[Intrusions] [LOGS] Summary of large-scale portscanning detects

Ken.Connelly at uni.edu Ken.Connelly at uni.edu
Tue Dec 14 12:54:32 GMT 2004


The following extracts show the beginning and ending of scan activity
was detected on my network.  The number following each set is the total
number of probes for that source.  Timestamps are GMT-0600.

Dec 13 06:21:36 134.50.233.43:1504 -> xxx.yyy.1.1:4899 SYN ******S* 
Dec 13 06:21:35 134.50.233.43:1505 -> xxx.yyy.1.2:4899 SYN ******S* 
Dec 13 06:21:36 134.50.233.43:1506 -> xxx.yyy.1.3:4899 SYN ******S* 
Dec 13 06:21:38 134.50.233.43:1507 -> xxx.yyy.1.4:4899 SYN ******S* 
Dec 13 06:21:38 134.50.233.43:1508 -> xxx.yyy.1.5:4899 SYN ******S* 
Dec 13 06:21:38 134.50.233.43:1509 -> xxx.yyy.1.6:4899 SYN ******S* 
Dec 13 06:21:38 134.50.233.43:1510 -> xxx.yyy.1.7:4899 SYN ******S* 
Dec 13 06:21:38 134.50.233.43:1511 -> xxx.yyy.1.8:4899 SYN ******S* 
[...]
Dec 13 06:53:07 134.50.233.43:4453 -> xxx.yyy.255.239:4899 SYN ******S* 
Dec 13 06:53:07 134.50.233.43:4497 -> xxx.yyy.255.248:4899 SYN ******S* 
Dec 13 06:53:07 134.50.233.43:4485 -> xxx.yyy.255.247:4899 SYN ******S* 
Dec 13 06:53:07 134.50.233.43:4413 -> xxx.yyy.255.225:4899 SYN ******S* 
Dec 13 06:53:07 134.50.233.43:4429 -> xxx.yyy.255.233:4899 SYN ******S* 
Dec 13 06:53:07 134.50.233.43:4505 -> xxx.yyy.255.254:4899 SYN ******S* 
Dec 13 06:53:07 134.50.233.43:4426 -> xxx.yyy.255.230:4899 SYN ******S* 
Dec 13 06:53:07 134.50.233.43:4482 -> xxx.yyy.255.244:4899 SYN ******S* 
Dec 13 06:53:07 134.50.233.43:4449 -> xxx.yyy.255.237:4899 SYN ******S* 
102952

Dec 13 07:08:58 61.70.197.9:3027 -> xxx.yyy.1.0:22 SYN ******S* 
Dec 13 07:08:58 61.70.197.9:3028 -> xxx.yyy.1.1:22 SYN ******S* 
Dec 13 07:08:58 61.70.197.9:3029 -> xxx.yyy.1.2:22 SYN ******S* 
Dec 13 07:08:58 61.70.197.9:3030 -> xxx.yyy.1.3:22 SYN ******S* 
Dec 13 07:09:01 61.70.197.9:3031 -> xxx.yyy.1.4:22 SYN ******S* 
Dec 13 07:09:01 61.70.197.9:3032 -> xxx.yyy.1.5:22 SYN ******S* 
Dec 13 07:09:01 61.70.197.9:3034 -> xxx.yyy.1.7:22 SYN ******S* 
Dec 13 07:09:01 61.70.197.9:3035 -> xxx.yyy.1.8:22 SYN ******S* 
[...]
Dec 13 07:45:51 61.70.197.9:2387 -> xxx.yyy.243.45:22 SYN ******S* 
Dec 13 07:45:51 61.70.197.9:2397 -> xxx.yyy.32.51:22 SYN ******S* 
Dec 13 07:45:57 61.70.197.9:3601 -> xxx.yyy.243.45:22 SYN ******S* 
Dec 13 07:45:57 61.70.197.9:3701 -> xxx.yyy.32.51:22 SYN ******S* 
Dec 13 07:46:02 61.70.197.9:4255 -> xxx.yyy.243.45:22 SYN ******S* 
Dec 13 07:46:03 61.70.197.9:4669 -> xxx.yyy.32.51:22 SYN ******S* 
Dec 13 07:46:09 61.70.197.9:2539 -> xxx.yyy.243.45:22 SYN ******S* 
Dec 13 07:46:13 61.70.197.9:3251 -> xxx.yyy.32.51:22 SYN ******S* 
Dec 13 07:46:14 61.70.197.9:3253 -> xxx.yyy.243.45:22 SYN ******S* 
83643

Dec 13 07:58:54 24.153.6.159:4659 -> xxx.yyy.1.0:80 SYN ******S* 
Dec 13 07:58:54 24.153.6.159:4661 -> xxx.yyy.1.1:80 SYN ******S* 
Dec 13 07:58:54 24.153.6.159:4662 -> xxx.yyy.1.2:80 SYN ******S* 
Dec 13 07:58:54 24.153.6.159:4663 -> xxx.yyy.1.3:80 SYN ******S* 
Dec 13 07:58:54 24.153.6.159:4664 -> xxx.yyy.1.4:80 SYN ******S* 
Dec 13 07:58:54 24.153.6.159:4665 -> xxx.yyy.1.5:80 SYN ******S* 
Dec 13 07:58:54 24.153.6.159:4666 -> xxx.yyy.1.6:80 SYN ******S* 
Dec 13 07:58:54 24.153.6.159:4667 -> xxx.yyy.1.7:80 SYN ******S* 
[...]
Dec 13 08:29:50 24.153.6.159:2939 -> xxx.yyy.254.247:80 SYN ******S* 
Dec 13 08:29:50 24.153.6.159:2923 -> xxx.yyy.254.231:80 SYN ******S* 
Dec 13 08:29:50 24.153.6.159:2891 -> xxx.yyy.254.199:80 SYN ******S* 
Dec 13 08:29:50 24.153.6.159:2888 -> xxx.yyy.254.196:80 SYN ******S* 
Dec 13 08:29:50 24.153.6.159:2904 -> xxx.yyy.254.212:80 SYN ******S* 
Dec 13 08:29:50 24.153.6.159:2920 -> xxx.yyy.254.228:80 SYN ******S* 
Dec 13 08:29:50 24.153.6.159:2945 -> xxx.yyy.254.252:80 SYN ******S* 
Dec 13 08:29:50 24.153.6.159:2947 -> xxx.yyy.254.253:80 SYN ******S* 
74477

