39:41 221.233.24.9:12566 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
Mar 9 03:36:14 221.233.24.9:11375 -> xxx.yyy.132.41:1433 SYN ******S*
Mar 9 03:36:14 221.233.24.9:11381 -> xxx.yyy.132.47:1433 SYN ******S*
Mar 9 03:36:14 221.233.24.9:11379 -> xxx.yyy.132.46:1433 SYN ******S*
Mar 9 03:36:14 221.233.24.9:11377 -> xxx.yyy.132.44:1433 SYN ******S*
Mar 9 03:36:14 221.233.24.9:11382 -> xxx.yyy.132.48:1433 SYN ******S*
Mar 9 03:36:14 221.233.24.9:11383 -> xxx.yyy.132.49:1433 SYN ******S*
Mar 9 03:36:14 221.233.24.9:12292 -> xxx.yyy.132.69:1433 SYN ******S*
Mar 9 03:36:14 221.233.24.9:11480 -> xxx.yyy.132.50:1433 SYN ******S*
Mar 9 03:36:14 221.233.24.9:11481 -> xxx.yyy.132.43:1433 SYN ******S*
27757
Mar 9 22:46:29 213.8.59.15:3915 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 9 22:46:29 213.8.59.15:3916 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 9 22:46:29 213.8.59.15:3919 -> xxx.yyy.1.7:1433 SYN ******S*
Mar 9 22:46:29 213.8.59.15:3925 -> xxx.yyy.1.13:1433 SYN ******S*
Mar 9 22:46:31 213.8.59.15:3926 -> xxx.yyy.1.14:1433 SYN ******S*
Mar 9 22:46:31 213.8.59.15:3928 -> xxx.yyy.1.16:1433 SYN ******S*
Mar 9 22:46:31 213.8.59.15:3930 -> xxx.yyy.1.18:1433 SYN ******S*
Mar 9 22:46:29 213.8.59.15:3932 -> xxx.yyy.1.20:1433 SYN ******S*
[...]
Mar 9 22:58:11 213.8.59.15:2629 -> xxx.yyy.255.205:1433 SYN ******S*
Mar 9 22:58:11 213.8.59.15:2635 -> xxx.yyy.255.211:1433 SYN ******S*
Mar 9 22:58:11 213.8.59.15:2633 -> xxx.yyy.255.209:1433 SYN ******S*
Mar 9 22:58:11 213.8.59.15:2644 -> xxx.yyy.255.220:1433 SYN ******S*
Mar 9 22:58:11 213.8.59.15:2648 -> xxx.yyy.255.224:1433 SYN ******S*
Mar 9 22:58:11 213.8.59.15:2649 -> xxx.yyy.255.225:1433 SYN ******S*
Mar 9 22:58:11 213.8.59.15:2658 -> xxx.yyy.255.234:1433 SYN ******S*
Mar 9 22:58:11 213.8.59.15:2666 -> xxx.yyy.255.242:1433 SYN ******S*
Mar 9 22:58:11 213.8.59.15:2675 -> xxx.yyy.255.251:1433 SYN ******S*
27370
Mar 9 01:36:21 80.14.108.212:3665 -> xxx.yyy.75.178:10490 SYN ******S*
Mar 9 01:36:21 80.14.108.212:3666 -> xxx.yyy.75.178:10492 SYN ******S*
Mar 9 01:36:21 80.14.108.212:3667 -> xxx.yyy.75.178:10496 SYN ******S*
Mar 9 01:36:21 80.14.108.212:3668 -> xxx.yyy.75.178:10499 SYN ******S*
Mar 9 01:36:21 80.14.108.212:3670 -> xxx.yyy.75.178:10506 SYN ******S*
Mar 9 01:36:21 80.14.108.212:3671 -> xxx.yyy.75.178:10507 SYN ******S*
Mar 9 01:36:21 80.14.108.212:3672 -> xxx.yyy.75.178:10510 SYN ******S*
Mar 9 01:36:19 80.14.108.212:3664 -> xxx.yyy.75.178:10486 SYN ******S*
[...]
