[Intrusions] [LOGS] Summary of large-scale portscanning detects

Ken.Connelly at uni.edu Ken.Connelly at uni.edu
Mon Nov 22 15:41:42 GMT 2004


The following extracts show the beginning and ending of scan activity
was detected on my network.  The number following each set is the total
number of probes for that source.  Timestamps are GMT-0600.

Nov 21 03:18:57 219.241.111.164:4272 -> xxx.yyy.1.0:1433 SYN ******S* 
Nov 21 03:18:57 219.241.111.164:4276 -> xxx.yyy.1.3:1433 SYN ******S* 
Nov 21 03:18:57 219.241.111.164:4273 -> xxx.yyy.1.1:1433 SYN ******S* 
Nov 21 03:18:57 219.241.111.164:4274 -> xxx.yyy.1.2:1433 SYN ******S* 
Nov 21 03:18:57 219.241.111.164:4278 -> xxx.yyy.1.4:1433 SYN ******S* 
Nov 21 03:18:57 219.241.111.164:4281 -> xxx.yyy.1.5:1433 SYN ******S* 
Nov 21 03:18:57 219.241.111.164:4284 -> xxx.yyy.1.6:1433 SYN ******S* 
Nov 21 03:18:57 219.241.111.164:4286 -> xxx.yyy.1.8:1433 SYN ******S* 
[...]
Nov 21 07:07:46 219.241.111.164:2208 -> xxx.yyy.255.246:1433 SYN ******S* 
Nov 21 07:07:46 219.241.111.164:2210 -> xxx.yyy.255.247:1433 SYN ******S* 
Nov 21 07:07:46 219.241.111.164:2211 -> xxx.yyy.255.248:1433 SYN ******S* 
Nov 21 07:07:46 219.241.111.164:2212 -> xxx.yyy.255.249:1433 SYN ******S* 
Nov 21 07:07:46 219.241.111.164:2213 -> xxx.yyy.255.250:1433 SYN ******S* 
Nov 21 07:07:47 219.241.111.164:2215 -> xxx.yyy.255.251:1433 SYN ******S* 
Nov 21 07:07:47 219.241.111.164:2218 -> xxx.yyy.255.252:1433 SYN ******S* 
Nov 21 07:07:47 219.241.111.164:2221 -> xxx.yyy.255.253:1433 SYN ******S* 
Nov 21 07:07:47 219.241.111.164:2223 -> xxx.yyy.255.254:1433 SYN ******S* 
119586

Nov 21 09:57:31 203.95.5.121:1137 -> xxx.yyy.1.6:1433 SYN ******S* 
Nov 21 09:57:32 203.95.5.121:1259 -> xxx.yyy.1.11:1433 SYN ******S* 
Nov 21 09:57:33 203.95.5.121:1548 -> xxx.yyy.1.12:1433 SYN ******S* 
Nov 21 09:57:33 203.95.5.121:1900 -> xxx.yyy.1.14:1433 SYN ******S* 
Nov 21 09:57:33 203.95.5.121:1729 -> xxx.yyy.1.18:1433 SYN ******S* 
Nov 21 09:57:30 203.95.5.121:1473 -> xxx.yyy.1.19:1433 SYN ******S* 
Nov 21 09:57:31 203.95.5.121:1113 -> xxx.yyy.1.25:1433 SYN ******S* 
Nov 21 09:57:32 203.95.5.121:1848 -> xxx.yyy.1.26:1433 SYN ******S* 
[...]
Nov 21 17:35:29 203.95.5.121:4293 -> xxx.yyy.255.240:1433 SYN ******S* 
Nov 21 17:35:29 203.95.5.121:4379 -> xxx.yyy.255.241:1433 SYN ******S* 
Nov 21 17:35:30 203.95.5.121:4716 -> xxx.yyy.255.243:1433 SYN ******S* 
Nov 21 17:35:32 203.95.5.121:2013 -> xxx.yyy.255.248:1433 SYN ******S* 
Nov 21 17:35:34 203.95.5.121:3057 -> xxx.yyy.255.250:1433 SYN ******S* 
Nov 21 17:35:34 203.95.5.121:3219 -> xxx.yyy.255.252:1433 SYN ******S* 
Nov 21 17:35:35 203.95.5.121:3592 -> xxx.yyy.255.253:1433 SYN ******S* 
Nov 21 17:35:35 203.95.5.121:3691 -> xxx.yyy.255.254:1433 SYN ******S* 
80007