Dec 13 01:47:30 195.94.8.48:2646 -> xxx.yyy.128.2:1433 SYN ******S* 
Dec 13 01:47:30 195.94.8.48:2654 -> xxx.yyy.128.6:1433 SYN ******S* 
Dec 13 01:47:30 195.94.8.48:2652 -> xxx.yyy.128.5:1433 SYN ******S* 
Dec 13 01:47:30 195.94.8.48:2658 -> xxx.yyy.128.8:1433 SYN ******S* 
Dec 13 01:47:30 195.94.8.48:2664 -> xxx.yyy.128.11:1433 SYN ******S* 
Dec 13 01:47:30 195.94.8.48:2672 -> xxx.yyy.128.15:1433 SYN ******S* 
Dec 13 01:47:30 195.94.8.48:2673 -> xxx.yyy.128.16:1433 SYN ******S* 
Dec 13 01:47:30 195.94.8.48:2676 -> xxx.yyy.128.17:1433 SYN ******S* 
[...]
Dec 13 02:45:27 195.94.8.48:2374 -> xxx.yyy.255.244:1433 SYN ******S* 
Dec 13 02:45:27 195.94.8.48:2383 -> xxx.yyy.255.249:1433 SYN ******S* 
Dec 13 02:45:27 195.94.8.48:2380 -> xxx.yyy.255.247:1433 SYN ******S* 
Dec 13 02:45:27 195.94.8.48:2382 -> xxx.yyy.255.248:1433 SYN ******S* 
Dec 13 02:45:27 195.94.8.48:2385 -> xxx.yyy.255.250:1433 SYN ******S* 
Dec 13 02:45:27 195.94.8.48:2387 -> xxx.yyy.255.251:1433 SYN ******S* 
Dec 13 02:45:27 195.94.8.48:2389 -> xxx.yyy.255.252:1433 SYN ******S* 
Dec 13 02:45:27 195.94.8.48:2390 -> xxx.yyy.255.253:1433 SYN ******S* 
Dec 13 02:45:27 195.94.8.48:2394 -> xxx.yyy.255.254:1433 SYN ******S* 
73018

Dec 13 05:13:59 62.99.236.66:3243 -> xxx.yyy.1.1:1433 SYN ******S* 
Dec 13 05:13:59 62.99.236.66:3244 -> xxx.yyy.1.2:1433 SYN ******S* 
Dec 13 05:13:56 62.99.236.66:3245 -> xxx.yyy.1.3:1433 SYN ******S* 
Dec 13 05:13:59 62.99.236.66:3247 -> xxx.yyy.1.5:1433 SYN ******S* 
Dec 13 05:13:59 62.99.236.66:3248 -> xxx.yyy.1.6:1433 SYN ******S* 
Dec 13 05:13:59 62.99.236.66:3249 -> xxx.yyy.1.7:1433 SYN ******S* 
Dec 13 05:13:59 62.99.236.66:3250 -> xxx.yyy.1.8:1433 SYN ******S* 
Dec 13 05:13:59 62.99.236.66:3251 -> xxx.yyy.1.9:1433 SYN ******S* 
[...]
Dec 13 05:25:39 62.99.236.66:3136 -> xxx.yyy.255.243:1433 SYN ******S* 
Dec 13 05:25:39 62.99.236.66:3147 -> xxx.yyy.255.254:1433 SYN ******S* 
Dec 13 05:25:39 62.99.236.66:3141 -> xxx.yyy.255.248:1433 SYN ******S* 
Dec 13 05:25:39 62.99.236.66:3142 -> xxx.yyy.255.249:1433 SYN ******S* 
Dec 13 05:25:39 62.99.236.66:3144 -> xxx.yyy.255.251:1433 SYN ******S* 
Dec 13 05:25:39 62.99.236.66:3145 -> xxx.yyy.255.252:1433 SYN ******S* 
Dec 13 05:25:39 62.99.236.66:3143 -> xxx.yyy.255.250:1433 SYN ******S* 
Dec 13 05:25:39 62.99.236.66:3146 -> xxx.yyy.255.253:1433 SYN ******S* 
66661

Dec 13 07:59:36 67.32.27.41:4105 -> xxx.yyy.1.1:1433 SYN ******S* 
Dec 13 07:59:33 67.32.27.41:4106 -> xxx.yyy.1.2:1433 SYN ******S* 
Dec 13 07:59:33 67.32.27.41:4107 -> xxx.yyy.1.3:1433 SYN ******S* 
Dec 13 07:59:36 67.32.27.41:4108 -> xxx.yyy.1.4:1433 SYN ******S* 
Dec 13 07:59:33 67.32.27.41:4109 -> xxx.yyy.1.5:1433 SYN ******S* 
Dec 13 07:59:33 67.32.27.41:4110 -> xxx.yyy.1.6:1433 SYN ******S* 
Dec 13 07:59:33 67.32.27.41:4111 -> xxx.yyy.1.7:1433 SYN ******S* 
Dec 13 07:59:33 67.32.27.41:4112 -> xxx.yyy.1.8:1433 SYN ******S* 
[...]
Dec 13 08:23:35 67.32.27.41:3829 -> xxx.yyy.255.214:1433 SYN ******S* 
Dec 13 08:23:35 67.32.27.41:3826 -> xxx.yyy.255.211:1433 SYN ******S* 
Dec 13 08:23:35 67.32.27.41:3823 -> xxx.yyy.255.208:1433 SYN ******S* 
Dec 13 08:23:35 67.32.27.41:3833 -> xxx.yyy.255.218:1433 SYN ******S* 
Dec 13 08:23:36 67.32.27.41:3846 -> xxx.yyy.255.231:1433 SYN ******S* 
Dec 13 08:23:36 67.32.27.41:3841 -> xxx.yyy.255.226:1433 SYN ******S* 
Dec 13 08:23:36 67.32.27.41:3845 -> xxx.yyy.255.230:1433 SYN ******S* 
Dec 13 08:23:36 67.32.27.41:3842 -> xxx.yyy.255.227:1433 SYN ******S* 
Dec 13 08:23:36 67.32.27.41:3861 -> xxx.yyy.255.246:1433 SYN ******S* 
56128

