[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Thu Nov 18 15:38:35 GMT 2004
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Nov 17 07:19:36 64.202.132.51:1428 -> xxx.yyy.1.1:1433 SYN ******S*
Nov 17 07:19:36 64.202.132.51:1429 -> xxx.yyy.1.2:1433 SYN ******S*
Nov 17 07:19:36 64.202.132.51:1431 -> xxx.yyy.1.3:1433 SYN ******S*
Nov 17 07:19:36 64.202.132.51:1432 -> xxx.yyy.1.4:1433 SYN ******S*
Nov 17 07:19:36 64.202.132.51:1435 -> xxx.yyy.1.5:1433 SYN ******S*
Nov 17 07:19:37 64.202.132.51:1436 -> xxx.yyy.1.6:1433 SYN ******S*
Nov 17 07:19:37 64.202.132.51:1438 -> xxx.yyy.1.8:1433 SYN ******S*
Nov 17 07:19:34 64.202.132.51:1439 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
Nov 17 09:57:58 64.202.132.51:2749 -> xxx.yyy.255.243:1433 SYN ******S*
Nov 17 09:57:58 64.202.132.51:2754 -> xxx.yyy.255.245:1433 SYN ******S*
Nov 17 09:57:59 64.202.132.51:2756 -> xxx.yyy.255.247:1433 SYN ******S*
Nov 17 09:57:59 64.202.132.51:2758 -> xxx.yyy.255.249:1433 SYN ******S*
Nov 17 09:57:59 64.202.132.51:2755 -> xxx.yyy.255.246:1433 SYN ******S*
Nov 17 09:57:59 64.202.132.51:2757 -> xxx.yyy.255.248:1433 SYN ******S*
Nov 17 09:57:59 64.202.132.51:2761 -> xxx.yyy.255.250:1433 SYN ******S*
Nov 17 09:57:59 64.202.132.51:2762 -> xxx.yyy.255.251:1433 SYN ******S*
Nov 17 09:57:59 64.202.132.51:2767 -> xxx.yyy.255.253:1433 SYN ******S*
91532
Nov 17 03:48:06 195.141.187.218:3109 -> xxx.yyy.1.2:400 SYN ******S*
Nov 17 03:48:05 195.141.187.218:3108 -> xxx.yyy.1.1:400 SYN ******S*
Nov 17 03:48:06 195.141.187.218:3110 -> xxx.yyy.1.3:400 SYN ******S*
Nov 17 03:48:07 195.141.187.218:3111 -> xxx.yyy.1.4:400 SYN ******S*
Nov 17 03:48:07 195.141.187.218:3112 -> xxx.yyy.1.5:400 SYN ******S*
Nov 17 03:48:07 195.141.187.218:3113 -> xxx.yyy.1.6:400 SYN ******S*
Nov 17 03:48:07 195.141.187.218:3114 -> xxx.yyy.1.7:400 SYN ******S*
Nov 17 03:48:07 195.141.187.218:3115 -> xxx.yyy.1.8:400 SYN ******S*
[...]
Nov 17 03:59:52 195.141.187.218:3027 -> xxx.yyy.255.240:400 SYN ******S*
Nov 17 03:59:52 195.141.187.218:3041 -> xxx.yyy.255.254:400 SYN ******S*
Nov 17 03:59:52 195.141.187.218:3038 -> xxx.yyy.255.251:400 SYN ******S*
Nov 17 03:59:52 195.141.187.218:3039 -> xxx.yyy.255.252:400 SYN ******S*
Nov 17 03:59:52 195.141.187.218:3035 -> xxx.yyy.255.248:400 SYN ******S*
Nov 17 03:59:52 195.141.187.218:3036 -> xxx.yyy.255.249:400 SYN ******S*
Nov 17 03:59:52 195.141.187.218:3040 -> xxx.yyy.255.253:400 SYN ******S*
Nov 17 03:59:52 195.141.187.218:3037 -> xxx.yyy.255.250:400 SYN ******S*
66211
Nov 17 17:11:55 212.204.177.14:1681 -> xxx.yyy.1.0:1433 SYN ******S*
Nov 17 17:11:58 212.204.177.14:1683 -> xxx.yyy.1.2:1433 SYN ******S*
Nov 17 17:11:58 212.204.177.14:1684 -> xxx.yyy.1.3:1433 SYN ******S*
Nov 17 17:11:55 212.204.177.14:1687 -> xxx.yyy.1.5:1433 SYN ******S*
Nov 17 17:11:55 212.204.177.14:1688 -> xxx.yyy.1.6:1433 SYN ******S*
Nov 17 17:11:58 212.204.177.14:1690 -> xxx.yyy.1.8:1433 SYN ******S*
Nov 17 17:11:55 212.204.177.14:1693 -> xxx.yyy.1.10:1433 SYN ******S*
Nov 17 17:11:58 212.204.177.14:1695 -> xxx.yyy.1.11:1433 SYN ******S*
[...]
