[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Sun Mar 13 13:26:41 GMT 2005
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Mar 12 13:49:27 62.146.24.226:1437 -> xxx.yyy.1.1:4899 SYN ******S*
Mar 12 13:49:27 62.146.24.226:1438 -> xxx.yyy.1.2:4899 SYN ******S*
Mar 12 13:49:27 62.146.24.226:1439 -> xxx.yyy.1.3:4899 SYN ******S*
Mar 12 13:49:29 62.146.24.226:1440 -> xxx.yyy.1.4:4899 SYN ******S*
Mar 12 13:49:29 62.146.24.226:1441 -> xxx.yyy.1.5:4899 SYN ******S*
Mar 12 13:49:29 62.146.24.226:1442 -> xxx.yyy.1.6:4899 SYN ******S*
Mar 12 13:49:29 62.146.24.226:1443 -> xxx.yyy.1.7:4899 SYN ******S*
Mar 12 13:49:27 62.146.24.226:1444 -> xxx.yyy.1.8:4899 SYN ******S*
[...]
Mar 12 14:05:47 62.146.24.226:2094 -> xxx.yyy.255.253:4899 SYN ******S*
Mar 12 14:05:47 62.146.24.226:2091 -> xxx.yyy.255.250:4899 SYN ******S*
Mar 12 14:05:47 62.146.24.226:2083 -> xxx.yyy.255.244:4899 SYN ******S*
Mar 12 14:05:47 62.146.24.226:2088 -> xxx.yyy.255.247:4899 SYN ******S*
Mar 12 14:05:47 62.146.24.226:2080 -> xxx.yyy.255.241:4899 SYN ******S*
Mar 12 14:05:47 62.146.24.226:2077 -> xxx.yyy.255.238:4899 SYN ******S*
Mar 12 14:05:47 62.146.24.226:2061 -> xxx.yyy.255.226:4899 SYN ******S*
Mar 12 14:05:47 62.146.24.226:2053 -> xxx.yyy.255.224:4899 SYN ******S*
Mar 12 14:05:47 62.146.24.226:2069 -> xxx.yyy.255.232:4899 SYN ******S*
109779
Mar 12 03:31:20 218.77.84.243:3480 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 12 03:31:17 218.77.84.243:3483 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 12 03:31:20 218.77.84.243:3492 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 12 03:31:17 218.77.84.243:3489 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 12 03:31:20 218.77.84.243:3498 -> xxx.yyy.1.7:1433 SYN ******S*
Mar 12 03:31:20 218.77.84.243:3495 -> xxx.yyy.1.6:1433 SYN ******S*
Mar 12 03:31:17 218.77.84.243:3504 -> xxx.yyy.1.9:1433 SYN ******S*
Mar 12 03:31:17 218.77.84.243:3501 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Mar 12 07:20:08 218.77.84.243:3337 -> xxx.yyy.255.244:1433 SYN ******S*
Mar 12 07:20:09 218.77.84.243:3350 -> xxx.yyy.255.246:1433 SYN ******S*
Mar 12 07:20:09 218.77.84.243:3376 -> xxx.yyy.255.248:1433 SYN ******S*
Mar 12 07:20:09 218.77.84.243:3382 -> xxx.yyy.255.249:1433 SYN ******S*
Mar 12 07:20:09 218.77.84.243:3391 -> xxx.yyy.255.250:1433 SYN ******S*
Mar 12 07:20:10 218.77.84.243:3405 -> xxx.yyy.255.251:1433 SYN ******S*
Mar 12 07:20:10 218.77.84.243:3407 -> xxx.yyy.255.253:1433 SYN ******S*
Mar 12 07:20:10 218.77.84.243:3408 -> xxx.yyy.255.254:1433 SYN ******S*
Mar 12 07:20:10 218.77.84.243:3406 -> xxx.yyy.255.252:1433 SYN ******S*
107405
Mar 12 08:59:39 128.39.156.102:1771 -> xxx.yyy.1.1:4899 SYN ******S*
Mar 12 08:59:39 128.39.156.102:1772 -> xxx.yyy.1.2:4899 SYN ******S*
Mar 12 08:59:39 128.39.156.102:1773 -> xxx.yyy.1.3:4899 SYN ******S*
Mar 12 08:59:41 128.39.156.102:1774 -> xxx.yyy.1.4:4899 SYN ******S*
Mar 12 08:59:41 128.39.156.102:1775 -> xxx.yyy.1.5:4899 SYN ******S*
Mar 12 08:59:41 128.39.156.102:1776 -> xxx.yyy.1.6:4899 SYN ******S*
Mar 12 08:59:41 128.39.156.102:1777 -> xxx.yyy.1.7:4899 SYN ******S*
Mar 12 08:59:39 128.39.156.102:1778 -> xxx.yyy.1.8:4899 SYN ******S*
[...]
Mar 12 09:11:58 128.39.156.102:3468 -> xxx.yyy.255.242:4899 SYN ******S*
Mar 12 09:11:58 128.39.156.102:3432 -> xxx.yyy.255.215:4899 SYN ******S*
Mar 12 09:11:58 128.39.156.102:3436 -> xxx.yyy.255.218:4899 SYN ******S*
Mar 12 09:11:58 128.39.156.102:3444 -> xxx.yyy.255.224:4899 SYN ******S*
Mar 12 09:11:58 128.39.156.102:3456 -> xxx.yyy.255.233:4899 SYN ******S*
Mar 12 09:11:58 128.39.156.102:3440 -> xxx.yyy.255.221:4899 SYN ******S*
Mar 12 09:11:58 128.39.156.102:3464 -> xxx.yyy.255.239:4899 SYN ******S*
Mar 12 09:11:58 128.39.156.102:3461 -> xxx.yyy.255.236:4899 SYN ******S*
102130
Mar 12 09:55:41 83.135.128.247:4613 -> xxx.yyy.1.1:21 SYN ******S*
Mar 12 09:55:41 83.135.128.247:4626 -> xxx.yyy.1.7:21 SYN ******S*
Mar 12 09:55:41 83.135.128.247:4639 -> xxx.yyy.1.13:21 SYN ******S*
Mar 12 09:55:41 83.135.128.247:4634 -> xxx.yyy.1.2:21 SYN ******S*
Mar 12 09:55:41 83.135.128.247:4641 -> xxx.yyy.1.3:21 SYN ******S*
Mar 12 09:55:41 83.135.128.247:4646 -> xxx.yyy.1.15:21 SYN ******S*
Mar 12 09:55:41 83.135.128.247:4653 -> xxx.yyy.1.4:21 SYN ******S*
Mar 12 09:55:41 83.135.128.247:4660 -> xxx.yyy.1.5:21 SYN ******S*
[...]
