[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Wed Jul 7 11:24:48 GMT 2004
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0500.
Jul 6 01:42:12 209.135.97.164:2418 -> xxx.yyy.1.1:554 SYN ******S*
Jul 6 01:42:12 209.135.97.164:2419 -> xxx.yyy.1.2:554 SYN ******S*
Jul 6 01:42:12 209.135.97.164:2420 -> xxx.yyy.1.3:554 SYN ******S*
Jul 6 01:42:14 209.135.97.164:2421 -> xxx.yyy.1.4:554 SYN ******S*
Jul 6 01:42:14 209.135.97.164:2422 -> xxx.yyy.1.5:554 SYN ******S*
Jul 6 01:42:14 209.135.97.164:2423 -> xxx.yyy.1.6:554 SYN ******S*
Jul 6 01:42:14 209.135.97.164:2424 -> xxx.yyy.1.7:554 SYN ******S*
Jul 6 01:42:11 209.135.97.164:2425 -> xxx.yyy.1.8:554 SYN ******S*
[...]
Jul 6 01:53:15 209.135.97.164:2089 -> xxx.yyy.255.204:554 SYN ******S*
Jul 6 01:53:15 209.135.97.164:2082 -> xxx.yyy.255.197:554 SYN ******S*
Jul 6 01:53:15 209.135.97.164:2086 -> xxx.yyy.255.201:554 SYN ******S*
Jul 6 01:53:15 209.135.97.164:2083 -> xxx.yyy.255.198:554 SYN ******S*
Jul 6 01:53:15 209.135.97.164:2090 -> xxx.yyy.255.205:554 SYN ******S*
Jul 6 01:53:16 209.135.97.164:2097 -> xxx.yyy.255.212:554 SYN ******S*
Jul 6 01:53:16 209.135.97.164:2098 -> xxx.yyy.255.213:554 SYN ******S*
Jul 6 01:53:16 209.135.97.164:2095 -> xxx.yyy.255.210:554 SYN ******S*
Jul 6 01:53:16 209.135.97.164:2096 -> xxx.yyy.255.211:554 SYN ******S*
74017
Jul 6 23:20:06 128.148.60.132:2259 -> xxx.yyy.1.1:1433 SYN ******S*
Jul 6 23:20:06 128.148.60.132:2260 -> xxx.yyy.1.2:1433 SYN ******S*
Jul 6 23:20:06 128.148.60.132:2261 -> xxx.yyy.1.3:1433 SYN ******S*
Jul 6 23:20:06 128.148.60.132:2262 -> xxx.yyy.1.4:1433 SYN ******S*
Jul 6 23:20:06 128.148.60.132:2263 -> xxx.yyy.1.5:1433 SYN ******S*
Jul 6 23:20:06 128.148.60.132:2264 -> xxx.yyy.1.6:1433 SYN ******S*
Jul 6 23:20:06 128.148.60.132:2265 -> xxx.yyy.1.7:1433 SYN ******S*
Jul 6 23:20:03 128.148.60.132:2266 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Jul 6 23:31:44 128.148.60.132:4839 -> xxx.yyy.255.251:1433 SYN ******S*
Jul 6 23:31:44 128.148.60.132:4836 -> xxx.yyy.255.248:1433 SYN ******S*
Jul 6 23:31:44 128.148.60.132:4842 -> xxx.yyy.255.254:1433 SYN ******S*
Jul 6 23:31:44 128.148.60.132:4840 -> xxx.yyy.255.252:1433 SYN ******S*
Jul 6 23:31:44 128.148.60.132:4837 -> xxx.yyy.255.249:1433 SYN ******S*
Jul 6 23:31:44 128.148.60.132:4838 -> xxx.yyy.255.250:1433 SYN ******S*
Jul 6 23:31:44 128.148.60.132:4835 -> xxx.yyy.255.247:1433 SYN ******S*
Jul 6 23:31:44 128.148.60.132:4841 -> xxx.yyy.255.253:1433 SYN ******S*
71597
Jul 6 16:02:02 140.135.97.159:3600 -> xxx.yyy.1.1:21 SYN ******S*
Jul 6 16:02:02 140.135.97.159:3601 -> xxx.yyy.1.2:21 SYN ******S*
Jul 6 16:02:02 140.135.97.159:3602 -> xxx.yyy.1.3:21 SYN ******S*
Jul 6 16:02:02 140.135.97.159:3603 -> xxx.yyy.1.4:21 SYN ******S*
Jul 6 16:02:02 140.135.97.159:3604 -> xxx.yyy.1.5:21 SYN ******S*
Jul 6 16:02:02 140.135.97.159:3605 -> xxx.yyy.1.6:21 SYN ******S*
Jul 6 16:02:02 140.135.97.159:3607 -> xxx.yyy.1.8:21 SYN ******S*
Jul 6 16:02:02 140.135.97.159:3608 -> xxx.yyy.1.9:21 SYN ******S*
[...]
Jul 6 16:13:06 140.135.97.159:2520 -> xxx.yyy.255.246:21 SYN ******S*
Jul 6 16:13:06 140.135.97.159:2517 -> xxx.yyy.255.243:21 SYN ******S*
Jul 6 16:13:06 140.135.97.159:2514 -> xxx.yyy.255.240:21 SYN ******S*
Jul 6 16:13:06 140.135.97.159:2524 -> xxx.yyy.255.250:21 SYN ******S*
Jul 6 16:13:06 140.135.97.159:2525 -> xxx.yyy.255.251:21 SYN ******S*
Jul 6 16:13:06 140.135.97.159:2526 -> xxx.yyy.255.252:21 SYN ******S*
Jul 6 16:13:06 140.135.97.159:2528 -> xxx.yyy.255.254:21 SYN ******S*
Jul 6 16:13:06 140.135.97.159:2527 -> xxx.yyy.255.253:21 SYN ******S*
71571
Jul 6 01:53:17 212.241.147.146:36284 -> xxx.yyy.1.1:8000 SYN ******S*
Jul 6 01:53:17 212.241.147.146:36285 -> xxx.yyy.1.2:8000 SYN ******S*
Jul 6 01:53:17 212.241.147.146:36286 -> xxx.yyy.1.3:8000 SYN ******S*
Jul 6 01:53:18 212.241.147.146:36287 -> xxx.yyy.1.4:8000 SYN ******S*
Jul 6 01:53:18 212.241.147.146:36289 -> xxx.yyy.1.5:8000 SYN ******S*
Jul 6 01:53:18 212.241.147.146:36290 -> xxx.yyy.1.6:8000 SYN ******S*
Jul 6 01:53:18 212.241.147.146:36291 -> xxx.yyy.1.7:8000 SYN ******S*
Jul 6 01:53:18 212.241.147.146:36292 -> xxx.yyy.1.8:8000 SYN ******S*
[...]
