[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Wed Jun 9 11:02:02 GMT 2004
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0500.
Jun 8 21:29:19 205.150.66.10:4846 -> xxx.yyy.1.1:445 SYN ******S*
Jun 8 21:29:19 205.150.66.10:4858 -> xxx.yyy.1.2:445 SYN ******S*
Jun 8 21:29:19 205.150.66.10:4878 -> xxx.yyy.1.3:445 SYN ******S*
Jun 8 21:29:19 205.150.66.10:4891 -> xxx.yyy.1.4:445 SYN ******S*
Jun 8 21:29:19 205.150.66.10:4896 -> xxx.yyy.1.5:445 SYN ******S*
Jun 8 21:29:19 205.150.66.10:4901 -> xxx.yyy.1.7:445 SYN ******S*
Jun 8 21:29:16 205.150.66.10:4924 -> xxx.yyy.1.10:445 SYN ******S*
Jun 8 21:29:19 205.150.66.10:4970 -> xxx.yyy.1.12:445 SYN ******S*
[...]
Jun 8 21:40:11 205.150.66.10:3674 -> xxx.yyy.255.253:445 SYN ******S*
Jun 8 21:40:11 205.150.66.10:3668 -> xxx.yyy.255.247:445 SYN ******S*
Jun 8 21:40:11 205.150.66.10:3671 -> xxx.yyy.255.250:445 SYN ******S*
Jun 8 21:40:11 205.150.66.10:3672 -> xxx.yyy.255.251:445 SYN ******S*
Jun 8 21:40:11 205.150.66.10:3673 -> xxx.yyy.255.252:445 SYN ******S*
Jun 8 21:40:11 205.150.66.10:3666 -> xxx.yyy.255.245:445 SYN ******S*
Jun 8 21:40:11 205.150.66.10:3667 -> xxx.yyy.255.246:445 SYN ******S*
Jun 8 21:40:11 205.150.66.10:3670 -> xxx.yyy.255.249:445 SYN ******S*
73908
Jun 8 04:03:38 193.147.161.89:4336 -> xxx.yyy.1.1:6129 SYN ******S*
Jun 8 04:03:38 193.147.161.89:4337 -> xxx.yyy.1.2:6129 SYN ******S*
Jun 8 04:03:40 193.147.161.89:4338 -> xxx.yyy.1.3:6129 SYN ******S*
Jun 8 04:03:37 193.147.161.89:4339 -> xxx.yyy.1.4:6129 SYN ******S*
Jun 8 04:03:40 193.147.161.89:4340 -> xxx.yyy.1.5:6129 SYN ******S*
Jun 8 04:03:40 193.147.161.89:4341 -> xxx.yyy.1.6:6129 SYN ******S*
Jun 8 04:03:40 193.147.161.89:4342 -> xxx.yyy.1.7:6129 SYN ******S*
Jun 8 04:03:40 193.147.161.89:4343 -> xxx.yyy.1.8:6129 SYN ******S*
[...]
Jun 8 04:27:45 193.147.161.89:4411 -> xxx.yyy.zzz.244:6129 SYN ******S*
Jun 8 04:27:45 193.147.161.89:4408 -> xxx.yyy.zzz.241:6129 SYN ******S*
Jun 8 04:27:45 193.147.161.89:4421 -> xxx.yyy.zzz.254:6129 SYN ******S*
Jun 8 04:27:45 193.147.161.89:4415 -> xxx.yyy.zzz.248:6129 SYN ******S*
Jun 8 04:27:45 193.147.161.89:4418 -> xxx.yyy.zzz.251:6129 SYN ******S*
Jun 8 04:27:45 193.147.161.89:4416 -> xxx.yyy.zzz.249:6129 SYN ******S*
Jun 8 04:27:45 193.147.161.89:4419 -> xxx.yyy.zzz.252:6129 SYN ******S*
Jun 8 04:27:45 193.147.161.89:4420 -> xxx.yyy.zzz.253:6129 SYN ******S*
Jun 8 04:27:45 193.147.161.89:4417 -> xxx.yyy.zzz.250:6129 SYN ******S*
73597
Jun 8 06:05:45 67.118.186.171:3477 -> xxx.yyy.1.1:139 SYN ******S*
Jun 8 06:05:45 67.118.186.171:3478 -> xxx.yyy.1.2:139 SYN ******S*
Jun 8 06:05:45 67.118.186.171:3479 -> xxx.yyy.1.3:139 SYN ******S*
Jun 8 06:05:45 67.118.186.171:3480 -> xxx.yyy.1.4:139 SYN ******S*
Jun 8 06:05:45 67.118.186.171:3481 -> xxx.yyy.1.5:139 SYN ******S*
Jun 8 06:05:45 67.118.186.171:3482 -> xxx.yyy.1.6:139 SYN ******S*
Jun 8 06:05:42 67.118.186.171:3483 -> xxx.yyy.1.7:139 SYN ******S*
Jun 8 06:05:42 67.118.186.171:3484 -> xxx.yyy.1.8:139 SYN ******S*
[...]
