[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Wed Dec 15 13:46:54 GMT 2004
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Dec 14 05:45:39 64.1.133.150:2427 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 14 05:45:39 64.1.133.150:2428 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 14 05:45:36 64.1.133.150:1047 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 14 05:45:39 64.1.133.150:1049 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 14 05:45:39 64.1.133.150:1050 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 14 05:45:39 64.1.133.150:1051 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 14 05:45:39 64.1.133.150:1052 -> xxx.yyy.1.8:1433 SYN ******S*
Dec 14 05:45:39 64.1.133.150:1053 -> xxx.yyy.1.1:1433 SYN ******S*
[...]
Dec 14 07:40:15 64.1.133.150:2237 -> xxx.yyy.255.245:1433 SYN ******S*
Dec 14 07:40:15 64.1.133.150:2244 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 14 07:40:15 64.1.133.150:2241 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 14 07:40:15 64.1.133.150:2238 -> xxx.yyy.255.246:1433 SYN ******S*
Dec 14 07:40:15 64.1.133.150:2242 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 14 07:40:15 64.1.133.150:2239 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 14 07:40:15 64.1.133.150:2247 -> xxx.yyy.255.254:1433 SYN ******S*
Dec 14 07:40:15 64.1.133.150:2243 -> xxx.yyy.255.251:1433 SYN ******S*
123080
[...]
107817
Dec 14 06:20:47 63.250.108.101:4395 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 14 06:20:47 63.250.108.101:4398 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 14 06:20:47 63.250.108.101:4400 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 14 06:20:47 63.250.108.101:4403 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 14 06:20:47 63.250.108.101:4411 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 14 06:20:47 63.250.108.101:4414 -> xxx.yyy.1.8:1433 SYN ******S*
Dec 14 06:20:47 63.250.108.101:4416 -> xxx.yyy.1.9:1433 SYN ******S*
Dec 14 06:20:44 63.250.108.101:4419 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
Dec 14 08:07:54 63.250.108.101:1874 -> xxx.yyy.255.243:1433 SYN ******S*
Dec 14 08:07:54 63.250.108.101:1873 -> xxx.yyy.255.242:1433 SYN ******S*
Dec 14 08:07:55 63.250.108.101:1882 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 14 08:07:56 63.250.108.101:1883 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 14 08:07:56 63.250.108.101:1885 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 14 08:07:56 63.250.108.101:1887 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 14 08:07:56 63.250.108.101:1888 -> xxx.yyy.255.253:1433 SYN ******S*
Dec 14 08:07:57 63.250.108.101:1891 -> xxx.yyy.255.254:1433 SYN ******S*
106579
Dec 14 00:21:08 146.83.73.133:4911 -> xxx.yyy.1.10:1433 SYN ******S*
Dec 14 00:21:08 146.83.73.133:4910 -> xxx.yyy.1.9:1433 SYN ******S*
Dec 14 00:21:05 146.83.73.133:4900 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 14 00:21:08 146.83.73.133:4905 -> xxx.yyy.1.8:1433 SYN ******S*
Dec 14 00:21:08 146.83.73.133:4913 -> xxx.yyy.1.11:1433 SYN ******S*
Dec 14 00:21:08 146.83.73.133:4923 -> xxx.yyy.1.13:1433 SYN ******S*
Dec 14 00:21:08 146.83.73.133:4925 -> xxx.yyy.1.15:1433 SYN ******S*
Dec 14 00:21:08 146.83.73.133:4917 -> xxx.yyy.1.12:1433 SYN ******S*
[...]