Mar 9 06:51:55 80.14.108.212:3716 -> xxx.yyy.75.178:10507 SYN ******S*
Mar 9 06:51:56 80.14.108.212:3720 -> xxx.yyy.75.178:10525 SYN ******S*
Mar 9 06:51:53 80.14.108.212:3713 -> xxx.yyy.75.178:10532 SYN ******S*
Mar 9 06:51:56 80.14.108.212:3718 -> xxx.yyy.75.178:10528 SYN ******S*
Mar 9 06:57:54 80.14.108.212:4034 -> xxx.yyy.75.178:10507 SYN ******S*
Mar 9 06:57:57 80.14.108.212:4039 -> xxx.yyy.75.178:10532 SYN ******S*
Mar 9 06:57:54 80.14.108.212:4037 -> xxx.yyy.75.178:10528 SYN ******S*
Mar 9 06:57:59 80.14.108.212:4042 -> xxx.yyy.75.178:10519 SYN ******S*
Mar 9 06:57:59 80.14.108.212:4043 -> xxx.yyy.75.178:10525 SYN ******S*
24709
Mar 9 11:40:04 80.96.109.142:3887 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 9 11:40:01 80.96.109.142:3910 -> xxx.yyy.1.8:1433 SYN ******S*
Mar 9 11:40:01 80.96.109.142:3919 -> xxx.yyy.1.10:1433 SYN ******S*
Mar 9 11:40:01 80.96.109.142:3925 -> xxx.yyy.1.11:1433 SYN ******S*
Mar 9 11:40:01 80.96.109.142:3930 -> xxx.yyy.1.12:1433 SYN ******S*
Mar 9 11:40:01 80.96.109.142:3933 -> xxx.yyy.1.13:1433 SYN ******S*
Mar 9 11:40:01 80.96.109.142:3946 -> xxx.yyy.1.15:1433 SYN ******S*
Mar 9 11:40:02 80.96.109.142:3981 -> xxx.yyy.1.22:1433 SYN ******S*
[...]
Mar 9 14:17:16 80.96.109.142:2237 -> xxx.yyy.179.191:1433 SYN ******S*
Mar 9 14:17:16 80.96.109.142:4707 -> xxx.yyy.179.201:1433 SYN ******S*
Mar 9 14:17:16 80.96.109.142:1967 -> xxx.yyy.179.155:1433 SYN ******S*
Mar 9 14:17:16 80.96.109.142:4748 -> xxx.yyy.179.202:1433 SYN ******S*
Mar 9 14:17:16 80.96.109.142:2180 -> xxx.yyy.179.160:1433 SYN ******S*
Mar 9 14:17:17 80.96.109.142:2483 -> xxx.yyy.179.158:1433 SYN ******S*
Mar 9 14:17:17 80.96.109.142:2898 -> xxx.yyy.179.192:1433 SYN ******S*
Mar 9 14:17:18 80.96.109.142:2924 -> xxx.yyy.179.162:1433 SYN ******S*
Mar 9 14:17:18 80.96.109.142:3174 -> xxx.yyy.179.164:1433 SYN ******S*
22207
Mar 9 18:05:14 62.150.31.78:4642 -> xxx.yyy.1.2:3389 SYN ******S*
Mar 9 18:05:14 62.150.31.78:4643 -> xxx.yyy.1.3:3389 SYN ******S*
Mar 9 18:05:14 62.150.31.78:4645 -> xxx.yyy.1.5:3389 SYN ******S*
Mar 9 18:05:14 62.150.31.78:4644 -> xxx.yyy.1.4:3389 SYN ******S*
Mar 9 18:05:14 62.150.31.78:4646 -> xxx.yyy.1.6:3389 SYN ******S*
Mar 9 18:05:14 62.150.31.78:4649 -> xxx.yyy.1.9:3389 SYN ******S*
Mar 9 18:05:14 62.150.31.78:4648 -> xxx.yyy.1.8:3389 SYN ******S*
Mar 9 18:05:14 62.150.31.78:4650 -> xxx.yyy.1.10:3389 SYN ******S*
[...]
