[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Mon Nov 8 13:19:41 GMT 2004
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Nov 7 00:00:04 203.101.57.107:2530 -> xxx.yyy.10.154:1433 SYN ******S*
Nov 7 00:00:04 203.101.57.107:2531 -> xxx.yyy.10.155:1433 SYN ******S*
Nov 7 00:00:04 203.101.57.107:2534 -> xxx.yyy.10.157:1433 SYN ******S*
Nov 7 00:00:04 203.101.57.107:2535 -> xxx.yyy.10.158:1433 SYN ******S*
Nov 7 00:00:05 203.101.57.107:2541 -> xxx.yyy.10.162:1433 SYN ******S*
Nov 7 00:00:05 203.101.57.107:2542 -> xxx.yyy.10.163:1433 SYN ******S*
Nov 7 00:00:05 203.101.57.107:2539 -> xxx.yyy.10.160:1433 SYN ******S*
Nov 7 00:00:05 203.101.57.107:2543 -> xxx.yyy.10.164:1433 SYN ******S*
[...]
Nov 7 03:40:43 203.101.57.107:4218 -> xxx.yyy.255.247:1433 SYN ******S*
Nov 7 03:40:43 203.101.57.107:4219 -> xxx.yyy.255.248:1433 SYN ******S*
Nov 7 03:40:43 203.101.57.107:4221 -> xxx.yyy.255.249:1433 SYN ******S*
Nov 7 03:40:43 203.101.57.107:4223 -> xxx.yyy.255.250:1433 SYN ******S*
Nov 7 03:40:43 203.101.57.107:4224 -> xxx.yyy.255.251:1433 SYN ******S*
Nov 7 03:40:43 203.101.57.107:4225 -> xxx.yyy.255.252:1433 SYN ******S*
Nov 7 03:40:43 203.101.57.107:4226 -> xxx.yyy.255.253:1433 SYN ******S*
Nov 7 03:40:43 203.101.57.107:4227 -> xxx.yyy.255.254:1433 SYN ******S*
113716
Nov 7 11:28:01 61.224.201.6:2045 -> xxx.yyy.1.0:1433 SYN ******S*
Nov 7 11:28:01 61.224.201.6:2046 -> xxx.yyy.1.1:1433 SYN ******S*
Nov 7 11:27:58 61.224.201.6:2048 -> xxx.yyy.1.3:1433 SYN ******S*
Nov 7 11:27:58 61.224.201.6:2049 -> xxx.yyy.1.4:1433 SYN ******S*
Nov 7 11:27:58 61.224.201.6:2050 -> xxx.yyy.1.5:1433 SYN ******S*
Nov 7 11:27:58 61.224.201.6:2051 -> xxx.yyy.1.6:1433 SYN ******S*
Nov 7 11:27:58 61.224.201.6:2052 -> xxx.yyy.1.7:1433 SYN ******S*
Nov 7 11:27:58 61.224.201.6:2053 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Nov 7 15:16:45 61.224.201.6:3386 -> xxx.yyy.255.247:1433 SYN ******S*
Nov 7 15:16:45 61.224.201.6:3384 -> xxx.yyy.255.246:1433 SYN ******S*
Nov 7 15:16:45 61.224.201.6:3382 -> xxx.yyy.255.245:1433 SYN ******S*
Nov 7 15:16:45 61.224.201.6:3389 -> xxx.yyy.255.248:1433 SYN ******S*
Nov 7 15:16:45 61.224.201.6:3398 -> xxx.yyy.255.250:1433 SYN ******S*
Nov 7 15:16:45 61.224.201.6:3401 -> xxx.yyy.255.251:1433 SYN ******S*
Nov 7 15:16:45 61.224.201.6:3402 -> xxx.yyy.255.252:1433 SYN ******S*
Nov 7 15:16:46 61.224.201.6:3404 -> xxx.yyy.255.253:1433 SYN ******S*
89771
Nov 7 03:07:34 192.71.137.24:1075 -> xxx.yyy.1.1:1257 SYN ******S*
Nov 7 03:07:34 192.71.137.24:1076 -> xxx.yyy.1.2:1257 SYN ******S*
Nov 7 03:07:34 192.71.137.24:1077 -> xxx.yyy.1.3:1257 SYN ******S*
Nov 7 03:07:33 192.71.137.24:1078 -> xxx.yyy.1.4:1257 SYN ******S*
Nov 7 03:07:36 192.71.137.24:1079 -> xxx.yyy.1.5:1257 SYN ******S*
Nov 7 03:07:36 192.71.137.24:1080 -> xxx.yyy.1.6:1257 SYN ******S*
Nov 7 03:07:36 192.71.137.24:1081 -> xxx.yyy.1.7:1257 SYN ******S*
Nov 7 03:07:36 192.71.137.24:1082 -> xxx.yyy.1.8:1257 SYN ******S*
[...]
