[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Mon Dec 13 15:59:01 GMT 2004
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Dec 12 04:44:30 210.82.175.253:47068 -> xxx.yyy.1.0:1433 SYN ******S*
Dec 12 04:44:30 210.82.175.253:47069 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 12 04:44:30 210.82.175.253:43658 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 12 04:44:30 210.82.175.253:37077 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 12 04:44:30 210.82.175.253:40338 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 12 04:44:30 210.82.175.253:37079 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 12 04:44:30 210.82.175.253:33906 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 12 04:44:30 210.82.175.253:43659 -> xxx.yyy.1.6:1433 SYN ******S*
[...]
Dec 12 08:48:09 210.82.175.253:17692 -> xxx.yyy.255.246:1433 SYN ******S*
Dec 12 08:48:09 210.82.175.253:17694 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 12 08:48:09 210.82.175.253:17704 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 12 08:48:09 210.82.175.253:17708 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 12 08:48:10 210.82.175.253:17713 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 12 08:48:10 210.82.175.253:17710 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 12 08:48:10 210.82.175.253:17723 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 12 08:48:10 210.82.175.253:14497 -> xxx.yyy.255.253:1433 SYN ******S*
Dec 12 08:48:10 210.82.175.253:14526 -> xxx.yyy.255.254:1433 SYN ******S*
124687
Dec 12 08:12:18 82.76.12.62:2113 -> xxx.yyy.1.0:1433 SYN ******S*
Dec 12 08:12:18 82.76.12.62:2119 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 12 08:12:18 82.76.12.62:2125 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 12 08:12:18 82.76.12.62:2127 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 12 08:12:18 82.76.12.62:2139 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 12 08:12:18 82.76.12.62:2141 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 12 08:12:15 82.76.12.62:2142 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 12 08:12:15 82.76.12.62:2146 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Dec 12 12:23:56 82.76.12.62:1891 -> xxx.yyy.255.245:1433 SYN ******S*
Dec 12 12:23:57 82.76.12.62:1966 -> xxx.yyy.255.246:1433 SYN ******S*
Dec 12 12:23:57 82.76.12.62:1970 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 12 12:23:58 82.76.12.62:2264 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 12 12:23:58 82.76.12.62:2267 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 12 12:23:59 82.76.12.62:2270 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 12 12:24:00 82.76.12.62:3128 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 12 12:24:00 82.76.12.62:3787 -> xxx.yyy.255.253:1433 SYN ******S*
Dec 12 12:24:00 82.76.12.62:4143 -> xxx.yyy.255.254:1433 SYN ******S*
114201
Dec 12 09:35:32 24.173.70.101:1320 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 12 09:35:32 24.173.70.101:1321 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 12 09:35:32 24.173.70.101:1324 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 12 09:35:32 24.173.70.101:1325 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 12 09:35:32 24.173.70.101:1327 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 12 09:35:32 24.173.70.101:1328 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 12 09:35:32 24.173.70.101:1329 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 12 09:35:32 24.173.70.101:1333 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
Dec 12 13:13:44 24.173.70.101:3047 -> xxx.yyy.255.243:1433 SYN ******S*
Dec 12 13:13:44 24.173.70.101:3060 -> xxx.yyy.255.244:1433 SYN ******S*
Dec 12 13:13:44 24.173.70.101:3066 -> xxx.yyy.255.245:1433 SYN ******S*
Dec 12 13:13:45 24.173.70.101:3087 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 12 13:13:45 24.173.70.101:3089 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 12 13:13:45 24.173.70.101:3096 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 12 13:13:45 24.173.70.101:3099 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 12 13:13:45 24.173.70.101:3102 -> xxx.yyy.255.253:1433 SYN ******S*
Dec 12 13:13:46 24.173.70.101:3104 -> xxx.yyy.255.254:1433 SYN ******S*
108103
Dec 12 00:06:39 221.11.80.98:3018 -> xxx.yyy.64.2:1433 SYN ******S*
Dec 12 00:06:39 221.11.80.98:3016 -> xxx.yyy.64.1:1433 SYN ******S*
Dec 12 00:06:39 221.11.80.98:3036 -> xxx.yyy.64.6:1433 SYN ******S*
Dec 12 00:06:39 221.11.80.98:3040 -> xxx.yyy.64.8:1433 SYN ******S*
Dec 12 00:06:39 221.11.80.98:3042 -> xxx.yyy.64.9:1433 SYN ******S*
Dec 12 00:06:39 221.11.80.98:3034 -> xxx.yyy.64.5:1433 SYN ******S*
Dec 12 00:06:39 221.11.80.98:3054 -> xxx.yyy.64.13:1433 SYN ******S*
Dec 12 00:06:37 221.11.80.98:3048 -> xxx.yyy.64.10:1433 SYN ******S*
[...]