Mar 9 18:06:39 62.150.31.78:4652 -> xxx.yyy.255.242:3389 SYN ******S*
Mar 9 18:06:39 62.150.31.78:4659 -> xxx.yyy.255.249:3389 SYN ******S*
Mar 9 18:06:39 62.150.31.78:4658 -> xxx.yyy.255.248:3389 SYN ******S*
Mar 9 18:06:39 62.150.31.78:4662 -> xxx.yyy.255.252:3389 SYN ******S*
Mar 9 18:06:39 62.150.31.78:4661 -> xxx.yyy.255.251:3389 SYN ******S*
Mar 9 18:06:39 62.150.31.78:4660 -> xxx.yyy.255.250:3389 SYN ******S*
Mar 9 18:06:39 62.150.31.78:4614 -> xxx.yyy.255.254:3389 SYN ******S*
Mar 9 18:06:39 62.150.31.78:4663 -> xxx.yyy.255.253:3389 SYN ******S*
22106
Mar 9 11:55:26 213.180.210.35:60102 -> xxx.yyy.104.70:1080 SYN ******S*
Mar 9 11:55:26 213.180.210.35:43637 -> xxx.yyy.104.70:1075 SYN ******S*
Mar 9 11:55:26 213.180.210.35:57978 -> xxx.yyy.104.70:80 SYN ******S*
Mar 9 11:55:26 213.180.210.35:58219 -> xxx.yyy.104.70:8000 SYN ******S*
Mar 9 11:55:26 213.180.210.35:64433 -> xxx.yyy.104.70:4480 SYN ******S*
Mar 9 11:55:26 213.180.210.35:40234 -> xxx.yyy.104.70:81 SYN ******S*
Mar 9 11:55:26 213.180.210.35:61965 -> xxx.yyy.104.70:3128 SYN ******S*
Mar 9 11:55:26 213.180.210.35:43838 -> xxx.yyy.104.70:6588 SYN ******S*
[...]
Mar 9 12:15:40 213.180.210.35:34306 -> xxx.yyy.104.70:6018 SYN ******S*
Mar 9 12:15:40 213.180.210.35:34306 -> xxx.yyy.104.70:27374 SYN ******S*
Mar 9 12:15:40 213.180.210.35:34306 -> xxx.yyy.104.70:593 SYN ******S*
Mar 9 12:15:40 213.180.210.35:34306 -> xxx.yyy.104.70:6016 SYN ******S*
Mar 9 12:38:26 213.180.210.35:57052 -> xxx.yyy.104.70:1976 SYN ******S*
Mar 9 12:38:26 213.180.210.35:43203 -> xxx.yyy.104.70:1998 SYN ******S*
Mar 9 12:38:26 213.180.210.35:43063 -> xxx.yyy.104.70:2001 SYN ******S*
Mar 9 12:38:26 213.180.210.35:31651 -> xxx.yyy.104.70:3389 SYN ******S*
Mar 9 12:38:26 213.180.210.35:51651 -> xxx.yyy.104.70:6500 SYN ******S*
20638
Mar 9 14:14:54 213.60.93.4:4698 -> xxx.yyy.1.21:1433 SYN ******S*
Mar 9 14:14:56 213.60.93.4:3956 -> xxx.yyy.1.26:1433 SYN ******S*
Mar 9 14:14:56 213.60.93.4:3790 -> xxx.yyy.1.35:1433 SYN ******S*
Mar 9 14:14:57 213.60.93.4:4101 -> xxx.yyy.1.29:1433 SYN ******S*
Mar 9 14:14:57 213.60.93.4:1429 -> xxx.yyy.1.37:1433 SYN ******S*
Mar 9 14:15:00 213.60.93.4:1605 -> xxx.yyy.1.38:1433 SYN ******S*
Mar 9 14:14:57 213.60.93.4:1076 -> xxx.yyy.1.15:1433 SYN ******S*
Mar 9 14:14:58 213.60.93.4:3030 -> xxx.yyy.1.39:1433 SYN ******S*
[...]
Mar 9 17:57:47 213.60.93.4:4343 -> xxx.yyy.255.222:1433 SYN ******S*
Mar 9 17:57:47 213.60.93.4:1755 -> xxx.yyy.255.252:1433 SYN ******S*
Mar 9 17:57:48 213.60.93.4:3216 -> xxx.yyy.255.224:1433 SYN ******S*
Mar 9 17:57:48 213.60.93.4:1671 -> xxx.yyy.255.227:1433 SYN ******S*
Mar 9 17:57:49 213.60.93.4:1176 -> xxx.yyy.255.230:1433 SYN ******S*
Mar 9 17:57:50 213.60.93.4:4100 -> xxx.yyy.255.238:1433 SYN ******S*
Mar 9 17:57:51 213.60.93.4:4762 -> xxx.yyy.255.239:1433 SYN ******S*
Mar 9 17:57:51 213.60.93.4:1470 -> xxx.yyy.255.244:1433 SYN ******S*
Mar 9 17:57:52 213.60.93.4:3152 -> xxx.yyy.255.248:1433 SYN ******S*
20161
[...]
