[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Sat Nov 6 16:34:11 GMT 2004
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Nov 5 05:24:14 66.207.12.72:4225 -> xxx.yyy.1.1:1433 SYN ******S*
Nov 5 05:24:14 66.207.12.72:4226 -> xxx.yyy.1.2:1433 SYN ******S*
Nov 5 05:24:11 66.207.12.72:4227 -> xxx.yyy.1.3:1433 SYN ******S*
Nov 5 05:24:11 66.207.12.72:4228 -> xxx.yyy.1.4:1433 SYN ******S*
Nov 5 05:24:14 66.207.12.72:4229 -> xxx.yyy.1.5:1433 SYN ******S*
Nov 5 05:24:14 66.207.12.72:4230 -> xxx.yyy.1.6:1433 SYN ******S*
Nov 5 05:24:14 66.207.12.72:4231 -> xxx.yyy.1.7:1433 SYN ******S*
Nov 5 05:24:14 66.207.12.72:4232 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Nov 5 05:38:11 66.207.12.72:4927 -> xxx.yyy.255.241:1433 SYN ******S*
Nov 5 05:38:12 66.207.12.72:4940 -> xxx.yyy.255.254:1433 SYN ******S*
Nov 5 05:38:12 66.207.12.72:4937 -> xxx.yyy.255.251:1433 SYN ******S*
Nov 5 05:38:12 66.207.12.72:4933 -> xxx.yyy.255.247:1433 SYN ******S*
Nov 5 05:38:12 66.207.12.72:4934 -> xxx.yyy.255.248:1433 SYN ******S*
Nov 5 05:38:12 66.207.12.72:4938 -> xxx.yyy.255.252:1433 SYN ******S*
Nov 5 05:38:12 66.207.12.72:4939 -> xxx.yyy.255.253:1433 SYN ******S*
Nov 5 05:38:12 66.207.12.72:4935 -> xxx.yyy.255.249:1433 SYN ******S*
70988
Nov 5 01:57:06 80.146.105.177:1318 -> xxx.yyy.1.1:1433 SYN ******S*
Nov 5 01:57:03 80.146.105.177:1319 -> xxx.yyy.1.2:1433 SYN ******S*
Nov 5 01:57:06 80.146.105.177:1320 -> xxx.yyy.1.3:1433 SYN ******S*
Nov 5 01:57:06 80.146.105.177:1321 -> xxx.yyy.1.4:1433 SYN ******S*
Nov 5 01:57:06 80.146.105.177:1322 -> xxx.yyy.1.5:1433 SYN ******S*
Nov 5 01:57:06 80.146.105.177:1323 -> xxx.yyy.1.6:1433 SYN ******S*
Nov 5 01:57:06 80.146.105.177:1324 -> xxx.yyy.1.7:1433 SYN ******S*
Nov 5 01:57:03 80.146.105.177:1325 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Nov 5 06:16:27 80.146.105.177:3707 -> xxx.yyy.zzz.246:1433 SYN ******S*
Nov 5 06:16:27 80.146.105.177:3708 -> xxx.yyy.zzz.247:1433 SYN ******S*
Nov 5 06:16:27 80.146.105.177:3709 -> xxx.yyy.zzz.248:1433 SYN ******S*
Nov 5 06:16:27 80.146.105.177:3710 -> xxx.yyy.zzz.249:1433 SYN ******S*
Nov 5 06:16:27 80.146.105.177:3711 -> xxx.yyy.zzz.250:1433 SYN ******S*
Nov 5 06:16:27 80.146.105.177:3712 -> xxx.yyy.zzz.251:1433 SYN ******S*
Nov 5 06:16:27 80.146.105.177:3713 -> xxx.yyy.zzz.252:1433 SYN ******S*
Nov 5 06:16:27 80.146.105.177:3714 -> xxx.yyy.zzz.253:1433 SYN ******S*
Nov 5 06:16:27 80.146.105.177:3715 -> xxx.yyy.zzz.254:1433 SYN ******S*
67309
Nov 5 00:00:04 212.182.58.98:61113 -> xxx.yyy.12.79:1433 SYN ******S*
Nov 5 00:00:07 212.182.58.98:61121 -> xxx.yyy.12.83:1433 SYN ******S*
Nov 5 00:00:07 212.182.58.98:61123 -> xxx.yyy.12.84:1433 SYN ******S*
Nov 5 00:00:07 212.182.58.98:61126 -> xxx.yyy.12.86:1433 SYN ******S*
Nov 5 00:00:08 212.182.58.98:61133 -> xxx.yyy.12.88:1433 SYN ******S*
Nov 5 00:00:08 212.182.58.98:61135 -> xxx.yyy.12.89:1433 SYN ******S*
Nov 5 00:00:08 212.182.58.98:61137 -> xxx.yyy.12.90:1433 SYN ******S*
Nov 5 00:00:08 212.182.58.98:61143 -> xxx.yyy.12.94:1433 SYN ******S*
[...]
