[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Mon Mar 14 16:46:55 GMT 2005
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Mar 13 08:02:51 69.243.174.94:3477 -> xxx.yyy.1.1:4899 SYN ******S*
Mar 13 08:02:51 69.243.174.94:3478 -> xxx.yyy.1.2:4899 SYN ******S*
Mar 13 08:02:53 69.243.174.94:3480 -> xxx.yyy.1.4:4899 SYN ******S*
Mar 13 08:02:51 69.243.174.94:3479 -> xxx.yyy.1.3:4899 SYN ******S*
Mar 13 08:02:53 69.243.174.94:3481 -> xxx.yyy.1.5:4899 SYN ******S*
Mar 13 08:02:53 69.243.174.94:3482 -> xxx.yyy.1.6:4899 SYN ******S*
Mar 13 08:02:53 69.243.174.94:3483 -> xxx.yyy.1.7:4899 SYN ******S*
Mar 13 08:02:51 69.243.174.94:3484 -> xxx.yyy.1.8:4899 SYN ******S*
[...]
Mar 13 08:14:30 69.243.174.94:3098 -> xxx.yyy.255.237:4899 SYN ******S*
Mar 13 08:14:30 69.243.174.94:3110 -> xxx.yyy.255.246:4899 SYN ******S*
Mar 13 08:14:30 69.243.174.94:3114 -> xxx.yyy.255.250:4899 SYN ******S*
Mar 13 08:14:30 69.243.174.94:3102 -> xxx.yyy.255.241:4899 SYN ******S*
Mar 13 08:14:30 69.243.174.94:3095 -> xxx.yyy.255.235:4899 SYN ******S*
Mar 13 08:14:30 69.243.174.94:3118 -> xxx.yyy.255.253:4899 SYN ******S*
Mar 13 08:14:30 69.243.174.94:3107 -> xxx.yyy.255.244:4899 SYN ******S*
Mar 13 08:14:30 69.243.174.94:3111 -> xxx.yyy.255.247:4899 SYN ******S*
Mar 13 08:14:30 69.243.174.94:3099 -> xxx.yyy.255.238:4899 SYN ******S*
109798
Mar 13 19:35:14 83.165.112.236:2005 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 13 19:35:14 83.165.112.236:2006 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 13 19:35:14 83.165.112.236:2003 -> xxx.yyy.1.0:1433 SYN ******S*
Mar 13 19:35:14 83.165.112.236:2008 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 13 19:35:14 83.165.112.236:2010 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 13 19:35:14 83.165.112.236:2013 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 13 19:35:14 83.165.112.236:2017 -> xxx.yyy.1.7:1433 SYN ******S*
Mar 13 19:35:14 83.165.112.236:2016 -> xxx.yyy.1.6:1433 SYN ******S*
[...]
Mar 13 23:24:08 83.165.112.236:1114 -> xxx.yyy.255.244:1433 SYN ******S*
Mar 13 23:24:09 83.165.112.236:1121 -> xxx.yyy.255.246:1433 SYN ******S*
Mar 13 23:24:09 83.165.112.236:1126 -> xxx.yyy.255.247:1433 SYN ******S*
Mar 13 23:24:09 83.165.112.236:1131 -> xxx.yyy.255.248:1433 SYN ******S*
Mar 13 23:24:10 83.165.112.236:1139 -> xxx.yyy.255.249:1433 SYN ******S*
Mar 13 23:24:10 83.165.112.236:1143 -> xxx.yyy.255.250:1433 SYN ******S*
Mar 13 23:24:10 83.165.112.236:1158 -> xxx.yyy.255.251:1433 SYN ******S*
Mar 13 23:24:11 83.165.112.236:1163 -> xxx.yyy.255.252:1433 SYN ******S*
101195
Mar 13 07:16:39 82.39.3.34:4146 -> xxx.yyy.1.0:1433 SYN ******S*
Mar 13 07:16:39 82.39.3.34:4153 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 13 07:16:42 82.39.3.34:4190 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 13 07:16:42 82.39.3.34:4189 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 13 07:16:42 82.39.3.34:4188 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 13 07:16:42 82.39.3.34:4260 -> xxx.yyy.1.9:1433 SYN ******S*
Mar 13 07:16:42 82.39.3.34:4247 -> xxx.yyy.1.7:1433 SYN ******S*
Mar 13 07:16:42 82.39.3.34:4256 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Mar 13 11:07:12 82.39.3.34:2533 -> xxx.yyy.255.246:1433 SYN ******S*
Mar 13 11:07:13 82.39.3.34:2556 -> xxx.yyy.255.247:1433 SYN ******S*
Mar 13 11:07:13 82.39.3.34:2607 -> xxx.yyy.255.249:1433 SYN ******S*
Mar 13 11:07:13 82.39.3.34:2621 -> xxx.yyy.255.250:1433 SYN ******S*
Mar 13 11:07:13 82.39.3.34:2652 -> xxx.yyy.255.251:1433 SYN ******S*
Mar 13 11:07:14 82.39.3.34:2730 -> xxx.yyy.255.252:1433 SYN ******S*
Mar 13 11:07:14 82.39.3.34:2742 -> xxx.yyy.255.253:1433 SYN ******S*
Mar 13 11:07:14 82.39.3.34:2760 -> xxx.yyy.255.254:1433 SYN ******S*
87474
Mar 13 08:42:26 156.99.158.244:2341 -> xxx.yyy.1.1:80 SYN ******S*
Mar 13 08:42:26 156.99.158.244:2343 -> xxx.yyy.1.3:80 SYN ******S*
Mar 13 08:42:28 156.99.158.244:2344 -> xxx.yyy.1.4:80 SYN ******S*
Mar 13 08:42:28 156.99.158.244:2346 -> xxx.yyy.1.6:80 SYN ******S*
Mar 13 08:42:28 156.99.158.244:2345 -> xxx.yyy.1.5:80 SYN ******S*
Mar 13 08:42:28 156.99.158.244:2347 -> xxx.yyy.1.7:80 SYN ******S*
Mar 13 08:42:28 156.99.158.244:2348 -> xxx.yyy.1.8:80 SYN ******S*
Mar 13 08:42:28 156.99.158.244:2349 -> xxx.yyy.1.9:80 SYN ******S*
[...]
