[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Fri Mar 11 15:08:48 GMT 2005
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Mar 10 00:53:40 221.161.134.190:2301 -> xxx.yyy.1.0:12345 SYN ******S*
Mar 10 00:53:37 221.161.134.190:2303 -> xxx.yyy.1.0:27374 SYN ******S*
Mar 10 00:53:38 221.161.134.190:2305 -> xxx.yyy.1.0:3410 SYN ******S*
Mar 10 00:53:38 221.161.134.190:2304 -> xxx.yyy.1.0:901 SYN ******S*
Mar 10 00:53:40 221.161.134.190:2306 -> xxx.yyy.1.1:12345 SYN ******S*
Mar 10 00:53:40 221.161.134.190:2308 -> xxx.yyy.1.1:27374 SYN ******S*
Mar 10 00:53:39 221.161.134.190:2310 -> xxx.yyy.1.1:3410 SYN ******S*
Mar 10 00:53:39 221.161.134.190:2309 -> xxx.yyy.1.1:901 SYN ******S*
[...]
Mar 10 05:04:22 221.161.134.190:2492 -> xxx.yyy.194.119:901 SYN ******S*
Mar 10 05:04:22 221.161.134.190:2493 -> xxx.yyy.194.119:3410 SYN ******S*
Mar 10 05:04:22 221.161.134.190:2550 -> xxx.yyy.194.134:12345 SYN ******S*
Mar 10 05:04:22 221.161.134.190:2551 -> xxx.yyy.194.134:27374 SYN ******S*
Mar 10 05:04:22 221.161.134.190:2552 -> xxx.yyy.194.134:901 SYN ******S*
Mar 10 05:04:22 221.161.134.190:2553 -> xxx.yyy.194.134:3410 SYN ******S*
Mar 10 05:04:23 221.161.134.190:2554 -> xxx.yyy.194.135:12345 SYN ******S*
Mar 10 05:04:23 221.161.134.190:2555 -> xxx.yyy.194.135:27374 SYN ******S*
185582
Mar 10 00:18:11 66.57.130.143:4645 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 10 00:18:08 66.57.130.143:4649 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 10 00:18:11 66.57.130.143:4656 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 10 00:18:11 66.57.130.143:4660 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 10 00:18:08 66.57.130.143:4668 -> xxx.yyy.1.6:1433 SYN ******S*
Mar 10 00:18:11 66.57.130.143:4676 -> xxx.yyy.1.8:1433 SYN ******S*
Mar 10 00:18:11 66.57.130.143:4679 -> xxx.yyy.1.9:1433 SYN ******S*
Mar 10 00:18:11 66.57.130.143:4680 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
Mar 10 04:14:08 66.57.130.143:3326 -> xxx.yyy.255.244:1433 SYN ******S*
Mar 10 04:14:09 66.57.130.143:3336 -> xxx.yyy.255.247:1433 SYN ******S*
Mar 10 04:14:09 66.57.130.143:3341 -> xxx.yyy.255.248:1433 SYN ******S*
Mar 10 04:14:09 66.57.130.143:3345 -> xxx.yyy.255.249:1433 SYN ******S*
Mar 10 04:14:09 66.57.130.143:3346 -> xxx.yyy.255.250:1433 SYN ******S*
Mar 10 04:14:10 66.57.130.143:3353 -> xxx.yyy.255.251:1433 SYN ******S*
Mar 10 04:14:10 66.57.130.143:3354 -> xxx.yyy.255.252:1433 SYN ******S*
Mar 10 04:14:10 66.57.130.143:3366 -> xxx.yyy.255.253:1433 SYN ******S*
Mar 10 04:14:10 66.57.130.143:3372 -> xxx.yyy.255.254:1433 SYN ******S*
104525
Mar 10 01:19:19 80.55.172.178:3096 -> xxx.yyy.1.2:3306 SYN ******S*
Mar 10 01:19:17 80.55.172.178:3274 -> xxx.yyy.1.6:3306 SYN ******S*
Mar 10 01:19:17 80.55.172.178:3325 -> xxx.yyy.1.7:3306 SYN ******S*
Mar 10 01:19:20 80.55.172.178:3475 -> xxx.yyy.1.8:3306 SYN ******S*
Mar 10 01:19:18 80.55.172.178:4643 -> xxx.yyy.1.10:3306 SYN ******S*
Mar 10 01:19:18 80.55.172.178:4885 -> xxx.yyy.1.15:3306 SYN ******S*
Mar 10 01:19:19 80.55.172.178:3073 -> xxx.yyy.1.16:3306 SYN ******S*
Mar 10 01:19:19 80.55.172.178:3514 -> xxx.yyy.1.19:3306 SYN ******S*
[...]
