[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Sat Dec 4 17:15:04 GMT 2004
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Dec 3 04:51:22 200.102.6.26:2220 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 3 04:51:22 200.102.6.26:2222 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 3 04:51:22 200.102.6.26:2223 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 3 04:51:22 200.102.6.26:2224 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 3 04:51:22 200.102.6.26:2225 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 3 04:51:22 200.102.6.26:2226 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 3 04:51:22 200.102.6.26:2227 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 3 04:51:22 200.102.6.26:2228 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Dec 3 06:46:21 200.102.6.26:3948 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 3 06:46:21 200.102.6.26:3949 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 3 06:46:21 200.102.6.26:3953 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 3 06:46:21 200.102.6.26:3955 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 3 06:46:22 200.102.6.26:3965 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 3 06:46:22 200.102.6.26:3968 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 3 06:46:22 200.102.6.26:3970 -> xxx.yyy.255.253:1433 SYN ******S*
Dec 3 06:46:22 200.102.6.26:3972 -> xxx.yyy.255.254:1433 SYN ******S*
120631
Dec 3 02:14:26 220.170.244.253:4646 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 3 02:14:26 220.170.244.253:4643 -> xxx.yyy.1.0:1433 SYN ******S*
Dec 3 02:14:26 220.170.244.253:4650 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 3 02:14:26 220.170.244.253:4652 -> xxx.yyy.1.9:1433 SYN ******S*
Dec 3 02:14:26 220.170.244.253:4654 -> xxx.yyy.1.11:1433 SYN ******S*
Dec 3 02:14:23 220.170.244.253:4647 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 3 02:14:23 220.170.244.253:4663 -> xxx.yyy.1.13:1433 SYN ******S*
Dec 3 02:14:26 220.170.244.253:4651 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Dec 3 06:04:52 220.170.244.253:3787 -> xxx.yyy.255.243:1433 SYN ******S*
Dec 3 06:04:53 220.170.244.253:3798 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 3 06:04:53 220.170.244.253:3794 -> xxx.yyy.255.246:1433 SYN ******S*
Dec 3 06:04:53 220.170.244.253:3789 -> xxx.yyy.255.244:1433 SYN ******S*
Dec 3 06:04:53 220.170.244.253:3817 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 3 06:04:53 220.170.244.253:3824 -> xxx.yyy.255.253:1433 SYN ******S*
Dec 3 06:04:53 220.170.244.253:3819 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 3 06:04:53 220.170.244.253:3821 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 3 06:04:53 220.170.244.253:3826 -> xxx.yyy.255.254:1433 SYN ******S*
109806
Dec 3 06:13:49 213.66.16.62:3487 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 3 06:13:49 213.66.16.62:3485 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 3 06:13:49 213.66.16.62:3483 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 3 06:13:49 213.66.16.62:3481 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 3 06:13:49 213.66.16.62:3479 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 3 06:13:49 213.66.16.62:3477 -> xxx.yyy.1.0:1433 SYN ******S*
Dec 3 06:13:49 213.66.16.62:3501 -> xxx.yyy.1.12:1433 SYN ******S*
Dec 3 06:13:49 213.66.16.62:3499 -> xxx.yyy.1.11:1433 SYN ******S*
[...]
Dec 3 10:02:38 213.66.16.62:3524 -> xxx.yyy.255.254:1433 SYN ******S*
Dec 3 10:02:38 213.66.16.62:3244 -> xxx.yyy.255.232:1433 SYN ******S*
Dec 3 10:02:38 213.66.16.62:3254 -> xxx.yyy.255.234:1433 SYN ******S*
Dec 3 10:02:40 213.66.16.62:3292 -> xxx.yyy.255.238:1433 SYN ******S*
Dec 3 10:02:41 213.66.16.62:3344 -> xxx.yyy.255.241:1433 SYN ******S*
Dec 3 10:02:41 213.66.16.62:3390 -> xxx.yyy.255.243:1433 SYN ******S*
Dec 3 10:02:43 213.66.16.62:3489 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 3 10:02:44 213.66.16.62:3520 -> xxx.yyy.255.252:1433 SYN ******S*
92459
Dec 3 17:15:10 84.120.112.170:2285 -> xxx.yyy.1.0:1433 SYN ******S*
Dec 3 17:15:10 84.120.112.170:2286 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 3 17:15:07 84.120.112.170:2287 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 3 17:15:10 84.120.112.170:2288 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 3 17:15:08 84.120.112.170:2290 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 3 17:15:10 84.120.112.170:2294 -> xxx.yyy.1.8:1433 SYN ******S*
Dec 3 17:15:08 84.120.112.170:2295 -> xxx.yyy.1.9:1433 SYN ******S*
Dec 3 17:15:10 84.120.112.170:2296 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
Dec 3 21:04:23 84.120.112.170:4917 -> xxx.yyy.255.242:1433 SYN ******S*
Dec 3 21:04:23 84.120.112.170:4926 -> xxx.yyy.255.243:1433 SYN ******S*
Dec 3 21:04:24 84.120.112.170:4927 -> xxx.yyy.255.244:1433 SYN ******S*
Dec 3 21:04:24 84.120.112.170:4931 -> xxx.yyy.255.245:1433 SYN ******S*
Dec 3 21:04:24 84.120.112.170:4932 -> xxx.yyy.255.246:1433 SYN ******S*
Dec 3 21:04:25 84.120.112.170:4940 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 3 21:04:26 84.120.112.170:4942 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 3 21:04:26 84.120.112.170:4944 -> xxx.yyy.255.253:1433 SYN ******S*
79437
Dec 3 20:38:08 67.174.28.237:4107 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 3 20:38:05 67.174.28.237:4109 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 3 20:38:05 67.174.28.237:4111 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 3 20:38:08 67.174.28.237:4113 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 3 20:38:08 67.174.28.237:4114 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 3 20:38:05 67.174.28.237:4120 -> xxx.yyy.1.9:1433 SYN ******S*
Dec 3 20:38:05 67.174.28.237:4121 -> xxx.yyy.1.10:1433 SYN ******S*
Dec 3 20:38:06 67.174.28.237:4126 -> xxx.yyy.1.12:1433 SYN ******S*
[...]
