[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Tue Oct 12 15:11:22 GMT 2004
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0500.
Oct 11 06:01:44 200.44.121.10:55551 -> xxx.yyy.1.12:1433 SYN ******S*
Oct 11 06:01:44 200.44.121.10:55553 -> xxx.yyy.1.13:1433 SYN ******S*
Oct 11 06:01:44 200.44.121.10:55555 -> xxx.yyy.1.14:1433 SYN ******S*
Oct 11 06:01:44 200.44.121.10:55557 -> xxx.yyy.1.15:1433 SYN ******S*
Oct 11 06:01:44 200.44.121.10:55559 -> xxx.yyy.1.16:1433 SYN ******S*
Oct 11 06:01:44 200.44.121.10:55561 -> xxx.yyy.1.17:1433 SYN ******S*
Oct 11 06:01:44 200.44.121.10:55565 -> xxx.yyy.1.18:1433 SYN ******S*
Oct 11 06:01:44 200.44.121.10:55567 -> xxx.yyy.1.19:1433 SYN ******S*
[...]
Oct 11 09:50:55 200.44.121.10:44986 -> xxx.yyy.255.243:1433 SYN ******S*
Oct 11 09:50:55 200.44.121.10:44988 -> xxx.yyy.255.244:1433 SYN ******S*
Oct 11 09:50:55 200.44.121.10:44991 -> xxx.yyy.255.245:1433 SYN ******S*
Oct 11 09:50:56 200.44.121.10:45009 -> xxx.yyy.255.250:1433 SYN ******S*
Oct 11 09:50:56 200.44.121.10:45013 -> xxx.yyy.255.251:1433 SYN ******S*
Oct 11 09:50:56 200.44.121.10:45021 -> xxx.yyy.255.253:1433 SYN ******S*
Oct 11 09:50:56 200.44.121.10:45023 -> xxx.yyy.255.254:1433 SYN ******S*
Oct 11 09:50:56 200.44.121.10:45018 -> xxx.yyy.255.252:1433 SYN ******S*
93501
Oct 11 07:31:16 61.230.50.104:2891 -> xxx.yyy.64.0:1433 SYN ******S*
Oct 11 07:31:16 61.230.50.104:2892 -> xxx.yyy.64.1:1433 SYN ******S*
Oct 11 07:31:16 61.230.50.104:2893 -> xxx.yyy.64.2:1433 SYN ******S*
Oct 11 07:31:16 61.230.50.104:2894 -> xxx.yyy.64.3:1433 SYN ******S*
Oct 11 07:31:16 61.230.50.104:2897 -> xxx.yyy.64.5:1433 SYN ******S*
Oct 11 07:31:16 61.230.50.104:2901 -> xxx.yyy.64.7:1433 SYN ******S*
Oct 11 07:31:16 61.230.50.104:2902 -> xxx.yyy.64.8:1433 SYN ******S*
Oct 11 07:31:16 61.230.50.104:2903 -> xxx.yyy.64.9:1433 SYN ******S*
[...]
Oct 11 10:13:49 61.230.50.104:2718 -> xxx.yyy.247.13:1433 SYN ******S*
Oct 11 10:13:49 61.230.50.104:2633 -> xxx.yyy.246.253:1433 SYN ******S*
Oct 11 10:13:49 61.230.50.104:2638 -> xxx.yyy.246.254:1433 SYN ******S*
Oct 11 10:13:49 61.230.50.104:2522 -> xxx.yyy.246.223:1433 SYN ******S*
Oct 11 10:13:49 61.230.50.104:2641 -> xxx.yyy.246.255:1433 SYN ******S*
Oct 11 10:13:49 61.230.50.104:2734 -> xxx.yyy.247.17:1433 SYN ******S*
Oct 11 10:13:49 61.230.50.104:2736 -> xxx.yyy.247.18:1433 SYN ******S*
Oct 11 10:13:49 61.230.50.104:2526 -> xxx.yyy.246.224:1433 SYN ******S*
Oct 11 10:13:50 61.230.50.104:2529 -> xxx.yyy.246.225:1433 SYN ******S*
85934
Oct 11 04:24:16 140.134.242.181:60600 -> xxx.yyy.1.0:1433 SYN ******S*
Oct 11 04:24:16 140.134.242.181:60601 -> xxx.yyy.1.1:1433 SYN ******S*
Oct 11 04:24:16 140.134.242.181:60603 -> xxx.yyy.1.2:1433 SYN ******S*
Oct 11 04:24:16 140.134.242.181:60605 -> xxx.yyy.1.3:1433 SYN ******S*
Oct 11 04:24:16 140.134.242.181:60607 -> xxx.yyy.1.4:1433 SYN ******S*
Oct 11 04:24:16 140.134.242.181:60609 -> xxx.yyy.1.5:1433 SYN ******S*
Oct 11 04:24:16 140.134.242.181:60611 -> xxx.yyy.1.6:1433 SYN ******S*
Oct 11 04:24:16 140.134.242.181:60613 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Oct 11 08:13:00 140.134.242.181:13026 -> xxx.yyy.255.246:1433 SYN ******S*
Oct 11 08:13:00 140.134.242.181:12270 -> xxx.yyy.255.247:1433 SYN ******S*
Oct 11 08:13:00 140.134.242.181:14493 -> xxx.yyy.255.248:1433 SYN ******S*
Oct 11 08:13:00 140.134.242.181:12272 -> xxx.yyy.255.250:1433 SYN ******S*
Oct 11 08:13:00 140.134.242.181:14494 -> xxx.yyy.255.249:1433 SYN ******S*
Oct 11 08:13:00 140.134.242.181:14498 -> xxx.yyy.255.251:1433 SYN ******S*
Oct 11 08:13:00 140.134.242.181:13041 -> xxx.yyy.255.252:1433 SYN ******S*
Oct 11 08:13:00 140.134.242.181:13042 -> xxx.yyy.255.253:1433 SYN ******S*
72623
Oct 11 10:10:24 24.214.216.39:3520 -> xxx.yyy.1.0:1433 SYN ******S*
Oct 11 10:10:21 24.214.216.39:3529 -> xxx.yyy.1.3:1433 SYN ******S*
Oct 11 10:10:24 24.214.216.39:3541 -> xxx.yyy.1.7:1433 SYN ******S*
Oct 11 10:10:22 24.214.216.39:3569 -> xxx.yyy.1.12:1433 SYN ******S*
Oct 11 10:10:22 24.214.216.39:3570 -> xxx.yyy.1.13:1433 SYN ******S*
Oct 11 10:10:22 24.214.216.39:3573 -> xxx.yyy.1.16:1433 SYN ******S*
Oct 11 10:10:25 24.214.216.39:3575 -> xxx.yyy.1.18:1433 SYN ******S*
Oct 11 10:10:25 24.214.216.39:3577 -> xxx.yyy.1.19:1433 SYN ******S*
[...]
