[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Tue Nov 16 13:26:35 GMT 2004
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Nov 15 04:55:46 81.192.47.235:4385 -> xxx.yyy.29.0:1433 SYN ******S*
Nov 15 04:55:46 81.192.47.235:4392 -> xxx.yyy.29.1:1433 SYN ******S*
Nov 15 04:55:46 81.192.47.235:4401 -> xxx.yyy.29.2:1433 SYN ******S*
Nov 15 04:55:46 81.192.47.235:4404 -> xxx.yyy.29.3:1433 SYN ******S*
Nov 15 04:55:46 81.192.47.235:4405 -> xxx.yyy.29.4:1433 SYN ******S*
Nov 15 04:55:46 81.192.47.235:4406 -> xxx.yyy.29.5:1433 SYN ******S*
Nov 15 04:55:46 81.192.47.235:4408 -> xxx.yyy.29.6:1433 SYN ******S*
Nov 15 04:55:46 81.192.47.235:4410 -> xxx.yyy.29.7:1433 SYN ******S*
[...]
Nov 15 08:19:38 81.192.47.235:3604 -> xxx.yyy.255.254:1433 SYN ******S*
Nov 15 08:19:39 81.192.47.235:3548 -> xxx.yyy.255.244:1433 SYN ******S*
Nov 15 08:19:39 81.192.47.235:3554 -> xxx.yyy.255.247:1433 SYN ******S*
Nov 15 08:19:39 81.192.47.235:3558 -> xxx.yyy.255.248:1433 SYN ******S*
Nov 15 08:19:39 81.192.47.235:3566 -> xxx.yyy.255.252:1433 SYN ******S*
Nov 15 08:19:39 81.192.47.235:3565 -> xxx.yyy.255.251:1433 SYN ******S*
Nov 15 08:19:39 81.192.47.235:3564 -> xxx.yyy.255.250:1433 SYN ******S*
Nov 15 08:19:39 81.192.47.235:3567 -> xxx.yyy.255.253:1433 SYN ******S*
Nov 15 08:19:44 81.192.47.235:3604 -> xxx.yyy.255.254:1433 SYN ******S*
109429
Nov 15 06:46:54 217.160.227.167:2059 -> xxx.yyy.1.1:4899 SYN ******S*
Nov 15 06:46:54 217.160.227.167:2060 -> xxx.yyy.1.2:4899 SYN ******S*
Nov 15 06:46:54 217.160.227.167:2061 -> xxx.yyy.1.3:4899 SYN ******S*
Nov 15 06:46:56 217.160.227.167:2062 -> xxx.yyy.1.4:4899 SYN ******S*
Nov 15 06:46:56 217.160.227.167:2063 -> xxx.yyy.1.5:4899 SYN ******S*
Nov 15 06:46:56 217.160.227.167:2064 -> xxx.yyy.1.6:4899 SYN ******S*
Nov 15 06:46:56 217.160.227.167:2065 -> xxx.yyy.1.7:4899 SYN ******S*
Nov 15 06:46:56 217.160.227.167:2066 -> xxx.yyy.1.8:4899 SYN ******S*
[...]
Nov 15 06:58:48 217.160.227.167:4087 -> xxx.yyy.255.222:4899 SYN ******S*
Nov 15 06:58:48 217.160.227.167:4012 -> xxx.yyy.255.205:4899 SYN ******S*
Nov 15 06:58:48 217.160.227.167:4459 -> xxx.yyy.255.250:4899 SYN ******S*
Nov 15 06:58:48 217.160.227.167:4493 -> xxx.yyy.255.254:4899 SYN ******S*
Nov 15 06:58:48 217.160.227.167:4314 -> xxx.yyy.255.238:4899 SYN ******S*
Nov 15 06:58:48 217.160.227.167:4089 -> xxx.yyy.255.223:4899 SYN ******S*
Nov 15 06:58:48 217.160.227.167:4145 -> xxx.yyy.255.229:4899 SYN ******S*
Nov 15 06:58:48 217.160.227.167:4058 -> xxx.yyy.255.214:4899 SYN ******S*
Nov 15 06:58:48 217.160.227.167:4022 -> xxx.yyy.255.207:4899 SYN ******S*
93716
Nov 15 02:37:04 164.124.141.110:1121 -> xxx.yyy.1.2:139 SYN ******S*
Nov 15 02:37:04 164.124.141.110:1120 -> xxx.yyy.1.1:139 SYN ******S*
Nov 15 02:37:04 164.124.141.110:1122 -> xxx.yyy.1.3:139 SYN ******S*
Nov 15 02:37:01 164.124.141.110:1123 -> xxx.yyy.1.4:139 SYN ******S*
Nov 15 02:37:04 164.124.141.110:1125 -> xxx.yyy.1.6:139 SYN ******S*
Nov 15 02:37:04 164.124.141.110:1126 -> xxx.yyy.1.7:139 SYN ******S*
Nov 15 02:37:04 164.124.141.110:1128 -> xxx.yyy.1.9:139 SYN ******S*
Nov 15 02:37:04 164.124.141.110:1127 -> xxx.yyy.1.8:139 SYN ******S*
[...]