Nov 17 20:30:35 212.204.177.14:4391 -> xxx.yyy.222.94:1433 SYN ******S*
Nov 17 20:30:35 212.204.177.14:4371 -> xxx.yyy.222.74:1433 SYN ******S*
Nov 17 20:30:35 212.204.177.14:4395 -> xxx.yyy.222.98:1433 SYN ******S*
Nov 17 20:30:35 212.204.177.14:4396 -> xxx.yyy.222.99:1433 SYN ******S*
Nov 17 20:30:35 212.204.177.14:4397 -> xxx.yyy.222.100:1433 SYN ******S*
Nov 17 20:30:36 212.204.177.14:4400 -> xxx.yyy.222.103:1433 SYN ******S*
Nov 17 20:30:36 212.204.177.14:4403 -> xxx.yyy.222.106:1433 SYN ******S*
Nov 17 20:30:36 212.204.177.14:4404 -> xxx.yyy.222.107:1433 SYN ******S*
55137
Nov 17 20:42:47 82.37.185.132:49163 -> xxx.yyy.1.4:1433 SYN ******S*
Nov 17 20:42:47 82.37.185.132:49164 -> xxx.yyy.1.5:1433 SYN ******S*
Nov 17 20:42:47 82.37.185.132:49165 -> xxx.yyy.1.6:1433 SYN ******S*
Nov 17 20:42:47 82.37.185.132:49171 -> xxx.yyy.1.12:1433 SYN ******S*
Nov 17 20:42:47 82.37.185.132:49170 -> xxx.yyy.1.11:1433 SYN ******S*
Nov 17 20:42:47 82.37.185.132:49174 -> xxx.yyy.1.15:1433 SYN ******S*
Nov 17 20:42:47 82.37.185.132:49176 -> xxx.yyy.1.17:1433 SYN ******S*
Nov 17 20:42:47 82.37.185.132:49177 -> xxx.yyy.1.18:1433 SYN ******S*
[...]
Nov 17 22:37:15 82.37.185.132:60562 -> xxx.yyy.255.232:1433 SYN ******S*
Nov 17 22:37:15 82.37.185.132:60568 -> xxx.yyy.255.233:1433 SYN ******S*
Nov 17 22:37:15 82.37.185.132:60570 -> xxx.yyy.255.234:1433 SYN ******S*
Nov 17 22:37:15 82.37.185.132:60573 -> xxx.yyy.255.235:1433 SYN ******S*
Nov 17 22:37:16 82.37.185.132:60599 -> xxx.yyy.255.242:1433 SYN ******S*
Nov 17 22:37:16 82.37.185.132:60612 -> xxx.yyy.255.251:1433 SYN ******S*
Nov 17 22:37:16 82.37.185.132:60613 -> xxx.yyy.255.252:1433 SYN ******S*
Nov 17 22:37:16 82.37.185.132:60619 -> xxx.yyy.255.254:1433 SYN ******S*
52570
Nov 17 02:23:46 65.68.89.105:4442 -> xxx.yyy.1.3:1433 SYN ******S*
Nov 17 02:23:47 65.68.89.105:4448 -> xxx.yyy.1.6:1433 SYN ******S*
Nov 17 02:23:47 65.68.89.105:4449 -> xxx.yyy.1.7:1433 SYN ******S*
Nov 17 02:23:44 65.68.89.105:4450 -> xxx.yyy.1.8:1433 SYN ******S*
Nov 17 02:23:47 65.68.89.105:4452 -> xxx.yyy.1.10:1433 SYN ******S*
Nov 17 02:23:47 65.68.89.105:4456 -> xxx.yyy.1.14:1433 SYN ******S*
Nov 17 02:23:47 65.68.89.105:4462 -> xxx.yyy.1.18:1433 SYN ******S*
Nov 17 02:23:47 65.68.89.105:4465 -> xxx.yyy.1.20:1433 SYN ******S*
[...]