Dec 14 02:17:44 146.83.73.133:1467 -> xxx.yyy.255.245:1433 SYN ******S*
Dec 14 02:17:44 146.83.73.133:1468 -> xxx.yyy.255.246:1433 SYN ******S*
Dec 14 02:17:45 146.83.73.133:1471 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 14 02:17:45 146.83.73.133:1473 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 14 02:17:45 146.83.73.133:1472 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 14 02:17:45 146.83.73.133:1470 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 14 02:17:45 146.83.73.133:1474 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 14 02:17:45 146.83.73.133:1475 -> xxx.yyy.255.253:1433 SYN ******S*
Dec 14 02:17:45 146.83.73.133:1476 -> xxx.yyy.255.254:1433 SYN ******S*
79047
Dec 14 08:13:25 172.189.21.125:1538 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 14 08:13:25 172.189.21.125:1539 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 14 08:13:25 172.189.21.125:1540 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 14 08:13:25 172.189.21.125:1541 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 14 08:13:25 172.189.21.125:1542 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 14 08:13:25 172.189.21.125:1543 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 14 08:13:25 172.189.21.125:1544 -> xxx.yyy.1.8:1433 SYN ******S*
Dec 14 08:13:25 172.189.21.125:1545 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
Dec 14 09:59:39 172.189.21.125:3961 -> xxx.yyy.236.153:1433 SYN ******S*
Dec 14 09:59:39 172.189.21.125:3966 -> xxx.yyy.236.157:1433 SYN ******S*
Dec 14 09:59:39 172.189.21.125:3972 -> xxx.yyy.236.160:1433 SYN ******S*
Dec 14 09:59:40 172.189.21.125:3975 -> xxx.yyy.236.163:1433 SYN ******S*
Dec 14 09:59:40 172.189.21.125:3979 -> xxx.yyy.236.166:1433 SYN ******S*
Dec 14 09:59:40 172.189.21.125:3976 -> xxx.yyy.236.164:1433 SYN ******S*
Dec 14 09:59:40 172.189.21.125:3978 -> xxx.yyy.236.165:1433 SYN ******S*
Dec 14 09:59:40 172.189.21.125:3982 -> xxx.yyy.236.167:1433 SYN ******S*
74858
Dec 14 03:17:25 62.149.228.68:1336 -> xxx.yyy.1.1:4000 SYN ******S*
Dec 14 03:17:26 62.149.228.68:1337 -> xxx.yyy.1.2:4000 SYN ******S*
Dec 14 03:17:26 62.149.228.68:1338 -> xxx.yyy.1.3:4000 SYN ******S*
Dec 14 03:17:27 62.149.228.68:1339 -> xxx.yyy.1.4:4000 SYN ******S*
Dec 14 03:17:27 62.149.228.68:1340 -> xxx.yyy.1.5:4000 SYN ******S*
Dec 14 03:17:24 62.149.228.68:1341 -> xxx.yyy.1.6:4000 SYN ******S*
Dec 14 03:17:27 62.149.228.68:1342 -> xxx.yyy.1.7:4000 SYN ******S*
Dec 14 03:17:27 62.149.228.68:1343 -> xxx.yyy.1.8:4000 SYN ******S*
[...]
Dec 14 03:29:28 62.149.228.68:3942 -> xxx.yyy.255.238:4000 SYN ******S*
Dec 14 03:29:28 62.149.228.68:3955 -> xxx.yyy.255.251:4000 SYN ******S*
Dec 14 03:29:28 62.149.228.68:3952 -> xxx.yyy.255.248:4000 SYN ******S*
Dec 14 03:29:28 62.149.228.68:3953 -> xxx.yyy.255.249:4000 SYN ******S*
Dec 14 03:29:28 62.149.228.68:3951 -> xxx.yyy.255.247:4000 SYN ******S*
Dec 14 03:29:28 62.149.228.68:3957 -> xxx.yyy.255.253:4000 SYN ******S*
Dec 14 03:29:28 62.149.228.68:3954 -> xxx.yyy.255.250:4000 SYN ******S*
Dec 14 03:29:28 62.149.228.68:3956 -> xxx.yyy.255.252:4000 SYN ******S*
Dec 14 03:29:28 62.149.228.68:3950 -> xxx.yyy.255.246:4000 SYN ******S*
68721
Dec 14 00:00:06 218.88.45.120:2008 -> xxx.yyy.81.69:1433 SYN ******S*
Dec 14 00:00:10 218.88.45.120:2050 -> xxx.yyy.81.76:1433 SYN ******S*
Dec 14 00:00:07 218.88.45.120:2058 -> xxx.yyy.81.77:1433 SYN ******S*
Dec 14 00:00:07 218.88.45.120:2066 -> xxx.yyy.81.78:1433 SYN ******S*
Dec 14 00:00:08 218.88.45.120:2095 -> xxx.yyy.81.81:1433 SYN ******S*
Dec 14 00:00:08 218.88.45.120:2101 -> xxx.yyy.81.84:1433 SYN ******S*
Dec 14 00:00:11 218.88.45.120:2102 -> xxx.yyy.81.85:1433 SYN ******S*
Dec 14 00:00:08 218.88.45.120:2108 -> xxx.yyy.81.88:1433 SYN ******S*
[...]
