[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Sun Dec 19 21:17:10 GMT 2004
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Dec 17 17:53:39 165.247.109.162:3415 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 17 17:53:39 165.247.109.162:3411 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 17 17:53:39 165.247.109.162:3413 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 17 17:53:39 165.247.109.162:3410 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 17 17:53:39 165.247.109.162:3412 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 17 17:53:39 165.247.109.162:3414 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 17 17:53:39 165.247.109.162:3416 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 17 17:53:39 165.247.109.162:3417 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Dec 17 19:47:59 165.247.109.162:2244 -> xxx.yyy.255.212:1433 SYN ******S*
Dec 17 19:48:00 165.247.109.162:2239 -> xxx.yyy.255.209:1433 SYN ******S*
Dec 17 19:48:00 165.247.109.162:2245 -> xxx.yyy.255.213:1433 SYN ******S*
Dec 17 19:48:00 165.247.109.162:2247 -> xxx.yyy.255.215:1433 SYN ******S*
Dec 17 19:48:00 165.247.109.162:2248 -> xxx.yyy.255.216:1433 SYN ******S*
Dec 17 19:48:00 165.247.109.162:2241 -> xxx.yyy.255.210:1433 SYN ******S*
Dec 17 19:48:00 165.247.109.162:2246 -> xxx.yyy.255.214:1433 SYN ******S*
Dec 17 19:48:00 165.247.109.162:2251 -> xxx.yyy.255.219:1433 SYN ******S*
Dec 17 19:48:01 165.247.109.162:2253 -> xxx.yyy.255.220:1433 SYN ******S*
116307
Dec 17 01:53:03 62.203.225.114:60620 -> xxx.yyy.68.211:1433 SYN ******S*
Dec 17 01:53:03 62.203.225.114:60624 -> xxx.yyy.68.213:1433 SYN ******S*
Dec 17 01:53:03 62.203.225.114:60625 -> xxx.yyy.68.214:1433 SYN ******S*
Dec 17 01:53:03 62.203.225.114:60628 -> xxx.yyy.68.215:1433 SYN ******S*
Dec 17 01:53:03 62.203.225.114:60629 -> xxx.yyy.68.216:1433 SYN ******S*
Dec 17 01:53:03 62.203.225.114:60630 -> xxx.yyy.68.217:1433 SYN ******S*
Dec 17 01:53:01 62.203.225.114:60634 -> xxx.yyy.68.218:1433 SYN ******S*
Dec 17 01:53:01 62.203.225.114:60642 -> xxx.yyy.68.219:1433 SYN ******S*
[...]
Dec 17 04:40:51 62.203.225.114:51984 -> xxx.yyy.255.246:1433 SYN ******S*
Dec 17 04:40:52 62.203.225.114:51985 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 17 04:40:52 62.203.225.114:51994 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 17 04:40:52 62.203.225.114:51996 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 17 04:40:52 62.203.225.114:52001 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 17 04:40:52 62.203.225.114:52004 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 17 04:40:52 62.203.225.114:52006 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 17 04:40:53 62.203.225.114:52008 -> xxx.yyy.255.254:1433 SYN ******S*
Dec 17 04:40:53 62.203.225.114:52007 -> xxx.yyy.255.253:1433 SYN ******S*
107586
Dec 17 21:30:19 62.90.76.120:4248 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 17 21:30:19 62.90.76.120:4252 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 17 21:30:19 62.90.76.120:4254 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 17 21:30:19 62.90.76.120:4256 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 17 21:30:19 62.90.76.120:4259 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 17 21:30:19 62.90.76.120:4261 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 17 21:30:19 62.90.76.120:4262 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 17 21:30:19 62.90.76.120:4265 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
Dec 17 23:24:40 62.90.76.120:4514 -> xxx.yyy.255.246:1433 SYN ******S*
Dec 17 23:24:40 62.90.76.120:4509 -> xxx.yyy.255.245:1433 SYN ******S*
Dec 17 23:24:40 62.90.76.120:4540 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 17 23:24:41 62.90.76.120:4549 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 17 23:24:41 62.90.76.120:4551 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 17 23:24:41 62.90.76.120:4561 -> xxx.yyy.255.253:1433 SYN ******S*
Dec 17 23:24:41 62.90.76.120:4557 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 17 23:24:41 62.90.76.120:4570 -> xxx.yyy.255.254:1433 SYN ******S*
106283
Dec 17 05:07:00 219.91.16.213:4912 -> xxx.yyy.128.0:1433 SYN ******S*
Dec 17 05:07:00 219.91.16.213:4915 -> xxx.yyy.128.1:1433 SYN ******S*
Dec 17 05:07:00 219.91.16.213:4918 -> xxx.yyy.128.2:1433 SYN ******S*
Dec 17 05:07:00 219.91.16.213:4921 -> xxx.yyy.128.3:1433 SYN ******S*
Dec 17 05:07:00 219.91.16.213:4924 -> xxx.yyy.128.4:1433 SYN ******S*
Dec 17 05:07:00 219.91.16.213:4927 -> xxx.yyy.128.5:1433 SYN ******S*
Dec 17 05:07:00 219.91.16.213:4930 -> xxx.yyy.128.6:1433 SYN ******S*
Dec 17 05:07:00 219.91.16.213:4933 -> xxx.yyy.128.7:1433 SYN ******S*
[...]
