[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Sat Jan 15 16:20:11 GMT 2005
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Jan 14 08:11:57 212.106.235.119:2501 -> xxx.yyy.111.1:5900 SYN ******S*
Jan 14 08:11:58 212.106.235.119:2504 -> xxx.yyy.111.1:4899 SYN ******S*
Jan 14 08:11:55 212.106.235.119:2508 -> xxx.yyy.111.1:6101 SYN ******S*
Jan 14 08:11:58 212.106.235.119:2509 -> xxx.yyy.111.1:139 SYN ******S*
Jan 14 08:11:58 212.106.235.119:2511 -> xxx.yyy.111.1:42 SYN ******S*
Jan 14 08:11:58 212.106.235.119:2513 -> xxx.yyy.111.2:4899 SYN ******S*
Jan 14 08:11:58 212.106.235.119:2516 -> xxx.yyy.111.2:139 SYN ******S*
Jan 14 08:11:55 212.106.235.119:2517 -> xxx.yyy.111.2:6101 SYN ******S*
[...]
Jan 14 13:09:18 212.106.235.119:4698 -> xxx.yyy.220.167:5900 SYN ******S*
Jan 14 13:09:19 212.106.235.119:4701 -> xxx.yyy.222.14:5900 SYN ******S*
Jan 14 13:09:19 212.106.235.119:4703 -> xxx.yyy.220.111:5900 SYN ******S*
Jan 14 13:09:19 212.106.235.119:4704 -> xxx.yyy.220.148:5900 SYN ******S*
Jan 14 13:09:19 212.106.235.119:4706 -> xxx.yyy.226.239:6101 SYN ******S*
Jan 14 13:09:19 212.106.235.119:4709 -> xxx.yyy.220.243:5900 SYN ******S*
Jan 14 13:09:19 212.106.235.119:4710 -> xxx.yyy.220.160:5900 SYN ******S*
Jan 14 13:09:19 212.106.235.119:4712 -> xxx.yyy.221.186:5900 SYN ******S*
Jan 14 13:09:19 212.106.235.119:4714 -> xxx.yyy.220.51:5900 SYN ******S*
300355
Jan 14 02:37:31 61.62.95.168:4918 -> xxx.yyy.78.1:5900 SYN ******S*
Jan 14 02:37:32 61.62.95.168:4921 -> xxx.yyy.78.1:4899 SYN ******S*
Jan 14 02:37:32 61.62.95.168:4929 -> xxx.yyy.78.1:42 SYN ******S*
Jan 14 02:37:32 61.62.95.168:4931 -> xxx.yyy.78.2:5900 SYN ******S*
Jan 14 02:37:32 61.62.95.168:4933 -> xxx.yyy.78.2:4899 SYN ******S*
Jan 14 02:37:32 61.62.95.168:4947 -> xxx.yyy.78.2:42 SYN ******S*
Jan 14 02:37:32 61.62.95.168:4938 -> xxx.yyy.78.3:4899 SYN ******S*
Jan 14 02:37:32 61.62.95.168:4946 -> xxx.yyy.78.3:42 SYN ******S*
[...]
Jan 14 04:28:55 61.62.95.168:3100 -> xxx.yyy.73.77:4899 SYN ******S*
Jan 14 04:28:55 61.62.95.168:3104 -> xxx.yyy.73.77:42 SYN ******S*
Jan 14 04:28:55 61.62.95.168:3105 -> xxx.yyy.132.93:5900 SYN ******S*
Jan 14 04:28:55 61.62.95.168:3106 -> xxx.yyy.73.78:5900 SYN ******S*
Jan 14 04:28:55 61.62.95.168:3107 -> xxx.yyy.73.78:4899 SYN ******S*
Jan 14 04:28:55 61.62.95.168:3014 -> xxx.yyy.73.64:5900 SYN ******S*
Jan 14 04:28:55 61.62.95.168:3019 -> xxx.yyy.73.64:42 SYN ******S*
Jan 14 04:28:55 61.62.95.168:3020 -> xxx.yyy.73.65:5900 SYN ******S*
Jan 14 04:28:55 61.62.95.168:3021 -> xxx.yyy.73.65:4899 SYN ******S*
109623
Jan 14 05:38:08 213.251.101.101:1772 -> xxx.yyy.1.0:1433 SYN ******S*
Jan 14 05:38:08 213.251.101.101:1773 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 14 05:38:08 213.251.101.101:1775 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 14 05:38:08 213.251.101.101:1777 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 14 05:38:08 213.251.101.101:1779 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 14 05:38:08 213.251.101.101:1781 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 14 05:38:08 213.251.101.101:1783 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 14 05:38:08 213.251.101.101:1785 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Jan 14 09:28:19 213.251.101.101:1703 -> xxx.yyy.255.239:1433 SYN ******S*
Jan 14 09:28:19 213.251.101.101:1707 -> xxx.yyy.255.241:1433 SYN ******S*
Jan 14 09:28:19 213.251.101.101:1708 -> xxx.yyy.255.242:1433 SYN ******S*
Jan 14 09:28:19 213.251.101.101:1712 -> xxx.yyy.255.245:1433 SYN ******S*
Jan 14 09:28:19 213.251.101.101:1711 -> xxx.yyy.255.244:1433 SYN ******S*
Jan 14 09:28:20 213.251.101.101:1714 -> xxx.yyy.255.246:1433 SYN ******S*
Jan 14 09:28:20 213.251.101.101:1716 -> xxx.yyy.255.248:1433 SYN ******S*
Jan 14 09:28:21 213.251.101.101:1720 -> xxx.yyy.255.250:1433 SYN ******S*
Jan 14 09:28:22 213.251.101.101:1725 -> xxx.yyy.255.253:1433 SYN ******S*
106555
Jan 14 23:00:50 210.178.13.210:2092 -> xxx.yyy.1.1:3306 SYN ******S*
Jan 14 23:00:50 210.178.13.210:2096 -> xxx.yyy.1.2:3306 SYN ******S*
Jan 14 23:00:49 210.178.13.210:2100 -> xxx.yyy.1.3:3306 SYN ******S*
Jan 14 23:00:49 210.178.13.210:2108 -> xxx.yyy.1.5:3306 SYN ******S*
Jan 14 23:00:49 210.178.13.210:2112 -> xxx.yyy.1.6:3306 SYN ******S*
Jan 14 23:00:52 210.178.13.210:2116 -> xxx.yyy.1.7:3306 SYN ******S*
Jan 14 23:00:50 210.178.13.210:2120 -> xxx.yyy.1.8:3306 SYN ******S*
Jan 14 23:00:49 210.178.13.210:2128 -> xxx.yyy.1.10:3306 SYN ******S*
[...]
