[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Fri Oct 22 12:46:24 GMT 2004
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0500.
Oct 21 00:00:08 141.150.38.199:4399 -> xxx.yyy.71.235:1433 SYN ******S*
Oct 21 00:00:06 141.150.38.199:4410 -> xxx.yyy.71.238:1433 SYN ******S*
Oct 21 00:00:07 141.150.38.199:4419 -> xxx.yyy.71.242:1433 SYN ******S*
Oct 21 00:00:07 141.150.38.199:4421 -> xxx.yyy.71.243:1433 SYN ******S*
Oct 21 00:00:11 141.150.38.199:4440 -> xxx.yyy.71.247:1433 SYN ******S*
Oct 21 00:00:08 141.150.38.199:4398 -> xxx.yyy.71.234:1433 SYN ******S*
Oct 21 00:00:09 141.150.38.199:4472 -> xxx.yyy.71.252:1433 SYN ******S*
Oct 21 00:00:09 141.150.38.199:4473 -> xxx.yyy.71.253:1433 SYN ******S*
[...]
Oct 21 09:45:23 141.150.38.199:1686 -> xxx.yyy.255.242:1433 SYN ******S*
Oct 21 09:45:23 141.150.38.199:1690 -> xxx.yyy.255.244:1433 SYN ******S*
Oct 21 09:45:24 141.150.38.199:1693 -> xxx.yyy.255.245:1433 SYN ******S*
Oct 21 09:45:24 141.150.38.199:1707 -> xxx.yyy.255.248:1433 SYN ******S*
Oct 21 09:45:25 141.150.38.199:1709 -> xxx.yyy.255.249:1433 SYN ******S*
Oct 21 09:45:25 141.150.38.199:1711 -> xxx.yyy.255.250:1433 SYN ******S*
Oct 21 09:45:25 141.150.38.199:1712 -> xxx.yyy.255.251:1433 SYN ******S*
Oct 21 09:45:26 141.150.38.199:1719 -> xxx.yyy.255.253:1433 SYN ******S*
196763
Oct 21 02:44:15 222.95.57.237:50391 -> xxx.yyy.1.25:443 SYN ******S*
Oct 21 02:44:18 222.95.57.237:50233 -> xxx.yyy.1.25:3128 SYN ******S*
Oct 21 02:44:18 222.95.57.237:50248 -> xxx.yyy.1.25:80 SYN ******S*
Oct 21 02:44:15 222.95.57.237:50430 -> xxx.yyy.1.27:80 SYN ******S*
Oct 21 02:44:15 222.95.57.237:50431 -> xxx.yyy.1.27:8000 SYN ******S*
Oct 21 02:44:18 222.95.57.237:50433 -> xxx.yyy.1.27:443 SYN ******S*
Oct 21 02:44:15 222.95.57.237:50446 -> xxx.yyy.1.29:8080 SYN ******S*
Oct 21 02:44:15 222.95.57.237:50465 -> xxx.yyy.1.29:80 SYN ******S*
[...]
Oct 21 04:48:13 222.95.57.237:50925 -> xxx.yyy.255.250:8080 SYN ******S*
Oct 21 04:48:13 222.95.57.237:50928 -> xxx.yyy.255.250:2301 SYN ******S*
Oct 21 04:48:13 222.95.57.237:50932 -> xxx.yyy.255.250:80 SYN ******S*
Oct 21 04:48:13 222.95.57.237:50934 -> xxx.yyy.255.250:8000 SYN ******S*
Oct 21 04:48:13 222.95.57.237:50933 -> xxx.yyy.255.251:3128 SYN ******S*
Oct 21 04:48:13 222.95.57.237:50947 -> xxx.yyy.255.251:443 SYN ******S*
Oct 21 04:48:13 222.95.57.237:50966 -> xxx.yyy.255.251:8080 SYN ******S*
Oct 21 04:48:13 222.95.57.237:50977 -> xxx.yyy.255.251:80 SYN ******S*
Oct 21 04:48:13 222.95.57.237:50938 -> xxx.yyy.255.249:2301 SYN ******S*
186933
[...]
