[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Tue Sep 14 13:45:27 GMT 2004
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0500.
Sep 13 01:55:29 81.89.240.19:4290 -> xxx.yyy.1.1:1433 SYN ******S*
Sep 13 01:55:32 81.89.240.19:4291 -> xxx.yyy.1.2:1433 SYN ******S*
Sep 13 01:55:32 81.89.240.19:4292 -> xxx.yyy.1.3:1433 SYN ******S*
Sep 13 01:55:29 81.89.240.19:4293 -> xxx.yyy.1.4:1433 SYN ******S*
Sep 13 01:55:32 81.89.240.19:4294 -> xxx.yyy.1.5:1433 SYN ******S*
Sep 13 01:55:32 81.89.240.19:4295 -> xxx.yyy.1.6:1433 SYN ******S*
Sep 13 01:55:29 81.89.240.19:4296 -> xxx.yyy.1.7:1433 SYN ******S*
Sep 13 01:55:29 81.89.240.19:4297 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Sep 13 02:06:44 81.89.240.19:3085 -> xxx.yyy.255.244:1433 SYN ******S*
Sep 13 02:06:44 81.89.240.19:3082 -> xxx.yyy.255.241:1433 SYN ******S*
Sep 13 02:06:44 81.89.240.19:3092 -> xxx.yyy.255.251:1433 SYN ******S*
Sep 13 02:06:44 81.89.240.19:3093 -> xxx.yyy.255.252:1433 SYN ******S*
Sep 13 02:06:44 81.89.240.19:3090 -> xxx.yyy.255.249:1433 SYN ******S*
Sep 13 02:06:44 81.89.240.19:3094 -> xxx.yyy.255.253:1433 SYN ******S*
Sep 13 02:06:44 81.89.240.19:3091 -> xxx.yyy.255.250:1433 SYN ******S*
Sep 13 02:06:44 81.89.240.19:3095 -> xxx.yyy.255.254:1433 SYN ******S*
70261
Sep 13 06:29:15 207.232.137.99:4352 -> xxx.yyy.1.1:6129 SYN ******S*
Sep 13 06:29:14 207.232.137.99:4353 -> xxx.yyy.1.2:6129 SYN ******S*
Sep 13 06:29:15 207.232.137.99:4354 -> xxx.yyy.1.3:6129 SYN ******S*
Sep 13 06:29:17 207.232.137.99:4355 -> xxx.yyy.1.4:6129 SYN ******S*
Sep 13 06:29:17 207.232.137.99:4356 -> xxx.yyy.1.5:6129 SYN ******S*
Sep 13 06:29:17 207.232.137.99:4357 -> xxx.yyy.1.6:6129 SYN ******S*
Sep 13 06:29:17 207.232.137.99:4358 -> xxx.yyy.1.7:6129 SYN ******S*
Sep 13 06:29:14 207.232.137.99:4359 -> xxx.yyy.1.8:6129 SYN ******S*
[...]
Sep 13 06:40:55 207.232.137.99:3074 -> xxx.yyy.255.241:6129 SYN ******S*
Sep 13 06:40:55 207.232.137.99:3078 -> xxx.yyy.255.245:6129 SYN ******S*
Sep 13 06:40:55 207.232.137.99:3083 -> xxx.yyy.255.250:6129 SYN ******S*
Sep 13 06:40:55 207.232.137.99:3080 -> xxx.yyy.255.247:6129 SYN ******S*
Sep 13 06:40:55 207.232.137.99:3081 -> xxx.yyy.255.248:6129 SYN ******S*
Sep 13 06:40:55 207.232.137.99:3084 -> xxx.yyy.255.251:6129 SYN ******S*
Sep 13 06:40:55 207.232.137.99:3082 -> xxx.yyy.255.249:6129 SYN ******S*
Sep 13 06:40:55 207.232.137.99:3087 -> xxx.yyy.255.254:6129 SYN ******S*
68894
Sep 13 11:54:08 64.4.171.59:23803 -> xxx.yyy.1.7:1433 SYN ******S*
Sep 13 11:54:11 64.4.171.59:23805 -> xxx.yyy.1.8:1433 SYN ******S*
Sep 13 11:54:11 64.4.171.59:23809 -> xxx.yyy.1.10:1433 SYN ******S*
Sep 13 11:54:08 64.4.171.59:23825 -> xxx.yyy.1.23:1433 SYN ******S*
Sep 13 11:54:08 64.4.171.59:23826 -> xxx.yyy.1.24:1433 SYN ******S*
Sep 13 11:54:08 64.4.171.59:23828 -> xxx.yyy.1.25:1433 SYN ******S*
Sep 13 11:54:08 64.4.171.59:23830 -> xxx.yyy.1.27:1433 SYN ******S*
Sep 13 11:54:08 64.4.171.59:23829 -> xxx.yyy.1.26:1433 SYN ******S*
[...]
Sep 13 15:42:53 64.4.171.59:9364 -> xxx.yyy.255.230:1433 SYN ******S*
Sep 13 15:42:53 64.4.171.59:9363 -> xxx.yyy.255.229:1433 SYN ******S*
Sep 13 15:42:53 64.4.171.59:9374 -> xxx.yyy.255.235:1433 SYN ******S*
Sep 13 15:42:54 64.4.171.59:9381 -> xxx.yyy.255.236:1433 SYN ******S*
Sep 13 15:42:54 64.4.171.59:9392 -> xxx.yyy.255.242:1433 SYN ******S*
Sep 13 15:42:54 64.4.171.59:9391 -> xxx.yyy.255.241:1433 SYN ******S*
Sep 13 15:42:54 64.4.171.59:9407 -> xxx.yyy.255.246:1433 SYN ******S*
Sep 13 15:42:55 64.4.171.59:9408 -> xxx.yyy.255.247:1433 SYN ******S*
Sep 13 15:42:55 64.4.171.59:9413 -> xxx.yyy.255.250:1433 SYN ******S*
61389
Sep 13 14:00:35 141.151.74.226:4346 -> xxx.yyy.1.0:1433 SYN ******S*
Sep 13 14:00:35 141.151.74.226:4351 -> xxx.yyy.1.5:1433 SYN ******S*
Sep 13 14:00:32 141.151.74.226:4352 -> xxx.yyy.1.6:1433 SYN ******S*
Sep 13 14:00:32 141.151.74.226:4353 -> xxx.yyy.1.7:1433 SYN ******S*
Sep 13 14:00:35 141.151.74.226:4354 -> xxx.yyy.1.8:1433 SYN ******S*
Sep 13 14:00:35 141.151.74.226:4357 -> xxx.yyy.1.10:1433 SYN ******S*
Sep 13 14:00:32 141.151.74.226:4358 -> xxx.yyy.1.11:1433 SYN ******S*
Sep 13 14:00:35 141.151.74.226:4360 -> xxx.yyy.1.13:1433 SYN ******S*
[...]
