[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Sat Dec 11 17:08:38 GMT 2004
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Dec 10 04:19:45 222.249.44.106:4004 -> xxx.yyy.1.0:1433 SYN ******S*
Dec 10 04:19:42 222.249.44.106:4006 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 10 04:19:42 222.249.44.106:4008 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 10 04:19:42 222.249.44.106:4010 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 10 04:19:42 222.249.44.106:4014 -> xxx.yyy.1.8:1433 SYN ******S*
Dec 10 04:19:42 222.249.44.106:4015 -> xxx.yyy.1.9:1433 SYN ******S*
Dec 10 04:19:42 222.249.44.106:4018 -> xxx.yyy.1.12:1433 SYN ******S*
Dec 10 04:19:43 222.249.44.106:4021 -> xxx.yyy.1.15:1433 SYN ******S*
[...]
Dec 10 08:29:56 222.249.44.106:1717 -> xxx.yyy.255.245:1433 SYN ******S*
Dec 10 08:29:56 222.249.44.106:1719 -> xxx.yyy.255.246:1433 SYN ******S*
Dec 10 08:29:57 222.249.44.106:1720 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 10 08:29:57 222.249.44.106:1726 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 10 08:29:58 222.249.44.106:1734 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 10 08:29:58 222.249.44.106:1736 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 10 08:29:58 222.249.44.106:1739 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 10 08:29:58 222.249.44.106:1742 -> xxx.yyy.255.252:1433 SYN ******S*
114982
Dec 10 05:51:15 219.159.35.98:2639 -> xxx.yyy.1.0:1433 SYN ******S*
Dec 10 05:51:15 219.159.35.98:2642 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 10 05:51:16 219.159.35.98:2650 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 10 05:51:16 219.159.35.98:2657 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 10 05:51:16 219.159.35.98:2664 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 10 05:51:16 219.159.35.98:2668 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 10 05:51:14 219.159.35.98:2674 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 10 05:51:14 219.159.35.98:2682 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Dec 10 09:40:14 219.159.35.98:2227 -> xxx.yyy.255.238:1433 SYN ******S*
Dec 10 09:40:14 219.159.35.98:2241 -> xxx.yyy.255.241:1433 SYN ******S*
Dec 10 09:40:14 219.159.35.98:2239 -> xxx.yyy.255.240:1433 SYN ******S*
Dec 10 09:40:15 219.159.35.98:2252 -> xxx.yyy.255.243:1433 SYN ******S*
Dec 10 09:40:15 219.159.35.98:2259 -> xxx.yyy.255.245:1433 SYN ******S*
Dec 10 09:40:15 219.159.35.98:2267 -> xxx.yyy.255.246:1433 SYN ******S*
Dec 10 09:40:16 219.159.35.98:2278 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 10 09:40:16 219.159.35.98:2282 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 10 09:40:17 219.159.35.98:2310 -> xxx.yyy.255.251:1433 SYN ******S*
100902
Dec 10 20:01:40 213.119.2.220:1122 -> xxx.yyy.1.0:1433 SYN ******S*
Dec 10 20:01:40 213.119.2.220:1124 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 10 20:01:40 213.119.2.220:1125 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 10 20:01:40 213.119.2.220:1126 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 10 20:01:40 213.119.2.220:1128 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 10 20:01:37 213.119.2.220:1130 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 10 20:01:37 213.119.2.220:1132 -> xxx.yyy.1.8:1433 SYN ******S*
Dec 10 20:01:37 213.119.2.220:1133 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
Dec 10 23:51:59 213.119.2.220:4282 -> xxx.yyy.255.243:1433 SYN ******S*
Dec 10 23:52:01 213.119.2.220:4306 -> xxx.yyy.255.246:1433 SYN ******S*
Dec 10 23:52:01 213.119.2.220:4312 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 10 23:52:02 213.119.2.220:4331 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 10 23:52:02 213.119.2.220:4330 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 10 23:52:02 213.119.2.220:4342 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 10 23:52:02 213.119.2.220:4344 -> xxx.yyy.255.253:1433 SYN ******S*
Dec 10 23:52:02 213.119.2.220:4343 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 10 23:52:03 213.119.2.220:4371 -> xxx.yyy.255.254:1433 SYN ******S*
75029
Dec 10 14:49:18 64.17.230.180:10305 -> xxx.yyy.1.0:1433 SYN ******S*
Dec 10 14:49:18 64.17.230.180:10309 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 10 14:49:15 64.17.230.180:10311 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 10 14:49:15 64.17.230.180:10315 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 10 14:49:18 64.17.230.180:10316 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 10 14:49:18 64.17.230.180:10325 -> xxx.yyy.1.13:1433 SYN ******S*
Dec 10 14:49:18 64.17.230.180:10327 -> xxx.yyy.1.14:1433 SYN ******S*
Dec 10 14:49:18 64.17.230.180:10331 -> xxx.yyy.1.16:1433 SYN ******S*
[...]