Oct 11 13:58:56 24.214.216.39:3477 -> xxx.yyy.255.247:1433 SYN ******S*
Oct 11 13:58:56 24.214.216.39:3478 -> xxx.yyy.255.248:1433 SYN ******S*
Oct 11 13:58:56 24.214.216.39:3481 -> xxx.yyy.255.249:1433 SYN ******S*
Oct 11 13:58:56 24.214.216.39:3482 -> xxx.yyy.255.250:1433 SYN ******S*
Oct 11 13:58:56 24.214.216.39:3488 -> xxx.yyy.255.253:1433 SYN ******S*
Oct 11 13:58:56 24.214.216.39:3489 -> xxx.yyy.255.254:1433 SYN ******S*
Oct 11 13:59:01 24.214.216.39:3443 -> xxx.yyy.255.226:1433 SYN ******S*
Oct 11 13:59:02 24.214.216.39:3467 -> xxx.yyy.255.240:1433 SYN ******S*
Oct 11 13:59:03 24.214.216.39:3486 -> xxx.yyy.255.251:1433 SYN ******S*
69268
Oct 11 00:01:57 221.12.122.130:1500 -> xxx.yyy.111.1:1433 SYN ******S*
Oct 11 00:01:57 221.12.122.130:1496 -> xxx.yyy.111.0:1433 SYN ******S*
Oct 11 00:01:57 221.12.122.130:1533 -> xxx.yyy.111.4:1433 SYN ******S*
Oct 11 00:01:57 221.12.122.130:1530 -> xxx.yyy.111.3:1433 SYN ******S*
Oct 11 00:02:01 221.12.122.130:1544 -> xxx.yyy.111.7:1433 SYN ******S*
Oct 11 00:02:01 221.12.122.130:1543 -> xxx.yyy.111.6:1433 SYN ******S*
Oct 11 00:02:01 221.12.122.130:1588 -> xxx.yyy.111.13:1433 SYN ******S*
Oct 11 00:01:58 221.12.122.130:1589 -> xxx.yyy.111.14:1433 SYN ******S*
[...]
Oct 11 02:11:58 221.12.122.130:1407 -> xxx.yyy.255.248:1433 SYN ******S*
Oct 11 02:11:59 221.12.122.130:1410 -> xxx.yyy.255.249:1433 SYN ******S*
Oct 11 02:11:59 221.12.122.130:1389 -> xxx.yyy.255.247:1433 SYN ******S*
Oct 11 02:11:59 221.12.122.130:1419 -> xxx.yyy.255.251:1433 SYN ******S*
Oct 11 02:11:59 221.12.122.130:1440 -> xxx.yyy.255.252:1433 SYN ******S*
Oct 11 02:11:59 221.12.122.130:1416 -> xxx.yyy.255.250:1433 SYN ******S*
Oct 11 02:11:59 221.12.122.130:1461 -> xxx.yyy.255.254:1433 SYN ******S*
Oct 11 02:11:59 221.12.122.130:1459 -> xxx.yyy.255.253:1433 SYN ******S*
67555
Oct 11 09:37:49 81.138.10.55:3993 -> xxx.yyy.1.3:1433 SYN ******S*
Oct 11 09:37:52 81.138.10.55:3994 -> xxx.yyy.1.4:1433 SYN ******S*
Oct 11 09:37:52 81.138.10.55:3995 -> xxx.yyy.1.5:1433 SYN ******S*
Oct 11 09:37:52 81.138.10.55:3996 -> xxx.yyy.1.6:1433 SYN ******S*
Oct 11 09:37:52 81.138.10.55:4000 -> xxx.yyy.1.10:1433 SYN ******S*
Oct 11 09:37:52 81.138.10.55:4001 -> xxx.yyy.1.11:1433 SYN ******S*
Oct 11 09:37:49 81.138.10.55:4003 -> xxx.yyy.1.13:1433 SYN ******S*
Oct 11 09:37:49 81.138.10.55:4005 -> xxx.yyy.1.15:1433 SYN ******S*
[...]
Oct 11 09:49:12 81.138.10.55:2767 -> xxx.yyy.255.250:1433 SYN ******S*
Oct 11 09:49:12 81.138.10.55:2764 -> xxx.yyy.255.247:1433 SYN ******S*
Oct 11 09:49:12 81.138.10.55:2761 -> xxx.yyy.255.244:1433 SYN ******S*
Oct 11 09:49:12 81.138.10.55:2768 -> xxx.yyy.255.251:1433 SYN ******S*
Oct 11 09:49:12 81.138.10.55:2765 -> xxx.yyy.255.248:1433 SYN ******S*
Oct 11 09:49:12 81.138.10.55:2762 -> xxx.yyy.255.245:1433 SYN ******S*
Oct 11 09:49:12 81.138.10.55:2770 -> xxx.yyy.255.253:1433 SYN ******S*
Oct 11 09:49:12 81.138.10.55:2771 -> xxx.yyy.255.254:1433 SYN ******S*
52829
Oct 11 11:59:20 213.176.64.123:2311 -> xxx.yyy.1.1:20168 SYN ******S*
Oct 11 11:59:19 213.176.64.123:2312 -> xxx.yyy.1.2:20168 SYN ******S*
Oct 11 11:59:20 213.176.64.123:2313 -> xxx.yyy.1.3:20168 SYN ******S*
Oct 11 11:59:21 213.176.64.123:2314 -> xxx.yyy.1.4:20168 SYN ******S*
Oct 11 11:59:21 213.176.64.123:2315 -> xxx.yyy.1.5:20168 SYN ******S*
Oct 11 11:59:18 213.176.64.123:2316 -> xxx.yyy.1.6:20168 SYN ******S*
Oct 11 11:59:21 213.176.64.123:2317 -> xxx.yyy.1.7:20168 SYN ******S*
Oct 11 11:59:18 213.176.64.123:2318 -> xxx.yyy.1.8:20168 SYN ******S*
[...]