Jul 6 02:05:21 212.241.147.146:39477 -> xxx.yyy.255.246:8000 SYN ******S*
Jul 6 02:05:21 212.241.147.146:39478 -> xxx.yyy.255.247:8000 SYN ******S*
Jul 6 02:05:21 212.241.147.146:39479 -> xxx.yyy.255.248:8000 SYN ******S*
Jul 6 02:05:21 212.241.147.146:39480 -> xxx.yyy.255.249:8000 SYN ******S*
Jul 6 02:05:21 212.241.147.146:39481 -> xxx.yyy.255.250:8000 SYN ******S*
Jul 6 02:05:22 212.241.147.146:39483 -> xxx.yyy.255.252:8000 SYN ******S*
Jul 6 02:05:22 212.241.147.146:39484 -> xxx.yyy.255.253:8000 SYN ******S*
Jul 6 02:05:22 212.241.147.146:39485 -> xxx.yyy.255.254:8000 SYN ******S*
71434
Jul 6 22:35:56 132.248.107.253:4693 -> xxx.yyy.1.1:1433 SYN ******S*
Jul 6 22:35:56 132.248.107.253:4703 -> xxx.yyy.1.2:1433 SYN ******S*
Jul 6 22:35:56 132.248.107.253:4712 -> xxx.yyy.1.3:1433 SYN ******S*
Jul 6 22:35:56 132.248.107.253:4724 -> xxx.yyy.1.4:1433 SYN ******S*
Jul 6 22:35:56 132.248.107.253:4733 -> xxx.yyy.1.5:1433 SYN ******S*
Jul 6 22:35:56 132.248.107.253:4743 -> xxx.yyy.1.6:1433 SYN ******S*
Jul 6 22:35:53 132.248.107.253:4758 -> xxx.yyy.1.7:1433 SYN ******S*
Jul 6 22:35:53 132.248.107.253:4766 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Jul 6 22:47:41 132.248.107.253:3568 -> xxx.yyy.255.241:1433 SYN ******S*
Jul 6 22:47:41 132.248.107.253:3585 -> xxx.yyy.255.243:1433 SYN ******S*
Jul 6 22:47:41 132.248.107.253:3610 -> xxx.yyy.255.245:1433 SYN ******S*
Jul 6 22:47:41 132.248.107.253:3558 -> xxx.yyy.255.240:1433 SYN ******S*
Jul 6 22:47:41 132.248.107.253:3678 -> xxx.yyy.255.253:1433 SYN ******S*
Jul 6 22:47:41 132.248.107.253:3666 -> xxx.yyy.255.252:1433 SYN ******S*
Jul 6 22:47:41 132.248.107.253:3646 -> xxx.yyy.255.250:1433 SYN ******S*
Jul 6 22:47:41 132.248.107.253:3658 -> xxx.yyy.255.251:1433 SYN ******S*
Jul 6 22:47:41 132.248.107.253:3681 -> xxx.yyy.255.254:1433 SYN ******S*
71292
Jul 6 21:06:14 194.29.5.236:4178 -> xxx.yyy.1.1:1433 SYN ******S*
Jul 6 21:06:14 194.29.5.236:4179 -> xxx.yyy.1.2:1433 SYN ******S*
Jul 6 21:06:14 194.29.5.236:4180 -> xxx.yyy.1.3:1433 SYN ******S*
Jul 6 21:06:14 194.29.5.236:4181 -> xxx.yyy.1.4:1433 SYN ******S*
Jul 6 21:06:11 194.29.5.236:4182 -> xxx.yyy.1.5:1433 SYN ******S*
Jul 6 21:06:11 194.29.5.236:4183 -> xxx.yyy.1.6:1433 SYN ******S*
Jul 6 21:06:14 194.29.5.236:4184 -> xxx.yyy.1.7:1433 SYN ******S*
Jul 6 21:06:14 194.29.5.236:4185 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Jul 6 21:17:52 194.29.5.236:2949 -> xxx.yyy.255.249:1433 SYN ******S*
Jul 6 21:17:52 194.29.5.236:2948 -> xxx.yyy.255.248:1433 SYN ******S*
Jul 6 21:17:52 194.29.5.236:2946 -> xxx.yyy.255.246:1433 SYN ******S*
Jul 6 21:17:52 194.29.5.236:2945 -> xxx.yyy.255.245:1433 SYN ******S*
Jul 6 21:17:52 194.29.5.236:2950 -> xxx.yyy.255.250:1433 SYN ******S*
Jul 6 21:17:52 194.29.5.236:2947 -> xxx.yyy.255.247:1433 SYN ******S*
Jul 6 21:17:52 194.29.5.236:2954 -> xxx.yyy.255.254:1433 SYN ******S*
Jul 6 21:17:52 194.29.5.236:2953 -> xxx.yyy.255.253:1433 SYN ******S*
70466
Jul 6 09:02:32 128.138.147.135:4109 -> xxx.yyy.1.1:8000 SYN ******S*
Jul 6 09:02:32 128.138.147.135:4122 -> xxx.yyy.1.2:8000 SYN ******S*
Jul 6 09:02:32 128.138.147.135:4125 -> xxx.yyy.1.3:8000 SYN ******S*
Jul 6 09:02:34 128.138.147.135:4126 -> xxx.yyy.1.4:8000 SYN ******S*
Jul 6 09:02:34 128.138.147.135:4127 -> xxx.yyy.1.5:8000 SYN ******S*
Jul 6 09:02:34 128.138.147.135:4132 -> xxx.yyy.1.6:8000 SYN ******S*
Jul 6 09:02:34 128.138.147.135:4133 -> xxx.yyy.1.7:8000 SYN ******S*
Jul 6 09:02:34 128.138.147.135:4135 -> xxx.yyy.1.8:8000 SYN ******S*
[...]
