[Intrusions] [LOGS] Summary of large-scale portscanning detects

Ken.Connelly at uni.edu Ken.Connelly at uni.edu
Sun Nov 28 18:32:28 GMT 2004


The following extracts show the beginning and ending of scan activity
was detected on my network.  The number following each set is the total
number of probes for that source.  Timestamps are GMT-0600.

Nov 27 16:15:13 200.72.161.178:1583 -> xxx.yyy.1.1:1433 SYN ******S* 
Nov 27 16:15:13 200.72.161.178:1584 -> xxx.yyy.1.2:1433 SYN ******S* 
Nov 27 16:15:13 200.72.161.178:1586 -> xxx.yyy.1.3:1433 SYN ******S* 
Nov 27 16:15:13 200.72.161.178:1588 -> xxx.yyy.1.4:1433 SYN ******S* 
Nov 27 16:15:13 200.72.161.178:1590 -> xxx.yyy.1.5:1433 SYN ******S* 
Nov 27 16:15:13 200.72.161.178:1592 -> xxx.yyy.1.6:1433 SYN ******S* 
Nov 27 16:15:13 200.72.161.178:1594 -> xxx.yyy.1.7:1433 SYN ******S* 
Nov 27 16:15:13 200.72.161.178:1596 -> xxx.yyy.1.8:1433 SYN ******S* 
[...]
Nov 27 18:09:53 200.72.161.178:2890 -> xxx.yyy.255.247:1433 SYN ******S* 
Nov 27 18:09:53 200.72.161.178:2894 -> xxx.yyy.255.249:1433 SYN ******S* 
Nov 27 18:09:53 200.72.161.178:2892 -> xxx.yyy.255.248:1433 SYN ******S* 
Nov 27 18:09:53 200.72.161.178:2903 -> xxx.yyy.255.251:1433 SYN ******S* 
Nov 27 18:09:53 200.72.161.178:2902 -> xxx.yyy.255.250:1433 SYN ******S* 
Nov 27 18:09:53 200.72.161.178:2913 -> xxx.yyy.255.252:1433 SYN ******S* 
Nov 27 18:09:53 200.72.161.178:2914 -> xxx.yyy.255.253:1433 SYN ******S* 
Nov 27 18:09:53 200.72.161.178:2919 -> xxx.yyy.255.254:1433 SYN ******S* 
120956

Nov 27 00:00:20 68.23.102.243:2082 -> xxx.yyy.69.128:10265 SYN ******S* 
Nov 27 00:00:17 68.23.102.243:2073 -> xxx.yyy.69.128:10262 SYN ******S* 
Nov 27 00:00:18 68.23.102.243:2099 -> xxx.yyy.69.128:10259 SYN ******S* 
Nov 27 00:00:19 68.23.102.243:2101 -> xxx.yyy.69.128:10266 SYN ******S* 
Nov 27 00:00:20 68.23.102.243:2083 -> xxx.yyy.74.57:10250 SYN ******S* 
Nov 27 00:00:14 68.23.102.243:2069 -> xxx.yyy.74.57:10255 SYN ******S* 
Nov 27 00:00:19 68.23.102.243:2091 -> xxx.yyy.74.57:10248 SYN ******S* 
Nov 27 00:00:18 68.23.102.243:2096 -> xxx.yyy.74.57:10253 SYN ******S* 
[...]
Nov 27 23:59:52 68.23.102.243:1425 -> xxx.yyy.74.57:10250 SYN ******S* 
Nov 27 23:59:53 68.23.102.243:1430 -> xxx.yyy.74.57:10255 SYN ******S* 
Nov 27 23:59:54 68.23.102.243:1439 -> xxx.yyy.74.57:10248 SYN ******S* 
Nov 27 23:59:52 68.23.102.243:1426 -> xxx.yyy.69.128:10262 SYN ******S* 
Nov 27 23:59:53 68.23.102.243:1427 -> xxx.yyy.69.128:10265 SYN ******S* 
Nov 27 23:59:57 68.23.102.243:1439 -> xxx.yyy.74.57:10248 SYN ******S* 
Nov 27 23:59:58 68.23.102.243:1425 -> xxx.yyy.74.57:10250 SYN ******S* 
Nov 27 23:59:57 68.23.102.243:1450 -> xxx.yyy.69.128:10259 SYN ******S* 
Nov 27 23:59:58 68.23.102.243:1426 -> xxx.yyy.69.128:10262 SYN ******S* 
86255

Nov 27 18:34:33 211.222.18.1:62974 -> xxx.yyy.1.1:1433 SYN ******S* 
Nov 27 18:34:33 211.222.18.1:62977 -> xxx.yyy.1.2:1433 SYN ******S* 
Nov 27 18:34:30 211.222.18.1:62986 -> xxx.yyy.1.5:1433 SYN ******S* 
Nov 27 18:34:33 211.222.18.1:62989 -> xxx.yyy.1.6:1433 SYN ******S* 
Nov 27 18:34:33 211.222.18.1:62992 -> xxx.yyy.1.7:1433 SYN ******S* 
Nov 27 18:34:33 211.222.18.1:62995 -> xxx.yyy.1.8:1433 SYN ******S* 
Nov 27 18:34:33 211.222.18.1:62998 -> xxx.yyy.1.9:1433 SYN ******S* 
Nov 27 18:34:33 211.222.18.1:63001 -> xxx.yyy.1.10:1433 SYN ******S* 
[...]
Nov 27 18:46:38 211.222.18.1:7694 -> xxx.yyy.255.245:1433 SYN ******S* 
Nov 27 18:46:38 211.222.18.1:7715 -> xxx.yyy.255.252:1433 SYN ******S* 
Nov 27 18:46:38 211.222.18.1:7706 -> xxx.yyy.255.249:1433 SYN ******S* 
Nov 27 18:46:38 211.222.18.1:7703 -> xxx.yyy.255.248:1433 SYN ******S* 
Nov 27 18:46:38 211.222.18.1:7712 -> xxx.yyy.255.251:1433 SYN ******S* 
Nov 27 18:46:38 211.222.18.1:7709 -> xxx.yyy.255.250:1433 SYN ******S* 
Nov 27 18:46:38 211.222.18.1:7697 -> xxx.yyy.255.246:1433 SYN ******S* 
Nov 27 18:46:38 211.222.18.1:7700 -> xxx.yyy.255.247:1433 SYN ******S* 
Nov 27 18:46:38 211.222.18.1:7721 -> xxx.yyy.255.254:1433 SYN ******S* 
70631

