[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Tue Nov 30 12:55:16 GMT 2004
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Nov 29 02:51:01 68.104.90.98:1867 -> xxx.yyy.1.1:1433 SYN ******S*
Nov 29 02:51:01 68.104.90.98:1868 -> xxx.yyy.1.2:1433 SYN ******S*
Nov 29 02:51:01 68.104.90.98:1869 -> xxx.yyy.1.3:1433 SYN ******S*
Nov 29 02:51:01 68.104.90.98:1870 -> xxx.yyy.1.4:1433 SYN ******S*
Nov 29 02:51:01 68.104.90.98:1871 -> xxx.yyy.1.5:1433 SYN ******S*
Nov 29 02:51:01 68.104.90.98:1872 -> xxx.yyy.1.6:1433 SYN ******S*
Nov 29 02:51:01 68.104.90.98:1873 -> xxx.yyy.1.7:1433 SYN ******S*
Nov 29 02:51:01 68.104.90.98:1874 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Nov 29 04:49:04 68.104.90.98:2157 -> xxx.yyy.255.246:1433 SYN ******S*
Nov 29 04:49:04 68.104.90.98:2159 -> xxx.yyy.255.248:1433 SYN ******S*
Nov 29 04:49:04 68.104.90.98:2161 -> xxx.yyy.255.249:1433 SYN ******S*
Nov 29 04:49:04 68.104.90.98:2162 -> xxx.yyy.255.250:1433 SYN ******S*
Nov 29 04:49:05 68.104.90.98:2167 -> xxx.yyy.255.251:1433 SYN ******S*
Nov 29 04:49:05 68.104.90.98:2168 -> xxx.yyy.255.252:1433 SYN ******S*
Nov 29 04:49:05 68.104.90.98:2170 -> xxx.yyy.255.254:1433 SYN ******S*
Nov 29 04:49:05 68.104.90.98:2169 -> xxx.yyy.255.253:1433 SYN ******S*
118048
Nov 29 02:55:21 152.6.38.32:1642 -> xxx.yyy.1.0:1433 SYN ******S*
Nov 29 02:55:22 152.6.38.32:1669 -> xxx.yyy.1.1:1433 SYN ******S*
Nov 29 02:55:22 152.6.38.32:1724 -> xxx.yyy.1.2:1433 SYN ******S*
Nov 29 02:55:22 152.6.38.32:1744 -> xxx.yyy.1.3:1433 SYN ******S*
Nov 29 02:55:22 152.6.38.32:1806 -> xxx.yyy.1.4:1433 SYN ******S*
Nov 29 02:55:22 152.6.38.32:1808 -> xxx.yyy.1.5:1433 SYN ******S*
Nov 29 02:55:22 152.6.38.32:1814 -> xxx.yyy.1.6:1433 SYN ******S*
Nov 29 02:55:22 152.6.38.32:1820 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Nov 29 07:45:34 152.6.38.32:2380 -> xxx.yyy.255.245:1433 SYN ******S*
Nov 29 07:45:34 152.6.38.32:2473 -> xxx.yyy.255.246:1433 SYN ******S*
Nov 29 07:45:34 152.6.38.32:2506 -> xxx.yyy.255.247:1433 SYN ******S*
Nov 29 07:45:35 152.6.38.32:2514 -> xxx.yyy.255.248:1433 SYN ******S*
Nov 29 07:45:35 152.6.38.32:2632 -> xxx.yyy.255.250:1433 SYN ******S*
Nov 29 07:45:36 152.6.38.32:2662 -> xxx.yyy.255.251:1433 SYN ******S*
Nov 29 07:45:36 152.6.38.32:2707 -> xxx.yyy.255.252:1433 SYN ******S*
Nov 29 07:45:36 152.6.38.32:2719 -> xxx.yyy.255.253:1433 SYN ******S*
Nov 29 07:45:36 152.6.38.32:2729 -> xxx.yyy.255.254:1433 SYN ******S*
116971
Nov 29 07:03:56 80.180.45.44:4152 -> xxx.yyy.1.3:1433 SYN ******S*
Nov 29 07:03:56 80.180.45.44:4151 -> xxx.yyy.1.2:1433 SYN ******S*
Nov 29 07:03:56 80.180.45.44:4150 -> xxx.yyy.1.1:1433 SYN ******S*
Nov 29 07:03:56 80.180.45.44:4153 -> xxx.yyy.1.4:1433 SYN ******S*
Nov 29 07:03:56 80.180.45.44:4154 -> xxx.yyy.1.5:1433 SYN ******S*
Nov 29 07:03:56 80.180.45.44:4155 -> xxx.yyy.1.6:1433 SYN ******S*
Nov 29 07:03:56 80.180.45.44:4156 -> xxx.yyy.1.7:1433 SYN ******S*
Nov 29 07:03:56 80.180.45.44:4157 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Nov 29 08:50:06 80.180.45.44:3495 -> xxx.yyy.255.244:1433 SYN ******S*
Nov 29 08:50:06 80.180.45.44:3493 -> xxx.yyy.255.243:1433 SYN ******S*
Nov 29 08:50:06 80.180.45.44:3491 -> xxx.yyy.255.242:1433 SYN ******S*
Nov 29 08:50:06 80.180.45.44:3503 -> xxx.yyy.255.251:1433 SYN ******S*
Nov 29 08:50:06 80.180.45.44:3502 -> xxx.yyy.255.250:1433 SYN ******S*
Nov 29 08:50:06 80.180.45.44:3501 -> xxx.yyy.255.249:1433 SYN ******S*
Nov 29 08:50:06 80.180.45.44:3505 -> xxx.yyy.255.252:1433 SYN ******S*
Nov 29 08:50:07 80.180.45.44:3507 -> xxx.yyy.255.253:1433 SYN ******S*
99168
Nov 29 04:56:32 209.135.97.164:4547 -> xxx.yyy.1.1:25 SYN ******S*
Nov 29 04:56:33 209.135.97.164:4548 -> xxx.yyy.1.2:25 SYN ******S*
Nov 29 04:56:33 209.135.97.164:4549 -> xxx.yyy.1.3:25 SYN ******S*
Nov 29 04:56:32 209.135.97.164:4550 -> xxx.yyy.1.4:25 SYN ******S*
Nov 29 04:56:33 209.135.97.164:4551 -> xxx.yyy.1.5:25 SYN ******S*
Nov 29 04:56:30 209.135.97.164:4552 -> xxx.yyy.1.6:25 SYN ******S*
Nov 29 04:56:33 209.135.97.164:4553 -> xxx.yyy.1.7:25 SYN ******S*
Nov 29 04:56:33 209.135.97.164:4554 -> xxx.yyy.1.8:25 SYN ******S*
[...]