Dec 13 01:40:48 69.211.38.17:43104 -> xxx.yyy.1.1:1433 SYN ******S* 
Dec 13 01:40:46 69.211.38.17:43108 -> xxx.yyy.1.3:1433 SYN ******S* 
Dec 13 01:40:46 69.211.38.17:43110 -> xxx.yyy.1.4:1433 SYN ******S* 
Dec 13 01:40:49 69.211.38.17:43112 -> xxx.yyy.1.5:1433 SYN ******S* 
Dec 13 01:40:46 69.211.38.17:43114 -> xxx.yyy.1.6:1433 SYN ******S* 
Dec 13 01:40:49 69.211.38.17:43120 -> xxx.yyy.1.9:1433 SYN ******S* 
Dec 13 01:40:49 69.211.38.17:43126 -> xxx.yyy.1.12:1433 SYN ******S* 
Dec 13 01:40:46 69.211.38.17:43128 -> xxx.yyy.1.13:1433 SYN ******S* 
[...]
Dec 13 01:52:38 69.211.38.17:7593 -> xxx.yyy.255.235:1433 SYN ******S* 
Dec 13 01:52:38 69.211.38.17:7595 -> xxx.yyy.255.236:1433 SYN ******S* 
Dec 13 01:52:38 69.211.38.17:7599 -> xxx.yyy.255.238:1433 SYN ******S* 
Dec 13 01:52:38 69.211.38.17:7601 -> xxx.yyy.255.239:1433 SYN ******S* 
Dec 13 01:52:38 69.211.38.17:7609 -> xxx.yyy.255.243:1433 SYN ******S* 
Dec 13 01:52:38 69.211.38.17:7619 -> xxx.yyy.255.248:1433 SYN ******S* 
Dec 13 01:52:38 69.211.38.17:7628 -> xxx.yyy.255.252:1433 SYN ******S* 
Dec 13 01:52:38 69.211.38.17:7630 -> xxx.yyy.255.253:1433 SYN ******S* 
Dec 13 01:52:38 69.211.38.17:7632 -> xxx.yyy.255.254:1433 SYN ******S* 
55133

Dec 13 02:59:49 82.74.137.199:3383 -> xxx.yyy.1.0:1433 SYN ******S* 
Dec 13 02:59:49 82.74.137.199:3407 -> xxx.yyy.1.1:1433 SYN ******S* 
Dec 13 02:59:49 82.74.137.199:3423 -> xxx.yyy.1.3:1433 SYN ******S* 
Dec 13 02:59:49 82.74.137.199:3427 -> xxx.yyy.1.5:1433 SYN ******S* 
Dec 13 02:59:49 82.74.137.199:3429 -> xxx.yyy.1.7:1433 SYN ******S* 
Dec 13 02:59:49 82.74.137.199:3428 -> xxx.yyy.1.6:1433 SYN ******S* 
Dec 13 02:59:49 82.74.137.199:3452 -> xxx.yyy.1.11:1433 SYN ******S* 
Dec 13 02:59:49 82.74.137.199:3450 -> xxx.yyy.1.10:1433 SYN ******S* 
[...]
Dec 13 05:41:37 82.74.137.199:2111 -> xxx.yyy.181.52:1433 SYN ******S* 
Dec 13 05:41:37 82.74.137.199:2110 -> xxx.yyy.181.51:1433 SYN ******S* 
Dec 13 05:41:37 82.74.137.199:2874 -> xxx.yyy.181.75:1433 SYN ******S* 
Dec 13 05:41:37 82.74.137.199:2154 -> xxx.yyy.181.54:1433 SYN ******S* 
Dec 13 05:41:37 82.74.137.199:2151 -> xxx.yyy.181.53:1433 SYN ******S* 
Dec 13 05:41:38 82.74.137.199:2160 -> xxx.yyy.181.55:1433 SYN ******S* 
Dec 13 05:41:38 82.74.137.199:2162 -> xxx.yyy.181.56:1433 SYN ******S* 
Dec 13 05:41:38 82.74.137.199:2662 -> xxx.yyy.181.72:1433 SYN ******S* 
Dec 13 05:41:38 82.74.137.199:2217 -> xxx.yyy.181.57:1433 SYN ******S* 
51628

Dec 13 08:46:30 207.75.133.159:2284 -> xxx.yyy.1.1:1433 SYN ******S* 
Dec 13 08:46:30 207.75.133.159:2285 -> xxx.yyy.1.2:1433 SYN ******S* 
Dec 13 08:46:30 207.75.133.159:2286 -> xxx.yyy.1.3:1433 SYN ******S* 
Dec 13 08:46:30 207.75.133.159:2287 -> xxx.yyy.1.4:1433 SYN ******S* 
Dec 13 08:46:30 207.75.133.159:2288 -> xxx.yyy.1.5:1433 SYN ******S* 
Dec 13 08:46:30 207.75.133.159:2289 -> xxx.yyy.1.6:1433 SYN ******S* 
Dec 13 08:46:30 207.75.133.159:2290 -> xxx.yyy.1.7:1433 SYN ******S* 
Dec 13 08:46:30 207.75.133.159:2291 -> xxx.yyy.1.8:1433 SYN ******S* 
[...]
Dec 13 09:34:58 207.75.133.159:1834 -> xxx.yyy.255.236:1433 SYN ******S* 
Dec 13 09:34:58 207.75.133.159:1839 -> xxx.yyy.255.241:1433 SYN ******S* 
Dec 13 09:34:58 207.75.133.159:1840 -> xxx.yyy.255.242:1433 SYN ******S* 
Dec 13 09:34:58 207.75.133.159:1841 -> xxx.yyy.255.243:1433 SYN ******S* 
Dec 13 09:34:58 207.75.133.159:1843 -> xxx.yyy.255.245:1433 SYN ******S* 
Dec 13 09:34:58 207.75.133.159:1847 -> xxx.yyy.255.249:1433 SYN ******S* 
Dec 13 09:34:58 207.75.133.159:1848 -> xxx.yyy.255.250:1433 SYN ******S* 
Dec 13 09:34:58 207.75.133.159:1851 -> xxx.yyy.255.253:1433 SYN ******S* 
51523

