[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Tue Dec 21 13:04:13 GMT 2004
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Dec 20 03:05:49 221.194.22.194:2459 -> xxx.yyy.1.0:1433 SYN ******S*
Dec 20 03:05:49 221.194.22.194:2460 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 20 03:05:49 221.194.22.194:2461 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 20 03:05:49 221.194.22.194:2462 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 20 03:05:49 221.194.22.194:2463 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 20 03:05:49 221.194.22.194:2464 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 20 03:05:49 221.194.22.194:2465 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 20 03:05:49 221.194.22.194:2466 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Dec 20 23:18:38 221.194.22.194:1258 -> xxx.yyy.196.12:1433 SYN ******S*
Dec 20 23:18:38 221.194.22.194:4313 -> xxx.yyy.195.231:1433 SYN ******S*
Dec 20 23:18:38 221.194.22.194:4383 -> xxx.yyy.195.232:1433 SYN ******S*
Dec 20 23:18:38 221.194.22.194:4453 -> xxx.yyy.195.233:1433 SYN ******S*
Dec 20 23:18:38 221.194.22.194:1321 -> xxx.yyy.196.14:1433 SYN ******S*
Dec 20 23:18:38 221.194.22.194:1312 -> xxx.yyy.196.13:1433 SYN ******S*
Dec 20 23:18:38 221.194.22.194:4459 -> xxx.yyy.195.234:1433 SYN ******S*
Dec 20 23:18:38 221.194.22.194:1332 -> xxx.yyy.196.15:1433 SYN ******S*
200571
Dec 20 17:04:51 205.179.12.170:47494 -> xxx.yyy.4.1:80 SYN ******S*
Dec 20 17:04:51 205.179.12.170:47497 -> xxx.yyy.10.1:80 SYN ******S*
Dec 20 17:04:51 205.179.12.170:47499 -> xxx.yyy.14.1:80 SYN ******S*
Dec 20 17:04:51 205.179.12.170:47500 -> xxx.yyy.16.1:80 SYN ******S*
Dec 20 17:04:51 205.179.12.170:47502 -> xxx.yyy.20.1:80 SYN ******S*
Dec 20 17:04:51 205.179.12.170:47503 -> xxx.yyy.22.1:80 SYN ******S*
Dec 20 17:04:51 205.179.12.170:47508 -> xxx.yyy.32.1:80 SYN ******S*
Dec 20 17:04:49 205.179.12.170:47524 -> xxx.yyy.64.1:80 SYN ******S*
[...]
Dec 20 23:59:54 205.179.12.170:64138 -> xxx.yyy.183.252:80 SYN ******S*
Dec 20 23:59:57 205.179.12.170:64139 -> xxx.yyy.255.252:80 SYN ******S*
Dec 20 23:59:57 205.179.12.170:64140 -> xxx.yyy.95.252:80 SYN ******S*
Dec 20 23:59:57 205.179.12.170:64141 -> xxx.yyy.251.252:80 SYN ******S*
Dec 20 23:59:57 205.179.12.170:64144 -> xxx.yyy.187.252:80 SYN ******S*
Dec 20 23:59:57 205.179.12.170:64149 -> xxx.yyy.219.252:80 SYN ******S*
Dec 20 23:59:57 205.179.12.170:64150 -> xxx.yyy.91.252:80 SYN ******S*
Dec 20 23:59:57 205.179.12.170:64151 -> xxx.yyy.175.252:80 SYN ******S*
Dec 20 23:59:56 205.179.12.170:64161 -> xxx.yyy.163.253:80 SYN ******S*
150377
Dec 20 03:32:21 81.172.76.42:1120 -> xxx.yyy.1.0:1433 SYN ******S*
Dec 20 03:32:21 81.172.76.42:1121 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 20 03:32:21 81.172.76.42:1123 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 20 03:32:21 81.172.76.42:1122 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 20 03:32:21 81.172.76.42:1126 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 20 03:32:21 81.172.76.42:1124 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 20 03:32:21 81.172.76.42:1129 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 20 03:32:21 81.172.76.42:1133 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Dec 20 07:30:54 81.172.76.42:2797 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 20 07:30:55 81.172.76.42:2866 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 20 07:30:55 81.172.76.42:2875 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 20 07:30:55 81.172.76.42:2891 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 20 07:30:55 81.172.76.42:2897 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 20 07:30:55 81.172.76.42:2902 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 20 07:30:55 81.172.76.42:2925 -> xxx.yyy.255.253:1433 SYN ******S*
Dec 20 07:30:56 81.172.76.42:2939 -> xxx.yyy.255.254:1433 SYN ******S*
123982