Oct 11 12:10:14 213.176.64.123:1536 -> xxx.yyy.255.226:20168 SYN ******S*
Oct 11 12:10:14 213.176.64.123:1543 -> xxx.yyy.255.233:20168 SYN ******S*
Oct 11 12:10:14 213.176.64.123:1548 -> xxx.yyy.255.238:20168 SYN ******S*
Oct 11 12:10:14 213.176.64.123:1546 -> xxx.yyy.255.236:20168 SYN ******S*
Oct 11 12:10:14 213.176.64.123:1553 -> xxx.yyy.255.243:20168 SYN ******S*
Oct 11 12:10:14 213.176.64.123:1557 -> xxx.yyy.255.247:20168 SYN ******S*
Oct 11 12:10:14 213.176.64.123:1562 -> xxx.yyy.255.252:20168 SYN ******S*
Oct 11 12:10:14 213.176.64.123:1559 -> xxx.yyy.255.249:20168 SYN ******S*
Oct 11 12:10:14 213.176.64.123:1560 -> xxx.yyy.255.250:20168 SYN ******S*
41769
Oct 11 12:24:46 152.149.133.197:2998 -> xxx.yyy.1.4:1433 SYN ******S*
Oct 11 12:24:49 152.149.133.197:2999 -> xxx.yyy.1.5:1433 SYN ******S*
Oct 11 12:24:49 152.149.133.197:3001 -> xxx.yyy.1.7:1433 SYN ******S*
Oct 11 12:24:49 152.149.133.197:3002 -> xxx.yyy.1.8:1433 SYN ******S*
Oct 11 12:24:49 152.149.133.197:3004 -> xxx.yyy.1.10:1433 SYN ******S*
Oct 11 12:24:46 152.149.133.197:3005 -> xxx.yyy.1.11:1433 SYN ******S*
Oct 11 12:24:46 152.149.133.197:3006 -> xxx.yyy.1.12:1433 SYN ******S*
Oct 11 12:24:49 152.149.133.197:3008 -> xxx.yyy.1.14:1433 SYN ******S*
[...]
Oct 11 12:37:17 152.149.133.197:1264 -> xxx.yyy.255.249:1433 SYN ******S*
Oct 11 12:37:17 152.149.133.197:1262 -> xxx.yyy.255.247:1433 SYN ******S*
Oct 11 12:37:17 152.149.133.197:1261 -> xxx.yyy.255.246:1433 SYN ******S*
Oct 11 12:37:17 152.149.133.197:1263 -> xxx.yyy.255.248:1433 SYN ******S*
Oct 11 12:37:17 152.149.133.197:1260 -> xxx.yyy.255.245:1433 SYN ******S*
Oct 11 12:37:17 152.149.133.197:1259 -> xxx.yyy.255.244:1433 SYN ******S*
Oct 11 12:37:17 152.149.133.197:1268 -> xxx.yyy.255.253:1433 SYN ******S*
Oct 11 12:37:17 152.149.133.197:1269 -> xxx.yyy.255.254:1433 SYN ******S*
Oct 11 12:37:17 152.149.133.197:1267 -> xxx.yyy.255.252:1433 SYN ******S*
40235
Oct 11 19:43:42 218.147.107.148:2215 -> xxx.yyy.1.1:8000 SYN ******S*
Oct 11 19:43:40 218.147.107.148:2217 -> xxx.yyy.1.2:8000 SYN ******S*
Oct 11 19:43:42 218.147.107.148:2219 -> xxx.yyy.1.3:8000 SYN ******S*
Oct 11 19:43:43 218.147.107.148:2221 -> xxx.yyy.1.4:8000 SYN ******S*
Oct 11 19:43:43 218.147.107.148:2233 -> xxx.yyy.1.10:8000 SYN ******S*
Oct 11 19:43:40 218.147.107.148:2229 -> xxx.yyy.1.8:8000 SYN ******S*
Oct 11 19:43:43 218.147.107.148:2237 -> xxx.yyy.1.12:8000 SYN ******S*
Oct 11 19:43:40 218.147.107.148:2239 -> xxx.yyy.1.13:8000 SYN ******S*
[...]