Nov 29 05:07:33 209.135.97.164:3484 -> xxx.yyy.255.238:25 SYN ******S*
Nov 29 05:07:33 209.135.97.164:3481 -> xxx.yyy.255.235:25 SYN ******S*
Nov 29 05:07:33 209.135.97.164:3478 -> xxx.yyy.255.232:25 SYN ******S*
Nov 29 05:07:33 209.135.97.164:3482 -> xxx.yyy.255.236:25 SYN ******S*
Nov 29 05:07:33 209.135.97.164:3476 -> xxx.yyy.255.230:25 SYN ******S*
Nov 29 05:07:33 209.135.97.164:3483 -> xxx.yyy.255.237:25 SYN ******S*
Nov 29 05:07:34 209.135.97.164:3490 -> xxx.yyy.255.244:25 SYN ******S*
Nov 29 05:07:34 209.135.97.164:3486 -> xxx.yyy.255.240:25 SYN ******S*
72050
Nov 29 03:28:41 166.61.232.146:3755 -> xxx.yyy.1.1:1433 SYN ******S*
Nov 29 03:28:38 166.61.232.146:3756 -> xxx.yyy.1.2:1433 SYN ******S*
Nov 29 03:28:38 166.61.232.146:3757 -> xxx.yyy.1.3:1433 SYN ******S*
Nov 29 03:28:41 166.61.232.146:3758 -> xxx.yyy.1.4:1433 SYN ******S*
Nov 29 03:28:41 166.61.232.146:3759 -> xxx.yyy.1.5:1433 SYN ******S*
Nov 29 03:28:41 166.61.232.146:3760 -> xxx.yyy.1.6:1433 SYN ******S*
Nov 29 03:28:41 166.61.232.146:3761 -> xxx.yyy.1.7:1433 SYN ******S*
Nov 29 03:28:41 166.61.232.146:3762 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Nov 29 03:40:19 166.61.232.146:2301 -> xxx.yyy.255.247:1433 SYN ******S*
Nov 29 03:40:19 166.61.232.146:2298 -> xxx.yyy.255.244:1433 SYN ******S*
Nov 29 03:40:19 166.61.232.146:2302 -> xxx.yyy.255.248:1433 SYN ******S*
Nov 29 03:40:19 166.61.232.146:2299 -> xxx.yyy.255.245:1433 SYN ******S*
Nov 29 03:40:19 166.61.232.146:2306 -> xxx.yyy.255.252:1433 SYN ******S*
Nov 29 03:40:19 166.61.232.146:2307 -> xxx.yyy.255.253:1433 SYN ******S*
Nov 29 03:40:20 166.61.232.146:2308 -> xxx.yyy.255.254:1433 SYN ******S*
Nov 29 03:40:20 166.61.232.146:2305 -> xxx.yyy.255.251:1433 SYN ******S*
67838
Nov 29 14:22:03 195.66.102.4:1878 -> xxx.yyy.1.1:1433 SYN ******S*
Nov 29 14:22:03 195.66.102.4:1879 -> xxx.yyy.1.2:1433 SYN ******S*
Nov 29 14:22:03 195.66.102.4:1880 -> xxx.yyy.1.3:1433 SYN ******S*
Nov 29 14:22:03 195.66.102.4:1882 -> xxx.yyy.1.5:1433 SYN ******S*
Nov 29 14:22:03 195.66.102.4:1886 -> xxx.yyy.1.9:1433 SYN ******S*
Nov 29 14:22:03 195.66.102.4:1888 -> xxx.yyy.1.11:1433 SYN ******S*
Nov 29 14:22:06 195.66.102.4:1890 -> xxx.yyy.1.13:1433 SYN ******S*
Nov 29 14:22:06 195.66.102.4:1891 -> xxx.yyy.1.14:1433 SYN ******S*
[...]
Nov 29 16:16:24 195.66.102.4:3711 -> xxx.yyy.255.230:1433 SYN ******S*
Nov 29 16:16:25 195.66.102.4:3717 -> xxx.yyy.255.232:1433 SYN ******S*
Nov 29 16:16:25 195.66.102.4:3728 -> xxx.yyy.255.233:1433 SYN ******S*
Nov 29 16:16:25 195.66.102.4:3734 -> xxx.yyy.255.238:1433 SYN ******S*
Nov 29 16:16:25 195.66.102.4:3736 -> xxx.yyy.255.240:1433 SYN ******S*
Nov 29 16:16:26 195.66.102.4:3741 -> xxx.yyy.255.243:1433 SYN ******S*
Nov 29 16:16:26 195.66.102.4:3753 -> xxx.yyy.255.250:1433 SYN ******S*
Nov 29 16:16:27 195.66.102.4:3758 -> xxx.yyy.255.253:1433 SYN ******S*
51220
[...]
