[Intrusions] [LOGS] Summary of large-scale portscanning detects

Ken.Connelly at uni.edu Ken.Connelly at uni.edu
Wed Dec 1 18:53:22 GMT 2004


The following extracts show the beginning and ending of scan activity
was detected on my network.  The number following each set is the total
number of probes for that source.  Timestamps are GMT-0600.

Nov 30 03:07:28 65.107.99.135:4879 -> xxx.yyy.1.1:1433 SYN ******S* 
Nov 30 03:07:31 65.107.99.135:4880 -> xxx.yyy.1.2:1433 SYN ******S* 
Nov 30 03:07:31 65.107.99.135:4881 -> xxx.yyy.1.3:1433 SYN ******S* 
Nov 30 03:07:31 65.107.99.135:4883 -> xxx.yyy.1.4:1433 SYN ******S* 
Nov 30 03:07:31 65.107.99.135:4884 -> xxx.yyy.1.5:1433 SYN ******S* 
Nov 30 03:07:31 65.107.99.135:4885 -> xxx.yyy.1.6:1433 SYN ******S* 
Nov 30 03:07:31 65.107.99.135:4886 -> xxx.yyy.1.7:1433 SYN ******S* 
Nov 30 03:07:31 65.107.99.135:4887 -> xxx.yyy.1.8:1433 SYN ******S* 
[...]
Nov 30 03:20:38 65.107.99.135:2629 -> xxx.yyy.255.241:1433 SYN ******S* 
Nov 30 03:20:38 65.107.99.135:2636 -> xxx.yyy.255.248:1433 SYN ******S* 
Nov 30 03:20:38 65.107.99.135:2633 -> xxx.yyy.255.245:1433 SYN ******S* 
Nov 30 03:20:38 65.107.99.135:2630 -> xxx.yyy.255.242:1433 SYN ******S* 
Nov 30 03:20:38 65.107.99.135:2640 -> xxx.yyy.255.252:1433 SYN ******S* 
Nov 30 03:20:38 65.107.99.135:2641 -> xxx.yyy.255.253:1433 SYN ******S* 
Nov 30 03:20:38 65.107.99.135:2638 -> xxx.yyy.255.250:1433 SYN ******S* 
Nov 30 03:20:38 65.107.99.135:2639 -> xxx.yyy.255.251:1433 SYN ******S* 
Nov 30 03:20:38 65.107.99.135:2642 -> xxx.yyy.255.254:1433 SYN ******S* 
69109

[...]
48168

Nov 30 09:09:40 211.144.105.189:29979 -> xxx.yyy.1.0:8081 SYN ******S* 
Nov 30 09:09:40 211.144.105.189:29982 -> xxx.yyy.1.2:8081 SYN ******S* 
Nov 30 09:09:40 211.144.105.189:29984 -> xxx.yyy.1.4:8081 SYN ******S* 
Nov 30 09:09:43 211.144.105.189:29991 -> xxx.yyy.1.8:8081 SYN ******S* 
Nov 30 09:09:40 211.144.105.189:29992 -> xxx.yyy.1.9:8081 SYN ******S* 
Nov 30 09:09:40 211.144.105.189:30004 -> xxx.yyy.1.16:8081 SYN ******S* 
Nov 30 09:09:43 211.144.105.189:30008 -> xxx.yyy.1.19:8081 SYN ******S* 
Nov 30 09:09:43 211.144.105.189:30014 -> xxx.yyy.1.23:8081 SYN ******S* 
[...]
Nov 30 10:43:48 211.144.105.189:2706 -> xxx.yyy.255.200:8081 SYN ******S* 
Nov 30 10:43:48 211.144.105.189:2725 -> xxx.yyy.255.206:8081 SYN ******S* 
Nov 30 10:43:48 211.144.105.189:2702 -> xxx.yyy.255.197:8081 SYN ******S* 
Nov 30 10:43:48 211.144.105.189:2707 -> xxx.yyy.255.201:8081 SYN ******S* 
Nov 30 10:43:48 211.144.105.189:2704 -> xxx.yyy.255.198:8081 SYN ******S* 
Nov 30 10:43:48 211.144.105.189:2709 -> xxx.yyy.255.202:8081 SYN ******S* 
Nov 30 10:43:48 211.144.105.189:2727 -> xxx.yyy.255.208:8081 SYN ******S* 
Nov 30 10:43:49 211.144.105.189:2773 -> xxx.yyy.255.230:8081 SYN ******S* 
Nov 30 10:43:49 211.144.105.189:2807 -> xxx.yyy.255.253:8081 SYN ******S* 
43069

