[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Fri Nov 19 13:16:55 GMT 2004
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Nov 18 04:21:07 218.28.24.194:45284 -> xxx.yyy.1.0:1433 SYN ******S*
Nov 18 04:21:07 218.28.24.194:45287 -> xxx.yyy.1.1:1433 SYN ******S*
Nov 18 04:21:07 218.28.24.194:45288 -> xxx.yyy.1.2:1433 SYN ******S*
Nov 18 04:21:07 218.28.24.194:45289 -> xxx.yyy.1.3:1433 SYN ******S*
Nov 18 04:21:07 218.28.24.194:45296 -> xxx.yyy.1.5:1433 SYN ******S*
Nov 18 04:21:07 218.28.24.194:45302 -> xxx.yyy.1.7:1433 SYN ******S*
Nov 18 04:21:07 218.28.24.194:45301 -> xxx.yyy.1.6:1433 SYN ******S*
Nov 18 04:21:07 218.28.24.194:45303 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Nov 18 08:11:04 218.28.24.194:13973 -> xxx.yyy.255.244:1433 SYN ******S*
Nov 18 08:11:04 218.28.24.194:43187 -> xxx.yyy.255.245:1433 SYN ******S*
Nov 18 08:11:04 218.28.24.194:18963 -> xxx.yyy.255.250:1433 SYN ******S*
Nov 18 08:11:04 218.28.24.194:41642 -> xxx.yyy.255.247:1433 SYN ******S*
Nov 18 08:11:04 218.28.24.194:30718 -> xxx.yyy.255.246:1433 SYN ******S*
Nov 18 08:11:04 218.28.24.194:32475 -> xxx.yyy.255.251:1433 SYN ******S*
Nov 18 08:11:05 218.28.24.194:25869 -> xxx.yyy.255.252:1433 SYN ******S*
Nov 18 08:11:06 218.28.24.194:53536 -> xxx.yyy.255.254:1433 SYN ******S*
115844
Nov 18 02:31:02 213.82.33.5:16980 -> xxx.yyy.1.1:1433 SYN ******S*
Nov 18 02:31:02 213.82.33.5:16984 -> xxx.yyy.1.2:1433 SYN ******S*
Nov 18 02:31:02 213.82.33.5:16988 -> xxx.yyy.1.3:1433 SYN ******S*
Nov 18 02:31:02 213.82.33.5:16995 -> xxx.yyy.1.5:1433 SYN ******S*
Nov 18 02:31:02 213.82.33.5:16999 -> xxx.yyy.1.6:1433 SYN ******S*
Nov 18 02:31:02 213.82.33.5:17003 -> xxx.yyy.1.7:1433 SYN ******S*
Nov 18 02:31:02 213.82.33.5:17009 -> xxx.yyy.1.8:1433 SYN ******S*
Nov 18 02:31:02 213.82.33.5:17011 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
Nov 18 02:47:52 213.82.33.5:59232 -> xxx.yyy.255.250:1433 SYN ******S*
Nov 18 02:47:52 213.82.33.5:59222 -> xxx.yyy.255.247:1433 SYN ******S*
Nov 18 02:47:52 213.82.33.5:59214 -> xxx.yyy.255.245:1433 SYN ******S*
Nov 18 02:47:52 213.82.33.5:59226 -> xxx.yyy.255.248:1433 SYN ******S*
Nov 18 02:47:52 213.82.33.5:59218 -> xxx.yyy.255.246:1433 SYN ******S*
Nov 18 02:47:52 213.82.33.5:59237 -> xxx.yyy.255.251:1433 SYN ******S*
Nov 18 02:47:52 213.82.33.5:59245 -> xxx.yyy.255.253:1433 SYN ******S*
Nov 18 02:47:52 213.82.33.5:59241 -> xxx.yyy.255.252:1433 SYN ******S*
69384
Nov 18 05:29:02 218.148.10.65:4369 -> xxx.yyy.1.1:6129 SYN ******S*
Nov 18 05:29:02 218.148.10.65:4371 -> xxx.yyy.1.2:6129 SYN ******S*
Nov 18 05:29:02 218.148.10.65:4373 -> xxx.yyy.1.3:6129 SYN ******S*
Nov 18 05:29:03 218.148.10.65:4383 -> xxx.yyy.1.8:6129 SYN ******S*
Nov 18 05:29:03 218.148.10.65:4375 -> xxx.yyy.1.4:6129 SYN ******S*
Nov 18 05:29:03 218.148.10.65:4377 -> xxx.yyy.1.5:6129 SYN ******S*
Nov 18 05:29:03 218.148.10.65:4379 -> xxx.yyy.1.6:6129 SYN ******S*
Nov 18 05:29:00 218.148.10.65:4387 -> xxx.yyy.1.10:6129 SYN ******S*
[...]