Nov 15 02:49:11 164.124.141.110:3635 -> xxx.yyy.255.242:139 SYN ******S*
Nov 15 02:49:11 164.124.141.110:3637 -> xxx.yyy.255.244:139 SYN ******S*
Nov 15 02:49:11 164.124.141.110:3641 -> xxx.yyy.255.248:139 SYN ******S*
Nov 15 02:49:11 164.124.141.110:3646 -> xxx.yyy.255.253:139 SYN ******S*
Nov 15 02:49:11 164.124.141.110:3645 -> xxx.yyy.255.252:139 SYN ******S*
Nov 15 02:49:11 164.124.141.110:3643 -> xxx.yyy.255.250:139 SYN ******S*
Nov 15 02:49:11 164.124.141.110:3644 -> xxx.yyy.255.251:139 SYN ******S*
Nov 15 02:49:11 164.124.141.110:3647 -> xxx.yyy.255.254:139 SYN ******S*
66461
Nov 15 01:27:56 130.227.229.146:1535 -> xxx.yyy.1.2:1433 SYN ******S*
Nov 15 01:27:56 130.227.229.146:1537 -> xxx.yyy.1.3:1433 SYN ******S*
Nov 15 01:27:56 130.227.229.146:1539 -> xxx.yyy.1.4:1433 SYN ******S*
Nov 15 01:27:56 130.227.229.146:1541 -> xxx.yyy.1.5:1433 SYN ******S*
Nov 15 01:27:56 130.227.229.146:1543 -> xxx.yyy.1.6:1433 SYN ******S*
Nov 15 01:27:56 130.227.229.146:1545 -> xxx.yyy.1.7:1433 SYN ******S*
Nov 15 01:27:56 130.227.229.146:1547 -> xxx.yyy.1.8:1433 SYN ******S*
Nov 15 01:27:53 130.227.229.146:1549 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
Nov 15 01:46:08 130.227.229.146:2411 -> xxx.yyy.zzz.242:1433 SYN ******S*
Nov 15 01:46:08 130.227.229.146:2398 -> xxx.yyy.zzz.235:1433 SYN ******S*
Nov 15 01:46:08 130.227.229.146:2409 -> xxx.yyy.zzz.241:1433 SYN ******S*
Nov 15 01:46:08 130.227.229.146:2413 -> xxx.yyy.zzz.243:1433 SYN ******S*
Nov 15 01:46:08 130.227.229.146:2404 -> xxx.yyy.zzz.238:1433 SYN ******S*
Nov 15 01:46:08 130.227.229.146:2406 -> xxx.yyy.zzz.239:1433 SYN ******S*
Nov 15 01:46:09 130.227.229.146:2423 -> xxx.yyy.zzz.248:1433 SYN ******S*
Nov 15 01:46:09 130.227.229.146:2417 -> xxx.yyy.zzz.245:1433 SYN ******S*
Nov 15 01:46:09 130.227.229.146:2427 -> xxx.yyy.zzz.250:1433 SYN ******S*
59115
Nov 15 09:19:02 210.222.19.52:1326 -> xxx.yyy.1.2:1433 SYN ******S*
Nov 15 09:19:02 210.222.19.52:1327 -> xxx.yyy.1.3:1433 SYN ******S*
Nov 15 09:19:05 210.222.19.52:1332 -> xxx.yyy.1.8:1433 SYN ******S*
Nov 15 09:19:05 210.222.19.52:1333 -> xxx.yyy.1.9:1433 SYN ******S*
Nov 15 09:19:05 210.222.19.52:1329 -> xxx.yyy.1.5:1433 SYN ******S*
Nov 15 09:19:05 210.222.19.52:1334 -> xxx.yyy.1.10:1433 SYN ******S*
Nov 15 09:19:05 210.222.19.52:1336 -> xxx.yyy.1.12:1433 SYN ******S*
Nov 15 09:19:05 210.222.19.52:1338 -> xxx.yyy.1.13:1433 SYN ******S*
[...]