Dec 13 13:20:09 62.111.159.38:1982 -> xxx.yyy.1.0:1433 SYN ******S* 
Dec 13 13:20:06 62.111.159.38:1983 -> xxx.yyy.1.1:1433 SYN ******S* 
Dec 13 13:20:09 62.111.159.38:1985 -> xxx.yyy.1.3:1433 SYN ******S* 
Dec 13 13:20:06 62.111.159.38:1986 -> xxx.yyy.1.4:1433 SYN ******S* 
Dec 13 13:20:06 62.111.159.38:1988 -> xxx.yyy.1.5:1433 SYN ******S* 
Dec 13 13:20:06 62.111.159.38:2001 -> xxx.yyy.1.14:1433 SYN ******S* 
Dec 13 13:20:06 62.111.159.38:2002 -> xxx.yyy.1.15:1433 SYN ******S* 
Dec 13 13:20:09 62.111.159.38:2003 -> xxx.yyy.1.16:1433 SYN ******S* 
[...]
Dec 13 17:08:57 62.111.159.38:2552 -> xxx.yyy.255.242:1433 SYN ******S* 
Dec 13 17:08:57 62.111.159.38:2553 -> xxx.yyy.255.243:1433 SYN ******S* 
Dec 13 17:08:58 62.111.159.38:2573 -> xxx.yyy.255.247:1433 SYN ******S* 
Dec 13 17:08:58 62.111.159.38:2576 -> xxx.yyy.255.248:1433 SYN ******S* 
Dec 13 17:08:58 62.111.159.38:2579 -> xxx.yyy.255.249:1433 SYN ******S* 
Dec 13 17:08:58 62.111.159.38:2581 -> xxx.yyy.255.250:1433 SYN ******S* 
Dec 13 17:08:59 62.111.159.38:2590 -> xxx.yyy.255.251:1433 SYN ******S* 
Dec 13 17:08:59 62.111.159.38:2598 -> xxx.yyy.255.252:1433 SYN ******S* 
Dec 13 17:08:59 62.111.159.38:2601 -> xxx.yyy.255.253:1433 SYN ******S* 
46304

Dec 13 07:04:11 218.238.254.14:1417 -> xxx.yyy.1.1:4899 SYN ******S* 
Dec 13 07:04:11 218.238.254.14:1418 -> xxx.yyy.1.2:4899 SYN ******S* 
Dec 13 07:04:10 218.238.254.14:1420 -> xxx.yyy.1.4:4899 SYN ******S* 
Dec 13 07:04:10 218.238.254.14:1422 -> xxx.yyy.1.6:4899 SYN ******S* 
Dec 13 07:04:11 218.238.254.14:1419 -> xxx.yyy.1.3:4899 SYN ******S* 
Dec 13 07:04:10 218.238.254.14:1421 -> xxx.yyy.1.5:4899 SYN ******S* 
Dec 13 07:04:10 218.238.254.14:1424 -> xxx.yyy.1.8:4899 SYN ******S* 
Dec 13 07:04:10 218.238.254.14:1425 -> xxx.yyy.1.9:4899 SYN ******S* 
[...]
Dec 13 07:14:15 218.238.254.14:4318 -> xxx.yyy.254.245:4899 SYN ******S* 
Dec 13 07:14:15 218.238.254.14:4319 -> xxx.yyy.254.246:4899 SYN ******S* 
Dec 13 07:14:15 218.238.254.14:4324 -> xxx.yyy.254.251:4899 SYN ******S* 
Dec 13 07:14:15 218.238.254.14:4321 -> xxx.yyy.254.248:4899 SYN ******S* 
Dec 13 07:14:15 218.238.254.14:4325 -> xxx.yyy.254.252:4899 SYN ******S* 
Dec 13 07:14:15 218.238.254.14:4322 -> xxx.yyy.254.249:4899 SYN ******S* 
Dec 13 07:14:15 218.238.254.14:4323 -> xxx.yyy.254.250:4899 SYN ******S* 
Dec 13 07:14:16 218.238.254.14:4083 -> xxx.yyy.254.12:4899 SYN ******S* 
43218

Dec 13 05:05:00 220.72.139.74:1688 -> xxx.yyy.1.18:4899 SYN ******S* 
Dec 13 05:05:02 220.72.139.74:1692 -> xxx.yyy.1.21:4899 SYN ******S* 
Dec 13 05:05:00 220.72.139.74:1680 -> xxx.yyy.1.10:4899 SYN ******S* 
Dec 13 05:05:00 220.72.139.74:1695 -> xxx.yyy.1.23:4899 SYN ******S* 
Dec 13 05:05:00 220.72.139.74:1676 -> xxx.yyy.1.6:4899 SYN ******S* 
Dec 13 05:05:00 220.72.139.74:1683 -> xxx.yyy.1.13:4899 SYN ******S* 
Dec 13 05:05:00 220.72.139.74:1696 -> xxx.yyy.1.24:4899 SYN ******S* 
Dec 13 05:05:00 220.72.139.74:1703 -> xxx.yyy.1.31:4899 SYN ******S* 
[...]
Dec 13 05:11:20 220.72.139.74:1331 -> xxx.yyy.253.58:4899 SYN ******S* 
Dec 13 05:11:20 220.72.139.74:1333 -> xxx.yyy.253.59:4899 SYN ******S* 
Dec 13 05:11:20 220.72.139.74:1328 -> xxx.yyy.253.56:4899 SYN ******S* 
Dec 13 05:11:22 220.72.139.74:2117 -> xxx.yyy.254.171:4899 SYN ******S* 
Dec 13 05:11:22 220.72.139.74:2118 -> xxx.yyy.254.172:4899 SYN ******S* 
Dec 13 05:11:22 220.72.139.74:2120 -> xxx.yyy.254.174:4899 SYN ******S* 
Dec 13 05:11:22 220.72.139.74:2122 -> xxx.yyy.254.176:4899 SYN ******S* 
Dec 13 05:11:22 220.72.139.74:2119 -> xxx.yyy.254.173:4899 SYN ******S* 
Dec 13 05:11:22 220.72.139.74:2123 -> xxx.yyy.254.177:4899 SYN ******S* 
40398