Jun 8 06:20:14 67.118.186.171:2720 -> xxx.yyy.zzz.246:139 SYN ******S*
Jun 8 06:20:14 67.118.186.171:2723 -> xxx.yyy.zzz.249:139 SYN ******S*
Jun 8 06:20:14 67.118.186.171:2721 -> xxx.yyy.zzz.247:139 SYN ******S*
Jun 8 06:20:14 67.118.186.171:2722 -> xxx.yyy.zzz.248:139 SYN ******S*
Jun 8 06:20:14 67.118.186.171:2718 -> xxx.yyy.zzz.244:139 SYN ******S*
Jun 8 06:20:14 67.118.186.171:2717 -> xxx.yyy.zzz.243:139 SYN ******S*
Jun 8 06:20:14 67.118.186.171:2726 -> xxx.yyy.zzz.252:139 SYN ******S*
Jun 8 06:20:14 67.118.186.171:2728 -> xxx.yyy.zzz.254:139 SYN ******S*
Jun 8 06:20:14 67.118.186.171:2727 -> xxx.yyy.zzz.253:139 SYN ******S*
72386
Jun 8 01:14:31 194.100.87.134:48870 -> xxx.yyy.1.1:1433 SYN ******S*
Jun 8 01:14:31 194.100.87.134:48872 -> xxx.yyy.1.3:1433 SYN ******S*
Jun 8 01:14:28 194.100.87.134:48873 -> xxx.yyy.1.4:1433 SYN ******S*
Jun 8 01:14:31 194.100.87.134:48874 -> xxx.yyy.1.5:1433 SYN ******S*
Jun 8 01:14:31 194.100.87.134:48875 -> xxx.yyy.1.6:1433 SYN ******S*
Jun 8 01:14:31 194.100.87.134:48876 -> xxx.yyy.1.7:1433 SYN ******S*
Jun 8 01:14:31 194.100.87.134:48877 -> xxx.yyy.1.8:1433 SYN ******S*
Jun 8 01:14:31 194.100.87.134:48878 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
Jun 8 01:26:43 194.100.87.134:4279 -> xxx.yyy.255.241:1433 SYN ******S*
Jun 8 01:26:43 194.100.87.134:4286 -> xxx.yyy.255.248:1433 SYN ******S*
Jun 8 01:26:43 194.100.87.134:4283 -> xxx.yyy.255.245:1433 SYN ******S*
Jun 8 01:26:43 194.100.87.134:4287 -> xxx.yyy.255.249:1433 SYN ******S*
Jun 8 01:26:43 194.100.87.134:4288 -> xxx.yyy.255.250:1433 SYN ******S*
Jun 8 01:26:43 194.100.87.134:4290 -> xxx.yyy.255.252:1433 SYN ******S*
Jun 8 01:26:43 194.100.87.134:4292 -> xxx.yyy.255.254:1433 SYN ******S*
Jun 8 01:26:43 194.100.87.134:4291 -> xxx.yyy.255.253:1433 SYN ******S*
Jun 8 01:26:43 194.100.87.134:4289 -> xxx.yyy.255.251:1433 SYN ******S*
71586
Jun 8 07:41:02 195.101.102.45:1378 -> xxx.yyy.1.1:1433 SYN ******S*
Jun 8 07:41:02 195.101.102.45:1379 -> xxx.yyy.1.2:1433 SYN ******S*
Jun 8 07:40:59 195.101.102.45:1380 -> xxx.yyy.1.3:1433 SYN ******S*
Jun 8 07:40:59 195.101.102.45:1381 -> xxx.yyy.1.4:1433 SYN ******S*
Jun 8 07:41:02 195.101.102.45:1382 -> xxx.yyy.1.5:1433 SYN ******S*
Jun 8 07:41:02 195.101.102.45:1383 -> xxx.yyy.1.6:1433 SYN ******S*
Jun 8 07:41:02 195.101.102.45:1384 -> xxx.yyy.1.7:1433 SYN ******S*
Jun 8 07:41:02 195.101.102.45:1385 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Jun 8 07:52:42 195.101.102.45:1252 -> xxx.yyy.255.251:1433 SYN ******S*
Jun 8 07:52:42 195.101.102.45:1249 -> xxx.yyy.255.248:1433 SYN ******S*
Jun 8 07:52:42 195.101.102.45:1253 -> xxx.yyy.255.252:1433 SYN ******S*
Jun 8 07:52:42 195.101.102.45:1250 -> xxx.yyy.255.249:1433 SYN ******S*
Jun 8 07:52:42 195.101.102.45:1246 -> xxx.yyy.255.246:1433 SYN ******S*
Jun 8 07:52:42 195.101.102.45:1254 -> xxx.yyy.255.253:1433 SYN ******S*
Jun 8 07:52:42 195.101.102.45:1251 -> xxx.yyy.255.250:1433 SYN ******S*
Jun 8 07:52:42 195.101.102.45:1248 -> xxx.yyy.255.247:1433 SYN ******S*
71408
Jun 8 19:54:06 216.62.101.136:4829 -> xxx.yyy.1.1:1433 SYN ******S*
Jun 8 19:54:06 216.62.101.136:4830 -> xxx.yyy.1.2:1433 SYN ******S*
Jun 8 19:54:09 216.62.101.136:4831 -> xxx.yyy.1.3:1433 SYN ******S*
Jun 8 19:54:09 216.62.101.136:4832 -> xxx.yyy.1.4:1433 SYN ******S*
Jun 8 19:54:09 216.62.101.136:4833 -> xxx.yyy.1.5:1433 SYN ******S*
Jun 8 19:54:09 216.62.101.136:4834 -> xxx.yyy.1.6:1433 SYN ******S*
Jun 8 19:54:09 216.62.101.136:4835 -> xxx.yyy.1.7:1433 SYN ******S*
Jun 8 19:54:09 216.62.101.136:4836 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Jun 8 20:05:47 216.62.101.136:3324 -> xxx.yyy.255.253:1433 SYN ******S*
Jun 8 20:05:47 216.62.101.136:3321 -> xxx.yyy.255.250:1433 SYN ******S*
Jun 8 20:05:47 216.62.101.136:3318 -> xxx.yyy.255.247:1433 SYN ******S*
Jun 8 20:05:47 216.62.101.136:3323 -> xxx.yyy.255.252:1433 SYN ******S*
Jun 8 20:05:47 216.62.101.136:3320 -> xxx.yyy.255.249:1433 SYN ******S*
Jun 8 20:05:47 216.62.101.136:3325 -> xxx.yyy.255.254:1433 SYN ******S*
Jun 8 20:05:47 216.62.101.136:3322 -> xxx.yyy.255.251:1433 SYN ******S*
Jun 8 20:05:47 216.62.101.136:3319 -> xxx.yyy.255.248:1433 SYN ******S*
70927
Jun 8 03:40:18 210.244.26.6:65273 -> xxx.yyy.1.2:25 SYN ******S*
Jun 8 03:40:18 210.244.26.6:65041 -> xxx.yyy.1.3:25 SYN ******S*
Jun 8 03:40:18 210.244.26.6:64812 -> xxx.yyy.1.4:25 SYN ******S*
Jun 8 03:40:18 210.244.26.6:64565 -> xxx.yyy.1.5:25 SYN ******S*
Jun 8 03:40:18 210.244.26.6:64778 -> xxx.yyy.1.6:25 SYN ******S*
Jun 8 03:40:18 210.244.26.6:65062 -> xxx.yyy.1.7:25 SYN ******S*
Jun 8 03:40:18 210.244.26.6:65165 -> xxx.yyy.1.8:25 SYN ******S*
Jun 8 03:40:18 210.244.26.6:64680 -> xxx.yyy.1.9:25 SYN ******S*
[...]
