[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Wed Jan 19 11:46:14 GMT 2005
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Jan 18 03:52:36 62.146.24.226:2456 -> xxx.yyy.1.1:6101 SYN ******S*
Jan 18 03:52:36 62.146.24.226:2457 -> xxx.yyy.1.2:6101 SYN ******S*
Jan 18 03:52:36 62.146.24.226:2459 -> xxx.yyy.1.3:6101 SYN ******S*
Jan 18 03:52:36 62.146.24.226:2460 -> xxx.yyy.1.4:6101 SYN ******S*
Jan 18 03:52:36 62.146.24.226:2462 -> xxx.yyy.1.5:6101 SYN ******S*
Jan 18 03:52:36 62.146.24.226:2463 -> xxx.yyy.1.6:6101 SYN ******S*
Jan 18 03:52:36 62.146.24.226:2465 -> xxx.yyy.1.7:6101 SYN ******S*
Jan 18 03:52:36 62.146.24.226:2466 -> xxx.yyy.1.8:6101 SYN ******S*
[...]
Jan 18 04:34:15 62.146.24.226:1885 -> xxx.yyy.255.246:6101 SYN ******S*
Jan 18 04:34:15 62.146.24.226:1849 -> xxx.yyy.255.211:6101 SYN ******S*
Jan 18 04:34:15 62.146.24.226:1892 -> xxx.yyy.255.253:6101 SYN ******S*
Jan 18 04:34:15 62.146.24.226:1886 -> xxx.yyy.255.247:6101 SYN ******S*
Jan 18 04:34:15 62.146.24.226:1850 -> xxx.yyy.255.212:6101 SYN ******S*
Jan 18 04:34:15 62.146.24.226:1847 -> xxx.yyy.255.209:6101 SYN ******S*
Jan 18 04:34:15 62.146.24.226:1851 -> xxx.yyy.255.213:6101 SYN ******S*
Jan 18 04:34:15 62.146.24.226:1887 -> xxx.yyy.255.248:6101 SYN ******S*
Jan 18 04:34:15 62.146.24.226:1848 -> xxx.yyy.255.210:6101 SYN ******S*
74019
Jan 18 05:57:40 216.138.82.118:3392 -> xxx.yyy.1.1:42 SYN ******S*
Jan 18 05:57:40 216.138.82.118:3393 -> xxx.yyy.1.2:42 SYN ******S*
Jan 18 05:57:40 216.138.82.118:3394 -> xxx.yyy.1.3:42 SYN ******S*
Jan 18 05:57:37 216.138.82.118:3395 -> xxx.yyy.1.4:42 SYN ******S*
Jan 18 05:57:37 216.138.82.118:3396 -> xxx.yyy.1.5:42 SYN ******S*
Jan 18 05:57:40 216.138.82.118:3397 -> xxx.yyy.1.6:42 SYN ******S*
Jan 18 05:57:40 216.138.82.118:3398 -> xxx.yyy.1.7:42 SYN ******S*
Jan 18 05:57:40 216.138.82.118:3399 -> xxx.yyy.1.8:42 SYN ******S*
[...]
Jan 18 06:09:19 216.138.82.118:2405 -> xxx.yyy.255.240:42 SYN ******S*
Jan 18 06:09:19 216.138.82.118:2433 -> xxx.yyy.255.254:42 SYN ******S*
Jan 18 06:09:19 216.138.82.118:2429 -> xxx.yyy.255.252:42 SYN ******S*
Jan 18 06:09:19 216.138.82.118:2422 -> xxx.yyy.255.249:42 SYN ******S*
Jan 18 06:09:19 216.138.82.118:2428 -> xxx.yyy.255.251:42 SYN ******S*
Jan 18 06:09:19 216.138.82.118:2421 -> xxx.yyy.255.248:42 SYN ******S*
Jan 18 06:09:19 216.138.82.118:2423 -> xxx.yyy.255.250:42 SYN ******S*
Jan 18 06:09:19 216.138.82.118:2430 -> xxx.yyy.255.253:42 SYN ******S*
71642
Jan 18 02:50:26 65.41.172.15:2180 -> xxx.yyy.1.0:1433 SYN ******S*
Jan 18 02:50:29 65.41.172.15:2181 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 18 02:50:29 65.41.172.15:2182 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 18 02:50:29 65.41.172.15:2183 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 18 02:50:29 65.41.172.15:2184 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 18 02:50:29 65.41.172.15:2185 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 18 02:50:29 65.41.172.15:2186 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 18 02:50:29 65.41.172.15:2187 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Jan 18 03:02:47 65.41.172.15:1376 -> xxx.yyy.255.239:1433 SYN ******S*
Jan 18 03:02:47 65.41.172.15:1383 -> xxx.yyy.255.246:1433 SYN ******S*
Jan 18 03:02:47 65.41.172.15:1390 -> xxx.yyy.255.253:1433 SYN ******S*
Jan 18 03:02:47 65.41.172.15:1387 -> xxx.yyy.255.250:1433 SYN ******S*
Jan 18 03:02:47 65.41.172.15:1391 -> xxx.yyy.255.254:1433 SYN ******S*
Jan 18 03:02:47 65.41.172.15:1388 -> xxx.yyy.255.251:1433 SYN ******S*
Jan 18 03:02:47 65.41.172.15:1389 -> xxx.yyy.255.252:1433 SYN ******S*
Jan 18 03:02:47 65.41.172.15:1386 -> xxx.yyy.255.249:1433 SYN ******S*
71462
Jan 18 01:52:36 217.117.230.157:43018 -> xxx.yyy.1.1:139 SYN ******S*
Jan 18 01:52:36 217.117.230.157:43019 -> xxx.yyy.1.2:139 SYN ******S*
Jan 18 01:52:36 217.117.230.157:43020 -> xxx.yyy.1.3:139 SYN ******S*
Jan 18 01:52:36 217.117.230.157:43023 -> xxx.yyy.1.4:139 SYN ******S*
Jan 18 01:52:36 217.117.230.157:43029 -> xxx.yyy.1.6:139 SYN ******S*
Jan 18 01:52:36 217.117.230.157:43026 -> xxx.yyy.1.5:139 SYN ******S*
Jan 18 01:52:36 217.117.230.157:43031 -> xxx.yyy.1.8:139 SYN ******S*
Jan 18 01:52:36 217.117.230.157:43033 -> xxx.yyy.1.10:139 SYN ******S*
[...]