Nov 30 18:23:02 24.2.3.36:1472 -> xxx.yyy.1.6:20168 SYN ******S* 
Nov 30 18:22:59 24.2.3.36:1471 -> xxx.yyy.1.5:20168 SYN ******S* 
Nov 30 18:23:02 24.2.3.36:1473 -> xxx.yyy.1.7:20168 SYN ******S* 
Nov 30 18:23:02 24.2.3.36:1474 -> xxx.yyy.1.8:20168 SYN ******S* 
Nov 30 18:22:59 24.2.3.36:1475 -> xxx.yyy.1.9:20168 SYN ******S* 
Nov 30 18:23:02 24.2.3.36:1478 -> xxx.yyy.1.12:20168 SYN ******S* 
Nov 30 18:23:00 24.2.3.36:1480 -> xxx.yyy.1.14:20168 SYN ******S* 
Nov 30 18:23:00 24.2.3.36:1482 -> xxx.yyy.1.16:20168 SYN ******S* 
[...]
Nov 30 18:34:51 24.2.3.36:3286 -> xxx.yyy.255.231:20168 SYN ******S* 
Nov 30 18:34:51 24.2.3.36:3314 -> xxx.yyy.255.245:20168 SYN ******S* 
Nov 30 18:34:51 24.2.3.36:3310 -> xxx.yyy.255.243:20168 SYN ******S* 
Nov 30 18:34:51 24.2.3.36:3320 -> xxx.yyy.255.248:20168 SYN ******S* 
Nov 30 18:34:51 24.2.3.36:3322 -> xxx.yyy.255.249:20168 SYN ******S* 
Nov 30 18:34:51 24.2.3.36:3316 -> xxx.yyy.255.246:20168 SYN ******S* 
Nov 30 18:34:51 24.2.3.36:3306 -> xxx.yyy.255.241:20168 SYN ******S* 
Nov 30 18:34:51 24.2.3.36:3312 -> xxx.yyy.255.244:20168 SYN ******S* 
42451

Nov 30 15:06:04 200.104.126.40:3403 -> xxx.yyy.1.9:1433 SYN ******S* 
Nov 30 15:06:04 200.104.126.40:3404 -> xxx.yyy.1.10:1433 SYN ******S* 
Nov 30 15:06:01 200.104.126.40:3405 -> xxx.yyy.1.11:1433 SYN ******S* 
Nov 30 15:06:04 200.104.126.40:3408 -> xxx.yyy.1.14:1433 SYN ******S* 
Nov 30 15:06:01 200.104.126.40:3411 -> xxx.yyy.1.17:1433 SYN ******S* 
Nov 30 15:06:04 200.104.126.40:3414 -> xxx.yyy.1.20:1433 SYN ******S* 
Nov 30 15:06:01 200.104.126.40:3415 -> xxx.yyy.1.21:1433 SYN ******S* 
Nov 30 15:06:04 200.104.126.40:3417 -> xxx.yyy.1.23:1433 SYN ******S* 
[...]
Nov 30 15:18:43 200.104.126.40:4384 -> xxx.yyy.255.214:1433 SYN ******S* 
Nov 30 15:18:43 200.104.126.40:4391 -> xxx.yyy.255.221:1433 SYN ******S* 
Nov 30 15:18:43 200.104.126.40:4399 -> xxx.yyy.255.229:1433 SYN ******S* 
Nov 30 15:18:43 200.104.126.40:4395 -> xxx.yyy.255.225:1433 SYN ******S* 
Nov 30 15:18:43 200.104.126.40:4408 -> xxx.yyy.255.238:1433 SYN ******S* 
Nov 30 15:18:43 200.104.126.40:4421 -> xxx.yyy.255.251:1433 SYN ******S* 
Nov 30 15:18:43 200.104.126.40:4419 -> xxx.yyy.255.249:1433 SYN ******S* 
Nov 30 15:18:43 200.104.126.40:4417 -> xxx.yyy.255.247:1433 SYN ******S* 
38349

Nov 30 20:12:58 61.41.138.131:3171 -> xxx.yyy.1.3:1433 SYN ******S* 
Nov 30 20:12:58 61.41.138.131:3180 -> xxx.yyy.1.12:1433 SYN ******S* 
Nov 30 20:12:58 61.41.138.131:3181 -> xxx.yyy.1.13:1433 SYN ******S* 
Nov 30 20:12:58 61.41.138.131:3188 -> xxx.yyy.1.20:1433 SYN ******S* 
Nov 30 20:12:58 61.41.138.131:3190 -> xxx.yyy.1.22:1433 SYN ******S* 
Nov 30 20:12:58 61.41.138.131:3192 -> xxx.yyy.1.24:1433 SYN ******S* 
Nov 30 20:12:58 61.41.138.131:3194 -> xxx.yyy.1.26:1433 SYN ******S* 
Nov 30 20:12:58 61.41.138.131:3195 -> xxx.yyy.1.27:1433 SYN ******S* 
[...]
Nov 30 20:24:39 61.41.138.131:2289 -> xxx.yyy.255.239:1433 SYN ******S* 
Nov 30 20:24:39 61.41.138.131:2287 -> xxx.yyy.255.237:1433 SYN ******S* 
Nov 30 20:24:39 61.41.138.131:2282 -> xxx.yyy.255.232:1433 SYN ******S* 
Nov 30 20:24:39 61.41.138.131:2296 -> xxx.yyy.255.246:1433 SYN ******S* 
Nov 30 20:24:39 61.41.138.131:2294 -> xxx.yyy.255.244:1433 SYN ******S* 
Nov 30 20:24:39 61.41.138.131:2292 -> xxx.yyy.255.242:1433 SYN ******S* 
Nov 30 20:24:39 61.41.138.131:2302 -> xxx.yyy.255.252:1433 SYN ******S* 
Nov 30 20:24:39 61.41.138.131:2303 -> xxx.yyy.255.253:1433 SYN ******S* 
Nov 30 20:24:39 61.41.138.131:2301 -> xxx.yyy.255.251:1433 SYN ******S* 
37240