Jun 8 05:19:56 210.244.26.6:64708 -> xxx.yyy.255.245:25 SYN ******S*
Jun 8 05:19:56 210.244.26.6:64713 -> xxx.yyy.255.247:25 SYN ******S*
Jun 8 05:19:56 210.244.26.6:64544 -> xxx.yyy.255.248:25 SYN ******S*
Jun 8 05:19:57 210.244.26.6:64487 -> xxx.yyy.255.250:25 SYN ******S*
Jun 8 05:19:57 210.244.26.6:64746 -> xxx.yyy.255.249:25 SYN ******S*
Jun 8 05:19:57 210.244.26.6:65268 -> xxx.yyy.255.251:25 SYN ******S*
Jun 8 05:19:57 210.244.26.6:64498 -> xxx.yyy.255.252:25 SYN ******S*
Jun 8 05:19:58 210.244.26.6:64742 -> xxx.yyy.255.253:25 SYN ******S*
Jun 8 05:19:58 210.244.26.6:65030 -> xxx.yyy.255.254:25 SYN ******S*
70476
Jun 8 21:23:28 61.249.4.9:3224 -> xxx.yyy.1.3:25 SYN ******S*
Jun 8 21:23:28 61.249.4.9:3225 -> xxx.yyy.1.4:25 SYN ******S*
Jun 8 21:23:28 61.249.4.9:3226 -> xxx.yyy.1.5:25 SYN ******S*
Jun 8 21:23:25 61.249.4.9:3228 -> xxx.yyy.1.10:25 SYN ******S*
Jun 8 21:23:25 61.249.4.9:3229 -> xxx.yyy.1.11:25 SYN ******S*
Jun 8 21:23:25 61.249.4.9:3230 -> xxx.yyy.1.7:25 SYN ******S*
Jun 8 21:23:25 61.249.4.9:3231 -> xxx.yyy.1.8:25 SYN ******S*
Jun 8 21:23:25 61.249.4.9:3232 -> xxx.yyy.1.9:25 SYN ******S*
[...]
Jun 8 21:32:38 61.249.4.9:2003 -> xxx.yyy.255.176:25 SYN ******S*
Jun 8 21:32:38 61.249.4.9:2024 -> xxx.yyy.255.194:25 SYN ******S*
Jun 8 21:32:38 61.249.4.9:2013 -> xxx.yyy.255.181:25 SYN ******S*
Jun 8 21:32:38 61.249.4.9:2030 -> xxx.yyy.255.201:25 SYN ******S*
Jun 8 21:32:38 61.249.4.9:2042 -> xxx.yyy.255.218:25 SYN ******S*
Jun 8 21:32:38 61.249.4.9:2058 -> xxx.yyy.255.226:25 SYN ******S*
Jun 8 21:32:38 61.249.4.9:2070 -> xxx.yyy.255.246:25 SYN ******S*
Jun 8 21:32:39 61.249.4.9:2086 -> xxx.yyy.255.238:25 SYN ******S*
69807
Jun 8 09:21:44 66.192.203.135:4987 -> xxx.yyy.1.1:1433 SYN ******S*
Jun 8 09:21:44 66.192.203.135:4988 -> xxx.yyy.1.2:1433 SYN ******S*
Jun 8 09:21:44 66.192.203.135:4989 -> xxx.yyy.1.3:1433 SYN ******S*
Jun 8 09:21:41 66.192.203.135:4990 -> xxx.yyy.1.4:1433 SYN ******S*
Jun 8 09:21:41 66.192.203.135:4991 -> xxx.yyy.1.5:1433 SYN ******S*
Jun 8 09:21:44 66.192.203.135:4992 -> xxx.yyy.1.6:1433 SYN ******S*
Jun 8 09:21:44 66.192.203.135:4993 -> xxx.yyy.1.7:1433 SYN ******S*
Jun 8 09:21:44 66.192.203.135:4994 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Jun 8 09:33:23 66.192.203.135:3392 -> xxx.yyy.255.248:1433 SYN ******S*
Jun 8 09:33:23 66.192.203.135:3396 -> xxx.yyy.255.252:1433 SYN ******S*
Jun 8 09:33:23 66.192.203.135:3394 -> xxx.yyy.255.250:1433 SYN ******S*
Jun 8 09:33:23 66.192.203.135:3390 -> xxx.yyy.255.246:1433 SYN ******S*
Jun 8 09:33:23 66.192.203.135:3393 -> xxx.yyy.255.249:1433 SYN ******S*
Jun 8 09:33:23 66.192.203.135:3395 -> xxx.yyy.255.251:1433 SYN ******S*
Jun 8 09:33:23 66.192.203.135:3391 -> xxx.yyy.255.247:1433 SYN ******S*
Jun 8 09:33:23 66.192.203.135:3397 -> xxx.yyy.255.253:1433 SYN ******S*
69314
Jun 8 10:44:08 61.219.76.162:2201 -> xxx.yyy.1.1:8000 SYN ******S*
Jun 8 10:44:08 61.219.76.162:2202 -> xxx.yyy.1.2:8000 SYN ******S*
Jun 8 10:44:09 61.219.76.162:2203 -> xxx.yyy.1.3:8000 SYN ******S*
Jun 8 10:44:09 61.219.76.162:2204 -> xxx.yyy.1.4:8000 SYN ******S*
Jun 8 10:44:09 61.219.76.162:2205 -> xxx.yyy.1.5:8000 SYN ******S*
Jun 8 10:44:09 61.219.76.162:2206 -> xxx.yyy.1.6:8000 SYN ******S*
Jun 8 10:44:09 61.219.76.162:2207 -> xxx.yyy.1.7:8000 SYN ******S*
Jun 8 10:44:07 61.219.76.162:2208 -> xxx.yyy.1.8:8000 SYN ******S*
[...]