Oct 11 19:55:29 218.147.107.148:2450 -> xxx.yyy.255.235:8000 SYN ******S*
Oct 11 19:55:29 218.147.107.148:2452 -> xxx.yyy.255.236:8000 SYN ******S*
Oct 11 19:55:29 218.147.107.148:2456 -> xxx.yyy.255.238:8000 SYN ******S*
Oct 11 19:55:29 218.147.107.148:2454 -> xxx.yyy.255.237:8000 SYN ******S*
Oct 11 19:55:29 218.147.107.148:2478 -> xxx.yyy.255.249:8000 SYN ******S*
Oct 11 19:55:29 218.147.107.148:2472 -> xxx.yyy.255.246:8000 SYN ******S*
Oct 11 19:55:29 218.147.107.148:2464 -> xxx.yyy.255.242:8000 SYN ******S*
Oct 11 19:55:29 218.147.107.148:2486 -> xxx.yyy.255.253:8000 SYN ******S*
Oct 11 19:55:29 218.147.107.148:2488 -> xxx.yyy.255.254:8000 SYN ******S*
38938
Oct 11 01:23:02 200.155.19.13:2645 -> xxx.yyy.1.0:1433 SYN ******S*
Oct 11 01:23:02 200.155.19.13:2646 -> xxx.yyy.1.1:1433 SYN ******S*
Oct 11 01:23:02 200.155.19.13:2598 -> xxx.yyy.1.3:1433 SYN ******S*
Oct 11 01:23:02 200.155.19.13:2647 -> xxx.yyy.1.2:1433 SYN ******S*
Oct 11 01:23:02 200.155.19.13:2599 -> xxx.yyy.1.4:1433 SYN ******S*
Oct 11 01:23:02 200.155.19.13:2600 -> xxx.yyy.1.5:1433 SYN ******S*
Oct 11 01:23:02 200.155.19.13:2601 -> xxx.yyy.1.6:1433 SYN ******S*
Oct 11 01:23:02 200.155.19.13:2602 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Oct 11 01:26:26 200.155.19.13:2611 -> xxx.yyy.255.246:1433 SYN ******S*
Oct 11 01:26:26 200.155.19.13:2612 -> xxx.yyy.255.247:1433 SYN ******S*
Oct 11 01:26:26 200.155.19.13:2613 -> xxx.yyy.255.248:1433 SYN ******S*
Oct 11 01:26:26 200.155.19.13:2614 -> xxx.yyy.255.249:1433 SYN ******S*
Oct 11 01:26:26 200.155.19.13:2615 -> xxx.yyy.255.250:1433 SYN ******S*
Oct 11 01:26:26 200.155.19.13:2616 -> xxx.yyy.255.251:1433 SYN ******S*
Oct 11 01:26:26 200.155.19.13:2617 -> xxx.yyy.255.252:1433 SYN ******S*
Oct 11 01:26:26 200.155.19.13:2618 -> xxx.yyy.255.253:1433 SYN ******S*
Oct 11 01:26:26 200.155.19.13:2619 -> xxx.yyy.255.254:1433 SYN ******S*
38010
Oct 11 16:39:24 66.55.11.244:4086 -> xxx.yyy.1.3:1433 SYN ******S*
Oct 11 16:39:24 66.55.11.244:4087 -> xxx.yyy.1.4:1433 SYN ******S*
Oct 11 16:39:21 66.55.11.244:4088 -> xxx.yyy.1.5:1433 SYN ******S*
Oct 11 16:39:24 66.55.11.244:4089 -> xxx.yyy.1.6:1433 SYN ******S*
Oct 11 16:39:24 66.55.11.244:4093 -> xxx.yyy.1.10:1433 SYN ******S*
Oct 11 16:39:24 66.55.11.244:4096 -> xxx.yyy.1.13:1433 SYN ******S*
Oct 11 16:39:21 66.55.11.244:4100 -> xxx.yyy.1.17:1433 SYN ******S*
Oct 11 16:39:24 66.55.11.244:4102 -> xxx.yyy.1.19:1433 SYN ******S*
[...]
Oct 11 16:51:00 66.55.11.244:3286 -> xxx.yyy.255.227:1433 SYN ******S*
Oct 11 16:51:00 66.55.11.244:3279 -> xxx.yyy.255.220:1433 SYN ******S*
Oct 11 16:51:00 66.55.11.244:3284 -> xxx.yyy.255.225:1433 SYN ******S*
Oct 11 16:51:00 66.55.11.244:3289 -> xxx.yyy.255.230:1433 SYN ******S*
Oct 11 16:51:00 66.55.11.244:3303 -> xxx.yyy.255.244:1433 SYN ******S*
Oct 11 16:51:00 66.55.11.244:3301 -> xxx.yyy.255.242:1433 SYN ******S*
Oct 11 16:51:00 66.55.11.244:3304 -> xxx.yyy.255.245:1433 SYN ******S*
Oct 11 16:51:00 66.55.11.244:3312 -> xxx.yyy.255.253:1433 SYN ******S*
37032
Oct 11 15:01:52 62.110.121.190:3575 -> xxx.yyy.1.3:139 SYN ******S*
Oct 11 15:01:49 62.110.121.190:3576 -> xxx.yyy.1.4:139 SYN ******S*
Oct 11 15:01:49 62.110.121.190:3579 -> xxx.yyy.1.7:139 SYN ******S*
Oct 11 15:01:49 62.110.121.190:3582 -> xxx.yyy.1.10:139 SYN ******S*
Oct 11 15:01:49 62.110.121.190:3583 -> xxx.yyy.1.11:139 SYN ******S*
Oct 11 15:01:49 62.110.121.190:3584 -> xxx.yyy.1.12:139 SYN ******S*
Oct 11 15:01:52 62.110.121.190:3586 -> xxx.yyy.1.14:139 SYN ******S*
Oct 11 15:01:52 62.110.121.190:3587 -> xxx.yyy.1.15:139 SYN ******S*
[...]
Oct 11 15:12:49 62.110.121.190:3097 -> xxx.yyy.255.226:139 SYN ******S*
Oct 11 15:12:49 62.110.121.190:3094 -> xxx.yyy.255.223:139 SYN ******S*
Oct 11 15:12:49 62.110.121.190:3103 -> xxx.yyy.255.232:139 SYN ******S*
Oct 11 15:12:49 62.110.121.190:3106 -> xxx.yyy.255.235:139 SYN ******S*
Oct 11 15:12:49 62.110.121.190:3104 -> xxx.yyy.255.233:139 SYN ******S*
Oct 11 15:12:49 62.110.121.190:3110 -> xxx.yyy.255.239:139 SYN ******S*
Oct 11 15:12:49 62.110.121.190:3107 -> xxx.yyy.255.236:139 SYN ******S*
Oct 11 15:12:49 62.110.121.190:3109 -> xxx.yyy.255.238:139 SYN ******S*
Oct 11 15:12:49 62.110.121.190:3108 -> xxx.yyy.255.237:139 SYN ******S*
34709
Oct 11 07:26:58 201.10.156.24:8335 -> xxx.yyy.71.2:3730 INVALIDACK ***A*R*F
Oct 11 07:26:59 201.10.156.24:8335 -> xxx.yyy.71.2:3761 INVALIDACK ***A*R*F
Oct 11 07:27:00 201.10.156.24:8335 -> xxx.yyy.71.2:3791 INVALIDACK ***A*R*F
Oct 11 07:27:00 201.10.156.24:8335 -> xxx.yyy.71.2:3821 INVALIDACK ***A*R*F
Oct 11 07:27:01 201.10.156.24:8335 -> xxx.yyy.71.2:3821 INVALIDACK ***A*R*F
Oct 11 07:27:01 201.10.156.24:8335 -> xxx.yyy.71.2:3851 INVALIDACK ***A*R*F
Oct 11 07:27:03 201.10.156.24:8335 -> xxx.yyy.71.2:3881 INVALIDACK ***A*R*F
Oct 11 07:27:04 201.10.156.24:8335 -> xxx.yyy.71.2:3911 INVALIDACK ***A*R*F
[...]