Jul 6 09:11:17 128.138.147.135:2642 -> xxx.yyy.zzz.241:8000 SYN ******S*
Jul 6 09:11:17 128.138.147.135:2655 -> xxx.yyy.zzz.254:8000 SYN ******S*
Jul 6 09:11:17 128.138.147.135:2639 -> xxx.yyy.zzz.238:8000 SYN ******S*
Jul 6 09:11:17 128.138.147.135:2646 -> xxx.yyy.zzz.245:8000 SYN ******S*
Jul 6 09:11:17 128.138.147.135:2630 -> xxx.yyy.zzz.229:8000 SYN ******S*
Jul 6 09:11:17 128.138.147.135:2643 -> xxx.yyy.zzz.242:8000 SYN ******S*
Jul 6 09:11:17 128.138.147.135:2640 -> xxx.yyy.zzz.239:8000 SYN ******S*
Jul 6 09:11:17 128.138.147.135:2653 -> xxx.yyy.zzz.252:8000 SYN ******S*
Jul 6 09:11:17 128.138.147.135:2637 -> xxx.yyy.zzz.236:8000 SYN ******S*
67470
Jul 6 00:00:04 64.231.162.117:1117 -> xxx.yyy.184.32:139 SYN ******S*
Jul 6 00:00:01 64.231.162.117:1046 -> xxx.yyy.183.217:139 SYN ******S*
Jul 6 00:00:01 64.231.162.117:1087 -> xxx.yyy.184.2:139 SYN ******S*
Jul 6 00:00:03 64.231.162.117:1137 -> xxx.yyy.184.52:139 SYN ******S*
Jul 6 00:00:03 64.231.162.117:1107 -> xxx.yyy.184.22:139 SYN ******S*
Jul 6 00:00:03 64.231.162.117:1108 -> xxx.yyy.184.23:139 SYN ******S*
Jul 6 00:00:03 64.231.162.117:1138 -> xxx.yyy.184.53:139 SYN ******S*
Jul 6 00:00:03 64.231.162.117:1109 -> xxx.yyy.184.24:139 SYN ******S*
[...]
Jul 6 01:10:36 64.231.162.117:2928 -> xxx.yyy.255.246:139 SYN ******S*
Jul 6 01:10:36 64.231.162.117:2929 -> xxx.yyy.255.247:139 SYN ******S*
Jul 6 01:10:36 64.231.162.117:2930 -> xxx.yyy.255.248:139 SYN ******S*
Jul 6 01:10:36 64.231.162.117:2931 -> xxx.yyy.255.249:139 SYN ******S*
Jul 6 01:10:36 64.231.162.117:2932 -> xxx.yyy.255.250:139 SYN ******S*
Jul 6 01:10:37 64.231.162.117:2933 -> xxx.yyy.255.251:139 SYN ******S*
Jul 6 01:10:37 64.231.162.117:2934 -> xxx.yyy.255.252:139 SYN ******S*
Jul 6 01:10:37 64.231.162.117:2935 -> xxx.yyy.255.253:139 SYN ******S*
Jul 6 01:10:37 64.231.162.117:2936 -> xxx.yyy.255.254:139 SYN ******S*
51066
Jul 6 14:37:37 216.67.231.152:53168 -> xxx.yyy.1.0:443 SYN ******S*
Jul 6 14:37:37 216.67.231.152:53170 -> xxx.yyy.1.2:443 SYN ******S*
Jul 6 14:37:37 216.67.231.152:53169 -> xxx.yyy.1.1:443 SYN ******S*
Jul 6 14:37:40 216.67.231.152:53176 -> xxx.yyy.1.8:443 SYN ******S*
Jul 6 14:37:40 216.67.231.152:53180 -> xxx.yyy.1.12:443 SYN ******S*
Jul 6 14:37:37 216.67.231.152:53314 -> xxx.yyy.1.13:443 SYN ******S*
Jul 6 14:37:37 216.67.231.152:53171 -> xxx.yyy.1.3:443 SYN ******S*
Jul 6 14:37:40 216.67.231.152:53389 -> xxx.yyy.1.15:443 SYN ******S*
[...]
Jul 6 15:11:00 216.67.231.152:54192 -> xxx.yyy.201.28:443 SYN ******S*
Jul 6 15:11:00 216.67.231.152:54194 -> xxx.yyy.201.30:443 SYN ******S*
Jul 6 15:11:00 216.67.231.152:54195 -> xxx.yyy.201.31:443 SYN ******S*
Jul 6 15:11:00 216.67.231.152:54200 -> xxx.yyy.201.36:443 SYN ******S*
Jul 6 15:11:00 216.67.231.152:54202 -> xxx.yyy.201.38:443 SYN ******S*
Jul 6 15:11:00 216.67.231.152:54205 -> xxx.yyy.201.41:443 SYN ******S*
Jul 6 15:11:00 216.67.231.152:54203 -> xxx.yyy.201.39:443 SYN ******S*
Jul 6 15:11:00 216.67.231.152:54206 -> xxx.yyy.201.42:443 SYN ******S*
Jul 6 15:11:00 216.67.231.152:54207 -> xxx.yyy.201.43:443 SYN ******S*
49546
Jul 6 00:00:06 64.30.172.24:4224 -> xxx.yyy.152.101:715 SYN ******S*
Jul 6 00:00:06 64.30.172.24:4225 -> xxx.yyy.152.102:715 SYN ******S*
Jul 6 00:00:06 64.30.172.24:4226 -> xxx.yyy.152.103:715 SYN ******S*
Jul 6 00:00:06 64.30.172.24:4232 -> xxx.yyy.152.106:715 SYN ******S*
Jul 6 00:00:06 64.30.172.24:4227 -> xxx.yyy.152.107:715 SYN ******S*
Jul 6 00:00:03 64.30.172.24:4024 -> xxx.yyy.151.183:715 SYN ******S*
Jul 6 00:00:03 64.30.172.24:4021 -> xxx.yyy.151.180:715 SYN ******S*
Jul 6 00:00:06 64.30.172.24:4228 -> xxx.yyy.152.104:715 SYN ******S*
[...]
