[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Fri Oct 1 15:12:43 GMT 2004
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0500.
Sep 30 00:11:34 82.52.48.222:3116 -> xxx.yyy.1.2:1433 SYN ******S*
Sep 30 00:11:35 82.52.48.222:3132 -> xxx.yyy.1.18:1433 SYN ******S*
Sep 30 00:11:32 82.52.48.222:3138 -> xxx.yyy.1.21:1433 SYN ******S*
Sep 30 00:11:35 82.52.48.222:3140 -> xxx.yyy.1.23:1433 SYN ******S*
Sep 30 00:11:35 82.52.48.222:3143 -> xxx.yyy.1.25:1433 SYN ******S*
Sep 30 00:11:35 82.52.48.222:3144 -> xxx.yyy.1.26:1433 SYN ******S*
Sep 30 00:11:35 82.52.48.222:3146 -> xxx.yyy.1.27:1433 SYN ******S*
Sep 30 00:11:35 82.52.48.222:3147 -> xxx.yyy.1.28:1433 SYN ******S*
[...]
Sep 30 04:00:19 82.52.48.222:3350 -> xxx.yyy.255.247:1433 SYN ******S*
Sep 30 04:00:19 82.52.48.222:3361 -> xxx.yyy.255.248:1433 SYN ******S*
Sep 30 04:00:19 82.52.48.222:3364 -> xxx.yyy.255.250:1433 SYN ******S*
Sep 30 04:00:19 82.52.48.222:3362 -> xxx.yyy.255.249:1433 SYN ******S*
Sep 30 04:00:19 82.52.48.222:3377 -> xxx.yyy.255.252:1433 SYN ******S*
Sep 30 04:00:19 82.52.48.222:3376 -> xxx.yyy.255.251:1433 SYN ******S*
Sep 30 04:00:19 82.52.48.222:3382 -> xxx.yyy.255.253:1433 SYN ******S*
Sep 30 04:00:20 82.52.48.222:3387 -> xxx.yyy.255.254:1433 SYN ******S*
117312
Sep 30 06:25:38 200.118.117.225:55417 -> xxx.yyy.1.1:1433 SYN ******S*
Sep 30 06:25:38 200.118.117.225:55419 -> xxx.yyy.1.2:1433 SYN ******S*
Sep 30 06:25:38 200.118.117.225:55420 -> xxx.yyy.1.3:1433 SYN ******S*
Sep 30 06:25:38 200.118.117.225:55421 -> xxx.yyy.1.4:1433 SYN ******S*
Sep 30 06:25:38 200.118.117.225:55423 -> xxx.yyy.1.5:1433 SYN ******S*
Sep 30 06:25:38 200.118.117.225:55424 -> xxx.yyy.1.6:1433 SYN ******S*
Sep 30 06:25:38 200.118.117.225:55426 -> xxx.yyy.1.7:1433 SYN ******S*
Sep 30 06:25:38 200.118.117.225:55427 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Sep 30 06:40:27 200.118.117.225:29092 -> xxx.yyy.255.170:1433 SYN ******S*
Sep 30 06:40:27 200.118.117.225:29093 -> xxx.yyy.255.171:1433 SYN ******S*
Sep 30 06:40:28 200.118.117.225:29104 -> xxx.yyy.255.179:1433 SYN ******S*
Sep 30 06:40:28 200.118.117.225:29119 -> xxx.yyy.255.191:1433 SYN ******S*
Sep 30 06:40:28 200.118.117.225:29145 -> xxx.yyy.255.210:1433 SYN ******S*
Sep 30 06:40:28 200.118.117.225:29158 -> xxx.yyy.255.220:1433 SYN ******S*
Sep 30 06:40:28 200.118.117.225:29174 -> xxx.yyy.255.232:1433 SYN ******S*
Sep 30 06:40:28 200.118.117.225:29189 -> xxx.yyy.255.243:1433 SYN ******S*
74665
Sep 30 14:40:25 162.83.62.249:3821 -> xxx.yyy.1.0:1433 SYN ******S*
Sep 30 14:40:25 162.83.62.249:3828 -> xxx.yyy.1.4:1433 SYN ******S*
Sep 30 14:40:25 162.83.62.249:3835 -> xxx.yyy.1.10:1433 SYN ******S*
Sep 30 14:40:25 162.83.62.249:3838 -> xxx.yyy.1.12:1433 SYN ******S*
Sep 30 14:40:25 162.83.62.249:3840 -> xxx.yyy.1.13:1433 SYN ******S*
Sep 30 14:40:25 162.83.62.249:3841 -> xxx.yyy.1.14:1433 SYN ******S*
Sep 30 14:40:25 162.83.62.249:3844 -> xxx.yyy.1.17:1433 SYN ******S*
Sep 30 14:40:23 162.83.62.249:3852 -> xxx.yyy.1.23:1433 SYN ******S*
[...]