Jan 18 02:04:24 217.117.230.157:52524 -> xxx.yyy.255.216:139 SYN ******S*
Jan 18 02:04:24 217.117.230.157:52526 -> xxx.yyy.255.218:139 SYN ******S*
Jan 18 02:04:24 217.117.230.157:52532 -> xxx.yyy.255.220:139 SYN ******S*
Jan 18 02:04:24 217.117.230.157:52536 -> xxx.yyy.255.222:139 SYN ******S*
Jan 18 02:04:24 217.117.230.157:52533 -> xxx.yyy.255.221:139 SYN ******S*
Jan 18 02:04:24 217.117.230.157:52537 -> xxx.yyy.255.223:139 SYN ******S*
Jan 18 02:04:25 217.117.230.157:52582 -> xxx.yyy.255.242:139 SYN ******S*
Jan 18 02:04:25 217.117.230.157:52590 -> xxx.yyy.255.248:139 SYN ******S*
Jan 18 02:04:25 217.117.230.157:52589 -> xxx.yyy.255.247:139 SYN ******S*
69269
Jan 18 08:21:45 67.108.156.194:3599 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 18 08:21:45 67.108.156.194:3600 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 18 08:21:45 67.108.156.194:3601 -> xxx.yyy.1.3:1433 SYN ******S*
Jan 18 08:21:45 67.108.156.194:3602 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 18 08:21:45 67.108.156.194:3603 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 18 08:21:45 67.108.156.194:3604 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 18 08:21:45 67.108.156.194:3605 -> xxx.yyy.1.7:1433 SYN ******S*
Jan 18 08:21:42 67.108.156.194:3607 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
Jan 18 08:33:23 67.108.156.194:2238 -> xxx.yyy.255.238:1433 SYN ******S*
Jan 18 08:33:23 67.108.156.194:2235 -> xxx.yyy.255.235:1433 SYN ******S*
Jan 18 08:33:23 67.108.156.194:2245 -> xxx.yyy.255.245:1433 SYN ******S*
Jan 18 08:33:23 67.108.156.194:2244 -> xxx.yyy.255.244:1433 SYN ******S*
Jan 18 08:33:23 67.108.156.194:2246 -> xxx.yyy.255.246:1433 SYN ******S*
Jan 18 08:33:23 67.108.156.194:2252 -> xxx.yyy.255.252:1433 SYN ******S*
Jan 18 08:33:23 67.108.156.194:2253 -> xxx.yyy.255.253:1433 SYN ******S*
Jan 18 08:33:23 67.108.156.194:2254 -> xxx.yyy.255.254:1433 SYN ******S*
63815
Jan 18 14:08:26 82.233.27.93:4855 -> xxx.yyy.1.1:6129 SYN ******S*
Jan 18 14:08:25 82.233.27.93:4859 -> xxx.yyy.1.4:6129 SYN ******S*
Jan 18 14:08:25 82.233.27.93:4863 -> xxx.yyy.1.8:6129 SYN ******S*
Jan 18 14:08:28 82.233.27.93:4865 -> xxx.yyy.1.10:6129 SYN ******S*
Jan 18 14:08:28 82.233.27.93:4867 -> xxx.yyy.1.12:6129 SYN ******S*
Jan 18 14:08:25 82.233.27.93:4870 -> xxx.yyy.1.15:6129 SYN ******S*
Jan 18 14:08:25 82.233.27.93:4872 -> xxx.yyy.1.17:6129 SYN ******S*
Jan 18 14:08:25 82.233.27.93:4873 -> xxx.yyy.1.18:6129 SYN ******S*
[...]
Jan 18 14:32:35 82.233.27.93:3811 -> xxx.yyy.255.239:6129 SYN ******S*
Jan 18 14:32:35 82.233.27.93:3802 -> xxx.yyy.255.234:6129 SYN ******S*
Jan 18 14:32:35 82.233.27.93:3812 -> xxx.yyy.255.240:6129 SYN ******S*
Jan 18 14:32:35 82.233.27.93:3820 -> xxx.yyy.255.247:6129 SYN ******S*
Jan 18 14:32:35 82.233.27.93:3817 -> xxx.yyy.255.244:6129 SYN ******S*
Jan 18 14:32:35 82.233.27.93:3813 -> xxx.yyy.255.241:6129 SYN ******S*
Jan 18 14:32:35 82.233.27.93:3821 -> xxx.yyy.255.248:6129 SYN ******S*
Jan 18 14:32:35 82.233.27.93:3827 -> xxx.yyy.255.253:6129 SYN ******S*
49192
Jan 18 01:23:16 193.171.249.30:4873 -> xxx.yyy.1.1:3306 SYN ******S*
Jan 18 01:23:18 193.171.249.30:4877 -> xxx.yyy.1.2:3306 SYN ******S*
Jan 18 01:23:16 193.171.249.30:4878 -> xxx.yyy.1.3:3306 SYN ******S*
Jan 18 01:23:19 193.171.249.30:4879 -> xxx.yyy.1.4:3306 SYN ******S*
Jan 18 01:23:19 193.171.249.30:4883 -> xxx.yyy.1.6:3306 SYN ******S*
Jan 18 01:23:16 193.171.249.30:4884 -> xxx.yyy.1.7:3306 SYN ******S*
Jan 18 01:23:16 193.171.249.30:4886 -> xxx.yyy.1.9:3306 SYN ******S*
Jan 18 01:23:16 193.171.249.30:4887 -> xxx.yyy.1.10:3306 SYN ******S*
[...]