Dec 14 02:39:36 218.88.45.120:3051 -> xxx.yyy.255.242:1433 SYN ******S*
Dec 14 02:39:36 218.88.45.120:3120 -> xxx.yyy.255.243:1433 SYN ******S*
Dec 14 02:39:36 218.88.45.120:3186 -> xxx.yyy.255.244:1433 SYN ******S*
Dec 14 02:39:37 218.88.45.120:3231 -> xxx.yyy.255.246:1433 SYN ******S*
Dec 14 02:39:37 218.88.45.120:3225 -> xxx.yyy.255.245:1433 SYN ******S*
Dec 14 02:39:37 218.88.45.120:3316 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 14 02:39:37 218.88.45.120:3329 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 14 02:39:38 218.88.45.120:3445 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 14 02:39:38 218.88.45.120:3458 -> xxx.yyy.255.253:1433 SYN ******S*
64716
Dec 14 01:12:31 65.107.99.135:3348 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 14 01:12:31 65.107.99.135:3349 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 14 01:12:31 65.107.99.135:3350 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 14 01:12:31 65.107.99.135:3352 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 14 01:12:34 65.107.99.135:3355 -> xxx.yyy.1.9:1433 SYN ******S*
Dec 14 01:12:31 65.107.99.135:3356 -> xxx.yyy.1.10:1433 SYN ******S*
Dec 14 01:12:31 65.107.99.135:3357 -> xxx.yyy.1.11:1433 SYN ******S*
Dec 14 01:12:31 65.107.99.135:3358 -> xxx.yyy.1.12:1433 SYN ******S*
[...]
Dec 14 01:25:33 65.107.99.135:1504 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 14 01:25:33 65.107.99.135:1501 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 14 01:25:33 65.107.99.135:1498 -> xxx.yyy.255.246:1433 SYN ******S*
Dec 14 01:25:33 65.107.99.135:1502 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 14 01:25:33 65.107.99.135:1499 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 14 01:25:33 65.107.99.135:1503 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 14 01:25:33 65.107.99.135:1497 -> xxx.yyy.255.245:1433 SYN ******S*
Dec 14 01:25:33 65.107.99.135:1500 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 14 01:25:33 65.107.99.135:1506 -> xxx.yyy.255.254:1433 SYN ******S*
53908
Dec 14 01:03:25 210.52.104.163:2785 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 14 01:03:25 210.52.104.163:2788 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 14 01:03:25 210.52.104.163:2794 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 14 01:03:25 210.52.104.163:2800 -> xxx.yyy.1.9:1433 SYN ******S*
Dec 14 01:03:25 210.52.104.163:2803 -> xxx.yyy.1.10:1433 SYN ******S*
Dec 14 01:03:25 210.52.104.163:2812 -> xxx.yyy.1.13:1433 SYN ******S*
Dec 14 01:03:25 210.52.104.163:2815 -> xxx.yyy.1.14:1433 SYN ******S*
Dec 14 01:03:25 210.52.104.163:2818 -> xxx.yyy.1.15:1433 SYN ******S*
[...]
Dec 14 01:13:24 210.52.104.163:1925 -> xxx.yyy.255.152:1433 SYN ******S*
Dec 14 01:13:24 210.52.104.163:1964 -> xxx.yyy.255.165:1433 SYN ******S*
Dec 14 01:13:24 210.52.104.163:1988 -> xxx.yyy.255.173:1433 SYN ******S*
Dec 14 01:13:24 210.52.104.163:1982 -> xxx.yyy.255.171:1433 SYN ******S*
Dec 14 01:13:24 210.52.104.163:1991 -> xxx.yyy.255.174:1433 SYN ******S*
Dec 14 01:13:24 210.52.104.163:2036 -> xxx.yyy.255.189:1433 SYN ******S*
Dec 14 01:13:24 210.52.104.163:2135 -> xxx.yyy.255.222:1433 SYN ******S*
Dec 14 01:13:24 210.52.104.163:2183 -> xxx.yyy.255.238:1433 SYN ******S*
47546
Dec 14 00:48:55 141.152.79.130:4937 -> xxx.yyy.1.1:6129 SYN ******S*
Dec 14 00:48:55 141.152.79.130:4944 -> xxx.yyy.1.3:6129 SYN ******S*
Dec 14 00:48:55 141.152.79.130:4946 -> xxx.yyy.1.4:6129 SYN ******S*
Dec 14 00:48:58 141.152.79.130:4950 -> xxx.yyy.1.5:6129 SYN ******S*
Dec 14 00:48:58 141.152.79.130:4955 -> xxx.yyy.1.7:6129 SYN ******S*
Dec 14 00:48:58 141.152.79.130:4959 -> xxx.yyy.1.8:6129 SYN ******S*
Dec 14 00:48:55 141.152.79.130:4962 -> xxx.yyy.1.9:6129 SYN ******S*
Dec 14 00:48:58 141.152.79.130:4965 -> xxx.yyy.1.10:6129 SYN ******S*
[...]