Dec 13 19:45:01 80.146.113.66:2918 -> xxx.yyy.1.1:554 SYN ******S* 
Dec 13 19:45:00 80.146.113.66:2924 -> xxx.yyy.1.6:554 SYN ******S* 
Dec 13 19:45:00 80.146.113.66:2927 -> xxx.yyy.1.9:554 SYN ******S* 
Dec 13 19:45:03 80.146.113.66:2934 -> xxx.yyy.1.15:554 SYN ******S* 
Dec 13 19:45:01 80.146.113.66:2935 -> xxx.yyy.1.16:554 SYN ******S* 
Dec 13 19:45:00 80.146.113.66:2937 -> xxx.yyy.1.18:554 SYN ******S* 
Dec 13 19:45:00 80.146.113.66:2938 -> xxx.yyy.1.19:554 SYN ******S* 
Dec 13 19:45:00 80.146.113.66:2939 -> xxx.yyy.1.20:554 SYN ******S* 
[...]
Dec 13 19:55:59 80.146.113.66:3999 -> xxx.yyy.255.245:554 SYN ******S* 
Dec 13 19:55:59 80.146.113.66:4000 -> xxx.yyy.255.246:554 SYN ******S* 
Dec 13 19:55:59 80.146.113.66:4002 -> xxx.yyy.255.247:554 SYN ******S* 
Dec 13 19:55:59 80.146.113.66:4004 -> xxx.yyy.255.249:554 SYN ******S* 
Dec 13 19:55:59 80.146.113.66:4005 -> xxx.yyy.255.250:554 SYN ******S* 
Dec 13 19:55:59 80.146.113.66:4007 -> xxx.yyy.255.252:554 SYN ******S* 
Dec 13 19:55:59 80.146.113.66:4009 -> xxx.yyy.255.253:554 SYN ******S* 
Dec 13 19:55:59 80.146.113.66:4010 -> xxx.yyy.255.254:554 SYN ******S* 
38372

[...]
37654

Dec 13 13:54:14 198.234.205.244:4119 -> xxx.yyy.1.3:1433 SYN ******S* 
Dec 13 13:54:11 198.234.205.244:4121 -> xxx.yyy.1.5:1433 SYN ******S* 
Dec 13 13:54:14 198.234.205.244:4122 -> xxx.yyy.1.6:1433 SYN ******S* 
Dec 13 13:54:11 198.234.205.244:4127 -> xxx.yyy.1.11:1433 SYN ******S* 
Dec 13 13:54:11 198.234.205.244:4130 -> xxx.yyy.1.14:1433 SYN ******S* 
Dec 13 13:54:11 198.234.205.244:4131 -> xxx.yyy.1.15:1433 SYN ******S* 
Dec 13 13:54:11 198.234.205.244:4134 -> xxx.yyy.1.18:1433 SYN ******S* 
Dec 13 13:54:14 198.234.205.244:4137 -> xxx.yyy.1.21:1433 SYN ******S* 
[...]
Dec 13 14:05:13 198.234.205.244:3813 -> xxx.yyy.255.217:1433 SYN ******S* 
Dec 13 14:05:13 198.234.205.244:3810 -> xxx.yyy.255.214:1433 SYN ******S* 
Dec 13 14:05:13 198.234.205.244:3812 -> xxx.yyy.255.216:1433 SYN ******S* 
Dec 13 14:05:13 198.234.205.244:3814 -> xxx.yyy.255.218:1433 SYN ******S* 
Dec 13 14:05:13 198.234.205.244:3827 -> xxx.yyy.255.231:1433 SYN ******S* 
Dec 13 14:05:13 198.234.205.244:3829 -> xxx.yyy.255.233:1433 SYN ******S* 
Dec 13 14:05:13 198.234.205.244:3833 -> xxx.yyy.255.237:1433 SYN ******S* 
Dec 13 14:05:13 198.234.205.244:3830 -> xxx.yyy.255.234:1433 SYN ******S* 
Dec 13 14:05:13 198.234.205.244:3841 -> xxx.yyy.255.245:1433 SYN ******S* 
36206

Dec 13 15:39:01 213.136.109.16:4703 -> xxx.yyy.1.6:3306 SYN ******S* 
Dec 13 15:39:01 213.136.109.16:4705 -> xxx.yyy.1.8:3306 SYN ******S* 
Dec 13 15:39:01 213.136.109.16:4708 -> xxx.yyy.1.11:3306 SYN ******S* 
Dec 13 15:39:01 213.136.109.16:4709 -> xxx.yyy.1.12:3306 SYN ******S* 
Dec 13 15:39:01 213.136.109.16:4710 -> xxx.yyy.1.13:3306 SYN ******S* 
Dec 13 15:39:01 213.136.109.16:4712 -> xxx.yyy.1.15:3306 SYN ******S* 
Dec 13 15:39:01 213.136.109.16:4714 -> xxx.yyy.1.17:3306 SYN ******S* 
Dec 13 15:39:04 213.136.109.16:4715 -> xxx.yyy.1.18:3306 SYN ******S* 
[...]
Dec 13 15:50:56 213.136.109.16:3398 -> xxx.yyy.255.225:3306 SYN ******S* 
Dec 13 15:50:56 213.136.109.16:3401 -> xxx.yyy.255.228:3306 SYN ******S* 
Dec 13 15:50:56 213.136.109.16:3402 -> xxx.yyy.255.229:3306 SYN ******S* 
Dec 13 15:50:56 213.136.109.16:3407 -> xxx.yyy.255.234:3306 SYN ******S* 
Dec 13 15:50:56 213.136.109.16:3404 -> xxx.yyy.255.231:3306 SYN ******S* 
Dec 13 15:50:56 213.136.109.16:3405 -> xxx.yyy.255.232:3306 SYN ******S* 
Dec 13 15:50:56 213.136.109.16:3406 -> xxx.yyy.255.233:3306 SYN ******S* 
Dec 13 15:50:56 213.136.109.16:3410 -> xxx.yyy.255.237:3306 SYN ******S* 
35626