78346
Oct 21 03:42:13 212.68.146.201:3540 -> xxx.yyy.1.1:4899 SYN ******S*
Oct 21 03:42:13 212.68.146.201:3541 -> xxx.yyy.1.2:4899 SYN ******S*
Oct 21 03:42:13 212.68.146.201:3543 -> xxx.yyy.1.3:4899 SYN ******S*
Oct 21 03:42:15 212.68.146.201:3544 -> xxx.yyy.1.4:4899 SYN ******S*
Oct 21 03:42:15 212.68.146.201:3547 -> xxx.yyy.1.6:4899 SYN ******S*
Oct 21 03:42:15 212.68.146.201:3545 -> xxx.yyy.1.5:4899 SYN ******S*
Oct 21 03:42:15 212.68.146.201:3549 -> xxx.yyy.1.8:4899 SYN ******S*
Oct 21 03:42:15 212.68.146.201:3548 -> xxx.yyy.1.7:4899 SYN ******S*
[...]
Oct 21 03:51:05 212.68.146.201:3676 -> xxx.yyy.255.178:4899 SYN ******S*
Oct 21 03:51:05 212.68.146.201:3661 -> xxx.yyy.255.167:4899 SYN ******S*
Oct 21 03:51:05 212.68.146.201:3752 -> xxx.yyy.255.235:4899 SYN ******S*
Oct 21 03:51:05 212.68.146.201:3709 -> xxx.yyy.255.200:4899 SYN ******S*
Oct 21 03:51:05 212.68.146.201:3717 -> xxx.yyy.255.206:4899 SYN ******S*
Oct 21 03:51:05 212.68.146.201:3685 -> xxx.yyy.255.186:4899 SYN ******S*
Oct 21 03:51:05 212.68.146.201:3761 -> xxx.yyy.255.243:4899 SYN ******S*
Oct 21 03:51:05 212.68.146.201:3701 -> xxx.yyy.255.198:4899 SYN ******S*
77192
Oct 21 14:36:21 64.231.247.185:2005 -> xxx.yyy.1.2:1433 SYN ******S*
Oct 21 14:36:18 64.231.247.185:2048 -> xxx.yyy.1.3:1433 SYN ******S*
Oct 21 14:36:21 64.231.247.185:2049 -> xxx.yyy.1.4:1433 SYN ******S*
Oct 21 14:36:21 64.231.247.185:2085 -> xxx.yyy.1.6:1433 SYN ******S*
Oct 21 14:36:18 64.231.247.185:2111 -> xxx.yyy.1.7:1433 SYN ******S*
Oct 21 14:36:18 64.231.247.185:2123 -> xxx.yyy.1.8:1433 SYN ******S*
Oct 21 14:36:21 64.231.247.185:2147 -> xxx.yyy.1.9:1433 SYN ******S*
Oct 21 14:36:21 64.231.247.185:2310 -> xxx.yyy.1.14:1433 SYN ******S*
[...]
Oct 21 18:25:04 64.231.247.185:4719 -> xxx.yyy.255.241:1433 SYN ******S*
Oct 21 18:25:04 64.231.247.185:4727 -> xxx.yyy.255.242:1433 SYN ******S*
Oct 21 18:25:05 64.231.247.185:4753 -> xxx.yyy.255.244:1433 SYN ******S*
Oct 21 18:25:05 64.231.247.185:4744 -> xxx.yyy.255.243:1433 SYN ******S*
Oct 21 18:25:05 64.231.247.185:4789 -> xxx.yyy.255.249:1433 SYN ******S*
Oct 21 18:25:05 64.231.247.185:4800 -> xxx.yyy.255.250:1433 SYN ******S*
Oct 21 18:25:05 64.231.247.185:4807 -> xxx.yyy.255.251:1433 SYN ******S*
Oct 21 18:25:06 64.231.247.185:4924 -> xxx.yyy.255.254:1433 SYN ******S*
69124
Oct 21 07:12:40 68.236.194.11:3047 -> xxx.yyy.1.1:4000 SYN ******S*
Oct 21 07:12:40 68.236.194.11:3048 -> xxx.yyy.1.2:4000 SYN ******S*
Oct 21 07:12:40 68.236.194.11:3049 -> xxx.yyy.1.3:4000 SYN ******S*
Oct 21 07:12:42 68.236.194.11:3050 -> xxx.yyy.1.4:4000 SYN ******S*
Oct 21 07:12:39 68.236.194.11:3051 -> xxx.yyy.1.5:4000 SYN ******S*
Oct 21 07:12:42 68.236.194.11:3052 -> xxx.yyy.1.6:4000 SYN ******S*
Oct 21 07:12:39 68.236.194.11:3053 -> xxx.yyy.1.7:4000 SYN ******S*
Oct 21 07:12:39 68.236.194.11:3054 -> xxx.yyy.1.8:4000 SYN ******S*
[...]
