[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Wed Dec 1 18:53:22 GMT 2004
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Nov 30 03:07:28 65.107.99.135:4879 -> xxx.yyy.1.1:1433 SYN ******S*
Nov 30 03:07:31 65.107.99.135:4880 -> xxx.yyy.1.2:1433 SYN ******S*
Nov 30 03:07:31 65.107.99.135:4881 -> xxx.yyy.1.3:1433 SYN ******S*
Nov 30 03:07:31 65.107.99.135:4883 -> xxx.yyy.1.4:1433 SYN ******S*
Nov 30 03:07:31 65.107.99.135:4884 -> xxx.yyy.1.5:1433 SYN ******S*
Nov 30 03:07:31 65.107.99.135:4885 -> xxx.yyy.1.6:1433 SYN ******S*
Nov 30 03:07:31 65.107.99.135:4886 -> xxx.yyy.1.7:1433 SYN ******S*
Nov 30 03:07:31 65.107.99.135:4887 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Nov 30 03:20:38 65.107.99.135:2629 -> xxx.yyy.255.241:1433 SYN ******S*
Nov 30 03:20:38 65.107.99.135:2636 -> xxx.yyy.255.248:1433 SYN ******S*
Nov 30 03:20:38 65.107.99.135:2633 -> xxx.yyy.255.245:1433 SYN ******S*
Nov 30 03:20:38 65.107.99.135:2630 -> xxx.yyy.255.242:1433 SYN ******S*
Nov 30 03:20:38 65.107.99.135:2640 -> xxx.yyy.255.252:1433 SYN ******S*
Nov 30 03:20:38 65.107.99.135:2641 -> xxx.yyy.255.253:1433 SYN ******S*
Nov 30 03:20:38 65.107.99.135:2638 -> xxx.yyy.255.250:1433 SYN ******S*
Nov 30 03:20:38 65.107.99.135:2639 -> xxx.yyy.255.251:1433 SYN ******S*
Nov 30 03:20:38 65.107.99.135:2642 -> xxx.yyy.255.254:1433 SYN ******S*
69109
[...]
48168
Nov 30 09:09:40 211.144.105.189:29979 -> xxx.yyy.1.0:8081 SYN ******S*
Nov 30 09:09:40 211.144.105.189:29982 -> xxx.yyy.1.2:8081 SYN ******S*
Nov 30 09:09:40 211.144.105.189:29984 -> xxx.yyy.1.4:8081 SYN ******S*
Nov 30 09:09:43 211.144.105.189:29991 -> xxx.yyy.1.8:8081 SYN ******S*
Nov 30 09:09:40 211.144.105.189:29992 -> xxx.yyy.1.9:8081 SYN ******S*
Nov 30 09:09:40 211.144.105.189:30004 -> xxx.yyy.1.16:8081 SYN ******S*
Nov 30 09:09:43 211.144.105.189:30008 -> xxx.yyy.1.19:8081 SYN ******S*
Nov 30 09:09:43 211.144.105.189:30014 -> xxx.yyy.1.23:8081 SYN ******S*
[...]
Nov 30 10:43:48 211.144.105.189:2706 -> xxx.yyy.255.200:8081 SYN ******S*
Nov 30 10:43:48 211.144.105.189:2725 -> xxx.yyy.255.206:8081 SYN ******S*
Nov 30 10:43:48 211.144.105.189:2702 -> xxx.yyy.255.197:8081 SYN ******S*
Nov 30 10:43:48 211.144.105.189:2707 -> xxx.yyy.255.201:8081 SYN ******S*
Nov 30 10:43:48 211.144.105.189:2704 -> xxx.yyy.255.198:8081 SYN ******S*
Nov 30 10:43:48 211.144.105.189:2709 -> xxx.yyy.255.202:8081 SYN ******S*
Nov 30 10:43:48 211.144.105.189:2727 -> xxx.yyy.255.208:8081 SYN ******S*
Nov 30 10:43:49 211.144.105.189:2773 -> xxx.yyy.255.230:8081 SYN ******S*
Nov 30 10:43:49 211.144.105.189:2807 -> xxx.yyy.255.253:8081 SYN ******S*
43069
Nov 30 18:23:02 24.2.3.36:1472 -> xxx.yyy.1.6:20168 SYN ******S*
Nov 30 18:22:59 24.2.3.36:1471 -> xxx.yyy.1.5:20168 SYN ******S*
Nov 30 18:23:02 24.2.3.36:1473 -> xxx.yyy.1.7:20168 SYN ******S*
Nov 30 18:23:02 24.2.3.36:1474 -> xxx.yyy.1.8:20168 SYN ******S*
Nov 30 18:22:59 24.2.3.36:1475 -> xxx.yyy.1.9:20168 SYN ******S*
Nov 30 18:23:02 24.2.3.36:1478 -> xxx.yyy.1.12:20168 SYN ******S*
Nov 30 18:23:00 24.2.3.36:1480 -> xxx.yyy.1.14:20168 SYN ******S*
Nov 30 18:23:00 24.2.3.36:1482 -> xxx.yyy.1.16:20168 SYN ******S*
[...]