Dec 10 18:38:02 64.17.230.180:39925 -> xxx.yyy.78.65:13745 SYN ******S*
Dec 10 18:38:02 64.17.230.180:39953 -> xxx.yyy.255.238:1433 SYN ******S*
Dec 10 18:38:02 64.17.230.180:39961 -> xxx.yyy.255.239:1433 SYN ******S*
Dec 10 18:38:03 64.17.230.180:39999 -> xxx.yyy.255.241:1433 SYN ******S*
Dec 10 18:38:03 64.17.230.180:40032 -> xxx.yyy.255.246:1433 SYN ******S*
Dec 10 18:38:03 64.17.230.180:40049 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 10 18:38:04 64.17.230.180:40120 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 10 18:38:04 64.17.230.180:40354 -> xxx.yyy.255.254:1433 SYN ******S*
74990
Dec 10 08:51:19 200.161.150.237:3721 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 10 08:51:19 200.161.150.237:3749 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 10 08:51:16 200.161.150.237:3754 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 10 08:51:16 200.161.150.237:3763 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 10 08:51:16 200.161.150.237:3770 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 10 08:51:19 200.161.150.237:3816 -> xxx.yyy.1.8:1433 SYN ******S*
Dec 10 08:51:19 200.161.150.237:3821 -> xxx.yyy.1.10:1433 SYN ******S*
Dec 10 08:51:19 200.161.150.237:3822 -> xxx.yyy.1.11:1433 SYN ******S*
[...]
Dec 10 10:45:43 200.161.150.237:3052 -> xxx.yyy.255.231:1433 SYN ******S*
Dec 10 10:45:43 200.161.150.237:3056 -> xxx.yyy.255.235:1433 SYN ******S*
Dec 10 10:45:43 200.161.150.237:3077 -> xxx.yyy.255.240:1433 SYN ******S*
Dec 10 10:45:44 200.161.150.237:3093 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 10 10:45:44 200.161.150.237:3091 -> xxx.yyy.255.245:1433 SYN ******S*
Dec 10 10:45:44 200.161.150.237:3084 -> xxx.yyy.255.242:1433 SYN ******S*
Dec 10 10:45:44 200.161.150.237:3107 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 10 10:45:44 200.161.150.237:3109 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 10 10:45:44 200.161.150.237:3118 -> xxx.yyy.255.254:1433 SYN ******S*
72039
Dec 10 15:22:05 213.60.236.124:1230 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 10 15:22:05 213.60.236.124:1231 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 10 15:22:05 213.60.236.124:1232 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 10 15:22:05 213.60.236.124:1227 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 10 15:22:05 213.60.236.124:1233 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 10 15:22:03 213.60.236.124:1238 -> xxx.yyy.1.12:1433 SYN ******S*
Dec 10 15:22:03 213.60.236.124:1243 -> xxx.yyy.1.17:1433 SYN ******S*
Dec 10 15:22:03 213.60.236.124:1242 -> xxx.yyy.1.16:1433 SYN ******S*
[...]
Dec 10 17:16:23 213.60.236.124:2225 -> xxx.yyy.255.235:1433 SYN ******S*
Dec 10 17:16:23 213.60.236.124:2231 -> xxx.yyy.255.239:1433 SYN ******S*
Dec 10 17:16:23 213.60.236.124:2235 -> xxx.yyy.255.241:1433 SYN ******S*
Dec 10 17:16:23 213.60.236.124:2239 -> xxx.yyy.255.242:1433 SYN ******S*
Dec 10 17:16:23 213.60.236.124:2241 -> xxx.yyy.255.243:1433 SYN ******S*
Dec 10 17:16:24 213.60.236.124:2252 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 10 17:16:24 213.60.236.124:2245 -> xxx.yyy.255.246:1433 SYN ******S*
Dec 10 17:16:24 213.60.236.124:2258 -> xxx.yyy.255.253:1433 SYN ******S*
63035
[...]
