[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Mon Jan 3 17:40:43 GMT 2005
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Jan 2 00:00:02 172.174.233.228:1447 -> xxx.yyy.174.87:4899 SYN ******S*
Jan 2 00:00:04 172.174.233.228:1492 -> xxx.yyy.174.100:5900 SYN ******S*
Jan 2 00:00:04 172.174.233.228:1493 -> xxx.yyy.174.100:4899 SYN ******S*
Jan 2 00:00:07 172.174.233.228:1589 -> xxx.yyy.174.127:5900 SYN ******S*
Jan 2 00:00:07 172.174.233.228:1591 -> xxx.yyy.174.127:4899 SYN ******S*
Jan 2 00:00:04 172.174.233.228:1488 -> xxx.yyy.174.99:4899 SYN ******S*
Jan 2 00:00:04 172.174.233.228:1592 -> xxx.yyy.132.73:5900 SYN ******S*
Jan 2 00:00:07 172.174.233.228:1593 -> xxx.yyy.174.128:5900 SYN ******S*
[...]
Jan 2 10:08:03 172.174.233.228:3785 -> xxx.yyy.220.213:5900 SYN ******S*
Jan 2 10:08:03 172.174.233.228:3787 -> xxx.yyy.221.183:5900 SYN ******S*
Jan 2 10:08:03 172.174.233.228:3788 -> xxx.yyy.221.48:5900 SYN ******S*
Jan 2 10:08:03 172.174.233.228:3789 -> xxx.yyy.209.60:5900 SYN ******S*
Jan 2 10:08:03 172.174.233.228:3791 -> xxx.yyy.221.98:5900 SYN ******S*
Jan 2 10:08:03 172.174.233.228:3792 -> xxx.yyy.222.15:5900 SYN ******S*
Jan 2 10:08:04 172.174.233.228:3793 -> xxx.yyy.221.72:5900 SYN ******S*
Jan 2 10:08:04 172.174.233.228:3794 -> xxx.yyy.220.212:5900 SYN ******S*
Jan 2 10:08:04 172.174.233.228:3795 -> xxx.yyy.221.50:5900 SYN ******S*
541279
Jan 2 21:03:45 218.148.213.9:1259 -> xxx.yyy.232.1:5900 SYN ******S*
Jan 2 21:03:43 218.148.213.9:1261 -> xxx.yyy.232.2:5900 SYN ******S*
Jan 2 21:03:45 218.148.213.9:1265 -> xxx.yyy.232.4:5900 SYN ******S*
Jan 2 21:03:45 218.148.213.9:1263 -> xxx.yyy.232.3:5900 SYN ******S*
Jan 2 21:03:45 218.148.213.9:1267 -> xxx.yyy.232.5:5900 SYN ******S*
Jan 2 21:03:45 218.148.213.9:1269 -> xxx.yyy.232.6:5900 SYN ******S*
Jan 2 21:03:45 218.148.213.9:1271 -> xxx.yyy.232.7:5900 SYN ******S*
Jan 2 21:03:45 218.148.213.9:1273 -> xxx.yyy.232.8:5900 SYN ******S*
[...]
Jan 2 23:59:57 218.148.213.9:2624 -> xxx.yyy.222.15:5900 SYN ******S*
Jan 2 23:59:57 218.148.213.9:2628 -> xxx.yyy.206.242:5900 SYN ******S*
Jan 2 23:59:57 218.148.213.9:2642 -> xxx.yyy.222.3:5900 SYN ******S*
Jan 2 23:59:58 218.148.213.9:2740 -> xxx.yyy.220.66:5900 SYN ******S*
Jan 2 23:59:58 218.148.213.9:2748 -> xxx.yyy.220.127:5900 SYN ******S*
Jan 2 23:59:58 218.148.213.9:2754 -> xxx.yyy.222.38:5900 SYN ******S*
Jan 2 23:59:58 218.148.213.9:2759 -> xxx.yyy.221.189:5900 SYN ******S*
Jan 2 23:59:58 218.148.213.9:2764 -> xxx.yyy.220.114:5900 SYN ******S*
Jan 2 23:59:59 218.148.213.9:2787 -> xxx.yyy.132.73:5900 SYN ******S*
148483
Jan 2 05:15:00 203.113.173.32:4621 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 2 05:15:00 203.113.173.32:4622 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 2 05:15:00 203.113.173.32:4624 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 2 05:15:00 203.113.173.32:4623 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 2 05:15:00 203.113.173.32:4625 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 2 05:15:00 203.113.173.32:4626 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 2 05:15:00 203.113.173.32:4627 -> xxx.yyy.1.7:1433 SYN ******S*
Jan 2 05:15:00 203.113.173.32:4628 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Jan 2 07:10:00 203.113.173.32:15838 -> xxx.yyy.255.243:1433 SYN ******S*
Jan 2 07:10:00 203.113.173.32:15842 -> xxx.yyy.255.244:1433 SYN ******S*
