[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Sat Mar 12 13:26:23 GMT 2005
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Mar 11 14:26:32 222.164.10.70:2734 -> xxx.yyy.1.0:1433 SYN ******S*
Mar 11 14:26:33 222.164.10.70:2735 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 11 14:26:30 222.164.10.70:2736 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 11 14:26:33 222.164.10.70:2737 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 11 14:26:33 222.164.10.70:2738 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 11 14:26:33 222.164.10.70:2740 -> xxx.yyy.1.6:1433 SYN ******S*
Mar 11 14:26:33 222.164.10.70:2741 -> xxx.yyy.1.7:1433 SYN ******S*
Mar 11 14:26:33 222.164.10.70:2744 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
Mar 11 18:15:16 222.164.10.70:2394 -> xxx.yyy.255.246:1433 SYN ******S*
Mar 11 18:15:16 222.164.10.70:2395 -> xxx.yyy.255.247:1433 SYN ******S*
Mar 11 18:15:16 222.164.10.70:2397 -> xxx.yyy.255.248:1433 SYN ******S*
Mar 11 18:15:16 222.164.10.70:2428 -> xxx.yyy.255.249:1433 SYN ******S*
Mar 11 18:15:17 222.164.10.70:2435 -> xxx.yyy.255.250:1433 SYN ******S*
Mar 11 18:15:17 222.164.10.70:2437 -> xxx.yyy.255.251:1433 SYN ******S*
Mar 11 18:15:17 222.164.10.70:2454 -> xxx.yyy.255.252:1433 SYN ******S*
Mar 11 18:15:17 222.164.10.70:2482 -> xxx.yyy.255.253:1433 SYN ******S*
Mar 11 18:15:17 222.164.10.70:2530 -> xxx.yyy.255.254:1433 SYN ******S*
106683
Mar 11 05:39:15 61.97.158.121:3566 -> xxx.yyy.1.0:443 SYN 12****S*
Mar 11 05:39:15 61.97.158.121:3569 -> xxx.yyy.1.3:443 SYN 12****S*
Mar 11 05:39:18 61.97.158.121:3590 -> xxx.yyy.1.24:443 SYN 12****S*
Mar 11 05:39:18 61.97.158.121:3573 -> xxx.yyy.1.7:443 SYN 12****S*
Mar 11 05:39:18 61.97.158.121:3576 -> xxx.yyy.1.10:443 SYN 12****S*
Mar 11 05:39:15 61.97.158.121:3592 -> xxx.yyy.1.26:443 SYN 12****S*
Mar 11 05:39:15 61.97.158.121:3611 -> xxx.yyy.1.26:80 SYN 12****S*
Mar 11 05:39:18 61.97.158.121:3570 -> xxx.yyy.1.4:443 SYN 12****S*
[...]
Mar 11 06:14:13 61.97.158.121:3029 -> xxx.yyy.255.254:443 SYN 12****S*
Mar 11 06:14:13 61.97.158.121:3022 -> xxx.yyy.255.247:443 SYN 12****S*
Mar 11 06:14:13 61.97.158.121:3023 -> xxx.yyy.255.248:443 SYN 12****S*
Mar 11 06:14:13 61.97.158.121:3026 -> xxx.yyy.255.251:443 SYN 12****S*
Mar 11 06:14:13 61.97.158.121:3028 -> xxx.yyy.255.253:443 SYN 12****S*
Mar 11 06:14:13 61.97.158.121:3027 -> xxx.yyy.255.252:443 SYN 12****S*
Mar 11 06:14:13 61.97.158.121:3025 -> xxx.yyy.255.250:443 SYN 12****S*
Mar 11 06:14:13 61.97.158.121:3021 -> xxx.yyy.255.246:443 SYN 12****S*
99924
Mar 11 03:56:19 61.175.235.78:3417 -> xxx.yyy.1.1:10203 SYN ******S*
Mar 11 03:56:18 61.175.235.78:3418 -> xxx.yyy.1.2:10203 SYN ******S*
Mar 11 03:56:19 61.175.235.78:3419 -> xxx.yyy.1.3:10203 SYN ******S*
Mar 11 03:56:20 61.175.235.78:3420 -> xxx.yyy.1.4:10203 SYN ******S*
Mar 11 03:56:18 61.175.235.78:3421 -> xxx.yyy.1.5:10203 SYN ******S*
Mar 11 03:56:20 61.175.235.78:3422 -> xxx.yyy.1.6:10203 SYN ******S*
Mar 11 03:56:19 61.175.235.78:3424 -> xxx.yyy.1.8:10203 SYN ******S*
Mar 11 03:56:20 61.175.235.78:3423 -> xxx.yyy.1.7:10203 SYN ******S*
[...]
Mar 11 04:11:53 61.175.235.78:3233 -> xxx.yyy.255.234:10203 SYN ******S*
Mar 11 04:11:53 61.175.235.78:3246 -> xxx.yyy.255.247:10203 SYN ******S*
Mar 11 04:11:53 61.175.235.78:3230 -> xxx.yyy.255.231:10203 SYN ******S*
Mar 11 04:11:53 61.175.235.78:3227 -> xxx.yyy.255.228:10203 SYN ******S*
Mar 11 04:11:53 61.175.235.78:3243 -> xxx.yyy.255.244:10203 SYN ******S*
Mar 11 04:11:53 61.175.235.78:3240 -> xxx.yyy.255.241:10203 SYN ******S*
Mar 11 04:11:53 61.175.235.78:3253 -> xxx.yyy.255.254:10203 SYN ******S*
Mar 11 04:11:53 61.175.235.78:3237 -> xxx.yyy.255.238:10203 SYN ******S*
97871
Mar 11 11:32:48 137.82.14.103:4356 -> xxx.yyy.1.4:3306 SYN ******S*
Mar 11 11:32:51 137.82.14.103:4365 -> xxx.yyy.1.8:3306 SYN ******S*
Mar 11 11:32:51 137.82.14.103:4367 -> xxx.yyy.1.9:3306 SYN ******S*
Mar 11 11:32:48 137.82.14.103:4374 -> xxx.yyy.1.12:3306 SYN ******S*
Mar 11 11:32:51 137.82.14.103:4376 -> xxx.yyy.1.13:3306 SYN ******S*
Mar 11 11:32:51 137.82.14.103:4380 -> xxx.yyy.1.15:3306 SYN ******S*
Mar 11 11:32:51 137.82.14.103:4386 -> xxx.yyy.1.18:3306 SYN ******S*
Mar 11 11:32:51 137.82.14.103:4409 -> xxx.yyy.1.29:3306 SYN ******S*
[...]