Nov 7 03:18:33 192.71.137.24:2146 -> xxx.yyy.255.245:1257 SYN ******S*
Nov 7 03:18:33 192.71.137.24:2140 -> xxx.yyy.255.240:1257 SYN ******S*
Nov 7 03:18:33 192.71.137.24:2156 -> xxx.yyy.255.254:1257 SYN ******S*
Nov 7 03:18:33 192.71.137.24:2153 -> xxx.yyy.255.251:1257 SYN ******S*
Nov 7 03:18:33 192.71.137.24:2152 -> xxx.yyy.255.250:1257 SYN ******S*
Nov 7 03:18:33 192.71.137.24:2154 -> xxx.yyy.255.252:1257 SYN ******S*
Nov 7 03:18:33 192.71.137.24:2149 -> xxx.yyy.255.248:1257 SYN ******S*
Nov 7 03:18:33 192.71.137.24:2151 -> xxx.yyy.255.249:1257 SYN ******S*
Nov 7 03:18:33 192.71.137.24:2155 -> xxx.yyy.255.253:1257 SYN ******S*
71240
Nov 7 10:31:43 195.243.48.186:3485 -> xxx.yyy.1.2:4898 SYN ******S*
Nov 7 10:31:43 195.243.48.186:3486 -> xxx.yyy.1.3:4898 SYN ******S*
Nov 7 10:31:45 195.243.48.186:3488 -> xxx.yyy.1.5:4898 SYN ******S*
Nov 7 10:31:45 195.243.48.186:3492 -> xxx.yyy.1.7:4898 SYN ******S*
Nov 7 10:31:45 195.243.48.186:3494 -> xxx.yyy.1.8:4898 SYN ******S*
Nov 7 10:31:45 195.243.48.186:3496 -> xxx.yyy.1.9:4898 SYN ******S*
Nov 7 10:31:43 195.243.48.186:3500 -> xxx.yyy.1.11:4898 SYN ******S*
Nov 7 10:31:42 195.243.48.186:3502 -> xxx.yyy.1.12:4898 SYN ******S*
[...]
Nov 7 10:43:25 195.243.48.186:2373 -> xxx.yyy.255.160:4898 SYN ******S*
Nov 7 10:43:26 195.243.48.186:2383 -> xxx.yyy.255.170:4898 SYN ******S*
Nov 7 10:43:26 195.243.48.186:2384 -> xxx.yyy.255.171:4898 SYN ******S*
Nov 7 10:43:26 195.243.48.186:2385 -> xxx.yyy.255.172:4898 SYN ******S*
Nov 7 10:43:26 195.243.48.186:2382 -> xxx.yyy.255.169:4898 SYN ******S*
Nov 7 10:43:26 195.243.48.186:2403 -> xxx.yyy.255.190:4898 SYN ******S*
Nov 7 10:43:26 195.243.48.186:2420 -> xxx.yyy.255.207:4898 SYN ******S*
Nov 7 10:43:26 195.243.48.186:2428 -> xxx.yyy.255.215:4898 SYN ******S*
62561
Nov 7 17:57:54 211.190.149.11:2208 -> xxx.yyy.128.0:1433 SYN ******S*
Nov 7 17:57:54 211.190.149.11:2210 -> xxx.yyy.128.1:1433 SYN ******S*
Nov 7 17:57:54 211.190.149.11:2211 -> xxx.yyy.128.2:1433 SYN ******S*
Nov 7 17:57:51 211.190.149.11:2212 -> xxx.yyy.128.3:1433 SYN ******S*
Nov 7 17:57:51 211.190.149.11:2215 -> xxx.yyy.128.6:1433 SYN ******S*
Nov 7 17:57:54 211.190.149.11:2216 -> xxx.yyy.128.7:1433 SYN ******S*
Nov 7 17:57:54 211.190.149.11:2217 -> xxx.yyy.128.8:1433 SYN ******S*
Nov 7 17:57:54 211.190.149.11:2218 -> xxx.yyy.128.9:1433 SYN ******S*
[...]
Nov 7 19:52:39 211.190.149.11:2981 -> xxx.yyy.255.241:1433 SYN ******S*
Nov 7 19:52:40 211.190.149.11:2983 -> xxx.yyy.255.242:1433 SYN ******S*
Nov 7 19:52:40 211.190.149.11:2989 -> xxx.yyy.255.245:1433 SYN ******S*
Nov 7 19:52:41 211.190.149.11:2990 -> xxx.yyy.255.246:1433 SYN ******S*
Nov 7 19:52:41 211.190.149.11:2998 -> xxx.yyy.255.252:1433 SYN ******S*
Nov 7 19:52:41 211.190.149.11:2996 -> xxx.yyy.255.250:1433 SYN ******S*
Nov 7 19:52:41 211.190.149.11:2995 -> xxx.yyy.255.249:1433 SYN ******S*
Nov 7 19:52:41 211.190.149.11:3000 -> xxx.yyy.255.254:1433 SYN ******S*
58775
Nov 7 03:43:16 211.106.195.205:1410 -> xxx.yyy.1.2:4899 SYN ******S*
Nov 7 03:43:16 211.106.195.205:1411 -> xxx.yyy.1.3:4899 SYN ******S*
Nov 7 03:43:16 211.106.195.205:1412 -> xxx.yyy.1.4:4899 SYN ******S*
Nov 7 03:43:16 211.106.195.205:1413 -> xxx.yyy.1.5:4899 SYN ******S*
Nov 7 03:43:16 211.106.195.205:1414 -> xxx.yyy.1.6:4899 SYN ******S*
Nov 7 03:43:16 211.106.195.205:1415 -> xxx.yyy.1.7:4899 SYN ******S*
Nov 7 03:43:16 211.106.195.205:1446 -> xxx.yyy.1.38:4899 SYN ******S*
Nov 7 03:43:16 211.106.195.205:1452 -> xxx.yyy.1.44:4899 SYN ******S*
[...]
