[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Wed Mar 9 13:11:24 GMT 2005
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Mar 8 11:22:36 219.120.143.220:1037 -> xxx.yyy.1.0:1433 SYN ******S*
Mar 8 11:22:40 219.120.143.220:1042 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 8 11:22:37 219.120.143.220:1050 -> xxx.yyy.1.8:1433 SYN ******S*
Mar 8 11:22:38 219.120.143.220:1080 -> xxx.yyy.1.20:1433 SYN ******S*
Mar 8 11:22:38 219.120.143.220:1083 -> xxx.yyy.1.21:1433 SYN ******S*
Mar 8 11:22:38 219.120.143.220:1088 -> xxx.yyy.1.23:1433 SYN ******S*
Mar 8 11:22:38 219.120.143.220:1091 -> xxx.yyy.1.24:1433 SYN ******S*
Mar 8 11:22:38 219.120.143.220:1093 -> xxx.yyy.1.25:1433 SYN ******S*
[...]
Mar 8 16:11:23 219.120.143.220:3037 -> xxx.yyy.255.232:1433 SYN ******S*
Mar 8 16:11:24 219.120.143.220:3085 -> xxx.yyy.255.235:1433 SYN ******S*
Mar 8 16:11:25 219.120.143.220:3111 -> xxx.yyy.255.237:1433 SYN ******S*
Mar 8 16:11:26 219.120.143.220:3134 -> xxx.yyy.255.241:1433 SYN ******S*
Mar 8 16:11:26 219.120.143.220:3141 -> xxx.yyy.255.242:1433 SYN ******S*
Mar 8 16:11:26 219.120.143.220:3154 -> xxx.yyy.255.244:1433 SYN ******S*
Mar 8 16:11:26 219.120.143.220:3172 -> xxx.yyy.255.248:1433 SYN ******S*
Mar 8 16:11:27 219.120.143.220:3201 -> xxx.yyy.255.252:1433 SYN ******S*
Mar 8 16:11:28 219.120.143.220:3210 -> xxx.yyy.255.254:1433 SYN ******S*
97810
Mar 8 00:15:19 24.143.19.113:4753 -> xxx.yyy.64.3:1433 SYN ******S*
Mar 8 00:15:22 24.143.19.113:4759 -> xxx.yyy.64.7:1433 SYN ******S*
Mar 8 00:15:22 24.143.19.113:4760 -> xxx.yyy.64.8:1433 SYN ******S*
Mar 8 00:15:22 24.143.19.113:4761 -> xxx.yyy.64.9:1433 SYN ******S*
Mar 8 00:15:22 24.143.19.113:4767 -> xxx.yyy.64.11:1433 SYN ******S*
Mar 8 00:15:19 24.143.19.113:4787 -> xxx.yyy.64.16:1433 SYN ******S*
Mar 8 00:15:22 24.143.19.113:4793 -> xxx.yyy.64.19:1433 SYN ******S*
Mar 8 00:15:21 24.143.19.113:4749 -> xxx.yyy.64.0:1433 SYN ******S*
[...]
Mar 8 03:07:37 24.143.19.113:3731 -> xxx.yyy.255.245:1433 SYN ******S*
Mar 8 03:07:37 24.143.19.113:3760 -> xxx.yyy.255.247:1433 SYN ******S*
Mar 8 03:07:37 24.143.19.113:3764 -> xxx.yyy.255.248:1433 SYN ******S*
Mar 8 03:07:38 24.143.19.113:3768 -> xxx.yyy.255.250:1433 SYN ******S*
Mar 8 03:07:38 24.143.19.113:3766 -> xxx.yyy.255.249:1433 SYN ******S*
Mar 8 03:07:38 24.143.19.113:3770 -> xxx.yyy.255.251:1433 SYN ******S*
Mar 8 03:07:38 24.143.19.113:3777 -> xxx.yyy.255.252:1433 SYN ******S*
Mar 8 03:07:38 24.143.19.113:3798 -> xxx.yyy.255.253:1433 SYN ******S*
Mar 8 03:07:38 24.143.19.113:3807 -> xxx.yyy.255.254:1433 SYN ******S*
79778
Mar 8 04:02:10 222.144.90.205:1537 -> xxx.yyy.1.0:1433 SYN ******S*
Mar 8 04:02:10 222.144.90.205:1538 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 8 04:02:10 222.144.90.205:1541 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 8 04:02:10 222.144.90.205:1539 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 8 04:02:10 222.144.90.205:1543 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 8 04:02:07 222.144.90.205:1540 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 8 04:02:10 222.144.90.205:1544 -> xxx.yyy.1.6:1433 SYN ******S*
Mar 8 04:02:10 222.144.90.205:1545 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Mar 8 06:49:19 222.144.90.205:3295 -> xxx.yyy.187.128:1433 SYN ******S*
Mar 8 06:49:19 222.144.90.205:3298 -> xxx.yyy.187.131:1433 SYN ******S*
Mar 8 06:49:19 222.144.90.205:3296 -> xxx.yyy.187.129:1433 SYN ******S*
Mar 8 06:49:19 222.144.90.205:3297 -> xxx.yyy.187.130:1433 SYN ******S*
Mar 8 06:49:19 222.144.90.205:3164 -> xxx.yyy.187.54:1433 SYN ******S*
Mar 8 06:49:19 222.144.90.205:3163 -> xxx.yyy.187.53:1433 SYN ******S*
Mar 8 06:49:19 222.144.90.205:3168 -> xxx.yyy.187.56:1433 SYN ******S*
Mar 8 06:49:19 222.144.90.205:3167 -> xxx.yyy.187.55:1433 SYN ******S*
72557
Mar 8 07:52:31 200.216.205.189:28444 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 8 07:52:28 200.216.205.189:28445 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 8 07:52:31 200.216.205.189:28447 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 8 07:52:31 200.216.205.189:28448 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 8 07:52:31 200.216.205.189:28449 -> xxx.yyy.1.6:1433 SYN ******S*
Mar 8 07:52:31 200.216.205.189:28450 -> xxx.yyy.1.7:1433 SYN ******S*
Mar 8 07:52:31 200.216.205.189:28452 -> xxx.yyy.1.9:1433 SYN ******S*
Mar 8 07:52:31 200.216.205.189:28454 -> xxx.yyy.1.11:1433 SYN ******S*
[...]