Nov 17 02:28:07 65.68.89.105:2422 -> xxx.yyy.255.241:1433 SYN ******S*
Nov 17 02:28:07 65.68.89.105:2418 -> xxx.yyy.255.238:1433 SYN ******S*
Nov 17 02:28:07 65.68.89.105:2398 -> xxx.yyy.255.219:1433 SYN ******S*
Nov 17 02:28:07 65.68.89.105:2395 -> xxx.yyy.255.216:1433 SYN ******S*
Nov 17 02:28:07 65.68.89.105:2415 -> xxx.yyy.255.235:1433 SYN ******S*
Nov 17 02:28:07 65.68.89.105:2412 -> xxx.yyy.255.232:1433 SYN ******S*
Nov 17 02:28:07 65.68.89.105:2432 -> xxx.yyy.255.251:1433 SYN ******S*
Nov 17 02:28:07 65.68.89.105:2402 -> xxx.yyy.255.223:1433 SYN ******S*
50976
Nov 17 05:05:18 198.213.51.27:4970 -> xxx.yyy.1.8:8000 SYN ******S*
Nov 17 05:05:18 198.213.51.27:4971 -> xxx.yyy.1.9:8000 SYN ******S*
Nov 17 05:05:18 198.213.51.27:4972 -> xxx.yyy.1.10:8000 SYN ******S*
Nov 17 05:05:18 198.213.51.27:4973 -> xxx.yyy.1.11:8000 SYN ******S*
Nov 17 05:05:21 198.213.51.27:4974 -> xxx.yyy.1.12:8000 SYN ******S*
Nov 17 05:05:19 198.213.51.27:4975 -> xxx.yyy.1.13:8000 SYN ******S*
Nov 17 05:05:18 198.213.51.27:4976 -> xxx.yyy.1.14:8000 SYN ******S*
Nov 17 05:05:19 198.213.51.27:1034 -> xxx.yyy.1.41:8000 SYN ******S*
[...]
Nov 17 13:49:37 198.213.51.27:4179 -> xxx.yyy.zzz.211:8000 SYN ******S*
Nov 17 13:49:37 198.213.51.27:4153 -> xxx.yyy.zzz.186:8000 SYN ******S*
Nov 17 13:49:37 198.213.51.27:4223 -> xxx.yyy.zzz.228:8000 SYN ******S*
Nov 17 13:49:37 198.213.51.27:4156 -> xxx.yyy.zzz.189:8000 SYN ******S*
Nov 17 13:49:37 198.213.51.27:3916 -> xxx.yyy.zzz.130:8000 SYN ******S*
Nov 17 13:49:37 198.213.51.27:4177 -> xxx.yyy.zzz.209:8000 SYN ******S*
Nov 17 13:49:37 198.213.51.27:3978 -> xxx.yyy.zzz.167:8000 SYN ******S*
Nov 17 13:49:37 198.213.51.27:4255 -> xxx.yyy.zzz.254:8000 SYN ******S*
Nov 17 13:49:37 198.213.51.27:4252 -> xxx.yyy.zzz.252:8000 SYN ******S*
46465
Nov 17 21:13:46 212.82.195.210:4412 -> xxx.yyy.1.2:443 SYN ******S*
Nov 17 21:13:48 212.82.195.210:4413 -> xxx.yyy.1.3:443 SYN ******S*
Nov 17 21:13:49 212.82.195.210:4414 -> xxx.yyy.1.4:443 SYN ******S*
Nov 17 21:13:49 212.82.195.210:4415 -> xxx.yyy.1.5:443 SYN ******S*
Nov 17 21:13:49 212.82.195.210:4416 -> xxx.yyy.1.6:443 SYN ******S*
Nov 17 21:13:46 212.82.195.210:4417 -> xxx.yyy.1.7:443 SYN ******S*
Nov 17 21:13:46 212.82.195.210:4418 -> xxx.yyy.1.8:443 SYN ******S*
Nov 17 21:13:46 212.82.195.210:4419 -> xxx.yyy.1.9:443 SYN ******S*
[...]