Nov 15 09:30:53 210.222.19.52:3724 -> xxx.yyy.255.213:1433 SYN ******S*
Nov 15 09:30:53 210.222.19.52:3722 -> xxx.yyy.255.211:1433 SYN ******S*
Nov 15 09:30:53 210.222.19.52:3723 -> xxx.yyy.255.212:1433 SYN ******S*
Nov 15 09:30:53 210.222.19.52:3726 -> xxx.yyy.255.215:1433 SYN ******S*
Nov 15 09:30:54 210.222.19.52:3725 -> xxx.yyy.255.214:1433 SYN ******S*
Nov 15 09:30:54 210.222.19.52:3743 -> xxx.yyy.255.232:1433 SYN ******S*
Nov 15 09:30:54 210.222.19.52:3763 -> xxx.yyy.255.252:1433 SYN ******S*
Nov 15 09:30:54 210.222.19.52:3760 -> xxx.yyy.255.249:1433 SYN ******S*
Nov 15 09:30:54 210.222.19.52:3764 -> xxx.yyy.255.253:1433 SYN ******S*
39528
Nov 15 03:36:22 67.117.96.171:2503 -> xxx.yyy.1.1:4899 SYN ******S*
Nov 15 03:36:22 67.117.96.171:2504 -> xxx.yyy.1.2:4899 SYN ******S*
Nov 15 03:36:22 67.117.96.171:2505 -> xxx.yyy.1.3:4899 SYN ******S*
Nov 15 03:36:21 67.117.96.171:2506 -> xxx.yyy.1.4:4899 SYN ******S*
Nov 15 03:36:21 67.117.96.171:2507 -> xxx.yyy.1.5:4899 SYN ******S*
Nov 15 03:36:21 67.117.96.171:2508 -> xxx.yyy.1.6:4899 SYN ******S*
Nov 15 03:36:21 67.117.96.171:2509 -> xxx.yyy.1.7:4899 SYN ******S*
Nov 15 03:36:21 67.117.96.171:2510 -> xxx.yyy.1.8:4899 SYN ******S*
[...]
Nov 15 03:40:02 67.117.96.171:2628 -> xxx.yyy.255.244:4899 SYN ******S*
Nov 15 03:40:02 67.117.96.171:2629 -> xxx.yyy.255.245:4899 SYN ******S*
Nov 15 03:40:02 67.117.96.171:2630 -> xxx.yyy.255.246:4899 SYN ******S*
Nov 15 03:40:02 67.117.96.171:2631 -> xxx.yyy.255.247:4899 SYN ******S*
Nov 15 03:40:02 67.117.96.171:2632 -> xxx.yyy.255.248:4899 SYN ******S*
Nov 15 03:40:02 67.117.96.171:2633 -> xxx.yyy.255.249:4899 SYN ******S*
Nov 15 03:40:02 67.117.96.171:2635 -> xxx.yyy.255.251:4899 SYN ******S*
Nov 15 03:40:02 67.117.96.171:2637 -> xxx.yyy.255.253:4899 SYN ******S*
Nov 15 03:40:02 67.117.96.171:2638 -> xxx.yyy.255.254:4899 SYN ******S*
36869
Nov 15 07:57:23 61.222.186.42:1209 -> xxx.yyy.1.1:1433 SYN ******S*
Nov 15 07:57:23 61.222.186.42:1210 -> xxx.yyy.1.2:1433 SYN ******S*
Nov 15 07:57:23 61.222.186.42:1211 -> xxx.yyy.1.3:1433 SYN ******S*
Nov 15 07:57:23 61.222.186.42:1212 -> xxx.yyy.1.4:1433 SYN ******S*
Nov 15 07:57:23 61.222.186.42:1213 -> xxx.yyy.1.5:1433 SYN ******S*
Nov 15 07:57:23 61.222.186.42:1214 -> xxx.yyy.1.6:1433 SYN ******S*
Nov 15 07:57:23 61.222.186.42:1215 -> xxx.yyy.1.7:1433 SYN ******S*
Nov 15 07:57:23 61.222.186.42:1216 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Nov 15 08:31:16 61.222.186.42:1220 -> xxx.yyy.255.246:1433 SYN ******S*
Nov 15 08:31:16 61.222.186.42:1221 -> xxx.yyy.255.247:1433 SYN ******S*
Nov 15 08:31:16 61.222.186.42:1222 -> xxx.yyy.255.248:1433 SYN ******S*
Nov 15 08:31:16 61.222.186.42:1224 -> xxx.yyy.255.250:1433 SYN ******S*
Nov 15 08:31:16 61.222.186.42:1225 -> xxx.yyy.255.251:1433 SYN ******S*
Nov 15 08:31:16 61.222.186.42:1226 -> xxx.yyy.255.252:1433 SYN ******S*
Nov 15 08:31:16 61.222.186.42:1227 -> xxx.yyy.255.253:1433 SYN ******S*
Nov 15 08:31:16 61.222.186.42:1228 -> xxx.yyy.255.254:1433 SYN ******S*
Nov 15 08:31:19 61.222.186.42:1227 -> xxx.yyy.255.253:1433 SYN ******S*
35826
Nov 15 13:08:42 195.17.24.248:3314 -> xxx.yyy.1.3:443 SYN ******S*
Nov 15 13:08:42 195.17.24.248:3318 -> xxx.yyy.1.7:443 SYN ******S*
Nov 15 13:08:42 195.17.24.248:3319 -> xxx.yyy.1.8:443 SYN ******S*
Nov 15 13:08:42 195.17.24.248:3320 -> xxx.yyy.1.9:443 SYN ******S*
Nov 15 13:08:42 195.17.24.248:3325 -> xxx.yyy.1.14:443 SYN ******S*
Nov 15 13:08:42 195.17.24.248:3328 -> xxx.yyy.1.17:443 SYN ******S*
Nov 15 13:08:42 195.17.24.248:3329 -> xxx.yyy.1.18:443 SYN ******S*
Nov 15 13:08:42 195.17.24.248:3330 -> xxx.yyy.1.19:443 SYN ******S*
[...]