Dec 17 07:01:57 219.91.16.213:3479 -> xxx.yyy.255.244:1433 SYN ******S*
Dec 17 07:01:58 219.91.16.213:3482 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 17 07:01:58 219.91.16.213:3490 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 17 07:01:58 219.91.16.213:3489 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 17 07:01:58 219.91.16.213:3495 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 17 07:01:58 219.91.16.213:3498 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 17 07:01:58 219.91.16.213:3502 -> xxx.yyy.255.253:1433 SYN ******S*
Dec 17 07:01:58 219.91.16.213:3501 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 17 07:01:58 219.91.16.213:3507 -> xxx.yyy.255.254:1433 SYN ******S*
92220
Dec 17 20:13:47 200.37.94.221:4027 -> xxx.yyy.1.18:1433 SYN ******S*
Dec 17 20:13:47 200.37.94.221:4030 -> xxx.yyy.1.19:1433 SYN ******S*
Dec 17 20:13:47 200.37.94.221:4031 -> xxx.yyy.1.36:1433 SYN ******S*
Dec 17 20:13:47 200.37.94.221:4034 -> xxx.yyy.1.35:1433 SYN ******S*
Dec 17 20:13:47 200.37.94.221:4035 -> xxx.yyy.1.34:1433 SYN ******S*
Dec 17 20:13:47 200.37.94.221:4036 -> xxx.yyy.1.33:1433 SYN ******S*
Dec 17 20:13:47 200.37.94.221:4049 -> xxx.yyy.1.28:1433 SYN ******S*
Dec 17 20:13:44 200.37.94.221:4058 -> xxx.yyy.1.21:1433 SYN ******S*
[...]
Dec 17 23:01:06 200.37.94.221:3355 -> xxx.yyy.255.237:1433 SYN ******S*
Dec 17 23:01:06 200.37.94.221:3640 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 17 23:01:06 200.37.94.221:3622 -> xxx.yyy.255.246:1433 SYN ******S*
Dec 17 23:01:06 200.37.94.221:3611 -> xxx.yyy.255.245:1433 SYN ******S*
Dec 17 23:01:06 200.37.94.221:3578 -> xxx.yyy.255.244:1433 SYN ******S*
Dec 17 23:01:06 200.37.94.221:3710 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 17 23:01:07 200.37.94.221:3889 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 17 23:01:07 200.37.94.221:3815 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 17 23:01:07 200.37.94.221:4085 -> xxx.yyy.255.254:1433 SYN ******S*
89682
Dec 17 22:25:17 64.5.227.202:1111 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 17 22:25:17 64.5.227.202:1108 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 17 22:25:14 64.5.227.202:1112 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 17 22:25:17 64.5.227.202:1113 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 17 22:25:17 64.5.227.202:1114 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 17 22:25:17 64.5.227.202:1116 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 17 22:25:17 64.5.227.202:1115 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 17 22:25:17 64.5.227.202:1118 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
Dec 17 22:55:47 64.5.227.202:1101 -> xxx.yyy.255.244:1433 SYN ******S*
Dec 17 22:55:47 64.5.227.202:1069 -> xxx.yyy.255.212:1433 SYN ******S*
Dec 17 22:55:47 64.5.227.202:1034 -> xxx.yyy.255.177:1433 SYN ******S*
Dec 17 22:55:47 64.5.227.202:1053 -> xxx.yyy.255.196:1433 SYN ******S*
Dec 17 22:55:47 64.5.227.202:1063 -> xxx.yyy.255.206:1433 SYN ******S*
Dec 17 22:55:47 64.5.227.202:1050 -> xxx.yyy.255.193:1433 SYN ******S*
Dec 17 22:55:47 64.5.227.202:1079 -> xxx.yyy.255.222:1433 SYN ******S*
Dec 17 22:55:47 64.5.227.202:1031 -> xxx.yyy.255.174:1433 SYN ******S*
73629
Dec 17 11:44:20 128.93.23.80:39333 -> xxx.yyy.1.0:6112 SYN ******S*
Dec 17 11:44:20 128.93.23.80:39335 -> xxx.yyy.1.2:6112 SYN ******S*
Dec 17 11:44:23 128.93.23.80:39338 -> xxx.yyy.1.5:6112 SYN ******S*
Dec 17 11:44:23 128.93.23.80:39339 -> xxx.yyy.1.6:6112 SYN ******S*
Dec 17 11:44:20 128.93.23.80:39342 -> xxx.yyy.1.9:6112 SYN ******S*
Dec 17 11:44:20 128.93.23.80:39343 -> xxx.yyy.1.10:6112 SYN ******S*
Dec 17 11:44:20 128.93.23.80:39344 -> xxx.yyy.1.11:6112 SYN ******S*
Dec 17 11:44:23 128.93.23.80:39345 -> xxx.yyy.1.12:6112 SYN ******S*
[...]