Nov 5 02:16:58 212.182.58.98:61637 -> xxx.yyy.164.214:1433 SYN ******S*
Nov 5 02:16:59 212.182.58.98:61645 -> xxx.yyy.164.217:1433 SYN ******S*
Nov 5 02:16:59 212.182.58.98:61644 -> xxx.yyy.164.216:1433 SYN ******S*
Nov 5 02:16:59 212.182.58.98:61653 -> xxx.yyy.164.219:1433 SYN ******S*
Nov 5 02:16:59 212.182.58.98:61652 -> xxx.yyy.164.218:1433 SYN ******S*
Nov 5 02:16:59 212.182.58.98:61654 -> xxx.yyy.164.220:1433 SYN ******S*
Nov 5 02:16:59 212.182.58.98:61655 -> xxx.yyy.164.221:1433 SYN ******S*
Nov 5 02:16:59 212.182.58.98:62150 -> xxx.yyy.164.223:1433 SYN ******S*
48518
Nov 5 00:41:22 64.56.106.188:22259 -> xxx.yyy.1.2:80 SYN ******S*
Nov 5 00:41:22 64.56.106.188:22260 -> xxx.yyy.1.3:80 SYN ******S*
Nov 5 00:41:24 64.56.106.188:22261 -> xxx.yyy.1.4:80 SYN ******S*
Nov 5 00:41:24 64.56.106.188:22264 -> xxx.yyy.1.7:80 SYN ******S*
Nov 5 00:41:24 64.56.106.188:22266 -> xxx.yyy.1.9:80 SYN ******S*
Nov 5 00:41:24 64.56.106.188:22267 -> xxx.yyy.1.10:80 SYN ******S*
Nov 5 00:41:22 64.56.106.188:22268 -> xxx.yyy.1.11:80 SYN ******S*
Nov 5 00:41:24 64.56.106.188:22269 -> xxx.yyy.1.12:80 SYN ******S*
[...]
Nov 5 00:48:15 64.56.106.188:24954 -> xxx.yyy.255.230:80 SYN ******S*
Nov 5 00:48:15 64.56.106.188:24970 -> xxx.yyy.255.246:80 SYN ******S*
Nov 5 00:48:15 64.56.106.188:24967 -> xxx.yyy.255.243:80 SYN ******S*
Nov 5 00:48:15 64.56.106.188:24964 -> xxx.yyy.255.240:80 SYN ******S*
Nov 5 00:48:15 64.56.106.188:24961 -> xxx.yyy.255.237:80 SYN ******S*
Nov 5 00:48:15 64.56.106.188:24958 -> xxx.yyy.255.234:80 SYN ******S*
Nov 5 00:48:15 64.56.106.188:24974 -> xxx.yyy.255.250:80 SYN ******S*
Nov 5 00:48:15 64.56.106.188:24955 -> xxx.yyy.255.231:80 SYN ******S*
47956
Nov 5 00:25:33 151.100.36.160:2614 -> xxx.yyy.1.1:1433 SYN ******S*
Nov 5 00:25:33 151.100.36.160:2616 -> xxx.yyy.1.3:1433 SYN ******S*
Nov 5 00:25:33 151.100.36.160:2617 -> xxx.yyy.1.4:1433 SYN ******S*
Nov 5 00:25:33 151.100.36.160:2618 -> xxx.yyy.1.5:1433 SYN ******S*
Nov 5 00:25:33 151.100.36.160:2619 -> xxx.yyy.1.6:1433 SYN ******S*
Nov 5 00:25:33 151.100.36.160:2626 -> xxx.yyy.1.13:1433 SYN ******S*
Nov 5 00:25:33 151.100.36.160:2623 -> xxx.yyy.1.10:1433 SYN ******S*
Nov 5 00:25:33 151.100.36.160:2620 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Nov 5 00:34:53 151.100.36.160:4559 -> xxx.yyy.255.200:1433 SYN ******S*
Nov 5 00:34:53 151.100.36.160:4608 -> xxx.yyy.255.249:1433 SYN ******S*
Nov 5 00:34:53 151.100.36.160:4589 -> xxx.yyy.255.230:1433 SYN ******S*
Nov 5 00:34:53 151.100.36.160:4602 -> xxx.yyy.255.243:1433 SYN ******S*
Nov 5 00:34:53 151.100.36.160:4590 -> xxx.yyy.255.231:1433 SYN ******S*
Nov 5 00:34:53 151.100.36.160:4603 -> xxx.yyy.255.244:1433 SYN ******S*
Nov 5 00:34:53 151.100.36.160:4584 -> xxx.yyy.255.225:1433 SYN ******S*
Nov 5 00:34:53 151.100.36.160:4597 -> xxx.yyy.255.238:1433 SYN ******S*
46732
Nov 5 03:08:11 211.245.114.180:3524 -> xxx.yyy.1.1:4899 SYN ******S*
Nov 5 03:08:11 211.245.114.180:3525 -> xxx.yyy.1.2:4899 SYN ******S*
Nov 5 03:08:11 211.245.114.180:3526 -> xxx.yyy.1.3:4899 SYN ******S*
Nov 5 03:08:10 211.245.114.180:3527 -> xxx.yyy.1.4:4899 SYN ******S*
Nov 5 03:08:10 211.245.114.180:3528 -> xxx.yyy.1.5:4899 SYN ******S*
Nov 5 03:08:10 211.245.114.180:3529 -> xxx.yyy.1.6:4899 SYN ******S*
Nov 5 03:08:10 211.245.114.180:3530 -> xxx.yyy.1.7:4899 SYN ******S*
Nov 5 03:08:10 211.245.114.180:3531 -> xxx.yyy.1.8:4899 SYN ******S*
[...]