Nov 15 13:20:02 195.17.24.248:2277 -> xxx.yyy.255.243:443 SYN ******S*
Nov 15 13:20:02 195.17.24.248:2271 -> xxx.yyy.255.237:443 SYN ******S*
Nov 15 13:20:02 195.17.24.248:2286 -> xxx.yyy.255.252:443 SYN ******S*
Nov 15 13:20:02 195.17.24.248:2287 -> xxx.yyy.255.253:443 SYN ******S*
Nov 15 13:20:02 195.17.24.248:2280 -> xxx.yyy.255.246:443 SYN ******S*
Nov 15 13:20:02 195.17.24.248:2283 -> xxx.yyy.255.249:443 SYN ******S*
Nov 15 13:20:02 195.17.24.248:2284 -> xxx.yyy.255.250:443 SYN ******S*
Nov 15 13:20:02 195.17.24.248:2288 -> xxx.yyy.255.254:443 SYN ******S*
35047
Nov 15 09:33:23 206.13.56.94:3947 -> xxx.yyy.1.6:1433 SYN ******S*
Nov 15 09:33:23 206.13.56.94:4082 -> xxx.yyy.1.5:1433 SYN ******S*
Nov 15 09:33:26 206.13.56.94:4143 -> xxx.yyy.1.1:1433 SYN ******S*
Nov 15 09:33:24 206.13.56.94:4483 -> xxx.yyy.1.57:1433 SYN ******S*
Nov 15 09:33:27 206.13.56.94:4502 -> xxx.yyy.1.56:1433 SYN ******S*
Nov 15 09:33:24 206.13.56.94:4535 -> xxx.yyy.1.54:1433 SYN ******S*
Nov 15 09:33:27 206.13.56.94:4552 -> xxx.yyy.1.53:1433 SYN ******S*
Nov 15 09:33:24 206.13.56.94:4569 -> xxx.yyy.1.52:1433 SYN ******S*
[...]
Nov 15 09:56:58 206.13.56.94:1802 -> xxx.yyy.255.224:1433 SYN ******S*
Nov 15 09:56:58 206.13.56.94:1833 -> xxx.yyy.255.227:1433 SYN ******S*
Nov 15 09:56:58 206.13.56.94:1841 -> xxx.yyy.255.228:1433 SYN ******S*
Nov 15 09:56:59 206.13.56.94:1897 -> xxx.yyy.255.235:1433 SYN ******S*
Nov 15 09:56:59 206.13.56.94:1905 -> xxx.yyy.255.236:1433 SYN ******S*
Nov 15 09:56:59 206.13.56.94:1929 -> xxx.yyy.255.239:1433 SYN ******S*
Nov 15 09:56:59 206.13.56.94:1985 -> xxx.yyy.255.246:1433 SYN ******S*
Nov 15 09:56:59 206.13.56.94:2025 -> xxx.yyy.255.251:1433 SYN ******S*
34601
Nov 15 14:41:18 69.93.247.178:1739 -> xxx.yyy.1.3:1433 SYN ******S*
Nov 15 14:41:21 69.93.247.178:1740 -> xxx.yyy.1.4:1433 SYN ******S*
Nov 15 14:41:18 69.93.247.178:1741 -> xxx.yyy.1.5:1433 SYN ******S*
Nov 15 14:41:18 69.93.247.178:1742 -> xxx.yyy.1.6:1433 SYN ******S*
Nov 15 14:41:18 69.93.247.178:1743 -> xxx.yyy.1.7:1433 SYN ******S*
Nov 15 14:41:21 69.93.247.178:1749 -> xxx.yyy.1.13:1433 SYN ******S*
Nov 15 14:41:21 69.93.247.178:1750 -> xxx.yyy.1.14:1433 SYN ******S*
Nov 15 14:41:21 69.93.247.178:1751 -> xxx.yyy.1.15:1433 SYN ******S*
[...]
Nov 15 14:53:00 69.93.247.178:4053 -> xxx.yyy.255.190:1433 SYN ******S*
Nov 15 14:53:00 69.93.247.178:4050 -> xxx.yyy.255.187:1433 SYN ******S*
Nov 15 14:53:00 69.93.247.178:4067 -> xxx.yyy.255.204:1433 SYN ******S*
Nov 15 14:53:00 69.93.247.178:4070 -> xxx.yyy.255.207:1433 SYN ******S*
Nov 15 14:53:00 69.93.247.178:4069 -> xxx.yyy.255.206:1433 SYN ******S*
Nov 15 14:53:00 69.93.247.178:4071 -> xxx.yyy.255.208:1433 SYN ******S*
Nov 15 14:53:00 69.93.247.178:4068 -> xxx.yyy.255.205:1433 SYN ******S*
Nov 15 14:53:00 69.93.247.178:4072 -> xxx.yyy.255.209:1433 SYN ******S*
Nov 15 14:53:00 69.93.247.178:4065 -> xxx.yyy.255.202:1433 SYN ******S*
31248
Nov 15 16:00:54 216.62.194.131:60370 -> xxx.yyy.1.2:7100 SYN ******S*
Nov 15 16:00:54 216.62.194.131:60371 -> xxx.yyy.1.3:7100 SYN ******S*
Nov 15 16:00:54 216.62.194.131:60374 -> xxx.yyy.1.6:7100 SYN ******S*
Nov 15 16:00:54 216.62.194.131:60376 -> xxx.yyy.1.8:7100 SYN ******S*
Nov 15 16:00:54 216.62.194.131:60378 -> xxx.yyy.1.10:7100 SYN ******S*
Nov 15 16:00:54 216.62.194.131:60380 -> xxx.yyy.1.12:7100 SYN ******S*
Nov 15 16:00:54 216.62.194.131:60381 -> xxx.yyy.1.13:7100 SYN ******S*
Nov 15 16:00:54 216.62.194.131:60384 -> xxx.yyy.1.16:7100 SYN ******S*
[...]