Jan 14 23:12:30 210.178.13.210:2510 -> xxx.yyy.255.242:3306 SYN ******S*
Jan 14 23:12:30 210.178.13.210:2514 -> xxx.yyy.255.243:3306 SYN ******S*
Jan 14 23:12:30 210.178.13.210:2486 -> xxx.yyy.255.236:3306 SYN ******S*
Jan 14 23:12:30 210.178.13.210:2490 -> xxx.yyy.255.237:3306 SYN ******S*
Jan 14 23:12:30 210.178.13.210:2506 -> xxx.yyy.255.241:3306 SYN ******S*
Jan 14 23:12:30 210.178.13.210:2502 -> xxx.yyy.255.240:3306 SYN ******S*
Jan 14 23:12:30 210.178.13.210:2542 -> xxx.yyy.255.250:3306 SYN ******S*
Jan 14 23:12:30 210.178.13.210:2550 -> xxx.yyy.255.252:3306 SYN ******S*
58399
Jan 14 22:32:06 24.14.127.189:3610 -> xxx.yyy.1.1:42 SYN ******S*
Jan 14 22:32:06 24.14.127.189:3620 -> xxx.yyy.1.2:42 SYN ******S*
Jan 14 22:32:06 24.14.127.189:3637 -> xxx.yyy.1.3:42 SYN ******S*
Jan 14 22:32:06 24.14.127.189:3639 -> xxx.yyy.1.4:42 SYN ******S*
Jan 14 22:32:04 24.14.127.189:3660 -> xxx.yyy.1.5:42 SYN ******S*
Jan 14 22:32:07 24.14.127.189:3683 -> xxx.yyy.1.6:42 SYN ******S*
Jan 14 22:32:07 24.14.127.189:3689 -> xxx.yyy.1.7:42 SYN ******S*
Jan 14 22:32:04 24.14.127.189:3693 -> xxx.yyy.1.8:42 SYN ******S*
[...]
Jan 14 23:09:43 24.14.127.189:2699 -> xxx.yyy.255.246:42 SYN ******S*
Jan 14 23:09:43 24.14.127.189:2703 -> xxx.yyy.255.247:42 SYN ******S*
Jan 14 23:09:43 24.14.127.189:2705 -> xxx.yyy.255.248:42 SYN ******S*
Jan 14 23:09:43 24.14.127.189:2706 -> xxx.yyy.255.249:42 SYN ******S*
Jan 14 23:09:43 24.14.127.189:2707 -> xxx.yyy.255.250:42 SYN ******S*
Jan 14 23:09:43 24.14.127.189:2716 -> xxx.yyy.255.251:42 SYN ******S*
Jan 14 23:09:43 24.14.127.189:2717 -> xxx.yyy.255.252:42 SYN ******S*
Jan 14 23:09:43 24.14.127.189:2720 -> xxx.yyy.255.253:42 SYN ******S*
Jan 14 23:09:43 24.14.127.189:2723 -> xxx.yyy.255.254:42 SYN ******S*
57772
Jan 14 19:01:26 150.7.220.58:34300 -> xxx.yyy.1.5:513 SYN ******S*
Jan 14 19:01:26 150.7.220.58:34299 -> xxx.yyy.1.4:513 SYN ******S*
Jan 14 19:01:26 150.7.220.58:34297 -> xxx.yyy.1.2:513 SYN ******S*
Jan 14 19:01:26 150.7.220.58:34298 -> xxx.yyy.1.3:513 SYN ******S*
Jan 14 19:01:26 150.7.220.58:34301 -> xxx.yyy.1.6:513 SYN ******S*
Jan 14 19:01:26 150.7.220.58:34309 -> xxx.yyy.1.14:513 SYN ******S*
Jan 14 19:01:26 150.7.220.58:34313 -> xxx.yyy.1.18:513 SYN ******S*
Jan 14 19:01:26 150.7.220.58:34314 -> xxx.yyy.1.19:513 SYN ******S*
[...]