Dec 3 23:59:59 67.174.28.237:2687 -> xxx.yyy.226.17:1433 SYN ******S*
Dec 3 23:59:59 67.174.28.237:2688 -> xxx.yyy.226.18:1433 SYN ******S*
Dec 3 23:59:59 67.174.28.237:2689 -> xxx.yyy.226.19:1433 SYN ******S*
Dec 4 00:00:00 67.174.28.237:2662 -> xxx.yyy.226.2:1433 SYN ******S*
Dec 4 00:00:00 67.174.28.237:2619 -> xxx.yyy.225.220:1433 SYN ******S*
Dec 4 00:00:00 67.174.28.237:2698 -> xxx.yyy.226.23:1433 SYN ******S*
Dec 4 00:00:00 67.174.28.237:2699 -> xxx.yyy.226.24:1433 SYN ******S*
Dec 4 00:00:00 67.174.28.237:2622 -> xxx.yyy.225.223:1433 SYN ******S*
Dec 4 00:00:00 67.174.28.237:2621 -> xxx.yyy.225.222:1433 SYN ******S*
78856
Dec 3 19:06:20 201.8.60.147:4453 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 3 19:06:20 201.8.60.147:4458 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 3 19:06:20 201.8.60.147:4461 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 3 19:06:20 201.8.60.147:4463 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 3 19:06:20 201.8.60.147:4464 -> xxx.yyy.1.8:1433 SYN ******S*
Dec 3 19:06:20 201.8.60.147:4467 -> xxx.yyy.1.10:1433 SYN ******S*
Dec 3 19:06:20 201.8.60.147:4468 -> xxx.yyy.1.11:1433 SYN ******S*
Dec 3 19:06:20 201.8.60.147:4475 -> xxx.yyy.1.16:1433 SYN ******S*
[...]
Dec 3 21:01:22 201.8.60.147:3007 -> xxx.yyy.255.244:1433 SYN ******S*
Dec 3 21:01:22 201.8.60.147:3017 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 3 21:01:22 201.8.60.147:3024 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 3 21:01:22 201.8.60.147:3025 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 3 21:01:22 201.8.60.147:3030 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 3 21:01:22 201.8.60.147:3029 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 3 21:01:22 201.8.60.147:3033 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 3 21:01:23 201.8.60.147:3041 -> xxx.yyy.255.254:1433 SYN ******S*
77052
Dec 3 05:58:55 209.235.192.64:3896 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 3 05:58:55 209.235.192.64:3897 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 3 05:58:55 209.235.192.64:3898 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 3 05:58:55 209.235.192.64:3899 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 3 05:58:55 209.235.192.64:3900 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 3 05:58:55 209.235.192.64:3901 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 3 05:58:55 209.235.192.64:3902 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 3 05:58:55 209.235.192.64:3903 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Dec 3 06:09:48 209.235.192.64:3002 -> xxx.yyy.255.245:1433 SYN ******S*
Dec 3 06:09:48 209.235.192.64:3003 -> xxx.yyy.255.246:1433 SYN ******S*
Dec 3 06:09:48 209.235.192.64:2999 -> xxx.yyy.255.242:1433 SYN ******S*
Dec 3 06:09:48 209.235.192.64:3009 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 3 06:09:48 209.235.192.64:3010 -> xxx.yyy.255.253:1433 SYN ******S*
Dec 3 06:09:48 209.235.192.64:3007 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 3 06:09:48 209.235.192.64:3011 -> xxx.yyy.255.254:1433 SYN ******S*
Dec 3 06:09:48 209.235.192.64:3008 -> xxx.yyy.255.251:1433 SYN ******S*
72595
Dec 3 07:29:15 194.70.81.117:2190 -> xxx.yyy.1.6:4000 SYN ******S*
Dec 3 07:29:12 194.70.81.117:2191 -> xxx.yyy.1.7:4000 SYN ******S*
Dec 3 07:29:12 194.70.81.117:2194 -> xxx.yyy.1.10:4000 SYN ******S*
Dec 3 07:29:13 194.70.81.117:2195 -> xxx.yyy.1.11:4000 SYN ******S*
Dec 3 07:29:12 194.70.81.117:2196 -> xxx.yyy.1.12:4000 SYN ******S*
Dec 3 07:29:12 194.70.81.117:2197 -> xxx.yyy.1.13:4000 SYN ******S*
Dec 3 07:29:15 194.70.81.117:2199 -> xxx.yyy.1.15:4000 SYN ******S*
Dec 3 07:29:13 194.70.81.117:2200 -> xxx.yyy.1.16:4000 SYN ******S*
[...]