Sep 30 18:30:18 162.83.62.249:3019 -> xxx.yyy.255.241:1433 SYN ******S*
Sep 30 18:30:18 162.83.62.249:3024 -> xxx.yyy.255.244:1433 SYN ******S*
Sep 30 18:30:18 162.83.62.249:3036 -> xxx.yyy.255.245:1433 SYN ******S*
Sep 30 18:30:19 162.83.62.249:3053 -> xxx.yyy.255.247:1433 SYN ******S*
Sep 30 18:30:19 162.83.62.249:3072 -> xxx.yyy.255.248:1433 SYN ******S*
Sep 30 18:30:19 162.83.62.249:3081 -> xxx.yyy.255.249:1433 SYN ******S*
Sep 30 18:30:20 162.83.62.249:3085 -> xxx.yyy.255.252:1433 SYN ******S*
Sep 30 18:30:20 162.83.62.249:3084 -> xxx.yyy.255.251:1433 SYN ******S*
Sep 30 18:30:20 162.83.62.249:3090 -> xxx.yyy.255.253:1433 SYN ******S*
74024
Sep 30 02:56:00 65.25.226.133:1477 -> xxx.yyy.1.1:4000 SYN ******S*
Sep 30 02:56:00 65.25.226.133:1478 -> xxx.yyy.1.2:4000 SYN ******S*
Sep 30 02:56:00 65.25.226.133:1479 -> xxx.yyy.1.3:4000 SYN ******S*
Sep 30 02:55:59 65.25.226.133:1480 -> xxx.yyy.1.4:4000 SYN ******S*
Sep 30 02:55:59 65.25.226.133:1481 -> xxx.yyy.1.5:4000 SYN ******S*
Sep 30 02:56:02 65.25.226.133:1482 -> xxx.yyy.1.6:4000 SYN ******S*
Sep 30 02:56:02 65.25.226.133:1483 -> xxx.yyy.1.7:4000 SYN ******S*
Sep 30 02:56:02 65.25.226.133:1484 -> xxx.yyy.1.8:4000 SYN ******S*
[...]
Sep 30 03:08:03 65.25.226.133:4639 -> xxx.yyy.255.242:4000 SYN ******S*
Sep 30 03:08:03 65.25.226.133:4643 -> xxx.yyy.255.243:4000 SYN ******S*
Sep 30 03:08:03 65.25.226.133:4650 -> xxx.yyy.255.247:4000 SYN ******S*
Sep 30 03:08:03 65.25.226.133:4651 -> xxx.yyy.255.248:4000 SYN ******S*
Sep 30 03:08:03 65.25.226.133:4652 -> xxx.yyy.255.249:4000 SYN ******S*
Sep 30 03:08:03 65.25.226.133:4655 -> xxx.yyy.255.251:4000 SYN ******S*
Sep 30 03:08:03 65.25.226.133:4654 -> xxx.yyy.255.250:4000 SYN ******S*
Sep 30 03:08:03 65.25.226.133:4656 -> xxx.yyy.255.252:4000 SYN ******S*
Sep 30 03:08:03 65.25.226.133:4657 -> xxx.yyy.255.253:4000 SYN ******S*
70794
Sep 30 02:29:44 68.236.194.11:2259 -> xxx.yyy.1.1:4000 SYN ******S*
Sep 30 02:29:44 68.236.194.11:2260 -> xxx.yyy.1.2:4000 SYN ******S*
Sep 30 02:29:44 68.236.194.11:2261 -> xxx.yyy.1.3:4000 SYN ******S*
Sep 30 02:29:42 68.236.194.11:2262 -> xxx.yyy.1.4:4000 SYN ******S*
Sep 30 02:29:42 68.236.194.11:2263 -> xxx.yyy.1.5:4000 SYN ******S*
Sep 30 02:29:42 68.236.194.11:2264 -> xxx.yyy.1.6:4000 SYN ******S*
Sep 30 02:29:42 68.236.194.11:2265 -> xxx.yyy.1.7:4000 SYN ******S*
Sep 30 02:29:42 68.236.194.11:2266 -> xxx.yyy.1.8:4000 SYN ******S*
[...]