Nov 30 18:34:51 24.2.3.36:3286 -> xxx.yyy.255.231:20168 SYN ******S*
Nov 30 18:34:51 24.2.3.36:3314 -> xxx.yyy.255.245:20168 SYN ******S*
Nov 30 18:34:51 24.2.3.36:3310 -> xxx.yyy.255.243:20168 SYN ******S*
Nov 30 18:34:51 24.2.3.36:3320 -> xxx.yyy.255.248:20168 SYN ******S*
Nov 30 18:34:51 24.2.3.36:3322 -> xxx.yyy.255.249:20168 SYN ******S*
Nov 30 18:34:51 24.2.3.36:3316 -> xxx.yyy.255.246:20168 SYN ******S*
Nov 30 18:34:51 24.2.3.36:3306 -> xxx.yyy.255.241:20168 SYN ******S*
Nov 30 18:34:51 24.2.3.36:3312 -> xxx.yyy.255.244:20168 SYN ******S*
42451
Nov 30 15:06:04 200.104.126.40:3403 -> xxx.yyy.1.9:1433 SYN ******S*
Nov 30 15:06:04 200.104.126.40:3404 -> xxx.yyy.1.10:1433 SYN ******S*
Nov 30 15:06:01 200.104.126.40:3405 -> xxx.yyy.1.11:1433 SYN ******S*
Nov 30 15:06:04 200.104.126.40:3408 -> xxx.yyy.1.14:1433 SYN ******S*
Nov 30 15:06:01 200.104.126.40:3411 -> xxx.yyy.1.17:1433 SYN ******S*
Nov 30 15:06:04 200.104.126.40:3414 -> xxx.yyy.1.20:1433 SYN ******S*
Nov 30 15:06:01 200.104.126.40:3415 -> xxx.yyy.1.21:1433 SYN ******S*
Nov 30 15:06:04 200.104.126.40:3417 -> xxx.yyy.1.23:1433 SYN ******S*
[...]
Nov 30 15:18:43 200.104.126.40:4384 -> xxx.yyy.255.214:1433 SYN ******S*
Nov 30 15:18:43 200.104.126.40:4391 -> xxx.yyy.255.221:1433 SYN ******S*
Nov 30 15:18:43 200.104.126.40:4399 -> xxx.yyy.255.229:1433 SYN ******S*
Nov 30 15:18:43 200.104.126.40:4395 -> xxx.yyy.255.225:1433 SYN ******S*
Nov 30 15:18:43 200.104.126.40:4408 -> xxx.yyy.255.238:1433 SYN ******S*
Nov 30 15:18:43 200.104.126.40:4421 -> xxx.yyy.255.251:1433 SYN ******S*
Nov 30 15:18:43 200.104.126.40:4419 -> xxx.yyy.255.249:1433 SYN ******S*
Nov 30 15:18:43 200.104.126.40:4417 -> xxx.yyy.255.247:1433 SYN ******S*
38349
Nov 30 20:12:58 61.41.138.131:3171 -> xxx.yyy.1.3:1433 SYN ******S*
Nov 30 20:12:58 61.41.138.131:3180 -> xxx.yyy.1.12:1433 SYN ******S*
Nov 30 20:12:58 61.41.138.131:3181 -> xxx.yyy.1.13:1433 SYN ******S*
Nov 30 20:12:58 61.41.138.131:3188 -> xxx.yyy.1.20:1433 SYN ******S*
Nov 30 20:12:58 61.41.138.131:3190 -> xxx.yyy.1.22:1433 SYN ******S*
Nov 30 20:12:58 61.41.138.131:3192 -> xxx.yyy.1.24:1433 SYN ******S*
Nov 30 20:12:58 61.41.138.131:3194 -> xxx.yyy.1.26:1433 SYN ******S*
Nov 30 20:12:58 61.41.138.131:3195 -> xxx.yyy.1.27:1433 SYN ******S*
[...]
Nov 30 20:24:39 61.41.138.131:2289 -> xxx.yyy.255.239:1433 SYN ******S*
Nov 30 20:24:39 61.41.138.131:2287 -> xxx.yyy.255.237:1433 SYN ******S*
Nov 30 20:24:39 61.41.138.131:2282 -> xxx.yyy.255.232:1433 SYN ******S*
Nov 30 20:24:39 61.41.138.131:2296 -> xxx.yyy.255.246:1433 SYN ******S*
Nov 30 20:24:39 61.41.138.131:2294 -> xxx.yyy.255.244:1433 SYN ******S*
Nov 30 20:24:39 61.41.138.131:2292 -> xxx.yyy.255.242:1433 SYN ******S*
Nov 30 20:24:39 61.41.138.131:2302 -> xxx.yyy.255.252:1433 SYN ******S*
Nov 30 20:24:39 61.41.138.131:2303 -> xxx.yyy.255.253:1433 SYN ******S*
Nov 30 20:24:39 61.41.138.131:2301 -> xxx.yyy.255.251:1433 SYN ******S*
37240
Nov 30 07:29:00 200.47.28.194:24786 -> xxx.yyy.1.8:4899 SYN ******S*
Nov 30 07:29:00 200.47.28.194:24789 -> xxx.yyy.1.11:4899 SYN ******S*
Nov 30 07:29:00 200.47.28.194:24791 -> xxx.yyy.1.13:4899 SYN ******S*
Nov 30 07:29:00 200.47.28.194:24792 -> xxx.yyy.1.14:4899 SYN ******S*
Nov 30 07:29:00 200.47.28.194:24793 -> xxx.yyy.1.15:4899 SYN ******S*
Nov 30 07:29:02 200.47.28.194:24795 -> xxx.yyy.1.17:4899 SYN ******S*
Nov 30 07:29:00 200.47.28.194:24798 -> xxx.yyy.1.20:4899 SYN ******S*
Nov 30 07:29:00 200.47.28.194:24796 -> xxx.yyy.1.18:4899 SYN ******S*
[...]