Nov 18 05:40:59 218.148.10.65:1346 -> xxx.yyy.255.237:6129 SYN ******S*
Nov 18 05:40:59 218.148.10.65:1356 -> xxx.yyy.255.247:6129 SYN ******S*
Nov 18 05:40:59 218.148.10.65:1353 -> xxx.yyy.255.244:6129 SYN ******S*
Nov 18 05:40:59 218.148.10.65:1355 -> xxx.yyy.255.246:6129 SYN ******S*
Nov 18 05:40:59 218.148.10.65:1357 -> xxx.yyy.255.248:6129 SYN ******S*
Nov 18 05:40:59 218.148.10.65:1360 -> xxx.yyy.255.251:6129 SYN ******S*
Nov 18 05:40:59 218.148.10.65:1362 -> xxx.yyy.255.253:6129 SYN ******S*
Nov 18 05:40:59 218.148.10.65:1363 -> xxx.yyy.255.254:6129 SYN ******S*
Nov 18 05:40:59 218.148.10.65:1361 -> xxx.yyy.255.252:6129 SYN ******S*
66283
Nov 18 23:07:21 211.220.223.92:4305 -> xxx.yyy.1.1:4000 SYN ******S*
Nov 18 23:07:22 211.220.223.92:4307 -> xxx.yyy.1.3:4000 SYN ******S*
Nov 18 23:07:21 211.220.223.92:4308 -> xxx.yyy.1.4:4000 SYN ******S*
Nov 18 23:07:21 211.220.223.92:4314 -> xxx.yyy.1.10:4000 SYN ******S*
Nov 18 23:07:21 211.220.223.92:4317 -> xxx.yyy.1.13:4000 SYN ******S*
Nov 18 23:07:24 211.220.223.92:4312 -> xxx.yyy.1.8:4000 SYN ******S*
Nov 18 23:07:22 211.220.223.92:4318 -> xxx.yyy.1.14:4000 SYN ******S*
Nov 18 23:07:22 211.220.223.92:4320 -> xxx.yyy.1.16:4000 SYN ******S*
[...]
Nov 18 23:19:25 211.220.223.92:2955 -> xxx.yyy.255.237:4000 SYN ******S*
Nov 18 23:19:25 211.220.223.92:2965 -> xxx.yyy.255.247:4000 SYN ******S*
Nov 18 23:19:25 211.220.223.92:2967 -> xxx.yyy.255.249:4000 SYN ******S*
Nov 18 23:19:25 211.220.223.92:2970 -> xxx.yyy.255.251:4000 SYN ******S*
Nov 18 23:19:25 211.220.223.92:2971 -> xxx.yyy.255.252:4000 SYN ******S*
Nov 18 23:19:25 211.220.223.92:2968 -> xxx.yyy.255.250:4000 SYN ******S*
Nov 18 23:19:25 211.220.223.92:2972 -> xxx.yyy.255.253:4000 SYN ******S*
Nov 18 23:19:25 211.220.223.92:2966 -> xxx.yyy.255.248:4000 SYN ******S*
41113
Nov 18 23:08:04 217.220.247.92:3489 -> xxx.yyy.1.7:1433 SYN ******S*
Nov 18 23:08:04 217.220.247.92:3491 -> xxx.yyy.1.9:1433 SYN ******S*
Nov 18 23:08:07 217.220.247.92:3492 -> xxx.yyy.1.10:1433 SYN ******S*
Nov 18 23:08:04 217.220.247.92:3497 -> xxx.yyy.1.15:1433 SYN ******S*
Nov 18 23:08:07 217.220.247.92:3498 -> xxx.yyy.1.16:1433 SYN ******S*
Nov 18 23:08:05 217.220.247.92:3499 -> xxx.yyy.1.17:1433 SYN ******S*
Nov 18 23:08:05 217.220.247.92:3501 -> xxx.yyy.1.19:1433 SYN ******S*
Nov 18 23:08:05 217.220.247.92:3502 -> xxx.yyy.1.20:1433 SYN ******S*
[...]
Nov 18 23:19:48 217.220.247.92:3367 -> xxx.yyy.255.202:1433 SYN ******S*
Nov 18 23:19:48 217.220.247.92:3392 -> xxx.yyy.255.225:1433 SYN ******S*
Nov 18 23:19:48 217.220.247.92:3388 -> xxx.yyy.255.222:1433 SYN ******S*
Nov 18 23:19:48 217.220.247.92:3395 -> xxx.yyy.255.228:1433 SYN ******S*
Nov 18 23:19:48 217.220.247.92:3397 -> xxx.yyy.255.230:1433 SYN ******S*
Nov 18 23:19:48 217.220.247.92:3408 -> xxx.yyy.255.241:1433 SYN ******S*
Nov 18 23:19:48 217.220.247.92:3407 -> xxx.yyy.255.240:1433 SYN ******S*
Nov 18 23:19:48 217.220.247.92:3420 -> xxx.yyy.255.253:1433 SYN ******S*
39733
Nov 18 21:40:58 82.126.211.155:4720 -> xxx.yyy.1.1:21 SYN ******S*
Nov 18 21:40:58 82.126.211.155:4723 -> xxx.yyy.1.2:21 SYN ******S*
Nov 18 21:40:58 82.126.211.155:4725 -> xxx.yyy.1.4:21 SYN ******S*
Nov 18 21:40:58 82.126.211.155:4727 -> xxx.yyy.1.5:21 SYN ******S*
Nov 18 21:40:58 82.126.211.155:4729 -> xxx.yyy.1.7:21 SYN ******S*
Nov 18 21:40:56 82.126.211.155:4732 -> xxx.yyy.1.9:21 SYN ******S*
Nov 18 21:40:58 82.126.211.155:4734 -> xxx.yyy.1.11:21 SYN ******S*
Nov 18 21:40:58 82.126.211.155:4736 -> xxx.yyy.1.12:21 SYN ******S*
[...]