Dec 17 12:10:25 128.93.23.80:39081 -> xxx.yyy.255.246:6112 SYN ******S*
Dec 17 12:10:25 128.93.23.80:39082 -> xxx.yyy.255.247:6112 SYN ******S*
Dec 17 12:10:25 128.93.23.80:39083 -> xxx.yyy.255.248:6112 SYN ******S*
Dec 17 12:10:25 128.93.23.80:39084 -> xxx.yyy.255.249:6112 SYN ******S*
Dec 17 12:10:25 128.93.23.80:39085 -> xxx.yyy.255.250:6112 SYN ******S*
Dec 17 12:10:25 128.93.23.80:39086 -> xxx.yyy.255.251:6112 SYN ******S*
Dec 17 12:10:25 128.93.23.80:39087 -> xxx.yyy.255.252:6112 SYN ******S*
Dec 17 12:10:25 128.93.23.80:39088 -> xxx.yyy.255.253:6112 SYN ******S*
Dec 17 12:10:25 128.93.23.80:39089 -> xxx.yyy.255.254:6112 SYN ******S*
73117
Dec 17 04:08:16 199.174.241.87:2013 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 17 04:08:16 199.174.241.87:2014 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 17 04:08:16 199.174.241.87:2015 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 17 04:08:16 199.174.241.87:2016 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 17 04:08:16 199.174.241.87:2017 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 17 04:08:16 199.174.241.87:2019 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 17 04:08:16 199.174.241.87:2018 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 17 04:08:16 199.174.241.87:2020 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Dec 17 05:27:37 199.174.241.87:1139 -> xxx.yyy.178.75:1433 SYN ******S*
Dec 17 05:27:37 199.174.241.87:1150 -> xxx.yyy.178.86:1433 SYN ******S*
Dec 17 05:27:37 199.174.241.87:1147 -> xxx.yyy.178.83:1433 SYN ******S*
Dec 17 05:27:37 199.174.241.87:1151 -> xxx.yyy.178.87:1433 SYN ******S*
Dec 17 05:27:37 199.174.241.87:1148 -> xxx.yyy.178.84:1433 SYN ******S*
Dec 17 05:27:37 199.174.241.87:1152 -> xxx.yyy.178.88:1433 SYN ******S*
Dec 17 05:27:37 199.174.241.87:1149 -> xxx.yyy.178.85:1433 SYN ******S*
Dec 17 05:27:38 199.174.241.87:1216 -> xxx.yyy.178.94:1433 SYN ******S*
Dec 17 05:27:38 199.174.241.87:1217 -> xxx.yyy.178.95:1433 SYN ******S*
72981
Dec 17 00:00:04 222.140.67.161:4208 -> xxx.yyy.138.26:1433 SYN ******S*
Dec 17 00:00:07 222.140.67.161:4225 -> xxx.yyy.138.24:1433 SYN ******S*
Dec 17 00:00:04 222.140.67.161:4250 -> xxx.yyy.138.27:1433 SYN ******S*
Dec 17 00:00:04 222.140.67.161:4249 -> xxx.yyy.138.25:1433 SYN ******S*
Dec 17 00:00:04 222.140.67.161:4024 -> xxx.yyy.137.230:1433 SYN ******S*
Dec 17 00:00:07 222.140.67.161:4284 -> xxx.yyy.138.28:1433 SYN ******S*
Dec 17 00:00:05 222.140.67.161:4162 -> xxx.yyy.138.9:1433 SYN ******S*
Dec 17 00:00:05 222.140.67.161:4327 -> xxx.yyy.138.31:1433 SYN ******S*
[...]
Dec 17 01:47:27 222.140.67.161:3268 -> xxx.yyy.255.241:1433 SYN ******S*
Dec 17 01:47:27 222.140.67.161:3277 -> xxx.yyy.255.243:1433 SYN ******S*
Dec 17 01:47:28 222.140.67.161:3282 -> xxx.yyy.255.244:1433 SYN ******S*
Dec 17 01:47:28 222.140.67.161:3283 -> xxx.yyy.255.245:1433 SYN ******S*
Dec 17 01:47:28 222.140.67.161:3287 -> xxx.yyy.255.246:1433 SYN ******S*
Dec 17 01:47:28 222.140.67.161:3290 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 17 01:47:28 222.140.67.161:3292 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 17 01:47:28 222.140.67.161:3301 -> xxx.yyy.255.249:1433 SYN ******S*
72752
Dec 17 06:48:35 194.96.35.43:3293 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 17 06:48:35 194.96.35.43:3294 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 17 06:48:35 194.96.35.43:3295 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 17 06:48:35 194.96.35.43:3296 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 17 06:48:35 194.96.35.43:3297 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 17 06:48:35 194.96.35.43:3298 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 17 06:48:39 194.96.35.43:3299 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 17 06:48:35 194.96.35.43:3300 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Dec 17 06:59:45 194.96.35.43:1340 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 17 06:59:45 194.96.35.43:1336 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 17 06:59:45 194.96.35.43:1333 -> xxx.yyy.255.244:1433 SYN ******S*
Dec 17 06:59:45 194.96.35.43:1341 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 17 06:59:45 194.96.35.43:1337 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 17 06:59:45 194.96.35.43:1334 -> xxx.yyy.255.245:1433 SYN ******S*
Dec 17 06:59:45 194.96.35.43:1338 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 17 06:59:46 194.96.35.43:1343 -> xxx.yyy.255.254:1433 SYN ******S*
72686
Dec 17 00:59:56 208.218.73.138:3043 -> xxx.yyy.1.3:4899 SYN ******S*
Dec 17 00:59:58 208.218.73.138:3044 -> xxx.yyy.1.4:4899 SYN ******S*
Dec 17 00:59:58 208.218.73.138:3045 -> xxx.yyy.1.5:4899 SYN ******S*
Dec 17 00:59:55 208.218.73.138:3046 -> xxx.yyy.1.6:4899 SYN ******S*
Dec 17 00:59:56 208.218.73.138:3042 -> xxx.yyy.1.2:4899 SYN ******S*
Dec 17 00:59:56 208.218.73.138:3049 -> xxx.yyy.1.9:4899 SYN ******S*
Dec 17 00:59:58 208.218.73.138:3050 -> xxx.yyy.1.10:4899 SYN ******S*
Dec 17 00:59:56 208.218.73.138:3051 -> xxx.yyy.1.11:4899 SYN ******S*
[...]