Oct 21 07:24:25 68.236.194.11:3475 -> xxx.yyy.255.241:4000 SYN ******S*
Oct 21 07:24:25 68.236.194.11:3472 -> xxx.yyy.255.238:4000 SYN ******S*
Oct 21 07:24:25 68.236.194.11:3487 -> xxx.yyy.255.251:4000 SYN ******S*
Oct 21 07:24:25 68.236.194.11:3484 -> xxx.yyy.255.248:4000 SYN ******S*
Oct 21 07:24:25 68.236.194.11:3488 -> xxx.yyy.255.252:4000 SYN ******S*
Oct 21 07:24:25 68.236.194.11:3480 -> xxx.yyy.255.246:4000 SYN ******S*
Oct 21 07:24:25 68.236.194.11:3485 -> xxx.yyy.255.249:4000 SYN ******S*
Oct 21 07:24:25 68.236.194.11:3486 -> xxx.yyy.255.250:4000 SYN ******S*
Oct 21 07:24:25 68.236.194.11:3483 -> xxx.yyy.255.247:4000 SYN ******S*
68696
Oct 21 01:21:40 62.94.4.153:1245 -> xxx.yyy.153.191:1433 SYN ******S*
Oct 21 01:21:37 62.94.4.153:1246 -> xxx.yyy.153.192:1433 SYN ******S*
Oct 21 01:21:40 62.94.4.153:1248 -> xxx.yyy.153.194:1433 SYN ******S*
Oct 21 01:21:40 62.94.4.153:1250 -> xxx.yyy.153.196:1433 SYN ******S*
Oct 21 01:21:40 62.94.4.153:1252 -> xxx.yyy.153.198:1433 SYN ******S*
Oct 21 01:21:40 62.94.4.153:1253 -> xxx.yyy.153.199:1433 SYN ******S*
Oct 21 01:21:40 62.94.4.153:1254 -> xxx.yyy.153.200:1433 SYN ******S*
Oct 21 01:21:39 62.94.4.153:1234 -> xxx.yyy.153.180:1433 SYN ******S*
[...]
Oct 21 02:57:10 62.94.4.153:3036 -> xxx.yyy.255.245:1433 SYN ******S*
Oct 21 02:57:10 62.94.4.153:3040 -> xxx.yyy.255.247:1433 SYN ******S*
Oct 21 02:57:10 62.94.4.153:3039 -> xxx.yyy.255.246:1433 SYN ******S*
Oct 21 02:57:10 62.94.4.153:3042 -> xxx.yyy.255.249:1433 SYN ******S*
Oct 21 02:57:10 62.94.4.153:3043 -> xxx.yyy.255.250:1433 SYN ******S*
Oct 21 02:57:11 62.94.4.153:3046 -> xxx.yyy.255.251:1433 SYN ******S*
Oct 21 02:57:11 62.94.4.153:3049 -> xxx.yyy.255.254:1433 SYN ******S*
Oct 21 02:57:11 62.94.4.153:3048 -> xxx.yyy.255.253:1433 SYN ******S*
Oct 21 02:57:11 62.94.4.153:3047 -> xxx.yyy.255.252:1433 SYN ******S*
64772
Oct 21 17:33:11 68.50.1.183:2017 -> xxx.yyy.1.1:1433 SYN ******S*
Oct 21 17:33:11 68.50.1.183:2018 -> xxx.yyy.1.2:1433 SYN ******S*
Oct 21 17:33:08 68.50.1.183:2019 -> xxx.yyy.1.3:1433 SYN ******S*
Oct 21 17:33:08 68.50.1.183:2020 -> xxx.yyy.1.4:1433 SYN ******S*
Oct 21 17:33:08 68.50.1.183:2022 -> xxx.yyy.1.6:1433 SYN ******S*
Oct 21 17:33:08 68.50.1.183:2024 -> xxx.yyy.1.8:1433 SYN ******S*
Oct 21 17:33:08 68.50.1.183:2025 -> xxx.yyy.1.9:1433 SYN ******S*
Oct 21 17:33:08 68.50.1.183:2029 -> xxx.yyy.1.13:1433 SYN ******S*
[...]