Nov 15 16:37:32 216.62.194.131:60166 -> xxx.yyy.255.240:7100 SYN ******S*
Nov 15 16:37:32 216.62.194.131:60167 -> xxx.yyy.255.241:7100 SYN ******S*
Nov 15 16:37:32 216.62.194.131:60168 -> xxx.yyy.255.242:7100 SYN ******S*
Nov 15 16:37:32 216.62.194.131:60169 -> xxx.yyy.255.243:7100 SYN ******S*
Nov 15 16:37:32 216.62.194.131:60170 -> xxx.yyy.255.244:7100 SYN ******S*
Nov 15 16:37:33 216.62.194.131:60174 -> xxx.yyy.255.248:7100 SYN ******S*
Nov 15 16:37:33 216.62.194.131:60179 -> xxx.yyy.255.253:7100 SYN ******S*
Nov 15 16:37:33 216.62.194.131:60180 -> xxx.yyy.255.254:7100 SYN ******S*
Nov 15 16:37:33 216.62.194.131:60181 -> xxx.yyy.255.255:7100 SYN ******S*
19232
[...]
16101
[...]
11356
[...]
10877
Nov 15 06:56:48 217.217.42.124:2333 -> xxx.yyy.133.238:5554 SYN ******S*
Nov 15 06:56:49 217.217.42.124:2974 -> xxx.yyy.133.238:1023 SYN ******S*
Nov 15 06:56:51 217.217.42.124:4749 -> xxx.yyy.133.238:9898 SYN ******S*
Nov 15 06:56:48 217.217.42.124:2337 -> xxx.yyy.133.241:5554 SYN ******S*
Nov 15 06:56:49 217.217.42.124:2976 -> xxx.yyy.133.241:1023 SYN ******S*
Nov 15 06:56:51 217.217.42.124:4761 -> xxx.yyy.133.241:9898 SYN ******S*
Nov 15 06:56:48 217.217.42.124:2341 -> xxx.yyy.133.243:5554 SYN ******S*
Nov 15 06:56:49 217.217.42.124:2978 -> xxx.yyy.133.243:1023 SYN ******S*
[...]
Nov 15 06:57:32 217.217.42.124:4461 -> xxx.yyy.154.86:9898 SYN ******S*
Nov 15 06:57:32 217.217.42.124:4451 -> xxx.yyy.154.82:9898 SYN ******S*
Nov 15 06:57:32 217.217.42.124:4470 -> xxx.yyy.154.88:9898 SYN ******S*
Nov 15 06:57:32 217.217.42.124:4480 -> xxx.yyy.154.89:9898 SYN ******S*
Nov 15 06:57:32 217.217.42.124:4542 -> xxx.yyy.154.98:9898 SYN ******S*
Nov 15 06:57:32 217.217.42.124:4536 -> xxx.yyy.154.100:9898 SYN ******S*
Nov 15 06:57:32 217.217.42.124:4524 -> xxx.yyy.154.96:9898 SYN ******S*
Nov 15 06:57:32 217.217.42.124:4544 -> xxx.yyy.154.99:9898 SYN ******S*
9880
Nov 15 01:36:18 220.87.105.184:2974 -> xxx.yyy.174.3:5554 SYN ******S*
Nov 15 01:36:19 220.87.105.184:3479 -> xxx.yyy.174.3:1023 SYN ******S*
Nov 15 01:36:21 220.87.105.184:4532 -> xxx.yyy.174.3:9898 SYN ******S*
Nov 15 01:36:18 220.87.105.184:2981 -> xxx.yyy.174.10:5554 SYN ******S*
Nov 15 01:36:19 220.87.105.184:3497 -> xxx.yyy.174.10:1023 SYN ******S*
Nov 15 01:36:21 220.87.105.184:4605 -> xxx.yyy.174.10:9898 SYN ******S*
Nov 15 01:36:18 220.87.105.184:2979 -> xxx.yyy.174.8:5554 SYN ******S*
Nov 15 01:36:19 220.87.105.184:3495 -> xxx.yyy.174.8:1023 SYN ******S*
[...]
