[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Tue Jun 8 11:51:47 GMT 2004
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0500.
Jun 7 03:31:10 148.245.166.228:3045 -> xxx.yyy.1.1:445 SYN ******S*
Jun 7 03:31:10 148.245.166.228:3047 -> xxx.yyy.1.2:445 SYN ******S*
Jun 7 03:31:10 148.245.166.228:3048 -> xxx.yyy.1.3:445 SYN ******S*
Jun 7 03:31:10 148.245.166.228:3049 -> xxx.yyy.1.4:445 SYN ******S*
Jun 7 03:31:10 148.245.166.228:3050 -> xxx.yyy.1.5:445 SYN ******S*
Jun 7 03:31:10 148.245.166.228:3051 -> xxx.yyy.1.6:445 SYN ******S*
Jun 7 03:31:10 148.245.166.228:3052 -> xxx.yyy.1.7:445 SYN ******S*
Jun 7 03:31:07 148.245.166.228:3053 -> xxx.yyy.1.8:445 SYN ******S*
[...]
Jun 7 04:01:13 148.245.166.228:4842 -> xxx.yyy.255.240:445 SYN ******S*
Jun 7 04:01:13 148.245.166.228:4855 -> xxx.yyy.255.241:445 SYN ******S*
Jun 7 04:01:13 148.245.166.228:4884 -> xxx.yyy.255.254:445 SYN ******S*
Jun 7 04:01:13 148.245.166.228:4881 -> xxx.yyy.255.251:445 SYN ******S*
Jun 7 04:01:13 148.245.166.228:4877 -> xxx.yyy.255.249:445 SYN ******S*
Jun 7 04:01:13 148.245.166.228:4882 -> xxx.yyy.255.252:445 SYN ******S*
Jun 7 04:01:13 148.245.166.228:4883 -> xxx.yyy.255.253:445 SYN ******S*
Jun 7 04:01:13 148.245.166.228:4880 -> xxx.yyy.255.250:445 SYN ******S*
74562
Jun 7 12:27:12 134.102.86.222:4487 -> xxx.yyy.1.1:445 SYN ******S*
Jun 7 12:27:12 134.102.86.222:4488 -> xxx.yyy.1.2:445 SYN ******S*
Jun 7 12:27:12 134.102.86.222:4489 -> xxx.yyy.1.3:445 SYN ******S*
Jun 7 12:27:12 134.102.86.222:4490 -> xxx.yyy.1.4:445 SYN ******S*
Jun 7 12:27:12 134.102.86.222:4491 -> xxx.yyy.1.5:445 SYN ******S*
Jun 7 12:27:12 134.102.86.222:4492 -> xxx.yyy.1.6:445 SYN ******S*
Jun 7 12:27:12 134.102.86.222:4493 -> xxx.yyy.1.7:445 SYN ******S*
Jun 7 12:27:12 134.102.86.222:4494 -> xxx.yyy.1.8:445 SYN ******S*
[...]
Jun 7 13:13:40 134.102.86.222:1350 -> xxx.yyy.255.220:445 SYN ******S*
Jun 7 13:13:40 134.102.86.222:1353 -> xxx.yyy.255.222:445 SYN ******S*
Jun 7 13:13:40 134.102.86.222:1352 -> xxx.yyy.255.221:445 SYN ******S*
Jun 7 13:13:40 134.102.86.222:1355 -> xxx.yyy.255.223:445 SYN ******S*
Jun 7 13:13:42 134.102.86.222:1388 -> xxx.yyy.255.249:445 SYN ******S*
Jun 7 13:13:42 134.102.86.222:1391 -> xxx.yyy.255.250:445 SYN ******S*
Jun 7 13:13:42 134.102.86.222:1393 -> xxx.yyy.255.252:445 SYN ******S*
Jun 7 13:13:42 134.102.86.222:1394 -> xxx.yyy.255.253:445 SYN ******S*
Jun 7 13:13:42 134.102.86.222:1395 -> xxx.yyy.255.254:445 SYN ******S*
73290
Jun 7 11:39:54 208.17.70.180:1730 -> xxx.yyy.1.1:1433 SYN ******S*
Jun 7 11:39:54 208.17.70.180:1731 -> xxx.yyy.1.2:1433 SYN ******S*
Jun 7 11:39:54 208.17.70.180:1732 -> xxx.yyy.1.3:1433 SYN ******S*
Jun 7 11:39:51 208.17.70.180:1733 -> xxx.yyy.1.4:1433 SYN ******S*
Jun 7 11:39:54 208.17.70.180:1734 -> xxx.yyy.1.5:1433 SYN ******S*
Jun 7 11:39:54 208.17.70.180:1735 -> xxx.yyy.1.6:1433 SYN ******S*
Jun 7 11:39:54 208.17.70.180:1736 -> xxx.yyy.1.7:1433 SYN ******S*
Jun 7 11:39:54 208.17.70.180:1737 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Jun 7 11:51:36 208.17.70.180:4287 -> xxx.yyy.255.246:1433 SYN ******S*
Jun 7 11:51:36 208.17.70.180:4288 -> xxx.yyy.255.247:1433 SYN ******S*
Jun 7 11:51:36 208.17.70.180:4289 -> xxx.yyy.255.248:1433 SYN ******S*
Jun 7 11:51:36 208.17.70.180:4290 -> xxx.yyy.255.249:1433 SYN ******S*
Jun 7 11:51:36 208.17.70.180:4291 -> xxx.yyy.255.250:1433 SYN ******S*
Jun 7 11:51:36 208.17.70.180:4292 -> xxx.yyy.255.251:1433 SYN ******S*
Jun 7 11:51:36 208.17.70.180:4293 -> xxx.yyy.255.252:1433 SYN ******S*
Jun 7 11:51:36 208.17.70.180:4294 -> xxx.yyy.255.253:1433 SYN ******S*
Jun 7 11:51:36 208.17.70.180:4295 -> xxx.yyy.255.254:1433 SYN ******S*
72992
Jun 7 17:16:51 66.91.152.36:1402 -> xxx.yyy.1.1:445 SYN ******S*
Jun 7 17:16:50 66.91.152.36:1403 -> xxx.yyy.1.2:445 SYN ******S*
Jun 7 17:16:51 66.91.152.36:1404 -> xxx.yyy.1.3:445 SYN ******S*
Jun 7 17:16:51 66.91.152.36:1405 -> xxx.yyy.1.4:445 SYN ******S*
Jun 7 17:16:50 66.91.152.36:1406 -> xxx.yyy.1.5:445 SYN ******S*
Jun 7 17:16:51 66.91.152.36:1407 -> xxx.yyy.1.6:445 SYN ******S*
Jun 7 17:16:48 66.91.152.36:1408 -> xxx.yyy.1.7:445 SYN ******S*
Jun 7 17:16:51 66.91.152.36:1409 -> xxx.yyy.1.8:445 SYN ******S*
[...]