Mar 11 11:51:15 137.82.14.103:4049 -> xxx.yyy.255.209:3306 SYN ******S*
Mar 11 11:51:15 137.82.14.103:4078 -> xxx.yyy.255.238:3306 SYN ******S*
Mar 11 11:51:15 137.82.14.103:4046 -> xxx.yyy.255.206:3306 SYN ******S*
Mar 11 11:51:15 137.82.14.103:4094 -> xxx.yyy.255.254:3306 SYN ******S*
Mar 11 11:51:15 137.82.14.103:4062 -> xxx.yyy.255.222:3306 SYN ******S*
Mar 11 11:51:15 137.82.14.103:4059 -> xxx.yyy.255.219:3306 SYN ******S*
Mar 11 11:51:15 137.82.14.103:4071 -> xxx.yyy.255.232:3306 SYN ******S*
Mar 11 11:51:15 137.82.14.103:4054 -> xxx.yyy.255.214:3306 SYN ******S*
Mar 11 11:51:15 137.82.14.103:4070 -> xxx.yyy.255.230:3306 SYN ******S*
79281
Mar 11 07:40:12 218.65.242.211:3859 -> xxx.yyy.64.0:1433 SYN ******S*
Mar 11 07:40:09 218.65.242.211:3905 -> xxx.yyy.64.1:1433 SYN ******S*
Mar 11 07:40:12 218.65.242.211:3922 -> xxx.yyy.64.3:1433 SYN ******S*
Mar 11 07:40:09 218.65.242.211:3932 -> xxx.yyy.64.4:1433 SYN ******S*
Mar 11 07:40:12 218.65.242.211:3943 -> xxx.yyy.64.5:1433 SYN ******S*
Mar 11 07:40:09 218.65.242.211:3945 -> xxx.yyy.64.6:1433 SYN ******S*
Mar 11 07:40:09 218.65.242.211:3948 -> xxx.yyy.64.7:1433 SYN ******S*
Mar 11 07:40:12 218.65.242.211:3952 -> xxx.yyy.64.8:1433 SYN ******S*
[...]
Mar 11 10:33:29 218.65.242.211:1052 -> xxx.yyy.255.240:1433 SYN ******S*
Mar 11 10:33:30 218.65.242.211:1066 -> xxx.yyy.255.242:1433 SYN ******S*
Mar 11 10:33:30 218.65.242.211:1166 -> xxx.yyy.255.245:1433 SYN ******S*
Mar 11 10:33:31 218.65.242.211:1197 -> xxx.yyy.255.246:1433 SYN ******S*
Mar 11 10:33:31 218.65.242.211:1357 -> xxx.yyy.255.249:1433 SYN ******S*
Mar 11 10:33:31 218.65.242.211:1520 -> xxx.yyy.255.252:1433 SYN ******S*
Mar 11 10:33:31 218.65.242.211:1535 -> xxx.yyy.255.253:1433 SYN ******S*
Mar 11 10:33:31 218.65.242.211:1509 -> xxx.yyy.255.251:1433 SYN ******S*
75538
Mar 11 23:39:56 62.119.28.210:2998 -> xxx.yyy.1.1:3306 SYN ******S*
Mar 11 23:39:56 62.119.28.210:2999 -> xxx.yyy.1.2:3306 SYN ******S*
Mar 11 23:39:56 62.119.28.210:3000 -> xxx.yyy.1.3:3306 SYN ******S*
Mar 11 23:39:56 62.119.28.210:3001 -> xxx.yyy.1.4:3306 SYN ******S*
Mar 11 23:39:56 62.119.28.210:3002 -> xxx.yyy.1.5:3306 SYN ******S*
Mar 11 23:39:56 62.119.28.210:3003 -> xxx.yyy.1.6:3306 SYN ******S*
Mar 11 23:39:56 62.119.28.210:3004 -> xxx.yyy.1.7:3306 SYN ******S*
Mar 11 23:39:56 62.119.28.210:3005 -> xxx.yyy.1.8:3306 SYN ******S*
[...]