Oct 21 17:55:37 68.50.1.183:1766 -> xxx.yyy.255.226:1433 SYN ******S*
Oct 21 17:55:37 68.50.1.183:1779 -> xxx.yyy.255.239:1433 SYN ******S*
Oct 21 17:55:37 68.50.1.183:1789 -> xxx.yyy.255.249:1433 SYN ******S*
Oct 21 17:55:37 68.50.1.183:1786 -> xxx.yyy.255.246:1433 SYN ******S*
Oct 21 17:55:37 68.50.1.183:1790 -> xxx.yyy.255.250:1433 SYN ******S*
Oct 21 17:55:37 68.50.1.183:1787 -> xxx.yyy.255.247:1433 SYN ******S*
Oct 21 17:55:37 68.50.1.183:1794 -> xxx.yyy.255.254:1433 SYN ******S*
Oct 21 17:55:37 68.50.1.183:1791 -> xxx.yyy.255.251:1433 SYN ******S*
Oct 21 17:55:37 68.50.1.183:1785 -> xxx.yyy.255.245:1433 SYN ******S*
45074
[...]
44119
Oct 21 12:49:05 140.122.118.55:4218 -> xxx.yyy.1.1:4000 SYN ******S*
Oct 21 12:49:05 140.122.118.55:4220 -> xxx.yyy.1.3:4000 SYN ******S*
Oct 21 12:49:07 140.122.118.55:4223 -> xxx.yyy.1.6:4000 SYN ******S*
Oct 21 12:49:07 140.122.118.55:4225 -> xxx.yyy.1.8:4000 SYN ******S*
Oct 21 12:49:07 140.122.118.55:4226 -> xxx.yyy.1.9:4000 SYN ******S*
Oct 21 12:49:04 140.122.118.55:4227 -> xxx.yyy.1.10:4000 SYN ******S*
Oct 21 12:49:07 140.122.118.55:4229 -> xxx.yyy.1.12:4000 SYN ******S*
Oct 21 12:49:07 140.122.118.55:4230 -> xxx.yyy.1.13:4000 SYN ******S*
[...]
Oct 21 13:00:45 140.122.118.55:1039 -> xxx.yyy.255.243:4000 SYN ******S*
Oct 21 13:00:45 140.122.118.55:1043 -> xxx.yyy.255.247:4000 SYN ******S*
Oct 21 13:00:45 140.122.118.55:1041 -> xxx.yyy.255.245:4000 SYN ******S*
Oct 21 13:00:45 140.122.118.55:1044 -> xxx.yyy.255.248:4000 SYN ******S*
Oct 21 13:00:46 140.122.118.55:1048 -> xxx.yyy.255.252:4000 SYN ******S*
Oct 21 13:00:46 140.122.118.55:1050 -> xxx.yyy.255.254:4000 SYN ******S*
Oct 21 13:00:46 140.122.118.55:1047 -> xxx.yyy.255.251:4000 SYN ******S*
Oct 21 13:00:46 140.122.118.55:1049 -> xxx.yyy.255.253:4000 SYN ******S*
40433
Oct 21 23:02:00 211.20.45.28:2812 -> xxx.yyy.1.0:1433 SYN ******S*
Oct 21 23:02:03 211.20.45.28:2814 -> xxx.yyy.1.2:1433 SYN ******S*
Oct 21 23:02:00 211.20.45.28:2816 -> xxx.yyy.1.4:1433 SYN ******S*
Oct 21 23:02:03 211.20.45.28:2817 -> xxx.yyy.1.5:1433 SYN ******S*
Oct 21 23:02:03 211.20.45.28:2819 -> xxx.yyy.1.7:1433 SYN ******S*
Oct 21 23:02:03 211.20.45.28:2820 -> xxx.yyy.1.8:1433 SYN ******S*
Oct 21 23:02:00 211.20.45.28:2821 -> xxx.yyy.1.9:1433 SYN ******S*
Oct 21 23:02:03 211.20.45.28:2822 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
Oct 21 23:13:02 211.20.45.28:2095 -> xxx.yyy.255.239:1433 SYN ******S*
Oct 21 23:13:02 211.20.45.28:2092 -> xxx.yyy.255.236:1433 SYN ******S*
Oct 21 23:13:02 211.20.45.28:2099 -> xxx.yyy.255.243:1433 SYN ******S*
Oct 21 23:13:02 211.20.45.28:2109 -> xxx.yyy.255.253:1433 SYN ******S*
Oct 21 23:13:02 211.20.45.28:2104 -> xxx.yyy.255.248:1433 SYN ******S*
Oct 21 23:13:02 211.20.45.28:2108 -> xxx.yyy.255.252:1433 SYN ******S*
Oct 21 23:13:02 211.20.45.28:2105 -> xxx.yyy.255.249:1433 SYN ******S*
Oct 21 23:13:02 211.20.45.28:2102 -> xxx.yyy.255.246:1433 SYN ******S*
39989
Oct 21 16:59:56 203.186.79.248:3120 -> xxx.yyy.1.2:1433 SYN ******S*
Oct 21 16:59:53 203.186.79.248:3121 -> xxx.yyy.1.3:1433 SYN ******S*
Oct 21 16:59:56 203.186.79.248:3125 -> xxx.yyy.1.7:1433 SYN ******S*
Oct 21 16:59:53 203.186.79.248:3126 -> xxx.yyy.1.8:1433 SYN ******S*
Oct 21 16:59:56 203.186.79.248:3127 -> xxx.yyy.1.9:1433 SYN ******S*
Oct 21 16:59:53 203.186.79.248:3128 -> xxx.yyy.1.10:1433 SYN ******S*
Oct 21 16:59:53 203.186.79.248:3130 -> xxx.yyy.1.12:1433 SYN ******S*
Oct 21 16:59:53 203.186.79.248:3132 -> xxx.yyy.1.14:1433 SYN ******S*
[...]