Nov 30 07:35:02 200.47.28.194:25495 -> xxx.yyy.255.246:4899 SYN ******S*
Nov 30 07:35:02 200.47.28.194:25498 -> xxx.yyy.255.249:4899 SYN ******S*
Nov 30 07:35:02 200.47.28.194:25497 -> xxx.yyy.255.248:4899 SYN ******S*
Nov 30 07:35:02 200.47.28.194:25500 -> xxx.yyy.255.251:4899 SYN ******S*
Nov 30 07:35:02 200.47.28.194:25496 -> xxx.yyy.255.247:4899 SYN ******S*
Nov 30 07:35:02 200.47.28.194:25499 -> xxx.yyy.255.250:4899 SYN ******S*
Nov 30 07:35:02 200.47.28.194:25501 -> xxx.yyy.255.252:4899 SYN ******S*
Nov 30 07:35:02 200.47.28.194:25503 -> xxx.yyy.255.254:4899 SYN ******S*
35510
Nov 30 09:02:55 67.132.241.122:1910 -> xxx.yyy.1.1:4000 SYN ******S*
Nov 30 09:02:55 67.132.241.122:1911 -> xxx.yyy.1.2:4000 SYN ******S*
Nov 30 09:02:57 67.132.241.122:1932 -> xxx.yyy.1.23:4000 SYN ******S*
Nov 30 09:02:54 67.132.241.122:1933 -> xxx.yyy.1.24:4000 SYN ******S*
Nov 30 09:02:57 67.132.241.122:1934 -> xxx.yyy.1.25:4000 SYN ******S*
Nov 30 09:02:55 67.132.241.122:1935 -> xxx.yyy.1.26:4000 SYN ******S*
Nov 30 09:02:55 67.132.241.122:1942 -> xxx.yyy.1.33:4000 SYN ******S*
Nov 30 09:02:57 67.132.241.122:1952 -> xxx.yyy.1.43:4000 SYN ******S*
[...]
Nov 30 09:13:51 67.132.241.122:4831 -> xxx.yyy.255.219:4000 SYN ******S*
Nov 30 09:13:51 67.132.241.122:4836 -> xxx.yyy.255.222:4000 SYN ******S*
Nov 30 09:13:51 67.132.241.122:4833 -> xxx.yyy.255.220:4000 SYN ******S*
Nov 30 09:13:51 67.132.241.122:4838 -> xxx.yyy.255.224:4000 SYN ******S*
Nov 30 09:13:51 67.132.241.122:4883 -> xxx.yyy.255.234:4000 SYN ******S*
Nov 30 09:13:51 67.132.241.122:4874 -> xxx.yyy.255.233:4000 SYN ******S*
Nov 30 09:13:51 67.132.241.122:4909 -> xxx.yyy.255.236:4000 SYN ******S*
Nov 30 09:13:51 67.132.241.122:4885 -> xxx.yyy.255.235:4000 SYN ******S*
35309
Nov 30 21:22:18 207.251.143.194:1224 -> xxx.yyy.1.1:3306 SYN ******S*
Nov 30 21:22:17 207.251.143.194:1225 -> xxx.yyy.1.2:3306 SYN ******S*
Nov 30 21:22:18 207.251.143.194:1226 -> xxx.yyy.1.3:3306 SYN ******S*
Nov 30 21:22:20 207.251.143.194:1227 -> xxx.yyy.1.4:3306 SYN ******S*
Nov 30 21:22:20 207.251.143.194:1229 -> xxx.yyy.1.6:3306 SYN ******S*
Nov 30 21:22:20 207.251.143.194:1230 -> xxx.yyy.1.7:3306 SYN ******S*
Nov 30 21:22:17 207.251.143.194:1232 -> xxx.yyy.1.9:3306 SYN ******S*
Nov 30 21:22:17 207.251.143.194:1233 -> xxx.yyy.1.10:3306 SYN ******S*
[...]