Jan 18 01:34:17 193.171.249.30:1219 -> xxx.yyy.255.205:3306 SYN ******S*
Jan 18 01:34:17 193.171.249.30:1235 -> xxx.yyy.255.219:3306 SYN ******S*
Jan 18 01:34:17 193.171.249.30:1226 -> xxx.yyy.255.210:3306 SYN ******S*
Jan 18 01:34:17 193.171.249.30:1245 -> xxx.yyy.255.229:3306 SYN ******S*
Jan 18 01:34:17 193.171.249.30:1239 -> xxx.yyy.255.223:3306 SYN ******S*
Jan 18 01:34:17 193.171.249.30:1236 -> xxx.yyy.255.220:3306 SYN ******S*
Jan 18 01:34:18 193.171.249.30:1267 -> xxx.yyy.255.251:3306 SYN ******S*
Jan 18 01:34:18 193.171.249.30:1268 -> xxx.yyy.255.252:3306 SYN ******S*
46181
Jan 18 14:44:31 216.26.144.159:2460 -> xxx.yyy.1.1:4899 SYN ******S*
Jan 18 14:44:30 216.26.144.159:2461 -> xxx.yyy.1.2:4899 SYN ******S*
Jan 18 14:44:31 216.26.144.159:2462 -> xxx.yyy.1.3:4899 SYN ******S*
Jan 18 14:44:33 216.26.144.159:2463 -> xxx.yyy.1.4:4899 SYN ******S*
Jan 18 14:44:33 216.26.144.159:2464 -> xxx.yyy.1.5:4899 SYN ******S*
Jan 18 14:44:33 216.26.144.159:2469 -> xxx.yyy.1.10:4899 SYN ******S*
Jan 18 14:44:30 216.26.144.159:2476 -> xxx.yyy.1.17:4899 SYN ******S*
Jan 18 14:44:31 216.26.144.159:2479 -> xxx.yyy.1.20:4899 SYN ******S*
[...]
Jan 18 15:09:20 216.26.144.159:1242 -> xxx.yyy.255.177:4899 SYN ******S*
Jan 18 15:09:20 216.26.144.159:1226 -> xxx.yyy.255.161:4899 SYN ******S*
Jan 18 15:09:20 216.26.144.159:1306 -> xxx.yyy.255.241:4899 SYN ******S*
Jan 18 15:09:20 216.26.144.159:1316 -> xxx.yyy.255.251:4899 SYN ******S*
Jan 18 15:09:20 216.26.144.159:1284 -> xxx.yyy.255.219:4899 SYN ******S*
Jan 18 15:09:20 216.26.144.159:1255 -> xxx.yyy.255.190:4899 SYN ******S*
Jan 18 15:09:20 216.26.144.159:1290 -> xxx.yyy.255.225:4899 SYN ******S*
Jan 18 15:09:20 216.26.144.159:1258 -> xxx.yyy.255.193:4899 SYN ******S*
36514
[...]
35372
Jan 18 08:32:57 221.146.64.200:2561 -> xxx.yyy.1.4:4899 SYN ******S*
Jan 18 08:32:59 221.146.64.200:2558 -> xxx.yyy.1.1:4899 SYN ******S*
Jan 18 08:32:59 221.146.64.200:2559 -> xxx.yyy.1.2:4899 SYN ******S*
Jan 18 08:32:57 221.146.64.200:2564 -> xxx.yyy.1.7:4899 SYN ******S*
Jan 18 08:32:59 221.146.64.200:2566 -> xxx.yyy.1.9:4899 SYN ******S*
Jan 18 08:32:59 221.146.64.200:2568 -> xxx.yyy.1.11:4899 SYN ******S*
Jan 18 08:32:57 221.146.64.200:2563 -> xxx.yyy.1.6:4899 SYN ******S*
Jan 18 08:32:57 221.146.64.200:2570 -> xxx.yyy.1.13:4899 SYN ******S*
[...]
Jan 18 08:36:11 221.146.64.200:4022 -> xxx.yyy.253.61:4899 SYN ******S*
Jan 18 08:36:11 221.146.64.200:3909 -> xxx.yyy.253.3:4899 SYN ******S*
Jan 18 08:36:11 221.146.64.200:4040 -> xxx.yyy.253.71:4899 SYN ******S*
Jan 18 08:36:11 221.146.64.200:4058 -> xxx.yyy.253.80:4899 SYN ******S*
Jan 18 08:36:11 221.146.64.200:4042 -> xxx.yyy.253.73:4899 SYN ******S*
Jan 18 08:36:11 221.146.64.200:4003 -> xxx.yyy.253.51:4899 SYN ******S*
Jan 18 08:36:13 221.146.64.200:4630 -> xxx.yyy.254.58:4899 SYN ******S*
Jan 18 08:36:13 221.146.64.200:4638 -> xxx.yyy.254.59:4899 SYN ******S*
Jan 18 08:36:13 221.146.64.200:4645 -> xxx.yyy.254.60:4899 SYN ******S*
33396
Jan 18 13:43:09 210.90.78.170:3859 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 18 13:43:06 210.90.78.170:3862 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 18 13:43:06 210.90.78.170:3864 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 18 13:43:09 210.90.78.170:3866 -> xxx.yyy.1.8:1433 SYN ******S*
Jan 18 13:43:07 210.90.78.170:3869 -> xxx.yyy.1.11:1433 SYN ******S*
Jan 18 13:43:07 210.90.78.170:3870 -> xxx.yyy.1.12:1433 SYN ******S*
Jan 18 13:43:07 210.90.78.170:3875 -> xxx.yyy.1.17:1433 SYN ******S*
Jan 18 13:43:10 210.90.78.170:3876 -> xxx.yyy.1.18:1433 SYN ******S*
[...]