Jan 14 19:37:48 150.7.220.58:43103 -> xxx.yyy.255.246:513 SYN ******S*
Jan 14 19:37:48 150.7.220.58:43104 -> xxx.yyy.255.247:513 SYN ******S*
Jan 14 19:37:48 150.7.220.58:43101 -> xxx.yyy.255.244:513 SYN ******S*
Jan 14 19:37:48 150.7.220.58:43102 -> xxx.yyy.255.245:513 SYN ******S*
Jan 14 19:37:48 150.7.220.58:43107 -> xxx.yyy.255.250:513 SYN ******S*
Jan 14 19:37:48 150.7.220.58:43108 -> xxx.yyy.255.251:513 SYN ******S*
Jan 14 19:37:48 150.7.220.58:43111 -> xxx.yyy.255.254:513 SYN ******S*
Jan 14 19:37:48 150.7.220.58:43112 -> xxx.yyy.255.255:513 SYN ******S*
52584
Jan 14 10:31:13 164.8.24.220:3520 -> xxx.yyy.1.1:6101 SYN ******S*
Jan 14 10:31:16 164.8.24.220:3522 -> xxx.yyy.1.3:6101 SYN ******S*
Jan 14 10:31:16 164.8.24.220:3523 -> xxx.yyy.1.2:6101 SYN ******S*
Jan 14 10:31:16 164.8.24.220:3524 -> xxx.yyy.1.5:6101 SYN ******S*
Jan 14 10:31:16 164.8.24.220:3525 -> xxx.yyy.1.4:6101 SYN ******S*
Jan 14 10:31:16 164.8.24.220:3526 -> xxx.yyy.1.7:6101 SYN ******S*
Jan 14 10:31:14 164.8.24.220:3527 -> xxx.yyy.1.6:6101 SYN ******S*
Jan 14 10:31:14 164.8.24.220:3528 -> xxx.yyy.1.9:6101 SYN ******S*
[...]
Jan 14 11:27:33 164.8.24.220:2408 -> xxx.yyy.255.238:6101 SYN ******S*
Jan 14 11:27:34 164.8.24.220:2410 -> xxx.yyy.255.240:6101 SYN ******S*
Jan 14 11:27:34 164.8.24.220:2412 -> xxx.yyy.255.242:6101 SYN ******S*
Jan 14 11:27:34 164.8.24.220:2413 -> xxx.yyy.255.245:6101 SYN ******S*
Jan 14 11:27:34 164.8.24.220:2414 -> xxx.yyy.255.244:6101 SYN ******S*
Jan 14 11:27:34 164.8.24.220:2417 -> xxx.yyy.255.249:6101 SYN ******S*
Jan 14 11:27:34 164.8.24.220:2418 -> xxx.yyy.255.251:6101 SYN ******S*
Jan 14 11:27:34 164.8.24.220:2419 -> xxx.yyy.255.248:6101 SYN ******S*
47027
Jan 14 01:11:42 68.57.38.96:2024 -> xxx.yyy.1.2:42 SYN ******S*
Jan 14 01:11:42 68.57.38.96:2023 -> xxx.yyy.1.1:42 SYN ******S*
Jan 14 01:11:42 68.57.38.96:2025 -> xxx.yyy.1.3:42 SYN ******S*
Jan 14 01:11:42 68.57.38.96:2028 -> xxx.yyy.1.6:42 SYN ******S*
Jan 14 01:11:42 68.57.38.96:2042 -> xxx.yyy.1.20:42 SYN ******S*
Jan 14 01:11:42 68.57.38.96:2052 -> xxx.yyy.1.30:42 SYN ******S*
Jan 14 01:11:42 68.57.38.96:2056 -> xxx.yyy.1.34:42 SYN ******S*
Jan 14 01:11:42 68.57.38.96:2050 -> xxx.yyy.1.28:42 SYN ******S*
[...]
Jan 14 01:24:33 68.57.38.96:3240 -> xxx.yyy.255.175:42 SYN ******S*
Jan 14 01:24:33 68.57.38.96:3256 -> xxx.yyy.255.191:42 SYN ******S*
Jan 14 01:24:33 68.57.38.96:3268 -> xxx.yyy.255.202:42 SYN ******S*
Jan 14 01:24:33 68.57.38.96:3283 -> xxx.yyy.255.216:42 SYN ******S*
Jan 14 01:24:33 68.57.38.96:3285 -> xxx.yyy.255.218:42 SYN ******S*
Jan 14 01:24:33 68.57.38.96:3284 -> xxx.yyy.255.217:42 SYN ******S*
Jan 14 01:24:33 68.57.38.96:3282 -> xxx.yyy.255.215:42 SYN ******S*
Jan 14 01:24:33 68.57.38.96:3295 -> xxx.yyy.255.228:42 SYN ******S*
Jan 14 01:24:33 68.57.38.96:3290 -> xxx.yyy.255.223:42 SYN ******S*
44527
Jan 14 16:33:40 216.243.190.198:1676 -> xxx.yyy.1.1:6101 SYN ******S*
Jan 14 16:33:40 216.243.190.198:1677 -> xxx.yyy.1.2:6101 SYN ******S*
Jan 14 16:33:40 216.243.190.198:1679 -> xxx.yyy.1.4:6101 SYN ******S*
Jan 14 16:33:43 216.243.190.198:1682 -> xxx.yyy.1.7:6101 SYN ******S*
Jan 14 16:33:40 216.243.190.198:1685 -> xxx.yyy.1.10:6101 SYN ******S*
Jan 14 16:33:40 216.243.190.198:1688 -> xxx.yyy.1.13:6101 SYN ******S*
Jan 14 16:33:40 216.243.190.198:1691 -> xxx.yyy.1.16:6101 SYN ******S*
Jan 14 16:33:40 216.243.190.198:1692 -> xxx.yyy.1.17:6101 SYN ******S*
[...]