Nov 30 21:34:13 207.251.143.194:1630 -> xxx.yyy.255.229:3306 SYN ******S*
Nov 30 21:34:13 207.251.143.194:1631 -> xxx.yyy.255.230:3306 SYN ******S*
Nov 30 21:34:13 207.251.143.194:1629 -> xxx.yyy.255.228:3306 SYN ******S*
Nov 30 21:34:14 207.251.143.194:1639 -> xxx.yyy.255.238:3306 SYN ******S*
Nov 30 21:34:14 207.251.143.194:1649 -> xxx.yyy.255.248:3306 SYN ******S*
Nov 30 21:34:14 207.251.143.194:1646 -> xxx.yyy.255.245:3306 SYN ******S*
Nov 30 21:34:14 207.251.143.194:1650 -> xxx.yyy.255.249:3306 SYN ******S*
Nov 30 21:34:14 207.251.143.194:1648 -> xxx.yyy.255.247:3306 SYN ******S*
Nov 30 21:34:14 207.251.143.194:1656 -> xxx.yyy.255.254:3306 SYN ******S*
34114
Nov 30 11:12:09 203.221.91.249:3756 -> xxx.yyy.1.5:1433 SYN ******S*
Nov 30 11:12:09 203.221.91.249:3757 -> xxx.yyy.1.6:1433 SYN ******S*
Nov 30 11:12:09 203.221.91.249:3759 -> xxx.yyy.1.8:1433 SYN ******S*
Nov 30 11:12:09 203.221.91.249:3760 -> xxx.yyy.1.9:1433 SYN ******S*
Nov 30 11:12:09 203.221.91.249:3761 -> xxx.yyy.1.10:1433 SYN ******S*
Nov 30 11:12:09 203.221.91.249:3762 -> xxx.yyy.1.11:1433 SYN ******S*
Nov 30 11:12:09 203.221.91.249:3763 -> xxx.yyy.1.12:1433 SYN ******S*
Nov 30 11:12:09 203.221.91.249:3764 -> xxx.yyy.1.13:1433 SYN ******S*
[...]
Nov 30 11:23:53 203.221.91.249:2873 -> xxx.yyy.255.237:1433 SYN ******S*
Nov 30 11:23:53 203.221.91.249:2870 -> xxx.yyy.255.234:1433 SYN ******S*
Nov 30 11:23:53 203.221.91.249:2881 -> xxx.yyy.255.245:1433 SYN ******S*
Nov 30 11:23:53 203.221.91.249:2878 -> xxx.yyy.255.242:1433 SYN ******S*
Nov 30 11:23:53 203.221.91.249:2882 -> xxx.yyy.255.246:1433 SYN ******S*
Nov 30 11:23:53 203.221.91.249:2879 -> xxx.yyy.255.243:1433 SYN ******S*
Nov 30 11:23:53 203.221.91.249:2876 -> xxx.yyy.255.240:1433 SYN ******S*
Nov 30 11:23:53 203.221.91.249:2886 -> xxx.yyy.255.250:1433 SYN ******S*
29922
Nov 30 00:00:05 220.168.7.45:2919 -> xxx.yyy.158.55:6129 SYN ******S*
Nov 30 00:00:05 220.168.7.45:2923 -> xxx.yyy.158.55:3410 SYN ******S*
Nov 30 00:00:05 220.168.7.45:2927 -> xxx.yyy.158.55:5554 SYN ******S*
Nov 30 00:00:05 220.168.7.45:2911 -> xxx.yyy.158.55:1025 SYN ******S*
Nov 30 00:00:05 220.168.7.45:2928 -> xxx.yyy.158.55:1433 SYN ******S*
Nov 30 00:00:05 220.168.7.45:2931 -> xxx.yyy.158.55:5000 SYN ******S*
Nov 30 00:00:06 220.168.7.45:1375 -> xxx.yyy.33.145:1025 SYN ******S*
Nov 30 00:00:07 220.168.7.45:1541 -> xxx.yyy.33.109:6129 SYN ******S*
[...]
Nov 30 22:18:31 220.168.7.45:1043 -> xxx.yyy.242.133:1433 SYN ******S*
Nov 30 22:18:31 220.168.7.45:1031 -> xxx.yyy.242.133:1025 SYN ******S*
Nov 30 22:18:31 220.168.7.45:1127 -> xxx.yyy.167.231:1025 SYN ******S*
Nov 30 22:18:31 220.168.7.45:1134 -> xxx.yyy.210.186:6129 SYN ******S*
Nov 30 22:18:32 220.168.7.45:1218 -> xxx.yyy.33.144:1433 SYN ******S*
Nov 30 22:18:32 220.168.7.45:1209 -> xxx.yyy.33.144:3410 SYN ******S*
Nov 30 22:18:32 220.168.7.45:1206 -> xxx.yyy.33.144:6129 SYN ******S*
Nov 30 22:18:32 220.168.7.45:1203 -> xxx.yyy.33.144:1025 SYN ******S*
28024
Nov 30 00:57:35 61.136.144.194:1540 -> xxx.yyy.1.6:1433 SYN ******S*
Nov 30 00:57:33 61.136.144.194:1532 -> xxx.yyy.1.1:1433 SYN ******S*
Nov 30 00:57:35 61.136.144.194:1542 -> xxx.yyy.1.7:1433 SYN ******S*
Nov 30 00:57:33 61.136.144.194:1538 -> xxx.yyy.1.5:1433 SYN ******S*
Nov 30 00:57:33 61.136.144.194:1548 -> xxx.yyy.1.10:1433 SYN ******S*
Nov 30 00:57:33 61.136.144.194:1559 -> xxx.yyy.1.18:1433 SYN ******S*
Nov 30 00:57:33 61.136.144.194:1560 -> xxx.yyy.1.19:1433 SYN ******S*
Nov 30 00:57:36 61.136.144.194:1585 -> xxx.yyy.1.30:1433 SYN ******S*
[...]