Nov 7 22:51:34 211.106.195.205:1959 -> xxx.yyy.254.244:4899 SYN ******S*
Nov 7 22:51:34 211.106.195.205:1921 -> xxx.yyy.254.207:4899 SYN ******S*
Nov 7 22:51:34 211.106.195.205:1952 -> xxx.yyy.254.237:4899 SYN ******S*
Nov 7 22:51:34 211.106.195.205:1954 -> xxx.yyy.254.239:4899 SYN ******S*
Nov 7 22:51:34 211.106.195.205:1928 -> xxx.yyy.254.214:4899 SYN ******S*
Nov 7 22:51:34 211.106.195.205:1964 -> xxx.yyy.254.249:4899 SYN ******S*
Nov 7 22:51:34 211.106.195.205:1965 -> xxx.yyy.254.250:4899 SYN ******S*
Nov 7 22:51:34 211.106.195.205:1967 -> xxx.yyy.254.252:4899 SYN ******S*
Nov 7 22:51:34 211.106.195.205:1943 -> xxx.yyy.254.228:4899 SYN ******S*
57318
Nov 7 05:35:12 59.29.6.218:3069 -> xxx.yyy.1.16:4899 SYN ******S*
Nov 7 05:35:12 59.29.6.218:3070 -> xxx.yyy.1.17:4899 SYN ******S*
Nov 7 05:35:12 59.29.6.218:3074 -> xxx.yyy.1.21:4899 SYN ******S*
Nov 7 05:35:12 59.29.6.218:3049 -> xxx.yyy.1.1:4899 SYN ******S*
Nov 7 05:35:12 59.29.6.218:3081 -> xxx.yyy.1.26:4899 SYN ******S*
Nov 7 05:35:12 59.29.6.218:3050 -> xxx.yyy.1.2:4899 SYN ******S*
Nov 7 05:35:12 59.29.6.218:3051 -> xxx.yyy.1.3:4899 SYN ******S*
Nov 7 05:35:10 59.29.6.218:3052 -> xxx.yyy.1.4:4899 SYN ******S*
[...]
Nov 7 05:48:06 59.29.6.218:3359 -> xxx.yyy.255.100:4899 SYN ******S*
Nov 7 05:48:06 59.29.6.218:3361 -> xxx.yyy.255.102:4899 SYN ******S*
Nov 7 05:48:06 59.29.6.218:3381 -> xxx.yyy.255.118:4899 SYN ******S*
Nov 7 05:48:06 59.29.6.218:3362 -> xxx.yyy.255.103:4899 SYN ******S*
Nov 7 05:48:06 59.29.6.218:3382 -> xxx.yyy.255.119:4899 SYN ******S*
Nov 7 05:48:06 59.29.6.218:3384 -> xxx.yyy.255.121:4899 SYN ******S*
Nov 7 05:48:06 59.29.6.218:3377 -> xxx.yyy.255.114:4899 SYN ******S*
Nov 7 05:48:06 59.29.6.218:3383 -> xxx.yyy.255.120:4899 SYN ******S*
Nov 7 05:48:06 59.29.6.218:3380 -> xxx.yyy.255.117:4899 SYN ******S*
46910
Nov 7 06:41:51 200.131.253.5:4963 -> xxx.yyy.1.1:4000 SYN ******S*
Nov 7 06:41:51 200.131.253.5:4965 -> xxx.yyy.1.2:4000 SYN ******S*
Nov 7 06:41:51 200.131.253.5:4966 -> xxx.yyy.1.3:4000 SYN ******S*
Nov 7 06:41:52 200.131.253.5:4967 -> xxx.yyy.1.4:4000 SYN ******S*
Nov 7 06:41:49 200.131.253.5:4968 -> xxx.yyy.1.5:4000 SYN ******S*
Nov 7 06:41:52 200.131.253.5:4970 -> xxx.yyy.1.6:4000 SYN ******S*
Nov 7 06:41:52 200.131.253.5:4971 -> xxx.yyy.1.7:4000 SYN ******S*
Nov 7 06:41:52 200.131.253.5:4972 -> xxx.yyy.1.8:4000 SYN ******S*
[...]