Nov 27 01:07:28 208.57.138.249:4541 -> xxx.yyy.1.1:1433 SYN ******S* 
Nov 27 01:07:31 208.57.138.249:4543 -> xxx.yyy.1.2:1433 SYN ******S* 
Nov 27 01:07:31 208.57.138.249:4545 -> xxx.yyy.1.3:1433 SYN ******S* 
Nov 27 01:07:31 208.57.138.249:4547 -> xxx.yyy.1.4:1433 SYN ******S* 
Nov 27 01:07:31 208.57.138.249:4553 -> xxx.yyy.1.7:1433 SYN ******S* 
Nov 27 01:07:31 208.57.138.249:4555 -> xxx.yyy.1.8:1433 SYN ******S* 
Nov 27 01:07:31 208.57.138.249:4557 -> xxx.yyy.1.9:1433 SYN ******S* 
Nov 27 01:07:31 208.57.138.249:4559 -> xxx.yyy.1.10:1433 SYN ******S* 
[...]
Nov 27 01:20:33 208.57.138.249:2709 -> xxx.yyy.255.245:1433 SYN ******S* 
Nov 27 01:20:33 208.57.138.249:2699 -> xxx.yyy.255.240:1433 SYN ******S* 
Nov 27 01:20:33 208.57.138.249:2715 -> xxx.yyy.255.248:1433 SYN ******S* 
Nov 27 01:20:33 208.57.138.249:2705 -> xxx.yyy.255.243:1433 SYN ******S* 
Nov 27 01:20:33 208.57.138.249:2723 -> xxx.yyy.255.252:1433 SYN ******S* 
Nov 27 01:20:33 208.57.138.249:2725 -> xxx.yyy.255.253:1433 SYN ******S* 
Nov 27 01:20:33 208.57.138.249:2721 -> xxx.yyy.255.251:1433 SYN ******S* 
Nov 27 01:20:33 208.57.138.249:2727 -> xxx.yyy.255.254:1433 SYN ******S* 
67186

Nov 27 18:09:35 155.246.48.80:3358 -> xxx.yyy.1.1:143 SYN ******S* 
Nov 27 18:09:35 155.246.48.80:3365 -> xxx.yyy.1.2:143 SYN ******S* 
Nov 27 18:09:35 155.246.48.80:3373 -> xxx.yyy.1.3:143 SYN ******S* 
Nov 27 18:09:32 155.246.48.80:3380 -> xxx.yyy.1.4:143 SYN ******S* 
Nov 27 18:09:32 155.246.48.80:3386 -> xxx.yyy.1.5:143 SYN ******S* 
Nov 27 18:09:35 155.246.48.80:3392 -> xxx.yyy.1.6:143 SYN ******S* 
Nov 27 18:09:35 155.246.48.80:3397 -> xxx.yyy.1.7:143 SYN ******S* 
Nov 27 18:09:35 155.246.48.80:3403 -> xxx.yyy.1.8:143 SYN ******S* 
[...]
Nov 27 18:21:21 155.246.48.80:4544 -> xxx.yyy.255.248:143 SYN ******S* 
Nov 27 18:21:21 155.246.48.80:4539 -> xxx.yyy.255.247:143 SYN ******S* 
Nov 27 18:21:21 155.246.48.80:4556 -> xxx.yyy.255.250:143 SYN ******S* 
Nov 27 18:21:21 155.246.48.80:4549 -> xxx.yyy.255.249:143 SYN ******S* 
Nov 27 18:21:21 155.246.48.80:4573 -> xxx.yyy.255.253:143 SYN ******S* 
Nov 27 18:21:21 155.246.48.80:4561 -> xxx.yyy.255.251:143 SYN ******S* 
Nov 27 18:21:21 155.246.48.80:4578 -> xxx.yyy.255.254:143 SYN ******S* 
Nov 27 18:21:21 155.246.48.80:4567 -> xxx.yyy.255.252:143 SYN ******S* 
62544

Nov 27 03:15:03 195.137.92.138:3998 -> xxx.yyy.1.1:1521 SYN ******S* 
Nov 27 03:15:03 195.137.92.138:3999 -> xxx.yyy.1.2:1521 SYN ******S* 
Nov 27 03:15:03 195.137.92.138:4000 -> xxx.yyy.1.3:1521 SYN ******S* 
Nov 27 03:15:04 195.137.92.138:4001 -> xxx.yyy.1.4:1521 SYN ******S* 
Nov 27 03:15:04 195.137.92.138:4002 -> xxx.yyy.1.5:1521 SYN ******S* 
Nov 27 03:15:04 195.137.92.138:4003 -> xxx.yyy.1.6:1521 SYN ******S* 
Nov 27 03:15:04 195.137.92.138:4004 -> xxx.yyy.1.7:1521 SYN ******S* 
Nov 27 03:15:04 195.137.92.138:4005 -> xxx.yyy.1.8:1521 SYN ******S* 
[...]
Nov 27 03:28:31 195.137.92.138:3423 -> xxx.yyy.255.250:1521 SYN ******S* 
Nov 27 03:28:31 195.137.92.138:3424 -> xxx.yyy.255.251:1521 SYN ******S* 
Nov 27 03:28:31 195.137.92.138:3425 -> xxx.yyy.255.252:1521 SYN ******S* 
Nov 27 03:28:31 195.137.92.138:3426 -> xxx.yyy.255.253:1521 SYN ******S* 
Nov 27 03:28:31 195.137.92.138:3427 -> xxx.yyy.255.254:1521 SYN ******S* 
Nov 27 03:28:31 195.137.92.138:3349 -> xxx.yyy.255.177:1521 SYN ******S* 
Nov 27 03:28:31 195.137.92.138:3350 -> xxx.yyy.255.178:1521 SYN ******S* 
Nov 27 03:28:31 195.137.92.138:3388 -> xxx.yyy.255.216:1521 SYN ******S* 
61846