Mar 12 10:41:06 83.135.128.247:3290 -> xxx.yyy.255.219:21 SYN ******S*
Mar 12 10:41:06 83.135.128.247:3288 -> xxx.yyy.255.163:21 SYN ******S*
Mar 12 10:41:06 83.135.128.247:3286 -> xxx.yyy.255.151:21 SYN ******S*
Mar 12 10:41:06 83.135.128.247:3307 -> xxx.yyy.255.164:21 SYN ******S*
Mar 12 10:41:06 83.135.128.247:3304 -> xxx.yyy.255.169:21 SYN ******S*
Mar 12 10:41:08 83.135.128.247:3309 -> xxx.yyy.255.14:21 SYN ******S*
Mar 12 10:41:09 83.135.128.247:3315 -> xxx.yyy.255.234:21 SYN ******S*
Mar 12 10:41:09 83.135.128.247:3311 -> xxx.yyy.255.142:21 SYN ******S*
101920
Mar 12 12:25:08 211.194.17.96:4597 -> xxx.yyy.1.8:25 SYN ******S*
Mar 12 12:25:08 211.194.17.96:4600 -> xxx.yyy.1.9:25 SYN ******S*
Mar 12 12:25:08 211.194.17.96:4602 -> xxx.yyy.1.10:25 SYN ******S*
Mar 12 12:25:08 211.194.17.96:4587 -> xxx.yyy.1.0:25 SYN ******S*
Mar 12 12:25:08 211.194.17.96:4590 -> xxx.yyy.1.3:25 SYN ******S*
Mar 12 12:25:08 211.194.17.96:4589 -> xxx.yyy.1.2:25 SYN ******S*
Mar 12 12:25:08 211.194.17.96:4603 -> xxx.yyy.1.11:25 SYN ******S*
Mar 12 12:25:08 211.194.17.96:4591 -> xxx.yyy.1.4:25 SYN ******S*
[...]
Mar 12 12:38:18 211.194.17.96:1325 -> xxx.yyy.255.199:25 SYN ******S*
Mar 12 12:38:18 211.194.17.96:1312 -> xxx.yyy.255.186:25 SYN ******S*
Mar 12 12:38:18 211.194.17.96:1319 -> xxx.yyy.255.193:25 SYN ******S*
Mar 12 12:38:18 211.194.17.96:1306 -> xxx.yyy.255.181:25 SYN ******S*
Mar 12 12:38:18 211.194.17.96:1310 -> xxx.yyy.255.184:25 SYN ******S*
Mar 12 12:38:18 211.194.17.96:1313 -> xxx.yyy.255.187:25 SYN ******S*
Mar 12 12:38:18 211.194.17.96:1316 -> xxx.yyy.255.190:25 SYN ******S*
Mar 12 12:38:18 211.194.17.96:1323 -> xxx.yyy.255.197:25 SYN ******S*
Mar 12 12:38:18 211.194.17.96:1326 -> xxx.yyy.255.200:25 SYN ******S*
76870
Mar 12 05:02:25 65.25.60.132:4341 -> xxx.yyy.1.4:42 SYN ******S*
Mar 12 05:02:26 65.25.60.132:4344 -> xxx.yyy.1.7:42 SYN ******S*
Mar 12 05:02:26 65.25.60.132:4345 -> xxx.yyy.1.6:42 SYN ******S*
Mar 12 05:02:26 65.25.60.132:4346 -> xxx.yyy.1.12:42 SYN ******S*
Mar 12 05:02:26 65.25.60.132:4351 -> xxx.yyy.1.18:42 SYN ******S*
Mar 12 05:02:26 65.25.60.132:4352 -> xxx.yyy.1.19:42 SYN ******S*
Mar 12 05:02:26 65.25.60.132:4355 -> xxx.yyy.1.25:42 SYN ******S*
Mar 12 05:02:26 65.25.60.132:4358 -> xxx.yyy.1.21:42 SYN ******S*
[...]
