[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Tue Dec 28 13:56:07 GMT 2004
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Dec 27 05:25:50 218.57.138.157:2736 -> xxx.yyy.1.1:3389 SYN ******S*
Dec 27 05:25:51 218.57.138.157:4274 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 27 05:25:50 218.57.138.157:2789 -> xxx.yyy.1.2:3389 SYN ******S*
Dec 27 05:25:51 218.57.138.157:4367 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 27 05:25:50 218.57.138.157:2845 -> xxx.yyy.1.3:3389 SYN ******S*
Dec 27 05:25:51 218.57.138.157:4465 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 27 05:25:51 218.57.138.157:2948 -> xxx.yyy.1.4:3389 SYN ******S*
Dec 27 05:25:51 218.57.138.157:4644 -> xxx.yyy.1.4:1433 SYN ******S*
[...]
Dec 27 06:46:56 218.57.138.157:2351 -> xxx.yyy.255.231:80 SYN ******S*
Dec 27 06:46:57 218.57.138.157:2466 -> xxx.yyy.255.235:80 SYN ******S*
Dec 27 06:46:57 218.57.138.157:2458 -> xxx.yyy.255.234:80 SYN ******S*
Dec 27 06:46:57 218.57.138.157:2564 -> xxx.yyy.255.238:80 SYN ******S*
Dec 27 06:46:57 218.57.138.157:2567 -> xxx.yyy.255.239:80 SYN ******S*
Dec 27 06:46:57 218.57.138.157:2630 -> xxx.yyy.255.241:80 SYN ******S*
Dec 27 06:46:57 218.57.138.157:2714 -> xxx.yyy.255.243:80 SYN ******S*
Dec 27 06:46:59 218.57.138.157:3295 -> xxx.yyy.255.252:80 SYN ******S*
Dec 27 06:46:59 218.57.138.157:3399 -> xxx.yyy.255.254:80 SYN ******S*
209844
[...]
192262
Dec 27 04:27:09 217.164.16.61:3937 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 27 04:27:09 217.164.16.61:3939 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 27 04:27:09 217.164.16.61:3940 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 27 04:27:09 217.164.16.61:3944 -> xxx.yyy.1.8:1433 SYN ******S*
Dec 27 04:27:09 217.164.16.61:3942 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 27 04:27:09 217.164.16.61:3946 -> xxx.yyy.1.10:1433 SYN ******S*
Dec 27 04:27:09 217.164.16.61:3938 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 27 04:27:09 217.164.16.61:3941 -> xxx.yyy.1.5:1433 SYN ******S*
[...]
Dec 27 06:21:32 217.164.16.61:4728 -> xxx.yyy.255.244:1433 SYN ******S*
Dec 27 06:21:32 217.164.16.61:4727 -> xxx.yyy.255.243:1433 SYN ******S*
Dec 27 06:21:32 217.164.16.61:4737 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 27 06:21:32 217.164.16.61:4735 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 27 06:21:32 217.164.16.61:4738 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 27 06:21:32 217.164.16.61:4734 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 27 06:21:32 217.164.16.61:4736 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 27 06:21:32 217.164.16.61:4740 -> xxx.yyy.255.254:1433 SYN ******S*
Dec 27 06:21:33 217.164.16.61:4739 -> xxx.yyy.255.253:1433 SYN ******S*
125353
Dec 27 11:56:43 172.201.41.45:3297 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 27 11:56:43 172.201.41.45:3302 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 27 11:56:43 172.201.41.45:3303 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 27 11:56:43 172.201.41.45:3304 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 27 11:56:43 172.201.41.45:3305 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 27 11:56:43 172.201.41.45:3306 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 27 11:56:43 172.201.41.45:3307 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 27 11:56:43 172.201.41.45:3308 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Dec 27 13:51:01 172.201.41.45:4415 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 27 13:51:01 172.201.41.45:4414 -> xxx.yyy.255.246:1433 SYN ******S*
Dec 27 13:51:01 172.201.41.45:4419 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 27 13:51:01 172.201.41.45:4420 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 27 13:51:02 172.201.41.45:4423 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 27 13:51:02 172.201.41.45:4437 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 27 13:51:02 172.201.41.45:4443 -> xxx.yyy.255.254:1433 SYN ******S*
Dec 27 13:51:02 172.201.41.45:4439 -> xxx.yyy.255.253:1433 SYN ******S*
Dec 27 13:51:02 172.201.41.45:4438 -> xxx.yyy.255.252:1433 SYN ******S*
123189