Nov 30 07:29:00 200.47.28.194:24786 -> xxx.yyy.1.8:4899 SYN ******S* 
Nov 30 07:29:00 200.47.28.194:24789 -> xxx.yyy.1.11:4899 SYN ******S* 
Nov 30 07:29:00 200.47.28.194:24791 -> xxx.yyy.1.13:4899 SYN ******S* 
Nov 30 07:29:00 200.47.28.194:24792 -> xxx.yyy.1.14:4899 SYN ******S* 
Nov 30 07:29:00 200.47.28.194:24793 -> xxx.yyy.1.15:4899 SYN ******S* 
Nov 30 07:29:02 200.47.28.194:24795 -> xxx.yyy.1.17:4899 SYN ******S* 
Nov 30 07:29:00 200.47.28.194:24798 -> xxx.yyy.1.20:4899 SYN ******S* 
Nov 30 07:29:00 200.47.28.194:24796 -> xxx.yyy.1.18:4899 SYN ******S* 
[...]
Nov 30 07:35:02 200.47.28.194:25495 -> xxx.yyy.255.246:4899 SYN ******S* 
Nov 30 07:35:02 200.47.28.194:25498 -> xxx.yyy.255.249:4899 SYN ******S* 
Nov 30 07:35:02 200.47.28.194:25497 -> xxx.yyy.255.248:4899 SYN ******S* 
Nov 30 07:35:02 200.47.28.194:25500 -> xxx.yyy.255.251:4899 SYN ******S* 
Nov 30 07:35:02 200.47.28.194:25496 -> xxx.yyy.255.247:4899 SYN ******S* 
Nov 30 07:35:02 200.47.28.194:25499 -> xxx.yyy.255.250:4899 SYN ******S* 
Nov 30 07:35:02 200.47.28.194:25501 -> xxx.yyy.255.252:4899 SYN ******S* 
Nov 30 07:35:02 200.47.28.194:25503 -> xxx.yyy.255.254:4899 SYN ******S* 
35510

Nov 30 09:02:55 67.132.241.122:1910 -> xxx.yyy.1.1:4000 SYN ******S* 
Nov 30 09:02:55 67.132.241.122:1911 -> xxx.yyy.1.2:4000 SYN ******S* 
Nov 30 09:02:57 67.132.241.122:1932 -> xxx.yyy.1.23:4000 SYN ******S* 
Nov 30 09:02:54 67.132.241.122:1933 -> xxx.yyy.1.24:4000 SYN ******S* 
Nov 30 09:02:57 67.132.241.122:1934 -> xxx.yyy.1.25:4000 SYN ******S* 
Nov 30 09:02:55 67.132.241.122:1935 -> xxx.yyy.1.26:4000 SYN ******S* 
Nov 30 09:02:55 67.132.241.122:1942 -> xxx.yyy.1.33:4000 SYN ******S* 
Nov 30 09:02:57 67.132.241.122:1952 -> xxx.yyy.1.43:4000 SYN ******S* 
[...]
Nov 30 09:13:51 67.132.241.122:4831 -> xxx.yyy.255.219:4000 SYN ******S* 
Nov 30 09:13:51 67.132.241.122:4836 -> xxx.yyy.255.222:4000 SYN ******S* 
Nov 30 09:13:51 67.132.241.122:4833 -> xxx.yyy.255.220:4000 SYN ******S* 
Nov 30 09:13:51 67.132.241.122:4838 -> xxx.yyy.255.224:4000 SYN ******S* 
Nov 30 09:13:51 67.132.241.122:4883 -> xxx.yyy.255.234:4000 SYN ******S* 
Nov 30 09:13:51 67.132.241.122:4874 -> xxx.yyy.255.233:4000 SYN ******S* 
Nov 30 09:13:51 67.132.241.122:4909 -> xxx.yyy.255.236:4000 SYN ******S* 
Nov 30 09:13:51 67.132.241.122:4885 -> xxx.yyy.255.235:4000 SYN ******S* 
35309

Nov 30 21:22:18 207.251.143.194:1224 -> xxx.yyy.1.1:3306 SYN ******S* 
Nov 30 21:22:17 207.251.143.194:1225 -> xxx.yyy.1.2:3306 SYN ******S* 
Nov 30 21:22:18 207.251.143.194:1226 -> xxx.yyy.1.3:3306 SYN ******S* 
Nov 30 21:22:20 207.251.143.194:1227 -> xxx.yyy.1.4:3306 SYN ******S* 
Nov 30 21:22:20 207.251.143.194:1229 -> xxx.yyy.1.6:3306 SYN ******S* 
Nov 30 21:22:20 207.251.143.194:1230 -> xxx.yyy.1.7:3306 SYN ******S* 
Nov 30 21:22:17 207.251.143.194:1232 -> xxx.yyy.1.9:3306 SYN ******S* 
Nov 30 21:22:17 207.251.143.194:1233 -> xxx.yyy.1.10:3306 SYN ******S* 
[...]
Nov 30 21:34:13 207.251.143.194:1630 -> xxx.yyy.255.229:3306 SYN ******S* 
Nov 30 21:34:13 207.251.143.194:1631 -> xxx.yyy.255.230:3306 SYN ******S* 
Nov 30 21:34:13 207.251.143.194:1629 -> xxx.yyy.255.228:3306 SYN ******S* 
Nov 30 21:34:14 207.251.143.194:1639 -> xxx.yyy.255.238:3306 SYN ******S* 
Nov 30 21:34:14 207.251.143.194:1649 -> xxx.yyy.255.248:3306 SYN ******S* 
Nov 30 21:34:14 207.251.143.194:1646 -> xxx.yyy.255.245:3306 SYN ******S* 
Nov 30 21:34:14 207.251.143.194:1650 -> xxx.yyy.255.249:3306 SYN ******S* 
Nov 30 21:34:14 207.251.143.194:1648 -> xxx.yyy.255.247:3306 SYN ******S* 
Nov 30 21:34:14 207.251.143.194:1656 -> xxx.yyy.255.254:3306 SYN ******S* 
34114