Sep 13 17:49:13 141.151.74.226:1479 -> xxx.yyy.255.235:1433 SYN ******S*
Sep 13 17:49:13 141.151.74.226:1488 -> xxx.yyy.255.244:1433 SYN ******S*
Sep 13 17:49:13 141.151.74.226:1485 -> xxx.yyy.255.241:1433 SYN ******S*
Sep 13 17:49:13 141.151.74.226:1482 -> xxx.yyy.255.238:1433 SYN ******S*
Sep 13 17:49:13 141.151.74.226:1480 -> xxx.yyy.255.236:1433 SYN ******S*
Sep 13 17:49:14 141.151.74.226:1498 -> xxx.yyy.255.254:1433 SYN ******S*
Sep 13 17:49:14 141.151.74.226:1497 -> xxx.yyy.255.253:1433 SYN ******S*
Sep 13 17:49:14 141.151.74.226:1493 -> xxx.yyy.255.249:1433 SYN ******S*
60714
Sep 13 03:18:14 67.38.174.28:3515 -> xxx.yyy.164.70:1433 SYN ******S*
Sep 13 03:18:14 67.38.174.28:3518 -> xxx.yyy.164.71:1433 SYN ******S*
Sep 13 03:18:14 67.38.174.28:3520 -> xxx.yyy.164.72:1433 SYN ******S*
Sep 13 03:18:14 67.38.174.28:3522 -> xxx.yyy.164.73:1433 SYN ******S*
Sep 13 03:18:15 67.38.174.28:3524 -> xxx.yyy.164.74:1433 SYN ******S*
Sep 13 03:18:15 67.38.174.28:3526 -> xxx.yyy.164.75:1433 SYN ******S*
Sep 13 03:18:15 67.38.174.28:3528 -> xxx.yyy.164.76:1433 SYN ******S*
Sep 13 03:18:15 67.38.174.28:3530 -> xxx.yyy.164.77:1433 SYN ******S*
[...]
Sep 13 06:43:32 67.38.174.28:3349 -> xxx.yyy.255.246:1433 SYN ******S*
Sep 13 06:43:32 67.38.174.28:3351 -> xxx.yyy.255.247:1433 SYN ******S*
Sep 13 06:43:32 67.38.174.28:3353 -> xxx.yyy.255.248:1433 SYN ******S*
Sep 13 06:43:33 67.38.174.28:3355 -> xxx.yyy.255.249:1433 SYN ******S*
Sep 13 06:43:33 67.38.174.28:3356 -> xxx.yyy.255.250:1433 SYN ******S*
Sep 13 06:43:33 67.38.174.28:3358 -> xxx.yyy.255.251:1433 SYN ******S*
Sep 13 06:43:33 67.38.174.28:3360 -> xxx.yyy.255.252:1433 SYN ******S*
Sep 13 06:43:33 67.38.174.28:3363 -> xxx.yyy.255.253:1433 SYN ******S*
60697
Sep 13 08:18:15 142.154.35.43:4074 -> xxx.yyy.128.0:1433 SYN ******S*
Sep 13 08:18:15 142.154.35.43:4075 -> xxx.yyy.128.1:1433 SYN ******S*
Sep 13 08:18:15 142.154.35.43:4076 -> xxx.yyy.128.2:1433 SYN ******S*
Sep 13 08:18:15 142.154.35.43:4077 -> xxx.yyy.128.3:1433 SYN ******S*
Sep 13 08:18:15 142.154.35.43:4078 -> xxx.yyy.128.4:1433 SYN ******S*
Sep 13 08:18:13 142.154.35.43:4079 -> xxx.yyy.128.5:1433 SYN ******S*
Sep 13 08:18:13 142.154.35.43:4080 -> xxx.yyy.128.6:1433 SYN ******S*
Sep 13 08:18:13 142.154.35.43:4081 -> xxx.yyy.128.7:1433 SYN ******S*
[...]
Sep 13 10:13:05 142.154.35.43:1608 -> xxx.yyy.255.242:1433 SYN ******S*
Sep 13 10:13:05 142.154.35.43:1610 -> xxx.yyy.255.244:1433 SYN ******S*
Sep 13 10:13:05 142.154.35.43:1616 -> xxx.yyy.255.246:1433 SYN ******S*
Sep 13 10:13:05 142.154.35.43:1621 -> xxx.yyy.255.251:1433 SYN ******S*
Sep 13 10:13:05 142.154.35.43:1618 -> xxx.yyy.255.248:1433 SYN ******S*
Sep 13 10:13:05 142.154.35.43:1619 -> xxx.yyy.255.249:1433 SYN ******S*
Sep 13 10:13:05 142.154.35.43:1620 -> xxx.yyy.255.250:1433 SYN ******S*
Sep 13 10:13:05 142.154.35.43:1617 -> xxx.yyy.255.247:1433 SYN ******S*
Sep 13 10:13:05 142.154.35.43:1623 -> xxx.yyy.255.253:1433 SYN ******S*
57457
Sep 13 09:31:39 81.168.53.235:2404 -> xxx.yyy.73.1:1433 SYN ******S*
Sep 13 09:31:39 81.168.53.235:2406 -> xxx.yyy.73.3:1433 SYN ******S*
Sep 13 09:31:39 81.168.53.235:2408 -> xxx.yyy.73.5:1433 SYN ******S*
Sep 13 09:31:39 81.168.53.235:2413 -> xxx.yyy.73.10:1433 SYN ******S*
Sep 13 09:31:36 81.168.53.235:2414 -> xxx.yyy.73.11:1433 SYN ******S*
Sep 13 09:31:39 81.168.53.235:2415 -> xxx.yyy.73.12:1433 SYN ******S*
Sep 13 09:31:37 81.168.53.235:2421 -> xxx.yyy.73.18:1433 SYN ******S*
Sep 13 09:31:37 81.168.53.235:2423 -> xxx.yyy.73.20:1433 SYN ******S*
[...]