Nov 18 22:27:47 82.126.211.155:4752 -> xxx.yyy.255.240:21 SYN ******S*
Nov 18 22:27:47 82.126.211.155:4757 -> xxx.yyy.255.245:21 SYN ******S*
Nov 18 22:27:47 82.126.211.155:4758 -> xxx.yyy.255.246:21 SYN ******S*
Nov 18 22:27:47 82.126.211.155:4760 -> xxx.yyy.255.248:21 SYN ******S*
Nov 18 22:27:47 82.126.211.155:4761 -> xxx.yyy.255.249:21 SYN ******S*
Nov 18 22:27:47 82.126.211.155:4762 -> xxx.yyy.255.250:21 SYN ******S*
Nov 18 22:27:47 82.126.211.155:4764 -> xxx.yyy.255.252:21 SYN ******S*
Nov 18 22:27:47 82.126.211.155:4766 -> xxx.yyy.255.254:21 SYN ******S*
39330
Nov 18 15:10:32 83.28.130.217:4865 -> xxx.yyy.209.160:139 SYN ******S*
Nov 18 15:10:29 83.28.130.217:4879 -> xxx.yyy.239.3:139 SYN ******S*
Nov 18 15:10:32 83.28.130.217:4880 -> xxx.yyy.190.164:139 SYN ******S*
Nov 18 15:10:29 83.28.130.217:4888 -> xxx.yyy.142.69:139 SYN ******S*
Nov 18 15:10:29 83.28.130.217:4892 -> xxx.yyy.229.133:139 SYN ******S*
Nov 18 15:10:29 83.28.130.217:4916 -> xxx.yyy.171.168:139 SYN ******S*
Nov 18 15:10:29 83.28.130.217:4919 -> xxx.yyy.74.234:139 SYN ******S*
Nov 18 15:10:33 83.28.130.217:4942 -> xxx.yyy.249.106:139 SYN ******S*
[...]
Nov 18 17:22:36 83.28.130.217:1618 -> xxx.yyy.158.184:139 SYN ******S*
Nov 18 17:22:36 83.28.130.217:1619 -> xxx.yyy.197.243:139 SYN ******S*
Nov 18 17:22:37 83.28.130.217:1635 -> xxx.yyy.245.194:139 SYN ******S*
Nov 18 17:22:37 83.28.130.217:1636 -> xxx.yyy.137.231:139 SYN ******S*
Nov 18 17:22:37 83.28.130.217:1643 -> xxx.yyy.81.132:139 SYN ******S*
Nov 18 17:22:37 83.28.130.217:1644 -> xxx.yyy.132.252:139 SYN ******S*
Nov 18 17:22:37 83.28.130.217:1652 -> xxx.yyy.90.24:139 SYN ******S*
Nov 18 17:22:39 83.28.130.217:1718 -> xxx.yyy.228.154:139 SYN ******S*
37557
Nov 18 20:09:49 192.84.136.185:3498 -> xxx.yyy.1.1:6543 SYN ******S*
Nov 18 20:09:49 192.84.136.185:3499 -> xxx.yyy.1.2:6543 SYN ******S*
Nov 18 20:09:49 192.84.136.185:3500 -> xxx.yyy.1.3:6543 SYN ******S*
Nov 18 20:09:49 192.84.136.185:3501 -> xxx.yyy.1.4:6543 SYN ******S*
Nov 18 20:09:52 192.84.136.185:3502 -> xxx.yyy.1.5:6543 SYN ******S*
Nov 18 20:09:52 192.84.136.185:3505 -> xxx.yyy.1.8:6543 SYN ******S*
Nov 18 20:09:49 192.84.136.185:3508 -> xxx.yyy.1.11:6543 SYN ******S*
Nov 18 20:09:49 192.84.136.185:3513 -> xxx.yyy.1.16:6543 SYN ******S*
[...]