Jun 7 17:28:30 66.91.152.36:3753 -> xxx.yyy.255.197:445 SYN ******S*
Jun 7 17:28:30 66.91.152.36:3757 -> xxx.yyy.255.201:445 SYN ******S*
Jun 7 17:28:30 66.91.152.36:3754 -> xxx.yyy.255.198:445 SYN ******S*
Jun 7 17:28:30 66.91.152.36:3758 -> xxx.yyy.255.202:445 SYN ******S*
Jun 7 17:28:30 66.91.152.36:3759 -> xxx.yyy.255.203:445 SYN ******S*
Jun 7 17:28:30 66.91.152.36:3755 -> xxx.yyy.255.199:445 SYN ******S*
Jun 7 17:28:31 66.91.152.36:3763 -> xxx.yyy.255.207:445 SYN ******S*
Jun 7 17:28:31 66.91.152.36:3764 -> xxx.yyy.255.208:445 SYN ******S*
Jun 7 17:28:31 66.91.152.36:3762 -> xxx.yyy.255.206:445 SYN ******S*
71155
Jun 7 13:55:23 194.203.154.202:2300 -> xxx.yyy.1.1:1433 SYN ******S*
Jun 7 13:55:23 194.203.154.202:2302 -> xxx.yyy.1.2:1433 SYN ******S*
Jun 7 13:55:23 194.203.154.202:2303 -> xxx.yyy.1.3:1433 SYN ******S*
Jun 7 13:55:23 194.203.154.202:2305 -> xxx.yyy.1.4:1433 SYN ******S*
Jun 7 13:55:20 194.203.154.202:2306 -> xxx.yyy.1.5:1433 SYN ******S*
Jun 7 13:55:23 194.203.154.202:2307 -> xxx.yyy.1.6:1433 SYN ******S*
Jun 7 13:55:23 194.203.154.202:2308 -> xxx.yyy.1.7:1433 SYN ******S*
Jun 7 13:55:23 194.203.154.202:2311 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Jun 7 14:07:03 194.203.154.202:1202 -> xxx.yyy.255.230:1433 SYN ******S*
Jun 7 14:07:03 194.203.154.202:1199 -> xxx.yyy.255.227:1433 SYN ******S*
Jun 7 14:07:03 194.203.154.202:1203 -> xxx.yyy.255.231:1433 SYN ******S*
Jun 7 14:07:03 194.203.154.202:1216 -> xxx.yyy.255.240:1433 SYN ******S*
Jun 7 14:07:03 194.203.154.202:1213 -> xxx.yyy.255.239:1433 SYN ******S*
Jun 7 14:07:03 194.203.154.202:1210 -> xxx.yyy.255.236:1433 SYN ******S*
Jun 7 14:07:03 194.203.154.202:1212 -> xxx.yyy.255.238:1433 SYN ******S*
Jun 7 14:07:03 194.203.154.202:1217 -> xxx.yyy.255.241:1433 SYN ******S*
Jun 7 14:07:03 194.203.154.202:1209 -> xxx.yyy.255.235:1433 SYN ******S*
69874
Jun 7 14:58:13 218.204.107.211:1110 -> xxx.yyy.1.1:4000 SYN ******S*
Jun 7 14:58:13 218.204.107.211:1112 -> xxx.yyy.1.2:4000 SYN ******S*
Jun 7 14:58:15 218.204.107.211:1114 -> xxx.yyy.1.3:4000 SYN ******S*
Jun 7 14:58:15 218.204.107.211:1116 -> xxx.yyy.1.4:4000 SYN ******S*
Jun 7 14:58:12 218.204.107.211:1118 -> xxx.yyy.1.5:4000 SYN ******S*
Jun 7 14:58:12 218.204.107.211:1120 -> xxx.yyy.1.6:4000 SYN ******S*
Jun 7 14:58:15 218.204.107.211:1122 -> xxx.yyy.1.7:4000 SYN ******S*
Jun 7 14:58:15 218.204.107.211:1124 -> xxx.yyy.1.8:4000 SYN ******S*
[...]
Jun 7 15:09:53 218.204.107.211:4948 -> xxx.yyy.255.243:4000 SYN ******S*
Jun 7 15:09:53 218.204.107.211:4932 -> xxx.yyy.255.239:4000 SYN ******S*
Jun 7 15:09:53 218.204.107.211:4977 -> xxx.yyy.255.252:4000 SYN ******S*
Jun 7 15:09:53 218.204.107.211:4974 -> xxx.yyy.255.251:4000 SYN ******S*
Jun 7 15:09:53 218.204.107.211:4971 -> xxx.yyy.255.250:4000 SYN ******S*
Jun 7 15:09:53 218.204.107.211:4968 -> xxx.yyy.255.249:4000 SYN ******S*
Jun 7 15:09:53 218.204.107.211:4965 -> xxx.yyy.255.248:4000 SYN ******S*
Jun 7 15:09:53 218.204.107.211:4982 -> xxx.yyy.255.254:4000 SYN ******S*
Jun 7 15:09:53 218.204.107.211:4979 -> xxx.yyy.255.253:4000 SYN ******S*
68578
Jun 7 18:15:25 212.217.40.8:1406 -> xxx.yyy.1.1:445 SYN ******S*
Jun 7 18:15:25 212.217.40.8:1407 -> xxx.yyy.1.2:445 SYN ******S*
Jun 7 18:15:25 212.217.40.8:1408 -> xxx.yyy.1.3:445 SYN ******S*
Jun 7 18:15:25 212.217.40.8:1409 -> xxx.yyy.1.4:445 SYN ******S*
Jun 7 18:15:25 212.217.40.8:1410 -> xxx.yyy.1.5:445 SYN ******S*
Jun 7 18:15:25 212.217.40.8:1411 -> xxx.yyy.1.6:445 SYN ******S*
Jun 7 18:15:25 212.217.40.8:1412 -> xxx.yyy.1.7:445 SYN ******S*
Jun 7 18:15:25 212.217.40.8:1413 -> xxx.yyy.1.8:445 SYN ******S*
[...]