Dec 17 01:26:16 208.218.73.138:2629 -> xxx.yyy.255.245:4899 SYN ******S*
Dec 17 01:26:16 208.218.73.138:2634 -> xxx.yyy.255.250:4899 SYN ******S*
Dec 17 01:26:16 208.218.73.138:2635 -> xxx.yyy.255.251:4899 SYN ******S*
Dec 17 01:26:16 208.218.73.138:2631 -> xxx.yyy.255.247:4899 SYN ******S*
Dec 17 01:26:16 208.218.73.138:2628 -> xxx.yyy.255.244:4899 SYN ******S*
Dec 17 01:26:16 208.218.73.138:2632 -> xxx.yyy.255.248:4899 SYN ******S*
Dec 17 01:26:16 208.218.73.138:2626 -> xxx.yyy.255.242:4899 SYN ******S*
Dec 17 01:26:16 208.218.73.138:2633 -> xxx.yyy.255.249:4899 SYN ******S*
71766
Dec 17 20:50:26 68.15.192.75:3121 -> xxx.yyy.1.1:4000 SYN ******S*
Dec 17 20:50:26 68.15.192.75:3124 -> xxx.yyy.1.2:4000 SYN ******S*
Dec 17 20:50:29 68.15.192.75:3128 -> xxx.yyy.1.4:4000 SYN ******S*
Dec 17 20:50:29 68.15.192.75:3130 -> xxx.yyy.1.5:4000 SYN ******S*
Dec 17 20:50:29 68.15.192.75:3132 -> xxx.yyy.1.6:4000 SYN ******S*
Dec 17 20:50:29 68.15.192.75:3136 -> xxx.yyy.1.7:4000 SYN ******S*
Dec 17 20:50:29 68.15.192.75:3139 -> xxx.yyy.1.8:4000 SYN ******S*
Dec 17 20:50:29 68.15.192.75:3141 -> xxx.yyy.1.9:4000 SYN ******S*
[...]
Dec 17 21:02:19 68.15.192.75:3518 -> xxx.yyy.255.246:4000 SYN ******S*
Dec 17 21:02:19 68.15.192.75:3520 -> xxx.yyy.255.247:4000 SYN ******S*
Dec 17 21:02:19 68.15.192.75:3522 -> xxx.yyy.255.248:4000 SYN ******S*
Dec 17 21:02:19 68.15.192.75:3524 -> xxx.yyy.255.249:4000 SYN ******S*
Dec 17 21:02:19 68.15.192.75:3530 -> xxx.yyy.255.252:4000 SYN ******S*
Dec 17 21:02:19 68.15.192.75:3526 -> xxx.yyy.255.250:4000 SYN ******S*
Dec 17 21:02:19 68.15.192.75:3528 -> xxx.yyy.255.251:4000 SYN ******S*
Dec 17 21:02:19 68.15.192.75:3532 -> xxx.yyy.255.253:4000 SYN ******S*
70360
Dec 17 19:25:36 217.66.251.29:1678 -> xxx.yyy.1.1:42 SYN ******S*
Dec 17 19:25:39 217.66.251.29:1680 -> xxx.yyy.1.3:42 SYN ******S*
Dec 17 19:25:39 217.66.251.29:1681 -> xxx.yyy.1.4:42 SYN ******S*
Dec 17 19:25:39 217.66.251.29:1679 -> xxx.yyy.1.2:42 SYN ******S*
Dec 17 19:25:39 217.66.251.29:1683 -> xxx.yyy.1.6:42 SYN ******S*
Dec 17 19:25:39 217.66.251.29:1682 -> xxx.yyy.1.5:42 SYN ******S*
Dec 17 19:25:36 217.66.251.29:1684 -> xxx.yyy.1.7:42 SYN ******S*
Dec 17 19:25:36 217.66.251.29:1685 -> xxx.yyy.1.8:42 SYN ******S*
[...]
Dec 17 19:38:01 217.66.251.29:3757 -> xxx.yyy.255.247:42 SYN ******S*
Dec 17 19:38:01 217.66.251.29:3755 -> xxx.yyy.255.245:42 SYN ******S*
Dec 17 19:38:01 217.66.251.29:3754 -> xxx.yyy.255.244:42 SYN ******S*
Dec 17 19:38:01 217.66.251.29:3762 -> xxx.yyy.255.252:42 SYN ******S*
Dec 17 19:38:01 217.66.251.29:3763 -> xxx.yyy.255.253:42 SYN ******S*
Dec 17 19:38:01 217.66.251.29:3759 -> xxx.yyy.255.249:42 SYN ******S*
Dec 17 19:38:01 217.66.251.29:3764 -> xxx.yyy.255.254:42 SYN ******S*
Dec 17 19:38:01 217.66.251.29:3761 -> xxx.yyy.255.251:42 SYN ******S*
Dec 17 19:38:01 217.66.251.29:3760 -> xxx.yyy.255.250:42 SYN ******S*
69144
Dec 17 02:20:45 68.216.43.99:4966 -> xxx.yyy.1.1:6129 SYN ******S*
Dec 17 02:20:45 68.216.43.99:4971 -> xxx.yyy.1.3:6129 SYN ******S*
Dec 17 02:20:47 68.216.43.99:4973 -> xxx.yyy.1.4:6129 SYN ******S*
Dec 17 02:20:47 68.216.43.99:4975 -> xxx.yyy.1.5:6129 SYN ******S*
Dec 17 02:20:47 68.216.43.99:4977 -> xxx.yyy.1.6:6129 SYN ******S*
Dec 17 02:20:47 68.216.43.99:4979 -> xxx.yyy.1.7:6129 SYN ******S*
Dec 17 02:20:44 68.216.43.99:4981 -> xxx.yyy.1.8:6129 SYN ******S*
Dec 17 02:20:45 68.216.43.99:4983 -> xxx.yyy.1.9:6129 SYN ******S*
[...]