Jun 8 10:55:52 61.219.76.162:1372 -> xxx.yyy.255.228:8000 SYN ******S*
Jun 8 10:55:52 61.219.76.162:1369 -> xxx.yyy.255.225:8000 SYN ******S*
Jun 8 10:55:52 61.219.76.162:1376 -> xxx.yyy.255.232:8000 SYN ******S*
Jun 8 10:55:52 61.219.76.162:1373 -> xxx.yyy.255.229:8000 SYN ******S*
Jun 8 10:55:52 61.219.76.162:1370 -> xxx.yyy.255.226:8000 SYN ******S*
Jun 8 10:55:52 61.219.76.162:1374 -> xxx.yyy.255.230:8000 SYN ******S*
Jun 8 10:55:52 61.219.76.162:1371 -> xxx.yyy.255.227:8000 SYN ******S*
Jun 8 10:55:53 61.219.76.162:1397 -> xxx.yyy.255.253:8000 SYN ******S*
Jun 8 10:55:53 61.219.76.162:1398 -> xxx.yyy.255.254:8000 SYN ******S*
69097
Jun 8 19:37:24 134.124.1.61:1544 -> xxx.yyy.1.1:445 SYN ******S*
Jun 8 19:37:24 134.124.1.61:1545 -> xxx.yyy.1.2:445 SYN ******S*
Jun 8 19:37:24 134.124.1.61:1547 -> xxx.yyy.1.3:445 SYN ******S*
Jun 8 19:37:22 134.124.1.61:1548 -> xxx.yyy.1.4:445 SYN ******S*
Jun 8 19:37:25 134.124.1.61:1549 -> xxx.yyy.1.5:445 SYN ******S*
Jun 8 19:37:25 134.124.1.61:1550 -> xxx.yyy.1.6:445 SYN ******S*
Jun 8 19:37:25 134.124.1.61:1558 -> xxx.yyy.1.7:445 SYN ******S*
Jun 8 19:37:25 134.124.1.61:1572 -> xxx.yyy.1.8:445 SYN ******S*
[...]
Jun 8 22:32:51 134.124.1.61:4649 -> xxx.yyy.255.243:445 SYN ******S*
Jun 8 22:32:51 134.124.1.61:4656 -> xxx.yyy.255.244:445 SYN ******S*
Jun 8 22:32:51 134.124.1.61:4661 -> xxx.yyy.255.245:445 SYN ******S*
Jun 8 22:32:51 134.124.1.61:4664 -> xxx.yyy.255.246:445 SYN ******S*
Jun 8 22:32:52 134.124.1.61:4665 -> xxx.yyy.255.247:445 SYN ******S*
Jun 8 22:32:52 134.124.1.61:4671 -> xxx.yyy.255.249:445 SYN ******S*
Jun 8 22:32:52 134.124.1.61:4679 -> xxx.yyy.255.250:445 SYN ******S*
Jun 8 22:32:52 134.124.1.61:4680 -> xxx.yyy.255.251:445 SYN ******S*
Jun 8 22:32:52 134.124.1.61:4684 -> xxx.yyy.255.252:445 SYN ******S*
68730
Jun 8 09:09:34 24.69.106.127:4939 -> xxx.yyy.1.1:3410 SYN ******S*
Jun 8 09:09:34 24.69.106.127:4950 -> xxx.yyy.1.2:3410 SYN ******S*
Jun 8 09:09:33 24.69.106.127:4956 -> xxx.yyy.1.3:3410 SYN ******S*
Jun 8 09:09:36 24.69.106.127:4961 -> xxx.yyy.1.4:3410 SYN ******S*
Jun 8 09:09:36 24.69.106.127:4964 -> xxx.yyy.1.5:3410 SYN ******S*
Jun 8 09:09:36 24.69.106.127:4972 -> xxx.yyy.1.6:3410 SYN ******S*
Jun 8 09:09:36 24.69.106.127:4979 -> xxx.yyy.1.7:3410 SYN ******S*
Jun 8 09:09:36 24.69.106.127:4991 -> xxx.yyy.1.8:3410 SYN ******S*
[...]
Jun 8 09:21:21 24.69.106.127:1463 -> xxx.yyy.255.244:3410 SYN ******S*
Jun 8 09:21:21 24.69.106.127:1465 -> xxx.yyy.255.245:3410 SYN ******S*
Jun 8 09:21:21 24.69.106.127:1469 -> xxx.yyy.255.246:3410 SYN ******S*
Jun 8 09:21:21 24.69.106.127:1477 -> xxx.yyy.255.249:3410 SYN ******S*
Jun 8 09:21:21 24.69.106.127:1481 -> xxx.yyy.255.250:3410 SYN ******S*
Jun 8 09:21:21 24.69.106.127:1483 -> xxx.yyy.255.251:3410 SYN ******S*
Jun 8 09:21:21 24.69.106.127:1487 -> xxx.yyy.255.252:3410 SYN ******S*
Jun 8 09:21:21 24.69.106.127:1489 -> xxx.yyy.255.253:3410 SYN ******S*
Jun 8 09:21:21 24.69.106.127:1493 -> xxx.yyy.255.254:3410 SYN ******S*
65330
Jun 8 19:35:07 213.15.85.113:1586 -> xxx.yyy.1.1:1433 SYN ******S*
Jun 8 19:35:07 213.15.85.113:1587 -> xxx.yyy.1.2:1433 SYN ******S*
Jun 8 19:35:07 213.15.85.113:1588 -> xxx.yyy.1.3:1433 SYN ******S*
Jun 8 19:35:07 213.15.85.113:1589 -> xxx.yyy.1.4:1433 SYN ******S*
Jun 8 19:35:07 213.15.85.113:1590 -> xxx.yyy.1.5:1433 SYN ******S*
Jun 8 19:35:07 213.15.85.113:1591 -> xxx.yyy.1.6:1433 SYN ******S*
Jun 8 19:35:07 213.15.85.113:1592 -> xxx.yyy.1.7:1433 SYN ******S*