Jun 7 18:27:11 212.217.40.8:1487 -> xxx.yyy.255.176:445 SYN ******S*
Jun 7 18:27:11 212.217.40.8:1493 -> xxx.yyy.255.179:445 SYN ******S*
Jun 7 18:27:11 212.217.40.8:1489 -> xxx.yyy.255.177:445 SYN ******S*
Jun 7 18:27:11 212.217.40.8:1495 -> xxx.yyy.255.180:445 SYN ******S*
Jun 7 18:27:11 212.217.40.8:1485 -> xxx.yyy.255.175:445 SYN ******S*
Jun 7 18:27:11 212.217.40.8:1508 -> xxx.yyy.255.186:445 SYN ******S*
Jun 7 18:27:11 212.217.40.8:1514 -> xxx.yyy.255.189:445 SYN ******S*
Jun 7 18:27:11 212.217.40.8:1504 -> xxx.yyy.255.184:445 SYN ******S*
Jun 7 18:27:11 212.217.40.8:1510 -> xxx.yyy.255.187:445 SYN ******S*
67980
Jun 7 15:50:14 193.77.69.17:15702 -> xxx.yyy.1.1:1433 SYN ******S*
Jun 7 15:50:14 193.77.69.17:15703 -> xxx.yyy.1.2:1433 SYN ******S*
Jun 7 15:50:14 193.77.69.17:15704 -> xxx.yyy.1.3:1433 SYN ******S*
Jun 7 15:50:11 193.77.69.17:15705 -> xxx.yyy.1.4:1433 SYN ******S*
Jun 7 15:50:11 193.77.69.17:15706 -> xxx.yyy.1.5:1433 SYN ******S*
Jun 7 15:50:14 193.77.69.17:15707 -> xxx.yyy.1.6:1433 SYN ******S*
Jun 7 15:50:14 193.77.69.17:15708 -> xxx.yyy.1.7:1433 SYN ******S*
Jun 7 15:50:14 193.77.69.17:15709 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Jun 7 16:02:03 193.77.69.17:22085 -> xxx.yyy.255.244:1433 SYN ******S*
Jun 7 16:02:03 193.77.69.17:22086 -> xxx.yyy.255.245:1433 SYN ******S*
Jun 7 16:02:03 193.77.69.17:22089 -> xxx.yyy.255.248:1433 SYN ******S*
Jun 7 16:02:03 193.77.69.17:22090 -> xxx.yyy.255.249:1433 SYN ******S*
Jun 7 16:02:03 193.77.69.17:22091 -> xxx.yyy.255.250:1433 SYN ******S*
Jun 7 16:02:03 193.77.69.17:22092 -> xxx.yyy.255.251:1433 SYN ******S*
Jun 7 16:02:03 193.77.69.17:22093 -> xxx.yyy.255.252:1433 SYN ******S*
Jun 7 16:02:03 193.77.69.17:22094 -> xxx.yyy.255.253:1433 SYN ******S*
Jun 7 16:02:03 193.77.69.17:22095 -> xxx.yyy.255.254:1433 SYN ******S*
64423
Jun 7 13:37:00 136.145.193.14:2019 -> xxx.yyy.1.1:20168 SYN ******S*
Jun 7 13:37:00 136.145.193.14:2021 -> xxx.yyy.1.2:20168 SYN ******S*
Jun 7 13:37:01 136.145.193.14:2024 -> xxx.yyy.1.3:20168 SYN ******S*
Jun 7 13:37:01 136.145.193.14:2026 -> xxx.yyy.1.4:20168 SYN ******S*
Jun 7 13:37:01 136.145.193.14:2028 -> xxx.yyy.1.5:20168 SYN ******S*
Jun 7 13:36:59 136.145.193.14:2030 -> xxx.yyy.1.6:20168 SYN ******S*
Jun 7 13:36:59 136.145.193.14:2032 -> xxx.yyy.1.7:20168 SYN ******S*
Jun 7 13:36:59 136.145.193.14:2034 -> xxx.yyy.1.8:20168 SYN ******S*
[...]
Jun 7 13:49:25 136.145.193.14:1149 -> xxx.yyy.255.238:20168 SYN ******S*
Jun 7 13:49:25 136.145.193.14:1141 -> xxx.yyy.255.234:20168 SYN ******S*
Jun 7 13:49:25 136.145.193.14:1161 -> xxx.yyy.255.244:20168 SYN ******S*
Jun 7 13:49:25 136.145.193.14:1163 -> xxx.yyy.255.245:20168 SYN ******S*
Jun 7 13:49:25 136.145.193.14:1165 -> xxx.yyy.255.246:20168 SYN ******S*
Jun 7 13:49:25 136.145.193.14:1167 -> xxx.yyy.255.247:20168 SYN ******S*
Jun 7 13:49:25 136.145.193.14:1169 -> xxx.yyy.255.248:20168 SYN ******S*
Jun 7 13:49:25 136.145.193.14:1179 -> xxx.yyy.255.253:20168 SYN ******S*
Jun 7 13:49:25 136.145.193.14:1181 -> xxx.yyy.255.254:20168 SYN ******S*
61165
Jun 7 03:38:59 209.237.243.244:2171 -> xxx.yyy.1.1:4899 SYN ******S*
Jun 7 03:38:59 209.237.243.244:2172 -> xxx.yyy.1.2:4899 SYN ******S*
Jun 7 03:38:57 209.237.243.244:2173 -> xxx.yyy.1.3:4899 SYN ******S*
Jun 7 03:38:57 209.237.243.244:2174 -> xxx.yyy.1.4:4899 SYN ******S*
Jun 7 03:38:57 209.237.243.244:2175 -> xxx.yyy.1.5:4899 SYN ******S*
Jun 7 03:38:57 209.237.243.244:2176 -> xxx.yyy.1.6:4899 SYN ******S*
Jun 7 03:39:00 209.237.243.244:2177 -> xxx.yyy.1.7:4899 SYN ******S*
Jun 7 03:39:00 209.237.243.244:2178 -> xxx.yyy.1.8:4899 SYN ******S*
[...]