Mar 13 08:49:05 156.99.158.244:4849 -> xxx.yyy.255.172:80 SYN ******S*
Mar 13 08:49:05 156.99.158.244:4855 -> xxx.yyy.255.174:80 SYN ******S*
Mar 13 08:49:05 156.99.158.244:4858 -> xxx.yyy.255.176:80 SYN ******S*
Mar 13 08:49:05 156.99.158.244:4856 -> xxx.yyy.255.175:80 SYN ******S*
Mar 13 08:49:05 156.99.158.244:4860 -> xxx.yyy.255.177:80 SYN ******S*
Mar 13 08:49:05 156.99.158.244:4863 -> xxx.yyy.255.179:80 SYN ******S*
Mar 13 08:49:05 156.99.158.244:4862 -> xxx.yyy.255.178:80 SYN ******S*
Mar 13 08:49:05 156.99.158.244:4995 -> xxx.yyy.255.239:80 SYN ******S*
73247
Mar 13 06:37:11 63.245.12.115:2568 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 13 06:37:11 63.245.12.115:2569 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 13 06:37:11 63.245.12.115:2570 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 13 06:37:11 63.245.12.115:2571 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 13 06:37:11 63.245.12.115:2572 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 13 06:37:11 63.245.12.115:2573 -> xxx.yyy.1.6:1433 SYN ******S*
Mar 13 06:37:11 63.245.12.115:2574 -> xxx.yyy.1.7:1433 SYN ******S*
Mar 13 06:37:08 63.245.12.115:2575 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Mar 13 06:48:54 63.245.12.115:1415 -> xxx.yyy.255.245:1433 SYN ******S*
Mar 13 06:48:54 63.245.12.115:1412 -> xxx.yyy.255.242:1433 SYN ******S*
Mar 13 06:48:54 63.245.12.115:1409 -> xxx.yyy.255.239:1433 SYN ******S*
Mar 13 06:48:54 63.245.12.115:1423 -> xxx.yyy.255.253:1433 SYN ******S*
Mar 13 06:48:54 63.245.12.115:1420 -> xxx.yyy.255.250:1433 SYN ******S*
Mar 13 06:48:54 63.245.12.115:1424 -> xxx.yyy.255.254:1433 SYN ******S*
Mar 13 06:48:54 63.245.12.115:1421 -> xxx.yyy.255.251:1433 SYN ******S*
Mar 13 06:48:54 63.245.12.115:1422 -> xxx.yyy.255.252:1433 SYN ******S*
Mar 13 06:48:54 63.245.12.115:1419 -> xxx.yyy.255.249:1433 SYN ******S*
72114
Mar 13 12:40:22 222.121.87.45:2400 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 13 12:40:22 222.121.87.45:2402 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 13 12:40:22 222.121.87.45:2404 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 13 12:40:19 222.121.87.45:2406 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 13 12:40:22 222.121.87.45:2410 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 13 12:40:22 222.121.87.45:2412 -> xxx.yyy.1.6:1433 SYN ******S*
Mar 13 12:40:22 222.121.87.45:2416 -> xxx.yyy.1.8:1433 SYN ******S*
Mar 13 12:40:22 222.121.87.45:2420 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
Mar 13 12:52:55 222.121.87.45:2791 -> xxx.yyy.255.246:1433 SYN ******S*
Mar 13 12:52:55 222.121.87.45:2787 -> xxx.yyy.255.244:1433 SYN ******S*
Mar 13 12:52:55 222.121.87.45:2799 -> xxx.yyy.255.250:1433 SYN ******S*
Mar 13 12:52:55 222.121.87.45:2789 -> xxx.yyy.255.245:1433 SYN ******S*
Mar 13 12:52:55 222.121.87.45:2797 -> xxx.yyy.255.249:1433 SYN ******S*
Mar 13 12:52:55 222.121.87.45:2795 -> xxx.yyy.255.248:1433 SYN ******S*
Mar 13 12:52:55 222.121.87.45:2803 -> xxx.yyy.255.252:1433 SYN ******S*
Mar 13 12:52:55 222.121.87.45:2807 -> xxx.yyy.255.254:1433 SYN ******S*
