[Intrusions] [LOGS] Summary of large-scale portscanning detects

Ken.Connelly at uni.edu Ken.Connelly at uni.edu
Wed Jun 2 16:44:54 GMT 2004


The following extracts show the beginning and ending of scan activity
was detected on my network.  The number following each set is the total
number of probes for that source.  Timestamps are GMT-0500.

May 31 14:32:53 208.229.214.30:3337 -> xxx.yyy.4.1:80 SYN ******S* 
May 31 14:32:53 208.229.214.30:3340 -> xxx.yyy.10.1:80 SYN ******S* 
May 31 14:32:53 208.229.214.30:3341 -> xxx.yyy.12.1:80 SYN ******S* 
May 31 14:32:53 208.229.214.30:3342 -> xxx.yyy.14.1:80 SYN ******S* 
May 31 14:32:53 208.229.214.30:3343 -> xxx.yyy.16.1:80 SYN ******S* 
May 31 14:32:53 208.229.214.30:3345 -> xxx.yyy.20.1:80 SYN ******S* 
May 31 14:32:53 208.229.214.30:3351 -> xxx.yyy.32.1:80 SYN ******S* 
May 31 14:32:55 208.229.214.30:3368 -> xxx.yyy.64.1:80 SYN ******S* 
[...]
May 31 21:29:57 208.229.214.30:3984 -> xxx.yyy.197.254:80 SYN ******S* 
May 31 21:29:57 208.229.214.30:3987 -> xxx.yyy.203.254:80 SYN ******S* 
May 31 21:29:57 208.229.214.30:3986 -> xxx.yyy.201.254:80 SYN ******S* 
May 31 21:29:57 208.229.214.30:3988 -> xxx.yyy.205.254:80 SYN ******S* 
May 31 21:29:57 208.229.214.30:3989 -> xxx.yyy.219.254:80 SYN ******S* 
May 31 21:29:57 208.229.214.30:3990 -> xxx.yyy.251.254:80 SYN ******S* 
May 31 21:29:57 208.229.214.30:3991 -> xxx.yyy.255.254:80 SYN ******S* 
May 31 21:30:03 208.229.214.30:4063 -> xxx.yyy.13.240:80 SYN ******S* 
166054

May 31 00:00:04 221.2.89.99:4494 -> xxx.yyy.137.203:1025 SYN ******S* 
May 31 00:00:04 221.2.89.99:4496 -> xxx.yyy.137.203:3127 SYN ******S* 
May 31 00:00:04 221.2.89.99:4497 -> xxx.yyy.137.203:6129 SYN ******S* 
May 31 00:00:04 221.2.89.99:4492 -> xxx.yyy.137.203:2745 SYN ******S* 
May 31 00:00:04 221.2.89.99:4523 -> xxx.yyy.141.39:2745 SYN ******S* 
May 31 00:00:05 221.2.89.99:4134 -> xxx.yyy.145.218:1025 SYN ******S* 
May 31 00:00:05 221.2.89.99:4132 -> xxx.yyy.145.218:2745 SYN ******S* 
May 31 00:00:06 221.2.89.99:4765 -> xxx.yyy.175.231:2745 SYN ******S* 
[...]
May 31 18:14:42 221.2.89.99:4425 -> xxx.yyy.228.69:3127 SYN ******S* 
May 31 18:14:44 221.2.89.99:4421 -> xxx.yyy.228.69:2745 SYN ******S* 
May 31 18:14:45 221.2.89.99:4423 -> xxx.yyy.228.69:1025 SYN ******S* 
May 31 18:14:45 221.2.89.99:4425 -> xxx.yyy.228.69:3127 SYN ******S* 
May 31 18:14:44 221.2.89.99:4348 -> xxx.yyy.158.124:6129 SYN ******S* 
May 31 18:14:44 221.2.89.99:4350 -> xxx.yyy.158.124:80 SYN ******S* 
May 31 18:14:44 221.2.89.99:4343 -> xxx.yyy.158.124:2745 SYN ******S* 
May 31 18:14:44 221.2.89.99:4347 -> xxx.yyy.158.124:3127 SYN ******S* 
May 31 18:14:44 221.2.89.99:4345 -> xxx.yyy.158.124:1025 SYN ******S* 
125620

May 31 15:53:23 211.38.110.21:2259 -> xxx.yyy.128.0:1433 SYN ******S* 
May 31 15:53:23 211.38.110.21:2262 -> xxx.yyy.128.1:1433 SYN ******S* 
May 31 15:53:24 211.38.110.21:2266 -> xxx.yyy.128.2:1433 SYN ******S* 
May 31 15:53:24 211.38.110.21:2268 -> xxx.yyy.128.3:1433 SYN ******S* 
May 31 15:53:24 211.38.110.21:2270 -> xxx.yyy.128.4:1433 SYN ******S* 
May 31 15:53:24 211.38.110.21:2272 -> xxx.yyy.128.5:1433 SYN ******S* 
May 31 15:53:24 211.38.110.21:2274 -> xxx.yyy.128.6:1433 SYN ******S* 
May 31 15:53:24 211.38.110.21:2276 -> xxx.yyy.128.7:1433 SYN ******S* 
[...]
May 31 17:48:07 211.38.110.21:1687 -> xxx.yyy.255.245:1433 SYN ******S* 
May 31 17:48:08 211.38.110.21:1696 -> xxx.yyy.255.250:1433 SYN ******S* 
May 31 17:48:08 211.38.110.21:1693 -> xxx.yyy.255.247:1433 SYN ******S* 
May 31 17:48:08 211.38.110.21:1695 -> xxx.yyy.255.249:1433 SYN ******S* 
May 31 17:48:08 211.38.110.21:1694 -> xxx.yyy.255.248:1433 SYN ******S* 
May 31 17:48:08 211.38.110.21:1700 -> xxx.yyy.255.252:1433 SYN ******S* 
May 31 17:48:08 211.38.110.21:1699 -> xxx.yyy.255.251:1433 SYN ******S* 
May 31 17:48:08 211.38.110.21:1702 -> xxx.yyy.255.254:1433 SYN ******S* 
May 31 17:48:08 211.38.110.21:1701 -> xxx.yyy.255.253:1433 SYN ******S* 
88647