Nov 27 00:16:04 211.214.247.164:1413 -> xxx.yyy.169.3:1433 SYN ******S* 
Nov 27 00:16:04 211.214.247.164:1412 -> xxx.yyy.169.2:1433 SYN ******S* 
Nov 27 00:16:04 211.214.247.164:1418 -> xxx.yyy.169.8:1433 SYN ******S* 
Nov 27 00:16:04 211.214.247.164:1417 -> xxx.yyy.169.7:1433 SYN ******S* 
Nov 27 00:16:04 211.214.247.164:1411 -> xxx.yyy.169.1:1433 SYN ******S* 
Nov 27 00:16:04 211.214.247.164:1427 -> xxx.yyy.169.17:1433 SYN ******S* 
Nov 27 00:16:04 211.214.247.164:1437 -> xxx.yyy.169.26:1433 SYN ******S* 
Nov 27 00:16:04 211.214.247.164:1414 -> xxx.yyy.169.4:1433 SYN ******S* 
[...]
Nov 27 23:41:26 211.214.247.164:2326 -> xxx.yyy.70.227:1433 SYN ******S* 
Nov 27 23:41:26 211.214.247.164:2332 -> xxx.yyy.70.233:1433 SYN ******S* 
Nov 27 23:41:26 211.214.247.164:2336 -> xxx.yyy.70.237:1433 SYN ******S* 
Nov 27 23:41:26 211.214.247.164:2341 -> xxx.yyy.70.242:1433 SYN ******S* 
Nov 27 23:41:26 211.214.247.164:2337 -> xxx.yyy.70.238:1433 SYN ******S* 
Nov 27 23:41:26 211.214.247.164:2339 -> xxx.yyy.70.240:1433 SYN ******S* 
Nov 27 23:41:26 211.214.247.164:2342 -> xxx.yyy.70.243:1433 SYN ******S* 
Nov 27 23:41:26 211.214.247.164:2347 -> xxx.yyy.70.248:1433 SYN ******S* 
Nov 27 23:41:26 211.214.247.164:2352 -> xxx.yyy.70.253:1433 SYN ******S* 
46336

Nov 27 07:13:49 143.233.187.252:1770 -> xxx.yyy.1.1:4899 SYN ******S* 
Nov 27 07:13:49 143.233.187.252:1771 -> xxx.yyy.1.2:4899 SYN ******S* 
Nov 27 07:13:49 143.233.187.252:1772 -> xxx.yyy.1.3:4899 SYN ******S* 
Nov 27 07:13:51 143.233.187.252:1773 -> xxx.yyy.1.4:4899 SYN ******S* 
Nov 27 07:13:51 143.233.187.252:1774 -> xxx.yyy.1.5:4899 SYN ******S* 
Nov 27 07:13:48 143.233.187.252:1775 -> xxx.yyy.1.6:4899 SYN ******S* 
Nov 27 07:13:51 143.233.187.252:1776 -> xxx.yyy.1.7:4899 SYN ******S* 
Nov 27 07:13:51 143.233.187.252:1777 -> xxx.yyy.1.8:4899 SYN ******S* 
[...]
Nov 27 07:25:25 143.233.187.252:2963 -> xxx.yyy.253.11:4899 SYN ******S* 
Nov 27 07:25:25 143.233.187.252:2971 -> xxx.yyy.253.17:4899 SYN ******S* 
Nov 27 07:25:25 143.233.187.252:3215 -> xxx.yyy.253.120:4899 SYN ******S* 
Nov 27 07:25:25 143.233.187.252:3007 -> xxx.yyy.253.44:4899 SYN ******S* 
Nov 27 07:25:25 143.233.187.252:3132 -> xxx.yyy.253.85:4899 SYN ******S* 
Nov 27 07:25:25 143.233.187.252:3155 -> xxx.yyy.253.95:4899 SYN ******S* 
Nov 27 07:25:25 143.233.187.252:3047 -> xxx.yyy.253.66:4899 SYN ******S* 
Nov 27 07:25:25 143.233.187.252:3020 -> xxx.yyy.253.53:4899 SYN ******S* 
Nov 27 07:25:25 143.233.187.252:3012 -> xxx.yyy.253.47:4899 SYN ******S* 
46133

Nov 27 23:36:49 65.210.124.204:1503 -> xxx.yyy.1.2:1433 SYN ******S* 
Nov 27 23:36:49 65.210.124.204:1502 -> xxx.yyy.1.1:1433 SYN ******S* 
Nov 27 23:36:50 65.210.124.204:1504 -> xxx.yyy.1.3:1433 SYN ******S* 
Nov 27 23:36:50 65.210.124.204:1505 -> xxx.yyy.1.4:1433 SYN ******S* 
Nov 27 23:36:50 65.210.124.204:1506 -> xxx.yyy.1.5:1433 SYN ******S* 
Nov 27 23:36:50 65.210.124.204:1507 -> xxx.yyy.1.6:1433 SYN ******S* 
Nov 27 23:36:50 65.210.124.204:1508 -> xxx.yyy.1.7:1433 SYN ******S* 
Nov 27 23:36:50 65.210.124.204:1509 -> xxx.yyy.1.8:1433 SYN ******S* 
[...]
Nov 27 23:47:21 65.210.124.204:3928 -> xxx.yyy.255.247:1433 SYN ******S* 
Nov 27 23:47:21 65.210.124.204:3929 -> xxx.yyy.255.248:1433 SYN ******S* 
Nov 27 23:47:21 65.210.124.204:3930 -> xxx.yyy.255.249:1433 SYN ******S* 
Nov 27 23:47:22 65.210.124.204:3931 -> xxx.yyy.255.250:1433 SYN ******S* 
Nov 27 23:47:22 65.210.124.204:3932 -> xxx.yyy.255.251:1433 SYN ******S* 
Nov 27 23:47:22 65.210.124.204:3933 -> xxx.yyy.255.252:1433 SYN ******S* 
Nov 27 23:47:22 65.210.124.204:3934 -> xxx.yyy.255.253:1433 SYN ******S* 
Nov 27 23:47:22 65.210.124.204:3935 -> xxx.yyy.255.254:1433 SYN ******S* 
43288

