[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Tue Dec 14 12:54:32 GMT 2004
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Dec 13 06:21:36 134.50.233.43:1504 -> xxx.yyy.1.1:4899 SYN ******S*
Dec 13 06:21:35 134.50.233.43:1505 -> xxx.yyy.1.2:4899 SYN ******S*
Dec 13 06:21:36 134.50.233.43:1506 -> xxx.yyy.1.3:4899 SYN ******S*
Dec 13 06:21:38 134.50.233.43:1507 -> xxx.yyy.1.4:4899 SYN ******S*
Dec 13 06:21:38 134.50.233.43:1508 -> xxx.yyy.1.5:4899 SYN ******S*
Dec 13 06:21:38 134.50.233.43:1509 -> xxx.yyy.1.6:4899 SYN ******S*
Dec 13 06:21:38 134.50.233.43:1510 -> xxx.yyy.1.7:4899 SYN ******S*
Dec 13 06:21:38 134.50.233.43:1511 -> xxx.yyy.1.8:4899 SYN ******S*
[...]
Dec 13 06:53:07 134.50.233.43:4453 -> xxx.yyy.255.239:4899 SYN ******S*
Dec 13 06:53:07 134.50.233.43:4497 -> xxx.yyy.255.248:4899 SYN ******S*
Dec 13 06:53:07 134.50.233.43:4485 -> xxx.yyy.255.247:4899 SYN ******S*
Dec 13 06:53:07 134.50.233.43:4413 -> xxx.yyy.255.225:4899 SYN ******S*
Dec 13 06:53:07 134.50.233.43:4429 -> xxx.yyy.255.233:4899 SYN ******S*
Dec 13 06:53:07 134.50.233.43:4505 -> xxx.yyy.255.254:4899 SYN ******S*
Dec 13 06:53:07 134.50.233.43:4426 -> xxx.yyy.255.230:4899 SYN ******S*
Dec 13 06:53:07 134.50.233.43:4482 -> xxx.yyy.255.244:4899 SYN ******S*
Dec 13 06:53:07 134.50.233.43:4449 -> xxx.yyy.255.237:4899 SYN ******S*
102952
Dec 13 07:08:58 61.70.197.9:3027 -> xxx.yyy.1.0:22 SYN ******S*
Dec 13 07:08:58 61.70.197.9:3028 -> xxx.yyy.1.1:22 SYN ******S*
Dec 13 07:08:58 61.70.197.9:3029 -> xxx.yyy.1.2:22 SYN ******S*
Dec 13 07:08:58 61.70.197.9:3030 -> xxx.yyy.1.3:22 SYN ******S*
Dec 13 07:09:01 61.70.197.9:3031 -> xxx.yyy.1.4:22 SYN ******S*
Dec 13 07:09:01 61.70.197.9:3032 -> xxx.yyy.1.5:22 SYN ******S*
Dec 13 07:09:01 61.70.197.9:3034 -> xxx.yyy.1.7:22 SYN ******S*
Dec 13 07:09:01 61.70.197.9:3035 -> xxx.yyy.1.8:22 SYN ******S*
[...]
Dec 13 07:45:51 61.70.197.9:2387 -> xxx.yyy.243.45:22 SYN ******S*
Dec 13 07:45:51 61.70.197.9:2397 -> xxx.yyy.32.51:22 SYN ******S*
Dec 13 07:45:57 61.70.197.9:3601 -> xxx.yyy.243.45:22 SYN ******S*
Dec 13 07:45:57 61.70.197.9:3701 -> xxx.yyy.32.51:22 SYN ******S*
Dec 13 07:46:02 61.70.197.9:4255 -> xxx.yyy.243.45:22 SYN ******S*
Dec 13 07:46:03 61.70.197.9:4669 -> xxx.yyy.32.51:22 SYN ******S*
Dec 13 07:46:09 61.70.197.9:2539 -> xxx.yyy.243.45:22 SYN ******S*
Dec 13 07:46:13 61.70.197.9:3251 -> xxx.yyy.32.51:22 SYN ******S*
Dec 13 07:46:14 61.70.197.9:3253 -> xxx.yyy.243.45:22 SYN ******S*
83643
Dec 13 07:58:54 24.153.6.159:4659 -> xxx.yyy.1.0:80 SYN ******S*
Dec 13 07:58:54 24.153.6.159:4661 -> xxx.yyy.1.1:80 SYN ******S*
Dec 13 07:58:54 24.153.6.159:4662 -> xxx.yyy.1.2:80 SYN ******S*
Dec 13 07:58:54 24.153.6.159:4663 -> xxx.yyy.1.3:80 SYN ******S*
Dec 13 07:58:54 24.153.6.159:4664 -> xxx.yyy.1.4:80 SYN ******S*
Dec 13 07:58:54 24.153.6.159:4665 -> xxx.yyy.1.5:80 SYN ******S*
Dec 13 07:58:54 24.153.6.159:4666 -> xxx.yyy.1.6:80 SYN ******S*
Dec 13 07:58:54 24.153.6.159:4667 -> xxx.yyy.1.7:80 SYN ******S*
[...]