Nov 21 08:06:34 4.43.98.63:1278 -> xxx.yyy.1.1:6129 SYN ******S* 
Nov 21 08:06:34 4.43.98.63:1279 -> xxx.yyy.1.2:6129 SYN ******S* 
Nov 21 08:06:34 4.43.98.63:1280 -> xxx.yyy.1.3:6129 SYN ******S* 
Nov 21 08:06:36 4.43.98.63:1281 -> xxx.yyy.1.4:6129 SYN ******S* 
Nov 21 08:06:36 4.43.98.63:1282 -> xxx.yyy.1.5:6129 SYN ******S* 
Nov 21 08:06:33 4.43.98.63:1283 -> xxx.yyy.1.6:6129 SYN ******S* 
Nov 21 08:06:33 4.43.98.63:1284 -> xxx.yyy.1.7:6129 SYN ******S* 
Nov 21 08:06:36 4.43.98.63:1285 -> xxx.yyy.1.8:6129 SYN ******S* 
[...]
Nov 21 08:18:14 4.43.98.63:3666 -> xxx.yyy.255.246:6129 SYN ******S* 
Nov 21 08:18:14 4.43.98.63:3670 -> xxx.yyy.255.250:6129 SYN ******S* 
Nov 21 08:18:14 4.43.98.63:3667 -> xxx.yyy.255.247:6129 SYN ******S* 
Nov 21 08:18:14 4.43.98.63:3664 -> xxx.yyy.255.244:6129 SYN ******S* 
Nov 21 08:18:14 4.43.98.63:3668 -> xxx.yyy.255.248:6129 SYN ******S* 
Nov 21 08:18:14 4.43.98.63:3665 -> xxx.yyy.255.245:6129 SYN ******S* 
Nov 21 08:18:15 4.43.98.63:3673 -> xxx.yyy.255.253:6129 SYN ******S* 
Nov 21 08:18:15 4.43.98.63:3674 -> xxx.yyy.255.254:6129 SYN ******S* 
66546

[...]
58678

Nov 21 17:13:52 195.214.190.178:3755 -> xxx.yyy.1.1:1433 SYN ******S* 
Nov 21 17:13:50 195.214.190.178:3756 -> xxx.yyy.1.2:1433 SYN ******S* 
Nov 21 17:13:52 195.214.190.178:3758 -> xxx.yyy.1.4:1433 SYN ******S* 
Nov 21 17:13:50 195.214.190.178:3762 -> xxx.yyy.1.8:1433 SYN ******S* 
Nov 21 17:13:53 195.214.190.178:3764 -> xxx.yyy.1.10:1433 SYN ******S* 
Nov 21 17:13:50 195.214.190.178:3765 -> xxx.yyy.1.11:1433 SYN ******S* 
Nov 21 17:13:53 195.214.190.178:3766 -> xxx.yyy.1.12:1433 SYN ******S* 
Nov 21 17:13:53 195.214.190.178:3767 -> xxx.yyy.1.13:1433 SYN ******S* 
[...]
Nov 21 17:25:19 195.214.190.178:14683 -> xxx.yyy.255.228:1433 SYN ******S* 
Nov 21 17:25:19 195.214.190.178:14687 -> xxx.yyy.255.232:1433 SYN ******S* 
Nov 21 17:25:20 195.214.190.178:14706 -> xxx.yyy.255.248:1433 SYN ******S* 
Nov 21 17:25:20 195.214.190.178:14703 -> xxx.yyy.255.245:1433 SYN ******S* 
Nov 21 17:25:20 195.214.190.178:14707 -> xxx.yyy.255.249:1433 SYN ******S* 
Nov 21 17:25:20 195.214.190.178:14709 -> xxx.yyy.255.251:1433 SYN ******S* 
Nov 21 17:25:20 195.214.190.178:14713 -> xxx.yyy.255.254:1433 SYN ******S* 
Nov 21 17:25:20 195.214.190.178:14712 -> xxx.yyy.255.253:1433 SYN ******S* 
44054