[...]
41307

Nov 27 00:39:09 64.113.75.99:1470 -> xxx.yyy.74.188:6348 SYN ******S* 
Nov 27 00:39:09 64.113.75.99:1471 -> xxx.yyy.78.200:6346 SYN ******S* 
Nov 27 00:39:09 64.113.75.99:1473 -> xxx.yyy.69.175:6348 SYN ******S* 
Nov 27 00:39:07 64.113.75.99:1477 -> xxx.yyy.72.156:6351 SYN ******S* 
Nov 27 00:39:11 64.113.75.99:1478 -> xxx.yyy.75.77:6348 SYN ******S* 
Nov 27 00:39:15 64.113.75.99:1470 -> xxx.yyy.74.188:6348 SYN ******S* 
Nov 27 00:39:15 64.113.75.99:1471 -> xxx.yyy.78.200:6346 SYN ******S* 
Nov 27 00:39:15 64.113.75.99:1473 -> xxx.yyy.69.175:6348 SYN ******S* 
[...]
Nov 27 23:59:21 64.113.75.99:3931 -> xxx.yyy.76.238:6348 SYN ******S* 
Nov 27 23:59:24 64.113.75.99:3931 -> xxx.yyy.76.238:6348 SYN ******S* 
Nov 27 23:59:24 64.113.75.99:3933 -> xxx.yyy.71.196:6346 SYN ******S* 
Nov 27 23:59:24 64.113.75.99:3924 -> xxx.yyy.81.249:6349 SYN ******S* 
Nov 27 23:59:27 64.113.75.99:3930 -> xxx.yyy.72.200:6348 SYN ******S* 
Nov 27 23:59:27 64.113.75.99:3933 -> xxx.yyy.71.196:6346 SYN ******S* 
Nov 27 23:59:30 64.113.75.99:3931 -> xxx.yyy.76.238:6348 SYN ******S* 
Nov 27 23:59:34 64.113.75.99:3936 -> xxx.yyy.75.166:6350 SYN ******S* 
Nov 27 23:59:33 64.113.75.99:3933 -> xxx.yyy.71.196:6346 SYN ******S* 
35586

Nov 27 00:16:39 218.184.132.74:2590 -> xxx.yyy.1.0:1433 SYN ******S* 
Nov 27 00:16:39 218.184.132.74:2592 -> xxx.yyy.1.1:1433 SYN ******S* 
Nov 27 00:16:39 218.184.132.74:2595 -> xxx.yyy.1.2:1433 SYN ******S* 
Nov 27 00:16:39 218.184.132.74:2599 -> xxx.yyy.1.3:1433 SYN ******S* 
Nov 27 00:16:39 218.184.132.74:2601 -> xxx.yyy.1.4:1433 SYN ******S* 
Nov 27 00:16:39 218.184.132.74:2604 -> xxx.yyy.1.5:1433 SYN ******S* 
Nov 27 00:16:39 218.184.132.74:2608 -> xxx.yyy.1.6:1433 SYN ******S* 
Nov 27 00:16:39 218.184.132.74:2610 -> xxx.yyy.1.7:1433 SYN ******S* 
[...]
Nov 27 01:38:14 218.184.132.74:1650 -> xxx.yyy.91.114:1433 SYN ******S* 
Nov 27 01:38:14 218.184.132.74:1413 -> xxx.yyy.91.64:1433 SYN ******S* 
Nov 27 01:38:14 218.184.132.74:1591 -> xxx.yyy.91.99:1433 SYN ******S* 
Nov 27 01:38:14 218.184.132.74:1415 -> xxx.yyy.91.66:1433 SYN ******S* 
Nov 27 01:38:14 218.184.132.74:1414 -> xxx.yyy.91.65:1433 SYN ******S* 
Nov 27 01:38:15 218.184.132.74:1597 -> xxx.yyy.91.100:1433 SYN ******S* 
Nov 27 01:38:15 218.184.132.74:1598 -> xxx.yyy.91.101:1433 SYN ******S* 
Nov 27 01:38:15 218.184.132.74:1458 -> xxx.yyy.91.68:1433 SYN ******S* 
Nov 27 01:38:15 218.184.132.74:1457 -> xxx.yyy.91.67:1433 SYN ******S* 
27301

Nov 27 16:33:08 216.55.133.31:1041 -> xxx.yyy.1.0:143 SYN ******S* 
Nov 27 16:33:08 216.55.133.31:1042 -> xxx.yyy.1.1:143 SYN ******S* 
Nov 27 16:33:08 216.55.133.31:1043 -> xxx.yyy.1.2:143 SYN ******S* 
Nov 27 16:33:08 216.55.133.31:1044 -> xxx.yyy.1.3:143 SYN ******S* 
Nov 27 16:33:08 216.55.133.31:1045 -> xxx.yyy.1.4:143 SYN ******S* 
Nov 27 16:33:08 216.55.133.31:1046 -> xxx.yyy.1.5:143 SYN ******S* 
Nov 27 16:33:08 216.55.133.31:1047 -> xxx.yyy.1.6:143 SYN ******S* 
Nov 27 16:33:08 216.55.133.31:1048 -> xxx.yyy.1.7:143 SYN ******S* 
[...]
Nov 27 16:33:37 216.55.133.31:1042 -> xxx.yyy.255.231:143 SYN ******S* 
Nov 27 16:33:37 216.55.133.31:1043 -> xxx.yyy.255.232:143 SYN ******S* 
Nov 27 16:33:37 216.55.133.31:1044 -> xxx.yyy.255.233:143 SYN ******S* 
Nov 27 16:33:37 216.55.133.31:1045 -> xxx.yyy.255.234:143 SYN ******S* 
Nov 27 16:33:37 216.55.133.31:1046 -> xxx.yyy.255.235:143 SYN ******S* 
Nov 27 16:33:37 216.55.133.31:1047 -> xxx.yyy.255.236:143 SYN ******S* 
Nov 27 16:33:37 216.55.133.31:1048 -> xxx.yyy.255.237:143 SYN ******S* 
Nov 27 16:33:37 216.55.133.31:1063 -> xxx.yyy.255.251:143 SYN ******S* 
26200