Nov 17 21:27:54 212.82.195.210:2088 -> xxx.yyy.255.241:443 SYN ******S*
Nov 17 21:27:54 212.82.195.210:2090 -> xxx.yyy.255.243:443 SYN ******S*
Nov 17 21:27:54 212.82.195.210:2092 -> xxx.yyy.255.245:443 SYN ******S*
Nov 17 21:27:54 212.82.195.210:2093 -> xxx.yyy.255.246:443 SYN ******S*
Nov 17 21:27:54 212.82.195.210:2095 -> xxx.yyy.255.248:443 SYN ******S*
Nov 17 21:27:54 212.82.195.210:2098 -> xxx.yyy.255.251:443 SYN ******S*
Nov 17 21:27:54 212.82.195.210:2099 -> xxx.yyy.255.252:443 SYN ******S*
Nov 17 21:27:54 212.82.195.210:2100 -> xxx.yyy.255.253:443 SYN ******S*
Nov 17 21:27:54 212.82.195.210:2101 -> xxx.yyy.255.254:443 SYN ******S*
43697
Nov 17 00:00:06 60.37.250.119:1824 -> xxx.yyy.162.158:1433 SYN ******S*
Nov 17 00:00:10 60.37.250.119:1831 -> xxx.yyy.162.161:1433 SYN ******S*
Nov 17 00:00:10 60.37.250.119:1834 -> xxx.yyy.162.162:1433 SYN ******S*
Nov 17 00:00:07 60.37.250.119:1842 -> xxx.yyy.162.164:1433 SYN ******S*
Nov 17 00:00:10 60.37.250.119:1843 -> xxx.yyy.162.165:1433 SYN ******S*
Nov 17 00:00:10 60.37.250.119:1844 -> xxx.yyy.162.166:1433 SYN ******S*
Nov 17 00:00:10 60.37.250.119:1849 -> xxx.yyy.162.167:1433 SYN ******S*
Nov 17 00:00:10 60.37.250.119:1851 -> xxx.yyy.162.169:1433 SYN ******S*
[...]
Nov 17 00:42:18 60.37.250.119:3608 -> xxx.yyy.255.243:1433 SYN ******S*
Nov 17 00:42:18 60.37.250.119:3615 -> xxx.yyy.255.246:1433 SYN ******S*
Nov 17 00:42:18 60.37.250.119:3616 -> xxx.yyy.255.247:1433 SYN ******S*
Nov 17 00:42:18 60.37.250.119:3623 -> xxx.yyy.255.248:1433 SYN ******S*
Nov 17 00:42:18 60.37.250.119:3624 -> xxx.yyy.255.249:1433 SYN ******S*
Nov 17 00:42:18 60.37.250.119:3628 -> xxx.yyy.255.250:1433 SYN ******S*
Nov 17 00:42:19 60.37.250.119:3633 -> xxx.yyy.255.251:1433 SYN ******S*
Nov 17 00:42:19 60.37.250.119:3642 -> xxx.yyy.255.252:1433 SYN ******S*
Nov 17 00:42:19 60.37.250.119:3646 -> xxx.yyy.255.254:1433 SYN ******S*
39697
Nov 17 04:35:21 61.134.47.182:4225 -> xxx.yyy.1.5:4000 SYN ******S*
Nov 17 04:35:18 61.134.47.182:4226 -> xxx.yyy.1.6:4000 SYN ******S*
Nov 17 04:35:18 61.134.47.182:4227 -> xxx.yyy.1.7:4000 SYN ******S*
Nov 17 04:35:18 61.134.47.182:4229 -> xxx.yyy.1.9:4000 SYN ******S*
Nov 17 04:35:20 61.134.47.182:4231 -> xxx.yyy.1.11:4000 SYN ******S*
Nov 17 04:35:18 61.134.47.182:4233 -> xxx.yyy.1.13:4000 SYN ******S*
Nov 17 04:35:21 61.134.47.182:4235 -> xxx.yyy.1.15:4000 SYN ******S*
Nov 17 04:35:21 61.134.47.182:4236 -> xxx.yyy.1.16:4000 SYN ******S*
[...]