Mar 12 06:00:43 65.25.60.132:2535 -> xxx.yyy.zzz.245:42 SYN ******S*
Mar 12 06:00:43 65.25.60.132:2533 -> xxx.yyy.zzz.242:42 SYN ******S*
Mar 12 06:00:43 65.25.60.132:2525 -> xxx.yyy.zzz.224:42 SYN ******S*
Mar 12 06:00:43 65.25.60.132:2524 -> xxx.yyy.zzz.237:42 SYN ******S*
Mar 12 06:00:43 65.25.60.132:2530 -> xxx.yyy.zzz.236:42 SYN ******S*
Mar 12 06:00:43 65.25.60.132:2531 -> xxx.yyy.zzz.240:42 SYN ******S*
Mar 12 06:00:43 65.25.60.132:2518 -> xxx.yyy.zzz.254:42 SYN ******S*
Mar 12 06:00:43 65.25.60.132:2517 -> xxx.yyy.zzz.251:42 SYN ******S*
Mar 12 06:00:43 65.25.60.132:2534 -> xxx.yyy.zzz.243:42 SYN ******S*
76534
Mar 12 09:33:31 207.226.17.186:1490 -> xxx.yyy.1.1:3306 SYN ******S*
Mar 12 09:33:31 207.226.17.186:1491 -> xxx.yyy.1.2:3306 SYN ******S*
Mar 12 09:33:31 207.226.17.186:1492 -> xxx.yyy.1.3:3306 SYN ******S*
Mar 12 09:33:31 207.226.17.186:1493 -> xxx.yyy.1.4:3306 SYN ******S*
Mar 12 09:33:31 207.226.17.186:1494 -> xxx.yyy.1.5:3306 SYN ******S*
Mar 12 09:33:31 207.226.17.186:1495 -> xxx.yyy.1.6:3306 SYN ******S*
Mar 12 09:33:31 207.226.17.186:1497 -> xxx.yyy.1.8:3306 SYN ******S*
Mar 12 09:33:31 207.226.17.186:1498 -> xxx.yyy.1.9:3306 SYN ******S*
[...]
Mar 12 09:45:49 207.226.17.186:2022 -> xxx.yyy.255.248:3306 SYN ******S*
Mar 12 09:45:49 207.226.17.186:2024 -> xxx.yyy.255.250:3306 SYN ******S*
Mar 12 09:45:49 207.226.17.186:2023 -> xxx.yyy.255.249:3306 SYN ******S*
Mar 12 09:45:49 207.226.17.186:2027 -> xxx.yyy.255.253:3306 SYN ******S*
Mar 12 09:45:49 207.226.17.186:2021 -> xxx.yyy.255.247:3306 SYN ******S*
Mar 12 09:45:49 207.226.17.186:2025 -> xxx.yyy.255.251:3306 SYN ******S*
Mar 12 09:45:49 207.226.17.186:2026 -> xxx.yyy.255.252:3306 SYN ******S*
Mar 12 09:45:49 207.226.17.186:2028 -> xxx.yyy.255.254:3306 SYN ******S*
71582
Mar 12 06:43:00 211.20.187.23:2674 -> xxx.yyy.1.1:4512 SYN ******S*
Mar 12 06:43:00 211.20.187.23:2675 -> xxx.yyy.1.2:4512 SYN ******S*
Mar 12 06:43:01 211.20.187.23:2676 -> xxx.yyy.1.3:4512 SYN ******S*
Mar 12 06:43:03 211.20.187.23:2677 -> xxx.yyy.1.4:4512 SYN ******S*
Mar 12 06:43:03 211.20.187.23:2678 -> xxx.yyy.1.5:4512 SYN ******S*
Mar 12 06:43:03 211.20.187.23:2679 -> xxx.yyy.1.6:4512 SYN ******S*
Mar 12 06:43:01 211.20.187.23:2680 -> xxx.yyy.1.7:4512 SYN ******S*
Mar 12 06:43:01 211.20.187.23:2681 -> xxx.yyy.1.8:4512 SYN ******S*
[...]
Mar 12 07:09:03 211.20.187.23:4365 -> xxx.yyy.zzz.244:4512 SYN ******S*
Mar 12 07:09:03 211.20.187.23:4372 -> xxx.yyy.zzz.251:4512 SYN ******S*
Mar 12 07:09:03 211.20.187.23:4369 -> xxx.yyy.zzz.248:4512 SYN ******S*
Mar 12 07:09:03 211.20.187.23:4375 -> xxx.yyy.zzz.254:4512 SYN ******S*
Mar 12 07:09:03 211.20.187.23:4373 -> xxx.yyy.zzz.252:4512 SYN ******S*
Mar 12 07:09:03 211.20.187.23:4374 -> xxx.yyy.zzz.253:4512 SYN ******S*
Mar 12 07:09:03 211.20.187.23:4370 -> xxx.yyy.zzz.249:4512 SYN ******S*
Mar 12 07:09:03 211.20.187.23:4371 -> xxx.yyy.zzz.250:4512 SYN ******S*
Mar 12 07:09:03 211.20.187.23:4368 -> xxx.yyy.zzz.247:4512 SYN ******S*
70937
Mar 12 06:16:44 66.90.79.109:2416 -> xxx.yyy.1.1:80 SYN ******S*
Mar 12 06:16:44 66.90.79.109:2417 -> xxx.yyy.1.2:80 SYN ******S*
Mar 12 06:16:44 66.90.79.109:2418 -> xxx.yyy.1.3:80 SYN ******S*
Mar 12 06:16:46 66.90.79.109:2419 -> xxx.yyy.1.4:80 SYN ******S*
Mar 12 06:16:46 66.90.79.109:2420 -> xxx.yyy.1.5:80 SYN ******S*
Mar 12 06:16:46 66.90.79.109:2421 -> xxx.yyy.1.6:80 SYN ******S*
Mar 12 06:16:46 66.90.79.109:2422 -> xxx.yyy.1.7:80 SYN ******S*
Mar 12 06:16:46 66.90.79.109:2423 -> xxx.yyy.1.8:80 SYN ******S*
[...]