Mar 11 23:51:40 62.119.28.210:1599 -> xxx.yyy.255.234:3306 SYN ******S*
Mar 11 23:51:40 62.119.28.210:1606 -> xxx.yyy.255.241:3306 SYN ******S*
Mar 11 23:51:40 62.119.28.210:1608 -> xxx.yyy.255.243:3306 SYN ******S*
Mar 11 23:51:40 62.119.28.210:1610 -> xxx.yyy.255.245:3306 SYN ******S*
Mar 11 23:51:40 62.119.28.210:1609 -> xxx.yyy.255.244:3306 SYN ******S*
Mar 11 23:51:40 62.119.28.210:1611 -> xxx.yyy.255.246:3306 SYN ******S*
Mar 11 23:51:40 62.119.28.210:1612 -> xxx.yyy.255.247:3306 SYN ******S*
Mar 11 23:51:40 62.119.28.210:1607 -> xxx.yyy.255.242:3306 SYN ******S*
Mar 11 23:51:40 62.119.28.210:1616 -> xxx.yyy.255.251:3306 SYN ******S*
70525
Mar 11 06:28:25 195.19.199.123:3058 -> xxx.yyy.1.1:21 SYN ******S*
Mar 11 06:28:25 195.19.199.123:3059 -> xxx.yyy.1.2:21 SYN ******S*
Mar 11 06:28:25 195.19.199.123:3060 -> xxx.yyy.1.3:21 SYN ******S*
Mar 11 06:28:25 195.19.199.123:3061 -> xxx.yyy.1.4:21 SYN ******S*
Mar 11 06:28:25 195.19.199.123:3062 -> xxx.yyy.1.5:21 SYN ******S*
Mar 11 06:28:25 195.19.199.123:3063 -> xxx.yyy.1.6:21 SYN ******S*
Mar 11 06:28:25 195.19.199.123:3064 -> xxx.yyy.1.7:21 SYN ******S*
Mar 11 06:28:22 195.19.199.123:3065 -> xxx.yyy.1.8:21 SYN ******S*
[...]
Mar 11 06:40:13 195.19.199.123:1412 -> xxx.yyy.255.210:21 SYN ******S*
Mar 11 06:40:13 195.19.199.123:1409 -> xxx.yyy.255.207:21 SYN ******S*
Mar 11 06:40:13 195.19.199.123:1413 -> xxx.yyy.255.211:21 SYN ******S*
Mar 11 06:40:13 195.19.199.123:1410 -> xxx.yyy.255.208:21 SYN ******S*
Mar 11 06:40:14 195.19.199.123:1454 -> xxx.yyy.255.251:21 SYN ******S*
Mar 11 06:40:14 195.19.199.123:1451 -> xxx.yyy.255.248:21 SYN ******S*
Mar 11 06:40:14 195.19.199.123:1452 -> xxx.yyy.255.249:21 SYN ******S*
Mar 11 06:40:14 195.19.199.123:1457 -> xxx.yyy.255.254:21 SYN ******S*
68408
Mar 11 07:18:24 218.114.124.110:1786 -> xxx.yyy.1.1:3306 SYN ******S*
Mar 11 07:18:24 218.114.124.110:1789 -> xxx.yyy.1.2:3306 SYN ******S*
Mar 11 07:18:24 218.114.124.110:1795 -> xxx.yyy.1.3:3306 SYN ******S*
Mar 11 07:18:24 218.114.124.110:1800 -> xxx.yyy.1.4:3306 SYN ******S*
Mar 11 07:18:24 218.114.124.110:1806 -> xxx.yyy.1.5:3306 SYN ******S*
Mar 11 07:18:24 218.114.124.110:1811 -> xxx.yyy.1.6:3306 SYN ******S*
Mar 11 07:18:24 218.114.124.110:1816 -> xxx.yyy.1.7:3306 SYN ******S*
Mar 11 07:18:24 218.114.124.110:1819 -> xxx.yyy.1.8:3306 SYN ******S*
[...]
Mar 11 07:32:18 218.114.124.110:3276 -> xxx.yyy.255.245:3306 SYN ******S*
Mar 11 07:32:18 218.114.124.110:3280 -> xxx.yyy.255.249:3306 SYN ******S*
Mar 11 07:32:18 218.114.124.110:3277 -> xxx.yyy.255.246:3306 SYN ******S*
Mar 11 07:32:18 218.114.124.110:3274 -> xxx.yyy.255.243:3306 SYN ******S*
Mar 11 07:32:18 218.114.124.110:3281 -> xxx.yyy.255.250:3306 SYN ******S*
Mar 11 07:32:18 218.114.124.110:3275 -> xxx.yyy.255.244:3306 SYN ******S*
Mar 11 07:32:18 218.114.124.110:3282 -> xxx.yyy.255.251:3306 SYN ******S*
Mar 11 07:32:18 218.114.124.110:3284 -> xxx.yyy.255.253:3306 SYN ******S*
Mar 11 07:32:18 218.114.124.110:3285 -> xxx.yyy.255.254:3306 SYN ******S*
67304
Mar 11 19:39:22 202.147.99.26:3658 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 11 19:39:22 202.147.99.26:3669 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 11 19:39:22 202.147.99.26:3652 -> xxx.yyy.1.0:1433 SYN ******S*
Mar 11 19:39:22 202.147.99.26:3700 -> xxx.yyy.1.8:1433 SYN ******S*
Mar 11 19:39:22 202.147.99.26:3707 -> xxx.yyy.1.10:1433 SYN ******S*
Mar 11 19:39:22 202.147.99.26:3716 -> xxx.yyy.1.12:1433 SYN ******S*
Mar 11 19:39:22 202.147.99.26:3722 -> xxx.yyy.1.14:1433 SYN ******S*
Mar 11 19:39:22 202.147.99.26:3735 -> xxx.yyy.1.19:1433 SYN ******S*
[...]