Nov 5 03:14:08 211.245.114.180:2586 -> xxx.yyy.255.245:4899 SYN ******S*
Nov 5 03:14:08 211.245.114.180:2587 -> xxx.yyy.255.246:4899 SYN ******S*
Nov 5 03:14:08 211.245.114.180:2588 -> xxx.yyy.255.247:4899 SYN ******S*
Nov 5 03:14:08 211.245.114.180:2589 -> xxx.yyy.255.248:4899 SYN ******S*
Nov 5 03:14:08 211.245.114.180:2590 -> xxx.yyy.255.249:4899 SYN ******S*
Nov 5 03:14:08 211.245.114.180:2591 -> xxx.yyy.255.250:4899 SYN ******S*
Nov 5 03:14:08 211.245.114.180:2592 -> xxx.yyy.255.251:4899 SYN ******S*
Nov 5 03:14:08 211.245.114.180:2593 -> xxx.yyy.255.252:4899 SYN ******S*
Nov 5 03:14:08 211.245.114.180:2595 -> xxx.yyy.255.254:4899 SYN ******S*
40179
Nov 5 21:44:27 66.118.140.104:1768 -> xxx.yyy.1.1:1433 SYN ******S*
Nov 5 21:44:27 66.118.140.104:1769 -> xxx.yyy.1.2:1433 SYN ******S*
Nov 5 21:44:28 66.118.140.104:1770 -> xxx.yyy.1.3:1433 SYN ******S*
Nov 5 21:44:28 66.118.140.104:1771 -> xxx.yyy.1.4:1433 SYN ******S*
Nov 5 21:44:28 66.118.140.104:1775 -> xxx.yyy.1.9:1433 SYN ******S*
Nov 5 21:44:28 66.118.140.104:1776 -> xxx.yyy.1.8:1433 SYN ******S*
Nov 5 21:44:28 66.118.140.104:1778 -> xxx.yyy.1.12:1433 SYN ******S*
Nov 5 21:44:28 66.118.140.104:1779 -> xxx.yyy.1.11:1433 SYN ******S*
[...]
Nov 5 21:54:42 66.118.140.104:4251 -> xxx.yyy.255.240:1433 SYN ******S*
Nov 5 21:54:42 66.118.140.104:4252 -> xxx.yyy.255.241:1433 SYN ******S*
Nov 5 21:54:42 66.118.140.104:4253 -> xxx.yyy.255.242:1433 SYN ******S*
Nov 5 21:54:42 66.118.140.104:4255 -> xxx.yyy.255.244:1433 SYN ******S*
Nov 5 21:54:42 66.118.140.104:4256 -> xxx.yyy.255.245:1433 SYN ******S*
Nov 5 21:54:42 66.118.140.104:4257 -> xxx.yyy.255.246:1433 SYN ******S*
Nov 5 21:54:42 66.118.140.104:4259 -> xxx.yyy.255.248:1433 SYN ******S*
Nov 5 21:54:42 66.118.140.104:4260 -> xxx.yyy.255.249:1433 SYN ******S*
35617
Nov 5 02:28:44 62.48.177.68:2879 -> xxx.yyy.1.1:4899 SYN ******S*
Nov 5 02:28:44 62.48.177.68:2880 -> xxx.yyy.1.2:4899 SYN ******S*
Nov 5 02:28:44 62.48.177.68:2881 -> xxx.yyy.1.3:4899 SYN ******S*
Nov 5 02:28:42 62.48.177.68:2882 -> xxx.yyy.1.4:4899 SYN ******S*
Nov 5 02:28:42 62.48.177.68:2883 -> xxx.yyy.1.5:4899 SYN ******S*
Nov 5 02:28:42 62.48.177.68:2884 -> xxx.yyy.1.6:4899 SYN ******S*
Nov 5 02:28:42 62.48.177.68:2885 -> xxx.yyy.1.7:4899 SYN ******S*
Nov 5 02:28:42 62.48.177.68:2886 -> xxx.yyy.1.8:4899 SYN ******S*
[...]
Nov 5 02:32:37 62.48.177.68:2201 -> xxx.yyy.255.244:4899 SYN ******S*
Nov 5 02:32:37 62.48.177.68:2202 -> xxx.yyy.255.245:4899 SYN ******S*
Nov 5 02:32:37 62.48.177.68:2203 -> xxx.yyy.255.246:4899 SYN ******S*
Nov 5 02:32:37 62.48.177.68:2204 -> xxx.yyy.255.247:4899 SYN ******S*
Nov 5 02:32:37 62.48.177.68:2205 -> xxx.yyy.255.248:4899 SYN ******S*
Nov 5 02:32:37 62.48.177.68:2208 -> xxx.yyy.255.251:4899 SYN ******S*
Nov 5 02:32:37 62.48.177.68:2209 -> xxx.yyy.255.252:4899 SYN ******S*
Nov 5 02:32:37 62.48.177.68:2210 -> xxx.yyy.255.253:4899 SYN ******S*
35364
Nov 5 13:45:41 131.234.169.125:4231 -> xxx.yyy.1.1:8000 SYN ******S*
Nov 5 13:45:41 131.234.169.125:4234 -> xxx.yyy.1.4:8000 SYN ******S*
Nov 5 13:45:41 131.234.169.125:4232 -> xxx.yyy.1.2:8000 SYN ******S*
Nov 5 13:45:41 131.234.169.125:4233 -> xxx.yyy.1.3:8000 SYN ******S*
Nov 5 13:45:41 131.234.169.125:4236 -> xxx.yyy.1.6:8000 SYN ******S*
Nov 5 13:45:41 131.234.169.125:4240 -> xxx.yyy.1.10:8000 SYN ******S*
Nov 5 13:45:41 131.234.169.125:4238 -> xxx.yyy.1.8:8000 SYN ******S*
Nov 5 13:45:42 131.234.169.125:4241 -> xxx.yyy.1.11:8000 SYN ******S*
[...]