Nov 27 20:39:19 219.130.90.38:3405 -> xxx.yyy.10.235:1433 SYN ******S* 
Nov 27 20:39:19 219.130.90.38:3417 -> xxx.yyy.10.239:1433 SYN ******S* 
Nov 27 20:39:19 219.130.90.38:3423 -> xxx.yyy.10.241:1433 SYN ******S* 
Nov 27 20:39:19 219.130.90.38:3426 -> xxx.yyy.10.242:1433 SYN ******S* 
Nov 27 20:39:19 219.130.90.38:3432 -> xxx.yyy.10.244:1433 SYN ******S* 
Nov 27 20:39:20 219.130.90.38:3438 -> xxx.yyy.10.246:1433 SYN ******S* 
Nov 27 20:39:20 219.130.90.38:3444 -> xxx.yyy.10.248:1433 SYN ******S* 
Nov 27 20:39:20 219.130.90.38:3441 -> xxx.yyy.10.247:1433 SYN ******S* 
[...]
Nov 27 22:10:06 219.130.90.38:3685 -> xxx.yyy.111.251:1433 SYN ******S* 
Nov 27 22:10:06 219.130.90.38:3693 -> xxx.yyy.111.252:1433 SYN ******S* 
Nov 27 22:10:07 219.130.90.38:3700 -> xxx.yyy.111.253:1433 SYN ******S* 
Nov 27 22:10:11 219.130.90.38:3663 -> xxx.yyy.111.244:1433 SYN ******S* 
Nov 27 22:10:12 219.130.90.38:3666 -> xxx.yyy.111.245:1433 SYN ******S* 
Nov 27 22:10:12 219.130.90.38:3671 -> xxx.yyy.111.248:1433 SYN ******S* 
Nov 27 22:10:12 219.130.90.38:3685 -> xxx.yyy.111.251:1433 SYN ******S* 
Nov 27 22:10:12 219.130.90.38:3693 -> xxx.yyy.111.252:1433 SYN ******S* 
Nov 27 22:10:13 219.130.90.38:3700 -> xxx.yyy.111.253:1433 SYN ******S* 
16558

Nov 27 12:54:03 69.156.52.188:2761 -> xxx.yyy.195.89:5554 SYN ******S* 
Nov 27 12:54:04 69.156.52.188:3225 -> xxx.yyy.195.89:1023 SYN ******S* 
Nov 27 12:54:06 69.156.52.188:4328 -> xxx.yyy.195.89:9898 SYN ******S* 
Nov 27 12:54:03 69.156.52.188:2760 -> xxx.yyy.195.88:5554 SYN ******S* 
Nov 27 12:54:04 69.156.52.188:3224 -> xxx.yyy.195.88:1023 SYN ******S* 
Nov 27 12:54:06 69.156.52.188:4330 -> xxx.yyy.195.88:9898 SYN ******S* 
Nov 27 12:54:03 69.156.52.188:2762 -> xxx.yyy.195.90:5554 SYN ******S* 
Nov 27 12:54:04 69.156.52.188:3226 -> xxx.yyy.195.90:1023 SYN ******S* 
[...]
Nov 27 12:54:49 69.156.52.188:3520 -> xxx.yyy.215.115:9898 SYN ******S* 
Nov 27 12:54:49 69.156.52.188:3521 -> xxx.yyy.215.116:9898 SYN ******S* 
Nov 27 12:54:49 69.156.52.188:3522 -> xxx.yyy.215.117:9898 SYN ******S* 
Nov 27 12:54:49 69.156.52.188:3523 -> xxx.yyy.215.118:9898 SYN ******S* 
Nov 27 12:54:49 69.156.52.188:3524 -> xxx.yyy.215.119:9898 SYN ******S* 
Nov 27 12:54:49 69.156.52.188:3525 -> xxx.yyy.215.120:9898 SYN ******S* 
Nov 27 12:54:49 69.156.52.188:3528 -> xxx.yyy.215.122:9898 SYN ******S* 
Nov 27 12:54:49 69.156.52.188:3605 -> xxx.yyy.215.171:9898 SYN ******S* 
Nov 27 12:54:49 69.156.52.188:3604 -> xxx.yyy.215.170:9898 SYN ******S* 
14507

Nov 27 00:51:50 65.54.188.52:47926 -> xxx.yyy.233.181:80 SYN ******S* 
Nov 27 00:51:50 65.54.188.52:48017 -> xxx.yyy.16.8:80 SYN ******S* 
Nov 27 00:51:50 65.54.188.52:48048 -> xxx.yyy.233.193:80 SYN ******S* 
Nov 27 00:51:52 65.54.188.52:48214 -> xxx.yyy.220.68:80 SYN ******S* 
Nov 27 00:51:53 65.54.188.52:48299 -> xxx.yyy.210.5:80 SYN ******S* 
Nov 27 00:51:54 65.54.188.52:48678 -> xxx.yyy.248.80:80 SYN ******S* 
Nov 27 00:51:55 65.54.188.52:48758 -> xxx.yyy.12.25:80 SYN ******S* 
Nov 27 00:51:55 65.54.188.52:48833 -> xxx.yyy.220.98:80 SYN ******S* 
[...]
Nov 27 23:48:27 65.54.188.52:32072 -> xxx.yyy.236.22:80 SYN ******S* 
Nov 27 23:48:31 65.54.188.52:32259 -> xxx.yyy.241.30:80 SYN ******S* 
Nov 27 23:48:37 65.54.188.52:32717 -> xxx.yyy.212.103:80 SYN ******S* 
Nov 27 23:48:40 65.54.188.52:32951 -> xxx.yyy.233.168:80 SYN ******S* 
Nov 27 23:48:42 65.54.188.52:33455 -> xxx.yyy.241.20:80 SYN ******S* 
Nov 27 23:48:42 65.54.188.52:33458 -> xxx.yyy.241.255:80 SYN ******S* 
Nov 27 23:48:42 65.54.188.52:33562 -> xxx.yyy.1.60:80 SYN ******S* 
Nov 27 23:48:46 65.54.188.52:34100 -> xxx.yyy.1.13:80 SYN ******S* 
Nov 27 23:48:47 65.54.188.52:34221 -> xxx.yyy.234.52:80 SYN ******S* 
14004