Mar 13 12:52:55 222.121.87.45:2805 -> xxx.yyy.255.253:1433 SYN ******S*
71580
Mar 13 00:14:34 200.31.193.68:6810 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 13 00:14:34 200.31.193.68:6811 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 13 00:14:31 200.31.193.68:6812 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 13 00:14:34 200.31.193.68:6813 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 13 00:14:34 200.31.193.68:6814 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 13 00:14:34 200.31.193.68:6815 -> xxx.yyy.1.6:1433 SYN ******S*
Mar 13 00:14:34 200.31.193.68:6816 -> xxx.yyy.1.7:1433 SYN ******S*
Mar 13 00:14:34 200.31.193.68:6817 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Mar 13 00:26:31 200.31.193.68:9959 -> xxx.yyy.255.244:1433 SYN ******S*
Mar 13 00:26:31 200.31.193.68:9960 -> xxx.yyy.255.245:1433 SYN ******S*
Mar 13 00:26:31 200.31.193.68:9961 -> xxx.yyy.255.246:1433 SYN ******S*
Mar 13 00:26:31 200.31.193.68:9962 -> xxx.yyy.255.247:1433 SYN ******S*
Mar 13 00:26:31 200.31.193.68:9963 -> xxx.yyy.255.248:1433 SYN ******S*
Mar 13 00:26:31 200.31.193.68:9964 -> xxx.yyy.255.249:1433 SYN ******S*
Mar 13 00:26:31 200.31.193.68:9967 -> xxx.yyy.255.252:1433 SYN ******S*
Mar 13 00:26:31 200.31.193.68:9968 -> xxx.yyy.255.253:1433 SYN ******S*
Mar 13 00:26:31 200.31.193.68:9969 -> xxx.yyy.255.254:1433 SYN ******S*
71293
Mar 13 14:55:01 213.238.150.76:1161 -> xxx.yyy.1.0:6101 SYN ******S*
Mar 13 14:55:04 213.238.150.76:1162 -> xxx.yyy.1.1:6101 SYN ******S*
Mar 13 14:55:04 213.238.150.76:1163 -> xxx.yyy.1.2:6101 SYN ******S*
Mar 13 14:55:04 213.238.150.76:1164 -> xxx.yyy.1.3:6101 SYN ******S*
Mar 13 14:55:04 213.238.150.76:1165 -> xxx.yyy.1.4:6101 SYN ******S*
Mar 13 14:55:04 213.238.150.76:1166 -> xxx.yyy.1.5:6101 SYN ******S*
Mar 13 14:55:04 213.238.150.76:1167 -> xxx.yyy.1.6:6101 SYN ******S*
Mar 13 14:55:04 213.238.150.76:1168 -> xxx.yyy.1.7:6101 SYN ******S*
[...]
Mar 13 15:28:29 213.238.150.76:2855 -> xxx.yyy.255.241:6101 SYN ******S*
Mar 13 15:28:29 213.238.150.76:2862 -> xxx.yyy.255.247:6101 SYN ******S*
Mar 13 15:28:29 213.238.150.76:2860 -> xxx.yyy.255.245:6101 SYN ******S*
Mar 13 15:28:29 213.238.150.76:2861 -> xxx.yyy.255.246:6101 SYN ******S*
Mar 13 15:28:29 213.238.150.76:2863 -> xxx.yyy.255.248:6101 SYN ******S*
Mar 13 15:28:30 213.238.150.76:2869 -> xxx.yyy.255.250:6101 SYN ******S*
Mar 13 15:28:30 213.238.150.76:2870 -> xxx.yyy.255.251:6101 SYN ******S*
Mar 13 15:28:30 213.238.150.76:2868 -> xxx.yyy.255.249:6101 SYN ******S*
71076
Mar 13 13:22:53 128.187.35.223:4137 -> xxx.yyy.1.1:21 SYN ******S*
Mar 13 13:22:53 128.187.35.223:4138 -> xxx.yyy.1.2:21 SYN ******S*
Mar 13 13:22:53 128.187.35.223:4140 -> xxx.yyy.1.4:21 SYN ******S*
Mar 13 13:22:53 128.187.35.223:4142 -> xxx.yyy.1.6:21 SYN ******S*
Mar 13 13:22:50 128.187.35.223:4151 -> xxx.yyy.1.15:21 SYN ******S*
Mar 13 13:22:53 128.187.35.223:4152 -> xxx.yyy.1.16:21 SYN ******S*
Mar 13 13:22:53 128.187.35.223:4153 -> xxx.yyy.1.17:21 SYN ******S*
Mar 13 13:22:53 128.187.35.223:4154 -> xxx.yyy.1.18:21 SYN ******S*
[...]