Jan 2 07:10:00 203.113.173.32:15844 -> xxx.yyy.255.246:1433 SYN ******S*
Jan 2 07:10:00 203.113.173.32:15843 -> xxx.yyy.255.245:1433 SYN ******S*
Jan 2 07:10:00 203.113.173.32:15845 -> xxx.yyy.255.247:1433 SYN ******S*
Jan 2 07:10:00 203.113.173.32:15849 -> xxx.yyy.255.248:1433 SYN ******S*
Jan 2 07:10:00 203.113.173.32:15850 -> xxx.yyy.255.249:1433 SYN ******S*
Jan 2 07:10:00 203.113.173.32:15855 -> xxx.yyy.255.252:1433 SYN ******S*
Jan 2 07:10:01 203.113.173.32:15861 -> xxx.yyy.255.254:1433 SYN ******S*
124882
Jan 2 08:09:02 210.85.34.121:2880 -> xxx.yyy.1.0:1433 SYN ******S*
Jan 2 08:09:02 210.85.34.121:2882 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 2 08:09:02 210.85.34.121:2884 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 2 08:09:02 210.85.34.121:2888 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 2 08:09:02 210.85.34.121:2889 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 2 08:09:02 210.85.34.121:2890 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 2 08:09:02 210.85.34.121:2891 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 2 08:09:02 210.85.34.121:2892 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Jan 2 11:58:21 210.85.34.121:26765 -> xxx.yyy.255.247:1433 SYN ******S*
Jan 2 11:58:21 210.85.34.121:26785 -> xxx.yyy.255.249:1433 SYN ******S*
Jan 2 11:58:21 210.85.34.121:26783 -> xxx.yyy.255.248:1433 SYN ******S*
Jan 2 11:58:22 210.85.34.121:26840 -> xxx.yyy.255.251:1433 SYN ******S*
Jan 2 11:58:22 210.85.34.121:26837 -> xxx.yyy.255.250:1433 SYN ******S*
Jan 2 11:58:22 210.85.34.121:26852 -> xxx.yyy.255.252:1433 SYN ******S*
Jan 2 11:58:22 210.85.34.121:26856 -> xxx.yyy.255.253:1433 SYN ******S*
Jan 2 11:58:23 210.85.34.121:26885 -> xxx.yyy.255.254:1433 SYN ******S*
123862
Jan 2 10:13:47 195.23.5.33:54532 -> xxx.yyy.1.1:4899 SYN ******S*
Jan 2 10:13:47 195.23.5.33:54533 -> xxx.yyy.1.2:4899 SYN ******S*
Jan 2 10:13:49 195.23.5.33:54535 -> xxx.yyy.1.4:4899 SYN ******S*
Jan 2 10:13:47 195.23.5.33:54534 -> xxx.yyy.1.3:4899 SYN ******S*
Jan 2 10:13:49 195.23.5.33:54537 -> xxx.yyy.1.5:4899 SYN ******S*
Jan 2 10:13:49 195.23.5.33:54538 -> xxx.yyy.1.6:4899 SYN ******S*
Jan 2 10:13:49 195.23.5.33:54539 -> xxx.yyy.1.7:4899 SYN ******S*
Jan 2 10:13:49 195.23.5.33:54540 -> xxx.yyy.1.8:4899 SYN ******S*
[...]
Jan 2 10:25:50 195.23.5.33:57290 -> xxx.yyy.255.227:4899 SYN ******S*
Jan 2 10:25:50 195.23.5.33:57265 -> xxx.yyy.255.202:4899 SYN ******S*
Jan 2 10:25:50 195.23.5.33:57317 -> xxx.yyy.255.254:4899 SYN ******S*
Jan 2 10:25:50 195.23.5.33:57267 -> xxx.yyy.255.204:4899 SYN ******S*
Jan 2 10:25:50 195.23.5.33:57291 -> xxx.yyy.255.228:4899 SYN ******S*
Jan 2 10:25:50 195.23.5.33:57266 -> xxx.yyy.255.203:4899 SYN ******S*
Jan 2 10:25:50 195.23.5.33:57239 -> xxx.yyy.255.176:4899 SYN ******S*
Jan 2 10:25:50 195.23.5.33:57240 -> xxx.yyy.255.177:4899 SYN ******S*
99312
Jan 2 18:37:48 210.146.115.78:1082 -> xxx.yyy.83.1:1433 SYN ******S*
Jan 2 18:37:48 210.146.115.78:1083 -> xxx.yyy.83.2:1433 SYN ******S*
Jan 2 18:37:48 210.146.115.78:1084 -> xxx.yyy.83.3:1433 SYN ******S*
Jan 2 18:37:48 210.146.115.78:1085 -> xxx.yyy.83.4:1433 SYN ******S*
Jan 2 18:37:48 210.146.115.78:1086 -> xxx.yyy.83.5:1433 SYN ******S*
Jan 2 18:37:48 210.146.115.78:1087 -> xxx.yyy.83.6:1433 SYN ******S*
Jan 2 18:37:48 210.146.115.78:1088 -> xxx.yyy.83.7:1433 SYN ******S*
Jan 2 18:37:48 210.146.115.78:1089 -> xxx.yyy.83.8:1433 SYN ******S*
[...]