May 31 17:18:43 202.56.199.249:2170 -> xxx.yyy.1.1:6129 SYN ******S* 
May 31 17:18:43 202.56.199.249:2171 -> xxx.yyy.1.2:6129 SYN ******S* 
May 31 17:18:45 202.56.199.249:2172 -> xxx.yyy.1.3:6129 SYN ******S* 
May 31 17:18:45 202.56.199.249:2173 -> xxx.yyy.1.4:6129 SYN ******S* 
May 31 17:18:45 202.56.199.249:2174 -> xxx.yyy.1.5:6129 SYN ******S* 
May 31 17:18:45 202.56.199.249:2175 -> xxx.yyy.1.6:6129 SYN ******S* 
May 31 17:18:45 202.56.199.249:2176 -> xxx.yyy.1.7:6129 SYN ******S* 
May 31 17:18:45 202.56.199.249:2177 -> xxx.yyy.1.8:6129 SYN ******S* 
[...]
May 31 17:32:59 202.56.199.249:3836 -> xxx.yyy.255.188:6129 SYN ******S* 
May 31 17:32:59 202.56.199.249:3839 -> xxx.yyy.255.191:6129 SYN ******S* 
May 31 17:32:59 202.56.199.249:3840 -> xxx.yyy.255.192:6129 SYN ******S* 
May 31 17:32:59 202.56.199.249:3842 -> xxx.yyy.255.194:6129 SYN ******S* 
May 31 17:32:59 202.56.199.249:3841 -> xxx.yyy.255.193:6129 SYN ******S* 
May 31 17:32:59 202.56.199.249:3844 -> xxx.yyy.255.196:6129 SYN ******S* 
May 31 17:32:59 202.56.199.249:3843 -> xxx.yyy.255.195:6129 SYN ******S* 
May 31 17:32:59 202.56.199.249:3846 -> xxx.yyy.255.198:6129 SYN ******S* 
73574

May 31 03:34:36 129.93.233.11:3355 -> xxx.yyy.1.1:1433 SYN ******S* 
May 31 03:34:36 129.93.233.11:3356 -> xxx.yyy.1.2:1433 SYN ******S* 
May 31 03:34:36 129.93.233.11:3357 -> xxx.yyy.1.3:1433 SYN ******S* 
May 31 03:34:36 129.93.233.11:3358 -> xxx.yyy.1.4:1433 SYN ******S* 
May 31 03:34:36 129.93.233.11:3359 -> xxx.yyy.1.5:1433 SYN ******S* 
May 31 03:34:36 129.93.233.11:3360 -> xxx.yyy.1.6:1433 SYN ******S* 
May 31 03:34:36 129.93.233.11:3361 -> xxx.yyy.1.7:1433 SYN ******S* 
May 31 03:34:33 129.93.233.11:3362 -> xxx.yyy.1.8:1433 SYN ******S* 
[...]
May 31 04:59:49 129.93.233.11:1616 -> xxx.yyy.255.246:1433 SYN ******S* 
May 31 04:59:49 129.93.233.11:1617 -> xxx.yyy.255.247:1433 SYN ******S* 
May 31 04:59:49 129.93.233.11:1618 -> xxx.yyy.255.248:1433 SYN ******S* 
May 31 04:59:49 129.93.233.11:1619 -> xxx.yyy.255.249:1433 SYN ******S* 
May 31 04:59:49 129.93.233.11:1620 -> xxx.yyy.255.250:1433 SYN ******S* 
May 31 04:59:49 129.93.233.11:1621 -> xxx.yyy.255.251:1433 SYN ******S* 
May 31 04:59:49 129.93.233.11:1622 -> xxx.yyy.255.252:1433 SYN ******S* 
May 31 04:59:49 129.93.233.11:1623 -> xxx.yyy.255.253:1433 SYN ******S* 
May 31 04:59:49 129.93.233.11:1624 -> xxx.yyy.255.254:1433 SYN ******S* 
73172

May 31 06:40:44 195.240.127.80:3344 -> xxx.yyy.1.1:4000 SYN ******S* 
May 31 06:40:44 195.240.127.80:3345 -> xxx.yyy.1.2:4000 SYN ******S* 
May 31 06:40:46 195.240.127.80:3346 -> xxx.yyy.1.3:4000 SYN ******S* 
May 31 06:40:43 195.240.127.80:3347 -> xxx.yyy.1.4:4000 SYN ******S* 
May 31 06:40:46 195.240.127.80:3348 -> xxx.yyy.1.5:4000 SYN ******S* 
May 31 06:40:46 195.240.127.80:3349 -> xxx.yyy.1.6:4000 SYN ******S* 
May 31 06:40:46 195.240.127.80:3350 -> xxx.yyy.1.7:4000 SYN ******S* 
May 31 06:40:46 195.240.127.80:3351 -> xxx.yyy.1.8:4000 SYN ******S* 
[...]
May 31 06:59:17 195.240.127.80:3818 -> xxx.yyy.255.190:4000 SYN ******S* 
May 31 06:59:17 195.240.127.80:3819 -> xxx.yyy.255.191:4000 SYN ******S* 
May 31 06:59:17 195.240.127.80:3820 -> xxx.yyy.255.192:4000 SYN ******S* 
May 31 06:59:17 195.240.127.80:3821 -> xxx.yyy.255.193:4000 SYN ******S* 
May 31 06:59:17 195.240.127.80:3822 -> xxx.yyy.255.194:4000 SYN ******S* 
May 31 06:59:19 195.240.127.80:3882 -> xxx.yyy.255.252:4000 SYN ******S* 
May 31 06:59:19 195.240.127.80:3883 -> xxx.yyy.255.253:4000 SYN ******S* 
May 31 06:59:19 195.240.127.80:3884 -> xxx.yyy.255.254:4000 SYN ******S* 
72191