Sep 13 12:15:41 81.168.53.235:1051 -> xxx.yyy.255.240:1433 SYN ******S*
Sep 13 12:15:42 81.168.53.235:1054 -> xxx.yyy.255.243:1433 SYN ******S*
Sep 13 12:15:42 81.168.53.235:1055 -> xxx.yyy.255.244:1433 SYN ******S*
Sep 13 12:15:42 81.168.53.235:1056 -> xxx.yyy.255.245:1433 SYN ******S*
Sep 13 12:15:42 81.168.53.235:1057 -> xxx.yyy.255.246:1433 SYN ******S*
Sep 13 12:15:42 81.168.53.235:1060 -> xxx.yyy.255.249:1433 SYN ******S*
Sep 13 12:15:43 81.168.53.235:1061 -> xxx.yyy.255.250:1433 SYN ******S*
Sep 13 12:15:43 81.168.53.235:1064 -> xxx.yyy.255.253:1433 SYN ******S*
Sep 13 12:15:43 81.168.53.235:1065 -> xxx.yyy.255.254:1433 SYN ******S*
57271
Sep 13 09:35:53 218.47.110.160:1737 -> xxx.yyy.128.0:1433 SYN ******S*
Sep 13 09:35:53 218.47.110.160:1741 -> xxx.yyy.128.2:1433 SYN ******S*
Sep 13 09:35:53 218.47.110.160:1743 -> xxx.yyy.128.4:1433 SYN ******S*
Sep 13 09:35:50 218.47.110.160:1744 -> xxx.yyy.128.5:1433 SYN ******S*
Sep 13 09:35:53 218.47.110.160:1746 -> xxx.yyy.128.7:1433 SYN ******S*
Sep 13 09:35:53 218.47.110.160:1747 -> xxx.yyy.128.8:1433 SYN ******S*
Sep 13 09:35:50 218.47.110.160:1748 -> xxx.yyy.128.9:1433 SYN ******S*
Sep 13 09:35:50 218.47.110.160:1750 -> xxx.yyy.128.11:1433 SYN ******S*
[...]
Sep 13 11:30:51 218.47.110.160:1444 -> xxx.yyy.255.239:1433 SYN ******S*
Sep 13 11:30:51 218.47.110.160:1446 -> xxx.yyy.255.241:1433 SYN ******S*
Sep 13 11:30:51 218.47.110.160:1452 -> xxx.yyy.255.243:1433 SYN ******S*
Sep 13 11:30:51 218.47.110.160:1460 -> xxx.yyy.255.246:1433 SYN ******S*
Sep 13 11:30:51 218.47.110.160:1458 -> xxx.yyy.255.245:1433 SYN ******S*
Sep 13 11:30:52 218.47.110.160:1468 -> xxx.yyy.255.251:1433 SYN ******S*
Sep 13 11:30:52 218.47.110.160:1470 -> xxx.yyy.255.253:1433 SYN ******S*
Sep 13 11:30:52 218.47.110.160:1473 -> xxx.yyy.255.254:1433 SYN ******S*
48118
Sep 13 09:48:49 130.227.212.45:1617 -> xxx.yyy.1.1:3306 SYN ******S*
Sep 13 09:48:48 130.227.212.45:1618 -> xxx.yyy.1.2:3306 SYN ******S*
Sep 13 09:48:48 130.227.212.45:1619 -> xxx.yyy.1.3:3306 SYN ******S*
Sep 13 09:48:48 130.227.212.45:1621 -> xxx.yyy.1.5:3306 SYN ******S*
Sep 13 09:48:48 130.227.212.45:1626 -> xxx.yyy.1.10:3306 SYN ******S*
Sep 13 09:48:48 130.227.212.45:1630 -> xxx.yyy.1.14:3306 SYN ******S*
Sep 13 09:48:48 130.227.212.45:1631 -> xxx.yyy.1.15:3306 SYN ******S*
Sep 13 09:48:48 130.227.212.45:1639 -> xxx.yyy.1.23:3306 SYN ******S*
[...]
Sep 13 09:59:47 130.227.212.45:3118 -> xxx.yyy.255.239:3306 SYN ******S*
Sep 13 09:59:47 130.227.212.45:3120 -> xxx.yyy.255.241:3306 SYN ******S*
Sep 13 09:59:47 130.227.212.45:3117 -> xxx.yyy.255.238:3306 SYN ******S*
Sep 13 09:59:47 130.227.212.45:3130 -> xxx.yyy.255.251:3306 SYN ******S*
Sep 13 09:59:47 130.227.212.45:3129 -> xxx.yyy.255.250:3306 SYN ******S*
Sep 13 09:59:47 130.227.212.45:3127 -> xxx.yyy.255.248:3306 SYN ******S*
Sep 13 09:59:47 130.227.212.45:3124 -> xxx.yyy.255.245:3306 SYN ******S*
Sep 13 09:59:47 130.227.212.45:3133 -> xxx.yyy.255.254:3306 SYN ******S*
45771
Sep 13 20:28:11 80.171.82.156:2468 -> xxx.yyy.1.1:1433 SYN ******S*
Sep 13 20:28:09 80.171.82.156:2469 -> xxx.yyy.1.2:1433 SYN ******S*
Sep 13 20:28:09 80.171.82.156:2470 -> xxx.yyy.1.3:1433 SYN ******S*
Sep 13 20:28:09 80.171.82.156:2471 -> xxx.yyy.1.4:1433 SYN ******S*
Sep 13 20:28:09 80.171.82.156:2473 -> xxx.yyy.1.6:1433 SYN ******S*
Sep 13 20:28:09 80.171.82.156:2476 -> xxx.yyy.1.9:1433 SYN ******S*
Sep 13 20:28:09 80.171.82.156:2477 -> xxx.yyy.1.10:1433 SYN ******S*
Sep 13 20:28:12 80.171.82.156:2480 -> xxx.yyy.1.13:1433 SYN ******S*
[...]