Nov 21 14:10:47 216.48.2.43:3922 -> xxx.yyy.1.4:21 SYN ******S* 
Nov 21 14:10:44 216.48.2.43:3934 -> xxx.yyy.1.8:21 SYN ******S* 
Nov 21 14:10:44 216.48.2.43:3937 -> xxx.yyy.1.9:21 SYN ******S* 
Nov 21 14:10:44 216.48.2.43:3946 -> xxx.yyy.1.12:21 SYN ******S* 
Nov 21 14:10:47 216.48.2.43:3949 -> xxx.yyy.1.13:21 SYN ******S* 
Nov 21 14:10:44 216.48.2.43:3952 -> xxx.yyy.1.14:21 SYN ******S* 
Nov 21 14:10:44 216.48.2.43:3964 -> xxx.yyy.1.18:21 SYN ******S* 
Nov 21 14:10:44 216.48.2.43:3967 -> xxx.yyy.1.19:21 SYN ******S* 
[...]
Nov 21 14:22:43 216.48.2.43:4565 -> xxx.yyy.255.244:21 SYN ******S* 
Nov 21 14:22:43 216.48.2.43:4568 -> xxx.yyy.255.245:21 SYN ******S* 
Nov 21 14:22:43 216.48.2.43:4556 -> xxx.yyy.255.241:21 SYN ******S* 
Nov 21 14:22:43 216.48.2.43:4559 -> xxx.yyy.255.242:21 SYN ******S* 
Nov 21 14:22:43 216.48.2.43:4571 -> xxx.yyy.255.246:21 SYN ******S* 
Nov 21 14:22:43 216.48.2.43:4550 -> xxx.yyy.255.239:21 SYN ******S* 
Nov 21 14:22:43 216.48.2.43:4562 -> xxx.yyy.255.243:21 SYN ******S* 
Nov 21 14:22:43 216.48.2.43:4589 -> xxx.yyy.255.252:21 SYN ******S* 
Nov 21 14:22:43 216.48.2.43:4595 -> xxx.yyy.255.254:21 SYN ******S* 
43935

Nov 21 13:39:13 203.221.91.249:3177 -> xxx.yyy.1.1:1433 SYN ******S* 
Nov 21 13:39:13 203.221.91.249:3178 -> xxx.yyy.1.2:1433 SYN ******S* 
Nov 21 13:39:13 203.221.91.249:3180 -> xxx.yyy.1.4:1433 SYN ******S* 
Nov 21 13:39:13 203.221.91.249:3184 -> xxx.yyy.1.8:1433 SYN ******S* 
Nov 21 13:39:16 203.221.91.249:3186 -> xxx.yyy.1.10:1433 SYN ******S* 
Nov 21 13:39:13 203.221.91.249:3188 -> xxx.yyy.1.12:1433 SYN ******S* 
Nov 21 13:39:16 203.221.91.249:3190 -> xxx.yyy.1.14:1433 SYN ******S* 
Nov 21 13:39:16 203.221.91.249:3191 -> xxx.yyy.1.15:1433 SYN ******S* 
[...]
Nov 21 13:50:56 203.221.91.249:2246 -> xxx.yyy.255.222:1433 SYN ******S* 
Nov 21 13:50:57 203.221.91.249:2256 -> xxx.yyy.255.232:1433 SYN ******S* 
Nov 21 13:50:57 203.221.91.249:2263 -> xxx.yyy.255.239:1433 SYN ******S* 
Nov 21 13:50:57 203.221.91.249:2261 -> xxx.yyy.255.237:1433 SYN ******S* 
Nov 21 13:50:57 203.221.91.249:2259 -> xxx.yyy.255.235:1433 SYN ******S* 
Nov 21 13:50:57 203.221.91.249:2274 -> xxx.yyy.255.250:1433 SYN ******S* 
Nov 21 13:50:57 203.221.91.249:2271 -> xxx.yyy.255.247:1433 SYN ******S* 
Nov 21 13:50:57 203.221.91.249:2275 -> xxx.yyy.255.251:1433 SYN ******S* 
43870