Dec 27 13:19:46 207.237.199.126:3554 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 27 13:19:46 207.237.199.126:3556 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 27 13:19:46 207.237.199.126:3558 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 27 13:19:46 207.237.199.126:3562 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 27 13:19:46 207.237.199.126:3564 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 27 13:19:46 207.237.199.126:3566 -> xxx.yyy.1.8:1433 SYN ******S*
Dec 27 13:19:46 207.237.199.126:3567 -> xxx.yyy.1.9:1433 SYN ******S*
Dec 27 13:19:46 207.237.199.126:3569 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
Dec 27 15:14:08 207.237.199.126:2573 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 27 15:14:08 207.237.199.126:2572 -> xxx.yyy.255.246:1433 SYN ******S*
Dec 27 15:14:08 207.237.199.126:2571 -> xxx.yyy.255.245:1433 SYN ******S*
Dec 27 15:14:09 207.237.199.126:2581 -> xxx.yyy.255.253:1433 SYN ******S*
Dec 27 15:14:09 207.237.199.126:2580 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 27 15:14:09 207.237.199.126:2579 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 27 15:14:09 207.237.199.126:2578 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 27 15:14:09 207.237.199.126:2576 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 27 15:14:09 207.237.199.126:2584 -> xxx.yyy.255.254:1433 SYN ******S*
120461
Dec 27 00:20:52 218.62.60.254:3976 -> xxx.yyy.64.0:1433 SYN ******S*
Dec 27 00:20:52 218.62.60.254:3977 -> xxx.yyy.64.1:1433 SYN ******S*
Dec 27 00:20:52 218.62.60.254:3978 -> xxx.yyy.64.2:1433 SYN ******S*
Dec 27 00:20:52 218.62.60.254:3979 -> xxx.yyy.64.3:1433 SYN ******S*
Dec 27 00:20:52 218.62.60.254:3980 -> xxx.yyy.64.4:1433 SYN ******S*
Dec 27 00:20:52 218.62.60.254:3981 -> xxx.yyy.64.5:1433 SYN ******S*
Dec 27 00:20:52 218.62.60.254:3982 -> xxx.yyy.64.6:1433 SYN ******S*
Dec 27 00:20:52 218.62.60.254:3983 -> xxx.yyy.64.7:1433 SYN ******S*
[...]
Dec 27 03:13:43 218.62.60.254:3929 -> xxx.yyy.255.246:1433 SYN ******S*
Dec 27 03:13:43 218.62.60.254:3932 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 27 03:13:43 218.62.60.254:3933 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 27 03:13:43 218.62.60.254:3940 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 27 03:13:44 218.62.60.254:3941 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 27 03:13:44 218.62.60.254:3946 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 27 03:13:44 218.62.60.254:3947 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 27 03:13:44 218.62.60.254:3954 -> xxx.yyy.255.253:1433 SYN ******S*
Dec 27 03:13:44 218.62.60.254:3955 -> xxx.yyy.255.254:1433 SYN ******S*
114584
Dec 27 15:20:57 64.1.133.150:2156 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 27 15:20:57 64.1.133.150:2158 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 27 15:20:57 64.1.133.150:2159 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 27 15:20:57 64.1.133.150:2170 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 27 15:20:57 64.1.133.150:2180 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 27 15:20:57 64.1.133.150:2185 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 27 15:20:57 64.1.133.150:2187 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 27 15:20:57 64.1.133.150:2188 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Dec 27 17:06:35 64.1.133.150:1948 -> xxx.yyy.211.224:1433 SYN ******S*
Dec 27 17:06:35 64.1.133.150:1943 -> xxx.yyy.211.222:1433 SYN ******S*
Dec 27 17:06:35 64.1.133.150:1953 -> xxx.yyy.211.228:1433 SYN ******S*
Dec 27 17:06:35 64.1.133.150:1951 -> xxx.yyy.211.226:1433 SYN ******S*
Dec 27 17:06:35 64.1.133.150:1952 -> xxx.yyy.211.227:1433 SYN ******S*
Dec 27 17:06:35 64.1.133.150:1958 -> xxx.yyy.211.231:1433 SYN ******S*
Dec 27 17:06:35 64.1.133.150:1954 -> xxx.yyy.211.229:1433 SYN ******S*
Dec 27 17:06:35 64.1.133.150:1955 -> xxx.yyy.211.230:1433 SYN ******S*
92973
Dec 27 21:53:27 220.95.72.252:41421 -> xxx.yyy.1.1:6112 SYN ******S*
Dec 27 21:53:27 220.95.72.252:41422 -> xxx.yyy.1.0:6112 SYN ******S*
Dec 27 21:53:27 220.95.72.252:41423 -> xxx.yyy.1.2:6112 SYN ******S*
Dec 27 21:53:27 220.95.72.252:41424 -> xxx.yyy.1.3:6112 SYN ******S*
Dec 27 21:53:30 220.95.72.252:41425 -> xxx.yyy.1.4:6112 SYN ******S*
Dec 27 21:53:30 220.95.72.252:41426 -> xxx.yyy.1.5:6112 SYN ******S*
Dec 27 21:53:30 220.95.72.252:41427 -> xxx.yyy.1.6:6112 SYN ******S*
Dec 27 21:53:30 220.95.72.252:41428 -> xxx.yyy.1.7:6112 SYN ******S*
[...]