Mar 12 06:25:02 66.90.79.109:4400 -> xxx.yyy.255.247:80 SYN ******S*
Mar 12 06:25:02 66.90.79.109:4401 -> xxx.yyy.255.248:80 SYN ******S*
Mar 12 06:25:02 66.90.79.109:4402 -> xxx.yyy.255.249:80 SYN ******S*
Mar 12 06:25:02 66.90.79.109:4403 -> xxx.yyy.255.250:80 SYN ******S*
Mar 12 06:25:02 66.90.79.109:4404 -> xxx.yyy.255.251:80 SYN ******S*
Mar 12 06:25:02 66.90.79.109:4405 -> xxx.yyy.255.252:80 SYN ******S*
Mar 12 06:25:02 66.90.79.109:4406 -> xxx.yyy.255.253:80 SYN ******S*
Mar 12 06:25:02 66.90.79.109:4407 -> xxx.yyy.255.254:80 SYN ******S*
69896
Mar 12 00:53:34 203.71.88.199:3605 -> xxx.yyy.1.1:3306 SYN ******S*
Mar 12 00:53:34 203.71.88.199:3606 -> xxx.yyy.1.2:3306 SYN ******S*
Mar 12 00:53:31 203.71.88.199:3607 -> xxx.yyy.1.3:3306 SYN ******S*
Mar 12 00:53:34 203.71.88.199:3608 -> xxx.yyy.1.4:3306 SYN ******S*
Mar 12 00:53:34 203.71.88.199:3609 -> xxx.yyy.1.5:3306 SYN ******S*
Mar 12 00:53:34 203.71.88.199:3610 -> xxx.yyy.1.6:3306 SYN ******S*
Mar 12 00:53:34 203.71.88.199:3611 -> xxx.yyy.1.7:3306 SYN ******S*
Mar 12 00:53:34 203.71.88.199:3612 -> xxx.yyy.1.8:3306 SYN ******S*
[...]
Mar 12 01:05:14 203.71.88.199:2494 -> xxx.yyy.255.242:3306 SYN ******S*
Mar 12 01:05:14 203.71.88.199:2500 -> xxx.yyy.255.248:3306 SYN ******S*
Mar 12 01:05:14 203.71.88.199:2497 -> xxx.yyy.255.245:3306 SYN ******S*
Mar 12 01:05:14 203.71.88.199:2499 -> xxx.yyy.255.247:3306 SYN ******S*
Mar 12 01:05:14 203.71.88.199:2503 -> xxx.yyy.255.251:3306 SYN ******S*
Mar 12 01:05:14 203.71.88.199:2504 -> xxx.yyy.255.252:3306 SYN ******S*
Mar 12 01:05:14 203.71.88.199:2498 -> xxx.yyy.255.246:3306 SYN ******S*
Mar 12 01:05:14 203.71.88.199:2501 -> xxx.yyy.255.249:3306 SYN ******S*
Mar 12 01:05:14 203.71.88.199:2502 -> xxx.yyy.255.250:3306 SYN ******S*
65600
Mar 12 16:04:01 212.64.2.178:3093 -> xxx.yyy.1.0:1433 SYN ******S*
Mar 12 16:04:01 212.64.2.178:3098 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 12 16:04:01 212.64.2.178:3107 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 12 16:04:01 212.64.2.178:3102 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 12 16:04:01 212.64.2.178:3111 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 12 16:04:01 212.64.2.178:3116 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 12 16:04:01 212.64.2.178:3120 -> xxx.yyy.1.6:1433 SYN ******S*
Mar 12 16:04:01 212.64.2.178:3128 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Mar 12 18:31:45 212.64.2.178:3766 -> xxx.yyy.165.208:1433 SYN ******S*
Mar 12 18:31:45 212.64.2.178:3767 -> xxx.yyy.165.209:1433 SYN ******S*
Mar 12 18:31:45 212.64.2.178:3775 -> xxx.yyy.165.210:1433 SYN ******S*
Mar 12 18:31:46 212.64.2.178:3778 -> xxx.yyy.165.211:1433 SYN ******S*
Mar 12 18:31:46 212.64.2.178:3779 -> xxx.yyy.165.212:1433 SYN ******S*
Mar 12 18:31:46 212.64.2.178:3782 -> xxx.yyy.165.213:1433 SYN ******S*
Mar 12 18:31:46 212.64.2.178:3798 -> xxx.yyy.165.214:1433 SYN ******S*
Mar 12 18:31:46 212.64.2.178:3816 -> xxx.yyy.165.215:1433 SYN ******S*
59623
Mar 12 14:38:46 203.232.188.130:58486 -> xxx.yyy.1.9:1433 SYN ******S*
Mar 12 14:38:46 203.232.188.130:58492 -> xxx.yyy.1.15:1433 SYN ******S*
Mar 12 14:38:46 203.232.188.130:58505 -> xxx.yyy.1.28:1433 SYN ******S*
Mar 12 14:38:46 203.232.188.130:58509 -> xxx.yyy.1.32:1433 SYN ******S*
Mar 12 14:38:46 203.232.188.130:58485 -> xxx.yyy.1.8:1433 SYN ******S*
Mar 12 14:38:46 203.232.188.130:58487 -> xxx.yyy.1.10:1433 SYN ******S*
Mar 12 14:38:46 203.232.188.130:58515 -> xxx.yyy.1.38:1433 SYN ******S*
Mar 12 14:38:46 203.232.188.130:58490 -> xxx.yyy.1.13:1433 SYN ******S*
[...]
Mar 12 14:47:18 203.232.188.130:62001 -> xxx.yyy.255.17:1433 SYN ******S*
Mar 12 14:47:18 203.232.188.130:61989 -> xxx.yyy.255.5:1433 SYN ******S*
Mar 12 14:47:18 203.232.188.130:62046 -> xxx.yyy.255.62:1433 SYN ******S*
Mar 12 14:47:18 203.232.188.130:61995 -> xxx.yyy.255.11:1433 SYN ******S*
Mar 12 14:47:18 203.232.188.130:62027 -> xxx.yyy.255.43:1433 SYN ******S*
Mar 12 14:47:18 203.232.188.130:61997 -> xxx.yyy.255.13:1433 SYN ******S*
Mar 12 14:47:18 203.232.188.130:62012 -> xxx.yyy.255.28:1433 SYN ******S*
Mar 12 14:47:18 203.232.188.130:62142 -> xxx.yyy.255.157:1433 SYN ******S*
52172
Mar 12 20:24:45 203.98.14.98:2774 -> xxx.yyy.1.0:139 SYN ******S*
Mar 12 20:24:45 203.98.14.98:2776 -> xxx.yyy.1.2:139 SYN ******S*
Mar 12 20:24:45 203.98.14.98:2775 -> xxx.yyy.1.1:139 SYN ******S*
Mar 12 20:24:45 203.98.14.98:2777 -> xxx.yyy.1.3:139 SYN ******S*
Mar 12 20:24:45 203.98.14.98:2778 -> xxx.yyy.1.4:139 SYN ******S*
Mar 12 20:24:42 203.98.14.98:2780 -> xxx.yyy.1.6:139 SYN ******S*
Mar 12 20:24:45 203.98.14.98:2779 -> xxx.yyy.1.5:139 SYN ******S*
Mar 12 20:24:45 203.98.14.98:2784 -> xxx.yyy.1.10:139 SYN ******S*
[...]