Jan 18 13:54:19 210.90.78.170:4745 -> xxx.yyy.255.230:1433 SYN ******S*
Jan 18 13:54:19 210.90.78.170:4741 -> xxx.yyy.255.226:1433 SYN ******S*
Jan 18 13:54:19 210.90.78.170:4744 -> xxx.yyy.255.229:1433 SYN ******S*
Jan 18 13:54:19 210.90.78.170:4747 -> xxx.yyy.255.232:1433 SYN ******S*
Jan 18 13:54:19 210.90.78.170:4740 -> xxx.yyy.255.225:1433 SYN ******S*
Jan 18 13:54:19 210.90.78.170:4752 -> xxx.yyy.255.237:1433 SYN ******S*
Jan 18 13:54:19 210.90.78.170:4764 -> xxx.yyy.255.249:1433 SYN ******S*
Jan 18 13:54:19 210.90.78.170:4759 -> xxx.yyy.255.244:1433 SYN ******S*
Jan 18 13:54:19 210.90.78.170:4767 -> xxx.yyy.255.252:1433 SYN ******S*
33135
Jan 18 07:52:55 82.51.13.170:3632 -> xxx.yyy.1.0:6588 SYN ******S*
Jan 18 07:52:55 82.51.13.170:3633 -> xxx.yyy.1.0:443 SYN ******S*
Jan 18 07:52:55 82.51.13.170:3634 -> xxx.yyy.1.0:8021 SYN ******S*
Jan 18 07:52:55 82.51.13.170:3635 -> xxx.yyy.1.0:8888 SYN ******S*
Jan 18 07:52:55 82.51.13.170:3637 -> xxx.yyy.1.1:80 SYN ******S*
Jan 18 07:52:55 82.51.13.170:3638 -> xxx.yyy.1.1:1080 SYN ******S*
Jan 18 07:52:55 82.51.13.170:3639 -> xxx.yyy.1.1:3128 SYN ******S*
Jan 18 07:52:55 82.51.13.170:3641 -> xxx.yyy.1.1:6588 SYN ******S*
[...]
Jan 18 08:53:36 82.51.13.170:1055 -> xxx.yyy.14.41:80 SYN ******S*
Jan 18 08:53:37 82.51.13.170:1062 -> xxx.yyy.16.6:443 SYN ******S*
Jan 18 08:53:37 82.51.13.170:1082 -> xxx.yyy.16.8:80 SYN ******S*
Jan 18 08:53:37 82.51.13.170:1086 -> xxx.yyy.16.9:80 SYN ******S*
Jan 18 08:53:37 82.51.13.170:1095 -> xxx.yyy.16.10:80 SYN ******S*
Jan 18 08:53:37 82.51.13.170:4940 -> xxx.yyy.1.29:443 SYN ******S*
Jan 18 08:53:37 82.51.13.170:1109 -> xxx.yyy.1.62:80 SYN ******S*
Jan 18 08:53:39 82.51.13.170:1029 -> xxx.yyy.1.61:443 SYN ******S*
Jan 18 08:53:39 82.51.13.170:1153 -> xxx.yyy.16.11:443 SYN ******S*
31341
Jan 18 00:00:04 61.152.226.114:30853 -> xxx.yyy.191.46:1433 SYN ******S*
Jan 18 00:00:05 61.152.226.114:34457 -> xxx.yyy.191.16:1433 SYN ******S*
Jan 18 00:00:05 61.152.226.114:31420 -> xxx.yyy.191.50:1433 SYN ******S*
Jan 18 00:00:05 61.152.226.114:30622 -> xxx.yyy.191.52:1433 SYN ******S*
Jan 18 00:00:05 61.152.226.114:30699 -> xxx.yyy.191.53:1433 SYN ******S*
Jan 18 00:00:05 61.152.226.114:34475 -> xxx.yyy.191.61:1433 SYN ******S*
Jan 18 00:00:05 61.152.226.114:33872 -> xxx.yyy.191.65:1433 SYN ******S*
Jan 18 00:00:08 61.152.226.114:34262 -> xxx.yyy.191.67:1433 SYN ******S*
[...]
