[Intrusions] [LOGS] Summary of large-scale portscanning detects

Ken.Connelly at uni.edu Ken.Connelly at uni.edu
Mon Dec 13 15:59:01 GMT 2004


The following extracts show the beginning and ending of scan activity
was detected on my network.  The number following each set is the total
number of probes for that source.  Timestamps are GMT-0600.

Dec 12 04:44:30 210.82.175.253:47068 -> xxx.yyy.1.0:1433 SYN ******S* 
Dec 12 04:44:30 210.82.175.253:47069 -> xxx.yyy.1.1:1433 SYN ******S* 
Dec 12 04:44:30 210.82.175.253:43658 -> xxx.yyy.1.2:1433 SYN ******S* 
Dec 12 04:44:30 210.82.175.253:37077 -> xxx.yyy.1.4:1433 SYN ******S* 
Dec 12 04:44:30 210.82.175.253:40338 -> xxx.yyy.1.3:1433 SYN ******S* 
Dec 12 04:44:30 210.82.175.253:37079 -> xxx.yyy.1.5:1433 SYN ******S* 
Dec 12 04:44:30 210.82.175.253:33906 -> xxx.yyy.1.7:1433 SYN ******S* 
Dec 12 04:44:30 210.82.175.253:43659 -> xxx.yyy.1.6:1433 SYN ******S* 
[...]
Dec 12 08:48:09 210.82.175.253:17692 -> xxx.yyy.255.246:1433 SYN ******S* 
Dec 12 08:48:09 210.82.175.253:17694 -> xxx.yyy.255.247:1433 SYN ******S* 
Dec 12 08:48:09 210.82.175.253:17704 -> xxx.yyy.255.248:1433 SYN ******S* 
Dec 12 08:48:09 210.82.175.253:17708 -> xxx.yyy.255.249:1433 SYN ******S* 
Dec 12 08:48:10 210.82.175.253:17713 -> xxx.yyy.255.251:1433 SYN ******S* 
Dec 12 08:48:10 210.82.175.253:17710 -> xxx.yyy.255.250:1433 SYN ******S* 
Dec 12 08:48:10 210.82.175.253:17723 -> xxx.yyy.255.252:1433 SYN ******S* 
Dec 12 08:48:10 210.82.175.253:14497 -> xxx.yyy.255.253:1433 SYN ******S* 
Dec 12 08:48:10 210.82.175.253:14526 -> xxx.yyy.255.254:1433 SYN ******S* 
124687

Dec 12 08:12:18 82.76.12.62:2113 -> xxx.yyy.1.0:1433 SYN ******S* 
Dec 12 08:12:18 82.76.12.62:2119 -> xxx.yyy.1.1:1433 SYN ******S* 
Dec 12 08:12:18 82.76.12.62:2125 -> xxx.yyy.1.3:1433 SYN ******S* 
Dec 12 08:12:18 82.76.12.62:2127 -> xxx.yyy.1.4:1433 SYN ******S* 
Dec 12 08:12:18 82.76.12.62:2139 -> xxx.yyy.1.5:1433 SYN ******S* 
Dec 12 08:12:18 82.76.12.62:2141 -> xxx.yyy.1.6:1433 SYN ******S* 
Dec 12 08:12:15 82.76.12.62:2142 -> xxx.yyy.1.7:1433 SYN ******S* 
Dec 12 08:12:15 82.76.12.62:2146 -> xxx.yyy.1.8:1433 SYN ******S* 
[...]
Dec 12 12:23:56 82.76.12.62:1891 -> xxx.yyy.255.245:1433 SYN ******S* 
Dec 12 12:23:57 82.76.12.62:1966 -> xxx.yyy.255.246:1433 SYN ******S* 
Dec 12 12:23:57 82.76.12.62:1970 -> xxx.yyy.255.247:1433 SYN ******S* 
Dec 12 12:23:58 82.76.12.62:2264 -> xxx.yyy.255.249:1433 SYN ******S* 
Dec 12 12:23:58 82.76.12.62:2267 -> xxx.yyy.255.250:1433 SYN ******S* 
Dec 12 12:23:59 82.76.12.62:2270 -> xxx.yyy.255.251:1433 SYN ******S* 
Dec 12 12:24:00 82.76.12.62:3128 -> xxx.yyy.255.252:1433 SYN ******S* 
Dec 12 12:24:00 82.76.12.62:3787 -> xxx.yyy.255.253:1433 SYN ******S* 
Dec 12 12:24:00 82.76.12.62:4143 -> xxx.yyy.255.254:1433 SYN ******S* 
114201

Dec 12 09:35:32 24.173.70.101:1320 -> xxx.yyy.1.1:1433 SYN ******S* 
Dec 12 09:35:32 24.173.70.101:1321 -> xxx.yyy.1.2:1433 SYN ******S* 
Dec 12 09:35:32 24.173.70.101:1324 -> xxx.yyy.1.3:1433 SYN ******S* 
Dec 12 09:35:32 24.173.70.101:1325 -> xxx.yyy.1.4:1433 SYN ******S* 
Dec 12 09:35:32 24.173.70.101:1327 -> xxx.yyy.1.5:1433 SYN ******S* 
Dec 12 09:35:32 24.173.70.101:1328 -> xxx.yyy.1.6:1433 SYN ******S* 
Dec 12 09:35:32 24.173.70.101:1329 -> xxx.yyy.1.7:1433 SYN ******S* 
Dec 12 09:35:32 24.173.70.101:1333 -> xxx.yyy.1.9:1433 SYN ******S* 
[...]
Dec 12 13:13:44 24.173.70.101:3047 -> xxx.yyy.255.243:1433 SYN ******S* 
Dec 12 13:13:44 24.173.70.101:3060 -> xxx.yyy.255.244:1433 SYN ******S* 
Dec 12 13:13:44 24.173.70.101:3066 -> xxx.yyy.255.245:1433 SYN ******S* 
Dec 12 13:13:45 24.173.70.101:3087 -> xxx.yyy.255.249:1433 SYN ******S* 
Dec 12 13:13:45 24.173.70.101:3089 -> xxx.yyy.255.250:1433 SYN ******S* 
Dec 12 13:13:45 24.173.70.101:3096 -> xxx.yyy.255.251:1433 SYN ******S* 
Dec 12 13:13:45 24.173.70.101:3099 -> xxx.yyy.255.252:1433 SYN ******S* 
Dec 12 13:13:45 24.173.70.101:3102 -> xxx.yyy.255.253:1433 SYN ******S* 
Dec 12 13:13:46 24.173.70.101:3104 -> xxx.yyy.255.254:1433 SYN ******S* 
108103