Mar 13 13:34:33 128.187.35.223:2713 -> xxx.yyy.255.199:21 SYN ******S*
Mar 13 13:34:33 128.187.35.223:2716 -> xxx.yyy.255.202:21 SYN ******S*
Mar 13 13:34:33 128.187.35.223:2717 -> xxx.yyy.255.203:21 SYN ******S*
Mar 13 13:34:33 128.187.35.223:2718 -> xxx.yyy.255.204:21 SYN ******S*
Mar 13 13:34:33 128.187.35.223:2715 -> xxx.yyy.255.201:21 SYN ******S*
Mar 13 13:34:33 128.187.35.223:2712 -> xxx.yyy.255.198:21 SYN ******S*
Mar 13 13:34:33 128.187.35.223:2719 -> xxx.yyy.255.205:21 SYN ******S*
Mar 13 13:34:34 128.187.35.223:2754 -> xxx.yyy.255.240:21 SYN ******S*
69988
Mar 13 15:49:52 192.139.228.218:3295 -> xxx.yyy.1.1:4898 SYN ******S*
Mar 13 15:49:52 192.139.228.218:3296 -> xxx.yyy.1.2:4898 SYN ******S*
Mar 13 15:49:52 192.139.228.218:3297 -> xxx.yyy.1.3:4898 SYN ******S*
Mar 13 15:49:54 192.139.228.218:3298 -> xxx.yyy.1.4:4898 SYN ******S*
Mar 13 15:49:54 192.139.228.218:3299 -> xxx.yyy.1.5:4898 SYN ******S*
Mar 13 15:49:54 192.139.228.218:3300 -> xxx.yyy.1.6:4898 SYN ******S*
Mar 13 15:49:51 192.139.228.218:3301 -> xxx.yyy.1.7:4898 SYN ******S*
Mar 13 15:49:52 192.139.228.218:3302 -> xxx.yyy.1.8:4898 SYN ******S*
[...]
Mar 13 16:01:36 192.139.228.218:1912 -> xxx.yyy.255.242:4898 SYN ******S*
Mar 13 16:01:36 192.139.228.218:1915 -> xxx.yyy.255.245:4898 SYN ******S*
Mar 13 16:01:36 192.139.228.218:1916 -> xxx.yyy.255.246:4898 SYN ******S*
Mar 13 16:01:36 192.139.228.218:1913 -> xxx.yyy.255.243:4898 SYN ******S*
Mar 13 16:01:36 192.139.228.218:1923 -> xxx.yyy.255.253:4898 SYN ******S*
Mar 13 16:01:36 192.139.228.218:1920 -> xxx.yyy.255.250:4898 SYN ******S*
Mar 13 16:01:36 192.139.228.218:1921 -> xxx.yyy.255.251:4898 SYN ******S*
Mar 13 16:01:36 192.139.228.218:1924 -> xxx.yyy.255.254:4898 SYN ******S*
Mar 13 16:01:36 192.139.228.218:1922 -> xxx.yyy.255.252:4898 SYN ******S*
69758
Mar 13 00:50:38 61.222.172.50:58999 -> xxx.yyy.1.1:443 SYN ******S*
Mar 13 00:50:38 61.222.172.50:59000 -> xxx.yyy.1.2:443 SYN ******S*
Mar 13 00:50:38 61.222.172.50:59001 -> xxx.yyy.1.3:443 SYN ******S*
Mar 13 00:50:39 61.222.172.50:59002 -> xxx.yyy.1.4:443 SYN ******S*
Mar 13 00:50:39 61.222.172.50:59003 -> xxx.yyy.1.5:443 SYN ******S*
Mar 13 00:50:39 61.222.172.50:59004 -> xxx.yyy.1.6:443 SYN ******S*
Mar 13 00:50:39 61.222.172.50:59005 -> xxx.yyy.1.7:443 SYN ******S*
Mar 13 00:50:38 61.222.172.50:59006 -> xxx.yyy.1.8:443 SYN ******S*
[...]
Mar 13 01:02:20 61.222.172.50:61996 -> xxx.yyy.255.240:443 SYN ******S*
Mar 13 01:02:20 61.222.172.50:62006 -> xxx.yyy.255.250:443 SYN ******S*
Mar 13 01:02:20 61.222.172.50:62005 -> xxx.yyy.255.249:443 SYN ******S*
Mar 13 01:02:20 61.222.172.50:62002 -> xxx.yyy.255.246:443 SYN ******S*
Mar 13 01:02:20 61.222.172.50:62003 -> xxx.yyy.255.247:443 SYN ******S*
Mar 13 01:02:20 61.222.172.50:62007 -> xxx.yyy.255.251:443 SYN ******S*
Mar 13 01:02:20 61.222.172.50:62004 -> xxx.yyy.255.248:443 SYN ******S*
Mar 13 01:02:20 61.222.172.50:62001 -> xxx.yyy.255.245:443 SYN ******S*
Mar 13 01:02:20 61.222.172.50:62010 -> xxx.yyy.255.254:443 SYN ******S*
69568
Mar 13 15:20:38 140.124.42.229:3822 -> xxx.yyy.1.1:3306 SYN ******S*
Mar 13 15:20:41 140.124.42.229:3823 -> xxx.yyy.1.2:3306 SYN ******S*
Mar 13 15:20:41 140.124.42.229:3824 -> xxx.yyy.1.3:3306 SYN ******S*
Mar 13 15:20:41 140.124.42.229:3825 -> xxx.yyy.1.4:3306 SYN ******S*
Mar 13 15:20:41 140.124.42.229:3826 -> xxx.yyy.1.5:3306 SYN ******S*
Mar 13 15:20:41 140.124.42.229:3828 -> xxx.yyy.1.7:3306 SYN ******S*
Mar 13 15:20:41 140.124.42.229:3829 -> xxx.yyy.1.8:3306 SYN ******S*
Mar 13 15:20:41 140.124.42.229:3830 -> xxx.yyy.1.9:3306 SYN ******S*
[...]