Nov 18 20:21:35 192.84.136.185:2016 -> xxx.yyy.255.236:6543 SYN ******S*
Nov 18 20:21:35 192.84.136.185:2013 -> xxx.yyy.255.233:6543 SYN ******S*
Nov 18 20:21:35 192.84.136.185:2017 -> xxx.yyy.255.237:6543 SYN ******S*
Nov 18 20:21:35 192.84.136.185:2014 -> xxx.yyy.255.234:6543 SYN ******S*
Nov 18 20:21:35 192.84.136.185:2021 -> xxx.yyy.255.241:6543 SYN ******S*
Nov 18 20:21:35 192.84.136.185:2033 -> xxx.yyy.255.253:6543 SYN ******S*
Nov 18 20:21:35 192.84.136.185:2032 -> xxx.yyy.255.252:6543 SYN ******S*
Nov 18 20:21:35 192.84.136.185:2030 -> xxx.yyy.255.250:6543 SYN ******S*
36850
Nov 18 03:43:10 222.181.94.64:3939 -> xxx.yyy.20.2:1433 SYN ******S*
Nov 18 03:43:07 222.181.94.64:3943 -> xxx.yyy.20.4:1433 SYN ******S*
Nov 18 03:43:10 222.181.94.64:3937 -> xxx.yyy.20.1:1433 SYN ******S*
Nov 18 03:43:07 222.181.94.64:3955 -> xxx.yyy.20.10:1433 SYN ******S*
Nov 18 03:43:07 222.181.94.64:3945 -> xxx.yyy.20.5:1433 SYN ******S*
Nov 18 03:43:07 222.181.94.64:3961 -> xxx.yyy.20.13:1433 SYN ******S*
Nov 18 03:43:07 222.181.94.64:3957 -> xxx.yyy.20.11:1433 SYN ******S*
Nov 18 03:43:07 222.181.94.64:3959 -> xxx.yyy.20.12:1433 SYN ******S*
[...]
Nov 18 06:36:31 222.181.94.64:3142 -> xxx.yyy.213.85:1433 SYN ******S*
Nov 18 06:36:31 222.181.94.64:3139 -> xxx.yyy.213.82:1433 SYN ******S*
Nov 18 06:36:31 222.181.94.64:3141 -> xxx.yyy.213.84:1433 SYN ******S*
Nov 18 06:36:31 222.181.94.64:3147 -> xxx.yyy.213.86:1433 SYN ******S*
Nov 18 06:36:31 222.181.94.64:3414 -> xxx.yyy.213.95:1433 SYN ******S*
Nov 18 06:36:31 222.181.94.64:3148 -> xxx.yyy.213.87:1433 SYN ******S*
Nov 18 06:36:31 222.181.94.64:3426 -> xxx.yyy.213.96:1433 SYN ******S*
Nov 18 06:36:33 222.181.94.64:3364 -> xxx.yyy.213.88:1433 SYN ******S*
Nov 18 06:36:33 222.181.94.64:3374 -> xxx.yyy.213.89:1433 SYN ******S*
36497
Nov 18 22:36:48 24.58.6.28:2271 -> xxx.yyy.1.62:4899 SYN ******S*
Nov 18 22:36:48 24.58.6.28:2274 -> xxx.yyy.1.65:4899 SYN ******S*
Nov 18 22:36:51 24.58.6.28:2276 -> xxx.yyy.1.67:4899 SYN ******S*
Nov 18 22:36:48 24.58.6.28:2285 -> xxx.yyy.1.76:4899 SYN ******S*
Nov 18 22:36:48 24.58.6.28:2281 -> xxx.yyy.1.72:4899 SYN ******S*
Nov 18 22:36:48 24.58.6.28:2268 -> xxx.yyy.1.59:4899 SYN ******S*
Nov 18 22:36:48 24.58.6.28:2269 -> xxx.yyy.1.60:4899 SYN ******S*
Nov 18 22:36:48 24.58.6.28:2273 -> xxx.yyy.1.64:4899 SYN ******S*
[...]
Nov 18 23:00:37 24.58.6.28:2299 -> xxx.yyy.255.237:4899 SYN ******S*
Nov 18 23:00:37 24.58.6.28:2296 -> xxx.yyy.255.234:4899 SYN ******S*
Nov 18 23:00:37 24.58.6.28:2293 -> xxx.yyy.255.231:4899 SYN ******S*
Nov 18 23:00:37 24.58.6.28:2314 -> xxx.yyy.255.252:4899 SYN ******S*
Nov 18 23:00:37 24.58.6.28:2306 -> xxx.yyy.255.244:4899 SYN ******S*
Nov 18 23:00:37 24.58.6.28:2303 -> xxx.yyy.255.241:4899 SYN ******S*
Nov 18 23:00:37 24.58.6.28:2316 -> xxx.yyy.255.254:4899 SYN ******S*
Nov 18 23:00:37 24.58.6.28:2315 -> xxx.yyy.255.253:4899 SYN ******S*
34968
Nov 18 15:48:03 209.181.61.52:3869 -> xxx.yyy.1.2:4000 SYN ******S*
Nov 18 15:48:01 209.181.61.52:3873 -> xxx.yyy.1.6:4000 SYN ******S*
Nov 18 15:48:01 209.181.61.52:3875 -> xxx.yyy.1.8:4000 SYN ******S*
Nov 18 15:48:01 209.181.61.52:3877 -> xxx.yyy.1.10:4000 SYN ******S*
Nov 18 15:48:01 209.181.61.52:3878 -> xxx.yyy.1.11:4000 SYN ******S*
Nov 18 15:48:01 209.181.61.52:3879 -> xxx.yyy.1.12:4000 SYN ******S*
Nov 18 15:48:01 209.181.61.52:3880 -> xxx.yyy.1.13:4000 SYN ******S*
Nov 18 15:48:03 209.181.61.52:3881 -> xxx.yyy.1.14:4000 SYN ******S*
[...]