Dec 20 06:36:02 200.104.224.173:4239 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 20 06:36:01 200.104.224.173:4240 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 20 06:36:01 200.104.224.173:4241 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 20 06:36:02 200.104.224.173:4242 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 20 06:36:01 200.104.224.173:4243 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 20 06:36:01 200.104.224.173:4246 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 20 06:36:02 200.104.224.173:4247 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 20 06:36:01 200.104.224.173:4248 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Dec 20 14:20:26 200.104.224.173:3234 -> xxx.yyy.zzz.247:1433 SYN ******S*
Dec 20 14:20:26 200.104.224.173:3231 -> xxx.yyy.zzz.245:1433 SYN ******S*
Dec 20 14:20:26 200.104.224.173:3237 -> xxx.yyy.zzz.249:1433 SYN ******S*
Dec 20 14:20:26 200.104.224.173:3238 -> xxx.yyy.zzz.250:1433 SYN ******S*
Dec 20 14:20:26 200.104.224.173:3236 -> xxx.yyy.zzz.248:1433 SYN ******S*
Dec 20 14:20:26 200.104.224.173:3243 -> xxx.yyy.zzz.251:1433 SYN ******S*
Dec 20 14:20:27 200.104.224.173:3248 -> xxx.yyy.zzz.254:1433 SYN ******S*
Dec 20 14:20:27 200.104.224.173:3246 -> xxx.yyy.zzz.252:1433 SYN ******S*
Dec 20 14:20:27 200.104.224.173:3247 -> xxx.yyy.zzz.253:1433 SYN ******S*
123561
Dec 20 01:44:41 82.42.41.69:4204 -> xxx.yyy.1.0:1433 SYN ******S*
Dec 20 01:44:41 82.42.41.69:4205 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 20 01:44:41 82.42.41.69:4206 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 20 01:44:41 82.42.41.69:4207 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 20 01:44:41 82.42.41.69:4208 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 20 01:44:41 82.42.41.69:4209 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 20 01:44:41 82.42.41.69:4210 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 20 01:44:41 82.42.41.69:4211 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Dec 20 05:33:19 82.42.41.69:4311 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 20 05:33:19 82.42.41.69:4315 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 20 05:33:19 82.42.41.69:4313 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 20 05:33:19 82.42.41.69:4312 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 20 05:33:19 82.42.41.69:4309 -> xxx.yyy.255.246:1433 SYN ******S*
Dec 20 05:33:19 82.42.41.69:4318 -> xxx.yyy.255.253:1433 SYN ******S*
Dec 20 05:33:19 82.42.41.69:4319 -> xxx.yyy.255.254:1433 SYN ******S*
Dec 20 05:33:19 82.42.41.69:4317 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 20 05:33:19 82.42.41.69:4316 -> xxx.yyy.255.251:1433 SYN ******S*
118089
Dec 20 03:18:24 66.159.198.158:2641 -> xxx.yyy.1.1:4899 SYN ******S*
Dec 20 03:18:24 66.159.198.158:2642 -> xxx.yyy.1.2:4899 SYN ******S*
Dec 20 03:18:24 66.159.198.158:2643 -> xxx.yyy.1.3:4899 SYN ******S*
Dec 20 03:18:25 66.159.198.158:2644 -> xxx.yyy.1.4:4899 SYN ******S*
Dec 20 03:18:25 66.159.198.158:2645 -> xxx.yyy.1.5:4899 SYN ******S*
Dec 20 03:18:25 66.159.198.158:2646 -> xxx.yyy.1.6:4899 SYN ******S*
Dec 20 03:18:25 66.159.198.158:2647 -> xxx.yyy.1.7:4899 SYN ******S*
Dec 20 03:18:25 66.159.198.158:2648 -> xxx.yyy.1.8:4899 SYN ******S*
[...]
Dec 20 03:43:56 66.159.198.158:1403 -> xxx.yyy.255.230:4899 SYN ******S*
Dec 20 03:43:56 66.159.198.158:1387 -> xxx.yyy.255.214:4899 SYN ******S*
Dec 20 03:43:56 66.159.198.158:1419 -> xxx.yyy.255.246:4899 SYN ******S*
Dec 20 03:43:56 66.159.198.158:1416 -> xxx.yyy.255.243:4899 SYN ******S*
Dec 20 03:43:56 66.159.198.158:1400 -> xxx.yyy.255.227:4899 SYN ******S*
Dec 20 03:43:56 66.159.198.158:1384 -> xxx.yyy.255.211:4899 SYN ******S*
Dec 20 03:43:56 66.159.198.158:1397 -> xxx.yyy.255.224:4899 SYN ******S*
Dec 20 03:43:56 66.159.198.158:1413 -> xxx.yyy.255.240:4899 SYN ******S*
116814
Dec 20 04:47:22 203.231.180.193:1043 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 20 04:47:22 203.231.180.193:1042 -> xxx.yyy.1.0:1433 SYN ******S*
Dec 20 04:47:22 203.231.180.193:1045 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 20 04:47:22 203.231.180.193:1044 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 20 04:47:22 203.231.180.193:1046 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 20 04:47:22 203.231.180.193:1047 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 20 04:47:22 203.231.180.193:1048 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 20 04:47:22 203.231.180.193:1050 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Dec 20 08:36:00 203.231.180.193:4068 -> xxx.yyy.255.243:1433 SYN ******S*