Dec 13 08:29:50 24.153.6.159:2939 -> xxx.yyy.254.247:80 SYN ******S*
Dec 13 08:29:50 24.153.6.159:2923 -> xxx.yyy.254.231:80 SYN ******S*
Dec 13 08:29:50 24.153.6.159:2891 -> xxx.yyy.254.199:80 SYN ******S*
Dec 13 08:29:50 24.153.6.159:2888 -> xxx.yyy.254.196:80 SYN ******S*
Dec 13 08:29:50 24.153.6.159:2904 -> xxx.yyy.254.212:80 SYN ******S*
Dec 13 08:29:50 24.153.6.159:2920 -> xxx.yyy.254.228:80 SYN ******S*
Dec 13 08:29:50 24.153.6.159:2945 -> xxx.yyy.254.252:80 SYN ******S*
Dec 13 08:29:50 24.153.6.159:2947 -> xxx.yyy.254.253:80 SYN ******S*
74477
Dec 13 01:47:30 195.94.8.48:2646 -> xxx.yyy.128.2:1433 SYN ******S*
Dec 13 01:47:30 195.94.8.48:2654 -> xxx.yyy.128.6:1433 SYN ******S*
Dec 13 01:47:30 195.94.8.48:2652 -> xxx.yyy.128.5:1433 SYN ******S*
Dec 13 01:47:30 195.94.8.48:2658 -> xxx.yyy.128.8:1433 SYN ******S*
Dec 13 01:47:30 195.94.8.48:2664 -> xxx.yyy.128.11:1433 SYN ******S*
Dec 13 01:47:30 195.94.8.48:2672 -> xxx.yyy.128.15:1433 SYN ******S*
Dec 13 01:47:30 195.94.8.48:2673 -> xxx.yyy.128.16:1433 SYN ******S*
Dec 13 01:47:30 195.94.8.48:2676 -> xxx.yyy.128.17:1433 SYN ******S*
[...]
Dec 13 02:45:27 195.94.8.48:2374 -> xxx.yyy.255.244:1433 SYN ******S*
Dec 13 02:45:27 195.94.8.48:2383 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 13 02:45:27 195.94.8.48:2380 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 13 02:45:27 195.94.8.48:2382 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 13 02:45:27 195.94.8.48:2385 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 13 02:45:27 195.94.8.48:2387 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 13 02:45:27 195.94.8.48:2389 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 13 02:45:27 195.94.8.48:2390 -> xxx.yyy.255.253:1433 SYN ******S*
Dec 13 02:45:27 195.94.8.48:2394 -> xxx.yyy.255.254:1433 SYN ******S*
73018
Dec 13 05:13:59 62.99.236.66:3243 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 13 05:13:59 62.99.236.66:3244 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 13 05:13:56 62.99.236.66:3245 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 13 05:13:59 62.99.236.66:3247 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 13 05:13:59 62.99.236.66:3248 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 13 05:13:59 62.99.236.66:3249 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 13 05:13:59 62.99.236.66:3250 -> xxx.yyy.1.8:1433 SYN ******S*
Dec 13 05:13:59 62.99.236.66:3251 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
Dec 13 05:25:39 62.99.236.66:3136 -> xxx.yyy.255.243:1433 SYN ******S*
Dec 13 05:25:39 62.99.236.66:3147 -> xxx.yyy.255.254:1433 SYN ******S*
Dec 13 05:25:39 62.99.236.66:3141 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 13 05:25:39 62.99.236.66:3142 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 13 05:25:39 62.99.236.66:3144 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 13 05:25:39 62.99.236.66:3145 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 13 05:25:39 62.99.236.66:3143 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 13 05:25:39 62.99.236.66:3146 -> xxx.yyy.255.253:1433 SYN ******S*
66661
Dec 13 07:59:36 67.32.27.41:4105 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 13 07:59:33 67.32.27.41:4106 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 13 07:59:33 67.32.27.41:4107 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 13 07:59:36 67.32.27.41:4108 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 13 07:59:33 67.32.27.41:4109 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 13 07:59:33 67.32.27.41:4110 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 13 07:59:33 67.32.27.41:4111 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 13 07:59:33 67.32.27.41:4112 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Dec 13 08:23:35 67.32.27.41:3829 -> xxx.yyy.255.214:1433 SYN ******S*
Dec 13 08:23:35 67.32.27.41:3826 -> xxx.yyy.255.211:1433 SYN ******S*
Dec 13 08:23:35 67.32.27.41:3823 -> xxx.yyy.255.208:1433 SYN ******S*
Dec 13 08:23:35 67.32.27.41:3833 -> xxx.yyy.255.218:1433 SYN ******S*
Dec 13 08:23:36 67.32.27.41:3846 -> xxx.yyy.255.231:1433 SYN ******S*
Dec 13 08:23:36 67.32.27.41:3841 -> xxx.yyy.255.226:1433 SYN ******S*
Dec 13 08:23:36 67.32.27.41:3845 -> xxx.yyy.255.230:1433 SYN ******S*
Dec 13 08:23:36 67.32.27.41:3842 -> xxx.yyy.255.227:1433 SYN ******S*
Dec 13 08:23:36 67.32.27.41:3861 -> xxx.yyy.255.246:1433 SYN ******S*
56128
Dec 13 01:40:48 69.211.38.17:43104 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 13 01:40:46 69.211.38.17:43108 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 13 01:40:46 69.211.38.17:43110 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 13 01:40:49 69.211.38.17:43112 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 13 01:40:46 69.211.38.17:43114 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 13 01:40:49 69.211.38.17:43120 -> xxx.yyy.1.9:1433 SYN ******S*
Dec 13 01:40:49 69.211.38.17:43126 -> xxx.yyy.1.12:1433 SYN ******S*
Dec 13 01:40:46 69.211.38.17:43128 -> xxx.yyy.1.13:1433 SYN ******S*
[...]