Nov 27 22:58:03 220.91.157.58:4108 -> xxx.yyy.194.125:5554 SYN ******S* 
Nov 27 22:58:04 220.91.157.58:1089 -> xxx.yyy.194.125:1023 SYN ******S* 
Nov 27 22:58:06 220.91.157.58:2069 -> xxx.yyy.194.125:9898 SYN ******S* 
Nov 27 22:58:03 220.91.157.58:4114 -> xxx.yyy.194.128:5554 SYN ******S* 
Nov 27 22:58:04 220.91.157.58:1099 -> xxx.yyy.194.128:1023 SYN ******S* 
Nov 27 22:58:06 220.91.157.58:2078 -> xxx.yyy.194.128:9898 SYN ******S* 
Nov 27 22:58:03 220.91.157.58:4107 -> xxx.yyy.194.124:5554 SYN ******S* 
Nov 27 22:58:04 220.91.157.58:1088 -> xxx.yyy.194.124:1023 SYN ******S* 
[...]
Nov 27 22:58:48 220.91.157.58:2021 -> xxx.yyy.214.225:9898 SYN ******S* 
Nov 27 22:58:48 220.91.157.58:2022 -> xxx.yyy.214.224:9898 SYN ******S* 
Nov 27 22:58:48 220.91.157.58:2020 -> xxx.yyy.214.226:9898 SYN ******S* 
Nov 27 22:58:48 220.91.157.58:2025 -> xxx.yyy.214.223:9898 SYN ******S* 
Nov 27 22:58:48 220.91.157.58:2047 -> xxx.yyy.214.221:9898 SYN ******S* 
Nov 27 22:58:48 220.91.157.58:2046 -> xxx.yyy.214.228:9898 SYN ******S* 
Nov 27 22:58:48 220.91.157.58:2048 -> xxx.yyy.214.220:9898 SYN ******S* 
Nov 27 22:58:48 220.91.157.58:2049 -> xxx.yyy.214.219:9898 SYN ******S* 
Nov 27 22:58:48 220.91.157.58:2057 -> xxx.yyy.214.242:9898 SYN ******S* 
13782

Nov 27 23:57:00 221.127.95.61:4614 -> xxx.yyy.154.124:5554 SYN ******S* 
Nov 27 23:57:01 221.127.95.61:1423 -> xxx.yyy.154.124:1023 SYN ******S* 
Nov 27 23:57:03 221.127.95.61:2679 -> xxx.yyy.154.124:9898 SYN ******S* 
Nov 27 23:57:00 221.127.95.61:4617 -> xxx.yyy.154.122:5554 SYN ******S* 
Nov 27 23:57:01 221.127.95.61:1428 -> xxx.yyy.154.122:1023 SYN ******S* 
Nov 27 23:57:00 221.127.95.61:4618 -> xxx.yyy.154.121:5554 SYN ******S* 
Nov 27 23:57:01 221.127.95.61:1429 -> xxx.yyy.154.121:1023 SYN ******S* 
Nov 27 23:57:03 221.127.95.61:2683 -> xxx.yyy.154.121:9898 SYN ******S* 
[...]
Nov 27 23:57:50 221.127.95.61:2489 -> xxx.yyy.174.216:9898 SYN ******S* 
Nov 27 23:57:50 221.127.95.61:2502 -> xxx.yyy.174.210:9898 SYN ******S* 
Nov 27 23:57:50 221.127.95.61:2485 -> xxx.yyy.174.215:9898 SYN ******S* 
Nov 27 23:57:50 221.127.95.61:2513 -> xxx.yyy.174.219:9898 SYN ******S* 
Nov 27 23:57:50 221.127.95.61:2514 -> xxx.yyy.174.217:9898 SYN ******S* 
Nov 27 23:57:50 221.127.95.61:2515 -> xxx.yyy.174.207:9898 SYN ******S* 
Nov 27 23:57:50 221.127.95.61:2516 -> xxx.yyy.174.208:9898 SYN ******S* 
Nov 27 23:57:50 221.127.95.61:2538 -> xxx.yyy.174.211:9898 SYN ******S* 
Nov 27 23:57:50 221.127.95.61:2541 -> xxx.yyy.174.218:9898 SYN ******S* 
13084

Nov 27 22:57:31 221.163.181.239:1080 -> xxx.yyy.195.98:5554 SYN ******S* 
Nov 27 22:57:34 221.163.181.239:2521 -> xxx.yyy.195.98:9898 SYN ******S* 
Nov 27 22:57:31 221.163.181.239:1084 -> xxx.yyy.195.95:5554 SYN ******S* 
Nov 27 22:57:31 221.163.181.239:1083 -> xxx.yyy.195.96:5554 SYN ******S* 
Nov 27 22:57:31 221.163.181.239:1079 -> xxx.yyy.195.99:5554 SYN ******S* 
Nov 27 22:57:31 221.163.181.239:1087 -> xxx.yyy.195.91:5554 SYN ******S* 
Nov 27 22:57:31 221.163.181.239:1091 -> xxx.yyy.195.103:5554 SYN ******S* 
Nov 27 22:57:31 221.163.181.239:1090 -> xxx.yyy.195.102:5554 SYN ******S* 
[...]
Nov 27 22:58:25 221.163.181.239:1609 -> xxx.yyy.215.152:9898 SYN ******S* 
Nov 27 22:58:25 221.163.181.239:1621 -> xxx.yyy.215.162:9898 SYN ******S* 
Nov 27 22:58:25 221.163.181.239:1626 -> xxx.yyy.215.166:9898 SYN ******S* 
Nov 27 22:58:25 221.163.181.239:1636 -> xxx.yyy.215.174:9898 SYN ******S* 
Nov 27 22:58:25 221.163.181.239:1644 -> xxx.yyy.215.165:9898 SYN ******S* 
Nov 27 22:58:25 221.163.181.239:1628 -> xxx.yyy.215.180:9898 SYN ******S* 
Nov 27 22:58:25 221.163.181.239:1711 -> xxx.yyy.215.197:9898 SYN ******S* 
Nov 27 22:58:25 221.163.181.239:1706 -> xxx.yyy.215.191:9898 SYN ******S* 
Nov 27 22:58:25 221.163.181.239:1740 -> xxx.yyy.215.207:9898 SYN ******S* 
12987