Dec 12 02:58:22 221.11.80.98:4467 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 12 02:58:22 221.11.80.98:4445 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 12 02:58:23 221.11.80.98:4502 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 12 02:58:23 221.11.80.98:4506 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 12 02:58:23 221.11.80.98:4521 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 12 02:58:23 221.11.80.98:4546 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 12 02:58:23 221.11.80.98:4562 -> xxx.yyy.255.253:1433 SYN ******S*
Dec 12 02:58:23 221.11.80.98:4576 -> xxx.yyy.255.254:1433 SYN ******S*
92362
Dec 12 11:01:07 64.229.158.172:3806 -> xxx.yyy.1.0:1433 SYN ******S*
Dec 12 11:01:07 64.229.158.172:3807 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 12 11:01:07 64.229.158.172:3809 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 12 11:01:07 64.229.158.172:3810 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 12 11:01:07 64.229.158.172:3811 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 12 11:01:07 64.229.158.172:3819 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 12 11:01:07 64.229.158.172:3820 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 12 11:01:07 64.229.158.172:3822 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Dec 12 14:40:30 64.229.158.172:4109 -> xxx.yyy.245.172:1433 SYN ******S*
Dec 12 14:40:30 64.229.158.172:4110 -> xxx.yyy.245.173:1433 SYN ******S*
Dec 12 14:40:30 64.229.158.172:4111 -> xxx.yyy.245.174:1433 SYN ******S*
Dec 12 14:40:30 64.229.158.172:4129 -> xxx.yyy.245.181:1433 SYN ******S*
Dec 12 14:40:30 64.229.158.172:4130 -> xxx.yyy.245.182:1433 SYN ******S*
Dec 12 14:40:30 64.229.158.172:4146 -> xxx.yyy.245.184:1433 SYN ******S*
Dec 12 14:40:30 64.229.158.172:4147 -> xxx.yyy.245.185:1433 SYN ******S*
Dec 12 14:40:30 64.229.158.172:4154 -> xxx.yyy.245.186:1433 SYN ******S*
82442
Dec 12 00:09:54 219.162.222.188:4821 -> xxx.yyy.64.0:1433 SYN ******S*
Dec 12 00:09:51 219.162.222.188:4824 -> xxx.yyy.64.1:1433 SYN ******S*
Dec 12 00:09:51 219.162.222.188:4825 -> xxx.yyy.64.2:1433 SYN ******S*
Dec 12 00:09:51 219.162.222.188:4826 -> xxx.yyy.64.3:1433 SYN ******S*
Dec 12 00:09:54 219.162.222.188:4827 -> xxx.yyy.64.4:1433 SYN ******S*
Dec 12 00:09:54 219.162.222.188:4834 -> xxx.yyy.64.6:1433 SYN ******S*
Dec 12 00:09:54 219.162.222.188:4844 -> xxx.yyy.64.9:1433 SYN ******S*
Dec 12 00:09:54 219.162.222.188:4845 -> xxx.yyy.64.10:1433 SYN ******S*
[...]
Dec 12 01:36:08 219.162.222.188:1967 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 12 01:36:08 219.162.222.188:1966 -> xxx.yyy.255.246:1433 SYN ******S*
Dec 12 01:36:08 219.162.222.188:1977 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 12 01:36:08 219.162.222.188:1974 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 12 01:36:08 219.162.222.188:1973 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 12 01:36:08 219.162.222.188:1969 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 12 01:36:08 219.162.222.188:1975 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 12 01:36:08 219.162.222.188:1989 -> xxx.yyy.255.253:1433 SYN ******S*
Dec 12 01:36:08 219.162.222.188:1997 -> xxx.yyy.255.254:1433 SYN ******S*
80237
Dec 12 12:15:25 4.5.250.215:1280 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 12 12:15:22 4.5.250.215:1282 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 12 12:15:25 4.5.250.215:1283 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 12 12:15:25 4.5.250.215:1285 -> xxx.yyy.1.8:1433 SYN ******S*
Dec 12 12:15:22 4.5.250.215:1287 -> xxx.yyy.1.9:1433 SYN ******S*
Dec 12 12:15:25 4.5.250.215:1290 -> xxx.yyy.1.11:1433 SYN ******S*
Dec 12 12:15:25 4.5.250.215:1292 -> xxx.yyy.1.12:1433 SYN ******S*
Dec 12 12:15:25 4.5.250.215:1293 -> xxx.yyy.1.13:1433 SYN ******S*
[...]
Dec 12 14:09:41 4.5.250.215:3766 -> xxx.yyy.255.238:1433 SYN ******S*
Dec 12 14:09:42 4.5.250.215:3801 -> xxx.yyy.255.243:1433 SYN ******S*
Dec 12 14:09:42 4.5.250.215:3806 -> xxx.yyy.255.246:1433 SYN ******S*
Dec 12 14:09:42 4.5.250.215:3811 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 12 14:09:42 4.5.250.215:3808 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 12 14:09:42 4.5.250.215:3807 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 12 14:09:42 4.5.250.215:3822 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 12 14:09:42 4.5.250.215:3820 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 12 14:09:42 4.5.250.215:3828 -> xxx.yyy.255.253:1433 SYN ******S*
79996
Dec 12 10:39:10 80.171.79.22:3815 -> xxx.yyy.1.1:139 SYN ******S*
Dec 12 10:39:10 80.171.79.22:3816 -> xxx.yyy.1.2:139 SYN ******S*
Dec 12 10:39:10 80.171.79.22:3817 -> xxx.yyy.1.3:139 SYN ******S*
Dec 12 10:39:10 80.171.79.22:3819 -> xxx.yyy.1.5:139 SYN ******S*
Dec 12 10:39:10 80.171.79.22:3820 -> xxx.yyy.1.6:139 SYN ******S*
Dec 12 10:39:10 80.171.79.22:3821 -> xxx.yyy.1.7:139 SYN ******S*
Dec 12 10:39:10 80.171.79.22:3822 -> xxx.yyy.1.8:139 SYN ******S*
Dec 12 10:39:10 80.171.79.22:3823 -> xxx.yyy.1.9:139 SYN ******S*
[...]