Dec 13 02:15:45 211.178.10.23:4834 -> xxx.yyy.1.1:27374 SYN ******S* 
Dec 13 02:15:46 211.178.10.23:4847 -> xxx.yyy.1.8:12345 SYN ******S* 
Dec 13 02:15:46 211.178.10.23:4848 -> xxx.yyy.1.8:27374 SYN ******S* 
Dec 13 02:15:46 211.178.10.23:4852 -> xxx.yyy.1.10:27374 SYN ******S* 
Dec 13 02:15:46 211.178.10.23:4854 -> xxx.yyy.1.11:27374 SYN ******S* 
Dec 13 02:15:44 211.178.10.23:4856 -> xxx.yyy.1.12:27374 SYN ******S* 
Dec 13 02:15:44 211.178.10.23:4859 -> xxx.yyy.1.14:12345 SYN ******S* 
Dec 13 02:15:44 211.178.10.23:4863 -> xxx.yyy.1.16:12345 SYN ******S* 
[...]
Dec 13 04:06:20 211.178.10.23:3897 -> xxx.yyy.255.79:27374 SYN ******S* 
Dec 13 04:06:20 211.178.10.23:3899 -> xxx.yyy.255.80:27374 SYN ******S* 
Dec 13 04:06:21 211.178.10.23:3921 -> xxx.yyy.255.91:27374 SYN ******S* 
Dec 13 04:06:21 211.178.10.23:3923 -> xxx.yyy.255.92:27374 SYN ******S* 
Dec 13 04:06:22 211.178.10.23:3925 -> xxx.yyy.255.93:27374 SYN ******S* 
Dec 13 04:06:22 211.178.10.23:4164 -> xxx.yyy.255.213:12345 SYN ******S* 
Dec 13 04:06:22 211.178.10.23:3934 -> xxx.yyy.255.98:12345 SYN ******S* 
Dec 13 04:06:24 211.178.10.23:3981 -> xxx.yyy.255.121:27374 SYN ******S* 
31558

Dec 13 04:04:36 221.143.214.216:2291 -> xxx.yyy.1.3:4899 SYN ******S* 
Dec 13 04:04:36 221.143.214.216:2292 -> xxx.yyy.1.4:4899 SYN ******S* 
Dec 13 04:04:36 221.143.214.216:2293 -> xxx.yyy.1.5:4899 SYN ******S* 
Dec 13 04:04:36 221.143.214.216:2294 -> xxx.yyy.1.6:4899 SYN ******S* 
Dec 13 04:04:38 221.143.214.216:2290 -> xxx.yyy.1.2:4899 SYN ******S* 
Dec 13 04:04:36 221.143.214.216:2295 -> xxx.yyy.1.7:4899 SYN ******S* 
Dec 13 04:04:36 221.143.214.216:2297 -> xxx.yyy.1.9:4899 SYN ******S* 
Dec 13 04:04:36 221.143.214.216:2300 -> xxx.yyy.1.12:4899 SYN ******S* 
[...]
Dec 13 04:08:10 221.143.214.216:1349 -> xxx.yyy.254.245:4899 SYN ******S* 
Dec 13 04:08:10 221.143.214.216:1350 -> xxx.yyy.254.246:4899 SYN ******S* 
Dec 13 04:08:10 221.143.214.216:1357 -> xxx.yyy.254.253:4899 SYN ******S* 
Dec 13 04:08:10 221.143.214.216:1354 -> xxx.yyy.254.250:4899 SYN ******S* 
Dec 13 04:08:10 221.143.214.216:1351 -> xxx.yyy.254.247:4899 SYN ******S* 
Dec 13 04:08:10 221.143.214.216:1355 -> xxx.yyy.254.251:4899 SYN ******S* 
Dec 13 04:08:10 221.143.214.216:1356 -> xxx.yyy.254.252:4899 SYN ******S* 
Dec 13 04:08:10 221.143.214.216:4589 -> xxx.yyy.253.114:4899 SYN ******S* 
Dec 13 04:08:10 221.143.214.216:4603 -> xxx.yyy.253.128:4899 SYN ******S* 
30061

Dec 13 14:56:59 212.194.227.222:3306 -> xxx.yyy.1.2:1433 SYN ******S* 
Dec 13 14:57:02 212.194.227.222:3329 -> xxx.yyy.1.4:1433 SYN ******S* 
Dec 13 14:56:59 212.194.227.222:3359 -> xxx.yyy.1.6:1433 SYN ******S* 
Dec 13 14:56:59 212.194.227.222:3434 -> xxx.yyy.1.11:1433 SYN ******S* 
Dec 13 14:57:02 212.194.227.222:3465 -> xxx.yyy.1.13:1433 SYN ******S* 
Dec 13 14:56:59 212.194.227.222:3469 -> xxx.yyy.1.14:1433 SYN ******S* 
Dec 13 14:56:59 212.194.227.222:3479 -> xxx.yyy.1.15:1433 SYN ******S* 
Dec 13 14:57:02 212.194.227.222:3493 -> xxx.yyy.1.16:1433 SYN ******S* 
[...]
Dec 13 17:20:30 212.194.227.222:3909 -> xxx.yyy.158.81:1433 SYN ******S* 
Dec 13 17:20:30 212.194.227.222:3827 -> xxx.yyy.158.80:1433 SYN ******S* 
Dec 13 17:20:31 212.194.227.222:1688 -> xxx.yyy.158.120:1433 SYN ******S* 
Dec 13 17:20:31 212.194.227.222:4097 -> xxx.yyy.158.83:1433 SYN ******S* 
Dec 13 17:20:31 212.194.227.222:4037 -> xxx.yyy.158.82:1433 SYN ******S* 
Dec 13 17:20:31 212.194.227.222:2340 -> xxx.yyy.158.128:1433 SYN ******S* 
Dec 13 17:20:31 212.194.227.222:2379 -> xxx.yyy.158.121:1433 SYN ******S* 
Dec 13 17:20:31 212.194.227.222:4144 -> xxx.yyy.158.85:1433 SYN ******S* 
Dec 13 17:20:31 212.194.227.222:4139 -> xxx.yyy.158.84:1433 SYN ******S* 
28295