May 31 08:13:44 211.115.89.22:2066 -> xxx.yyy.1.2:1433 SYN ******S* 
May 31 08:13:44 211.115.89.22:2067 -> xxx.yyy.1.1:1433 SYN ******S* 
May 31 08:13:44 211.115.89.22:2069 -> xxx.yyy.1.3:1433 SYN ******S* 
May 31 08:13:41 211.115.89.22:2075 -> xxx.yyy.1.4:1433 SYN ******S* 
May 31 08:13:44 211.115.89.22:2078 -> xxx.yyy.1.5:1433 SYN ******S* 
May 31 08:13:44 211.115.89.22:2079 -> xxx.yyy.1.6:1433 SYN ******S* 
May 31 08:13:44 211.115.89.22:2084 -> xxx.yyy.1.7:1433 SYN ******S* 
May 31 08:13:44 211.115.89.22:2085 -> xxx.yyy.1.8:1433 SYN ******S* 
[...]
May 31 08:25:38 211.115.89.22:1662 -> xxx.yyy.255.240:1433 SYN ******S* 
May 31 08:25:38 211.115.89.22:1678 -> xxx.yyy.255.245:1433 SYN ******S* 
May 31 08:25:38 211.115.89.22:1692 -> xxx.yyy.255.249:1433 SYN ******S* 
May 31 08:25:38 211.115.89.22:1686 -> xxx.yyy.255.247:1433 SYN ******S* 
May 31 08:25:38 211.115.89.22:1687 -> xxx.yyy.255.248:1433 SYN ******S* 
May 31 08:25:38 211.115.89.22:1681 -> xxx.yyy.255.246:1433 SYN ******S* 
May 31 08:25:38 211.115.89.22:1695 -> xxx.yyy.255.250:1433 SYN ******S* 
May 31 08:25:38 211.115.89.22:1698 -> xxx.yyy.255.251:1433 SYN ******S* 
May 31 08:25:39 211.115.89.22:1705 -> xxx.yyy.255.254:1433 SYN ******S* 
71582

May 31 00:10:18 211.112.184.250:3461 -> xxx.yyy.1.1:1433 SYN ******S* 
May 31 00:10:18 211.112.184.250:3462 -> xxx.yyy.1.2:1433 SYN ******S* 
May 31 00:10:21 211.112.184.250:3463 -> xxx.yyy.1.3:1433 SYN ******S* 
May 31 00:10:21 211.112.184.250:3464 -> xxx.yyy.1.4:1433 SYN ******S* 
May 31 00:10:21 211.112.184.250:3465 -> xxx.yyy.1.5:1433 SYN ******S* 
May 31 00:10:21 211.112.184.250:3466 -> xxx.yyy.1.6:1433 SYN ******S* 
May 31 00:10:21 211.112.184.250:3467 -> xxx.yyy.1.7:1433 SYN ******S* 
May 31 00:10:21 211.112.184.250:3468 -> xxx.yyy.1.8:1433 SYN ******S* 
[...]
May 31 00:21:59 211.112.184.250:2428 -> xxx.yyy.255.248:1433 SYN ******S* 
May 31 00:21:59 211.112.184.250:2425 -> xxx.yyy.255.245:1433 SYN ******S* 
May 31 00:21:59 211.112.184.250:2422 -> xxx.yyy.255.242:1433 SYN ******S* 
May 31 00:21:59 211.112.184.250:2427 -> xxx.yyy.255.247:1433 SYN ******S* 
May 31 00:21:59 211.112.184.250:2430 -> xxx.yyy.255.250:1433 SYN ******S* 
May 31 00:21:59 211.112.184.250:2434 -> xxx.yyy.255.254:1433 SYN ******S* 
May 31 00:21:59 211.112.184.250:2432 -> xxx.yyy.255.252:1433 SYN ******S* 
May 31 00:21:59 211.112.184.250:2433 -> xxx.yyy.255.253:1433 SYN ******S* 
May 31 00:21:59 211.112.184.250:2431 -> xxx.yyy.255.251:1433 SYN ******S* 
70910

May 31 17:21:55 161.111.152.2:4285 -> xxx.yyy.1.1:6543 SYN ******S* 
May 31 17:21:55 161.111.152.2:4286 -> xxx.yyy.1.2:6543 SYN ******S* 
May 31 17:21:57 161.111.152.2:4287 -> xxx.yyy.1.3:6543 SYN ******S* 
May 31 17:21:57 161.111.152.2:4288 -> xxx.yyy.1.4:6543 SYN ******S* 
May 31 17:21:57 161.111.152.2:4289 -> xxx.yyy.1.5:6543 SYN ******S* 
May 31 17:21:57 161.111.152.2:4290 -> xxx.yyy.1.6:6543 SYN ******S* 
May 31 17:21:54 161.111.152.2:4291 -> xxx.yyy.1.7:6543 SYN ******S* 
May 31 17:21:57 161.111.152.2:4292 -> xxx.yyy.1.8:6543 SYN ******S* 
[...]
May 31 17:33:36 161.111.152.2:3363 -> xxx.yyy.255.243:6543 SYN ******S* 
May 31 17:33:36 161.111.152.2:3366 -> xxx.yyy.255.246:6543 SYN ******S* 
May 31 17:33:36 161.111.152.2:3364 -> xxx.yyy.255.244:6543 SYN ******S* 
May 31 17:33:36 161.111.152.2:3368 -> xxx.yyy.255.248:6543 SYN ******S* 
May 31 17:33:36 161.111.152.2:3365 -> xxx.yyy.255.245:6543 SYN ******S* 
May 31 17:33:36 161.111.152.2:3373 -> xxx.yyy.255.252:6543 SYN ******S* 
May 31 17:33:36 161.111.152.2:3374 -> xxx.yyy.255.253:6543 SYN ******S* 
May 31 17:33:36 161.111.152.2:3371 -> xxx.yyy.255.251:6543 SYN ******S* 
May 31 17:33:36 161.111.152.2:3375 -> xxx.yyy.255.254:6543 SYN ******S* 
70213