Dec 12 10:50:49 80.171.79.22:3633 -> xxx.yyy.255.243:139 SYN ******S*
Dec 12 10:50:49 80.171.79.22:3635 -> xxx.yyy.255.245:139 SYN ******S*
Dec 12 10:50:49 80.171.79.22:3636 -> xxx.yyy.255.246:139 SYN ******S*
Dec 12 10:50:49 80.171.79.22:3649 -> xxx.yyy.255.249:139 SYN ******S*
Dec 12 10:50:49 80.171.79.22:3650 -> xxx.yyy.255.250:139 SYN ******S*
Dec 12 10:50:49 80.171.79.22:3651 -> xxx.yyy.255.251:139 SYN ******S*
Dec 12 10:50:49 80.171.79.22:3652 -> xxx.yyy.255.252:139 SYN ******S*
Dec 12 10:50:49 80.171.79.22:3653 -> xxx.yyy.255.253:139 SYN ******S*
Dec 12 10:50:49 80.171.79.22:3654 -> xxx.yyy.255.254:139 SYN ******S*
65206
Dec 12 03:39:14 206.13.56.94:2848 -> xxx.yyy.1.58:1433 SYN ******S*
Dec 12 03:39:14 206.13.56.94:2865 -> xxx.yyy.1.56:1433 SYN ******S*
Dec 12 03:39:14 206.13.56.94:2873 -> xxx.yyy.1.55:1433 SYN ******S*
Dec 12 03:39:14 206.13.56.94:2876 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 12 03:39:11 206.13.56.94:2882 -> xxx.yyy.1.54:1433 SYN ******S*
Dec 12 03:39:14 206.13.56.94:2891 -> xxx.yyy.1.53:1433 SYN ******S*
Dec 12 03:39:11 206.13.56.94:2899 -> xxx.yyy.1.52:1433 SYN ******S*
Dec 12 03:39:14 206.13.56.94:2906 -> xxx.yyy.1.51:1433 SYN ******S*
[...]
Dec 12 04:01:31 206.13.56.94:2296 -> xxx.yyy.255.242:1433 SYN ******S*
Dec 12 04:01:31 206.13.56.94:2297 -> xxx.yyy.255.243:1433 SYN ******S*
Dec 12 04:01:31 206.13.56.94:2307 -> xxx.yyy.255.244:1433 SYN ******S*
Dec 12 04:01:31 206.13.56.94:2315 -> xxx.yyy.255.245:1433 SYN ******S*
Dec 12 04:01:31 206.13.56.94:2323 -> xxx.yyy.255.246:1433 SYN ******S*
Dec 12 04:01:31 206.13.56.94:2574 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 12 04:01:31 206.13.56.94:2582 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 12 04:01:31 206.13.56.94:2590 -> xxx.yyy.255.253:1433 SYN ******S*
64593
Dec 12 11:05:51 143.107.193.64:3546 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 12 11:05:51 143.107.193.64:3547 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 12 11:05:51 143.107.193.64:3548 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 12 11:05:51 143.107.193.64:3550 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 12 11:05:51 143.107.193.64:3551 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 12 11:05:51 143.107.193.64:3553 -> xxx.yyy.1.8:1433 SYN ******S*
Dec 12 11:05:51 143.107.193.64:3554 -> xxx.yyy.1.9:1433 SYN ******S*
Dec 12 11:05:51 143.107.193.64:3555 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
Dec 12 11:16:43 143.107.193.64:2651 -> xxx.yyy.255.194:1433 SYN ******S*
Dec 12 11:16:43 143.107.193.64:2652 -> xxx.yyy.255.195:1433 SYN ******S*
Dec 12 11:16:43 143.107.193.64:2649 -> xxx.yyy.255.192:1433 SYN ******S*
Dec 12 11:16:43 143.107.193.64:2655 -> xxx.yyy.255.198:1433 SYN ******S*
Dec 12 11:16:43 143.107.193.64:2653 -> xxx.yyy.255.196:1433 SYN ******S*
Dec 12 11:16:43 143.107.193.64:2650 -> xxx.yyy.255.193:1433 SYN ******S*
Dec 12 11:16:43 143.107.193.64:2647 -> xxx.yyy.255.190:1433 SYN ******S*
Dec 12 11:16:44 143.107.193.64:2707 -> xxx.yyy.255.250:1433 SYN ******S*
64426
Dec 12 00:25:16 211.239.150.168:19212 -> xxx.yyy.1.1:4899 SYN ******S*
Dec 12 00:25:16 211.239.150.168:19213 -> xxx.yyy.1.2:4899 SYN ******S*
Dec 12 00:25:17 211.239.150.168:19214 -> xxx.yyy.1.3:4899 SYN ******S*
Dec 12 00:25:15 211.239.150.168:19215 -> xxx.yyy.1.4:4899 SYN ******S*
Dec 12 00:25:18 211.239.150.168:19216 -> xxx.yyy.1.5:4899 SYN ******S*
Dec 12 00:25:18 211.239.150.168:19217 -> xxx.yyy.1.6:4899 SYN ******S*
Dec 12 00:25:15 211.239.150.168:19218 -> xxx.yyy.1.7:4899 SYN ******S*
Dec 12 00:25:15 211.239.150.168:19219 -> xxx.yyy.1.8:4899 SYN ******S*
[...]