Nov 30 03:06:53 61.136.144.194:1444 -> xxx.yyy.145.23:1433 SYN ******S*
Nov 30 03:06:53 61.136.144.194:1447 -> xxx.yyy.145.26:1433 SYN ******S*
Nov 30 03:06:53 61.136.144.194:1446 -> xxx.yyy.145.25:1433 SYN ******S*
Nov 30 03:06:53 61.136.144.194:1448 -> xxx.yyy.145.27:1433 SYN ******S*
Nov 30 03:06:53 61.136.144.194:1451 -> xxx.yyy.145.30:1433 SYN ******S*
Nov 30 03:06:53 61.136.144.194:1452 -> xxx.yyy.145.31:1433 SYN ******S*
Nov 30 03:06:53 61.136.144.194:1455 -> xxx.yyy.145.34:1433 SYN ******S*
Nov 30 03:06:53 61.136.144.194:1454 -> xxx.yyy.145.33:1433 SYN ******S*
Nov 30 03:06:53 61.136.144.194:1453 -> xxx.yyy.145.32:1433 SYN ******S*
21854
Nov 30 19:00:06 211.232.64.130:1510 -> xxx.yyy.1.2:1433 SYN ******S*
Nov 30 19:00:06 211.232.64.130:1513 -> xxx.yyy.1.5:1433 SYN ******S*
Nov 30 19:00:06 211.232.64.130:1517 -> xxx.yyy.1.9:1433 SYN ******S*
Nov 30 19:00:03 211.232.64.130:1511 -> xxx.yyy.1.3:1433 SYN ******S*
Nov 30 19:00:03 211.232.64.130:1512 -> xxx.yyy.1.4:1433 SYN ******S*
Nov 30 19:00:03 211.232.64.130:1514 -> xxx.yyy.1.6:1433 SYN ******S*
Nov 30 19:00:06 211.232.64.130:1523 -> xxx.yyy.1.14:1433 SYN ******S*
Nov 30 19:00:03 211.232.64.130:1526 -> xxx.yyy.1.18:1433 SYN ******S*
[...]
Nov 30 19:03:58 211.232.64.130:1997 -> xxx.yyy.255.221:1433 SYN ******S*
Nov 30 19:03:58 211.232.64.130:2007 -> xxx.yyy.255.230:1433 SYN ******S*
Nov 30 19:03:58 211.232.64.130:1995 -> xxx.yyy.255.219:1433 SYN ******S*
Nov 30 19:03:58 211.232.64.130:1994 -> xxx.yyy.255.217:1433 SYN ******S*
Nov 30 19:03:58 211.232.64.130:1996 -> xxx.yyy.255.220:1433 SYN ******S*
Nov 30 19:03:58 211.232.64.130:2014 -> xxx.yyy.255.236:1433 SYN ******S*
Nov 30 19:03:58 211.232.64.130:2011 -> xxx.yyy.255.235:1433 SYN ******S*
Nov 30 19:03:58 211.232.64.130:2024 -> xxx.yyy.255.247:1433 SYN ******S*
16050
[...]
14260
Nov 30 05:02:47 211.214.247.164:2408 -> xxx.yyy.192.4:1433 SYN ******S*
Nov 30 05:02:47 211.214.247.164:2407 -> xxx.yyy.192.3:1433 SYN ******S*
Nov 30 05:02:47 211.214.247.164:2410 -> xxx.yyy.192.6:1433 SYN ******S*
Nov 30 05:02:47 211.214.247.164:2417 -> xxx.yyy.192.13:1433 SYN ******S*
Nov 30 05:02:47 211.214.247.164:2414 -> xxx.yyy.192.10:1433 SYN ******S*
Nov 30 05:02:47 211.214.247.164:2421 -> xxx.yyy.192.17:1433 SYN ******S*
Nov 30 05:02:47 211.214.247.164:2412 -> xxx.yyy.192.8:1433 SYN ******S*
Nov 30 05:02:47 211.214.247.164:2424 -> xxx.yyy.192.20:1433 SYN ******S*
[...]