Jan 18 00:58:19 61.152.226.114:43191 -> xxx.yyy.255.245:1433 SYN ******S*
Jan 18 00:58:19 61.152.226.114:45542 -> xxx.yyy.255.246:1433 SYN ******S*
Jan 18 00:58:19 61.152.226.114:46199 -> xxx.yyy.255.247:1433 SYN ******S*
Jan 18 00:58:19 61.152.226.114:45364 -> xxx.yyy.255.248:1433 SYN ******S*
Jan 18 00:58:19 61.152.226.114:40580 -> xxx.yyy.255.249:1433 SYN ******S*
Jan 18 00:58:20 61.152.226.114:41080 -> xxx.yyy.255.251:1433 SYN ******S*
Jan 18 00:58:20 61.152.226.114:40209 -> xxx.yyy.255.253:1433 SYN ******S*
Jan 18 00:58:20 61.152.226.114:44107 -> xxx.yyy.255.252:1433 SYN ******S*
Jan 18 00:58:20 61.152.226.114:44738 -> xxx.yyy.255.254:1433 SYN ******S*
27696
Jan 18 12:36:34 193.248.217.124:3780 -> xxx.yyy.91.251:1433 SYN ******S*
Jan 18 12:36:34 193.248.217.124:3786 -> xxx.yyy.91.253:1433 SYN ******S*
Jan 18 12:36:31 193.248.217.124:3829 -> xxx.yyy.92.9:1433 SYN ******S*
Jan 18 12:36:31 193.248.217.124:3832 -> xxx.yyy.92.10:1433 SYN ******S*
Jan 18 12:36:31 193.248.217.124:3844 -> xxx.yyy.92.14:1433 SYN ******S*
Jan 18 12:36:31 193.248.217.124:3841 -> xxx.yyy.92.13:1433 SYN ******S*
Jan 18 12:36:31 193.248.217.124:3847 -> xxx.yyy.92.15:1433 SYN ******S*
Jan 18 12:36:31 193.248.217.124:3859 -> xxx.yyy.92.19:1433 SYN ******S*
[...]
Jan 18 14:23:51 193.248.217.124:4659 -> xxx.yyy.210.211:1433 SYN ******S*
Jan 18 14:23:51 193.248.217.124:4695 -> xxx.yyy.210.217:1433 SYN ******S*
Jan 18 14:23:51 193.248.217.124:4587 -> xxx.yyy.210.200:1433 SYN ******S*
Jan 18 14:23:51 193.248.217.124:4881 -> xxx.yyy.210.238:1433 SYN ******S*
Jan 18 14:23:51 193.248.217.124:4678 -> xxx.yyy.210.214:1433 SYN ******S*
Jan 18 14:23:51 193.248.217.124:4882 -> xxx.yyy.210.239:1433 SYN ******S*
Jan 18 14:23:51 193.248.217.124:4885 -> xxx.yyy.210.240:1433 SYN ******S*
Jan 18 14:23:51 193.248.217.124:4693 -> xxx.yyy.210.216:1433 SYN ******S*
Jan 18 14:23:52 193.248.217.124:4790 -> xxx.yyy.210.227:1433 SYN ******S*
26237
Jan 18 15:50:37 194.219.232.8:4340 -> xxx.yyy.1.3:21 SYN ******S*
Jan 18 15:50:37 194.219.232.8:4341 -> xxx.yyy.1.4:21 SYN ******S*
Jan 18 15:50:37 194.219.232.8:4343 -> xxx.yyy.1.6:21 SYN ******S*
Jan 18 15:50:37 194.219.232.8:4342 -> xxx.yyy.1.5:21 SYN ******S*
Jan 18 15:50:37 194.219.232.8:4344 -> xxx.yyy.1.7:21 SYN ******S*
Jan 18 15:50:37 194.219.232.8:4347 -> xxx.yyy.1.10:21 SYN ******S*
Jan 18 15:50:37 194.219.232.8:4349 -> xxx.yyy.1.12:21 SYN ******S*
Jan 18 15:50:37 194.219.232.8:4350 -> xxx.yyy.1.13:21 SYN ******S*
[...]
Jan 18 16:10:33 194.219.232.8:3731 -> xxx.yyy.255.148:21 SYN ******S*
Jan 18 16:10:34 194.219.232.8:3760 -> xxx.yyy.255.177:21 SYN ******S*
Jan 18 16:10:34 194.219.232.8:3824 -> xxx.yyy.255.241:21 SYN ******S*
Jan 18 16:10:34 194.219.232.8:3792 -> xxx.yyy.255.209:21 SYN ******S*
Jan 18 16:10:34 194.219.232.8:3834 -> xxx.yyy.255.251:21 SYN ******S*
Jan 18 16:10:34 194.219.232.8:3802 -> xxx.yyy.255.219:21 SYN ******S*
Jan 18 16:10:34 194.219.232.8:3770 -> xxx.yyy.255.187:21 SYN ******S*
Jan 18 16:10:34 194.219.232.8:3786 -> xxx.yyy.255.203:21 SYN ******S*
Jan 18 16:10:34 194.219.232.8:3777 -> xxx.yyy.255.194:21 SYN ******S*
21129
Jan 18 11:18:13 62.166.141.60:41147 -> xxx.yyy.1.1:139 SYN ******S*
Jan 18 11:18:14 62.166.141.60:41149 -> xxx.yyy.1.3:139 SYN ******S*
Jan 18 11:18:14 62.166.141.60:41150 -> xxx.yyy.1.4:139 SYN ******S*
Jan 18 11:18:14 62.166.141.60:41151 -> xxx.yyy.1.5:139 SYN ******S*
Jan 18 11:18:14 62.166.141.60:41152 -> xxx.yyy.1.6:139 SYN ******S*
Jan 18 11:18:14 62.166.141.60:41154 -> xxx.yyy.1.8:139 SYN ******S*
Jan 18 11:18:14 62.166.141.60:41155 -> xxx.yyy.1.9:139 SYN ******S*
Jan 18 11:18:14 62.166.141.60:41157 -> xxx.yyy.1.11:139 SYN ******S*
[...]