Dec 14 01:00:45 141.152.79.130:2198 -> xxx.yyy.255.236:6129 SYN ******S*
Dec 14 01:00:45 141.152.79.130:2212 -> xxx.yyy.255.243:6129 SYN ******S*
Dec 14 01:00:45 141.152.79.130:2214 -> xxx.yyy.255.244:6129 SYN ******S*
Dec 14 01:00:45 141.152.79.130:2222 -> xxx.yyy.255.248:6129 SYN ******S*
Dec 14 01:00:45 141.152.79.130:2228 -> xxx.yyy.255.251:6129 SYN ******S*
Dec 14 01:00:45 141.152.79.130:2234 -> xxx.yyy.255.254:6129 SYN ******S*
Dec 14 01:00:45 141.152.79.130:2224 -> xxx.yyy.255.249:6129 SYN ******S*
Dec 14 01:00:45 141.152.79.130:2230 -> xxx.yyy.255.252:6129 SYN ******S*
42640
Dec 14 00:46:48 207.191.107.34:51683 -> xxx.yyy.1.0:42 SYN ******S*
Dec 14 00:46:48 207.191.107.34:51687 -> xxx.yyy.1.4:42 SYN ******S*
Dec 14 00:46:48 207.191.107.34:51689 -> xxx.yyy.1.6:42 SYN ******S*
Dec 14 00:46:48 207.191.107.34:51688 -> xxx.yyy.1.5:42 SYN ******S*
Dec 14 00:46:45 207.191.107.34:51690 -> xxx.yyy.1.7:42 SYN ******S*
Dec 14 00:46:45 207.191.107.34:51691 -> xxx.yyy.1.8:42 SYN ******S*
Dec 14 00:46:45 207.191.107.34:51692 -> xxx.yyy.1.9:42 SYN ******S*
Dec 14 00:46:48 207.191.107.34:51693 -> xxx.yyy.1.10:42 SYN ******S*
[...]
Dec 14 00:50:03 207.191.107.34:55507 -> xxx.yyy.255.217:42 SYN ******S*
Dec 14 00:50:03 207.191.107.34:55515 -> xxx.yyy.255.225:42 SYN ******S*
Dec 14 00:50:03 207.191.107.34:55536 -> xxx.yyy.255.246:42 SYN ******S*
Dec 14 00:50:03 207.191.107.34:55537 -> xxx.yyy.255.247:42 SYN ******S*
Dec 14 00:50:03 207.191.107.34:55538 -> xxx.yyy.255.248:42 SYN ******S*
Dec 14 00:50:03 207.191.107.34:55539 -> xxx.yyy.255.249:42 SYN ******S*
Dec 14 00:50:03 207.191.107.34:55541 -> xxx.yyy.255.251:42 SYN ******S*
Dec 14 00:50:03 207.191.107.34:55544 -> xxx.yyy.255.254:42 SYN ******S*
Dec 14 00:50:03 207.191.107.34:55543 -> xxx.yyy.255.253:42 SYN ******S*
40025
Dec 14 12:05:52 63.151.41.210:2074 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 14 12:05:55 63.151.41.210:2075 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 14 12:05:52 63.151.41.210:2076 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 14 12:05:52 63.151.41.210:2077 -> xxx.yyy.1.8:1433 SYN ******S*
Dec 14 12:05:52 63.151.41.210:2079 -> xxx.yyy.1.10:1433 SYN ******S*
Dec 14 12:05:55 63.151.41.210:2080 -> xxx.yyy.1.11:1433 SYN ******S*
Dec 14 12:05:52 63.151.41.210:2082 -> xxx.yyy.1.13:1433 SYN ******S*
Dec 14 12:05:53 63.151.41.210:2086 -> xxx.yyy.1.17:1433 SYN ******S*
[...]
