[Intrusions] [LOGS] Summary of large-scale portscanning detects

Ken.Connelly at uni.edu Ken.Connelly at uni.edu
Wed Nov 24 17:42:26 GMT 2004


The following extracts show the beginning and ending of scan activity
was detected on my network.  The number following each set is the total
number of probes for that source.  Timestamps are GMT-0600.

Nov 23 15:09:14 218.94.94.182:15107 -> xxx.yyy.1.0:3128 SYN ******S* 
Nov 23 15:09:14 218.94.94.182:15120 -> xxx.yyy.1.1:80 SYN ******S* 
Nov 23 15:09:14 218.94.94.182:15133 -> xxx.yyy.1.1:8080 SYN ******S* 
Nov 23 15:09:14 218.94.94.182:15138 -> xxx.yyy.1.1:2301 SYN ******S* 
Nov 23 15:09:14 218.94.94.182:15142 -> xxx.yyy.1.1:3128 SYN ******S* 
Nov 23 15:09:14 218.94.94.182:54713 -> xxx.yyy.1.2:3128 SYN ******S* 
Nov 23 15:09:14 218.94.94.182:63850 -> xxx.yyy.1.2:443 SYN ******S* 
Nov 23 15:09:14 218.94.94.182:54753 -> xxx.yyy.1.2:444 SYN ******S* 
[...]
Nov 23 17:25:14 218.94.94.182:55963 -> xxx.yyy.255.253:3128 SYN ******S* 
Nov 23 17:25:14 218.94.94.182:17655 -> xxx.yyy.255.253:444 SYN ******S* 
Nov 23 17:25:14 218.94.94.182:65050 -> xxx.yyy.255.254:80 SYN ******S* 
Nov 23 17:25:14 218.94.94.182:49432 -> xxx.yyy.255.254:8080 SYN ******S* 
Nov 23 17:25:14 218.94.94.182:49433 -> xxx.yyy.255.254:2301 SYN ******S* 
Nov 23 17:25:14 218.94.94.182:47765 -> xxx.yyy.255.254:3128 SYN ******S* 
Nov 23 17:25:14 218.94.94.182:49544 -> xxx.yyy.255.254:443 SYN ******S* 
Nov 23 17:25:14 218.94.94.182:35056 -> xxx.yyy.255.254:444 SYN ******S* 
201850

Nov 23 03:21:35 150.176.94.200:3620 -> xxx.yyy.1.0:138 SYN ******S* 
Nov 23 03:21:35 150.176.94.200:3621 -> xxx.yyy.1.0:139 SYN ******S* 
Nov 23 03:21:35 150.176.94.200:3622 -> xxx.yyy.1.0:137 SYN ******S* 
Nov 23 03:21:35 150.176.94.200:3624 -> xxx.yyy.1.0:64121 SYN ******S* 
Nov 23 03:21:35 150.176.94.200:3625 -> xxx.yyy.1.0:14232 SYN ******S* 
Nov 23 03:21:35 150.176.94.200:3626 -> xxx.yyy.1.0:3389 SYN ******S* 
Nov 23 03:21:35 150.176.94.200:3627 -> xxx.yyy.1.1:138 SYN ******S* 
Nov 23 03:21:35 150.176.94.200:3628 -> xxx.yyy.1.1:139 SYN ******S* 
[...]
Nov 23 03:26:00 150.176.94.200:3631 -> xxx.yyy.255.253:138 SYN ******S* 
Nov 23 03:26:00 150.176.94.200:3632 -> xxx.yyy.255.253:139 SYN ******S* 
Nov 23 03:26:00 150.176.94.200:3633 -> xxx.yyy.255.253:137 SYN ******S* 
Nov 23 03:26:00 150.176.94.200:3635 -> xxx.yyy.255.253:64121 SYN ******S* 
Nov 23 03:26:00 150.176.94.200:3636 -> xxx.yyy.255.253:14232 SYN ******S* 
Nov 23 03:26:00 150.176.94.200:3637 -> xxx.yyy.255.253:3389 SYN ******S* 
Nov 23 03:26:00 150.176.94.200:3642 -> xxx.yyy.255.254:64121 SYN ******S* 
Nov 23 03:26:00 150.176.94.200:3643 -> xxx.yyy.255.254:14232 SYN ******S* 
Nov 23 03:26:00 150.176.94.200:3644 -> xxx.yyy.255.254:3389 SYN ******S* 
199437