Jan 2 22:14:27 210.146.115.78:3144 -> xxx.yyy.255.245:1433 SYN ******S*
Jan 2 22:14:28 210.146.115.78:3147 -> xxx.yyy.255.248:1433 SYN ******S*
Jan 2 22:14:28 210.146.115.78:3148 -> xxx.yyy.255.249:1433 SYN ******S*
Jan 2 22:14:28 210.146.115.78:3149 -> xxx.yyy.255.250:1433 SYN ******S*
Jan 2 22:14:28 210.146.115.78:3150 -> xxx.yyy.255.251:1433 SYN ******S*
Jan 2 22:14:28 210.146.115.78:3152 -> xxx.yyy.255.253:1433 SYN ******S*
Jan 2 22:14:28 210.146.115.78:3151 -> xxx.yyy.255.252:1433 SYN ******S*
Jan 2 22:14:28 210.146.115.78:3153 -> xxx.yyy.255.254:1433 SYN ******S*
98484
Jan 2 10:48:16 82.36.144.173:3088 -> xxx.yyy.1.0:1433 SYN ******S*
Jan 2 10:48:16 82.36.144.173:3093 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 2 10:48:16 82.36.144.173:3094 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 2 10:48:16 82.36.144.173:3092 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 2 10:48:16 82.36.144.173:3096 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 2 10:48:16 82.36.144.173:3095 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 2 10:48:16 82.36.144.173:3097 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 2 10:48:16 82.36.144.173:3101 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
Jan 2 14:04:22 82.36.144.173:4418 -> xxx.yyy.219.102:1433 SYN ******S*
Jan 2 14:04:22 82.36.144.173:4600 -> xxx.yyy.219.121:1433 SYN ******S*
Jan 2 14:04:22 82.36.144.173:4430 -> xxx.yyy.219.103:1433 SYN ******S*
Jan 2 14:04:22 82.36.144.173:4607 -> xxx.yyy.219.122:1433 SYN ******S*
Jan 2 14:04:22 82.36.144.173:4433 -> xxx.yyy.219.104:1433 SYN ******S*
Jan 2 14:04:22 82.36.144.173:4614 -> xxx.yyy.219.124:1433 SYN ******S*
Jan 2 14:04:22 82.36.144.173:4611 -> xxx.yyy.219.123:1433 SYN ******S*
Jan 2 14:04:22 82.36.144.173:4435 -> xxx.yyy.219.105:1433 SYN ******S*
Jan 2 14:04:22 82.36.144.173:4617 -> xxx.yyy.219.125:1433 SYN ******S*
97374
Jan 2 11:00:27 24.228.4.1:2000 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 2 11:00:30 24.228.4.1:2001 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 2 11:00:30 24.228.4.1:2002 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 2 11:00:30 24.228.4.1:2003 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 2 11:00:30 24.228.4.1:2004 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 2 11:00:30 24.228.4.1:2005 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 2 11:00:30 24.228.4.1:2006 -> xxx.yyy.1.7:1433 SYN ******S*
Jan 2 11:00:30 24.228.4.1:2007 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Jan 2 11:11:23 24.228.4.1:4827 -> xxx.yyy.255.244:1433 SYN ******S*
Jan 2 11:11:23 24.228.4.1:4828 -> xxx.yyy.255.245:1433 SYN ******S*
Jan 2 11:11:23 24.228.4.1:4829 -> xxx.yyy.255.246:1433 SYN ******S*
Jan 2 11:11:23 24.228.4.1:4831 -> xxx.yyy.255.248:1433 SYN ******S*
Jan 2 11:11:23 24.228.4.1:4830 -> xxx.yyy.255.247:1433 SYN ******S*
Jan 2 11:11:24 24.228.4.1:4835 -> xxx.yyy.255.252:1433 SYN ******S*
Jan 2 11:11:24 24.228.4.1:4836 -> xxx.yyy.255.253:1433 SYN ******S*
Jan 2 11:11:24 24.228.4.1:4837 -> xxx.yyy.255.254:1433 SYN ******S*
75008
Jan 2 16:55:11 64.58.187.122:4093 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 2 16:55:11 64.58.187.122:4097 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 2 16:55:11 64.58.187.122:4101 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 2 16:55:11 64.58.187.122:4105 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 2 16:55:11 64.58.187.122:4109 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 2 16:55:11 64.58.187.122:4113 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 2 16:55:08 64.58.187.122:4117 -> xxx.yyy.1.7:1433 SYN ******S*
Jan 2 16:55:11 64.58.187.122:4121 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Jan 2 17:06:46 64.58.187.122:4660 -> xxx.yyy.255.199:1433 SYN ******S*
Jan 2 17:06:46 64.58.187.122:4672 -> xxx.yyy.255.201:1433 SYN ******S*
Jan 2 17:06:46 64.58.187.122:4654 -> xxx.yyy.255.198:1433 SYN ******S*
Jan 2 17:06:46 64.58.187.122:4684 -> xxx.yyy.255.203:1433 SYN ******S*
Jan 2 17:06:46 64.58.187.122:4667 -> xxx.yyy.255.200:1433 SYN ******S*
Jan 2 17:06:46 64.58.187.122:4677 -> xxx.yyy.255.202:1433 SYN ******S*
Jan 2 17:06:47 64.58.187.122:4689 -> xxx.yyy.255.204:1433 SYN ******S*
Jan 2 17:06:47 64.58.187.122:4701 -> xxx.yyy.255.206:1433 SYN ******S*
Jan 2 17:06:47 64.58.187.122:4695 -> xxx.yyy.255.205:1433 SYN ******S*
74933
Jan 2 02:49:57 205.246.210.3:4443 -> xxx.yyy.1.1:42 SYN ******S*
Jan 2 02:49:57 205.246.210.3:4444 -> xxx.yyy.1.2:42 SYN ******S*
Jan 2 02:49:54 205.246.210.3:4458 -> xxx.yyy.1.3:42 SYN ******S*
Jan 2 02:49:54 205.246.210.3:4459 -> xxx.yyy.1.4:42 SYN ******S*
Jan 2 02:49:57 205.246.210.3:4460 -> xxx.yyy.1.5:42 SYN ******S*
Jan 2 02:49:57 205.246.210.3:4461 -> xxx.yyy.1.6:42 SYN ******S*
Jan 2 02:49:57 205.246.210.3:4462 -> xxx.yyy.1.7:42 SYN ******S*
Jan 2 02:49:57 205.246.210.3:4463 -> xxx.yyy.1.8:42 SYN ******S*
[...]