Dec 13 01:52:38 69.211.38.17:7593 -> xxx.yyy.255.235:1433 SYN ******S*
Dec 13 01:52:38 69.211.38.17:7595 -> xxx.yyy.255.236:1433 SYN ******S*
Dec 13 01:52:38 69.211.38.17:7599 -> xxx.yyy.255.238:1433 SYN ******S*
Dec 13 01:52:38 69.211.38.17:7601 -> xxx.yyy.255.239:1433 SYN ******S*
Dec 13 01:52:38 69.211.38.17:7609 -> xxx.yyy.255.243:1433 SYN ******S*
Dec 13 01:52:38 69.211.38.17:7619 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 13 01:52:38 69.211.38.17:7628 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 13 01:52:38 69.211.38.17:7630 -> xxx.yyy.255.253:1433 SYN ******S*
Dec 13 01:52:38 69.211.38.17:7632 -> xxx.yyy.255.254:1433 SYN ******S*
55133
Dec 13 02:59:49 82.74.137.199:3383 -> xxx.yyy.1.0:1433 SYN ******S*
Dec 13 02:59:49 82.74.137.199:3407 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 13 02:59:49 82.74.137.199:3423 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 13 02:59:49 82.74.137.199:3427 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 13 02:59:49 82.74.137.199:3429 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 13 02:59:49 82.74.137.199:3428 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 13 02:59:49 82.74.137.199:3452 -> xxx.yyy.1.11:1433 SYN ******S*
Dec 13 02:59:49 82.74.137.199:3450 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
Dec 13 05:41:37 82.74.137.199:2111 -> xxx.yyy.181.52:1433 SYN ******S*
Dec 13 05:41:37 82.74.137.199:2110 -> xxx.yyy.181.51:1433 SYN ******S*
Dec 13 05:41:37 82.74.137.199:2874 -> xxx.yyy.181.75:1433 SYN ******S*
Dec 13 05:41:37 82.74.137.199:2154 -> xxx.yyy.181.54:1433 SYN ******S*
Dec 13 05:41:37 82.74.137.199:2151 -> xxx.yyy.181.53:1433 SYN ******S*
Dec 13 05:41:38 82.74.137.199:2160 -> xxx.yyy.181.55:1433 SYN ******S*
Dec 13 05:41:38 82.74.137.199:2162 -> xxx.yyy.181.56:1433 SYN ******S*
Dec 13 05:41:38 82.74.137.199:2662 -> xxx.yyy.181.72:1433 SYN ******S*
Dec 13 05:41:38 82.74.137.199:2217 -> xxx.yyy.181.57:1433 SYN ******S*
51628
Dec 13 08:46:30 207.75.133.159:2284 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 13 08:46:30 207.75.133.159:2285 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 13 08:46:30 207.75.133.159:2286 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 13 08:46:30 207.75.133.159:2287 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 13 08:46:30 207.75.133.159:2288 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 13 08:46:30 207.75.133.159:2289 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 13 08:46:30 207.75.133.159:2290 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 13 08:46:30 207.75.133.159:2291 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Dec 13 09:34:58 207.75.133.159:1834 -> xxx.yyy.255.236:1433 SYN ******S*
Dec 13 09:34:58 207.75.133.159:1839 -> xxx.yyy.255.241:1433 SYN ******S*
Dec 13 09:34:58 207.75.133.159:1840 -> xxx.yyy.255.242:1433 SYN ******S*
Dec 13 09:34:58 207.75.133.159:1841 -> xxx.yyy.255.243:1433 SYN ******S*
Dec 13 09:34:58 207.75.133.159:1843 -> xxx.yyy.255.245:1433 SYN ******S*
Dec 13 09:34:58 207.75.133.159:1847 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 13 09:34:58 207.75.133.159:1848 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 13 09:34:58 207.75.133.159:1851 -> xxx.yyy.255.253:1433 SYN ******S*
51523
Dec 13 13:20:09 62.111.159.38:1982 -> xxx.yyy.1.0:1433 SYN ******S*
Dec 13 13:20:06 62.111.159.38:1983 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 13 13:20:09 62.111.159.38:1985 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 13 13:20:06 62.111.159.38:1986 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 13 13:20:06 62.111.159.38:1988 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 13 13:20:06 62.111.159.38:2001 -> xxx.yyy.1.14:1433 SYN ******S*
Dec 13 13:20:06 62.111.159.38:2002 -> xxx.yyy.1.15:1433 SYN ******S*
Dec 13 13:20:09 62.111.159.38:2003 -> xxx.yyy.1.16:1433 SYN ******S*
[...]