Nov 17 04:47:06 61.134.47.182:4297 -> xxx.yyy.255.237:4000 SYN ******S*
Nov 17 04:47:06 61.134.47.182:4298 -> xxx.yyy.255.238:4000 SYN ******S*
Nov 17 04:47:06 61.134.47.182:4304 -> xxx.yyy.255.244:4000 SYN ******S*
Nov 17 04:47:06 61.134.47.182:4305 -> xxx.yyy.255.245:4000 SYN ******S*
Nov 17 04:47:06 61.134.47.182:4302 -> xxx.yyy.255.242:4000 SYN ******S*
Nov 17 04:47:06 61.134.47.182:4307 -> xxx.yyy.255.247:4000 SYN ******S*
Nov 17 04:47:06 61.134.47.182:4308 -> xxx.yyy.255.248:4000 SYN ******S*
Nov 17 04:47:06 61.134.47.182:4309 -> xxx.yyy.255.249:4000 SYN ******S*
Nov 17 04:47:06 61.134.47.182:4314 -> xxx.yyy.255.254:4000 SYN ******S*
38401
Nov 17 22:46:53 164.8.65.115:3449 -> xxx.yyy.1.12:1433 SYN ******S*
Nov 17 22:46:56 164.8.65.115:3450 -> xxx.yyy.1.13:1433 SYN ******S*
Nov 17 22:46:53 164.8.65.115:3451 -> xxx.yyy.1.14:1433 SYN ******S*
Nov 17 22:46:53 164.8.65.115:3452 -> xxx.yyy.1.15:1433 SYN ******S*
Nov 17 22:46:53 164.8.65.115:3455 -> xxx.yyy.1.18:1433 SYN ******S*
Nov 17 22:46:56 164.8.65.115:3456 -> xxx.yyy.1.19:1433 SYN ******S*
Nov 17 22:46:53 164.8.65.115:3458 -> xxx.yyy.1.21:1433 SYN ******S*
Nov 17 22:46:56 164.8.65.115:3459 -> xxx.yyy.1.22:1433 SYN ******S*
[...]
Nov 17 23:25:05 164.8.65.115:3030 -> xxx.yyy.255.238:1433 SYN ******S*
Nov 17 23:25:05 164.8.65.115:3031 -> xxx.yyy.255.239:1433 SYN ******S*
Nov 17 23:25:05 164.8.65.115:3035 -> xxx.yyy.255.243:1433 SYN ******S*
Nov 17 23:25:05 164.8.65.115:3036 -> xxx.yyy.255.244:1433 SYN ******S*
Nov 17 23:25:05 164.8.65.115:3037 -> xxx.yyy.255.245:1433 SYN ******S*
Nov 17 23:25:05 164.8.65.115:3039 -> xxx.yyy.255.247:1433 SYN ******S*
Nov 17 23:25:05 164.8.65.115:3044 -> xxx.yyy.255.252:1433 SYN ******S*
Nov 17 23:25:05 164.8.65.115:3046 -> xxx.yyy.255.254:1433 SYN ******S*
32597
Nov 17 13:39:32 64.2.191.149:1337 -> xxx.yyy.1.3:1433 SYN ******S*
Nov 17 13:39:32 64.2.191.149:1340 -> xxx.yyy.1.6:1433 SYN ******S*
Nov 17 13:39:32 64.2.191.149:1352 -> xxx.yyy.1.18:1433 SYN ******S*
Nov 17 13:39:32 64.2.191.149:1353 -> xxx.yyy.1.17:1433 SYN ******S*
Nov 17 13:39:32 64.2.191.149:1354 -> xxx.yyy.1.20:1433 SYN ******S*
Nov 17 13:39:32 64.2.191.149:1358 -> xxx.yyy.1.24:1433 SYN ******S*
Nov 17 13:39:32 64.2.191.149:1359 -> xxx.yyy.1.23:1433 SYN ******S*
Nov 17 13:39:32 64.2.191.149:1362 -> xxx.yyy.1.27:1433 SYN ******S*
[...]