Jun 7 04:12:41 209.237.243.244:2965 -> xxx.yyy.255.253:4899 SYN ******S*
Jun 7 04:12:41 209.237.243.244:2967 -> xxx.yyy.255.254:4899 SYN ******S*
Jun 7 04:12:41 209.237.243.244:2777 -> xxx.yyy.255.184:4899 SYN ******S*
Jun 7 04:12:42 209.237.243.244:2856 -> xxx.yyy.255.209:4899 SYN ******S*
Jun 7 04:12:42 209.237.243.244:2857 -> xxx.yyy.255.210:4899 SYN ******S*
Jun 7 04:12:42 209.237.243.244:2855 -> xxx.yyy.255.208:4899 SYN ******S*
Jun 7 04:12:42 209.237.243.244:2861 -> xxx.yyy.255.213:4899 SYN ******S*
Jun 7 04:12:43 209.237.243.244:2859 -> xxx.yyy.255.211:4899 SYN ******S*
Jun 7 04:12:43 209.237.243.244:2860 -> xxx.yyy.255.212:4899 SYN ******S*
47458
Jun 7 22:38:10 146.115.67.120:3696 -> xxx.yyy.1.1:4899 SYN ******S*
Jun 7 22:38:10 146.115.67.120:3697 -> xxx.yyy.1.2:4899 SYN ******S*
Jun 7 22:38:09 146.115.67.120:3698 -> xxx.yyy.1.3:4899 SYN ******S*
Jun 7 22:38:09 146.115.67.120:3699 -> xxx.yyy.1.4:4899 SYN ******S*
Jun 7 22:38:09 146.115.67.120:3700 -> xxx.yyy.1.5:4899 SYN ******S*
Jun 7 22:38:09 146.115.67.120:3701 -> xxx.yyy.1.6:4899 SYN ******S*
Jun 7 22:38:09 146.115.67.120:3702 -> xxx.yyy.1.7:4899 SYN ******S*
Jun 7 22:38:09 146.115.67.120:3703 -> xxx.yyy.1.8:4899 SYN ******S*
[...]
Jun 7 22:44:48 146.115.67.120:4883 -> xxx.yyy.255.247:4899 SYN ******S*
Jun 7 22:44:48 146.115.67.120:4884 -> xxx.yyy.255.248:4899 SYN ******S*
Jun 7 22:44:48 146.115.67.120:4885 -> xxx.yyy.255.249:4899 SYN ******S*
Jun 7 22:44:48 146.115.67.120:4886 -> xxx.yyy.255.250:4899 SYN ******S*
Jun 7 22:44:48 146.115.67.120:4887 -> xxx.yyy.255.251:4899 SYN ******S*
Jun 7 22:44:48 146.115.67.120:4888 -> xxx.yyy.255.252:4899 SYN ******S*
Jun 7 22:44:48 146.115.67.120:4889 -> xxx.yyy.255.253:4899 SYN ******S*
Jun 7 22:44:48 146.115.67.120:4890 -> xxx.yyy.255.254:4899 SYN ******S*
46391
Jun 7 22:22:15 134.124.24.4:3823 -> xxx.yyy.1.1:445 SYN ******S*
Jun 7 22:22:15 134.124.24.4:3826 -> xxx.yyy.1.2:445 SYN ******S*
Jun 7 22:22:18 134.124.24.4:3831 -> xxx.yyy.1.3:445 SYN ******S*
Jun 7 22:22:18 134.124.24.4:3839 -> xxx.yyy.1.4:445 SYN ******S*
Jun 7 22:22:15 134.124.24.4:3842 -> xxx.yyy.1.5:445 SYN ******S*
Jun 7 22:22:16 134.124.24.4:3849 -> xxx.yyy.1.6:445 SYN ******S*
Jun 7 22:22:16 134.124.24.4:3854 -> xxx.yyy.1.7:445 SYN ******S*
Jun 7 22:22:16 134.124.24.4:3855 -> xxx.yyy.1.8:445 SYN ******S*
[...]
Jun 7 23:59:58 134.124.24.4:1977 -> xxx.yyy.197.246:445 SYN ******S*
Jun 7 23:59:58 134.124.24.4:1981 -> xxx.yyy.197.247:445 SYN ******S*
Jun 7 23:59:59 134.124.24.4:2000 -> xxx.yyy.197.248:445 SYN ******S*
Jun 7 23:59:59 134.124.24.4:2016 -> xxx.yyy.197.250:445 SYN ******S*
Jun 7 23:59:59 134.124.24.4:2023 -> xxx.yyy.197.251:445 SYN ******S*
Jun 7 23:59:59 134.124.24.4:2025 -> xxx.yyy.197.249:445 SYN ******S*
Jun 7 23:59:59 134.124.24.4:2026 -> xxx.yyy.197.252:445 SYN ******S*
Jun 7 23:59:59 134.124.24.4:2032 -> xxx.yyy.197.253:445 SYN ******S*
Jun 7 23:59:59 134.124.24.4:2040 -> xxx.yyy.197.254:445 SYN ******S*
46263
Jun 7 19:11:15 62.57.51.125:2450 -> xxx.yyy.1.0:17300 SYN ******S*
Jun 7 19:11:18 62.57.51.125:2592 -> xxx.yyy.1.1:17300 SYN ******S*
Jun 7 19:11:18 62.57.51.125:2593 -> xxx.yyy.1.2:17300 SYN ******S*
Jun 7 19:11:17 62.57.51.125:2594 -> xxx.yyy.1.3:17300 SYN ******S*
Jun 7 19:11:18 62.57.51.125:2607 -> xxx.yyy.1.16:17300 SYN ******S*
Jun 7 19:11:17 62.57.51.125:2596 -> xxx.yyy.1.5:17300 SYN ******S*
Jun 7 19:11:17 62.57.51.125:2597 -> xxx.yyy.1.6:17300 SYN ******S*
Jun 7 19:11:18 62.57.51.125:2602 -> xxx.yyy.1.11:17300 SYN ******S*
[...]