Jun 8 19:35:07 213.15.85.113:1593 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Jun 8 19:46:02 213.15.85.113:4231 -> xxx.yyy.255.241:1433 SYN ******S*
Jun 8 19:46:02 213.15.85.113:4237 -> xxx.yyy.255.247:1433 SYN ******S*
Jun 8 19:46:02 213.15.85.113:4238 -> xxx.yyy.255.248:1433 SYN ******S*
Jun 8 19:46:02 213.15.85.113:4235 -> xxx.yyy.255.245:1433 SYN ******S*
Jun 8 19:46:02 213.15.85.113:4242 -> xxx.yyy.255.252:1433 SYN ******S*
Jun 8 19:46:02 213.15.85.113:4243 -> xxx.yyy.255.253:1433 SYN ******S*
Jun 8 19:46:02 213.15.85.113:4240 -> xxx.yyy.255.250:1433 SYN ******S*
Jun 8 19:46:02 213.15.85.113:4244 -> xxx.yyy.255.254:1433 SYN ******S*
Jun 8 19:46:02 213.15.85.113:4241 -> xxx.yyy.255.251:1433 SYN ******S*
57038
Jun 8 15:43:35 220.201.154.12:2048 -> xxx.yyy.1.1:80 SYN ******S*
Jun 8 15:43:35 220.201.154.12:2049 -> xxx.yyy.1.2:80 SYN ******S*
Jun 8 15:43:36 220.201.154.12:2051 -> xxx.yyy.1.4:80 SYN ******S*
Jun 8 15:43:33 220.201.154.12:2052 -> xxx.yyy.1.5:80 SYN ******S*
Jun 8 15:43:36 220.201.154.12:2054 -> xxx.yyy.1.7:80 SYN ******S*
Jun 8 15:43:33 220.201.154.12:2056 -> xxx.yyy.1.9:80 SYN ******S*
Jun 8 15:43:33 220.201.154.12:2059 -> xxx.yyy.1.12:80 SYN ******S*
Jun 8 15:43:33 220.201.154.12:2061 -> xxx.yyy.1.14:80 SYN ******S*
[...]
Jun 8 15:48:17 220.201.154.12:3955 -> xxx.yyy.255.251:80 SYN ******S*
Jun 8 15:48:17 220.201.154.12:3855 -> xxx.yyy.255.208:80 SYN ******S*
Jun 8 15:48:17 220.201.154.12:3828 -> xxx.yyy.255.195:80 SYN ******S*
Jun 8 15:48:17 220.201.154.12:3812 -> xxx.yyy.255.187:80 SYN ******S*
Jun 8 15:48:17 220.201.154.12:3852 -> xxx.yyy.255.205:80 SYN ******S*
Jun 8 15:48:17 220.201.154.12:3952 -> xxx.yyy.255.248:80 SYN ******S*
Jun 8 15:48:17 220.201.154.12:3916 -> xxx.yyy.255.237:80 SYN ******S*
Jun 8 15:48:17 220.201.154.12:3892 -> xxx.yyy.255.223:80 SYN ******S*
54862
Jun 8 01:23:19 213.197.20.19:4313 -> xxx.yyy.1.1:5554 SYN ******S*
Jun 8 01:23:18 213.197.20.19:4319 -> xxx.yyy.1.6:5554 SYN ******S*
Jun 8 01:23:18 213.197.20.19:4320 -> xxx.yyy.1.7:5554 SYN ******S*
Jun 8 01:23:18 213.197.20.19:4321 -> xxx.yyy.1.8:5554 SYN ******S*
Jun 8 01:23:18 213.197.20.19:4322 -> xxx.yyy.1.9:5554 SYN ******S*
Jun 8 01:23:18 213.197.20.19:4323 -> xxx.yyy.1.10:5554 SYN ******S*
Jun 8 01:23:18 213.197.20.19:4324 -> xxx.yyy.1.11:5554 SYN ******S*
Jun 8 01:23:18 213.197.20.19:4326 -> xxx.yyy.1.12:5554 SYN ******S*
[...]
Jun 8 01:40:17 213.197.20.19:4045 -> xxx.yyy.255.243:5554 SYN ******S*
Jun 8 01:40:17 213.197.20.19:4046 -> xxx.yyy.255.244:5554 SYN ******S*
Jun 8 01:40:17 213.197.20.19:4050 -> xxx.yyy.255.248:5554 SYN ******S*
Jun 8 01:40:17 213.197.20.19:4051 -> xxx.yyy.255.249:5554 SYN ******S*
Jun 8 01:40:17 213.197.20.19:4052 -> xxx.yyy.255.250:5554 SYN ******S*
Jun 8 01:40:17 213.197.20.19:4053 -> xxx.yyy.255.251:5554 SYN ******S*
Jun 8 01:40:17 213.197.20.19:4054 -> xxx.yyy.255.252:5554 SYN ******S*
Jun 8 01:40:17 213.197.20.19:4055 -> xxx.yyy.255.253:5554 SYN ******S*
Jun 8 01:40:17 213.197.20.19:4056 -> xxx.yyy.255.254:5554 SYN ******S*
45690
Jun 8 01:56:10 211.184.65.253:45327 -> xxx.yyy.1.2:4899 SYN ******S*
Jun 8 01:56:09 211.184.65.253:45329 -> xxx.yyy.1.3:4899 SYN ******S*
Jun 8 01:56:10 211.184.65.253:45325 -> xxx.yyy.1.1:4899 SYN ******S*
Jun 8 01:56:09 211.184.65.253:45331 -> xxx.yyy.1.4:4899 SYN ******S*
Jun 8 01:56:09 211.184.65.253:45332 -> xxx.yyy.1.5:4899 SYN ******S*
Jun 8 01:56:09 211.184.65.253:45336 -> xxx.yyy.1.7:4899 SYN ******S*
Jun 8 01:56:09 211.184.65.253:45334 -> xxx.yyy.1.6:4899 SYN ******S*
Jun 8 01:56:09 211.184.65.253:45343 -> xxx.yyy.1.10:4899 SYN ******S*
[...]