45652
Nov 29 00:00:15 131.211.20.92:1719 -> xxx.yyy.64.1:2277 SYN ******S*
Nov 29 00:00:15 131.211.20.92:1723 -> xxx.yyy.64.5:2277 SYN ******S*
Nov 29 00:00:15 131.211.20.92:1724 -> xxx.yyy.64.6:2277 SYN ******S*
Nov 29 00:00:15 131.211.20.92:1725 -> xxx.yyy.64.7:2277 SYN ******S*
Nov 29 00:00:18 131.211.20.92:1726 -> xxx.yyy.64.8:2277 SYN ******S*
Nov 29 00:00:15 131.211.20.92:1728 -> xxx.yyy.64.10:2277 SYN ******S*
Nov 29 00:00:18 131.211.20.92:1730 -> xxx.yyy.64.12:2277 SYN ******S*
Nov 29 00:00:15 131.211.20.92:1731 -> xxx.yyy.64.13:2277 SYN ******S*
[...]
Nov 29 00:05:02 131.211.20.92:1700 -> xxx.yyy.255.247:2277 SYN ******S*
Nov 29 00:05:02 131.211.20.92:1696 -> xxx.yyy.255.243:2277 SYN ******S*
Nov 29 00:05:02 131.211.20.92:1702 -> xxx.yyy.255.249:2277 SYN ******S*
Nov 29 00:05:02 131.211.20.92:1703 -> xxx.yyy.255.250:2277 SYN ******S*
Nov 29 00:05:02 131.211.20.92:1704 -> xxx.yyy.255.251:2277 SYN ******S*
Nov 29 00:05:02 131.211.20.92:1697 -> xxx.yyy.255.244:2277 SYN ******S*
Nov 29 00:05:02 131.211.20.92:1699 -> xxx.yyy.255.246:2277 SYN ******S*
Nov 29 00:05:02 131.211.20.92:1698 -> xxx.yyy.255.245:2277 SYN ******S*
Nov 29 00:05:02 131.211.20.92:1701 -> xxx.yyy.255.248:2277 SYN ******S*
40021
Nov 29 13:10:26 133.41.38.117:783 -> xxx.yyy.10.2:111 SYN ******S*
Nov 29 13:10:23 133.41.38.117:782 -> xxx.yyy.10.1:111 SYN ******S*
Nov 29 13:10:26 133.41.38.117:785 -> xxx.yyy.10.4:111 SYN ******S*
Nov 29 13:10:23 133.41.38.117:786 -> xxx.yyy.10.5:111 SYN ******S*
Nov 29 13:10:23 133.41.38.117:787 -> xxx.yyy.10.6:111 SYN ******S*
Nov 29 13:10:26 133.41.38.117:788 -> xxx.yyy.10.7:111 SYN ******S*
Nov 29 13:10:26 133.41.38.117:793 -> xxx.yyy.10.12:111 SYN ******S*
Nov 29 13:10:26 133.41.38.117:797 -> xxx.yyy.10.15:111 SYN ******S*
[...]
Nov 29 13:36:40 133.41.38.117:896 -> xxx.yyy.255.234:111 SYN ******S*
Nov 29 13:36:40 133.41.38.117:897 -> xxx.yyy.255.235:111 SYN ******S*
Nov 29 13:36:40 133.41.38.117:898 -> xxx.yyy.255.236:111 SYN ******S*
Nov 29 13:36:40 133.41.38.117:899 -> xxx.yyy.255.237:111 SYN ******S*
Nov 29 13:36:40 133.41.38.117:900 -> xxx.yyy.255.238:111 SYN ******S*
Nov 29 13:36:40 133.41.38.117:902 -> xxx.yyy.255.240:111 SYN ******S*
Nov 29 13:36:40 133.41.38.117:903 -> xxx.yyy.255.241:111 SYN ******S*
Nov 29 13:36:40 133.41.38.117:905 -> xxx.yyy.255.243:111 SYN ******S*
Nov 29 13:36:40 133.41.38.117:906 -> xxx.yyy.255.244:111 SYN ******S*
39569
Nov 29 04:12:01 222.106.85.233:1314 -> xxx.yyy.1.3:4899 SYN ******S*
Nov 29 04:12:01 222.106.85.233:1312 -> xxx.yyy.1.1:4899 SYN ******S*
Nov 29 04:12:01 222.106.85.233:1313 -> xxx.yyy.1.2:4899 SYN ******S*
Nov 29 04:11:59 222.106.85.233:1315 -> xxx.yyy.1.4:4899 SYN ******S*
Nov 29 04:11:59 222.106.85.233:1316 -> xxx.yyy.1.5:4899 SYN ******S*
Nov 29 04:11:59 222.106.85.233:1317 -> xxx.yyy.1.6:4899 SYN ******S*
Nov 29 04:11:59 222.106.85.233:1319 -> xxx.yyy.1.8:4899 SYN ******S*
Nov 29 04:11:59 222.106.85.233:1320 -> xxx.yyy.1.9:4899 SYN ******S*
[...]