Mar 10 17:07:51 80.55.172.178:3795 -> xxx.yyy.169.240:3306 SYN ******S*
Mar 10 17:07:51 80.55.172.178:3686 -> xxx.yyy.169.228:3306 SYN ******S*
Mar 10 17:07:51 80.55.172.178:3922 -> xxx.yyy.169.242:3306 SYN ******S*
Mar 10 17:07:51 80.55.172.178:3970 -> xxx.yyy.169.243:3306 SYN ******S*
Mar 10 17:07:52 80.55.172.178:4113 -> xxx.yyy.169.246:3306 SYN ******S*
Mar 10 17:07:52 80.55.172.178:4202 -> xxx.yyy.169.247:3306 SYN ******S*
Mar 10 17:07:53 80.55.172.178:4232 -> xxx.yyy.169.250:3306 SYN ******S*
Mar 10 17:07:54 80.55.172.178:4317 -> xxx.yyy.169.253:3306 SYN ******S*
Mar 10 17:07:54 80.55.172.178:3533 -> xxx.yyy.169.238:3306 SYN ******S*
101287
Mar 10 00:57:00 134.156.42.35:1820 -> xxx.yyy.1.0:1433 SYN ******S*
Mar 10 00:57:00 134.156.42.35:1821 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 10 00:57:00 134.156.42.35:1822 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 10 00:57:00 134.156.42.35:1823 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 10 00:57:03 134.156.42.35:1824 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 10 00:57:03 134.156.42.35:1825 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 10 00:57:03 134.156.42.35:1827 -> xxx.yyy.1.7:1433 SYN ******S*
Mar 10 00:57:03 134.156.42.35:1828 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Mar 10 18:41:37 134.156.42.35:4515 -> xxx.yyy.255.226:1433 SYN ******S*
Mar 10 18:41:37 134.156.42.35:4530 -> xxx.yyy.255.241:1433 SYN ******S*
Mar 10 18:41:37 134.156.42.35:4534 -> xxx.yyy.255.245:1433 SYN ******S*
Mar 10 18:41:37 134.156.42.35:4533 -> xxx.yyy.255.244:1433 SYN ******S*
Mar 10 18:41:37 134.156.42.35:4535 -> xxx.yyy.255.246:1433 SYN ******S*
Mar 10 18:41:39 134.156.42.35:4540 -> xxx.yyy.255.252:1433 SYN ******S*
Mar 10 18:41:39 134.156.42.35:4541 -> xxx.yyy.255.251:1433 SYN ******S*
Mar 10 18:41:39 134.156.42.35:4543 -> xxx.yyy.255.254:1433 SYN ******S*
Mar 10 18:41:39 134.156.42.35:4544 -> xxx.yyy.255.253:1433 SYN ******S*
100302
Mar 10 00:41:12 81.214.71.205:1337 -> xxx.yyy.1.1:3306 SYN ******S*
Mar 10 00:41:09 81.214.71.205:1339 -> xxx.yyy.1.3:3306 SYN ******S*
Mar 10 00:41:09 81.214.71.205:1341 -> xxx.yyy.1.5:3306 SYN ******S*
Mar 10 00:41:12 81.214.71.205:1342 -> xxx.yyy.1.6:3306 SYN ******S*
Mar 10 00:41:12 81.214.71.205:1343 -> xxx.yyy.1.7:3306 SYN ******S*
Mar 10 00:41:12 81.214.71.205:1344 -> xxx.yyy.1.8:3306 SYN ******S*
Mar 10 00:41:09 81.214.71.205:1346 -> xxx.yyy.1.10:3306 SYN ******S*
Mar 10 00:41:09 81.214.71.205:1347 -> xxx.yyy.1.11:3306 SYN ******S*
[...]
Mar 10 02:39:56 81.214.71.205:2674 -> xxx.yyy.255.245:3306 SYN ******S*
Mar 10 02:39:56 81.214.71.205:2675 -> xxx.yyy.255.246:3306 SYN ******S*
Mar 10 02:39:56 81.214.71.205:2676 -> xxx.yyy.255.247:3306 SYN ******S*
Mar 10 02:39:57 81.214.71.205:2677 -> xxx.yyy.255.248:3306 SYN ******S*
Mar 10 02:39:57 81.214.71.205:2678 -> xxx.yyy.255.249:3306 SYN ******S*
Mar 10 02:39:57 81.214.71.205:2679 -> xxx.yyy.255.250:3306 SYN ******S*
Mar 10 02:39:57 81.214.71.205:2680 -> xxx.yyy.255.251:3306 SYN ******S*
Mar 10 02:39:57 81.214.71.205:2681 -> xxx.yyy.255.252:3306 SYN ******S*
Mar 10 02:39:57 81.214.71.205:2682 -> xxx.yyy.255.253:3306 SYN ******S*
96105
Mar 10 17:22:28 207.162.57.107:4369 -> xxx.yyy.1.2:3006 SYN ******S*
Mar 10 17:22:28 207.162.57.107:4373 -> xxx.yyy.1.3:3006 SYN ******S*
Mar 10 17:22:27 207.162.57.107:4377 -> xxx.yyy.1.4:3006 SYN ******S*
Mar 10 17:22:28 207.162.57.107:4397 -> xxx.yyy.1.9:3006 SYN ******S*
Mar 10 17:22:27 207.162.57.107:4405 -> xxx.yyy.1.11:3006 SYN ******S*
Mar 10 17:22:27 207.162.57.107:4409 -> xxx.yyy.1.12:3006 SYN ******S*
Mar 10 17:22:27 207.162.57.107:4421 -> xxx.yyy.1.15:3006 SYN ******S*
Mar 10 17:22:28 207.162.57.107:4425 -> xxx.yyy.1.16:3006 SYN ******S*
[...]