Dec 13 17:08:57 62.111.159.38:2552 -> xxx.yyy.255.242:1433 SYN ******S*
Dec 13 17:08:57 62.111.159.38:2553 -> xxx.yyy.255.243:1433 SYN ******S*
Dec 13 17:08:58 62.111.159.38:2573 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 13 17:08:58 62.111.159.38:2576 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 13 17:08:58 62.111.159.38:2579 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 13 17:08:58 62.111.159.38:2581 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 13 17:08:59 62.111.159.38:2590 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 13 17:08:59 62.111.159.38:2598 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 13 17:08:59 62.111.159.38:2601 -> xxx.yyy.255.253:1433 SYN ******S*
46304
Dec 13 07:04:11 218.238.254.14:1417 -> xxx.yyy.1.1:4899 SYN ******S*
Dec 13 07:04:11 218.238.254.14:1418 -> xxx.yyy.1.2:4899 SYN ******S*
Dec 13 07:04:10 218.238.254.14:1420 -> xxx.yyy.1.4:4899 SYN ******S*
Dec 13 07:04:10 218.238.254.14:1422 -> xxx.yyy.1.6:4899 SYN ******S*
Dec 13 07:04:11 218.238.254.14:1419 -> xxx.yyy.1.3:4899 SYN ******S*
Dec 13 07:04:10 218.238.254.14:1421 -> xxx.yyy.1.5:4899 SYN ******S*
Dec 13 07:04:10 218.238.254.14:1424 -> xxx.yyy.1.8:4899 SYN ******S*
Dec 13 07:04:10 218.238.254.14:1425 -> xxx.yyy.1.9:4899 SYN ******S*
[...]
Dec 13 07:14:15 218.238.254.14:4318 -> xxx.yyy.254.245:4899 SYN ******S*
Dec 13 07:14:15 218.238.254.14:4319 -> xxx.yyy.254.246:4899 SYN ******S*
Dec 13 07:14:15 218.238.254.14:4324 -> xxx.yyy.254.251:4899 SYN ******S*
Dec 13 07:14:15 218.238.254.14:4321 -> xxx.yyy.254.248:4899 SYN ******S*
Dec 13 07:14:15 218.238.254.14:4325 -> xxx.yyy.254.252:4899 SYN ******S*
Dec 13 07:14:15 218.238.254.14:4322 -> xxx.yyy.254.249:4899 SYN ******S*
Dec 13 07:14:15 218.238.254.14:4323 -> xxx.yyy.254.250:4899 SYN ******S*
Dec 13 07:14:16 218.238.254.14:4083 -> xxx.yyy.254.12:4899 SYN ******S*
43218
Dec 13 05:05:00 220.72.139.74:1688 -> xxx.yyy.1.18:4899 SYN ******S*
Dec 13 05:05:02 220.72.139.74:1692 -> xxx.yyy.1.21:4899 SYN ******S*
Dec 13 05:05:00 220.72.139.74:1680 -> xxx.yyy.1.10:4899 SYN ******S*
Dec 13 05:05:00 220.72.139.74:1695 -> xxx.yyy.1.23:4899 SYN ******S*
Dec 13 05:05:00 220.72.139.74:1676 -> xxx.yyy.1.6:4899 SYN ******S*
Dec 13 05:05:00 220.72.139.74:1683 -> xxx.yyy.1.13:4899 SYN ******S*
Dec 13 05:05:00 220.72.139.74:1696 -> xxx.yyy.1.24:4899 SYN ******S*
Dec 13 05:05:00 220.72.139.74:1703 -> xxx.yyy.1.31:4899 SYN ******S*
[...]
Dec 13 05:11:20 220.72.139.74:1331 -> xxx.yyy.253.58:4899 SYN ******S*
Dec 13 05:11:20 220.72.139.74:1333 -> xxx.yyy.253.59:4899 SYN ******S*
Dec 13 05:11:20 220.72.139.74:1328 -> xxx.yyy.253.56:4899 SYN ******S*
Dec 13 05:11:22 220.72.139.74:2117 -> xxx.yyy.254.171:4899 SYN ******S*
Dec 13 05:11:22 220.72.139.74:2118 -> xxx.yyy.254.172:4899 SYN ******S*
Dec 13 05:11:22 220.72.139.74:2120 -> xxx.yyy.254.174:4899 SYN ******S*
Dec 13 05:11:22 220.72.139.74:2122 -> xxx.yyy.254.176:4899 SYN ******S*
Dec 13 05:11:22 220.72.139.74:2119 -> xxx.yyy.254.173:4899 SYN ******S*
Dec 13 05:11:22 220.72.139.74:2123 -> xxx.yyy.254.177:4899 SYN ******S*
40398
Dec 13 19:45:01 80.146.113.66:2918 -> xxx.yyy.1.1:554 SYN ******S*
Dec 13 19:45:00 80.146.113.66:2924 -> xxx.yyy.1.6:554 SYN ******S*
Dec 13 19:45:00 80.146.113.66:2927 -> xxx.yyy.1.9:554 SYN ******S*
Dec 13 19:45:03 80.146.113.66:2934 -> xxx.yyy.1.15:554 SYN ******S*
Dec 13 19:45:01 80.146.113.66:2935 -> xxx.yyy.1.16:554 SYN ******S*
Dec 13 19:45:00 80.146.113.66:2937 -> xxx.yyy.1.18:554 SYN ******S*
Dec 13 19:45:00 80.146.113.66:2938 -> xxx.yyy.1.19:554 SYN ******S*
Dec 13 19:45:00 80.146.113.66:2939 -> xxx.yyy.1.20:554 SYN ******S*
[...]