Dec 12 00:37:37 211.239.150.168:21755 -> xxx.yyy.255.231:4899 SYN ******S*
Dec 12 00:37:37 211.239.150.168:21759 -> xxx.yyy.255.235:4899 SYN ******S*
Dec 12 00:37:37 211.239.150.168:21775 -> xxx.yyy.255.251:4899 SYN ******S*
Dec 12 00:37:37 211.239.150.168:21771 -> xxx.yyy.255.247:4899 SYN ******S*
Dec 12 00:37:37 211.239.150.168:21753 -> xxx.yyy.255.229:4899 SYN ******S*
Dec 12 00:37:37 211.239.150.168:21740 -> xxx.yyy.255.216:4899 SYN ******S*
Dec 12 00:37:37 211.239.150.168:21736 -> xxx.yyy.255.212:4899 SYN ******S*
Dec 12 00:37:37 211.239.150.168:21743 -> xxx.yyy.255.219:4899 SYN ******S*
60231
Dec 12 10:44:39 193.147.116.117:2763 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 12 10:44:39 193.147.116.117:2764 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 12 10:44:39 193.147.116.117:2765 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 12 10:44:39 193.147.116.117:2766 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 12 10:44:39 193.147.116.117:2767 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 12 10:44:39 193.147.116.117:2768 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 12 10:44:39 193.147.116.117:2769 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 12 10:44:39 193.147.116.117:2770 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Dec 12 11:01:38 193.147.116.117:3807 -> xxx.yyy.255.233:1433 SYN ******S*
Dec 12 11:01:38 193.147.116.117:3810 -> xxx.yyy.255.236:1433 SYN ******S*
Dec 12 11:01:38 193.147.116.117:3811 -> xxx.yyy.255.237:1433 SYN ******S*
Dec 12 11:01:38 193.147.116.117:3813 -> xxx.yyy.255.239:1433 SYN ******S*
Dec 12 11:01:38 193.147.116.117:3812 -> xxx.yyy.255.238:1433 SYN ******S*
Dec 12 11:01:38 193.147.116.117:3814 -> xxx.yyy.255.240:1433 SYN ******S*
Dec 12 11:01:38 193.147.116.117:3815 -> xxx.yyy.255.241:1433 SYN ******S*
Dec 12 11:01:38 193.147.116.117:3816 -> xxx.yyy.255.242:1433 SYN ******S*
Dec 12 11:01:38 193.147.116.117:3817 -> xxx.yyy.255.243:1433 SYN ******S*
59302
Dec 12 06:32:52 220.173.191.112:3877 -> xxx.yyy.1.1:4899 SYN ******S*
Dec 12 06:32:53 220.173.191.112:3883 -> xxx.yyy.1.7:4899 SYN ******S*
Dec 12 06:32:50 220.173.191.112:3878 -> xxx.yyy.1.2:4899 SYN ******S*
Dec 12 06:32:50 220.173.191.112:3884 -> xxx.yyy.1.8:4899 SYN ******S*
Dec 12 06:32:50 220.173.191.112:3879 -> xxx.yyy.1.3:4899 SYN ******S*
Dec 12 06:32:53 220.173.191.112:3881 -> xxx.yyy.1.5:4899 SYN ******S*
Dec 12 06:32:52 220.173.191.112:3888 -> xxx.yyy.1.11:4899 SYN ******S*
Dec 12 06:32:53 220.173.191.112:3889 -> xxx.yyy.1.12:4899 SYN ******S*
[...]