Dec 12 00:06:39 221.11.80.98:3018 -> xxx.yyy.64.2:1433 SYN ******S* 
Dec 12 00:06:39 221.11.80.98:3016 -> xxx.yyy.64.1:1433 SYN ******S* 
Dec 12 00:06:39 221.11.80.98:3036 -> xxx.yyy.64.6:1433 SYN ******S* 
Dec 12 00:06:39 221.11.80.98:3040 -> xxx.yyy.64.8:1433 SYN ******S* 
Dec 12 00:06:39 221.11.80.98:3042 -> xxx.yyy.64.9:1433 SYN ******S* 
Dec 12 00:06:39 221.11.80.98:3034 -> xxx.yyy.64.5:1433 SYN ******S* 
Dec 12 00:06:39 221.11.80.98:3054 -> xxx.yyy.64.13:1433 SYN ******S* 
Dec 12 00:06:37 221.11.80.98:3048 -> xxx.yyy.64.10:1433 SYN ******S* 
[...]
Dec 12 02:58:22 221.11.80.98:4467 -> xxx.yyy.255.248:1433 SYN ******S* 
Dec 12 02:58:22 221.11.80.98:4445 -> xxx.yyy.255.247:1433 SYN ******S* 
Dec 12 02:58:23 221.11.80.98:4502 -> xxx.yyy.255.249:1433 SYN ******S* 
Dec 12 02:58:23 221.11.80.98:4506 -> xxx.yyy.255.250:1433 SYN ******S* 
Dec 12 02:58:23 221.11.80.98:4521 -> xxx.yyy.255.251:1433 SYN ******S* 
Dec 12 02:58:23 221.11.80.98:4546 -> xxx.yyy.255.252:1433 SYN ******S* 
Dec 12 02:58:23 221.11.80.98:4562 -> xxx.yyy.255.253:1433 SYN ******S* 
Dec 12 02:58:23 221.11.80.98:4576 -> xxx.yyy.255.254:1433 SYN ******S* 
92362

Dec 12 11:01:07 64.229.158.172:3806 -> xxx.yyy.1.0:1433 SYN ******S* 
Dec 12 11:01:07 64.229.158.172:3807 -> xxx.yyy.1.1:1433 SYN ******S* 
Dec 12 11:01:07 64.229.158.172:3809 -> xxx.yyy.1.2:1433 SYN ******S* 
Dec 12 11:01:07 64.229.158.172:3810 -> xxx.yyy.1.3:1433 SYN ******S* 
Dec 12 11:01:07 64.229.158.172:3811 -> xxx.yyy.1.4:1433 SYN ******S* 
Dec 12 11:01:07 64.229.158.172:3819 -> xxx.yyy.1.6:1433 SYN ******S* 
Dec 12 11:01:07 64.229.158.172:3820 -> xxx.yyy.1.7:1433 SYN ******S* 
Dec 12 11:01:07 64.229.158.172:3822 -> xxx.yyy.1.8:1433 SYN ******S* 
[...]
Dec 12 14:40:30 64.229.158.172:4109 -> xxx.yyy.245.172:1433 SYN ******S* 
Dec 12 14:40:30 64.229.158.172:4110 -> xxx.yyy.245.173:1433 SYN ******S* 
Dec 12 14:40:30 64.229.158.172:4111 -> xxx.yyy.245.174:1433 SYN ******S* 
Dec 12 14:40:30 64.229.158.172:4129 -> xxx.yyy.245.181:1433 SYN ******S* 
Dec 12 14:40:30 64.229.158.172:4130 -> xxx.yyy.245.182:1433 SYN ******S* 
Dec 12 14:40:30 64.229.158.172:4146 -> xxx.yyy.245.184:1433 SYN ******S* 
Dec 12 14:40:30 64.229.158.172:4147 -> xxx.yyy.245.185:1433 SYN ******S* 
Dec 12 14:40:30 64.229.158.172:4154 -> xxx.yyy.245.186:1433 SYN ******S* 
82442

Dec 12 00:09:54 219.162.222.188:4821 -> xxx.yyy.64.0:1433 SYN ******S* 
Dec 12 00:09:51 219.162.222.188:4824 -> xxx.yyy.64.1:1433 SYN ******S* 
Dec 12 00:09:51 219.162.222.188:4825 -> xxx.yyy.64.2:1433 SYN ******S* 
Dec 12 00:09:51 219.162.222.188:4826 -> xxx.yyy.64.3:1433 SYN ******S* 
Dec 12 00:09:54 219.162.222.188:4827 -> xxx.yyy.64.4:1433 SYN ******S* 
Dec 12 00:09:54 219.162.222.188:4834 -> xxx.yyy.64.6:1433 SYN ******S* 
Dec 12 00:09:54 219.162.222.188:4844 -> xxx.yyy.64.9:1433 SYN ******S* 
Dec 12 00:09:54 219.162.222.188:4845 -> xxx.yyy.64.10:1433 SYN ******S* 
[...]
Dec 12 01:36:08 219.162.222.188:1967 -> xxx.yyy.255.247:1433 SYN ******S* 
Dec 12 01:36:08 219.162.222.188:1966 -> xxx.yyy.255.246:1433 SYN ******S* 
Dec 12 01:36:08 219.162.222.188:1977 -> xxx.yyy.255.252:1433 SYN ******S* 
Dec 12 01:36:08 219.162.222.188:1974 -> xxx.yyy.255.250:1433 SYN ******S* 
Dec 12 01:36:08 219.162.222.188:1973 -> xxx.yyy.255.249:1433 SYN ******S* 
Dec 12 01:36:08 219.162.222.188:1969 -> xxx.yyy.255.248:1433 SYN ******S* 
Dec 12 01:36:08 219.162.222.188:1975 -> xxx.yyy.255.251:1433 SYN ******S* 
Dec 12 01:36:08 219.162.222.188:1989 -> xxx.yyy.255.253:1433 SYN ******S* 
Dec 12 01:36:08 219.162.222.188:1997 -> xxx.yyy.255.254:1433 SYN ******S* 
80237