Nov 29 04:16:20 222.106.85.233:1035 -> xxx.yyy.255.221:4899 SYN ******S*
Nov 29 04:16:20 222.106.85.233:1059 -> xxx.yyy.255.244:4899 SYN ******S*
Nov 29 04:16:20 222.106.85.233:1060 -> xxx.yyy.255.245:4899 SYN ******S*
Nov 29 04:16:20 222.106.85.233:1065 -> xxx.yyy.255.250:4899 SYN ******S*
Nov 29 04:16:20 222.106.85.233:1066 -> xxx.yyy.255.251:4899 SYN ******S*
Nov 29 04:16:20 222.106.85.233:1067 -> xxx.yyy.255.252:4899 SYN ******S*
Nov 29 04:16:20 222.106.85.233:1068 -> xxx.yyy.255.253:4899 SYN ******S*
Nov 29 04:16:20 222.106.85.233:1069 -> xxx.yyy.255.254:4899 SYN ******S*
39492
Nov 29 23:03:55 195.198.154.164:1311 -> xxx.yyy.1.1:1433 SYN ******S*
Nov 29 23:03:55 195.198.154.164:1312 -> xxx.yyy.1.2:1433 SYN ******S*
Nov 29 23:03:55 195.198.154.164:1313 -> xxx.yyy.1.3:1433 SYN ******S*
Nov 29 23:03:55 195.198.154.164:1317 -> xxx.yyy.1.6:1433 SYN ******S*
Nov 29 23:03:58 195.198.154.164:1319 -> xxx.yyy.1.8:1433 SYN ******S*
Nov 29 23:03:55 195.198.154.164:1320 -> xxx.yyy.1.9:1433 SYN ******S*
Nov 29 23:03:55 195.198.154.164:1321 -> xxx.yyy.1.10:1433 SYN ******S*
Nov 29 23:03:55 195.198.154.164:1322 -> xxx.yyy.1.11:1433 SYN ******S*
[...]
Nov 29 23:16:04 195.198.154.164:3839 -> xxx.yyy.255.234:1433 SYN ******S*
Nov 29 23:16:05 195.198.154.164:3851 -> xxx.yyy.255.246:1433 SYN ******S*
Nov 29 23:16:05 195.198.154.164:3852 -> xxx.yyy.255.247:1433 SYN ******S*
Nov 29 23:16:05 195.198.154.164:3850 -> xxx.yyy.255.245:1433 SYN ******S*
Nov 29 23:16:05 195.198.154.164:3849 -> xxx.yyy.255.244:1433 SYN ******S*
Nov 29 23:16:05 195.198.154.164:3848 -> xxx.yyy.255.243:1433 SYN ******S*
Nov 29 23:16:05 195.198.154.164:3847 -> xxx.yyy.255.242:1433 SYN ******S*
Nov 29 23:16:05 195.198.154.164:3853 -> xxx.yyy.255.248:1433 SYN ******S*
Nov 29 23:16:05 195.198.154.164:3859 -> xxx.yyy.255.254:1433 SYN ******S*
37108
Nov 29 17:02:37 200.207.115.242:3569 -> xxx.yyy.1.1:1521 SYN ******S*
Nov 29 17:02:37 200.207.115.242:3570 -> xxx.yyy.1.2:1521 SYN ******S*
Nov 29 17:02:37 200.207.115.242:3573 -> xxx.yyy.1.5:1521 SYN ******S*
Nov 29 17:02:40 200.207.115.242:3578 -> xxx.yyy.1.10:1521 SYN ******S*
Nov 29 17:02:37 200.207.115.242:3579 -> xxx.yyy.1.11:1521 SYN ******S*
Nov 29 17:02:37 200.207.115.242:3580 -> xxx.yyy.1.12:1521 SYN ******S*
Nov 29 17:02:39 200.207.115.242:3585 -> xxx.yyy.1.17:1521 SYN ******S*
Nov 29 17:02:38 200.207.115.242:3587 -> xxx.yyy.1.19:1521 SYN ******S*
[...]
Nov 29 17:14:21 200.207.115.242:3763 -> xxx.yyy.255.198:1521 SYN ******S*
Nov 29 17:14:21 200.207.115.242:3760 -> xxx.yyy.255.195:1521 SYN ******S*
Nov 29 17:14:21 200.207.115.242:3784 -> xxx.yyy.255.219:1521 SYN ******S*
Nov 29 17:14:21 200.207.115.242:3790 -> xxx.yyy.255.225:1521 SYN ******S*
Nov 29 17:14:21 200.207.115.242:3804 -> xxx.yyy.255.239:1521 SYN ******S*
Nov 29 17:14:21 200.207.115.242:3798 -> xxx.yyy.255.233:1521 SYN ******S*
Nov 29 17:14:21 200.207.115.242:3817 -> xxx.yyy.255.252:1521 SYN ******S*
Nov 29 17:14:21 200.207.115.242:3819 -> xxx.yyy.255.254:1521 SYN ******S*
Nov 29 17:14:21 200.207.115.242:3816 -> xxx.yyy.255.251:1521 SYN ******S*
32612
Nov 29 22:54:07 220.168.7.45:4995 -> xxx.yyy.188.161:1025 SYN ******S*
Nov 29 22:54:07 220.168.7.45:1031 -> xxx.yyy.188.161:6129 SYN ******S*
Nov 29 22:54:07 220.168.7.45:1056 -> xxx.yyy.188.161:1433 SYN ******S*
Nov 29 22:54:07 220.168.7.45:1058 -> xxx.yyy.188.161:5000 SYN ******S*
Nov 29 22:54:07 220.168.7.45:1068 -> xxx.yyy.188.161:80 SYN ******S*
Nov 29 22:54:07 220.168.7.45:1047 -> xxx.yyy.188.161:3410 SYN ******S*
Nov 29 22:54:05 220.168.7.45:4919 -> xxx.yyy.33.38:1433 SYN ******S*
Nov 29 22:54:05 220.168.7.45:1230 -> xxx.yyy.33.22:6129 SYN ******S*
[...]