60561
Dec 10 18:04:49 66.37.71.92:32272 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 10 18:04:46 66.37.71.92:32273 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 10 18:04:46 66.37.71.92:32275 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 10 18:04:49 66.37.71.92:32276 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 10 18:04:46 66.37.71.92:32278 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 10 18:04:49 66.37.71.92:32279 -> xxx.yyy.1.8:1433 SYN ******S*
Dec 10 18:04:49 66.37.71.92:32281 -> xxx.yyy.1.10:1433 SYN ******S*
Dec 10 18:04:49 66.37.71.92:32283 -> xxx.yyy.1.12:1433 SYN ******S*
[...]
Dec 10 18:16:28 66.37.71.92:33074 -> xxx.yyy.255.236:1433 SYN ******S*
Dec 10 18:16:28 66.37.71.92:33078 -> xxx.yyy.255.240:1433 SYN ******S*
Dec 10 18:16:28 66.37.71.92:33075 -> xxx.yyy.255.237:1433 SYN ******S*
Dec 10 18:16:28 66.37.71.92:33072 -> xxx.yyy.255.234:1433 SYN ******S*
Dec 10 18:16:28 66.37.71.92:33084 -> xxx.yyy.255.246:1433 SYN ******S*
Dec 10 18:16:28 66.37.71.92:33081 -> xxx.yyy.255.243:1433 SYN ******S*
Dec 10 18:16:28 66.37.71.92:33086 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 10 18:16:28 66.37.71.92:33090 -> xxx.yyy.255.252:1433 SYN ******S*
47295
Dec 10 20:27:16 202.71.136.211:2631 -> xxx.yyy.1.1:65001 SYN ******S*
Dec 10 20:27:16 202.71.136.211:2633 -> xxx.yyy.1.3:65001 SYN ******S*
Dec 10 20:27:17 202.71.136.211:2634 -> xxx.yyy.1.4:65001 SYN ******S*
Dec 10 20:27:14 202.71.136.211:2635 -> xxx.yyy.1.5:65001 SYN ******S*
Dec 10 20:27:14 202.71.136.211:2637 -> xxx.yyy.1.7:65001 SYN ******S*
Dec 10 20:27:16 202.71.136.211:2641 -> xxx.yyy.1.11:65001 SYN ******S*
Dec 10 20:27:17 202.71.136.211:2640 -> xxx.yyy.1.10:65001 SYN ******S*
Dec 10 20:27:14 202.71.136.211:2643 -> xxx.yyy.1.13:65001 SYN ******S*
[...]
Dec 10 20:39:21 202.71.136.211:4578 -> xxx.yyy.255.245:65001 SYN ******S*
Dec 10 20:39:21 202.71.136.211:4576 -> xxx.yyy.255.243:65001 SYN ******S*
Dec 10 20:39:21 202.71.136.211:4573 -> xxx.yyy.255.240:65001 SYN ******S*
Dec 10 20:39:21 202.71.136.211:4583 -> xxx.yyy.255.250:65001 SYN ******S*
Dec 10 20:39:21 202.71.136.211:4584 -> xxx.yyy.255.251:65001 SYN ******S*
Dec 10 20:39:21 202.71.136.211:4582 -> xxx.yyy.255.249:65001 SYN ******S*
Dec 10 20:39:21 202.71.136.211:4585 -> xxx.yyy.255.252:65001 SYN ******S*
Dec 10 20:39:21 202.71.136.211:4586 -> xxx.yyy.255.253:65001 SYN ******S*
Dec 10 20:39:21 202.71.136.211:4587 -> xxx.yyy.255.254:65001 SYN ******S*
46715
Dec 10 00:00:02 24.65.34.5:4015 -> xxx.yyy.141.246:1433 SYN ******S*
Dec 10 00:00:05 24.65.34.5:3828 -> xxx.yyy.141.129:1433 SYN ******S*
Dec 10 00:00:05 24.65.34.5:3829 -> xxx.yyy.141.130:1433 SYN ******S*
Dec 10 00:00:05 24.65.34.5:3830 -> xxx.yyy.141.131:1433 SYN ******S*
Dec 10 00:00:05 24.65.34.5:3834 -> xxx.yyy.141.135:1433 SYN ******S*
Dec 10 00:00:05 24.65.34.5:3831 -> xxx.yyy.141.132:1433 SYN ******S*
Dec 10 00:00:05 24.65.34.5:3832 -> xxx.yyy.141.133:1433 SYN ******S*
Dec 10 00:00:05 24.65.34.5:3833 -> xxx.yyy.141.134:1433 SYN ******S*
[...]