16826
Mar 9 14:31:30 82.39.9.99:1715 -> xxx.yyy.1.12:1433 SYN ******S*
Mar 9 14:31:33 82.39.9.99:1953 -> xxx.yyy.1.18:1433 SYN ******S*
Mar 9 14:31:30 82.39.9.99:3933 -> xxx.yyy.1.23:1433 SYN ******S*
Mar 9 14:31:30 82.39.9.99:3954 -> xxx.yyy.1.24:1433 SYN ******S*
Mar 9 14:31:30 82.39.9.99:4090 -> xxx.yyy.1.26:1433 SYN ******S*
Mar 9 14:31:30 82.39.9.99:4386 -> xxx.yyy.1.28:1433 SYN ******S*
Mar 9 14:31:30 82.39.9.99:4100 -> xxx.yyy.1.36:1433 SYN ******S*
Mar 9 14:31:30 82.39.9.99:4111 -> xxx.yyy.1.37:1433 SYN ******S*
[...]
Mar 9 17:29:03 82.39.9.99:3225 -> xxx.yyy.255.212:1433 SYN ******S*
Mar 9 17:29:04 82.39.9.99:3522 -> xxx.yyy.255.213:1433 SYN ******S*
Mar 9 17:29:08 82.39.9.99:2308 -> xxx.yyy.255.231:1433 SYN ******S*
Mar 9 17:29:08 82.39.9.99:1894 -> xxx.yyy.255.229:1433 SYN ******S*
Mar 9 17:29:10 82.39.9.99:4340 -> xxx.yyy.255.245:1433 SYN ******S*
Mar 9 17:29:10 82.39.9.99:4332 -> xxx.yyy.255.244:1433 SYN ******S*
Mar 9 17:29:11 82.39.9.99:4503 -> xxx.yyy.255.247:1433 SYN ******S*
Mar 9 17:29:11 82.39.9.99:4611 -> xxx.yyy.255.250:1433 SYN ******S*
15617
Mar 9 19:39:58 210.93.145.106:1279 -> xxx.yyy.1.0:1433 SYN ******S*
Mar 9 19:39:58 210.93.145.106:1280 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 9 19:39:58 210.93.145.106:1283 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 9 19:39:58 210.93.145.106:1282 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 9 19:39:58 210.93.145.106:1281 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 9 19:39:58 210.93.145.106:1304 -> xxx.yyy.1.25:1433 SYN ******S*
Mar 9 19:39:58 210.93.145.106:1308 -> xxx.yyy.1.29:1433 SYN ******S*
Mar 9 19:39:58 210.93.145.106:1309 -> xxx.yyy.1.30:1433 SYN ******S*
[...]
Mar 9 19:40:45 210.93.145.106:1275 -> xxx.yyy.255.226:1433 SYN ******S*
Mar 9 19:40:45 210.93.145.106:1272 -> xxx.yyy.255.223:1433 SYN ******S*
Mar 9 19:40:45 210.93.145.106:1279 -> xxx.yyy.255.230:1433 SYN ******S*
Mar 9 19:40:45 210.93.145.106:1277 -> xxx.yyy.255.228:1433 SYN ******S*
Mar 9 19:40:45 210.93.145.106:1276 -> xxx.yyy.255.227:1433 SYN ******S*
Mar 9 19:40:45 210.93.145.106:1278 -> xxx.yyy.255.229:1433 SYN ******S*
Mar 9 19:40:45 210.93.145.106:1296 -> xxx.yyy.255.247:1433 SYN ******S*
Mar 9 19:40:45 210.93.145.106:1299 -> xxx.yyy.255.250:1433 SYN ******S*
14801
Mar 9 22:08:35 61.153.214.228:3000 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 9 22:08:35 61.153.214.228:1026 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 9 22:08:35 61.153.214.228:1028 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 9 22:08:35 61.153.214.228:1031 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 9 22:08:35 61.153.214.228:1032 -> xxx.yyy.1.6:1433 SYN ******S*
Mar 9 22:08:38 61.153.214.228:1033 -> xxx.yyy.1.7:1433 SYN ******S*
Mar 9 22:08:35 61.153.214.228:1037 -> xxx.yyy.1.9:1433 SYN ******S*
Mar 9 22:08:35 61.153.214.228:1040 -> xxx.yyy.1.11:1433 SYN ******S*
[...]