Dec 12 12:15:25 4.5.250.215:1280 -> xxx.yyy.1.4:1433 SYN ******S* 
Dec 12 12:15:22 4.5.250.215:1282 -> xxx.yyy.1.6:1433 SYN ******S* 
Dec 12 12:15:25 4.5.250.215:1283 -> xxx.yyy.1.7:1433 SYN ******S* 
Dec 12 12:15:25 4.5.250.215:1285 -> xxx.yyy.1.8:1433 SYN ******S* 
Dec 12 12:15:22 4.5.250.215:1287 -> xxx.yyy.1.9:1433 SYN ******S* 
Dec 12 12:15:25 4.5.250.215:1290 -> xxx.yyy.1.11:1433 SYN ******S* 
Dec 12 12:15:25 4.5.250.215:1292 -> xxx.yyy.1.12:1433 SYN ******S* 
Dec 12 12:15:25 4.5.250.215:1293 -> xxx.yyy.1.13:1433 SYN ******S* 
[...]
Dec 12 14:09:41 4.5.250.215:3766 -> xxx.yyy.255.238:1433 SYN ******S* 
Dec 12 14:09:42 4.5.250.215:3801 -> xxx.yyy.255.243:1433 SYN ******S* 
Dec 12 14:09:42 4.5.250.215:3806 -> xxx.yyy.255.246:1433 SYN ******S* 
Dec 12 14:09:42 4.5.250.215:3811 -> xxx.yyy.255.249:1433 SYN ******S* 
Dec 12 14:09:42 4.5.250.215:3808 -> xxx.yyy.255.248:1433 SYN ******S* 
Dec 12 14:09:42 4.5.250.215:3807 -> xxx.yyy.255.247:1433 SYN ******S* 
Dec 12 14:09:42 4.5.250.215:3822 -> xxx.yyy.255.252:1433 SYN ******S* 
Dec 12 14:09:42 4.5.250.215:3820 -> xxx.yyy.255.251:1433 SYN ******S* 
Dec 12 14:09:42 4.5.250.215:3828 -> xxx.yyy.255.253:1433 SYN ******S* 
79996

Dec 12 10:39:10 80.171.79.22:3815 -> xxx.yyy.1.1:139 SYN ******S* 
Dec 12 10:39:10 80.171.79.22:3816 -> xxx.yyy.1.2:139 SYN ******S* 
Dec 12 10:39:10 80.171.79.22:3817 -> xxx.yyy.1.3:139 SYN ******S* 
Dec 12 10:39:10 80.171.79.22:3819 -> xxx.yyy.1.5:139 SYN ******S* 
Dec 12 10:39:10 80.171.79.22:3820 -> xxx.yyy.1.6:139 SYN ******S* 
Dec 12 10:39:10 80.171.79.22:3821 -> xxx.yyy.1.7:139 SYN ******S* 
Dec 12 10:39:10 80.171.79.22:3822 -> xxx.yyy.1.8:139 SYN ******S* 
Dec 12 10:39:10 80.171.79.22:3823 -> xxx.yyy.1.9:139 SYN ******S* 
[...]
Dec 12 10:50:49 80.171.79.22:3633 -> xxx.yyy.255.243:139 SYN ******S* 
Dec 12 10:50:49 80.171.79.22:3635 -> xxx.yyy.255.245:139 SYN ******S* 
Dec 12 10:50:49 80.171.79.22:3636 -> xxx.yyy.255.246:139 SYN ******S* 
Dec 12 10:50:49 80.171.79.22:3649 -> xxx.yyy.255.249:139 SYN ******S* 
Dec 12 10:50:49 80.171.79.22:3650 -> xxx.yyy.255.250:139 SYN ******S* 
Dec 12 10:50:49 80.171.79.22:3651 -> xxx.yyy.255.251:139 SYN ******S* 
Dec 12 10:50:49 80.171.79.22:3652 -> xxx.yyy.255.252:139 SYN ******S* 
Dec 12 10:50:49 80.171.79.22:3653 -> xxx.yyy.255.253:139 SYN ******S* 
Dec 12 10:50:49 80.171.79.22:3654 -> xxx.yyy.255.254:139 SYN ******S* 
65206

Dec 12 03:39:14 206.13.56.94:2848 -> xxx.yyy.1.58:1433 SYN ******S* 
Dec 12 03:39:14 206.13.56.94:2865 -> xxx.yyy.1.56:1433 SYN ******S* 
Dec 12 03:39:14 206.13.56.94:2873 -> xxx.yyy.1.55:1433 SYN ******S* 
Dec 12 03:39:14 206.13.56.94:2876 -> xxx.yyy.1.3:1433 SYN ******S* 
Dec 12 03:39:11 206.13.56.94:2882 -> xxx.yyy.1.54:1433 SYN ******S* 
Dec 12 03:39:14 206.13.56.94:2891 -> xxx.yyy.1.53:1433 SYN ******S* 
Dec 12 03:39:11 206.13.56.94:2899 -> xxx.yyy.1.52:1433 SYN ******S* 
Dec 12 03:39:14 206.13.56.94:2906 -> xxx.yyy.1.51:1433 SYN ******S* 
[...]
Dec 12 04:01:31 206.13.56.94:2296 -> xxx.yyy.255.242:1433 SYN ******S* 
Dec 12 04:01:31 206.13.56.94:2297 -> xxx.yyy.255.243:1433 SYN ******S* 
Dec 12 04:01:31 206.13.56.94:2307 -> xxx.yyy.255.244:1433 SYN ******S* 
Dec 12 04:01:31 206.13.56.94:2315 -> xxx.yyy.255.245:1433 SYN ******S* 
Dec 12 04:01:31 206.13.56.94:2323 -> xxx.yyy.255.246:1433 SYN ******S* 
Dec 12 04:01:31 206.13.56.94:2574 -> xxx.yyy.255.251:1433 SYN ******S* 
Dec 12 04:01:31 206.13.56.94:2582 -> xxx.yyy.255.252:1433 SYN ******S* 
Dec 12 04:01:31 206.13.56.94:2590 -> xxx.yyy.255.253:1433 SYN ******S* 
64593