Oct 11 15:56:28 201.10.156.24:8335 -> xxx.yyy.71.2:3991 INVALIDACK ***A*R*F
Oct 11 15:56:31 201.10.156.24:8335 -> xxx.yyy.71.2:4082 INVALIDACK ***A*R*F
Oct 11 15:56:32 201.10.156.24:8335 -> xxx.yyy.71.2:4113 INVALIDACK ***A*R*F
Oct 11 15:56:35 201.10.156.24:8335 -> xxx.yyy.71.2:4174 INVALIDACK ***A*R*F
Oct 11 15:56:37 201.10.156.24:8335 -> xxx.yyy.71.2:4234 INVALIDACK ***A*R*F
Oct 11 15:56:38 201.10.156.24:8335 -> xxx.yyy.71.2:4265 INVALIDACK ***A*R*F
Oct 11 15:56:39 201.10.156.24:8335 -> xxx.yyy.71.2:4325 INVALIDACK ***A*R*F
Oct 11 15:56:40 201.10.156.24:8335 -> xxx.yyy.71.2:4355 INVALIDACK ***A*R*F
Oct 11 15:56:44 201.10.156.24:8335 -> xxx.yyy.71.2:4448 INVALIDACK ***A*R*F
19511
Oct 11 22:01:21 222.132.253.64:2266 -> xxx.yyy.17.175:1433 SYN ******S*
Oct 11 22:01:24 222.132.253.64:2268 -> xxx.yyy.17.178:1433 SYN ******S*
Oct 11 22:01:24 222.132.253.64:2270 -> xxx.yyy.17.179:1433 SYN ******S*
Oct 11 22:01:24 222.132.253.64:2276 -> xxx.yyy.17.182:1433 SYN ******S*
Oct 11 22:01:24 222.132.253.64:2277 -> xxx.yyy.17.183:1433 SYN ******S*
Oct 11 22:01:21 222.132.253.64:2280 -> xxx.yyy.17.184:1433 SYN ******S*
Oct 11 22:01:24 222.132.253.64:2282 -> xxx.yyy.17.185:1433 SYN ******S*
Oct 11 22:01:21 222.132.253.64:2284 -> xxx.yyy.17.186:1433 SYN ******S*
[...]
Oct 11 23:59:58 222.132.253.64:1836 -> xxx.yyy.141.11:1433 SYN ******S*
Oct 11 23:59:59 222.132.253.64:1700 -> xxx.yyy.140.230:1433 SYN ******S*
Oct 11 23:59:59 222.132.253.64:1786 -> xxx.yyy.140.251:1433 SYN ******S*
Oct 11 23:59:59 222.132.253.64:1706 -> xxx.yyy.140.231:1433 SYN ******S*
Oct 11 23:59:59 222.132.253.64:1790 -> xxx.yyy.140.253:1433 SYN ******S*
Oct 11 23:59:59 222.132.253.64:1711 -> xxx.yyy.140.233:1433 SYN ******S*
Oct 11 23:59:59 222.132.253.64:1802 -> xxx.yyy.140.255:1433 SYN ******S*
Oct 11 23:59:59 222.132.253.64:1803 -> xxx.yyy.141.0:1433 SYN ******S*
18244
Oct 11 14:43:03 212.194.135.73:4637 -> xxx.yyy.82.144:1433 SYN ******S*
Oct 11 14:43:06 212.194.135.73:4643 -> xxx.yyy.82.146:1433 SYN ******S*
Oct 11 14:43:06 212.194.135.73:4649 -> xxx.yyy.82.148:1433 SYN ******S*
Oct 11 14:43:03 212.194.135.73:4652 -> xxx.yyy.82.149:1433 SYN ******S*
Oct 11 14:43:03 212.194.135.73:4658 -> xxx.yyy.82.151:1433 SYN ******S*
Oct 11 14:43:03 212.194.135.73:4673 -> xxx.yyy.82.156:1433 SYN ******S*
Oct 11 14:43:06 212.194.135.73:4676 -> xxx.yyy.82.157:1433 SYN ******S*
Oct 11 14:43:03 212.194.135.73:4679 -> xxx.yyy.82.158:1433 SYN ******S*
[...]
Oct 11 15:57:15 212.194.135.73:4555 -> xxx.yyy.164.174:1433 SYN ******S*
Oct 11 15:57:15 212.194.135.73:4539 -> xxx.yyy.164.173:1433 SYN ******S*
Oct 11 15:57:15 212.194.135.73:3080 -> xxx.yyy.164.213:1433 SYN ******S*
Oct 11 15:57:15 212.194.135.73:3082 -> xxx.yyy.164.214:1433 SYN ******S*
Oct 11 15:57:15 212.194.135.73:3087 -> xxx.yyy.164.216:1433 SYN ******S*
Oct 11 15:57:15 212.194.135.73:3096 -> xxx.yyy.164.218:1433 SYN ******S*
Oct 11 15:57:16 212.194.135.73:3104 -> xxx.yyy.164.220:1433 SYN ******S*
Oct 11 15:57:16 212.194.135.73:3128 -> xxx.yyy.164.225:1433 SYN ******S*
17761
Oct 11 07:56:32 82.41.170.33:4107 -> xxx.yyy.1.0:1433 SYN ******S*
Oct 11 07:56:29 82.41.170.33:4110 -> xxx.yyy.1.1:1433 SYN ******S*
Oct 11 07:56:32 82.41.170.33:4111 -> xxx.yyy.1.2:1433 SYN ******S*
Oct 11 07:56:32 82.41.170.33:4112 -> xxx.yyy.1.3:1433 SYN ******S*
Oct 11 07:56:32 82.41.170.33:4113 -> xxx.yyy.1.4:1433 SYN ******S*
Oct 11 07:56:32 82.41.170.33:4114 -> xxx.yyy.1.5:1433 SYN ******S*
Oct 11 07:56:32 82.41.170.33:4115 -> xxx.yyy.1.6:1433 SYN ******S*