Jun 8 01:59:45 211.184.65.253:11230 -> xxx.yyy.255.250:4899 SYN ******S*
Jun 8 01:59:45 211.184.65.253:11226 -> xxx.yyy.255.246:4899 SYN ******S*
Jun 8 01:59:45 211.184.65.253:11227 -> xxx.yyy.255.247:4899 SYN ******S*
Jun 8 01:59:45 211.184.65.253:11231 -> xxx.yyy.255.251:4899 SYN ******S*
Jun 8 01:59:45 211.184.65.253:11228 -> xxx.yyy.255.248:4899 SYN ******S*
Jun 8 01:59:45 211.184.65.253:11232 -> xxx.yyy.255.252:4899 SYN ******S*
Jun 8 01:59:45 211.184.65.253:11229 -> xxx.yyy.255.249:4899 SYN ******S*
Jun 8 01:59:45 211.184.65.253:11233 -> xxx.yyy.255.253:4899 SYN ******S*
Jun 8 01:59:45 211.184.65.253:11234 -> xxx.yyy.255.254:4899 SYN ******S*
43992
Jun 8 23:02:42 207.172.133.31:2387 -> xxx.yyy.1.1:4899 SYN ******S*
Jun 8 23:02:42 207.172.133.31:2388 -> xxx.yyy.1.2:4899 SYN ******S*
Jun 8 23:02:41 207.172.133.31:2389 -> xxx.yyy.1.3:4899 SYN ******S*
Jun 8 23:02:41 207.172.133.31:2390 -> xxx.yyy.1.4:4899 SYN ******S*
Jun 8 23:02:41 207.172.133.31:2391 -> xxx.yyy.1.5:4899 SYN ******S*
Jun 8 23:02:41 207.172.133.31:2392 -> xxx.yyy.1.6:4899 SYN ******S*
Jun 8 23:02:41 207.172.133.31:2393 -> xxx.yyy.1.7:4899 SYN ******S*
Jun 8 23:02:41 207.172.133.31:2394 -> xxx.yyy.1.8:4899 SYN ******S*
[...]
Jun 8 23:08:20 207.172.133.31:4287 -> xxx.yyy.255.247:4899 SYN ******S*
Jun 8 23:08:20 207.172.133.31:4290 -> xxx.yyy.255.248:4899 SYN ******S*
Jun 8 23:08:20 207.172.133.31:4295 -> xxx.yyy.255.250:4899 SYN ******S*
Jun 8 23:08:20 207.172.133.31:4294 -> xxx.yyy.255.249:4899 SYN ******S*
Jun 8 23:08:20 207.172.133.31:4300 -> xxx.yyy.255.251:4899 SYN ******S*
Jun 8 23:08:20 207.172.133.31:4301 -> xxx.yyy.255.252:4899 SYN ******S*
Jun 8 23:08:20 207.172.133.31:4303 -> xxx.yyy.255.253:4899 SYN ******S*
Jun 8 23:08:20 207.172.133.31:4305 -> xxx.yyy.255.254:4899 SYN ******S*
43901
Jun 8 11:05:10 203.101.40.66:3537 -> xxx.yyy.1.1:4899 SYN ******S*
Jun 8 11:05:10 203.101.40.66:3538 -> xxx.yyy.1.2:4899 SYN ******S*
Jun 8 11:05:08 203.101.40.66:3539 -> xxx.yyy.1.3:4899 SYN ******S*
Jun 8 11:05:08 203.101.40.66:3540 -> xxx.yyy.1.4:4899 SYN ******S*
Jun 8 11:05:08 203.101.40.66:3541 -> xxx.yyy.1.5:4899 SYN ******S*
Jun 8 11:05:08 203.101.40.66:3542 -> xxx.yyy.1.6:4899 SYN ******S*
Jun 8 11:05:08 203.101.40.66:3544 -> xxx.yyy.1.8:4899 SYN ******S*
Jun 8 11:05:08 203.101.40.66:3545 -> xxx.yyy.1.9:4899 SYN ******S*
[...]
Jun 8 11:11:08 203.101.40.66:4226 -> xxx.yyy.255.246:4899 SYN ******S*
Jun 8 11:11:08 203.101.40.66:4227 -> xxx.yyy.255.247:4899 SYN ******S*
Jun 8 11:11:08 203.101.40.66:4228 -> xxx.yyy.255.248:4899 SYN ******S*
Jun 8 11:11:08 203.101.40.66:4229 -> xxx.yyy.255.249:4899 SYN ******S*
Jun 8 11:11:08 203.101.40.66:4230 -> xxx.yyy.255.250:4899 SYN ******S*
Jun 8 11:11:08 203.101.40.66:4231 -> xxx.yyy.255.251:4899 SYN ******S*
Jun 8 11:11:08 203.101.40.66:4232 -> xxx.yyy.255.252:4899 SYN ******S*
Jun 8 11:11:08 203.101.40.66:4233 -> xxx.yyy.255.253:4899 SYN ******S*
Jun 8 11:11:08 203.101.40.66:4234 -> xxx.yyy.255.254:4899 SYN ******S*
43291
Jun 8 00:59:25 195.146.60.24:4822 -> xxx.yyy.1.1:8000 SYN ******S*
Jun 8 00:59:25 195.146.60.24:4823 -> xxx.yyy.1.2:8000 SYN ******S*
Jun 8 00:59:26 195.146.60.24:4824 -> xxx.yyy.1.3:8000 SYN ******S*
Jun 8 00:59:26 195.146.60.24:4825 -> xxx.yyy.1.4:8000 SYN ******S*
Jun 8 00:59:26 195.146.60.24:4826 -> xxx.yyy.1.5:8000 SYN ******S*
Jun 8 00:59:26 195.146.60.24:4827 -> xxx.yyy.1.6:8000 SYN ******S*
Jun 8 00:59:26 195.146.60.24:4828 -> xxx.yyy.1.7:8000 SYN ******S*
Jun 8 00:59:26 195.146.60.24:4829 -> xxx.yyy.1.8:8000 SYN ******S*
[...]