Nov 18 16:14:18 209.181.61.52:3715 -> xxx.yyy.zzz.224:4000 SYN ******S*
Nov 18 16:14:18 209.181.61.52:3719 -> xxx.yyy.zzz.228:4000 SYN ******S*
Nov 18 16:14:18 209.181.61.52:3716 -> xxx.yyy.zzz.225:4000 SYN ******S*
Nov 18 16:14:18 209.181.61.52:3713 -> xxx.yyy.zzz.222:4000 SYN ******S*
Nov 18 16:14:18 209.181.61.52:3727 -> xxx.yyy.zzz.236:4000 SYN ******S*
Nov 18 16:14:18 209.181.61.52:3728 -> xxx.yyy.zzz.237:4000 SYN ******S*
Nov 18 16:14:18 209.181.61.52:3725 -> xxx.yyy.zzz.234:4000 SYN ******S*
Nov 18 16:14:18 209.181.61.52:3744 -> xxx.yyy.zzz.253:4000 SYN ******S*
Nov 18 16:14:18 209.181.61.52:3741 -> xxx.yyy.zzz.250:4000 SYN ******S*
34427
Nov 18 00:30:46 158.110.190.117:2657 -> xxx.yyy.1.1:22 SYN ******S*
Nov 18 00:30:46 158.110.190.117:2658 -> xxx.yyy.1.2:22 SYN ******S*
Nov 18 00:30:46 158.110.190.117:2659 -> xxx.yyy.1.3:22 SYN ******S*
Nov 18 00:30:46 158.110.190.117:2669 -> xxx.yyy.1.13:22 SYN ******S*
Nov 18 00:30:46 158.110.190.117:2671 -> xxx.yyy.1.15:22 SYN ******S*
Nov 18 00:30:46 158.110.190.117:2673 -> xxx.yyy.1.17:22 SYN ******S*
Nov 18 00:30:46 158.110.190.117:2675 -> xxx.yyy.1.19:22 SYN ******S*
Nov 18 00:30:46 158.110.190.117:2687 -> xxx.yyy.1.31:22 SYN ******S*
[...]
Nov 18 00:38:58 158.110.190.117:2465 -> xxx.yyy.255.182:22 SYN ******S*
Nov 18 00:38:58 158.110.190.117:2497 -> xxx.yyy.255.214:22 SYN ******S*
Nov 18 00:38:58 158.110.190.117:2528 -> xxx.yyy.255.245:22 SYN ******S*
Nov 18 00:38:58 158.110.190.117:2512 -> xxx.yyy.255.229:22 SYN ******S*
Nov 18 00:38:58 158.110.190.117:2516 -> xxx.yyy.255.233:22 SYN ******S*
Nov 18 00:38:58 158.110.190.117:2529 -> xxx.yyy.255.246:22 SYN ******S*
Nov 18 00:38:58 158.110.190.117:2510 -> xxx.yyy.255.227:22 SYN ******S*
Nov 18 00:38:58 158.110.190.117:2523 -> xxx.yyy.255.240:22 SYN ******S*
Nov 18 00:38:58 158.110.190.117:2534 -> xxx.yyy.255.251:22 SYN ******S*
32341
[...]
30750
[...]
22149
Nov 18 20:06:49 210.219.191.139:2387 -> xxx.yyy.1.2:4899 SYN ******S*
Nov 18 20:06:48 210.219.191.139:2386 -> xxx.yyy.1.1:4899 SYN ******S*
Nov 18 20:06:50 210.219.191.139:2401 -> xxx.yyy.1.16:4899 SYN ******S*
Nov 18 20:06:48 210.219.191.139:2398 -> xxx.yyy.1.13:4899 SYN ******S*
Nov 18 20:06:48 210.219.191.139:2403 -> xxx.yyy.1.18:4899 SYN ******S*
Nov 18 20:06:49 210.219.191.139:2405 -> xxx.yyy.1.20:4899 SYN ******S*
Nov 18 20:06:50 210.219.191.139:2406 -> xxx.yyy.1.21:4899 SYN ******S*
Nov 18 20:06:50 210.219.191.139:2411 -> xxx.yyy.1.26:4899 SYN ******S*
[...]