Dec 17 02:32:33 68.216.43.99:3614 -> xxx.yyy.255.251:6129 SYN ******S*
Dec 17 02:32:33 68.216.43.99:3611 -> xxx.yyy.255.248:6129 SYN ******S*
Dec 17 02:32:33 68.216.43.99:3615 -> xxx.yyy.255.252:6129 SYN ******S*
Dec 17 02:32:33 68.216.43.99:3612 -> xxx.yyy.255.249:6129 SYN ******S*
Dec 17 02:32:33 68.216.43.99:3609 -> xxx.yyy.255.246:6129 SYN ******S*
Dec 17 02:32:33 68.216.43.99:3616 -> xxx.yyy.255.253:6129 SYN ******S*
Dec 17 02:32:33 68.216.43.99:3613 -> xxx.yyy.255.250:6129 SYN ******S*
Dec 17 02:32:33 68.216.43.99:3610 -> xxx.yyy.255.247:6129 SYN ******S*
67116
Dec 17 12:54:06 80.171.42.132:3266 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 17 12:54:09 80.171.42.132:3267 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 17 12:54:09 80.171.42.132:3268 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 17 12:54:06 80.171.42.132:3269 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 17 12:54:06 80.171.42.132:3272 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 17 12:54:09 80.171.42.132:3273 -> xxx.yyy.1.8:1433 SYN ******S*
Dec 17 12:54:09 80.171.42.132:3274 -> xxx.yyy.1.9:1433 SYN ******S*
Dec 17 12:54:09 80.171.42.132:3276 -> xxx.yyy.1.11:1433 SYN ******S*
[...]
Dec 17 13:05:46 80.171.42.132:4383 -> xxx.yyy.255.236:1433 SYN ******S*
Dec 17 13:05:46 80.171.42.132:4384 -> xxx.yyy.255.237:1433 SYN ******S*
Dec 17 13:05:46 80.171.42.132:4388 -> xxx.yyy.255.241:1433 SYN ******S*
Dec 17 13:05:46 80.171.42.132:4389 -> xxx.yyy.255.242:1433 SYN ******S*
Dec 17 13:05:46 80.171.42.132:4392 -> xxx.yyy.255.245:1433 SYN ******S*
Dec 17 13:05:46 80.171.42.132:4393 -> xxx.yyy.255.246:1433 SYN ******S*
Dec 17 13:05:46 80.171.42.132:4394 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 17 13:05:46 80.171.42.132:4396 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 17 13:05:46 80.171.42.132:4406 -> xxx.yyy.255.254:1433 SYN ******S*
62776
Dec 17 15:03:43 144.96.164.183:4806 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 17 15:03:43 144.96.164.183:4807 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 17 15:03:43 144.96.164.183:4808 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 17 15:03:43 144.96.164.183:4809 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 17 15:03:43 144.96.164.183:4810 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 17 15:03:43 144.96.164.183:4811 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 17 15:03:43 144.96.164.183:4812 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 17 15:03:43 144.96.164.183:4815 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
Dec 17 15:14:37 144.96.164.183:3453 -> xxx.yyy.255.240:1433 SYN ******S*
Dec 17 15:14:37 144.96.164.183:3457 -> xxx.yyy.255.244:1433 SYN ******S*
Dec 17 15:14:37 144.96.164.183:3464 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 17 15:14:37 144.96.164.183:3458 -> xxx.yyy.255.245:1433 SYN ******S*
Dec 17 15:14:37 144.96.164.183:3461 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 17 15:14:37 144.96.164.183:3459 -> xxx.yyy.255.246:1433 SYN ******S*
Dec 17 15:14:37 144.96.164.183:3463 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 17 15:14:37 144.96.164.183:3462 -> xxx.yyy.255.249:1433 SYN ******S*
61772
Dec 17 03:23:57 221.208.20.182:3724 -> xxx.yyy.1.21:1433 SYN ******S*
Dec 17 03:24:00 221.208.20.182:3726 -> xxx.yyy.1.22:1433 SYN ******S*
Dec 17 03:23:57 221.208.20.182:3719 -> xxx.yyy.1.20:1433 SYN ******S*
Dec 17 03:23:57 221.208.20.182:3720 -> xxx.yyy.1.19:1433 SYN ******S*
Dec 17 03:24:00 221.208.20.182:3733 -> xxx.yyy.1.24:1433 SYN ******S*
Dec 17 03:23:58 221.208.20.182:3742 -> xxx.yyy.1.26:1433 SYN ******S*
Dec 17 03:23:58 221.208.20.182:3732 -> xxx.yyy.1.23:1433 SYN ******S*
Dec 17 03:23:58 221.208.20.182:3741 -> xxx.yyy.1.25:1433 SYN ******S*
[...]