Nov 30 11:12:09 203.221.91.249:3756 -> xxx.yyy.1.5:1433 SYN ******S* 
Nov 30 11:12:09 203.221.91.249:3757 -> xxx.yyy.1.6:1433 SYN ******S* 
Nov 30 11:12:09 203.221.91.249:3759 -> xxx.yyy.1.8:1433 SYN ******S* 
Nov 30 11:12:09 203.221.91.249:3760 -> xxx.yyy.1.9:1433 SYN ******S* 
Nov 30 11:12:09 203.221.91.249:3761 -> xxx.yyy.1.10:1433 SYN ******S* 
Nov 30 11:12:09 203.221.91.249:3762 -> xxx.yyy.1.11:1433 SYN ******S* 
Nov 30 11:12:09 203.221.91.249:3763 -> xxx.yyy.1.12:1433 SYN ******S* 
Nov 30 11:12:09 203.221.91.249:3764 -> xxx.yyy.1.13:1433 SYN ******S* 
[...]
Nov 30 11:23:53 203.221.91.249:2873 -> xxx.yyy.255.237:1433 SYN ******S* 
Nov 30 11:23:53 203.221.91.249:2870 -> xxx.yyy.255.234:1433 SYN ******S* 
Nov 30 11:23:53 203.221.91.249:2881 -> xxx.yyy.255.245:1433 SYN ******S* 
Nov 30 11:23:53 203.221.91.249:2878 -> xxx.yyy.255.242:1433 SYN ******S* 
Nov 30 11:23:53 203.221.91.249:2882 -> xxx.yyy.255.246:1433 SYN ******S* 
Nov 30 11:23:53 203.221.91.249:2879 -> xxx.yyy.255.243:1433 SYN ******S* 
Nov 30 11:23:53 203.221.91.249:2876 -> xxx.yyy.255.240:1433 SYN ******S* 
Nov 30 11:23:53 203.221.91.249:2886 -> xxx.yyy.255.250:1433 SYN ******S* 
29922

Nov 30 00:00:05 220.168.7.45:2919 -> xxx.yyy.158.55:6129 SYN ******S* 
Nov 30 00:00:05 220.168.7.45:2923 -> xxx.yyy.158.55:3410 SYN ******S* 
Nov 30 00:00:05 220.168.7.45:2927 -> xxx.yyy.158.55:5554 SYN ******S* 
Nov 30 00:00:05 220.168.7.45:2911 -> xxx.yyy.158.55:1025 SYN ******S* 
Nov 30 00:00:05 220.168.7.45:2928 -> xxx.yyy.158.55:1433 SYN ******S* 
Nov 30 00:00:05 220.168.7.45:2931 -> xxx.yyy.158.55:5000 SYN ******S* 
Nov 30 00:00:06 220.168.7.45:1375 -> xxx.yyy.33.145:1025 SYN ******S* 
Nov 30 00:00:07 220.168.7.45:1541 -> xxx.yyy.33.109:6129 SYN ******S* 
[...]
Nov 30 22:18:31 220.168.7.45:1043 -> xxx.yyy.242.133:1433 SYN ******S* 
Nov 30 22:18:31 220.168.7.45:1031 -> xxx.yyy.242.133:1025 SYN ******S* 
Nov 30 22:18:31 220.168.7.45:1127 -> xxx.yyy.167.231:1025 SYN ******S* 
Nov 30 22:18:31 220.168.7.45:1134 -> xxx.yyy.210.186:6129 SYN ******S* 
Nov 30 22:18:32 220.168.7.45:1218 -> xxx.yyy.33.144:1433 SYN ******S* 
Nov 30 22:18:32 220.168.7.45:1209 -> xxx.yyy.33.144:3410 SYN ******S* 
Nov 30 22:18:32 220.168.7.45:1206 -> xxx.yyy.33.144:6129 SYN ******S* 
Nov 30 22:18:32 220.168.7.45:1203 -> xxx.yyy.33.144:1025 SYN ******S* 
28024