Jul 6 00:07:33 64.30.172.24:4176 -> xxx.yyy.255.245:715 SYN ******S*
Jul 6 00:07:33 64.30.172.24:4177 -> xxx.yyy.255.246:715 SYN ******S*
Jul 6 00:07:33 64.30.172.24:4180 -> xxx.yyy.255.249:715 SYN ******S*
Jul 6 00:07:33 64.30.172.24:4174 -> xxx.yyy.255.243:715 SYN ******S*
Jul 6 00:07:33 64.30.172.24:4182 -> xxx.yyy.255.251:715 SYN ******S*
Jul 6 00:07:33 64.30.172.24:4181 -> xxx.yyy.255.250:715 SYN ******S*
Jul 6 00:07:33 64.30.172.24:4185 -> xxx.yyy.255.254:715 SYN ******S*
Jul 6 00:07:33 64.30.172.24:4184 -> xxx.yyy.255.253:715 SYN ******S*
Jul 6 00:07:33 64.30.172.24:4183 -> xxx.yyy.255.252:715 SYN ******S*
44809
Jul 6 21:53:27 158.39.26.238:20515 -> xxx.yyy.1.43:139 SYN ******S*
Jul 6 21:53:27 158.39.26.238:20514 -> xxx.yyy.1.42:139 SYN ******S*
Jul 6 21:53:27 158.39.26.238:20509 -> xxx.yyy.1.37:139 SYN ******S*
Jul 6 21:53:27 158.39.26.238:20508 -> xxx.yyy.1.36:139 SYN ******S*
Jul 6 21:53:27 158.39.26.238:20502 -> xxx.yyy.1.30:139 SYN ******S*
Jul 6 21:53:27 158.39.26.238:20501 -> xxx.yyy.1.29:139 SYN ******S*
Jul 6 21:53:27 158.39.26.238:20500 -> xxx.yyy.1.28:139 SYN ******S*
Jul 6 21:53:27 158.39.26.238:20498 -> xxx.yyy.1.26:139 SYN ******S*
[...]
Jul 6 21:56:36 158.39.26.238:10283 -> xxx.yyy.254.186:139 SYN ******S*
Jul 6 21:56:36 158.39.26.238:10284 -> xxx.yyy.254.187:139 SYN ******S*
Jul 6 21:56:36 158.39.26.238:10285 -> xxx.yyy.254.188:139 SYN ******S*
Jul 6 21:56:36 158.39.26.238:10287 -> xxx.yyy.254.190:139 SYN ******S*
Jul 6 21:56:36 158.39.26.238:10568 -> xxx.yyy.255.177:139 SYN ******S*
Jul 6 21:56:36 158.39.26.238:10302 -> xxx.yyy.254.205:139 SYN ******S*
Jul 6 21:56:36 158.39.26.238:10529 -> xxx.yyy.255.222:139 SYN ******S*
Jul 6 21:56:36 158.39.26.238:10275 -> xxx.yyy.254.178:139 SYN ******S*
Jul 6 21:56:36 158.39.26.238:10286 -> xxx.yyy.254.189:139 SYN ******S*
43056
Jul 6 04:39:48 61.11.3.109:47529 -> xxx.yyy.1.0:21 SYN ******S*
Jul 6 04:39:48 61.11.3.109:47530 -> xxx.yyy.1.1:21 SYN ******S*
Jul 6 04:39:48 61.11.3.109:47531 -> xxx.yyy.1.2:21 SYN ******S*
Jul 6 04:39:48 61.11.3.109:47533 -> xxx.yyy.1.4:21 SYN ******S*
Jul 6 04:39:48 61.11.3.109:47563 -> xxx.yyy.1.34:21 SYN ******S*
Jul 6 04:39:48 61.11.3.109:47574 -> xxx.yyy.1.44:21 SYN ******S*
Jul 6 04:39:48 61.11.3.109:47532 -> xxx.yyy.1.3:21 SYN ******S*
Jul 6 04:39:48 61.11.3.109:47585 -> xxx.yyy.1.55:21 SYN ******S*
[...]
Jul 6 04:50:41 61.11.3.109:50750 -> xxx.yyy.255.247:21 SYN ******S*
Jul 6 04:50:41 61.11.3.109:50752 -> xxx.yyy.255.249:21 SYN ******S*
Jul 6 04:50:41 61.11.3.109:50753 -> xxx.yyy.255.250:21 SYN ******S*
Jul 6 04:50:41 61.11.3.109:50754 -> xxx.yyy.255.251:21 SYN ******S*
Jul 6 04:50:41 61.11.3.109:50758 -> xxx.yyy.255.255:21 SYN ******S*
Jul 6 04:50:41 61.11.3.109:50755 -> xxx.yyy.255.252:21 SYN ******S*
Jul 6 04:50:41 61.11.3.109:50756 -> xxx.yyy.255.253:21 SYN ******S*
Jul 6 04:50:41 61.11.3.109:50757 -> xxx.yyy.255.254:21 SYN ******S*
28157
Jul 6 07:54:24 24.37.175.52:41505 -> xxx.yyy.1.0:2401 SYN ******S*
Jul 6 07:54:21 24.37.175.52:41507 -> xxx.yyy.1.2:2401 SYN ******S*
Jul 6 07:54:21 24.37.175.52:41508 -> xxx.yyy.1.3:2401 SYN ******S*
Jul 6 07:54:21 24.37.175.52:41506 -> xxx.yyy.1.1:2401 SYN ******S*
Jul 6 07:54:24 24.37.175.52:41509 -> xxx.yyy.1.4:2401 SYN ******S*
Jul 6 07:54:24 24.37.175.52:41510 -> xxx.yyy.1.5:2401 SYN ******S*
Jul 6 07:54:24 24.37.175.52:41513 -> xxx.yyy.1.8:2401 SYN ******S*
Jul 6 07:54:24 24.37.175.52:41515 -> xxx.yyy.1.10:2401 SYN ******S*
[...]