Nov 21 22:52:30 195.61.81.121:4974 -> xxx.yyy.1.7:1433 SYN ******S* 
Nov 21 22:52:30 195.61.81.121:4976 -> xxx.yyy.1.8:1433 SYN ******S* 
Nov 21 22:52:33 195.61.81.121:4977 -> xxx.yyy.1.9:1433 SYN ******S* 
Nov 21 22:52:33 195.61.81.121:4984 -> xxx.yyy.1.12:1433 SYN ******S* 
Nov 21 22:52:30 195.61.81.121:4986 -> xxx.yyy.1.13:1433 SYN ******S* 
Nov 21 22:52:30 195.61.81.121:4990 -> xxx.yyy.1.14:1433 SYN ******S* 
Nov 21 22:52:33 195.61.81.121:4997 -> xxx.yyy.1.17:1433 SYN ******S* 
Nov 21 22:52:30 195.61.81.121:1026 -> xxx.yyy.1.20:1433 SYN ******S* 
[...]
Nov 21 23:04:15 195.61.81.121:3296 -> xxx.yyy.255.241:1433 SYN ******S* 
Nov 21 23:04:15 195.61.81.121:3300 -> xxx.yyy.255.245:1433 SYN ******S* 
Nov 21 23:04:15 195.61.81.121:3297 -> xxx.yyy.255.242:1433 SYN ******S* 
Nov 21 23:04:15 195.61.81.121:3295 -> xxx.yyy.255.240:1433 SYN ******S* 
Nov 21 23:04:15 195.61.81.121:3308 -> xxx.yyy.255.253:1433 SYN ******S* 
Nov 21 23:04:15 195.61.81.121:3305 -> xxx.yyy.255.250:1433 SYN ******S* 
Nov 21 23:04:15 195.61.81.121:3309 -> xxx.yyy.255.254:1433 SYN ******S* 
Nov 21 23:04:15 195.61.81.121:3303 -> xxx.yyy.255.248:1433 SYN ******S* 
Nov 21 23:04:15 195.61.81.121:3307 -> xxx.yyy.255.252:1433 SYN ******S* 
31536

[...]
30525

[...]
20895

[...]
19016

[...]
17536

Nov 21 22:18:50 202.134.71.131:60082 -> xxx.yyy.1.60:80 SYN ******S* 
Nov 21 22:18:46 202.134.71.131:59910 -> xxx.yyy.1.67:80 SYN ******S* 
Nov 21 22:18:46 202.134.71.131:59892 -> xxx.yyy.1.49:80 SYN ******S* 
Nov 21 22:18:48 202.134.71.131:60078 -> xxx.yyy.1.78:80 SYN ******S* 
Nov 21 22:18:48 202.134.71.131:60079 -> xxx.yyy.1.79:80 SYN ******S* 
Nov 21 22:18:49 202.134.71.131:59848 -> xxx.yyy.1.5:80 SYN ******S* 
Nov 21 22:18:52 202.134.71.131:60084 -> xxx.yyy.1.60:80 SYN ******S* 
Nov 21 22:18:59 202.134.71.131:60426 -> xxx.yyy.1.80:80 SYN ******S* 
[...]
Nov 21 22:44:39 202.134.71.131:48346 -> xxx.yyy.255.230:80 SYN ******S* 
Nov 21 22:44:39 202.134.71.131:48367 -> xxx.yyy.255.251:80 SYN ******S* 
Nov 21 22:44:39 202.134.71.131:48353 -> xxx.yyy.255.237:80 SYN ******S* 
Nov 21 22:44:39 202.134.71.131:48358 -> xxx.yyy.255.242:80 SYN ******S* 
Nov 21 22:44:39 202.134.71.131:48360 -> xxx.yyy.255.244:80 SYN ******S* 
Nov 21 22:44:39 202.134.71.131:48361 -> xxx.yyy.255.245:80 SYN ******S* 
Nov 21 22:44:39 202.134.71.131:48362 -> xxx.yyy.255.246:80 SYN ******S* 
Nov 21 22:44:39 202.134.71.131:48363 -> xxx.yyy.255.247:80 SYN ******S* 
Nov 21 22:44:39 202.134.71.131:48368 -> xxx.yyy.255.252:80 SYN ******S* 
17104