Sep 30 02:41:29 68.236.194.11:4702 -> xxx.yyy.255.242:4000 SYN ******S*
Sep 30 02:41:29 68.236.194.11:4699 -> xxx.yyy.255.239:4000 SYN ******S*
Sep 30 02:41:29 68.236.194.11:4709 -> xxx.yyy.255.249:4000 SYN ******S*
Sep 30 02:41:29 68.236.194.11:4713 -> xxx.yyy.255.253:4000 SYN ******S*
Sep 30 02:41:29 68.236.194.11:4710 -> xxx.yyy.255.250:4000 SYN ******S*
Sep 30 02:41:29 68.236.194.11:4714 -> xxx.yyy.255.254:4000 SYN ******S*
Sep 30 02:41:29 68.236.194.11:4711 -> xxx.yyy.255.251:4000 SYN ******S*
Sep 30 02:41:29 68.236.194.11:4708 -> xxx.yyy.255.248:4000 SYN ******S*
Sep 30 02:41:29 68.236.194.11:4712 -> xxx.yyy.255.252:4000 SYN ******S*
69775
Sep 30 03:01:22 211.117.3.156:1290 -> xxx.yyy.1.1:4899 SYN ******S*
Sep 30 03:01:22 211.117.3.156:1291 -> xxx.yyy.1.2:4899 SYN ******S*
Sep 30 03:01:24 211.117.3.156:1293 -> xxx.yyy.1.4:4899 SYN ******S*
Sep 30 03:01:22 211.117.3.156:1292 -> xxx.yyy.1.3:4899 SYN ******S*
Sep 30 03:01:24 211.117.3.156:1296 -> xxx.yyy.1.5:4899 SYN ******S*
Sep 30 03:01:24 211.117.3.156:1298 -> xxx.yyy.1.7:4899 SYN ******S*
Sep 30 03:01:24 211.117.3.156:1299 -> xxx.yyy.1.8:4899 SYN ******S*
Sep 30 03:01:24 211.117.3.156:1297 -> xxx.yyy.1.6:4899 SYN ******S*
[...]
Sep 30 03:41:39 211.117.3.156:2005 -> xxx.yyy.255.246:4899 SYN ******S*
Sep 30 03:41:39 211.117.3.156:2006 -> xxx.yyy.255.247:4899 SYN ******S*
Sep 30 03:41:39 211.117.3.156:2010 -> xxx.yyy.255.248:4899 SYN ******S*
Sep 30 03:41:39 211.117.3.156:2011 -> xxx.yyy.255.249:4899 SYN ******S*
Sep 30 03:41:39 211.117.3.156:2018 -> xxx.yyy.255.250:4899 SYN ******S*
Sep 30 03:41:39 211.117.3.156:2019 -> xxx.yyy.255.251:4899 SYN ******S*
Sep 30 03:41:39 211.117.3.156:2023 -> xxx.yyy.255.252:4899 SYN ******S*
Sep 30 03:41:39 211.117.3.156:2024 -> xxx.yyy.255.253:4899 SYN ******S*
Sep 30 03:41:39 211.117.3.156:2025 -> xxx.yyy.255.254:4899 SYN ******S*
60759
Sep 30 08:14:31 210.199.212.3:3722 -> xxx.yyy.1.1:1433 SYN ******S*
Sep 30 08:14:31 210.199.212.3:3724 -> xxx.yyy.1.3:1433 SYN ******S*
Sep 30 08:14:31 210.199.212.3:3726 -> xxx.yyy.1.5:1433 SYN ******S*
Sep 30 08:14:31 210.199.212.3:3727 -> xxx.yyy.1.6:1433 SYN ******S*
Sep 30 08:14:31 210.199.212.3:3728 -> xxx.yyy.1.7:1433 SYN ******S*
Sep 30 08:14:29 210.199.212.3:3731 -> xxx.yyy.1.10:1433 SYN ******S*
Sep 30 08:14:31 210.199.212.3:3734 -> xxx.yyy.1.13:1433 SYN ******S*
Sep 30 08:14:29 210.199.212.3:3736 -> xxx.yyy.1.15:1433 SYN ******S*
[...]