Dec 27 22:20:19 220.95.72.252:41151 -> xxx.yyy.255.236:6112 SYN ******S*
Dec 27 22:20:19 220.95.72.252:41152 -> xxx.yyy.255.237:6112 SYN ******S*
Dec 27 22:20:19 220.95.72.252:41153 -> xxx.yyy.255.238:6112 SYN ******S*
Dec 27 22:20:19 220.95.72.252:41155 -> xxx.yyy.255.240:6112 SYN ******S*
Dec 27 22:20:19 220.95.72.252:41156 -> xxx.yyy.255.241:6112 SYN ******S*
Dec 27 22:20:19 220.95.72.252:41157 -> xxx.yyy.255.243:6112 SYN ******S*
Dec 27 22:20:19 220.95.72.252:41158 -> xxx.yyy.255.242:6112 SYN ******S*
Dec 27 22:20:19 220.95.72.252:41159 -> xxx.yyy.255.244:6112 SYN ******S*
81642
Dec 27 12:29:26 68.193.60.3:32893 -> xxx.yyy.1.0:6112 SYN ******S*
Dec 27 12:29:26 68.193.60.3:32894 -> xxx.yyy.1.1:6112 SYN ******S*
Dec 27 12:29:26 68.193.60.3:32896 -> xxx.yyy.1.2:6112 SYN ******S*
Dec 27 12:29:26 68.193.60.3:32898 -> xxx.yyy.1.3:6112 SYN ******S*
Dec 27 12:29:29 68.193.60.3:32900 -> xxx.yyy.1.4:6112 SYN ******S*
Dec 27 12:29:29 68.193.60.3:32902 -> xxx.yyy.1.5:6112 SYN ******S*
Dec 27 12:29:29 68.193.60.3:32903 -> xxx.yyy.1.6:6112 SYN ******S*
Dec 27 12:29:29 68.193.60.3:32905 -> xxx.yyy.1.7:6112 SYN ******S*
[...]
Dec 27 12:56:00 68.193.60.3:55432 -> xxx.yyy.255.247:6112 SYN ******S*
Dec 27 12:56:00 68.193.60.3:55434 -> xxx.yyy.255.249:6112 SYN ******S*
Dec 27 12:56:00 68.193.60.3:55433 -> xxx.yyy.255.248:6112 SYN ******S*
Dec 27 12:56:00 68.193.60.3:55437 -> xxx.yyy.255.250:6112 SYN ******S*
Dec 27 12:56:00 68.193.60.3:55440 -> xxx.yyy.255.251:6112 SYN ******S*
Dec 27 12:56:00 68.193.60.3:55442 -> xxx.yyy.255.252:6112 SYN ******S*
Dec 27 12:56:00 68.193.60.3:55446 -> xxx.yyy.255.254:6112 SYN ******S*
Dec 27 12:56:00 68.193.60.3:55445 -> xxx.yyy.255.253:6112 SYN ******S*
81012
Dec 27 05:33:32 195.132.49.69:3302 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 27 05:33:35 195.132.49.69:3309 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 27 05:33:35 195.132.49.69:3316 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 27 05:33:35 195.132.49.69:3323 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 27 05:33:35 195.132.49.69:3332 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 27 05:33:35 195.132.49.69:3360 -> xxx.yyy.1.9:1433 SYN ******S*
Dec 27 05:33:35 195.132.49.69:3368 -> xxx.yyy.1.10:1433 SYN ******S*
Dec 27 05:33:35 195.132.49.69:3375 -> xxx.yyy.1.11:1433 SYN ******S*
[...]
Dec 27 09:22:19 195.132.49.69:1172 -> xxx.yyy.255.246:1433 SYN ******S*
Dec 27 09:22:19 195.132.49.69:1261 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 27 09:22:19 195.132.49.69:1331 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 27 09:22:19 195.132.49.69:1341 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 27 09:22:20 195.132.49.69:1596 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 27 09:22:20 195.132.49.69:1592 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 27 09:22:20 195.132.49.69:1600 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 27 09:22:20 195.132.49.69:1630 -> xxx.yyy.255.253:1433 SYN ******S*
Dec 27 09:22:20 195.132.49.69:1685 -> xxx.yyy.255.254:1433 SYN ******S*
78306
Dec 27 05:57:23 202.110.225.195:51811 -> xxx.yyy.1.9:22 SYN ******S*
Dec 27 05:57:26 202.110.225.195:51810 -> xxx.yyy.1.8:22 SYN ******S*
Dec 27 05:57:26 202.110.225.195:51812 -> xxx.yyy.1.10:22 SYN ******S*
Dec 27 05:57:23 202.110.225.195:51813 -> xxx.yyy.1.11:22 SYN ******S*
Dec 27 05:57:26 202.110.225.195:51827 -> xxx.yyy.1.25:22 SYN ******S*
Dec 27 05:57:26 202.110.225.195:51826 -> xxx.yyy.1.24:22 SYN ******S*
Dec 27 05:57:26 202.110.225.195:51828 -> xxx.yyy.1.26:22 SYN ******S*
Dec 27 05:57:23 202.110.225.195:51843 -> xxx.yyy.1.41:22 SYN ******S*
[...]