Dec 20 08:36:00 203.231.180.193:4073 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 20 08:36:00 203.231.180.193:4077 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 20 08:36:00 203.231.180.193:4075 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 20 08:36:00 203.231.180.193:4080 -> xxx.yyy.255.254:1433 SYN ******S*
Dec 20 08:36:00 203.231.180.193:4078 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 20 08:36:00 203.231.180.193:4074 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 20 08:36:00 203.231.180.193:4079 -> xxx.yyy.255.253:1433 SYN ******S*
Dec 20 08:36:00 203.231.180.193:4076 -> xxx.yyy.255.250:1433 SYN ******S*
116658
Dec 20 11:45:43 201.252.77.228:3042 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 20 11:45:46 201.252.77.228:3043 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 20 11:45:46 201.252.77.228:3044 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 20 11:45:43 201.252.77.228:3045 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 20 11:45:43 201.252.77.228:3046 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 20 11:45:43 201.252.77.228:3047 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 20 11:45:46 201.252.77.228:3048 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 20 11:45:43 201.252.77.228:3049 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Dec 20 13:41:35 201.252.77.228:3182 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 20 13:41:35 201.252.77.228:3183 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 20 13:41:35 201.252.77.228:3180 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 20 13:41:35 201.252.77.228:3181 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 20 13:41:35 201.252.77.228:3185 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 20 13:41:35 201.252.77.228:3186 -> xxx.yyy.255.253:1433 SYN ******S*
Dec 20 13:41:35 201.252.77.228:3187 -> xxx.yyy.255.254:1433 SYN ******S*
Dec 20 13:41:35 201.252.77.228:3184 -> xxx.yyy.255.251:1433 SYN ******S*
113751
Dec 20 11:02:36 209.221.168.249:29170 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 20 11:02:36 209.221.168.249:29171 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 20 11:02:36 209.221.168.249:29172 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 20 11:02:36 209.221.168.249:29173 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 20 11:02:36 209.221.168.249:29174 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 20 11:02:36 209.221.168.249:29175 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 20 11:02:36 209.221.168.249:29176 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 20 11:02:36 209.221.168.249:29177 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Dec 20 13:03:15 209.221.168.249:15626 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 20 13:03:15 209.221.168.249:15627 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 20 13:03:15 209.221.168.249:15625 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 20 13:03:15 209.221.168.249:15632 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 20 13:03:15 209.221.168.249:15630 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 20 13:03:15 209.221.168.249:15639 -> xxx.yyy.255.253:1433 SYN ******S*
Dec 20 13:03:15 209.221.168.249:15638 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 20 13:03:16 209.221.168.249:15640 -> xxx.yyy.255.254:1433 SYN ******S*
108306
Dec 20 00:20:52 222.111.180.122:22002 -> xxx.yyy.128.0:1080 SYN ******S*
Dec 20 00:20:52 222.111.180.122:22002 -> xxx.yyy.128.0:10080 SYN ******S*
Dec 20 00:20:52 222.111.180.122:22002 -> xxx.yyy.128.0:3128 SYN ******S*
Dec 20 00:20:53 222.111.180.122:22002 -> xxx.yyy.128.1:1080 SYN ******S*
Dec 20 00:20:53 222.111.180.122:22002 -> xxx.yyy.128.1:10080 SYN ******S*
Dec 20 00:20:53 222.111.180.122:22002 -> xxx.yyy.128.1:3128 SYN ******S*
Dec 20 00:20:53 222.111.180.122:22002 -> xxx.yyy.128.2:1080 SYN ******S*
Dec 20 00:20:53 222.111.180.122:22002 -> xxx.yyy.128.2:10080 SYN ******S*
[...]