May 31 21:25:21 211.160.89.56:2234 -> xxx.yyy.1.1:1433 SYN ******S* 
May 31 21:25:21 211.160.89.56:2239 -> xxx.yyy.1.2:1433 SYN ******S* 
May 31 21:25:24 211.160.89.56:2247 -> xxx.yyy.1.3:1433 SYN ******S* 
May 31 21:25:24 211.160.89.56:2249 -> xxx.yyy.1.4:1433 SYN ******S* 
May 31 21:25:24 211.160.89.56:2251 -> xxx.yyy.1.5:1433 SYN ******S* 
May 31 21:25:24 211.160.89.56:2252 -> xxx.yyy.1.6:1433 SYN ******S* 
May 31 21:25:21 211.160.89.56:2257 -> xxx.yyy.1.7:1433 SYN ******S* 
May 31 21:25:24 211.160.89.56:2266 -> xxx.yyy.1.8:1433 SYN ******S* 
[...]
May 31 21:44:01 211.160.89.56:2739 -> xxx.yyy.255.239:1433 SYN ******S* 
May 31 21:44:01 211.160.89.56:2748 -> xxx.yyy.255.244:1433 SYN ******S* 
May 31 21:44:01 211.160.89.56:2743 -> xxx.yyy.255.240:1433 SYN ******S* 
May 31 21:44:01 211.160.89.56:2760 -> xxx.yyy.255.254:1433 SYN ******S* 
May 31 21:44:01 211.160.89.56:2753 -> xxx.yyy.255.249:1433 SYN ******S* 
May 31 21:44:01 211.160.89.56:2756 -> xxx.yyy.255.252:1433 SYN ******S* 
May 31 21:44:01 211.160.89.56:2759 -> xxx.yyy.255.253:1433 SYN ******S* 
May 31 21:44:01 211.160.89.56:2754 -> xxx.yyy.255.250:1433 SYN ******S* 
May 31 21:44:01 211.160.89.56:2755 -> xxx.yyy.255.251:1433 SYN ******S* 
66965

May 31 22:49:25 200.83.210.106:3069 -> xxx.yyy.158.200:1433 SYN ******S* 
May 31 22:49:25 200.83.210.106:3070 -> xxx.yyy.158.199:1433 SYN ******S* 
May 31 22:49:25 200.83.210.106:3071 -> xxx.yyy.158.198:1433 SYN ******S* 
May 31 22:49:25 200.83.210.106:3072 -> xxx.yyy.158.197:1433 SYN ******S* 
May 31 22:49:25 200.83.210.106:3073 -> xxx.yyy.158.196:1433 SYN ******S* 
May 31 22:49:25 200.83.210.106:3075 -> xxx.yyy.158.194:1433 SYN ******S* 
May 31 22:49:25 200.83.210.106:3074 -> xxx.yyy.158.195:1433 SYN ******S* 
May 31 22:49:25 200.83.210.106:3076 -> xxx.yyy.158.193:1433 SYN ******S* 
[...]
May 31 23:13:49 200.83.210.106:4494 -> xxx.yyy.212.166:1433 SYN ******S* 
May 31 23:13:49 200.83.210.106:4498 -> xxx.yyy.212.170:1433 SYN ******S* 
May 31 23:13:50 200.83.210.106:4501 -> xxx.yyy.212.173:1433 SYN ******S* 
May 31 23:13:50 200.83.210.106:4500 -> xxx.yyy.212.172:1433 SYN ******S* 
May 31 23:13:50 200.83.210.106:4499 -> xxx.yyy.212.171:1433 SYN ******S* 
May 31 23:13:50 200.83.210.106:4503 -> xxx.yyy.212.175:1433 SYN ******S* 
May 31 23:13:50 200.83.210.106:4502 -> xxx.yyy.212.174:1433 SYN ******S* 
May 31 23:13:50 200.83.210.106:4505 -> xxx.yyy.212.176:1433 SYN ******S* 
37718

May 31 03:51:38 136.145.170.73:3001 -> xxx.yyy.1.236:3410 SYN ******S* 
May 31 03:51:38 136.145.170.73:3001 -> xxx.yyy.10.28:3410 SYN ******S* 
May 31 03:51:38 136.145.170.73:3001 -> xxx.yyy.11.34:3410 SYN ******S* 
May 31 03:51:38 136.145.170.73:3001 -> xxx.yyy.12.40:3410 SYN ******S* 
May 31 03:51:38 136.145.170.73:3001 -> xxx.yyy.13.46:3410 SYN ******S* 
May 31 03:51:38 136.145.170.73:3001 -> xxx.yyy.14.52:3410 SYN ******S* 
May 31 03:51:38 136.145.170.73:3001 -> xxx.yyy.15.58:3410 SYN ******S* 
May 31 03:51:38 136.145.170.73:3001 -> xxx.yyy.16.64:3410 SYN ******S* 
[...]
May 31 04:13:47 136.145.170.73:3001 -> xxx.yyy.245.174:3410 SYN ******S* 
May 31 04:13:47 136.145.170.73:3001 -> xxx.yyy.247.55:3410 SYN ******S* 
May 31 04:13:47 136.145.170.73:3001 -> xxx.yyy.246.180:3410 SYN ******S* 
May 31 04:13:47 136.145.170.73:3001 -> xxx.yyy.247.186:3410 SYN ******S* 
May 31 04:13:47 136.145.170.73:3001 -> xxx.yyy.248.61:3410 SYN ******S* 
May 31 04:13:47 136.145.170.73:3001 -> xxx.yyy.248.192:3410 SYN ******S* 
May 31 04:13:47 136.145.170.73:3001 -> xxx.yyy.249.67:3410 SYN ******S* 
May 31 04:13:47 136.145.170.73:3001 -> xxx.yyy.249.198:3410 SYN ******S* 
32581