Mar 11 23:28:02 202.147.99.26:1200 -> xxx.yyy.255.236:1433 SYN ******S*
Mar 11 23:28:03 202.147.99.26:1217 -> xxx.yyy.255.237:1433 SYN ******S*
Mar 11 23:28:03 202.147.99.26:1224 -> xxx.yyy.255.238:1433 SYN ******S*
Mar 11 23:28:03 202.147.99.26:1260 -> xxx.yyy.255.241:1433 SYN ******S*
Mar 11 23:28:03 202.147.99.26:1256 -> xxx.yyy.255.240:1433 SYN ******S*
Mar 11 23:28:04 202.147.99.26:1304 -> xxx.yyy.255.246:1433 SYN ******S*
Mar 11 23:28:04 202.147.99.26:1303 -> xxx.yyy.255.245:1433 SYN ******S*
Mar 11 23:28:04 202.147.99.26:1308 -> xxx.yyy.255.248:1433 SYN ******S*
Mar 11 23:28:04 202.147.99.26:1313 -> xxx.yyy.255.249:1433 SYN ******S*
57907
Mar 11 19:39:22 202.126.109.42:3674 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 11 19:39:22 202.126.109.42:3673 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 11 19:39:22 202.126.109.42:3679 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 11 19:39:22 202.126.109.42:3686 -> xxx.yyy.1.6:1433 SYN ******S*
Mar 11 19:39:22 202.126.109.42:3688 -> xxx.yyy.1.7:1433 SYN ******S*
Mar 11 19:39:22 202.126.109.42:3704 -> xxx.yyy.1.9:1433 SYN ******S*
Mar 11 19:39:22 202.126.109.42:3709 -> xxx.yyy.1.11:1433 SYN ******S*
Mar 11 19:39:22 202.126.109.42:3727 -> xxx.yyy.1.15:1433 SYN ******S*
[...]
Mar 11 23:28:03 202.126.109.42:1283 -> xxx.yyy.255.243:1433 SYN ******S*
Mar 11 23:28:03 202.126.109.42:1293 -> xxx.yyy.255.244:1433 SYN ******S*
Mar 11 23:28:04 202.126.109.42:1306 -> xxx.yyy.255.247:1433 SYN ******S*
Mar 11 23:28:04 202.126.109.42:1316 -> xxx.yyy.255.251:1433 SYN ******S*
Mar 11 23:28:04 202.126.109.42:1314 -> xxx.yyy.255.250:1433 SYN ******S*
Mar 11 23:28:04 202.126.109.42:1324 -> xxx.yyy.255.252:1433 SYN ******S*
Mar 11 23:28:04 202.126.109.42:1328 -> xxx.yyy.255.253:1433 SYN ******S*
Mar 11 23:28:05 202.126.109.42:1333 -> xxx.yyy.255.254:1433 SYN ******S*
57373
Mar 11 14:28:39 140.247.37.246:4339 -> xxx.yyy.1.1:5477 SYN ******S*
Mar 11 14:28:39 140.247.37.246:4340 -> xxx.yyy.1.2:5477 SYN ******S*
Mar 11 14:28:38 140.247.37.246:4344 -> xxx.yyy.1.6:5477 SYN ******S*
Mar 11 14:28:38 140.247.37.246:4345 -> xxx.yyy.1.7:5477 SYN ******S*
Mar 11 14:28:39 140.247.37.246:4346 -> xxx.yyy.1.8:5477 SYN ******S*
Mar 11 14:28:38 140.247.37.246:4347 -> xxx.yyy.1.9:5477 SYN ******S*
Mar 11 14:28:38 140.247.37.246:4348 -> xxx.yyy.1.10:5477 SYN ******S*
Mar 11 14:28:38 140.247.37.246:4349 -> xxx.yyy.1.11:5477 SYN ******S*
[...]
Mar 11 14:40:19 140.247.37.246:2939 -> xxx.yyy.255.228:5477 SYN ******S*
Mar 11 14:40:19 140.247.37.246:2942 -> xxx.yyy.255.231:5477 SYN ******S*
Mar 11 14:40:20 140.247.37.246:2951 -> xxx.yyy.255.240:5477 SYN ******S*
Mar 11 14:40:20 140.247.37.246:2946 -> xxx.yyy.255.235:5477 SYN ******S*
Mar 11 14:40:20 140.247.37.246:2945 -> xxx.yyy.255.234:5477 SYN ******S*
Mar 11 14:40:20 140.247.37.246:2949 -> xxx.yyy.255.238:5477 SYN ******S*
Mar 11 14:40:20 140.247.37.246:2948 -> xxx.yyy.255.237:5477 SYN ******S*
Mar 11 14:40:20 140.247.37.246:2964 -> xxx.yyy.255.253:5477 SYN ******S*
53776
Mar 11 11:26:29 192.150.249.113:2406 -> xxx.yyy.1.8:21 SYN ******S*
Mar 11 11:26:29 192.150.249.113:2407 -> xxx.yyy.1.9:21 SYN ******S*
Mar 11 11:26:26 192.150.249.113:2408 -> xxx.yyy.1.10:21 SYN ******S*
Mar 11 11:26:26 192.150.249.113:2409 -> xxx.yyy.1.11:21 SYN ******S*
Mar 11 11:26:29 192.150.249.113:2410 -> xxx.yyy.1.12:21 SYN ******S*
Mar 11 11:26:26 192.150.249.113:2411 -> xxx.yyy.1.13:21 SYN ******S*
Mar 11 11:26:26 192.150.249.113:2412 -> xxx.yyy.1.14:21 SYN ******S*
Mar 11 11:26:29 192.150.249.113:2413 -> xxx.yyy.1.15:21 SYN ******S*
[...]