Jun 8 01:04:33 195.146.60.24:3172 -> xxx.yyy.255.246:8000 SYN ******S*
Jun 8 01:04:33 195.146.60.24:3173 -> xxx.yyy.255.247:8000 SYN ******S*
Jun 8 01:04:33 195.146.60.24:3174 -> xxx.yyy.255.248:8000 SYN ******S*
Jun 8 01:04:33 195.146.60.24:3175 -> xxx.yyy.255.249:8000 SYN ******S*
Jun 8 01:04:33 195.146.60.24:3176 -> xxx.yyy.255.250:8000 SYN ******S*
Jun 8 01:04:33 195.146.60.24:3177 -> xxx.yyy.255.251:8000 SYN ******S*
Jun 8 01:04:33 195.146.60.24:3178 -> xxx.yyy.255.252:8000 SYN ******S*
Jun 8 01:04:33 195.146.60.24:3179 -> xxx.yyy.255.253:8000 SYN ******S*
Jun 8 01:04:33 195.146.60.24:3180 -> xxx.yyy.255.254:8000 SYN ******S*
43042
Jun 8 12:55:46 68.222.105.40:3969 -> xxx.yyy.79.1:17300 SYN ******S*
Jun 8 12:55:46 68.222.105.40:3970 -> xxx.yyy.79.2:17300 SYN ******S*
Jun 8 12:55:46 68.222.105.40:3971 -> xxx.yyy.79.3:17300 SYN ******S*
Jun 8 12:55:46 68.222.105.40:3972 -> xxx.yyy.79.4:17300 SYN ******S*
Jun 8 12:55:46 68.222.105.40:3973 -> xxx.yyy.79.5:17300 SYN ******S*
Jun 8 12:55:46 68.222.105.40:3974 -> xxx.yyy.79.6:17300 SYN ******S*
Jun 8 12:55:46 68.222.105.40:3975 -> xxx.yyy.79.7:17300 SYN ******S*
Jun 8 12:55:46 68.222.105.40:3976 -> xxx.yyy.79.8:17300 SYN ******S*
[...]
Jun 8 14:11:10 68.222.105.40:2784 -> xxx.yyy.254.248:17300 SYN ******S*
Jun 8 14:11:10 68.222.105.40:2785 -> xxx.yyy.254.249:17300 SYN ******S*
Jun 8 14:11:10 68.222.105.40:2786 -> xxx.yyy.254.250:17300 SYN ******S*
Jun 8 14:11:10 68.222.105.40:2787 -> xxx.yyy.254.251:17300 SYN ******S*
Jun 8 14:11:10 68.222.105.40:2788 -> xxx.yyy.254.252:17300 SYN ******S*
Jun 8 14:11:10 68.222.105.40:2789 -> xxx.yyy.254.253:17300 SYN ******S*
Jun 8 14:11:10 68.222.105.40:2790 -> xxx.yyy.254.254:17300 SYN ******S*
Jun 8 14:11:10 68.222.105.40:2791 -> xxx.yyy.254.255:17300 SYN ******S*
37521
Jun 8 19:33:42 65.112.56.48:3001 -> xxx.yyy.1.105:4000 SYN ******S*
Jun 8 19:33:42 65.112.56.48:3001 -> xxx.yyy.1.236:4000 SYN ******S*
Jun 8 19:33:42 65.112.56.48:3001 -> xxx.yyy.10.28:4000 SYN ******S*
Jun 8 19:33:42 65.112.56.48:3001 -> xxx.yyy.10.159:4000 SYN ******S*
Jun 8 19:33:42 65.112.56.48:3001 -> xxx.yyy.11.165:4000 SYN ******S*
Jun 8 19:33:42 65.112.56.48:3001 -> xxx.yyy.11.34:4000 SYN ******S*
Jun 8 19:33:42 65.112.56.48:3001 -> xxx.yyy.12.40:4000 SYN ******S*
Jun 8 19:33:42 65.112.56.48:3001 -> xxx.yyy.12.171:4000 SYN ******S*
[...]
Jun 8 21:56:44 65.112.56.48:3001 -> xxx.yyy.243.31:4000 SYN ******S*
Jun 8 21:56:44 65.112.56.48:3001 -> xxx.yyy.242.156:4000 SYN ******S*
Jun 8 21:56:44 65.112.56.48:3001 -> xxx.yyy.244.37:4000 SYN ******S*
Jun 8 21:56:44 65.112.56.48:3001 -> xxx.yyy.243.162:4000 SYN ******S*
Jun 8 21:56:44 65.112.56.48:3001 -> xxx.yyy.244.168:4000 SYN ******S*
Jun 8 21:56:44 65.112.56.48:3001 -> xxx.yyy.245.43:4000 SYN ******S*
Jun 8 21:56:44 65.112.56.48:3001 -> xxx.yyy.245.174:4000 SYN ******S*
Jun 8 21:56:44 65.112.56.48:3001 -> xxx.yyy.255.234:4000 SYN ******S*
35229
Jun 8 19:45:38 66.130.245.163:22002 -> xxx.yyy.1.0:3127 SYN ******S*
Jun 8 19:45:38 66.130.245.163:22002 -> xxx.yyy.1.0:1080 SYN ******S*
Jun 8 19:45:38 66.130.245.163:22002 -> xxx.yyy.1.0:10080 SYN ******S*
Jun 8 19:45:38 66.130.245.163:22002 -> xxx.yyy.1.0:3128 SYN ******S*
Jun 8 19:45:39 66.130.245.163:22002 -> xxx.yyy.1.1:3127 SYN ******S*
Jun 8 19:45:39 66.130.245.163:22002 -> xxx.yyy.1.1:1080 SYN ******S*
Jun 8 19:45:39 66.130.245.163:22002 -> xxx.yyy.1.1:10080 SYN ******S*
Jun 8 19:45:39 66.130.245.163:22002 -> xxx.yyy.1.1:3128 SYN ******S*
[...]