Dec 12 11:05:51 143.107.193.64:3546 -> xxx.yyy.1.1:1433 SYN ******S* 
Dec 12 11:05:51 143.107.193.64:3547 -> xxx.yyy.1.2:1433 SYN ******S* 
Dec 12 11:05:51 143.107.193.64:3548 -> xxx.yyy.1.3:1433 SYN ******S* 
Dec 12 11:05:51 143.107.193.64:3550 -> xxx.yyy.1.5:1433 SYN ******S* 
Dec 12 11:05:51 143.107.193.64:3551 -> xxx.yyy.1.6:1433 SYN ******S* 
Dec 12 11:05:51 143.107.193.64:3553 -> xxx.yyy.1.8:1433 SYN ******S* 
Dec 12 11:05:51 143.107.193.64:3554 -> xxx.yyy.1.9:1433 SYN ******S* 
Dec 12 11:05:51 143.107.193.64:3555 -> xxx.yyy.1.10:1433 SYN ******S* 
[...]
Dec 12 11:16:43 143.107.193.64:2651 -> xxx.yyy.255.194:1433 SYN ******S* 
Dec 12 11:16:43 143.107.193.64:2652 -> xxx.yyy.255.195:1433 SYN ******S* 
Dec 12 11:16:43 143.107.193.64:2649 -> xxx.yyy.255.192:1433 SYN ******S* 
Dec 12 11:16:43 143.107.193.64:2655 -> xxx.yyy.255.198:1433 SYN ******S* 
Dec 12 11:16:43 143.107.193.64:2653 -> xxx.yyy.255.196:1433 SYN ******S* 
Dec 12 11:16:43 143.107.193.64:2650 -> xxx.yyy.255.193:1433 SYN ******S* 
Dec 12 11:16:43 143.107.193.64:2647 -> xxx.yyy.255.190:1433 SYN ******S* 
Dec 12 11:16:44 143.107.193.64:2707 -> xxx.yyy.255.250:1433 SYN ******S* 
64426

Dec 12 00:25:16 211.239.150.168:19212 -> xxx.yyy.1.1:4899 SYN ******S* 
Dec 12 00:25:16 211.239.150.168:19213 -> xxx.yyy.1.2:4899 SYN ******S* 
Dec 12 00:25:17 211.239.150.168:19214 -> xxx.yyy.1.3:4899 SYN ******S* 
Dec 12 00:25:15 211.239.150.168:19215 -> xxx.yyy.1.4:4899 SYN ******S* 
Dec 12 00:25:18 211.239.150.168:19216 -> xxx.yyy.1.5:4899 SYN ******S* 
Dec 12 00:25:18 211.239.150.168:19217 -> xxx.yyy.1.6:4899 SYN ******S* 
Dec 12 00:25:15 211.239.150.168:19218 -> xxx.yyy.1.7:4899 SYN ******S* 
Dec 12 00:25:15 211.239.150.168:19219 -> xxx.yyy.1.8:4899 SYN ******S* 
[...]
Dec 12 00:37:37 211.239.150.168:21755 -> xxx.yyy.255.231:4899 SYN ******S* 
Dec 12 00:37:37 211.239.150.168:21759 -> xxx.yyy.255.235:4899 SYN ******S* 
Dec 12 00:37:37 211.239.150.168:21775 -> xxx.yyy.255.251:4899 SYN ******S* 
Dec 12 00:37:37 211.239.150.168:21771 -> xxx.yyy.255.247:4899 SYN ******S* 
Dec 12 00:37:37 211.239.150.168:21753 -> xxx.yyy.255.229:4899 SYN ******S* 
Dec 12 00:37:37 211.239.150.168:21740 -> xxx.yyy.255.216:4899 SYN ******S* 
Dec 12 00:37:37 211.239.150.168:21736 -> xxx.yyy.255.212:4899 SYN ******S* 
Dec 12 00:37:37 211.239.150.168:21743 -> xxx.yyy.255.219:4899 SYN ******S* 
60231

Dec 12 10:44:39 193.147.116.117:2763 -> xxx.yyy.1.1:1433 SYN ******S* 
Dec 12 10:44:39 193.147.116.117:2764 -> xxx.yyy.1.2:1433 SYN ******S* 
Dec 12 10:44:39 193.147.116.117:2765 -> xxx.yyy.1.3:1433 SYN ******S* 
Dec 12 10:44:39 193.147.116.117:2766 -> xxx.yyy.1.4:1433 SYN ******S* 
Dec 12 10:44:39 193.147.116.117:2767 -> xxx.yyy.1.5:1433 SYN ******S* 
Dec 12 10:44:39 193.147.116.117:2768 -> xxx.yyy.1.6:1433 SYN ******S* 
Dec 12 10:44:39 193.147.116.117:2769 -> xxx.yyy.1.7:1433 SYN ******S* 
Dec 12 10:44:39 193.147.116.117:2770 -> xxx.yyy.1.8:1433 SYN ******S* 
[...]
Dec 12 11:01:38 193.147.116.117:3807 -> xxx.yyy.255.233:1433 SYN ******S* 
Dec 12 11:01:38 193.147.116.117:3810 -> xxx.yyy.255.236:1433 SYN ******S* 
Dec 12 11:01:38 193.147.116.117:3811 -> xxx.yyy.255.237:1433 SYN ******S* 
Dec 12 11:01:38 193.147.116.117:3813 -> xxx.yyy.255.239:1433 SYN ******S* 
Dec 12 11:01:38 193.147.116.117:3812 -> xxx.yyy.255.238:1433 SYN ******S* 
Dec 12 11:01:38 193.147.116.117:3814 -> xxx.yyy.255.240:1433 SYN ******S* 
Dec 12 11:01:38 193.147.116.117:3815 -> xxx.yyy.255.241:1433 SYN ******S* 
Dec 12 11:01:38 193.147.116.117:3816 -> xxx.yyy.255.242:1433 SYN ******S* 
Dec 12 11:01:38 193.147.116.117:3817 -> xxx.yyy.255.243:1433 SYN ******S* 
59302