Nov 7 06:53:34 200.131.253.5:3377 -> xxx.yyy.255.246:4000 SYN ******S*
Nov 7 06:53:34 200.131.253.5:3378 -> xxx.yyy.255.247:4000 SYN ******S*
Nov 7 06:53:34 200.131.253.5:3379 -> xxx.yyy.255.248:4000 SYN ******S*
Nov 7 06:53:34 200.131.253.5:3380 -> xxx.yyy.255.249:4000 SYN ******S*
Nov 7 06:53:34 200.131.253.5:3381 -> xxx.yyy.255.250:4000 SYN ******S*
Nov 7 06:53:34 200.131.253.5:3382 -> xxx.yyy.255.251:4000 SYN ******S*
Nov 7 06:53:31 200.131.253.5:3383 -> xxx.yyy.255.252:4000 SYN ******S*
Nov 7 06:53:31 200.131.253.5:3384 -> xxx.yyy.255.253:4000 SYN ******S*
Nov 7 06:53:34 200.131.253.5:3385 -> xxx.yyy.255.254:4000 SYN ******S*
46622
Nov 7 09:26:05 4.27.143.30:4549 -> xxx.yyy.1.18:1433 SYN ******S*
Nov 7 09:26:05 4.27.143.30:4556 -> xxx.yyy.1.25:1433 SYN ******S*
Nov 7 09:26:05 4.27.143.30:4563 -> xxx.yyy.1.32:1433 SYN ******S*
Nov 7 09:26:05 4.27.143.30:4570 -> xxx.yyy.1.39:1433 SYN ******S*
Nov 7 09:26:05 4.27.143.30:4576 -> xxx.yyy.1.45:1433 SYN ******S*
Nov 7 09:26:07 4.27.143.30:4590 -> xxx.yyy.1.59:1433 SYN ******S*
Nov 7 09:26:07 4.27.143.30:4591 -> xxx.yyy.1.60:1433 SYN ******S*
Nov 7 09:26:07 4.27.143.30:4592 -> xxx.yyy.1.61:1433 SYN ******S*
[...]
Nov 7 09:43:45 4.27.143.30:4826 -> xxx.yyy.255.250:1433 SYN ******S*
Nov 7 09:43:45 4.27.143.30:4827 -> xxx.yyy.255.251:1433 SYN ******S*
Nov 7 09:43:45 4.27.143.30:4828 -> xxx.yyy.255.252:1433 SYN ******S*
Nov 7 09:43:45 4.27.143.30:4829 -> xxx.yyy.255.253:1433 SYN ******S*
Nov 7 09:43:45 4.27.143.30:4830 -> xxx.yyy.255.254:1433 SYN ******S*
Nov 7 09:43:47 4.27.143.30:4641 -> xxx.yyy.255.66:1433 SYN ******S*
Nov 7 09:43:47 4.27.143.30:4807 -> xxx.yyy.255.231:1433 SYN ******S*
Nov 7 09:43:47 4.27.143.30:4809 -> xxx.yyy.255.233:1433 SYN ******S*
Nov 7 09:43:47 4.27.143.30:4816 -> xxx.yyy.255.240:1433 SYN ******S*
44157
Nov 7 14:34:31 152.94.6.86:3431 -> xxx.yyy.1.1:1433 SYN ******S*
Nov 7 14:34:28 152.94.6.86:3432 -> xxx.yyy.1.2:1433 SYN ******S*
Nov 7 14:34:31 152.94.6.86:3446 -> xxx.yyy.1.8:1433 SYN ******S*
Nov 7 14:34:31 152.94.6.86:3447 -> xxx.yyy.1.9:1433 SYN ******S*
Nov 7 14:34:31 152.94.6.86:3451 -> xxx.yyy.1.12:1433 SYN ******S*
Nov 7 14:34:28 152.94.6.86:3452 -> xxx.yyy.1.13:1433 SYN ******S*
Nov 7 14:34:28 152.94.6.86:3454 -> xxx.yyy.1.14:1433 SYN ******S*
Nov 7 14:34:28 152.94.6.86:3458 -> xxx.yyy.1.15:1433 SYN ******S*
[...]