May 31 23:24:57 134.208.44.176:3001 -> xxx.yyy.1.105:20168 SYN ******S* 
May 31 23:24:57 134.208.44.176:3001 -> xxx.yyy.1.236:20168 SYN ******S* 
May 31 23:24:57 134.208.44.176:3001 -> xxx.yyy.10.28:20168 SYN ******S* 
May 31 23:24:57 134.208.44.176:3001 -> xxx.yyy.10.159:20168 SYN ******S* 
May 31 23:24:57 134.208.44.176:3001 -> xxx.yyy.11.34:20168 SYN ******S* 
May 31 23:24:57 134.208.44.176:3001 -> xxx.yyy.11.165:20168 SYN ******S* 
May 31 23:24:57 134.208.44.176:3001 -> xxx.yyy.12.40:20168 SYN ******S* 
May 31 23:24:57 134.208.44.176:3001 -> xxx.yyy.12.171:20168 SYN ******S* 
[...]
May 31 23:42:21 134.208.44.176:3001 -> xxx.yyy.183.64:20168 SYN ******S* 
May 31 23:42:21 134.208.44.176:3001 -> xxx.yyy.237.126:20168 SYN ******S* 
May 31 23:42:21 134.208.44.176:3001 -> xxx.yyy.241.150:20168 SYN ******S* 
May 31 23:42:21 134.208.44.176:3001 -> xxx.yyy.242.25:20168 SYN ******S* 
May 31 23:42:21 134.208.44.176:3001 -> xxx.yyy.242.156:20168 SYN ******S* 
May 31 23:42:21 134.208.44.176:3001 -> xxx.yyy.243.31:20168 SYN ******S* 
May 31 23:42:21 134.208.44.176:3001 -> xxx.yyy.246.49:20168 SYN ******S* 
May 31 23:42:21 134.208.44.176:3001 -> xxx.yyy.246.180:20168 SYN ******S* 
May 31 23:42:21 134.208.44.176:3001 -> xxx.yyy.247.55:20168 SYN ******S* 
27991

May 31 14:30:23 62.15.142.98:4682 -> xxx.yyy.1.30:2401 SYN ******S* 
May 31 14:30:25 62.15.142.98:4683 -> xxx.yyy.1.31:2401 SYN ******S* 
May 31 14:30:23 62.15.142.98:4697 -> xxx.yyy.1.32:2401 SYN ******S* 
May 31 14:30:23 62.15.142.98:4698 -> xxx.yyy.1.33:2401 SYN ******S* 
May 31 14:30:25 62.15.142.98:4715 -> xxx.yyy.1.50:2401 SYN ******S* 
May 31 14:30:25 62.15.142.98:4716 -> xxx.yyy.1.51:2401 SYN ******S* 
May 31 14:30:25 62.15.142.98:4717 -> xxx.yyy.1.52:2401 SYN ******S* 
May 31 14:30:25 62.15.142.98:4718 -> xxx.yyy.1.53:2401 SYN ******S* 
[...]
May 31 14:41:16 62.15.142.98:3395 -> xxx.yyy.255.236:2401 SYN ******S* 
May 31 14:41:16 62.15.142.98:3399 -> xxx.yyy.255.240:2401 SYN ******S* 
May 31 14:41:17 62.15.142.98:3409 -> xxx.yyy.255.250:2401 SYN ******S* 
May 31 14:41:17 62.15.142.98:3406 -> xxx.yyy.255.247:2401 SYN ******S* 
May 31 14:41:17 62.15.142.98:3403 -> xxx.yyy.255.244:2401 SYN ******S* 
May 31 14:41:17 62.15.142.98:3408 -> xxx.yyy.255.249:2401 SYN ******S* 
May 31 14:41:17 62.15.142.98:3412 -> xxx.yyy.255.253:2401 SYN ******S* 
May 31 14:41:17 62.15.142.98:3413 -> xxx.yyy.255.254:2401 SYN ******S* 
21207

[...]
14786

May 31 10:06:32 80.141.229.124:3813 -> xxx.yyy.1.0:80 SYN ******S* 
May 31 10:06:32 80.141.229.124:3814 -> xxx.yyy.1.1:80 SYN ******S* 
May 31 10:06:32 80.141.229.124:3815 -> xxx.yyy.1.2:80 SYN ******S* 
May 31 10:06:31 80.141.229.124:3816 -> xxx.yyy.1.3:80 SYN ******S* 
May 31 10:06:31 80.141.229.124:3817 -> xxx.yyy.1.4:80 SYN ******S* 
May 31 10:06:31 80.141.229.124:3818 -> xxx.yyy.1.5:80 SYN ******S* 
May 31 10:06:31 80.141.229.124:3819 -> xxx.yyy.1.6:80 SYN ******S* 
May 31 10:06:31 80.141.229.124:3820 -> xxx.yyy.1.7:80 SYN ******S* 
[...]
May 31 10:14:18 80.141.229.124:3646 -> xxx.yyy.104.145:80 SYN ******S* 
May 31 10:14:18 80.141.229.124:3647 -> xxx.yyy.104.146:80 SYN ******S* 
May 31 10:14:18 80.141.229.124:3648 -> xxx.yyy.104.147:80 SYN ******S* 
May 31 10:14:18 80.141.229.124:3649 -> xxx.yyy.104.148:80 SYN ******S* 
May 31 10:14:18 80.141.229.124:3650 -> xxx.yyy.104.149:80 SYN ******S* 
May 31 10:14:18 80.141.229.124:3651 -> xxx.yyy.104.150:80 SYN ******S* 
May 31 10:14:19 80.141.229.124:3652 -> xxx.yyy.104.151:80 SYN ******S* 
May 31 10:14:18 80.141.229.124:3653 -> xxx.yyy.104.152:80 SYN ******S* 
11380

May 31 09:53:34 219.118.187.26:35934 -> xxx.yyy.1.0:32773 SYN ******S* 
May 31 09:53:34 219.118.187.26:35935 -> xxx.yyy.1.1:32773 SYN ******S* 
May 31 09:53:34 219.118.187.26:35936 -> xxx.yyy.1.2:32773 SYN ******S* 
May 31 09:53:37 219.118.187.26:35937 -> xxx.yyy.1.3:32773 SYN ******S* 
May 31 09:53:37 219.118.187.26:35938 -> xxx.yyy.1.4:32773 SYN ******S* 
May 31 09:53:37 219.118.187.26:35939 -> xxx.yyy.1.5:32773 SYN ******S* 
May 31 09:53:37 219.118.187.26:35940 -> xxx.yyy.1.6:32773 SYN ******S* 
May 31 09:53:37 219.118.187.26:35941 -> xxx.yyy.1.7:32773 SYN ******S* 
[...]
May 31 10:00:27 219.118.187.26:44325 -> xxx.yyy.255.77:32773 SYN ******S* 
May 31 10:00:27 219.118.187.26:44326 -> xxx.yyy.255.78:32773 SYN ******S* 
May 31 10:00:27 219.118.187.26:44327 -> xxx.yyy.255.79:32773 SYN ******S* 
May 31 10:00:27 219.118.187.26:44328 -> xxx.yyy.255.80:32773 SYN ******S* 
May 31 10:00:27 219.118.187.26:44329 -> xxx.yyy.255.81:32773 SYN ******S* 
May 31 10:00:27 219.118.187.26:44330 -> xxx.yyy.255.82:32773 SYN ******S* 
May 31 10:00:27 219.118.187.26:44331 -> xxx.yyy.255.83:32773 SYN ******S* 
May 31 10:00:27 219.118.187.26:44332 -> xxx.yyy.255.84:32773 SYN ******S* 
May 31 10:00:27 219.118.187.26:44333 -> xxx.yyy.255.85:32773 SYN ******S* 
10244