Nov 5 13:54:23 131.234.169.125:1777 -> xxx.yyy.255.163:8000 SYN ******S*
Nov 5 13:54:23 131.234.169.125:1781 -> xxx.yyy.255.166:8000 SYN ******S*
Nov 5 13:54:23 131.234.169.125:1858 -> xxx.yyy.255.203:8000 SYN ******S*
Nov 5 13:54:23 131.234.169.125:1846 -> xxx.yyy.255.191:8000 SYN ******S*
Nov 5 13:54:23 131.234.169.125:1847 -> xxx.yyy.255.192:8000 SYN ******S*
Nov 5 13:54:23 131.234.169.125:1891 -> xxx.yyy.255.213:8000 SYN ******S*
Nov 5 13:54:23 131.234.169.125:1783 -> xxx.yyy.255.168:8000 SYN ******S*
Nov 5 13:54:23 131.234.169.125:1775 -> xxx.yyy.255.162:8000 SYN ******S*
Nov 5 13:54:23 131.234.169.125:1871 -> xxx.yyy.255.210:8000 SYN ******S*
34385
[...]
33033
Nov 5 14:13:48 200.104.184.30:3636 -> xxx.yyy.1.4:1433 SYN ******S*
Nov 5 14:13:48 200.104.184.30:3633 -> xxx.yyy.1.1:1433 SYN ******S*
Nov 5 14:13:45 200.104.184.30:3646 -> xxx.yyy.1.13:1433 SYN ******S*
Nov 5 14:13:45 200.104.184.30:3638 -> xxx.yyy.1.6:1433 SYN ******S*
Nov 5 14:13:45 200.104.184.30:3645 -> xxx.yyy.1.12:1433 SYN ******S*
Nov 5 14:13:45 200.104.184.30:3637 -> xxx.yyy.1.5:1433 SYN ******S*
Nov 5 14:13:45 200.104.184.30:3647 -> xxx.yyy.1.14:1433 SYN ******S*
Nov 5 14:13:45 200.104.184.30:3644 -> xxx.yyy.1.11:1433 SYN ******S*
[...]
Nov 5 14:29:20 200.104.184.30:4760 -> xxx.yyy.255.246:1433 SYN ******S*
Nov 5 14:29:20 200.104.184.30:4754 -> xxx.yyy.255.244:1433 SYN ******S*
Nov 5 14:29:20 200.104.184.30:4764 -> xxx.yyy.255.250:1433 SYN ******S*
Nov 5 14:29:20 200.104.184.30:4761 -> xxx.yyy.255.247:1433 SYN ******S*
Nov 5 14:29:20 200.104.184.30:4755 -> xxx.yyy.255.245:1433 SYN ******S*
Nov 5 14:29:20 200.104.184.30:4763 -> xxx.yyy.255.249:1433 SYN ******S*
Nov 5 14:29:20 200.104.184.30:4762 -> xxx.yyy.255.248:1433 SYN ******S*
Nov 5 14:29:20 200.104.184.30:4749 -> xxx.yyy.255.243:1433 SYN ******S*
31528
Nov 5 06:41:17 219.248.244.240:2131 -> xxx.yyy.1.0:1433 SYN ******S*
Nov 5 06:41:17 219.248.244.240:2134 -> xxx.yyy.1.1:1433 SYN ******S*
Nov 5 06:41:17 219.248.244.240:2137 -> xxx.yyy.1.2:1433 SYN ******S*
Nov 5 06:41:17 219.248.244.240:2143 -> xxx.yyy.1.4:1433 SYN ******S*
Nov 5 06:41:17 219.248.244.240:2140 -> xxx.yyy.1.3:1433 SYN ******S*
Nov 5 06:41:17 219.248.244.240:2146 -> xxx.yyy.1.5:1433 SYN ******S*
Nov 5 06:41:17 219.248.244.240:2149 -> xxx.yyy.1.6:1433 SYN ******S*
Nov 5 06:41:17 219.248.244.240:2155 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Nov 5 08:20:51 219.248.244.240:3013 -> xxx.yyy.111.246:1433 SYN ******S*
Nov 5 08:20:51 219.248.244.240:3015 -> xxx.yyy.111.248:1433 SYN ******S*
Nov 5 08:20:52 219.248.244.240:3021 -> xxx.yyy.111.249:1433 SYN ******S*
Nov 5 08:20:52 219.248.244.240:3023 -> xxx.yyy.111.251:1433 SYN ******S*
Nov 5 08:20:52 219.248.244.240:3022 -> xxx.yyy.111.250:1433 SYN ******S*
Nov 5 08:20:52 219.248.244.240:3027 -> xxx.yyy.111.252:1433 SYN ******S*
Nov 5 08:20:52 219.248.244.240:3032 -> xxx.yyy.111.253:1433 SYN ******S*
Nov 5 08:20:52 219.248.244.240:3033 -> xxx.yyy.111.254:1433 SYN ******S*
Nov 5 08:20:52 219.248.244.240:3037 -> xxx.yyy.111.255:1433 SYN ******S*
31446
Nov 5 12:43:48 213.180.210.35:33485 -> xxx.yyy.246.142:1075 SYN ******S*
Nov 5 12:43:48 213.180.210.35:52012 -> xxx.yyy.246.142:80 SYN ******S*
Nov 5 12:43:48 213.180.210.35:43761 -> xxx.yyy.246.142:81 SYN ******S*
Nov 5 12:43:48 213.180.210.35:54235 -> xxx.yyy.246.142:3128 SYN ******S*
Nov 5 12:43:48 213.180.210.35:60490 -> xxx.yyy.246.142:4480 SYN ******S*
Nov 5 13:09:18 213.180.210.35:49305 -> xxx.yyy.246.142:14422 SYN ******S*
Nov 5 13:09:18 213.180.210.35:49305 -> xxx.yyy.246.142:57559 SYN ******S*
Nov 5 13:09:18 213.180.210.35:49305 -> xxx.yyy.246.142:43323 SYN ******S*
[...]