Nov 7 14:42:35 152.94.6.86:1516 -> xxx.yyy.255.202:1433 SYN ******S*
Nov 7 14:42:35 152.94.6.86:1509 -> xxx.yyy.255.200:1433 SYN ******S*
Nov 7 14:42:35 152.94.6.86:1564 -> xxx.yyy.255.238:1433 SYN ******S*
Nov 7 14:42:35 152.94.6.86:1577 -> xxx.yyy.255.247:1433 SYN ******S*
Nov 7 14:42:35 152.94.6.86:1525 -> xxx.yyy.255.208:1433 SYN ******S*
Nov 7 14:42:35 152.94.6.86:1553 -> xxx.yyy.255.229:1433 SYN ******S*
Nov 7 14:42:35 152.94.6.86:1561 -> xxx.yyy.255.235:1433 SYN ******S*
Nov 7 14:42:35 152.94.6.86:1521 -> xxx.yyy.255.205:1433 SYN ******S*
Nov 7 14:42:35 152.94.6.86:1550 -> xxx.yyy.255.226:1433 SYN ******S*
33496
Nov 7 19:52:17 211.217.202.168:3834 -> xxx.yyy.1.1:80 SYN ******S*
Nov 7 19:52:17 211.217.202.168:3836 -> xxx.yyy.1.3:80 SYN ******S*
Nov 7 19:52:18 211.217.202.168:3840 -> xxx.yyy.1.7:80 SYN ******S*
Nov 7 19:52:15 211.217.202.168:3850 -> xxx.yyy.1.15:80 SYN ******S*
Nov 7 19:52:15 211.217.202.168:3856 -> xxx.yyy.1.21:80 SYN ******S*
Nov 7 19:52:15 211.217.202.168:3858 -> xxx.yyy.1.23:80 SYN ******S*
Nov 7 19:52:15 211.217.202.168:3837 -> xxx.yyy.1.4:80 SYN ******S*
Nov 7 19:52:15 211.217.202.168:3839 -> xxx.yyy.1.6:80 SYN ******S*
[...]
Nov 7 20:05:18 211.217.202.168:3066 -> xxx.yyy.255.250:80 SYN ******S*
Nov 7 20:05:18 211.217.202.168:3064 -> xxx.yyy.255.248:80 SYN ******S*
Nov 7 20:05:18 211.217.202.168:3054 -> xxx.yyy.255.238:80 SYN ******S*
Nov 7 20:05:18 211.217.202.168:3056 -> xxx.yyy.255.240:80 SYN ******S*
Nov 7 20:05:18 211.217.202.168:3057 -> xxx.yyy.255.241:80 SYN ******S*
Nov 7 20:05:18 211.217.202.168:3068 -> xxx.yyy.255.252:80 SYN ******S*
Nov 7 20:05:18 211.217.202.168:3065 -> xxx.yyy.255.249:80 SYN ******S*
Nov 7 20:05:18 211.217.202.168:3062 -> xxx.yyy.255.246:80 SYN ******S*
Nov 7 20:05:18 211.217.202.168:3063 -> xxx.yyy.255.247:80 SYN ******S*
32937
Nov 7 18:21:01 80.181.80.14:51449 -> xxx.yyy.1.0:21 SYN ******S*
Nov 7 18:21:01 80.181.80.14:51450 -> xxx.yyy.1.1:21 SYN ******S*
Nov 7 18:21:01 80.181.80.14:51454 -> xxx.yyy.1.5:21 SYN ******S*
Nov 7 18:21:01 80.181.80.14:51458 -> xxx.yyy.1.9:21 SYN ******S*
Nov 7 18:21:01 80.181.80.14:51459 -> xxx.yyy.1.10:21 SYN ******S*
Nov 7 18:21:01 80.181.80.14:51460 -> xxx.yyy.1.11:21 SYN ******S*
Nov 7 18:21:01 80.181.80.14:51463 -> xxx.yyy.1.14:21 SYN ******S*
Nov 7 18:21:01 80.181.80.14:51464 -> xxx.yyy.1.15:21 SYN ******S*
[...]
Nov 7 18:33:13 80.181.80.14:60255 -> xxx.yyy.255.241:21 SYN ******S*
Nov 7 18:33:13 80.181.80.14:60257 -> xxx.yyy.255.243:21 SYN ******S*
Nov 7 18:33:13 80.181.80.14:60258 -> xxx.yyy.255.244:21 SYN ******S*
Nov 7 18:33:13 80.181.80.14:60259 -> xxx.yyy.255.245:21 SYN ******S*
Nov 7 18:33:13 80.181.80.14:60260 -> xxx.yyy.255.246:21 SYN ******S*
Nov 7 18:33:13 80.181.80.14:60261 -> xxx.yyy.255.247:21 SYN ******S*
Nov 7 18:33:13 80.181.80.14:60263 -> xxx.yyy.255.249:21 SYN ******S*
Nov 7 18:33:13 80.181.80.14:60265 -> xxx.yyy.255.251:21 SYN ******S*
Nov 7 18:33:13 80.181.80.14:60268 -> xxx.yyy.255.254:21 SYN ******S*
31761
Nov 7 09:51:42 80.55.43.34:4399 -> xxx.yyy.1.28:1433 SYN ******S*
Nov 7 09:51:42 80.55.43.34:4375 -> xxx.yyy.1.10:1433 SYN ******S*
Nov 7 09:51:41 80.55.43.34:4382 -> xxx.yyy.1.17:1433 SYN ******S*
Nov 7 09:51:39 80.55.43.34:4388 -> xxx.yyy.1.18:1433 SYN ******S*
Nov 7 09:51:40 80.55.43.34:4390 -> xxx.yyy.1.19:1433 SYN ******S*
Nov 7 09:51:40 80.55.43.34:4395 -> xxx.yyy.1.24:1433 SYN ******S*
Nov 7 09:51:40 80.55.43.34:4403 -> xxx.yyy.1.32:1433 SYN ******S*
Nov 7 09:51:40 80.55.43.34:4405 -> xxx.yyy.1.34:1433 SYN ******S*
[...]