Jun 8 22:01:35 66.130.245.163:22002 -> xxx.yyy.79.126:10080 SYN ******S*
Jun 8 22:01:35 66.130.245.163:22002 -> xxx.yyy.79.126:3128 SYN ******S*
Jun 8 22:01:35 66.130.245.163:22002 -> xxx.yyy.79.127:3127 SYN ******S*
Jun 8 22:01:35 66.130.245.163:22002 -> xxx.yyy.79.127:1080 SYN ******S*
Jun 8 22:01:35 66.130.245.163:22002 -> xxx.yyy.79.127:10080 SYN ******S*
Jun 8 22:01:35 66.130.245.163:22002 -> xxx.yyy.79.127:3128 SYN ******S*
Jun 8 22:01:36 66.130.245.163:22002 -> xxx.yyy.79.128:3127 SYN ******S*
Jun 8 22:01:36 66.130.245.163:22002 -> xxx.yyy.79.128:1080 SYN ******S*
Jun 8 22:01:36 66.130.245.163:22002 -> xxx.yyy.79.128:10080 SYN ******S*
27742
Jun 8 00:00:06 134.124.24.4:2183 -> xxx.yyy.198.25:445 SYN ******S*
Jun 8 00:00:03 134.124.24.4:2123 -> xxx.yyy.198.8:445 SYN ******S*
Jun 8 00:00:03 134.124.24.4:2124 -> xxx.yyy.198.9:445 SYN ******S*
Jun 8 00:00:06 134.124.24.4:2186 -> xxx.yyy.198.26:445 SYN ******S*
Jun 8 00:00:03 134.124.24.4:2188 -> xxx.yyy.198.27:445 SYN ******S*
Jun 8 00:00:03 134.124.24.4:2140 -> xxx.yyy.198.10:445 SYN ******S*
Jun 8 00:00:03 134.124.24.4:2194 -> xxx.yyy.198.29:445 SYN ******S*
Jun 8 00:00:03 134.124.24.4:2196 -> xxx.yyy.198.28:445 SYN ******S*
[...]
Jun 8 00:28:48 134.124.24.4:2479 -> xxx.yyy.255.246:445 SYN ******S*
Jun 8 00:28:48 134.124.24.4:2483 -> xxx.yyy.255.247:445 SYN ******S*
Jun 8 00:28:48 134.124.24.4:2489 -> xxx.yyy.255.248:445 SYN ******S*
Jun 8 00:28:48 134.124.24.4:2504 -> xxx.yyy.255.249:445 SYN ******S*
Jun 8 00:28:48 134.124.24.4:2506 -> xxx.yyy.255.250:445 SYN ******S*
Jun 8 00:28:48 134.124.24.4:2508 -> xxx.yyy.255.251:445 SYN ******S*
Jun 8 00:28:48 134.124.24.4:2515 -> xxx.yyy.255.252:445 SYN ******S*
Jun 8 00:28:48 134.124.24.4:2518 -> xxx.yyy.255.253:445 SYN ******S*
Jun 8 00:28:48 134.124.24.4:2524 -> xxx.yyy.255.254:445 SYN ******S*
22490
[...]
22270
Jun 8 03:17:41 212.182.135.153:3556 -> xxx.yyy.240.2:445 SYN ******S*
Jun 8 03:17:41 212.182.135.153:3557 -> xxx.yyy.240.3:445 SYN ******S*
Jun 8 03:17:41 212.182.135.153:3558 -> xxx.yyy.240.4:445 SYN ******S*
Jun 8 03:17:41 212.182.135.153:3559 -> xxx.yyy.240.5:445 SYN ******S*
Jun 8 03:17:41 212.182.135.153:3560 -> xxx.yyy.240.6:445 SYN ******S*
Jun 8 03:17:41 212.182.135.153:3561 -> xxx.yyy.240.7:445 SYN ******S*
Jun 8 03:17:41 212.182.135.153:3562 -> xxx.yyy.240.8:445 SYN ******S*
Jun 8 03:17:41 212.182.135.153:3563 -> xxx.yyy.240.9:445 SYN ******S*
[...]
Jun 8 04:16:34 212.182.135.153:2011 -> xxx.yyy.255.248:445 SYN ******S*
Jun 8 04:16:34 212.182.135.153:2015 -> xxx.yyy.255.252:445 SYN ******S*
Jun 8 04:16:34 212.182.135.153:2012 -> xxx.yyy.255.249:445 SYN ******S*
Jun 8 04:16:34 212.182.135.153:2008 -> xxx.yyy.255.245:445 SYN ******S*
Jun 8 04:16:34 212.182.135.153:2009 -> xxx.yyy.255.246:445 SYN ******S*
Jun 8 04:16:34 212.182.135.153:2017 -> xxx.yyy.255.254:445 SYN ******S*
Jun 8 04:16:34 212.182.135.153:2014 -> xxx.yyy.255.251:445 SYN ******S*
Jun 8 04:16:34 212.182.135.153:2010 -> xxx.yyy.255.247:445 SYN ******S*
10632
Jun 8 18:14:56 207.182.236.80:3001 -> xxx.yyy.29.11:1433 SYN ******S*
Jun 8 18:14:56 207.182.236.80:3001 -> xxx.yyy.29.142:1433 SYN ******S*
Jun 8 18:14:56 207.182.236.80:3001 -> xxx.yyy.32.29:1433 SYN ******S*
Jun 8 18:14:56 207.182.236.80:3001 -> xxx.yyy.75.25:1433 SYN ******S*
Jun 8 18:14:56 207.182.236.80:3001 -> xxx.yyy.76.31:1433 SYN ******S*
Jun 8 18:14:56 207.182.236.80:3001 -> xxx.yyy.76.162:1433 SYN ******S*
Jun 8 18:14:56 207.182.236.80:3001 -> xxx.yyy.77.37:1433 SYN ******S*
Jun 8 18:14:56 207.182.236.80:3001 -> xxx.yyy.77.168:1433 SYN ******S*
[...]
Jun 8 18:48:46 207.182.236.80:3001 -> xxx.yyy.237.126:1433 SYN ******S*
Jun 8 18:48:46 207.182.236.80:3001 -> xxx.yyy.238.132:1433 SYN ******S*
Jun 8 18:48:46 207.182.236.80:3001 -> xxx.yyy.238.1:1433 SYN ******S*
Jun 8 18:48:46 207.182.236.80:3001 -> xxx.yyy.239.7:1433 SYN ******S*
Jun 8 18:48:46 207.182.236.80:3001 -> xxx.yyy.239.138:1433 SYN ******S*
Jun 8 18:48:46 207.182.236.80:3001 -> xxx.yyy.240.13:1433 SYN ******S*
Jun 8 18:48:46 207.182.236.80:3001 -> xxx.yyy.240.144:1433 SYN ******S*
Jun 8 18:48:46 207.182.236.80:3001 -> xxx.yyy.241.19:1433 SYN ******S*
10509
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list