Dec 10 00:53:15 24.65.34.5:1732 -> xxx.yyy.255.245:1433 SYN ******S*
Dec 10 00:53:15 24.65.34.5:1734 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 10 00:53:15 24.65.34.5:1735 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 10 00:53:16 24.65.34.5:1737 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 10 00:53:16 24.65.34.5:1738 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 10 00:53:16 24.65.34.5:1739 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 10 00:53:16 24.65.34.5:1740 -> xxx.yyy.255.253:1433 SYN ******S*
Dec 10 00:53:16 24.65.34.5:1741 -> xxx.yyy.255.254:1433 SYN ******S*
45772
Dec 10 08:27:24 169.226.39.218:1439 -> xxx.yyy.1.1:8000 SYN ******S*
Dec 10 08:27:24 169.226.39.218:1440 -> xxx.yyy.1.2:8000 SYN ******S*
Dec 10 08:27:25 169.226.39.218:1441 -> xxx.yyy.1.3:8000 SYN ******S*
Dec 10 08:27:27 169.226.39.218:1442 -> xxx.yyy.1.4:8000 SYN ******S*
Dec 10 08:27:27 169.226.39.218:1443 -> xxx.yyy.1.5:8000 SYN ******S*
Dec 10 08:27:24 169.226.39.218:1444 -> xxx.yyy.1.6:8000 SYN ******S*
Dec 10 08:27:27 169.226.39.218:1445 -> xxx.yyy.1.7:8000 SYN ******S*
Dec 10 08:27:24 169.226.39.218:1449 -> xxx.yyy.1.11:8000 SYN ******S*
[...]
Dec 10 08:36:24 169.226.39.218:1388 -> xxx.yyy.255.252:8000 SYN ******S*
Dec 10 08:36:24 169.226.39.218:1379 -> xxx.yyy.255.243:8000 SYN ******S*
Dec 10 08:36:24 169.226.39.218:1389 -> xxx.yyy.255.253:8000 SYN ******S*
Dec 10 08:36:24 169.226.39.218:1383 -> xxx.yyy.255.247:8000 SYN ******S*
Dec 10 08:36:24 169.226.39.218:1380 -> xxx.yyy.255.244:8000 SYN ******S*
Dec 10 08:36:24 169.226.39.218:1377 -> xxx.yyy.255.241:8000 SYN ******S*
Dec 10 08:36:24 169.226.39.218:1390 -> xxx.yyy.255.254:8000 SYN ******S*
Dec 10 08:36:24 169.226.39.218:1384 -> xxx.yyy.255.248:8000 SYN ******S*
45031
Dec 10 14:08:50 64.38.246.221:2984 -> xxx.yyy.1.14:80 SYN ******S*
Dec 10 14:08:47 64.38.246.221:2847 -> xxx.yyy.1.32:80 SYN ******S*
Dec 10 14:08:47 64.38.246.221:2914 -> xxx.yyy.1.36:80 SYN ******S*
Dec 10 14:08:47 64.38.246.221:2915 -> xxx.yyy.1.37:80 SYN ******S*
Dec 10 14:08:47 64.38.246.221:2910 -> xxx.yyy.1.27:80 SYN ******S*
Dec 10 14:08:47 64.38.246.221:2858 -> xxx.yyy.1.43:80 SYN ******S*
Dec 10 14:08:47 64.38.246.221:2856 -> xxx.yyy.1.41:80 SYN ******S*
Dec 10 14:08:47 64.38.246.221:2857 -> xxx.yyy.1.42:80 SYN ******S*
[...]