Nov 5 13:13:56 213.180.210.35:49310 -> xxx.yyy.246.142:6052 SYN ******S*
Nov 5 13:13:56 213.180.210.35:49310 -> xxx.yyy.246.142:6040 SYN ******S*
Nov 5 13:13:56 213.180.210.35:49310 -> xxx.yyy.246.142:20432 SYN ******S*
Nov 5 13:13:56 213.180.210.35:49310 -> xxx.yyy.246.142:6008 SYN ******S*
Nov 5 13:13:56 213.180.210.35:49310 -> xxx.yyy.246.142:6059 SYN ******S*
Nov 5 13:13:56 213.180.210.35:49310 -> xxx.yyy.246.142:6063 SYN ******S*
Nov 5 13:13:56 213.180.210.35:49310 -> xxx.yyy.246.142:6013 SYN ******S*
Nov 5 13:13:56 213.180.210.35:49310 -> xxx.yyy.246.142:6010 SYN ******S*
23126
[...]
12159
Nov 5 22:50:39 220.120.6.54:1166 -> xxx.yyy.71.161:5554 SYN ******S*
Nov 5 22:50:40 220.120.6.54:1605 -> xxx.yyy.71.161:1023 SYN ******S*
Nov 5 22:50:39 220.120.6.54:1168 -> xxx.yyy.71.165:5554 SYN ******S*
Nov 5 22:50:40 220.120.6.54:1606 -> xxx.yyy.71.165:1023 SYN ******S*
Nov 5 22:50:39 220.120.6.54:1167 -> xxx.yyy.71.162:5554 SYN ******S*
Nov 5 22:50:40 220.120.6.54:1607 -> xxx.yyy.71.162:1023 SYN ******S*
Nov 5 22:50:39 220.120.6.54:1170 -> xxx.yyy.71.163:5554 SYN ******S*
Nov 5 22:50:39 220.120.6.54:1172 -> xxx.yyy.71.171:5554 SYN ******S*
[...]
Nov 5 22:51:31 220.120.6.54:1568 -> xxx.yyy.72.109:9898 SYN ******S*
Nov 5 22:51:31 220.120.6.54:1563 -> xxx.yyy.72.108:9898 SYN ******S*
Nov 5 22:51:31 220.120.6.54:1597 -> xxx.yyy.72.105:9898 SYN ******S*
Nov 5 22:51:31 220.120.6.54:1598 -> xxx.yyy.72.106:9898 SYN ******S*
Nov 5 22:51:31 220.120.6.54:1610 -> xxx.yyy.72.110:9898 SYN ******S*
Nov 5 22:51:32 220.120.6.54:1641 -> xxx.yyy.72.111:9898 SYN ******S*
Nov 5 22:51:32 220.120.6.54:1643 -> xxx.yyy.72.114:9898 SYN ******S*
Nov 5 22:51:32 220.120.6.54:1646 -> xxx.yyy.72.112:9898 SYN ******S*
Nov 5 22:51:32 220.120.6.54:1648 -> xxx.yyy.72.116:9898 SYN ******S*
11318
Nov 5 22:37:48 220.84.73.76:1183 -> xxx.yyy.154.101:5554 SYN ******S*
Nov 5 22:37:51 220.84.73.76:2772 -> xxx.yyy.154.101:9898 SYN ******S*
Nov 5 22:37:48 220.84.73.76:1185 -> xxx.yyy.154.103:5554 SYN ******S*
Nov 5 22:37:49 220.84.73.76:1775 -> xxx.yyy.154.103:1023 SYN ******S*
Nov 5 22:37:51 220.84.73.76:2771 -> xxx.yyy.154.103:9898 SYN ******S*
Nov 5 22:37:48 220.84.73.76:1184 -> xxx.yyy.154.102:5554 SYN ******S*
Nov 5 22:37:51 220.84.73.76:2773 -> xxx.yyy.154.102:9898 SYN ******S*
Nov 5 22:37:48 220.84.73.76:1186 -> xxx.yyy.154.104:5554 SYN ******S*
[...]