Jun 7 21:01:18 62.57.51.125:4742 -> xxx.yyy.254.247:17300 SYN ******S*
Jun 7 21:01:18 62.57.51.125:4743 -> xxx.yyy.254.248:17300 SYN ******S*
Jun 7 21:01:18 62.57.51.125:4744 -> xxx.yyy.254.249:17300 SYN ******S*
Jun 7 21:01:18 62.57.51.125:4745 -> xxx.yyy.254.250:17300 SYN ******S*
Jun 7 21:01:18 62.57.51.125:4746 -> xxx.yyy.254.251:17300 SYN ******S*
Jun 7 21:01:18 62.57.51.125:4747 -> xxx.yyy.254.252:17300 SYN ******S*
Jun 7 21:01:20 62.57.51.125:1040 -> xxx.yyy.254.253:17300 SYN ******S*
Jun 7 21:01:20 62.57.51.125:1041 -> xxx.yyy.254.254:17300 SYN ******S*
Jun 7 21:01:20 62.57.51.125:1042 -> xxx.yyy.254.255:17300 SYN ******S*
42875
[...]
17605
Jun 7 00:56:47 61.55.191.217:2564 -> xxx.yyy.195.93:5554 SYN ******S*
Jun 7 00:56:48 61.55.191.217:3881 -> xxx.yyy.195.93:1023 SYN ******S*
Jun 7 00:56:50 61.55.191.217:2735 -> xxx.yyy.195.93:9898 SYN ******S*
Jun 7 00:56:47 61.55.191.217:2629 -> xxx.yyy.195.132:5554 SYN ******S*
Jun 7 00:56:48 61.55.191.217:3882 -> xxx.yyy.195.132:1023 SYN ******S*
Jun 7 00:56:50 61.55.191.217:2736 -> xxx.yyy.195.132:9898 SYN ******S*
Jun 7 00:56:47 61.55.191.217:2635 -> xxx.yyy.195.142:5554 SYN ******S*
Jun 7 00:56:48 61.55.191.217:3888 -> xxx.yyy.195.142:1023 SYN ******S*
[...]
Jun 7 00:57:33 61.55.191.217:3410 -> xxx.yyy.215.67:9898 SYN ******S*
Jun 7 00:57:33 61.55.191.217:3414 -> xxx.yyy.215.69:9898 SYN ******S*
Jun 7 00:57:33 61.55.191.217:3454 -> xxx.yyy.215.71:9898 SYN ******S*
Jun 7 00:57:33 61.55.191.217:3471 -> xxx.yyy.215.72:9898 SYN ******S*
Jun 7 00:57:33 61.55.191.217:3448 -> xxx.yyy.215.70:9898 SYN ******S*
Jun 7 00:57:33 61.55.191.217:3582 -> xxx.yyy.215.73:9898 SYN ******S*
Jun 7 00:57:33 61.55.191.217:3584 -> xxx.yyy.215.74:9898 SYN ******S*
Jun 7 00:57:33 61.55.191.217:3592 -> xxx.yyy.215.75:9898 SYN ******S*
Jun 7 00:57:33 61.55.191.217:3606 -> xxx.yyy.215.76:9898 SYN ******S*
14162
Jun 7 01:55:46 218.18.199.31:1241 -> xxx.yyy.4.1:3127 SYN ******S*
Jun 7 01:55:46 218.18.199.31:1244 -> xxx.yyy.4.1:1080 SYN ******S*
Jun 7 01:55:46 218.18.199.31:1250 -> xxx.yyy.4.1:10080 SYN ******S*
Jun 7 01:55:46 218.18.199.31:1254 -> xxx.yyy.4.1:3128 SYN ******S*
Jun 7 01:55:47 218.18.199.31:1280 -> xxx.yyy.4.3:3127 SYN ******S*
Jun 7 01:55:47 218.18.199.31:1283 -> xxx.yyy.4.3:1080 SYN ******S*
Jun 7 01:55:47 218.18.199.31:1290 -> xxx.yyy.4.3:10080 SYN ******S*
Jun 7 01:55:47 218.18.199.31:1294 -> xxx.yyy.4.3:3128 SYN ******S*
[...]
Jun 7 04:07:04 218.18.199.31:2769 -> xxx.yyy.73.114:10080 SYN ******S*
Jun 7 04:07:04 218.18.199.31:2775 -> xxx.yyy.73.114:3128 SYN ******S*
Jun 7 04:07:04 218.18.199.31:2809 -> xxx.yyy.73.116:10080 SYN ******S*
Jun 7 04:07:04 218.18.199.31:2815 -> xxx.yyy.73.116:3128 SYN ******S*
Jun 7 04:07:04 218.18.199.31:2819 -> xxx.yyy.73.117:3127 SYN ******S*
Jun 7 04:07:04 218.18.199.31:2825 -> xxx.yyy.73.117:1080 SYN ******S*
Jun 7 04:07:05 218.18.199.31:2829 -> xxx.yyy.73.117:10080 SYN ******S*
Jun 7 04:07:05 218.18.199.31:2839 -> xxx.yyy.73.118:3127 SYN ******S*
Jun 7 04:07:05 218.18.199.31:2845 -> xxx.yyy.73.118:1080 SYN ******S*
12528
Jun 7 21:29:24 24.50.139.76:22002 -> xxx.yyy.1.0:3127 SYN ******S*
Jun 7 21:29:24 24.50.139.76:22002 -> xxx.yyy.1.0:1080 SYN ******S*
Jun 7 21:29:25 24.50.139.76:22002 -> xxx.yyy.1.0:10080 SYN ******S*
Jun 7 21:29:25 24.50.139.76:22002 -> xxx.yyy.1.0:3128 SYN ******S*
Jun 7 21:29:25 24.50.139.76:22002 -> xxx.yyy.1.1:3127 SYN ******S*
Jun 7 21:29:25 24.50.139.76:22002 -> xxx.yyy.1.1:1080 SYN ******S*
Jun 7 21:29:25 24.50.139.76:22002 -> xxx.yyy.1.1:10080 SYN ******S*
Jun 7 21:29:25 24.50.139.76:22002 -> xxx.yyy.1.1:3128 SYN ******S*
[...]