Dec 10 15:11:58 64.38.246.221:4861 -> xxx.yyy.255.217:80 SYN ******S*
Dec 10 15:11:58 64.38.246.221:4867 -> xxx.yyy.255.223:80 SYN ******S*
Dec 10 15:11:58 64.38.246.221:4846 -> xxx.yyy.255.202:80 SYN ******S*
Dec 10 15:11:59 64.38.246.221:4898 -> xxx.yyy.255.253:80 SYN ******S*
Dec 10 15:12:00 64.38.246.221:4871 -> xxx.yyy.255.227:80 SYN ******S*
Dec 10 15:12:00 64.38.246.221:4869 -> xxx.yyy.255.225:80 SYN ******S*
Dec 10 15:12:00 64.38.246.221:4875 -> xxx.yyy.255.231:80 SYN ******S*
Dec 10 15:12:00 64.38.246.221:4874 -> xxx.yyy.255.230:80 SYN ******S*
Dec 10 15:12:00 64.38.246.221:4900 -> xxx.yyy.255.255:80 SYN ******S*
43003
Dec 10 21:17:05 62.80.67.101:3701 -> xxx.yyy.1.1:6129 SYN ******S*
Dec 10 21:17:05 62.80.67.101:3702 -> xxx.yyy.1.2:6129 SYN ******S*
Dec 10 21:17:05 62.80.67.101:3703 -> xxx.yyy.1.3:6129 SYN ******S*
Dec 10 21:17:07 62.80.67.101:3704 -> xxx.yyy.1.4:6129 SYN ******S*
Dec 10 21:17:07 62.80.67.101:3706 -> xxx.yyy.1.6:6129 SYN ******S*
Dec 10 21:17:07 62.80.67.101:3707 -> xxx.yyy.1.7:6129 SYN ******S*
Dec 10 21:17:07 62.80.67.101:3708 -> xxx.yyy.1.8:6129 SYN ******S*
Dec 10 21:17:05 62.80.67.101:3714 -> xxx.yyy.1.14:6129 SYN ******S*
[...]
Dec 10 21:31:34 62.80.67.101:1452 -> xxx.yyy.255.251:6129 SYN ******S*
Dec 10 21:31:34 62.80.67.101:1453 -> xxx.yyy.255.252:6129 SYN ******S*
Dec 10 21:31:34 62.80.67.101:1450 -> xxx.yyy.255.249:6129 SYN ******S*
Dec 10 21:31:34 62.80.67.101:1449 -> xxx.yyy.255.248:6129 SYN ******S*
Dec 10 21:31:34 62.80.67.101:1454 -> xxx.yyy.255.253:6129 SYN ******S*
Dec 10 21:31:34 62.80.67.101:1447 -> xxx.yyy.255.246:6129 SYN ******S*
Dec 10 21:31:34 62.80.67.101:1451 -> xxx.yyy.255.250:6129 SYN ******S*
Dec 10 21:31:34 62.80.67.101:1448 -> xxx.yyy.255.247:6129 SYN ******S*
42383
Dec 10 22:12:44 24.232.244.5:1646 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 10 22:12:47 24.232.244.5:1648 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 10 22:12:47 24.232.244.5:1650 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 10 22:12:47 24.232.244.5:1652 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 10 22:12:47 24.232.244.5:1653 -> xxx.yyy.1.8:1433 SYN ******S*
Dec 10 22:12:47 24.232.244.5:1654 -> xxx.yyy.1.9:1433 SYN ******S*
Dec 10 22:12:47 24.232.244.5:1655 -> xxx.yyy.1.10:1433 SYN ******S*
Dec 10 22:12:47 24.232.244.5:1658 -> xxx.yyy.1.13:1433 SYN ******S*
[...]
Dec 10 22:23:43 24.232.244.5:4822 -> xxx.yyy.255.224:1433 SYN ******S*
Dec 10 22:23:43 24.232.244.5:4827 -> xxx.yyy.255.229:1433 SYN ******S*
Dec 10 22:23:43 24.232.244.5:4837 -> xxx.yyy.255.239:1433 SYN ******S*
Dec 10 22:23:43 24.232.244.5:4833 -> xxx.yyy.255.235:1433 SYN ******S*
Dec 10 22:23:43 24.232.244.5:4831 -> xxx.yyy.255.233:1433 SYN ******S*
Dec 10 22:23:43 24.232.244.5:4836 -> xxx.yyy.255.238:1433 SYN ******S*
Dec 10 22:23:43 24.232.244.5:4840 -> xxx.yyy.255.242:1433 SYN ******S*
Dec 10 22:23:43 24.232.244.5:4850 -> xxx.yyy.255.252:1433 SYN ******S*
40487
Dec 10 06:30:23 69.93.54.186:2075 -> xxx.yyy.1.0:4000 SYN ******S*
Dec 10 06:30:23 69.93.54.186:2076 -> xxx.yyy.1.0:3389 SYN ******S*
Dec 10 06:30:23 69.93.54.186:2077 -> xxx.yyy.1.1:4000 SYN ******S*
Dec 10 06:30:23 69.93.54.186:2078 -> xxx.yyy.1.1:3389 SYN ******S*
Dec 10 06:30:23 69.93.54.186:2079 -> xxx.yyy.1.2:4000 SYN ******S*
Dec 10 06:30:23 69.93.54.186:2080 -> xxx.yyy.1.2:3389 SYN ******S*
Dec 10 06:30:23 69.93.54.186:2081 -> xxx.yyy.1.3:4000 SYN ******S*
Dec 10 06:30:23 69.93.54.186:2082 -> xxx.yyy.1.3:3389 SYN ******S*
[...]