Jul 6 08:02:58 24.37.175.52:49973 -> xxx.yyy.255.163:2401 SYN ******S*
Jul 6 08:02:58 24.37.175.52:49975 -> xxx.yyy.255.165:2401 SYN ******S*
Jul 6 08:02:58 24.37.175.52:49974 -> xxx.yyy.255.164:2401 SYN ******S*
Jul 6 08:02:58 24.37.175.52:49976 -> xxx.yyy.255.166:2401 SYN ******S*
Jul 6 08:02:58 24.37.175.52:49977 -> xxx.yyy.255.167:2401 SYN ******S*
Jul 6 08:02:58 24.37.175.52:49979 -> xxx.yyy.255.169:2401 SYN ******S*
Jul 6 08:02:58 24.37.175.52:49981 -> xxx.yyy.255.171:2401 SYN ******S*
Jul 6 08:02:58 24.37.175.52:49980 -> xxx.yyy.255.170:2401 SYN ******S*
Jul 6 08:02:58 24.37.175.52:49978 -> xxx.yyy.255.168:2401 SYN ******S*
23684
Jul 6 00:57:46 218.24.193.140:3547 -> xxx.yyy.194.125:5554 SYN ******S*
Jul 6 00:57:49 218.24.193.140:4351 -> xxx.yyy.194.125:1023 SYN ******S*
Jul 6 00:57:46 218.24.193.140:3550 -> xxx.yyy.194.126:5554 SYN ******S*
Jul 6 00:57:49 218.24.193.140:4353 -> xxx.yyy.194.126:1023 SYN ******S*
Jul 6 00:57:46 218.24.193.140:3553 -> xxx.yyy.194.124:5554 SYN ******S*
Jul 6 00:57:49 218.24.193.140:4356 -> xxx.yyy.194.124:1023 SYN ******S*
Jul 6 00:57:46 218.24.193.140:3554 -> xxx.yyy.194.127:5554 SYN ******S*
Jul 6 00:57:49 218.24.193.140:4369 -> xxx.yyy.194.127:1023 SYN ******S*
[...]
Jul 6 01:00:33 218.24.193.140:1097 -> xxx.yyy.214.225:9898 SYN ******S*
Jul 6 01:00:33 218.24.193.140:1095 -> xxx.yyy.214.224:9898 SYN ******S*
Jul 6 01:00:33 218.24.193.140:1100 -> xxx.yyy.214.244:9898 SYN ******S*
Jul 6 01:00:33 218.24.193.140:1101 -> xxx.yyy.214.239:9898 SYN ******S*
Jul 6 01:00:33 218.24.193.140:1099 -> xxx.yyy.214.229:9898 SYN ******S*
Jul 6 01:00:33 218.24.193.140:1106 -> xxx.yyy.214.243:9898 SYN ******S*
Jul 6 01:00:33 218.24.193.140:1110 -> xxx.yyy.214.234:9898 SYN ******S*
Jul 6 01:00:33 218.24.193.140:1130 -> xxx.yyy.214.245:9898 SYN ******S*
15020
Jul 6 16:32:47 218.25.71.52:3021 -> xxx.yyy.71.160:5554 SYN ******S*
Jul 6 16:32:48 218.25.71.52:3671 -> xxx.yyy.71.160:1023 SYN ******S*
Jul 6 16:32:50 218.25.71.52:1447 -> xxx.yyy.71.160:9898 SYN ******S*
Jul 6 16:32:47 218.25.71.52:3024 -> xxx.yyy.71.162:5554 SYN ******S*
Jul 6 16:32:48 218.25.71.52:3676 -> xxx.yyy.71.162:1023 SYN ******S*
Jul 6 16:32:50 218.25.71.52:1467 -> xxx.yyy.71.162:9898 SYN ******S*
Jul 6 16:32:47 218.25.71.52:3025 -> xxx.yyy.71.163:5554 SYN ******S*
Jul 6 16:32:48 218.25.71.52:3679 -> xxx.yyy.71.163:1023 SYN ******S*
[...]
Jul 6 16:33:29 218.25.71.52:3591 -> xxx.yyy.91.247:9898 SYN ******S*
Jul 6 16:33:29 218.25.71.52:3594 -> xxx.yyy.91.250:9898 SYN ******S*
Jul 6 16:33:29 218.25.71.52:3595 -> xxx.yyy.91.251:9898 SYN ******S*
Jul 6 16:33:29 218.25.71.52:3596 -> xxx.yyy.91.252:9898 SYN ******S*
Jul 6 16:33:29 218.25.71.52:3593 -> xxx.yyy.91.249:9898 SYN ******S*
Jul 6 16:33:29 218.25.71.52:3597 -> xxx.yyy.91.253:9898 SYN ******S*
Jul 6 16:33:29 218.25.71.52:3602 -> xxx.yyy.91.254:9898 SYN ******S*
Jul 6 16:33:29 218.25.71.52:3619 -> xxx.yyy.92.3:9898 SYN ******S*
Jul 6 16:33:29 218.25.71.52:3620 -> xxx.yyy.92.4:9898 SYN ******S*
14521
Jul 6 00:44:01 221.216.28.201:1118 -> xxx.yyy.72.124:5554 SYN ******S*
Jul 6 00:44:02 221.216.28.201:1570 -> xxx.yyy.72.124:1023 SYN ******S*
Jul 6 00:44:04 221.216.28.201:2662 -> xxx.yyy.72.124:9898 SYN ******S*
Jul 6 00:44:01 221.216.28.201:1128 -> xxx.yyy.72.125:5554 SYN ******S*
Jul 6 00:44:02 221.216.28.201:1594 -> xxx.yyy.72.125:1023 SYN ******S*
Jul 6 00:44:04 221.216.28.201:2794 -> xxx.yyy.72.125:9898 SYN ******S*
Jul 6 00:44:01 221.216.28.201:1202 -> xxx.yyy.72.126:5554 SYN ******S*
Jul 6 00:44:02 221.216.28.201:1664 -> xxx.yyy.72.126:1023 SYN ******S*
[...]