Dec 3 07:37:12 194.70.81.117:4614 -> xxx.yyy.255.235:4000 SYN ******S*
Dec 3 07:37:12 194.70.81.117:4618 -> xxx.yyy.255.238:4000 SYN ******S*
Dec 3 07:37:12 194.70.81.117:4654 -> xxx.yyy.255.249:4000 SYN ******S*
Dec 3 07:37:12 194.70.81.117:4659 -> xxx.yyy.255.252:4000 SYN ******S*
Dec 3 07:37:12 194.70.81.117:4651 -> xxx.yyy.255.246:4000 SYN ******S*
Dec 3 07:37:12 194.70.81.117:4648 -> xxx.yyy.255.243:4000 SYN ******S*
Dec 3 07:37:12 194.70.81.117:4629 -> xxx.yyy.255.240:4000 SYN ******S*
Dec 3 07:37:12 194.70.81.117:4615 -> xxx.yyy.255.236:4000 SYN ******S*
Dec 3 07:37:12 194.70.81.117:4660 -> xxx.yyy.255.253:4000 SYN ******S*
67744
Dec 3 07:26:43 213.24.114.73:1762 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 3 07:26:43 213.24.114.73:1763 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 3 07:26:43 213.24.114.73:1764 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 3 07:26:43 213.24.114.73:1765 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 3 07:26:40 213.24.114.73:1766 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 3 07:26:40 213.24.114.73:1767 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 3 07:26:43 213.24.114.73:1768 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 3 07:26:43 213.24.114.73:1769 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Dec 3 07:40:15 213.24.114.73:4544 -> xxx.yyy.255.225:1433 SYN ******S*
Dec 3 07:40:15 213.24.114.73:4539 -> xxx.yyy.255.220:1433 SYN ******S*
Dec 3 07:40:15 213.24.114.73:4542 -> xxx.yyy.255.223:1433 SYN ******S*
Dec 3 07:40:15 213.24.114.73:4538 -> xxx.yyy.255.219:1433 SYN ******S*
Dec 3 07:40:15 213.24.114.73:4543 -> xxx.yyy.255.224:1433 SYN ******S*
Dec 3 07:40:16 213.24.114.73:4548 -> xxx.yyy.255.229:1433 SYN ******S*
Dec 3 07:40:16 213.24.114.73:4549 -> xxx.yyy.255.230:1433 SYN ******S*
Dec 3 07:40:16 213.24.114.73:4567 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 3 07:40:16 213.24.114.73:4568 -> xxx.yyy.255.249:1433 SYN ******S*
66565
Dec 3 03:23:07 194.51.60.100:34136 -> xxx.yyy.1.0:1433 SYN ******S*
Dec 3 03:23:07 194.51.60.100:34139 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 3 03:23:07 194.51.60.100:34142 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 3 03:23:10 194.51.60.100:34145 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 3 03:23:07 194.51.60.100:34148 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 3 03:23:07 194.51.60.100:34151 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 3 03:23:07 194.51.60.100:34154 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 3 03:23:07 194.51.60.100:34157 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Dec 3 07:18:09 194.51.60.100:35129 -> xxx.yyy.255.210:1433 SYN ******S*
Dec 3 07:18:09 194.51.60.100:35474 -> xxx.yyy.255.219:1433 SYN ******S*
Dec 3 07:18:10 194.51.60.100:35298 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 3 07:18:13 194.51.60.100:35086 -> xxx.yyy.255.204:1433 SYN ******S*
Dec 3 07:18:15 194.51.60.100:35126 -> xxx.yyy.255.208:1433 SYN ******S*
Dec 3 07:18:15 194.51.60.100:35154 -> xxx.yyy.255.217:1433 SYN ******S*
Dec 3 07:18:15 194.51.60.100:35250 -> xxx.yyy.255.237:1433 SYN ******S*
Dec 3 07:18:15 194.51.60.100:35293 -> xxx.yyy.255.246:1433 SYN ******S*
56886
[...]