Jan 14 16:45:21 216.243.190.198:4058 -> xxx.yyy.255.243:6101 SYN ******S*
Jan 14 16:45:21 216.243.190.198:4059 -> xxx.yyy.255.244:6101 SYN ******S*
Jan 14 16:45:21 216.243.190.198:4065 -> xxx.yyy.255.250:6101 SYN ******S*
Jan 14 16:45:21 216.243.190.198:4060 -> xxx.yyy.255.245:6101 SYN ******S*
Jan 14 16:45:21 216.243.190.198:4064 -> xxx.yyy.255.249:6101 SYN ******S*
Jan 14 16:45:21 216.243.190.198:4062 -> xxx.yyy.255.247:6101 SYN ******S*
Jan 14 16:45:21 216.243.190.198:4057 -> xxx.yyy.255.242:6101 SYN ******S*
Jan 14 16:45:21 216.243.190.198:4069 -> xxx.yyy.255.254:6101 SYN ******S*
Jan 14 16:45:21 216.243.190.198:4067 -> xxx.yyy.255.252:6101 SYN ******S*
40623
Jan 14 15:00:58 65.41.172.15:3223 -> xxx.yyy.1.0:4000 SYN ******S*
Jan 14 15:00:58 65.41.172.15:3224 -> xxx.yyy.1.1:4000 SYN ******S*
Jan 14 15:00:58 65.41.172.15:3225 -> xxx.yyy.1.2:4000 SYN ******S*
Jan 14 15:00:57 65.41.172.15:3228 -> xxx.yyy.1.5:4000 SYN ******S*
Jan 14 15:01:00 65.41.172.15:3229 -> xxx.yyy.1.6:4000 SYN ******S*
Jan 14 15:00:58 65.41.172.15:3232 -> xxx.yyy.1.9:4000 SYN ******S*
Jan 14 15:00:57 65.41.172.15:3233 -> xxx.yyy.1.10:4000 SYN ******S*
Jan 14 15:00:58 65.41.172.15:3234 -> xxx.yyy.1.11:4000 SYN ******S*
[...]
Jan 14 15:12:59 65.41.172.15:2509 -> xxx.yyy.255.232:4000 SYN ******S*
Jan 14 15:12:59 65.41.172.15:2511 -> xxx.yyy.255.234:4000 SYN ******S*
Jan 14 15:12:59 65.41.172.15:2518 -> xxx.yyy.255.241:4000 SYN ******S*
Jan 14 15:12:59 65.41.172.15:2519 -> xxx.yyy.255.242:4000 SYN ******S*
Jan 14 15:12:59 65.41.172.15:2523 -> xxx.yyy.255.246:4000 SYN ******S*
Jan 14 15:12:59 65.41.172.15:2520 -> xxx.yyy.255.243:4000 SYN ******S*
Jan 14 15:12:59 65.41.172.15:2524 -> xxx.yyy.255.247:4000 SYN ******S*
Jan 14 15:13:00 65.41.172.15:2531 -> xxx.yyy.255.254:4000 SYN ******S*
38601
Jan 14 09:31:02 66.122.113.209:3247 -> xxx.yyy.1.2:42 SYN ******S*
Jan 14 09:31:02 66.122.113.209:3249 -> xxx.yyy.1.4:42 SYN ******S*
Jan 14 09:30:59 66.122.113.209:3250 -> xxx.yyy.1.5:42 SYN ******S*
Jan 14 09:31:02 66.122.113.209:3251 -> xxx.yyy.1.6:42 SYN ******S*
Jan 14 09:30:59 66.122.113.209:3254 -> xxx.yyy.1.9:42 SYN ******S*
Jan 14 09:31:02 66.122.113.209:3255 -> xxx.yyy.1.10:42 SYN ******S*
Jan 14 09:31:02 66.122.113.209:3257 -> xxx.yyy.1.12:42 SYN ******S*
Jan 14 09:30:59 66.122.113.209:3258 -> xxx.yyy.1.13:42 SYN ******S*
[...]
Jan 14 23:59:57 66.122.113.209:1522 -> xxx.yyy.190.56:6101 SYN ******S*
Jan 14 23:59:57 66.122.113.209:1523 -> xxx.yyy.190.57:6101 SYN ******S*
Jan 14 23:59:57 66.122.113.209:1526 -> xxx.yyy.190.60:6101 SYN ******S*
Jan 14 23:59:57 66.122.113.209:1527 -> xxx.yyy.190.61:6101 SYN ******S*
Jan 14 23:59:57 66.122.113.209:1528 -> xxx.yyy.190.62:6101 SYN ******S*
Jan 14 23:59:57 66.122.113.209:1529 -> xxx.yyy.190.63:6101 SYN ******S*
Jan 14 23:59:57 66.122.113.209:1530 -> xxx.yyy.190.64:6101 SYN ******S*
Jan 14 23:59:57 66.122.113.209:1531 -> xxx.yyy.190.65:6101 SYN ******S*
Jan 14 23:59:57 66.122.113.209:1532 -> xxx.yyy.190.66:6101 SYN ******S*
38117
Jan 14 09:58:01 201.6.103.23:4940 -> xxx.yyy.1.9:6101 SYN ******S*
Jan 14 09:58:04 201.6.103.23:4974 -> xxx.yyy.1.43:6101 SYN ******S*
Jan 14 09:58:01 201.6.103.23:4973 -> xxx.yyy.1.42:6101 SYN ******S*
Jan 14 09:58:01 201.6.103.23:4971 -> xxx.yyy.1.40:6101 SYN ******S*
Jan 14 09:58:01 201.6.103.23:4970 -> xxx.yyy.1.39:6101 SYN ******S*
Jan 14 09:58:04 201.6.103.23:4972 -> xxx.yyy.1.41:6101 SYN ******S*
Jan 14 09:58:01 201.6.103.23:4976 -> xxx.yyy.1.45:6101 SYN ******S*
Jan 14 09:58:01 201.6.103.23:4994 -> xxx.yyy.1.63:6101 SYN ******S*
[...]