Mar 10 17:35:18 207.162.57.107:1615 -> xxx.yyy.255.226:3306 SYN ******S*
Mar 10 17:35:18 207.162.57.107:1639 -> xxx.yyy.255.238:3306 SYN ******S*
Mar 10 17:35:18 207.162.57.107:1647 -> xxx.yyy.255.242:3306 SYN ******S*
Mar 10 17:35:18 207.162.57.107:1643 -> xxx.yyy.255.240:3306 SYN ******S*
Mar 10 17:35:18 207.162.57.107:1641 -> xxx.yyy.255.239:3306 SYN ******S*
Mar 10 17:35:18 207.162.57.107:1633 -> xxx.yyy.255.235:3306 SYN ******S*
Mar 10 17:35:18 207.162.57.107:1649 -> xxx.yyy.255.243:3306 SYN ******S*
Mar 10 17:35:18 207.162.57.107:1667 -> xxx.yyy.255.252:3306 SYN ******S*
86750
Mar 10 03:48:46 60.13.130.65:2782 -> xxx.yyy.1.0:1433 SYN ******S*
Mar 10 03:48:46 60.13.130.65:2784 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 10 03:48:46 60.13.130.65:2788 -> xxx.yyy.1.6:1433 SYN ******S*
Mar 10 03:48:46 60.13.130.65:2790 -> xxx.yyy.1.8:1433 SYN ******S*
Mar 10 03:48:43 60.13.130.65:2789 -> xxx.yyy.1.7:1433 SYN ******S*
Mar 10 03:48:43 60.13.130.65:2791 -> xxx.yyy.1.9:1433 SYN ******S*
Mar 10 03:48:43 60.13.130.65:2793 -> xxx.yyy.1.11:1433 SYN ******S*
Mar 10 03:48:43 60.13.130.65:2792 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
Mar 10 07:38:36 60.13.130.65:1850 -> xxx.yyy.255.241:1433 SYN ******S*
Mar 10 07:38:36 60.13.130.65:1855 -> xxx.yyy.255.242:1433 SYN ******S*
Mar 10 07:38:37 60.13.130.65:1878 -> xxx.yyy.255.246:1433 SYN ******S*
Mar 10 07:38:37 60.13.130.65:1891 -> xxx.yyy.255.250:1433 SYN ******S*
Mar 10 07:38:37 60.13.130.65:1889 -> xxx.yyy.255.249:1433 SYN ******S*
Mar 10 07:38:37 60.13.130.65:1895 -> xxx.yyy.255.251:1433 SYN ******S*
Mar 10 07:38:38 60.13.130.65:1900 -> xxx.yyy.255.252:1433 SYN ******S*
Mar 10 07:38:38 60.13.130.65:1911 -> xxx.yyy.255.254:1433 SYN ******S*
78054
Mar 10 21:48:43 145.253.125.77:3624 -> xxx.yyy.1.0:4000 SYN ******S*
Mar 10 21:48:43 145.253.125.77:3625 -> xxx.yyy.1.0:6129 SYN ******S*
Mar 10 21:48:43 145.253.125.77:3626 -> xxx.yyy.1.0:6101 SYN ******S*
Mar 10 21:48:43 145.253.125.77:3627 -> xxx.yyy.1.1:4000 SYN ******S*
Mar 10 21:48:43 145.253.125.77:3628 -> xxx.yyy.1.1:6129 SYN ******S*
Mar 10 21:48:43 145.253.125.77:3629 -> xxx.yyy.1.1:6101 SYN ******S*
Mar 10 21:48:43 145.253.125.77:3632 -> xxx.yyy.1.2:6101 SYN ******S*
Mar 10 21:48:43 145.253.125.77:3636 -> xxx.yyy.1.4:4000 SYN ******S*
[...]
Mar 10 21:52:22 145.253.125.77:3637 -> xxx.yyy.255.251:4000 SYN ******S*
Mar 10 21:52:22 145.253.125.77:3638 -> xxx.yyy.255.251:6129 SYN ******S*
Mar 10 21:52:22 145.253.125.77:3639 -> xxx.yyy.255.251:6101 SYN ******S*
Mar 10 21:52:22 145.253.125.77:3645 -> xxx.yyy.255.253:6101 SYN ******S*
Mar 10 21:52:22 145.253.125.77:3644 -> xxx.yyy.255.253:6129 SYN ******S*
Mar 10 21:52:22 145.253.125.77:3646 -> xxx.yyy.255.254:4000 SYN ******S*
Mar 10 21:52:22 145.253.125.77:3647 -> xxx.yyy.255.254:6129 SYN ******S*
Mar 10 21:52:22 145.253.125.77:3648 -> xxx.yyy.255.254:6101 SYN ******S*
73522
Mar 10 03:17:55 218.74.111.105:2432 -> xxx.yyy.64.3:1433 SYN ******S*
Mar 10 03:17:55 218.74.111.105:2440 -> xxx.yyy.64.5:1433 SYN ******S*
Mar 10 03:17:52 218.74.111.105:2442 -> xxx.yyy.64.6:1433 SYN ******S*
Mar 10 03:17:55 218.74.111.105:2456 -> xxx.yyy.64.10:1433 SYN ******S*
Mar 10 03:17:53 218.74.111.105:2460 -> xxx.yyy.64.11:1433 SYN ******S*
Mar 10 03:17:56 218.74.111.105:2511 -> xxx.yyy.64.18:1433 SYN ******S*
Mar 10 03:17:56 218.74.111.105:2514 -> xxx.yyy.64.19:1433 SYN ******S*
Mar 10 03:17:56 218.74.111.105:2516 -> xxx.yyy.64.20:1433 SYN ******S*
[...]
Mar 10 05:40:48 218.74.111.105:1946 -> xxx.yyy.223.100:1433 SYN ******S*
Mar 10 05:40:48 218.74.111.105:1341 -> xxx.yyy.223.82:1433 SYN ******S*
Mar 10 05:40:49 218.74.111.105:1477 -> xxx.yyy.223.88:1433 SYN ******S*
Mar 10 05:40:49 218.74.111.105:1479 -> xxx.yyy.223.89:1433 SYN ******S*
Mar 10 05:40:49 218.74.111.105:1483 -> xxx.yyy.223.90:1433 SYN ******S*
Mar 10 05:40:50 218.74.111.105:1572 -> xxx.yyy.223.96:1433 SYN ******S*
Mar 10 05:40:50 218.74.111.105:1610 -> xxx.yyy.223.97:1433 SYN ******S*
Mar 10 05:40:51 218.74.111.105:1946 -> xxx.yyy.223.100:1433 SYN ******S*
61553
Mar 10 11:07:45 81.59.181.177:3503 -> xxx.yyy.1.0:1433 SYN ******S*
Mar 10 11:07:42 81.59.181.177:3507 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 10 11:07:42 81.59.181.177:3517 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 10 11:07:42 81.59.181.177:3520 -> xxx.yyy.1.8:1433 SYN ******S*
Mar 10 11:07:45 81.59.181.177:3522 -> xxx.yyy.1.9:1433 SYN ******S*
Mar 10 11:07:42 81.59.181.177:3527 -> xxx.yyy.1.14:1433 SYN ******S*
Mar 10 11:07:42 81.59.181.177:3536 -> xxx.yyy.1.19:1433 SYN ******S*
Mar 10 11:07:42 81.59.181.177:3544 -> xxx.yyy.1.21:1433 SYN ******S*
[...]