Jan 2 03:01:40 205.246.210.3:3348 -> xxx.yyy.255.243:42 SYN ******S*
Jan 2 03:01:40 205.246.210.3:3353 -> xxx.yyy.255.248:42 SYN ******S*
Jan 2 03:01:40 205.246.210.3:3351 -> xxx.yyy.255.246:42 SYN ******S*
Jan 2 03:01:40 205.246.210.3:3355 -> xxx.yyy.255.250:42 SYN ******S*
Jan 2 03:01:40 205.246.210.3:3352 -> xxx.yyy.255.247:42 SYN ******S*
Jan 2 03:01:40 205.246.210.3:3354 -> xxx.yyy.255.249:42 SYN ******S*
Jan 2 03:01:40 205.246.210.3:3350 -> xxx.yyy.255.245:42 SYN ******S*
Jan 2 03:01:40 205.246.210.3:3358 -> xxx.yyy.255.253:42 SYN ******S*
Jan 2 03:01:40 205.246.210.3:3359 -> xxx.yyy.255.254:42 SYN ******S*
72157
Jan 2 23:09:47 68.192.108.36:4218 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 2 23:09:47 68.192.108.36:4219 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 2 23:09:47 68.192.108.36:4220 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 2 23:09:47 68.192.108.36:4221 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 2 23:09:47 68.192.108.36:4222 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 2 23:09:47 68.192.108.36:4223 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 2 23:09:44 68.192.108.36:4224 -> xxx.yyy.1.7:1433 SYN ******S*
Jan 2 23:09:44 68.192.108.36:4225 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Jan 2 23:21:28 68.192.108.36:2825 -> xxx.yyy.255.172:1433 SYN ******S*
Jan 2 23:21:28 68.192.108.36:2822 -> xxx.yyy.255.169:1433 SYN ******S*
Jan 2 23:21:28 68.192.108.36:2826 -> xxx.yyy.255.173:1433 SYN ******S*
Jan 2 23:21:28 68.192.108.36:2823 -> xxx.yyy.255.170:1433 SYN ******S*
Jan 2 23:21:29 68.192.108.36:2833 -> xxx.yyy.255.180:1433 SYN ******S*
Jan 2 23:21:29 68.192.108.36:2831 -> xxx.yyy.255.178:1433 SYN ******S*
Jan 2 23:21:29 68.192.108.36:2835 -> xxx.yyy.255.182:1433 SYN ******S*
Jan 2 23:21:29 68.192.108.36:2834 -> xxx.yyy.255.181:1433 SYN ******S*
Jan 2 23:21:29 68.192.108.36:2832 -> xxx.yyy.255.179:1433 SYN ******S*
71995
Jan 2 16:13:43 220.68.56.21:3046 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 2 16:13:46 220.68.56.21:3047 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 2 16:13:46 220.68.56.21:3050 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 2 16:13:46 220.68.56.21:3051 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 2 16:13:46 220.68.56.21:3052 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 2 16:13:46 220.68.56.21:3053 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 2 16:13:46 220.68.56.21:3054 -> xxx.yyy.1.7:1433 SYN ******S*
Jan 2 16:13:46 220.68.56.21:3055 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Jan 2 16:25:31 220.68.56.21:4732 -> xxx.yyy.255.245:1433 SYN ******S*
Jan 2 16:25:31 220.68.56.21:4726 -> xxx.yyy.255.241:1433 SYN ******S*
Jan 2 16:25:31 220.68.56.21:4743 -> xxx.yyy.255.252:1433 SYN ******S*
Jan 2 16:25:31 220.68.56.21:4745 -> xxx.yyy.255.254:1433 SYN ******S*
Jan 2 16:25:31 220.68.56.21:4741 -> xxx.yyy.255.250:1433 SYN ******S*
Jan 2 16:25:31 220.68.56.21:4742 -> xxx.yyy.255.251:1433 SYN ******S*
Jan 2 16:25:31 220.68.56.21:4744 -> xxx.yyy.255.253:1433 SYN ******S*
Jan 2 16:25:31 220.68.56.21:4740 -> xxx.yyy.255.249:1433 SYN ******S*
71838
Jan 2 04:39:26 202.159.30.199:4053 -> xxx.yyy.1.1:554 SYN ******S*
Jan 2 04:39:26 202.159.30.199:4054 -> xxx.yyy.1.2:554 SYN ******S*
Jan 2 04:39:26 202.159.30.199:4056 -> xxx.yyy.1.3:554 SYN ******S*
Jan 2 04:39:27 202.159.30.199:4057 -> xxx.yyy.1.4:554 SYN ******S*
Jan 2 04:39:27 202.159.30.199:4058 -> xxx.yyy.1.5:554 SYN ******S*
Jan 2 04:39:27 202.159.30.199:4060 -> xxx.yyy.1.7:554 SYN ******S*
Jan 2 04:39:27 202.159.30.199:4059 -> xxx.yyy.1.6:554 SYN ******S*
Jan 2 04:39:27 202.159.30.199:4061 -> xxx.yyy.1.8:554 SYN ******S*
[...]