Dec 27 06:36:32 202.110.225.195:49574 -> xxx.yyy.229.249:22 SYN ******S*
Dec 27 06:36:32 202.110.225.195:49575 -> xxx.yyy.229.254:22 SYN ******S*
Dec 27 06:36:37 202.110.225.195:50378 -> xxx.yyy.229.228:22 SYN ******S*
Dec 27 06:36:38 202.110.225.195:50774 -> xxx.yyy.229.249:22 SYN ******S*
Dec 27 06:36:38 202.110.225.195:50775 -> xxx.yyy.229.254:22 SYN ******S*
Dec 27 06:36:44 202.110.225.195:51576 -> xxx.yyy.229.249:22 SYN ******S*
Dec 27 06:36:44 202.110.225.195:51578 -> xxx.yyy.229.228:22 SYN ******S*
Dec 27 06:36:44 202.110.225.195:51579 -> xxx.yyy.229.254:22 SYN ******S*
76460
Dec 27 11:11:22 210.178.201.170:2034 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 27 11:11:22 210.178.201.170:2035 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 27 11:11:22 210.178.201.170:2033 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 27 11:11:19 210.178.201.170:2037 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 27 11:11:22 210.178.201.170:2036 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 27 11:11:22 210.178.201.170:2038 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 27 11:11:22 210.178.201.170:2040 -> xxx.yyy.1.8:1433 SYN ******S*
Dec 27 11:11:22 210.178.201.170:2039 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Dec 27 11:22:35 210.178.201.170:4150 -> xxx.yyy.255.235:1433 SYN ******S*
Dec 27 11:22:35 210.178.201.170:4153 -> xxx.yyy.255.238:1433 SYN ******S*
Dec 27 11:22:35 210.178.201.170:4147 -> xxx.yyy.255.232:1433 SYN ******S*
Dec 27 11:22:35 210.178.201.170:4154 -> xxx.yyy.255.239:1433 SYN ******S*
Dec 27 11:22:35 210.178.201.170:4148 -> xxx.yyy.255.233:1433 SYN ******S*
Dec 27 11:22:36 210.178.201.170:4160 -> xxx.yyy.255.245:1433 SYN ******S*
Dec 27 11:22:36 210.178.201.170:4158 -> xxx.yyy.255.243:1433 SYN ******S*
Dec 27 11:22:36 210.178.201.170:4159 -> xxx.yyy.255.244:1433 SYN ******S*
Dec 27 11:22:36 210.178.201.170:4156 -> xxx.yyy.255.241:1433 SYN ******S*
74623
Dec 27 04:32:25 218.29.219.84:3090 -> xxx.yyy.1.0:1433 SYN ******S*
Dec 27 04:32:25 218.29.219.84:3093 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 27 04:32:25 218.29.219.84:3098 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 27 04:32:25 218.29.219.84:3099 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 27 04:32:25 218.29.219.84:3104 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 27 04:32:25 218.29.219.84:3108 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 27 04:32:25 218.29.219.84:3109 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 27 04:32:25 218.29.219.84:3112 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Dec 27 07:16:40 218.29.219.84:2153 -> xxx.yyy.185.253:1433 SYN ******S*
Dec 27 07:16:40 218.29.219.84:2417 -> xxx.yyy.186.65:1433 SYN ******S*
Dec 27 07:16:40 218.29.219.84:2420 -> xxx.yyy.186.66:1433 SYN ******S*
Dec 27 07:16:40 218.29.219.84:2161 -> xxx.yyy.185.254:1433 SYN ******S*
Dec 27 07:16:40 218.29.219.84:2425 -> xxx.yyy.186.67:1433 SYN ******S*
Dec 27 07:16:40 218.29.219.84:2165 -> xxx.yyy.185.255:1433 SYN ******S*
Dec 27 07:16:40 218.29.219.84:2170 -> xxx.yyy.186.0:1433 SYN ******S*
Dec 27 07:16:41 218.29.219.84:2431 -> xxx.yyy.186.68:1433 SYN ******S*
Dec 27 07:16:41 218.29.219.84:2180 -> xxx.yyy.186.1:1433 SYN ******S*
72504
Dec 27 18:18:20 212.223.135.70:4617 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 27 18:18:20 212.223.135.70:4618 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 27 18:18:20 212.223.135.70:4619 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 27 18:18:20 212.223.135.70:4620 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 27 18:18:20 212.223.135.70:4621 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 27 18:18:20 212.223.135.70:4622 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 27 18:18:20 212.223.135.70:4623 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 27 18:18:20 212.223.135.70:4624 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Dec 27 18:21:55 212.223.135.70:2660 -> xxx.yyy.255.230:1433 SYN ******S*
Dec 27 18:21:55 212.223.135.70:2676 -> xxx.yyy.255.246:1433 SYN ******S*
Dec 27 18:21:55 212.223.135.70:2628 -> xxx.yyy.255.198:1433 SYN ******S*
Dec 27 18:21:55 212.223.135.70:2657 -> xxx.yyy.255.227:1433 SYN ******S*
Dec 27 18:21:55 212.223.135.70:2673 -> xxx.yyy.255.243:1433 SYN ******S*
Dec 27 18:21:55 212.223.135.70:2625 -> xxx.yyy.255.195:1433 SYN ******S*
Dec 27 18:21:55 212.223.135.70:2641 -> xxx.yyy.255.211:1433 SYN ******S*