Sep 30 08:25:32 210.199.212.3:1319 -> xxx.yyy.255.233:1433 SYN ******S*
Sep 30 08:25:32 210.199.212.3:1323 -> xxx.yyy.255.237:1433 SYN ******S*
Sep 30 08:25:33 210.199.212.3:1212 -> xxx.yyy.255.126:1433 SYN ******S*
Sep 30 08:25:33 210.199.212.3:1172 -> xxx.yyy.255.86:1433 SYN ******S*
Sep 30 08:25:33 210.199.212.3:1317 -> xxx.yyy.255.231:1433 SYN ******S*
Sep 30 08:25:33 210.199.212.3:1239 -> xxx.yyy.255.153:1433 SYN ******S*
Sep 30 08:25:33 210.199.212.3:1283 -> xxx.yyy.255.197:1433 SYN ******S*
Sep 30 08:25:33 210.199.212.3:1310 -> xxx.yyy.255.224:1433 SYN ******S*
Sep 30 08:25:34 210.199.212.3:1333 -> xxx.yyy.255.247:1433 SYN ******S*
55602
Sep 30 18:43:17 130.227.229.146:2179 -> xxx.yyy.1.1:1433 SYN ******S*
Sep 30 18:43:14 130.227.229.146:2180 -> xxx.yyy.1.2:1433 SYN ******S*
Sep 30 18:43:14 130.227.229.146:2182 -> xxx.yyy.1.4:1433 SYN ******S*
Sep 30 18:43:14 130.227.229.146:2184 -> xxx.yyy.1.6:1433 SYN ******S*
Sep 30 18:43:14 130.227.229.146:2188 -> xxx.yyy.1.10:1433 SYN ******S*
Sep 30 18:43:17 130.227.229.146:2189 -> xxx.yyy.1.11:1433 SYN ******S*
Sep 30 18:43:17 130.227.229.146:2192 -> xxx.yyy.1.14:1433 SYN ******S*
Sep 30 18:43:14 130.227.229.146:2194 -> xxx.yyy.1.16:1433 SYN ******S*
[...]
Sep 30 18:57:27 130.227.229.146:3661 -> xxx.yyy.255.249:1433 SYN ******S*
Sep 30 18:57:27 130.227.229.146:3656 -> xxx.yyy.255.244:1433 SYN ******S*
Sep 30 18:57:27 130.227.229.146:3658 -> xxx.yyy.255.246:1433 SYN ******S*
Sep 30 18:57:27 130.227.229.146:3653 -> xxx.yyy.255.241:1433 SYN ******S*
Sep 30 18:57:27 130.227.229.146:3654 -> xxx.yyy.255.242:1433 SYN ******S*
Sep 30 18:57:27 130.227.229.146:3665 -> xxx.yyy.255.253:1433 SYN ******S*
Sep 30 18:57:27 130.227.229.146:3663 -> xxx.yyy.255.251:1433 SYN ******S*
Sep 30 18:57:27 130.227.229.146:3664 -> xxx.yyy.255.252:1433 SYN ******S*
Sep 30 18:57:27 130.227.229.146:3666 -> xxx.yyy.255.254:1433 SYN ******S*
52714
Sep 30 09:37:58 211.221.242.201:2322 -> xxx.yyy.1.1:3389 SYN ******S*
Sep 30 09:37:57 211.221.242.201:2323 -> xxx.yyy.1.2:3389 SYN ******S*
Sep 30 09:38:00 211.221.242.201:2326 -> xxx.yyy.1.4:3389 SYN ******S*
Sep 30 09:37:57 211.221.242.201:2325 -> xxx.yyy.1.3:3389 SYN ******S*
Sep 30 09:37:57 211.221.242.201:2330 -> xxx.yyy.1.6:3389 SYN ******S*
Sep 30 09:37:57 211.221.242.201:2333 -> xxx.yyy.1.7:3389 SYN ******S*
Sep 30 09:37:57 211.221.242.201:2335 -> xxx.yyy.1.8:3389 SYN ******S*
Sep 30 09:37:57 211.221.242.201:2339 -> xxx.yyy.1.10:3389 SYN ******S*
[...]