Dec 14 12:17:35 63.151.41.210:4991 -> xxx.yyy.255.230:1433 SYN ******S*
Dec 14 12:17:35 63.151.41.210:4988 -> xxx.yyy.255.227:1433 SYN ******S*
Dec 14 12:17:35 63.151.41.210:4993 -> xxx.yyy.255.232:1433 SYN ******S*
Dec 14 12:17:35 63.151.41.210:4990 -> xxx.yyy.255.229:1433 SYN ******S*
Dec 14 12:17:35 63.151.41.210:4989 -> xxx.yyy.255.228:1433 SYN ******S*
Dec 14 12:17:35 63.151.41.210:4999 -> xxx.yyy.255.238:1433 SYN ******S*
Dec 14 12:17:35 63.151.41.210:1029 -> xxx.yyy.255.242:1433 SYN ******S*
Dec 14 12:17:35 63.151.41.210:4998 -> xxx.yyy.255.237:1433 SYN ******S*
Dec 14 12:17:35 63.151.41.210:5000 -> xxx.yyy.255.239:1433 SYN ******S*
33845
Dec 14 11:30:50 195.157.131.68:3837 -> xxx.yyy.1.4:2277 SYN ******S*
Dec 14 11:30:47 195.157.131.68:3865 -> xxx.yyy.1.8:2277 SYN ******S*
Dec 14 11:30:49 195.157.131.68:3872 -> xxx.yyy.1.9:2277 SYN ******S*
Dec 14 11:30:50 195.157.131.68:3879 -> xxx.yyy.1.10:2277 SYN ******S*
Dec 14 11:30:50 195.157.131.68:3893 -> xxx.yyy.1.12:2277 SYN ******S*
Dec 14 11:30:47 195.157.131.68:3900 -> xxx.yyy.1.13:2277 SYN ******S*
Dec 14 11:30:47 195.157.131.68:3921 -> xxx.yyy.1.16:2277 SYN ******S*
Dec 14 11:30:48 195.157.131.68:3928 -> xxx.yyy.1.17:2277 SYN ******S*
[...]
Dec 14 11:51:53 195.157.131.68:3714 -> xxx.yyy.255.225:2277 SYN ******S*
Dec 14 11:51:53 195.157.131.68:3721 -> xxx.yyy.255.226:2277 SYN ******S*
Dec 14 11:51:53 195.157.131.68:3764 -> xxx.yyy.255.232:2277 SYN ******S*
Dec 14 11:51:53 195.157.131.68:3820 -> xxx.yyy.255.240:2277 SYN ******S*
Dec 14 11:51:53 195.157.131.68:3864 -> xxx.yyy.255.246:2277 SYN ******S*
Dec 14 11:51:54 195.157.131.68:3892 -> xxx.yyy.255.250:2277 SYN ******S*
Dec 14 11:51:54 195.157.131.68:3899 -> xxx.yyy.255.251:2277 SYN ******S*
Dec 14 11:51:54 195.157.131.68:3906 -> xxx.yyy.255.252:2277 SYN ******S*
33776
Dec 14 02:53:35 61.134.219.82:4760 -> xxx.yyy.10.0:1433 SYN ******S*
Dec 14 02:53:35 61.134.219.82:4762 -> xxx.yyy.10.1:1433 SYN ******S*
Dec 14 02:53:35 61.134.219.82:4764 -> xxx.yyy.10.2:1433 SYN ******S*
Dec 14 02:53:35 61.134.219.82:4766 -> xxx.yyy.10.3:1433 SYN ******S*
Dec 14 02:53:35 61.134.219.82:4768 -> xxx.yyy.10.4:1433 SYN ******S*
Dec 14 02:53:35 61.134.219.82:4791 -> xxx.yyy.10.6:1433 SYN ******S*
Dec 14 02:53:35 61.134.219.82:4794 -> xxx.yyy.10.7:1433 SYN ******S*
Dec 14 02:53:35 61.134.219.82:4797 -> xxx.yyy.10.8:1433 SYN ******S*
[...]
Dec 14 04:25:08 61.134.219.82:1346 -> xxx.yyy.111.247:1433 SYN ******S*
Dec 14 04:25:08 61.134.219.82:1347 -> xxx.yyy.111.248:1433 SYN ******S*
Dec 14 04:25:08 61.134.219.82:1351 -> xxx.yyy.111.249:1433 SYN ******S*
Dec 14 04:25:08 61.134.219.82:1354 -> xxx.yyy.111.250:1433 SYN ******S*
Dec 14 04:25:08 61.134.219.82:1357 -> xxx.yyy.111.252:1433 SYN ******S*
Dec 14 04:25:08 61.134.219.82:1356 -> xxx.yyy.111.251:1433 SYN ******S*
Dec 14 04:25:08 61.134.219.82:1359 -> xxx.yyy.111.254:1433 SYN ******S*
Dec 14 04:25:08 61.134.219.82:1358 -> xxx.yyy.111.253:1433 SYN ******S*
Dec 14 04:25:08 61.134.219.82:1361 -> xxx.yyy.111.255:1433 SYN ******S*
32662
Dec 14 14:52:53 206.82.82.62:4816 -> xxx.yyy.1.1:139 SYN ******S*
Dec 14 14:52:50 206.82.82.62:4818 -> xxx.yyy.1.3:139 SYN ******S*
Dec 14 14:52:50 206.82.82.62:4820 -> xxx.yyy.1.5:139 SYN ******S*
Dec 14 14:52:53 206.82.82.62:4834 -> xxx.yyy.1.10:139 SYN ******S*
Dec 14 14:52:50 206.82.82.62:4839 -> xxx.yyy.1.11:139 SYN ******S*
Dec 14 14:52:53 206.82.82.62:4842 -> xxx.yyy.1.12:139 SYN ******S*
Dec 14 14:52:50 206.82.82.62:4844 -> xxx.yyy.1.13:139 SYN ******S*
Dec 14 14:52:53 206.82.82.62:4845 -> xxx.yyy.1.14:139 SYN ******S*
[...]