Dec 12 06:32:52 220.173.191.112:3877 -> xxx.yyy.1.1:4899 SYN ******S* 
Dec 12 06:32:53 220.173.191.112:3883 -> xxx.yyy.1.7:4899 SYN ******S* 
Dec 12 06:32:50 220.173.191.112:3878 -> xxx.yyy.1.2:4899 SYN ******S* 
Dec 12 06:32:50 220.173.191.112:3884 -> xxx.yyy.1.8:4899 SYN ******S* 
Dec 12 06:32:50 220.173.191.112:3879 -> xxx.yyy.1.3:4899 SYN ******S* 
Dec 12 06:32:53 220.173.191.112:3881 -> xxx.yyy.1.5:4899 SYN ******S* 
Dec 12 06:32:52 220.173.191.112:3888 -> xxx.yyy.1.11:4899 SYN ******S* 
Dec 12 06:32:53 220.173.191.112:3889 -> xxx.yyy.1.12:4899 SYN ******S* 
[...]
Dec 12 06:42:09 220.173.191.112:4024 -> xxx.yyy.255.249:4899 SYN ******S* 
Dec 12 06:42:09 220.173.191.112:4021 -> xxx.yyy.255.246:4899 SYN ******S* 
Dec 12 06:42:09 220.173.191.112:4015 -> xxx.yyy.255.240:4899 SYN ******S* 
Dec 12 06:42:09 220.173.191.112:4011 -> xxx.yyy.255.237:4899 SYN ******S* 
Dec 12 06:42:09 220.173.191.112:4025 -> xxx.yyy.255.250:4899 SYN ******S* 
Dec 12 06:42:09 220.173.191.112:4019 -> xxx.yyy.255.244:4899 SYN ******S* 
Dec 12 06:42:09 220.173.191.112:4012 -> xxx.yyy.255.238:4899 SYN ******S* 
Dec 12 06:42:09 220.173.191.112:4009 -> xxx.yyy.255.235:4899 SYN ******S* 
Dec 12 06:42:09 220.173.191.112:4029 -> xxx.yyy.255.254:4899 SYN ******S* 
51259

Dec 12 06:31:49 203.231.30.62:3450 -> xxx.yyy.1.1:4899 SYN ******S* 
Dec 12 06:31:49 203.231.30.62:3451 -> xxx.yyy.1.2:4899 SYN ******S* 
Dec 12 06:31:49 203.231.30.62:3452 -> xxx.yyy.1.3:4899 SYN ******S* 
Dec 12 06:31:47 203.231.30.62:3453 -> xxx.yyy.1.4:4899 SYN ******S* 
Dec 12 06:31:47 203.231.30.62:3454 -> xxx.yyy.1.5:4899 SYN ******S* 
Dec 12 06:31:47 203.231.30.62:3455 -> xxx.yyy.1.6:4899 SYN ******S* 
Dec 12 06:31:47 203.231.30.62:3456 -> xxx.yyy.1.7:4899 SYN ******S* 
Dec 12 06:31:47 203.231.30.62:3457 -> xxx.yyy.1.8:4899 SYN ******S* 
[...]
Dec 12 06:41:03 203.231.30.62:4453 -> xxx.yyy.255.245:4899 SYN ******S* 
Dec 12 06:41:03 203.231.30.62:4454 -> xxx.yyy.255.246:4899 SYN ******S* 
Dec 12 06:41:03 203.231.30.62:4455 -> xxx.yyy.255.247:4899 SYN ******S* 
Dec 12 06:41:03 203.231.30.62:4456 -> xxx.yyy.255.248:4899 SYN ******S* 
Dec 12 06:41:03 203.231.30.62:4457 -> xxx.yyy.255.249:4899 SYN ******S* 
Dec 12 06:41:03 203.231.30.62:4458 -> xxx.yyy.255.250:4899 SYN ******S* 
Dec 12 06:41:03 203.231.30.62:4459 -> xxx.yyy.255.251:4899 SYN ******S* 
Dec 12 06:41:03 203.231.30.62:4460 -> xxx.yyy.255.252:4899 SYN ******S* 
Dec 12 06:41:03 203.231.30.62:4461 -> xxx.yyy.255.253:4899 SYN ******S* 
47253

Dec 12 06:47:12 69.177.253.76:3687 -> xxx.yyy.1.1:4899 SYN ******S* 
Dec 12 06:47:12 69.177.253.76:3688 -> xxx.yyy.1.2:4899 SYN ******S* 
Dec 12 06:47:12 69.177.253.76:3689 -> xxx.yyy.1.3:4899 SYN ******S* 
Dec 12 06:47:10 69.177.253.76:3690 -> xxx.yyy.1.4:4899 SYN ******S* 
Dec 12 06:47:10 69.177.253.76:3691 -> xxx.yyy.1.5:4899 SYN ******S* 
Dec 12 06:47:10 69.177.253.76:3694 -> xxx.yyy.1.6:4899 SYN ******S* 
Dec 12 06:47:10 69.177.253.76:3695 -> xxx.yyy.1.7:4899 SYN ******S* 
Dec 12 06:47:10 69.177.253.76:3696 -> xxx.yyy.1.8:4899 SYN ******S* 
[...]
Dec 12 06:56:57 69.177.253.76:3375 -> xxx.yyy.255.245:4899 SYN ******S* 
Dec 12 06:56:57 69.177.253.76:3379 -> xxx.yyy.255.246:4899 SYN ******S* 
Dec 12 06:56:57 69.177.253.76:3380 -> xxx.yyy.255.247:4899 SYN ******S* 
Dec 12 06:56:57 69.177.253.76:3381 -> xxx.yyy.255.248:4899 SYN ******S* 
Dec 12 06:56:57 69.177.253.76:3384 -> xxx.yyy.255.249:4899 SYN ******S* 
Dec 12 06:56:57 69.177.253.76:3386 -> xxx.yyy.255.251:4899 SYN ******S* 
Dec 12 06:56:57 69.177.253.76:3390 -> xxx.yyy.255.252:4899 SYN ******S* 
Dec 12 06:56:57 69.177.253.76:3391 -> xxx.yyy.255.253:4899 SYN ******S* 
Dec 12 06:56:57 69.177.253.76:3396 -> xxx.yyy.255.254:4899 SYN ******S* 
45089