Oct 11 07:56:32 82.41.170.33:4116 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Oct 11 09:07:18 82.41.170.33:4174 -> xxx.yyy.79.213:1433 SYN ******S*
Oct 11 09:07:18 82.41.170.33:4175 -> xxx.yyy.79.214:1433 SYN ******S*
Oct 11 09:07:18 82.41.170.33:4176 -> xxx.yyy.79.215:1433 SYN ******S*
Oct 11 09:07:18 82.41.170.33:4190 -> xxx.yyy.79.216:1433 SYN ******S*
Oct 11 09:07:18 82.41.170.33:4415 -> xxx.yyy.79.244:1433 SYN ******S*
Oct 11 09:07:18 82.41.170.33:4192 -> xxx.yyy.79.217:1433 SYN ******S*
Oct 11 09:07:18 82.41.170.33:4196 -> xxx.yyy.79.219:1433 SYN ******S*
Oct 11 09:07:18 82.41.170.33:4199 -> xxx.yyy.79.220:1433 SYN ******S*
Oct 11 09:07:18 82.41.170.33:4201 -> xxx.yyy.79.221:1433 SYN ******S*
16937
Oct 11 07:07:22 201.1.146.29:3400 -> xxx.yyy.1.1:1433 SYN ******S*
Oct 11 07:07:22 201.1.146.29:3398 -> xxx.yyy.1.0:1433 SYN ******S*
Oct 11 07:07:22 201.1.146.29:3403 -> xxx.yyy.1.4:1433 SYN ******S*
Oct 11 07:07:22 201.1.146.29:3402 -> xxx.yyy.1.3:1433 SYN ******S*
Oct 11 07:07:22 201.1.146.29:3401 -> xxx.yyy.1.2:1433 SYN ******S*
Oct 11 07:07:22 201.1.146.29:3404 -> xxx.yyy.1.5:1433 SYN ******S*
Oct 11 07:07:22 201.1.146.29:3405 -> xxx.yyy.1.6:1433 SYN ******S*
Oct 11 07:07:22 201.1.146.29:3407 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Oct 11 08:20:09 201.1.146.29:2604 -> xxx.yyy.81.111:1433 SYN ******S*
Oct 11 08:20:09 201.1.146.29:2609 -> xxx.yyy.81.113:1433 SYN ******S*
Oct 11 08:20:39 201.1.146.29:3283 -> xxx.yyy.81.213:1433 SYN ******S*
Oct 11 08:20:39 201.1.146.29:3281 -> xxx.yyy.81.212:1433 SYN ******S*
Oct 11 08:20:39 201.1.146.29:3291 -> xxx.yyy.81.216:1433 SYN ******S*
Oct 11 08:20:39 201.1.146.29:3290 -> xxx.yyy.81.215:1433 SYN ******S*
Oct 11 08:20:39 201.1.146.29:3288 -> xxx.yyy.81.214:1433 SYN ******S*
Oct 11 08:20:39 201.1.146.29:3297 -> xxx.yyy.81.219:1433 SYN ******S*
Oct 11 08:20:39 201.1.146.29:3295 -> xxx.yyy.81.218:1433 SYN ******S*
15887
Oct 11 12:02:21 219.131.214.54:4852 -> xxx.yyy.1.23:8535 SYN ******S*
Oct 11 12:02:21 219.131.214.54:4830 -> xxx.yyy.1.1:8535 SYN ******S*
Oct 11 12:02:21 219.131.214.54:4832 -> xxx.yyy.1.3:8535 SYN ******S*
Oct 11 12:02:21 219.131.214.54:4838 -> xxx.yyy.1.9:8535 SYN ******S*
Oct 11 12:02:21 219.131.214.54:4839 -> xxx.yyy.1.10:8535 SYN ******S*
Oct 11 12:02:21 219.131.214.54:4841 -> xxx.yyy.1.12:8535 SYN ******S*
Oct 11 12:02:21 219.131.214.54:4847 -> xxx.yyy.1.18:8535 SYN ******S*
Oct 11 12:02:21 219.131.214.54:4853 -> xxx.yyy.1.24:8535 SYN ******S*
[...]
Oct 11 12:24:02 219.131.214.54:3441 -> xxx.yyy.255.232:8535 SYN ******S*
Oct 11 12:24:02 219.131.214.54:3445 -> xxx.yyy.255.236:8535 SYN ******S*
Oct 11 12:24:02 219.131.214.54:3455 -> xxx.yyy.255.246:8535 SYN ******S*
Oct 11 12:24:02 219.131.214.54:3457 -> xxx.yyy.255.248:8535 SYN ******S*
Oct 11 12:24:02 219.131.214.54:3456 -> xxx.yyy.255.247:8535 SYN ******S*
Oct 11 12:24:02 219.131.214.54:3463 -> xxx.yyy.255.254:8535 SYN ******S*
Oct 11 12:24:02 219.131.214.54:3454 -> xxx.yyy.255.245:8535 SYN ******S*
Oct 11 12:24:02 219.131.214.54:3462 -> xxx.yyy.255.253:8535 SYN ******S*
15867
Oct 11 00:38:24 130.86.213.69:4622 -> xxx.yyy.1.245:1433 SYN ******S*
Oct 11 00:38:24 130.86.213.69:4620 -> xxx.yyy.1.244:1433 SYN ******S*
Oct 11 00:38:24 130.86.213.69:4624 -> xxx.yyy.1.246:1433 SYN ******S*
Oct 11 00:38:24 130.86.213.69:4626 -> xxx.yyy.1.247:1433 SYN ******S*
Oct 11 00:38:24 130.86.213.69:4630 -> xxx.yyy.1.249:1433 SYN ******S*
Oct 11 00:38:24 130.86.213.69:4628 -> xxx.yyy.1.248:1433 SYN ******S*
Oct 11 00:38:24 130.86.213.69:4632 -> xxx.yyy.1.250:1433 SYN ******S*
Oct 11 00:38:25 130.86.213.69:4639 -> xxx.yyy.1.251:1433 SYN ******S*
[...]