Nov 17 13:46:42 64.2.191.149:1046 -> xxx.yyy.255.231:1433 SYN ******S*
Nov 17 13:46:42 64.2.191.149:1047 -> xxx.yyy.255.232:1433 SYN ******S*
Nov 17 13:46:42 64.2.191.149:1048 -> xxx.yyy.255.233:1433 SYN ******S*
Nov 17 13:46:42 64.2.191.149:1058 -> xxx.yyy.255.243:1433 SYN ******S*
Nov 17 13:46:42 64.2.191.149:1059 -> xxx.yyy.255.244:1433 SYN ******S*
Nov 17 13:46:42 64.2.191.149:1060 -> xxx.yyy.255.245:1433 SYN ******S*
Nov 17 13:46:42 64.2.191.149:1063 -> xxx.yyy.255.248:1433 SYN ******S*
Nov 17 13:46:42 64.2.191.149:1066 -> xxx.yyy.255.251:1433 SYN ******S*
31248
Nov 17 10:30:59 159.134.199.143:4594 -> xxx.yyy.1.1:4899 SYN ******S*
Nov 17 10:30:59 159.134.199.143:4601 -> xxx.yyy.1.6:4899 SYN ******S*
Nov 17 10:30:59 159.134.199.143:4600 -> xxx.yyy.1.5:4899 SYN ******S*
Nov 17 10:30:59 159.134.199.143:4602 -> xxx.yyy.1.7:4899 SYN ******S*
Nov 17 10:30:59 159.134.199.143:4604 -> xxx.yyy.1.8:4899 SYN ******S*
Nov 17 10:30:59 159.134.199.143:4607 -> xxx.yyy.1.11:4899 SYN ******S*
Nov 17 10:30:59 159.134.199.143:4611 -> xxx.yyy.1.14:4899 SYN ******S*
Nov 17 10:30:59 159.134.199.143:4610 -> xxx.yyy.1.13:4899 SYN ******S*
[...]
Nov 17 10:42:20 159.134.199.143:3738 -> xxx.yyy.254.249:4899 SYN ******S*
Nov 17 10:42:20 159.134.199.143:3745 -> xxx.yyy.254.251:4899 SYN ******S*
Nov 17 10:42:20 159.134.199.143:3750 -> xxx.yyy.254.252:4899 SYN ******S*
Nov 17 10:42:20 159.134.199.143:3752 -> xxx.yyy.254.253:4899 SYN ******S*
Nov 17 10:42:20 159.134.199.143:3189 -> xxx.yyy.254.31:4899 SYN ******S*
Nov 17 10:42:23 159.134.199.143:3617 -> xxx.yyy.254.197:4899 SYN ******S*
Nov 17 10:42:23 159.134.199.143:3618 -> xxx.yyy.254.198:4899 SYN ******S*
Nov 17 10:42:23 159.134.199.143:3616 -> xxx.yyy.254.196:4899 SYN ******S*
Nov 17 10:42:23 159.134.199.143:3619 -> xxx.yyy.254.199:4899 SYN ******S*
23031
[...]
20349
[...]