Nov 27 22:58:36 168.126.96.149:2565 -> xxx.yyy.153.136:5554 SYN ******S* 
Nov 27 22:58:37 168.126.96.149:2797 -> xxx.yyy.153.136:1023 SYN ******S* 
Nov 27 22:58:39 168.126.96.149:3310 -> xxx.yyy.153.136:9898 SYN ******S* 
Nov 27 22:58:36 168.126.96.149:2567 -> xxx.yyy.153.138:5554 SYN ******S* 
Nov 27 22:58:37 168.126.96.149:2799 -> xxx.yyy.153.138:1023 SYN ******S* 
Nov 27 22:58:39 168.126.96.149:3312 -> xxx.yyy.153.138:9898 SYN ******S* 
Nov 27 22:58:36 168.126.96.149:2569 -> xxx.yyy.153.140:5554 SYN ******S* 
Nov 27 22:58:37 168.126.96.149:2801 -> xxx.yyy.153.140:1023 SYN ******S* 
[...]
Nov 27 22:59:53 168.126.96.149:1661 -> xxx.yyy.173.242:9898 SYN ******S* 
Nov 27 22:59:53 168.126.96.149:1656 -> xxx.yyy.173.237:9898 SYN ******S* 
Nov 27 22:59:53 168.126.96.149:1658 -> xxx.yyy.173.239:9898 SYN ******S* 
Nov 27 22:59:53 168.126.96.149:1650 -> xxx.yyy.173.231:9898 SYN ******S* 
Nov 27 22:59:53 168.126.96.149:1651 -> xxx.yyy.173.232:9898 SYN ******S* 
Nov 27 22:59:53 168.126.96.149:1653 -> xxx.yyy.173.234:9898 SYN ******S* 
Nov 27 22:59:53 168.126.96.149:1660 -> xxx.yyy.173.241:9898 SYN ******S* 
Nov 27 22:59:53 168.126.96.149:1677 -> xxx.yyy.173.243:9898 SYN ******S* 
12540

Nov 27 23:56:28 221.127.186.105:1215 -> xxx.yyy.236.76:5554 SYN ******S* 
Nov 27 23:56:29 221.127.186.105:1932 -> xxx.yyy.236.76:1023 SYN ******S* 
Nov 27 23:56:31 221.127.186.105:3093 -> xxx.yyy.236.76:9898 SYN ******S* 
Nov 27 23:56:28 221.127.186.105:1218 -> xxx.yyy.236.77:5554 SYN ******S* 
Nov 27 23:56:29 221.127.186.105:1933 -> xxx.yyy.236.77:1023 SYN ******S* 
Nov 27 23:56:31 221.127.186.105:3094 -> xxx.yyy.236.77:9898 SYN ******S* 
Nov 27 23:56:28 221.127.186.105:1219 -> xxx.yyy.236.78:5554 SYN ******S* 
Nov 27 23:56:29 221.127.186.105:1934 -> xxx.yyy.236.78:1023 SYN ******S* 
[...]
Nov 27 23:57:12 221.127.186.105:4202 -> xxx.yyy.255.239:9898 SYN ******S* 
Nov 27 23:57:12 221.127.186.105:4221 -> xxx.yyy.255.241:9898 SYN ******S* 
Nov 27 23:57:12 221.127.186.105:4222 -> xxx.yyy.255.240:9898 SYN ******S* 
Nov 27 23:57:12 221.127.186.105:4225 -> xxx.yyy.255.242:9898 SYN ******S* 
Nov 27 23:57:12 221.127.186.105:4227 -> xxx.yyy.255.243:9898 SYN ******S* 
Nov 27 23:57:12 221.127.186.105:4232 -> xxx.yyy.255.244:9898 SYN ******S* 
Nov 27 23:57:12 221.127.186.105:4233 -> xxx.yyy.255.245:9898 SYN ******S* 
Nov 27 23:57:12 221.127.186.105:4236 -> xxx.yyy.255.246:9898 SYN ******S* 
Nov 27 23:57:12 221.127.186.105:4243 -> xxx.yyy.255.248:9898 SYN ******S* 
11692

[...]
11675

Nov 27 22:55:51 222.98.203.159:2631 -> xxx.yyy.174.223:5554 SYN ******S* 
Nov 27 22:55:54 222.98.203.159:4624 -> xxx.yyy.174.223:9898 SYN ******S* 
Nov 27 22:55:51 222.98.203.159:2632 -> xxx.yyy.174.224:5554 SYN ******S* 
Nov 27 22:55:52 222.98.203.159:3266 -> xxx.yyy.174.224:1023 SYN ******S* 
Nov 27 22:55:51 222.98.203.159:2630 -> xxx.yyy.174.222:5554 SYN ******S* 
Nov 27 22:55:54 222.98.203.159:4656 -> xxx.yyy.174.222:9898 SYN ******S* 
Nov 27 22:55:51 222.98.203.159:2635 -> xxx.yyy.174.227:5554 SYN ******S* 
Nov 27 22:55:52 222.98.203.159:3269 -> xxx.yyy.174.227:1023 SYN ******S* 
[...]
Nov 27 22:56:36 222.98.203.159:3487 -> xxx.yyy.195.33:9898 SYN ******S* 
Nov 27 22:56:36 222.98.203.159:3489 -> xxx.yyy.195.35:9898 SYN ******S* 
Nov 27 22:56:36 222.98.203.159:3490 -> xxx.yyy.195.36:9898 SYN ******S* 
Nov 27 22:56:36 222.98.203.159:3542 -> xxx.yyy.195.44:9898 SYN ******S* 
Nov 27 22:56:36 222.98.203.159:3550 -> xxx.yyy.195.45:9898 SYN ******S* 
Nov 27 22:56:37 222.98.203.159:3580 -> xxx.yyy.195.62:9898 SYN ******S* 
Nov 27 22:56:37 222.98.203.159:3583 -> xxx.yyy.195.49:9898 SYN ******S* 
Nov 27 22:56:37 222.98.203.159:3582 -> xxx.yyy.195.48:9898 SYN ******S* 
Nov 27 22:56:37 222.98.203.159:3581 -> xxx.yyy.195.47:9898 SYN ******S* 
9539