Sep 13 20:39:05 80.171.82.156:1472 -> xxx.yyy.255.224:1433 SYN ******S*
Sep 13 20:39:05 80.171.82.156:1485 -> xxx.yyy.255.237:1433 SYN ******S*
Sep 13 20:39:05 80.171.82.156:1482 -> xxx.yyy.255.234:1433 SYN ******S*
Sep 13 20:39:05 80.171.82.156:1489 -> xxx.yyy.255.241:1433 SYN ******S*
Sep 13 20:39:05 80.171.82.156:1487 -> xxx.yyy.255.239:1433 SYN ******S*
Sep 13 20:39:05 80.171.82.156:1484 -> xxx.yyy.255.236:1433 SYN ******S*
Sep 13 20:39:05 80.171.82.156:1481 -> xxx.yyy.255.233:1433 SYN ******S*
Sep 13 20:39:05 80.171.82.156:1497 -> xxx.yyy.255.249:1433 SYN ******S*
Sep 13 20:39:05 80.171.82.156:1494 -> xxx.yyy.255.246:1433 SYN ******S*
43228
Sep 13 00:00:06 67.38.174.189:3997 -> xxx.yyy.73.99:1433 SYN ******S*
Sep 13 00:00:06 67.38.174.189:3964 -> xxx.yyy.73.83:1433 SYN ******S*
Sep 13 00:00:07 67.38.174.189:3965 -> xxx.yyy.73.84:1433 SYN ******S*
Sep 13 00:00:10 67.38.174.189:4002 -> xxx.yyy.73.102:1433 SYN ******S*
Sep 13 00:00:07 67.38.174.189:3966 -> xxx.yyy.73.85:1433 SYN ******S*
Sep 13 00:00:10 67.38.174.189:4005 -> xxx.yyy.73.103:1433 SYN ******S*
Sep 13 00:00:08 67.38.174.189:3977 -> xxx.yyy.73.89:1433 SYN ******S*
Sep 13 00:00:08 67.38.174.189:4013 -> xxx.yyy.73.108:1433 SYN ******S*
[...]
Sep 13 03:16:09 67.38.174.189:3672 -> xxx.yyy.160.222:1433 SYN ******S*
Sep 13 03:16:10 67.38.174.189:3705 -> xxx.yyy.160.240:1433 SYN ******S*
Sep 13 03:16:10 67.38.174.189:3675 -> xxx.yyy.160.223:1433 SYN ******S*
Sep 13 03:16:10 67.38.174.189:3707 -> xxx.yyy.160.241:1433 SYN ******S*
Sep 13 03:16:10 67.38.174.189:3677 -> xxx.yyy.160.224:1433 SYN ******S*
Sep 13 03:16:10 67.38.174.189:3708 -> xxx.yyy.160.242:1433 SYN ******S*
Sep 13 03:16:10 67.38.174.189:3709 -> xxx.yyy.160.243:1433 SYN ******S*
Sep 13 03:16:11 67.38.174.189:3710 -> xxx.yyy.160.244:1433 SYN ******S*
Sep 13 03:16:11 67.38.174.189:3711 -> xxx.yyy.160.245:1433 SYN ******S*
35806
Sep 13 09:31:38 82.82.141.225:2399 -> xxx.yyy.136.4:1433 SYN ******S*
Sep 13 09:31:38 82.82.141.225:2400 -> xxx.yyy.136.5:1433 SYN ******S*
Sep 13 09:31:41 82.82.141.225:2401 -> xxx.yyy.136.6:1433 SYN ******S*
Sep 13 09:31:41 82.82.141.225:2404 -> xxx.yyy.136.9:1433 SYN ******S*
Sep 13 09:31:41 82.82.141.225:2407 -> xxx.yyy.136.12:1433 SYN ******S*
Sep 13 09:31:41 82.82.141.225:2409 -> xxx.yyy.136.14:1433 SYN ******S*
Sep 13 09:31:41 82.82.141.225:2411 -> xxx.yyy.136.16:1433 SYN ******S*
Sep 13 09:31:41 82.82.141.225:2412 -> xxx.yyy.136.17:1433 SYN ******S*
[...]
Sep 13 10:53:31 82.82.141.225:2369 -> xxx.yyy.226.165:1433 SYN ******S*
Sep 13 10:53:32 82.82.141.225:2378 -> xxx.yyy.226.170:1433 SYN ******S*
Sep 13 10:53:32 82.82.141.225:2377 -> xxx.yyy.226.169:1433 SYN ******S*
Sep 13 10:53:32 82.82.141.225:2383 -> xxx.yyy.226.175:1433 SYN ******S*
Sep 13 10:53:33 82.82.141.225:2386 -> xxx.yyy.226.178:1433 SYN ******S*
Sep 13 10:53:33 82.82.141.225:2390 -> xxx.yyy.226.180:1433 SYN ******S*
Sep 13 10:53:34 82.82.141.225:2392 -> xxx.yyy.226.181:1433 SYN ******S*
Sep 13 10:53:34 82.82.141.225:2396 -> xxx.yyy.226.182:1433 SYN ******S*
Sep 13 10:53:34 82.82.141.225:2400 -> xxx.yyy.226.184:1433 SYN ******S*
35052
Sep 13 13:23:23 146.155.150.100:3715 -> xxx.yyy.1.1:1433 SYN ******S*
Sep 13 13:23:26 146.155.150.100:3716 -> xxx.yyy.1.2:1433 SYN ******S*
Sep 13 13:23:23 146.155.150.100:3717 -> xxx.yyy.1.3:1433 SYN ******S*
Sep 13 13:23:26 146.155.150.100:3718 -> xxx.yyy.1.4:1433 SYN ******S*
Sep 13 13:23:23 146.155.150.100:3720 -> xxx.yyy.1.6:1433 SYN ******S*
Sep 13 13:23:26 146.155.150.100:3722 -> xxx.yyy.1.8:1433 SYN ******S*
Sep 13 13:23:26 146.155.150.100:3723 -> xxx.yyy.1.9:1433 SYN ******S*
Sep 13 13:23:26 146.155.150.100:3726 -> xxx.yyy.1.12:1433 SYN ******S*
[...]