Mar 11 11:37:21 192.150.249.113:2164 -> xxx.yyy.255.222:21 SYN ******S*
Mar 11 11:37:21 192.150.249.113:2165 -> xxx.yyy.255.223:21 SYN ******S*
Mar 11 11:37:21 192.150.249.113:2162 -> xxx.yyy.255.220:21 SYN ******S*
Mar 11 11:37:21 192.150.249.113:2168 -> xxx.yyy.255.226:21 SYN ******S*
Mar 11 11:37:21 192.150.249.113:2161 -> xxx.yyy.255.219:21 SYN ******S*
Mar 11 11:37:22 192.150.249.113:2189 -> xxx.yyy.255.247:21 SYN ******S*
Mar 11 11:37:22 192.150.249.113:2181 -> xxx.yyy.255.239:21 SYN ******S*
Mar 11 11:37:22 192.150.249.113:2191 -> xxx.yyy.255.249:21 SYN ******S*
Mar 11 11:37:22 192.150.249.113:2196 -> xxx.yyy.255.254:21 SYN ******S*
51526
Mar 11 03:10:59 221.239.8.243:32067 -> xxx.yyy.1.0:1433 SYN ******S*
Mar 11 03:11:00 221.239.8.243:32068 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 11 03:11:00 221.239.8.243:58099 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 11 03:11:00 221.239.8.243:30228 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 11 03:10:57 221.239.8.243:37891 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 11 03:11:00 221.239.8.243:32070 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 11 03:11:00 221.239.8.243:32071 -> xxx.yyy.1.6:1433 SYN ******S*
Mar 11 03:11:00 221.239.8.243:32073 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Mar 11 06:59:42 221.239.8.243:35447 -> xxx.yyy.255.231:1433 SYN ******S*
Mar 11 06:59:43 221.239.8.243:48509 -> xxx.yyy.255.238:1433 SYN ******S*
Mar 11 06:59:43 221.239.8.243:45450 -> xxx.yyy.255.239:1433 SYN ******S*
Mar 11 06:59:43 221.239.8.243:50809 -> xxx.yyy.255.236:1433 SYN ******S*
Mar 11 06:59:44 221.239.8.243:37600 -> xxx.yyy.255.240:1433 SYN ******S*
Mar 11 06:59:45 221.239.8.243:51905 -> xxx.yyy.255.250:1433 SYN ******S*
Mar 11 06:59:46 221.239.8.243:33163 -> xxx.yyy.255.252:1433 SYN ******S*
Mar 11 06:59:46 221.239.8.243:60809 -> xxx.yyy.255.253:1433 SYN ******S*
50883
Mar 11 15:01:22 128.122.78.15:4797 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 11 15:01:22 128.122.78.15:4799 -> xxx.yyy.1.6:1433 SYN ******S*
Mar 11 15:01:22 128.122.78.15:4796 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 11 15:01:19 128.122.78.15:4795 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 11 15:01:22 128.122.78.15:4800 -> xxx.yyy.1.7:1433 SYN ******S*
Mar 11 15:01:19 128.122.78.15:4803 -> xxx.yyy.1.8:1433 SYN ******S*
Mar 11 15:01:22 128.122.78.15:4804 -> xxx.yyy.1.9:1433 SYN ******S*
Mar 11 15:01:22 128.122.78.15:4812 -> xxx.yyy.1.13:1433 SYN ******S*
[...]
Mar 11 15:06:19 128.122.78.15:2009 -> xxx.yyy.255.252:1433 SYN ******S*
Mar 11 15:06:19 128.122.78.15:2006 -> xxx.yyy.255.249:1433 SYN ******S*
Mar 11 15:06:19 128.122.78.15:1993 -> xxx.yyy.255.236:1433 SYN ******S*
Mar 11 15:06:19 128.122.78.15:2003 -> xxx.yyy.255.246:1433 SYN ******S*
Mar 11 15:06:19 128.122.78.15:1997 -> xxx.yyy.255.240:1433 SYN ******S*
Mar 11 15:06:19 128.122.78.15:2000 -> xxx.yyy.255.243:1433 SYN ******S*
Mar 11 15:06:19 128.122.78.15:2010 -> xxx.yyy.255.253:1433 SYN ******S*
Mar 11 15:06:19 128.122.78.15:2007 -> xxx.yyy.255.250:1433 SYN ******S*
Mar 11 15:06:19 128.122.78.15:1994 -> xxx.yyy.255.237:1433 SYN ******S*
44158
Mar 11 13:38:01 207.50.193.211:1692 -> xxx.yyy.1.3:3306 SYN ******S*
Mar 11 13:38:01 207.50.193.211:1690 -> xxx.yyy.1.1:3306 SYN ******S*
Mar 11 13:38:01 207.50.193.211:1694 -> xxx.yyy.1.5:3306 SYN ******S*
Mar 11 13:38:01 207.50.193.211:1695 -> xxx.yyy.1.6:3306 SYN ******S*
Mar 11 13:38:01 207.50.193.211:1698 -> xxx.yyy.1.9:3306 SYN ******S*
Mar 11 13:38:01 207.50.193.211:1699 -> xxx.yyy.1.10:3306 SYN ******S*
Mar 11 13:38:01 207.50.193.211:1700 -> xxx.yyy.1.11:3306 SYN ******S*
Mar 11 13:37:59 207.50.193.211:1702 -> xxx.yyy.1.13:3306 SYN ******S*
[...]
Mar 11 13:46:53 207.50.193.211:2944 -> xxx.yyy.255.226:3306 SYN ******S*
Mar 11 13:46:53 207.50.193.211:2945 -> xxx.yyy.255.227:3306 SYN ******S*
Mar 11 13:46:53 207.50.193.211:2946 -> xxx.yyy.255.228:3306 SYN ******S*
Mar 11 13:46:53 207.50.193.211:2947 -> xxx.yyy.255.229:3306 SYN ******S*
Mar 11 13:46:53 207.50.193.211:2948 -> xxx.yyy.255.230:3306 SYN ******S*
Mar 11 13:46:53 207.50.193.211:2956 -> xxx.yyy.255.238:3306 SYN ******S*
Mar 11 13:46:53 207.50.193.211:2960 -> xxx.yyy.255.242:3306 SYN ******S*
Mar 11 13:46:53 207.50.193.211:2954 -> xxx.yyy.255.236:3306 SYN ******S*
41378
Mar 11 16:48:10 209.175.103.226:4601 -> xxx.yyy.1.1:3306 SYN ******S*
Mar 11 16:48:13 209.175.103.226:4602 -> xxx.yyy.1.2:3306 SYN ******S*
Mar 11 16:48:10 209.175.103.226:4604 -> xxx.yyy.1.4:3306 SYN ******S*
Mar 11 16:48:10 209.175.103.226:4603 -> xxx.yyy.1.3:3306 SYN ******S*
Mar 11 16:48:10 209.175.103.226:4605 -> xxx.yyy.1.5:3306 SYN ******S*
Mar 11 16:48:10 209.175.103.226:4606 -> xxx.yyy.1.6:3306 SYN ******S*
Mar 11 16:48:10 209.175.103.226:4607 -> xxx.yyy.1.7:3306 SYN ******S*
Mar 11 16:48:10 209.175.103.226:4608 -> xxx.yyy.1.8:3306 SYN ******S*
[...]