Mar 8 08:03:33 200.216.205.189:34953 -> xxx.yyy.255.228:1433 SYN ******S*
Mar 8 08:03:33 200.216.205.189:34954 -> xxx.yyy.255.229:1433 SYN ******S*
Mar 8 08:03:34 200.216.205.189:34959 -> xxx.yyy.255.234:1433 SYN ******S*
Mar 8 08:03:34 200.216.205.189:34961 -> xxx.yyy.255.236:1433 SYN ******S*
Mar 8 08:03:34 200.216.205.189:34965 -> xxx.yyy.255.240:1433 SYN ******S*
Mar 8 08:03:34 200.216.205.189:34974 -> xxx.yyy.255.247:1433 SYN ******S*
Mar 8 08:03:34 200.216.205.189:34978 -> xxx.yyy.255.251:1433 SYN ******S*
Mar 8 08:03:34 200.216.205.189:34980 -> xxx.yyy.255.253:1433 SYN ******S*
53962
Mar 8 02:57:41 67.41.154.187:1261 -> xxx.yyy.1.1:6101 SYN ******S*
Mar 8 02:57:41 67.41.154.187:1262 -> xxx.yyy.1.2:6101 SYN ******S*
Mar 8 02:57:41 67.41.154.187:1263 -> xxx.yyy.1.3:6101 SYN ******S*
Mar 8 02:57:41 67.41.154.187:1264 -> xxx.yyy.1.4:6101 SYN ******S*
Mar 8 02:57:41 67.41.154.187:1265 -> xxx.yyy.1.5:6101 SYN ******S*
Mar 8 02:57:41 67.41.154.187:1267 -> xxx.yyy.1.7:6101 SYN ******S*
Mar 8 02:57:41 67.41.154.187:1268 -> xxx.yyy.1.8:6101 SYN ******S*
Mar 8 02:57:38 67.41.154.187:1270 -> xxx.yyy.1.10:6101 SYN ******S*
[...]
Mar 8 03:09:32 67.41.154.187:4089 -> xxx.yyy.255.246:6101 SYN ******S*
Mar 8 03:09:32 67.41.154.187:4090 -> xxx.yyy.255.247:6101 SYN ******S*
Mar 8 03:09:32 67.41.154.187:4091 -> xxx.yyy.255.248:6101 SYN ******S*
Mar 8 03:09:32 67.41.154.187:4092 -> xxx.yyy.255.249:6101 SYN ******S*
Mar 8 03:09:32 67.41.154.187:4093 -> xxx.yyy.255.250:6101 SYN ******S*
Mar 8 03:09:32 67.41.154.187:4094 -> xxx.yyy.255.251:6101 SYN ******S*
Mar 8 03:09:32 67.41.154.187:4095 -> xxx.yyy.255.252:6101 SYN ******S*
Mar 8 03:09:29 67.41.154.187:4096 -> xxx.yyy.255.253:6101 SYN ******S*
Mar 8 03:09:32 67.41.154.187:4097 -> xxx.yyy.255.254:6101 SYN ******S*
42627
Mar 8 06:49:51 222.144.92.50:3714 -> xxx.yyy.187.233:1433 SYN ******S*
Mar 8 06:49:49 222.144.92.50:3731 -> xxx.yyy.187.234:1433 SYN ******S*
Mar 8 06:49:52 222.144.92.50:3734 -> xxx.yyy.187.235:1433 SYN ******S*
Mar 8 06:49:52 222.144.92.50:3741 -> xxx.yyy.187.236:1433 SYN ******S*
Mar 8 06:49:53 222.144.92.50:3744 -> xxx.yyy.187.237:1433 SYN ******S*
Mar 8 06:49:53 222.144.92.50:3748 -> xxx.yyy.187.238:1433 SYN ******S*
Mar 8 06:49:53 222.144.92.50:3754 -> xxx.yyy.187.239:1433 SYN ******S*
Mar 8 06:49:53 222.144.92.50:3755 -> xxx.yyy.187.240:1433 SYN ******S*
[...]
Mar 8 07:50:57 222.144.92.50:1949 -> xxx.yyy.255.241:1433 SYN ******S*
Mar 8 07:50:57 222.144.92.50:1951 -> xxx.yyy.255.242:1433 SYN ******S*
Mar 8 07:50:57 222.144.92.50:1954 -> xxx.yyy.255.243:1433 SYN ******S*
Mar 8 07:50:58 222.144.92.50:1956 -> xxx.yyy.255.244:1433 SYN ******S*
Mar 8 07:50:58 222.144.92.50:1958 -> xxx.yyy.255.245:1433 SYN ******S*
Mar 8 07:50:58 222.144.92.50:1967 -> xxx.yyy.255.247:1433 SYN ******S*
Mar 8 07:50:58 222.144.92.50:1970 -> xxx.yyy.255.248:1433 SYN ******S*
Mar 8 07:50:58 222.144.92.50:1977 -> xxx.yyy.255.251:1433 SYN ******S*
Mar 8 07:50:59 222.144.92.50:1984 -> xxx.yyy.255.254:1433 SYN ******S*
42388
Mar 8 20:42:13 209.42.72.252:4719 -> xxx.yyy.1.3:6101 SYN ******S*
Mar 8 20:42:16 209.42.72.252:4721 -> xxx.yyy.1.4:6101 SYN ******S*
Mar 8 20:42:14 209.42.72.252:4766 -> xxx.yyy.1.9:6101 SYN ******S*
Mar 8 20:42:14 209.42.72.252:4771 -> xxx.yyy.1.11:6101 SYN ******S*
Mar 8 20:42:14 209.42.72.252:4775 -> xxx.yyy.1.12:6101 SYN ******S*
Mar 8 20:42:17 209.42.72.252:4796 -> xxx.yyy.1.18:6101 SYN ******S*
Mar 8 20:42:17 209.42.72.252:4800 -> xxx.yyy.1.19:6101 SYN ******S*
Mar 8 20:42:17 209.42.72.252:4803 -> xxx.yyy.1.20:6101 SYN ******S*
[...]