Dec 12 06:42:09 220.173.191.112:4024 -> xxx.yyy.255.249:4899 SYN ******S*
Dec 12 06:42:09 220.173.191.112:4021 -> xxx.yyy.255.246:4899 SYN ******S*
Dec 12 06:42:09 220.173.191.112:4015 -> xxx.yyy.255.240:4899 SYN ******S*
Dec 12 06:42:09 220.173.191.112:4011 -> xxx.yyy.255.237:4899 SYN ******S*
Dec 12 06:42:09 220.173.191.112:4025 -> xxx.yyy.255.250:4899 SYN ******S*
Dec 12 06:42:09 220.173.191.112:4019 -> xxx.yyy.255.244:4899 SYN ******S*
Dec 12 06:42:09 220.173.191.112:4012 -> xxx.yyy.255.238:4899 SYN ******S*
Dec 12 06:42:09 220.173.191.112:4009 -> xxx.yyy.255.235:4899 SYN ******S*
Dec 12 06:42:09 220.173.191.112:4029 -> xxx.yyy.255.254:4899 SYN ******S*
51259
Dec 12 06:31:49 203.231.30.62:3450 -> xxx.yyy.1.1:4899 SYN ******S*
Dec 12 06:31:49 203.231.30.62:3451 -> xxx.yyy.1.2:4899 SYN ******S*
Dec 12 06:31:49 203.231.30.62:3452 -> xxx.yyy.1.3:4899 SYN ******S*
Dec 12 06:31:47 203.231.30.62:3453 -> xxx.yyy.1.4:4899 SYN ******S*
Dec 12 06:31:47 203.231.30.62:3454 -> xxx.yyy.1.5:4899 SYN ******S*
Dec 12 06:31:47 203.231.30.62:3455 -> xxx.yyy.1.6:4899 SYN ******S*
Dec 12 06:31:47 203.231.30.62:3456 -> xxx.yyy.1.7:4899 SYN ******S*
Dec 12 06:31:47 203.231.30.62:3457 -> xxx.yyy.1.8:4899 SYN ******S*
[...]
Dec 12 06:41:03 203.231.30.62:4453 -> xxx.yyy.255.245:4899 SYN ******S*
Dec 12 06:41:03 203.231.30.62:4454 -> xxx.yyy.255.246:4899 SYN ******S*
Dec 12 06:41:03 203.231.30.62:4455 -> xxx.yyy.255.247:4899 SYN ******S*
Dec 12 06:41:03 203.231.30.62:4456 -> xxx.yyy.255.248:4899 SYN ******S*
Dec 12 06:41:03 203.231.30.62:4457 -> xxx.yyy.255.249:4899 SYN ******S*
Dec 12 06:41:03 203.231.30.62:4458 -> xxx.yyy.255.250:4899 SYN ******S*
Dec 12 06:41:03 203.231.30.62:4459 -> xxx.yyy.255.251:4899 SYN ******S*
Dec 12 06:41:03 203.231.30.62:4460 -> xxx.yyy.255.252:4899 SYN ******S*
Dec 12 06:41:03 203.231.30.62:4461 -> xxx.yyy.255.253:4899 SYN ******S*
47253
Dec 12 06:47:12 69.177.253.76:3687 -> xxx.yyy.1.1:4899 SYN ******S*
Dec 12 06:47:12 69.177.253.76:3688 -> xxx.yyy.1.2:4899 SYN ******S*
Dec 12 06:47:12 69.177.253.76:3689 -> xxx.yyy.1.3:4899 SYN ******S*
Dec 12 06:47:10 69.177.253.76:3690 -> xxx.yyy.1.4:4899 SYN ******S*
Dec 12 06:47:10 69.177.253.76:3691 -> xxx.yyy.1.5:4899 SYN ******S*
Dec 12 06:47:10 69.177.253.76:3694 -> xxx.yyy.1.6:4899 SYN ******S*
Dec 12 06:47:10 69.177.253.76:3695 -> xxx.yyy.1.7:4899 SYN ******S*
Dec 12 06:47:10 69.177.253.76:3696 -> xxx.yyy.1.8:4899 SYN ******S*
[...]
Dec 12 06:56:57 69.177.253.76:3375 -> xxx.yyy.255.245:4899 SYN ******S*
Dec 12 06:56:57 69.177.253.76:3379 -> xxx.yyy.255.246:4899 SYN ******S*
Dec 12 06:56:57 69.177.253.76:3380 -> xxx.yyy.255.247:4899 SYN ******S*
Dec 12 06:56:57 69.177.253.76:3381 -> xxx.yyy.255.248:4899 SYN ******S*
Dec 12 06:56:57 69.177.253.76:3384 -> xxx.yyy.255.249:4899 SYN ******S*
Dec 12 06:56:57 69.177.253.76:3386 -> xxx.yyy.255.251:4899 SYN ******S*
Dec 12 06:56:57 69.177.253.76:3390 -> xxx.yyy.255.252:4899 SYN ******S*
Dec 12 06:56:57 69.177.253.76:3391 -> xxx.yyy.255.253:4899 SYN ******S*
Dec 12 06:56:57 69.177.253.76:3396 -> xxx.yyy.255.254:4899 SYN ******S*
45089
Dec 12 00:00:08 222.47.85.184:3432 -> xxx.yyy.87.51:1433 SYN ******S*
Dec 12 00:00:05 222.47.85.184:3220 -> xxx.yyy.87.32:1433 SYN ******S*
Dec 12 00:00:05 222.47.85.184:3232 -> xxx.yyy.87.33:1433 SYN ******S*
Dec 12 00:00:08 222.47.85.184:3447 -> xxx.yyy.87.52:1433 SYN ******S*
Dec 12 00:00:05 222.47.85.184:3236 -> xxx.yyy.87.34:1433 SYN ******S*
Dec 12 00:00:05 222.47.85.184:3240 -> xxx.yyy.87.35:1433 SYN ******S*
Dec 12 00:00:05 222.47.85.184:3245 -> xxx.yyy.87.36:1433 SYN ******S*
Dec 12 00:00:08 222.47.85.184:3450 -> xxx.yyy.87.53:1433 SYN ******S*
[...]