Nov 30 00:57:35 61.136.144.194:1540 -> xxx.yyy.1.6:1433 SYN ******S* 
Nov 30 00:57:33 61.136.144.194:1532 -> xxx.yyy.1.1:1433 SYN ******S* 
Nov 30 00:57:35 61.136.144.194:1542 -> xxx.yyy.1.7:1433 SYN ******S* 
Nov 30 00:57:33 61.136.144.194:1538 -> xxx.yyy.1.5:1433 SYN ******S* 
Nov 30 00:57:33 61.136.144.194:1548 -> xxx.yyy.1.10:1433 SYN ******S* 
Nov 30 00:57:33 61.136.144.194:1559 -> xxx.yyy.1.18:1433 SYN ******S* 
Nov 30 00:57:33 61.136.144.194:1560 -> xxx.yyy.1.19:1433 SYN ******S* 
Nov 30 00:57:36 61.136.144.194:1585 -> xxx.yyy.1.30:1433 SYN ******S* 
[...]
Nov 30 03:06:53 61.136.144.194:1444 -> xxx.yyy.145.23:1433 SYN ******S* 
Nov 30 03:06:53 61.136.144.194:1447 -> xxx.yyy.145.26:1433 SYN ******S* 
Nov 30 03:06:53 61.136.144.194:1446 -> xxx.yyy.145.25:1433 SYN ******S* 
Nov 30 03:06:53 61.136.144.194:1448 -> xxx.yyy.145.27:1433 SYN ******S* 
Nov 30 03:06:53 61.136.144.194:1451 -> xxx.yyy.145.30:1433 SYN ******S* 
Nov 30 03:06:53 61.136.144.194:1452 -> xxx.yyy.145.31:1433 SYN ******S* 
Nov 30 03:06:53 61.136.144.194:1455 -> xxx.yyy.145.34:1433 SYN ******S* 
Nov 30 03:06:53 61.136.144.194:1454 -> xxx.yyy.145.33:1433 SYN ******S* 
Nov 30 03:06:53 61.136.144.194:1453 -> xxx.yyy.145.32:1433 SYN ******S* 
21854

Nov 30 19:00:06 211.232.64.130:1510 -> xxx.yyy.1.2:1433 SYN ******S* 
Nov 30 19:00:06 211.232.64.130:1513 -> xxx.yyy.1.5:1433 SYN ******S* 
Nov 30 19:00:06 211.232.64.130:1517 -> xxx.yyy.1.9:1433 SYN ******S* 
Nov 30 19:00:03 211.232.64.130:1511 -> xxx.yyy.1.3:1433 SYN ******S* 
Nov 30 19:00:03 211.232.64.130:1512 -> xxx.yyy.1.4:1433 SYN ******S* 
Nov 30 19:00:03 211.232.64.130:1514 -> xxx.yyy.1.6:1433 SYN ******S* 
Nov 30 19:00:06 211.232.64.130:1523 -> xxx.yyy.1.14:1433 SYN ******S* 
Nov 30 19:00:03 211.232.64.130:1526 -> xxx.yyy.1.18:1433 SYN ******S* 
[...]
Nov 30 19:03:58 211.232.64.130:1997 -> xxx.yyy.255.221:1433 SYN ******S* 
Nov 30 19:03:58 211.232.64.130:2007 -> xxx.yyy.255.230:1433 SYN ******S* 
Nov 30 19:03:58 211.232.64.130:1995 -> xxx.yyy.255.219:1433 SYN ******S* 
Nov 30 19:03:58 211.232.64.130:1994 -> xxx.yyy.255.217:1433 SYN ******S* 
Nov 30 19:03:58 211.232.64.130:1996 -> xxx.yyy.255.220:1433 SYN ******S* 
Nov 30 19:03:58 211.232.64.130:2014 -> xxx.yyy.255.236:1433 SYN ******S* 
Nov 30 19:03:58 211.232.64.130:2011 -> xxx.yyy.255.235:1433 SYN ******S* 
Nov 30 19:03:58 211.232.64.130:2024 -> xxx.yyy.255.247:1433 SYN ******S* 
16050

[...]
14260

Nov 30 05:02:47 211.214.247.164:2408 -> xxx.yyy.192.4:1433 SYN ******S* 
Nov 30 05:02:47 211.214.247.164:2407 -> xxx.yyy.192.3:1433 SYN ******S* 
Nov 30 05:02:47 211.214.247.164:2410 -> xxx.yyy.192.6:1433 SYN ******S* 
Nov 30 05:02:47 211.214.247.164:2417 -> xxx.yyy.192.13:1433 SYN ******S* 
Nov 30 05:02:47 211.214.247.164:2414 -> xxx.yyy.192.10:1433 SYN ******S* 
Nov 30 05:02:47 211.214.247.164:2421 -> xxx.yyy.192.17:1433 SYN ******S* 
Nov 30 05:02:47 211.214.247.164:2412 -> xxx.yyy.192.8:1433 SYN ******S* 
Nov 30 05:02:47 211.214.247.164:2424 -> xxx.yyy.192.20:1433 SYN ******S* 
[...]
Nov 30 23:41:18 211.214.247.164:1855 -> xxx.yyy.11.205:1433 SYN ******S* 
Nov 30 23:41:18 211.214.247.164:1900 -> xxx.yyy.11.250:1433 SYN ******S* 
Nov 30 23:41:18 211.214.247.164:1903 -> xxx.yyy.11.253:1433 SYN ******S* 
Nov 30 23:41:18 211.214.247.164:1861 -> xxx.yyy.11.211:1433 SYN ******S* 
Nov 30 23:41:18 211.214.247.164:1897 -> xxx.yyy.11.247:1433 SYN ******S* 
Nov 30 23:41:18 211.214.247.164:1865 -> xxx.yyy.11.215:1433 SYN ******S* 
Nov 30 23:41:18 211.214.247.164:1870 -> xxx.yyy.11.220:1433 SYN ******S* 
Nov 30 23:41:18 211.214.247.164:1887 -> xxx.yyy.11.237:1433 SYN ******S* 
Nov 30 23:41:18 211.214.247.164:1888 -> xxx.yyy.11.238:1433 SYN ******S* 
10817