Nov 18 20:13:27 210.219.191.139:3111 -> xxx.yyy.254.218:4899 SYN ******S*
Nov 18 20:13:27 210.219.191.139:3113 -> xxx.yyy.254.220:4899 SYN ******S*
Nov 18 20:13:27 210.219.191.139:3132 -> xxx.yyy.254.239:4899 SYN ******S*
Nov 18 20:13:27 210.219.191.139:3134 -> xxx.yyy.254.241:4899 SYN ******S*
Nov 18 20:13:27 210.219.191.139:3140 -> xxx.yyy.254.247:4899 SYN ******S*
Nov 18 20:13:27 210.219.191.139:3141 -> xxx.yyy.254.248:4899 SYN ******S*
Nov 18 20:13:27 210.219.191.139:3138 -> xxx.yyy.254.245:4899 SYN ******S*
Nov 18 20:13:27 210.219.191.139:3142 -> xxx.yyy.254.249:4899 SYN ******S*
Nov 18 20:13:27 210.219.191.139:3139 -> xxx.yyy.254.246:4899 SYN ******S*
19952
Nov 18 13:40:33 211.147.248.234:3616 -> xxx.yyy.1.4:1433 SYN ******S*
Nov 18 13:40:33 211.147.248.234:3622 -> xxx.yyy.1.10:1433 SYN ******S*
Nov 18 13:40:34 211.147.248.234:3615 -> xxx.yyy.1.3:1433 SYN ******S*
Nov 18 13:40:37 211.147.248.234:3619 -> xxx.yyy.1.7:1433 SYN ******S*
Nov 18 13:40:34 211.147.248.234:3654 -> xxx.yyy.1.40:1433 SYN ******S*
Nov 18 13:40:34 211.147.248.234:3657 -> xxx.yyy.1.43:1433 SYN ******S*
Nov 18 13:40:34 211.147.248.234:3646 -> xxx.yyy.1.33:1433 SYN ******S*
Nov 18 13:40:34 211.147.248.234:3648 -> xxx.yyy.1.35:1433 SYN ******S*
[...]
Nov 18 13:58:12 211.147.248.234:4140 -> xxx.yyy.255.228:1433 SYN ******S*
Nov 18 13:58:12 211.147.248.234:4148 -> xxx.yyy.255.236:1433 SYN ******S*
Nov 18 13:58:12 211.147.248.234:4149 -> xxx.yyy.255.237:1433 SYN ******S*
Nov 18 13:58:12 211.147.248.234:4157 -> xxx.yyy.255.244:1433 SYN ******S*
Nov 18 13:58:12 211.147.248.234:4145 -> xxx.yyy.255.233:1433 SYN ******S*
Nov 18 13:58:12 211.147.248.234:4143 -> xxx.yyy.255.231:1433 SYN ******S*
Nov 18 13:58:12 211.147.248.234:4167 -> xxx.yyy.255.252:1433 SYN ******S*
Nov 18 13:58:12 211.147.248.234:4168 -> xxx.yyy.255.253:1433 SYN ******S*
Nov 18 13:58:12 211.147.248.234:4152 -> xxx.yyy.255.239:1433 SYN ******S*
18092
Nov 18 20:10:15 211.185.11.21:3977 -> xxx.yyy.1.2:4899 SYN ******S*
Nov 18 20:10:15 211.185.11.21:3972 -> xxx.yyy.1.1:4899 SYN ******S*
Nov 18 20:10:14 211.185.11.21:3980 -> xxx.yyy.1.5:4899 SYN ******S*
Nov 18 20:10:14 211.185.11.21:4031 -> xxx.yyy.1.8:4899 SYN ******S*
Nov 18 20:10:14 211.185.11.21:4014 -> xxx.yyy.1.7:4899 SYN ******S*
Nov 18 20:10:14 211.185.11.21:4069 -> xxx.yyy.1.18:4899 SYN ******S*
Nov 18 20:10:14 211.185.11.21:4086 -> xxx.yyy.1.31:4899 SYN ******S*
Nov 18 20:10:14 211.185.11.21:4087 -> xxx.yyy.1.32:4899 SYN ******S*
[...]