Mar 10 14:58:32 81.59.181.177:3168 -> xxx.yyy.255.235:1433 SYN ******S*
Mar 10 14:58:33 81.59.181.177:3176 -> xxx.yyy.255.237:1433 SYN ******S*
Mar 10 14:58:33 81.59.181.177:3189 -> xxx.yyy.255.241:1433 SYN ******S*
Mar 10 14:58:33 81.59.181.177:3191 -> xxx.yyy.255.242:1433 SYN ******S*
Mar 10 14:58:33 81.59.181.177:3201 -> xxx.yyy.255.245:1433 SYN ******S*
Mar 10 14:58:33 81.59.181.177:3206 -> xxx.yyy.255.247:1433 SYN ******S*
Mar 10 14:58:33 81.59.181.177:3207 -> xxx.yyy.255.248:1433 SYN ******S*
Mar 10 14:58:34 81.59.181.177:3224 -> xxx.yyy.255.254:1433 SYN ******S*
Mar 10 14:58:34 81.59.181.177:3214 -> xxx.yyy.255.251:1433 SYN ******S*
54903
Mar 10 12:28:42 82.216.77.112:1873 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 10 12:28:40 82.216.77.112:2226 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 10 12:28:44 82.216.77.112:2409 -> xxx.yyy.1.6:1433 SYN ******S*
Mar 10 12:28:42 82.216.77.112:2565 -> xxx.yyy.1.8:1433 SYN ******S*
Mar 10 12:28:43 82.216.77.112:2078 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 10 12:28:46 82.216.77.112:2638 -> xxx.yyy.1.9:1433 SYN ******S*
Mar 10 12:28:45 82.216.77.112:3077 -> xxx.yyy.1.11:1433 SYN ******S*
Mar 10 12:28:45 82.216.77.112:3186 -> xxx.yyy.1.12:1433 SYN ******S*
[...]
Mar 10 23:59:59 82.216.77.112:2844 -> xxx.yyy.225.52:1433 SYN ******S*
Mar 10 23:59:59 82.216.77.112:3450 -> xxx.yyy.225.41:1433 SYN ******S*
Mar 10 23:59:59 82.216.77.112:3292 -> xxx.yyy.225.54:1433 SYN ******S*
Mar 11 00:00:00 82.216.77.112:4462 -> xxx.yyy.225.42:1433 SYN ******S*
Mar 11 00:00:00 82.216.77.112:3711 -> xxx.yyy.225.55:1433 SYN ******S*
Mar 11 00:00:00 82.216.77.112:4684 -> xxx.yyy.225.60:1433 SYN ******S*
Mar 11 00:00:00 82.216.77.112:3521 -> xxx.yyy.225.61:1433 SYN ******S*
Mar 11 00:00:01 82.216.77.112:4042 -> xxx.yyy.225.62:1433 SYN ******S*
Mar 11 00:00:01 82.216.77.112:1142 -> xxx.yyy.225.64:1433 SYN ******S*
52122
Mar 10 01:04:26 134.156.65.9:4595 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 10 01:04:26 134.156.65.9:4596 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 10 01:04:26 134.156.65.9:4597 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 10 01:04:26 134.156.65.9:4598 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 10 01:04:27 134.156.65.9:4602 -> xxx.yyy.1.10:1433 SYN ******S*
Mar 10 01:04:27 134.156.65.9:4603 -> xxx.yyy.1.8:1433 SYN ******S*
Mar 10 01:04:27 134.156.65.9:4601 -> xxx.yyy.1.9:1433 SYN ******S*
Mar 10 01:04:24 134.156.65.9:4604 -> xxx.yyy.1.12:1433 SYN ******S*
[...]
Mar 10 02:11:47 134.156.65.9:3644 -> xxx.yyy.255.241:1433 SYN ******S*
Mar 10 02:11:47 134.156.65.9:3643 -> xxx.yyy.255.242:1433 SYN ******S*
Mar 10 02:11:47 134.156.65.9:3647 -> xxx.yyy.255.245:1433 SYN ******S*
Mar 10 02:11:47 134.156.65.9:3649 -> xxx.yyy.255.246:1433 SYN ******S*
Mar 10 02:11:47 134.156.65.9:3648 -> xxx.yyy.255.247:1433 SYN ******S*
Mar 10 02:11:48 134.156.65.9:3652 -> xxx.yyy.255.250:1433 SYN ******S*
Mar 10 02:11:48 134.156.65.9:3653 -> xxx.yyy.255.251:1433 SYN ******S*
Mar 10 02:11:48 134.156.65.9:3654 -> xxx.yyy.255.252:1433 SYN ******S*
51851
Mar 10 09:19:58 59.33.202.233:1877 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 10 09:19:58 59.33.202.233:1883 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 10 09:20:01 59.33.202.233:1890 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 10 09:19:58 59.33.202.233:1901 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 10 09:20:01 59.33.202.233:1906 -> xxx.yyy.1.6:1433 SYN ******S*
Mar 10 09:20:01 59.33.202.233:1915 -> xxx.yyy.1.7:1433 SYN ******S*
Mar 10 09:20:01 59.33.202.233:1922 -> xxx.yyy.1.8:1433 SYN ******S*
Mar 10 09:19:59 59.33.202.233:1929 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
Mar 10 13:09:21 59.33.202.233:2687 -> xxx.yyy.255.230:1433 SYN ******S*
Mar 10 13:09:21 59.33.202.233:2698 -> xxx.yyy.255.232:1433 SYN ******S*
Mar 10 13:09:21 59.33.202.233:3046 -> xxx.yyy.255.253:1433 SYN ******S*
Mar 10 13:09:21 59.33.202.233:2709 -> xxx.yyy.255.234:1433 SYN ******S*
Mar 10 13:09:21 59.33.202.233:2706 -> xxx.yyy.255.233:1433 SYN ******S*
Mar 10 13:09:22 59.33.202.233:2713 -> xxx.yyy.255.235:1433 SYN ******S*
Mar 10 13:09:22 59.33.202.233:2735 -> xxx.yyy.255.237:1433 SYN ******S*
Mar 10 13:09:24 59.33.202.233:2915 -> xxx.yyy.255.243:1433 SYN ******S*
Mar 10 13:09:24 59.33.202.233:2924 -> xxx.yyy.255.244:1433 SYN ******S*
51577
Mar 10 00:02:28 61.153.214.228:1624 -> xxx.yyy.128.4:1433 SYN ******S*
Mar 10 00:02:25 61.153.214.228:1627 -> xxx.yyy.128.5:1433 SYN ******S*
Mar 10 00:02:25 61.153.214.228:1651 -> xxx.yyy.128.8:1433 SYN ******S*
Mar 10 00:02:25 61.153.214.228:1659 -> xxx.yyy.128.12:1433 SYN ******S*
Mar 10 00:02:25 61.153.214.228:1662 -> xxx.yyy.128.14:1433 SYN ******S*
Mar 10 00:02:25 61.153.214.228:1668 -> xxx.yyy.128.16:1433 SYN ******S*
Mar 10 00:02:28 61.153.214.228:1697 -> xxx.yyy.128.19:1433 SYN ******S*
Mar 10 00:02:26 61.153.214.228:1706 -> xxx.yyy.128.20:1433 SYN ******S*
[...]