[...]
10592

Nov 30 00:00:06 61.187.8.37:2540 -> xxx.yyy.169.237:6129 SYN ******S* 
Nov 30 00:00:06 61.187.8.37:2542 -> xxx.yyy.169.237:3410 SYN ******S* 
Nov 30 00:00:06 61.187.8.37:2538 -> xxx.yyy.169.237:1025 SYN ******S* 
Nov 30 00:00:09 61.187.8.37:2627 -> xxx.yyy.1.81:1025 SYN ******S* 
Nov 30 00:00:07 61.187.8.37:2523 -> xxx.yyy.204.197:1025 SYN ******S* 
Nov 30 00:00:08 61.187.8.37:2460 -> xxx.yyy.1.229:1025 SYN ******S* 
Nov 30 00:00:08 61.187.8.37:2607 -> xxx.yyy.167.209:1025 SYN ******S* 
Nov 30 00:00:08 61.187.8.37:2660 -> xxx.yyy.1.180:1025 SYN ******S* 
[...]
Nov 30 01:21:00 61.187.8.37:2612 -> xxx.yyy.181.58:80 SYN ******S* 
Nov 30 01:21:00 61.187.8.37:2607 -> xxx.yyy.181.58:3410 SYN ******S* 
Nov 30 01:21:00 61.187.8.37:2608 -> xxx.yyy.181.58:5554 SYN ******S* 
Nov 30 01:21:00 61.187.8.37:2525 -> xxx.yyy.89.90:1433 SYN ******S* 
Nov 30 01:21:01 61.187.8.37:2651 -> xxx.yyy.70.196:1025 SYN ******S* 
Nov 30 01:21:01 61.187.8.37:2361 -> xxx.yyy.183.91:6129 SYN ******S* 
Nov 30 01:21:02 61.187.8.37:2644 -> xxx.yyy.226.230:1025 SYN ******S* 
Nov 30 01:21:03 61.187.8.37:2367 -> xxx.yyy.250.57:1025 SYN ******S* 
Nov 30 01:21:03 61.187.8.37:2373 -> xxx.yyy.250.57:5554 SYN ******S* 
8934

[...]
8689

Nov 30 12:55:49 66.130.253.174:4786 -> xxx.yyy.71.161:5554 SYN ******S* 
Nov 30 12:55:50 66.130.253.174:1507 -> xxx.yyy.71.161:1023 SYN ******S* 
Nov 30 12:55:49 66.130.253.174:4801 -> xxx.yyy.71.165:5554 SYN ******S* 
Nov 30 12:55:50 66.130.253.174:1525 -> xxx.yyy.71.165:1023 SYN ******S* 
Nov 30 12:55:49 66.130.253.174:4804 -> xxx.yyy.71.166:5554 SYN ******S* 
Nov 30 12:55:50 66.130.253.174:1532 -> xxx.yyy.71.166:1023 SYN ******S* 
Nov 30 12:55:49 66.130.253.174:4811 -> xxx.yyy.71.167:5554 SYN ******S* 
Nov 30 12:55:50 66.130.253.174:1546 -> xxx.yyy.71.167:1023 SYN ******S* 
[...]
Nov 30 12:57:44 66.130.253.174:2121 -> xxx.yyy.91.222:9898 SYN ******S* 
Nov 30 12:57:44 66.130.253.174:2126 -> xxx.yyy.91.223:9898 SYN ******S* 
Nov 30 12:57:44 66.130.253.174:2128 -> xxx.yyy.91.224:9898 SYN ******S* 
Nov 30 12:57:44 66.130.253.174:2476 -> xxx.yyy.91.255:9898 SYN ******S* 
Nov 30 12:57:45 66.130.253.174:2498 -> xxx.yyy.92.4:9898 SYN ******S* 
Nov 30 12:57:45 66.130.253.174:2556 -> xxx.yyy.92.21:9898 SYN ******S* 
Nov 30 12:57:45 66.130.253.174:2579 -> xxx.yyy.92.24:9898 SYN ******S* 
Nov 30 12:57:45 66.130.253.174:2565 -> xxx.yyy.92.15:9898 SYN ******S* 
Nov 30 12:57:45 66.130.253.174:2577 -> xxx.yyy.92.26:9898 SYN ******S* 
6924