Dec 12 00:00:08 222.47.85.184:3432 -> xxx.yyy.87.51:1433 SYN ******S* 
Dec 12 00:00:05 222.47.85.184:3220 -> xxx.yyy.87.32:1433 SYN ******S* 
Dec 12 00:00:05 222.47.85.184:3232 -> xxx.yyy.87.33:1433 SYN ******S* 
Dec 12 00:00:08 222.47.85.184:3447 -> xxx.yyy.87.52:1433 SYN ******S* 
Dec 12 00:00:05 222.47.85.184:3236 -> xxx.yyy.87.34:1433 SYN ******S* 
Dec 12 00:00:05 222.47.85.184:3240 -> xxx.yyy.87.35:1433 SYN ******S* 
Dec 12 00:00:05 222.47.85.184:3245 -> xxx.yyy.87.36:1433 SYN ******S* 
Dec 12 00:00:08 222.47.85.184:3450 -> xxx.yyy.87.53:1433 SYN ******S* 
[...]
Dec 12 01:46:55 222.47.85.184:4115 -> xxx.yyy.255.237:1433 SYN ******S* 
Dec 12 01:46:55 222.47.85.184:3769 -> xxx.yyy.255.236:1433 SYN ******S* 
Dec 12 01:46:55 222.47.85.184:4362 -> xxx.yyy.255.242:1433 SYN ******S* 
Dec 12 01:46:55 222.47.85.184:4211 -> xxx.yyy.255.241:1433 SYN ******S* 
Dec 12 01:46:56 222.47.85.184:4358 -> xxx.yyy.255.245:1433 SYN ******S* 
Dec 12 01:46:56 222.47.85.184:3090 -> xxx.yyy.255.247:1433 SYN ******S* 
Dec 12 01:46:57 222.47.85.184:3588 -> xxx.yyy.255.249:1433 SYN ******S* 
Dec 12 01:46:57 222.47.85.184:3065 -> xxx.yyy.255.251:1433 SYN ******S* 
Dec 12 01:46:57 222.47.85.184:4392 -> xxx.yyy.255.253:1433 SYN ******S* 
42948

Dec 12 07:17:38 218.64.222.222:4991 -> xxx.yyy.1.2:4899 SYN ******S* 
Dec 12 07:17:35 218.64.222.222:4995 -> xxx.yyy.1.4:4899 SYN ******S* 
Dec 12 07:17:35 218.64.222.222:4999 -> xxx.yyy.1.5:4899 SYN ******S* 
Dec 12 07:17:35 218.64.222.222:3006 -> xxx.yyy.1.6:4899 SYN ******S* 
Dec 12 07:17:35 218.64.222.222:3007 -> xxx.yyy.1.7:4899 SYN ******S* 
Dec 12 07:17:35 218.64.222.222:3011 -> xxx.yyy.1.8:4899 SYN ******S* 
Dec 12 07:17:35 218.64.222.222:3013 -> xxx.yyy.1.9:4899 SYN ******S* 
Dec 12 07:17:35 218.64.222.222:3014 -> xxx.yyy.1.10:4899 SYN ******S* 
[...]
Dec 12 07:28:17 218.64.222.222:3329 -> xxx.yyy.255.75:4899 SYN ******S* 
Dec 12 07:28:17 218.64.222.222:3336 -> xxx.yyy.255.76:4899 SYN ******S* 
Dec 12 07:28:17 218.64.222.222:3337 -> xxx.yyy.255.77:4899 SYN ******S* 
Dec 12 07:28:17 218.64.222.222:3339 -> xxx.yyy.255.78:4899 SYN ******S* 
Dec 12 07:28:17 218.64.222.222:3340 -> xxx.yyy.255.79:4899 SYN ******S* 
Dec 12 07:28:17 218.64.222.222:3342 -> xxx.yyy.255.80:4899 SYN ******S* 
Dec 12 07:28:17 218.64.222.222:3353 -> xxx.yyy.255.81:4899 SYN ******S* 
Dec 12 07:28:17 218.64.222.222:3354 -> xxx.yyy.255.82:4899 SYN ******S* 
Dec 12 07:28:17 218.64.222.222:3355 -> xxx.yyy.255.83:4899 SYN ******S* 
41893

Dec 12 13:58:35 66.244.219.29:3464 -> xxx.yyy.1.1:1433 SYN ******S* 
Dec 12 13:58:32 66.244.219.29:3474 -> xxx.yyy.1.6:1433 SYN ******S* 
Dec 12 13:58:35 66.244.219.29:3478 -> xxx.yyy.1.8:1433 SYN ******S* 
Dec 12 13:58:35 66.244.219.29:3482 -> xxx.yyy.1.10:1433 SYN ******S* 
Dec 12 13:58:32 66.244.219.29:3496 -> xxx.yyy.1.17:1433 SYN ******S* 
Dec 12 13:58:32 66.244.219.29:3498 -> xxx.yyy.1.18:1433 SYN ******S* 
Dec 12 13:58:32 66.244.219.29:3508 -> xxx.yyy.1.23:1433 SYN ******S* 
Dec 12 13:58:32 66.244.219.29:3512 -> xxx.yyy.1.25:1433 SYN ******S* 
[...]
Dec 12 14:10:15 66.244.219.29:3742 -> xxx.yyy.255.226:1433 SYN ******S* 
Dec 12 14:10:15 66.244.219.29:3732 -> xxx.yyy.255.221:1433 SYN ******S* 
Dec 12 14:10:15 66.244.219.29:3738 -> xxx.yyy.255.224:1433 SYN ******S* 
Dec 12 14:10:15 66.244.219.29:3754 -> xxx.yyy.255.232:1433 SYN ******S* 
Dec 12 14:10:15 66.244.219.29:3760 -> xxx.yyy.255.235:1433 SYN ******S* 
Dec 12 14:10:15 66.244.219.29:3750 -> xxx.yyy.255.230:1433 SYN ******S* 
Dec 12 14:10:15 66.244.219.29:3772 -> xxx.yyy.255.241:1433 SYN ******S* 
Dec 12 14:10:15 66.244.219.29:3766 -> xxx.yyy.255.238:1433 SYN ******S* 
Dec 12 14:10:16 66.244.219.29:3794 -> xxx.yyy.255.252:1433 SYN ******S* 
41041