54165
Dec 3 00:53:21 62.128.38.186:4580 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 3 00:53:21 62.128.38.186:4598 -> xxx.yyy.10.55:1433 SYN ******S*
Dec 3 00:53:21 62.128.38.186:4600 -> xxx.yyy.11.61:1433 SYN ******S*
Dec 3 00:53:21 62.128.38.186:4603 -> xxx.yyy.12.198:1433 SYN ******S*
Dec 3 00:53:21 62.128.38.186:4604 -> xxx.yyy.13.73:1433 SYN ******S*
Dec 3 00:53:18 62.128.38.186:4607 -> xxx.yyy.14.79:1433 SYN ******S*
Dec 3 00:53:18 62.128.38.186:4608 -> xxx.yyy.14.210:1433 SYN ******S*
Dec 3 00:53:18 62.128.38.186:4609 -> xxx.yyy.15.85:1433 SYN ******S*
[...]
Dec 3 01:04:27 62.128.38.186:3226 -> xxx.yyy.133.137:1433 SYN ******S*
Dec 3 01:04:27 62.128.38.186:3236 -> xxx.yyy.137.161:1433 SYN ******S*
Dec 3 01:04:27 62.128.38.186:3233 -> xxx.yyy.137.30:1433 SYN ******S*
Dec 3 01:04:27 62.128.38.186:3240 -> xxx.yyy.140.179:1433 SYN ******S*
Dec 3 01:04:27 62.128.38.186:3235 -> xxx.yyy.138.167:1433 SYN ******S*
Dec 3 01:04:27 62.128.38.186:3245 -> xxx.yyy.143.66:1433 SYN ******S*
Dec 3 01:04:27 62.128.38.186:3242 -> xxx.yyy.141.185:1433 SYN ******S*
Dec 3 01:04:27 62.128.38.186:3241 -> xxx.yyy.141.54:1433 SYN ******S*
Dec 3 01:04:27 62.128.38.186:3243 -> xxx.yyy.142.60:1433 SYN ******S*
47898
Dec 3 06:49:47 80.179.226.125:2698 -> xxx.yyy.1.7:4899 SYN ******S*
Dec 3 06:49:47 80.179.226.125:2693 -> xxx.yyy.1.2:4899 SYN ******S*
Dec 3 06:49:47 80.179.226.125:2701 -> xxx.yyy.1.10:4899 SYN ******S*
Dec 3 06:49:47 80.179.226.125:2695 -> xxx.yyy.1.4:4899 SYN ******S*
Dec 3 06:49:47 80.179.226.125:2692 -> xxx.yyy.1.1:4899 SYN ******S*
Dec 3 06:49:47 80.179.226.125:2704 -> xxx.yyy.1.13:4899 SYN ******S*
Dec 3 06:49:47 80.179.226.125:2699 -> xxx.yyy.1.8:4899 SYN ******S*
Dec 3 06:49:47 80.179.226.125:2703 -> xxx.yyy.1.12:4899 SYN ******S*
[...]
Dec 3 07:00:48 80.179.226.125:4472 -> xxx.yyy.254.129:4899 SYN ******S*
Dec 3 07:00:48 80.179.226.125:4477 -> xxx.yyy.254.134:4899 SYN ******S*
Dec 3 07:00:48 80.179.226.125:4478 -> xxx.yyy.254.135:4899 SYN ******S*
Dec 3 07:00:48 80.179.226.125:4479 -> xxx.yyy.254.136:4899 SYN ******S*
Dec 3 07:00:48 80.179.226.125:4480 -> xxx.yyy.254.137:4899 SYN ******S*
Dec 3 07:00:48 80.179.226.125:4484 -> xxx.yyy.254.141:4899 SYN ******S*
Dec 3 07:00:48 80.179.226.125:4482 -> xxx.yyy.254.139:4899 SYN ******S*
Dec 3 07:00:48 80.179.226.125:4476 -> xxx.yyy.254.133:4899 SYN ******S*
46025
Dec 3 10:57:00 83.104.91.98:29405 -> xxx.yyy.1.5:80 SYN ******S*
Dec 3 10:57:00 83.104.91.98:29406 -> xxx.yyy.1.6:80 SYN ******S*
Dec 3 10:57:00 83.104.91.98:29422 -> xxx.yyy.1.21:80 SYN ******S*
Dec 3 10:57:00 83.104.91.98:29438 -> xxx.yyy.1.36:80 SYN ******S*
Dec 3 10:57:01 83.104.91.98:29445 -> xxx.yyy.1.42:80 SYN ******S*
Dec 3 10:57:00 83.104.91.98:29469 -> xxx.yyy.1.65:80 SYN ******S*
Dec 3 10:57:00 83.104.91.98:29470 -> xxx.yyy.1.66:80 SYN ******S*
Dec 3 10:57:00 83.104.91.98:29476 -> xxx.yyy.1.71:80 SYN ******S*
[...]