Dec 10 06:32:13 69.93.54.186:2109 -> xxx.yyy.255.247:4000 SYN ******S*
Dec 10 06:32:13 69.93.54.186:2110 -> xxx.yyy.255.247:3389 SYN ******S*
Dec 10 06:32:13 69.93.54.186:2111 -> xxx.yyy.255.248:4000 SYN ******S*
Dec 10 06:32:13 69.93.54.186:2112 -> xxx.yyy.255.248:3389 SYN ******S*
Dec 10 06:32:13 69.93.54.186:2113 -> xxx.yyy.255.249:4000 SYN ******S*
Dec 10 06:32:13 69.93.54.186:2114 -> xxx.yyy.255.249:3389 SYN ******S*
Dec 10 06:32:13 69.93.54.186:2065 -> xxx.yyy.255.250:4000 SYN ******S*
Dec 10 06:32:13 69.93.54.186:2066 -> xxx.yyy.255.250:3389 SYN ******S*
39806
Dec 10 14:42:59 142.46.68.10:2467 -> xxx.yyy.1.1:5000 SYN ******S*
Dec 10 14:42:59 142.46.68.10:2469 -> xxx.yyy.1.3:5000 SYN ******S*
Dec 10 14:42:59 142.46.68.10:2470 -> xxx.yyy.1.4:5000 SYN ******S*
Dec 10 14:42:56 142.46.68.10:2471 -> xxx.yyy.1.5:5000 SYN ******S*
Dec 10 14:42:59 142.46.68.10:2472 -> xxx.yyy.1.6:5000 SYN ******S*
Dec 10 14:42:59 142.46.68.10:2475 -> xxx.yyy.1.9:5000 SYN ******S*
Dec 10 14:42:56 142.46.68.10:2476 -> xxx.yyy.1.10:5000 SYN ******S*
Dec 10 14:42:59 142.46.68.10:2477 -> xxx.yyy.1.11:5000 SYN ******S*
[...]
Dec 10 14:49:00 142.46.68.10:4993 -> xxx.yyy.255.187:5000 SYN ******S*
Dec 10 14:49:01 142.46.68.10:1075 -> xxx.yyy.255.236:5000 SYN ******S*
Dec 10 14:49:01 142.46.68.10:1076 -> xxx.yyy.255.237:5000 SYN ******S*
Dec 10 14:49:01 142.46.68.10:1079 -> xxx.yyy.255.240:5000 SYN ******S*
Dec 10 14:49:01 142.46.68.10:1080 -> xxx.yyy.255.241:5000 SYN ******S*
Dec 10 14:49:01 142.46.68.10:1081 -> xxx.yyy.255.242:5000 SYN ******S*
Dec 10 14:49:01 142.46.68.10:1082 -> xxx.yyy.255.243:5000 SYN ******S*
Dec 10 14:49:01 142.46.68.10:1083 -> xxx.yyy.255.244:5000 SYN ******S*
29645
Dec 10 05:10:42 217.94.99.138:62676 -> xxx.yyy.1.0:3306 SYN ******S*
Dec 10 05:10:42 217.94.99.138:62681 -> xxx.yyy.1.5:3306 SYN ******S*
Dec 10 05:10:42 217.94.99.138:62682 -> xxx.yyy.1.6:3306 SYN ******S*
Dec 10 05:10:42 217.94.99.138:62683 -> xxx.yyy.1.7:3306 SYN ******S*
Dec 10 05:10:42 217.94.99.138:62684 -> xxx.yyy.1.8:3306 SYN ******S*
Dec 10 05:10:42 217.94.99.138:62685 -> xxx.yyy.1.9:3306 SYN ******S*
Dec 10 05:10:42 217.94.99.138:62686 -> xxx.yyy.1.10:3306 SYN ******S*
Dec 10 05:10:42 217.94.99.138:62691 -> xxx.yyy.1.15:3306 SYN ******S*
[...]