Sep 13 13:35:20 146.155.150.100:2763 -> xxx.yyy.255.192:1433 SYN ******S*
Sep 13 13:35:20 146.155.150.100:2774 -> xxx.yyy.255.203:1433 SYN ******S*
Sep 13 13:35:20 146.155.150.100:2775 -> xxx.yyy.255.204:1433 SYN ******S*
Sep 13 13:35:20 146.155.150.100:2769 -> xxx.yyy.255.198:1433 SYN ******S*
Sep 13 13:35:20 146.155.150.100:2790 -> xxx.yyy.255.219:1433 SYN ******S*
Sep 13 13:35:20 146.155.150.100:2794 -> xxx.yyy.255.223:1433 SYN ******S*
Sep 13 13:35:20 146.155.150.100:2791 -> xxx.yyy.255.220:1433 SYN ******S*
Sep 13 13:35:20 146.155.150.100:2788 -> xxx.yyy.255.217:1433 SYN ******S*
Sep 13 13:35:20 146.155.150.100:2803 -> xxx.yyy.255.232:1433 SYN ******S*
34261
Sep 13 15:33:32 209.133.242.247:4217 -> xxx.yyy.1.2:139 SYN ******S*
Sep 13 15:33:29 209.133.242.247:4224 -> xxx.yyy.1.9:139 SYN ******S*
Sep 13 15:33:33 209.133.242.247:4241 -> xxx.yyy.1.26:139 SYN ******S*
Sep 13 15:33:30 209.133.242.247:4242 -> xxx.yyy.1.27:139 SYN ******S*
Sep 13 15:33:33 209.133.242.247:4244 -> xxx.yyy.1.29:139 SYN ******S*
Sep 13 15:33:30 209.133.242.247:4250 -> xxx.yyy.1.35:139 SYN ******S*
Sep 13 15:33:30 209.133.242.247:4248 -> xxx.yyy.1.33:139 SYN ******S*
Sep 13 15:33:33 209.133.242.247:4249 -> xxx.yyy.1.34:139 SYN ******S*
[...]
Sep 13 15:45:21 209.133.242.247:2981 -> xxx.yyy.255.227:139 SYN ******S*
Sep 13 15:45:21 209.133.242.247:2987 -> xxx.yyy.255.233:139 SYN ******S*
Sep 13 15:45:21 209.133.242.247:2993 -> xxx.yyy.255.239:139 SYN ******S*
Sep 13 15:45:21 209.133.242.247:2998 -> xxx.yyy.255.244:139 SYN ******S*
Sep 13 15:45:21 209.133.242.247:2991 -> xxx.yyy.255.237:139 SYN ******S*
Sep 13 15:45:21 209.133.242.247:2976 -> xxx.yyy.255.222:139 SYN ******S*
Sep 13 15:45:21 209.133.242.247:3007 -> xxx.yyy.255.253:139 SYN ******S*
Sep 13 15:45:22 209.133.242.247:2919 -> xxx.yyy.255.165:139 SYN ******S*
33793
Sep 13 05:00:17 172.176.65.208:23157 -> xxx.yyy.1.1:1433 SYN ******S*
Sep 13 05:00:17 172.176.65.208:25876 -> xxx.yyy.1.10:1433 SYN ******S*
Sep 13 05:00:17 172.176.65.208:23481 -> xxx.yyy.1.19:1433 SYN ******S*
Sep 13 05:00:17 172.176.65.208:24425 -> xxx.yyy.1.21:1433 SYN ******S*
Sep 13 05:00:17 172.176.65.208:25799 -> xxx.yyy.1.22:1433 SYN ******S*
Sep 13 05:00:17 172.176.65.208:24936 -> xxx.yyy.1.23:1433 SYN ******S*
Sep 13 05:00:17 172.176.65.208:22591 -> xxx.yyy.1.24:1433 SYN ******S*
Sep 13 05:00:17 172.176.65.208:25712 -> xxx.yyy.1.25:1433 SYN ******S*
[...]
Sep 13 05:03:03 172.176.65.208:25079 -> xxx.yyy.255.203:1433 SYN ******S*
Sep 13 05:03:03 172.176.65.208:25969 -> xxx.yyy.255.204:1433 SYN ******S*
Sep 13 05:03:03 172.176.65.208:24565 -> xxx.yyy.255.210:1433 SYN ******S*
Sep 13 05:03:03 172.176.65.208:23409 -> xxx.yyy.255.219:1433 SYN ******S*
Sep 13 05:03:03 172.176.65.208:24792 -> xxx.yyy.255.227:1433 SYN ******S*
Sep 13 05:03:03 172.176.65.208:22684 -> xxx.yyy.255.236:1433 SYN ******S*
Sep 13 05:03:03 172.176.65.208:24588 -> xxx.yyy.255.245:1433 SYN ******S*
Sep 13 05:03:03 172.176.65.208:26308 -> xxx.yyy.255.254:1433 SYN ******S*
Sep 13 05:03:03 172.176.65.208:25034 -> xxx.yyy.255.255:1433 SYN ******S*
29258
Sep 13 13:01:41 211.246.162.65:3245 -> xxx.yyy.1.9:4899 SYN ******S*
Sep 13 13:01:41 211.246.162.65:3242 -> xxx.yyy.1.6:4899 SYN ******S*
Sep 13 13:01:42 211.246.162.65:3252 -> xxx.yyy.1.16:4899 SYN ******S*
Sep 13 13:01:41 211.246.162.65:3251 -> xxx.yyy.1.15:4899 SYN ******S*
Sep 13 13:01:41 211.246.162.65:3254 -> xxx.yyy.1.18:4899 SYN ******S*
Sep 13 13:01:41 211.246.162.65:3258 -> xxx.yyy.1.22:4899 SYN ******S*
Sep 13 13:01:41 211.246.162.65:3261 -> xxx.yyy.1.25:4899 SYN ******S*
Sep 13 13:01:42 211.246.162.65:3263 -> xxx.yyy.1.27:4899 SYN ******S*
[...]