Jan 14 10:17:31 201.6.103.23:3313 -> xxx.yyy.255.238:6101 SYN ******S*
Jan 14 10:17:31 201.6.103.23:3197 -> xxx.yyy.255.123:6101 SYN ******S*
Jan 14 10:17:31 201.6.103.23:3229 -> xxx.yyy.255.155:6101 SYN ******S*
Jan 14 10:17:31 201.6.103.23:3314 -> xxx.yyy.255.239:6101 SYN ******S*
Jan 14 10:17:31 201.6.103.23:3278 -> xxx.yyy.255.204:6101 SYN ******S*
Jan 14 10:17:31 201.6.103.23:3211 -> xxx.yyy.255.137:6101 SYN ******S*
Jan 14 10:17:31 201.6.103.23:3195 -> xxx.yyy.255.121:6101 SYN ******S*
Jan 14 10:17:31 201.6.103.23:3227 -> xxx.yyy.255.153:6101 SYN ******S*
34662
Jan 14 23:02:29 61.55.196.95:3849 -> xxx.yyy.146.45:1433 SYN ******S*
Jan 14 23:02:29 61.55.196.95:3852 -> xxx.yyy.146.46:1433 SYN ******S*
Jan 14 23:02:29 61.55.196.95:3855 -> xxx.yyy.146.47:1433 SYN ******S*
Jan 14 23:02:29 61.55.196.95:3858 -> xxx.yyy.146.48:1433 SYN ******S*
Jan 14 23:02:29 61.55.196.95:3861 -> xxx.yyy.146.49:1433 SYN ******S*
Jan 14 23:02:29 61.55.196.95:3864 -> xxx.yyy.146.50:1433 SYN ******S*
Jan 14 23:02:29 61.55.196.95:3867 -> xxx.yyy.146.51:1433 SYN ******S*
Jan 14 23:02:26 61.55.196.95:3870 -> xxx.yyy.146.52:1433 SYN ******S*
[...]
Jan 14 23:42:32 61.55.196.95:4623 -> xxx.yyy.190.190:1433 SYN ******S*
Jan 14 23:42:32 61.55.196.95:3087 -> xxx.yyy.191.12:1433 SYN ******S*
Jan 14 23:42:32 61.55.196.95:4628 -> xxx.yyy.190.191:1433 SYN ******S*
Jan 14 23:42:32 61.55.196.95:3094 -> xxx.yyy.191.14:1433 SYN ******S*
Jan 14 23:42:32 61.55.196.95:3098 -> xxx.yyy.191.15:1433 SYN ******S*
Jan 14 23:42:32 61.55.196.95:3099 -> xxx.yyy.191.16:1433 SYN ******S*
Jan 14 23:42:32 61.55.196.95:3100 -> xxx.yyy.191.17:1433 SYN ******S*
Jan 14 23:42:32 61.55.196.95:4659 -> xxx.yyy.190.194:1433 SYN ******S*
27095
Jan 14 15:30:32 81.172.92.31:2065 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 14 15:30:32 81.172.92.31:2068 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 14 15:30:32 81.172.92.31:2077 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 14 15:30:29 81.172.92.31:2086 -> xxx.yyy.1.8:1433 SYN ******S*
Jan 14 15:30:29 81.172.92.31:2090 -> xxx.yyy.1.9:1433 SYN ******S*
Jan 14 15:30:29 81.172.92.31:2093 -> xxx.yyy.1.10:1433 SYN ******S*
Jan 14 15:30:32 81.172.92.31:2096 -> xxx.yyy.1.11:1433 SYN ******S*
Jan 14 15:30:29 81.172.92.31:2099 -> xxx.yyy.1.12:1433 SYN ******S*
[...]
Jan 14 17:06:35 81.172.92.31:1079 -> xxx.yyy.107.247:1433 SYN ******S*
Jan 14 17:06:35 81.172.92.31:1077 -> xxx.yyy.107.246:1433 SYN ******S*
Jan 14 17:06:36 81.172.92.31:1085 -> xxx.yyy.107.250:1433 SYN ******S*
Jan 14 17:06:36 81.172.92.31:1084 -> xxx.yyy.107.249:1433 SYN ******S*
Jan 14 17:06:36 81.172.92.31:1087 -> xxx.yyy.107.251:1433 SYN ******S*
Jan 14 17:06:36 81.172.92.31:1088 -> xxx.yyy.107.252:1433 SYN ******S*
Jan 14 17:06:36 81.172.92.31:1090 -> xxx.yyy.107.253:1433 SYN ******S*
Jan 14 17:06:36 81.172.92.31:1094 -> xxx.yyy.107.255:1433 SYN ******S*
19876
Jan 14 01:00:55 64.215.244.5:2452 -> xxx.yyy.1.16:6101 SYN ******S*
Jan 14 01:00:55 64.215.244.5:2453 -> xxx.yyy.1.17:6101 SYN ******S*
Jan 14 01:00:55 64.215.244.5:2454 -> xxx.yyy.1.18:6101 SYN ******S*
Jan 14 01:00:55 64.215.244.5:2455 -> xxx.yyy.1.19:6101 SYN ******S*
Jan 14 01:00:55 64.215.244.5:2456 -> xxx.yyy.1.20:6101 SYN ******S*
Jan 14 01:00:55 64.215.244.5:2457 -> xxx.yyy.1.21:6101 SYN ******S*
Jan 14 01:00:55 64.215.244.5:2458 -> xxx.yyy.1.22:6101 SYN ******S*
Jan 14 01:00:55 64.215.244.5:2459 -> xxx.yyy.1.23:6101 SYN ******S*
[...]