Jun 7 22:28:56 24.50.139.76:22002 -> xxx.yyy.32.253:3128 SYN ******S*
Jun 7 22:28:56 24.50.139.76:22002 -> xxx.yyy.32.254:3127 SYN ******S*
Jun 7 22:28:56 24.50.139.76:22002 -> xxx.yyy.32.254:1080 SYN ******S*
Jun 7 22:28:56 24.50.139.76:22002 -> xxx.yyy.32.254:10080 SYN ******S*
Jun 7 22:28:56 24.50.139.76:22002 -> xxx.yyy.32.254:3128 SYN ******S*
Jun 7 22:28:56 24.50.139.76:22002 -> xxx.yyy.32.255:3127 SYN ******S*
Jun 7 22:28:56 24.50.139.76:22002 -> xxx.yyy.32.255:1080 SYN ******S*
Jun 7 22:28:57 24.50.139.76:22002 -> xxx.yyy.32.255:10080 SYN ******S*
Jun 7 22:28:57 24.50.139.76:22002 -> xxx.yyy.32.255:3128 SYN ******S*
12170
Jun 7 00:53:25 218.72.104.135:1338 -> xxx.yyy.72.124:5554 SYN ******S*
Jun 7 00:53:28 218.72.104.135:2694 -> xxx.yyy.72.124:9898 SYN ******S*
Jun 7 00:53:25 218.72.104.135:1343 -> xxx.yyy.72.127:5554 SYN ******S*
Jun 7 00:53:26 218.72.104.135:1829 -> xxx.yyy.72.127:1023 SYN ******S*
Jun 7 00:53:28 218.72.104.135:2701 -> xxx.yyy.72.127:9898 SYN ******S*
Jun 7 00:53:25 218.72.104.135:1351 -> xxx.yyy.72.129:5554 SYN ******S*
Jun 7 00:53:26 218.72.104.135:1836 -> xxx.yyy.72.129:1023 SYN ******S*
Jun 7 00:53:25 218.72.104.135:1366 -> xxx.yyy.72.130:5554 SYN ******S*
[...]
Jun 7 00:54:41 218.72.104.135:2186 -> xxx.yyy.72.247:9898 SYN ******S*
Jun 7 00:54:41 218.72.104.135:2198 -> xxx.yyy.92.213:9898 SYN ******S*
Jun 7 00:54:41 218.72.104.135:2200 -> xxx.yyy.92.218:9898 SYN ******S*
Jun 7 00:54:41 218.72.104.135:2202 -> xxx.yyy.92.219:9898 SYN ******S*
Jun 7 00:54:41 218.72.104.135:2218 -> xxx.yyy.92.239:9898 SYN ******S*
Jun 7 00:54:41 218.72.104.135:2074 -> xxx.yyy.92.240:9898 SYN ******S*
Jun 7 00:54:42 218.72.104.135:2552 -> xxx.yyy.92.225:9898 SYN ******S*
Jun 7 00:54:42 218.72.104.135:2553 -> xxx.yyy.92.237:9898 SYN ******S*
Jun 7 00:54:42 218.72.104.135:2554 -> xxx.yyy.92.244:9898 SYN ******S*
8322
Jun 7 00:56:15 220.184.217.1:2457 -> xxx.yyy.174.11:5554 SYN ******S*
Jun 7 00:56:16 220.184.217.1:3232 -> xxx.yyy.174.11:1023 SYN ******S*
Jun 7 00:56:18 220.184.217.1:1118 -> xxx.yyy.174.11:9898 SYN ******S*
Jun 7 00:56:15 220.184.217.1:2458 -> xxx.yyy.174.12:5554 SYN ******S*
Jun 7 00:56:16 220.184.217.1:3233 -> xxx.yyy.174.12:1023 SYN ******S*
Jun 7 00:56:18 220.184.217.1:1119 -> xxx.yyy.174.12:9898 SYN ******S*
Jun 7 00:56:15 220.184.217.1:2460 -> xxx.yyy.174.14:5554 SYN ******S*
Jun 7 00:56:18 220.184.217.1:1125 -> xxx.yyy.174.14:9898 SYN ******S*
[...]
Jun 7 00:56:59 220.184.217.1:2387 -> xxx.yyy.194.108:9898 SYN ******S*
Jun 7 00:56:59 220.184.217.1:2399 -> xxx.yyy.194.111:9898 SYN ******S*
Jun 7 00:56:59 220.184.217.1:2406 -> xxx.yyy.194.109:9898 SYN ******S*
Jun 7 00:56:59 220.184.217.1:2420 -> xxx.yyy.194.113:9898 SYN ******S*
Jun 7 00:56:59 220.184.217.1:2421 -> xxx.yyy.194.114:9898 SYN ******S*
Jun 7 00:56:59 220.184.217.1:2428 -> xxx.yyy.194.116:9898 SYN ******S*
Jun 7 00:56:59 220.184.217.1:2436 -> xxx.yyy.194.115:9898 SYN ******S*
Jun 7 00:56:59 220.184.217.1:2437 -> xxx.yyy.194.118:9898 SYN ******S*
Jun 7 00:56:59 220.184.217.1:2482 -> xxx.yyy.194.124:9898 SYN ******S*
7926
Jun 7 00:15:20 220.184.106.33:1416 -> xxx.yyy.171.5:5554 SYN ******S*
Jun 7 00:15:21 220.184.106.33:2029 -> xxx.yyy.171.5:1023 SYN ******S*
Jun 7 00:15:23 220.184.106.33:3162 -> xxx.yyy.171.5:9898 SYN ******S*
Jun 7 00:15:20 220.184.106.33:1428 -> xxx.yyy.171.8:5554 SYN ******S*
Jun 7 00:15:23 220.184.106.33:3178 -> xxx.yyy.171.8:9898 SYN ******S*
Jun 7 00:15:20 220.184.106.33:1435 -> xxx.yyy.171.10:5554 SYN ******S*
Jun 7 00:15:21 220.184.106.33:2045 -> xxx.yyy.171.10:1023 SYN ******S*
Jun 7 00:15:23 220.184.106.33:3180 -> xxx.yyy.171.10:9898 SYN ******S*
[...]