Sep 13 13:10:31 211.246.162.65:3741 -> xxx.yyy.255.227:4899 SYN ******S*
Sep 13 13:10:31 211.246.162.65:3756 -> xxx.yyy.255.242:4899 SYN ******S*
Sep 13 13:10:31 211.246.162.65:3754 -> xxx.yyy.255.240:4899 SYN ******S*
Sep 13 13:10:31 211.246.162.65:3753 -> xxx.yyy.255.239:4899 SYN ******S*
Sep 13 13:10:31 211.246.162.65:3761 -> xxx.yyy.255.247:4899 SYN ******S*
Sep 13 13:10:31 211.246.162.65:3764 -> xxx.yyy.255.250:4899 SYN ******S*
Sep 13 13:10:31 211.246.162.65:3766 -> xxx.yyy.255.252:4899 SYN ******S*
Sep 13 13:10:31 211.246.162.65:3767 -> xxx.yyy.255.253:4899 SYN ******S*
23970
Sep 13 14:30:25 195.6.203.209:3878 -> xxx.yyy.1.1:5554 SYN ******S*
Sep 13 14:30:25 195.6.203.209:3881 -> xxx.yyy.1.4:5554 SYN ******S*
Sep 13 14:30:28 195.6.203.209:3885 -> xxx.yyy.1.8:5554 SYN ******S*
Sep 13 14:30:25 195.6.203.209:3892 -> xxx.yyy.1.15:5554 SYN ******S*
Sep 13 14:30:25 195.6.203.209:3895 -> xxx.yyy.1.18:5554 SYN ******S*
Sep 13 14:30:26 195.6.203.209:3899 -> xxx.yyy.1.22:5554 SYN ******S*
Sep 13 14:30:25 195.6.203.209:3909 -> xxx.yyy.1.32:5554 SYN ******S*
Sep 13 14:30:25 195.6.203.209:3910 -> xxx.yyy.1.33:5554 SYN ******S*
[...]
Sep 13 14:38:51 195.6.203.209:1895 -> xxx.yyy.255.165:5554 SYN ******S*
Sep 13 14:38:51 195.6.203.209:1860 -> xxx.yyy.255.130:5554 SYN ******S*
Sep 13 14:38:51 195.6.203.209:1937 -> xxx.yyy.255.207:5554 SYN ******S*
Sep 13 14:38:51 195.6.203.209:1873 -> xxx.yyy.255.143:5554 SYN ******S*
Sep 13 14:38:51 195.6.203.209:1899 -> xxx.yyy.255.169:5554 SYN ******S*
Sep 13 14:38:51 195.6.203.209:1971 -> xxx.yyy.255.241:5554 SYN ******S*
Sep 13 14:38:51 195.6.203.209:1981 -> xxx.yyy.255.251:5554 SYN ******S*
Sep 13 14:38:51 195.6.203.209:1969 -> xxx.yyy.255.239:5554 SYN ******S*
Sep 13 14:38:51 195.6.203.209:1977 -> xxx.yyy.255.247:5554 SYN ******S*
22863
Sep 13 03:49:40 24.214.214.230:3487 -> xxx.yyy.1.0:1433 SYN ******S*
Sep 13 03:49:40 24.214.214.230:3488 -> xxx.yyy.1.1:1433 SYN ******S*
Sep 13 03:49:40 24.214.214.230:3489 -> xxx.yyy.1.2:1433 SYN ******S*
Sep 13 03:49:40 24.214.214.230:3490 -> xxx.yyy.1.3:1433 SYN ******S*
Sep 13 03:49:40 24.214.214.230:3491 -> xxx.yyy.1.4:1433 SYN ******S*
Sep 13 03:49:40 24.214.214.230:3492 -> xxx.yyy.1.5:1433 SYN ******S*
Sep 13 03:49:40 24.214.214.230:3493 -> xxx.yyy.1.6:1433 SYN ******S*
Sep 13 03:49:40 24.214.214.230:3494 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Sep 13 04:49:13 24.214.214.230:4700 -> xxx.yyy.144.21:1433 SYN ******S*
Sep 13 04:49:13 24.214.214.230:4686 -> xxx.yyy.144.20:1433 SYN ******S*
Sep 13 04:49:13 24.214.214.230:4683 -> xxx.yyy.144.19:1433 SYN ******S*
Sep 13 04:49:13 24.214.214.230:4680 -> xxx.yyy.144.18:1433 SYN ******S*
Sep 13 04:49:13 24.214.214.230:4676 -> xxx.yyy.144.17:1433 SYN ******S*
Sep 13 04:49:13 24.214.214.230:4792 -> xxx.yyy.144.27:1433 SYN ******S*
Sep 13 04:49:13 24.214.214.230:4789 -> xxx.yyy.144.26:1433 SYN ******S*
Sep 13 04:49:13 24.214.214.230:4786 -> xxx.yyy.144.25:1433 SYN ******S*
Sep 13 04:49:13 24.214.214.230:4781 -> xxx.yyy.144.24:1433 SYN ******S*
22187
Sep 13 13:12:58 212.177.115.101:2122 -> xxx.yyy.1.1:1433 SYN ******S*
Sep 13 13:12:58 212.177.115.101:2127 -> xxx.yyy.1.6:1433 SYN ******S*
Sep 13 13:12:58 212.177.115.101:2133 -> xxx.yyy.1.10:1433 SYN ******S*
Sep 13 13:12:58 212.177.115.101:2138 -> xxx.yyy.1.15:1433 SYN ******S*
Sep 13 13:12:58 212.177.115.101:2139 -> xxx.yyy.1.16:1433 SYN ******S*
Sep 13 13:12:58 212.177.115.101:2141 -> xxx.yyy.1.18:1433 SYN ******S*
Sep 13 13:12:58 212.177.115.101:2142 -> xxx.yyy.1.19:1433 SYN ******S*
Sep 13 13:12:58 212.177.115.101:2144 -> xxx.yyy.1.21:1433 SYN ******S*
[...]