Mar 11 17:07:20 209.175.103.226:4331 -> xxx.yyy.255.235:3306 SYN ******S*
Mar 11 17:07:20 209.175.103.226:4332 -> xxx.yyy.255.236:3306 SYN ******S*
Mar 11 17:07:20 209.175.103.226:4333 -> xxx.yyy.255.237:3306 SYN ******S*
Mar 11 17:07:20 209.175.103.226:4334 -> xxx.yyy.255.238:3306 SYN ******S*
Mar 11 17:07:20 209.175.103.226:4335 -> xxx.yyy.255.239:3306 SYN ******S*
Mar 11 17:07:20 209.175.103.226:4336 -> xxx.yyy.255.240:3306 SYN ******S*
Mar 11 17:07:20 209.175.103.226:4337 -> xxx.yyy.255.241:3306 SYN ******S*
Mar 11 17:07:20 209.175.103.226:4338 -> xxx.yyy.255.242:3306 SYN ******S*
Mar 11 17:07:22 209.175.103.226:4319 -> xxx.yyy.255.223:3306 SYN ******S*
32970
[...]
21397
Mar 11 23:52:30 218.93.164.199:1398 -> xxx.yyy.71.160:5554 SYN ******S*
Mar 11 23:52:33 218.93.164.199:2878 -> xxx.yyy.71.160:9898 SYN ******S*
Mar 11 23:52:30 218.93.164.199:1401 -> xxx.yyy.71.162:5554 SYN ******S*
Mar 11 23:52:31 218.93.164.199:1968 -> xxx.yyy.71.162:1023 SYN ******S*
Mar 11 23:52:30 218.93.164.199:1402 -> xxx.yyy.71.163:5554 SYN ******S*
Mar 11 23:52:31 218.93.164.199:1969 -> xxx.yyy.71.163:1023 SYN ******S*
Mar 11 23:52:33 218.93.164.199:2882 -> xxx.yyy.71.163:9898 SYN ******S*
Mar 11 23:52:30 218.93.164.199:1403 -> xxx.yyy.71.164:5554 SYN ******S*
[...]
Mar 11 23:53:55 218.93.164.199:2313 -> xxx.yyy.11.63:9898 SYN ******S*
Mar 11 23:53:52 218.93.164.199:4641 -> xxx.yyy.11.58:5554 SYN ******S*
Mar 11 23:53:53 218.93.164.199:1403 -> xxx.yyy.11.58:1023 SYN ******S*
Mar 11 23:53:55 218.93.164.199:2314 -> xxx.yyy.11.58:9898 SYN ******S*
Mar 11 23:53:52 218.93.164.199:4673 -> xxx.yyy.11.60:5554 SYN ******S*
Mar 11 23:53:55 218.93.164.199:2315 -> xxx.yyy.11.60:9898 SYN ******S*
Mar 11 23:53:52 218.93.164.199:4674 -> xxx.yyy.11.61:5554 SYN ******S*
Mar 11 23:53:53 218.93.164.199:1406 -> xxx.yyy.11.61:1023 SYN ******S*
Mar 11 23:53:55 218.93.164.199:2317 -> xxx.yyy.11.61:9898 SYN ******S*
16350
[...]
15975
Mar 11 22:54:15 61.211.37.52:2662 -> xxx.yyy.174.222:5554 SYN ******S*
Mar 11 22:54:16 61.211.37.52:2969 -> xxx.yyy.174.222:1023 SYN ******S*
Mar 11 22:54:18 61.211.37.52:3719 -> xxx.yyy.174.222:9898 SYN ******S*
Mar 11 22:54:15 61.211.37.52:2663 -> xxx.yyy.174.223:5554 SYN ******S*
Mar 11 22:54:16 61.211.37.52:2970 -> xxx.yyy.174.223:1023 SYN ******S*
Mar 11 22:54:18 61.211.37.52:3720 -> xxx.yyy.174.223:9898 SYN ******S*
Mar 11 22:54:15 61.211.37.52:2665 -> xxx.yyy.174.224:5554 SYN ******S*
Mar 11 22:54:16 61.211.37.52:2972 -> xxx.yyy.174.224:1023 SYN ******S*
[...]