Dec 20 04:13:07 222.111.180.122:22002 -> xxx.yyy.255.253:1080 SYN ******S*
Dec 20 04:13:07 222.111.180.122:22002 -> xxx.yyy.255.253:10080 SYN ******S*
Dec 20 04:13:07 222.111.180.122:22002 -> xxx.yyy.255.253:3128 SYN ******S*
Dec 20 04:13:07 222.111.180.122:22002 -> xxx.yyy.255.254:1080 SYN ******S*
Dec 20 04:13:07 222.111.180.122:22002 -> xxx.yyy.255.254:10080 SYN ******S*
Dec 20 04:13:07 222.111.180.122:22002 -> xxx.yyy.255.254:3128 SYN ******S*
Dec 20 04:13:08 222.111.180.122:22002 -> xxx.yyy.255.255:1080 SYN ******S*
Dec 20 04:13:08 222.111.180.122:22002 -> xxx.yyy.255.255:10080 SYN ******S*
Dec 20 04:13:08 222.111.180.122:22002 -> xxx.yyy.255.255:3128 SYN ******S*
96554
Dec 20 06:48:03 213.36.130.168:3424 -> xxx.yyy.1.0:1433 SYN ******S*
Dec 20 06:48:02 213.36.130.168:3425 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 20 06:48:03 213.36.130.168:3427 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 20 06:48:03 213.36.130.168:3428 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 20 06:48:02 213.36.130.168:3429 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 20 06:48:03 213.36.130.168:3430 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 20 06:48:03 213.36.130.168:3431 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 20 06:48:03 213.36.130.168:3432 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Dec 20 10:16:56 213.36.130.168:4295 -> xxx.yyy.233.153:1433 SYN ******S*
Dec 20 10:16:56 213.36.130.168:4294 -> xxx.yyy.233.152:1433 SYN ******S*
Dec 20 10:16:56 213.36.130.168:4298 -> xxx.yyy.233.155:1433 SYN ******S*
Dec 20 10:16:56 213.36.130.168:4299 -> xxx.yyy.233.156:1433 SYN ******S*
Dec 20 10:16:56 213.36.130.168:4301 -> xxx.yyy.233.157:1433 SYN ******S*
Dec 20 10:16:56 213.36.130.168:4302 -> xxx.yyy.233.158:1433 SYN ******S*
Dec 20 10:16:56 213.36.130.168:4535 -> xxx.yyy.233.160:1433 SYN ******S*
Dec 20 10:16:56 213.36.130.168:4574 -> xxx.yyy.233.164:1433 SYN ******S*
95986
Dec 20 13:09:31 139.30.17.230:3417 -> xxx.yyy.1.0:1433 SYN ******S*
Dec 20 13:09:31 139.30.17.230:3418 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 20 13:09:31 139.30.17.230:3420 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 20 13:09:31 139.30.17.230:3423 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 20 13:09:31 139.30.17.230:3425 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 20 13:09:31 139.30.17.230:3426 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 20 13:09:31 139.30.17.230:3432 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 20 13:09:31 139.30.17.230:3435 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Dec 20 16:18:11 139.30.17.230:3586 -> xxx.yyy.211.117:1433 SYN ******S*
Dec 20 16:18:11 139.30.17.230:3604 -> xxx.yyy.211.118:1433 SYN ******S*
Dec 20 16:18:11 139.30.17.230:3615 -> xxx.yyy.211.120:1433 SYN ******S*
Dec 20 16:18:11 139.30.17.230:3617 -> xxx.yyy.211.121:1433 SYN ******S*
Dec 20 16:18:11 139.30.17.230:3625 -> xxx.yyy.211.122:1433 SYN ******S*
Dec 20 16:18:11 139.30.17.230:3626 -> xxx.yyy.211.123:1433 SYN ******S*
Dec 20 16:18:12 139.30.17.230:3487 -> xxx.yyy.211.98:1433 SYN ******S*
Dec 20 16:18:12 139.30.17.230:3632 -> xxx.yyy.211.124:1433 SYN ******S*
Dec 20 16:18:12 139.30.17.230:3634 -> xxx.yyy.211.125:1433 SYN ******S*
84495
Dec 20 13:28:26 65.244.206.86:4846 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 20 13:28:23 65.244.206.86:4850 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 20 13:28:26 65.244.206.86:4851 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 20 13:28:26 65.244.206.86:4854 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 20 13:28:26 65.244.206.86:4855 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 20 13:28:26 65.244.206.86:4856 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 20 13:28:26 65.244.206.86:4857 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 20 13:28:26 65.244.206.86:4858 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Dec 20 13:40:10 65.244.206.86:3039 -> xxx.yyy.255.238:1433 SYN ******S*
Dec 20 13:40:10 65.244.206.86:3070 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 20 13:40:10 65.244.206.86:3074 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 20 13:40:10 65.244.206.86:3064 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 20 13:40:10 65.244.206.86:3080 -> xxx.yyy.255.253:1433 SYN ******S*