Nov 7 13:21:44 80.55.43.34:4609 -> xxx.yyy.232.129:1433 SYN ******S*
Nov 7 13:21:44 80.55.43.34:4602 -> xxx.yyy.232.128:1433 SYN ******S*
Nov 7 13:21:44 80.55.43.34:4593 -> xxx.yyy.232.126:1433 SYN ******S*
Nov 7 13:21:44 80.55.43.34:4706 -> xxx.yyy.232.139:1433 SYN ******S*
Nov 7 13:21:44 80.55.43.34:4677 -> xxx.yyy.232.136:1433 SYN ******S*
Nov 7 13:21:44 80.55.43.34:4657 -> xxx.yyy.232.134:1433 SYN ******S*
Nov 7 13:21:44 80.55.43.34:4645 -> xxx.yyy.232.133:1433 SYN ******S*
Nov 7 13:21:44 80.55.43.34:4712 -> xxx.yyy.232.141:1433 SYN ******S*
Nov 7 13:21:47 80.55.43.34:4698 -> xxx.yyy.232.138:1433 SYN ******S*
29484
[...]
24227
Nov 7 06:51:18 81.190.209.208:1323 -> xxx.yyy.1.0:1433 SYN ******S*
Nov 7 06:51:18 81.190.209.208:1324 -> xxx.yyy.1.1:1433 SYN ******S*
Nov 7 06:51:18 81.190.209.208:1325 -> xxx.yyy.1.2:1433 SYN ******S*
Nov 7 06:51:18 81.190.209.208:1327 -> xxx.yyy.1.3:1433 SYN ******S*
Nov 7 06:51:18 81.190.209.208:1331 -> xxx.yyy.1.5:1433 SYN ******S*
Nov 7 06:51:18 81.190.209.208:1333 -> xxx.yyy.1.6:1433 SYN ******S*
Nov 7 06:51:18 81.190.209.208:1336 -> xxx.yyy.1.7:1433 SYN ******S*
Nov 7 06:51:18 81.190.209.208:1340 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Nov 7 08:55:38 81.190.209.208:4946 -> xxx.yyy.139.250:1433 SYN ******S*
Nov 7 08:55:38 81.190.209.208:4155 -> xxx.yyy.139.224:1433 SYN ******S*
Nov 7 08:55:39 81.190.209.208:1057 -> xxx.yyy.139.253:1433 SYN ******S*
Nov 7 08:55:39 81.190.209.208:2816 -> xxx.yyy.139.216:1433 SYN ******S*
Nov 7 08:55:39 81.190.209.208:1073 -> xxx.yyy.139.255:1433 SYN ******S*
Nov 7 08:55:39 81.190.209.208:1079 -> xxx.yyy.140.0:1433 SYN ******S*
Nov 7 08:55:39 81.190.209.208:1082 -> xxx.yyy.140.1:1433 SYN ******S*
Nov 7 08:55:39 81.190.209.208:1087 -> xxx.yyy.140.2:1433 SYN ******S*
23671
[...]
21896
Nov 7 19:39:16 64.187.41.25:31912 -> xxx.yyy.1.0:1433 SYN ******S*
Nov 7 19:39:16 64.187.41.25:31912 -> xxx.yyy.1.1:1433 SYN ******S*
Nov 7 19:39:16 64.187.41.25:31912 -> xxx.yyy.1.2:1433 SYN ******S*
Nov 7 19:39:16 64.187.41.25:31912 -> xxx.yyy.1.3:1433 SYN ******S*
Nov 7 19:39:16 64.187.41.25:31912 -> xxx.yyy.1.5:1433 SYN ******S*
Nov 7 19:39:16 64.187.41.25:31912 -> xxx.yyy.1.7:1433 SYN ******S*
Nov 7 19:39:16 64.187.41.25:31912 -> xxx.yyy.1.8:1433 SYN ******S*
Nov 7 19:39:16 64.187.41.25:31912 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
Nov 7 19:41:22 64.187.41.25:31912 -> xxx.yyy.253.219:1433 SYN ******S*
Nov 7 19:41:22 64.187.41.25:31912 -> xxx.yyy.253.220:1433 SYN ******S*
Nov 7 19:41:22 64.187.41.25:31912 -> xxx.yyy.253.223:1433 SYN ******S*
Nov 7 19:41:22 64.187.41.25:31912 -> xxx.yyy.253.224:1433 SYN ******S*
Nov 7 19:41:22 64.187.41.25:31912 -> xxx.yyy.253.225:1433 SYN ******S*
Nov 7 19:41:22 64.187.41.25:31912 -> xxx.yyy.253.226:1433 SYN ******S*
Nov 7 19:41:22 64.187.41.25:31912 -> xxx.yyy.253.228:1433 SYN ******S*
Nov 7 19:41:22 64.187.41.25:31912 -> xxx.yyy.253.230:1433 SYN ******S*
Nov 7 19:41:22 64.187.41.25:31912 -> xxx.yyy.253.231:1433 SYN ******S*
19629
[...]