Oct 11 01:44:49 130.86.213.69:3396 -> xxx.yyy.249.172:1433 SYN ******S*
Oct 11 01:44:49 130.86.213.69:3508 -> xxx.yyy.249.173:1433 SYN ******S*
Oct 11 01:44:49 130.86.213.69:3598 -> xxx.yyy.249.174:1433 SYN ******S*
Oct 11 01:44:49 130.86.213.69:3647 -> xxx.yyy.249.175:1433 SYN ******S*
Oct 11 01:44:49 130.86.213.69:3803 -> xxx.yyy.249.176:1433 SYN ******S*
Oct 11 01:44:49 130.86.213.69:3906 -> xxx.yyy.249.177:1433 SYN ******S*
Oct 11 01:44:49 130.86.213.69:4006 -> xxx.yyy.249.178:1433 SYN ******S*
Oct 11 01:44:49 130.86.213.69:4030 -> xxx.yyy.249.179:1433 SYN ******S*
Oct 11 01:44:49 130.86.213.69:4068 -> xxx.yyy.249.180:1433 SYN ******S*
14956
Oct 11 05:56:21 221.164.191.103:4103 -> xxx.yyy.174.2:5554 SYN ******S*
Oct 11 05:56:22 221.164.191.103:1359 -> xxx.yyy.174.2:1023 SYN ******S*
Oct 11 05:56:24 221.164.191.103:3101 -> xxx.yyy.174.2:9898 SYN ******S*
Oct 11 05:56:21 221.164.191.103:4106 -> xxx.yyy.174.4:5554 SYN ******S*
Oct 11 05:56:22 221.164.191.103:1363 -> xxx.yyy.174.4:1023 SYN ******S*
Oct 11 05:56:24 221.164.191.103:3103 -> xxx.yyy.174.4:9898 SYN ******S*
Oct 11 05:56:21 221.164.191.103:4130 -> xxx.yyy.174.17:5554 SYN ******S*
Oct 11 05:56:22 221.164.191.103:1386 -> xxx.yyy.174.17:1023 SYN ******S*
[...]
Oct 11 05:57:07 221.164.191.103:2734 -> xxx.yyy.193.136:9898 SYN ******S*
Oct 11 05:57:07 221.164.191.103:2762 -> xxx.yyy.193.139:9898 SYN ******S*
Oct 11 05:57:07 221.164.191.103:2763 -> xxx.yyy.193.140:9898 SYN ******S*
Oct 11 05:57:09 221.164.191.103:4510 -> xxx.yyy.194.121:9898 SYN ******S*
Oct 11 05:57:09 221.164.191.103:4515 -> xxx.yyy.194.122:9898 SYN ******S*
Oct 11 05:57:09 221.164.191.103:4709 -> xxx.yyy.179.32:9898 SYN ******S*
Oct 11 05:57:09 221.164.191.103:4701 -> xxx.yyy.179.33:9898 SYN ******S*
Oct 11 05:57:09 221.164.191.103:4745 -> xxx.yyy.179.35:9898 SYN ******S*
Oct 11 05:57:09 221.164.191.103:4747 -> xxx.yyy.179.34:9898 SYN ******S*
14711
Oct 11 15:11:24 83.24.65.248:25217 -> xxx.yyy.10.78:1433 SYN ******S*
Oct 11 15:11:25 83.24.65.248:25223 -> xxx.yyy.10.80:1433 SYN ******S*
Oct 11 15:11:25 83.24.65.248:25224 -> xxx.yyy.10.81:1433 SYN ******S*
Oct 11 15:11:25 83.24.65.248:25225 -> xxx.yyy.10.82:1433 SYN ******S*
Oct 11 15:11:25 83.24.65.248:25232 -> xxx.yyy.10.88:1433 SYN ******S*
Oct 11 15:11:25 83.24.65.248:25237 -> xxx.yyy.10.90:1433 SYN ******S*
Oct 11 15:11:25 83.24.65.248:25238 -> xxx.yyy.10.91:1433 SYN ******S*
Oct 11 15:11:25 83.24.65.248:25239 -> xxx.yyy.10.92:1433 SYN ******S*
[...]
Oct 11 17:25:49 83.24.65.248:38798 -> xxx.yyy.160.80:1433 SYN ******S*
Oct 11 17:25:49 83.24.65.248:38800 -> xxx.yyy.160.47:1433 SYN ******S*
Oct 11 17:25:49 83.24.65.248:38801 -> xxx.yyy.160.48:1433 SYN ******S*
Oct 11 17:28:27 83.24.65.248:38812 -> xxx.yyy.163.19:1433 SYN ******S*
Oct 11 17:28:27 83.24.65.248:38819 -> xxx.yyy.163.21:1433 SYN ******S*
Oct 11 17:28:27 83.24.65.248:38834 -> xxx.yyy.163.23:1433 SYN ******S*
Oct 11 17:28:27 83.24.65.248:38836 -> xxx.yyy.163.25:1433 SYN ******S*
Oct 11 17:28:27 83.24.65.248:38840 -> xxx.yyy.163.26:1433 SYN ******S*
Oct 11 17:28:27 83.24.65.248:38853 -> xxx.yyy.163.28:1433 SYN ******S*
10712
Oct 11 17:27:29 82.37.123.224:1301 -> xxx.yyy.1.0:1433 SYN ******S*
Oct 11 17:27:29 82.37.123.224:1316 -> xxx.yyy.1.4:1433 SYN ******S*
Oct 11 17:27:32 82.37.123.224:1321 -> xxx.yyy.1.6:1433 SYN ******S*
Oct 11 17:27:32 82.37.123.224:1325 -> xxx.yyy.1.7:1433 SYN ******S*
Oct 11 17:27:32 82.37.123.224:1326 -> xxx.yyy.1.8:1433 SYN ******S*
Oct 11 17:27:32 82.37.123.224:1327 -> xxx.yyy.1.9:1433 SYN ******S*
Oct 11 17:27:29 82.37.123.224:1334 -> xxx.yyy.1.11:1433 SYN ******S*
Oct 11 17:27:32 82.37.123.224:1341 -> xxx.yyy.1.12:1433 SYN ******S*
[...]