Mar 8 20:53:56 209.42.72.252:1554 -> xxx.yyy.255.241:6101 SYN ******S*
Mar 8 20:53:56 209.42.72.252:1560 -> xxx.yyy.255.244:6101 SYN ******S*
Mar 8 20:53:56 209.42.72.252:1566 -> xxx.yyy.255.247:6101 SYN ******S*
Mar 8 20:53:56 209.42.72.252:1556 -> xxx.yyy.255.242:6101 SYN ******S*
Mar 8 20:53:56 209.42.72.252:1562 -> xxx.yyy.255.245:6101 SYN ******S*
Mar 8 20:53:56 209.42.72.252:1568 -> xxx.yyy.255.248:6101 SYN ******S*
Mar 8 20:53:56 209.42.72.252:1580 -> xxx.yyy.255.254:6101 SYN ******S*
Mar 8 20:53:56 209.42.72.252:1576 -> xxx.yyy.255.252:6101 SYN ******S*
Mar 8 20:53:56 209.42.72.252:1578 -> xxx.yyy.255.253:6101 SYN ******S*
37311
Mar 8 22:10:00 207.15.147.132:2964 -> xxx.yyy.1.36:6101 SYN ******S*
Mar 8 22:10:00 207.15.147.132:2965 -> xxx.yyy.1.37:6101 SYN ******S*
Mar 8 22:10:00 207.15.147.132:2966 -> xxx.yyy.1.38:6101 SYN ******S*
Mar 8 22:10:00 207.15.147.132:2967 -> xxx.yyy.1.39:6101 SYN ******S*
Mar 8 22:10:00 207.15.147.132:2968 -> xxx.yyy.1.40:6101 SYN ******S*
Mar 8 22:10:03 207.15.147.132:2970 -> xxx.yyy.1.42:6101 SYN ******S*
Mar 8 22:10:00 207.15.147.132:2971 -> xxx.yyy.1.43:6101 SYN ******S*
Mar 8 22:10:00 207.15.147.132:2975 -> xxx.yyy.1.47:6101 SYN ******S*
[...]
Mar 8 22:22:05 207.15.147.132:2803 -> xxx.yyy.255.237:6101 SYN ******S*
Mar 8 22:22:05 207.15.147.132:2799 -> xxx.yyy.255.233:6101 SYN ******S*
Mar 8 22:22:05 207.15.147.132:2805 -> xxx.yyy.255.239:6101 SYN ******S*
Mar 8 22:22:05 207.15.147.132:2804 -> xxx.yyy.255.238:6101 SYN ******S*
Mar 8 22:22:05 207.15.147.132:2809 -> xxx.yyy.255.243:6101 SYN ******S*
Mar 8 22:22:05 207.15.147.132:2806 -> xxx.yyy.255.240:6101 SYN ******S*
Mar 8 22:22:05 207.15.147.132:2808 -> xxx.yyy.255.242:6101 SYN ******S*
Mar 8 22:22:05 207.15.147.132:2807 -> xxx.yyy.255.241:6101 SYN ******S*
31261
Mar 8 02:56:15 210.5.205.3:4620 -> xxx.yyy.1.10:1433 SYN ******S*
Mar 8 02:56:15 210.5.205.3:4614 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 8 02:56:15 210.5.205.3:4618 -> xxx.yyy.1.8:1433 SYN ******S*
Mar 8 02:56:15 210.5.205.3:4615 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 8 02:56:15 210.5.205.3:4612 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 8 02:56:15 210.5.205.3:4622 -> xxx.yyy.1.12:1433 SYN ******S*
Mar 8 02:56:15 210.5.205.3:4626 -> xxx.yyy.1.16:1433 SYN ******S*
Mar 8 02:56:15 210.5.205.3:4617 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Mar 8 03:27:36 210.5.205.3:4624 -> xxx.yyy.255.222:1433 SYN ******S*
Mar 8 03:27:36 210.5.205.3:4640 -> xxx.yyy.255.238:1433 SYN ******S*
Mar 8 03:27:36 210.5.205.3:4656 -> xxx.yyy.255.254:1433 SYN ******S*
Mar 8 03:27:36 210.5.205.3:4637 -> xxx.yyy.255.235:1433 SYN ******S*
Mar 8 03:27:36 210.5.205.3:4621 -> xxx.yyy.255.219:1433 SYN ******S*
Mar 8 03:27:36 210.5.205.3:4650 -> xxx.yyy.255.248:1433 SYN ******S*
Mar 8 03:27:36 210.5.205.3:4644 -> xxx.yyy.255.242:1433 SYN ******S*
Mar 8 03:27:36 210.5.205.3:4625 -> xxx.yyy.255.223:1433 SYN ******S*
Mar 8 03:27:36 210.5.205.3:4654 -> xxx.yyy.255.252:1433 SYN ******S*
30630
Mar 8 14:25:35 38.118.13.235:1852 -> xxx.yyy.1.5:3306 SYN ******S*
Mar 8 14:25:38 38.118.13.235:1865 -> xxx.yyy.1.12:3306 SYN ******S*
Mar 8 14:25:35 38.118.13.235:1867 -> xxx.yyy.1.13:3306 SYN ******S*
Mar 8 14:25:35 38.118.13.235:1873 -> xxx.yyy.1.16:3306 SYN ******S*
Mar 8 14:25:35 38.118.13.235:1887 -> xxx.yyy.1.23:3306 SYN ******S*
Mar 8 14:25:36 38.118.13.235:1897 -> xxx.yyy.1.28:3306 SYN ******S*
Mar 8 14:25:38 38.118.13.235:1907 -> xxx.yyy.1.33:3306 SYN ******S*
Mar 8 14:25:36 38.118.13.235:1909 -> xxx.yyy.1.34:3306 SYN ******S*
[...]