Jan 18 11:30:18 62.166.141.60:41994 -> xxx.yyy.255.224:139 SYN ******S*
Jan 18 11:30:18 62.166.141.60:41995 -> xxx.yyy.255.225:139 SYN ******S*
Jan 18 11:30:18 62.166.141.60:41997 -> xxx.yyy.255.227:139 SYN ******S*
Jan 18 11:30:18 62.166.141.60:42003 -> xxx.yyy.255.232:139 SYN ******S*
Jan 18 11:30:18 62.166.141.60:42013 -> xxx.yyy.255.242:139 SYN ******S*
Jan 18 11:30:18 62.166.141.60:42014 -> xxx.yyy.255.243:139 SYN ******S*
Jan 18 11:30:18 62.166.141.60:42019 -> xxx.yyy.255.248:139 SYN ******S*
Jan 18 11:30:18 62.166.141.60:42020 -> xxx.yyy.255.249:139 SYN ******S*
Jan 18 11:30:18 62.166.141.60:42023 -> xxx.yyy.255.252:139 SYN ******S*
20734
Jan 18 14:54:34 200.213.207.211:2511 -> xxx.yyy.1.0:17300 SYN ******S*
Jan 18 14:54:36 200.213.207.211:2718 -> xxx.yyy.1.6:17300 SYN ******S*
Jan 18 14:54:36 200.213.207.211:2722 -> xxx.yyy.1.10:17300 SYN ******S*
Jan 18 14:54:36 200.213.207.211:2724 -> xxx.yyy.1.12:17300 SYN ******S*
Jan 18 14:54:36 200.213.207.211:2730 -> xxx.yyy.1.18:17300 SYN ******S*
Jan 18 14:54:38 200.213.207.211:2731 -> xxx.yyy.1.19:17300 SYN ******S*
Jan 18 14:54:37 200.213.207.211:2714 -> xxx.yyy.1.2:17300 SYN ******S*
Jan 18 14:54:38 200.213.207.211:2715 -> xxx.yyy.1.3:17300 SYN ******S*
[...]
Jan 18 16:48:02 200.213.207.211:3258 -> xxx.yyy.254.240:17300 SYN ******S*
Jan 18 16:48:02 200.213.207.211:3260 -> xxx.yyy.254.242:17300 SYN ******S*
Jan 18 16:48:02 200.213.207.211:3261 -> xxx.yyy.254.243:17300 SYN ******S*
Jan 18 16:48:02 200.213.207.211:3264 -> xxx.yyy.254.246:17300 SYN ******S*
Jan 18 16:48:02 200.213.207.211:3267 -> xxx.yyy.254.249:17300 SYN ******S*
Jan 18 16:48:02 200.213.207.211:3268 -> xxx.yyy.254.250:17300 SYN ******S*
Jan 18 16:48:02 200.213.207.211:3269 -> xxx.yyy.254.251:17300 SYN ******S*
Jan 18 16:48:03 200.213.207.211:3471 -> xxx.yyy.254.253:17300 SYN ******S*
20316
Jan 18 22:20:42 221.255.121.203:2483 -> xxx.yyy.1.1:1433 SYN ******S*
Jan 18 22:20:42 221.255.121.203:2486 -> xxx.yyy.1.4:1433 SYN ******S*
Jan 18 22:20:42 221.255.121.203:2487 -> xxx.yyy.1.5:1433 SYN ******S*
Jan 18 22:20:42 221.255.121.203:2490 -> xxx.yyy.1.6:1433 SYN ******S*
Jan 18 22:20:42 221.255.121.203:2491 -> xxx.yyy.1.7:1433 SYN ******S*
Jan 18 22:20:42 221.255.121.203:2493 -> xxx.yyy.1.9:1433 SYN ******S*
Jan 18 22:20:42 221.255.121.203:2498 -> xxx.yyy.1.14:1433 SYN ******S*
Jan 18 22:20:42 221.255.121.203:2495 -> xxx.yyy.1.11:1433 SYN ******S*
[...]
Jan 18 22:31:22 221.255.121.203:2458 -> xxx.yyy.255.232:1433 SYN ******S*
Jan 18 22:31:22 221.255.121.203:2460 -> xxx.yyy.255.234:1433 SYN ******S*
Jan 18 22:31:22 221.255.121.203:2464 -> xxx.yyy.255.238:1433 SYN ******S*
Jan 18 22:31:22 221.255.121.203:2471 -> xxx.yyy.255.245:1433 SYN ******S*
Jan 18 22:31:22 221.255.121.203:2473 -> xxx.yyy.255.247:1433 SYN ******S*
Jan 18 22:31:22 221.255.121.203:2474 -> xxx.yyy.255.248:1433 SYN ******S*
Jan 18 22:31:22 221.255.121.203:2475 -> xxx.yyy.255.249:1433 SYN ******S*
Jan 18 22:31:22 221.255.121.203:2478 -> xxx.yyy.255.252:1433 SYN ******S*
Jan 18 22:31:22 221.255.121.203:2480 -> xxx.yyy.255.253:1433 SYN ******S*
19219
Jan 18 07:24:50 221.9.35.208:4018 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 18 07:24:51 221.9.35.208:3380 -> xxx.yyy.1.16:1433 SYN ******S*
Jan 18 07:24:51 221.9.35.208:3226 -> xxx.yyy.1.27:1433 SYN ******S*
Jan 18 07:24:51 221.9.35.208:3684 -> xxx.yyy.1.30:1433 SYN ******S*
Jan 18 07:24:52 221.9.35.208:3555 -> xxx.yyy.1.36:1433 SYN ******S*
Jan 18 07:24:52 221.9.35.208:3294 -> xxx.yyy.1.37:1433 SYN ******S*
Jan 18 07:24:52 221.9.35.208:4194 -> xxx.yyy.1.38:1433 SYN ******S*
Jan 18 07:24:52 221.9.35.208:3500 -> xxx.yyy.1.39:1433 SYN ******S*
[...]