Jan 2 04:48:23 202.159.30.199:1178 -> xxx.yyy.255.245:554 SYN ******S*
Jan 2 04:48:23 202.159.30.199:1181 -> xxx.yyy.255.247:554 SYN ******S*
Jan 2 04:48:23 202.159.30.199:1182 -> xxx.yyy.255.248:554 SYN ******S*
Jan 2 04:48:23 202.159.30.199:1184 -> xxx.yyy.255.249:554 SYN ******S*
Jan 2 04:48:23 202.159.30.199:1185 -> xxx.yyy.255.250:554 SYN ******S*
Jan 2 04:48:23 202.159.30.199:1186 -> xxx.yyy.255.251:554 SYN ******S*
Jan 2 04:48:23 202.159.30.199:1187 -> xxx.yyy.255.252:554 SYN ******S*
Jan 2 04:48:23 202.159.30.199:1189 -> xxx.yyy.255.254:554 SYN ******S*
Jan 2 04:48:23 202.159.30.199:1188 -> xxx.yyy.255.253:554 SYN ******S*
68305
Jan 2 15:36:42 131.183.161.89:4187 -> xxx.yyy.1.1:3306 SYN ******S*
Jan 2 15:36:42 131.183.161.89:4188 -> xxx.yyy.1.2:3306 SYN ******S*
Jan 2 15:36:42 131.183.161.89:4189 -> xxx.yyy.1.3:3306 SYN ******S*
Jan 2 15:36:44 131.183.161.89:4191 -> xxx.yyy.1.5:3306 SYN ******S*
Jan 2 15:36:44 131.183.161.89:4192 -> xxx.yyy.1.6:3306 SYN ******S*
Jan 2 15:36:44 131.183.161.89:4193 -> xxx.yyy.1.7:3306 SYN ******S*
Jan 2 15:36:44 131.183.161.89:4194 -> xxx.yyy.1.8:3306 SYN ******S*
Jan 2 15:36:42 131.183.161.89:4195 -> xxx.yyy.1.9:3306 SYN ******S*
[...]
Jan 2 15:48:38 131.183.161.89:2602 -> xxx.yyy.255.242:3306 SYN ******S*
Jan 2 15:48:38 131.183.161.89:2603 -> xxx.yyy.255.243:3306 SYN ******S*
Jan 2 15:48:38 131.183.161.89:2607 -> xxx.yyy.255.247:3306 SYN ******S*
Jan 2 15:48:38 131.183.161.89:2606 -> xxx.yyy.255.246:3306 SYN ******S*
Jan 2 15:48:38 131.183.161.89:2604 -> xxx.yyy.255.244:3306 SYN ******S*
Jan 2 15:48:38 131.183.161.89:2611 -> xxx.yyy.255.251:3306 SYN ******S*
Jan 2 15:48:38 131.183.161.89:2612 -> xxx.yyy.255.252:3306 SYN ******S*
Jan 2 15:48:38 131.183.161.89:2614 -> xxx.yyy.255.254:3306 SYN ******S*
59992
Jan 2 05:15:09 202.76.67.125:4104 -> xxx.yyy.1.6:139 SYN ******S*
Jan 2 05:15:12 202.76.67.125:4106 -> xxx.yyy.1.8:139 SYN ******S*
Jan 2 05:15:09 202.76.67.125:4107 -> xxx.yyy.1.9:139 SYN ******S*
Jan 2 05:15:12 202.76.67.125:4109 -> xxx.yyy.1.11:139 SYN ******S*
Jan 2 05:15:09 202.76.67.125:4110 -> xxx.yyy.1.12:139 SYN ******S*
Jan 2 05:15:09 202.76.67.125:4112 -> xxx.yyy.1.14:139 SYN ******S*
Jan 2 05:15:11 202.76.67.125:4114 -> xxx.yyy.1.16:139 SYN ******S*
Jan 2 05:15:12 202.76.67.125:4115 -> xxx.yyy.1.17:139 SYN ******S*
[...]