Mar 8 14:34:24 38.118.13.235:3477 -> xxx.yyy.255.143:3306 SYN ******S*
Mar 8 14:34:24 38.118.13.235:3532 -> xxx.yyy.255.153:3306 SYN ******S*
Mar 8 14:34:24 38.118.13.235:3524 -> xxx.yyy.255.151:3306 SYN ******S*
Mar 8 14:34:24 38.118.13.235:3503 -> xxx.yyy.255.148:3306 SYN ******S*
Mar 8 14:34:24 38.118.13.235:3650 -> xxx.yyy.255.171:3306 SYN ******S*
Mar 8 14:34:24 38.118.13.235:3678 -> xxx.yyy.255.179:3306 SYN ******S*
Mar 8 14:34:24 38.118.13.235:3705 -> xxx.yyy.255.189:3306 SYN ******S*
Mar 8 14:34:24 38.118.13.235:3697 -> xxx.yyy.255.187:3306 SYN ******S*
Mar 8 14:34:24 38.118.13.235:3717 -> xxx.yyy.255.190:3306 SYN ******S*
29571
Mar 8 16:31:05 128.30.108.180:3514 -> xxx.yyy.1.6:42867 SYN ******S*
Mar 8 16:31:05 128.30.108.180:3515 -> xxx.yyy.1.7:42867 SYN ******S*
Mar 8 16:31:06 128.30.108.180:3518 -> xxx.yyy.1.8:42867 SYN ******S*
Mar 8 16:31:06 128.30.108.180:3522 -> xxx.yyy.1.9:42867 SYN ******S*
Mar 8 16:31:05 128.30.108.180:3523 -> xxx.yyy.1.10:42867 SYN ******S*
Mar 8 16:31:05 128.30.108.180:3526 -> xxx.yyy.1.11:42867 SYN ******S*
Mar 8 16:31:06 128.30.108.180:3540 -> xxx.yyy.1.19:42867 SYN ******S*
Mar 8 16:31:06 128.30.108.180:3541 -> xxx.yyy.1.20:42867 SYN ******S*
[...]
Mar 8 16:35:08 128.30.108.180:1145 -> xxx.yyy.255.246:42867 SYN ******S*
Mar 8 16:35:08 128.30.108.180:1142 -> xxx.yyy.255.243:42867 SYN ******S*
Mar 8 16:35:08 128.30.108.180:1151 -> xxx.yyy.255.252:42867 SYN ******S*
Mar 8 16:35:08 128.30.108.180:1135 -> xxx.yyy.255.236:42867 SYN ******S*
Mar 8 16:35:08 128.30.108.180:1148 -> xxx.yyy.255.249:42867 SYN ******S*
Mar 8 16:35:08 128.30.108.180:1152 -> xxx.yyy.255.253:42867 SYN ******S*
Mar 8 16:35:08 128.30.108.180:1136 -> xxx.yyy.255.237:42867 SYN ******S*
Mar 8 16:35:08 128.30.108.180:1139 -> xxx.yyy.255.240:42867 SYN ******S*
Mar 8 16:35:08 128.30.108.180:1149 -> xxx.yyy.255.250:42867 SYN ******S*
24718
Mar 8 11:30:38 221.237.17.184:3022 -> xxx.yyy.1.0:1433 SYN ******S*
Mar 8 11:30:38 221.237.17.184:3027 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 8 11:30:41 221.237.17.184:3028 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 8 11:30:41 221.237.17.184:3030 -> xxx.yyy.1.6:1433 SYN ******S*
Mar 8 11:30:38 221.237.17.184:3044 -> xxx.yyy.1.15:1433 SYN ******S*
Mar 8 11:30:41 221.237.17.184:3045 -> xxx.yyy.1.16:1433 SYN ******S*
Mar 8 11:30:41 221.237.17.184:3046 -> xxx.yyy.1.17:1433 SYN ******S*
Mar 8 11:30:41 221.237.17.184:3052 -> xxx.yyy.1.20:1433 SYN ******S*
[...]
Mar 8 13:57:13 221.237.17.184:4879 -> xxx.yyy.255.221:1433 SYN ******S*
Mar 8 13:57:13 221.237.17.184:4856 -> xxx.yyy.255.220:1433 SYN ******S*
Mar 8 13:57:14 221.237.17.184:4726 -> xxx.yyy.255.224:1433 SYN ******S*
Mar 8 13:57:15 221.237.17.184:3718 -> xxx.yyy.255.231:1433 SYN ******S*
Mar 8 13:57:15 221.237.17.184:4782 -> xxx.yyy.255.233:1433 SYN ******S*
Mar 8 13:57:15 221.237.17.184:3994 -> xxx.yyy.255.232:1433 SYN ******S*
Mar 8 13:57:15 221.237.17.184:3048 -> xxx.yyy.255.236:1433 SYN ******S*
Mar 8 13:57:16 221.237.17.184:3207 -> xxx.yyy.255.240:1433 SYN ******S*
21623
Mar 8 00:00:22 193.171.249.30:4994 -> xxx.yyy.104.1:6129 SYN ******S*
Mar 8 00:00:22 193.171.249.30:1030 -> xxx.yyy.104.6:6129 SYN ******S*
Mar 8 00:00:22 193.171.249.30:1031 -> xxx.yyy.104.7:6129 SYN ******S*
Mar 8 00:00:22 193.171.249.30:1033 -> xxx.yyy.104.9:6129 SYN ******S*
Mar 8 00:00:25 193.171.249.30:1036 -> xxx.yyy.104.12:6129 SYN ******S*
Mar 8 00:00:22 193.171.249.30:1037 -> xxx.yyy.104.13:6129 SYN ******S*
Mar 8 00:00:25 193.171.249.30:1039 -> xxx.yyy.104.15:6129 SYN ******S*
Mar 8 00:00:22 193.171.249.30:1041 -> xxx.yyy.104.17:6129 SYN ******S*
[...]