Oct 21 17:11:46 203.186.79.248:1744 -> xxx.yyy.255.241:1433 SYN ******S*
Oct 21 17:11:46 203.186.79.248:1741 -> xxx.yyy.255.238:1433 SYN ******S*
Oct 21 17:11:46 203.186.79.248:1738 -> xxx.yyy.255.235:1433 SYN ******S*
Oct 21 17:11:46 203.186.79.248:1753 -> xxx.yyy.255.250:1433 SYN ******S*
Oct 21 17:11:46 203.186.79.248:1747 -> xxx.yyy.255.244:1433 SYN ******S*
Oct 21 17:11:46 203.186.79.248:1746 -> xxx.yyy.255.243:1433 SYN ******S*
Oct 21 17:11:46 203.186.79.248:1756 -> xxx.yyy.255.253:1433 SYN ******S*
Oct 21 17:11:46 203.186.79.248:1757 -> xxx.yyy.255.254:1433 SYN ******S*
38527
Oct 21 13:24:32 66.208.40.90:45845 -> xxx.yyy.1.3:8000 SYN ******S*
Oct 21 13:24:33 66.208.40.90:45847 -> xxx.yyy.1.5:8000 SYN ******S*
Oct 21 13:24:33 66.208.40.90:45848 -> xxx.yyy.1.6:8000 SYN ******S*
Oct 21 13:24:33 66.208.40.90:45849 -> xxx.yyy.1.7:8000 SYN ******S*
Oct 21 13:24:33 66.208.40.90:45851 -> xxx.yyy.1.8:8000 SYN ******S*
Oct 21 13:24:33 66.208.40.90:45852 -> xxx.yyy.1.9:8000 SYN ******S*
Oct 21 13:24:33 66.208.40.90:45853 -> xxx.yyy.1.10:8000 SYN ******S*
Oct 21 13:24:31 66.208.40.90:45854 -> xxx.yyy.1.11:8000 SYN ******S*
[...]
Oct 21 13:36:24 66.208.40.90:49578 -> xxx.yyy.255.232:8000 SYN ******S*
Oct 21 13:36:24 66.208.40.90:49577 -> xxx.yyy.255.231:8000 SYN ******S*
Oct 21 13:36:24 66.208.40.90:49580 -> xxx.yyy.255.234:8000 SYN ******S*
Oct 21 13:36:24 66.208.40.90:49583 -> xxx.yyy.255.237:8000 SYN ******S*
Oct 21 13:36:24 66.208.40.90:49584 -> xxx.yyy.255.238:8000 SYN ******S*
Oct 21 13:36:24 66.208.40.90:49588 -> xxx.yyy.255.242:8000 SYN ******S*
Oct 21 13:36:24 66.208.40.90:49590 -> xxx.yyy.255.244:8000 SYN ******S*
Oct 21 13:36:24 66.208.40.90:49591 -> xxx.yyy.255.245:8000 SYN ******S*
Oct 21 13:36:24 66.208.40.90:49596 -> xxx.yyy.255.250:8000 SYN ******S*
36810
Oct 21 11:34:02 80.195.184.68:3590 -> xxx.yyy.1.1:1433 SYN ******S*
Oct 21 11:34:02 80.195.184.68:3592 -> xxx.yyy.1.3:1433 SYN ******S*
Oct 21 11:34:02 80.195.184.68:3593 -> xxx.yyy.1.4:1433 SYN ******S*
Oct 21 11:34:02 80.195.184.68:3594 -> xxx.yyy.1.5:1433 SYN ******S*
Oct 21 11:34:02 80.195.184.68:3591 -> xxx.yyy.1.2:1433 SYN ******S*
Oct 21 11:34:02 80.195.184.68:3595 -> xxx.yyy.1.6:1433 SYN ******S*
Oct 21 11:34:02 80.195.184.68:3596 -> xxx.yyy.1.7:1433 SYN ******S*
Oct 21 11:34:02 80.195.184.68:3597 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Oct 21 13:34:46 80.195.184.68:3440 -> xxx.yyy.152.196:1433 SYN ******S*
Oct 21 16:02:30 80.195.184.68:4212 -> xxx.yyy.156.88:1433 SYN ******S*
Oct 21 16:02:31 80.195.184.68:4311 -> xxx.yyy.156.112:1433 SYN ******S*
Oct 21 16:02:31 80.195.184.68:4343 -> xxx.yyy.156.120:1433 SYN ******S*