Mar 13 15:32:22 140.124.42.229:3258 -> xxx.yyy.255.176:3306 SYN ******S*
Mar 13 15:32:23 140.124.42.229:3272 -> xxx.yyy.255.190:3306 SYN ******S*
Mar 13 15:32:23 140.124.42.229:3269 -> xxx.yyy.255.187:3306 SYN ******S*
Mar 13 15:32:23 140.124.42.229:3270 -> xxx.yyy.255.188:3306 SYN ******S*
Mar 13 15:32:23 140.124.42.229:3267 -> xxx.yyy.255.185:3306 SYN ******S*
Mar 13 15:32:23 140.124.42.229:3268 -> xxx.yyy.255.186:3306 SYN ******S*
Mar 13 15:32:23 140.124.42.229:3271 -> xxx.yyy.255.189:3306 SYN ******S*
Mar 13 15:32:23 140.124.42.229:3295 -> xxx.yyy.255.213:3306 SYN ******S*
69041
Mar 13 02:44:08 61.55.138.177:2259 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 13 02:44:05 61.55.138.177:2261 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 13 02:44:05 61.55.138.177:2260 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 13 02:44:05 61.55.138.177:2262 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 13 02:44:08 61.55.138.177:2264 -> xxx.yyy.1.7:1433 SYN ******S*
Mar 13 02:44:05 61.55.138.177:2266 -> xxx.yyy.1.9:1433 SYN ******S*
Mar 13 02:44:08 61.55.138.177:2269 -> xxx.yyy.1.12:1433 SYN ******S*
Mar 13 02:44:08 61.55.138.177:2271 -> xxx.yyy.1.14:1433 SYN ******S*
[...]
Mar 13 02:48:09 61.55.138.177:4438 -> xxx.yyy.255.232:1433 SYN ******S*
Mar 13 02:48:09 61.55.138.177:4393 -> xxx.yyy.255.201:1433 SYN ******S*
Mar 13 02:48:09 61.55.138.177:4390 -> xxx.yyy.255.198:1433 SYN ******S*
Mar 13 02:48:09 61.55.138.177:4462 -> xxx.yyy.255.245:1433 SYN ******S*
Mar 13 02:48:09 61.55.138.177:4471 -> xxx.yyy.255.251:1433 SYN ******S*
Mar 13 02:48:09 61.55.138.177:4465 -> xxx.yyy.255.248:1433 SYN ******S*
Mar 13 02:48:09 61.55.138.177:4467 -> xxx.yyy.255.249:1433 SYN ******S*
Mar 13 02:48:09 61.55.138.177:4463 -> xxx.yyy.255.246:1433 SYN ******S*
Mar 13 02:48:09 61.55.138.177:4474 -> xxx.yyy.255.252:1433 SYN ******S*
47765
Mar 13 21:47:14 67.41.154.187:3768 -> xxx.yyy.1.1:3306 SYN ******S*
Mar 13 21:47:14 67.41.154.187:3769 -> xxx.yyy.1.2:3306 SYN ******S*
Mar 13 21:47:14 67.41.154.187:3770 -> xxx.yyy.1.3:3306 SYN ******S*
Mar 13 21:47:14 67.41.154.187:3771 -> xxx.yyy.1.4:3306 SYN ******S*
Mar 13 21:47:14 67.41.154.187:3772 -> xxx.yyy.1.5:3306 SYN ******S*
Mar 13 21:47:11 67.41.154.187:3773 -> xxx.yyy.1.6:3306 SYN ******S*
Mar 13 21:47:14 67.41.154.187:3775 -> xxx.yyy.1.8:3306 SYN ******S*
Mar 13 21:47:14 67.41.154.187:3776 -> xxx.yyy.1.9:3306 SYN ******S*
[...]
Mar 13 21:58:56 67.41.154.187:3045 -> xxx.yyy.255.246:3306 SYN ******S*
Mar 13 21:58:53 67.41.154.187:3046 -> xxx.yyy.255.247:3306 SYN ******S*
Mar 13 21:58:56 67.41.154.187:3047 -> xxx.yyy.255.248:3306 SYN ******S*
Mar 13 21:58:56 67.41.154.187:3048 -> xxx.yyy.255.249:3306 SYN ******S*
Mar 13 21:58:56 67.41.154.187:3049 -> xxx.yyy.255.250:3306 SYN ******S*
Mar 13 21:58:56 67.41.154.187:3051 -> xxx.yyy.255.252:3306 SYN ******S*
Mar 13 21:58:56 67.41.154.187:3052 -> xxx.yyy.255.253:3306 SYN ******S*
Mar 13 21:58:56 67.41.154.187:3053 -> xxx.yyy.255.254:3306 SYN ******S*
Mar 13 21:58:56 67.41.154.187:3050 -> xxx.yyy.255.251:3306 SYN ******S*
45299
[...]
39396
[...]
33079
[...]