Nov 23 18:30:18 203.214.0.145:1209 -> xxx.yyy.1.0:139 SYN ******S* 
Nov 23 18:30:19 203.214.0.145:1210 -> xxx.yyy.1.1:139 SYN ******S* 
Nov 23 18:30:15 203.214.0.145:1211 -> xxx.yyy.1.2:139 SYN ******S* 
Nov 23 18:30:15 203.214.0.145:1212 -> xxx.yyy.1.3:139 SYN ******S* 
Nov 23 18:30:15 203.214.0.145:1214 -> xxx.yyy.1.4:139 SYN ******S* 
Nov 23 18:30:15 203.214.0.145:1215 -> xxx.yyy.1.5:139 SYN ******S* 
Nov 23 18:30:15 203.214.0.145:1216 -> xxx.yyy.1.6:139 SYN ******S* 
Nov 23 18:30:15 203.214.0.145:1217 -> xxx.yyy.1.7:139 SYN ******S* 
[...]
Nov 23 19:59:49 203.214.0.145:1684 -> xxx.yyy.255.245:139 SYN ******S* 
Nov 23 19:59:49 203.214.0.145:1685 -> xxx.yyy.255.246:139 SYN ******S* 
Nov 23 19:59:49 203.214.0.145:1687 -> xxx.yyy.255.248:139 SYN ******S* 
Nov 23 19:59:49 203.214.0.145:1686 -> xxx.yyy.255.247:139 SYN ******S* 
Nov 23 19:59:49 203.214.0.145:1690 -> xxx.yyy.255.251:139 SYN ******S* 
Nov 23 19:59:49 203.214.0.145:1693 -> xxx.yyy.255.254:139 SYN ******S* 
Nov 23 19:59:49 203.214.0.145:1692 -> xxx.yyy.255.253:139 SYN ******S* 
Nov 23 19:59:49 203.214.0.145:1691 -> xxx.yyy.255.252:139 SYN ******S* 
116395

Nov 23 16:19:51 68.145.106.183:1264 -> xxx.yyy.1.1:1433 SYN ******S* 
Nov 23 16:19:51 68.145.106.183:1265 -> xxx.yyy.1.2:1433 SYN ******S* 
Nov 23 16:19:51 68.145.106.183:1268 -> xxx.yyy.1.3:1433 SYN ******S* 
Nov 23 16:19:51 68.145.106.183:1270 -> xxx.yyy.1.5:1433 SYN ******S* 
Nov 23 16:19:51 68.145.106.183:1269 -> xxx.yyy.1.4:1433 SYN ******S* 
Nov 23 16:19:51 68.145.106.183:1271 -> xxx.yyy.1.6:1433 SYN ******S* 
Nov 23 16:19:51 68.145.106.183:1273 -> xxx.yyy.1.7:1433 SYN ******S* 
Nov 23 16:19:51 68.145.106.183:1278 -> xxx.yyy.1.9:1433 SYN ******S* 
[...]
Nov 23 18:14:32 68.145.106.183:3436 -> xxx.yyy.255.247:1433 SYN ******S* 
Nov 23 18:14:32 68.145.106.183:3440 -> xxx.yyy.255.248:1433 SYN ******S* 
Nov 23 18:14:32 68.145.106.183:3441 -> xxx.yyy.255.249:1433 SYN ******S* 
Nov 23 18:14:32 68.145.106.183:3442 -> xxx.yyy.255.250:1433 SYN ******S* 
Nov 23 18:14:32 68.145.106.183:3443 -> xxx.yyy.255.251:1433 SYN ******S* 
Nov 23 18:14:32 68.145.106.183:3446 -> xxx.yyy.255.252:1433 SYN ******S* 
Nov 23 18:14:33 68.145.106.183:3450 -> xxx.yyy.255.254:1433 SYN ******S* 
Nov 23 18:14:33 68.145.106.183:3447 -> xxx.yyy.255.253:1433 SYN ******S* 
113708

Nov 23 07:34:07 68.167.39.69:3977 -> xxx.yyy.1.1:1433 SYN ******S* 
Nov 23 07:34:04 68.167.39.69:3979 -> xxx.yyy.1.2:1433 SYN ******S* 
Nov 23 07:34:07 68.167.39.69:3980 -> xxx.yyy.1.3:1433 SYN ******S* 
Nov 23 07:34:07 68.167.39.69:3981 -> xxx.yyy.1.4:1433 SYN ******S* 
Nov 23 07:34:07 68.167.39.69:3983 -> xxx.yyy.1.6:1433 SYN ******S* 
Nov 23 07:34:07 68.167.39.69:3984 -> xxx.yyy.1.7:1433 SYN ******S* 
Nov 23 07:34:07 68.167.39.69:3985 -> xxx.yyy.1.8:1433 SYN ******S* 
Nov 23 07:34:07 68.167.39.69:3986 -> xxx.yyy.1.9:1433 SYN ******S* 
[...]
Nov 23 09:29:06 68.167.39.69:1554 -> xxx.yyy.255.243:1433 SYN ******S* 
Nov 23 09:29:06 68.167.39.69:1556 -> xxx.yyy.255.244:1433 SYN ******S* 
Nov 23 09:29:06 68.167.39.69:1558 -> xxx.yyy.255.245:1433 SYN ******S* 
Nov 23 09:29:06 68.167.39.69:1565 -> xxx.yyy.255.247:1433 SYN ******S* 
Nov 23 09:29:06 68.167.39.69:1568 -> xxx.yyy.255.249:1433 SYN ******S* 
Nov 23 09:29:06 68.167.39.69:1570 -> xxx.yyy.255.250:1433 SYN ******S* 
Nov 23 09:29:06 68.167.39.69:1574 -> xxx.yyy.255.251:1433 SYN ******S* 
Nov 23 09:29:07 68.167.39.69:1579 -> xxx.yyy.255.253:1433 SYN ******S* 
100840