Jan 18 08:23:12 221.9.35.208:4234 -> xxx.yyy.111.246:1433 SYN ******S*
Jan 18 08:23:13 221.9.35.208:4979 -> xxx.yyy.111.247:1433 SYN ******S*
Jan 18 08:23:13 221.9.35.208:4976 -> xxx.yyy.111.248:1433 SYN ******S*
Jan 18 08:23:13 221.9.35.208:4180 -> xxx.yyy.111.249:1433 SYN ******S*
Jan 18 08:23:14 221.9.35.208:4342 -> xxx.yyy.111.251:1433 SYN ******S*
Jan 18 08:23:14 221.9.35.208:3509 -> xxx.yyy.111.250:1433 SYN ******S*
Jan 18 08:23:14 221.9.35.208:3273 -> xxx.yyy.111.254:1433 SYN ******S*
Jan 18 08:23:14 221.9.35.208:3377 -> xxx.yyy.111.255:1433 SYN ******S*
16781
Jan 18 11:53:25 207.18.68.225:80 -> xxx.yyy.1.3:80 SYN ******S*
Jan 18 11:53:25 207.18.68.225:80 -> xxx.yyy.1.12:80 SYN ******S*
Jan 18 11:53:26 207.18.68.225:56868 -> xxx.yyy.1.15:80 SYN ******S*
Jan 18 11:53:26 207.18.68.225:56773 -> xxx.yyy.1.17:80 SYN ******S*
Jan 18 11:53:26 207.18.68.225:56790 -> xxx.yyy.1.20:80 SYN ******S*
Jan 18 11:53:27 207.18.68.225:56893 -> xxx.yyy.1.27:80 SYN ******S*
Jan 18 11:53:25 207.18.68.225:80 -> xxx.yyy.1.49:80 SYN ******S*
Jan 18 11:53:25 207.18.68.225:80 -> xxx.yyy.1.51:80 SYN ******S*
[...]
Jan 18 11:55:02 207.18.68.225:57517 -> xxx.yyy.220.98:80 SYN ******S*
Jan 18 11:55:02 207.18.68.225:57518 -> xxx.yyy.220.68:80 SYN ******S*
Jan 18 11:55:07 207.18.68.225:57529 -> xxx.yyy.248.33:80 SYN ******S*
Jan 18 11:55:07 207.18.68.225:57531 -> xxx.yyy.248.45:80 SYN ******S*
Jan 18 11:55:07 207.18.68.225:57535 -> xxx.yyy.248.165:80 SYN ******S*
Jan 18 11:55:10 207.18.68.225:57537 -> xxx.yyy.210.5:80 SYN ******S*
Jan 18 11:55:12 207.18.68.225:57538 -> xxx.yyy.220.98:80 SYN ******S*
Jan 18 11:55:12 207.18.68.225:57539 -> xxx.yyy.220.68:80 SYN ******S*
15020
[...]
14415
[...]
13043
Jan 18 11:44:32 66.139.75.22:2091 -> xxx.yyy.1.2:3306 SYN ******S*
Jan 18 11:44:32 66.139.75.22:2094 -> xxx.yyy.1.5:3306 SYN ******S*
Jan 18 11:44:32 66.139.75.22:2095 -> xxx.yyy.1.6:3306 SYN ******S*
Jan 18 11:44:32 66.139.75.22:2089 -> xxx.yyy.1.0:3306 SYN ******S*
Jan 18 11:44:32 66.139.75.22:2097 -> xxx.yyy.1.8:3306 SYN ******S*
Jan 18 11:44:32 66.139.75.22:2099 -> xxx.yyy.1.10:3306 SYN ******S*
Jan 18 11:44:32 66.139.75.22:2090 -> xxx.yyy.1.1:3306 SYN ******S*
Jan 18 11:44:32 66.139.75.22:2096 -> xxx.yyy.1.7:3306 SYN ******S*
[...]
Jan 18 12:47:37 66.139.75.22:2169 -> xxx.yyy.128.26:3306 SYN ******S*
Jan 18 12:47:36 66.139.75.22:2219 -> xxx.yyy.224.141:3306 SYN ******S*
Jan 18 12:47:35 66.139.75.22:2189 -> xxx.yyy.236.23:3306 SYN ******S*
Jan 18 12:47:35 66.139.75.22:2193 -> xxx.yyy.237.7:3306 SYN ******S*
Jan 18 12:47:35 66.139.75.22:2190 -> xxx.yyy.236.24:3306 SYN ******S*
Jan 18 12:47:36 66.139.75.22:2238 -> xxx.yyy.236.22:3306 SYN ******S*
Jan 18 12:47:37 66.139.75.22:2262 -> xxx.yyy.226.9:3306 SYN ******S*
Jan 18 12:47:37 66.139.75.22:2263 -> xxx.yyy.212.75:3306 SYN ******S*
12535
Jan 18 01:04:55 218.59.177.205:3162 -> xxx.yyy.1.2:1433 SYN ******S*
Jan 18 01:04:54 218.59.177.205:3857 -> xxx.yyy.1.15:1433 SYN ******S*
Jan 18 01:04:54 218.59.177.205:4464 -> xxx.yyy.1.16:1433 SYN ******S*
Jan 18 01:04:54 218.59.177.205:4828 -> xxx.yyy.1.17:1433 SYN ******S*
Jan 18 01:04:56 218.59.177.205:3947 -> xxx.yyy.1.10:1433 SYN ******S*
Jan 18 01:04:57 218.59.177.205:4156 -> xxx.yyy.1.39:1433 SYN ******S*
Jan 18 01:05:00 218.59.177.205:3388 -> xxx.yyy.1.38:1433 SYN ******S*
Jan 18 01:05:01 218.59.177.205:3162 -> xxx.yyy.1.2:1433 SYN ******S*
[...]