Dec 10 06:53:18 217.94.99.138:61896 -> xxx.yyy.236.51:3306 SYN ******S*
Dec 10 06:53:18 217.94.99.138:61891 -> xxx.yyy.240.117:3306 SYN ******S*
Dec 10 06:53:17 217.94.99.138:61880 -> xxx.yyy.240.211:3306 SYN ******S*
Dec 10 06:53:18 217.94.99.138:61915 -> xxx.yyy.241.111:3306 SYN ******S*
Dec 10 06:53:19 217.94.99.138:61933 -> xxx.yyy.240.117:3306 SYN ******S*
Dec 10 06:53:19 217.94.99.138:61934 -> xxx.yyy.236.51:3306 SYN ******S*
Dec 10 06:53:19 217.94.99.138:61938 -> xxx.yyy.226.9:3306 SYN ******S*
Dec 10 06:53:20 217.94.99.138:61974 -> xxx.yyy.241.111:3306 SYN ******S*
25045
Dec 10 10:14:01 128.211.208.118:2169 -> xxx.yyy.1.6:80 SYN ******S*
Dec 10 10:14:01 128.211.208.118:2171 -> xxx.yyy.1.8:80 SYN ******S*
Dec 10 10:14:01 128.211.208.118:2170 -> xxx.yyy.1.7:80 SYN ******S*
Dec 10 10:14:01 128.211.208.118:2172 -> xxx.yyy.1.9:80 SYN ******S*
Dec 10 10:14:01 128.211.208.118:2173 -> xxx.yyy.1.10:80 SYN ******S*
Dec 10 10:13:59 128.211.208.118:2174 -> xxx.yyy.1.11:80 SYN ******S*
Dec 10 10:14:01 128.211.208.118:2175 -> xxx.yyy.1.12:80 SYN ******S*
Dec 10 10:13:58 128.211.208.118:2176 -> xxx.yyy.1.13:80 SYN ******S*
[...]
Dec 10 10:37:24 128.211.208.118:2214 -> xxx.yyy.255.183:80 SYN ******S*
Dec 10 10:37:24 128.211.208.118:2215 -> xxx.yyy.255.184:80 SYN ******S*
Dec 10 10:37:24 128.211.208.118:2218 -> xxx.yyy.255.187:80 SYN ******S*
Dec 10 10:37:24 128.211.208.118:2216 -> xxx.yyy.255.185:80 SYN ******S*
Dec 10 10:37:24 128.211.208.118:2217 -> xxx.yyy.255.186:80 SYN ******S*
Dec 10 10:37:24 128.211.208.118:2220 -> xxx.yyy.255.189:80 SYN ******S*
Dec 10 10:37:24 128.211.208.118:2222 -> xxx.yyy.255.191:80 SYN ******S*
Dec 10 10:37:24 128.211.208.118:2219 -> xxx.yyy.255.188:80 SYN ******S*
Dec 10 10:37:24 128.211.208.118:2224 -> xxx.yyy.255.193:80 SYN ******S*
24706
Dec 10 10:14:45 84.128.91.138:63510 -> xxx.yyy.1.0:3306 SYN ******S*
Dec 10 10:14:45 84.128.91.138:63511 -> xxx.yyy.1.1:3306 SYN ******S*
Dec 10 10:14:45 84.128.91.138:63512 -> xxx.yyy.1.2:3306 SYN ******S*
Dec 10 10:14:45 84.128.91.138:63516 -> xxx.yyy.1.6:3306 SYN ******S*
Dec 10 10:14:45 84.128.91.138:63517 -> xxx.yyy.1.7:3306 SYN ******S*
Dec 10 10:14:46 84.128.91.138:63520 -> xxx.yyy.1.10:3306 SYN ******S*
Dec 10 10:14:46 84.128.91.138:63521 -> xxx.yyy.1.11:3306 SYN ******S*
Dec 10 10:14:46 84.128.91.138:63522 -> xxx.yyy.1.12:3306 SYN ******S*
[...]