Dec 14 15:04:32 206.82.82.62:3100 -> xxx.yyy.255.235:139 SYN ******S*
Dec 14 15:04:32 206.82.82.62:3097 -> xxx.yyy.255.232:139 SYN ******S*
Dec 14 15:04:32 206.82.82.62:3101 -> xxx.yyy.255.236:139 SYN ******S*
Dec 14 15:04:32 206.82.82.62:3108 -> xxx.yyy.255.243:139 SYN ******S*
Dec 14 15:04:32 206.82.82.62:3106 -> xxx.yyy.255.241:139 SYN ******S*
Dec 14 15:04:32 206.82.82.62:3107 -> xxx.yyy.255.242:139 SYN ******S*
Dec 14 15:04:32 206.82.82.62:3104 -> xxx.yyy.255.239:139 SYN ******S*
Dec 14 15:04:32 206.82.82.62:3114 -> xxx.yyy.255.249:139 SYN ******S*
Dec 14 15:04:32 206.82.82.62:3113 -> xxx.yyy.255.248:139 SYN ******S*
28946
Dec 14 00:01:23 219.146.103.37:59736 -> xxx.yyy.158.37:80 SYN ******S*
Dec 14 00:01:23 219.146.103.37:57716 -> xxx.yyy.158.37:2745 SYN ******S*
Dec 14 00:01:23 219.146.103.37:19256 -> xxx.yyy.158.37:6129 SYN ******S*
Dec 14 00:01:23 219.146.103.37:39850 -> xxx.yyy.158.37:1025 SYN ******S*
Dec 14 00:01:23 219.146.103.37:43366 -> xxx.yyy.158.37:3127 SYN ******S*
Dec 14 00:01:53 219.146.103.37:1813 -> xxx.yyy.152.12:2745 SYN ******S*
Dec 14 00:01:56 219.146.103.37:44955 -> xxx.yyy.159.34:2745 SYN ******S*
Dec 14 00:01:56 219.146.103.37:46999 -> xxx.yyy.159.34:6129 SYN ******S*
[...]
Dec 14 23:56:26 219.146.103.37:49284 -> xxx.yyy.136.205:6129 SYN ******S*
Dec 14 23:56:26 219.146.103.37:53361 -> xxx.yyy.136.205:3127 SYN ******S*
Dec 14 23:56:26 219.146.103.37:28923 -> xxx.yyy.136.205:1025 SYN ******S*
Dec 14 23:56:26 219.146.103.37:28650 -> xxx.yyy.136.205:2745 SYN ******S*
Dec 14 23:58:20 219.146.103.37:12073 -> xxx.yyy.200.230:3127 SYN ******S*
Dec 14 23:58:20 219.146.103.37:38407 -> xxx.yyy.200.230:80 SYN ******S*
Dec 14 23:58:20 219.146.103.37:63371 -> xxx.yyy.200.230:1025 SYN ******S*
Dec 14 23:58:20 219.146.103.37:50041 -> xxx.yyy.200.230:2745 SYN ******S*
Dec 14 23:58:20 219.146.103.37:42355 -> xxx.yyy.200.230:6129 SYN ******S*
23745
Dec 14 13:57:32 213.180.210.35:36930 -> xxx.yyy.1.96:4480 SYN ******S*
Dec 14 13:57:32 213.180.210.35:41853 -> xxx.yyy.1.96:6588 SYN ******S*
Dec 14 13:57:32 213.180.210.35:42206 -> xxx.yyy.1.96:8000 SYN ******S*
Dec 14 13:57:32 213.180.210.35:41572 -> xxx.yyy.1.96:8090 SYN ******S*
Dec 14 13:57:32 213.180.210.35:37328 -> xxx.yyy.1.96:8080 SYN ******S*
Dec 14 13:57:32 213.180.210.35:58435 -> xxx.yyy.1.96:8081 SYN ******S*
Dec 14 13:57:32 213.180.210.35:40192 -> xxx.yyy.1.96:5490 SYN ******S*
Dec 14 16:33:37 213.180.210.35:48208 -> xxx.yyy.1.96:49935 SYN ******S*
[...]