Nov 30 00:00:00 220.168.7.45:1718 -> xxx.yyy.203.206:5554 SYN ******S*
Nov 30 00:00:00 220.168.7.45:1721 -> xxx.yyy.203.206:1433 SYN ******S*
Nov 30 00:00:00 220.168.7.45:1722 -> xxx.yyy.203.206:5000 SYN ******S*
Nov 30 00:00:00 220.168.7.45:1658 -> xxx.yyy.33.106:1025 SYN ******S*
Nov 30 00:00:00 220.168.7.45:1661 -> xxx.yyy.33.106:6129 SYN ******S*
Nov 30 00:00:00 220.168.7.45:1673 -> xxx.yyy.33.106:3410 SYN ******S*
Nov 30 00:00:00 220.168.7.45:1691 -> xxx.yyy.33.106:5000 SYN ******S*
Nov 30 00:00:00 220.168.7.45:1693 -> xxx.yyy.33.106:80 SYN ******S*
25317
Nov 29 14:21:58 200.67.207.246:4887 -> xxx.yyy.1.4:1433 SYN ******S*
Nov 29 14:21:56 200.67.207.246:4892 -> xxx.yyy.1.9:1433 SYN ******S*
Nov 29 14:21:56 200.67.207.246:4895 -> xxx.yyy.1.12:1433 SYN ******S*
Nov 29 14:21:56 200.67.207.246:4897 -> xxx.yyy.1.14:1433 SYN ******S*
Nov 29 14:21:56 200.67.207.246:4900 -> xxx.yyy.1.17:1433 SYN ******S*
Nov 29 14:21:56 200.67.207.246:4901 -> xxx.yyy.1.18:1433 SYN ******S*
Nov 29 14:21:59 200.67.207.246:4903 -> xxx.yyy.1.20:1433 SYN ******S*
Nov 29 14:21:59 200.67.207.246:4904 -> xxx.yyy.1.21:1433 SYN ******S*
[...]
Nov 29 19:22:51 200.67.207.246:3318 -> xxx.yyy.107.253:1433 SYN ******S*
Nov 29 19:22:52 200.67.207.246:3246 -> xxx.yyy.107.251:1433 SYN ******S*
Nov 29 19:22:54 200.67.207.246:3319 -> xxx.yyy.107.254:1433 SYN ******S*
Nov 29 19:22:54 200.67.207.246:3162 -> xxx.yyy.107.247:1433 SYN ******S*
Nov 29 19:22:55 200.67.207.246:3165 -> xxx.yyy.107.248:1433 SYN ******S*
Nov 29 19:22:57 200.67.207.246:3220 -> xxx.yyy.107.249:1433 SYN ******S*
Nov 29 19:23:00 200.67.207.246:3318 -> xxx.yyy.107.253:1433 SYN ******S*
Nov 29 19:23:00 200.67.207.246:3319 -> xxx.yyy.107.254:1433 SYN ******S*
14127
Nov 29 00:07:06 211.214.247.160:3217 -> xxx.yyy.249.7:1433 SYN ******S*
Nov 29 00:07:06 211.214.247.160:3215 -> xxx.yyy.249.5:1433 SYN ******S*
Nov 29 00:07:06 211.214.247.160:3213 -> xxx.yyy.249.3:1433 SYN ******S*
Nov 29 00:07:06 211.214.247.160:3221 -> xxx.yyy.249.11:1433 SYN ******S*
Nov 29 00:07:06 211.214.247.160:3219 -> xxx.yyy.249.9:1433 SYN ******S*
Nov 29 00:07:06 211.214.247.160:3220 -> xxx.yyy.249.10:1433 SYN ******S*
Nov 29 00:07:06 211.214.247.160:3216 -> xxx.yyy.249.6:1433 SYN ******S*
Nov 29 00:07:06 211.214.247.160:3224 -> xxx.yyy.249.14:1433 SYN ******S*
[...]
Nov 29 23:30:49 211.214.247.160:4010 -> xxx.yyy.168.240:1433 SYN ******S*
Nov 29 23:30:49 211.214.247.160:4017 -> xxx.yyy.168.247:1433 SYN ******S*
Nov 29 23:30:49 211.214.247.160:3975 -> xxx.yyy.168.205:1433 SYN ******S*
Nov 29 23:30:49 211.214.247.160:3978 -> xxx.yyy.168.208:1433 SYN ******S*
Nov 29 23:30:49 211.214.247.160:3972 -> xxx.yyy.168.202:1433 SYN ******S*
Nov 29 23:30:49 211.214.247.160:3984 -> xxx.yyy.168.214:1433 SYN ******S*
Nov 29 23:30:49 211.214.247.160:3987 -> xxx.yyy.168.217:1433 SYN ******S*
Nov 29 23:30:49 211.214.247.160:4008 -> xxx.yyy.168.238:1433 SYN ******S*
Nov 29 23:30:49 211.214.247.160:4018 -> xxx.yyy.168.248:1433 SYN ******S*
12475
[...]
11742
Nov 29 22:05:04 61.187.8.37:4182 -> xxx.yyy.1.245:6129 SYN ******S*
Nov 29 22:05:06 61.187.8.37:4187 -> xxx.yyy.1.245:3410 SYN ******S*
Nov 29 22:05:06 61.187.8.37:4219 -> xxx.yyy.1.245:5554 SYN ******S*
Nov 29 22:05:04 61.187.8.37:4221 -> xxx.yyy.1.245:5000 SYN ******S*
Nov 29 22:05:06 61.187.8.37:4234 -> xxx.yyy.1.245:80 SYN ******S*
Nov 29 22:05:04 61.187.8.37:4296 -> xxx.yyy.1.25:5554 SYN ******S*
Nov 29 22:05:06 61.187.8.37:4295 -> xxx.yyy.1.25:3410 SYN ******S*
Nov 29 22:05:04 61.187.8.37:4300 -> xxx.yyy.107.27:1025 SYN ******S*
[...]