Jul 6 00:44:45 221.216.28.201:2409 -> xxx.yyy.92.237:9898 SYN ******S*
Jul 6 00:44:45 221.216.28.201:2411 -> xxx.yyy.92.242:9898 SYN ******S*
Jul 6 00:44:45 221.216.28.201:2412 -> xxx.yyy.92.243:9898 SYN ******S*
Jul 6 00:44:45 221.216.28.201:2414 -> xxx.yyy.92.245:9898 SYN ******S*
Jul 6 00:44:45 221.216.28.201:2413 -> xxx.yyy.92.244:9898 SYN ******S*
Jul 6 00:44:45 221.216.28.201:2417 -> xxx.yyy.92.240:9898 SYN ******S*
Jul 6 00:44:45 221.216.28.201:2418 -> xxx.yyy.92.241:9898 SYN ******S*
Jul 6 00:44:45 221.216.28.201:2416 -> xxx.yyy.92.239:9898 SYN ******S*
Jul 6 00:44:45 221.216.28.201:2423 -> xxx.yyy.92.246:9898 SYN ******S*
14390
Jul 6 00:59:26 221.216.30.234:1025 -> xxx.yyy.153.137:5554 SYN ******S*
Jul 6 00:59:27 221.216.30.234:1025 -> xxx.yyy.153.137:1023 SYN ******S*
Jul 6 00:59:29 221.216.30.234:1495 -> xxx.yyy.153.137:9898 SYN ******S*
Jul 6 00:59:26 221.216.30.234:1025 -> xxx.yyy.153.136:5554 SYN ******S*
Jul 6 00:59:27 221.216.30.234:1025 -> xxx.yyy.153.136:1023 SYN ******S*
Jul 6 00:59:29 221.216.30.234:1494 -> xxx.yyy.153.136:9898 SYN ******S*
Jul 6 00:59:26 221.216.30.234:1025 -> xxx.yyy.153.138:5554 SYN ******S*
Jul 6 00:59:27 221.216.30.234:1025 -> xxx.yyy.153.138:1023 SYN ******S*
[...]
Jul 6 01:00:15 221.216.30.234:2979 -> xxx.yyy.173.255:9898 SYN ******S*
Jul 6 01:00:15 221.216.30.234:2982 -> xxx.yyy.174.2:9898 SYN ******S*
Jul 6 01:00:15 221.216.30.234:2970 -> xxx.yyy.173.245:9898 SYN ******S*
Jul 6 01:00:15 221.216.30.234:2971 -> xxx.yyy.173.246:9898 SYN ******S*
Jul 6 01:00:15 221.216.30.234:2973 -> xxx.yyy.173.248:9898 SYN ******S*
Jul 6 01:00:15 221.216.30.234:2976 -> xxx.yyy.173.252:9898 SYN ******S*
Jul 6 01:00:15 221.216.30.234:2975 -> xxx.yyy.173.251:9898 SYN ******S*
Jul 6 01:00:15 221.216.30.234:2978 -> xxx.yyy.173.254:9898 SYN ******S*
13910
Jul 6 00:56:51 218.25.229.42:3865 -> xxx.yyy.71.164:5554 SYN ******S*
Jul 6 00:56:54 218.25.229.42:4501 -> xxx.yyy.71.164:9898 SYN ******S*
Jul 6 00:56:51 218.25.229.42:3868 -> xxx.yyy.71.161:5554 SYN ******S*
Jul 6 00:56:54 218.25.229.42:4502 -> xxx.yyy.71.161:9898 SYN ******S*
Jul 6 00:56:51 218.25.229.42:3870 -> xxx.yyy.71.167:5554 SYN ******S*
Jul 6 00:56:51 218.25.229.42:3876 -> xxx.yyy.71.173:5554 SYN ******S*
Jul 6 00:56:54 218.25.229.42:4513 -> xxx.yyy.71.173:9898 SYN ******S*
Jul 6 00:56:51 218.25.229.42:3864 -> xxx.yyy.71.166:5554 SYN ******S*
[...]
Jul 6 00:58:27 218.25.229.42:2714 -> xxx.yyy.92.18:9898 SYN ******S*
Jul 6 00:58:27 218.25.229.42:2715 -> xxx.yyy.92.19:9898 SYN ******S*
Jul 6 00:58:27 218.25.229.42:2717 -> xxx.yyy.92.21:9898 SYN ******S*
Jul 6 00:58:27 218.25.229.42:2716 -> xxx.yyy.92.20:9898 SYN ******S*
Jul 6 00:58:27 218.25.229.42:2718 -> xxx.yyy.92.22:9898 SYN ******S*
Jul 6 00:58:27 218.25.229.42:2719 -> xxx.yyy.92.23:9898 SYN ******S*
Jul 6 00:58:27 218.25.229.42:2720 -> xxx.yyy.92.24:9898 SYN ******S*
Jul 6 00:58:27 218.25.229.42:2724 -> xxx.yyy.92.25:9898 SYN ******S*
Jul 6 00:58:27 218.25.229.42:2779 -> xxx.yyy.92.26:9898 SYN ******S*
13648
Jul 6 00:56:13 218.24.172.209:4404 -> xxx.yyy.214.246:5554 SYN ******S*
Jul 6 00:56:14 218.24.172.209:1269 -> xxx.yyy.214.246:1023 SYN ******S*
Jul 6 00:56:16 218.24.172.209:2471 -> xxx.yyy.214.246:9898 SYN ******S*
Jul 6 00:56:13 218.24.172.209:4414 -> xxx.yyy.214.247:5554 SYN ******S*
Jul 6 00:56:14 218.24.172.209:1272 -> xxx.yyy.214.247:1023 SYN ******S*
Jul 6 00:56:16 218.24.172.209:2476 -> xxx.yyy.214.247:9898 SYN ******S*
Jul 6 00:56:13 218.24.172.209:4421 -> xxx.yyy.214.248:5554 SYN ******S*
Jul 6 00:56:14 218.24.172.209:1274 -> xxx.yyy.214.248:1023 SYN ******S*
[...]