May 31 00:56:49 218.74.50.99:2476 -> xxx.yyy.72.225:5554 SYN ******S* 
May 31 00:56:50 218.74.50.99:2942 -> xxx.yyy.72.225:1023 SYN ******S* 
May 31 00:56:49 218.74.50.99:2478 -> xxx.yyy.72.223:5554 SYN ******S* 
May 31 00:56:52 218.74.50.99:3875 -> xxx.yyy.72.223:9898 SYN ******S* 
May 31 00:56:49 218.74.50.99:2479 -> xxx.yyy.72.222:5554 SYN ******S* 
May 31 00:56:52 218.74.50.99:3876 -> xxx.yyy.72.222:9898 SYN ******S* 
May 31 00:56:49 218.74.50.99:2480 -> xxx.yyy.72.221:5554 SYN ******S* 
May 31 00:56:50 218.74.50.99:2971 -> xxx.yyy.72.221:1023 SYN ******S* 
[...]
May 31 00:57:35 218.74.50.99:3359 -> xxx.yyy.92.237:9898 SYN ******S* 
May 31 00:57:35 218.74.50.99:3368 -> xxx.yyy.92.242:9898 SYN ******S* 
May 31 00:57:35 218.74.50.99:3369 -> xxx.yyy.92.243:9898 SYN ******S* 
May 31 00:57:35 218.74.50.99:3386 -> xxx.yyy.92.246:9898 SYN ******S* 
May 31 00:59:40 218.74.50.99:3432 -> xxx.yyy.72.124:5554 SYN ******S* 
May 31 00:59:41 218.74.50.99:3911 -> xxx.yyy.72.124:1023 SYN ******S* 
May 31 00:59:43 218.74.50.99:1374 -> xxx.yyy.72.124:9898 SYN ******S* 
May 31 00:59:41 218.74.50.99:3912 -> xxx.yyy.72.125:1023 SYN ******S* 
May 31 00:59:43 218.74.50.99:1375 -> xxx.yyy.72.125:9898 SYN ******S* 
8520

May 31 08:35:34 82.32.106.228:4791 -> xxx.yyy.1.0:1433 SYN ******S* 
May 31 08:35:34 82.32.106.228:4794 -> xxx.yyy.1.1:1433 SYN ******S* 
May 31 08:35:35 82.32.106.228:4798 -> xxx.yyy.1.2:1433 SYN ******S* 
May 31 08:35:35 82.32.106.228:4801 -> xxx.yyy.1.3:1433 SYN ******S* 
May 31 08:35:35 82.32.106.228:4803 -> xxx.yyy.1.4:1433 SYN ******S* 
May 31 08:35:35 82.32.106.228:4806 -> xxx.yyy.1.5:1433 SYN ******S* 
May 31 08:35:35 82.32.106.228:4808 -> xxx.yyy.1.6:1433 SYN ******S* 
May 31 08:35:36 82.32.106.228:4820 -> xxx.yyy.1.8:1433 SYN ******S* 
[...]
May 31 09:48:26 82.32.106.228:1277 -> xxx.yyy.32.248:1433 SYN ******S* 
May 31 09:48:26 82.32.106.228:1278 -> xxx.yyy.32.249:1433 SYN ******S* 
May 31 09:48:27 82.32.106.228:1279 -> xxx.yyy.32.250:1433 SYN ******S* 
May 31 09:48:27 82.32.106.228:1280 -> xxx.yyy.32.251:1433 SYN ******S* 
May 31 09:48:27 82.32.106.228:1281 -> xxx.yyy.32.252:1433 SYN ******S* 
May 31 09:48:27 82.32.106.228:1282 -> xxx.yyy.32.253:1433 SYN ******S* 
May 31 09:48:27 82.32.106.228:1283 -> xxx.yyy.32.254:1433 SYN ******S* 
May 31 09:48:27 82.32.106.228:1284 -> xxx.yyy.32.255:1433 SYN ******S* 
8180

May 31 14:46:29 68.154.97.195:61906 -> xxx.yyy.1.2:445 SYN ******S* 
May 31 14:46:30 68.154.97.195:61622 -> xxx.yyy.1.3:445 SYN ******S* 
May 31 14:46:29 68.154.97.195:61930 -> xxx.yyy.1.4:445 SYN ******S* 
May 31 14:46:29 68.154.97.195:61919 -> xxx.yyy.1.6:445 SYN ******S* 
May 31 14:46:30 68.154.97.195:61626 -> xxx.yyy.1.7:445 SYN ******S* 
May 31 14:46:29 68.154.97.195:61896 -> xxx.yyy.1.8:445 SYN ******S* 
May 31 14:46:30 68.154.97.195:62068 -> xxx.yyy.1.9:445 SYN ******S* 
May 31 14:46:29 68.154.97.195:61927 -> xxx.yyy.1.10:445 SYN ******S* 
[...]
May 31 14:59:02 68.154.97.195:61896 -> xxx.yyy.32.219:445 SYN ******S* 
May 31 14:59:02 68.154.97.195:60546 -> xxx.yyy.32.221:445 SYN ******S* 
May 31 14:59:03 68.154.97.195:61946 -> xxx.yyy.32.252:445 SYN ******S* 
May 31 14:59:03 68.154.97.195:61968 -> xxx.yyy.32.230:445 SYN ******S* 
May 31 14:59:03 68.154.97.195:61979 -> xxx.yyy.32.250:445 SYN ******S* 
May 31 14:59:03 68.154.97.195:61996 -> xxx.yyy.32.243:445 SYN ******S* 
May 31 14:59:03 68.154.97.195:62001 -> xxx.yyy.32.228:445 SYN ******S* 
May 31 14:59:03 68.154.97.195:61143 -> xxx.yyy.32.236:445 SYN ******S* 
7389