Dec 12 01:46:55 222.47.85.184:4115 -> xxx.yyy.255.237:1433 SYN ******S*
Dec 12 01:46:55 222.47.85.184:3769 -> xxx.yyy.255.236:1433 SYN ******S*
Dec 12 01:46:55 222.47.85.184:4362 -> xxx.yyy.255.242:1433 SYN ******S*
Dec 12 01:46:55 222.47.85.184:4211 -> xxx.yyy.255.241:1433 SYN ******S*
Dec 12 01:46:56 222.47.85.184:4358 -> xxx.yyy.255.245:1433 SYN ******S*
Dec 12 01:46:56 222.47.85.184:3090 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 12 01:46:57 222.47.85.184:3588 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 12 01:46:57 222.47.85.184:3065 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 12 01:46:57 222.47.85.184:4392 -> xxx.yyy.255.253:1433 SYN ******S*
42948
Dec 12 07:17:38 218.64.222.222:4991 -> xxx.yyy.1.2:4899 SYN ******S*
Dec 12 07:17:35 218.64.222.222:4995 -> xxx.yyy.1.4:4899 SYN ******S*
Dec 12 07:17:35 218.64.222.222:4999 -> xxx.yyy.1.5:4899 SYN ******S*
Dec 12 07:17:35 218.64.222.222:3006 -> xxx.yyy.1.6:4899 SYN ******S*
Dec 12 07:17:35 218.64.222.222:3007 -> xxx.yyy.1.7:4899 SYN ******S*
Dec 12 07:17:35 218.64.222.222:3011 -> xxx.yyy.1.8:4899 SYN ******S*
Dec 12 07:17:35 218.64.222.222:3013 -> xxx.yyy.1.9:4899 SYN ******S*
Dec 12 07:17:35 218.64.222.222:3014 -> xxx.yyy.1.10:4899 SYN ******S*
[...]
Dec 12 07:28:17 218.64.222.222:3329 -> xxx.yyy.255.75:4899 SYN ******S*
Dec 12 07:28:17 218.64.222.222:3336 -> xxx.yyy.255.76:4899 SYN ******S*
Dec 12 07:28:17 218.64.222.222:3337 -> xxx.yyy.255.77:4899 SYN ******S*
Dec 12 07:28:17 218.64.222.222:3339 -> xxx.yyy.255.78:4899 SYN ******S*
Dec 12 07:28:17 218.64.222.222:3340 -> xxx.yyy.255.79:4899 SYN ******S*
Dec 12 07:28:17 218.64.222.222:3342 -> xxx.yyy.255.80:4899 SYN ******S*
Dec 12 07:28:17 218.64.222.222:3353 -> xxx.yyy.255.81:4899 SYN ******S*
Dec 12 07:28:17 218.64.222.222:3354 -> xxx.yyy.255.82:4899 SYN ******S*
Dec 12 07:28:17 218.64.222.222:3355 -> xxx.yyy.255.83:4899 SYN ******S*
41893
Dec 12 13:58:35 66.244.219.29:3464 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 12 13:58:32 66.244.219.29:3474 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 12 13:58:35 66.244.219.29:3478 -> xxx.yyy.1.8:1433 SYN ******S*
Dec 12 13:58:35 66.244.219.29:3482 -> xxx.yyy.1.10:1433 SYN ******S*
Dec 12 13:58:32 66.244.219.29:3496 -> xxx.yyy.1.17:1433 SYN ******S*
Dec 12 13:58:32 66.244.219.29:3498 -> xxx.yyy.1.18:1433 SYN ******S*
Dec 12 13:58:32 66.244.219.29:3508 -> xxx.yyy.1.23:1433 SYN ******S*
Dec 12 13:58:32 66.244.219.29:3512 -> xxx.yyy.1.25:1433 SYN ******S*
[...]
Dec 12 14:10:15 66.244.219.29:3742 -> xxx.yyy.255.226:1433 SYN ******S*
Dec 12 14:10:15 66.244.219.29:3732 -> xxx.yyy.255.221:1433 SYN ******S*
Dec 12 14:10:15 66.244.219.29:3738 -> xxx.yyy.255.224:1433 SYN ******S*
Dec 12 14:10:15 66.244.219.29:3754 -> xxx.yyy.255.232:1433 SYN ******S*
Dec 12 14:10:15 66.244.219.29:3760 -> xxx.yyy.255.235:1433 SYN ******S*
Dec 12 14:10:15 66.244.219.29:3750 -> xxx.yyy.255.230:1433 SYN ******S*
Dec 12 14:10:15 66.244.219.29:3772 -> xxx.yyy.255.241:1433 SYN ******S*
Dec 12 14:10:15 66.244.219.29:3766 -> xxx.yyy.255.238:1433 SYN ******S*
Dec 12 14:10:16 66.244.219.29:3794 -> xxx.yyy.255.252:1433 SYN ******S*
41041
Dec 12 06:44:21 218.2.93.6:2439 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 12 06:44:19 218.2.93.6:2397 -> xxx.yyy.1.0:1433 SYN ******S*
Dec 12 06:44:24 218.2.93.6:2547 -> xxx.yyy.1.11:1433 SYN ******S*
Dec 12 06:44:24 218.2.93.6:2551 -> xxx.yyy.1.13:1433 SYN ******S*
Dec 12 06:44:24 218.2.93.6:2472 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 12 06:44:22 218.2.93.6:3167 -> xxx.yyy.1.43:1433 SYN ******S*
Dec 12 06:44:23 218.2.93.6:3156 -> xxx.yyy.1.35:1433 SYN ******S*
Dec 12 06:44:23 218.2.93.6:3163 -> xxx.yyy.1.39:1433 SYN ******S*
[...]