Nov 30 23:41:18 211.214.247.164:1855 -> xxx.yyy.11.205:1433 SYN ******S*
Nov 30 23:41:18 211.214.247.164:1900 -> xxx.yyy.11.250:1433 SYN ******S*
Nov 30 23:41:18 211.214.247.164:1903 -> xxx.yyy.11.253:1433 SYN ******S*
Nov 30 23:41:18 211.214.247.164:1861 -> xxx.yyy.11.211:1433 SYN ******S*
Nov 30 23:41:18 211.214.247.164:1897 -> xxx.yyy.11.247:1433 SYN ******S*
Nov 30 23:41:18 211.214.247.164:1865 -> xxx.yyy.11.215:1433 SYN ******S*
Nov 30 23:41:18 211.214.247.164:1870 -> xxx.yyy.11.220:1433 SYN ******S*
Nov 30 23:41:18 211.214.247.164:1887 -> xxx.yyy.11.237:1433 SYN ******S*
Nov 30 23:41:18 211.214.247.164:1888 -> xxx.yyy.11.238:1433 SYN ******S*
10817
[...]
10592
Nov 30 00:00:06 61.187.8.37:2540 -> xxx.yyy.169.237:6129 SYN ******S*
Nov 30 00:00:06 61.187.8.37:2542 -> xxx.yyy.169.237:3410 SYN ******S*
Nov 30 00:00:06 61.187.8.37:2538 -> xxx.yyy.169.237:1025 SYN ******S*
Nov 30 00:00:09 61.187.8.37:2627 -> xxx.yyy.1.81:1025 SYN ******S*
Nov 30 00:00:07 61.187.8.37:2523 -> xxx.yyy.204.197:1025 SYN ******S*
Nov 30 00:00:08 61.187.8.37:2460 -> xxx.yyy.1.229:1025 SYN ******S*
Nov 30 00:00:08 61.187.8.37:2607 -> xxx.yyy.167.209:1025 SYN ******S*
Nov 30 00:00:08 61.187.8.37:2660 -> xxx.yyy.1.180:1025 SYN ******S*
[...]
Nov 30 01:21:00 61.187.8.37:2612 -> xxx.yyy.181.58:80 SYN ******S*
Nov 30 01:21:00 61.187.8.37:2607 -> xxx.yyy.181.58:3410 SYN ******S*
Nov 30 01:21:00 61.187.8.37:2608 -> xxx.yyy.181.58:5554 SYN ******S*
Nov 30 01:21:00 61.187.8.37:2525 -> xxx.yyy.89.90:1433 SYN ******S*
Nov 30 01:21:01 61.187.8.37:2651 -> xxx.yyy.70.196:1025 SYN ******S*
Nov 30 01:21:01 61.187.8.37:2361 -> xxx.yyy.183.91:6129 SYN ******S*
Nov 30 01:21:02 61.187.8.37:2644 -> xxx.yyy.226.230:1025 SYN ******S*
Nov 30 01:21:03 61.187.8.37:2367 -> xxx.yyy.250.57:1025 SYN ******S*
Nov 30 01:21:03 61.187.8.37:2373 -> xxx.yyy.250.57:5554 SYN ******S*
8934
[...]
8689
Nov 30 12:55:49 66.130.253.174:4786 -> xxx.yyy.71.161:5554 SYN ******S*
Nov 30 12:55:50 66.130.253.174:1507 -> xxx.yyy.71.161:1023 SYN ******S*
Nov 30 12:55:49 66.130.253.174:4801 -> xxx.yyy.71.165:5554 SYN ******S*
Nov 30 12:55:50 66.130.253.174:1525 -> xxx.yyy.71.165:1023 SYN ******S*
Nov 30 12:55:49 66.130.253.174:4804 -> xxx.yyy.71.166:5554 SYN ******S*
Nov 30 12:55:50 66.130.253.174:1532 -> xxx.yyy.71.166:1023 SYN ******S*
Nov 30 12:55:49 66.130.253.174:4811 -> xxx.yyy.71.167:5554 SYN ******S*
Nov 30 12:55:50 66.130.253.174:1546 -> xxx.yyy.71.167:1023 SYN ******S*
[...]
Nov 30 12:57:44 66.130.253.174:2121 -> xxx.yyy.91.222:9898 SYN ******S*
Nov 30 12:57:44 66.130.253.174:2126 -> xxx.yyy.91.223:9898 SYN ******S*
Nov 30 12:57:44 66.130.253.174:2128 -> xxx.yyy.91.224:9898 SYN ******S*
Nov 30 12:57:44 66.130.253.174:2476 -> xxx.yyy.91.255:9898 SYN ******S*
Nov 30 12:57:45 66.130.253.174:2498 -> xxx.yyy.92.4:9898 SYN ******S*
Nov 30 12:57:45 66.130.253.174:2556 -> xxx.yyy.92.21:9898 SYN ******S*
Nov 30 12:57:45 66.130.253.174:2579 -> xxx.yyy.92.24:9898 SYN ******S*
Nov 30 12:57:45 66.130.253.174:2565 -> xxx.yyy.92.15:9898 SYN ******S*
Nov 30 12:57:45 66.130.253.174:2577 -> xxx.yyy.92.26:9898 SYN ******S*
6924
Nov 30 22:54:16 220.121.105.247:4438 -> xxx.yyy.215.5:5554 SYN ******S*
Nov 30 22:54:16 220.121.105.247:4437 -> xxx.yyy.215.6:5554 SYN ******S*
Nov 30 22:54:19 220.121.105.247:2225 -> xxx.yyy.215.6:9898 SYN ******S*
Nov 30 22:54:16 220.121.105.247:4440 -> xxx.yyy.215.3:5554 SYN ******S*
Nov 30 22:54:17 220.121.105.247:1243 -> xxx.yyy.215.3:1023 SYN ******S*
Nov 30 22:54:19 220.121.105.247:2229 -> xxx.yyy.215.3:9898 SYN ******S*
Nov 30 22:54:16 220.121.105.247:4441 -> xxx.yyy.215.2:5554 SYN ******S*
Nov 30 22:54:16 220.121.105.247:4436 -> xxx.yyy.215.8:5554 SYN ******S*
[...]