Dec 13 00:00:45 219.146.103.37:3436 -> xxx.yyy.164.36:1025 SYN ******S* 
Dec 13 00:00:45 219.146.103.37:37984 -> xxx.yyy.164.36:3127 SYN ******S* 
Dec 13 00:00:45 219.146.103.37:12649 -> xxx.yyy.164.36:6129 SYN ******S* 
Dec 13 00:00:45 219.146.103.37:6020 -> xxx.yyy.164.36:2745 SYN ******S* 
Dec 13 00:00:45 219.146.103.37:58083 -> xxx.yyy.164.36:80 SYN ******S* 
Dec 13 00:00:44 219.146.103.37:24253 -> xxx.yyy.233.47:2745 SYN ******S* 
Dec 13 00:00:44 219.146.103.37:54027 -> xxx.yyy.233.47:80 SYN ******S* 
Dec 13 00:00:46 219.146.103.37:17841 -> xxx.yyy.183.80:1025 SYN ******S* 
[...]
Dec 13 23:49:43 219.146.103.37:7669 -> xxx.yyy.239.190:6129 SYN ******S* 
Dec 13 23:49:43 219.146.103.37:2636 -> xxx.yyy.239.190:3127 SYN ******S* 
Dec 13 23:49:43 219.146.103.37:57977 -> xxx.yyy.239.190:1025 SYN ******S* 
Dec 13 23:49:43 219.146.103.37:32430 -> xxx.yyy.239.190:2745 SYN ******S* 
Dec 13 23:58:28 219.146.103.37:60160 -> xxx.yyy.141.64:2745 SYN ******S* 
Dec 13 23:58:28 219.146.103.37:63586 -> xxx.yyy.176.236:2745 SYN ******S* 
Dec 13 23:58:31 219.146.103.37:52729 -> xxx.yyy.176.236:1025 SYN ******S* 
Dec 13 23:58:28 219.146.103.37:31740 -> xxx.yyy.176.236:3127 SYN ******S* 
Dec 13 23:58:28 219.146.103.37:18903 -> xxx.yyy.176.236:80 SYN ******S* 
27083

Dec 13 23:47:59 63.88.186.170:2741 -> xxx.yyy.1.6:3066 SYN ******S* 
Dec 13 23:47:57 63.88.186.170:2747 -> xxx.yyy.1.9:3066 SYN ******S* 
Dec 13 23:47:57 63.88.186.170:2755 -> xxx.yyy.1.12:3066 SYN ******S* 
Dec 13 23:47:57 63.88.186.170:2758 -> xxx.yyy.1.13:3066 SYN ******S* 
Dec 13 23:47:57 63.88.186.170:2762 -> xxx.yyy.1.15:3066 SYN ******S* 
Dec 13 23:47:58 63.88.186.170:2764 -> xxx.yyy.1.16:3066 SYN ******S* 
Dec 13 23:47:57 63.88.186.170:2765 -> xxx.yyy.1.17:3066 SYN ******S* 
Dec 13 23:47:58 63.88.186.170:2773 -> xxx.yyy.1.21:3066 SYN ******S* 
[...]
Dec 14 00:00:00 63.88.186.170:3848 -> xxx.yyy.242.74:3066 SYN ******S* 
Dec 14 00:00:00 63.88.186.170:3335 -> xxx.yyy.241.85:3066 SYN ******S* 
Dec 14 00:00:00 63.88.186.170:3880 -> xxx.yyy.242.90:3066 SYN ******S* 
Dec 14 00:00:00 63.88.186.170:3400 -> xxx.yyy.241.114:3066 SYN ******S* 
Dec 14 00:00:00 63.88.186.170:3882 -> xxx.yyy.242.91:3066 SYN ******S* 
Dec 14 00:00:00 63.88.186.170:3884 -> xxx.yyy.242.92:3066 SYN ******S* 
Dec 14 00:00:00 63.88.186.170:3894 -> xxx.yyy.242.97:3066 SYN ******S* 
Dec 14 00:00:00 63.88.186.170:3895 -> xxx.yyy.242.98:3066 SYN ******S* 
Dec 14 00:00:00 63.88.186.170:3910 -> xxx.yyy.242.105:3066 SYN ******S* 
26029

Dec 13 09:25:53 210.221.47.51:2933 -> xxx.yyy.1.1:4899 SYN ******S* 
Dec 13 09:25:52 210.221.47.51:2944 -> xxx.yyy.1.10:4899 SYN ******S* 
Dec 13 09:25:52 210.221.47.51:2938 -> xxx.yyy.1.6:4899 SYN ******S* 
Dec 13 09:25:52 210.221.47.51:2942 -> xxx.yyy.1.9:4899 SYN ******S* 
Dec 13 09:25:53 210.221.47.51:2945 -> xxx.yyy.1.11:4899 SYN ******S* 
Dec 13 09:25:52 210.221.47.51:2940 -> xxx.yyy.1.7:4899 SYN ******S* 
Dec 13 09:25:52 210.221.47.51:2941 -> xxx.yyy.1.8:4899 SYN ******S* 
Dec 13 09:25:52 210.221.47.51:2960 -> xxx.yyy.1.22:4899 SYN ******S* 
[...]
Dec 13 09:29:24 210.221.47.51:3018 -> xxx.yyy.254.226:4899 SYN ******S* 
Dec 13 09:29:24 210.221.47.51:3028 -> xxx.yyy.254.234:4899 SYN ******S* 
Dec 13 09:29:25 210.221.47.51:3035 -> xxx.yyy.254.238:4899 SYN ******S* 
Dec 13 09:29:25 210.221.47.51:3039 -> xxx.yyy.254.240:4899 SYN ******S* 
Dec 13 09:29:25 210.221.47.51:3032 -> xxx.yyy.254.237:4899 SYN ******S* 
Dec 13 09:29:25 210.221.47.51:3045 -> xxx.yyy.254.244:4899 SYN ******S* 
Dec 13 09:29:25 210.221.47.51:3047 -> xxx.yyy.254.246:4899 SYN ******S* 
Dec 13 09:29:25 210.221.47.51:3052 -> xxx.yyy.254.250:4899 SYN ******S* 
Dec 13 09:29:25 210.221.47.51:2517 -> xxx.yyy.253.114:4899 SYN ******S* 
25299