Dec 27 18:21:55 212.223.135.70:2670 -> xxx.yyy.255.240:1433 SYN ******S*
71729
Dec 27 12:51:28 210.54.12.146:3992 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 27 12:51:28 210.54.12.146:3993 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 27 12:51:28 210.54.12.146:3994 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 27 12:51:28 210.54.12.146:3995 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 27 12:51:28 210.54.12.146:3996 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 27 12:51:25 210.54.12.146:3997 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 27 12:51:25 210.54.12.146:3998 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 27 12:51:28 210.54.12.146:3999 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Dec 27 13:03:06 210.54.12.146:3062 -> xxx.yyy.255.239:1433 SYN ******S*
Dec 27 13:03:06 210.54.12.146:3075 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 27 13:03:06 210.54.12.146:3076 -> xxx.yyy.255.253:1433 SYN ******S*
Dec 27 13:03:06 210.54.12.146:3073 -> xxx.yyy.255.250:1433 SYN ******S*
Dec 27 13:03:06 210.54.12.146:3070 -> xxx.yyy.255.247:1433 SYN ******S*
Dec 27 13:03:06 210.54.12.146:3074 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 27 13:03:06 210.54.12.146:3072 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 27 13:03:06 210.54.12.146:3077 -> xxx.yyy.255.254:1433 SYN ******S*
Dec 27 13:03:06 210.54.12.146:3071 -> xxx.yyy.255.248:1433 SYN ******S*
70650
Dec 27 23:16:53 65.170.141.132:3958 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 27 23:16:56 65.170.141.132:3959 -> xxx.yyy.1.2:1433 SYN ******S*
Dec 27 23:16:56 65.170.141.132:3960 -> xxx.yyy.1.3:1433 SYN ******S*
Dec 27 23:16:53 65.170.141.132:3961 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 27 23:16:56 65.170.141.132:3962 -> xxx.yyy.1.5:1433 SYN ******S*
Dec 27 23:16:53 65.170.141.132:3963 -> xxx.yyy.1.6:1433 SYN ******S*
Dec 27 23:16:53 65.170.141.132:3964 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 27 23:16:56 65.170.141.132:3965 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Dec 27 23:28:41 65.170.141.132:2598 -> xxx.yyy.255.240:1433 SYN ******S*
Dec 27 23:28:41 65.170.141.132:2599 -> xxx.yyy.255.241:1433 SYN ******S*
Dec 27 23:28:41 65.170.141.132:2603 -> xxx.yyy.255.244:1433 SYN ******S*
Dec 27 23:28:41 65.170.141.132:2611 -> xxx.yyy.255.252:1433 SYN ******S*
Dec 27 23:28:41 65.170.141.132:2608 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 27 23:28:41 65.170.141.132:2613 -> xxx.yyy.255.254:1433 SYN ******S*
Dec 27 23:28:41 65.170.141.132:2610 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 27 23:28:41 65.170.141.132:2607 -> xxx.yyy.255.248:1433 SYN ******S*
62129
Dec 27 19:15:54 211.142.52.122:1842 -> xxx.yyy.1.11:1433 SYN ******S*
Dec 27 19:15:54 211.142.52.122:1845 -> xxx.yyy.1.12:1433 SYN ******S*
Dec 27 19:15:54 211.142.52.122:1848 -> xxx.yyy.1.13:1433 SYN ******S*
Dec 27 19:15:57 211.142.52.122:1884 -> xxx.yyy.1.25:1433 SYN ******S*
Dec 27 19:15:57 211.142.52.122:1886 -> xxx.yyy.1.26:1433 SYN ******S*
Dec 27 19:15:57 211.142.52.122:1890 -> xxx.yyy.1.27:1433 SYN ******S*
Dec 27 19:15:54 211.142.52.122:1907 -> xxx.yyy.1.33:1433 SYN ******S*
Dec 27 19:15:57 211.142.52.122:1910 -> xxx.yyy.1.34:1433 SYN ******S*
[...]
Dec 27 21:22:15 211.142.52.122:1364 -> xxx.yyy.141.205:1433 SYN ******S*
Dec 27 21:22:17 211.142.52.122:1472 -> xxx.yyy.141.209:1433 SYN ******S*
Dec 27 21:22:17 211.142.52.122:1485 -> xxx.yyy.141.210:1433 SYN ******S*
Dec 27 21:22:17 211.142.52.122:1494 -> xxx.yyy.141.211:1433 SYN ******S*
Dec 27 21:22:18 211.142.52.122:1498 -> xxx.yyy.141.212:1433 SYN ******S*
Dec 27 21:22:18 211.142.52.122:1367 -> xxx.yyy.141.206:1433 SYN ******S*
Dec 27 21:22:18 211.142.52.122:1501 -> xxx.yyy.141.213:1433 SYN ******S*
Dec 27 21:22:19 211.142.52.122:1553 -> xxx.yyy.141.217:1433 SYN ******S*
37030
Dec 27 18:16:39 66.244.88.25:1180 -> xxx.yyy.1.1:1433 SYN ******S*
Dec 27 18:16:39 66.244.88.25:1183 -> xxx.yyy.1.4:1433 SYN ******S*
Dec 27 18:16:39 66.244.88.25:1186 -> xxx.yyy.1.7:1433 SYN ******S*
Dec 27 18:16:39 66.244.88.25:1189 -> xxx.yyy.1.10:1433 SYN ******S*
Dec 27 18:16:42 66.244.88.25:1194 -> xxx.yyy.1.15:1433 SYN ******S*
Dec 27 18:16:42 66.244.88.25:1196 -> xxx.yyy.1.16:1433 SYN ******S*
Dec 27 18:16:42 66.244.88.25:1197 -> xxx.yyy.1.18:1433 SYN ******S*
Dec 27 18:16:42 66.244.88.25:1200 -> xxx.yyy.1.21:1433 SYN ******S*
[...]