Nov 23 02:20:32 203.122.72.142:1288 -> xxx.yyy.1.0:139 SYN ******S* 
Nov 23 02:20:32 203.122.72.142:1289 -> xxx.yyy.1.1:139 SYN ******S* 
Nov 23 02:20:32 203.122.72.142:1290 -> xxx.yyy.1.2:139 SYN ******S* 
Nov 23 02:20:29 203.122.72.142:1291 -> xxx.yyy.1.3:139 SYN ******S* 
Nov 23 02:20:32 203.122.72.142:1292 -> xxx.yyy.1.4:139 SYN ******S* 
Nov 23 02:20:32 203.122.72.142:1298 -> xxx.yyy.1.8:139 SYN ******S* 
Nov 23 02:20:32 203.122.72.142:1295 -> xxx.yyy.1.7:139 SYN ******S* 
Nov 23 02:20:32 203.122.72.142:1300 -> xxx.yyy.1.10:139 SYN ******S* 
[...]
Nov 23 02:42:55 203.122.72.142:4018 -> xxx.yyy.255.234:139 SYN ******S* 
Nov 23 02:42:55 203.122.72.142:4026 -> xxx.yyy.255.237:139 SYN ******S* 
Nov 23 02:42:55 203.122.72.142:4037 -> xxx.yyy.255.240:139 SYN ******S* 
Nov 23 02:42:55 203.122.72.142:4042 -> xxx.yyy.255.243:139 SYN ******S* 
Nov 23 02:42:55 203.122.72.142:4041 -> xxx.yyy.255.242:139 SYN ******S* 
Nov 23 02:42:55 203.122.72.142:4038 -> xxx.yyy.255.241:139 SYN ******S* 
Nov 23 02:42:55 203.122.72.142:4043 -> xxx.yyy.255.244:139 SYN ******S* 
Nov 23 02:42:55 203.122.72.142:4046 -> xxx.yyy.255.246:139 SYN ******S* 
Nov 23 02:42:55 203.122.72.142:4049 -> xxx.yyy.255.247:139 SYN ******S* 
95671

[...]
74164

Nov 23 03:52:01 68.15.238.67:4411 -> xxx.yyy.1.1:1433 SYN ******S* 
Nov 23 03:52:01 68.15.238.67:4412 -> xxx.yyy.1.2:1433 SYN ******S* 
Nov 23 03:52:04 68.15.238.67:4413 -> xxx.yyy.1.3:1433 SYN ******S* 
Nov 23 03:52:04 68.15.238.67:4414 -> xxx.yyy.1.4:1433 SYN ******S* 
Nov 23 03:52:04 68.15.238.67:4415 -> xxx.yyy.1.5:1433 SYN ******S* 
Nov 23 03:52:04 68.15.238.67:4417 -> xxx.yyy.1.7:1433 SYN ******S* 
Nov 23 03:52:04 68.15.238.67:4418 -> xxx.yyy.1.8:1433 SYN ******S* 
Nov 23 03:52:04 68.15.238.67:4419 -> xxx.yyy.1.9:1433 SYN ******S* 
[...]
Nov 23 04:03:49 68.15.238.67:4518 -> xxx.yyy.255.242:1433 SYN ******S* 
Nov 23 04:03:49 68.15.238.67:4515 -> xxx.yyy.255.239:1433 SYN ******S* 
Nov 23 04:03:49 68.15.238.67:4528 -> xxx.yyy.255.252:1433 SYN ******S* 
Nov 23 04:03:49 68.15.238.67:4525 -> xxx.yyy.255.249:1433 SYN ******S* 
Nov 23 04:03:49 68.15.238.67:4526 -> xxx.yyy.255.250:1433 SYN ******S* 
Nov 23 04:03:49 68.15.238.67:4529 -> xxx.yyy.255.253:1433 SYN ******S* 
Nov 23 04:03:49 68.15.238.67:4530 -> xxx.yyy.255.254:1433 SYN ******S* 
Nov 23 04:03:49 68.15.238.67:4527 -> xxx.yyy.255.251:1433 SYN ******S* 
70714