Nov 29 23:59:55 61.187.8.37:2181 -> xxx.yyy.184.117:1025 SYN ******S*
Nov 29 23:59:55 61.187.8.37:2400 -> xxx.yyy.1.195:1025 SYN ******S*
Nov 29 23:59:56 61.187.8.37:2405 -> xxx.yyy.1.110:1025 SYN ******S*
Nov 30 00:00:00 61.187.8.37:2394 -> xxx.yyy.66.170:1025 SYN ******S*
Nov 30 00:00:00 61.187.8.37:2396 -> xxx.yyy.66.170:6129 SYN ******S*
Nov 29 23:59:58 61.187.8.37:2189 -> xxx.yyy.157.49:1025 SYN ******S*
Nov 29 23:59:59 61.187.8.37:2452 -> xxx.yyy.1.144:1025 SYN ******S*
Nov 30 00:00:00 61.187.8.37:2303 -> xxx.yyy.171.66:6129 SYN ******S*
Nov 30 00:00:00 61.187.8.37:2300 -> xxx.yyy.171.66:1025 SYN ******S*
11702
Nov 29 22:28:32 220.167.7.45:1378 -> xxx.yyy.33.54:3410 SYN ******S*
Nov 29 22:28:35 220.167.7.45:1411 -> xxx.yyy.33.201:1025 SYN ******S*
Nov 29 22:28:35 220.167.7.45:1415 -> xxx.yyy.33.201:6129 SYN ******S*
Nov 29 22:28:35 220.167.7.45:1420 -> xxx.yyy.33.201:3410 SYN ******S*
Nov 29 22:28:35 220.167.7.45:1426 -> xxx.yyy.33.201:5554 SYN ******S*
Nov 29 22:28:32 220.167.7.45:1427 -> xxx.yyy.33.201:1433 SYN ******S*
Nov 29 22:28:35 220.167.7.45:1279 -> xxx.yyy.138.19:6129 SYN ******S*
Nov 29 22:28:35 220.167.7.45:1302 -> xxx.yyy.138.19:3410 SYN ******S*
[...]
Nov 29 22:53:59 220.167.7.45:3109 -> xxx.yyy.182.148:3410 SYN ******S*
Nov 29 22:53:59 220.167.7.45:3114 -> xxx.yyy.182.148:5554 SYN ******S*
Nov 29 22:53:59 220.167.7.45:3128 -> xxx.yyy.182.148:5000 SYN ******S*
Nov 29 22:53:59 220.167.7.45:3476 -> xxx.yyy.244.21:1025 SYN ******S*
Nov 29 22:53:59 220.167.7.45:3459 -> xxx.yyy.33.23:6129 SYN ******S*
Nov 29 22:53:59 220.167.7.45:3468 -> xxx.yyy.33.23:3410 SYN ******S*
Nov 29 22:53:59 220.167.7.45:3469 -> xxx.yyy.33.23:5554 SYN ******S*
Nov 29 22:54:02 220.167.7.45:3488 -> xxx.yyy.231.244:1025 SYN ******S*
10631
Nov 29 00:06:13 65.54.188.52:19059 -> xxx.yyy.248.80:80 SYN ******S*
Nov 29 00:06:13 65.54.188.52:19111 -> xxx.yyy.248.45:80 SYN ******S*
Nov 29 00:06:13 65.54.188.52:19235 -> xxx.yyy.233.168:80 SYN ******S*
Nov 29 00:06:13 65.54.188.52:19243 -> xxx.yyy.248.4:80 SYN ******S*
Nov 29 00:06:13 65.54.188.52:18360 -> xxx.yyy.228.159:80 SYN ******S*
Nov 29 00:06:23 65.54.188.52:19693 -> xxx.yyy.241.30:80 SYN ******S*
Nov 29 00:06:26 65.54.188.52:20682 -> xxx.yyy.241.20:80 SYN ******S*
Nov 29 00:06:25 65.54.188.52:20371 -> xxx.yyy.1.13:80 SYN ******S*
[...]
Nov 29 23:47:12 65.54.188.52:52608 -> xxx.yyy.210.5:80 SYN ******S*
Nov 29 23:49:23 65.54.188.52:58863 -> xxx.yyy.212.75:80 SYN ******S*
Nov 29 23:49:23 65.54.188.52:58998 -> xxx.yyy.1.13:80 SYN ******S*
Nov 29 23:49:24 65.54.188.52:59254 -> xxx.yyy.1.60:80 SYN ******S*
Nov 29 23:49:25 65.54.188.52:59699 -> xxx.yyy.12.25:80 SYN ******S*
Nov 29 23:49:25 65.54.188.52:59758 -> xxx.yyy.248.4:80 SYN ******S*
Nov 29 23:49:27 65.54.188.52:60497 -> xxx.yyy.241.255:80 SYN ******S*
Nov 29 23:49:28 65.54.188.52:60561 -> xxx.yyy.234.52:80 SYN ******S*
Nov 29 23:49:31 65.54.188.52:60990 -> xxx.yyy.210.5:80 SYN ******S*
8558
Nov 29 23:56:19 221.201.184.157:1515 -> xxx.yyy.71.162:5554 SYN ******S*
Nov 29 23:56:20 221.201.184.157:2545 -> xxx.yyy.71.162:1023 SYN ******S*
Nov 29 23:56:19 221.201.184.157:1529 -> xxx.yyy.71.187:5554 SYN ******S*
Nov 29 23:56:20 221.201.184.157:2511 -> xxx.yyy.71.187:1023 SYN ******S*
Nov 29 23:56:19 221.201.184.157:1571 -> xxx.yyy.71.196:5554 SYN ******S*
Nov 29 23:56:20 221.201.184.157:2590 -> xxx.yyy.71.196:1023 SYN ******S*
Nov 29 23:56:19 221.201.184.157:1578 -> xxx.yyy.71.197:5554 SYN ******S*
Nov 29 23:56:19 221.201.184.157:1588 -> xxx.yyy.71.199:5554 SYN ******S*
[...]