Oct 21 16:02:31 80.195.184.68:4410 -> xxx.yyy.156.133:1433 SYN ******S*
Oct 21 16:02:31 80.195.184.68:4414 -> xxx.yyy.156.134:1433 SYN ******S*
Oct 21 16:02:31 80.195.184.68:4418 -> xxx.yyy.156.135:1433 SYN ******S*
Oct 21 16:02:31 80.195.184.68:4422 -> xxx.yyy.156.136:1433 SYN ******S*
Oct 21 16:02:31 80.195.184.68:4438 -> xxx.yyy.156.140:1433 SYN ******S*
20447
Oct 21 14:29:40 81.208.106.69:32114 -> xxx.yyy.1.2:1433 SYN ******S*
Oct 21 14:29:43 81.208.106.69:32127 -> xxx.yyy.1.5:1433 SYN ******S*
Oct 21 14:29:41 81.208.106.69:30036 -> xxx.yyy.1.15:1433 SYN ******S*
Oct 21 14:29:44 81.208.106.69:32180 -> xxx.yyy.1.45:1433 SYN ******S*
Oct 21 14:29:44 81.208.106.69:32184 -> xxx.yyy.1.46:1433 SYN ******S*
Oct 21 14:29:41 81.208.106.69:32188 -> xxx.yyy.1.47:1433 SYN ******S*
Oct 21 14:29:41 81.208.106.69:30696 -> xxx.yyy.1.48:1433 SYN ******S*
Oct 21 14:29:41 81.208.106.69:32195 -> xxx.yyy.1.54:1433 SYN ******S*
[...]
Oct 21 16:56:14 81.208.106.69:23015 -> xxx.yyy.255.251:1433 SYN ******S*
Oct 21 16:56:15 81.208.106.69:22924 -> xxx.yyy.255.159:1433 SYN ******S*
Oct 21 16:56:15 81.208.106.69:22946 -> xxx.yyy.255.164:1433 SYN ******S*
Oct 21 16:56:16 81.208.106.69:22494 -> xxx.yyy.255.172:1433 SYN ******S*
Oct 21 16:56:17 81.208.106.69:23018 -> xxx.yyy.255.252:1433 SYN ******S*
Oct 21 16:56:17 81.208.106.69:23205 -> xxx.yyy.255.181:1433 SYN ******S*
Oct 21 16:56:23 81.208.106.69:23023 -> xxx.yyy.255.253:1433 SYN ******S*
Oct 21 16:56:23 81.208.106.69:23018 -> xxx.yyy.255.252:1433 SYN ******S*
16689
Oct 21 08:59:24 24.36.54.158:3965 -> xxx.yyy.1.0:1433 SYN ******S*
Oct 21 08:59:24 24.36.54.158:3973 -> xxx.yyy.1.2:1433 SYN ******S*
Oct 21 08:59:21 24.36.54.158:3977 -> xxx.yyy.1.3:1433 SYN ******S*
Oct 21 08:59:21 24.36.54.158:3981 -> xxx.yyy.1.4:1433 SYN ******S*
Oct 21 08:59:21 24.36.54.158:3985 -> xxx.yyy.1.5:1433 SYN ******S*
Oct 21 08:59:21 24.36.54.158:3989 -> xxx.yyy.1.6:1433 SYN ******S*
Oct 21 08:59:21 24.36.54.158:3994 -> xxx.yyy.1.7:1433 SYN ******S*
Oct 21 08:59:21 24.36.54.158:4002 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
Oct 21 10:52:56 24.36.54.158:4068 -> xxx.yyy.128.40:1433 SYN ******S*
Oct 21 10:52:57 24.36.54.158:1793 -> xxx.yyy.128.0:1433 SYN ******S*
Oct 21 10:52:58 24.36.54.158:4043 -> xxx.yyy.128.39:1433 SYN ******S*
Oct 21 10:52:59 24.36.54.158:1287 -> xxx.yyy.128.48:1433 SYN ******S*
Oct 21 10:52:59 24.36.54.158:2473 -> xxx.yyy.128.30:1433 SYN ******S*
Oct 21 10:53:00 24.36.54.158:2572 -> xxx.yyy.128.32:1433 SYN ******S*
Oct 21 10:53:01 24.36.54.158:1076 -> xxx.yyy.128.45:1433 SYN ******S*
Oct 21 10:53:01 24.36.54.158:1761 -> xxx.yyy.128.51:1433 SYN ******S*
Oct 21 10:53:02 24.36.54.158:1866 -> xxx.yyy.128.55:1433 SYN ******S*
15619
[...]