Jan 2 05:35:02 202.76.67.125:2256 -> xxx.yyy.zzz.253:139 SYN ******S*
Jan 2 05:35:02 202.76.67.125:2253 -> xxx.yyy.zzz.250:139 SYN ******S*
Jan 2 05:35:02 202.76.67.125:2250 -> xxx.yyy.zzz.247:139 SYN ******S*
Jan 2 05:35:02 202.76.67.125:2247 -> xxx.yyy.zzz.244:139 SYN ******S*
Jan 2 05:35:02 202.76.67.125:2244 -> xxx.yyy.zzz.241:139 SYN ******S*
Jan 2 05:35:02 202.76.67.125:2257 -> xxx.yyy.zzz.254:139 SYN ******S*
Jan 2 05:35:02 202.76.67.125:2241 -> xxx.yyy.zzz.238:139 SYN ******S*
Jan 2 05:35:02 202.76.67.125:2254 -> xxx.yyy.zzz.251:139 SYN ******S*
Jan 2 05:35:02 202.76.67.125:2251 -> xxx.yyy.zzz.248:139 SYN ******S*
57986
Jan 2 09:01:26 206.207.108.180:3788 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 2 09:01:26 206.207.108.180:3789 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 2 09:01:26 206.207.108.180:3790 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 2 09:01:26 206.207.108.180:3791 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 2 09:01:26 206.207.108.180:3792 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 2 09:01:26 206.207.108.180:3793 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 2 09:01:26 206.207.108.180:3794 -> xxx.yyy.1.7:1433 SYN ******S*
Jan 2 09:01:26 206.207.108.180:3795 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Jan 2 09:06:34 206.207.108.180:2250 -> xxx.yyy.255.246:1433 SYN ******S*
Jan 2 09:06:34 206.207.108.180:2251 -> xxx.yyy.255.247:1433 SYN ******S*
Jan 2 09:06:34 206.207.108.180:2252 -> xxx.yyy.255.248:1433 SYN ******S*
Jan 2 09:06:34 206.207.108.180:2253 -> xxx.yyy.255.249:1433 SYN ******S*
Jan 2 09:06:34 206.207.108.180:2254 -> xxx.yyy.255.250:1433 SYN ******S*
Jan 2 09:06:34 206.207.108.180:2255 -> xxx.yyy.255.251:1433 SYN ******S*
Jan 2 09:06:34 206.207.108.180:2256 -> xxx.yyy.255.252:1433 SYN ******S*
Jan 2 09:06:34 206.207.108.180:2257 -> xxx.yyy.255.253:1433 SYN ******S*
Jan 2 09:06:34 206.207.108.180:2258 -> xxx.yyy.255.254:1433 SYN ******S*
44036
[...]
36657
Jan 2 05:19:26 221.12.115.3:3363 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 2 05:19:26 221.12.115.3:3360 -> xxx.yyy.1.0:1433 SYN ******S*
Jan 2 05:19:26 221.12.115.3:3378 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 2 05:19:26 221.12.115.3:3394 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 2 05:19:26 221.12.115.3:3416 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 2 05:19:26 221.12.115.3:3411 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 2 05:19:26 221.12.115.3:3446 -> xxx.yyy.1.7:1433 SYN ******S*
Jan 2 05:19:26 221.12.115.3:3432 -> xxx.yyy.1.6:1433 SYN ******S*
[...]
Jan 2 07:00:06 221.12.115.3:2859 -> xxx.yyy.111.248:1433 SYN ******S*
Jan 2 07:00:06 221.12.115.3:2873 -> xxx.yyy.111.251:1433 SYN ******S*
Jan 2 07:00:06 221.12.115.3:2896 -> xxx.yyy.111.253:1433 SYN ******S*
Jan 2 07:00:06 221.12.115.3:2894 -> xxx.yyy.111.252:1433 SYN ******S*
Jan 2 07:00:06 221.12.115.3:2869 -> xxx.yyy.111.250:1433 SYN ******S*
Jan 2 07:00:06 221.12.115.3:2862 -> xxx.yyy.111.249:1433 SYN ******S*
Jan 2 07:00:06 221.12.115.3:2904 -> xxx.yyy.111.255:1433 SYN ******S*
Jan 2 07:00:07 221.12.115.3:2902 -> xxx.yyy.111.254:1433 SYN ******S*
35522
Jan 2 12:20:43 209.15.115.42:80 -> xxx.yyy.189.147:42 SYN ******S*
Jan 2 12:20:44 209.15.115.42:80 -> xxx.yyy.223.209:42 SYN ******S*
Jan 2 12:20:44 209.15.115.42:80 -> xxx.yyy.227.177:42 SYN ******S*
Jan 2 12:20:46 209.15.115.42:80 -> xxx.yyy.215.143:42 SYN ******S*
Jan 2 12:20:46 209.15.115.42:80 -> xxx.yyy.1.153:42 SYN ******S*
Jan 2 12:20:48 209.15.115.42:80 -> xxx.yyy.15.185:42 SYN ******S*
Jan 2 12:20:49 209.15.115.42:80 -> xxx.yyy.169.211:42 SYN ******S*
Jan 2 12:20:50 209.15.115.42:80 -> xxx.yyy.161.255:42 SYN ******S*
[...]