Mar 11 22:55:16 61.211.37.52:2265 -> xxx.yyy.195.51:9898 SYN ******S*
Mar 11 22:55:16 61.211.37.52:2266 -> xxx.yyy.195.52:9898 SYN ******S*
Mar 11 22:55:16 61.211.37.52:2267 -> xxx.yyy.195.54:9898 SYN ******S*
Mar 11 22:55:16 61.211.37.52:2268 -> xxx.yyy.195.55:9898 SYN ******S*
Mar 11 22:55:16 61.211.37.52:2269 -> xxx.yyy.195.56:9898 SYN ******S*
Mar 11 22:55:16 61.211.37.52:2270 -> xxx.yyy.195.57:9898 SYN ******S*
Mar 11 22:55:16 61.211.37.52:2271 -> xxx.yyy.195.58:9898 SYN ******S*
Mar 11 22:55:18 61.211.37.52:2717 -> xxx.yyy.195.68:9898 SYN ******S*
Mar 11 22:55:18 61.211.37.52:2729 -> xxx.yyy.195.80:9898 SYN ******S*
14679
Mar 11 00:00:04 82.216.77.112:4822 -> xxx.yyy.225.50:1433 SYN ******S*
Mar 11 00:00:05 82.216.77.112:1590 -> xxx.yyy.225.51:1433 SYN ******S*
Mar 11 00:00:08 82.216.77.112:4850 -> xxx.yyy.225.71:1433 SYN ******S*
Mar 11 00:00:08 82.216.77.112:4812 -> xxx.yyy.225.70:1433 SYN ******S*
Mar 11 00:00:05 82.216.77.112:1996 -> xxx.yyy.225.65:1433 SYN ******S*
Mar 11 00:00:05 82.216.77.112:2844 -> xxx.yyy.225.52:1433 SYN ******S*
Mar 11 00:00:05 82.216.77.112:2841 -> xxx.yyy.225.53:1433 SYN ******S*
Mar 11 00:00:06 82.216.77.112:3711 -> xxx.yyy.225.55:1433 SYN ******S*
[...]
Mar 11 01:14:09 82.216.77.112:1407 -> xxx.yyy.255.254:1433 SYN ******S*
Mar 11 01:14:09 82.216.77.112:1288 -> xxx.yyy.255.243:1433 SYN ******S*
Mar 11 01:14:10 82.216.77.112:1875 -> xxx.yyy.255.244:1433 SYN ******S*
Mar 11 01:14:11 82.216.77.112:2541 -> xxx.yyy.255.246:1433 SYN ******S*
Mar 11 01:14:12 82.216.77.112:2786 -> xxx.yyy.255.247:1433 SYN ******S*
Mar 11 01:14:12 82.216.77.112:3206 -> xxx.yyy.255.248:1433 SYN ******S*
Mar 11 01:14:13 82.216.77.112:3417 -> xxx.yyy.255.249:1433 SYN ******S*
Mar 11 01:14:14 82.216.77.112:4658 -> xxx.yyy.255.252:1433 SYN ******S*
Mar 11 01:14:15 82.216.77.112:1191 -> xxx.yyy.255.253:1433 SYN ******S*
14467
Mar 11 22:46:20 60.42.170.80:1566 -> xxx.yyy.214.246:5554 SYN ******S*
Mar 11 22:46:21 60.42.170.80:2184 -> xxx.yyy.214.246:1023 SYN ******S*
Mar 11 22:46:23 60.42.170.80:3331 -> xxx.yyy.214.246:9898 SYN ******S*
Mar 11 22:46:20 60.42.170.80:1567 -> xxx.yyy.214.247:5554 SYN ******S*
Mar 11 22:46:21 60.42.170.80:2174 -> xxx.yyy.214.247:1023 SYN ******S*
Mar 11 22:46:23 60.42.170.80:3278 -> xxx.yyy.214.247:9898 SYN ******S*
Mar 11 22:46:20 60.42.170.80:1570 -> xxx.yyy.214.248:5554 SYN ******S*
Mar 11 22:46:21 60.42.170.80:2188 -> xxx.yyy.214.248:1023 SYN ******S*
[...]
Mar 11 22:47:04 60.42.170.80:1075 -> xxx.yyy.235.112:9898 SYN ******S*
Mar 11 22:47:04 60.42.170.80:1057 -> xxx.yyy.235.100:9898 SYN ******S*
Mar 11 22:47:04 60.42.170.80:1059 -> xxx.yyy.235.102:9898 SYN ******S*
Mar 11 22:47:04 60.42.170.80:1060 -> xxx.yyy.235.103:9898 SYN ******S*
Mar 11 22:47:04 60.42.170.80:1069 -> xxx.yyy.235.107:9898 SYN ******S*
Mar 11 22:47:04 60.42.170.80:1072 -> xxx.yyy.235.105:9898 SYN ******S*
Mar 11 22:47:04 60.42.170.80:1076 -> xxx.yyy.235.106:9898 SYN ******S*
Mar 11 22:47:04 60.42.170.80:1089 -> xxx.yyy.235.101:9898 SYN ******S*
14149
Mar 11 17:26:08 219.235.233.194:44072 -> xxx.yyy.1.0:1433 SYN ******S*
Mar 11 17:26:08 219.235.233.194:44075 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 11 17:26:05 219.235.233.194:44082 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 11 17:26:08 219.235.233.194:44085 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 11 17:26:05 219.235.233.194:44091 -> xxx.yyy.1.6:1433 SYN ******S*
Mar 11 17:26:08 219.235.233.194:44079 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 11 17:26:08 219.235.233.194:44094 -> xxx.yyy.1.7:1433 SYN ******S*
Mar 11 17:26:08 219.235.233.194:44097 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Mar 11 18:30:25 219.235.233.194:20874 -> xxx.yyy.73.94:1433 SYN ******S*
Mar 11 18:30:25 219.235.233.194:20869 -> xxx.yyy.73.93:1433 SYN ******S*
Mar 11 18:30:25 219.235.233.194:20925 -> xxx.yyy.73.97:1433 SYN ******S*
Mar 11 18:30:25 219.235.233.194:20916 -> xxx.yyy.73.95:1433 SYN ******S*
Mar 11 18:30:25 219.235.233.194:20921 -> xxx.yyy.73.96:1433 SYN ******S*
Mar 11 18:30:25 219.235.233.194:20929 -> xxx.yyy.73.98:1433 SYN ******S*
Mar 11 18:30:25 219.235.233.194:20998 -> xxx.yyy.73.99:1433 SYN ******S*
Mar 11 18:30:25 219.235.233.194:21009 -> xxx.yyy.73.100:1433 SYN ******S*
Mar 11 18:30:25 219.235.233.194:21036 -> xxx.yyy.73.101:1433 SYN ******S*
13878
Mar 11 22:55:05 221.152.196.49:4476 -> xxx.yyy.154.101:5554 SYN ******S*
Mar 11 22:55:06 221.152.196.49:1582 -> xxx.yyy.154.101:1023 SYN ******S*
Mar 11 22:55:08 221.152.196.49:3942 -> xxx.yyy.154.101:9898 SYN ******S*
Mar 11 22:55:05 221.152.196.49:4509 -> xxx.yyy.154.106:5554 SYN ******S*
Mar 11 22:55:06 221.152.196.49:1598 -> xxx.yyy.154.106:1023 SYN ******S*
Mar 11 22:55:08 221.152.196.49:3970 -> xxx.yyy.154.106:9898 SYN ******S*
Mar 11 22:55:05 221.152.196.49:4583 -> xxx.yyy.154.118:5554 SYN ******S*
Mar 11 22:55:06 221.152.196.49:1660 -> xxx.yyy.154.118:1023 SYN ******S*
[...]