13704
Oct 21 00:18:35 220.166.126.229:65188 -> xxx.yyy.64.41:1433 SYN ******S*
Oct 21 00:18:35 220.166.126.229:65190 -> xxx.yyy.64.90:1433 SYN ******S*
Oct 21 00:18:36 220.166.126.229:65155 -> xxx.yyy.64.64:1433 SYN ******S*
Oct 21 00:18:37 220.166.126.229:65243 -> xxx.yyy.64.85:1433 SYN ******S*
Oct 21 00:18:38 220.166.126.229:65272 -> xxx.yyy.64.86:1433 SYN ******S*
Oct 21 00:18:40 220.166.126.229:65343 -> xxx.yyy.64.66:1433 SYN ******S*
Oct 21 00:18:40 220.166.126.229:65342 -> xxx.yyy.64.108:1433 SYN ******S*
Oct 21 00:18:41 220.166.126.229:65361 -> xxx.yyy.64.72:1433 SYN ******S*
[...]
Oct 21 03:11:35 220.166.126.229:57903 -> xxx.yyy.255.188:1433 SYN ******S*
Oct 21 03:11:37 220.166.126.229:57852 -> xxx.yyy.255.197:1433 SYN ******S*
Oct 21 03:11:37 220.166.126.229:57848 -> xxx.yyy.255.196:1433 SYN ******S*
Oct 21 03:11:38 220.166.126.229:58084 -> xxx.yyy.255.232:1433 SYN ******S*
Oct 21 03:11:38 220.166.126.229:57887 -> xxx.yyy.255.204:1433 SYN ******S*
Oct 21 03:11:39 220.166.126.229:58220 -> xxx.yyy.255.245:1433 SYN ******S*
Oct 21 03:11:39 220.166.126.229:58195 -> xxx.yyy.255.241:1433 SYN ******S*
Oct 21 03:11:42 220.166.126.229:58318 -> xxx.yyy.255.242:1433 SYN ******S*
10979
[...]
9940
[...]
9892
Oct 21 12:14:25 61.9.55.111:4982 -> xxx.yyy.204.202:1433 SYN ******S*
Oct 21 12:14:25 61.9.55.111:4985 -> xxx.yyy.204.203:1433 SYN ******S*
Oct 21 12:14:25 61.9.55.111:4988 -> xxx.yyy.204.204:1433 SYN ******S*
Oct 21 12:14:22 61.9.55.111:4991 -> xxx.yyy.204.205:1433 SYN ******S*
Oct 21 12:14:22 61.9.55.111:4994 -> xxx.yyy.204.206:1433 SYN ******S*
Oct 21 12:14:22 61.9.55.111:3010 -> xxx.yyy.204.210:1433 SYN ******S*
Oct 21 12:14:22 61.9.55.111:3013 -> xxx.yyy.204.211:1433 SYN ******S*
Oct 21 12:14:22 61.9.55.111:3025 -> xxx.yyy.204.215:1433 SYN ******S*
[...]
Oct 21 12:39:04 61.9.55.111:4447 -> xxx.yyy.232.62:1433 SYN ******S*
Oct 21 12:39:05 61.9.55.111:4444 -> xxx.yyy.232.61:1433 SYN ******S*
Oct 21 12:39:05 61.9.55.111:4463 -> xxx.yyy.232.66:1433 SYN ******S*
Oct 21 12:39:05 61.9.55.111:4452 -> xxx.yyy.232.63:1433 SYN ******S*
Oct 21 12:39:05 61.9.55.111:4467 -> xxx.yyy.232.68:1433 SYN ******S*
Oct 21 12:39:05 61.9.55.111:4497 -> xxx.yyy.232.77:1433 SYN ******S*
Oct 21 12:39:05 61.9.55.111:4507 -> xxx.yyy.232.81:1433 SYN ******S*
Oct 21 12:39:05 61.9.55.111:4505 -> xxx.yyy.232.80:1433 SYN ******S*
Oct 21 12:39:05 61.9.55.111:4500 -> xxx.yyy.232.78:1433 SYN ******S*
9680
[...]