Sep 30 09:56:09 211.221.242.201:2864 -> xxx.yyy.255.233:3389 SYN ******S*
Sep 30 09:56:09 211.221.242.201:2866 -> xxx.yyy.255.234:3389 SYN ******S*
Sep 30 09:56:09 211.221.242.201:2894 -> xxx.yyy.255.248:3389 SYN ******S*
Sep 30 09:56:09 211.221.242.201:2890 -> xxx.yyy.255.246:3389 SYN ******S*
Sep 30 09:56:10 211.221.242.201:2909 -> xxx.yyy.255.254:3389 SYN ******S*
Sep 30 09:56:10 211.221.242.201:2901 -> xxx.yyy.255.250:3389 SYN ******S*
Sep 30 09:56:10 211.221.242.201:2903 -> xxx.yyy.255.251:3389 SYN ******S*
Sep 30 09:56:10 211.221.242.201:2905 -> xxx.yyy.255.252:3389 SYN ******S*
Sep 30 09:56:10 211.221.242.201:2899 -> xxx.yyy.255.249:3389 SYN ******S*
45929
Sep 30 06:28:54 62.96.54.238:2047 -> xxx.yyy.1.1:1433 SYN ******S*
Sep 30 06:28:54 62.96.54.238:2048 -> xxx.yyy.1.2:1433 SYN ******S*
Sep 30 06:28:51 62.96.54.238:2050 -> xxx.yyy.1.4:1433 SYN ******S*
Sep 30 06:28:54 62.96.54.238:2049 -> xxx.yyy.1.3:1433 SYN ******S*
Sep 30 06:28:51 62.96.54.238:2052 -> xxx.yyy.1.6:1433 SYN ******S*
Sep 30 06:28:51 62.96.54.238:2053 -> xxx.yyy.1.7:1433 SYN ******S*
Sep 30 06:28:51 62.96.54.238:2051 -> xxx.yyy.1.5:1433 SYN ******S*
Sep 30 06:28:51 62.96.54.238:2054 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Sep 30 06:38:30 62.96.54.238:3568 -> xxx.yyy.255.207:1433 SYN ******S*
Sep 30 06:38:30 62.96.54.238:3585 -> xxx.yyy.255.224:1433 SYN ******S*
Sep 30 06:38:30 62.96.54.238:3571 -> xxx.yyy.255.210:1433 SYN ******S*
Sep 30 06:38:30 62.96.54.238:3592 -> xxx.yyy.255.231:1433 SYN ******S*
Sep 30 06:38:30 62.96.54.238:3584 -> xxx.yyy.255.223:1433 SYN ******S*
Sep 30 06:38:30 62.96.54.238:3603 -> xxx.yyy.255.242:1433 SYN ******S*
Sep 30 06:38:30 62.96.54.238:3611 -> xxx.yyy.255.250:1433 SYN ******S*
Sep 30 06:38:30 62.96.54.238:3612 -> xxx.yyy.255.251:1433 SYN ******S*
41667
Sep 30 11:56:16 64.173.4.100:1737 -> xxx.yyy.1.1:1433 SYN ******S*
Sep 30 11:56:16 64.173.4.100:1740 -> xxx.yyy.1.2:6129 SYN ******S*
Sep 30 11:56:16 64.173.4.100:1742 -> xxx.yyy.1.3:6129 SYN ******S*
Sep 30 11:56:16 64.173.4.100:1743 -> xxx.yyy.1.4:1433 SYN ******S*
Sep 30 11:56:16 64.173.4.100:1744 -> xxx.yyy.1.4:6129 SYN ******S*
Sep 30 11:56:16 64.173.4.100:1747 -> xxx.yyy.1.6:1433 SYN ******S*
Sep 30 11:56:16 64.173.4.100:1751 -> xxx.yyy.1.8:1433 SYN ******S*
Sep 30 11:56:16 64.173.4.100:1753 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