Dec 17 05:37:23 221.208.20.182:3026 -> xxx.yyy.147.138:1433 SYN ******S*
Dec 17 05:37:23 221.208.20.182:3345 -> xxx.yyy.147.197:1433 SYN ******S*
Dec 17 05:37:23 221.208.20.182:3281 -> xxx.yyy.147.164:1433 SYN ******S*
Dec 17 05:37:23 221.208.20.182:3346 -> xxx.yyy.147.198:1433 SYN ******S*
Dec 17 05:37:23 221.208.20.182:3347 -> xxx.yyy.147.199:1433 SYN ******S*
Dec 17 05:37:24 221.208.20.182:3288 -> xxx.yyy.147.167:1433 SYN ******S*
Dec 17 05:37:24 221.208.20.182:3351 -> xxx.yyy.147.200:1433 SYN ******S*
Dec 17 05:37:24 221.208.20.182:3352 -> xxx.yyy.147.201:1433 SYN ******S*
47924
Dec 17 12:29:42 200.54.172.178:3179 -> xxx.yyy.10.1:4899 SYN ******S*
Dec 17 12:29:42 200.54.172.178:3180 -> xxx.yyy.10.2:4899 SYN ******S*
Dec 17 12:29:42 200.54.172.178:3181 -> xxx.yyy.10.3:4899 SYN ******S*
Dec 17 12:29:42 200.54.172.178:3182 -> xxx.yyy.10.4:4899 SYN ******S*
Dec 17 12:29:41 200.54.172.178:3188 -> xxx.yyy.10.5:4899 SYN ******S*
Dec 17 12:29:41 200.54.172.178:3189 -> xxx.yyy.10.6:4899 SYN ******S*
Dec 17 12:29:41 200.54.172.178:3191 -> xxx.yyy.10.7:4899 SYN ******S*
Dec 17 12:29:41 200.54.172.178:3192 -> xxx.yyy.10.8:4899 SYN ******S*
[...]
Dec 17 12:42:27 200.54.172.178:3807 -> xxx.yyy.254.248:4899 SYN ******S*
Dec 17 12:42:27 200.54.172.178:3811 -> xxx.yyy.254.251:4899 SYN ******S*
Dec 17 12:42:27 200.54.172.178:3812 -> xxx.yyy.254.252:4899 SYN ******S*
Dec 17 12:42:27 200.54.172.178:3813 -> xxx.yyy.254.253:4899 SYN ******S*
Dec 17 12:42:28 200.54.172.178:3509 -> xxx.yyy.254.65:4899 SYN ******S*
Dec 17 12:42:28 200.54.172.178:3511 -> xxx.yyy.254.66:4899 SYN ******S*
Dec 17 12:42:28 200.54.172.178:3508 -> xxx.yyy.254.64:4899 SYN ******S*
Dec 17 12:42:28 200.54.172.178:3505 -> xxx.yyy.254.63:4899 SYN ******S*
45759
Dec 17 02:36:35 211.53.90.114:4546 -> xxx.yyy.1.1:4899 SYN ******S*
Dec 17 02:36:35 211.53.90.114:4549 -> xxx.yyy.1.2:4899 SYN ******S*
Dec 17 02:36:35 211.53.90.114:4550 -> xxx.yyy.1.3:4899 SYN ******S*
Dec 17 02:36:34 211.53.90.114:4552 -> xxx.yyy.1.4:4899 SYN ******S*
Dec 17 02:36:34 211.53.90.114:4553 -> xxx.yyy.1.5:4899 SYN ******S*
Dec 17 02:36:34 211.53.90.114:4559 -> xxx.yyy.1.7:4899 SYN ******S*
Dec 17 02:36:34 211.53.90.114:4558 -> xxx.yyy.1.6:4899 SYN ******S*
Dec 17 02:36:34 211.53.90.114:4572 -> xxx.yyy.1.12:4899 SYN ******S*
[...]
Dec 17 02:41:32 211.53.90.114:1980 -> xxx.yyy.254.252:4899 SYN ******S*
Dec 17 02:41:32 211.53.90.114:1972 -> xxx.yyy.254.245:4899 SYN ******S*
Dec 17 02:41:32 211.53.90.114:1971 -> xxx.yyy.254.244:4899 SYN ******S*
Dec 17 02:41:32 211.53.90.114:1961 -> xxx.yyy.254.236:4899 SYN ******S*
Dec 17 02:41:32 211.53.90.114:1979 -> xxx.yyy.254.251:4899 SYN ******S*
Dec 17 02:41:32 211.53.90.114:1981 -> xxx.yyy.254.253:4899 SYN ******S*
Dec 17 02:41:32 211.53.90.114:1975 -> xxx.yyy.254.248:4899 SYN ******S*
Dec 17 02:41:32 211.53.90.114:1977 -> xxx.yyy.254.249:4899 SYN ******S*
Dec 17 02:41:32 211.53.90.114:1978 -> xxx.yyy.254.250:4899 SYN ******S*
41733
Dec 17 12:23:03 219.117.242.252:3163 -> xxx.yyy.1.1:4899 SYN ******S*
Dec 17 12:23:03 219.117.242.252:3164 -> xxx.yyy.1.2:4899 SYN ******S*
Dec 17 12:23:02 219.117.242.252:3166 -> xxx.yyy.1.4:4899 SYN ******S*
Dec 17 12:23:03 219.117.242.252:3165 -> xxx.yyy.1.3:4899 SYN ******S*
Dec 17 12:23:02 219.117.242.252:3177 -> xxx.yyy.1.7:4899 SYN ******S*
Dec 17 12:23:02 219.117.242.252:3178 -> xxx.yyy.1.8:4899 SYN ******S*
Dec 17 12:23:05 219.117.242.252:3184 -> xxx.yyy.1.11:4899 SYN ******S*
Dec 17 12:23:02 219.117.242.252:3183 -> xxx.yyy.1.10:4899 SYN ******S*
[...]