[...]
69059

Nov 23 21:42:10 164.77.201.91:2906 -> xxx.yyy.1.1:1433 SYN ******S* 
Nov 23 21:42:10 164.77.201.91:2908 -> xxx.yyy.1.3:1433 SYN ******S* 
Nov 23 21:42:08 164.77.201.91:2909 -> xxx.yyy.1.4:1433 SYN ******S* 
Nov 23 21:42:08 164.77.201.91:2911 -> xxx.yyy.1.6:1433 SYN ******S* 
Nov 23 21:42:08 164.77.201.91:2913 -> xxx.yyy.1.8:1433 SYN ******S* 
Nov 23 21:42:08 164.77.201.91:2914 -> xxx.yyy.1.9:1433 SYN ******S* 
Nov 23 21:42:08 164.77.201.91:2907 -> xxx.yyy.1.2:1433 SYN ******S* 
Nov 23 21:42:08 164.77.201.91:2915 -> xxx.yyy.1.10:1433 SYN ******S* 
[...]
Nov 23 21:55:57 164.77.201.91:3257 -> xxx.yyy.255.246:1433 SYN ******S* 
Nov 23 21:55:57 164.77.201.91:3248 -> xxx.yyy.255.241:1433 SYN ******S* 
Nov 23 21:55:57 164.77.201.91:3264 -> xxx.yyy.255.253:1433 SYN ******S* 
Nov 23 21:55:57 164.77.201.91:3261 -> xxx.yyy.255.250:1433 SYN ******S* 
Nov 23 21:55:57 164.77.201.91:3256 -> xxx.yyy.255.245:1433 SYN ******S* 
Nov 23 21:55:57 164.77.201.91:3265 -> xxx.yyy.255.254:1433 SYN ******S* 
Nov 23 21:55:57 164.77.201.91:3260 -> xxx.yyy.255.249:1433 SYN ******S* 
Nov 23 21:55:57 164.77.201.91:3262 -> xxx.yyy.255.251:1433 SYN ******S* 
Nov 23 21:55:57 164.77.201.91:3263 -> xxx.yyy.255.252:1433 SYN ******S* 
68442

Nov 23 18:36:23 195.67.120.194:55382 -> xxx.yyy.1.1:1433 SYN ******S* 
Nov 23 18:36:23 195.67.120.194:55383 -> xxx.yyy.1.2:1433 SYN ******S* 
Nov 23 18:36:26 195.67.120.194:55384 -> xxx.yyy.1.3:1433 SYN ******S* 
Nov 23 18:36:26 195.67.120.194:55385 -> xxx.yyy.1.4:1433 SYN ******S* 
Nov 23 18:36:26 195.67.120.194:55386 -> xxx.yyy.1.5:1433 SYN ******S* 
Nov 23 18:36:26 195.67.120.194:55387 -> xxx.yyy.1.6:1433 SYN ******S* 
Nov 23 18:36:26 195.67.120.194:55388 -> xxx.yyy.1.7:1433 SYN ******S* 
Nov 23 18:36:26 195.67.120.194:55389 -> xxx.yyy.1.8:1433 SYN ******S* 
[...]
Nov 23 18:48:05 195.67.120.194:18184 -> xxx.yyy.255.245:1433 SYN ******S* 
Nov 23 18:48:05 195.67.120.194:18183 -> xxx.yyy.255.244:1433 SYN ******S* 
Nov 23 18:48:05 195.67.120.194:18188 -> xxx.yyy.255.249:1433 SYN ******S* 
Nov 23 18:48:05 195.67.120.194:18187 -> xxx.yyy.255.248:1433 SYN ******S* 
Nov 23 18:48:05 195.67.120.194:18190 -> xxx.yyy.255.251:1433 SYN ******S* 
Nov 23 18:48:05 195.67.120.194:18193 -> xxx.yyy.255.254:1433 SYN ******S* 
Nov 23 18:48:05 195.67.120.194:18189 -> xxx.yyy.255.250:1433 SYN ******S* 
Nov 23 18:48:05 195.67.120.194:18191 -> xxx.yyy.255.252:1433 SYN ******S* 
Nov 23 18:48:05 195.67.120.194:18192 -> xxx.yyy.255.253:1433 SYN ******S* 
68310