Sep 30 12:06:37 64.173.4.100:2237 -> xxx.yyy.255.248:1433 SYN ******S*
Sep 30 12:06:37 64.173.4.100:2238 -> xxx.yyy.255.248:6129 SYN ******S*
Sep 30 12:06:37 64.173.4.100:2239 -> xxx.yyy.255.249:1433 SYN ******S*
Sep 30 12:06:37 64.173.4.100:2241 -> xxx.yyy.255.250:1433 SYN ******S*
Sep 30 12:06:37 64.173.4.100:2244 -> xxx.yyy.255.251:6129 SYN ******S*
Sep 30 12:06:37 64.173.4.100:2246 -> xxx.yyy.255.252:6129 SYN ******S*
Sep 30 12:06:37 64.173.4.100:2247 -> xxx.yyy.255.253:1433 SYN ******S*
Sep 30 12:06:37 64.173.4.100:2248 -> xxx.yyy.255.253:6129 SYN ******S*
41571
Sep 30 03:49:05 82.75.80.50:3670 -> xxx.yyy.1.20:1433 SYN ******S*
Sep 30 03:49:05 82.75.80.50:3669 -> xxx.yyy.1.19:1433 SYN ******S*
Sep 30 03:49:05 82.75.80.50:3671 -> xxx.yyy.1.21:1433 SYN ******S*
Sep 30 03:49:05 82.75.80.50:3672 -> xxx.yyy.1.22:1433 SYN ******S*
Sep 30 03:49:05 82.75.80.50:3673 -> xxx.yyy.1.23:1433 SYN ******S*
Sep 30 03:49:05 82.75.80.50:3674 -> xxx.yyy.1.24:1433 SYN ******S*
Sep 30 03:49:05 82.75.80.50:3675 -> xxx.yyy.1.25:1433 SYN ******S*
Sep 30 03:49:05 82.75.80.50:3676 -> xxx.yyy.1.26:1433 SYN ******S*
[...]
Sep 30 05:49:23 82.75.80.50:3296 -> xxx.yyy.135.43:1433 SYN ******S*
Sep 30 05:49:23 82.75.80.50:3299 -> xxx.yyy.135.44:1433 SYN ******S*
Sep 30 05:49:23 82.75.80.50:3185 -> xxx.yyy.134.228:1433 SYN ******S*
Sep 30 05:49:23 82.75.80.50:3302 -> xxx.yyy.135.45:1433 SYN ******S*
Sep 30 05:49:23 82.75.80.50:3188 -> xxx.yyy.134.231:1433 SYN ******S*
Sep 30 05:49:23 82.75.80.50:3186 -> xxx.yyy.134.229:1433 SYN ******S*
Sep 30 05:49:23 82.75.80.50:3190 -> xxx.yyy.134.233:1433 SYN ******S*
Sep 30 05:49:23 82.75.80.50:3189 -> xxx.yyy.134.232:1433 SYN ******S*
Sep 30 05:49:24 82.75.80.50:3192 -> xxx.yyy.134.235:1433 SYN ******S*
33588
Sep 30 10:04:39 221.164.208.246:1158 -> xxx.yyy.1.2:4899 SYN ******S*
Sep 30 10:04:39 221.164.208.246:1159 -> xxx.yyy.1.3:4899 SYN ******S*
Sep 30 10:04:39 221.164.208.246:1160 -> xxx.yyy.1.4:4899 SYN ******S*
Sep 30 10:04:39 221.164.208.246:1166 -> xxx.yyy.1.10:4899 SYN ******S*
Sep 30 10:04:39 221.164.208.246:1162 -> xxx.yyy.1.6:4899 SYN ******S*
Sep 30 10:04:39 221.164.208.246:1176 -> xxx.yyy.1.17:4899 SYN ******S*
Sep 30 10:04:39 221.164.208.246:1169 -> xxx.yyy.1.11:4899 SYN ******S*
Sep 30 10:04:40 221.164.208.246:1175 -> xxx.yyy.1.16:4899 SYN ******S*
[...]