Dec 20 13:40:10 65.244.206.86:3059 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 20 13:40:10 65.244.206.86:3068 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 20 13:40:10 65.244.206.86:3061 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 20 13:40:10 65.244.206.86:3055 -> xxx.yyy.255.246:1433 SYN ******S*
66027
Dec 20 21:28:38 81.62.235.212:49316 -> xxx.yyy.1.0:1433 SYN ******S*
Dec 20 21:28:38 81.62.235.212:49317 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 20 21:28:38 81.62.235.212:49318 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 20 21:28:38 81.62.235.212:49319 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 20 21:28:38 81.62.235.212:49321 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 20 21:28:38 81.62.235.212:49323 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 20 21:28:35 81.62.235.212:49325 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 20 21:28:38 81.62.235.212:49326 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Dec 20 23:59:59 81.62.235.212:62811 -> xxx.yyy.169.238:1433 SYN ******S*
Dec 20 23:59:59 81.62.235.212:62812 -> xxx.yyy.169.239:1433 SYN ******S*
Dec 20 23:59:59 81.62.235.212:62673 -> xxx.yyy.169.152:1433 SYN ******S*
Dec 20 23:59:59 81.62.235.212:62813 -> xxx.yyy.169.240:1433 SYN ******S*
Dec 20 23:59:59 81.62.235.212:62815 -> xxx.yyy.169.241:1433 SYN ******S*
Dec 20 23:59:59 81.62.235.212:62818 -> xxx.yyy.169.242:1433 SYN ******S*
Dec 20 23:59:59 81.62.235.212:62678 -> xxx.yyy.169.153:1433 SYN ******S*
Dec 20 23:59:59 81.62.235.212:62684 -> xxx.yyy.169.154:1433 SYN ******S*
63345
Dec 20 14:27:26 65.162.1.154:3698 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 20 14:27:26 65.162.1.154:3702 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 20 14:27:26 65.162.1.154:3700 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 20 14:27:26 65.162.1.154:3703 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 20 14:27:26 65.162.1.154:3705 -> xxx.yyy.1.8:1433 SYN ******S*
Dec 20 14:27:26 65.162.1.154:3706 -> xxx.yyy.1.9:1433 SYN ******S*
Dec 20 14:27:26 65.162.1.154:3709 -> xxx.yyy.1.12:1433 SYN ******S*
Dec 20 14:27:26 65.162.1.154:3707 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
Dec 20 14:31:13 65.162.1.154:3439 -> xxx.yyy.255.184:1433 SYN ******S*
Dec 20 14:31:13 65.162.1.154:3458 -> xxx.yyy.255.197:1433 SYN ******S*
Dec 20 14:31:13 65.162.1.154:3499 -> xxx.yyy.255.229:1433 SYN ******S*
Dec 20 14:31:13 65.162.1.154:3478 -> xxx.yyy.255.212:1433 SYN ******S*
Dec 20 14:31:13 65.162.1.154:3491 -> xxx.yyy.255.223:1433 SYN ******S*
Dec 20 14:31:13 65.162.1.154:3434 -> xxx.yyy.255.183:1433 SYN ******S*
Dec 20 14:31:13 65.162.1.154:3447 -> xxx.yyy.255.190:1433 SYN ******S*
Dec 20 14:31:13 65.162.1.154:3519 -> xxx.yyy.255.246:1433 SYN ******S*
63165
Dec 20 07:17:25 200.208.85.76:15011 -> xxx.yyy.65.254:1433 SYN ******S*
Dec 20 07:17:26 200.208.85.76:15028 -> xxx.yyy.65.255:1433 SYN ******S*
Dec 20 07:17:26 200.208.85.76:15033 -> xxx.yyy.66.0:1433 SYN ******S*
Dec 20 07:17:26 200.208.85.76:15045 -> xxx.yyy.66.1:1433 SYN ******S*
Dec 20 07:17:26 200.208.85.76:15047 -> xxx.yyy.66.2:1433 SYN ******S*
Dec 20 07:17:26 200.208.85.76:15054 -> xxx.yyy.66.3:1433 SYN ******S*
Dec 20 07:17:26 200.208.85.76:15055 -> xxx.yyy.66.4:1433 SYN ******S*
Dec 20 07:17:26 200.208.85.76:15056 -> xxx.yyy.66.5:1433 SYN ******S*
[...]
Dec 20 09:00:01 200.208.85.76:62140 -> xxx.yyy.255.59:1433 SYN ******S*
Dec 20 09:00:01 200.208.85.76:62144 -> xxx.yyy.255.63:1433 SYN ******S*
Dec 20 09:00:01 200.208.85.76:62142 -> xxx.yyy.255.61:1433 SYN ******S*
Dec 20 09:00:01 200.208.85.76:62143 -> xxx.yyy.255.62:1433 SYN ******S*
Dec 20 09:00:01 200.208.85.76:62138 -> xxx.yyy.255.57:1433 SYN ******S*
Dec 20 09:00:01 200.208.85.76:62141 -> xxx.yyy.255.60:1433 SYN ******S*
Dec 20 09:00:01 200.208.85.76:62139 -> xxx.yyy.255.58:1433 SYN ******S*
Dec 20 09:00:02 200.208.85.76:62146 -> xxx.yyy.255.65:1433 SYN ******S*
Dec 20 09:00:02 200.208.85.76:62145 -> xxx.yyy.255.64:1433 SYN ******S*
53091
Dec 20 00:00:02 211.162.99.206:1405 -> xxx.yyy.194.248:1433 SYN ******S*
Dec 20 00:00:03 211.162.99.206:1625 -> xxx.yyy.195.5:1433 SYN ******S*
Dec 20 00:00:03 211.162.99.206:2234 -> xxx.yyy.195.46:1433 SYN ******S*
Dec 20 00:00:04 211.162.99.206:1647 -> xxx.yyy.195.6:1433 SYN ******S*
Dec 20 00:00:07 211.162.99.206:2244 -> xxx.yyy.195.47:1433 SYN ******S*
Dec 20 00:00:04 211.162.99.206:1671 -> xxx.yyy.195.7:1433 SYN ******S*
Dec 20 00:00:04 211.162.99.206:1672 -> xxx.yyy.195.8:1433 SYN ******S*
Dec 20 00:00:04 211.162.99.206:1689 -> xxx.yyy.195.9:1433 SYN ******S*
[...]