13814
Nov 7 08:46:18 80.225.98.74:3764 -> xxx.yyy.172.180:1433 SYN ******S*
Nov 7 08:46:18 80.225.98.74:3767 -> xxx.yyy.172.181:1433 SYN ******S*
Nov 7 08:46:18 80.225.98.74:3770 -> xxx.yyy.172.182:1433 SYN ******S*
Nov 7 08:46:18 80.225.98.74:3773 -> xxx.yyy.172.183:1433 SYN ******S*
Nov 7 08:46:18 80.225.98.74:3780 -> xxx.yyy.172.184:1433 SYN ******S*
Nov 7 08:46:18 80.225.98.74:3783 -> xxx.yyy.172.185:1433 SYN ******S*
Nov 7 08:46:18 80.225.98.74:3789 -> xxx.yyy.172.188:1433 SYN ******S*
Nov 7 08:46:18 80.225.98.74:3784 -> xxx.yyy.172.186:1433 SYN ******S*
[...]
Nov 7 09:06:10 80.225.98.74:3105 -> xxx.yyy.194.215:1433 SYN ******S*
Nov 7 09:06:10 80.225.98.74:3108 -> xxx.yyy.194.217:1433 SYN ******S*
Nov 7 09:06:10 80.225.98.74:3107 -> xxx.yyy.194.216:1433 SYN ******S*
Nov 7 09:06:10 80.225.98.74:3110 -> xxx.yyy.194.218:1433 SYN ******S*
Nov 7 09:06:10 80.225.98.74:3114 -> xxx.yyy.194.219:1433 SYN ******S*
Nov 7 09:06:10 80.225.98.74:3116 -> xxx.yyy.194.220:1433 SYN ******S*
Nov 7 09:06:10 80.225.98.74:3119 -> xxx.yyy.194.221:1433 SYN ******S*
Nov 7 09:06:10 80.225.98.74:3122 -> xxx.yyy.194.222:1433 SYN ******S*
13310
[...]
12475
[...]
11595
[...]
10813
Nov 7 08:05:35 219.130.76.20:4089 -> xxx.yyy.1.7:1433 SYN ******S*
Nov 7 08:05:35 219.130.76.20:4077 -> xxx.yyy.1.4:1433 SYN ******S*
Nov 7 08:05:32 219.130.76.20:4085 -> xxx.yyy.1.6:1433 SYN ******S*
Nov 7 08:05:36 219.130.76.20:4140 -> xxx.yyy.1.15:1433 SYN ******S*
Nov 7 08:05:36 219.130.76.20:4150 -> xxx.yyy.1.19:1433 SYN ******S*
Nov 7 08:05:37 219.130.76.20:4148 -> xxx.yyy.1.18:1433 SYN ******S*
Nov 7 08:05:37 219.130.76.20:4188 -> xxx.yyy.1.23:1433 SYN ******S*
Nov 7 08:05:35 219.130.76.20:4083 -> xxx.yyy.1.5:1433 SYN ******S*
[...]
Nov 7 10:08:57 219.130.76.20:3012 -> xxx.yyy.92.132:1433 SYN ******S*
Nov 7 10:08:57 219.130.76.20:4144 -> xxx.yyy.92.81:1433 SYN ******S*
Nov 7 10:08:57 219.130.76.20:3015 -> xxx.yyy.92.133:1433 SYN ******S*
Nov 7 10:08:57 219.130.76.20:3025 -> xxx.yyy.92.135:1433 SYN ******S*
Nov 7 10:08:57 219.130.76.20:4499 -> xxx.yyy.92.102:1433 SYN ******S*
Nov 7 10:08:58 219.130.76.20:3044 -> xxx.yyy.92.136:1433 SYN ******S*
Nov 7 10:08:58 219.130.76.20:4159 -> xxx.yyy.92.82:1433 SYN ******S*
Nov 7 10:08:58 219.130.76.20:3053 -> xxx.yyy.92.137:1433 SYN ******S*
10792
Nov 7 09:33:29 219.65.35.68:1314 -> xxx.yyy.136.121:1433 SYN ******S*
Nov 7 09:33:26 219.65.35.68:1333 -> xxx.yyy.136.124:1433 SYN ******S*
Nov 7 09:33:26 219.65.35.68:1340 -> xxx.yyy.136.126:1433 SYN ******S*
Nov 7 09:33:26 219.65.35.68:1342 -> xxx.yyy.136.127:1433 SYN ******S*
Nov 7 09:33:26 219.65.35.68:1345 -> xxx.yyy.136.128:1433 SYN ******S*
Nov 7 09:33:26 219.65.35.68:1365 -> xxx.yyy.136.132:1433 SYN ******S*
Nov 7 09:33:27 219.65.35.68:1373 -> xxx.yyy.136.135:1433 SYN ******S*
Nov 7 09:33:27 219.65.35.68:1380 -> xxx.yyy.136.137:1433 SYN ******S*
[...]