Jun 7 00:57:02 220.184.106.33:2086 -> xxx.yyy.153.110:9898 SYN ******S*
Jun 7 00:57:02 220.184.106.33:2091 -> xxx.yyy.153.111:9898 SYN ******S*
Jun 7 00:57:02 220.184.106.33:2338 -> xxx.yyy.153.119:9898 SYN ******S*
Jun 7 00:57:02 220.184.106.33:2347 -> xxx.yyy.153.123:9898 SYN ******S*
Jun 7 00:57:02 220.184.106.33:2350 -> xxx.yyy.153.126:9898 SYN ******S*
Jun 7 00:57:02 220.184.106.33:2355 -> xxx.yyy.153.129:9898 SYN ******S*
Jun 7 00:57:02 220.184.106.33:2357 -> xxx.yyy.153.131:9898 SYN ******S*
Jun 7 00:57:02 220.184.106.33:2359 -> xxx.yyy.153.133:9898 SYN ******S*
6986
Jun 7 10:46:13 146.115.74.252:62415 -> xxx.yyy.1.1:4899 SYN ******S*
Jun 7 10:46:13 146.115.74.252:61969 -> xxx.yyy.1.2:4899 SYN ******S*
Jun 7 10:46:12 146.115.74.252:61907 -> xxx.yyy.1.3:4899 SYN ******S*
Jun 7 10:46:12 146.115.74.252:63365 -> xxx.yyy.1.4:4899 SYN ******S*
Jun 7 10:46:12 146.115.74.252:62837 -> xxx.yyy.1.5:4899 SYN ******S*
Jun 7 10:46:12 146.115.74.252:61443 -> xxx.yyy.1.6:4899 SYN ******S*
Jun 7 10:46:12 146.115.74.252:63619 -> xxx.yyy.1.7:4899 SYN ******S*
Jun 7 10:46:12 146.115.74.252:65243 -> xxx.yyy.1.8:4899 SYN ******S*
[...]
Jun 7 10:53:12 146.115.74.252:64057 -> xxx.yyy.129.88:4899 SYN ******S*
Jun 7 10:53:12 146.115.74.252:62245 -> xxx.yyy.129.89:4899 SYN ******S*
Jun 7 10:53:12 146.115.74.252:64895 -> xxx.yyy.129.96:4899 SYN ******S*
Jun 7 10:53:12 146.115.74.252:63309 -> xxx.yyy.129.107:4899 SYN ******S*
Jun 7 10:53:12 146.115.74.252:62865 -> xxx.yyy.129.117:4899 SYN ******S*
Jun 7 10:53:12 146.115.74.252:62341 -> xxx.yyy.129.120:4899 SYN ******S*
Jun 7 10:53:12 146.115.74.252:62751 -> xxx.yyy.129.121:4899 SYN ******S*
Jun 7 10:53:12 146.115.74.252:62987 -> xxx.yyy.129.122:4899 SYN ******S*
Jun 7 10:53:12 146.115.74.252:62769 -> xxx.yyy.129.123:4899 SYN ******S*
5623
Jun 7 00:50:12 81.168.228.132:63133 -> xxx.yyy.1.2:443 SYN ******S*
Jun 7 00:50:12 81.168.228.132:62259 -> xxx.yyy.1.5:443 SYN ******S*
Jun 7 00:50:12 81.168.228.132:63955 -> xxx.yyy.1.9:443 SYN ******S*
Jun 7 00:50:12 81.168.228.132:62285 -> xxx.yyy.1.12:443 SYN ******S*
Jun 7 00:50:14 81.168.228.132:63569 -> xxx.yyy.1.207:443 SYN ******S*
Jun 7 00:50:14 81.168.228.132:62081 -> xxx.yyy.1.209:443 SYN ******S*
Jun 7 00:50:14 81.168.228.132:61885 -> xxx.yyy.1.210:443 SYN ******S*
Jun 7 00:50:14 81.168.228.132:62759 -> xxx.yyy.1.208:443 SYN ******S*
[...]
Jun 7 01:03:54 81.168.228.132:62885 -> xxx.yyy.255.98:443 SYN ******S*
Jun 7 01:03:54 81.168.228.132:64439 -> xxx.yyy.255.142:443 SYN ******S*
Jun 7 01:03:54 81.168.228.132:63093 -> xxx.yyy.255.118:443 SYN ******S*
Jun 7 01:03:54 81.168.228.132:63253 -> xxx.yyy.255.164:443 SYN ******S*
Jun 7 01:03:54 81.168.228.132:61995 -> xxx.yyy.255.167:443 SYN ******S*
Jun 7 01:03:54 81.168.228.132:63563 -> xxx.yyy.255.165:443 SYN ******S*
Jun 7 01:03:54 81.168.228.132:61377 -> xxx.yyy.255.168:443 SYN ******S*
Jun 7 01:03:54 81.168.228.132:63447 -> xxx.yyy.255.166:443 SYN ******S*
4398
Jun 7 00:00:41 65.54.164.37:28957 -> xxx.yyy.1.38:80 SYN ******S*
Jun 7 00:00:42 65.54.164.37:29184 -> xxx.yyy.236.22:80 SYN ******S*
Jun 7 00:00:42 65.54.164.37:29215 -> xxx.yyy.241.22:80 SYN ******S*
Jun 7 00:00:42 65.54.164.37:29308 -> xxx.yyy.1.13:80 SYN ******S*
Jun 7 00:00:44 65.54.164.37:29918 -> xxx.yyy.1.60:80 SYN ******S*
Jun 7 00:00:45 65.54.164.37:30495 -> xxx.yyy.241.20:80 SYN ******S*
Jun 7 00:00:47 65.54.164.37:31144 -> xxx.yyy.248.180:80 SYN ******S*
Jun 7 00:00:48 65.54.164.37:31380 -> xxx.yyy.232.143:80 SYN ******S*
[...]