Dec 13 19:55:59 80.146.113.66:3999 -> xxx.yyy.255.245:554 SYN ******S*
Dec 13 19:55:59 80.146.113.66:4000 -> xxx.yyy.255.246:554 SYN ******S*
Dec 13 19:55:59 80.146.113.66:4002 -> xxx.yyy.255.247:554 SYN ******S*
Dec 13 19:55:59 80.146.113.66:4004 -> xxx.yyy.255.249:554 SYN ******S*
Dec 13 19:55:59 80.146.113.66:4005 -> xxx.yyy.255.250:554 SYN ******S*
Dec 13 19:55:59 80.146.113.66:4007 -> xxx.yyy.255.252:554 SYN ******S*
Dec 13 19:55:59 80.146.113.66:4009 -> xxx.yyy.255.253:554 SYN ******S*
Dec 13 19:55:59 80.146.113.66:4010 -> xxx.yyy.255.254:554 SYN ******S*
38372
[...]
37654
Dec 13 13:54:14 198.234.205.244:4119 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 13 13:54:11 198.234.205.244:4121 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 13 13:54:14 198.234.205.244:4122 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 13 13:54:11 198.234.205.244:4127 -> xxx.yyy.1.11:1433 SYN ******S*
Dec 13 13:54:11 198.234.205.244:4130 -> xxx.yyy.1.14:1433 SYN ******S*
Dec 13 13:54:11 198.234.205.244:4131 -> xxx.yyy.1.15:1433 SYN ******S*
Dec 13 13:54:11 198.234.205.244:4134 -> xxx.yyy.1.18:1433 SYN ******S*
Dec 13 13:54:14 198.234.205.244:4137 -> xxx.yyy.1.21:1433 SYN ******S*
[...]
Dec 13 14:05:13 198.234.205.244:3813 -> xxx.yyy.255.217:1433 SYN ******S*
Dec 13 14:05:13 198.234.205.244:3810 -> xxx.yyy.255.214:1433 SYN ******S*
Dec 13 14:05:13 198.234.205.244:3812 -> xxx.yyy.255.216:1433 SYN ******S*
Dec 13 14:05:13 198.234.205.244:3814 -> xxx.yyy.255.218:1433 SYN ******S*
Dec 13 14:05:13 198.234.205.244:3827 -> xxx.yyy.255.231:1433 SYN ******S*
Dec 13 14:05:13 198.234.205.244:3829 -> xxx.yyy.255.233:1433 SYN ******S*
Dec 13 14:05:13 198.234.205.244:3833 -> xxx.yyy.255.237:1433 SYN ******S*
Dec 13 14:05:13 198.234.205.244:3830 -> xxx.yyy.255.234:1433 SYN ******S*
Dec 13 14:05:13 198.234.205.244:3841 -> xxx.yyy.255.245:1433 SYN ******S*
36206
Dec 13 15:39:01 213.136.109.16:4703 -> xxx.yyy.1.6:3306 SYN ******S*
Dec 13 15:39:01 213.136.109.16:4705 -> xxx.yyy.1.8:3306 SYN ******S*
Dec 13 15:39:01 213.136.109.16:4708 -> xxx.yyy.1.11:3306 SYN ******S*
Dec 13 15:39:01 213.136.109.16:4709 -> xxx.yyy.1.12:3306 SYN ******S*
Dec 13 15:39:01 213.136.109.16:4710 -> xxx.yyy.1.13:3306 SYN ******S*
Dec 13 15:39:01 213.136.109.16:4712 -> xxx.yyy.1.15:3306 SYN ******S*
Dec 13 15:39:01 213.136.109.16:4714 -> xxx.yyy.1.17:3306 SYN ******S*
Dec 13 15:39:04 213.136.109.16:4715 -> xxx.yyy.1.18:3306 SYN ******S*
[...]
Dec 13 15:50:56 213.136.109.16:3398 -> xxx.yyy.255.225:3306 SYN ******S*
Dec 13 15:50:56 213.136.109.16:3401 -> xxx.yyy.255.228:3306 SYN ******S*
Dec 13 15:50:56 213.136.109.16:3402 -> xxx.yyy.255.229:3306 SYN ******S*
Dec 13 15:50:56 213.136.109.16:3407 -> xxx.yyy.255.234:3306 SYN ******S*
Dec 13 15:50:56 213.136.109.16:3404 -> xxx.yyy.255.231:3306 SYN ******S*
Dec 13 15:50:56 213.136.109.16:3405 -> xxx.yyy.255.232:3306 SYN ******S*
Dec 13 15:50:56 213.136.109.16:3406 -> xxx.yyy.255.233:3306 SYN ******S*
Dec 13 15:50:56 213.136.109.16:3410 -> xxx.yyy.255.237:3306 SYN ******S*
35626
Dec 13 02:15:45 211.178.10.23:4834 -> xxx.yyy.1.1:27374 SYN ******S*
Dec 13 02:15:46 211.178.10.23:4847 -> xxx.yyy.1.8:12345 SYN ******S*
Dec 13 02:15:46 211.178.10.23:4848 -> xxx.yyy.1.8:27374 SYN ******S*
Dec 13 02:15:46 211.178.10.23:4852 -> xxx.yyy.1.10:27374 SYN ******S*
Dec 13 02:15:46 211.178.10.23:4854 -> xxx.yyy.1.11:27374 SYN ******S*
Dec 13 02:15:44 211.178.10.23:4856 -> xxx.yyy.1.12:27374 SYN ******S*
Dec 13 02:15:44 211.178.10.23:4859 -> xxx.yyy.1.14:12345 SYN ******S*
Dec 13 02:15:44 211.178.10.23:4863 -> xxx.yyy.1.16:12345 SYN ******S*
[...]