Nov 5 22:38:33 220.84.73.76:2183 -> xxx.yyy.174.221:9898 SYN ******S*
Nov 5 22:38:33 220.84.73.76:2184 -> xxx.yyy.174.222:9898 SYN ******S*
Nov 5 22:38:33 220.84.73.76:2141 -> xxx.yyy.174.202:9898 SYN ******S*
Nov 5 22:38:33 220.84.73.76:2145 -> xxx.yyy.174.204:9898 SYN ******S*
Nov 5 22:38:33 220.84.73.76:2147 -> xxx.yyy.174.206:9898 SYN ******S*
Nov 5 22:38:34 220.84.73.76:2154 -> xxx.yyy.174.210:9898 SYN ******S*
Nov 5 22:38:34 220.84.73.76:2160 -> xxx.yyy.174.214:9898 SYN ******S*
Nov 5 22:38:34 220.84.73.76:2201 -> xxx.yyy.174.212:9898 SYN ******S*
10229
Nov 5 00:00:04 209.87.152.226:1490 -> xxx.yyy.222.231:1433 SYN ******S*
Nov 5 00:00:07 209.87.152.226:1512 -> xxx.yyy.222.253:1433 SYN ******S*
Nov 5 00:00:04 209.87.152.226:1492 -> xxx.yyy.222.233:1433 SYN ******S*
Nov 5 00:00:08 209.87.152.226:1513 -> xxx.yyy.222.254:1433 SYN ******S*
Nov 5 00:00:05 209.87.152.226:1514 -> xxx.yyy.222.255:1433 SYN ******S*
Nov 5 00:00:05 209.87.152.226:1494 -> xxx.yyy.222.235:1433 SYN ******S*
Nov 5 00:00:05 209.87.152.226:1495 -> xxx.yyy.222.236:1433 SYN ******S*
Nov 5 00:00:05 209.87.152.226:1496 -> xxx.yyy.222.237:1433 SYN ******S*
[...]
Nov 5 00:21:59 209.87.152.226:2036 -> xxx.yyy.255.242:1433 SYN ******S*
Nov 5 00:21:59 209.87.152.226:2048 -> xxx.yyy.255.254:1433 SYN ******S*
Nov 5 00:21:59 209.87.152.226:2037 -> xxx.yyy.255.243:1433 SYN ******S*
Nov 5 00:22:01 209.87.152.226:2044 -> xxx.yyy.255.250:1433 SYN ******S*
Nov 5 00:22:01 209.87.152.226:2045 -> xxx.yyy.255.251:1433 SYN ******S*
Nov 5 00:22:02 209.87.152.226:2046 -> xxx.yyy.255.252:1433 SYN ******S*
Nov 5 00:22:02 209.87.152.226:2047 -> xxx.yyy.255.253:1433 SYN ******S*
Nov 5 00:22:02 209.87.152.226:2048 -> xxx.yyy.255.254:1433 SYN ******S*
10067
Nov 5 04:02:52 69.41.232.167:24177 -> xxx.yyy.1.0:1433 SYN ******S*
Nov 5 04:02:52 69.41.232.167:26178 -> xxx.yyy.1.1:1433 SYN ******S*
Nov 5 04:02:52 69.41.232.167:24627 -> xxx.yyy.1.2:1433 SYN ******S*
Nov 5 04:02:52 69.41.232.167:24282 -> xxx.yyy.1.3:1433 SYN ******S*
Nov 5 04:02:52 69.41.232.167:21521 -> xxx.yyy.1.4:1433 SYN ******S*
Nov 5 04:02:52 69.41.232.167:23500 -> xxx.yyy.1.5:1433 SYN ******S*
Nov 5 04:02:52 69.41.232.167:23894 -> xxx.yyy.1.6:1433 SYN ******S*
Nov 5 04:02:52 69.41.232.167:23080 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Nov 5 04:03:04 69.41.232.167:22922 -> xxx.yyy.245.137:1433 SYN ******S*
Nov 5 04:03:04 69.41.232.167:22099 -> xxx.yyy.245.138:1433 SYN ******S*
Nov 5 04:03:04 69.41.232.167:21358 -> xxx.yyy.245.139:1433 SYN ******S*
Nov 5 04:03:04 69.41.232.167:26145 -> xxx.yyy.245.140:1433 SYN ******S*
Nov 5 04:03:04 69.41.232.167:25063 -> xxx.yyy.245.141:1433 SYN ******S*
Nov 5 04:03:04 69.41.232.167:21688 -> xxx.yyy.245.142:1433 SYN ******S*
Nov 5 04:03:04 69.41.232.167:23589 -> xxx.yyy.245.143:1433 SYN ******S*
Nov 5 04:03:04 69.41.232.167:22620 -> xxx.yyy.245.144:1433 SYN ******S*
10055
Nov 5 22:58:25 220.121.203.118:3745 -> xxx.yyy.154.117:5554 SYN ******S*
Nov 5 22:58:26 220.121.203.118:4990 -> xxx.yyy.154.117:1023 SYN ******S*
Nov 5 22:58:25 220.121.203.118:3746 -> xxx.yyy.154.118:5554 SYN ******S*
Nov 5 22:58:26 220.121.203.118:4991 -> xxx.yyy.154.118:1023 SYN ******S*
Nov 5 22:58:25 220.121.203.118:3750 -> xxx.yyy.154.122:5554 SYN ******S*
Nov 5 22:58:26 220.121.203.118:4994 -> xxx.yyy.154.122:1023 SYN ******S*
Nov 5 22:58:25 220.121.203.118:3747 -> xxx.yyy.154.119:5554 SYN ******S*
Nov 5 22:58:26 220.121.203.118:4992 -> xxx.yyy.154.119:1023 SYN ******S*
[...]