Nov 15 01:37:04 220.87.105.184:3822 -> xxx.yyy.194.92:9898 SYN ******S*
Nov 15 01:37:04 220.87.105.184:3827 -> xxx.yyy.194.97:9898 SYN ******S*
Nov 15 01:37:04 220.87.105.184:3835 -> xxx.yyy.194.102:9898 SYN ******S*
Nov 15 01:37:04 220.87.105.184:3831 -> xxx.yyy.194.101:9898 SYN ******S*
Nov 15 01:37:04 220.87.105.184:3849 -> xxx.yyy.194.106:9898 SYN ******S*
Nov 15 01:37:04 220.87.105.184:3855 -> xxx.yyy.194.109:9898 SYN ******S*
Nov 15 01:37:04 220.87.105.184:3858 -> xxx.yyy.194.112:9898 SYN ******S*
Nov 15 01:37:04 220.87.105.184:3857 -> xxx.yyy.194.111:9898 SYN ******S*
9182
[...]
7758
[...]
7562
Nov 15 23:54:40 61.50.181.17:3210 -> xxx.yyy.72.194:5554 SYN ******S*
Nov 15 23:54:41 61.50.181.17:3759 -> xxx.yyy.72.194:1023 SYN ******S*
Nov 15 23:54:43 61.50.181.17:1413 -> xxx.yyy.72.194:9898 SYN ******S*
Nov 15 23:54:40 61.50.181.17:3240 -> xxx.yyy.72.198:5554 SYN ******S*
Nov 15 23:54:43 61.50.181.17:1427 -> xxx.yyy.72.198:9898 SYN ******S*
Nov 15 23:54:40 61.50.181.17:3241 -> xxx.yyy.72.200:5554 SYN ******S*
Nov 15 23:54:41 61.50.181.17:3792 -> xxx.yyy.72.200:1023 SYN ******S*
Nov 15 23:54:43 61.50.181.17:1420 -> xxx.yyy.72.200:9898 SYN ******S*
[...]
Nov 15 23:56:01 61.50.181.17:1825 -> xxx.yyy.72.188:5554 SYN ******S*
Nov 15 23:56:02 61.50.181.17:2417 -> xxx.yyy.72.188:1023 SYN ******S*
Nov 15 23:56:04 61.50.181.17:3672 -> xxx.yyy.72.188:9898 SYN ******S*
Nov 15 23:56:01 61.50.181.17:1885 -> xxx.yyy.72.192:5554 SYN ******S*
Nov 15 23:56:02 61.50.181.17:2468 -> xxx.yyy.72.192:1023 SYN ******S*
Nov 15 23:56:02 61.50.181.17:2456 -> xxx.yyy.72.189:1023 SYN ******S*
Nov 15 23:56:02 61.50.181.17:2457 -> xxx.yyy.72.190:1023 SYN ******S*
Nov 15 23:56:04 61.50.181.17:3572 -> xxx.yyy.72.186:9898 SYN ******S*
Nov 15 23:56:04 61.50.181.17:3726 -> xxx.yyy.72.179:9898 SYN ******S*
5221
Nov 15 23:56:35 211.95.209.173:3975 -> xxx.yyy.195.88:5554 SYN ******S*
Nov 15 23:56:36 211.95.209.173:4277 -> xxx.yyy.195.88:1023 SYN ******S*
Nov 15 23:56:38 211.95.209.173:1210 -> xxx.yyy.195.88:9898 SYN ******S*
Nov 15 23:56:35 211.95.209.173:3982 -> xxx.yyy.195.90:5554 SYN ******S*
Nov 15 23:56:36 211.95.209.173:4279 -> xxx.yyy.195.90:1023 SYN ******S*
Nov 15 23:56:38 211.95.209.173:1215 -> xxx.yyy.195.90:9898 SYN ******S*
Nov 15 23:56:35 211.95.209.173:3977 -> xxx.yyy.195.89:5554 SYN ******S*
Nov 15 23:56:36 211.95.209.173:4278 -> xxx.yyy.195.89:1023 SYN ******S*
[...]
Nov 15 23:58:28 211.95.209.173:1662 -> xxx.yyy.197.10:9898 SYN ******S*
Nov 15 23:58:28 211.95.209.173:1666 -> xxx.yyy.197.11:9898 SYN ******S*
Nov 15 23:58:28 211.95.209.173:1674 -> xxx.yyy.196.241:9898 SYN ******S*
Nov 15 23:58:28 211.95.209.173:1677 -> xxx.yyy.197.5:9898 SYN ******S*
Nov 15 23:58:28 211.95.209.173:1678 -> xxx.yyy.196.248:9898 SYN ******S*
Nov 15 23:58:28 211.95.209.173:1691 -> xxx.yyy.197.13:9898 SYN ******S*
Nov 15 23:58:28 211.95.209.173:1704 -> xxx.yyy.196.252:9898 SYN ******S*
Nov 15 23:58:28 211.95.209.173:1703 -> xxx.yyy.196.250:9898 SYN ******S*
5125
Nov 15 22:57:03 218.147.114.183:2794 -> xxx.yyy.236.81:5554 SYN ******S*
Nov 15 22:57:04 218.147.114.183:2988 -> xxx.yyy.236.81:1023 SYN ******S*
Nov 15 22:57:03 218.147.114.183:2797 -> xxx.yyy.236.83:5554 SYN ******S*
Nov 15 22:57:03 218.147.114.183:2802 -> xxx.yyy.236.87:5554 SYN ******S*
Nov 15 22:57:04 218.147.114.183:3003 -> xxx.yyy.236.87:1023 SYN ******S*
Nov 15 22:57:03 218.147.114.183:2818 -> xxx.yyy.236.95:5554 SYN ******S*
Nov 15 22:57:04 218.147.114.183:3017 -> xxx.yyy.236.95:1023 SYN ******S*
Nov 15 22:57:03 218.147.114.183:2788 -> xxx.yyy.236.77:5554 SYN ******S*
[...]