Dec 13 04:06:20 211.178.10.23:3897 -> xxx.yyy.255.79:27374 SYN ******S*
Dec 13 04:06:20 211.178.10.23:3899 -> xxx.yyy.255.80:27374 SYN ******S*
Dec 13 04:06:21 211.178.10.23:3921 -> xxx.yyy.255.91:27374 SYN ******S*
Dec 13 04:06:21 211.178.10.23:3923 -> xxx.yyy.255.92:27374 SYN ******S*
Dec 13 04:06:22 211.178.10.23:3925 -> xxx.yyy.255.93:27374 SYN ******S*
Dec 13 04:06:22 211.178.10.23:4164 -> xxx.yyy.255.213:12345 SYN ******S*
Dec 13 04:06:22 211.178.10.23:3934 -> xxx.yyy.255.98:12345 SYN ******S*
Dec 13 04:06:24 211.178.10.23:3981 -> xxx.yyy.255.121:27374 SYN ******S*
31558
Dec 13 04:04:36 221.143.214.216:2291 -> xxx.yyy.1.3:4899 SYN ******S*
Dec 13 04:04:36 221.143.214.216:2292 -> xxx.yyy.1.4:4899 SYN ******S*
Dec 13 04:04:36 221.143.214.216:2293 -> xxx.yyy.1.5:4899 SYN ******S*
Dec 13 04:04:36 221.143.214.216:2294 -> xxx.yyy.1.6:4899 SYN ******S*
Dec 13 04:04:38 221.143.214.216:2290 -> xxx.yyy.1.2:4899 SYN ******S*
Dec 13 04:04:36 221.143.214.216:2295 -> xxx.yyy.1.7:4899 SYN ******S*
Dec 13 04:04:36 221.143.214.216:2297 -> xxx.yyy.1.9:4899 SYN ******S*
Dec 13 04:04:36 221.143.214.216:2300 -> xxx.yyy.1.12:4899 SYN ******S*
[...]
Dec 13 04:08:10 221.143.214.216:1349 -> xxx.yyy.254.245:4899 SYN ******S*
Dec 13 04:08:10 221.143.214.216:1350 -> xxx.yyy.254.246:4899 SYN ******S*
Dec 13 04:08:10 221.143.214.216:1357 -> xxx.yyy.254.253:4899 SYN ******S*
Dec 13 04:08:10 221.143.214.216:1354 -> xxx.yyy.254.250:4899 SYN ******S*
Dec 13 04:08:10 221.143.214.216:1351 -> xxx.yyy.254.247:4899 SYN ******S*
Dec 13 04:08:10 221.143.214.216:1355 -> xxx.yyy.254.251:4899 SYN ******S*
Dec 13 04:08:10 221.143.214.216:1356 -> xxx.yyy.254.252:4899 SYN ******S*
Dec 13 04:08:10 221.143.214.216:4589 -> xxx.yyy.253.114:4899 SYN ******S*
Dec 13 04:08:10 221.143.214.216:4603 -> xxx.yyy.253.128:4899 SYN ******S*
30061
Dec 13 14:56:59 212.194.227.222:3306 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 13 14:57:02 212.194.227.222:3329 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 13 14:56:59 212.194.227.222:3359 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 13 14:56:59 212.194.227.222:3434 -> xxx.yyy.1.11:1433 SYN ******S*
Dec 13 14:57:02 212.194.227.222:3465 -> xxx.yyy.1.13:1433 SYN ******S*
Dec 13 14:56:59 212.194.227.222:3469 -> xxx.yyy.1.14:1433 SYN ******S*
Dec 13 14:56:59 212.194.227.222:3479 -> xxx.yyy.1.15:1433 SYN ******S*
Dec 13 14:57:02 212.194.227.222:3493 -> xxx.yyy.1.16:1433 SYN ******S*
[...]
Dec 13 17:20:30 212.194.227.222:3909 -> xxx.yyy.158.81:1433 SYN ******S*
Dec 13 17:20:30 212.194.227.222:3827 -> xxx.yyy.158.80:1433 SYN ******S*
Dec 13 17:20:31 212.194.227.222:1688 -> xxx.yyy.158.120:1433 SYN ******S*
Dec 13 17:20:31 212.194.227.222:4097 -> xxx.yyy.158.83:1433 SYN ******S*
Dec 13 17:20:31 212.194.227.222:4037 -> xxx.yyy.158.82:1433 SYN ******S*
Dec 13 17:20:31 212.194.227.222:2340 -> xxx.yyy.158.128:1433 SYN ******S*
Dec 13 17:20:31 212.194.227.222:2379 -> xxx.yyy.158.121:1433 SYN ******S*
Dec 13 17:20:31 212.194.227.222:4144 -> xxx.yyy.158.85:1433 SYN ******S*
Dec 13 17:20:31 212.194.227.222:4139 -> xxx.yyy.158.84:1433 SYN ******S*
28295
Dec 13 00:00:45 219.146.103.37:3436 -> xxx.yyy.164.36:1025 SYN ******S*
Dec 13 00:00:45 219.146.103.37:37984 -> xxx.yyy.164.36:3127 SYN ******S*
Dec 13 00:00:45 219.146.103.37:12649 -> xxx.yyy.164.36:6129 SYN ******S*
Dec 13 00:00:45 219.146.103.37:6020 -> xxx.yyy.164.36:2745 SYN ******S*
Dec 13 00:00:45 219.146.103.37:58083 -> xxx.yyy.164.36:80 SYN ******S*
Dec 13 00:00:44 219.146.103.37:24253 -> xxx.yyy.233.47:2745 SYN ******S*
Dec 13 00:00:44 219.146.103.37:54027 -> xxx.yyy.233.47:80 SYN ******S*
Dec 13 00:00:46 219.146.103.37:17841 -> xxx.yyy.183.80:1025 SYN ******S*
[...]