Nov 18 20:13:39 211.185.11.21:1449 -> xxx.yyy.252.203:4899 SYN ******S*
Nov 18 20:13:39 211.185.11.21:1448 -> xxx.yyy.252.202:4899 SYN ******S*
Nov 18 20:13:39 211.185.11.21:1420 -> xxx.yyy.252.176:4899 SYN ******S*
Nov 18 20:13:39 211.185.11.21:1114 -> xxx.yyy.251.233:4899 SYN ******S*
Nov 18 20:13:39 211.185.11.21:1121 -> xxx.yyy.251.240:4899 SYN ******S*
Nov 18 20:13:39 211.185.11.21:1138 -> xxx.yyy.251.252:4899 SYN ******S*
Nov 18 20:13:39 211.185.11.21:1136 -> xxx.yyy.251.251:4899 SYN ******S*
Nov 18 20:13:39 211.185.11.21:1118 -> xxx.yyy.251.237:4899 SYN ******S*
Nov 18 20:13:39 211.185.11.21:1130 -> xxx.yyy.251.246:4899 SYN ******S*
17328
Nov 18 05:11:49 61.54.200.219:3129 -> xxx.yyy.1.1:1433 SYN ******S*
Nov 18 05:11:49 61.54.200.219:3131 -> xxx.yyy.1.3:1433 SYN ******S*
Nov 18 05:11:49 61.54.200.219:3132 -> xxx.yyy.1.4:1433 SYN ******S*
Nov 18 05:11:49 61.54.200.219:3134 -> xxx.yyy.1.6:1433 SYN ******S*
Nov 18 05:11:49 61.54.200.219:3128 -> xxx.yyy.1.0:1433 SYN ******S*
Nov 18 05:11:49 61.54.200.219:3136 -> xxx.yyy.1.8:1433 SYN ******S*
Nov 18 05:11:49 61.54.200.219:3130 -> xxx.yyy.1.2:1433 SYN ******S*
Nov 18 05:11:49 61.54.200.219:3138 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
Nov 18 06:20:15 61.54.200.219:1752 -> xxx.yyy.77.43:1433 SYN ******S*
Nov 18 06:20:15 61.54.200.219:1756 -> xxx.yyy.77.44:1433 SYN ******S*
Nov 18 06:20:16 61.54.200.219:1761 -> xxx.yyy.77.47:1433 SYN ******S*
Nov 18 06:20:16 61.54.200.219:1759 -> xxx.yyy.77.45:1433 SYN ******S*
Nov 18 06:20:16 61.54.200.219:1760 -> xxx.yyy.77.46:1433 SYN ******S*
Nov 18 06:20:16 61.54.200.219:1765 -> xxx.yyy.77.48:1433 SYN ******S*
Nov 18 06:20:16 61.54.200.219:1766 -> xxx.yyy.77.49:1433 SYN ******S*
Nov 18 06:20:16 61.54.200.219:1767 -> xxx.yyy.77.50:1433 SYN ******S*
Nov 18 06:20:16 61.54.200.219:1987 -> xxx.yyy.77.93:1433 SYN ******S*
16867
Nov 18 05:09:27 61.152.96.213:10512 -> xxx.yyy.1.0:25 SYN ******S*
Nov 18 05:09:27 61.152.96.213:10512 -> xxx.yyy.1.4:25 SYN ******S*
Nov 18 05:09:27 61.152.96.213:10512 -> xxx.yyy.1.5:25 SYN ******S*
Nov 18 05:09:27 61.152.96.213:10512 -> xxx.yyy.1.11:25 SYN ******S*
Nov 18 05:09:27 61.152.96.213:10512 -> xxx.yyy.1.14:25 SYN ******S*
Nov 18 05:09:27 61.152.96.213:10512 -> xxx.yyy.1.15:25 SYN ******S*
Nov 18 05:09:27 61.152.96.213:10512 -> xxx.yyy.1.22:25 SYN ******S*
Nov 18 05:09:27 61.152.96.213:10512 -> xxx.yyy.1.17:25 SYN ******S*
[...]
Nov 18 05:10:51 61.152.96.213:10512 -> xxx.yyy.255.229:25 SYN ******S*
Nov 18 05:10:51 61.152.96.213:10512 -> xxx.yyy.255.237:25 SYN ******S*
Nov 18 05:10:51 61.152.96.213:10512 -> xxx.yyy.255.241:25 SYN ******S*
Nov 18 05:10:51 61.152.96.213:10512 -> xxx.yyy.255.251:25 SYN ******S*
Nov 18 05:10:51 61.152.96.213:10512 -> xxx.yyy.255.252:25 SYN ******S*
Nov 18 05:10:51 61.152.96.213:10512 -> xxx.yyy.255.244:25 SYN ******S*
Nov 18 05:10:51 61.152.96.213:10512 -> xxx.yyy.255.255:25 SYN ******S*
Nov 18 05:10:51 61.152.96.213:10512 -> xxx.yyy.255.254:25 SYN ******S*
15664
Nov 18 20:18:37 211.33.98.202:1132 -> xxx.yyy.1.17:4899 SYN ******S*
Nov 18 20:18:39 211.33.98.202:1136 -> xxx.yyy.1.20:4899 SYN ******S*
Nov 18 20:18:37 211.33.98.202:1135 -> xxx.yyy.1.19:4899 SYN ******S*
Nov 18 20:18:39 211.33.98.202:1138 -> xxx.yyy.1.21:4899 SYN ******S*
Nov 18 20:18:37 211.33.98.202:1146 -> xxx.yyy.1.23:4899 SYN ******S*
Nov 18 20:18:37 211.33.98.202:1145 -> xxx.yyy.1.22:4899 SYN ******S*
Nov 18 20:18:38 211.33.98.202:1170 -> xxx.yyy.1.36:4899 SYN ******S*
Nov 18 20:18:39 211.33.98.202:1172 -> xxx.yyy.1.38:4899 SYN ******S*
[...]