Nov 29 23:57:07 221.201.184.157:4924 -> xxx.yyy.92.3:9898 SYN ******S*
Nov 29 23:57:07 221.201.184.157:4936 -> xxx.yyy.92.2:9898 SYN ******S*
Nov 29 23:57:07 221.201.184.157:1039 -> xxx.yyy.92.4:9898 SYN ******S*
Nov 29 23:57:07 221.201.184.157:1059 -> xxx.yyy.92.9:9898 SYN ******S*
Nov 29 23:57:07 221.201.184.157:1075 -> xxx.yyy.92.7:9898 SYN ******S*
Nov 29 23:57:07 221.201.184.157:1087 -> xxx.yyy.92.8:9898 SYN ******S*
Nov 29 23:57:07 221.201.184.157:1112 -> xxx.yyy.92.10:9898 SYN ******S*
Nov 29 23:57:07 221.201.184.157:1170 -> xxx.yyy.92.13:9898 SYN ******S*
Nov 29 23:57:07 221.201.184.157:1173 -> xxx.yyy.92.12:9898 SYN ******S*
7641
Nov 29 22:54:39 60.34.168.24:4822 -> xxx.yyy.235.117:5554 SYN ******S*
Nov 29 22:54:39 60.34.168.24:4825 -> xxx.yyy.235.118:5554 SYN ******S*
Nov 29 22:54:39 60.34.168.24:4828 -> xxx.yyy.235.121:5554 SYN ******S*
Nov 29 22:54:40 60.34.168.24:2641 -> xxx.yyy.235.121:1023 SYN ******S*
Nov 29 22:54:39 60.34.168.24:4838 -> xxx.yyy.235.125:5554 SYN ******S*
Nov 29 22:54:40 60.34.168.24:2651 -> xxx.yyy.235.125:1023 SYN ******S*
Nov 29 22:54:39 60.34.168.24:4879 -> xxx.yyy.235.132:5554 SYN ******S*
Nov 29 22:54:39 60.34.168.24:4819 -> xxx.yyy.235.115:5554 SYN ******S*
[...]
Nov 29 22:55:30 60.34.168.24:4731 -> xxx.yyy.255.197:9898 SYN ******S*
Nov 29 22:55:30 60.34.168.24:4798 -> xxx.yyy.255.180:9898 SYN ******S*
Nov 29 22:55:30 60.34.168.24:4801 -> xxx.yyy.255.190:9898 SYN ******S*
Nov 29 22:55:30 60.34.168.24:4923 -> xxx.yyy.255.202:9898 SYN ******S*
Nov 29 22:55:30 60.34.168.24:1059 -> xxx.yyy.255.206:9898 SYN ******S*
Nov 29 22:55:30 60.34.168.24:1162 -> xxx.yyy.255.207:9898 SYN ******S*
Nov 29 22:55:30 60.34.168.24:1163 -> xxx.yyy.255.212:9898 SYN ******S*
Nov 29 22:55:30 60.34.168.24:1593 -> xxx.yyy.255.234:9898 SYN ******S*
6146
[...]
6132
Nov 29 23:56:44 221.193.44.76:4806 -> xxx.yyy.72.130:5554 SYN ******S*
Nov 29 23:56:44 221.193.44.76:4819 -> xxx.yyy.72.134:5554 SYN ******S*
Nov 29 23:56:44 221.193.44.76:4804 -> xxx.yyy.72.128:5554 SYN ******S*
Nov 29 23:56:44 221.193.44.76:4807 -> xxx.yyy.72.131:5554 SYN ******S*
Nov 29 23:56:44 221.193.44.76:4800 -> xxx.yyy.72.124:5554 SYN ******S*
Nov 29 23:56:45 221.193.44.76:1476 -> xxx.yyy.72.124:1023 SYN ******S*
Nov 29 23:56:44 221.193.44.76:4824 -> xxx.yyy.72.135:5554 SYN ******S*
Nov 29 23:56:45 221.193.44.76:1484 -> xxx.yyy.72.135:1023 SYN ******S*
[...]
Nov 29 23:58:08 221.193.44.76:2886 -> xxx.yyy.73.125:9898 SYN ******S*
Nov 29 23:58:07 221.193.44.76:2492 -> xxx.yyy.73.127:5554 SYN ******S*
Nov 29 23:58:08 221.193.44.76:3016 -> xxx.yyy.73.127:1023 SYN ******S*
Nov 29 23:58:10 221.193.44.76:4098 -> xxx.yyy.73.127:9898 SYN ******S*
Nov 29 23:58:08 221.193.44.76:3015 -> xxx.yyy.73.126:1023 SYN ******S*
Nov 29 23:58:10 221.193.44.76:4097 -> xxx.yyy.73.126:9898 SYN ******S*
Nov 29 23:58:08 221.193.44.76:3017 -> xxx.yyy.73.128:1023 SYN ******S*
Nov 29 23:58:10 221.193.44.76:4099 -> xxx.yyy.73.128:9898 SYN ******S*
6020
Nov 29 22:54:25 221.147.187.183:2232 -> xxx.yyy.236.85:5554 SYN ******S*
Nov 29 22:54:26 221.147.187.183:2622 -> xxx.yyy.236.85:1023 SYN ******S*
Nov 29 22:54:28 221.147.187.183:3385 -> xxx.yyy.236.85:9898 SYN ******S*
Nov 29 22:54:25 221.147.187.183:2233 -> xxx.yyy.236.86:5554 SYN ******S*
Nov 29 22:54:26 221.147.187.183:2623 -> xxx.yyy.236.86:1023 SYN ******S*
Nov 29 22:54:28 221.147.187.183:3386 -> xxx.yyy.236.86:9898 SYN ******S*
Nov 29 22:54:25 221.147.187.183:2244 -> xxx.yyy.236.89:5554 SYN ******S*
Nov 29 22:54:26 221.147.187.183:2642 -> xxx.yyy.236.89:1023 SYN ******S*
[...]