Nov 30 22:55:03 220.121.105.247:3246 -> xxx.yyy.235.62:9898 SYN ******S*
Nov 30 22:55:03 220.121.105.247:3242 -> xxx.yyy.235.55:9898 SYN ******S*
Nov 30 22:55:03 220.121.105.247:3362 -> xxx.yyy.235.88:9898 SYN ******S*
Nov 30 22:55:04 220.121.105.247:3507 -> xxx.yyy.235.101:9898 SYN ******S*
Nov 30 22:55:04 220.121.105.247:3501 -> xxx.yyy.235.99:9898 SYN ******S*
Nov 30 22:55:04 220.121.105.247:3512 -> xxx.yyy.235.97:9898 SYN ******S*
Nov 30 22:55:04 220.121.105.247:3584 -> xxx.yyy.235.106:9898 SYN ******S*
Nov 30 22:55:04 220.121.105.247:3592 -> xxx.yyy.235.111:9898 SYN ******S*
Nov 30 22:55:04 220.121.105.247:3588 -> xxx.yyy.235.109:9898 SYN ******S*
6397
[...]
5725
Nov 30 00:01:36 65.54.188.52:35029 -> xxx.yyy.236.21:80 SYN ******S*
Nov 30 00:01:37 65.54.188.52:35270 -> xxx.yyy.225.190:80 SYN ******S*
Nov 30 00:01:38 65.54.188.52:35279 -> xxx.yyy.14.23:80 SYN ******S*
Nov 30 00:01:38 65.54.188.52:36064 -> xxx.yyy.232.143:80 SYN ******S*
Nov 30 00:01:38 65.54.188.52:36097 -> xxx.yyy.241.98:80 SYN ******S*
Nov 30 00:01:41 65.54.188.52:36800 -> xxx.yyy.225.122:206 SYN ******S*
Nov 30 00:01:44 65.54.188.52:36800 -> xxx.yyy.225.122:206 SYN ******S*
Nov 30 00:01:48 65.54.188.52:36469 -> xxx.yyy.227.252:80 SYN ******S*
[...]
Nov 30 23:49:36 65.54.188.52:31823 -> xxx.yyy.241.29:80 SYN ******S*
Nov 30 23:49:36 65.54.188.52:31846 -> xxx.yyy.241.98:80 SYN ******S*
Nov 30 23:49:36 65.54.188.52:32016 -> xxx.yyy.241.30:80 SYN ******S*
Nov 30 23:49:37 65.54.188.52:32271 -> xxx.yyy.241.179:80 SYN ******S*
Nov 30 23:49:40 65.54.188.52:33206 -> xxx.yyy.240.117:80 SYN ******S*
Nov 30 23:49:41 65.54.188.52:33449 -> xxx.yyy.241.179:80 SYN ******S*
Nov 30 23:49:43 65.54.188.52:33974 -> xxx.yyy.241.255:80 SYN ******S*
Nov 30 23:49:43 65.54.188.52:34147 -> xxx.yyy.241.20:80 SYN ******S*
Nov 30 23:49:46 65.54.188.52:35030 -> xxx.yyy.241.255:80 SYN ******S*
5530
Nov 30 22:55:34 60.41.193.180:1028 -> xxx.yyy.215.218:5554 SYN ******S*
Nov 30 22:55:37 60.41.193.180:3062 -> xxx.yyy.215.218:9898 SYN ******S*
Nov 30 22:55:34 60.41.193.180:1036 -> xxx.yyy.215.223:5554 SYN ******S*
Nov 30 22:55:35 60.41.193.180:1728 -> xxx.yyy.215.223:1023 SYN ******S*
Nov 30 22:55:37 60.41.193.180:3088 -> xxx.yyy.215.223:9898 SYN ******S*
Nov 30 22:55:34 60.41.193.180:4998 -> xxx.yyy.215.212:5554 SYN ******S*
Nov 30 22:55:35 60.41.193.180:1716 -> xxx.yyy.215.212:1023 SYN ******S*
Nov 30 22:55:37 60.41.193.180:3079 -> xxx.yyy.215.212:9898 SYN ******S*
[...]