Nov 30 22:54:16 220.121.105.247:4438 -> xxx.yyy.215.5:5554 SYN ******S* 
Nov 30 22:54:16 220.121.105.247:4437 -> xxx.yyy.215.6:5554 SYN ******S* 
Nov 30 22:54:19 220.121.105.247:2225 -> xxx.yyy.215.6:9898 SYN ******S* 
Nov 30 22:54:16 220.121.105.247:4440 -> xxx.yyy.215.3:5554 SYN ******S* 
Nov 30 22:54:17 220.121.105.247:1243 -> xxx.yyy.215.3:1023 SYN ******S* 
Nov 30 22:54:19 220.121.105.247:2229 -> xxx.yyy.215.3:9898 SYN ******S* 
Nov 30 22:54:16 220.121.105.247:4441 -> xxx.yyy.215.2:5554 SYN ******S* 
Nov 30 22:54:16 220.121.105.247:4436 -> xxx.yyy.215.8:5554 SYN ******S* 
[...]
Nov 30 22:55:03 220.121.105.247:3246 -> xxx.yyy.235.62:9898 SYN ******S* 
Nov 30 22:55:03 220.121.105.247:3242 -> xxx.yyy.235.55:9898 SYN ******S* 
Nov 30 22:55:03 220.121.105.247:3362 -> xxx.yyy.235.88:9898 SYN ******S* 
Nov 30 22:55:04 220.121.105.247:3507 -> xxx.yyy.235.101:9898 SYN ******S* 
Nov 30 22:55:04 220.121.105.247:3501 -> xxx.yyy.235.99:9898 SYN ******S* 
Nov 30 22:55:04 220.121.105.247:3512 -> xxx.yyy.235.97:9898 SYN ******S* 
Nov 30 22:55:04 220.121.105.247:3584 -> xxx.yyy.235.106:9898 SYN ******S* 
Nov 30 22:55:04 220.121.105.247:3592 -> xxx.yyy.235.111:9898 SYN ******S* 
Nov 30 22:55:04 220.121.105.247:3588 -> xxx.yyy.235.109:9898 SYN ******S* 
6397

[...]
5725

Nov 30 00:01:36 65.54.188.52:35029 -> xxx.yyy.236.21:80 SYN ******S* 
Nov 30 00:01:37 65.54.188.52:35270 -> xxx.yyy.225.190:80 SYN ******S* 
Nov 30 00:01:38 65.54.188.52:35279 -> xxx.yyy.14.23:80 SYN ******S* 
Nov 30 00:01:38 65.54.188.52:36064 -> xxx.yyy.232.143:80 SYN ******S* 
Nov 30 00:01:38 65.54.188.52:36097 -> xxx.yyy.241.98:80 SYN ******S* 
Nov 30 00:01:41 65.54.188.52:36800 -> xxx.yyy.225.122:206 SYN ******S* 
Nov 30 00:01:44 65.54.188.52:36800 -> xxx.yyy.225.122:206 SYN ******S* 
Nov 30 00:01:48 65.54.188.52:36469 -> xxx.yyy.227.252:80 SYN ******S* 
[...]
Nov 30 23:49:36 65.54.188.52:31823 -> xxx.yyy.241.29:80 SYN ******S* 
Nov 30 23:49:36 65.54.188.52:31846 -> xxx.yyy.241.98:80 SYN ******S* 
Nov 30 23:49:36 65.54.188.52:32016 -> xxx.yyy.241.30:80 SYN ******S* 
Nov 30 23:49:37 65.54.188.52:32271 -> xxx.yyy.241.179:80 SYN ******S* 
Nov 30 23:49:40 65.54.188.52:33206 -> xxx.yyy.240.117:80 SYN ******S* 
Nov 30 23:49:41 65.54.188.52:33449 -> xxx.yyy.241.179:80 SYN ******S* 
Nov 30 23:49:43 65.54.188.52:33974 -> xxx.yyy.241.255:80 SYN ******S* 
Nov 30 23:49:43 65.54.188.52:34147 -> xxx.yyy.241.20:80 SYN ******S* 
Nov 30 23:49:46 65.54.188.52:35030 -> xxx.yyy.241.255:80 SYN ******S* 
5530

Nov 30 22:55:34 60.41.193.180:1028 -> xxx.yyy.215.218:5554 SYN ******S* 
Nov 30 22:55:37 60.41.193.180:3062 -> xxx.yyy.215.218:9898 SYN ******S* 
Nov 30 22:55:34 60.41.193.180:1036 -> xxx.yyy.215.223:5554 SYN ******S* 
Nov 30 22:55:35 60.41.193.180:1728 -> xxx.yyy.215.223:1023 SYN ******S* 
Nov 30 22:55:37 60.41.193.180:3088 -> xxx.yyy.215.223:9898 SYN ******S* 
Nov 30 22:55:34 60.41.193.180:4998 -> xxx.yyy.215.212:5554 SYN ******S* 
Nov 30 22:55:35 60.41.193.180:1716 -> xxx.yyy.215.212:1023 SYN ******S* 
Nov 30 22:55:37 60.41.193.180:3079 -> xxx.yyy.215.212:9898 SYN ******S* 
[...]
Nov 30 22:56:16 60.41.193.180:2072 -> xxx.yyy.236.33:9898 SYN ******S* 
Nov 30 22:56:16 60.41.193.180:2171 -> xxx.yyy.236.48:9898 SYN ******S* 
Nov 30 22:56:16 60.41.193.180:2166 -> xxx.yyy.236.46:9898 SYN ******S* 
Nov 30 22:56:16 60.41.193.180:2178 -> xxx.yyy.236.51:9898 SYN ******S* 
Nov 30 22:56:16 60.41.193.180:2182 -> xxx.yyy.236.54:9898 SYN ******S* 
Nov 30 22:56:16 60.41.193.180:2199 -> xxx.yyy.236.56:9898 SYN ******S* 
Nov 30 22:56:16 60.41.193.180:2221 -> xxx.yyy.236.60:9898 SYN ******S* 
Nov 30 22:56:16 60.41.193.180:2303 -> xxx.yyy.236.72:9898 SYN ******S* 
Nov 30 22:56:16 60.41.193.180:2455 -> xxx.yyy.216.24:9898 SYN ******S* 
5418