Dec 13 23:49:43 219.146.103.37:7669 -> xxx.yyy.239.190:6129 SYN ******S*
Dec 13 23:49:43 219.146.103.37:2636 -> xxx.yyy.239.190:3127 SYN ******S*
Dec 13 23:49:43 219.146.103.37:57977 -> xxx.yyy.239.190:1025 SYN ******S*
Dec 13 23:49:43 219.146.103.37:32430 -> xxx.yyy.239.190:2745 SYN ******S*
Dec 13 23:58:28 219.146.103.37:60160 -> xxx.yyy.141.64:2745 SYN ******S*
Dec 13 23:58:28 219.146.103.37:63586 -> xxx.yyy.176.236:2745 SYN ******S*
Dec 13 23:58:31 219.146.103.37:52729 -> xxx.yyy.176.236:1025 SYN ******S*
Dec 13 23:58:28 219.146.103.37:31740 -> xxx.yyy.176.236:3127 SYN ******S*
Dec 13 23:58:28 219.146.103.37:18903 -> xxx.yyy.176.236:80 SYN ******S*
27083
Dec 13 23:47:59 63.88.186.170:2741 -> xxx.yyy.1.6:3066 SYN ******S*
Dec 13 23:47:57 63.88.186.170:2747 -> xxx.yyy.1.9:3066 SYN ******S*
Dec 13 23:47:57 63.88.186.170:2755 -> xxx.yyy.1.12:3066 SYN ******S*
Dec 13 23:47:57 63.88.186.170:2758 -> xxx.yyy.1.13:3066 SYN ******S*
Dec 13 23:47:57 63.88.186.170:2762 -> xxx.yyy.1.15:3066 SYN ******S*
Dec 13 23:47:58 63.88.186.170:2764 -> xxx.yyy.1.16:3066 SYN ******S*
Dec 13 23:47:57 63.88.186.170:2765 -> xxx.yyy.1.17:3066 SYN ******S*
Dec 13 23:47:58 63.88.186.170:2773 -> xxx.yyy.1.21:3066 SYN ******S*
[...]
Dec 14 00:00:00 63.88.186.170:3848 -> xxx.yyy.242.74:3066 SYN ******S*
Dec 14 00:00:00 63.88.186.170:3335 -> xxx.yyy.241.85:3066 SYN ******S*
Dec 14 00:00:00 63.88.186.170:3880 -> xxx.yyy.242.90:3066 SYN ******S*
Dec 14 00:00:00 63.88.186.170:3400 -> xxx.yyy.241.114:3066 SYN ******S*
Dec 14 00:00:00 63.88.186.170:3882 -> xxx.yyy.242.91:3066 SYN ******S*
Dec 14 00:00:00 63.88.186.170:3884 -> xxx.yyy.242.92:3066 SYN ******S*
Dec 14 00:00:00 63.88.186.170:3894 -> xxx.yyy.242.97:3066 SYN ******S*
Dec 14 00:00:00 63.88.186.170:3895 -> xxx.yyy.242.98:3066 SYN ******S*
Dec 14 00:00:00 63.88.186.170:3910 -> xxx.yyy.242.105:3066 SYN ******S*
26029
Dec 13 09:25:53 210.221.47.51:2933 -> xxx.yyy.1.1:4899 SYN ******S*
Dec 13 09:25:52 210.221.47.51:2944 -> xxx.yyy.1.10:4899 SYN ******S*
Dec 13 09:25:52 210.221.47.51:2938 -> xxx.yyy.1.6:4899 SYN ******S*
Dec 13 09:25:52 210.221.47.51:2942 -> xxx.yyy.1.9:4899 SYN ******S*
Dec 13 09:25:53 210.221.47.51:2945 -> xxx.yyy.1.11:4899 SYN ******S*
Dec 13 09:25:52 210.221.47.51:2940 -> xxx.yyy.1.7:4899 SYN ******S*
Dec 13 09:25:52 210.221.47.51:2941 -> xxx.yyy.1.8:4899 SYN ******S*
Dec 13 09:25:52 210.221.47.51:2960 -> xxx.yyy.1.22:4899 SYN ******S*
[...]
Dec 13 09:29:24 210.221.47.51:3018 -> xxx.yyy.254.226:4899 SYN ******S*
Dec 13 09:29:24 210.221.47.51:3028 -> xxx.yyy.254.234:4899 SYN ******S*
Dec 13 09:29:25 210.221.47.51:3035 -> xxx.yyy.254.238:4899 SYN ******S*
Dec 13 09:29:25 210.221.47.51:3039 -> xxx.yyy.254.240:4899 SYN ******S*
Dec 13 09:29:25 210.221.47.51:3032 -> xxx.yyy.254.237:4899 SYN ******S*
Dec 13 09:29:25 210.221.47.51:3045 -> xxx.yyy.254.244:4899 SYN ******S*
Dec 13 09:29:25 210.221.47.51:3047 -> xxx.yyy.254.246:4899 SYN ******S*
Dec 13 09:29:25 210.221.47.51:3052 -> xxx.yyy.254.250:4899 SYN ******S*
Dec 13 09:29:25 210.221.47.51:2517 -> xxx.yyy.253.114:4899 SYN ******S*
25299
Dec 13 19:10:03 218.12.45.126:3367 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 13 19:10:06 218.12.45.126:3373 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 13 19:10:06 218.12.45.126:3376 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 13 19:10:06 218.12.45.126:3380 -> xxx.yyy.1.10:1433 SYN ******S*
Dec 13 19:10:06 218.12.45.126:3381 -> xxx.yyy.1.11:1433 SYN ******S*
Dec 13 19:10:03 218.12.45.126:3385 -> xxx.yyy.1.14:1433 SYN ******S*
Dec 13 19:10:06 218.12.45.126:3386 -> xxx.yyy.1.15:1433 SYN ******S*
Dec 13 19:10:03 218.12.45.126:3388 -> xxx.yyy.1.16:1433 SYN ******S*
[...]