Dec 27 18:27:36 66.244.88.25:2260 -> xxx.yyy.255.244:1433 SYN ******S*
Dec 27 18:27:36 66.244.88.25:2262 -> xxx.yyy.255.248:1433 SYN ******S*
Dec 27 18:27:36 66.244.88.25:2264 -> xxx.yyy.255.249:1433 SYN ******S*
Dec 27 18:27:36 66.244.88.25:2265 -> xxx.yyy.255.251:1433 SYN ******S*
Dec 27 18:27:36 66.244.88.25:2270 -> xxx.yyy.255.254:1433 SYN ******S*
Dec 27 18:27:38 66.244.88.25:1921 -> xxx.yyy.254.200:1433 SYN ******S*
Dec 27 18:27:39 66.244.88.25:2088 -> xxx.yyy.255.98:1433 SYN ******S*
Dec 27 18:27:39 66.244.88.25:2242 -> xxx.yyy.255.229:1433 SYN ******S*
20659
Dec 27 00:13:39 80.201.166.153:1836 -> xxx.yyy.75.141:10277 SYN ******S*
Dec 27 00:13:39 80.201.166.153:1837 -> xxx.yyy.75.141:10274 SYN ******S*
Dec 27 00:13:39 80.201.166.153:1838 -> xxx.yyy.75.141:10270 SYN ******S*
Dec 27 00:13:39 80.201.166.153:1839 -> xxx.yyy.75.141:10279 SYN ******S*
Dec 27 00:13:41 80.201.166.153:1844 -> xxx.yyy.75.141:10272 SYN ******S*
Dec 27 00:13:45 80.201.166.153:1839 -> xxx.yyy.75.141:10279 SYN ******S*
Dec 27 00:13:45 80.201.166.153:1838 -> xxx.yyy.75.141:10270 SYN ******S*
Dec 27 00:13:45 80.201.166.153:1837 -> xxx.yyy.75.141:10274 SYN ******S*
[...]
Dec 27 12:22:23 80.201.166.153:1062 -> xxx.yyy.75.141:10277 SYN ******S*
Dec 27 12:22:23 80.201.166.153:1038 -> xxx.yyy.75.141:10274 SYN ******S*
Dec 27 12:22:25 80.201.166.153:1060 -> xxx.yyy.75.141:10270 SYN ******S*
Dec 27 12:22:26 80.201.166.153:1062 -> xxx.yyy.75.141:10277 SYN ******S*
Dec 27 12:22:32 80.201.166.153:1100 -> xxx.yyy.75.141:10274 SYN ******S*
Dec 27 12:22:31 80.201.166.153:1060 -> xxx.yyy.75.141:10270 SYN ******S*
Dec 27 12:22:32 80.201.166.153:1062 -> xxx.yyy.75.141:10277 SYN ******S*
Dec 27 12:22:34 80.201.166.153:1129 -> xxx.yyy.75.141:10272 SYN ******S*
19376
Dec 27 00:30:47 203.240.197.156:2751 -> xxx.yyy.1.0:12345 SYN ******S*
Dec 27 00:30:47 203.240.197.156:2752 -> xxx.yyy.1.0:27374 SYN ******S*
Dec 27 00:30:45 203.240.197.156:2753 -> xxx.yyy.1.0:901 SYN ******S*
Dec 27 00:30:45 203.240.197.156:2754 -> xxx.yyy.1.0:3410 SYN ******S*
Dec 27 00:30:47 203.240.197.156:2755 -> xxx.yyy.1.1:12345 SYN ******S*
Dec 27 00:30:47 203.240.197.156:2756 -> xxx.yyy.1.1:27374 SYN ******S*
Dec 27 00:30:46 203.240.197.156:2757 -> xxx.yyy.1.1:901 SYN ******S*
Dec 27 00:30:46 203.240.197.156:2758 -> xxx.yyy.1.1:3410 SYN ******S*
[...]
Dec 27 00:54:56 203.240.197.156:1489 -> xxx.yyy.22.248:901 SYN ******S*
Dec 27 00:54:56 203.240.197.156:1490 -> xxx.yyy.22.248:3410 SYN ******S*
Dec 27 00:54:56 203.240.197.156:1491 -> xxx.yyy.22.249:12345 SYN ******S*
Dec 27 00:54:56 203.240.197.156:1492 -> xxx.yyy.22.249:27374 SYN ******S*
Dec 27 00:54:56 203.240.197.156:1493 -> xxx.yyy.22.249:901 SYN ******S*
Dec 27 00:54:56 203.240.197.156:1494 -> xxx.yyy.22.249:3410 SYN ******S*
Dec 27 00:54:58 203.240.197.156:1516 -> xxx.yyy.22.255:27374 SYN ******S*
Dec 27 00:54:58 203.240.197.156:1517 -> xxx.yyy.22.255:901 SYN ******S*
Dec 27 00:54:58 203.240.197.156:1523 -> xxx.yyy.22.255:3410 SYN ******S*
19294
[...]