May 31 05:25:12 218.104.110.114:3435 -> xxx.yyy.189.237:1025 SYN ******S* 
May 31 05:25:12 218.104.110.114:3433 -> xxx.yyy.189.237:2745 SYN ******S* 
May 31 05:25:12 218.104.110.114:3456 -> xxx.yyy.170.234:2745 SYN ******S* 
May 31 05:25:15 218.104.110.114:2215 -> xxx.yyy.143.200:2745 SYN ******S* 
May 31 05:25:15 218.104.110.114:2216 -> xxx.yyy.10.37:2745 SYN ******S* 
May 31 05:25:15 218.104.110.114:2424 -> xxx.yyy.173.208:2745 SYN ******S* 
May 31 05:25:15 218.104.110.114:2426 -> xxx.yyy.173.208:1025 SYN ******S* 
May 31 05:25:15 218.104.110.114:2428 -> xxx.yyy.173.208:3127 SYN ******S* 
[...]
May 31 10:34:20 218.104.110.114:4342 -> xxx.yyy.111.158:80 SYN ******S* 
May 31 10:34:23 218.104.110.114:4943 -> xxx.yyy.206.234:80 SYN ******S* 
May 31 10:34:26 218.104.110.114:4943 -> xxx.yyy.206.234:80 SYN ******S* 
May 31 10:34:26 218.104.110.114:4340 -> xxx.yyy.111.158:6129 SYN ******S* 
May 31 10:34:26 218.104.110.114:4342 -> xxx.yyy.111.158:80 SYN ******S* 
May 31 10:34:26 218.104.110.114:4334 -> xxx.yyy.111.158:2745 SYN ******S* 
May 31 10:34:26 218.104.110.114:4339 -> xxx.yyy.111.158:3127 SYN ******S* 
May 31 10:34:26 218.104.110.114:4336 -> xxx.yyy.111.158:1025 SYN ******S* 
May 31 10:34:32 218.104.110.114:4943 -> xxx.yyy.206.234:80 SYN ******S* 
5552

May 31 07:19:45 81.249.190.92:1169 -> xxx.yyy.86.247:80 SYN ******S* 
May 31 07:19:45 81.249.190.92:1168 -> xxx.yyy.86.247:139 SYN ******S* 
May 31 07:19:45 81.249.190.92:1167 -> xxx.yyy.86.247:6129 SYN ******S* 
May 31 07:19:45 81.249.190.92:1166 -> xxx.yyy.86.247:3127 SYN ******S* 
May 31 07:19:45 81.249.190.92:1164 -> xxx.yyy.86.247:1025 SYN ******S* 
May 31 07:19:45 81.249.190.92:1161 -> xxx.yyy.86.247:2745 SYN ******S* 
May 31 07:20:22 81.249.190.92:2936 -> xxx.yyy.1.235:2745 SYN ******S* 
May 31 07:20:22 81.249.190.92:2938 -> xxx.yyy.1.235:1025 SYN ******S* 
[...]
May 31 09:23:50 81.249.190.92:2051 -> xxx.yyy.70.7:1025 SYN ******S* 
May 31 09:23:53 81.249.190.92:2053 -> xxx.yyy.70.7:3127 SYN ******S* 
May 31 09:23:53 81.249.190.92:2054 -> xxx.yyy.70.7:6129 SYN ******S* 
May 31 09:23:53 81.249.190.92:2055 -> xxx.yyy.70.7:139 SYN ******S* 
May 31 09:23:55 81.249.190.92:2286 -> xxx.yyy.129.232:2745 SYN ******S* 
May 31 09:23:55 81.249.190.92:2288 -> xxx.yyy.129.232:1025 SYN ******S* 
May 31 09:23:56 81.249.190.92:2351 -> xxx.yyy.176.190:2745 SYN ******S* 
May 31 09:23:56 81.249.190.92:2353 -> xxx.yyy.176.190:1025 SYN ******S* 
May 31 09:23:56 81.249.190.92:2355 -> xxx.yyy.176.190:3127 SYN ******S* 
5534

May 31 05:28:42 81.50.137.172:3836 -> xxx.yyy.155.222:80 SYN ******S* 
May 31 05:28:42 81.50.137.172:3835 -> xxx.yyy.155.222:139 SYN ******S* 
May 31 05:28:42 81.50.137.172:3834 -> xxx.yyy.155.222:6129 SYN ******S* 
May 31 05:28:42 81.50.137.172:3833 -> xxx.yyy.155.222:3127 SYN ******S* 
May 31 05:28:42 81.50.137.172:3831 -> xxx.yyy.155.222:1025 SYN ******S* 
May 31 05:29:08 81.50.137.172:1578 -> xxx.yyy.223.205:2745 SYN ******S* 
May 31 05:29:08 81.50.137.172:1580 -> xxx.yyy.223.205:1025 SYN ******S* 
May 31 05:29:08 81.50.137.172:1582 -> xxx.yyy.223.205:3127 SYN ******S* 
[...]
May 31 06:40:49 81.50.137.172:2708 -> xxx.yyy.212.184:2745 SYN ******S* 
May 31 06:40:49 81.50.137.172:2712 -> xxx.yyy.212.184:1025 SYN ******S* 
May 31 06:40:49 81.50.137.172:2714 -> xxx.yyy.212.184:3127 SYN ******S* 
May 31 06:40:49 81.50.137.172:2715 -> xxx.yyy.212.184:6129 SYN ******S* 
May 31 06:40:49 81.50.137.172:2718 -> xxx.yyy.212.184:80 SYN ******S* 
May 31 06:40:52 81.50.137.172:2708 -> xxx.yyy.212.184:2745 SYN ******S* 
May 31 06:40:52 81.50.137.172:2718 -> xxx.yyy.212.184:80 SYN ******S* 
May 31 06:40:52 81.50.137.172:3008 -> xxx.yyy.11.15:2745 SYN ******S* 
May 31 06:40:52 81.50.137.172:3010 -> xxx.yyy.11.15:1025 SYN ******S* 
3349