Nov 15 22:59:27 218.147.114.183:1394 -> xxx.yyy.255.205:9898 SYN ******S*
Nov 15 22:59:27 218.147.114.183:1396 -> xxx.yyy.255.207:9898 SYN ******S*
Nov 15 22:59:28 218.147.114.183:1507 -> xxx.yyy.255.224:9898 SYN ******S*
Nov 15 22:59:28 218.147.114.183:1528 -> xxx.yyy.255.241:9898 SYN ******S*
Nov 15 22:59:28 218.147.114.183:1514 -> xxx.yyy.255.231:9898 SYN ******S*
Nov 15 22:59:28 218.147.114.183:1515 -> xxx.yyy.255.232:9898 SYN ******S*
Nov 15 22:59:28 218.147.114.183:1543 -> xxx.yyy.255.248:9898 SYN ******S*
Nov 15 22:59:28 218.147.114.183:1542 -> xxx.yyy.255.247:9898 SYN ******S*
Nov 15 22:59:28 218.147.114.183:1526 -> xxx.yyy.255.240:9898 SYN ******S*
4950
Nov 15 23:08:48 222.99.158.206:1205 -> xxx.yyy.236.79:5554 SYN ******S*
Nov 15 23:08:50 222.99.158.206:1206 -> xxx.yyy.236.88:5554 SYN ******S*
Nov 15 23:08:48 222.99.158.206:1212 -> xxx.yyy.236.94:5554 SYN ******S*
Nov 15 23:08:48 222.99.158.206:1213 -> xxx.yyy.236.95:5554 SYN ******S*
Nov 15 23:08:48 222.99.158.206:1208 -> xxx.yyy.236.90:5554 SYN ******S*
Nov 15 23:08:48 222.99.158.206:1207 -> xxx.yyy.236.89:5554 SYN ******S*
Nov 15 23:08:48 222.99.158.206:1215 -> xxx.yyy.236.97:5554 SYN ******S*
Nov 15 23:08:48 222.99.158.206:1277 -> xxx.yyy.236.81:5554 SYN ******S*
[...]
Nov 15 23:13:09 222.99.158.206:3276 -> xxx.yyy.254.174:9898 SYN ******S*
Nov 15 23:13:10 222.99.158.206:1846 -> xxx.yyy.255.246:9898 SYN ******S*
Nov 15 23:13:10 222.99.158.206:1871 -> xxx.yyy.255.247:9898 SYN ******S*
Nov 15 23:13:10 222.99.158.206:4238 -> xxx.yyy.255.218:9898 SYN ******S*
Nov 15 23:13:10 222.99.158.206:4363 -> xxx.yyy.255.254:9898 SYN ******S*
Nov 15 23:13:10 222.99.158.206:1711 -> xxx.yyy.253.217:1023 SYN ******S*
Nov 15 23:13:10 222.99.158.206:4648 -> xxx.yyy.255.253:9898 SYN ******S*
Nov 15 23:13:14 222.99.158.206:4421 -> xxx.yyy.253.216:9898 SYN ******S*
4940
Nov 15 23:56:47 221.203.169.200:1081 -> xxx.yyy.215.216:5554 SYN ******S*
Nov 15 23:56:47 221.203.169.200:1078 -> xxx.yyy.215.214:5554 SYN ******S*
Nov 15 23:56:48 221.203.169.200:2324 -> xxx.yyy.215.214:1023 SYN ******S*
Nov 15 23:56:47 221.203.169.200:1086 -> xxx.yyy.215.218:5554 SYN ******S*
Nov 15 23:56:47 221.203.169.200:1087 -> xxx.yyy.215.219:5554 SYN ******S*
Nov 15 23:56:48 221.203.169.200:2334 -> xxx.yyy.215.219:1023 SYN ******S*
Nov 15 23:56:50 221.203.169.200:4024 -> xxx.yyy.215.219:9898 SYN ******S*
Nov 15 23:56:47 221.203.169.200:1099 -> xxx.yyy.215.222:5554 SYN ******S*
[...]