Dec 13 19:10:03 218.12.45.126:3367 -> xxx.yyy.1.1:1433 SYN ******S* 
Dec 13 19:10:06 218.12.45.126:3373 -> xxx.yyy.1.4:1433 SYN ******S* 
Dec 13 19:10:06 218.12.45.126:3376 -> xxx.yyy.1.6:1433 SYN ******S* 
Dec 13 19:10:06 218.12.45.126:3380 -> xxx.yyy.1.10:1433 SYN ******S* 
Dec 13 19:10:06 218.12.45.126:3381 -> xxx.yyy.1.11:1433 SYN ******S* 
Dec 13 19:10:03 218.12.45.126:3385 -> xxx.yyy.1.14:1433 SYN ******S* 
Dec 13 19:10:06 218.12.45.126:3386 -> xxx.yyy.1.15:1433 SYN ******S* 
Dec 13 19:10:03 218.12.45.126:3388 -> xxx.yyy.1.16:1433 SYN ******S* 
[...]
Dec 13 21:13:08 218.12.45.126:1512 -> xxx.yyy.138.15:1433 SYN ******S* 
Dec 13 21:13:08 218.12.45.126:1511 -> xxx.yyy.138.14:1433 SYN ******S* 
Dec 13 21:13:08 218.12.45.126:1514 -> xxx.yyy.138.17:1433 SYN ******S* 
Dec 13 21:13:08 218.12.45.126:1519 -> xxx.yyy.138.18:1433 SYN ******S* 
Dec 13 21:13:09 218.12.45.126:1543 -> xxx.yyy.138.23:1433 SYN ******S* 
Dec 13 21:13:09 218.12.45.126:1542 -> xxx.yyy.138.22:1433 SYN ******S* 
Dec 13 21:13:09 218.12.45.126:1548 -> xxx.yyy.138.24:1433 SYN ******S* 
Dec 13 21:13:09 218.12.45.126:1551 -> xxx.yyy.138.26:1433 SYN ******S* 
Dec 13 21:13:09 218.12.45.126:1552 -> xxx.yyy.138.27:1433 SYN ******S* 
18888

[...]
18765

Dec 13 21:26:35 222.43.69.18:3877 -> xxx.yyy.1.4:1433 SYN ******S* 
Dec 13 21:26:35 222.43.69.18:3886 -> xxx.yyy.1.6:1433 SYN ******S* 
Dec 13 21:26:32 222.43.69.18:3899 -> xxx.yyy.1.10:1433 SYN ******S* 
Dec 13 21:26:32 222.43.69.18:3906 -> xxx.yyy.1.12:1433 SYN ******S* 
Dec 13 21:26:32 222.43.69.18:3935 -> xxx.yyy.1.17:1433 SYN ******S* 
Dec 13 21:26:32 222.43.69.18:3959 -> xxx.yyy.1.21:1433 SYN ******S* 
Dec 13 21:26:33 222.43.69.18:3987 -> xxx.yyy.1.26:1433 SYN ******S* 
Dec 13 21:26:33 222.43.69.18:4014 -> xxx.yyy.1.28:1433 SYN ******S* 
[...]
Dec 13 23:59:59 222.43.69.18:3261 -> xxx.yyy.196.223:1433 SYN ******S* 
Dec 13 23:59:59 222.43.69.18:3022 -> xxx.yyy.196.201:1433 SYN ******S* 
Dec 13 23:59:59 222.43.69.18:3277 -> xxx.yyy.196.225:1433 SYN ******S* 
Dec 14 00:00:00 222.43.69.18:3036 -> xxx.yyy.196.205:1433 SYN ******S* 
Dec 14 00:00:00 222.43.69.18:3300 -> xxx.yyy.196.228:1433 SYN ******S* 
Dec 14 00:00:00 222.43.69.18:3308 -> xxx.yyy.196.229:1433 SYN ******S* 
Dec 14 00:00:00 222.43.69.18:3322 -> xxx.yyy.196.230:1433 SYN ******S* 
Dec 14 00:00:00 222.43.69.18:3368 -> xxx.yyy.196.233:1433 SYN ******S* 
17820

Dec 13 05:46:15 194.51.60.100:34095 -> xxx.yyy.1.0:1433 SYN ******S* 
Dec 13 05:46:15 194.51.60.100:34096 -> xxx.yyy.1.1:1433 SYN ******S* 
Dec 13 05:46:15 194.51.60.100:34097 -> xxx.yyy.1.2:1433 SYN ******S* 
Dec 13 05:46:16 194.51.60.100:34098 -> xxx.yyy.1.3:1433 SYN ******S* 
Dec 13 05:46:16 194.51.60.100:34099 -> xxx.yyy.1.4:1433 SYN ******S* 
Dec 13 05:46:16 194.51.60.100:34100 -> xxx.yyy.1.5:1433 SYN ******S* 
Dec 13 05:46:16 194.51.60.100:34101 -> xxx.yyy.1.6:1433 SYN ******S* 
Dec 13 05:46:16 194.51.60.100:34102 -> xxx.yyy.1.7:1433 SYN ******S* 
[...]
Dec 13 08:02:54 194.51.60.100:36552 -> xxx.yyy.153.45:1433 SYN ******S* 
Dec 13 08:02:54 194.51.60.100:36740 -> xxx.yyy.153.75:1433 SYN ******S* 
Dec 13 08:02:54 194.51.60.100:36741 -> xxx.yyy.153.76:1433 SYN ******S* 
Dec 13 08:02:54 194.51.60.100:36746 -> xxx.yyy.153.77:1433 SYN ******S* 
Dec 13 08:02:54 194.51.60.100:36749 -> xxx.yyy.153.78:1433 SYN ******S* 
Dec 13 08:02:54 194.51.60.100:36751 -> xxx.yyy.153.79:1433 SYN ******S* 
Dec 13 08:02:54 194.51.60.100:36759 -> xxx.yyy.153.81:1433 SYN ******S* 
Dec 13 08:02:54 194.51.60.100:36760 -> xxx.yyy.153.82:1433 SYN ******S* 
Dec 13 08:02:54 194.51.60.100:36761 -> xxx.yyy.153.83:1433 SYN ******S* 
16467

--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa                     Cedar Falls, IA  50614-0121
email: Ken.Connelly at uni.edu    phone: (319) 273-5850    fax: (319) 273-7373



More information about the Intrusions mailing list