Mar 10 01:57:18 61.153.214.228:2661 -> xxx.yyy.255.243:1433 SYN ******S*
Mar 10 01:57:18 61.153.214.228:2679 -> xxx.yyy.255.246:1433 SYN ******S*
Mar 10 01:57:18 61.153.214.228:2680 -> xxx.yyy.255.247:1433 SYN ******S*
Mar 10 01:57:18 61.153.214.228:2693 -> xxx.yyy.255.249:1433 SYN ******S*
Mar 10 01:57:18 61.153.214.228:2692 -> xxx.yyy.255.248:1433 SYN ******S*
Mar 10 01:57:18 61.153.214.228:2696 -> xxx.yyy.255.251:1433 SYN ******S*
Mar 10 01:57:18 61.153.214.228:2695 -> xxx.yyy.255.250:1433 SYN ******S*
Mar 10 01:57:19 61.153.214.228:2708 -> xxx.yyy.255.252:1433 SYN ******S*
51325
Mar 10 19:16:34 128.122.161.81:4069 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 10 19:16:35 128.122.161.81:4072 -> xxx.yyy.1.6:1433 SYN ******S*
Mar 10 19:16:35 128.122.161.81:4075 -> xxx.yyy.1.9:1433 SYN ******S*
Mar 10 19:16:35 128.122.161.81:4076 -> xxx.yyy.1.10:1433 SYN ******S*
Mar 10 19:16:33 128.122.161.81:4078 -> xxx.yyy.1.12:1433 SYN ******S*
Mar 10 19:16:33 128.122.161.81:4079 -> xxx.yyy.1.13:1433 SYN ******S*
Mar 10 19:16:33 128.122.161.81:4082 -> xxx.yyy.1.16:1433 SYN ******S*
Mar 10 19:16:33 128.122.161.81:4084 -> xxx.yyy.1.18:1433 SYN ******S*
[...]
Mar 10 19:27:29 128.122.161.81:2490 -> xxx.yyy.255.202:1433 SYN ******S*
Mar 10 19:27:29 128.122.161.81:2516 -> xxx.yyy.255.228:1433 SYN ******S*
Mar 10 19:27:29 128.122.161.81:2481 -> xxx.yyy.255.193:1433 SYN ******S*
Mar 10 19:27:29 128.122.161.81:2478 -> xxx.yyy.255.190:1433 SYN ******S*
Mar 10 19:27:29 128.122.161.81:2462 -> xxx.yyy.255.174:1433 SYN ******S*
Mar 10 19:27:29 128.122.161.81:2504 -> xxx.yyy.255.216:1433 SYN ******S*
Mar 10 19:27:29 128.122.161.81:2520 -> xxx.yyy.255.232:1433 SYN ******S*
Mar 10 19:27:29 128.122.161.81:2533 -> xxx.yyy.255.245:1433 SYN ******S*
50480
Mar 10 01:26:50 134.156.63.5:4549 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 10 01:26:47 134.156.63.5:4555 -> xxx.yyy.1.9:1433 SYN ******S*
Mar 10 01:26:50 134.156.63.5:4557 -> xxx.yyy.1.10:1433 SYN ******S*
Mar 10 01:26:50 134.156.63.5:4560 -> xxx.yyy.1.15:1433 SYN ******S*
Mar 10 01:26:50 134.156.63.5:4561 -> xxx.yyy.1.14:1433 SYN ******S*
Mar 10 01:26:50 134.156.63.5:4563 -> xxx.yyy.1.16:1433 SYN ******S*
Mar 10 01:26:50 134.156.63.5:4562 -> xxx.yyy.1.17:1433 SYN ******S*
Mar 10 01:26:50 134.156.63.5:4567 -> xxx.yyy.1.21:1433 SYN ******S*
[...]