Nov 18 20:22:39 211.33.98.202:2696 -> xxx.yyy.173.61:4899 SYN ******S*
Nov 18 20:22:39 211.33.98.202:2726 -> xxx.yyy.173.78:4899 SYN ******S*
Nov 18 20:22:39 211.33.98.202:2730 -> xxx.yyy.173.80:4899 SYN ******S*
Nov 18 20:22:39 211.33.98.202:2753 -> xxx.yyy.173.94:4899 SYN ******S*
Nov 18 20:22:39 211.33.98.202:2762 -> xxx.yyy.173.100:4899 SYN ******S*
Nov 18 20:22:39 211.33.98.202:2768 -> xxx.yyy.173.101:4899 SYN ******S*
Nov 18 20:22:42 211.33.98.202:2474 -> xxx.yyy.172.226:4899 SYN ******S*
Nov 18 20:22:42 211.33.98.202:2561 -> xxx.yyy.173.1:4899 SYN ******S*
Nov 18 20:22:42 211.33.98.202:2560 -> xxx.yyy.172.253:4899 SYN ******S*
11111
[...]
10842
[...]
10254
[...]
9490
[...]
8933
Nov 18 12:59:38 148.244.117.205:1409 -> xxx.yyy.1.247:80 SYN ******S*
Nov 18 12:59:38 148.244.117.205:1634 -> xxx.yyy.1.248:80 SYN ******S*
Nov 18 12:59:38 148.244.117.205:2078 -> xxx.yyy.1.251:80 SYN ******S*
Nov 18 12:59:38 148.244.117.205:2130 -> xxx.yyy.1.253:80 SYN ******S*
Nov 18 12:59:38 148.244.117.205:2134 -> xxx.yyy.1.255:80 SYN ******S*
Nov 18 12:59:42 148.244.117.205:2159 -> xxx.yyy.4.1:80 SYN ******S*
Nov 18 12:59:42 148.244.117.205:2161 -> xxx.yyy.4.3:80 SYN ******S*
Nov 18 12:59:42 148.244.117.205:2217 -> xxx.yyy.4.20:80 SYN ******S*
[...]
Nov 18 13:09:17 148.244.117.205:2362 -> xxx.yyy.255.240:80 SYN ******S*
Nov 18 13:09:17 148.244.117.205:2383 -> xxx.yyy.255.251:80 SYN ******S*
Nov 18 13:09:17 148.244.117.205:2370 -> xxx.yyy.255.247:80 SYN ******S*
Nov 18 13:09:17 148.244.117.205:2350 -> xxx.yyy.255.236:80 SYN ******S*
Nov 18 13:09:17 148.244.117.205:2392 -> xxx.yyy.255.254:80 SYN ******S*
Nov 18 13:09:17 148.244.117.205:2368 -> xxx.yyy.255.245:80 SYN ******S*
Nov 18 13:09:17 148.244.117.205:2379 -> xxx.yyy.255.250:80 SYN ******S*
Nov 18 13:09:17 148.244.117.205:2360 -> xxx.yyy.255.239:80 SYN ******S*
Nov 18 13:09:17 148.244.117.205:2373 -> xxx.yyy.255.248:80 SYN ******S*
8487
Nov 18 00:12:51 12.219.29.186:1083 -> xxx.yyy.77.190:8 SYN ******S*
Nov 18 00:12:51 12.219.29.186:1084 -> xxx.yyy.77.190:11 SYN ******S*
Nov 18 00:12:51 12.219.29.186:1085 -> xxx.yyy.77.190:13 SYN ******S*
Nov 18 00:12:51 12.219.29.186:1095 -> xxx.yyy.77.190:29 SYN ******S*
Nov 18 00:12:51 12.219.29.186:1096 -> xxx.yyy.77.190:31 SYN ******S*
Nov 18 00:12:54 12.219.29.186:1097 -> xxx.yyy.77.190:21 SYN ******S*
Nov 18 00:13:31 12.219.29.186:1108 -> xxx.yyy.77.190:8 SYN ******S*
Nov 18 00:13:34 12.219.29.186:1111 -> xxx.yyy.77.190:17 SYN ******S*
[...]
Nov 18 05:40:53 12.219.29.186:1442 -> xxx.yyy.77.190:11 SYN ******S*
Nov 18 05:40:54 12.219.29.186:1444 -> xxx.yyy.77.190:17 SYN ******S*
Nov 18 05:51:37 12.219.29.186:1647 -> xxx.yyy.77.190:17 SYN ******S*
Nov 18 05:51:35 12.219.29.186:1645 -> xxx.yyy.77.190:21 SYN ******S*
Nov 18 05:51:38 12.219.29.186:1648 -> xxx.yyy.77.190:8 SYN ******S*
Nov 18 05:51:38 12.219.29.186:1649 -> xxx.yyy.77.190:13 SYN ******S*
Nov 18 05:51:40 12.219.29.186:1650 -> xxx.yyy.77.190:11 SYN ******S*
Nov 18 05:51:44 12.219.29.186:1652 -> xxx.yyy.77.190:17 SYN ******S*
Nov 18 05:51:47 12.219.29.186:1652 -> xxx.yyy.77.190:17 SYN ******S*
7951
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list