Nov 23 03:55:57 216.73.141.167:4515 -> xxx.yyy.1.1:139 SYN ******S* 
Nov 23 03:55:57 216.73.141.167:4518 -> xxx.yyy.1.2:139 SYN ******S* 
Nov 23 03:55:57 216.73.141.167:4520 -> xxx.yyy.1.3:139 SYN ******S* 
Nov 23 03:55:57 216.73.141.167:4522 -> xxx.yyy.1.4:139 SYN ******S* 
Nov 23 03:55:57 216.73.141.167:4523 -> xxx.yyy.1.5:139 SYN ******S* 
Nov 23 03:55:57 216.73.141.167:4526 -> xxx.yyy.1.6:139 SYN ******S* 
Nov 23 03:55:57 216.73.141.167:4528 -> xxx.yyy.1.7:139 SYN ******S* 
Nov 23 03:55:54 216.73.141.167:4529 -> xxx.yyy.1.8:139 SYN ******S* 
[...]
Nov 23 04:21:20 216.73.141.167:1720 -> xxx.yyy.255.254:139 SYN ******S* 
Nov 23 04:21:20 216.73.141.167:1698 -> xxx.yyy.255.244:139 SYN ******S* 
Nov 23 04:21:20 216.73.141.167:1704 -> xxx.yyy.255.247:139 SYN ******S* 
Nov 23 04:21:20 216.73.141.167:1688 -> xxx.yyy.255.239:139 SYN ******S* 
Nov 23 04:21:20 216.73.141.167:1710 -> xxx.yyy.255.250:139 SYN ******S* 
Nov 23 04:21:20 216.73.141.167:1695 -> xxx.yyy.255.242:139 SYN ******S* 
Nov 23 04:21:21 216.73.141.167:1717 -> xxx.yyy.255.253:139 SYN ******S* 
Nov 23 04:21:21 216.73.141.167:1701 -> xxx.yyy.255.245:139 SYN ******S* 
Nov 23 04:21:21 216.73.141.167:1707 -> xxx.yyy.255.248:139 SYN ******S* 
67205

Nov 23 07:44:33 219.241.174.14:1086 -> xxx.yyy.1.1:4899 SYN ******S* 
Nov 23 07:44:33 219.241.174.14:1089 -> xxx.yyy.1.3:4899 SYN ******S* 
Nov 23 07:44:33 219.241.174.14:1088 -> xxx.yyy.1.2:4899 SYN ******S* 
Nov 23 07:44:32 219.241.174.14:1090 -> xxx.yyy.1.4:4899 SYN ******S* 
Nov 23 07:44:32 219.241.174.14:1096 -> xxx.yyy.1.10:4899 SYN ******S* 
Nov 23 07:44:32 219.241.174.14:1099 -> xxx.yyy.1.12:4899 SYN ******S* 
Nov 23 07:44:32 219.241.174.14:1093 -> xxx.yyy.1.7:4899 SYN ******S* 
Nov 23 07:44:32 219.241.174.14:1094 -> xxx.yyy.1.8:4899 SYN ******S* 
[...]
Nov 23 07:55:30 219.241.174.14:2659 -> xxx.yyy.252.132:4899 SYN ******S* 
Nov 23 07:55:31 219.241.174.14:2837 -> xxx.yyy.252.249:4899 SYN ******S* 
Nov 23 07:55:30 219.241.174.14:2839 -> xxx.yyy.252.251:4899 SYN ******S* 
Nov 23 07:55:31 219.241.174.14:2841 -> xxx.yyy.252.252:4899 SYN ******S* 
Nov 23 07:55:30 219.241.174.14:2843 -> xxx.yyy.253.1:4899 SYN ******S* 
Nov 23 07:55:31 219.241.174.14:2838 -> xxx.yyy.252.250:4899 SYN ******S* 
Nov 23 07:55:30 219.241.174.14:2842 -> xxx.yyy.252.253:4899 SYN ******S* 
Nov 23 07:55:30 219.241.174.14:2675 -> xxx.yyy.252.142:4899 SYN ******S* 
41939