Dec 12 06:44:21 218.2.93.6:2439 -> xxx.yyy.1.2:1433 SYN ******S* 
Dec 12 06:44:19 218.2.93.6:2397 -> xxx.yyy.1.0:1433 SYN ******S* 
Dec 12 06:44:24 218.2.93.6:2547 -> xxx.yyy.1.11:1433 SYN ******S* 
Dec 12 06:44:24 218.2.93.6:2551 -> xxx.yyy.1.13:1433 SYN ******S* 
Dec 12 06:44:24 218.2.93.6:2472 -> xxx.yyy.1.6:1433 SYN ******S* 
Dec 12 06:44:22 218.2.93.6:3167 -> xxx.yyy.1.43:1433 SYN ******S* 
Dec 12 06:44:23 218.2.93.6:3156 -> xxx.yyy.1.35:1433 SYN ******S* 
Dec 12 06:44:23 218.2.93.6:3163 -> xxx.yyy.1.39:1433 SYN ******S* 
[...]
Dec 12 09:04:54 218.2.93.6:3773 -> xxx.yyy.145.73:1433 SYN ******S* 
Dec 12 09:04:55 218.2.93.6:3774 -> xxx.yyy.145.74:1433 SYN ******S* 
Dec 12 09:04:55 218.2.93.6:3933 -> xxx.yyy.145.76:1433 SYN ******S* 
Dec 12 09:04:55 218.2.93.6:3924 -> xxx.yyy.145.75:1433 SYN ******S* 
Dec 12 09:04:55 218.2.93.6:3942 -> xxx.yyy.145.77:1433 SYN ******S* 
Dec 12 09:04:55 218.2.93.6:3958 -> xxx.yyy.145.78:1433 SYN ******S* 
Dec 12 09:04:55 218.2.93.6:3963 -> xxx.yyy.145.79:1433 SYN ******S* 
Dec 12 09:04:55 218.2.93.6:3966 -> xxx.yyy.145.81:1433 SYN ******S* 
Dec 12 09:04:55 218.2.93.6:3965 -> xxx.yyy.145.80:1433 SYN ******S* 
41032

Dec 12 08:32:49 216.100.14.177:32459 -> xxx.yyy.1.1:4899 SYN ******S* 
Dec 12 08:32:49 216.100.14.177:32460 -> xxx.yyy.1.2:4899 SYN ******S* 
Dec 12 08:32:47 216.100.14.177:32462 -> xxx.yyy.1.4:4899 SYN ******S* 
Dec 12 08:32:47 216.100.14.177:32463 -> xxx.yyy.1.5:4899 SYN ******S* 
Dec 12 08:32:47 216.100.14.177:32465 -> xxx.yyy.1.6:4899 SYN ******S* 
Dec 12 08:32:47 216.100.14.177:32466 -> xxx.yyy.1.7:4899 SYN ******S* 
Dec 12 08:32:47 216.100.14.177:32467 -> xxx.yyy.1.8:4899 SYN ******S* 
Dec 12 08:32:47 216.100.14.177:32468 -> xxx.yyy.1.9:4899 SYN ******S* 
[...]
Dec 12 08:36:37 216.100.14.177:55491 -> xxx.yyy.252.198:4899 SYN ******S* 
Dec 12 08:36:37 216.100.14.177:55493 -> xxx.yyy.252.199:4899 SYN ******S* 
Dec 12 08:36:37 216.100.14.177:55494 -> xxx.yyy.252.200:4899 SYN ******S* 
Dec 12 08:36:37 216.100.14.177:55495 -> xxx.yyy.252.201:4899 SYN ******S* 
Dec 12 08:36:37 216.100.14.177:55498 -> xxx.yyy.252.204:4899 SYN ******S* 
Dec 12 08:36:37 216.100.14.177:55502 -> xxx.yyy.252.206:4899 SYN ******S* 
Dec 12 08:36:37 216.100.14.177:55503 -> xxx.yyy.252.207:4899 SYN ******S* 
Dec 12 08:36:37 216.100.14.177:55504 -> xxx.yyy.252.208:4899 SYN ******S* 
Dec 12 08:36:37 216.100.14.177:55505 -> xxx.yyy.252.209:4899 SYN ******S* 
39751

Dec 12 00:21:26 200.153.105.3:2638 -> xxx.yyy.1.1:1433 SYN ******S* 
Dec 12 00:21:29 200.153.105.3:2639 -> xxx.yyy.1.2:1433 SYN ******S* 
Dec 12 00:21:26 200.153.105.3:2640 -> xxx.yyy.1.3:1433 SYN ******S* 
Dec 12 00:21:26 200.153.105.3:2641 -> xxx.yyy.1.4:1433 SYN ******S* 
Dec 12 00:21:29 200.153.105.3:2642 -> xxx.yyy.1.5:1433 SYN ******S* 
Dec 12 00:21:29 200.153.105.3:2643 -> xxx.yyy.1.6:1433 SYN ******S* 
Dec 12 00:21:26 200.153.105.3:2644 -> xxx.yyy.1.7:1433 SYN ******S* 
Dec 12 00:21:29 200.153.105.3:2645 -> xxx.yyy.1.8:1433 SYN ******S* 
[...]
Dec 12 01:01:05 200.153.105.3:3799 -> xxx.yyy.255.201:1433 SYN ******S* 
Dec 12 01:01:05 200.153.105.3:3773 -> xxx.yyy.255.176:1433 SYN ******S* 
Dec 12 01:01:05 200.153.105.3:3832 -> xxx.yyy.255.230:1433 SYN ******S* 
Dec 12 01:01:05 200.153.105.3:3857 -> xxx.yyy.255.252:1433 SYN ******S* 
Dec 12 01:01:05 200.153.105.3:3821 -> xxx.yyy.255.221:1433 SYN ******S* 
Dec 12 01:01:05 200.153.105.3:3829 -> xxx.yyy.255.227:1433 SYN ******S* 
Dec 12 01:01:05 200.153.105.3:3854 -> xxx.yyy.255.249:1433 SYN ******S* 
Dec 12 01:01:05 200.153.105.3:3846 -> xxx.yyy.255.243:1433 SYN ******S* 
Dec 12 01:01:05 200.153.105.3:3826 -> xxx.yyy.255.224:1433 SYN ******S* 
37703