19911
Nov 17 06:09:34 82.65.98.117:3947 -> xxx.yyy.68.39:139 SYN ******S*
Nov 17 06:09:36 82.65.98.117:3978 -> xxx.yyy.68.40:139 SYN ******S*
Nov 17 06:09:37 82.65.98.117:3995 -> xxx.yyy.68.41:139 SYN ******S*
Nov 17 06:09:37 82.65.98.117:4011 -> xxx.yyy.68.42:139 SYN ******S*
Nov 17 06:09:38 82.65.98.117:4021 -> xxx.yyy.68.43:139 SYN ******S*
Nov 17 06:09:36 82.65.98.117:4034 -> xxx.yyy.68.44:139 SYN ******S*
Nov 17 06:09:37 82.65.98.117:4051 -> xxx.yyy.68.45:139 SYN ******S*
Nov 17 06:09:38 82.65.98.117:4060 -> xxx.yyy.68.46:139 SYN ******S*
[...]
Nov 17 08:47:20 82.65.98.117:4879 -> xxx.yyy.105.14:139 SYN ******S*
Nov 17 08:47:21 82.65.98.117:4872 -> xxx.yyy.105.12:139 SYN ******S*
Nov 17 08:47:21 82.65.98.117:4840 -> xxx.yyy.105.6:139 SYN ******S*
Nov 17 08:47:21 82.65.98.117:4884 -> xxx.yyy.105.15:139 SYN ******S*
Nov 17 08:47:22 82.65.98.117:4848 -> xxx.yyy.105.7:139 SYN ******S*
Nov 17 08:47:22 82.65.98.117:4888 -> xxx.yyy.105.16:139 SYN ******S*
Nov 17 08:47:23 82.65.98.117:4854 -> xxx.yyy.105.8:139 SYN ******S*
Nov 17 08:47:23 82.65.98.117:4879 -> xxx.yyy.105.14:139 SYN ******S*
Nov 17 08:47:23 82.65.98.117:4890 -> xxx.yyy.105.17:139 SYN ******S*
19170
[...]
18110
[...]
16732
[...]
15813
Nov 17 06:57:07 213.37.55.156:1152 -> xxx.yyy.215.211:5554 SYN ******S*
Nov 17 06:57:08 213.37.55.156:1830 -> xxx.yyy.215.211:1023 SYN ******S*
Nov 17 06:57:10 213.37.55.156:2796 -> xxx.yyy.215.211:9898 SYN ******S*
Nov 17 06:57:07 213.37.55.156:1163 -> xxx.yyy.215.212:5554 SYN ******S*
Nov 17 06:57:08 213.37.55.156:1838 -> xxx.yyy.215.212:1023 SYN ******S*
Nov 17 06:57:10 213.37.55.156:2801 -> xxx.yyy.215.212:9898 SYN ******S*
Nov 17 06:57:07 213.37.55.156:1146 -> xxx.yyy.215.210:5554 SYN ******S*
Nov 17 06:57:10 213.37.55.156:2795 -> xxx.yyy.215.210:9898 SYN ******S*
[...]
Nov 17 06:59:27 213.37.55.156:4639 -> xxx.yyy.235.125:1023 SYN ******S*
Nov 17 06:59:29 213.37.55.156:1806 -> xxx.yyy.235.125:9898 SYN ******S*
Nov 17 06:59:28 213.37.55.156:1227 -> xxx.yyy.235.93:9898 SYN ******S*
Nov 17 06:59:28 213.37.55.156:1388 -> xxx.yyy.235.225:5554 SYN ******S*
Nov 17 06:59:29 213.37.55.156:1813 -> xxx.yyy.235.225:1023 SYN ******S*
Nov 17 06:59:28 213.37.55.156:1387 -> xxx.yyy.235.224:5554 SYN ******S*
Nov 17 06:59:29 213.37.55.156:1812 -> xxx.yyy.235.224:1023 SYN ******S*
Nov 17 06:59:31 213.37.55.156:2648 -> xxx.yyy.235.225:9898 SYN ******S*
Nov 17 06:59:31 213.37.55.156:2649 -> xxx.yyy.235.224:9898 SYN ******S*
14212
[...]