Jun 7 23:59:34 65.54.164.37:32326 -> xxx.yyy.220.58:80 SYN ******S*
Jun 7 23:59:35 65.54.164.37:32457 -> xxx.yyy.241.29:80 SYN ******S*
Jun 7 23:59:36 65.54.164.37:32812 -> xxx.yyy.1.60:80 SYN ******S*
Jun 7 23:59:36 65.54.164.37:32873 -> xxx.yyy.232.143:80 SYN ******S*
Jun 7 23:59:43 65.54.164.37:33865 -> xxx.yyy.236.22:80 SYN ******S*
Jun 7 23:59:43 65.54.164.37:34214 -> xxx.yyy.14.35:80 SYN ******S*
Jun 7 23:59:45 65.54.164.37:35002 -> xxx.yyy.241.30:80 SYN ******S*
Jun 7 23:59:47 65.54.164.37:35654 -> xxx.yyy.1.13:80 SYN ******S*
Jun 7 23:59:47 65.54.164.37:35751 -> xxx.yyy.241.20:80 SYN ******S*
4317
Jun 7 04:02:17 4.14.180.227:1083 -> xxx.yyy.200.1:445 SYN ******S*
Jun 7 04:02:16 4.14.180.227:1080 -> xxx.yyy.200.1:6129 SYN ******S*
Jun 7 04:02:17 4.14.180.227:1082 -> xxx.yyy.200.1:554 SYN ******S*
Jun 7 04:02:17 4.14.180.227:1084 -> xxx.yyy.200.1:515 SYN ******S*
Jun 7 04:02:15 4.14.180.227:1089 -> xxx.yyy.200.1:31337 SYN ******S*
Jun 7 04:02:17 4.14.180.227:1085 -> xxx.yyy.200.2:445 SYN ******S*
Jun 7 04:02:17 4.14.180.227:1088 -> xxx.yyy.200.2:6129 SYN ******S*
Jun 7 04:02:15 4.14.180.227:1090 -> xxx.yyy.200.2:554 SYN ******S*
[...]
Jun 7 04:06:27 4.14.180.227:3181 -> xxx.yyy.200.250:31337 SYN ******S*
Jun 7 04:06:27 4.14.180.227:3253 -> xxx.yyy.200.253:139 SYN ******S*
Jun 7 04:06:28 4.14.180.227:3262 -> xxx.yyy.200.254:139 SYN ******S*
Jun 7 04:06:28 4.14.180.227:3237 -> xxx.yyy.200.251:139 SYN ******S*
Jun 7 04:06:28 4.14.180.227:3189 -> xxx.yyy.200.251:31337 SYN ******S*
Jun 7 04:06:30 4.14.180.227:3253 -> xxx.yyy.200.253:139 SYN ******S*
Jun 7 04:06:30 4.14.180.227:3206 -> xxx.yyy.200.253:31337 SYN ******S*
Jun 7 04:06:31 4.14.180.227:3262 -> xxx.yyy.200.254:139 SYN ******S*
Jun 7 04:06:31 4.14.180.227:3214 -> xxx.yyy.200.254:31337 SYN ******S*
2907
Jun 7 06:04:44 4.11.60.108:2484 -> xxx.yyy.173.1:445 SYN ******S*
Jun 7 06:04:44 4.11.60.108:2481 -> xxx.yyy.173.1:6129 SYN ******S*
Jun 7 06:04:44 4.11.60.108:2483 -> xxx.yyy.173.1:554 SYN ******S*
Jun 7 06:04:44 4.11.60.108:2485 -> xxx.yyy.173.1:515 SYN ******S*
Jun 7 06:04:45 4.11.60.108:2490 -> xxx.yyy.173.1:31337 SYN ******S*
Jun 7 06:04:45 4.11.60.108:2492 -> xxx.yyy.173.2:445 SYN ******S*
Jun 7 06:04:45 4.11.60.108:2489 -> xxx.yyy.173.2:6129 SYN ******S*
Jun 7 06:04:45 4.11.60.108:2491 -> xxx.yyy.173.2:554 SYN ******S*
[...]
Jun 7 06:08:55 4.11.60.108:4534 -> xxx.yyy.173.250:139 SYN ******S*
Jun 7 06:08:55 4.11.60.108:4487 -> xxx.yyy.173.250:31337 SYN ******S*
Jun 7 06:08:56 4.11.60.108:4566 -> xxx.yyy.173.254:139 SYN ******S*
Jun 7 06:08:56 4.11.60.108:4542 -> xxx.yyy.173.251:139 SYN ******S*
Jun 7 06:08:56 4.11.60.108:4496 -> xxx.yyy.173.251:31337 SYN ******S*
Jun 7 06:08:58 4.11.60.108:4558 -> xxx.yyy.173.253:139 SYN ******S*
Jun 7 06:08:59 4.11.60.108:4566 -> xxx.yyy.173.254:139 SYN ******S*
Jun 7 06:08:59 4.11.60.108:4520 -> xxx.yyy.173.254:31337 SYN ******S*
2869
Jun 7 17:56:31 206.116.217.194:1371 -> xxx.yyy.250.1:445 SYN ******S*
Jun 7 17:56:30 206.116.217.194:1367 -> xxx.yyy.250.1:6129 SYN ******S*
Jun 7 17:56:30 206.116.217.194:1368 -> xxx.yyy.250.1:554 SYN ******S*
Jun 7 17:56:31 206.116.217.194:1373 -> xxx.yyy.250.1:515 SYN ******S*
Jun 7 17:56:31 206.116.217.194:1385 -> xxx.yyy.250.1:31337 SYN ******S*
Jun 7 17:56:31 206.116.217.194:1387 -> xxx.yyy.250.2:445 SYN ******S*
Jun 7 17:56:31 206.116.217.194:1382 -> xxx.yyy.250.2:6129 SYN ******S*
Jun 7 17:56:31 206.116.217.194:1383 -> xxx.yyy.250.2:554 SYN ******S*
[...]
Jun 7 18:00:41 206.116.217.194:1583 -> xxx.yyy.250.253:139 SYN ******S*
Jun 7 18:00:42 206.116.217.194:1599 -> xxx.yyy.250.254:139 SYN ******S*
Jun 7 18:00:42 206.116.217.194:1550 -> xxx.yyy.250.251:139 SYN ******S*
Jun 7 18:00:42 206.116.217.194:1456 -> xxx.yyy.250.251:31337 SYN ******S*
Jun 7 18:00:44 206.116.217.194:1583 -> xxx.yyy.250.253:139 SYN ******S*
Jun 7 18:00:44 206.116.217.194:1488 -> xxx.yyy.250.253:31337 SYN ******S*
Jun 7 18:00:45 206.116.217.194:1599 -> xxx.yyy.250.254:139 SYN ******S*
Jun 7 18:00:45 206.116.217.194:1507 -> xxx.yyy.250.254:31337 SYN ******S*
2853
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list