Dec 13 21:13:08 218.12.45.126:1512 -> xxx.yyy.138.15:1433 SYN ******S*
Dec 13 21:13:08 218.12.45.126:1511 -> xxx.yyy.138.14:1433 SYN ******S*
Dec 13 21:13:08 218.12.45.126:1514 -> xxx.yyy.138.17:1433 SYN ******S*
Dec 13 21:13:08 218.12.45.126:1519 -> xxx.yyy.138.18:1433 SYN ******S*
Dec 13 21:13:09 218.12.45.126:1543 -> xxx.yyy.138.23:1433 SYN ******S*
Dec 13 21:13:09 218.12.45.126:1542 -> xxx.yyy.138.22:1433 SYN ******S*
Dec 13 21:13:09 218.12.45.126:1548 -> xxx.yyy.138.24:1433 SYN ******S*
Dec 13 21:13:09 218.12.45.126:1551 -> xxx.yyy.138.26:1433 SYN ******S*
Dec 13 21:13:09 218.12.45.126:1552 -> xxx.yyy.138.27:1433 SYN ******S*
18888
[...]
18765
Dec 13 21:26:35 222.43.69.18:3877 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 13 21:26:35 222.43.69.18:3886 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 13 21:26:32 222.43.69.18:3899 -> xxx.yyy.1.10:1433 SYN ******S*
Dec 13 21:26:32 222.43.69.18:3906 -> xxx.yyy.1.12:1433 SYN ******S*
Dec 13 21:26:32 222.43.69.18:3935 -> xxx.yyy.1.17:1433 SYN ******S*
Dec 13 21:26:32 222.43.69.18:3959 -> xxx.yyy.1.21:1433 SYN ******S*
Dec 13 21:26:33 222.43.69.18:3987 -> xxx.yyy.1.26:1433 SYN ******S*
Dec 13 21:26:33 222.43.69.18:4014 -> xxx.yyy.1.28:1433 SYN ******S*
[...]
Dec 13 23:59:59 222.43.69.18:3261 -> xxx.yyy.196.223:1433 SYN ******S*
Dec 13 23:59:59 222.43.69.18:3022 -> xxx.yyy.196.201:1433 SYN ******S*
Dec 13 23:59:59 222.43.69.18:3277 -> xxx.yyy.196.225:1433 SYN ******S*
Dec 14 00:00:00 222.43.69.18:3036 -> xxx.yyy.196.205:1433 SYN ******S*
Dec 14 00:00:00 222.43.69.18:3300 -> xxx.yyy.196.228:1433 SYN ******S*
Dec 14 00:00:00 222.43.69.18:3308 -> xxx.yyy.196.229:1433 SYN ******S*
Dec 14 00:00:00 222.43.69.18:3322 -> xxx.yyy.196.230:1433 SYN ******S*
Dec 14 00:00:00 222.43.69.18:3368 -> xxx.yyy.196.233:1433 SYN ******S*
17820
Dec 13 05:46:15 194.51.60.100:34095 -> xxx.yyy.1.0:1433 SYN ******S*
Dec 13 05:46:15 194.51.60.100:34096 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 13 05:46:15 194.51.60.100:34097 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 13 05:46:16 194.51.60.100:34098 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 13 05:46:16 194.51.60.100:34099 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 13 05:46:16 194.51.60.100:34100 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 13 05:46:16 194.51.60.100:34101 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 13 05:46:16 194.51.60.100:34102 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Dec 13 08:02:54 194.51.60.100:36552 -> xxx.yyy.153.45:1433 SYN ******S*
Dec 13 08:02:54 194.51.60.100:36740 -> xxx.yyy.153.75:1433 SYN ******S*
Dec 13 08:02:54 194.51.60.100:36741 -> xxx.yyy.153.76:1433 SYN ******S*
Dec 13 08:02:54 194.51.60.100:36746 -> xxx.yyy.153.77:1433 SYN ******S*
Dec 13 08:02:54 194.51.60.100:36749 -> xxx.yyy.153.78:1433 SYN ******S*
Dec 13 08:02:54 194.51.60.100:36751 -> xxx.yyy.153.79:1433 SYN ******S*
Dec 13 08:02:54 194.51.60.100:36759 -> xxx.yyy.153.81:1433 SYN ******S*
Dec 13 08:02:54 194.51.60.100:36760 -> xxx.yyy.153.82:1433 SYN ******S*
Dec 13 08:02:54 194.51.60.100:36761 -> xxx.yyy.153.83:1433 SYN ******S*
16467
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list