Nov 23 12:03:44 148.235.130.172:3195 -> xxx.yyy.1.1:1080 SYN ******S* 
Nov 23 12:03:43 148.235.130.172:3200 -> xxx.yyy.1.6:1080 SYN ******S* 
Nov 23 12:03:46 148.235.130.172:3198 -> xxx.yyy.1.4:1080 SYN ******S* 
Nov 23 12:03:44 148.235.130.172:3197 -> xxx.yyy.1.3:1080 SYN ******S* 
Nov 23 12:03:44 148.235.130.172:3196 -> xxx.yyy.1.2:1080 SYN ******S* 
Nov 23 12:03:46 148.235.130.172:3201 -> xxx.yyy.1.7:1080 SYN ******S* 
Nov 23 12:03:46 148.235.130.172:3207 -> xxx.yyy.1.13:1080 SYN ******S* 
Nov 23 12:03:46 148.235.130.172:3206 -> xxx.yyy.1.12:1080 SYN ******S* 
[...]
Nov 23 12:15:24 148.235.130.172:1800 -> xxx.yyy.255.235:1080 SYN ******S* 
Nov 23 12:15:24 148.235.130.172:1797 -> xxx.yyy.255.232:1080 SYN ******S* 
Nov 23 12:15:24 148.235.130.172:1799 -> xxx.yyy.255.234:1080 SYN ******S* 
Nov 23 12:15:24 148.235.130.172:1809 -> xxx.yyy.255.244:1080 SYN ******S* 
Nov 23 12:15:24 148.235.130.172:1806 -> xxx.yyy.255.241:1080 SYN ******S* 
Nov 23 12:15:24 148.235.130.172:1805 -> xxx.yyy.255.240:1080 SYN ******S* 
Nov 23 12:15:24 148.235.130.172:1819 -> xxx.yyy.255.254:1080 SYN ******S* 
Nov 23 12:15:24 148.235.130.172:1816 -> xxx.yyy.255.251:1080 SYN ******S* 
Nov 23 12:15:24 148.235.130.172:1818 -> xxx.yyy.255.253:1080 SYN ******S* 
40357

[...]
31152

[...]
20416

Nov 23 23:43:34 60.20.59.134:1568 -> xxx.yyy.133.14:5554 SYN ******S* 
Nov 23 23:43:35 60.20.59.134:1887 -> xxx.yyy.133.14:1023 SYN ******S* 
Nov 23 23:43:37 60.20.59.134:2374 -> xxx.yyy.133.14:9898 SYN ******S* 
Nov 23 23:43:34 60.20.59.134:1569 -> xxx.yyy.133.15:5554 SYN ******S* 
Nov 23 23:43:35 60.20.59.134:1894 -> xxx.yyy.133.15:1023 SYN ******S* 
Nov 23 23:43:37 60.20.59.134:2381 -> xxx.yyy.133.15:9898 SYN ******S* 
Nov 23 23:43:34 60.20.59.134:1571 -> xxx.yyy.133.17:5554 SYN ******S* 
Nov 23 23:43:35 60.20.59.134:1896 -> xxx.yyy.133.17:1023 SYN ******S* 
[...]
Nov 23 23:44:55 60.20.59.134:4436 -> xxx.yyy.153.127:9898 SYN ******S* 
Nov 23 23:44:55 60.20.59.134:4447 -> xxx.yyy.153.129:9898 SYN ******S* 
Nov 23 23:44:55 60.20.59.134:4461 -> xxx.yyy.153.130:9898 SYN ******S* 
Nov 23 23:44:55 60.20.59.134:4468 -> xxx.yyy.153.131:9898 SYN ******S* 
Nov 23 23:44:55 60.20.59.134:4475 -> xxx.yyy.153.132:9898 SYN ******S* 
Nov 23 23:44:55 60.20.59.134:4476 -> xxx.yyy.153.133:9898 SYN ******S* 
Nov 23 23:44:55 60.20.59.134:4479 -> xxx.yyy.153.134:9898 SYN ******S* 
Nov 23 23:44:55 60.20.59.134:4493 -> xxx.yyy.153.135:9898 SYN ******S* 
14678

Nov 23 22:41:07 222.121.200.26:2601 -> xxx.yyy.235.113:5554 SYN ******S* 
Nov 23 22:41:08 222.121.200.26:2844 -> xxx.yyy.235.113:1023 SYN ******S* 
Nov 23 22:41:10 222.121.200.26:3358 -> xxx.yyy.235.113:9898 SYN ******S* 
Nov 23 22:41:07 222.121.200.26:2600 -> xxx.yyy.235.112:5554 SYN ******S* 
Nov 23 22:41:10 222.121.200.26:3359 -> xxx.yyy.235.112:9898 SYN ******S* 
Nov 23 22:41:07 222.121.200.26:2602 -> xxx.yyy.235.114:5554 SYN ******S* 
Nov 23 22:41:08 222.121.200.26:2846 -> xxx.yyy.235.114:1023 SYN ******S* 
Nov 23 22:41:10 222.121.200.26:3360 -> xxx.yyy.235.114:9898 SYN ******S* 
[...]
Nov 23 22:42:39 222.121.200.26:1802 -> xxx.yyy.255.227:9898 SYN ******S* 
Nov 23 22:42:39 222.121.200.26:1806 -> xxx.yyy.255.228:9898 SYN ******S* 
Nov 23 22:42:39 222.121.200.26:1807 -> xxx.yyy.255.229:9898 SYN ******S* 
Nov 23 22:42:39 222.121.200.26:1819 -> xxx.yyy.255.230:9898 SYN ******S* 
Nov 23 22:42:39 222.121.200.26:1820 -> xxx.yyy.255.231:9898 SYN ******S* 
Nov 23 22:42:39 222.121.200.26:1821 -> xxx.yyy.255.232:9898 SYN ******S* 
Nov 23 22:42:39 222.121.200.26:1822 -> xxx.yyy.255.233:9898 SYN ******S* 
Nov 23 22:42:39 222.121.200.26:1823 -> xxx.yyy.255.234:9898 SYN ******S* 
14054