7953
[...]
7735
[...]
7727
Oct 21 00:01:37 65.54.188.51:54754 -> xxx.yyy.1.13:80 SYN ******S*
Oct 21 00:01:38 65.54.188.51:54871 -> xxx.yyy.241.30:80 SYN ******S*
Oct 21 00:01:38 65.54.188.51:54905 -> xxx.yyy.241.179:80 SYN ******S*
Oct 21 00:01:39 65.54.188.51:55376 -> xxx.yyy.241.255:80 SYN ******S*
Oct 21 00:01:40 65.54.188.51:55709 -> xxx.yyy.234.52:80 SYN ******S*
Oct 21 00:04:24 65.54.188.51:12683 -> xxx.yyy.236.22:80 SYN ******S*
Oct 21 00:04:24 65.54.188.51:12905 -> xxx.yyy.1.13:80 SYN ******S*
Oct 21 00:04:26 65.54.188.51:13350 -> xxx.yyy.241.4:80 SYN ******S*
[...]
Oct 21 23:58:48 65.54.188.51:5013 -> xxx.yyy.1.13:80 SYN ******S*
Oct 21 23:58:48 65.54.188.51:5142 -> xxx.yyy.212.103:80 SYN ******S*
Oct 21 23:58:47 65.54.188.51:4753 -> xxx.yyy.233.181:80 SYN ******S*
Oct 21 23:58:47 65.54.188.51:4845 -> xxx.yyy.12.25:80 SYN ******S*
Oct 21 23:58:52 65.54.188.51:6515 -> xxx.yyy.12.25:80 SYN ******S*
Oct 21 23:58:50 65.54.188.51:5811 -> xxx.yyy.1.13:80 SYN ******S*
Oct 21 23:58:50 65.54.188.51:5957 -> xxx.yyy.241.179:80 SYN ******S*
Oct 21 23:58:53 65.54.188.51:6928 -> xxx.yyy.241.179:80 SYN ******S*
Oct 21 23:58:53 65.54.188.51:6930 -> xxx.yyy.212.103:80 SYN ******S*
7133
Oct 21 13:02:23 24.200.88.65:3823 -> xxx.yyy.215.214:5554 SYN ******S*
Oct 21 13:02:26 24.200.88.65:2493 -> xxx.yyy.215.214:9898 SYN ******S*
Oct 21 13:02:23 24.200.88.65:3825 -> xxx.yyy.215.216:5554 SYN ******S*
Oct 21 13:02:23 24.200.88.65:3827 -> xxx.yyy.215.217:5554 SYN ******S*
Oct 21 13:02:26 24.200.88.65:2496 -> xxx.yyy.215.217:9898 SYN ******S*
Oct 21 13:02:23 24.200.88.65:3838 -> xxx.yyy.215.218:5554 SYN ******S*
Oct 21 13:02:23 24.200.88.65:3876 -> xxx.yyy.215.223:5554 SYN ******S*
Oct 21 13:02:24 24.200.88.65:1117 -> xxx.yyy.215.223:1023 SYN ******S*
[...]
Oct 21 13:03:06 24.200.88.65:1970 -> xxx.yyy.236.12:9898 SYN ******S*
Oct 21 13:03:06 24.200.88.65:1959 -> xxx.yyy.236.2:9898 SYN ******S*
Oct 21 13:03:06 24.200.88.65:1971 -> xxx.yyy.236.13:9898 SYN ******S*
Oct 21 13:03:06 24.200.88.65:1982 -> xxx.yyy.235.252:9898 SYN ******S*
Oct 21 13:03:06 24.200.88.65:1996 -> xxx.yyy.235.251:9898 SYN ******S*
Oct 21 13:03:06 24.200.88.65:1990 -> xxx.yyy.236.10:9898 SYN ******S*
Oct 21 13:03:06 24.200.88.65:2055 -> xxx.yyy.236.38:9898 SYN ******S*
Oct 21 13:03:06 24.200.88.65:2056 -> xxx.yyy.236.39:9898 SYN ******S*
6962
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list