Jul 6 00:56:54 218.24.172.209:3957 -> xxx.yyy.235.100:9898 SYN ******S*
Jul 6 00:56:54 218.24.172.209:3955 -> xxx.yyy.235.99:9898 SYN ******S*
Jul 6 00:56:54 218.24.172.209:3958 -> xxx.yyy.235.101:9898 SYN ******S*
Jul 6 00:56:54 218.24.172.209:3964 -> xxx.yyy.235.102:9898 SYN ******S*
Jul 6 00:56:54 218.24.172.209:3966 -> xxx.yyy.235.103:9898 SYN ******S*
Jul 6 00:56:54 218.24.172.209:3967 -> xxx.yyy.235.104:9898 SYN ******S*
Jul 6 00:56:54 218.24.172.209:3974 -> xxx.yyy.235.105:9898 SYN ******S*
Jul 6 00:56:54 218.24.172.209:3975 -> xxx.yyy.235.106:9898 SYN ******S*
12853
Jul 6 00:57:50 218.24.86.238:3212 -> xxx.yyy.72.127:5554 SYN ******S*
Jul 6 00:57:51 218.24.86.238:4372 -> xxx.yyy.72.127:1023 SYN ******S*
Jul 6 00:57:50 218.24.86.238:3219 -> xxx.yyy.72.128:5554 SYN ******S*
Jul 6 00:57:51 218.24.86.238:4375 -> xxx.yyy.72.128:1023 SYN ******S*
Jul 6 00:57:50 218.24.86.238:3224 -> xxx.yyy.72.131:5554 SYN ******S*
Jul 6 00:57:51 218.24.86.238:4378 -> xxx.yyy.72.131:1023 SYN ******S*
Jul 6 00:57:50 218.24.86.238:3228 -> xxx.yyy.72.135:5554 SYN ******S*
Jul 6 00:57:51 218.24.86.238:4409 -> xxx.yyy.72.135:1023 SYN ******S*
[...]
Jul 6 00:58:31 218.24.86.238:1219 -> xxx.yyy.92.235:9898 SYN ******S*
Jul 6 00:58:31 218.24.86.238:1220 -> xxx.yyy.92.236:9898 SYN ******S*
Jul 6 00:58:31 218.24.86.238:1227 -> xxx.yyy.92.243:9898 SYN ******S*
Jul 6 00:58:31 218.24.86.238:1236 -> xxx.yyy.92.240:9898 SYN ******S*
Jul 6 00:58:31 218.24.86.238:1237 -> xxx.yyy.92.241:9898 SYN ******S*
Jul 6 00:58:31 218.24.86.238:1238 -> xxx.yyy.92.242:9898 SYN ******S*
Jul 6 00:58:31 218.24.86.238:1239 -> xxx.yyy.92.246:9898 SYN ******S*
Jul 6 00:58:31 218.24.86.238:1240 -> xxx.yyy.92.239:9898 SYN ******S*
11882
[...]
6569
Jul 6 00:56:12 221.216.32.111:4816 -> xxx.yyy.72.124:5554 SYN ******S*
Jul 6 00:56:13 221.216.32.111:1704 -> xxx.yyy.72.124:1023 SYN ******S*
Jul 6 00:56:15 221.216.32.111:3175 -> xxx.yyy.72.124:9898 SYN ******S*
Jul 6 00:56:12 221.216.32.111:4817 -> xxx.yyy.72.128:5554 SYN ******S*
Jul 6 00:56:13 221.216.32.111:1705 -> xxx.yyy.72.128:1023 SYN ******S*
Jul 6 00:56:15 221.216.32.111:3176 -> xxx.yyy.72.128:9898 SYN ******S*
Jul 6 00:56:12 221.216.32.111:4838 -> xxx.yyy.72.136:5554 SYN ******S*
Jul 6 00:56:12 221.216.32.111:4818 -> xxx.yyy.72.129:5554 SYN ******S*
[...]
Jul 6 00:56:53 221.216.32.111:1870 -> xxx.yyy.92.145:9898 SYN ******S*
Jul 6 00:56:54 221.216.32.111:1948 -> xxx.yyy.92.160:9898 SYN ******S*
Jul 6 00:56:54 221.216.32.111:1956 -> xxx.yyy.92.161:9898 SYN ******S*
Jul 6 00:56:54 221.216.32.111:1975 -> xxx.yyy.92.163:9898 SYN ******S*
Jul 6 00:56:54 221.216.32.111:1978 -> xxx.yyy.92.165:9898 SYN ******S*
Jul 6 00:56:54 221.216.32.111:1977 -> xxx.yyy.92.164:9898 SYN ******S*
Jul 6 00:56:54 221.216.32.111:2260 -> xxx.yyy.92.202:9898 SYN ******S*
Jul 6 00:56:54 221.216.32.111:2307 -> xxx.yyy.92.238:9898 SYN ******S*
Jul 6 00:56:54 221.216.32.111:2314 -> xxx.yyy.92.244:9898 SYN ******S*
5953
Jul 6 00:56:44 218.65.245.92:2488 -> xxx.yyy.215.237:5554 SYN ******S*
Jul 6 00:56:46 218.65.245.92:2966 -> xxx.yyy.215.237:1023 SYN ******S*
Jul 6 00:56:44 218.65.245.92:2496 -> xxx.yyy.215.229:5554 SYN ******S*
Jul 6 00:56:44 218.65.245.92:2503 -> xxx.yyy.215.222:5554 SYN ******S*
Jul 6 00:56:46 218.65.245.92:2980 -> xxx.yyy.215.222:1023 SYN ******S*
Jul 6 00:56:44 218.65.245.92:2498 -> xxx.yyy.215.227:5554 SYN ******S*
Jul 6 00:56:46 218.65.245.92:2975 -> xxx.yyy.215.227:1023 SYN ******S*
Jul 6 00:56:44 218.65.245.92:2502 -> xxx.yyy.215.223:5554 SYN ******S*
[...]