Nov 23 23:56:51 221.200.102.137:2224 -> xxx.yyy.236.76:5554 SYN ******S* 
Nov 23 23:56:52 221.200.102.137:3498 -> xxx.yyy.236.76:1023 SYN ******S* 
Nov 23 23:56:54 221.200.102.137:2625 -> xxx.yyy.236.76:9898 SYN ******S* 
Nov 23 23:56:51 221.200.102.137:2228 -> xxx.yyy.236.77:5554 SYN ******S* 
Nov 23 23:56:52 221.200.102.137:3499 -> xxx.yyy.236.77:1023 SYN ******S* 
Nov 23 23:56:54 221.200.102.137:2628 -> xxx.yyy.236.77:9898 SYN ******S* 
Nov 23 23:56:52 221.200.102.137:2238 -> xxx.yyy.236.79:5554 SYN ******S* 
Nov 23 23:56:53 221.200.102.137:3513 -> xxx.yyy.236.79:1023 SYN ******S* 
[...]
Nov 23 23:58:40 221.200.102.137:1467 -> xxx.yyy.255.246:9898 SYN ******S* 
Nov 23 23:58:40 221.200.102.137:1468 -> xxx.yyy.255.247:9898 SYN ******S* 
Nov 23 23:58:40 221.200.102.137:1479 -> xxx.yyy.255.248:9898 SYN ******S* 
Nov 23 23:58:40 221.200.102.137:1481 -> xxx.yyy.255.249:9898 SYN ******S* 
Nov 23 23:58:40 221.200.102.137:1501 -> xxx.yyy.255.250:9898 SYN ******S* 
Nov 23 23:58:40 221.200.102.137:1503 -> xxx.yyy.255.251:9898 SYN ******S* 
Nov 23 23:58:40 221.200.102.137:1504 -> xxx.yyy.255.252:9898 SYN ******S* 
Nov 23 23:58:40 221.200.102.137:1506 -> xxx.yyy.255.253:9898 SYN ******S* 
Nov 23 23:58:40 221.200.102.137:1520 -> xxx.yyy.255.254:9898 SYN ******S* 
13570

[...]
13429

[...]
12495

Nov 23 23:56:13 221.203.169.200:1422 -> xxx.yyy.235.115:5554 SYN ******S* 
Nov 23 23:56:14 221.203.169.200:1880 -> xxx.yyy.235.115:1023 SYN ******S* 
Nov 23 23:56:16 221.203.169.200:3025 -> xxx.yyy.235.115:9898 SYN ******S* 
Nov 23 23:56:13 221.203.169.200:1419 -> xxx.yyy.235.112:5554 SYN ******S* 
Nov 23 23:56:14 221.203.169.200:1877 -> xxx.yyy.235.112:1023 SYN ******S* 
Nov 23 23:56:16 221.203.169.200:3022 -> xxx.yyy.235.112:9898 SYN ******S* 
Nov 23 23:56:13 221.203.169.200:1420 -> xxx.yyy.235.113:5554 SYN ******S* 
Nov 23 23:56:14 221.203.169.200:1878 -> xxx.yyy.235.113:1023 SYN ******S* 
[...]
Nov 23 23:56:55 221.203.169.200:3329 -> xxx.yyy.255.33:9898 SYN ******S* 
Nov 23 23:56:55 221.203.169.200:3510 -> xxx.yyy.255.41:9898 SYN ******S* 
Nov 23 23:56:55 221.203.169.200:3518 -> xxx.yyy.255.48:9898 SYN ******S* 
Nov 23 23:56:55 221.203.169.200:3561 -> xxx.yyy.255.83:9898 SYN ******S* 
Nov 23 23:56:55 221.203.169.200:3545 -> xxx.yyy.255.67:9898 SYN ******S* 
Nov 23 23:56:55 221.203.169.200:3547 -> xxx.yyy.255.69:9898 SYN ******S* 
Nov 23 23:56:55 221.203.169.200:3548 -> xxx.yyy.255.70:9898 SYN ******S* 
Nov 23 23:56:55 221.203.169.200:3549 -> xxx.yyy.255.71:9898 SYN ******S* 
Nov 23 23:56:55 221.203.169.200:3550 -> xxx.yyy.255.72:9898 SYN ******S* 
12280