Nov 30 22:56:16 60.41.193.180:2072 -> xxx.yyy.236.33:9898 SYN ******S*
Nov 30 22:56:16 60.41.193.180:2171 -> xxx.yyy.236.48:9898 SYN ******S*
Nov 30 22:56:16 60.41.193.180:2166 -> xxx.yyy.236.46:9898 SYN ******S*
Nov 30 22:56:16 60.41.193.180:2178 -> xxx.yyy.236.51:9898 SYN ******S*
Nov 30 22:56:16 60.41.193.180:2182 -> xxx.yyy.236.54:9898 SYN ******S*
Nov 30 22:56:16 60.41.193.180:2199 -> xxx.yyy.236.56:9898 SYN ******S*
Nov 30 22:56:16 60.41.193.180:2221 -> xxx.yyy.236.60:9898 SYN ******S*
Nov 30 22:56:16 60.41.193.180:2303 -> xxx.yyy.236.72:9898 SYN ******S*
Nov 30 22:56:16 60.41.193.180:2455 -> xxx.yyy.216.24:9898 SYN ******S*
5418
[...]
5178
Nov 30 06:56:15 80.130.63.116:2796 -> xxx.yyy.133.15:5554 SYN ******S*
Nov 30 06:56:15 80.130.63.116:2847 -> xxx.yyy.133.16:5554 SYN ******S*
Nov 30 06:56:16 80.130.63.116:3378 -> xxx.yyy.133.16:1023 SYN ******S*
Nov 30 06:56:18 80.130.63.116:4737 -> xxx.yyy.133.16:9898 SYN ******S*
Nov 30 06:56:15 80.130.63.116:2856 -> xxx.yyy.133.20:5554 SYN ******S*
Nov 30 06:56:16 80.130.63.116:3394 -> xxx.yyy.133.20:1023 SYN ******S*
Nov 30 06:56:18 80.130.63.116:4765 -> xxx.yyy.133.20:9898 SYN ******S*
Nov 30 06:56:15 80.130.63.116:2857 -> xxx.yyy.133.21:5554 SYN ******S*
[...]
Nov 30 06:57:02 80.130.63.116:2342 -> xxx.yyy.153.93:9898 SYN ******S*
Nov 30 06:57:02 80.130.63.116:2343 -> xxx.yyy.153.94:9898 SYN ******S*
Nov 30 06:57:02 80.130.63.116:2365 -> xxx.yyy.153.99:9898 SYN ******S*
Nov 30 06:57:02 80.130.63.116:2366 -> xxx.yyy.153.100:9898 SYN ******S*
Nov 30 06:57:02 80.130.63.116:2410 -> xxx.yyy.153.107:9898 SYN ******S*
Nov 30 06:57:02 80.130.63.116:2413 -> xxx.yyy.153.110:9898 SYN ******S*
Nov 30 06:57:02 80.130.63.116:2414 -> xxx.yyy.153.111:9898 SYN ******S*
Nov 30 06:57:02 80.130.63.116:2445 -> xxx.yyy.153.127:9898 SYN ******S*
Nov 30 06:57:02 80.130.63.116:2471 -> xxx.yyy.153.131:9898 SYN ******S*
4849
Nov 30 02:06:50 61.166.144.94:4373 -> xxx.yyy.1.3:1433 SYN ******S*
Nov 30 02:06:53 61.166.144.94:4380 -> xxx.yyy.1.8:1433 SYN ******S*
Nov 30 02:06:50 61.166.144.94:4374 -> xxx.yyy.1.4:1433 SYN ******S*
Nov 30 02:06:50 61.166.144.94:4376 -> xxx.yyy.1.6:1433 SYN ******S*
Nov 30 02:06:53 61.166.144.94:4390 -> xxx.yyy.1.16:1433 SYN ******S*
Nov 30 02:06:53 61.166.144.94:4393 -> xxx.yyy.1.19:1433 SYN ******S*
Nov 30 02:06:50 61.166.144.94:4365 -> xxx.yyy.1.0:1433 SYN ******S*
Nov 30 02:06:50 61.166.144.94:4388 -> xxx.yyy.1.15:1433 SYN ******S*
[...]
Nov 30 02:55:52 61.166.144.94:4290 -> xxx.yyy.157.82:1433 SYN ******S*
Nov 30 02:55:52 61.166.144.94:4284 -> xxx.yyy.157.80:1433 SYN ******S*
Nov 30 02:55:52 61.166.144.94:4229 -> xxx.yyy.157.62:1433 SYN ******S*
Nov 30 02:55:52 61.166.144.94:4275 -> xxx.yyy.157.77:1433 SYN ******S*
Nov 30 02:55:52 61.166.144.94:4287 -> xxx.yyy.157.81:1433 SYN ******S*
Nov 30 02:55:53 61.166.144.94:4070 -> xxx.yyy.157.9:1433 SYN ******S*
Nov 30 02:55:53 61.166.144.94:4160 -> xxx.yyy.157.39:1433 SYN ******S*
Nov 30 02:55:53 61.166.144.94:4208 -> xxx.yyy.157.55:1433 SYN ******S*
Nov 30 02:55:53 61.166.144.94:4211 -> xxx.yyy.157.56:1433 SYN ******S*
4685
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list