Dec 20 01:00:05 211.162.99.206:2787 -> xxx.yyy.255.246:1433 SYN ******S*
Dec 20 01:00:05 211.162.99.206:2847 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 20 01:00:05 211.162.99.206:2822 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 20 01:00:05 211.162.99.206:2807 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 20 01:00:05 211.162.99.206:2914 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 20 01:00:06 211.162.99.206:2925 -> xxx.yyy.255.253:1433 SYN ******S*
Dec 20 01:00:06 211.162.99.206:2942 -> xxx.yyy.255.254:1433 SYN ******S*
Dec 20 01:00:06 211.162.99.206:2921 -> xxx.yyy.255.252:1433 SYN ******S*
42767
Dec 20 15:01:55 216.205.93.58:4733 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 20 15:01:55 216.205.93.58:4734 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 20 15:01:56 216.205.93.58:4735 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 20 15:01:56 216.205.93.58:4738 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 20 15:01:56 216.205.93.58:4740 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 20 15:01:56 216.205.93.58:4739 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 20 15:01:56 216.205.93.58:4744 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 20 15:01:56 216.205.93.58:4746 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
Dec 20 15:12:06 216.205.93.58:3961 -> xxx.yyy.255.245:1433 SYN ******S*
Dec 20 15:12:06 216.205.93.58:3962 -> xxx.yyy.255.246:1433 SYN ******S*
Dec 20 15:12:06 216.205.93.58:3963 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 20 15:12:06 216.205.93.58:3964 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 20 15:12:06 216.205.93.58:3965 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 20 15:12:06 216.205.93.58:3966 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 20 15:12:06 216.205.93.58:3967 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 20 15:12:06 216.205.93.58:3969 -> xxx.yyy.255.253:1433 SYN ******S*
Dec 20 15:12:06 216.205.93.58:3970 -> xxx.yyy.255.254:1433 SYN ******S*
42155
Dec 20 12:13:23 66.12.184.102:3101 -> xxx.yyy.1.1:504 SYN ******S*
Dec 20 12:13:23 66.12.184.102:3102 -> xxx.yyy.1.2:504 SYN ******S*
Dec 20 12:13:25 66.12.184.102:3103 -> xxx.yyy.1.3:504 SYN ******S*
Dec 20 12:13:23 66.12.184.102:3104 -> xxx.yyy.1.4:504 SYN ******S*
Dec 20 12:13:23 66.12.184.102:3105 -> xxx.yyy.1.5:504 SYN ******S*
Dec 20 12:13:23 66.12.184.102:3106 -> xxx.yyy.1.6:504 SYN ******S*
Dec 20 12:13:23 66.12.184.102:3107 -> xxx.yyy.1.7:504 SYN ******S*
Dec 20 12:13:23 66.12.184.102:3108 -> xxx.yyy.1.8:504 SYN ******S*
[...]
Dec 20 12:17:58 66.12.184.102:4678 -> xxx.yyy.254.186:504 SYN ******S*
Dec 20 12:17:58 66.12.184.102:4711 -> xxx.yyy.254.219:504 SYN ******S*
Dec 20 12:17:58 66.12.184.102:4705 -> xxx.yyy.254.213:504 SYN ******S*
Dec 20 12:17:58 66.12.184.102:4722 -> xxx.yyy.254.229:504 SYN ******S*
Dec 20 12:17:58 66.12.184.102:3004 -> xxx.yyy.254.242:504 SYN ******S*
Dec 20 12:17:58 66.12.184.102:3001 -> xxx.yyy.254.239:504 SYN ******S*
Dec 20 12:17:58 66.12.184.102:3013 -> xxx.yyy.254.248:504 SYN ******S*
Dec 20 12:17:58 66.12.184.102:4983 -> xxx.yyy.254.238:504 SYN ******S*
39833
[...]