Mar 8 00:06:56 193.171.249.30:4333 -> xxx.yyy.255.208:6129 SYN ******S*
Mar 8 00:06:56 193.171.249.30:4349 -> xxx.yyy.255.223:6129 SYN ******S*
Mar 8 00:06:56 193.171.249.30:4342 -> xxx.yyy.255.217:6129 SYN ******S*
Mar 8 00:06:56 193.171.249.30:4346 -> xxx.yyy.255.220:6129 SYN ******S*
Mar 8 00:06:56 193.171.249.30:4352 -> xxx.yyy.255.226:6129 SYN ******S*
Mar 8 00:06:56 193.171.249.30:4357 -> xxx.yyy.255.229:6129 SYN ******S*
Mar 8 00:06:56 193.171.249.30:4392 -> xxx.yyy.255.245:6129 SYN ******S*
Mar 8 00:06:56 193.171.249.30:4401 -> xxx.yyy.255.252:6129 SYN ******S*
21485
Mar 8 20:45:10 203.98.14.98:3995 -> xxx.yyy.1.3:139 SYN ******S*
Mar 8 20:45:10 203.98.14.98:3998 -> xxx.yyy.1.6:139 SYN ******S*
Mar 8 20:45:10 203.98.14.98:3997 -> xxx.yyy.1.5:139 SYN ******S*
Mar 8 20:45:11 203.98.14.98:4219 -> xxx.yyy.1.20:139 SYN ******S*
Mar 8 20:45:14 203.98.14.98:4227 -> xxx.yyy.1.28:139 SYN ******S*
Mar 8 20:45:11 203.98.14.98:4216 -> xxx.yyy.1.17:139 SYN ******S*
Mar 8 20:45:11 203.98.14.98:4221 -> xxx.yyy.1.22:139 SYN ******S*
Mar 8 20:45:11 203.98.14.98:4220 -> xxx.yyy.1.21:139 SYN ******S*
[...]
Mar 8 20:53:57 203.98.14.98:1379 -> xxx.yyy.255.247:139 SYN ******S*
Mar 8 20:53:57 203.98.14.98:1384 -> xxx.yyy.255.252:139 SYN ******S*
Mar 8 20:53:57 203.98.14.98:1386 -> xxx.yyy.255.254:139 SYN ******S*
Mar 8 20:53:57 203.98.14.98:1370 -> xxx.yyy.255.238:139 SYN ******S*
Mar 8 20:53:57 203.98.14.98:1365 -> xxx.yyy.255.233:139 SYN ******S*
Mar 8 20:53:57 203.98.14.98:1381 -> xxx.yyy.255.249:139 SYN ******S*
Mar 8 20:53:57 203.98.14.98:1367 -> xxx.yyy.255.235:139 SYN ******S*
Mar 8 20:53:57 203.98.14.98:1383 -> xxx.yyy.255.251:139 SYN ******S*
Mar 8 20:53:57 203.98.14.98:1385 -> xxx.yyy.255.253:139 SYN ******S*
21036
Mar 8 21:33:41 222.90.28.13:16296 -> xxx.yyy.185.207:1433 SYN ******S*
Mar 8 21:33:45 222.90.28.13:26873 -> xxx.yyy.185.251:1433 SYN ******S*
Mar 8 21:33:45 222.90.28.13:26894 -> xxx.yyy.185.253:1433 SYN ******S*
Mar 8 21:33:42 222.90.28.13:26972 -> xxx.yyy.185.254:1433 SYN ******S*
Mar 8 21:33:42 222.90.28.13:9844 -> xxx.yyy.185.218:1433 SYN ******S*
Mar 8 21:33:42 222.90.28.13:17631 -> xxx.yyy.185.219:1433 SYN ******S*
Mar 8 21:33:45 222.90.28.13:27237 -> xxx.yyy.185.255:1433 SYN ******S*
Mar 8 21:33:45 222.90.28.13:63475 -> xxx.yyy.186.0:1433 SYN ******S*
[...]
Mar 8 22:36:36 222.90.28.13:13983 -> xxx.yyy.255.232:1433 SYN ******S*
Mar 8 22:36:36 222.90.28.13:13968 -> xxx.yyy.255.231:1433 SYN ******S*
Mar 8 22:36:37 222.90.28.13:14345 -> xxx.yyy.255.235:1433 SYN ******S*
Mar 8 22:36:38 222.90.28.13:20125 -> xxx.yyy.255.236:1433 SYN ******S*
Mar 8 22:36:39 222.90.28.13:16651 -> xxx.yyy.255.238:1433 SYN ******S*
Mar 8 22:36:39 222.90.28.13:16689 -> xxx.yyy.255.239:1433 SYN ******S*
Mar 8 22:36:41 222.90.28.13:19353 -> xxx.yyy.255.250:1433 SYN ******S*
Mar 8 22:36:41 222.90.28.13:19443 -> xxx.yyy.255.251:1433 SYN ******S*
Mar 8 22:36:42 222.90.28.13:20561 -> xxx.yyy.255.253:1433 SYN ******S*
19575
Mar 8 19:50:26 213.60.94.218:4214 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 8 19:50:23 213.60.94.218:4216 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 8 19:50:23 213.60.94.218:4278 -> xxx.yyy.1.8:1433 SYN ******S*
Mar 8 19:50:26 213.60.94.218:4280 -> xxx.yyy.1.9:1433 SYN ******S*
Mar 8 19:50:23 213.60.94.218:4288 -> xxx.yyy.1.11:1433 SYN ******S*
Mar 8 19:50:26 213.60.94.218:4313 -> xxx.yyy.1.12:1433 SYN ******S*
Mar 8 19:50:26 213.60.94.218:4319 -> xxx.yyy.1.14:1433 SYN ******S*
Mar 8 19:50:26 213.60.94.218:4331 -> xxx.yyy.1.18:1433 SYN ******S*
[...]