Jan 2 23:59:51 209.15.115.42:80 -> xxx.yyy.221.117:42 SYN ******S*
Jan 2 23:59:51 209.15.115.42:80 -> xxx.yyy.223.117:42 SYN ******S*
Jan 2 23:59:52 209.15.115.42:80 -> xxx.yyy.17.19:42 SYN ******S*
Jan 2 23:59:55 209.15.115.42:80 -> xxx.yyy.219.131:42 SYN ******S*
Jan 2 23:59:55 209.15.115.42:80 -> xxx.yyy.33.117:42 SYN ******S*
Jan 2 23:59:56 209.15.115.42:80 -> xxx.yyy.149.131:42 SYN ******S*
Jan 2 23:59:56 209.15.115.42:80 -> xxx.yyy.191.141:42 SYN ******S*
Jan 2 23:59:56 209.15.115.42:80 -> xxx.yyy.253.179:42 SYN ******S*
Jan 2 23:59:58 209.15.115.42:80 -> xxx.yyy.79.223:42 SYN ******S*
33445
[...]
21885
[...]
19227
Jan 2 12:20:06 206.130.11.232:80 -> xxx.yyy.245.31:42 SYN ******S*
Jan 2 12:20:08 206.130.11.232:80 -> xxx.yyy.73.151:42 SYN ******S*
Jan 2 12:20:08 206.130.11.232:80 -> xxx.yyy.65.3:42 SYN ******S*
Jan 2 12:20:09 206.130.11.232:80 -> xxx.yyy.129.193:42 SYN ******S*
Jan 2 12:20:09 206.130.11.232:80 -> xxx.yyy.131.181:42 SYN ******S*
Jan 2 12:20:13 206.130.11.232:80 -> xxx.yyy.105.19:42 SYN ******S*
Jan 2 12:21:10 206.130.11.232:80 -> xxx.yyy.197.109:42 SYN ******S*
Jan 2 12:21:11 206.130.11.232:80 -> xxx.yyy.193.225:42 SYN ******S*
[...]
Jan 2 22:40:08 206.130.11.232:80 -> xxx.yyy.91.97:42 SYN ******S*
Jan 2 22:40:12 206.130.11.232:80 -> xxx.yyy.241.209:42 SYN ******S*
Jan 2 22:40:14 206.130.11.232:80 -> xxx.yyy.253.179:42 SYN ******S*
Jan 2 22:40:15 206.130.11.232:80 -> xxx.yyy.147.35:42 SYN ******S*
Jan 2 22:40:19 206.130.11.232:80 -> xxx.yyy.85.191:42 SYN ******S*
Jan 2 22:40:19 206.130.11.232:80 -> xxx.yyy.95.71:42 SYN ******S*
Jan 2 22:40:20 206.130.11.232:80 -> xxx.yyy.229.79:42 SYN ******S*
Jan 2 22:40:21 206.130.11.232:80 -> xxx.yyy.181.95:42 SYN ******S*
17351
Jan 2 22:59:10 210.108.40.129:32654 -> xxx.yyy.174.3:5554 SYN ******S*
Jan 2 22:59:11 210.108.40.129:32883 -> xxx.yyy.174.3:1023 SYN ******S*
Jan 2 22:59:13 210.108.40.129:33361 -> xxx.yyy.174.3:9898 SYN ******S*
Jan 2 22:59:10 210.108.40.129:32655 -> xxx.yyy.174.4:5554 SYN ******S*
Jan 2 22:59:11 210.108.40.129:32884 -> xxx.yyy.174.4:1023 SYN ******S*
Jan 2 22:59:13 210.108.40.129:33362 -> xxx.yyy.174.4:9898 SYN ******S*
Jan 2 22:59:10 210.108.40.129:32653 -> xxx.yyy.174.2:5554 SYN ******S*
Jan 2 22:59:11 210.108.40.129:32882 -> xxx.yyy.174.2:1023 SYN ******S*
[...]
Jan 2 23:00:59 210.108.40.129:57570 -> xxx.yyy.194.111:9898 SYN ******S*
Jan 2 23:00:59 210.108.40.129:57571 -> xxx.yyy.194.112:9898 SYN ******S*
Jan 2 23:00:59 210.108.40.129:57597 -> xxx.yyy.194.121:9898 SYN ******S*
Jan 2 23:00:59 210.108.40.129:57598 -> xxx.yyy.194.122:9898 SYN ******S*
Jan 2 23:00:59 210.108.40.129:57600 -> xxx.yyy.194.124:9898 SYN ******S*
Jan 2 23:01:00 210.108.40.129:57574 -> xxx.yyy.194.115:9898 SYN ******S*
Jan 2 23:01:00 210.108.40.129:57572 -> xxx.yyy.194.113:9898 SYN ******S*
Jan 2 23:01:00 210.108.40.129:57596 -> xxx.yyy.194.120:9898 SYN ******S*
Jan 2 23:01:00 210.108.40.129:57599 -> xxx.yyy.194.123:9898 SYN ******S*
15189
Jan 2 22:42:53 222.150.212.110:3115 -> xxx.yyy.174.3:5554 SYN ******S*
Jan 2 22:42:54 222.150.212.110:3569 -> xxx.yyy.174.3:1023 SYN ******S*
Jan 2 22:42:56 222.150.212.110:4540 -> xxx.yyy.174.3:9898 SYN ******S*
Jan 2 22:42:53 222.150.212.110:3120 -> xxx.yyy.174.2:5554 SYN ******S*
Jan 2 22:42:54 222.150.212.110:3548 -> xxx.yyy.174.2:1023 SYN ******S*
Jan 2 22:42:56 222.150.212.110:4528 -> xxx.yyy.174.2:9898 SYN ******S*
Jan 2 22:42:53 222.150.212.110:3149 -> xxx.yyy.174.4:5554 SYN ******S*
Jan 2 22:42:54 222.150.212.110:3576 -> xxx.yyy.174.4:1023 SYN ******S*
[...]