31973
Mar 13 03:53:58 129.174.194.24:1849 -> xxx.yyy.1.0:1433 SYN ******S*
Mar 13 03:53:58 129.174.194.24:1850 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 13 03:53:58 129.174.194.24:1851 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 13 03:53:58 129.174.194.24:1852 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 13 03:53:58 129.174.194.24:1853 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 13 03:53:58 129.174.194.24:1854 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 13 03:53:58 129.174.194.24:1855 -> xxx.yyy.1.6:1433 SYN ******S*
Mar 13 03:53:58 129.174.194.24:1856 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Mar 13 03:54:28 129.174.194.24:1866 -> xxx.yyy.255.247:1433 SYN ******S*
Mar 13 03:54:28 129.174.194.24:1867 -> xxx.yyy.255.248:1433 SYN ******S*
Mar 13 03:54:28 129.174.194.24:1868 -> xxx.yyy.255.249:1433 SYN ******S*
Mar 13 03:54:28 129.174.194.24:1869 -> xxx.yyy.255.250:1433 SYN ******S*
Mar 13 03:54:28 129.174.194.24:1870 -> xxx.yyy.255.251:1433 SYN ******S*
Mar 13 03:54:28 129.174.194.24:1871 -> xxx.yyy.255.252:1433 SYN ******S*
Mar 13 03:54:28 129.174.194.24:1872 -> xxx.yyy.255.253:1433 SYN ******S*
Mar 13 03:54:28 129.174.194.24:1873 -> xxx.yyy.255.254:1433 SYN ******S*
31317
Mar 13 15:28:11 194.57.185.124:1479 -> xxx.yyy.1.0:5093 SYN ******S*
Mar 13 15:28:11 194.57.185.124:1480 -> xxx.yyy.1.1:5093 SYN ******S*
Mar 13 15:28:11 194.57.185.124:1481 -> xxx.yyy.1.2:5093 SYN ******S*
Mar 13 15:28:11 194.57.185.124:1482 -> xxx.yyy.1.3:5093 SYN ******S*
Mar 13 15:28:11 194.57.185.124:1483 -> xxx.yyy.1.4:5093 SYN ******S*
Mar 13 15:28:11 194.57.185.124:1434 -> xxx.yyy.1.5:5093 SYN ******S*
Mar 13 15:28:11 194.57.185.124:1435 -> xxx.yyy.1.6:5093 SYN ******S*
Mar 13 15:28:11 194.57.185.124:1436 -> xxx.yyy.1.7:5093 SYN ******S*
[...]
Mar 13 15:28:44 194.57.185.124:1443 -> xxx.yyy.255.244:5093 SYN ******S*
Mar 13 15:28:44 194.57.185.124:1445 -> xxx.yyy.255.246:5093 SYN ******S*
Mar 13 15:28:44 194.57.185.124:1444 -> xxx.yyy.255.245:5093 SYN ******S*
Mar 13 15:28:44 194.57.185.124:1446 -> xxx.yyy.255.247:5093 SYN ******S*
Mar 13 15:28:44 194.57.185.124:1447 -> xxx.yyy.255.248:5093 SYN ******S*
Mar 13 15:28:44 194.57.185.124:1448 -> xxx.yyy.255.249:5093 SYN ******S*
Mar 13 15:28:44 194.57.185.124:1449 -> xxx.yyy.255.250:5093 SYN ******S*
Mar 13 15:28:44 194.57.185.124:1450 -> xxx.yyy.255.251:5093 SYN ******S*
27521
Mar 13 14:43:43 62.174.208.73:61912 -> xxx.yyy.1.0:1433 SYN ******S*
Mar 13 14:43:43 62.174.208.73:61913 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 13 14:43:43 62.174.208.73:61914 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 13 14:43:43 62.174.208.73:61915 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 13 14:43:43 62.174.208.73:61916 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 13 14:43:43 62.174.208.73:61917 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 13 14:43:43 62.174.208.73:61918 -> xxx.yyy.1.6:1433 SYN ******S*
Mar 13 14:43:43 62.174.208.73:61919 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Mar 13 15:19:04 62.174.208.73:40880 -> xxx.yyy.163.146:1433 SYN ******S*
Mar 13 15:19:04 62.174.208.73:40895 -> xxx.yyy.163.148:1433 SYN ******S*
Mar 13 15:19:04 62.174.208.73:40896 -> xxx.yyy.163.149:1433 SYN ******S*
Mar 13 15:19:04 62.174.208.73:40881 -> xxx.yyy.163.150:1433 SYN ******S*
Mar 13 15:19:04 62.174.208.73:40897 -> xxx.yyy.163.151:1433 SYN ******S*
Mar 13 15:19:04 62.174.208.73:40882 -> xxx.yyy.163.152:1433 SYN ******S*
Mar 13 15:19:04 62.174.208.73:40898 -> xxx.yyy.163.153:1433 SYN ******S*
Mar 13 15:19:04 62.174.208.73:40883 -> xxx.yyy.163.154:1433 SYN ******S*
26751
Mar 13 20:30:54 81.208.28.50:3001 -> xxx.yyy.1.177:6129 SYN ******S*
Mar 13 20:30:54 81.208.28.50:3001 -> xxx.yyy.1.46:6129 SYN ******S*
Mar 13 20:30:54 81.208.28.50:3001 -> xxx.yyy.11.106:6129 SYN ******S*
Mar 13 20:30:54 81.208.28.50:3001 -> xxx.yyy.10.231:6129 SYN ******S*
Mar 13 20:30:54 81.208.28.50:3001 -> xxx.yyy.12.243:6129 SYN ******S*
Mar 13 20:30:54 81.208.28.50:3001 -> xxx.yyy.13.249:6129 SYN ******S*
Mar 13 20:30:54 81.208.28.50:3001 -> xxx.yyy.14.124:6129 SYN ******S*
Mar 13 20:30:54 81.208.28.50:3001 -> xxx.yyy.15.130:6129 SYN ******S*
[...]