35853
Dec 20 07:49:24 210.51.208.6:8678 -> xxx.yyy.1.0:1433 SYN ******S*
Dec 20 07:49:24 210.51.208.6:27884 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 20 07:49:24 210.51.208.6:8681 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 20 07:49:24 210.51.208.6:8682 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 20 07:49:24 210.51.208.6:8683 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 20 07:49:25 210.51.208.6:27886 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 20 07:49:25 210.51.208.6:16896 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 20 07:49:25 210.51.208.6:8691 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
Dec 20 09:13:08 210.51.208.6:58249 -> xxx.yyy.94.60:1433 SYN ******S*
Dec 20 09:13:08 210.51.208.6:10750 -> xxx.yyy.94.46:1433 SYN ******S*
Dec 20 09:13:08 210.51.208.6:10806 -> xxx.yyy.94.61:1433 SYN ******S*
Dec 20 09:13:09 210.51.208.6:10808 -> xxx.yyy.94.62:1433 SYN ******S*
Dec 20 09:13:09 210.51.208.6:39494 -> xxx.yyy.94.42:1433 SYN ******S*
Dec 20 09:13:09 210.51.208.6:16786 -> xxx.yyy.94.63:1433 SYN ******S*
Dec 20 09:13:09 210.51.208.6:10813 -> xxx.yyy.94.64:1433 SYN ******S*
Dec 20 09:13:09 210.51.208.6:10818 -> xxx.yyy.94.65:1433 SYN ******S*
Dec 20 09:13:09 210.51.208.6:10819 -> xxx.yyy.94.66:1433 SYN ******S*
29686
Dec 20 06:41:14 60.223.22.173:4498 -> xxx.yyy.137.166:1433 SYN ******S*
Dec 20 06:41:14 60.223.22.173:4501 -> xxx.yyy.137.167:1433 SYN ******S*
Dec 20 06:41:14 60.223.22.173:4504 -> xxx.yyy.137.168:1433 SYN ******S*
Dec 20 06:41:14 60.223.22.173:4506 -> xxx.yyy.137.169:1433 SYN ******S*
Dec 20 06:41:14 60.223.22.173:4509 -> xxx.yyy.137.170:1433 SYN ******S*
Dec 20 06:41:14 60.223.22.173:4512 -> xxx.yyy.137.171:1433 SYN ******S*
Dec 20 06:41:14 60.223.22.173:4514 -> xxx.yyy.137.172:1433 SYN ******S*
Dec 20 06:41:14 60.223.22.173:4517 -> xxx.yyy.137.173:1433 SYN ******S*
[...]
Dec 20 08:27:18 60.223.22.173:3848 -> xxx.yyy.255.253:1433 SYN ******S*
Dec 20 08:27:19 60.223.22.173:3852 -> xxx.yyy.255.254:1433 SYN ******S*
Dec 20 08:27:24 60.223.22.173:3839 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 20 08:27:24 60.223.22.173:3842 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 20 08:27:24 60.223.22.173:3841 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 20 08:27:24 60.223.22.173:3843 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 20 08:27:24 60.223.22.173:3845 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 20 08:27:24 60.223.22.173:3848 -> xxx.yyy.255.253:1433 SYN ******S*
Dec 20 08:27:25 60.223.22.173:3852 -> xxx.yyy.255.254:1433 SYN ******S*
29363
Dec 20 01:47:34 61.51.217.25:4018 -> xxx.yyy.29.0:1433 SYN ******S*
Dec 20 01:47:34 61.51.217.25:4020 -> xxx.yyy.29.1:1433 SYN ******S*
Dec 20 01:47:34 61.51.217.25:4023 -> xxx.yyy.29.2:1433 SYN ******S*
Dec 20 01:47:34 61.51.217.25:4026 -> xxx.yyy.29.3:1433 SYN ******S*
Dec 20 01:47:34 61.51.217.25:4028 -> xxx.yyy.29.4:1433 SYN ******S*
Dec 20 01:47:34 61.51.217.25:4032 -> xxx.yyy.29.5:1433 SYN ******S*
Dec 20 01:47:34 61.51.217.25:4035 -> xxx.yyy.29.6:1433 SYN ******S*
Dec 20 01:47:34 61.51.217.25:4038 -> xxx.yyy.29.7:1433 SYN ******S*
[...]
Dec 20 03:17:42 61.51.217.25:3273 -> xxx.yyy.129.62:1433 SYN ******S*
Dec 20 03:17:42 61.51.217.25:3274 -> xxx.yyy.129.63:1433 SYN ******S*
Dec 20 03:17:43 61.51.217.25:3275 -> xxx.yyy.129.64:1433 SYN ******S*
Dec 20 03:17:43 61.51.217.25:3284 -> xxx.yyy.129.65:1433 SYN ******S*
Dec 20 03:17:43 61.51.217.25:3285 -> xxx.yyy.129.66:1433 SYN ******S*
Dec 20 03:17:43 61.51.217.25:3286 -> xxx.yyy.129.67:1433 SYN ******S*
Dec 20 03:17:43 61.51.217.25:3293 -> xxx.yyy.129.68:1433 SYN ******S*
Dec 20 03:17:43 61.51.217.25:3295 -> xxx.yyy.129.69:1433 SYN ******S*
Dec 20 03:17:43 61.51.217.25:3297 -> xxx.yyy.129.70:1433 SYN ******S*
28181
Dec 20 00:00:07 218.7.134.17:1192 -> xxx.yyy.16.136:1433 SYN ******S*
Dec 20 00:00:08 218.7.134.17:1197 -> xxx.yyy.16.137:1433 SYN ******S*
Dec 20 00:00:05 218.7.134.17:1184 -> xxx.yyy.16.134:1433 SYN ******S*
Dec 20 00:00:05 218.7.134.17:1165 -> xxx.yyy.16.129:1433 SYN ******S*
Dec 20 00:00:08 218.7.134.17:1199 -> xxx.yyy.16.138:1433 SYN ******S*
Dec 20 00:00:06 218.7.134.17:1168 -> xxx.yyy.16.130:1433 SYN ******S*
Dec 20 00:00:06 218.7.134.17:1204 -> xxx.yyy.16.139:1433 SYN ******S*
Dec 20 00:00:06 218.7.134.17:1190 -> xxx.yyy.16.135:1433 SYN ******S*
[...]