[...]
5178

Nov 30 06:56:15 80.130.63.116:2796 -> xxx.yyy.133.15:5554 SYN ******S* 
Nov 30 06:56:15 80.130.63.116:2847 -> xxx.yyy.133.16:5554 SYN ******S* 
Nov 30 06:56:16 80.130.63.116:3378 -> xxx.yyy.133.16:1023 SYN ******S* 
Nov 30 06:56:18 80.130.63.116:4737 -> xxx.yyy.133.16:9898 SYN ******S* 
Nov 30 06:56:15 80.130.63.116:2856 -> xxx.yyy.133.20:5554 SYN ******S* 
Nov 30 06:56:16 80.130.63.116:3394 -> xxx.yyy.133.20:1023 SYN ******S* 
Nov 30 06:56:18 80.130.63.116:4765 -> xxx.yyy.133.20:9898 SYN ******S* 
Nov 30 06:56:15 80.130.63.116:2857 -> xxx.yyy.133.21:5554 SYN ******S* 
[...]
Nov 30 06:57:02 80.130.63.116:2342 -> xxx.yyy.153.93:9898 SYN ******S* 
Nov 30 06:57:02 80.130.63.116:2343 -> xxx.yyy.153.94:9898 SYN ******S* 
Nov 30 06:57:02 80.130.63.116:2365 -> xxx.yyy.153.99:9898 SYN ******S* 
Nov 30 06:57:02 80.130.63.116:2366 -> xxx.yyy.153.100:9898 SYN ******S* 
Nov 30 06:57:02 80.130.63.116:2410 -> xxx.yyy.153.107:9898 SYN ******S* 
Nov 30 06:57:02 80.130.63.116:2413 -> xxx.yyy.153.110:9898 SYN ******S* 
Nov 30 06:57:02 80.130.63.116:2414 -> xxx.yyy.153.111:9898 SYN ******S* 
Nov 30 06:57:02 80.130.63.116:2445 -> xxx.yyy.153.127:9898 SYN ******S* 
Nov 30 06:57:02 80.130.63.116:2471 -> xxx.yyy.153.131:9898 SYN ******S* 
4849

Nov 30 02:06:50 61.166.144.94:4373 -> xxx.yyy.1.3:1433 SYN ******S* 
Nov 30 02:06:53 61.166.144.94:4380 -> xxx.yyy.1.8:1433 SYN ******S* 
Nov 30 02:06:50 61.166.144.94:4374 -> xxx.yyy.1.4:1433 SYN ******S* 
Nov 30 02:06:50 61.166.144.94:4376 -> xxx.yyy.1.6:1433 SYN ******S* 
Nov 30 02:06:53 61.166.144.94:4390 -> xxx.yyy.1.16:1433 SYN ******S* 
Nov 30 02:06:53 61.166.144.94:4393 -> xxx.yyy.1.19:1433 SYN ******S* 
Nov 30 02:06:50 61.166.144.94:4365 -> xxx.yyy.1.0:1433 SYN ******S* 
Nov 30 02:06:50 61.166.144.94:4388 -> xxx.yyy.1.15:1433 SYN ******S* 
[...]
Nov 30 02:55:52 61.166.144.94:4290 -> xxx.yyy.157.82:1433 SYN ******S* 
Nov 30 02:55:52 61.166.144.94:4284 -> xxx.yyy.157.80:1433 SYN ******S* 
Nov 30 02:55:52 61.166.144.94:4229 -> xxx.yyy.157.62:1433 SYN ******S* 
Nov 30 02:55:52 61.166.144.94:4275 -> xxx.yyy.157.77:1433 SYN ******S* 
Nov 30 02:55:52 61.166.144.94:4287 -> xxx.yyy.157.81:1433 SYN ******S* 
Nov 30 02:55:53 61.166.144.94:4070 -> xxx.yyy.157.9:1433 SYN ******S* 
Nov 30 02:55:53 61.166.144.94:4160 -> xxx.yyy.157.39:1433 SYN ******S* 
Nov 30 02:55:53 61.166.144.94:4208 -> xxx.yyy.157.55:1433 SYN ******S* 
Nov 30 02:55:53 61.166.144.94:4211 -> xxx.yyy.157.56:1433 SYN ******S* 
4685

--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa                     Cedar Falls, IA  50614-0121
email: Ken.Connelly at uni.edu    phone: (319) 273-5850    fax: (319) 273-7373



More information about the Intrusions mailing list