19006
Dec 27 22:52:20 203.228.118.107:2137 -> xxx.yyy.71.160:5554 SYN ******S*
Dec 27 22:52:21 203.228.118.107:2286 -> xxx.yyy.71.160:1023 SYN ******S*
Dec 27 22:52:23 203.228.118.107:2631 -> xxx.yyy.71.160:9898 SYN ******S*
Dec 27 22:52:20 203.228.118.107:2139 -> xxx.yyy.71.162:5554 SYN ******S*
Dec 27 22:52:21 203.228.118.107:2295 -> xxx.yyy.71.162:1023 SYN ******S*
Dec 27 22:52:23 203.228.118.107:2640 -> xxx.yyy.71.162:9898 SYN ******S*
Dec 27 22:52:20 203.228.118.107:2138 -> xxx.yyy.71.161:5554 SYN ******S*
Dec 27 22:52:21 203.228.118.107:2293 -> xxx.yyy.71.161:1023 SYN ******S*
[...]
Dec 27 22:54:21 203.228.118.107:4427 -> xxx.yyy.91.240:9898 SYN ******S*
Dec 27 22:54:21 203.228.118.107:4437 -> xxx.yyy.91.249:9898 SYN ******S*
Dec 27 22:54:21 203.228.118.107:4441 -> xxx.yyy.92.0:9898 SYN ******S*
Dec 27 22:54:21 203.228.118.107:4446 -> xxx.yyy.92.1:9898 SYN ******S*
Dec 27 22:54:22 203.228.118.107:4453 -> xxx.yyy.92.4:9898 SYN ******S*
Dec 27 22:54:22 203.228.118.107:4451 -> xxx.yyy.92.2:9898 SYN ******S*
Dec 27 22:54:22 203.228.118.107:4452 -> xxx.yyy.92.3:9898 SYN ******S*
Dec 27 22:54:22 203.228.118.107:4455 -> xxx.yyy.92.5:9898 SYN ******S*
15274
Dec 27 22:50:56 220.78.137.159:2810 -> xxx.yyy.153.169:5554 SYN ******S*
Dec 27 22:50:57 220.78.137.159:3384 -> xxx.yyy.153.169:1023 SYN ******S*
Dec 27 22:50:59 220.78.137.159:1216 -> xxx.yyy.153.169:9898 SYN ******S*
Dec 27 22:50:56 220.78.137.159:2818 -> xxx.yyy.153.162:5554 SYN ******S*
Dec 27 22:50:57 220.78.137.159:3389 -> xxx.yyy.153.162:1023 SYN ******S*
Dec 27 22:50:59 220.78.137.159:1222 -> xxx.yyy.153.162:9898 SYN ******S*
Dec 27 22:50:56 220.78.137.159:2811 -> xxx.yyy.153.168:5554 SYN ******S*
Dec 27 22:50:57 220.78.137.159:3385 -> xxx.yyy.153.168:1023 SYN ******S*
[...]
Dec 27 22:52:24 220.78.137.159:2792 -> xxx.yyy.153.158:1023 SYN ******S*
Dec 27 22:52:25 220.78.137.159:4378 -> xxx.yyy.153.158:9898 SYN ******S*
Dec 27 22:52:22 220.78.137.159:2181 -> xxx.yyy.153.171:5554 SYN ******S*
Dec 27 22:52:23 220.78.137.159:2796 -> xxx.yyy.153.171:1023 SYN ******S*
Dec 27 22:52:25 220.78.137.159:4388 -> xxx.yyy.153.171:9898 SYN ******S*
Dec 27 22:52:23 220.78.137.159:2180 -> xxx.yyy.153.159:5554 SYN ******S*
Dec 27 22:52:24 220.78.137.159:2793 -> xxx.yyy.153.159:1023 SYN ******S*
Dec 27 22:52:25 220.78.137.159:4379 -> xxx.yyy.153.159:9898 SYN ******S*
15062
Dec 27 22:58:10 220.70.94.143:1802 -> xxx.yyy.133.240:5554 SYN ******S*
Dec 27 22:58:11 220.70.94.143:2425 -> xxx.yyy.133.240:1023 SYN ******S*
Dec 27 22:58:13 220.70.94.143:3987 -> xxx.yyy.133.240:9898 SYN ******S*
Dec 27 22:58:10 220.70.94.143:1798 -> xxx.yyy.133.237:5554 SYN ******S*
Dec 27 22:58:11 220.70.94.143:2421 -> xxx.yyy.133.237:1023 SYN ******S*
Dec 27 22:58:13 220.70.94.143:3903 -> xxx.yyy.133.237:9898 SYN ******S*
Dec 27 22:58:10 220.70.94.143:1803 -> xxx.yyy.133.242:5554 SYN ******S*
Dec 27 22:58:11 220.70.94.143:2426 -> xxx.yyy.133.242:1023 SYN ******S*
[...]