Dec 17 12:39:21 219.117.242.252:2749 -> xxx.yyy.255.235:4899 SYN ******S*
Dec 17 12:39:21 219.117.242.252:2756 -> xxx.yyy.255.238:4899 SYN ******S*
Dec 17 12:39:21 219.117.242.252:2759 -> xxx.yyy.255.240:4899 SYN ******S*
Dec 17 12:39:21 219.117.242.252:2764 -> xxx.yyy.255.243:4899 SYN ******S*
Dec 17 12:39:21 219.117.242.252:2763 -> xxx.yyy.255.242:4899 SYN ******S*
Dec 17 12:39:21 219.117.242.252:2767 -> xxx.yyy.255.244:4899 SYN ******S*
Dec 17 12:39:21 219.117.242.252:2768 -> xxx.yyy.255.245:4899 SYN ******S*
Dec 17 12:39:21 219.117.242.252:2781 -> xxx.yyy.255.253:4899 SYN ******S*
Dec 17 12:39:21 219.117.242.252:2782 -> xxx.yyy.255.254:4899 SYN ******S*
38800
Dec 17 02:16:24 203.236.214.206:80 -> xxx.yyy.1.6:80 SYN ******S*
Dec 17 02:16:24 203.236.214.206:80 -> xxx.yyy.1.1:80 SYN ******S*
Dec 17 02:16:24 203.236.214.206:80 -> xxx.yyy.1.3:80 SYN ******S*
Dec 17 02:16:24 203.236.214.206:80 -> xxx.yyy.1.4:80 SYN ******S*
Dec 17 02:16:24 203.236.214.206:80 -> xxx.yyy.1.2:80 SYN ******S*
Dec 17 02:16:24 203.236.214.206:80 -> xxx.yyy.1.5:80 SYN ******S*
Dec 17 02:16:24 203.236.214.206:80 -> xxx.yyy.1.7:80 SYN ******S*
Dec 17 02:16:24 203.236.214.206:80 -> xxx.yyy.1.8:80 SYN ******S*
[...]
Dec 17 02:18:31 203.236.214.206:4509 -> xxx.yyy.248.45:80 SYN ******S*
Dec 17 02:18:31 203.236.214.206:4510 -> xxx.yyy.248.80:80 SYN ******S*
Dec 17 02:18:31 203.236.214.206:4511 -> xxx.yyy.249.249:80 SYN ******S*
Dec 17 02:18:31 203.236.214.206:4512 -> xxx.yyy.249.5:80 SYN ******S*
Dec 17 02:18:31 203.236.214.206:4513 -> xxx.yyy.252.124:80 SYN ******S*
Dec 17 02:18:31 203.236.214.206:4516 -> xxx.yyy.253.72:80 SYN ******S*
Dec 17 02:18:31 203.236.214.206:4517 -> xxx.yyy.29.214:80 SYN ******S*
Dec 17 02:18:31 203.236.214.206:4514 -> xxx.yyy.252.20:80 SYN ******S*
Dec 17 02:18:31 203.236.214.206:4515 -> xxx.yyy.252.21:80 SYN ******S*
38617
Dec 17 14:31:26 200.217.52.196:4363 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 17 14:31:26 200.217.52.196:4364 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 17 14:31:26 200.217.52.196:4367 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 17 14:31:23 200.217.52.196:4370 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 17 14:31:26 200.217.52.196:4373 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 17 14:31:26 200.217.52.196:4374 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 17 14:31:26 200.217.52.196:4377 -> xxx.yyy.1.8:1433 SYN ******S*
Dec 17 14:31:26 200.217.52.196:4380 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
Dec 17 15:33:49 200.217.52.196:3396 -> xxx.yyy.138.79:1433 SYN ******S*
Dec 17 15:33:49 200.217.52.196:3458 -> xxx.yyy.138.112:1433 SYN ******S*
Dec 17 15:33:49 200.217.52.196:3280 -> xxx.yyy.138.33:1433 SYN ******S*
Dec 17 15:33:49 200.217.52.196:3399 -> xxx.yyy.138.82:1433 SYN ******S*
Dec 17 15:33:49 200.217.52.196:3283 -> xxx.yyy.138.34:1433 SYN ******S*
Dec 17 15:33:49 200.217.52.196:3462 -> xxx.yyy.138.114:1433 SYN ******S*
Dec 17 15:33:49 200.217.52.196:3463 -> xxx.yyy.138.115:1433 SYN ******S*
Dec 17 15:33:49 200.217.52.196:3464 -> xxx.yyy.138.116:1433 SYN ******S*
36513
Dec 17 03:28:06 82.169.98.102:19368 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 17 03:28:06 82.169.98.102:19371 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 17 03:28:06 82.169.98.102:19377 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 17 03:28:07 82.169.98.102:19386 -> xxx.yyy.1.11:1433 SYN ******S*
Dec 17 03:28:07 82.169.98.102:19391 -> xxx.yyy.1.13:1433 SYN ******S*
Dec 17 03:28:07 82.169.98.102:19395 -> xxx.yyy.1.14:1433 SYN ******S*
Dec 17 03:28:07 82.169.98.102:19397 -> xxx.yyy.1.16:1433 SYN ******S*
Dec 17 03:28:07 82.169.98.102:19398 -> xxx.yyy.1.17:1433 SYN ******S*
[...]