Nov 15 23:58:33 221.203.169.200:1211 -> xxx.yyy.236.21:9898 SYN ******S*
Nov 15 23:58:33 221.203.169.200:1194 -> xxx.yyy.236.15:9898 SYN ******S*
Nov 15 23:58:33 221.203.169.200:1307 -> xxx.yyy.236.66:9898 SYN ******S*
Nov 15 23:58:33 221.203.169.200:1308 -> xxx.yyy.236.67:9898 SYN ******S*
Nov 15 23:58:33 221.203.169.200:1319 -> xxx.yyy.236.71:9898 SYN ******S*
Nov 15 23:58:33 221.203.169.200:1317 -> xxx.yyy.236.69:9898 SYN ******S*
Nov 15 23:58:33 221.203.169.200:1322 -> xxx.yyy.236.73:9898 SYN ******S*
Nov 15 23:58:33 221.203.169.200:1323 -> xxx.yyy.236.74:9898 SYN ******S*
Nov 15 23:58:33 221.203.169.200:1325 -> xxx.yyy.236.76:9898 SYN ******S*
4919
[...]
4655
Nov 15 23:56:56 211.90.19.249:54388 -> xxx.yyy.174.230:1023 SYN ******S*
Nov 15 23:56:56 211.90.19.249:54395 -> xxx.yyy.174.235:1023 SYN ******S*
Nov 15 23:56:58 211.90.19.249:54660 -> xxx.yyy.174.235:9898 SYN ******S*
Nov 15 23:56:56 211.90.19.249:54396 -> xxx.yyy.174.236:1023 SYN ******S*
Nov 15 23:56:56 211.90.19.249:54398 -> xxx.yyy.174.232:1023 SYN ******S*
Nov 15 23:56:56 211.90.19.249:54399 -> xxx.yyy.174.233:1023 SYN ******S*
Nov 15 23:56:56 211.90.19.249:54405 -> xxx.yyy.174.238:1023 SYN ******S*
Nov 15 23:56:56 211.90.19.249:54406 -> xxx.yyy.174.237:1023 SYN ******S*
[...]
Nov 15 23:58:59 211.90.19.249:36803 -> xxx.yyy.194.196:9898 SYN ******S*
Nov 15 23:58:59 211.90.19.249:36852 -> xxx.yyy.195.82:1023 SYN ******S*
Nov 15 23:58:59 211.90.19.249:36854 -> xxx.yyy.194.244:9898 SYN ******S*
Nov 15 23:58:59 211.90.19.249:36855 -> xxx.yyy.195.83:1023 SYN ******S*
Nov 15 23:58:59 211.90.19.249:36856 -> xxx.yyy.195.84:1023 SYN ******S*
Nov 15 23:59:01 211.90.19.249:37072 -> xxx.yyy.195.42:9898 SYN ******S*
Nov 15 23:59:01 211.90.19.249:37073 -> xxx.yyy.195.51:9898 SYN ******S*
Nov 15 23:59:02 211.90.19.249:37205 -> xxx.yyy.195.85:9898 SYN ******S*
4486
Nov 15 22:56:39 221.145.19.16:3684 -> xxx.yyy.215.222:5554 SYN ******S*
Nov 15 22:56:39 221.145.19.16:3731 -> xxx.yyy.215.236:5554 SYN ******S*
Nov 15 22:56:39 221.145.19.16:3724 -> xxx.yyy.215.233:5554 SYN ******S*
Nov 15 22:56:39 221.145.19.16:3733 -> xxx.yyy.215.238:5554 SYN ******S*
Nov 15 22:56:39 221.145.19.16:3732 -> xxx.yyy.215.237:5554 SYN ******S*
Nov 15 22:56:39 221.145.19.16:3705 -> xxx.yyy.215.229:5554 SYN ******S*
Nov 15 22:56:42 221.145.19.16:4324 -> xxx.yyy.215.229:9898 SYN ******S*
Nov 15 22:56:39 221.145.19.16:3921 -> xxx.yyy.216.5:5554 SYN ******S*
[...]
Nov 15 22:58:20 221.145.19.16:3226 -> xxx.yyy.236.72:9898 SYN ******S*
Nov 15 22:58:20 221.145.19.16:3217 -> xxx.yyy.236.71:9898 SYN ******S*
Nov 15 22:58:20 221.145.19.16:3215 -> xxx.yyy.236.70:9898 SYN ******S*
Nov 15 22:58:20 221.145.19.16:3229 -> xxx.yyy.236.73:9898 SYN ******S*
Nov 15 22:58:20 221.145.19.16:3247 -> xxx.yyy.236.76:9898 SYN ******S*
Nov 15 22:58:20 221.145.19.16:3239 -> xxx.yyy.236.75:9898 SYN ******S*
Nov 15 22:58:20 221.145.19.16:3037 -> xxx.yyy.236.51:9898 SYN ******S*
Nov 15 22:58:20 221.145.19.16:3041 -> xxx.yyy.236.52:9898 SYN ******S*
Nov 15 22:58:20 221.145.19.16:3050 -> xxx.yyy.236.54:9898 SYN ******S*
4141
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list