Dec 27 22:58:58 220.70.94.143:4335 -> xxx.yyy.154.73:9898 SYN ******S*
Dec 27 22:58:58 220.70.94.143:4338 -> xxx.yyy.154.75:9898 SYN ******S*
Dec 27 22:58:58 220.70.94.143:4337 -> xxx.yyy.154.74:9898 SYN ******S*
Dec 27 22:58:58 220.70.94.143:4350 -> xxx.yyy.134.7:9898 SYN ******S*
Dec 27 22:58:58 220.70.94.143:4348 -> xxx.yyy.134.5:9898 SYN ******S*
Dec 27 22:58:58 220.70.94.143:4362 -> xxx.yyy.134.10:9898 SYN ******S*
Dec 27 22:58:58 220.70.94.143:4341 -> xxx.yyy.154.77:9898 SYN ******S*
Dec 27 22:58:58 220.70.94.143:4358 -> xxx.yyy.134.6:9898 SYN ******S*
Dec 27 22:58:58 220.70.94.143:4372 -> xxx.yyy.154.51:9898 SYN ******S*
14621
Dec 27 23:56:35 218.11.241.83:1392 -> xxx.yyy.133.14:5554 SYN ******S*
Dec 27 23:56:38 218.11.241.83:3509 -> xxx.yyy.133.14:9898 SYN ******S*
Dec 27 23:56:35 218.11.241.83:1399 -> xxx.yyy.133.15:5554 SYN ******S*
Dec 27 23:56:38 218.11.241.83:3512 -> xxx.yyy.133.15:9898 SYN ******S*
Dec 27 23:56:35 218.11.241.83:1403 -> xxx.yyy.133.16:5554 SYN ******S*
Dec 27 23:56:38 218.11.241.83:3520 -> xxx.yyy.133.16:9898 SYN ******S*
Dec 27 23:56:35 218.11.241.83:1404 -> xxx.yyy.133.17:5554 SYN ******S*
Dec 27 23:56:38 218.11.241.83:3521 -> xxx.yyy.133.17:9898 SYN ******S*
[...]
Dec 27 23:57:16 218.11.241.83:1687 -> xxx.yyy.153.129:9898 SYN ******S*
Dec 27 23:57:16 218.11.241.83:1686 -> xxx.yyy.153.128:9898 SYN ******S*
Dec 27 23:57:16 218.11.241.83:1700 -> xxx.yyy.153.130:9898 SYN ******S*
Dec 27 23:57:16 218.11.241.83:1721 -> xxx.yyy.153.132:9898 SYN ******S*
Dec 27 23:57:16 218.11.241.83:1715 -> xxx.yyy.153.131:9898 SYN ******S*
Dec 27 23:57:16 218.11.241.83:1725 -> xxx.yyy.153.133:9898 SYN ******S*
Dec 27 23:57:16 218.11.241.83:1728 -> xxx.yyy.153.134:9898 SYN ******S*
Dec 27 23:57:16 218.11.241.83:1736 -> xxx.yyy.153.135:9898 SYN ******S*
Dec 27 23:57:16 218.11.241.83:1738 -> xxx.yyy.153.136:9898 SYN ******S*
14007
Dec 27 00:05:13 220.169.37.171:50637 -> xxx.yyy.174.3:5554 SYN ******S*
Dec 27 00:05:14 220.169.37.171:50086 -> xxx.yyy.174.3:1023 SYN ******S*
Dec 27 00:05:16 220.169.37.171:50928 -> xxx.yyy.174.3:9898 SYN ******S*
Dec 27 00:05:13 220.169.37.171:50656 -> xxx.yyy.174.5:5554 SYN ******S*
Dec 27 00:05:14 220.169.37.171:50097 -> xxx.yyy.174.5:1023 SYN ******S*
Dec 27 00:05:16 220.169.37.171:50934 -> xxx.yyy.174.5:9898 SYN ******S*
Dec 27 00:05:13 220.169.37.171:50669 -> xxx.yyy.174.7:5554 SYN ******S*
Dec 27 00:05:14 220.169.37.171:50104 -> xxx.yyy.174.7:1023 SYN ******S*
[...]
Dec 27 00:06:06 220.169.37.171:50427 -> xxx.yyy.194.120:9898 SYN ******S*
Dec 27 00:06:06 220.169.37.171:50419 -> xxx.yyy.194.119:9898 SYN ******S*
Dec 27 00:06:06 220.169.37.171:50432 -> xxx.yyy.194.124:9898 SYN ******S*
Dec 27 00:06:06 220.169.37.171:50428 -> xxx.yyy.194.121:9898 SYN ******S*
Dec 27 00:06:06 220.169.37.171:50431 -> xxx.yyy.194.123:9898 SYN ******S*
Dec 27 00:06:06 220.169.37.171:50472 -> xxx.yyy.179.28:9898 SYN ******S*
Dec 27 00:06:07 220.169.37.171:51020 -> xxx.yyy.194.2:9898 SYN ******S*
Dec 27 00:06:07 220.169.37.171:51016 -> xxx.yyy.193.249:9898 SYN ******S*
Dec 27 00:06:07 220.169.37.171:50019 -> xxx.yyy.194.14:9898 SYN ******S*
13408
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list