Nov 21 08:17:07 217.211.17.5:1996 -> xxx.yyy.1.222:17300 SYN ******S* 
Nov 21 08:17:07 217.211.17.5:1998 -> xxx.yyy.1.224:17300 SYN ******S* 
Nov 21 08:17:07 217.211.17.5:2000 -> xxx.yyy.1.226:17300 SYN ******S* 
Nov 21 08:17:07 217.211.17.5:1995 -> xxx.yyy.1.221:17300 SYN ******S* 
Nov 21 08:17:07 217.211.17.5:1999 -> xxx.yyy.1.225:17300 SYN ******S* 
Nov 21 08:17:07 217.211.17.5:1997 -> xxx.yyy.1.223:17300 SYN ******S* 
Nov 21 08:17:07 217.211.17.5:2001 -> xxx.yyy.1.227:17300 SYN ******S* 
Nov 21 08:17:19 217.211.17.5:1996 -> xxx.yyy.1.222:17300 SYN ******S* 
[...]
Nov 21 09:33:15 217.211.17.5:4196 -> xxx.yyy.254.97:17300 SYN ******S* 
Nov 21 09:33:15 217.211.17.5:4195 -> xxx.yyy.254.96:17300 SYN ******S* 
Nov 21 09:33:15 217.211.17.5:4193 -> xxx.yyy.254.94:17300 SYN ******S* 
Nov 21 09:33:22 217.211.17.5:4473 -> xxx.yyy.254.234:17300 SYN ******S* 
Nov 21 09:33:22 217.211.17.5:4472 -> xxx.yyy.254.233:17300 SYN ******S* 
Nov 21 09:33:22 217.211.17.5:4474 -> xxx.yyy.254.235:17300 SYN ******S* 
Nov 21 09:33:23 217.211.17.5:4513 -> xxx.yyy.254.254:17300 SYN ******S* 
Nov 21 09:33:23 217.211.17.5:4512 -> xxx.yyy.254.253:17300 SYN ******S* 
Nov 21 09:33:23 217.211.17.5:4514 -> xxx.yyy.254.255:17300 SYN ******S* 
16971

[...]
14518

Nov 21 10:18:04 213.213.218.93:3924 -> xxx.yyy.1.0:1433 SYN ******S* 
Nov 21 10:18:04 213.213.218.93:3926 -> xxx.yyy.1.1:1433 SYN ******S* 
Nov 21 10:18:04 213.213.218.93:3927 -> xxx.yyy.1.2:1433 SYN ******S* 
Nov 21 10:18:04 213.213.218.93:3929 -> xxx.yyy.1.3:1433 SYN ******S* 
Nov 21 10:18:04 213.213.218.93:3930 -> xxx.yyy.1.4:1433 SYN ******S* 
Nov 21 10:18:04 213.213.218.93:3931 -> xxx.yyy.1.5:1433 SYN ******S* 
Nov 21 10:18:04 213.213.218.93:3948 -> xxx.yyy.1.6:1433 SYN ******S* 
Nov 21 10:18:04 213.213.218.93:3951 -> xxx.yyy.1.7:1433 SYN ******S* 
[...]
Nov 21 11:20:03 213.213.218.93:4744 -> xxx.yyy.69.249:1433 SYN ******S* 
Nov 21 11:20:03 213.213.218.93:1065 -> xxx.yyy.70.8:1433 SYN ******S* 
Nov 21 11:20:03 213.213.218.93:1068 -> xxx.yyy.70.10:1433 SYN ******S* 
Nov 21 11:20:03 213.213.218.93:1069 -> xxx.yyy.70.11:1433 SYN ******S* 
Nov 21 11:20:04 213.213.218.93:1071 -> xxx.yyy.70.12:1433 SYN ******S* 
Nov 21 11:20:04 213.213.218.93:1075 -> xxx.yyy.70.13:1433 SYN ******S* 
Nov 21 11:20:04 213.213.218.93:4830 -> xxx.yyy.69.250:1433 SYN ******S* 
Nov 21 11:20:04 213.213.218.93:1077 -> xxx.yyy.70.14:1433 SYN ******S* 
Nov 21 11:20:04 213.213.218.93:1081 -> xxx.yyy.70.15:1433 SYN ******S* 
10891