Mar 12 20:33:25 203.98.14.98:4961 -> xxx.yyy.255.250:139 SYN ******S*
Mar 12 20:33:25 203.98.14.98:4963 -> xxx.yyy.255.252:139 SYN ******S*
Mar 12 20:33:25 203.98.14.98:4965 -> xxx.yyy.255.254:139 SYN ******S*
Mar 12 20:33:25 203.98.14.98:4960 -> xxx.yyy.255.249:139 SYN ******S*
Mar 12 20:33:25 203.98.14.98:4949 -> xxx.yyy.255.238:139 SYN ******S*
Mar 12 20:33:25 203.98.14.98:4944 -> xxx.yyy.255.233:139 SYN ******S*
Mar 12 20:33:25 203.98.14.98:4946 -> xxx.yyy.255.235:139 SYN ******S*
Mar 12 20:33:25 203.98.14.98:4962 -> xxx.yyy.255.251:139 SYN ******S*
Mar 12 20:33:25 203.98.14.98:4964 -> xxx.yyy.255.253:139 SYN ******S*
51540
Mar 12 08:40:45 80.228.65.159:4397 -> xxx.yyy.1.0:3306 SYN ******S*
Mar 12 08:40:45 80.228.65.159:4502 -> xxx.yyy.1.1:3306 SYN ******S*
Mar 12 08:40:45 80.228.65.159:4580 -> xxx.yyy.1.2:3306 SYN ******S*
Mar 12 08:40:45 80.228.65.159:4620 -> xxx.yyy.1.3:3306 SYN ******S*
Mar 12 08:40:45 80.228.65.159:4650 -> xxx.yyy.1.4:3306 SYN ******S*
Mar 12 08:40:45 80.228.65.159:4691 -> xxx.yyy.1.5:3306 SYN ******S*
Mar 12 08:40:45 80.228.65.159:4708 -> xxx.yyy.1.6:3306 SYN ******S*
Mar 12 08:40:43 80.228.65.159:4746 -> xxx.yyy.1.7:3306 SYN ******S*
[...]
Mar 12 10:38:37 80.228.65.159:4395 -> xxx.yyy.251.187:3306 SYN ******S*
Mar 12 10:38:37 80.228.65.159:4343 -> xxx.yyy.251.186:3306 SYN ******S*
Mar 12 10:38:37 80.228.65.159:4305 -> xxx.yyy.251.185:3306 SYN ******S*
Mar 12 10:38:37 80.228.65.159:4240 -> xxx.yyy.251.183:3306 SYN ******S*
Mar 12 10:38:37 80.228.65.159:4282 -> xxx.yyy.251.184:3306 SYN ******S*
Mar 12 10:38:37 80.228.65.159:4205 -> xxx.yyy.251.182:3306 SYN ******S*
Mar 12 10:38:37 80.228.65.159:4185 -> xxx.yyy.251.181:3306 SYN ******S*
Mar 12 10:38:37 80.228.65.159:4136 -> xxx.yyy.251.180:3306 SYN ******S*
Mar 12 10:38:37 80.228.65.159:4124 -> xxx.yyy.251.179:3306 SYN ******S*
47983
[...]
40076
[...]
39376
Mar 12 16:46:21 81.243.219.120:3075 -> xxx.yyy.1.0:1433 SYN ******S*
Mar 12 16:46:21 81.243.219.120:3077 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 12 16:46:21 81.243.219.120:3078 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 12 16:46:21 81.243.219.120:3079 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 12 16:46:21 81.243.219.120:3080 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 12 16:46:21 81.243.219.120:3083 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 12 16:46:21 81.243.219.120:3086 -> xxx.yyy.1.6:1433 SYN ******S*
Mar 12 16:46:21 81.243.219.120:3088 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Mar 12 18:46:46 81.243.219.120:3652 -> xxx.yyy.131.22:1433 SYN ******S*
Mar 12 18:46:46 81.243.219.120:3587 -> xxx.yyy.131.0:1433 SYN ******S*
Mar 12 18:46:46 81.243.219.120:3700 -> xxx.yyy.131.33:1433 SYN ******S*
Mar 12 18:46:46 81.243.219.120:3701 -> xxx.yyy.131.34:1433 SYN ******S*
Mar 12 18:46:46 81.243.219.120:3702 -> xxx.yyy.131.35:1433 SYN ******S*
Mar 12 18:46:46 81.243.219.120:3709 -> xxx.yyy.131.36:1433 SYN ******S*
Mar 12 18:46:46 81.243.219.120:3710 -> xxx.yyy.131.37:1433 SYN ******S*
Mar 12 18:46:46 81.243.219.120:3714 -> xxx.yyy.131.38:1433 SYN ******S*
Mar 12 18:46:46 81.243.219.120:3717 -> xxx.yyy.131.39:1433 SYN ******S*
36135
Mar 12 01:15:27 12.217.30.12:3310 -> xxx.yyy.1.2:42 SYN ******S*
Mar 12 01:15:27 12.217.30.12:4733 -> xxx.yyy.1.5:42 SYN ******S*
Mar 12 01:15:27 12.217.30.12:3160 -> xxx.yyy.1.1:42 SYN ******S*
Mar 12 01:15:27 12.217.30.12:3855 -> xxx.yyy.1.3:42 SYN ******S*
Mar 12 01:15:27 12.217.30.12:4168 -> xxx.yyy.1.4:42 SYN ******S*
Mar 12 01:15:27 12.217.30.12:4755 -> xxx.yyy.1.6:42 SYN ******S*
Mar 12 01:15:27 12.217.30.12:4825 -> xxx.yyy.1.9:42 SYN ******S*
Mar 12 01:15:27 12.217.30.12:4883 -> xxx.yyy.1.12:42 SYN ******S*
[...]