Jan 2 22:43:46 222.150.212.110:3649 -> xxx.yyy.194.115:9898 SYN ******S*
Jan 2 22:43:46 222.150.212.110:3636 -> xxx.yyy.194.116:9898 SYN ******S*
Jan 2 22:43:46 222.150.212.110:3637 -> xxx.yyy.194.119:9898 SYN ******S*
Jan 2 22:43:46 222.150.212.110:3643 -> xxx.yyy.194.122:9898 SYN ******S*
Jan 2 22:43:46 222.150.212.110:3645 -> xxx.yyy.194.117:9898 SYN ******S*
Jan 2 22:43:46 222.150.212.110:3641 -> xxx.yyy.194.120:9898 SYN ******S*
Jan 2 22:43:46 222.150.212.110:3642 -> xxx.yyy.194.121:9898 SYN ******S*
Jan 2 22:43:46 222.150.212.110:3646 -> xxx.yyy.194.118:9898 SYN ******S*
Jan 2 22:43:46 222.150.212.110:3647 -> xxx.yyy.194.123:9898 SYN ******S*
14861
Jan 2 03:46:02 200.115.130.68:80 -> xxx.yyy.163.249:42 SYN ******S*
Jan 2 03:46:02 200.115.130.68:80 -> xxx.yyy.167.223:42 SYN ******S*
Jan 2 03:46:02 200.115.130.68:80 -> xxx.yyy.233.61:42 SYN ******S*
Jan 2 03:46:04 200.115.130.68:80 -> xxx.yyy.189.153:42 SYN ******S*
Jan 2 03:46:04 200.115.130.68:80 -> xxx.yyy.179.5:42 SYN ******S*
Jan 2 03:46:06 200.115.130.68:80 -> xxx.yyy.179.11:42 SYN ******S*
Jan 2 03:47:08 200.115.130.68:80 -> xxx.yyy.153.197:42 SYN ******S*
Jan 2 03:47:10 200.115.130.68:80 -> xxx.yyy.185.65:42 SYN ******S*
[...]
Jan 2 23:59:37 200.115.130.68:80 -> xxx.yyy.153.107:42 SYN ******S*
Jan 2 23:59:38 200.115.130.68:80 -> xxx.yyy.217.143:42 SYN ******S*
Jan 2 23:59:38 200.115.130.68:80 -> xxx.yyy.69.171:42 SYN ******S*
Jan 2 23:59:41 200.115.130.68:80 -> xxx.yyy.249.197:42 SYN ******S*
Jan 2 23:59:41 200.115.130.68:80 -> xxx.yyy.67.87:42 SYN ******S*
Jan 2 23:59:43 200.115.130.68:80 -> xxx.yyy.165.75:42 SYN ******S*
Jan 2 23:59:44 200.115.130.68:80 -> xxx.yyy.215.53:42 SYN ******S*
Jan 2 23:59:46 200.115.130.68:80 -> xxx.yyy.95.237:42 SYN ******S*
14621
Jan 2 12:21:17 209.237.246.101:80 -> xxx.yyy.17.173:42 SYN ******S*
Jan 2 12:21:17 209.237.246.101:80 -> xxx.yyy.219.227:42 SYN ******S*
Jan 2 12:21:17 209.237.246.101:80 -> xxx.yyy.219.131:42 SYN ******S*
Jan 2 12:21:18 209.237.246.101:80 -> xxx.yyy.93.243:42 SYN ******S*
Jan 2 12:21:20 209.237.246.101:80 -> xxx.yyy.207.251:42 SYN ******S*
Jan 2 12:21:20 209.237.246.101:80 -> xxx.yyy.197.207:42 SYN ******S*
Jan 2 12:21:21 209.237.246.101:80 -> xxx.yyy.77.139:42 SYN ******S*
Jan 2 12:21:21 209.237.246.101:80 -> xxx.yyy.65.99:42 SYN ******S*
[...]
Jan 2 17:50:39 209.237.246.101:80 -> xxx.yyy.89.165:42 SYN ******S*
Jan 2 17:50:41 209.237.246.101:80 -> xxx.yyy.93.83:42 SYN ******S*
Jan 2 17:50:41 209.237.246.101:80 -> xxx.yyy.191.135:42 SYN ******S*
Jan 2 17:50:44 209.237.246.101:80 -> xxx.yyy.15.191:42 SYN ******S*
Jan 2 17:50:44 209.237.246.101:80 -> xxx.yyy.195.121:42 SYN ******S*
Jan 2 17:50:44 209.237.246.101:80 -> xxx.yyy.153.203:42 SYN ******S*
Jan 2 17:50:47 209.237.246.101:80 -> xxx.yyy.195.207:42 SYN ******S*
Jan 2 17:50:48 209.237.246.101:80 -> xxx.yyy.151.215:42 SYN ******S*
Jan 2 17:50:51 209.237.246.101:80 -> xxx.yyy.177.13:42 SYN ******S*
12817
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list