Dec 20 01:59:32 218.7.134.17:3746 -> xxx.yyy.111.248:1433 SYN ******S*
Dec 20 01:59:32 218.7.134.17:3749 -> xxx.yyy.111.249:1433 SYN ******S*
Dec 20 01:59:33 218.7.134.17:3753 -> xxx.yyy.111.250:1433 SYN ******S*
Dec 20 01:59:33 218.7.134.17:3754 -> xxx.yyy.111.251:1433 SYN ******S*
Dec 20 01:59:34 218.7.134.17:3759 -> xxx.yyy.111.252:1433 SYN ******S*
Dec 20 01:59:34 218.7.134.17:3760 -> xxx.yyy.111.253:1433 SYN ******S*
Dec 20 01:59:35 218.7.134.17:3763 -> xxx.yyy.111.254:1433 SYN ******S*
Dec 20 01:59:35 218.7.134.17:3770 -> xxx.yyy.111.255:1433 SYN ******S*
27655
Dec 20 00:30:46 210.114.223.210:1483 -> xxx.yyy.14.134:20168 SYN ******S*
Dec 20 00:30:46 210.114.223.210:1485 -> xxx.yyy.14.172:20168 SYN ******S*
Dec 20 00:30:46 210.114.223.210:1486 -> xxx.yyy.14.173:20168 SYN ******S*
Dec 20 00:30:46 210.114.223.210:1487 -> xxx.yyy.14.175:20168 SYN ******S*
Dec 20 00:30:46 210.114.223.210:1488 -> xxx.yyy.14.177:20168 SYN ******S*
Dec 20 00:30:46 210.114.223.210:1489 -> xxx.yyy.14.178:20168 SYN ******S*
Dec 20 00:30:46 210.114.223.210:1491 -> xxx.yyy.14.185:20168 SYN ******S*
Dec 20 00:30:46 210.114.223.210:1492 -> xxx.yyy.14.192:20168 SYN ******S*
[...]
Dec 20 00:33:12 210.114.223.210:3377 -> xxx.yyy.254.198:20168 SYN ******S*
Dec 20 00:33:12 210.114.223.210:3381 -> xxx.yyy.254.202:20168 SYN ******S*
Dec 20 00:33:12 210.114.223.210:3380 -> xxx.yyy.254.201:20168 SYN ******S*
Dec 20 00:33:12 210.114.223.210:3378 -> xxx.yyy.254.199:20168 SYN ******S*
Dec 20 00:33:12 210.114.223.210:3385 -> xxx.yyy.254.206:20168 SYN ******S*
Dec 20 00:33:12 210.114.223.210:3386 -> xxx.yyy.254.207:20168 SYN ******S*
Dec 20 00:33:12 210.114.223.210:3384 -> xxx.yyy.254.205:20168 SYN ******S*
Dec 20 00:33:12 210.114.223.210:3383 -> xxx.yyy.254.204:20168 SYN ******S*
22258
Dec 20 00:00:03 220.213.193.198:2858 -> xxx.yyy.223.178:1433 SYN ******S*
Dec 20 00:00:06 220.213.193.198:3022 -> xxx.yyy.223.204:1433 SYN ******S*
Dec 20 00:00:06 220.213.193.198:3023 -> xxx.yyy.223.205:1433 SYN ******S*
Dec 20 00:00:06 220.213.193.198:3029 -> xxx.yyy.223.208:1433 SYN ******S*
Dec 20 00:00:06 220.213.193.198:3030 -> xxx.yyy.223.209:1433 SYN ******S*
Dec 20 00:00:04 220.213.193.198:2867 -> xxx.yyy.223.179:1433 SYN ******S*
Dec 20 00:00:06 220.213.193.198:3034 -> xxx.yyy.223.210:1433 SYN ******S*
Dec 20 00:00:07 220.213.193.198:3035 -> xxx.yyy.223.211:1433 SYN ******S*
[...]
Dec 20 00:14:36 220.213.193.198:2786 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 20 00:14:36 220.213.193.198:2785 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 20 00:14:36 220.213.193.198:2784 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 20 00:14:36 220.213.193.198:2783 -> xxx.yyy.255.246:1433 SYN ******S*
Dec 20 00:14:36 220.213.193.198:2788 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 20 00:14:36 220.213.193.198:2800 -> xxx.yyy.255.253:1433 SYN ******S*
Dec 20 00:14:36 220.213.193.198:2796 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 20 00:14:36 220.213.193.198:2795 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 20 00:14:36 220.213.193.198:2804 -> xxx.yyy.255.254:1433 SYN ******S*
21503
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list