Mar 12 01:19:25 12.217.30.12:3448 -> xxx.yyy.255.239:42 SYN ******S*
Mar 12 01:19:25 12.217.30.12:4162 -> xxx.yyy.255.243:42 SYN ******S*
Mar 12 01:19:25 12.217.30.12:4168 -> xxx.yyy.255.244:42 SYN ******S*
Mar 12 01:19:25 12.217.30.12:4033 -> xxx.yyy.255.241:42 SYN ******S*
Mar 12 01:19:25 12.217.30.12:4024 -> xxx.yyy.255.240:42 SYN ******S*
Mar 12 01:19:25 12.217.30.12:4104 -> xxx.yyy.255.242:42 SYN ******S*
Mar 12 01:19:25 12.217.30.12:4184 -> xxx.yyy.255.245:42 SYN ******S*
Mar 12 01:19:25 12.217.30.12:4264 -> xxx.yyy.255.248:42 SYN ******S*
31153
Mar 12 17:29:27 66.73.39.154:1965 -> xxx.yyy.10.1:6101 SYN ******S*
Mar 12 17:29:27 66.73.39.154:1969 -> xxx.yyy.10.2:6101 SYN ******S*
Mar 12 17:29:27 66.73.39.154:1973 -> xxx.yyy.10.3:6101 SYN ******S*
Mar 12 17:29:27 66.73.39.154:1977 -> xxx.yyy.10.4:6101 SYN ******S*
Mar 12 17:29:27 66.73.39.154:1980 -> xxx.yyy.10.5:6101 SYN ******S*
Mar 12 17:29:24 66.73.39.154:1983 -> xxx.yyy.10.6:6101 SYN ******S*
Mar 12 17:29:24 66.73.39.154:1987 -> xxx.yyy.10.7:6101 SYN ******S*
Mar 12 17:29:27 66.73.39.154:1991 -> xxx.yyy.10.8:6101 SYN ******S*
[...]
Mar 12 17:42:34 66.73.39.154:1800 -> xxx.yyy.239.180:6101 SYN ******S*
Mar 12 17:42:34 66.73.39.154:1804 -> xxx.yyy.239.181:6101 SYN ******S*
Mar 12 17:42:34 66.73.39.154:1808 -> xxx.yyy.239.182:6101 SYN ******S*
Mar 12 17:42:34 66.73.39.154:1812 -> xxx.yyy.239.183:6101 SYN ******S*
Mar 12 17:42:34 66.73.39.154:1816 -> xxx.yyy.239.184:6101 SYN ******S*
Mar 12 17:42:34 66.73.39.154:1820 -> xxx.yyy.239.185:6101 SYN ******S*
Mar 12 17:42:34 66.73.39.154:1824 -> xxx.yyy.239.186:6101 SYN ******S*
Mar 12 17:42:34 66.73.39.154:1828 -> xxx.yyy.239.187:6101 SYN ******S*
30601
Mar 12 11:55:01 136.186.4.38:4160 -> xxx.yyy.1.0:6129 SYN ******S*
Mar 12 11:55:01 136.186.4.38:4161 -> xxx.yyy.1.1:6129 SYN ******S*
Mar 12 11:55:01 136.186.4.38:4162 -> xxx.yyy.1.2:6129 SYN ******S*
Mar 12 11:55:01 136.186.4.38:4163 -> xxx.yyy.1.3:6129 SYN ******S*
Mar 12 11:55:01 136.186.4.38:4164 -> xxx.yyy.1.4:6129 SYN ******S*
Mar 12 11:55:01 136.186.4.38:4165 -> xxx.yyy.1.5:6129 SYN ******S*
Mar 12 11:55:01 136.186.4.38:4167 -> xxx.yyy.1.7:6129 SYN ******S*
Mar 12 11:55:01 136.186.4.38:4166 -> xxx.yyy.1.6:6129 SYN ******S*
[...]