Nov 5 22:59:13 220.121.203.118:2043 -> xxx.yyy.174.177:9898 SYN ******S*
Nov 5 22:59:13 220.121.203.118:2050 -> xxx.yyy.174.182:9898 SYN ******S*
Nov 5 22:59:13 220.121.203.118:2057 -> xxx.yyy.174.200:9898 SYN ******S*
Nov 5 22:59:13 220.121.203.118:2082 -> xxx.yyy.174.199:9898 SYN ******S*
Nov 5 22:59:13 220.121.203.118:2092 -> xxx.yyy.174.201:9898 SYN ******S*
Nov 5 22:59:13 220.121.203.118:2093 -> xxx.yyy.174.202:9898 SYN ******S*
Nov 5 22:59:13 220.121.203.118:2094 -> xxx.yyy.174.203:9898 SYN ******S*
Nov 5 22:59:13 220.121.203.118:2114 -> xxx.yyy.174.216:9898 SYN ******S*
Nov 5 22:59:13 220.121.203.118:2132 -> xxx.yyy.174.221:9898 SYN ******S*
9308
Nov 5 23:56:12 221.127.172.251:2717 -> xxx.yyy.133.14:5554 SYN ******S*
Nov 5 23:56:13 221.127.172.251:3258 -> xxx.yyy.133.14:1023 SYN ******S*
Nov 5 23:56:15 221.127.172.251:4578 -> xxx.yyy.133.14:9898 SYN ******S*
Nov 5 23:56:12 221.127.172.251:2718 -> xxx.yyy.133.16:5554 SYN ******S*
Nov 5 23:56:15 221.127.172.251:4593 -> xxx.yyy.133.16:9898 SYN ******S*
Nov 5 23:56:12 221.127.172.251:2719 -> xxx.yyy.133.15:5554 SYN ******S*
Nov 5 23:56:13 221.127.172.251:3259 -> xxx.yyy.133.15:1023 SYN ******S*
Nov 5 23:56:15 221.127.172.251:4579 -> xxx.yyy.133.15:9898 SYN ******S*
[...]
Nov 5 23:56:55 221.127.172.251:3996 -> xxx.yyy.153.75:9898 SYN ******S*
Nov 5 23:56:55 221.127.172.251:4055 -> xxx.yyy.153.94:9898 SYN ******S*
Nov 5 23:56:55 221.127.172.251:4070 -> xxx.yyy.153.102:9898 SYN ******S*
Nov 5 23:56:55 221.127.172.251:4072 -> xxx.yyy.153.104:9898 SYN ******S*
Nov 5 23:56:55 221.127.172.251:4074 -> xxx.yyy.153.105:9898 SYN ******S*
Nov 5 23:56:55 221.127.172.251:4075 -> xxx.yyy.153.106:9898 SYN ******S*
Nov 5 23:56:55 221.127.172.251:4329 -> xxx.yyy.153.116:9898 SYN ******S*
Nov 5 23:56:55 221.127.172.251:4338 -> xxx.yyy.153.117:9898 SYN ******S*
Nov 5 23:56:55 221.127.172.251:4427 -> xxx.yyy.153.130:9898 SYN ******S*
8347
Nov 5 23:56:37 221.216.10.237:2346 -> xxx.yyy.236.76:5554 SYN ******S*
Nov 5 23:56:38 221.216.10.237:3038 -> xxx.yyy.236.76:1023 SYN ******S*
Nov 5 23:56:37 221.216.10.237:2356 -> xxx.yyy.236.77:5554 SYN ******S*
Nov 5 23:56:38 221.216.10.237:3054 -> xxx.yyy.236.77:1023 SYN ******S*
Nov 5 23:56:37 221.216.10.237:2367 -> xxx.yyy.236.78:5554 SYN ******S*
Nov 5 23:56:38 221.216.10.237:3061 -> xxx.yyy.236.78:1023 SYN ******S*
Nov 5 23:56:40 221.216.10.237:1048 -> xxx.yyy.236.78:9898 SYN ******S*
Nov 5 23:56:37 221.216.10.237:2415 -> xxx.yyy.236.82:5554 SYN ******S*
[...]
Nov 5 23:57:17 221.216.10.237:2370 -> xxx.yyy.255.243:9898 SYN ******S*
Nov 5 23:57:17 221.216.10.237:2384 -> xxx.yyy.255.245:9898 SYN ******S*
Nov 5 23:57:17 221.216.10.237:2390 -> xxx.yyy.255.246:9898 SYN ******S*
Nov 5 23:57:17 221.216.10.237:2405 -> xxx.yyy.255.248:9898 SYN ******S*
Nov 5 23:57:17 221.216.10.237:2409 -> xxx.yyy.255.249:9898 SYN ******S*
Nov 5 23:57:17 221.216.10.237:2417 -> xxx.yyy.255.251:9898 SYN ******S*
Nov 5 23:57:17 221.216.10.237:2420 -> xxx.yyy.255.252:9898 SYN ******S*
Nov 5 23:57:17 221.216.10.237:2421 -> xxx.yyy.255.253:9898 SYN ******S*
7986
Nov 5 23:59:14 221.217.94.2:3411 -> xxx.yyy.195.89:5554 SYN ******S*
Nov 5 23:59:15 221.217.94.2:3730 -> xxx.yyy.195.89:1023 SYN ******S*
Nov 5 23:59:14 221.217.94.2:3415 -> xxx.yyy.195.93:5554 SYN ******S*
Nov 5 23:59:15 221.217.94.2:3717 -> xxx.yyy.195.93:1023 SYN ******S*
Nov 5 23:59:17 221.217.94.2:4310 -> xxx.yyy.195.93:9898 SYN ******S*
Nov 5 23:59:14 221.217.94.2:3412 -> xxx.yyy.195.90:5554 SYN ******S*
Nov 5 23:59:15 221.217.94.2:3715 -> xxx.yyy.195.90:1023 SYN ******S*
Nov 5 23:59:14 221.217.94.2:3418 -> xxx.yyy.195.96:5554 SYN ******S*
[...]