Dec 3 13:47:32 83.104.91.98:4200 -> xxx.yyy.255.218:1433 SYN ******S*
Dec 3 13:47:32 83.104.91.98:4206 -> xxx.yyy.255.224:1433 SYN ******S*
Dec 3 13:47:32 83.104.91.98:4212 -> xxx.yyy.255.230:1433 SYN ******S*
Dec 3 13:47:32 83.104.91.98:4218 -> xxx.yyy.255.236:1433 SYN ******S*
Dec 3 13:47:32 83.104.91.98:4220 -> xxx.yyy.255.238:1433 SYN ******S*
Dec 3 13:47:32 83.104.91.98:4221 -> xxx.yyy.255.239:1433 SYN ******S*
Dec 3 13:47:32 83.104.91.98:4226 -> xxx.yyy.255.244:1433 SYN ******S*
Dec 3 13:47:32 83.104.91.98:4229 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 3 13:47:32 83.104.91.98:4235 -> xxx.yyy.255.253:1433 SYN ******S*
44128
Dec 3 19:02:25 147.26.112.73:1054 -> xxx.yyy.1.1:4899 SYN ******S*
Dec 3 19:02:27 147.26.112.73:1058 -> xxx.yyy.1.5:4899 SYN ******S*
Dec 3 19:02:27 147.26.112.73:1059 -> xxx.yyy.1.6:4899 SYN ******S*
Dec 3 19:02:27 147.26.112.73:1060 -> xxx.yyy.1.7:4899 SYN ******S*
Dec 3 19:02:27 147.26.112.73:1065 -> xxx.yyy.1.12:4899 SYN ******S*
Dec 3 19:02:27 147.26.112.73:1066 -> xxx.yyy.1.13:4899 SYN ******S*
Dec 3 19:02:24 147.26.112.73:1067 -> xxx.yyy.1.14:4899 SYN ******S*
Dec 3 19:02:27 147.26.112.73:1068 -> xxx.yyy.1.15:4899 SYN ******S*
[...]
Dec 3 19:05:09 147.26.112.73:1419 -> xxx.yyy.255.168:4899 SYN ******S*
Dec 3 19:05:09 147.26.112.73:1444 -> xxx.yyy.255.192:4899 SYN ******S*
Dec 3 19:05:09 147.26.112.73:1436 -> xxx.yyy.255.184:4899 SYN ******S*
Dec 3 19:05:09 147.26.112.73:1416 -> xxx.yyy.255.165:4899 SYN ******S*
Dec 3 19:05:09 147.26.112.73:1432 -> xxx.yyy.255.181:4899 SYN ******S*
Dec 3 19:05:09 147.26.112.73:1421 -> xxx.yyy.255.170:4899 SYN ******S*
Dec 3 19:05:09 147.26.112.73:1441 -> xxx.yyy.255.189:4899 SYN ******S*
Dec 3 19:05:09 147.26.112.73:1424 -> xxx.yyy.255.173:4899 SYN ******S*
Dec 3 19:05:09 147.26.112.73:1429 -> xxx.yyy.255.178:4899 SYN ******S*
36619
Dec 3 21:51:06 222.41.199.201:2506 -> xxx.yyy.1.0:1433 SYN ******S*
Dec 3 21:51:06 222.41.199.201:3018 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 3 21:51:06 222.41.199.201:2763 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 3 21:51:06 222.41.199.201:3273 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 3 21:51:06 222.41.199.201:3530 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 3 21:51:03 222.41.199.201:3785 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 3 21:51:06 222.41.199.201:4040 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 3 21:51:06 222.41.199.201:4550 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Dec 3 23:59:59 222.41.199.201:31972 -> xxx.yyy.143.117:1433 SYN ******S*
Dec 3 23:59:59 222.41.199.201:32225 -> xxx.yyy.143.118:1433 SYN ******S*
Dec 3 23:59:59 222.41.199.201:21090 -> xxx.yyy.143.74:1433 SYN ******S*
Dec 3 23:59:59 222.41.199.201:32478 -> xxx.yyy.143.119:1433 SYN ******S*
Dec 4 00:00:00 222.41.199.201:22375 -> xxx.yyy.143.79:1433 SYN ******S*
Dec 4 00:00:00 222.41.199.201:32987 -> xxx.yyy.143.121:1433 SYN ******S*
Dec 4 00:00:00 222.41.199.201:22885 -> xxx.yyy.143.81:1433 SYN ******S*
Dec 4 00:00:00 222.41.199.201:22632 -> xxx.yyy.143.80:1433 SYN ******S*
Dec 4 00:00:00 222.41.199.201:33502 -> xxx.yyy.143.123:1433 SYN ******S*
32113
Dec 3 00:00:05 128.180.246.172:3005 -> xxx.yyy.156.42:1433 SYN ******S*
Dec 3 00:00:06 128.180.246.172:4454 -> xxx.yyy.156.90:1433 SYN ******S*
Dec 3 00:00:06 128.180.246.172:4505 -> xxx.yyy.156.91:1433 SYN ******S*
Dec 3 00:00:06 128.180.246.172:3971 -> xxx.yyy.156.79:1433 SYN ******S*
Dec 3 00:00:06 128.180.246.172:3989 -> xxx.yyy.156.80:1433 SYN ******S*
Dec 3 00:00:06 128.180.246.172:4645 -> xxx.yyy.156.94:1433 SYN ******S*
Dec 3 00:00:06 128.180.246.172:4655 -> xxx.yyy.156.95:1433 SYN ******S*
Dec 3 00:00:07 128.180.246.172:3213 -> xxx.yyy.156.49:1433 SYN ******S*
[...]