Jan 14 01:01:21 64.215.244.5:2444 -> xxx.yyy.255.238:6101 SYN ******S*
Jan 14 01:01:21 64.215.244.5:2445 -> xxx.yyy.255.239:6101 SYN ******S*
Jan 14 01:01:21 64.215.244.5:2446 -> xxx.yyy.255.240:6101 SYN ******S*
Jan 14 01:01:21 64.215.244.5:2447 -> xxx.yyy.255.241:6101 SYN ******S*
Jan 14 01:01:21 64.215.244.5:2457 -> xxx.yyy.255.251:6101 SYN ******S*
Jan 14 01:01:21 64.215.244.5:2459 -> xxx.yyy.255.253:6101 SYN ******S*
Jan 14 01:01:21 64.215.244.5:2458 -> xxx.yyy.255.252:6101 SYN ******S*
Jan 14 01:01:21 64.215.244.5:2460 -> xxx.yyy.255.254:6101 SYN ******S*
17554
[...]
16171
Jan 14 01:25:03 221.160.179.158:1178 -> xxx.yyy.1.104:6106 SYN ******S*
Jan 14 01:25:06 221.160.179.158:1179 -> xxx.yyy.1.105:6106 SYN ******S*
Jan 14 01:25:06 221.160.179.158:1182 -> xxx.yyy.1.186:6106 SYN ******S*
Jan 14 01:25:06 221.160.179.158:1183 -> xxx.yyy.1.187:6106 SYN ******S*
Jan 14 01:25:06 221.160.179.158:1184 -> xxx.yyy.1.188:6106 SYN ******S*
Jan 14 01:25:06 221.160.179.158:1187 -> xxx.yyy.1.190:6106 SYN ******S*
Jan 14 01:25:06 221.160.179.158:1186 -> xxx.yyy.1.189:6106 SYN ******S*
Jan 14 01:25:06 221.160.179.158:1401 -> xxx.yyy.4.44:6106 SYN ******S*
[...]
Jan 14 01:27:02 221.160.179.158:3479 -> xxx.yyy.255.248:6106 SYN ******S*
Jan 14 01:27:02 221.160.179.158:3476 -> xxx.yyy.255.245:6106 SYN ******S*
Jan 14 01:27:02 221.160.179.158:3470 -> xxx.yyy.255.239:6106 SYN ******S*
Jan 14 01:27:02 221.160.179.158:3477 -> xxx.yyy.255.246:6106 SYN ******S*
Jan 14 01:27:02 221.160.179.158:3465 -> xxx.yyy.255.234:6106 SYN ******S*
Jan 14 01:27:02 221.160.179.158:3474 -> xxx.yyy.255.243:6106 SYN ******S*
Jan 14 01:27:02 221.160.179.158:3463 -> xxx.yyy.255.232:6106 SYN ******S*
Jan 14 01:27:02 221.160.179.158:3467 -> xxx.yyy.255.236:6106 SYN ******S*
Jan 14 01:27:02 221.160.179.158:3461 -> xxx.yyy.255.230:6106 SYN ******S*
15339
Jan 14 23:02:01 222.144.36.194:2397 -> xxx.yyy.153.140:5554 SYN ******S*
Jan 14 23:02:02 222.144.36.194:2621 -> xxx.yyy.153.140:1023 SYN ******S*
Jan 14 23:02:04 222.144.36.194:2929 -> xxx.yyy.153.140:9898 SYN ******S*
Jan 14 23:02:01 222.144.36.194:2400 -> xxx.yyy.153.143:5554 SYN ******S*
Jan 14 23:02:02 222.144.36.194:2624 -> xxx.yyy.153.143:1023 SYN ******S*
Jan 14 23:02:04 222.144.36.194:2934 -> xxx.yyy.153.143:9898 SYN ******S*
Jan 14 23:02:02 222.144.36.194:2399 -> xxx.yyy.153.142:5554 SYN ******S*
Jan 14 23:02:02 222.144.36.194:2623 -> xxx.yyy.153.142:1023 SYN ******S*
[...]
Jan 14 23:03:59 222.144.36.194:4371 -> xxx.yyy.154.198:9898 SYN ******S*
Jan 14 23:03:59 222.144.36.194:4370 -> xxx.yyy.154.197:9898 SYN ******S*
Jan 14 23:03:59 222.144.36.194:4357 -> xxx.yyy.154.188:9898 SYN ******S*
Jan 14 23:03:59 222.144.36.194:4358 -> xxx.yyy.154.189:9898 SYN ******S*
Jan 14 23:03:59 222.144.36.194:4361 -> xxx.yyy.154.172:9898 SYN ******S*
Jan 14 23:03:59 222.144.36.194:4363 -> xxx.yyy.154.178:9898 SYN ******S*
Jan 14 23:03:59 222.144.36.194:4368 -> xxx.yyy.154.195:9898 SYN ******S*
Jan 14 23:03:59 222.144.36.194:4391 -> xxx.yyy.154.117:9898 SYN ******S*
12271
[...]