Nov 6 00:00:01 221.217.94.2:3369 -> xxx.yyy.209.97:1023 SYN ******S*
Nov 6 00:00:01 221.217.94.2:3370 -> xxx.yyy.209.98:1023 SYN ******S*
Nov 6 00:00:01 221.217.94.2:3371 -> xxx.yyy.209.176:5554 SYN ******S*
Nov 6 00:00:01 221.217.94.2:3373 -> xxx.yyy.209.99:1023 SYN ******S*
Nov 6 00:00:01 221.217.94.2:3387 -> xxx.yyy.209.182:5554 SYN ******S*
Nov 6 00:00:01 221.217.94.2:3388 -> xxx.yyy.208.171:9898 SYN ******S*
Nov 6 00:00:01 221.217.94.2:3397 -> xxx.yyy.209.180:5554 SYN ******S*
Nov 6 00:00:01 221.217.94.2:3460 -> xxx.yyy.209.184:5554 SYN ******S*
7422
Nov 5 22:57:02 220.121.136.53:1864 -> xxx.yyy.236.89:5554 SYN ******S*
Nov 5 22:57:05 220.121.136.53:3129 -> xxx.yyy.236.89:9898 SYN ******S*
Nov 5 22:57:02 220.121.136.53:1879 -> xxx.yyy.236.97:5554 SYN ******S*
Nov 5 22:57:02 220.121.136.53:1885 -> xxx.yyy.236.99:5554 SYN ******S*
Nov 5 22:57:05 220.121.136.53:3152 -> xxx.yyy.236.99:9898 SYN ******S*
Nov 5 22:57:02 220.121.136.53:1887 -> xxx.yyy.236.101:5554 SYN ******S*
Nov 5 22:57:02 220.121.136.53:1892 -> xxx.yyy.236.104:5554 SYN ******S*
Nov 5 22:57:02 220.121.136.53:1884 -> xxx.yyy.236.98:5554 SYN ******S*
[...]
Nov 5 22:59:20 220.121.136.53:2084 -> xxx.yyy.255.211:9898 SYN ******S*
Nov 5 22:59:20 220.121.136.53:2112 -> xxx.yyy.255.220:9898 SYN ******S*
Nov 5 22:59:20 220.121.136.53:2116 -> xxx.yyy.255.221:9898 SYN ******S*
Nov 5 22:59:20 220.121.136.53:2117 -> xxx.yyy.255.222:9898 SYN ******S*
Nov 5 22:59:20 220.121.136.53:2129 -> xxx.yyy.255.229:9898 SYN ******S*
Nov 5 22:59:20 220.121.136.53:2119 -> xxx.yyy.255.224:9898 SYN ******S*
Nov 5 22:59:20 220.121.136.53:2153 -> xxx.yyy.255.244:9898 SYN ******S*
Nov 5 22:59:20 220.121.136.53:2173 -> xxx.yyy.255.252:9898 SYN ******S*
7362
[...]
6988
Nov 5 22:56:43 222.100.59.169:3507 -> xxx.yyy.154.189:5554 SYN ******S*
Nov 5 22:56:43 222.100.59.169:3514 -> xxx.yyy.154.186:5554 SYN ******S*
Nov 5 22:56:43 222.100.59.169:3517 -> xxx.yyy.154.184:5554 SYN ******S*
Nov 5 22:56:43 222.100.59.169:3714 -> xxx.yyy.154.194:5554 SYN ******S*
Nov 5 22:56:43 222.100.59.169:3702 -> xxx.yyy.154.106:5554 SYN ******S*
Nov 5 22:56:43 222.100.59.169:3513 -> xxx.yyy.154.187:5554 SYN ******S*
Nov 5 22:56:43 222.100.59.169:3528 -> xxx.yyy.154.177:5554 SYN ******S*
Nov 5 22:56:46 222.100.59.169:1151 -> xxx.yyy.154.177:9898 SYN ******S*
[...]
Nov 5 23:00:32 222.100.59.169:1497 -> xxx.yyy.154.188:1023 SYN ******S*
Nov 5 23:00:32 222.100.59.169:1408 -> xxx.yyy.154.156:1023 SYN ******S*
Nov 5 23:00:32 222.100.59.169:1443 -> xxx.yyy.154.169:1023 SYN ******S*
Nov 5 23:00:32 222.100.59.169:1462 -> xxx.yyy.154.174:1023 SYN ******S*
Nov 5 23:00:34 222.100.59.169:2633 -> xxx.yyy.154.174:9898 SYN ******S*
Nov 5 23:00:34 222.100.59.169:2573 -> xxx.yyy.154.168:9898 SYN ******S*
Nov 5 23:00:34 222.100.59.169:2585 -> xxx.yyy.154.172:9898 SYN ******S*
Nov 5 23:00:34 222.100.59.169:2590 -> xxx.yyy.154.173:9898 SYN ******S*
6741
[...]
6655
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list