Jan 18 02:56:21 218.59.177.205:4008 -> xxx.yyy.255.161:1433 SYN ******S*
Jan 18 02:56:22 218.59.177.205:3588 -> xxx.yyy.255.229:1433 SYN ******S*
Jan 18 02:56:22 218.59.177.205:4972 -> xxx.yyy.255.230:1433 SYN ******S*
Jan 18 02:56:24 218.59.177.205:3604 -> xxx.yyy.255.194:1433 SYN ******S*
Jan 18 02:56:25 218.59.177.205:3063 -> xxx.yyy.255.206:1433 SYN ******S*
Jan 18 02:56:26 218.59.177.205:3684 -> xxx.yyy.255.218:1433 SYN ******S*
Jan 18 02:56:28 218.59.177.205:3588 -> xxx.yyy.255.229:1433 SYN ******S*
Jan 18 02:56:28 218.59.177.205:4972 -> xxx.yyy.255.230:1433 SYN ******S*
10600
Jan 18 23:50:43 221.203.232.174:3469 -> xxx.yyy.236.78:5554 SYN ******S*
Jan 18 23:50:45 221.203.232.174:4452 -> xxx.yyy.236.78:9898 SYN ******S*
Jan 18 23:50:43 221.203.232.174:3471 -> xxx.yyy.236.77:5554 SYN ******S*
Jan 18 23:50:46 221.203.232.174:4468 -> xxx.yyy.236.77:9898 SYN ******S*
Jan 18 23:50:43 221.203.232.174:3476 -> xxx.yyy.236.248:5554 SYN ******S*
Jan 18 23:50:44 221.203.232.174:3819 -> xxx.yyy.236.248:1023 SYN ******S*
Jan 18 23:50:46 221.203.232.174:4471 -> xxx.yyy.236.248:9898 SYN ******S*
Jan 18 23:50:43 221.203.232.174:3486 -> xxx.yyy.236.250:5554 SYN ******S*
[...]
Jan 18 23:52:49 221.203.232.174:2101 -> xxx.yyy.236.232:9898 SYN ******S*
Jan 18 23:52:49 221.203.232.174:2110 -> xxx.yyy.236.230:9898 SYN ******S*
Jan 18 23:52:49 221.203.232.174:2114 -> xxx.yyy.236.235:9898 SYN ******S*
Jan 18 23:52:49 221.203.232.174:2122 -> xxx.yyy.236.239:9898 SYN ******S*
Jan 18 23:52:49 221.203.232.174:2123 -> xxx.yyy.236.236:9898 SYN ******S*
Jan 18 23:52:49 221.203.232.174:2128 -> xxx.yyy.236.234:9898 SYN ******S*
Jan 18 23:52:49 221.203.232.174:2127 -> xxx.yyy.236.240:9898 SYN ******S*
Jan 18 23:52:49 221.203.232.174:2137 -> xxx.yyy.236.242:9898 SYN ******S*
Jan 18 23:52:49 221.203.232.174:2138 -> xxx.yyy.236.245:9898 SYN ******S*
9708
Jan 18 23:48:52 218.61.13.138:3850 -> xxx.yyy.154.100:5554 SYN ******S*
Jan 18 23:48:53 218.61.13.138:4453 -> xxx.yyy.154.100:1023 SYN ******S*
Jan 18 23:48:55 218.61.13.138:1644 -> xxx.yyy.154.100:9898 SYN ******S*
Jan 18 23:48:52 218.61.13.138:3852 -> xxx.yyy.154.102:5554 SYN ******S*
Jan 18 23:48:53 218.61.13.138:4455 -> xxx.yyy.154.102:1023 SYN ******S*
Jan 18 23:48:52 218.61.13.138:3853 -> xxx.yyy.154.103:5554 SYN ******S*
Jan 18 23:48:53 218.61.13.138:4456 -> xxx.yyy.154.103:1023 SYN ******S*
Jan 18 23:48:55 218.61.13.138:1647 -> xxx.yyy.154.103:9898 SYN ******S*
[...]
Jan 18 23:49:37 218.61.13.138:1658 -> xxx.yyy.174.213:9898 SYN ******S*
Jan 18 23:49:37 218.61.13.138:1659 -> xxx.yyy.174.214:9898 SYN ******S*
Jan 18 23:49:37 218.61.13.138:1657 -> xxx.yyy.174.212:9898 SYN ******S*
Jan 18 23:49:37 218.61.13.138:1660 -> xxx.yyy.174.215:9898 SYN ******S*
Jan 18 23:49:37 218.61.13.138:1662 -> xxx.yyy.174.217:9898 SYN ******S*
Jan 18 23:49:37 218.61.13.138:1661 -> xxx.yyy.174.216:9898 SYN ******S*
Jan 18 23:49:37 218.61.13.138:1664 -> xxx.yyy.174.219:9898 SYN ******S*
Jan 18 23:49:37 218.61.13.138:1665 -> xxx.yyy.174.220:9898 SYN ******S*
Jan 18 23:49:37 218.61.13.138:1666 -> xxx.yyy.174.221:9898 SYN ******S*
9004
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list