[...]
10336

Nov 21 22:51:36 220.125.109.155:2959 -> xxx.yyy.92.28:5554 SYN ******S* 
Nov 21 22:51:37 220.125.109.155:3867 -> xxx.yyy.92.28:1023 SYN ******S* 
Nov 21 22:51:36 220.125.109.155:2964 -> xxx.yyy.92.33:5554 SYN ******S* 
Nov 21 22:51:37 220.125.109.155:4003 -> xxx.yyy.92.33:1023 SYN ******S* 
Nov 21 22:51:36 220.125.109.155:2967 -> xxx.yyy.92.36:5554 SYN ******S* 
Nov 21 22:51:37 220.125.109.155:3907 -> xxx.yyy.92.36:1023 SYN ******S* 
Nov 21 22:51:36 220.125.109.155:2965 -> xxx.yyy.92.34:5554 SYN ******S* 
Nov 21 22:51:36 220.125.109.155:2974 -> xxx.yyy.92.43:5554 SYN ******S* 
[...]
Nov 21 22:53:07 220.125.109.155:4841 -> xxx.yyy.92.199:9898 SYN ******S* 
Nov 21 22:53:08 220.125.109.155:1358 -> xxx.yyy.92.212:9898 SYN ******S* 
Nov 21 22:53:08 220.125.109.155:1412 -> xxx.yyy.92.221:9898 SYN ******S* 
Nov 21 22:53:08 220.125.109.155:1410 -> xxx.yyy.92.219:9898 SYN ******S* 
Nov 21 22:53:08 220.125.109.155:1411 -> xxx.yyy.92.220:9898 SYN ******S* 
Nov 21 22:53:08 220.125.109.155:1480 -> xxx.yyy.92.231:9898 SYN ******S* 
Nov 21 22:53:08 220.125.109.155:1485 -> xxx.yyy.92.236:9898 SYN ******S* 
Nov 21 22:53:08 220.125.109.155:1486 -> xxx.yyy.92.237:9898 SYN ******S* 
Nov 21 22:53:08 220.125.109.155:1492 -> xxx.yyy.92.239:9898 SYN ******S* 
8897

[...]
8550

[...]
7512

[...]
7115

Nov 21 23:56:07 218.61.0.27:1320 -> xxx.yyy.174.21:5554 SYN ******S* 
Nov 21 23:56:10 218.61.0.27:1788 -> xxx.yyy.174.21:9898 SYN ******S* 
Nov 21 23:56:07 218.61.0.27:1321 -> xxx.yyy.174.20:5554 SYN ******S* 
Nov 21 23:56:08 218.61.0.27:1531 -> xxx.yyy.174.20:1023 SYN ******S* 
Nov 21 23:56:07 218.61.0.27:1324 -> xxx.yyy.174.17:5554 SYN ******S* 
Nov 21 23:56:08 218.61.0.27:1534 -> xxx.yyy.174.17:1023 SYN ******S* 
Nov 21 23:56:07 218.61.0.27:1326 -> xxx.yyy.174.15:5554 SYN ******S* 
Nov 21 23:56:08 218.61.0.27:1511 -> xxx.yyy.174.15:1023 SYN ******S* 
[...]
Nov 21 23:58:18 218.61.0.27:2779 -> xxx.yyy.194.116:1023 SYN ******S* 
Nov 21 23:58:18 218.61.0.27:2946 -> xxx.yyy.194.96:9898 SYN ******S* 
Nov 21 23:58:18 218.61.0.27:2435 -> xxx.yyy.194.99:9898 SYN ******S* 
Nov 21 23:58:20 218.61.0.27:2577 -> xxx.yyy.194.107:9898 SYN ******S* 
Nov 21 23:58:20 218.61.0.27:2585 -> xxx.yyy.194.115:9898 SYN ******S* 
Nov 21 23:58:20 218.61.0.27:2584 -> xxx.yyy.194.114:9898 SYN ******S* 
Nov 21 23:58:20 218.61.0.27:2586 -> xxx.yyy.194.116:9898 SYN ******S* 
Nov 21 23:58:20 218.61.0.27:2587 -> xxx.yyy.194.117:9898 SYN ******S* 
Nov 21 23:58:20 218.61.0.27:2588 -> xxx.yyy.194.118:9898 SYN ******S* 
6844