Dec 14 16:40:54 213.180.210.35:48216 -> xxx.yyy.1.96:138 SYN ******S*
Dec 14 16:40:54 213.180.210.35:48215 -> xxx.yyy.1.96:53 SYN ******S*
Dec 14 16:40:54 213.180.210.35:48216 -> xxx.yyy.1.96:2000 SYN ******S*
Dec 14 16:40:54 213.180.210.35:48215 -> xxx.yyy.1.96:21 SYN ******S*
Dec 14 16:40:54 213.180.210.35:48215 -> xxx.yyy.1.96:6014 SYN ******S*
Dec 14 16:40:54 213.180.210.35:48215 -> xxx.yyy.1.96:6059 SYN ******S*
Dec 14 16:40:54 213.180.210.35:48215 -> xxx.yyy.1.96:540 SYN ******S*
Dec 14 16:40:54 213.180.210.35:48215 -> xxx.yyy.1.96:6007 SYN ******S*
Dec 14 16:40:54 213.180.210.35:48215 -> xxx.yyy.1.96:42 SYN ******S*
22147
Dec 14 04:28:18 218.59.184.134:2357 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 14 04:28:21 218.59.184.134:2490 -> xxx.yyy.1.13:1433 SYN ******S*
Dec 14 04:28:19 218.59.184.134:2382 -> xxx.yyy.1.8:1433 SYN ******S*
Dec 14 04:28:22 218.59.184.134:2578 -> xxx.yyy.1.16:1433 SYN ******S*
Dec 14 04:28:19 218.59.184.134:2405 -> xxx.yyy.1.9:1433 SYN ******S*
Dec 14 04:28:22 218.59.184.134:2588 -> xxx.yyy.1.17:1433 SYN ******S*
Dec 14 04:28:20 218.59.184.134:2611 -> xxx.yyy.1.18:1433 SYN ******S*
Dec 14 04:28:21 218.59.184.134:2654 -> xxx.yyy.1.20:1433 SYN ******S*
[...]
Dec 14 06:05:59 218.59.184.134:3729 -> xxx.yyy.255.245:1433 SYN ******S*
Dec 14 06:06:00 218.59.184.134:3752 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 14 06:06:00 218.59.184.134:3777 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 14 06:06:00 218.59.184.134:3781 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 14 06:06:00 218.59.184.134:3796 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 14 06:06:01 218.59.184.134:3805 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 14 06:06:01 218.59.184.134:3811 -> xxx.yyy.255.253:1433 SYN ******S*
Dec 14 06:06:01 218.59.184.134:3817 -> xxx.yyy.255.254:1433 SYN ******S*
15513
[...]
15094
Dec 14 20:55:55 218.1.76.82:3786 -> xxx.yyy.131.167:1433 SYN ******S*
Dec 14 20:55:58 218.1.76.82:3788 -> xxx.yyy.131.168:1433 SYN ******S*
Dec 14 20:55:58 218.1.76.82:3789 -> xxx.yyy.131.169:1433 SYN ******S*
Dec 14 20:55:58 218.1.76.82:3791 -> xxx.yyy.131.171:1433 SYN ******S*
Dec 14 20:55:55 218.1.76.82:3793 -> xxx.yyy.131.172:1433 SYN ******S*
Dec 14 20:55:56 218.1.76.82:3823 -> xxx.yyy.131.181:1433 SYN ******S*
Dec 14 20:55:56 218.1.76.82:3826 -> xxx.yyy.131.184:1433 SYN ******S*
Dec 14 20:55:56 218.1.76.82:3840 -> xxx.yyy.131.186:1433 SYN ******S*
[...]