Mar 11 22:58:13 221.152.196.49:4637 -> xxx.yyy.155.149:9898 SYN ******S*
Mar 11 22:58:13 221.152.196.49:4638 -> xxx.yyy.155.150:9898 SYN ******S*
Mar 11 22:58:13 221.152.196.49:4640 -> xxx.yyy.155.151:9898 SYN ******S*
Mar 11 22:58:13 221.152.196.49:4648 -> xxx.yyy.155.153:9898 SYN ******S*
Mar 11 22:58:13 221.152.196.49:4641 -> xxx.yyy.155.152:9898 SYN ******S*
Mar 11 22:58:13 221.152.196.49:4651 -> xxx.yyy.155.155:9898 SYN ******S*
Mar 11 22:58:13 221.152.196.49:4650 -> xxx.yyy.155.154:9898 SYN ******S*
Mar 11 22:58:13 221.152.196.49:4667 -> xxx.yyy.155.160:9898 SYN ******S*
13514
Mar 11 14:45:34 203.234.115.35:4314 -> xxx.yyy.1.0:21 SYN ******S*
Mar 11 14:45:35 203.234.115.35:4318 -> xxx.yyy.1.4:21 SYN ******S*
Mar 11 14:45:35 203.234.115.35:4292 -> xxx.yyy.1.28:21 SYN ******S*
Mar 11 14:45:35 203.234.115.35:4304 -> xxx.yyy.1.40:21 SYN ******S*
Mar 11 14:45:35 203.234.115.35:4305 -> xxx.yyy.1.41:21 SYN ******S*
Mar 11 14:45:35 203.234.115.35:4308 -> xxx.yyy.1.44:21 SYN ******S*
Mar 11 14:45:35 203.234.115.35:4310 -> xxx.yyy.1.46:21 SYN ******S*
Mar 11 14:45:35 203.234.115.35:4309 -> xxx.yyy.1.45:21 SYN ******S*
[...]
Mar 11 15:28:00 203.234.115.35:4282 -> xxx.yyy.254.33:3306 SYN ******S*
Mar 11 15:28:00 203.234.115.35:4322 -> xxx.yyy.253.228:3306 SYN ******S*
Mar 11 15:28:00 203.234.115.35:4324 -> xxx.yyy.253.230:3306 SYN ******S*
Mar 11 15:28:00 203.234.115.35:4286 -> xxx.yyy.254.37:3306 SYN ******S*
Mar 11 15:28:00 203.234.115.35:4296 -> xxx.yyy.253.252:3306 SYN ******S*
Mar 11 15:28:00 203.234.115.35:4323 -> xxx.yyy.254.124:3306 SYN ******S*
Mar 11 15:28:00 203.234.115.35:4298 -> xxx.yyy.253.254:3306 SYN ******S*
Mar 11 15:28:00 203.234.115.35:4297 -> xxx.yyy.253.253:3306 SYN ******S*
13303
Mar 11 00:00:04 213.154.78.228:4805 -> xxx.yyy.79.144:1433 SYN ******S*
Mar 11 00:00:07 213.154.78.228:4809 -> xxx.yyy.79.147:1433 SYN ******S*
Mar 11 00:00:05 213.154.78.228:4807 -> xxx.yyy.79.145:1433 SYN ******S*
Mar 11 00:00:05 213.154.78.228:4808 -> xxx.yyy.79.146:1433 SYN ******S*
Mar 11 00:00:06 213.154.78.228:4781 -> xxx.yyy.79.138:1433 SYN ******S*
Mar 11 00:00:07 213.154.78.228:4783 -> xxx.yyy.79.139:1433 SYN ******S*
Mar 11 00:00:07 213.154.78.228:4785 -> xxx.yyy.79.140:1433 SYN ******S*
Mar 11 00:00:08 213.154.78.228:4789 -> xxx.yyy.79.141:1433 SYN ******S*
[...]
Mar 11 05:52:14 213.154.78.228:4304 -> xxx.yyy.111.201:1433 SYN ******S*
Mar 11 05:52:18 213.154.78.228:4320 -> xxx.yyy.111.202:1433 SYN ******S*
Mar 11 05:52:21 213.154.78.228:4328 -> xxx.yyy.111.203:1433 SYN ******S*
Mar 11 05:52:24 213.154.78.228:4328 -> xxx.yyy.111.203:1433 SYN ******S*
Mar 11 05:52:24 213.154.78.228:4320 -> xxx.yyy.111.202:1433 SYN ******S*
Mar 11 05:52:25 213.154.78.228:4336 -> xxx.yyy.111.204:1433 SYN ******S*
Mar 11 05:52:25 213.154.78.228:4338 -> xxx.yyy.111.205:1433 SYN ******S*
Mar 11 05:52:26 213.154.78.228:4339 -> xxx.yyy.111.206:1433 SYN ******S*
13087
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list