[...]
6229

[...]
6142

Nov 21 22:51:55 221.148.3.193:2024 -> xxx.yyy.174.4:5554 SYN ******S* 
Nov 21 22:51:56 221.148.3.193:2696 -> xxx.yyy.174.4:1023 SYN ******S* 
Nov 21 22:51:58 221.148.3.193:4715 -> xxx.yyy.174.4:9898 SYN ******S* 
Nov 21 22:51:55 221.148.3.193:2025 -> xxx.yyy.174.5:5554 SYN ******S* 
Nov 21 22:51:58 221.148.3.193:4716 -> xxx.yyy.174.5:9898 SYN ******S* 
Nov 21 22:51:55 221.148.3.193:2029 -> xxx.yyy.174.8:5554 SYN ******S* 
Nov 21 22:51:55 221.148.3.193:2039 -> xxx.yyy.174.11:5554 SYN ******S* 
Nov 21 22:51:55 221.148.3.193:2030 -> xxx.yyy.174.9:5554 SYN ******S* 
[...]
Nov 21 22:52:39 221.148.3.193:2878 -> xxx.yyy.194.103:9898 SYN ******S* 
Nov 21 22:52:39 221.148.3.193:2973 -> xxx.yyy.194.107:9898 SYN ******S* 
Nov 21 22:52:39 221.148.3.193:2974 -> xxx.yyy.194.108:9898 SYN ******S* 
Nov 21 22:52:39 221.148.3.193:2975 -> xxx.yyy.194.109:9898 SYN ******S* 
Nov 21 22:52:39 221.148.3.193:3054 -> xxx.yyy.194.114:9898 SYN ******S* 
Nov 21 22:52:39 221.148.3.193:3069 -> xxx.yyy.194.120:9898 SYN ******S* 
Nov 21 22:52:39 221.148.3.193:3079 -> xxx.yyy.194.123:9898 SYN ******S* 
Nov 21 22:52:39 221.148.3.193:3078 -> xxx.yyy.194.122:9898 SYN ******S* 
Nov 21 22:52:39 221.148.3.193:3083 -> xxx.yyy.194.124:9898 SYN ******S* 
5895

Nov 21 22:59:38 218.44.113.22:1026 -> xxx.yyy.214.253:5554 SYN ******S* 
Nov 21 22:59:38 218.44.113.22:1027 -> xxx.yyy.214.254:5554 SYN ******S* 
Nov 21 22:59:41 218.44.113.22:2842 -> xxx.yyy.214.254:9898 SYN ******S* 
Nov 21 22:59:38 218.44.113.22:1028 -> xxx.yyy.214.255:5554 SYN ******S* 
Nov 21 22:59:38 218.44.113.22:1035 -> xxx.yyy.215.5:5554 SYN ******S* 
Nov 21 22:59:38 218.44.113.22:1041 -> xxx.yyy.215.10:5554 SYN ******S* 
Nov 21 22:59:38 218.44.113.22:4996 -> xxx.yyy.214.249:5554 SYN ******S* 
Nov 21 22:59:41 218.44.113.22:2837 -> xxx.yyy.214.249:9898 SYN ******S* 
[...]
Nov 21 23:00:25 218.44.113.22:1366 -> xxx.yyy.235.64:9898 SYN ******S* 
Nov 21 23:00:25 218.44.113.22:1389 -> xxx.yyy.235.69:9898 SYN ******S* 
Nov 21 23:00:25 218.44.113.22:1409 -> xxx.yyy.235.83:9898 SYN ******S* 
Nov 21 23:00:25 218.44.113.22:1415 -> xxx.yyy.235.89:9898 SYN ******S* 
Nov 21 23:00:25 218.44.113.22:1417 -> xxx.yyy.235.90:9898 SYN ******S* 
Nov 21 23:00:25 218.44.113.22:1468 -> xxx.yyy.235.104:9898 SYN ******S* 
Nov 21 23:00:25 218.44.113.22:1519 -> xxx.yyy.235.110:9898 SYN ******S* 
Nov 21 23:00:25 218.44.113.22:1518 -> xxx.yyy.235.109:9898 SYN ******S* 
Nov 21 23:00:25 218.44.113.22:1503 -> xxx.yyy.235.106:9898 SYN ******S* 
5435

--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa                     Cedar Falls, IA  50614-0121
email: Ken.Connelly at uni.edu    phone: (319) 273-5850    fax: (319) 273-7373



More information about the Intrusions mailing list