Sep 30 10:16:44 221.164.208.246:2496 -> xxx.yyy.254.240:4899 SYN ******S*
Sep 30 10:16:44 221.164.208.246:2807 -> xxx.yyy.255.250:4899 SYN ******S*
Sep 30 10:16:44 221.164.208.246:2811 -> xxx.yyy.255.254:4899 SYN ******S*
Sep 30 10:16:44 221.164.208.246:2495 -> xxx.yyy.254.239:4899 SYN ******S*
Sep 30 10:16:44 221.164.208.246:2498 -> xxx.yyy.254.241:4899 SYN ******S*
Sep 30 10:16:44 221.164.208.246:2505 -> xxx.yyy.254.246:4899 SYN ******S*
Sep 30 10:16:44 221.164.208.246:2508 -> xxx.yyy.254.249:4899 SYN ******S*
Sep 30 10:16:44 221.164.208.246:2510 -> xxx.yyy.254.251:4899 SYN ******S*
Sep 30 10:16:46 221.164.208.246:2752 -> xxx.yyy.255.199:4899 SYN ******S*
27321
Sep 30 09:01:15 61.76.124.130:1860 -> xxx.yyy.1.1:4899 SYN ******S*
Sep 30 09:01:14 61.76.124.130:1867 -> xxx.yyy.1.3:4899 SYN ******S*
Sep 30 09:01:13 61.76.124.130:1873 -> xxx.yyy.1.8:4899 SYN ******S*
Sep 30 09:01:13 61.76.124.130:1875 -> xxx.yyy.1.9:4899 SYN ******S*
Sep 30 09:01:13 61.76.124.130:1869 -> xxx.yyy.1.5:4899 SYN ******S*
Sep 30 09:01:14 61.76.124.130:1877 -> xxx.yyy.1.11:4899 SYN ******S*
Sep 30 09:01:13 61.76.124.130:1870 -> xxx.yyy.1.6:4899 SYN ******S*
Sep 30 09:01:13 61.76.124.130:1878 -> xxx.yyy.1.12:4899 SYN ******S*
[...]
Sep 30 09:05:49 61.76.124.130:1110 -> xxx.yyy.255.233:4899 SYN ******S*
Sep 30 09:05:49 61.76.124.130:1126 -> xxx.yyy.255.246:4899 SYN ******S*
Sep 30 09:05:49 61.76.124.130:1113 -> xxx.yyy.255.236:4899 SYN ******S*
Sep 30 09:05:49 61.76.124.130:1117 -> xxx.yyy.255.239:4899 SYN ******S*
Sep 30 09:05:49 61.76.124.130:1114 -> xxx.yyy.255.237:4899 SYN ******S*
Sep 30 09:05:49 61.76.124.130:1116 -> xxx.yyy.255.238:4899 SYN ******S*
Sep 30 09:05:49 61.76.124.130:1132 -> xxx.yyy.255.251:4899 SYN ******S*
Sep 30 09:05:49 61.76.124.130:1125 -> xxx.yyy.255.245:4899 SYN ******S*
Sep 30 09:05:49 61.76.124.130:1135 -> xxx.yyy.255.253:4899 SYN ******S*
25755
Sep 30 19:42:15 202.2.80.122:1388 -> xxx.yyy.1.0:1433 SYN ******S*
Sep 30 19:42:15 202.2.80.122:1389 -> xxx.yyy.1.1:1433 SYN ******S*
Sep 30 19:42:15 202.2.80.122:1390 -> xxx.yyy.1.2:1433 SYN ******S*
Sep 30 19:42:15 202.2.80.122:1391 -> xxx.yyy.1.3:1433 SYN ******S*