May 31 14:36:41 81.50.128.68:1529 -> xxx.yyy.12.215:1433 SYN ******S* 
May 31 14:36:41 81.50.128.68:1535 -> xxx.yyy.12.216:1433 SYN ******S* 
May 31 14:36:41 81.50.128.68:1537 -> xxx.yyy.12.217:1433 SYN ******S* 
May 31 14:36:44 81.50.128.68:1591 -> xxx.yyy.12.220:1433 SYN ******S* 
May 31 14:36:41 81.50.128.68:1543 -> xxx.yyy.12.218:1433 SYN ******S* 
May 31 14:36:44 81.50.128.68:1598 -> xxx.yyy.12.221:1433 SYN ******S* 
May 31 14:36:41 81.50.128.68:1548 -> xxx.yyy.12.219:1433 SYN ******S* 
May 31 14:36:44 81.50.128.68:1607 -> xxx.yyy.12.222:1433 SYN ******S* 
[...]
May 31 14:46:36 81.50.128.68:4612 -> xxx.yyy.17.92:1433 SYN ******S* 
May 31 14:46:36 81.50.128.68:4613 -> xxx.yyy.17.93:1433 SYN ******S* 
May 31 14:46:37 81.50.128.68:4614 -> xxx.yyy.17.94:1433 SYN ******S* 
May 31 14:46:38 81.50.128.68:4461 -> xxx.yyy.17.60:1433 SYN ******S* 
May 31 14:46:38 81.50.128.68:4465 -> xxx.yyy.17.61:1433 SYN ******S* 
May 31 14:46:39 81.50.128.68:4471 -> xxx.yyy.17.62:1433 SYN ******S* 
May 31 14:46:39 81.50.128.68:4473 -> xxx.yyy.17.63:1433 SYN ******S* 
May 31 14:46:39 81.50.128.68:4476 -> xxx.yyy.17.64:1433 SYN ******S* 
May 31 14:46:39 81.50.128.68:4480 -> xxx.yyy.17.65:1433 SYN ******S* 
3013

May 31 00:56:30 218.72.8.191:2984 -> xxx.yyy.214.246:5554 SYN ******S* 
May 31 00:56:30 218.72.8.191:2985 -> xxx.yyy.214.247:5554 SYN ******S* 
May 31 00:56:31 218.72.8.191:3959 -> xxx.yyy.214.247:1023 SYN ******S* 
May 31 00:56:33 218.72.8.191:1749 -> xxx.yyy.214.247:9898 SYN ******S* 
May 31 00:56:30 218.72.8.191:2986 -> xxx.yyy.214.248:5554 SYN ******S* 
May 31 00:56:33 218.72.8.191:1760 -> xxx.yyy.214.248:9898 SYN ******S* 
May 31 00:56:30 218.72.8.191:2987 -> xxx.yyy.214.249:5554 SYN ******S* 
May 31 00:56:33 218.72.8.191:1761 -> xxx.yyy.214.249:9898 SYN ******S* 
[...]
May 31 00:56:45 218.72.8.191:4388 -> xxx.yyy.222.22:1023 SYN ******S* 
May 31 00:56:45 218.72.8.191:4390 -> xxx.yyy.222.21:1023 SYN ******S* 
May 31 00:56:45 218.72.8.191:4431 -> xxx.yyy.222.185:5554 SYN ******S* 
May 31 00:56:45 218.72.8.191:4461 -> xxx.yyy.222.33:1023 SYN ******S* 
May 31 00:56:45 218.72.8.191:4467 -> xxx.yyy.222.188:5554 SYN ******S* 
May 31 00:56:45 218.72.8.191:4475 -> xxx.yyy.222.30:1023 SYN ******S* 
May 31 00:56:45 218.72.8.191:4485 -> xxx.yyy.222.27:1023 SYN ******S* 
May 31 00:56:45 218.72.8.191:4487 -> xxx.yyy.221.43:9898 SYN ******S* 
2952

May 31 17:04:05 209.56.239.1:2811 -> xxx.yyy.zzz.159:139 SYN ******S* 
May 31 17:04:06 209.56.239.1:3299 -> xxx.yyy.zzz.147:139 SYN ******S* 
May 31 17:04:10 209.56.239.1:3347 -> xxx.yyy.zzz.206:139 SYN ******S* 
May 31 17:04:08 209.56.239.1:3466 -> xxx.yyy.zzz.215:139 SYN ******S* 
May 31 17:04:08 209.56.239.1:3738 -> xxx.yyy.zzz.6:139 SYN ******S* 
May 31 17:04:13 209.56.239.1:4324 -> xxx.yyy.zzz.175:139 SYN ******S* 
May 31 17:04:16 209.56.239.1:4324 -> xxx.yyy.zzz.175:139 SYN ******S* 
May 31 17:04:17 209.56.239.1:4809 -> xxx.yyy.zzz.77:139 SYN ******S* 
[...]
May 31 18:44:20 209.56.239.1:1758 -> xxx.yyy.zzz.168:139 SYN ******S* 
May 31 18:44:26 209.56.239.1:2412 -> xxx.yyy.zzz.125:139 SYN ******S* 
May 31 18:44:23 209.56.239.1:1727 -> xxx.yyy.zzz.197:139 SYN ******S* 
May 31 18:44:23 209.56.239.1:1758 -> xxx.yyy.zzz.168:139 SYN ******S* 
May 31 18:44:35 209.56.239.1:3958 -> xxx.yyy.zzz.167:139 SYN ******S* 
May 31 18:44:35 209.56.239.1:4068 -> xxx.yyy.zzz.201:139 SYN ******S* 
May 31 18:44:38 209.56.239.1:1041 -> xxx.yyy.zzz.49:139 SYN ******S* 
May 31 18:44:38 209.56.239.1:1072 -> xxx.yyy.zzz.42:139 SYN ******S* 
May 31 18:44:38 209.56.239.1:1118 -> xxx.yyy.zzz.98:139 SYN ******S* 
2589

--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa                     Cedar Falls, IA  50614-0121
email: Ken.Connelly at uni.edu    phone: (319) 273-5850    fax: (319) 273-7373



More information about the Intrusions mailing list