Mar 12 13:42:53 136.186.4.38:4177 -> xxx.yyy.255.247:6129 SYN ******S*
Mar 12 13:42:53 136.186.4.38:4179 -> xxx.yyy.255.249:6129 SYN ******S*
Mar 12 13:42:53 136.186.4.38:4176 -> xxx.yyy.255.246:6129 SYN ******S*
Mar 12 13:42:53 136.186.4.38:4180 -> xxx.yyy.255.250:6129 SYN ******S*
Mar 12 13:42:53 136.186.4.38:4181 -> xxx.yyy.255.251:6129 SYN ******S*
Mar 12 13:42:53 136.186.4.38:4184 -> xxx.yyy.255.254:6129 SYN ******S*
Mar 12 13:42:53 136.186.4.38:4182 -> xxx.yyy.255.252:6129 SYN ******S*
Mar 12 13:42:53 136.186.4.38:4183 -> xxx.yyy.255.253:6129 SYN ******S*
29611
Mar 12 18:52:14 219.150.172.131:28467 -> xxx.yyy.1.0:1433 SYN ******S*
Mar 12 18:52:17 219.150.172.131:28476 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 12 18:52:17 219.150.172.131:28478 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 12 18:52:15 219.150.172.131:28499 -> xxx.yyy.1.6:1433 SYN ******S*
Mar 12 18:52:17 219.150.172.131:28501 -> xxx.yyy.1.7:1433 SYN ******S*
Mar 12 18:52:15 219.150.172.131:63320 -> xxx.yyy.1.8:1433 SYN ******S*
Mar 12 18:52:18 219.150.172.131:28504 -> xxx.yyy.1.9:1433 SYN ******S*
Mar 12 18:52:15 219.150.172.131:5037 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
Mar 12 20:53:20 219.150.172.131:34126 -> xxx.yyy.134.38:1433 SYN ******S*
Mar 12 20:53:20 219.150.172.131:34221 -> xxx.yyy.134.40:1433 SYN ******S*
Mar 12 20:53:20 219.150.172.131:34237 -> xxx.yyy.134.41:1433 SYN ******S*
Mar 12 20:53:20 219.150.172.131:2242 -> xxx.yyy.134.42:1433 SYN ******S*
Mar 12 20:53:21 219.150.172.131:26741 -> xxx.yyy.134.1:1433 SYN ******S*
Mar 12 20:53:21 219.150.172.131:61775 -> xxx.yyy.134.2:1433 SYN ******S*
Mar 12 20:53:21 219.150.172.131:34456 -> xxx.yyy.134.43:1433 SYN ******S*
Mar 12 20:53:21 219.150.172.131:65114 -> xxx.yyy.134.27:1433 SYN ******S*
Mar 12 20:53:21 219.150.172.131:35431 -> xxx.yyy.134.4:1433 SYN ******S*
27301
Mar 12 16:03:46 62.29.199.210:3951 -> xxx.yyy.14.193:1433 SYN ******S*
Mar 12 16:03:46 62.29.199.210:3954 -> xxx.yyy.14.194:1433 SYN ******S*
Mar 12 16:03:43 62.29.199.210:3957 -> xxx.yyy.14.195:1433 SYN ******S*
Mar 12 16:03:46 62.29.199.210:3969 -> xxx.yyy.14.198:1433 SYN ******S*
Mar 12 16:03:46 62.29.199.210:3966 -> xxx.yyy.14.197:1433 SYN ******S*
Mar 12 16:03:46 62.29.199.210:3972 -> xxx.yyy.14.199:1433 SYN ******S*
Mar 12 16:03:46 62.29.199.210:3960 -> xxx.yyy.14.196:1433 SYN ******S*
Mar 12 16:03:46 62.29.199.210:3974 -> xxx.yyy.14.200:1433 SYN ******S*
[...]
Mar 12 18:09:02 62.29.199.210:4477 -> xxx.yyy.203.34:1433 SYN ******S*
Mar 12 18:09:02 62.29.199.210:3581 -> xxx.yyy.203.52:1433 SYN ******S*
Mar 12 18:09:02 62.29.199.210:4220 -> xxx.yyy.203.80:1433 SYN ******S*
Mar 12 18:09:02 62.29.199.210:4642 -> xxx.yyy.203.115:1433 SYN ******S*
Mar 12 18:09:02 62.29.199.210:4012 -> xxx.yyy.203.126:1433 SYN ******S*
Mar 12 18:09:03 62.29.199.210:3931 -> xxx.yyy.203.162:1433 SYN ******S*
Mar 12 18:09:03 62.29.199.210:4525 -> xxx.yyy.203.182:1433 SYN ******S*
Mar 12 18:09:04 62.29.199.210:4986 -> xxx.yyy.203.169:1433 SYN ******S*
Mar 12 18:09:04 62.29.199.210:3632 -> xxx.yyy.203.181:1433 SYN ******S*
22375
Mar 12 11:03:32 69.56.147.74:2086 -> xxx.yyy.1.0:3632 SYN ******S*
Mar 12 11:03:32 69.56.147.74:2088 -> xxx.yyy.1.2:3632 SYN ******S*
Mar 12 11:03:32 69.56.147.74:2087 -> xxx.yyy.1.1:3632 SYN ******S*
Mar 12 11:03:32 69.56.147.74:2089 -> xxx.yyy.1.3:3632 SYN ******S*
Mar 12 11:03:32 69.56.147.74:2090 -> xxx.yyy.1.4:3632 SYN ******S*
Mar 12 11:03:32 69.56.147.74:2091 -> xxx.yyy.1.5:3632 SYN ******S*
Mar 12 11:03:32 69.56.147.74:2093 -> xxx.yyy.1.7:3632 SYN ******S*
Mar 12 11:03:32 69.56.147.74:2092 -> xxx.yyy.1.6:3632 SYN ******S*
[...]
Mar 12 11:03:49 69.56.147.74:2084 -> xxx.yyy.255.228:3632 SYN ******S*
Mar 12 11:03:49 69.56.147.74:2086 -> xxx.yyy.255.230:3632 SYN ******S*
Mar 12 11:03:49 69.56.147.74:2088 -> xxx.yyy.255.232:3632 SYN ******S*
Mar 12 11:03:49 69.56.147.74:2087 -> xxx.yyy.255.231:3632 SYN ******S*
Mar 12 11:03:49 69.56.147.74:2057 -> xxx.yyy.255.251:3632 SYN ******S*
Mar 12 11:03:49 69.56.147.74:2058 -> xxx.yyy.255.252:3632 SYN ******S*
Mar 12 11:03:49 69.56.147.74:2059 -> xxx.yyy.255.253:3632 SYN ******S*
Mar 12 11:03:49 69.56.147.74:2060 -> xxx.yyy.255.254:3632 SYN ******S*
20702
Mar 12 22:52:26 221.165.33.246:1261 -> xxx.yyy.235.118:5554 SYN ******S*
Mar 12 22:52:27 221.165.33.246:1844 -> xxx.yyy.235.118:1023 SYN ******S*
Mar 12 22:52:29 221.165.33.246:2893 -> xxx.yyy.235.118:9898 SYN ******S*
Mar 12 22:52:26 221.165.33.246:1262 -> xxx.yyy.235.119:5554 SYN ******S*
Mar 12 22:52:27 221.165.33.246:1845 -> xxx.yyy.235.119:1023 SYN ******S*
Mar 12 22:52:29 221.165.33.246:2894 -> xxx.yyy.235.119:9898 SYN ******S*
Mar 12 22:52:26 221.165.33.246:1264 -> xxx.yyy.235.121:5554 SYN ******S*
Mar 12 22:52:27 221.165.33.246:1847 -> xxx.yyy.235.121:1023 SYN ******S*
[...]