[...]
30633

Dec 12 08:18:13 82.127.152.252:4550 -> xxx.yyy.1.0:1433 SYN ******S* 
Dec 12 08:18:13 82.127.152.252:4553 -> xxx.yyy.1.1:1433 SYN ******S* 
Dec 12 08:18:13 82.127.152.252:4555 -> xxx.yyy.1.2:1433 SYN ******S* 
Dec 12 08:18:13 82.127.152.252:4556 -> xxx.yyy.1.3:1433 SYN ******S* 
Dec 12 08:18:13 82.127.152.252:4557 -> xxx.yyy.1.4:1433 SYN ******S* 
Dec 12 08:18:13 82.127.152.252:4558 -> xxx.yyy.1.5:1433 SYN ******S* 
Dec 12 08:18:13 82.127.152.252:4559 -> xxx.yyy.1.6:1433 SYN ******S* 
Dec 12 08:18:13 82.127.152.252:4560 -> xxx.yyy.1.7:1433 SYN ******S* 
[...]
Dec 12 09:40:40 82.127.152.252:3116 -> xxx.yyy.91.208:1433 SYN ******S* 
Dec 12 09:40:40 82.127.152.252:3115 -> xxx.yyy.91.207:1433 SYN ******S* 
Dec 12 09:40:40 82.127.152.252:3113 -> xxx.yyy.91.206:1433 SYN ******S* 
Dec 12 09:40:40 82.127.152.252:3132 -> xxx.yyy.91.212:1433 SYN ******S* 
Dec 12 09:40:40 82.127.152.252:3130 -> xxx.yyy.91.211:1433 SYN ******S* 
Dec 12 09:40:40 82.127.152.252:3136 -> xxx.yyy.91.215:1433 SYN ******S* 
Dec 12 09:40:40 82.127.152.252:3135 -> xxx.yyy.91.214:1433 SYN ******S* 
Dec 12 09:40:40 82.127.152.252:3134 -> xxx.yyy.91.213:1433 SYN ******S* 
Dec 12 09:40:40 82.127.152.252:3142 -> xxx.yyy.91.216:1433 SYN ******S* 
28001

Dec 12 12:32:39 84.120.141.11:4728 -> xxx.yyy.1.0:1433 SYN ******S* 
Dec 12 12:32:39 84.120.141.11:4730 -> xxx.yyy.1.1:1433 SYN ******S* 
Dec 12 12:32:39 84.120.141.11:4736 -> xxx.yyy.1.3:1433 SYN ******S* 
Dec 12 12:32:39 84.120.141.11:4752 -> xxx.yyy.1.11:1433 SYN ******S* 
Dec 12 12:32:39 84.120.141.11:4757 -> xxx.yyy.1.14:1433 SYN ******S* 
Dec 12 12:32:42 84.120.141.11:4760 -> xxx.yyy.1.17:1433 SYN ******S* 
Dec 12 12:32:42 84.120.141.11:4761 -> xxx.yyy.1.18:1433 SYN ******S* 
Dec 12 12:32:39 84.120.141.11:4782 -> xxx.yyy.1.19:1433 SYN ******S* 
[...]
Dec 12 14:40:31 84.120.141.11:1886 -> xxx.yyy.143.152:1433 SYN ******S* 
Dec 12 14:40:31 84.120.141.11:1893 -> xxx.yyy.143.153:1433 SYN ******S* 
Dec 12 14:40:31 84.120.141.11:1895 -> xxx.yyy.143.154:1433 SYN ******S* 
Dec 12 14:40:31 84.120.141.11:1899 -> xxx.yyy.143.156:1433 SYN ******S* 
Dec 12 14:40:31 84.120.141.11:1901 -> xxx.yyy.143.157:1433 SYN ******S* 
Dec 12 14:40:32 84.120.141.11:1987 -> xxx.yyy.143.160:1433 SYN ******S* 
Dec 12 14:40:32 84.120.141.11:2220 -> xxx.yyy.143.193:1433 SYN ******S* 
Dec 12 14:40:32 84.120.141.11:2037 -> xxx.yyy.143.167:1433 SYN ******S* 
Dec 12 14:40:32 84.120.141.11:2039 -> xxx.yyy.143.168:1433 SYN ******S* 
27199

Dec 12 09:03:31 218.18.195.97:25784 -> xxx.yyy.1.0:1433 SYN ******S* 
Dec 12 09:03:34 218.18.195.97:25787 -> xxx.yyy.1.3:1433 SYN ******S* 
Dec 12 09:03:34 218.18.195.97:25786 -> xxx.yyy.1.2:1433 SYN ******S* 
Dec 12 09:03:34 218.18.195.97:25793 -> xxx.yyy.1.5:1433 SYN ******S* 
Dec 12 09:03:34 218.18.195.97:25792 -> xxx.yyy.1.4:1433 SYN ******S* 
Dec 12 09:03:34 218.18.195.97:25796 -> xxx.yyy.1.7:1433 SYN ******S* 
Dec 12 09:03:34 218.18.195.97:25795 -> xxx.yyy.1.6:1433 SYN ******S* 
Dec 12 09:03:34 218.18.195.97:25797 -> xxx.yyy.1.8:1433 SYN ******S* 
[...]
Dec 12 10:26:29 218.18.195.97:18846 -> xxx.yyy.93.29:1433 SYN ******S* 
Dec 12 10:26:29 218.18.195.97:18848 -> xxx.yyy.93.30:1433 SYN ******S* 
Dec 12 10:26:29 218.18.195.97:18854 -> xxx.yyy.93.35:1433 SYN ******S* 
Dec 12 10:26:29 218.18.195.97:18855 -> xxx.yyy.93.36:1433 SYN ******S* 
Dec 12 10:26:29 218.18.195.97:18853 -> xxx.yyy.93.34:1433 SYN ******S* 
Dec 12 10:26:30 218.18.195.97:18857 -> xxx.yyy.93.37:1433 SYN ******S* 
Dec 12 10:26:30 218.18.195.97:18860 -> xxx.yyy.93.40:1433 SYN ******S* 
Dec 12 10:26:30 218.18.195.97:18862 -> xxx.yyy.93.41:1433 SYN ******S* 
Dec 12 10:26:30 218.18.195.97:18851 -> xxx.yyy.93.32:1433 SYN ******S* 
25654

[...]
21194

--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa                     Cedar Falls, IA  50614-0121
email: Ken.Connelly at uni.edu    phone: (319) 273-5850    fax: (319) 273-7373



More information about the Intrusions mailing list