Nov 7 09:50:59 219.65.35.68:1926 -> xxx.yyy.156.1:1433 SYN ******S*
Nov 7 09:51:00 219.65.35.68:1933 -> xxx.yyy.156.2:1433 SYN ******S*
Nov 7 09:51:00 219.65.35.68:1918 -> xxx.yyy.156.0:1433 SYN ******S*
Nov 7 09:51:00 219.65.35.68:1947 -> xxx.yyy.156.3:1433 SYN ******S*
Nov 7 09:51:01 219.65.35.68:1952 -> xxx.yyy.156.4:1433 SYN ******S*
Nov 7 09:51:01 219.65.35.68:1971 -> xxx.yyy.156.8:1433 SYN ******S*
Nov 7 09:51:01 219.65.35.68:1968 -> xxx.yyy.156.6:1433 SYN ******S*
Nov 7 09:51:01 219.65.35.68:1958 -> xxx.yyy.156.5:1433 SYN ******S*
Nov 7 09:51:01 219.65.35.68:1970 -> xxx.yyy.156.7:1433 SYN ******S*
10118
Nov 7 11:06:22 69.41.232.167:25727 -> xxx.yyy.1.0:1433 SYN ******S*
Nov 7 11:06:22 69.41.232.167:22709 -> xxx.yyy.1.1:1433 SYN ******S*
Nov 7 11:06:22 69.41.232.167:26546 -> xxx.yyy.1.2:1433 SYN ******S*
Nov 7 11:06:22 69.41.232.167:23404 -> xxx.yyy.1.3:1433 SYN ******S*
Nov 7 11:06:22 69.41.232.167:25336 -> xxx.yyy.1.5:1433 SYN ******S*
Nov 7 11:06:22 69.41.232.167:24082 -> xxx.yyy.1.6:1433 SYN ******S*
Nov 7 11:06:22 69.41.232.167:22961 -> xxx.yyy.1.4:1433 SYN ******S*
Nov 7 11:06:22 69.41.232.167:22128 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Nov 7 11:06:35 69.41.232.167:23222 -> xxx.yyy.255.190:1433 SYN ******S*
Nov 7 11:06:35 69.41.232.167:23639 -> xxx.yyy.255.191:1433 SYN ******S*
Nov 7 11:06:35 69.41.232.167:22537 -> xxx.yyy.255.187:1433 SYN ******S*
Nov 7 11:06:35 69.41.232.167:22949 -> xxx.yyy.255.199:1433 SYN ******S*
Nov 7 11:06:35 69.41.232.167:25645 -> xxx.yyy.255.198:1433 SYN ******S*
Nov 7 11:06:35 69.41.232.167:22070 -> xxx.yyy.255.200:1433 SYN ******S*
Nov 7 11:06:35 69.41.232.167:25773 -> xxx.yyy.255.201:1433 SYN ******S*
Nov 7 11:06:35 69.41.232.167:24302 -> xxx.yyy.255.202:1433 SYN ******S*
10053
Nov 7 20:00:13 211.218.38.89:2324 -> xxx.yyy.156.215:80 SYN ******S*
Nov 7 20:00:10 211.218.38.89:2331 -> xxx.yyy.156.222:80 SYN ******S*
Nov 7 20:00:10 211.218.38.89:2332 -> xxx.yyy.156.223:80 SYN ******S*
Nov 7 20:00:11 211.218.38.89:2334 -> xxx.yyy.156.225:80 SYN ******S*
Nov 7 20:00:11 211.218.38.89:2333 -> xxx.yyy.156.224:80 SYN ******S*
Nov 7 20:00:14 211.218.38.89:2335 -> xxx.yyy.156.226:80 SYN ******S*
Nov 7 20:00:11 211.218.38.89:2358 -> xxx.yyy.156.239:80 SYN ******S*
Nov 7 20:00:11 211.218.38.89:2359 -> xxx.yyy.156.240:80 SYN ******S*
[...]
Nov 7 20:04:16 211.218.38.89:4934 -> xxx.yyy.235.222:80 SYN ******S*
Nov 7 20:04:16 211.218.38.89:4935 -> xxx.yyy.235.223:80 SYN ******S*
Nov 7 20:04:16 211.218.38.89:4983 -> xxx.yyy.235.240:80 SYN ******S*
Nov 7 20:04:16 211.218.38.89:4990 -> xxx.yyy.235.243:80 SYN ******S*
Nov 7 20:04:17 211.218.38.89:4994 -> xxx.yyy.235.245:80 SYN ******S*
Nov 7 20:04:17 211.218.38.89:4998 -> xxx.yyy.235.248:80 SYN ******S*
Nov 7 20:04:17 211.218.38.89:1048 -> xxx.yyy.236.9:80 SYN ******S*
Nov 7 20:04:17 211.218.38.89:1047 -> xxx.yyy.236.8:80 SYN ******S*
Nov 7 20:04:17 211.218.38.89:1058 -> xxx.yyy.236.15:80 SYN ******S*
9858
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list