Mar 13 23:59:39 81.208.28.50:3001 -> xxx.yyy.246.184:6129 SYN ******S*
Mar 13 23:59:39 81.208.28.50:3001 -> xxx.yyy.255.238:6129 SYN ******S*
Mar 13 23:59:39 81.208.28.50:3001 -> xxx.yyy.253.95:6129 SYN ******S*
Mar 13 23:59:39 81.208.28.50:3001 -> xxx.yyy.252.220:6129 SYN ******S*
Mar 13 23:59:39 81.208.28.50:3001 -> xxx.yyy.253.226:6129 SYN ******S*
Mar 13 23:59:39 81.208.28.50:3001 -> xxx.yyy.254.101:6129 SYN ******S*
Mar 13 23:59:39 81.208.28.50:3001 -> xxx.yyy.249.71:6129 SYN ******S*
Mar 13 23:59:39 81.208.28.50:3001 -> xxx.yyy.255.107:6129 SYN ******S*
26702
Mar 13 12:50:10 84.72.90.53:2959 -> xxx.yyy.1.0:1433 SYN ******S*
Mar 13 12:50:10 84.72.90.53:2960 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 13 12:50:10 84.72.90.53:2964 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 13 12:50:10 84.72.90.53:2965 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 13 12:50:10 84.72.90.53:2970 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 13 12:50:10 84.72.90.53:2972 -> xxx.yyy.1.6:1433 SYN ******S*
Mar 13 12:50:10 84.72.90.53:2974 -> xxx.yyy.1.7:1433 SYN ******S*
Mar 13 12:50:10 84.72.90.53:2976 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Mar 13 15:51:10 84.72.90.53:1630 -> xxx.yyy.84.108:1433 SYN ******S*
Mar 13 15:51:10 84.72.90.53:1631 -> xxx.yyy.84.109:1433 SYN ******S*
Mar 13 15:51:10 84.72.90.53:1610 -> xxx.yyy.84.104:1433 SYN ******S*
Mar 13 15:51:10 84.72.90.53:1607 -> xxx.yyy.84.103:1433 SYN ******S*
Mar 13 15:51:10 84.72.90.53:1605 -> xxx.yyy.84.102:1433 SYN ******S*
Mar 13 15:51:10 84.72.90.53:1603 -> xxx.yyy.84.101:1433 SYN ******S*
Mar 13 15:51:10 84.72.90.53:1636 -> xxx.yyy.84.110:1433 SYN ******S*
Mar 13 15:51:10 84.72.90.53:1612 -> xxx.yyy.84.105:1433 SYN ******S*
22372
Mar 13 23:55:40 60.160.32.91:3013 -> xxx.yyy.174.3:1023 SYN ******S*
Mar 13 23:55:42 60.160.32.91:4128 -> xxx.yyy.174.3:9898 SYN ******S*
Mar 13 23:55:40 60.160.32.91:3026 -> xxx.yyy.174.4:1023 SYN ******S*
Mar 13 23:55:42 60.160.32.91:4133 -> xxx.yyy.174.4:9898 SYN ******S*
Mar 13 23:55:40 60.160.32.91:3042 -> xxx.yyy.174.5:1023 SYN ******S*
Mar 13 23:55:42 60.160.32.91:4147 -> xxx.yyy.174.5:9898 SYN ******S*
Mar 13 23:55:40 60.160.32.91:3048 -> xxx.yyy.174.6:1023 SYN ******S*
Mar 13 23:55:42 60.160.32.91:4152 -> xxx.yyy.174.6:9898 SYN ******S*
[...]