Oct 11 18:37:55 82.37.123.224:3319 -> xxx.yyy.73.174:1433 SYN ******S*
Oct 11 18:37:56 82.37.123.224:3326 -> xxx.yyy.73.175:1433 SYN ******S*
Oct 11 18:37:56 82.37.123.224:3330 -> xxx.yyy.73.176:1433 SYN ******S*
Oct 11 18:37:57 82.37.123.224:3472 -> xxx.yyy.73.179:1433 SYN ******S*
Oct 11 18:37:58 82.37.123.224:3549 -> xxx.yyy.73.180:1433 SYN ******S*
Oct 11 18:37:58 82.37.123.224:3560 -> xxx.yyy.73.183:1433 SYN ******S*
Oct 11 18:37:58 82.37.123.224:3557 -> xxx.yyy.73.182:1433 SYN ******S*
Oct 11 18:37:59 82.37.123.224:4611 -> xxx.yyy.73.188:1433 SYN ******S*
10508
Oct 11 09:57:18 82.32.216.65:4867 -> xxx.yyy.161.79:1433 SYN ******S*
Oct 11 09:57:15 82.32.216.65:4869 -> xxx.yyy.161.80:1433 SYN ******S*
Oct 11 09:57:18 82.32.216.65:4881 -> xxx.yyy.161.86:1433 SYN ******S*
Oct 11 09:57:18 82.32.216.65:4883 -> xxx.yyy.161.87:1433 SYN ******S*
Oct 11 09:57:18 82.32.216.65:4885 -> xxx.yyy.161.88:1433 SYN ******S*
Oct 11 09:57:18 82.32.216.65:4889 -> xxx.yyy.161.90:1433 SYN ******S*
Oct 11 09:57:18 82.32.216.65:4891 -> xxx.yyy.161.91:1433 SYN ******S*
Oct 11 09:57:15 82.32.216.65:4895 -> xxx.yyy.161.93:1433 SYN ******S*
[...]
Oct 11 10:16:11 82.32.216.65:2875 -> xxx.yyy.182.122:1433 SYN ******S*
Oct 11 10:16:11 82.32.216.65:2876 -> xxx.yyy.182.123:1433 SYN ******S*
Oct 11 10:16:11 82.32.216.65:2881 -> xxx.yyy.182.124:1433 SYN ******S*
Oct 11 10:16:11 82.32.216.65:2882 -> xxx.yyy.182.125:1433 SYN ******S*
Oct 11 10:16:11 82.32.216.65:2883 -> xxx.yyy.182.126:1433 SYN ******S*
Oct 11 10:16:11 82.32.216.65:2893 -> xxx.yyy.182.127:1433 SYN ******S*
Oct 11 10:16:11 82.32.216.65:2894 -> xxx.yyy.182.128:1433 SYN ******S*
Oct 11 10:16:11 82.32.216.65:2896 -> xxx.yyy.182.130:1433 SYN ******S*
9662
Oct 11 06:16:53 81.79.128.42:2283 -> xxx.yyy.1.0:1433 SYN ******S*
Oct 11 06:16:53 81.79.128.42:2286 -> xxx.yyy.1.1:1433 SYN ******S*
Oct 11 06:16:53 81.79.128.42:2290 -> xxx.yyy.1.3:1433 SYN ******S*
Oct 11 06:16:53 81.79.128.42:2291 -> xxx.yyy.1.4:1433 SYN ******S*
Oct 11 06:16:53 81.79.128.42:2288 -> xxx.yyy.1.2:1433 SYN ******S*
Oct 11 06:16:53 81.79.128.42:2292 -> xxx.yyy.1.5:1433 SYN ******S*
Oct 11 06:16:53 81.79.128.42:2293 -> xxx.yyy.1.6:1433 SYN ******S*
Oct 11 06:16:53 81.79.128.42:2294 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Oct 11 06:46:36 81.79.128.42:3016 -> xxx.yyy.33.248:1433 SYN ******S*
Oct 11 06:46:36 81.79.128.42:3015 -> xxx.yyy.33.247:1433 SYN ******S*
Oct 11 06:46:36 81.79.128.42:3014 -> xxx.yyy.33.246:1433 SYN ******S*
Oct 11 06:46:36 81.79.128.42:3019 -> xxx.yyy.33.251:1433 SYN ******S*
Oct 11 06:46:36 81.79.128.42:3018 -> xxx.yyy.33.250:1433 SYN ******S*
Oct 11 06:46:36 81.79.128.42:3020 -> xxx.yyy.33.252:1433 SYN ******S*
Oct 11 06:46:36 81.79.128.42:3033 -> xxx.yyy.33.253:1433 SYN ******S*
Oct 11 06:46:36 81.79.128.42:3036 -> xxx.yyy.33.254:1433 SYN ******S*
Oct 11 06:46:37 81.79.128.42:3039 -> xxx.yyy.33.255:1433 SYN ******S*
8984
Oct 11 05:59:20 222.53.122.74:3914 -> xxx.yyy.1.44:1433 SYN ******S*
Oct 11 05:59:20 222.53.122.74:3918 -> xxx.yyy.1.46:1433 SYN ******S*
Oct 11 05:59:20 222.53.122.74:3916 -> xxx.yyy.1.45:1433 SYN ******S*
Oct 11 05:59:17 222.53.122.74:3920 -> xxx.yyy.1.47:1433 SYN ******S*
Oct 11 05:59:20 222.53.122.74:3923 -> xxx.yyy.1.48:1433 SYN ******S*
Oct 11 05:59:20 222.53.122.74:3924 -> xxx.yyy.1.49:1433 SYN ******S*
Oct 11 05:59:20 222.53.122.74:3925 -> xxx.yyy.1.50:1433 SYN ******S*
Oct 11 05:59:20 222.53.122.74:3926 -> xxx.yyy.1.51:1433 SYN ******S*
[...]
Oct 11 06:28:54 222.53.122.74:4399 -> xxx.yyy.33.247:1433 SYN ******S*
Oct 11 06:28:54 222.53.122.74:4401 -> xxx.yyy.33.249:1433 SYN ******S*
Oct 11 06:28:54 222.53.122.74:4402 -> xxx.yyy.33.250:1433 SYN ******S*
Oct 11 06:28:55 222.53.122.74:4406 -> xxx.yyy.33.252:1433 SYN ******S*
Oct 11 06:28:55 222.53.122.74:4405 -> xxx.yyy.33.251:1433 SYN ******S*
Oct 11 06:28:55 222.53.122.74:4410 -> xxx.yyy.33.253:1433 SYN ******S*
Oct 11 06:28:55 222.53.122.74:4415 -> xxx.yyy.33.254:1433 SYN ******S*
Oct 11 06:28:55 222.53.122.74:4416 -> xxx.yyy.33.255:1433 SYN ******S*
8877
[...]
7643
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list