Mar 8 21:44:27 213.60.94.218:2450 -> xxx.yyy.128.9:1433 SYN ******S*
Mar 8 21:44:27 213.60.94.218:2446 -> xxx.yyy.128.8:1433 SYN ******S*
Mar 8 21:44:28 213.60.94.218:2501 -> xxx.yyy.128.12:1433 SYN ******S*
Mar 8 21:44:28 213.60.94.218:2530 -> xxx.yyy.128.13:1433 SYN ******S*
Mar 8 21:44:28 213.60.94.218:2553 -> xxx.yyy.128.15:1433 SYN ******S*
Mar 8 21:44:28 213.60.94.218:2626 -> xxx.yyy.128.17:1433 SYN ******S*
Mar 8 21:44:29 213.60.94.218:2708 -> xxx.yyy.128.22:1433 SYN ******S*
Mar 8 21:44:29 213.60.94.218:2899 -> xxx.yyy.128.30:1433 SYN ******S*
Mar 8 21:44:30 213.60.94.218:3238 -> xxx.yyy.128.37:1433 SYN ******S*
18799
Mar 8 21:26:36 65.174.59.51:3177 -> xxx.yyy.111.7:1433 SYN ******S*
Mar 8 21:26:37 65.174.59.51:3188 -> xxx.yyy.111.8:1433 SYN ******S*
Mar 8 21:26:41 65.174.59.51:3285 -> xxx.yyy.111.20:1433 SYN ******S*
Mar 8 21:26:39 65.174.59.51:3399 -> xxx.yyy.111.25:1433 SYN ******S*
Mar 8 21:26:39 65.174.59.51:3410 -> xxx.yyy.111.26:1433 SYN ******S*
Mar 8 21:26:42 65.174.59.51:3568 -> xxx.yyy.111.32:1433 SYN ******S*
Mar 8 21:26:42 65.174.59.51:3540 -> xxx.yyy.111.31:1433 SYN ******S*
Mar 8 21:26:40 65.174.59.51:3696 -> xxx.yyy.111.35:1433 SYN ******S*
[...]
Mar 8 23:52:46 65.174.59.51:3788 -> xxx.yyy.255.224:1433 SYN ******S*
Mar 8 23:52:47 65.174.59.51:4813 -> xxx.yyy.255.247:1433 SYN ******S*
Mar 8 23:52:47 65.174.59.51:4818 -> xxx.yyy.255.248:1433 SYN ******S*
Mar 8 23:52:47 65.174.59.51:4845 -> xxx.yyy.255.250:1433 SYN ******S*
Mar 8 23:52:49 65.174.59.51:4105 -> xxx.yyy.255.232:1433 SYN ******S*
Mar 8 23:52:51 65.174.59.51:4477 -> xxx.yyy.255.238:1433 SYN ******S*
Mar 8 23:52:51 65.174.59.51:4482 -> xxx.yyy.255.239:1433 SYN ******S*
Mar 8 23:52:52 65.174.59.51:4813 -> xxx.yyy.255.247:1433 SYN ******S*
15360
Mar 8 00:03:42 61.248.189.2:32998 -> xxx.yyy.141.119:1433 SYN ******S*
Mar 8 00:03:40 61.248.189.2:33030 -> xxx.yyy.141.129:1433 SYN ******S*
Mar 8 00:03:40 61.248.189.2:33053 -> xxx.yyy.141.135:1433 SYN ******S*
Mar 8 00:03:40 61.248.189.2:33054 -> xxx.yyy.141.137:1433 SYN ******S*
Mar 8 00:03:40 61.248.189.2:33058 -> xxx.yyy.141.139:1433 SYN ******S*
Mar 8 00:03:40 61.248.189.2:33067 -> xxx.yyy.141.141:1433 SYN ******S*
Mar 8 00:03:43 61.248.189.2:33075 -> xxx.yyy.141.143:1433 SYN ******S*
Mar 8 00:03:40 61.248.189.2:33145 -> xxx.yyy.141.157:1433 SYN ******S*
[...]
Mar 8 00:33:22 61.248.189.2:17580 -> xxx.yyy.255.211:1433 SYN ******S*
Mar 8 00:33:22 61.248.189.2:18758 -> xxx.yyy.255.239:1433 SYN ******S*
Mar 8 00:33:22 61.248.189.2:17613 -> xxx.yyy.255.215:1433 SYN ******S*
Mar 8 00:33:22 61.248.189.2:17596 -> xxx.yyy.255.213:1433 SYN ******S*
Mar 8 00:33:22 61.248.189.2:18832 -> xxx.yyy.255.245:1433 SYN ******S*
Mar 8 00:33:22 61.248.189.2:18923 -> xxx.yyy.255.247:1433 SYN ******S*
Mar 8 00:33:24 61.248.189.2:18283 -> xxx.yyy.255.217:1433 SYN ******S*
Mar 8 00:33:25 61.248.189.2:18712 -> xxx.yyy.255.231:1433 SYN ******S*
Mar 8 00:33:25 61.248.189.2:19017 -> xxx.yyy.255.251:1433 SYN ******S*
14368
Mar 8 00:03:42 61.248.189.1:12659 -> xxx.yyy.141.116:1433 SYN ******S*
Mar 8 00:03:42 61.248.189.1:12667 -> xxx.yyy.141.118:1433 SYN ******S*
Mar 8 00:03:42 61.248.189.1:12672 -> xxx.yyy.141.122:1433 SYN ******S*
Mar 8 00:03:40 61.248.189.1:12695 -> xxx.yyy.141.128:1433 SYN ******S*
Mar 8 00:03:40 61.248.189.1:12710 -> xxx.yyy.141.132:1433 SYN ******S*
Mar 8 00:03:40 61.248.189.1:12723 -> xxx.yyy.141.134:1433 SYN ******S*
Mar 8 00:03:43 61.248.189.1:12748 -> xxx.yyy.141.138:1433 SYN ******S*
Mar 8 00:03:40 61.248.189.1:12758 -> xxx.yyy.141.140:1433 SYN ******S*
[...]