Dec 3 01:14:36 128.180.246.172:2755 -> xxx.yyy.233.140:1433 SYN ******S*
Dec 3 01:14:37 128.180.246.172:2798 -> xxx.yyy.233.142:1433 SYN ******S*
Dec 3 01:14:37 128.180.246.172:2810 -> xxx.yyy.233.143:1433 SYN ******S*
Dec 3 01:14:37 128.180.246.172:2816 -> xxx.yyy.233.145:1433 SYN ******S*
Dec 3 01:14:37 128.180.246.172:2813 -> xxx.yyy.233.144:1433 SYN ******S*
Dec 3 01:14:37 128.180.246.172:2819 -> xxx.yyy.233.147:1433 SYN ******S*
Dec 3 01:14:37 128.180.246.172:2821 -> xxx.yyy.233.146:1433 SYN ******S*
Dec 3 01:14:37 128.180.246.172:2835 -> xxx.yyy.233.148:1433 SYN ******S*
Dec 3 01:14:37 128.180.246.172:3374 -> xxx.yyy.233.166:1433 SYN ******S*
31192
Dec 3 11:24:31 66.232.140.124:3831 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 3 11:24:31 66.232.140.124:3837 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 3 11:24:31 66.232.140.124:3838 -> xxx.yyy.1.8:1433 SYN ******S*
Dec 3 11:24:31 66.232.140.124:3839 -> xxx.yyy.1.9:1433 SYN ******S*
Dec 3 11:24:31 66.232.140.124:3843 -> xxx.yyy.1.13:1433 SYN ******S*
Dec 3 11:24:31 66.232.140.124:3848 -> xxx.yyy.1.18:1433 SYN ******S*
Dec 3 11:24:31 66.232.140.124:3849 -> xxx.yyy.1.19:1433 SYN ******S*
Dec 3 11:24:34 66.232.140.124:3850 -> xxx.yyy.1.20:1433 SYN ******S*
[...]
Dec 3 11:36:36 66.232.140.124:2372 -> xxx.yyy.255.221:1433 SYN ******S*
Dec 3 11:36:36 66.232.140.124:2373 -> xxx.yyy.255.222:1433 SYN ******S*
Dec 3 11:36:36 66.232.140.124:2384 -> xxx.yyy.255.233:1433 SYN ******S*
Dec 3 11:36:36 66.232.140.124:2383 -> xxx.yyy.255.232:1433 SYN ******S*
Dec 3 11:36:36 66.232.140.124:2381 -> xxx.yyy.255.230:1433 SYN ******S*
Dec 3 11:36:36 66.232.140.124:2382 -> xxx.yyy.255.231:1433 SYN ******S*
Dec 3 11:36:36 66.232.140.124:2394 -> xxx.yyy.255.243:1433 SYN ******S*
Dec 3 11:36:36 66.232.140.124:2395 -> xxx.yyy.255.244:1433 SYN ******S*
30476
Dec 3 01:56:57 219.150.175.2:2513 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 3 01:57:00 219.150.175.2:2517 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 3 01:57:00 219.150.175.2:2512 -> xxx.yyy.1.0:1433 SYN ******S*
Dec 3 01:56:57 219.150.175.2:2519 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 3 01:57:00 219.150.175.2:2521 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 3 01:57:00 219.150.175.2:2523 -> xxx.yyy.1.9:1433 SYN ******S*
Dec 3 01:57:00 219.150.175.2:2529 -> xxx.yyy.1.11:1433 SYN ******S*
Dec 3 01:56:57 219.150.175.2:2520 -> xxx.yyy.1.6:1433 SYN ******S*
[...]