Dec 12 09:04:54 218.2.93.6:3773 -> xxx.yyy.145.73:1433 SYN ******S*
Dec 12 09:04:55 218.2.93.6:3774 -> xxx.yyy.145.74:1433 SYN ******S*
Dec 12 09:04:55 218.2.93.6:3933 -> xxx.yyy.145.76:1433 SYN ******S*
Dec 12 09:04:55 218.2.93.6:3924 -> xxx.yyy.145.75:1433 SYN ******S*
Dec 12 09:04:55 218.2.93.6:3942 -> xxx.yyy.145.77:1433 SYN ******S*
Dec 12 09:04:55 218.2.93.6:3958 -> xxx.yyy.145.78:1433 SYN ******S*
Dec 12 09:04:55 218.2.93.6:3963 -> xxx.yyy.145.79:1433 SYN ******S*
Dec 12 09:04:55 218.2.93.6:3966 -> xxx.yyy.145.81:1433 SYN ******S*
Dec 12 09:04:55 218.2.93.6:3965 -> xxx.yyy.145.80:1433 SYN ******S*
41032
Dec 12 08:32:49 216.100.14.177:32459 -> xxx.yyy.1.1:4899 SYN ******S*
Dec 12 08:32:49 216.100.14.177:32460 -> xxx.yyy.1.2:4899 SYN ******S*
Dec 12 08:32:47 216.100.14.177:32462 -> xxx.yyy.1.4:4899 SYN ******S*
Dec 12 08:32:47 216.100.14.177:32463 -> xxx.yyy.1.5:4899 SYN ******S*
Dec 12 08:32:47 216.100.14.177:32465 -> xxx.yyy.1.6:4899 SYN ******S*
Dec 12 08:32:47 216.100.14.177:32466 -> xxx.yyy.1.7:4899 SYN ******S*
Dec 12 08:32:47 216.100.14.177:32467 -> xxx.yyy.1.8:4899 SYN ******S*
Dec 12 08:32:47 216.100.14.177:32468 -> xxx.yyy.1.9:4899 SYN ******S*
[...]
Dec 12 08:36:37 216.100.14.177:55491 -> xxx.yyy.252.198:4899 SYN ******S*
Dec 12 08:36:37 216.100.14.177:55493 -> xxx.yyy.252.199:4899 SYN ******S*
Dec 12 08:36:37 216.100.14.177:55494 -> xxx.yyy.252.200:4899 SYN ******S*
Dec 12 08:36:37 216.100.14.177:55495 -> xxx.yyy.252.201:4899 SYN ******S*
Dec 12 08:36:37 216.100.14.177:55498 -> xxx.yyy.252.204:4899 SYN ******S*
Dec 12 08:36:37 216.100.14.177:55502 -> xxx.yyy.252.206:4899 SYN ******S*
Dec 12 08:36:37 216.100.14.177:55503 -> xxx.yyy.252.207:4899 SYN ******S*
Dec 12 08:36:37 216.100.14.177:55504 -> xxx.yyy.252.208:4899 SYN ******S*
Dec 12 08:36:37 216.100.14.177:55505 -> xxx.yyy.252.209:4899 SYN ******S*
39751
Dec 12 00:21:26 200.153.105.3:2638 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 12 00:21:29 200.153.105.3:2639 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 12 00:21:26 200.153.105.3:2640 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 12 00:21:26 200.153.105.3:2641 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 12 00:21:29 200.153.105.3:2642 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 12 00:21:29 200.153.105.3:2643 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 12 00:21:26 200.153.105.3:2644 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 12 00:21:29 200.153.105.3:2645 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Dec 12 01:01:05 200.153.105.3:3799 -> xxx.yyy.255.201:1433 SYN ******S*
Dec 12 01:01:05 200.153.105.3:3773 -> xxx.yyy.255.176:1433 SYN ******S*
Dec 12 01:01:05 200.153.105.3:3832 -> xxx.yyy.255.230:1433 SYN ******S*
Dec 12 01:01:05 200.153.105.3:3857 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 12 01:01:05 200.153.105.3:3821 -> xxx.yyy.255.221:1433 SYN ******S*
Dec 12 01:01:05 200.153.105.3:3829 -> xxx.yyy.255.227:1433 SYN ******S*
Dec 12 01:01:05 200.153.105.3:3854 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 12 01:01:05 200.153.105.3:3846 -> xxx.yyy.255.243:1433 SYN ******S*
Dec 12 01:01:05 200.153.105.3:3826 -> xxx.yyy.255.224:1433 SYN ******S*
37703
[...]