Mar 10 02:34:47 134.156.63.5:1694 -> xxx.yyy.255.234:1433 SYN ******S*
Mar 10 02:34:47 134.156.63.5:1698 -> xxx.yyy.255.237:1433 SYN ******S*
Mar 10 02:34:47 134.156.63.5:1696 -> xxx.yyy.255.236:1433 SYN ******S*
Mar 10 02:34:47 134.156.63.5:1700 -> xxx.yyy.255.239:1433 SYN ******S*
Mar 10 02:34:47 134.156.63.5:1704 -> xxx.yyy.255.243:1433 SYN ******S*
Mar 10 02:34:47 134.156.63.5:1708 -> xxx.yyy.255.245:1433 SYN ******S*
Mar 10 02:34:48 134.156.63.5:1714 -> xxx.yyy.255.249:1433 SYN ******S*
Mar 10 02:34:48 134.156.63.5:1713 -> xxx.yyy.255.250:1433 SYN ******S*
49961
Mar 10 00:42:36 134.156.12.69:3608 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 10 00:42:33 134.156.12.69:3609 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 10 00:42:33 134.156.12.69:3611 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 10 00:42:36 134.156.12.69:3610 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 10 00:42:36 134.156.12.69:3612 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 10 00:42:36 134.156.12.69:3616 -> xxx.yyy.1.9:1433 SYN ******S*
Mar 10 00:42:36 134.156.12.69:3617 -> xxx.yyy.1.10:1433 SYN ******S*
Mar 10 00:42:34 134.156.12.69:3623 -> xxx.yyy.1.16:1433 SYN ******S*
[...]
Mar 10 01:48:11 134.156.12.69:3563 -> xxx.yyy.255.232:1433 SYN ******S*
Mar 10 01:48:11 134.156.12.69:3565 -> xxx.yyy.255.234:1433 SYN ******S*
Mar 10 01:48:11 134.156.12.69:3569 -> xxx.yyy.255.238:1433 SYN ******S*
Mar 10 01:48:11 134.156.12.69:3571 -> xxx.yyy.255.240:1433 SYN ******S*
Mar 10 01:48:11 134.156.12.69:3570 -> xxx.yyy.255.239:1433 SYN ******S*
Mar 10 01:48:11 134.156.12.69:3572 -> xxx.yyy.255.241:1433 SYN ******S*
Mar 10 01:48:11 134.156.12.69:3573 -> xxx.yyy.255.242:1433 SYN ******S*
Mar 10 01:48:11 134.156.12.69:3578 -> xxx.yyy.255.247:1433 SYN ******S*
Mar 10 01:48:11 134.156.12.69:3577 -> xxx.yyy.255.246:1433 SYN ******S*
49487
Mar 10 00:37:59 134.156.4.33:3063 -> xxx.yyy.1.0:1433 SYN ******S*
Mar 10 00:37:59 134.156.4.33:3066 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 10 00:37:59 134.156.4.33:3067 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 10 00:37:59 134.156.4.33:3068 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 10 00:38:00 134.156.4.33:3072 -> xxx.yyy.1.9:1433 SYN ******S*
Mar 10 00:38:00 134.156.4.33:3071 -> xxx.yyy.1.8:1433 SYN ******S*
Mar 10 00:38:00 134.156.4.33:3073 -> xxx.yyy.1.10:1433 SYN ******S*
Mar 10 00:37:57 134.156.4.33:3074 -> xxx.yyy.1.11:1433 SYN ******S*
[...]
Mar 10 01:43:19 134.156.4.33:4159 -> xxx.yyy.255.250:1433 SYN ******S*
Mar 10 01:43:19 134.156.4.33:4162 -> xxx.yyy.255.252:1433 SYN ******S*
Mar 10 01:43:19 134.156.4.33:4165 -> xxx.yyy.255.254:1433 SYN ******S*
Mar 10 01:43:21 134.156.4.33:4130 -> xxx.yyy.255.227:1433 SYN ******S*
Mar 10 01:43:21 134.156.4.33:4129 -> xxx.yyy.255.225:1433 SYN ******S*
Mar 10 01:43:22 134.156.4.33:4162 -> xxx.yyy.255.252:1433 SYN ******S*
Mar 10 01:43:22 134.156.4.33:4163 -> xxx.yyy.255.253:1433 SYN ******S*
Mar 10 01:43:22 134.156.4.33:4159 -> xxx.yyy.255.250:1433 SYN ******S*
49055
Mar 10 10:11:57 82.37.211.25:3079 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 10 10:11:57 82.37.211.25:3088 -> xxx.yyy.1.10:1433 SYN ******S*
Mar 10 10:11:57 82.37.211.25:3087 -> xxx.yyy.1.9:1433 SYN ******S*
Mar 10 10:11:57 82.37.211.25:3089 -> xxx.yyy.1.11:1433 SYN ******S*
Mar 10 10:11:57 82.37.211.25:3086 -> xxx.yyy.1.8:1433 SYN ******S*
Mar 10 10:11:57 82.37.211.25:3092 -> xxx.yyy.1.12:1433 SYN ******S*
Mar 10 10:11:55 82.37.211.25:3100 -> xxx.yyy.1.16:1433 SYN ******S*
Mar 10 10:11:55 82.37.211.25:3096 -> xxx.yyy.1.14:1433 SYN ******S*
[...]
Mar 10 14:01:05 82.37.211.25:2148 -> xxx.yyy.255.246:1433 SYN ******S*
Mar 10 14:01:05 82.37.211.25:2150 -> xxx.yyy.255.247:1433 SYN ******S*
Mar 10 14:01:05 82.37.211.25:2158 -> xxx.yyy.255.249:1433 SYN ******S*
Mar 10 14:01:05 82.37.211.25:2156 -> xxx.yyy.255.248:1433 SYN ******S*
Mar 10 14:01:05 82.37.211.25:2166 -> xxx.yyy.255.251:1433 SYN ******S*
Mar 10 14:01:05 82.37.211.25:2183 -> xxx.yyy.255.252:1433 SYN ******S*
Mar 10 14:01:06 82.37.211.25:2189 -> xxx.yyy.255.253:1433 SYN ******S*
Mar 10 14:01:06 82.37.211.25:2200 -> xxx.yyy.255.254:1433 SYN ******S*
48759
Mar 10 00:30:45 163.13.92.170:2586 -> xxx.yyy.1.1:6101 SYN ******S*
Mar 10 00:30:45 163.13.92.170:2587 -> xxx.yyy.1.2:6101 SYN ******S*
Mar 10 00:30:45 163.13.92.170:2588 -> xxx.yyy.1.3:6101 SYN ******S*
Mar 10 00:30:45 163.13.92.170:2589 -> xxx.yyy.1.4:6101 SYN ******S*
Mar 10 00:30:45 163.13.92.170:2591 -> xxx.yyy.1.6:6101 SYN ******S*
Mar 10 00:30:42 163.13.92.170:2592 -> xxx.yyy.1.7:6101 SYN ******S*
Mar 10 00:30:45 163.13.92.170:2598 -> xxx.yyy.1.13:6101 SYN ******S*
Mar 10 00:30:45 163.13.92.170:2599 -> xxx.yyy.1.14:6101 SYN ******S*
[...]