Dec 3 03:21:25 219.150.175.2:4763 -> xxx.yyy.95.39:1433 SYN ******S*
Dec 3 03:21:25 219.150.175.2:4469 -> xxx.yyy.95.24:1433 SYN ******S*
Dec 3 03:21:25 219.150.175.2:4480 -> xxx.yyy.95.25:1433 SYN ******S*
Dec 3 03:21:25 219.150.175.2:4483 -> xxx.yyy.95.26:1433 SYN ******S*
Dec 3 03:21:26 219.150.175.2:4576 -> xxx.yyy.95.28:1433 SYN ******S*
Dec 3 03:21:26 219.150.175.2:4575 -> xxx.yyy.95.27:1433 SYN ******S*
Dec 3 03:21:26 219.150.175.2:4577 -> xxx.yyy.95.29:1433 SYN ******S*
Dec 3 03:21:26 219.150.175.2:4780 -> xxx.yyy.95.40:1433 SYN ******S*
Dec 3 03:21:26 219.150.175.2:4781 -> xxx.yyy.95.41:1433 SYN ******S*
27230
Dec 3 09:24:02 64.22.200.28:51461 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 3 09:24:05 64.22.200.28:51462 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 3 09:24:02 64.22.200.28:51463 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 3 09:24:05 64.22.200.28:51464 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 3 09:24:02 64.22.200.28:51465 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 3 09:24:02 64.22.200.28:51466 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 3 09:24:02 64.22.200.28:51467 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 3 09:24:05 64.22.200.28:51468 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Dec 3 09:38:52 64.22.200.28:54961 -> xxx.yyy.255.223:1433 SYN ******S*
Dec 3 09:38:52 64.22.200.28:54962 -> xxx.yyy.255.224:1433 SYN ******S*
Dec 3 09:38:52 64.22.200.28:54973 -> xxx.yyy.255.227:1433 SYN ******S*
Dec 3 09:38:52 64.22.200.28:54974 -> xxx.yyy.255.228:1433 SYN ******S*
Dec 3 09:38:52 64.22.200.28:54977 -> xxx.yyy.255.231:1433 SYN ******S*
Dec 3 09:38:52 64.22.200.28:54978 -> xxx.yyy.255.232:1433 SYN ******S*
Dec 3 09:38:52 64.22.200.28:54980 -> xxx.yyy.255.234:1433 SYN ******S*
Dec 3 09:38:52 64.22.200.28:54988 -> xxx.yyy.255.237:1433 SYN ******S*
Dec 3 09:38:52 64.22.200.28:54994 -> xxx.yyy.255.243:1433 SYN ******S*
26480
[...]
25858
Dec 3 20:36:11 61.145.238.198:4974 -> xxx.yyy.1.0:1433 SYN ******S*
Dec 3 20:36:11 61.145.238.198:4995 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 3 20:36:08 61.145.238.198:4997 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 3 20:36:08 61.145.238.198:1029 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 3 20:36:08 61.145.238.198:1045 -> xxx.yyy.1.11:1433 SYN ******S*
Dec 3 20:36:11 61.145.238.198:1049 -> xxx.yyy.1.12:1433 SYN ******S*
Dec 3 20:36:09 61.145.238.198:1051 -> xxx.yyy.1.13:1433 SYN ******S*
Dec 3 20:36:09 61.145.238.198:1038 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
Dec 3 22:18:39 61.145.238.198:2145 -> xxx.yyy.111.248:1433 SYN ******S*
Dec 3 22:18:39 61.145.238.198:2146 -> xxx.yyy.111.249:1433 SYN ******S*
Dec 3 22:18:39 61.145.238.198:2150 -> xxx.yyy.111.250:1433 SYN ******S*
Dec 3 22:18:39 61.145.238.198:2156 -> xxx.yyy.111.251:1433 SYN ******S*
Dec 3 22:18:39 61.145.238.198:2161 -> xxx.yyy.111.252:1433 SYN ******S*
Dec 3 22:18:40 61.145.238.198:2162 -> xxx.yyy.111.253:1433 SYN ******S*
Dec 3 22:18:40 61.145.238.198:2164 -> xxx.yyy.111.254:1433 SYN ******S*
Dec 3 22:18:40 61.145.238.198:2167 -> xxx.yyy.111.255:1433 SYN ******S*
25302
Dec 3 15:24:36 213.180.210.35:58429 -> xxx.yyy.1.95:24672 SYN ******S*
Dec 3 15:24:36 213.180.210.35:58429 -> xxx.yyy.1.95:7965 SYN ******S*
Dec 3 15:24:36 213.180.210.35:58429 -> xxx.yyy.1.95:49040 SYN ******S*
Dec 3 15:24:36 213.180.210.35:58429 -> xxx.yyy.1.95:53717 SYN ******S*
Dec 3 15:24:36 213.180.210.35:58429 -> xxx.yyy.1.95:46797 SYN ******S*
Dec 3 15:24:36 213.180.210.35:58429 -> xxx.yyy.1.95:39035 SYN ******S*
Dec 3 15:24:36 213.180.210.35:58429 -> xxx.yyy.1.95:24635 SYN ******S*
Dec 3 15:24:36 213.180.210.35:58429 -> xxx.yyy.1.95:48772 SYN ******S*
[...]