Sep 13 13:15:42 212.177.115.101:3051 -> xxx.yyy.255.229:1433 SYN ******S*
Sep 13 13:15:42 212.177.115.101:3052 -> xxx.yyy.255.230:1433 SYN ******S*
Sep 13 13:15:42 212.177.115.101:3055 -> xxx.yyy.255.233:1433 SYN ******S*
Sep 13 13:15:42 212.177.115.101:3062 -> xxx.yyy.255.240:1433 SYN ******S*
Sep 13 13:15:42 212.177.115.101:3063 -> xxx.yyy.255.241:1433 SYN ******S*
Sep 13 13:15:42 212.177.115.101:3066 -> xxx.yyy.255.243:1433 SYN ******S*
Sep 13 13:15:42 212.177.115.101:3067 -> xxx.yyy.255.244:1433 SYN ******S*
Sep 13 13:15:42 212.177.115.101:3078 -> xxx.yyy.255.246:1433 SYN ******S*
Sep 13 13:15:42 212.177.115.101:3079 -> xxx.yyy.255.247:1433 SYN ******S*
21358
Sep 13 09:31:57 217.52.237.8:2884 -> xxx.yyy.200.1:1433 SYN ******S*
Sep 13 09:31:57 217.52.237.8:2885 -> xxx.yyy.200.2:1433 SYN ******S*
Sep 13 09:31:57 217.52.237.8:2886 -> xxx.yyy.200.3:1433 SYN ******S*
Sep 13 09:31:57 217.52.237.8:2887 -> xxx.yyy.200.4:1433 SYN ******S*
Sep 13 09:31:57 217.52.237.8:2890 -> xxx.yyy.200.7:1433 SYN ******S*
Sep 13 09:31:57 217.52.237.8:2891 -> xxx.yyy.200.8:1433 SYN ******S*
Sep 13 09:32:00 217.52.237.8:2892 -> xxx.yyy.200.9:1433 SYN ******S*
Sep 13 09:31:57 217.52.237.8:2893 -> xxx.yyy.200.10:1433 SYN ******S*
[...]
Sep 13 10:22:11 217.52.237.8:2528 -> xxx.yyy.255.242:1433 SYN ******S*
Sep 13 10:22:11 217.52.237.8:2530 -> xxx.yyy.255.244:1433 SYN ******S*
Sep 13 10:22:11 217.52.237.8:2529 -> xxx.yyy.255.243:1433 SYN ******S*
Sep 13 10:22:11 217.52.237.8:2532 -> xxx.yyy.255.246:1433 SYN ******S*
Sep 13 10:22:11 217.52.237.8:2534 -> xxx.yyy.255.248:1433 SYN ******S*
Sep 13 10:22:11 217.52.237.8:2540 -> xxx.yyy.255.251:1433 SYN ******S*
Sep 13 10:22:11 217.52.237.8:2543 -> xxx.yyy.255.253:1433 SYN ******S*
Sep 13 10:22:11 217.52.237.8:2542 -> xxx.yyy.255.252:1433 SYN ******S*
15438
Sep 13 06:56:54 212.129.215.86:3092 -> xxx.yyy.174.252:5554 SYN ******S*
Sep 13 06:56:56 212.129.215.86:3541 -> xxx.yyy.174.252:1023 SYN ******S*
Sep 13 06:56:55 212.129.215.86:3202 -> xxx.yyy.174.253:5554 SYN ******S*
Sep 13 06:56:56 212.129.215.86:3542 -> xxx.yyy.174.253:1023 SYN ******S*
Sep 13 06:56:55 212.129.215.86:3203 -> xxx.yyy.174.254:5554 SYN ******S*
Sep 13 06:56:56 212.129.215.86:3543 -> xxx.yyy.174.254:1023 SYN ******S*
Sep 13 06:56:55 212.129.215.86:3205 -> xxx.yyy.175.0:5554 SYN ******S*
Sep 13 06:56:56 212.129.215.86:3545 -> xxx.yyy.175.0:1023 SYN ******S*
[...]
Sep 13 06:58:38 212.129.215.86:2993 -> xxx.yyy.195.73:9898 SYN ******S*
Sep 13 06:58:38 212.129.215.86:2994 -> xxx.yyy.195.72:9898 SYN ******S*
Sep 13 06:58:38 212.129.215.86:2995 -> xxx.yyy.195.71:9898 SYN ******S*
Sep 13 06:58:38 212.129.215.86:2996 -> xxx.yyy.195.70:9898 SYN ******S*
Sep 13 06:58:38 212.129.215.86:2997 -> xxx.yyy.195.69:9898 SYN ******S*
Sep 13 06:58:38 212.129.215.86:3000 -> xxx.yyy.195.66:9898 SYN ******S*
Sep 13 06:58:38 212.129.215.86:3001 -> xxx.yyy.195.65:9898 SYN ******S*
Sep 13 06:58:38 212.129.215.86:3002 -> xxx.yyy.195.64:9898 SYN ******S*
Sep 13 06:58:38 212.129.215.86:3004 -> xxx.yyy.195.83:9898 SYN ******S*
15090
Sep 13 05:09:06 82.36.39.121:4162 -> xxx.yyy.160.102:1433 SYN ******S*
Sep 13 05:09:06 82.36.39.121:4164 -> xxx.yyy.160.103:1433 SYN ******S*
Sep 13 05:09:06 82.36.39.121:4166 -> xxx.yyy.160.104:1433 SYN ******S*
Sep 13 05:09:06 82.36.39.121:4170 -> xxx.yyy.160.105:1433 SYN ******S*
Sep 13 05:09:06 82.36.39.121:4173 -> xxx.yyy.160.106:1433 SYN ******S*
Sep 13 05:09:06 82.36.39.121:4175 -> xxx.yyy.160.107:1433 SYN ******S*
Sep 13 05:09:06 82.36.39.121:4179 -> xxx.yyy.160.108:1433 SYN ******S*
Sep 13 05:09:06 82.36.39.121:4181 -> xxx.yyy.160.109:1433 SYN ******S*
[...]