Dec 14 21:30:33 218.1.76.82:4488 -> xxx.yyy.170.71:1433 SYN ******S*
Dec 14 21:30:33 218.1.76.82:4489 -> xxx.yyy.170.72:1433 SYN ******S*
Dec 14 21:30:33 218.1.76.82:4487 -> xxx.yyy.170.70:1433 SYN ******S*
Dec 14 21:30:33 218.1.76.82:4485 -> xxx.yyy.170.68:1433 SYN ******S*
Dec 14 21:30:33 218.1.76.82:4499 -> xxx.yyy.170.79:1433 SYN ******S*
Dec 14 21:30:33 218.1.76.82:4498 -> xxx.yyy.170.78:1433 SYN ******S*
Dec 14 21:30:33 218.1.76.82:4502 -> xxx.yyy.170.81:1433 SYN ******S*
Dec 14 21:30:35 218.1.76.82:4528 -> xxx.yyy.170.82:1433 SYN ******S*
Dec 14 21:30:37 218.1.76.82:4542 -> xxx.yyy.170.85:1433 SYN ******S*
15055
Dec 14 11:48:05 83.16.176.250:1376 -> xxx.yyy.1.24:1433 SYN ******S*
Dec 14 11:48:05 83.16.176.250:1378 -> xxx.yyy.1.25:1433 SYN ******S*
Dec 14 11:48:05 83.16.176.250:1382 -> xxx.yyy.1.27:1433 SYN ******S*
Dec 14 11:48:05 83.16.176.250:1388 -> xxx.yyy.1.30:1433 SYN ******S*
Dec 14 11:48:05 83.16.176.250:1390 -> xxx.yyy.1.31:1433 SYN ******S*
Dec 14 11:48:05 83.16.176.250:1399 -> xxx.yyy.1.36:1433 SYN ******S*
Dec 14 11:48:05 83.16.176.250:1400 -> xxx.yyy.1.37:1433 SYN ******S*
Dec 14 11:48:06 83.16.176.250:1342 -> xxx.yyy.1.3:1433 SYN ******S*
[...]
Dec 14 13:27:25 83.16.176.250:1791 -> xxx.yyy.111.161:1433 SYN ******S*
Dec 14 13:27:25 83.16.176.250:1789 -> xxx.yyy.111.159:1433 SYN ******S*
Dec 14 13:27:25 83.16.176.250:1792 -> xxx.yyy.111.162:1433 SYN ******S*
Dec 14 13:27:25 83.16.176.250:1798 -> xxx.yyy.111.168:1433 SYN ******S*
Dec 14 13:27:25 83.16.176.250:1802 -> xxx.yyy.111.172:1433 SYN ******S*
Dec 14 13:27:25 83.16.176.250:1804 -> xxx.yyy.111.173:1433 SYN ******S*
Dec 14 13:27:26 83.16.176.250:1813 -> xxx.yyy.111.179:1433 SYN ******S*
Dec 14 13:27:26 83.16.176.250:1815 -> xxx.yyy.111.181:1433 SYN ******S*
Dec 14 13:27:26 83.16.176.250:1821 -> xxx.yyy.111.185:1433 SYN ******S*
13351
[...]
12202
[...]
11296
[...]
11106
Dec 14 06:56:45 80.180.217.191:4251 -> xxx.yyy.154.101:5554 SYN ******S*
Dec 14 06:56:46 80.180.217.191:1160 -> xxx.yyy.154.101:1023 SYN ******S*
Dec 14 06:56:48 80.180.217.191:2156 -> xxx.yyy.154.101:9898 SYN ******S*
Dec 14 06:56:45 80.180.217.191:4255 -> xxx.yyy.154.104:5554 SYN ******S*
Dec 14 06:56:48 80.180.217.191:2082 -> xxx.yyy.154.104:9898 SYN ******S*
Dec 14 06:56:45 80.180.217.191:4254 -> xxx.yyy.154.103:5554 SYN ******S*
Dec 14 06:56:46 80.180.217.191:1162 -> xxx.yyy.154.103:1023 SYN ******S*
Dec 14 06:56:48 80.180.217.191:2158 -> xxx.yyy.154.103:9898 SYN ******S*
[...]
Dec 14 06:57:34 80.180.217.191:1666 -> xxx.yyy.174.217:9898 SYN ******S*
Dec 14 06:57:34 80.180.217.191:1665 -> xxx.yyy.174.216:9898 SYN ******S*
Dec 14 06:57:34 80.180.217.191:1668 -> xxx.yyy.174.219:9898 SYN ******S*
Dec 14 06:57:34 80.180.217.191:1667 -> xxx.yyy.174.218:9898 SYN ******S*
Dec 14 06:57:34 80.180.217.191:1669 -> xxx.yyy.174.220:9898 SYN ******S*
Dec 14 06:57:34 80.180.217.191:1670 -> xxx.yyy.174.221:9898 SYN ******S*
Dec 14 06:57:34 80.180.217.191:1671 -> xxx.yyy.174.222:9898 SYN ******S*
Dec 14 06:57:34 80.180.217.191:1749 -> xxx.yyy.174.197:9898 SYN ******S*
10352
[...]
9507
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list