Mar 13 23:57:00 60.160.32.91:2200 -> xxx.yyy.195.85:9898 SYN ******S*
Mar 13 23:57:00 60.160.32.91:2202 -> xxx.yyy.195.86:9898 SYN ******S*
Mar 13 23:57:00 60.160.32.91:2192 -> xxx.yyy.195.78:9898 SYN ******S*
Mar 13 23:57:00 60.160.32.91:2193 -> xxx.yyy.195.79:9898 SYN ******S*
Mar 13 23:57:00 60.160.32.91:2197 -> xxx.yyy.195.82:9898 SYN ******S*
Mar 13 23:57:00 60.160.32.91:2207 -> xxx.yyy.195.88:9898 SYN ******S*
Mar 13 23:57:00 60.160.32.91:2206 -> xxx.yyy.195.87:9898 SYN ******S*
Mar 13 23:57:00 60.160.32.91:2208 -> xxx.yyy.177.27:9898 SYN ******S*
Mar 13 23:57:00 60.160.32.91:2213 -> xxx.yyy.177.28:9898 SYN ******S*
15937
Mar 13 19:49:45 81.244.238.135:4915 -> xxx.yyy.1.0:1433 SYN ******S*
Mar 13 19:49:45 81.244.238.135:4357 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 13 19:49:45 81.244.238.135:1669 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 13 19:49:45 81.244.238.135:3593 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 13 19:49:45 81.244.238.135:4261 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 13 19:49:45 81.244.238.135:4947 -> xxx.yyy.1.6:1433 SYN ******S*
Mar 13 19:49:45 81.244.238.135:4639 -> xxx.yyy.1.7:1433 SYN ******S*
Mar 13 19:49:45 81.244.238.135:3542 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Mar 13 23:59:58 81.244.238.135:1538 -> xxx.yyy.93.4:1433 SYN ******S*
Mar 13 23:59:58 81.244.238.135:1401 -> xxx.yyy.93.5:1433 SYN ******S*
Mar 13 23:59:59 81.244.238.135:2011 -> xxx.yyy.93.11:1433 SYN ******S*
Mar 13 23:59:59 81.244.238.135:4074 -> xxx.yyy.93.12:1433 SYN ******S*
Mar 13 23:59:59 81.244.238.135:2927 -> xxx.yyy.93.13:1433 SYN ******S*
Mar 13 23:59:59 81.244.238.135:2322 -> xxx.yyy.93.15:1433 SYN ******S*
Mar 13 23:59:59 81.244.238.135:4297 -> xxx.yyy.93.16:1433 SYN ******S*
Mar 13 23:59:59 81.244.238.135:3312 -> xxx.yyy.93.17:1433 SYN ******S*
Mar 13 23:59:59 81.244.238.135:3877 -> xxx.yyy.93.19:1433 SYN ******S*
15327
Mar 13 22:46:56 222.117.218.50:1291 -> xxx.yyy.235.112:5554 SYN ******S*
Mar 13 22:46:57 222.117.218.50:1615 -> xxx.yyy.235.112:1023 SYN ******S*
Mar 13 22:46:59 222.117.218.50:2147 -> xxx.yyy.235.112:9898 SYN ******S*
Mar 13 22:46:56 222.117.218.50:1295 -> xxx.yyy.235.114:5554 SYN ******S*
Mar 13 22:46:57 222.117.218.50:1619 -> xxx.yyy.235.114:1023 SYN ******S*
Mar 13 22:46:59 222.117.218.50:2152 -> xxx.yyy.235.114:9898 SYN ******S*
Mar 13 22:46:56 222.117.218.50:1292 -> xxx.yyy.235.113:5554 SYN ******S*
Mar 13 22:46:57 222.117.218.50:1616 -> xxx.yyy.235.113:1023 SYN ******S*
[...]
Mar 13 22:48:41 222.117.218.50:4360 -> xxx.yyy.236.75:9898 SYN ******S*
Mar 13 22:48:41 222.117.218.50:4356 -> xxx.yyy.236.82:9898 SYN ******S*
Mar 13 22:48:41 222.117.218.50:4354 -> xxx.yyy.236.79:9898 SYN ******S*
Mar 13 22:48:41 222.117.218.50:4358 -> xxx.yyy.236.80:9898 SYN ******S*
Mar 13 22:48:41 222.117.218.50:4355 -> xxx.yyy.236.81:9898 SYN ******S*
Mar 13 22:48:41 222.117.218.50:4357 -> xxx.yyy.236.83:9898 SYN ******S*
Mar 13 22:48:41 222.117.218.50:4359 -> xxx.yyy.236.84:9898 SYN ******S*
Mar 13 22:48:41 222.117.218.50:4361 -> xxx.yyy.236.86:9898 SYN ******S*
Mar 13 22:48:41 222.117.218.50:4380 -> xxx.yyy.236.87:9898 SYN ******S*
15321
Mar 13 05:34:48 60.24.17.189:65200 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 13 05:34:45 60.24.17.189:65201 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 13 05:34:48 60.24.17.189:65207 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 13 05:34:48 60.24.17.189:65309 -> xxx.yyy.1.8:1433 SYN ******S*
Mar 13 05:34:48 60.24.17.189:65307 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 13 05:34:54 60.24.17.189:65307 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 13 05:34:54 60.24.17.189:65197 -> xxx.yyy.1.0:1433 SYN ******S*
Mar 13 05:34:54 60.24.17.189:65499 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
Mar 13 09:25:30 60.24.17.189:54183 -> xxx.yyy.250.242:1433 SYN ******S*
Mar 13 09:25:31 60.24.17.189:54471 -> xxx.yyy.251.19:1433 SYN ******S*
Mar 13 09:25:31 60.24.17.189:54473 -> xxx.yyy.251.20:1433 SYN ******S*
Mar 13 09:25:31 60.24.17.189:54490 -> xxx.yyy.251.21:1433 SYN ******S*
Mar 13 09:25:31 60.24.17.189:54381 -> xxx.yyy.251.0:1433 SYN ******S*
Mar 13 09:25:31 60.24.17.189:54214 -> xxx.yyy.250.244:1433 SYN ******S*
Mar 13 09:25:32 60.24.17.189:54429 -> xxx.yyy.251.8:1433 SYN ******S*
Mar 13 09:25:33 60.24.17.189:54454 -> xxx.yyy.251.14:1433 SYN ******S*
Mar 13 09:25:33 60.24.17.189:54503 -> xxx.yyy.251.40:1433 SYN ******S*
15194
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list