Mar 9 23:48:11 61.153.214.228:2635 -> xxx.yyy.111.233:1433 SYN ******S*
Mar 9 23:48:12 61.153.214.228:2881 -> xxx.yyy.111.238:1433 SYN ******S*
Mar 9 23:48:12 61.153.214.228:2935 -> xxx.yyy.111.240:1433 SYN ******S*
Mar 9 23:48:12 61.153.214.228:2930 -> xxx.yyy.111.239:1433 SYN ******S*
Mar 9 23:48:12 61.153.214.228:1824 -> xxx.yyy.111.250:1433 SYN ******S*
Mar 9 23:48:12 61.153.214.228:1836 -> xxx.yyy.111.253:1433 SYN ******S*
Mar 9 23:48:12 61.153.214.228:1834 -> xxx.yyy.111.252:1433 SYN ******S*
Mar 9 23:48:12 61.153.214.228:1825 -> xxx.yyy.111.251:1433 SYN ******S*
13942
Mar 9 10:13:56 213.186.254.58:2590 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 9 10:13:56 213.186.254.58:2596 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 9 10:13:56 213.186.254.58:2597 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 9 10:13:56 213.186.254.58:2602 -> xxx.yyy.1.7:1433 SYN ******S*
Mar 9 10:13:53 213.186.254.58:2607 -> xxx.yyy.1.8:1433 SYN ******S*
Mar 9 10:13:56 213.186.254.58:2631 -> xxx.yyy.1.10:1433 SYN ******S*
Mar 9 10:13:53 213.186.254.58:2634 -> xxx.yyy.1.11:1433 SYN ******S*
Mar 9 10:13:53 213.186.254.58:2650 -> xxx.yyy.1.14:1433 SYN ******S*
[...]
Mar 9 11:59:50 213.186.254.58:3983 -> xxx.yyy.175.227:1433 SYN ******S*
Mar 9 11:59:50 213.186.254.58:4930 -> xxx.yyy.176.3:1433 SYN ******S*
Mar 9 11:59:50 213.186.254.58:2383 -> xxx.yyy.175.171:1433 SYN ******S*
Mar 9 11:59:51 213.186.254.58:4530 -> xxx.yyy.176.9:1433 SYN ******S*
Mar 9 11:59:51 213.186.254.58:1677 -> xxx.yyy.175.234:1433 SYN ******S*
Mar 9 11:59:51 213.186.254.58:1922 -> xxx.yyy.176.10:1433 SYN ******S*
Mar 9 11:59:51 213.186.254.58:4954 -> xxx.yyy.175.182:1433 SYN ******S*
Mar 9 11:59:52 213.186.254.58:1618 -> xxx.yyy.176.17:1433 SYN ******S*
13084
Mar 9 21:02:57 203.67.79.223:1354 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 9 21:02:57 203.67.79.223:1358 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 9 21:02:57 203.67.79.223:1359 -> xxx.yyy.1.6:1433 SYN ******S*
Mar 9 21:02:57 203.67.79.223:1360 -> xxx.yyy.1.7:1433 SYN ******S*
Mar 9 21:02:57 203.67.79.223:1363 -> xxx.yyy.1.10:1433 SYN ******S*
Mar 9 21:02:57 203.67.79.223:1364 -> xxx.yyy.1.11:1433 SYN ******S*
Mar 9 21:02:54 203.67.79.223:1374 -> xxx.yyy.1.21:1433 SYN ******S*
Mar 9 21:02:57 203.67.79.223:1376 -> xxx.yyy.1.23:1433 SYN ******S*
[...]