Mar 10 00:46:51 163.13.92.170:1854 -> xxx.yyy.255.245:6101 SYN ******S*
Mar 10 00:46:51 163.13.92.170:1856 -> xxx.yyy.255.247:6101 SYN ******S*
Mar 10 00:46:51 163.13.92.170:1860 -> xxx.yyy.255.251:6101 SYN ******S*
Mar 10 00:46:51 163.13.92.170:1843 -> xxx.yyy.255.234:6101 SYN ******S*
Mar 10 00:46:51 163.13.92.170:1847 -> xxx.yyy.255.238:6101 SYN ******S*
Mar 10 00:46:51 163.13.92.170:1851 -> xxx.yyy.255.242:6101 SYN ******S*
Mar 10 00:46:51 163.13.92.170:1859 -> xxx.yyy.255.250:6101 SYN ******S*
Mar 10 00:46:51 163.13.92.170:1842 -> xxx.yyy.255.233:6101 SYN ******S*
Mar 10 00:46:51 163.13.92.170:1857 -> xxx.yyy.255.248:6101 SYN ******S*
46161
Mar 10 12:56:26 213.60.84.110:4287 -> xxx.yyy.1.6:1433 SYN ******S*
Mar 10 12:56:26 213.60.84.110:4262 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 10 12:56:26 213.60.84.110:4327 -> xxx.yyy.1.9:1433 SYN ******S*
Mar 10 12:56:26 213.60.84.110:4338 -> xxx.yyy.1.10:1433 SYN ******S*
Mar 10 12:56:26 213.60.84.110:4257 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 10 12:56:27 213.60.84.110:4485 -> xxx.yyy.1.16:1433 SYN ******S*
Mar 10 12:56:27 213.60.84.110:4356 -> xxx.yyy.1.11:1433 SYN ******S*
Mar 10 12:56:27 213.60.84.110:4459 -> xxx.yyy.1.15:1433 SYN ******S*
[...]
Mar 10 16:45:08 213.60.84.110:3772 -> xxx.yyy.255.251:1433 SYN ******S*
Mar 10 16:45:08 213.60.84.110:4609 -> xxx.yyy.255.253:1433 SYN ******S*
Mar 10 16:45:08 213.60.84.110:4197 -> xxx.yyy.255.230:1433 SYN ******S*
Mar 10 16:45:09 213.60.84.110:3095 -> xxx.yyy.255.233:1433 SYN ******S*
Mar 10 16:45:10 213.60.84.110:3815 -> xxx.yyy.255.235:1433 SYN ******S*
Mar 10 16:45:11 213.60.84.110:4891 -> xxx.yyy.255.239:1433 SYN ******S*
Mar 10 16:45:12 213.60.84.110:3393 -> xxx.yyy.255.242:1433 SYN ******S*
Mar 10 16:45:13 213.60.84.110:3131 -> xxx.yyy.255.247:1433 SYN ******S*
Mar 10 16:45:14 213.60.84.110:4863 -> xxx.yyy.255.254:1433 SYN ******S*
45303
Mar 10 02:06:42 134.156.240.155:2956 -> xxx.yyy.1.0:1433 SYN ******S*
Mar 10 02:06:42 134.156.240.155:2957 -> xxx.yyy.1.1:1433 SYN ******S*
Mar 10 02:06:42 134.156.240.155:2958 -> xxx.yyy.1.2:1433 SYN ******S*
Mar 10 02:06:42 134.156.240.155:2960 -> xxx.yyy.1.3:1433 SYN ******S*
Mar 10 02:06:42 134.156.240.155:2961 -> xxx.yyy.1.4:1433 SYN ******S*
Mar 10 02:06:42 134.156.240.155:2962 -> xxx.yyy.1.5:1433 SYN ******S*
Mar 10 02:06:42 134.156.240.155:2963 -> xxx.yyy.1.6:1433 SYN ******S*
Mar 10 02:06:42 134.156.240.155:2968 -> xxx.yyy.1.11:1433 SYN ******S*
[...]
Mar 10 03:14:41 134.156.240.155:4654 -> xxx.yyy.255.244:1433 SYN ******S*
Mar 10 03:14:41 134.156.240.155:4655 -> xxx.yyy.255.246:1433 SYN ******S*
Mar 10 03:14:42 134.156.240.155:4657 -> xxx.yyy.255.248:1433 SYN ******S*
Mar 10 03:14:42 134.156.240.155:4658 -> xxx.yyy.255.249:1433 SYN ******S*
Mar 10 03:14:42 134.156.240.155:4659 -> xxx.yyy.255.250:1433 SYN ******S*
Mar 10 03:14:42 134.156.240.155:4660 -> xxx.yyy.255.252:1433 SYN ******S*
Mar 10 03:14:42 134.156.240.155:4661 -> xxx.yyy.255.251:1433 SYN ******S*
Mar 10 03:14:42 134.156.240.155:4662 -> xxx.yyy.255.254:1433 SYN ******S*
Mar 10 03:14:42 134.156.240.155:4663 -> xxx.yyy.255.253:1433 SYN ******S*
39835
Mar 10 17:53:46 217.84.33.31:1924 -> xxx.yyy.10.1:1433 SYN ******S*
Mar 10 17:53:46 217.84.33.31:1934 -> xxx.yyy.10.2:1433 SYN ******S*
Mar 10 17:53:49 217.84.33.31:2069 -> xxx.yyy.10.6:1433 SYN ******S*
Mar 10 17:53:49 217.84.33.31:2129 -> xxx.yyy.10.7:1433 SYN ******S*
Mar 10 17:53:49 217.84.33.31:2135 -> xxx.yyy.10.8:1433 SYN ******S*
Mar 10 17:53:46 217.84.33.31:2151 -> xxx.yyy.10.9:1433 SYN ******S*
Mar 10 17:53:49 217.84.33.31:2187 -> xxx.yyy.10.13:1433 SYN ******S*
Mar 10 17:53:47 217.84.33.31:2291 -> xxx.yyy.10.19:1433 SYN ******S*
[...]