Jul 6 00:57:59 218.65.245.92:2547 -> xxx.yyy.236.18:9898 SYN ******S*
Jul 6 00:57:59 218.65.245.92:2625 -> xxx.yyy.236.70:9898 SYN ******S*
Jul 6 00:57:59 218.65.245.92:2657 -> xxx.yyy.236.65:9898 SYN ******S*
Jul 6 00:58:00 218.65.245.92:2711 -> xxx.yyy.236.73:9898 SYN ******S*
Jul 6 00:58:00 218.65.245.92:2709 -> xxx.yyy.236.75:9898 SYN ******S*
Jul 6 00:58:00 218.65.245.92:2708 -> xxx.yyy.236.76:9898 SYN ******S*
Jul 6 00:58:00 218.65.245.92:2644 -> xxx.yyy.236.20:9898 SYN ******S*
Jul 6 00:58:00 218.65.245.92:2653 -> xxx.yyy.236.25:9898 SYN ******S*
Jul 6 00:58:00 218.65.245.92:2609 -> xxx.yyy.236.62:9898 SYN ******S*
5801
Jul 6 04:59:15 82.254.35.217:1030 -> xxx.yyy.1.0:1433 SYN ******S*
Jul 6 04:59:15 82.254.35.217:1031 -> xxx.yyy.1.1:1433 SYN ******S*
Jul 6 04:59:15 82.254.35.217:1032 -> xxx.yyy.1.2:1433 SYN ******S*
Jul 6 04:59:15 82.254.35.217:1033 -> xxx.yyy.1.3:1433 SYN ******S*
Jul 6 04:59:15 82.254.35.217:1034 -> xxx.yyy.1.4:1433 SYN ******S*
Jul 6 04:59:12 82.254.35.217:1035 -> xxx.yyy.1.5:1433 SYN ******S*
Jul 6 04:59:12 82.254.35.217:1036 -> xxx.yyy.1.6:1433 SYN ******S*
Jul 6 04:59:12 82.254.35.217:1037 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Jul 6 05:38:23 82.254.35.217:4113 -> xxx.yyy.17.253:1433 SYN ******S*
Jul 6 05:38:23 82.254.35.217:4114 -> xxx.yyy.17.254:1433 SYN ******S*
Jul 6 05:38:23 82.254.35.217:4115 -> xxx.yyy.17.255:1433 SYN ******S*
Jul 6 05:38:29 82.254.35.217:4109 -> xxx.yyy.17.251:1433 SYN ******S*
Jul 6 05:38:29 82.254.35.217:4110 -> xxx.yyy.17.252:1433 SYN ******S*
Jul 6 05:38:29 82.254.35.217:4113 -> xxx.yyy.17.253:1433 SYN ******S*
Jul 6 05:38:30 82.254.35.217:4114 -> xxx.yyy.17.254:1433 SYN ******S*
Jul 6 05:38:30 82.254.35.217:4115 -> xxx.yyy.17.255:1433 SYN ******S*
5698
Jul 6 00:46:00 219.140.88.41:4322 -> xxx.yyy.215.215:5554 SYN ******S*
Jul 6 00:46:01 219.140.88.41:4493 -> xxx.yyy.215.215:1023 SYN ******S*
Jul 6 00:46:00 219.140.88.41:4325 -> xxx.yyy.215.213:5554 SYN ******S*
Jul 6 00:46:01 219.140.88.41:4321 -> xxx.yyy.215.214:5554 SYN ******S*
Jul 6 00:46:02 219.140.88.41:4492 -> xxx.yyy.215.214:1023 SYN ******S*
Jul 6 00:46:04 219.140.88.41:1074 -> xxx.yyy.215.214:9898 SYN ******S*
Jul 6 00:46:01 219.140.88.41:4316 -> xxx.yyy.215.210:5554 SYN ******S*
Jul 6 00:46:02 219.140.88.41:4484 -> xxx.yyy.215.210:1023 SYN ******S*
[...]
Jul 6 00:47:53 219.140.88.41:2945 -> xxx.yyy.236.17:9898 SYN ******S*
Jul 6 00:47:53 219.140.88.41:2947 -> xxx.yyy.236.23:9898 SYN ******S*
Jul 6 00:47:53 219.140.88.41:2961 -> xxx.yyy.236.41:9898 SYN ******S*
Jul 6 00:47:53 219.140.88.41:2957 -> xxx.yyy.236.37:9898 SYN ******S*
Jul 6 00:47:53 219.140.88.41:2984 -> xxx.yyy.236.43:9898 SYN ******S*
Jul 6 00:47:53 219.140.88.41:3006 -> xxx.yyy.236.53:9898 SYN ******S*
Jul 6 00:47:53 219.140.88.41:2934 -> xxx.yyy.236.30:9898 SYN ******S*
Jul 6 00:47:54 219.140.88.41:3244 -> xxx.yyy.236.69:9898 SYN ******S*
Jul 6 00:47:55 219.140.88.41:3246 -> xxx.yyy.236.71:9898 SYN ******S*
5683
Jul 6 00:55:59 61.49.138.129:4167 -> xxx.yyy.64.0:5554 SYN ******S*
Jul 6 00:56:00 61.49.138.129:4908 -> xxx.yyy.64.0:1023 SYN ******S*
Jul 6 00:56:02 61.49.138.129:1841 -> xxx.yyy.64.0:9898 SYN ******S*
Jul 6 00:55:59 61.49.138.129:4176 -> xxx.yyy.64.1:5554 SYN ******S*
Jul 6 00:56:00 61.49.138.129:4914 -> xxx.yyy.64.1:1023 SYN ******S*
Jul 6 00:56:02 61.49.138.129:1844 -> xxx.yyy.64.1:9898 SYN ******S*
Jul 6 00:55:59 61.49.138.129:4183 -> xxx.yyy.64.2:5554 SYN ******S*
Jul 6 00:56:00 61.49.138.129:4939 -> xxx.yyy.64.2:1023 SYN ******S*
[...]
Jul 6 00:56:18 61.49.138.129:2214 -> xxx.yyy.71.30:9898 SYN ******S*
Jul 6 00:56:18 61.49.138.129:2215 -> xxx.yyy.71.31:9898 SYN ******S*
Jul 6 00:56:18 61.49.138.129:2213 -> xxx.yyy.71.29:9898 SYN ******S*
Jul 6 00:56:18 61.49.138.129:2224 -> xxx.yyy.71.32:9898 SYN ******S*
Jul 6 00:56:18 61.49.138.129:2228 -> xxx.yyy.71.33:9898 SYN ******S*
Jul 6 00:56:18 61.49.138.129:2235 -> xxx.yyy.71.34:9898 SYN ******S*
Jul 6 00:56:18 61.49.138.129:2247 -> xxx.yyy.71.35:9898 SYN ******S*
Jul 6 00:56:18 61.49.138.129:2251 -> xxx.yyy.71.36:9898 SYN ******S*
5579
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list