Mar 9 21:42:59 203.67.79.223:3144 -> xxx.yyy.90.3:1433 SYN ******S*
Mar 9 21:42:59 203.67.79.223:3142 -> xxx.yyy.90.1:1433 SYN ******S*
Mar 9 21:42:59 203.67.79.223:3147 -> xxx.yyy.90.6:1433 SYN ******S*
Mar 9 21:42:59 203.67.79.223:3145 -> xxx.yyy.90.4:1433 SYN ******S*
Mar 9 21:42:59 203.67.79.223:3149 -> xxx.yyy.90.8:1433 SYN ******S*
Mar 9 21:42:59 203.67.79.223:3146 -> xxx.yyy.90.5:1433 SYN ******S*
Mar 9 21:42:59 203.67.79.223:3154 -> xxx.yyy.90.13:1433 SYN ******S*
Mar 9 21:42:59 203.67.79.223:3152 -> xxx.yyy.90.11:1433 SYN ******S*
Mar 9 21:42:59 203.67.79.223:3161 -> xxx.yyy.90.20:1433 SYN ******S*
12586
Mar 9 03:29:28 212.102.30.114:2226 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 9 03:29:28 212.102.30.114:2268 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 9 03:29:28 212.102.30.114:2284 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 9 03:29:28 212.102.30.114:2384 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 9 03:29:28 212.102.30.114:2386 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 9 03:29:28 212.102.30.114:2405 -> xxx.yyy.1.6:1433 SYN ******S*
Mar 9 03:29:28 212.102.30.114:2476 -> xxx.yyy.1.7:1433 SYN ******S*
Mar 9 03:29:28 212.102.30.114:2483 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Mar 9 04:13:36 212.102.30.114:2398 -> xxx.yyy.95.216:1433 SYN ******S*
Mar 9 04:13:36 212.102.30.114:2447 -> xxx.yyy.95.218:1433 SYN ******S*
Mar 9 04:13:36 212.102.30.114:2502 -> xxx.yyy.95.219:1433 SYN ******S*
Mar 9 04:13:36 212.102.30.114:2557 -> xxx.yyy.95.221:1433 SYN ******S*
Mar 9 04:13:36 212.102.30.114:2552 -> xxx.yyy.95.220:1433 SYN ******S*
Mar 9 04:13:37 212.102.30.114:2636 -> xxx.yyy.95.223:1433 SYN ******S*
Mar 9 04:13:39 212.102.30.114:2917 -> xxx.yyy.95.229:1433 SYN ******S*
Mar 9 04:13:40 212.102.30.114:1091 -> xxx.yyy.95.253:1433 SYN ******S*
Mar 9 04:13:40 212.102.30.114:1063 -> xxx.yyy.95.255:1433 SYN ******S*
12157
[...]
11506
[...]
11013
Mar 9 14:57:45 85.202.140.142:3487 -> xxx.yyy.1.0:1433 SYN ******S*
Mar 9 14:57:46 85.202.140.142:3525 -> xxx.yyy.1.10:1433 SYN ******S*
Mar 9 14:57:43 85.202.140.142:3550 -> xxx.yyy.1.16:1433 SYN ******S*
Mar 9 14:57:43 85.202.140.142:3552 -> xxx.yyy.1.17:1433 SYN ******S*
Mar 9 14:57:44 85.202.140.142:3564 -> xxx.yyy.1.19:1433 SYN ******S*
Mar 9 14:57:44 85.202.140.142:3594 -> xxx.yyy.1.24:1433 SYN ******S*
Mar 9 14:57:44 85.202.140.142:3605 -> xxx.yyy.1.26:1433 SYN ******S*
Mar 9 14:57:44 85.202.140.142:3611 -> xxx.yyy.1.27:1433 SYN ******S*
[...]