13056
Nov 17 00:00:05 203.88.244.104:3117 -> xxx.yyy.185.240:1433 SYN ******S*
Nov 17 00:00:05 203.88.244.104:3110 -> xxx.yyy.185.238:1433 SYN ******S*
Nov 17 00:00:05 203.88.244.104:3107 -> xxx.yyy.185.237:1433 SYN ******S*
Nov 17 00:00:05 203.88.244.104:3106 -> xxx.yyy.185.236:1433 SYN ******S*
Nov 17 00:00:05 203.88.244.104:4119 -> xxx.yyy.186.71:1433 SYN ******S*
Nov 17 00:00:06 203.88.244.104:3435 -> xxx.yyy.185.242:1433 SYN ******S*
Nov 17 00:00:06 203.88.244.104:3441 -> xxx.yyy.185.245:1433 SYN ******S*
Nov 17 00:00:06 203.88.244.104:3430 -> xxx.yyy.185.241:1433 SYN ******S*
[...]
Nov 17 00:49:56 203.88.244.104:3225 -> xxx.yyy.255.249:1433 SYN ******S*
Nov 17 00:49:57 203.88.244.104:3196 -> xxx.yyy.255.244:1433 SYN ******S*
Nov 17 00:49:57 203.88.244.104:3220 -> xxx.yyy.255.247:1433 SYN ******S*
Nov 17 00:49:57 203.88.244.104:3223 -> xxx.yyy.255.248:1433 SYN ******S*
Nov 17 00:49:57 203.88.244.104:4489 -> xxx.yyy.255.251:1433 SYN ******S*
Nov 17 00:49:57 203.88.244.104:4284 -> xxx.yyy.255.250:1433 SYN ******S*
Nov 17 00:50:00 203.88.244.104:4284 -> xxx.yyy.255.250:1433 SYN ******S*
Nov 17 00:50:00 203.88.244.104:4489 -> xxx.yyy.255.251:1433 SYN ******S*
11830
[...]
11079
[...]
9118
Nov 17 15:31:56 132.206.13.59:2427 -> xxx.yyy.74.114:363 SYN ******S*
Nov 17 15:31:56 132.206.13.59:2428 -> xxx.yyy.74.114:367 SYN ******S*
Nov 17 15:31:56 132.206.13.59:2429 -> xxx.yyy.74.114:371 SYN ******S*
Nov 17 15:31:56 132.206.13.59:2430 -> xxx.yyy.74.114:374 SYN ******S*
Nov 17 15:31:56 132.206.13.59:2431 -> xxx.yyy.74.114:377 SYN ******S*
Nov 17 15:32:02 132.206.13.59:2446 -> xxx.yyy.74.114:374 SYN ******S*
Nov 17 15:32:02 132.206.13.59:2447 -> xxx.yyy.74.114:371 SYN ******S*
Nov 17 15:32:02 132.206.13.59:2448 -> xxx.yyy.74.114:367 SYN ******S*
[...]
Nov 17 23:59:53 132.206.13.59:1547 -> xxx.yyy.74.114:371 SYN ******S*
Nov 17 23:59:53 132.206.13.59:1580 -> xxx.yyy.74.114:377 SYN ******S*
Nov 17 23:59:56 132.206.13.59:1591 -> xxx.yyy.74.114:363 SYN ******S*
Nov 17 23:59:56 132.206.13.59:1615 -> xxx.yyy.77.190:228 SYN ******S*
Nov 17 23:59:57 132.206.13.59:1618 -> xxx.yyy.77.190:231 SYN ******S*
Nov 17 23:59:57 132.206.13.59:1620 -> xxx.yyy.77.190:234 SYN ******S*
Nov 17 23:59:59 132.206.13.59:1615 -> xxx.yyy.77.190:228 SYN ******S*
Nov 17 23:59:59 132.206.13.59:1633 -> xxx.yyy.74.114:374 SYN ******S*
Nov 17 23:59:59 132.206.13.59:1580 -> xxx.yyy.74.114:377 SYN ******S*
9091
[...]
8227
[...]
8193
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list