30633
Dec 12 08:18:13 82.127.152.252:4550 -> xxx.yyy.1.0:1433 SYN ******S*
Dec 12 08:18:13 82.127.152.252:4553 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 12 08:18:13 82.127.152.252:4555 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 12 08:18:13 82.127.152.252:4556 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 12 08:18:13 82.127.152.252:4557 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 12 08:18:13 82.127.152.252:4558 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 12 08:18:13 82.127.152.252:4559 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 12 08:18:13 82.127.152.252:4560 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Dec 12 09:40:40 82.127.152.252:3116 -> xxx.yyy.91.208:1433 SYN ******S*
Dec 12 09:40:40 82.127.152.252:3115 -> xxx.yyy.91.207:1433 SYN ******S*
Dec 12 09:40:40 82.127.152.252:3113 -> xxx.yyy.91.206:1433 SYN ******S*
Dec 12 09:40:40 82.127.152.252:3132 -> xxx.yyy.91.212:1433 SYN ******S*
Dec 12 09:40:40 82.127.152.252:3130 -> xxx.yyy.91.211:1433 SYN ******S*
Dec 12 09:40:40 82.127.152.252:3136 -> xxx.yyy.91.215:1433 SYN ******S*
Dec 12 09:40:40 82.127.152.252:3135 -> xxx.yyy.91.214:1433 SYN ******S*
Dec 12 09:40:40 82.127.152.252:3134 -> xxx.yyy.91.213:1433 SYN ******S*
Dec 12 09:40:40 82.127.152.252:3142 -> xxx.yyy.91.216:1433 SYN ******S*
28001
Dec 12 12:32:39 84.120.141.11:4728 -> xxx.yyy.1.0:1433 SYN ******S*
Dec 12 12:32:39 84.120.141.11:4730 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 12 12:32:39 84.120.141.11:4736 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 12 12:32:39 84.120.141.11:4752 -> xxx.yyy.1.11:1433 SYN ******S*
Dec 12 12:32:39 84.120.141.11:4757 -> xxx.yyy.1.14:1433 SYN ******S*
Dec 12 12:32:42 84.120.141.11:4760 -> xxx.yyy.1.17:1433 SYN ******S*
Dec 12 12:32:42 84.120.141.11:4761 -> xxx.yyy.1.18:1433 SYN ******S*
Dec 12 12:32:39 84.120.141.11:4782 -> xxx.yyy.1.19:1433 SYN ******S*
[...]
Dec 12 14:40:31 84.120.141.11:1886 -> xxx.yyy.143.152:1433 SYN ******S*
Dec 12 14:40:31 84.120.141.11:1893 -> xxx.yyy.143.153:1433 SYN ******S*
Dec 12 14:40:31 84.120.141.11:1895 -> xxx.yyy.143.154:1433 SYN ******S*
Dec 12 14:40:31 84.120.141.11:1899 -> xxx.yyy.143.156:1433 SYN ******S*
Dec 12 14:40:31 84.120.141.11:1901 -> xxx.yyy.143.157:1433 SYN ******S*
Dec 12 14:40:32 84.120.141.11:1987 -> xxx.yyy.143.160:1433 SYN ******S*
Dec 12 14:40:32 84.120.141.11:2220 -> xxx.yyy.143.193:1433 SYN ******S*
Dec 12 14:40:32 84.120.141.11:2037 -> xxx.yyy.143.167:1433 SYN ******S*
Dec 12 14:40:32 84.120.141.11:2039 -> xxx.yyy.143.168:1433 SYN ******S*
27199
Dec 12 09:03:31 218.18.195.97:25784 -> xxx.yyy.1.0:1433 SYN ******S*
Dec 12 09:03:34 218.18.195.97:25787 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 12 09:03:34 218.18.195.97:25786 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 12 09:03:34 218.18.195.97:25793 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 12 09:03:34 218.18.195.97:25792 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 12 09:03:34 218.18.195.97:25796 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 12 09:03:34 218.18.195.97:25795 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 12 09:03:34 218.18.195.97:25797 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Dec 12 10:26:29 218.18.195.97:18846 -> xxx.yyy.93.29:1433 SYN ******S*
Dec 12 10:26:29 218.18.195.97:18848 -> xxx.yyy.93.30:1433 SYN ******S*
Dec 12 10:26:29 218.18.195.97:18854 -> xxx.yyy.93.35:1433 SYN ******S*
Dec 12 10:26:29 218.18.195.97:18855 -> xxx.yyy.93.36:1433 SYN ******S*
Dec 12 10:26:29 218.18.195.97:18853 -> xxx.yyy.93.34:1433 SYN ******S*
Dec 12 10:26:30 218.18.195.97:18857 -> xxx.yyy.93.37:1433 SYN ******S*
Dec 12 10:26:30 218.18.195.97:18860 -> xxx.yyy.93.40:1433 SYN ******S*
Dec 12 10:26:30 218.18.195.97:18862 -> xxx.yyy.93.41:1433 SYN ******S*
Dec 12 10:26:30 218.18.195.97:18851 -> xxx.yyy.93.32:1433 SYN ******S*
25654
[...]
21194
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list