[...]
11863

[...]
11080

Nov 23 16:28:13 61.150.123.210:24358 -> xxx.yyy.1.3:1433 SYN ******S* 
Nov 23 16:28:16 61.150.123.210:26567 -> xxx.yyy.1.1:1433 SYN ******S* 
Nov 23 16:28:13 61.150.123.210:24359 -> xxx.yyy.1.4:1433 SYN ******S* 
Nov 23 16:28:13 61.150.123.210:24375 -> xxx.yyy.1.10:1433 SYN ******S* 
Nov 23 16:28:16 61.150.123.210:24376 -> xxx.yyy.1.13:1433 SYN ******S* 
Nov 23 16:28:16 61.150.123.210:26570 -> xxx.yyy.1.12:1433 SYN ******S* 
Nov 23 16:28:16 61.150.123.210:24390 -> xxx.yyy.1.23:1433 SYN ******S* 
Nov 23 16:28:16 61.150.123.210:24391 -> xxx.yyy.1.24:1433 SYN ******S* 
[...]
Nov 23 17:37:26 61.150.123.210:41976 -> xxx.yyy.77.214:1433 SYN ******S* 
Nov 23 17:37:26 61.150.123.210:41994 -> xxx.yyy.77.219:1433 SYN ******S* 
Nov 23 17:37:26 61.150.123.210:41917 -> xxx.yyy.77.190:1433 SYN ******S* 
Nov 23 17:37:26 61.150.123.210:42009 -> xxx.yyy.77.227:1433 SYN ******S* 
Nov 23 17:37:26 61.150.123.210:42002 -> xxx.yyy.77.223:1433 SYN ******S* 
Nov 23 17:37:26 61.150.123.210:42004 -> xxx.yyy.77.224:1433 SYN ******S* 
Nov 23 17:37:27 61.150.123.210:42040 -> xxx.yyy.77.229:1433 SYN ******S* 
Nov 23 17:37:28 61.150.123.210:42392 -> xxx.yyy.77.230:1433 SYN ******S* 
10992

Nov 23 22:56:39 221.241.154.45:1898 -> xxx.yyy.214.249:5554 SYN ******S* 
Nov 23 22:56:39 221.241.154.45:1895 -> xxx.yyy.214.246:5554 SYN ******S* 
Nov 23 22:56:39 221.241.154.45:1897 -> xxx.yyy.214.248:5554 SYN ******S* 
Nov 23 22:56:40 221.241.154.45:2328 -> xxx.yyy.214.248:1023 SYN ******S* 
Nov 23 22:56:39 221.241.154.45:1899 -> xxx.yyy.214.250:5554 SYN ******S* 
Nov 23 22:56:40 221.241.154.45:2330 -> xxx.yyy.214.250:1023 SYN ******S* 
Nov 23 22:56:39 221.241.154.45:1914 -> xxx.yyy.215.19:5554 SYN ******S* 
Nov 23 22:56:39 221.241.154.45:1920 -> xxx.yyy.215.30:5554 SYN ******S* 
[...]
Nov 23 22:59:00 221.241.154.45:3695 -> xxx.yyy.216.74:5554 SYN ******S* 
Nov 23 22:59:01 221.241.154.45:4171 -> xxx.yyy.216.74:1023 SYN ******S* 
Nov 23 22:59:03 221.241.154.45:1314 -> xxx.yyy.216.74:9898 SYN ******S* 
Nov 23 22:59:00 221.241.154.45:3696 -> xxx.yyy.216.75:5554 SYN ******S* 
Nov 23 22:59:01 221.241.154.45:4172 -> xxx.yyy.216.75:1023 SYN ******S* 
Nov 23 22:59:03 221.241.154.45:1315 -> xxx.yyy.216.75:9898 SYN ******S* 
Nov 23 22:59:00 221.241.154.45:3693 -> xxx.yyy.216.71:5554 SYN ******S* 
Nov 23 22:59:01 221.241.154.45:4183 -> xxx.yyy.216.71:1023 SYN ******S* 
Nov 23 22:59:03 221.241.154.45:1336 -> xxx.yyy.216.71:9898 SYN ******S* 
10306

--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa                     Cedar Falls, IA  50614-0121
email: Ken.Connelly at uni.edu    phone: (319) 273-5850    fax: (319) 273-7373



More information about the Intrusions mailing list