Mar 10 20:14:42 217.84.33.31:1970 -> xxx.yyy.255.222:1433 SYN ******S*
Mar 10 20:14:42 217.84.33.31:3501 -> xxx.yyy.255.223:1433 SYN ******S*
Mar 10 20:14:42 217.84.33.31:3750 -> xxx.yyy.255.225:1433 SYN ******S*
Mar 10 20:14:43 217.84.33.31:2231 -> xxx.yyy.255.236:1433 SYN ******S*
Mar 10 20:14:43 217.84.33.31:1374 -> xxx.yyy.255.242:1433 SYN ******S*
Mar 10 20:14:43 217.84.33.31:4501 -> xxx.yyy.255.251:1433 SYN ******S*
Mar 10 20:14:43 217.84.33.31:2743 -> xxx.yyy.255.250:1433 SYN ******S*
Mar 10 20:14:44 217.84.33.31:3104 -> xxx.yyy.255.254:1433 SYN ******S*
37295
Mar 10 10:11:14 65.23.114.185:1843 -> xxx.yyy.1.9:4000 SYN ******S*
Mar 10 10:11:14 65.23.114.185:1851 -> xxx.yyy.1.17:4000 SYN ******S*
Mar 10 10:11:13 65.23.114.185:1856 -> xxx.yyy.1.23:4000 SYN ******S*
Mar 10 10:11:13 65.23.114.185:1857 -> xxx.yyy.1.24:4000 SYN ******S*
Mar 10 10:11:13 65.23.114.185:1858 -> xxx.yyy.1.25:4000 SYN ******S*
Mar 10 10:11:13 65.23.114.185:1835 -> xxx.yyy.1.0:4000 SYN ******S*
Mar 10 10:11:13 65.23.114.185:1838 -> xxx.yyy.1.3:4000 SYN ******S*
Mar 10 10:11:14 65.23.114.185:1866 -> xxx.yyy.1.2:4000 SYN ******S*
[...]
Mar 10 11:08:02 65.23.114.185:3203 -> xxx.yyy.zzz.233:4000 SYN ******S*
Mar 10 11:08:02 65.23.114.185:3207 -> xxx.yyy.zzz.236:4000 SYN ******S*
Mar 10 11:08:03 65.23.114.185:3213 -> xxx.yyy.zzz.238:4000 SYN ******S*
Mar 10 11:08:03 65.23.114.185:3212 -> xxx.yyy.zzz.239:4000 SYN ******S*
Mar 10 11:08:03 65.23.114.185:3214 -> xxx.yyy.zzz.243:4000 SYN ******S*
Mar 10 11:08:03 65.23.114.185:3217 -> xxx.yyy.zzz.245:4000 SYN ******S*
Mar 10 11:08:03 65.23.114.185:3216 -> xxx.yyy.zzz.244:4000 SYN ******S*
Mar 10 11:08:03 65.23.114.185:3215 -> xxx.yyy.zzz.242:4000 SYN ******S*
Mar 10 11:08:03 65.23.114.185:3227 -> xxx.yyy.zzz.253:4000 SYN ******S*
37271
Mar 10 11:46:49 161.57.44.79:1223 -> xxx.yyy.1.7:554 SYN ******S*
Mar 10 11:46:50 161.57.44.79:1224 -> xxx.yyy.1.8:554 SYN ******S*
Mar 10 11:46:49 161.57.44.79:1227 -> xxx.yyy.1.11:554 SYN ******S*
Mar 10 11:46:50 161.57.44.79:1238 -> xxx.yyy.1.22:554 SYN ******S*
Mar 10 11:46:52 161.57.44.79:1239 -> xxx.yyy.1.23:554 SYN ******S*
Mar 10 11:46:52 161.57.44.79:1241 -> xxx.yyy.1.25:554 SYN ******S*
Mar 10 11:46:50 161.57.44.79:1246 -> xxx.yyy.1.30:554 SYN ******S*
Mar 10 11:46:50 161.57.44.79:1248 -> xxx.yyy.1.32:554 SYN ******S*
[...]
Mar 10 11:57:44 161.57.44.79:4558 -> xxx.yyy.255.231:554 SYN ******S*
Mar 10 11:57:44 161.57.44.79:4555 -> xxx.yyy.255.228:554 SYN ******S*
Mar 10 11:57:44 161.57.44.79:4562 -> xxx.yyy.255.235:554 SYN ******S*
Mar 10 11:57:44 161.57.44.79:4564 -> xxx.yyy.255.237:554 SYN ******S*
Mar 10 11:57:44 161.57.44.79:4568 -> xxx.yyy.255.241:554 SYN ******S*
Mar 10 11:57:44 161.57.44.79:4565 -> xxx.yyy.255.238:554 SYN ******S*
Mar 10 11:57:45 161.57.44.79:4576 -> xxx.yyy.255.249:554 SYN ******S*
Mar 10 11:57:45 161.57.44.79:4578 -> xxx.yyy.255.251:554 SYN ******S*
Mar 10 11:57:45 161.57.44.79:4574 -> xxx.yyy.255.247:554 SYN ******S*
33431
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list