Dec 17 07:31:48 82.169.98.102:20448 -> xxx.yyy.255.236:1433 SYN ******S*
Dec 17 07:31:48 82.169.98.102:21117 -> xxx.yyy.255.237:1433 SYN ******S*
Dec 17 07:31:49 82.169.98.102:20470 -> xxx.yyy.255.239:1433 SYN ******S*
Dec 17 07:31:49 82.169.98.102:20201 -> xxx.yyy.255.240:1433 SYN ******S*
Dec 17 07:31:49 82.169.98.102:20485 -> xxx.yyy.255.241:1433 SYN ******S*
Dec 17 07:31:49 82.169.98.102:20493 -> xxx.yyy.255.242:1433 SYN ******S*
Dec 17 07:31:50 82.169.98.102:20501 -> xxx.yyy.255.244:1433 SYN ******S*
Dec 17 07:31:52 82.169.98.102:20904 -> xxx.yyy.255.252:1433 SYN ******S*
35311
Dec 17 20:46:04 60.185.20.90:2503 -> xxx.yyy.1.31:1433 SYN ******S*
Dec 17 20:46:04 60.185.20.90:2505 -> xxx.yyy.1.32:1433 SYN ******S*
Dec 17 20:46:05 60.185.20.90:2509 -> xxx.yyy.1.34:1433 SYN ******S*
Dec 17 20:46:05 60.185.20.90:2512 -> xxx.yyy.1.35:1433 SYN ******S*
Dec 17 20:46:02 60.185.20.90:2514 -> xxx.yyy.1.36:1433 SYN ******S*
Dec 17 20:46:05 60.185.20.90:2518 -> xxx.yyy.1.38:1433 SYN ******S*
Dec 17 20:46:05 60.185.20.90:2522 -> xxx.yyy.1.39:1433 SYN ******S*
Dec 17 20:46:04 60.185.20.90:2452 -> xxx.yyy.1.1:1433 SYN ******S*
[...]
Dec 17 23:05:51 60.185.20.90:2521 -> xxx.yyy.156.168:1433 SYN ******S*
Dec 17 23:05:51 60.185.20.90:2756 -> xxx.yyy.156.182:1433 SYN ******S*
Dec 17 23:05:51 60.185.20.90:2763 -> xxx.yyy.156.184:1433 SYN ******S*
Dec 17 23:05:52 60.185.20.90:2776 -> xxx.yyy.156.186:1433 SYN ******S*
Dec 17 23:05:52 60.185.20.90:2778 -> xxx.yyy.156.188:1433 SYN ******S*
Dec 17 23:05:52 60.185.20.90:2742 -> xxx.yyy.156.176:1433 SYN ******S*
Dec 17 23:05:52 60.185.20.90:2743 -> xxx.yyy.156.177:1433 SYN ******S*
Dec 17 23:05:52 60.185.20.90:2782 -> xxx.yyy.156.189:1433 SYN ******S*
32878
[...]
32516
Dec 17 03:08:41 211.161.88.128:2376 -> xxx.yyy.1.118:1433 SYN ******S*
Dec 17 03:08:41 211.161.88.128:2377 -> xxx.yyy.1.119:1433 SYN ******S*
Dec 17 03:08:41 211.161.88.128:2384 -> xxx.yyy.1.121:1433 SYN ******S*
Dec 17 03:08:41 211.161.88.128:2382 -> xxx.yyy.1.120:1433 SYN ******S*
Dec 17 03:08:41 211.161.88.128:2387 -> xxx.yyy.1.122:1433 SYN ******S*
Dec 17 03:08:41 211.161.88.128:2401 -> xxx.yyy.1.123:1433 SYN ******S*
Dec 17 03:08:41 211.161.88.128:2403 -> xxx.yyy.1.124:1433 SYN ******S*
Dec 17 03:08:41 211.161.88.128:2405 -> xxx.yyy.1.125:1433 SYN ******S*
[...]
Dec 17 04:48:06 211.161.88.128:3426 -> xxx.yyy.111.248:1433 SYN ******S*
Dec 17 04:48:06 211.161.88.128:3428 -> xxx.yyy.111.249:1433 SYN ******S*
Dec 17 04:48:07 211.161.88.128:3441 -> xxx.yyy.111.250:1433 SYN ******S*
Dec 17 04:48:07 211.161.88.128:3444 -> xxx.yyy.111.251:1433 SYN ******S*
Dec 17 04:48:08 211.161.88.128:3449 -> xxx.yyy.111.252:1433 SYN ******S*
Dec 17 04:48:08 211.161.88.128:3451 -> xxx.yyy.111.253:1433 SYN ******S*
Dec 17 04:48:08 211.161.88.128:3456 -> xxx.yyy.111.255:1433 SYN ******S*
Dec 17 04:48:08 211.161.88.128:3455 -> xxx.yyy.111.254:1433 SYN ******S*
32258
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list