Mar 9 18:18:29 85.202.140.142:1447 -> xxx.yyy.202.219:1433 SYN ******S*
Mar 9 18:18:30 85.202.140.142:1098 -> xxx.yyy.202.211:1433 SYN ******S*
Mar 9 18:18:30 85.202.140.142:1192 -> xxx.yyy.202.213:1433 SYN ******S*
Mar 9 18:18:30 85.202.140.142:1221 -> xxx.yyy.202.215:1433 SYN ******S*
Mar 9 18:18:30 85.202.140.142:1680 -> xxx.yyy.202.222:1433 SYN ******S*
Mar 9 18:18:31 85.202.140.142:1366 -> xxx.yyy.202.218:1433 SYN ******S*
Mar 9 18:18:32 85.202.140.142:4008 -> xxx.yyy.202.191:1433 SYN ******S*
Mar 9 18:18:32 85.202.140.142:1755 -> xxx.yyy.202.225:1433 SYN ******S*
10588
Mar 9 18:00:38 80.55.172.178:3949 -> xxx.yyy.1.2:3306 SYN ******S*
Mar 9 18:00:35 80.55.172.178:3986 -> xxx.yyy.1.3:3306 SYN ******S*
Mar 9 18:00:35 80.55.172.178:4076 -> xxx.yyy.1.5:3306 SYN ******S*
Mar 9 18:00:36 80.55.172.178:4211 -> xxx.yyy.1.8:3306 SYN ******S*
Mar 9 18:00:36 80.55.172.178:4254 -> xxx.yyy.1.9:3306 SYN ******S*
Mar 9 18:00:36 80.55.172.178:4294 -> xxx.yyy.1.10:3306 SYN ******S*
Mar 9 18:00:36 80.55.172.178:4322 -> xxx.yyy.1.11:3306 SYN ******S*
Mar 9 18:00:36 80.55.172.178:4369 -> xxx.yyy.1.12:3306 SYN ******S*
[...]
Mar 9 19:45:25 80.55.172.178:4365 -> xxx.yyy.137.152:3306 SYN ******S*
Mar 9 19:45:26 80.55.172.178:4631 -> xxx.yyy.137.154:3306 SYN ******S*
Mar 9 19:45:26 80.55.172.178:4481 -> xxx.yyy.137.136:3306 SYN ******S*
Mar 9 19:45:26 80.55.172.178:4541 -> xxx.yyy.137.137:3306 SYN ******S*
Mar 9 19:45:26 80.55.172.178:4754 -> xxx.yyy.137.156:3306 SYN ******S*
Mar 9 19:45:26 80.55.172.178:4684 -> xxx.yyy.137.139:3306 SYN ******S*
Mar 9 19:45:26 80.55.172.178:4959 -> xxx.yyy.137.157:3306 SYN ******S*
Mar 9 19:45:26 80.55.172.178:3005 -> xxx.yyy.137.140:3306 SYN ******S*
Mar 9 19:45:27 80.55.172.178:3062 -> xxx.yyy.137.158:3306 SYN ******S*
10012
Mar 9 19:40:50 218.24.4.70:4260 -> xxx.yyy.64.6:1433 SYN ******S*
Mar 9 19:40:48 218.24.4.70:4341 -> xxx.yyy.64.8:1433 SYN ******S*
Mar 9 19:40:49 218.24.4.70:4175 -> xxx.yyy.64.5:1433 SYN ******S*
Mar 9 19:40:51 218.24.4.70:4557 -> xxx.yyy.64.11:1433 SYN ******S*
Mar 9 19:40:51 218.24.4.70:4595 -> xxx.yyy.64.12:1433 SYN ******S*
Mar 9 19:40:51 218.24.4.70:4650 -> xxx.yyy.64.14:1433 SYN ******S*
Mar 9 19:40:51 218.24.4.70:4769 -> xxx.yyy.64.17:1433 SYN ******S*
Mar 9 19:40:52 218.24.4.70:1063 -> xxx.yyy.64.20:1433 SYN ******S*
[...]
Mar 9 22:33:50 218.24.4.70:1109 -> xxx.yyy.255.248:1433 SYN ******S*
Mar 9 22:33:51 218.24.4.70:4520 -> xxx.yyy.255.233:1433 SYN ******S*
Mar 9 22:33:52 218.24.4.70:3695 -> xxx.yyy.255.176:1433 SYN ******S*
Mar 9 22:33:52 218.24.4.70:4787 -> xxx.yyy.255.242:1433 SYN ******S*
Mar 9 22:33:52 218.24.4.70:3803 -> xxx.yyy.255.191:1433 SYN ******S*
Mar 9 22:33:53 218.24.4.70:4928 -> xxx.yyy.255.244:1433 SYN ******S*
Mar 9 22:33:54 218.24.4.70:4156 -> xxx.yyy.255.222:1433 SYN ******S*
Mar 9 22:33:55 218.24.4.70:4197 -> xxx.yyy.255.225:1433 SYN ******S*
Mar 9 22:33:59 218.24.4.70:1069 -> xxx.yyy.255.247:1433 SYN ******S*
9695
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list