Mar 8 00:33:22 61.248.189.1:17381 -> xxx.yyy.255.232:1433 SYN ******S*
Mar 8 00:33:22 61.248.189.1:17414 -> xxx.yyy.255.238:1433 SYN ******S*
Mar 8 00:33:22 61.248.189.1:17433 -> xxx.yyy.255.240:1433 SYN ******S*
Mar 8 00:33:22 61.248.189.1:16242 -> xxx.yyy.255.212:1433 SYN ******S*
Mar 8 00:33:22 61.248.189.1:16240 -> xxx.yyy.255.214:1433 SYN ******S*
Mar 8 00:33:22 61.248.189.1:17645 -> xxx.yyy.255.252:1433 SYN ******S*
Mar 8 00:33:24 61.248.189.1:16926 -> xxx.yyy.255.216:1433 SYN ******S*
Mar 8 00:33:24 61.248.189.1:16941 -> xxx.yyy.255.218:1433 SYN ******S*
Mar 8 00:33:25 61.248.189.1:17322 -> xxx.yyy.255.226:1433 SYN ******S*
14301
Mar 8 16:52:35 213.60.101.24:4173 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 8 16:52:36 213.60.101.24:4280 -> xxx.yyy.1.18:1433 SYN ******S*
Mar 8 16:52:36 213.60.101.24:4282 -> xxx.yyy.1.19:1433 SYN ******S*
Mar 8 16:52:39 213.60.101.24:4298 -> xxx.yyy.1.20:1433 SYN ******S*
Mar 8 16:52:36 213.60.101.24:4299 -> xxx.yyy.1.21:1433 SYN ******S*
Mar 8 16:52:39 213.60.101.24:4403 -> xxx.yyy.1.28:1433 SYN ******S*
Mar 8 16:52:36 213.60.101.24:4433 -> xxx.yyy.1.29:1433 SYN ******S*
Mar 8 16:52:38 213.60.101.24:4115 -> xxx.yyy.1.0:1433 SYN ******S*
[...]
Mar 8 18:43:53 213.60.101.24:3801 -> xxx.yyy.190.130:1433 SYN ******S*
Mar 8 18:43:53 213.60.101.24:3102 -> xxx.yyy.190.235:1433 SYN ******S*
Mar 8 18:43:53 213.60.101.24:3617 -> xxx.yyy.190.131:1433 SYN ******S*
Mar 8 18:43:53 213.60.101.24:4576 -> xxx.yyy.190.135:1433 SYN ******S*
Mar 8 18:43:54 213.60.101.24:3842 -> xxx.yyy.190.141:1433 SYN ******S*
Mar 8 18:43:55 213.60.101.24:3432 -> xxx.yyy.190.151:1433 SYN ******S*
Mar 8 18:43:55 213.60.101.24:4241 -> xxx.yyy.190.152:1433 SYN ******S*
Mar 8 18:43:55 213.60.101.24:3110 -> xxx.yyy.190.228:1433 SYN ******S*
Mar 8 18:43:55 213.60.101.24:4131 -> xxx.yyy.191.8:1433 SYN ******S*
13440
Mar 8 18:47:56 194.69.214.120:3001 -> xxx.yyy.1.236:6129 SYN ******S*
Mar 8 18:47:56 194.69.214.120:3001 -> xxx.yyy.1.105:6129 SYN ******S*
Mar 8 18:47:56 194.69.214.120:3001 -> xxx.yyy.10.159:6129 SYN ******S*
Mar 8 18:47:56 194.69.214.120:3001 -> xxx.yyy.12.171:6129 SYN ******S*
Mar 8 18:47:56 194.69.214.120:3001 -> xxx.yyy.11.165:6129 SYN ******S*
Mar 8 18:47:56 194.69.214.120:3001 -> xxx.yyy.17.70:6129 SYN ******S*
Mar 8 18:47:56 194.69.214.120:3001 -> xxx.yyy.14.183:6129 SYN ******S*
Mar 8 18:47:56 194.69.214.120:3001 -> xxx.yyy.20.88:6129 SYN ******S*
[...]
Mar 8 20:03:19 194.69.214.120:3001 -> xxx.yyy.211.101:6129 SYN ******S*
Mar 8 20:03:19 194.69.214.120:3001 -> xxx.yyy.210.95:6129 SYN ******S*
Mar 8 20:03:19 194.69.214.120:3001 -> xxx.yyy.210.226:6129 SYN ******S*
Mar 8 20:03:19 194.69.214.120:3001 -> xxx.yyy.205.196:6129 SYN ******S*
Mar 8 20:03:19 194.69.214.120:3001 -> xxx.yyy.207.208:6129 SYN ******S*
Mar 8 20:03:19 194.69.214.120:3001 -> xxx.yyy.206.202:6129 SYN ******S*
Mar 8 20:03:19 194.69.214.120:3001 -> xxx.yyy.207.77:6129 SYN ******S*
Mar 8 20:03:19 194.69.214.120:3001 -> xxx.yyy.212.107:6129 SYN ******S*
12061
Mar 8 20:48:52 80.121.41.154:4611 -> xxx.yyy.1.0:1433 SYN ******S*
Mar 8 20:48:52 80.121.41.154:4618 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 8 20:48:52 80.121.41.154:3165 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 8 20:48:55 80.121.41.154:3281 -> xxx.yyy.1.6:1433 SYN ******S*
Mar 8 20:48:52 80.121.41.154:3607 -> xxx.yyy.1.13:1433 SYN ******S*
Mar 8 20:48:52 80.121.41.154:4448 -> xxx.yyy.1.16:1433 SYN ******S*
Mar 8 20:48:52 80.121.41.154:4547 -> xxx.yyy.1.17:1433 SYN ******S*
Mar 8 20:48:53 80.121.41.154:3137 -> xxx.yyy.1.39:1433 SYN ******S*
[...]
Mar 8 22:00:05 80.121.41.154:3040 -> xxx.yyy.255.246:1433 SYN ******S*
Mar 8 22:00:05 80.121.41.154:3121 -> xxx.yyy.255.247:1433 SYN ******S*
Mar 8 22:00:05 80.121.41.154:4517 -> xxx.yyy.255.180:1433 SYN ******S*
Mar 8 22:00:05 80.121.41.154:3033 -> xxx.yyy.255.248:1433 SYN ******S*
Mar 8 22:00:05 80.121.41.154:3161 -> xxx.yyy.255.249:1433 SYN ******S*
Mar 8 22:00:07 80.121.41.154:3795 -> xxx.yyy.255.192:1433 SYN ******S*
Mar 8 22:00:08 80.121.41.154:3060 -> xxx.yyy.255.195:1433 SYN ******S*
Mar 8 22:00:09 80.121.41.154:3460 -> xxx.yyy.255.197:1433 SYN ******S*
Mar 8 22:00:10 80.121.41.154:4650 -> xxx.yyy.255.240:1433 SYN ******S*
9448
[...]