12183
Jan 14 23:54:54 218.88.106.253:3475 -> xxx.yyy.194.125:5554 SYN ******S*
Jan 14 23:54:55 218.88.106.253:3190 -> xxx.yyy.194.125:1023 SYN ******S*
Jan 14 23:54:57 218.88.106.253:4009 -> xxx.yyy.194.125:9898 SYN ******S*
Jan 14 23:54:54 218.88.106.253:3474 -> xxx.yyy.194.124:5554 SYN ******S*
Jan 14 23:54:55 218.88.106.253:3184 -> xxx.yyy.194.124:1023 SYN ******S*
Jan 14 23:54:57 218.88.106.253:4006 -> xxx.yyy.194.124:9898 SYN ******S*
Jan 14 23:54:55 218.88.106.253:2043 -> xxx.yyy.194.131:5554 SYN ******S*
Jan 14 23:54:56 218.88.106.253:3762 -> xxx.yyy.194.131:1023 SYN ******S*
[...]
Jan 14 23:55:55 218.88.106.253:3615 -> xxx.yyy.214.222:9898 SYN ******S*
Jan 14 23:55:55 218.88.106.253:2749 -> xxx.yyy.214.239:9898 SYN ******S*
Jan 14 23:55:55 218.88.106.253:4550 -> xxx.yyy.214.230:9898 SYN ******S*
Jan 14 23:55:55 218.88.106.253:2253 -> xxx.yyy.214.232:9898 SYN ******S*
Jan 14 23:55:55 218.88.106.253:2736 -> xxx.yyy.214.238:9898 SYN ******S*
Jan 14 23:55:55 218.88.106.253:2853 -> xxx.yyy.214.244:9898 SYN ******S*
Jan 14 23:55:55 218.88.106.253:2381 -> xxx.yyy.214.236:9898 SYN ******S*
Jan 14 23:55:56 218.88.106.253:2814 -> xxx.yyy.214.242:9898 SYN ******S*
9652
Jan 14 11:46:21 212.88.243.11:4536 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 14 11:46:21 212.88.243.11:4538 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 14 11:46:21 212.88.243.11:4541 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 14 11:46:21 212.88.243.11:4544 -> xxx.yyy.1.8:1433 SYN ******S*
Jan 14 11:46:21 212.88.243.11:4545 -> xxx.yyy.1.9:1433 SYN ******S*
Jan 14 11:46:21 212.88.243.11:4534 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 14 11:46:18 212.88.243.11:4546 -> xxx.yyy.1.10:1433 SYN ******S*
Jan 14 11:46:22 212.88.243.11:4549 -> xxx.yyy.1.12:1433 SYN ******S*
[...]
Jan 14 12:51:55 212.88.243.11:2700 -> xxx.yyy.73.255:1433 SYN ******S*
Jan 14 12:51:55 212.88.243.11:2694 -> xxx.yyy.73.252:1433 SYN ******S*
Jan 14 12:51:55 212.88.243.11:2695 -> xxx.yyy.73.253:1433 SYN ******S*
Jan 14 12:51:55 212.88.243.11:2710 -> xxx.yyy.74.1:1433 SYN ******S*
Jan 14 12:51:56 212.88.243.11:2715 -> xxx.yyy.74.4:1433 SYN ******S*
Jan 14 12:51:56 212.88.243.11:2712 -> xxx.yyy.74.2:1433 SYN ******S*
Jan 14 12:51:56 212.88.243.11:2713 -> xxx.yyy.74.3:1433 SYN ******S*
Jan 14 12:51:56 212.88.243.11:2720 -> xxx.yyy.74.5:1433 SYN ******S*
8531
Jan 14 23:06:34 219.91.19.153:3290 -> xxx.yyy.1.0:1433 SYN ******S*
Jan 14 23:06:31 219.91.19.153:3291 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 14 23:06:34 219.91.19.153:3292 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 14 23:06:34 219.91.19.153:3293 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 14 23:06:34 219.91.19.153:3294 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 14 23:06:34 219.91.19.153:3295 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 14 23:06:34 219.91.19.153:3296 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 14 23:06:34 219.91.19.153:3297 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Jan 14 23:38:01 219.91.19.153:3010 -> xxx.yyy.33.244:1433 SYN ******S*
Jan 14 23:38:01 219.91.19.153:3014 -> xxx.yyy.33.247:1433 SYN ******S*
Jan 14 23:38:01 219.91.19.153:3013 -> xxx.yyy.33.246:1433 SYN ******S*
Jan 14 23:38:01 219.91.19.153:3012 -> xxx.yyy.33.245:1433 SYN ******S*
Jan 14 23:38:01 219.91.19.153:3020 -> xxx.yyy.33.252:1433 SYN ******S*
Jan 14 23:38:01 219.91.19.153:3018 -> xxx.yyy.33.251:1433 SYN ******S*
Jan 14 23:38:01 219.91.19.153:3028 -> xxx.yyy.33.255:1433 SYN ******S*
Jan 14 23:38:01 219.91.19.153:3026 -> xxx.yyy.33.254:1433 SYN ******S*
8519
Jan 14 22:42:04 134.117.141.109:1830 -> xxx.yyy.132.33:1433 SYN ******S*
Jan 14 22:42:04 134.117.141.109:1831 -> xxx.yyy.132.34:1433 SYN ******S*
Jan 14 22:42:04 134.117.141.109:1835 -> xxx.yyy.132.37:1433 SYN ******S*
Jan 14 22:42:04 134.117.141.109:1838 -> xxx.yyy.132.40:1433 SYN ******S*
Jan 14 22:42:04 134.117.141.109:1842 -> xxx.yyy.132.43:1433 SYN ******S*
Jan 14 22:42:04 134.117.141.109:1845 -> xxx.yyy.132.46:1433 SYN ******S*
Jan 14 22:42:04 134.117.141.109:1833 -> xxx.yyy.132.35:1433 SYN ******S*
Jan 14 22:42:04 134.117.141.109:1836 -> xxx.yyy.132.38:1433 SYN ******S*
[...]