Sep 13 05:27:31 82.36.39.121:3979 -> xxx.yyy.181.19:1433 SYN ******S*
Sep 13 05:27:31 82.36.39.121:3989 -> xxx.yyy.181.24:1433 SYN ******S*
Sep 13 05:27:31 82.36.39.121:3988 -> xxx.yyy.181.23:1433 SYN ******S*
Sep 13 05:27:31 82.36.39.121:3987 -> xxx.yyy.181.22:1433 SYN ******S*
Sep 13 05:27:31 82.36.39.121:3984 -> xxx.yyy.181.21:1433 SYN ******S*
Sep 13 05:27:31 82.36.39.121:3981 -> xxx.yyy.181.20:1433 SYN ******S*
Sep 13 05:27:37 82.36.39.121:4471 -> xxx.yyy.181.25:1433 SYN ******S*
Sep 13 05:27:37 82.36.39.121:4473 -> xxx.yyy.181.26:1433 SYN ******S*
Sep 13 05:27:37 82.36.39.121:4476 -> xxx.yyy.181.27:1433 SYN ******S*
14028
Sep 13 06:56:28 80.219.20.245:4942 -> xxx.yyy.174.222:5554 SYN ******S*
Sep 13 06:56:29 80.219.20.245:1825 -> xxx.yyy.174.222:1023 SYN ******S*
Sep 13 06:56:31 80.219.20.245:3419 -> xxx.yyy.174.222:9898 SYN ******S*
Sep 13 06:56:28 80.219.20.245:4944 -> xxx.yyy.174.223:5554 SYN ******S*
Sep 13 06:56:29 80.219.20.245:1826 -> xxx.yyy.174.223:1023 SYN ******S*
Sep 13 06:56:31 80.219.20.245:3420 -> xxx.yyy.174.223:9898 SYN ******S*
Sep 13 06:56:28 80.219.20.245:4947 -> xxx.yyy.174.225:5554 SYN ******S*
Sep 13 06:56:29 80.219.20.245:1828 -> xxx.yyy.174.225:1023 SYN ******S*
[...]
Sep 13 06:57:17 80.219.20.245:1951 -> xxx.yyy.195.17:9898 SYN ******S*
Sep 13 06:57:17 80.219.20.245:1950 -> xxx.yyy.195.16:9898 SYN ******S*
Sep 13 06:57:17 80.219.20.245:1968 -> xxx.yyy.195.23:9898 SYN ******S*
Sep 13 06:57:17 80.219.20.245:1973 -> xxx.yyy.195.24:9898 SYN ******S*
Sep 13 06:57:17 80.219.20.245:1967 -> xxx.yyy.195.22:9898 SYN ******S*
Sep 13 06:57:18 80.219.20.245:2078 -> xxx.yyy.195.37:9898 SYN ******S*
Sep 13 06:57:18 80.219.20.245:2081 -> xxx.yyy.195.39:9898 SYN ******S*
Sep 13 06:57:18 80.219.20.245:2079 -> xxx.yyy.195.38:9898 SYN ******S*
Sep 13 06:57:18 80.219.20.245:2072 -> xxx.yyy.195.36:9898 SYN ******S*
12293
Sep 13 00:11:47 220.122.157.73:1262 -> xxx.yyy.174.222:5554 SYN ******S*
Sep 13 00:11:48 220.122.157.73:1385 -> xxx.yyy.174.222:1023 SYN ******S*
Sep 13 00:11:50 220.122.157.73:1765 -> xxx.yyy.174.222:9898 SYN ******S*
Sep 13 00:11:47 220.122.157.73:1264 -> xxx.yyy.174.224:5554 SYN ******S*
Sep 13 00:11:50 220.122.157.73:1770 -> xxx.yyy.174.224:9898 SYN ******S*
Sep 13 00:11:47 220.122.157.73:1265 -> xxx.yyy.174.235:5554 SYN ******S*
Sep 13 00:11:48 220.122.157.73:1398 -> xxx.yyy.174.235:1023 SYN ******S*
Sep 13 00:11:47 220.122.157.73:1266 -> xxx.yyy.174.238:5554 SYN ******S*
[...]
Sep 13 00:13:31 220.122.157.73:3272 -> xxx.yyy.176.110:9898 SYN ******S*
Sep 13 00:13:31 220.122.157.73:3273 -> xxx.yyy.176.111:9898 SYN ******S*
Sep 13 00:13:31 220.122.157.73:3274 -> xxx.yyy.176.106:9898 SYN ******S*
Sep 13 00:13:31 220.122.157.73:3275 -> xxx.yyy.176.112:9898 SYN ******S*
Sep 13 00:13:31 220.122.157.73:3278 -> xxx.yyy.176.116:9898 SYN ******S*
Sep 13 00:13:31 220.122.157.73:3280 -> xxx.yyy.176.115:9898 SYN ******S*
Sep 13 00:13:31 220.122.157.73:3283 -> xxx.yyy.176.120:9898 SYN ******S*
Sep 13 00:13:31 220.122.157.73:3284 -> xxx.yyy.176.113:9898 SYN ******S*
9205
Sep 13 23:48:38 221.146.228.31:1564 -> xxx.yyy.194.127:5554 SYN ******S*
Sep 13 23:48:39 221.146.228.31:1823 -> xxx.yyy.194.127:1023 SYN ******S*
Sep 13 23:48:41 221.146.228.31:2240 -> xxx.yyy.194.127:9898 SYN ******S*
Sep 13 23:48:38 221.146.228.31:1574 -> xxx.yyy.194.126:5554 SYN ******S*
Sep 13 23:48:38 221.146.228.31:1572 -> xxx.yyy.194.124:5554 SYN ******S*
Sep 13 23:48:38 221.146.228.31:1573 -> xxx.yyy.194.125:5554 SYN ******S*
Sep 13 23:48:39 221.146.228.31:1829 -> xxx.yyy.194.125:1023 SYN ******S*
Sep 13 23:48:38 221.146.228.31:1587 -> xxx.yyy.194.129:5554 SYN ******S*
[...]
Sep 13 23:50:20 221.146.228.31:1262 -> xxx.yyy.214.221:9898 SYN ******S*
Sep 13 23:50:20 221.146.228.31:1295 -> xxx.yyy.214.229:9898 SYN ******S*
Sep 13 23:50:21 221.146.228.31:1310 -> xxx.yyy.214.238:9898 SYN ******S*
Sep 13 23:50:21 221.146.228.31:1311 -> xxx.yyy.214.239:9898 SYN ******S*
Sep 13 23:50:21 221.146.228.31:1305 -> xxx.yyy.214.243:9898 SYN ******S*
Sep 13 23:50:21 221.146.228.31:1309 -> xxx.yyy.214.237:9898 SYN ******S*
Sep 13 23:50:21 221.146.228.31:1308 -> xxx.yyy.214.236:9898 SYN ******S*
Sep 13 23:50:21 221.146.228.31:1313 -> xxx.yyy.214.246:9898 SYN ******S*
7908
[...]
7795
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list