Mar 12 22:53:08 221.165.33.246:2092 -> xxx.yyy.255.124:9898 SYN ******S*
Mar 12 22:53:08 221.165.33.246:2082 -> xxx.yyy.255.119:9898 SYN ******S*
Mar 12 22:53:08 221.165.33.246:2072 -> xxx.yyy.255.115:9898 SYN ******S*
Mar 12 22:53:08 221.165.33.246:2091 -> xxx.yyy.255.123:9898 SYN ******S*
Mar 12 22:53:08 221.165.33.246:2125 -> xxx.yyy.255.149:9898 SYN ******S*
Mar 12 22:53:08 221.165.33.246:2126 -> xxx.yyy.255.146:9898 SYN ******S*
Mar 12 22:53:08 221.165.33.246:2254 -> xxx.yyy.255.156:9898 SYN ******S*
Mar 12 22:53:08 221.165.33.246:2359 -> xxx.yyy.255.213:9898 SYN ******S*
14655
Mar 12 23:56:12 221.127.4.115:4478 -> xxx.yyy.153.198:5554 SYN ******S*
Mar 12 23:56:13 221.127.4.115:1225 -> xxx.yyy.153.198:1023 SYN ******S*
Mar 12 23:56:15 221.127.4.115:2232 -> xxx.yyy.153.198:9898 SYN ******S*
Mar 12 23:56:12 221.127.4.115:4479 -> xxx.yyy.153.197:5554 SYN ******S*
Mar 12 23:56:13 221.127.4.115:1227 -> xxx.yyy.153.197:1023 SYN ******S*
Mar 12 23:56:15 221.127.4.115:2226 -> xxx.yyy.153.197:9898 SYN ******S*
Mar 12 23:56:12 221.127.4.115:4480 -> xxx.yyy.153.196:5554 SYN ******S*
Mar 12 23:56:13 221.127.4.115:1228 -> xxx.yyy.153.196:1023 SYN ******S*
[...]
Mar 12 23:57:05 221.127.4.115:1814 -> xxx.yyy.173.239:9898 SYN ******S*
Mar 12 23:57:05 221.127.4.115:1817 -> xxx.yyy.173.254:9898 SYN ******S*
Mar 12 23:57:05 221.127.4.115:1825 -> xxx.yyy.173.247:9898 SYN ******S*
Mar 12 23:57:05 221.127.4.115:1831 -> xxx.yyy.173.242:9898 SYN ******S*
Mar 12 23:57:05 221.127.4.115:1833 -> xxx.yyy.173.243:9898 SYN ******S*
Mar 12 23:57:05 221.127.4.115:1848 -> xxx.yyy.173.249:9898 SYN ******S*
Mar 12 23:57:05 221.127.4.115:1849 -> xxx.yyy.173.250:9898 SYN ******S*
Mar 12 23:57:05 221.127.4.115:1851 -> xxx.yyy.174.1:9898 SYN ******S*
Mar 12 23:57:05 221.127.4.115:1887 -> xxx.yyy.153.153:9898 SYN ******S*
14041
Mar 12 22:54:13 60.35.147.52:2070 -> xxx.yyy.236.76:5554 SYN ******S*
Mar 12 22:54:14 60.35.147.52:2796 -> xxx.yyy.236.76:1023 SYN ******S*
Mar 12 22:54:16 60.35.147.52:1040 -> xxx.yyy.236.76:9898 SYN ******S*
Mar 12 22:54:13 60.35.147.52:2073 -> xxx.yyy.236.77:5554 SYN ******S*
Mar 12 22:54:14 60.35.147.52:2812 -> xxx.yyy.236.77:1023 SYN ******S*
Mar 12 22:54:16 60.35.147.52:1154 -> xxx.yyy.236.77:9898 SYN ******S*
Mar 12 22:54:13 60.35.147.52:2074 -> xxx.yyy.236.78:5554 SYN ******S*
Mar 12 22:54:14 60.35.147.52:2813 -> xxx.yyy.236.78:1023 SYN ******S*
[...]
Mar 12 22:54:58 60.35.147.52:1208 -> xxx.yyy.255.244:9898 SYN ******S*
Mar 12 22:54:58 60.35.147.52:1211 -> xxx.yyy.255.245:9898 SYN ******S*
Mar 12 22:54:58 60.35.147.52:1212 -> xxx.yyy.255.246:9898 SYN ******S*
Mar 12 22:54:58 60.35.147.52:1217 -> xxx.yyy.255.250:9898 SYN ******S*
Mar 12 22:54:58 60.35.147.52:1221 -> xxx.yyy.255.247:9898 SYN ******S*
Mar 12 22:54:58 60.35.147.52:1296 -> xxx.yyy.255.252:9898 SYN ******S*
Mar 12 22:54:58 60.35.147.52:1302 -> xxx.yyy.255.254:9898 SYN ******S*
Mar 12 22:54:58 60.35.147.52:1301 -> xxx.yyy.255.253:9898 SYN ******S*
13776
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list