Jan 14 22:46:44 134.117.141.109:1727 -> xxx.yyy.255.207:1433 SYN ******S*
Jan 14 22:46:44 134.117.141.109:1730 -> xxx.yyy.255.209:1433 SYN ******S*
Jan 14 22:46:44 134.117.141.109:1733 -> xxx.yyy.255.212:1433 SYN ******S*
Jan 14 22:46:44 134.117.141.109:1736 -> xxx.yyy.255.215:1433 SYN ******S*
Jan 14 22:46:44 134.117.141.109:1739 -> xxx.yyy.255.218:1433 SYN ******S*
Jan 14 22:46:44 134.117.141.109:1742 -> xxx.yyy.255.221:1433 SYN ******S*
Jan 14 22:46:44 134.117.141.109:1745 -> xxx.yyy.255.224:1433 SYN ******S*
Jan 14 22:46:44 134.117.141.109:1748 -> xxx.yyy.255.227:1433 SYN ******S*
Jan 14 22:46:44 134.117.141.109:1751 -> xxx.yyy.255.230:1433 SYN ******S*
8443
Jan 14 22:57:32 222.117.173.138:3479 -> xxx.yyy.153.149:5554 SYN ******S*
Jan 14 22:57:35 222.117.173.138:1285 -> xxx.yyy.153.149:9898 SYN ******S*
Jan 14 22:57:32 222.117.173.138:3467 -> xxx.yyy.153.138:5554 SYN ******S*
Jan 14 22:57:35 222.117.173.138:1275 -> xxx.yyy.153.138:9898 SYN ******S*
Jan 14 22:57:32 222.117.173.138:3468 -> xxx.yyy.153.136:5554 SYN ******S*
Jan 14 22:57:32 222.117.173.138:3470 -> xxx.yyy.153.140:5554 SYN ******S*
Jan 14 22:57:33 222.117.173.138:3943 -> xxx.yyy.153.140:1023 SYN ******S*
Jan 14 22:57:35 222.117.173.138:1311 -> xxx.yyy.153.140:9898 SYN ******S*
[...]
Jan 14 22:58:20 222.117.173.138:4155 -> xxx.yyy.173.239:9898 SYN ******S*
Jan 14 22:58:20 222.117.173.138:4228 -> xxx.yyy.173.248:9898 SYN ******S*
Jan 14 22:58:20 222.117.173.138:4230 -> xxx.yyy.173.249:9898 SYN ******S*
Jan 14 22:58:20 222.117.173.138:4236 -> xxx.yyy.173.252:9898 SYN ******S*
Jan 14 22:58:20 222.117.173.138:4238 -> xxx.yyy.173.253:9898 SYN ******S*
Jan 14 22:58:20 222.117.173.138:4235 -> xxx.yyy.173.251:9898 SYN ******S*
Jan 14 22:58:20 222.117.173.138:4247 -> xxx.yyy.173.254:9898 SYN ******S*
Jan 14 22:58:20 222.117.173.138:4249 -> xxx.yyy.174.0:9898 SYN ******S*
Jan 14 22:58:20 222.117.173.138:4304 -> xxx.yyy.174.2:9898 SYN ******S*
8053
Jan 14 22:57:38 220.121.244.253:4634 -> xxx.yyy.73.3:5554 SYN ******S*
Jan 14 22:57:40 220.121.244.253:2427 -> xxx.yyy.73.3:1023 SYN ******S*
Jan 14 22:57:38 220.121.244.253:4646 -> xxx.yyy.72.249:5554 SYN ******S*
Jan 14 22:57:38 220.121.244.253:4655 -> xxx.yyy.72.239:5554 SYN ******S*
Jan 14 22:57:40 220.121.244.253:2438 -> xxx.yyy.72.239:1023 SYN ******S*
Jan 14 22:57:38 220.121.244.253:4657 -> xxx.yyy.72.254:5554 SYN ******S*
Jan 14 22:57:40 220.121.244.253:2439 -> xxx.yyy.72.254:1023 SYN ******S*
Jan 14 22:57:38 220.121.244.253:4649 -> xxx.yyy.72.246:5554 SYN ******S*
[...]
Jan 14 22:58:36 220.121.244.253:1160 -> xxx.yyy.92.231:9898 SYN ******S*
Jan 14 22:58:36 220.121.244.253:1135 -> xxx.yyy.92.211:9898 SYN ******S*
Jan 14 22:58:36 220.121.244.253:1137 -> xxx.yyy.92.210:9898 SYN ******S*
Jan 14 22:58:36 220.121.244.253:1139 -> xxx.yyy.92.208:9898 SYN ******S*
Jan 14 22:58:36 220.121.244.253:1154 -> xxx.yyy.92.246:9898 SYN ******S*
Jan 14 22:58:36 220.121.244.253:4585 -> xxx.yyy.92.240:9898 SYN ******S*
Jan 14 22:58:36 220.121.244.253:4710 -> xxx.yyy.92.242:9898 SYN ******S*
Jan 14 22:58:36 220.121.244.253:4700 -> xxx.yyy.92.235:9898 SYN ******S*
7998
[...]
7799
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list