Dec 10 10:36:30 84.128.91.138:62989 -> xxx.yyy.255.235:3306 SYN ******S*
Dec 10 10:36:30 84.128.91.138:62991 -> xxx.yyy.255.237:3306 SYN ******S*
Dec 10 10:36:30 84.128.91.138:62993 -> xxx.yyy.255.239:3306 SYN ******S*
Dec 10 10:36:30 84.128.91.138:62994 -> xxx.yyy.255.240:3306 SYN ******S*
Dec 10 10:36:30 84.128.91.138:63000 -> xxx.yyy.255.246:3306 SYN ******S*
Dec 10 10:36:30 84.128.91.138:63004 -> xxx.yyy.255.250:3306 SYN ******S*
Dec 10 10:36:30 84.128.91.138:63005 -> xxx.yyy.255.251:3306 SYN ******S*
Dec 10 10:36:30 84.128.91.138:63007 -> xxx.yyy.255.253:3306 SYN ******S*
21261
[...]
20645
Dec 10 07:42:59 213.136.120.217:59535 -> xxx.yyy.1.146:22 SYN ******S*
Dec 10 07:42:59 213.136.120.217:59537 -> xxx.yyy.1.148:22 SYN ******S*
Dec 10 07:42:59 213.136.120.217:59539 -> xxx.yyy.1.150:22 SYN ******S*
Dec 10 07:42:59 213.136.120.217:59542 -> xxx.yyy.1.153:22 SYN ******S*
Dec 10 07:42:59 213.136.120.217:59544 -> xxx.yyy.1.154:22 SYN ******S*
Dec 10 07:42:56 213.136.120.217:59555 -> xxx.yyy.1.165:22 SYN ******S*
Dec 10 07:42:56 213.136.120.217:59556 -> xxx.yyy.1.166:22 SYN ******S*
Dec 10 07:42:59 213.136.120.217:59536 -> xxx.yyy.1.147:22 SYN ******S*
[...]
Dec 10 12:30:02 213.136.120.217:38011 -> xxx.yyy.243.45:22 SYN ******S*
Dec 10 12:30:02 213.136.120.217:38050 -> xxx.yyy.229.182:22 SYN ******S*
Dec 10 12:30:02 213.136.120.217:37679 -> xxx.yyy.230.70:22 SYN ******S*
Dec 10 12:30:03 213.136.120.217:38204 -> xxx.yyy.229.247:22 SYN ******S*
Dec 10 12:30:04 213.136.120.217:37913 -> xxx.yyy.241.108:22 SYN ******S*
Dec 10 12:30:04 213.136.120.217:38474 -> xxx.yyy.229.228:22 SYN ******S*
Dec 10 12:30:09 213.136.120.217:39174 -> xxx.yyy.243.45:22 SYN ******S*
Dec 10 12:30:10 213.136.120.217:39299 -> xxx.yyy.236.22:22 SYN ******S*
18529
[...]
17545
[...]
13819
[...]
11173
[...]
10773
Dec 10 05:48:24 217.255.128.56:3618 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 10 05:48:27 217.255.128.56:3627 -> xxx.yyy.1.15:1433 SYN ******S*
Dec 10 05:48:27 217.255.128.56:3633 -> xxx.yyy.1.21:1433 SYN ******S*
Dec 10 05:48:24 217.255.128.56:3641 -> xxx.yyy.1.29:1433 SYN ******S*
Dec 10 05:48:24 217.255.128.56:3648 -> xxx.yyy.1.36:1433 SYN ******S*
Dec 10 05:48:24 217.255.128.56:3654 -> xxx.yyy.1.42:1433 SYN ******S*
Dec 10 05:48:24 217.255.128.56:3661 -> xxx.yyy.1.49:1433 SYN ******S*
Dec 10 05:48:24 217.255.128.56:3669 -> xxx.yyy.1.57:1433 SYN ******S*
[...]
Dec 10 05:52:50 217.255.128.56:4884 -> xxx.yyy.134.177:1433 SYN ******S*
Dec 10 05:52:50 217.255.128.56:4890 -> xxx.yyy.134.183:1433 SYN ******S*
Dec 10 05:52:50 217.255.128.56:4896 -> xxx.yyy.134.189:1433 SYN ******S*
Dec 10 05:52:50 217.255.128.56:4900 -> xxx.yyy.134.193:1433 SYN ******S*
Dec 10 05:52:50 217.255.128.56:4905 -> xxx.yyy.134.198:1433 SYN ******S*
Dec 10 05:52:50 217.255.128.56:4911 -> xxx.yyy.134.204:1433 SYN ******S*
Dec 10 05:52:50 217.255.128.56:4922 -> xxx.yyy.134.215:1433 SYN ******S*
Dec 10 05:52:50 217.255.128.56:4931 -> xxx.yyy.134.224:1433 SYN ******S*
10119
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list