9362
Mar 8 20:46:33 83.165.113.159:3916 -> xxx.yyy.1.27:1433 SYN ******S*
Mar 8 20:46:33 83.165.113.159:4016 -> xxx.yyy.1.55:1433 SYN ******S*
Mar 8 20:46:36 83.165.113.159:4041 -> xxx.yyy.1.60:1433 SYN ******S*
Mar 8 20:46:37 83.165.113.159:4118 -> xxx.yyy.1.88:1433 SYN ******S*
Mar 8 20:46:34 83.165.113.159:3043 -> xxx.yyy.1.108:1433 SYN ******S*
Mar 8 20:46:35 83.165.113.159:3513 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 8 20:46:36 83.165.113.159:3171 -> xxx.yyy.1.181:1433 SYN ******S*
Mar 8 20:46:36 83.165.113.159:3821 -> xxx.yyy.1.191:1433 SYN ******S*
[...]
Mar 8 21:31:56 83.165.113.159:4853 -> xxx.yyy.255.174:1433 SYN ******S*
Mar 8 21:31:57 83.165.113.159:3476 -> xxx.yyy.255.182:1433 SYN ******S*
Mar 8 21:31:57 83.165.113.159:3993 -> xxx.yyy.255.195:1433 SYN ******S*
Mar 8 21:31:57 83.165.113.159:3323 -> xxx.yyy.255.209:1433 SYN ******S*
Mar 8 21:31:58 83.165.113.159:4299 -> xxx.yyy.255.218:1433 SYN ******S*
Mar 8 21:31:58 83.165.113.159:4589 -> xxx.yyy.255.227:1433 SYN ******S*
Mar 8 21:31:58 83.165.113.159:4651 -> xxx.yyy.255.239:1433 SYN ******S*
Mar 8 21:31:59 83.165.113.159:3979 -> xxx.yyy.255.251:1433 SYN ******S*
9132
Mar 8 07:11:06 222.78.170.114:4079 -> xxx.yyy.1.0:1433 SYN ******S*
Mar 8 07:11:03 222.78.170.114:4081 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 8 07:11:06 222.78.170.114:4082 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 8 07:11:07 222.78.170.114:4084 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 8 07:11:07 222.78.170.114:4086 -> xxx.yyy.1.7:1433 SYN ******S*
Mar 8 07:11:07 222.78.170.114:4087 -> xxx.yyy.1.8:1433 SYN ******S*
Mar 8 07:11:04 222.78.170.114:4088 -> xxx.yyy.1.9:1433 SYN ******S*
Mar 8 07:11:04 222.78.170.114:4089 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
Mar 8 07:33:24 222.78.170.114:3973 -> xxx.yyy.75.115:1433 SYN ******S*
Mar 8 07:33:24 222.78.170.114:4026 -> xxx.yyy.75.169:1433 SYN ******S*
Mar 8 07:33:24 222.78.170.114:4028 -> xxx.yyy.75.171:1433 SYN ******S*
Mar 8 07:33:24 222.78.170.114:3974 -> xxx.yyy.75.118:1433 SYN ******S*
Mar 8 07:33:24 222.78.170.114:3975 -> xxx.yyy.75.117:1433 SYN ******S*
Mar 8 07:33:24 222.78.170.114:4029 -> xxx.yyy.75.173:1433 SYN ******S*
Mar 8 07:33:24 222.78.170.114:4030 -> xxx.yyy.75.172:1433 SYN ******S*
Mar 8 07:33:24 222.78.170.114:3976 -> xxx.yyy.75.119:1433 SYN ******S*
Mar 8 07:33:24 222.78.170.114:3977 -> xxx.yyy.75.120:1433 SYN ******S*
8970
Mar 8 20:03:32 202.127.40.254:45283 -> xxx.yyy.1.6:1433 SYN ******S*
Mar 8 20:03:29 202.127.40.254:45286 -> xxx.yyy.1.7:1433 SYN ******S*
Mar 8 20:03:32 202.127.40.254:45294 -> xxx.yyy.1.9:1433 SYN ******S*
Mar 8 20:03:29 202.127.40.254:45331 -> xxx.yyy.1.24:1433 SYN ******S*
Mar 8 20:03:32 202.127.40.254:45342 -> xxx.yyy.1.27:1433 SYN ******S*
Mar 8 20:03:30 202.127.40.254:45366 -> xxx.yyy.1.39:1433 SYN ******S*
Mar 8 20:03:30 202.127.40.254:45369 -> xxx.yyy.1.41:1433 SYN ******S*
Mar 8 20:03:32 202.127.40.254:45275 -> xxx.yyy.1.3:1433 SYN ******S*
[...]
Mar 8 22:00:10 202.127.40.254:9422 -> xxx.yyy.219.160:1433 SYN ******S*
Mar 8 22:00:07 202.127.40.254:9424 -> xxx.yyy.219.137:1433 SYN ******S*
Mar 8 22:00:07 202.127.40.254:9430 -> xxx.yyy.219.100:1433 SYN ******S*
Mar 8 22:00:07 202.127.40.254:9428 -> xxx.yyy.219.156:1433 SYN ******S*
Mar 8 22:00:07 202.127.40.254:9432 -> xxx.yyy.219.153:1433 SYN ******S*
Mar 8 22:00:07 202.127.40.254:9438 -> xxx.yyy.219.169:1433 SYN ******S*
Mar 8 22:00:10 202.127.40.254:9416 -> xxx.yyy.219.141:1433 SYN ******S*
Mar 8 22:00:10 202.127.40.254:9408 -> xxx.yyy.219.239:1433 SYN ******S*
Mar 8 22:00:10 202.127.40.254:9426 -> xxx.yyy.219.101:1433 SYN ******S*
8808
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list