Nov 29 22:55:22 221.147.187.183:1473 -> xxx.yyy.255.220:9898 SYN ******S*
Nov 29 22:55:22 221.147.187.183:1475 -> xxx.yyy.255.222:9898 SYN ******S*
Nov 29 22:55:22 221.147.187.183:1496 -> xxx.yyy.255.226:9898 SYN ******S*
Nov 29 22:55:22 221.147.187.183:1534 -> xxx.yyy.255.233:9898 SYN ******S*
Nov 29 22:55:22 221.147.187.183:1558 -> xxx.yyy.255.242:9898 SYN ******S*
Nov 29 22:55:22 221.147.187.183:1546 -> xxx.yyy.255.238:9898 SYN ******S*
Nov 29 22:55:22 221.147.187.183:1524 -> xxx.yyy.255.230:9898 SYN ******S*
Nov 29 22:55:22 221.147.187.183:1581 -> xxx.yyy.255.248:9898 SYN ******S*
Nov 29 22:55:22 221.147.187.183:1561 -> xxx.yyy.255.243:9898 SYN ******S*
6019
Nov 29 22:56:18 220.85.252.243:1154 -> xxx.yyy.71.165:5554 SYN ******S*
Nov 29 22:56:18 220.85.252.243:1156 -> xxx.yyy.71.167:5554 SYN ******S*
Nov 29 22:56:18 220.85.252.243:1176 -> xxx.yyy.71.184:5554 SYN ******S*
Nov 29 22:56:21 220.85.252.243:1177 -> xxx.yyy.71.184:1023 SYN ******S*
Nov 29 22:56:18 220.85.252.243:1195 -> xxx.yyy.71.186:5554 SYN ******S*
Nov 29 22:56:18 220.85.252.243:1203 -> xxx.yyy.71.191:5554 SYN ******S*
Nov 29 22:56:21 220.85.252.243:1183 -> xxx.yyy.71.191:1023 SYN ******S*
Nov 29 22:56:18 220.85.252.243:1208 -> xxx.yyy.71.192:5554 SYN ******S*
[...]
Nov 29 22:58:57 220.85.252.243:1177 -> xxx.yyy.91.84:9898 SYN ******S*
Nov 29 22:58:57 220.85.252.243:1025 -> xxx.yyy.91.164:9898 SYN ******S*
Nov 29 22:58:57 220.85.252.243:1139 -> xxx.yyy.91.205:9898 SYN ******S*
Nov 29 22:58:57 220.85.252.243:1164 -> xxx.yyy.91.207:9898 SYN ******S*
Nov 29 22:58:58 220.85.252.243:1119 -> xxx.yyy.91.215:9898 SYN ******S*
Nov 29 22:58:58 220.85.252.243:1124 -> xxx.yyy.91.208:9898 SYN ******S*
Nov 29 22:58:58 220.85.252.243:1186 -> xxx.yyy.91.55:9898 SYN ******S*
Nov 29 22:59:01 220.85.252.243:1989 -> xxx.yyy.92.9:9898 SYN ******S*
Nov 29 22:59:02 220.85.252.243:2230 -> xxx.yyy.92.6:9898 SYN ******S*
5977
Nov 29 07:11:35 200.141.134.49:3798 -> xxx.yyy.1.0:1433 SYN ******S*
Nov 29 07:11:32 200.141.134.49:3907 -> xxx.yyy.1.1:1433 SYN ******S*
Nov 29 07:11:35 200.141.134.49:3909 -> xxx.yyy.1.2:1433 SYN ******S*
Nov 29 07:11:35 200.141.134.49:4550 -> xxx.yyy.1.6:1433 SYN ******S*
Nov 29 07:11:36 200.141.134.49:4579 -> xxx.yyy.1.7:1433 SYN ******S*
Nov 29 07:11:36 200.141.134.49:4590 -> xxx.yyy.1.9:1433 SYN ******S*
Nov 29 07:11:36 200.141.134.49:4598 -> xxx.yyy.1.10:1433 SYN ******S*
Nov 29 07:11:36 200.141.134.49:4604 -> xxx.yyy.1.11:1433 SYN ******S*
[...]
Nov 29 07:41:25 200.141.134.49:3289 -> xxx.yyy.33.238:1433 SYN ******S*
Nov 29 07:41:25 200.141.134.49:3348 -> xxx.yyy.33.239:1433 SYN ******S*
Nov 29 07:41:26 200.141.134.49:3419 -> xxx.yyy.33.241:1433 SYN ******S*
Nov 29 07:41:26 200.141.134.49:3426 -> xxx.yyy.33.240:1433 SYN ******S*
Nov 29 07:41:26 200.141.134.49:3546 -> xxx.yyy.33.245:1433 SYN ******S*
Nov 29 07:41:27 200.141.134.49:3854 -> xxx.yyy.33.249:1433 SYN ******S*
Nov 29 07:41:27 200.141.134.49:3886 -> xxx.yyy.33.250:1433 SYN ******S*
Nov 29 07:41:27 200.141.134.49:4008 -> xxx.yyy.33.251:1433 SYN ******S*
Nov 29 07:41:28 200.141.134.49:4059 -> xxx.yyy.33.253:1433 SYN ******S*
5789
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list