Dec 3 15:31:48 213.180.210.35:58432 -> xxx.yyy.1.95:20432 SYN ******S*
Dec 3 15:31:49 213.180.210.35:58434 -> xxx.yyy.1.95:6018 SYN ******S*
Dec 3 15:31:49 213.180.210.35:58434 -> xxx.yyy.1.95:1243 SYN ******S*
Dec 3 15:31:49 213.180.210.35:58434 -> xxx.yyy.1.95:13782 SYN ******S*
Dec 3 15:31:49 213.180.210.35:58434 -> xxx.yyy.1.95:6057 SYN ******S*
Dec 3 15:31:49 213.180.210.35:58434 -> xxx.yyy.1.95:6004 SYN ******S*
Dec 3 15:31:49 213.180.210.35:58434 -> xxx.yyy.1.95:139 SYN ******S*
Dec 3 15:31:49 213.180.210.35:58434 -> xxx.yyy.1.95:6030 SYN ******S*
Dec 3 15:31:49 213.180.210.35:58434 -> xxx.yyy.1.95:53 SYN ******S*
24883
Dec 3 21:52:51 218.18.35.95:30176 -> xxx.yyy.1.0:1433 SYN ******S*
Dec 3 21:52:51 218.18.35.95:31968 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 3 21:52:49 218.18.35.95:33248 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 3 21:52:51 218.18.35.95:35040 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 3 21:52:49 218.18.35.95:31200 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 3 21:52:49 218.18.35.95:32736 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 3 21:52:52 218.18.35.95:34272 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 3 21:52:49 218.18.35.95:39904 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Dec 3 23:32:31 218.18.35.95:63219 -> xxx.yyy.111.243:1433 SYN ******S*
Dec 3 23:32:31 218.18.35.95:63475 -> xxx.yyy.111.244:1433 SYN ******S*
Dec 3 23:32:32 218.18.35.95:65267 -> xxx.yyy.111.246:1433 SYN ******S*
Dec 3 23:32:32 218.18.35.95:1780 -> xxx.yyy.111.247:1433 SYN ******S*
Dec 3 23:32:32 218.18.35.95:3828 -> xxx.yyy.111.249:1433 SYN ******S*
Dec 3 23:32:32 218.18.35.95:7924 -> xxx.yyy.111.253:1433 SYN ******S*
Dec 3 23:32:32 218.18.35.95:6900 -> xxx.yyy.111.251:1433 SYN ******S*
Dec 3 23:32:32 218.18.35.95:6388 -> xxx.yyy.111.250:1433 SYN ******S*
Dec 3 23:32:32 218.18.35.95:12276 -> xxx.yyy.111.255:1433 SYN ******S*
22739
Dec 3 05:54:25 61.53.55.157:2368 -> xxx.yyy.1.0:1433 SYN ******S*
Dec 3 05:54:22 61.53.55.157:2369 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 3 05:54:22 61.53.55.157:2372 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 3 05:54:22 61.53.55.157:2380 -> xxx.yyy.1.12:1433 SYN ******S*
Dec 3 05:54:22 61.53.55.157:2379 -> xxx.yyy.1.11:1433 SYN ******S*
Dec 3 05:54:22 61.53.55.157:2377 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 3 05:54:22 61.53.55.157:2383 -> xxx.yyy.1.9:1433 SYN ******S*
Dec 3 05:54:22 61.53.55.157:2387 -> xxx.yyy.1.14:1433 SYN ******S*
[...]
Dec 3 07:17:26 61.53.55.157:2431 -> xxx.yyy.90.112:1433 SYN ******S*
Dec 3 07:17:26 61.53.55.157:3305 -> xxx.yyy.90.140:1433 SYN ******S*
Dec 3 07:17:26 61.53.55.157:3349 -> xxx.yyy.90.146:1433 SYN ******S*
Dec 3 07:17:26 61.53.55.157:2670 -> xxx.yyy.90.123:1433 SYN ******S*
Dec 3 07:17:26 61.53.55.157:2672 -> xxx.yyy.90.124:1433 SYN ******S*
Dec 3 07:17:28 61.53.55.157:3534 -> xxx.yyy.90.147:1433 SYN ******S*
Dec 3 07:17:28 61.53.55.157:3571 -> xxx.yyy.90.157:1433 SYN ******S*
Dec 3 07:17:28 61.53.55.157:3611 -> xxx.yyy.90.164:1433 SYN ******S*
Dec 3 07:17:28 61.53.55.157:3617 -> xxx.yyy.90.165:1433 SYN ******S*
15421
[...]
13144
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list