Nov 27 22:58:20 61.106.126.30:3481 -> xxx.yyy.71.160:1023 SYN ******S* 
Nov 27 22:58:22 61.106.126.30:4128 -> xxx.yyy.71.160:9898 SYN ******S* 
Nov 27 22:58:20 61.106.126.30:3485 -> xxx.yyy.71.164:1023 SYN ******S* 
Nov 27 22:58:22 61.106.126.30:4129 -> xxx.yyy.71.164:9898 SYN ******S* 
Nov 27 22:58:20 61.106.126.30:3490 -> xxx.yyy.71.167:1023 SYN ******S* 
Nov 27 22:58:22 61.106.126.30:4131 -> xxx.yyy.71.167:9898 SYN ******S* 
Nov 27 22:58:20 61.106.126.30:3508 -> xxx.yyy.71.179:1023 SYN ******S* 
Nov 27 22:58:22 61.106.126.30:4156 -> xxx.yyy.71.179:9898 SYN ******S* 
[...]
Nov 27 23:00:09 61.106.126.30:3232 -> xxx.yyy.91.243:9898 SYN ******S* 
Nov 27 23:00:09 61.106.126.30:3241 -> xxx.yyy.91.247:9898 SYN ******S* 
Nov 27 23:00:09 61.106.126.30:3239 -> xxx.yyy.91.246:9898 SYN ******S* 
Nov 27 23:00:09 61.106.126.30:3252 -> xxx.yyy.91.251:9898 SYN ******S* 
Nov 27 23:00:09 61.106.126.30:3251 -> xxx.yyy.91.250:9898 SYN ******S* 
Nov 27 23:00:09 61.106.126.30:3236 -> xxx.yyy.91.244:9898 SYN ******S* 
Nov 27 23:00:09 61.106.126.30:3243 -> xxx.yyy.91.248:9898 SYN ******S* 
Nov 27 23:00:09 61.106.126.30:3249 -> xxx.yyy.91.249:9898 SYN ******S* 
9061

Nov 27 20:33:38 220.87.47.112:2160 -> xxx.yyy.214.251:5554 SYN ******S* 
Nov 27 20:33:39 220.87.47.112:4014 -> xxx.yyy.214.251:1023 SYN ******S* 
Nov 27 20:33:41 220.87.47.112:2304 -> xxx.yyy.214.251:9898 SYN ******S* 
Nov 27 20:33:38 220.87.47.112:2177 -> xxx.yyy.214.254:5554 SYN ******S* 
Nov 27 20:33:39 220.87.47.112:4097 -> xxx.yyy.214.254:1023 SYN ******S* 
Nov 27 20:33:41 220.87.47.112:2313 -> xxx.yyy.214.254:9898 SYN ******S* 
Nov 27 20:33:38 220.87.47.112:2211 -> xxx.yyy.215.3:5554 SYN ******S* 
Nov 27 20:33:39 220.87.47.112:4109 -> xxx.yyy.215.3:1023 SYN ******S* 
[...]
Nov 27 20:34:22 220.87.47.112:3666 -> xxx.yyy.216.173:1023 SYN ******S* 
Nov 27 20:34:24 220.87.47.112:1108 -> xxx.yyy.216.173:9898 SYN ******S* 
Nov 27 20:34:22 220.87.47.112:3959 -> xxx.yyy.216.179:1023 SYN ******S* 
Nov 27 20:34:24 220.87.47.112:1128 -> xxx.yyy.216.179:9898 SYN ******S* 
Nov 27 20:34:22 220.87.47.112:3961 -> xxx.yyy.216.180:1023 SYN ******S* 
Nov 27 20:34:24 220.87.47.112:1134 -> xxx.yyy.216.180:9898 SYN ******S* 
Nov 27 20:34:22 220.87.47.112:3962 -> xxx.yyy.234.228:9898 SYN ******S* 
Nov 27 20:34:24 220.87.47.112:4865 -> xxx.yyy.235.95:9898 SYN ******S* 
Nov 27 20:34:24 220.87.47.112:1631 -> xxx.yyy.234.227:9898 SYN ******S* 
8348

Nov 27 22:55:57 222.103.253.169:4023 -> xxx.yyy.133.16:5554 SYN ******S* 
Nov 27 22:55:58 222.103.253.169:4733 -> xxx.yyy.133.16:1023 SYN ******S* 
Nov 27 22:55:57 222.103.253.169:4039 -> xxx.yyy.133.18:5554 SYN ******S* 
Nov 27 22:55:58 222.103.253.169:4762 -> xxx.yyy.133.18:1023 SYN ******S* 
Nov 27 22:55:57 222.103.253.169:4046 -> xxx.yyy.133.19:5554 SYN ******S* 
Nov 27 22:55:58 222.103.253.169:4782 -> xxx.yyy.133.19:1023 SYN ******S* 
Nov 27 22:55:57 222.103.253.169:4065 -> xxx.yyy.133.20:5554 SYN ******S* 
Nov 27 22:55:58 222.103.253.169:1144 -> xxx.yyy.133.20:1023 SYN ******S* 
[...]
Nov 27 22:56:48 222.103.253.169:1773 -> xxx.yyy.152.200:9898 SYN ******S* 
Nov 27 22:56:48 222.103.253.169:1774 -> xxx.yyy.152.202:9898 SYN ******S* 
Nov 27 22:56:48 222.103.253.169:1793 -> xxx.yyy.152.232:9898 SYN ******S* 
Nov 27 22:56:48 222.103.253.169:1795 -> xxx.yyy.152.211:9898 SYN ******S* 
Nov 27 22:56:48 222.103.253.169:1797 -> xxx.yyy.152.231:9898 SYN ******S* 
Nov 27 22:56:48 222.103.253.169:1788 -> xxx.yyy.152.230:9898 SYN ******S* 
Nov 27 22:56:48 222.103.253.169:1814 -> xxx.yyy.152.221:9898 SYN ******S* 
Nov 27 22:56:48 222.103.253.169:1839 -> xxx.yyy.152.205:9898 SYN ******S* 
Nov 27 22:56:48 222.103.253.169:1831 -> xxx.yyy.152.201:9898 SYN ******S* 
7868

--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa                     Cedar Falls, IA  50614-0121
email: Ken.Connelly at uni.edu    phone: (319) 273-5850    fax: (319) 273-7373



More information about the Intrusions mailing list