Sep 30 19:42:15 202.2.80.122:1392 -> xxx.yyy.1.4:1433 SYN ******S*
Sep 30 19:42:15 202.2.80.122:1393 -> xxx.yyy.1.5:1433 SYN ******S*
Sep 30 19:42:15 202.2.80.122:1394 -> xxx.yyy.1.6:1433 SYN ******S*
Sep 30 19:42:15 202.2.80.122:1395 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Sep 30 19:44:07 202.2.80.122:1389 -> xxx.yyy.255.231:1433 SYN ******S*
Sep 30 19:44:07 202.2.80.122:1390 -> xxx.yyy.255.232:1433 SYN ******S*
Sep 30 19:44:07 202.2.80.122:1391 -> xxx.yyy.255.233:1433 SYN ******S*
Sep 30 19:44:07 202.2.80.122:1392 -> xxx.yyy.255.234:1433 SYN ******S*
Sep 30 19:44:07 202.2.80.122:1393 -> xxx.yyy.255.235:1433 SYN ******S*
Sep 30 19:44:07 202.2.80.122:1394 -> xxx.yyy.255.236:1433 SYN ******S*
Sep 30 19:44:07 202.2.80.122:1395 -> xxx.yyy.255.237:1433 SYN ******S*
Sep 30 19:44:07 202.2.80.122:1398 -> xxx.yyy.255.240:1433 SYN ******S*
25343
Sep 30 22:50:34 61.79.10.10:61948 -> xxx.yyy.1.12:4899 SYN ******S*
Sep 30 22:50:35 61.79.10.10:61939 -> xxx.yyy.1.3:4899 SYN ******S*
Sep 30 22:50:34 61.79.10.10:61949 -> xxx.yyy.1.13:4899 SYN ******S*
Sep 30 22:50:34 61.79.10.10:61941 -> xxx.yyy.1.5:4899 SYN ******S*
Sep 30 22:50:34 61.79.10.10:61956 -> xxx.yyy.1.20:4899 SYN ******S*
Sep 30 22:50:35 61.79.10.10:61958 -> xxx.yyy.1.22:4899 SYN ******S*
Sep 30 22:50:34 61.79.10.10:61950 -> xxx.yyy.1.14:4899 SYN ******S*
Sep 30 22:50:34 61.79.10.10:61946 -> xxx.yyy.1.10:4899 SYN ******S*
[...]
Sep 30 22:55:06 61.79.10.10:62200 -> xxx.yyy.255.250:4899 SYN ******S*
Sep 30 22:55:06 61.79.10.10:62187 -> xxx.yyy.255.237:4899 SYN ******S*
Sep 30 22:55:06 61.79.10.10:62188 -> xxx.yyy.255.238:4899 SYN ******S*
Sep 30 22:55:06 61.79.10.10:62189 -> xxx.yyy.255.239:4899 SYN ******S*
Sep 30 22:55:06 61.79.10.10:62194 -> xxx.yyy.255.244:4899 SYN ******S*
Sep 30 22:55:06 61.79.10.10:62201 -> xxx.yyy.255.251:4899 SYN ******S*
Sep 30 22:55:06 61.79.10.10:62202 -> xxx.yyy.255.252:4899 SYN ******S*
Sep 30 22:55:06 61.79.10.10:62203 -> xxx.yyy.255.253:4899 SYN ******S*
23011
Sep 30 22:45:38 68.77.94.30:4083 -> xxx.yyy.1.0:1433 SYN ******S*
Sep 30 22:45:35 68.77.94.30:4085 -> xxx.yyy.1.1:1433 SYN ******S*
Sep 30 22:45:35 68.77.94.30:4086 -> xxx.yyy.1.2:1433 SYN ******S*
Sep 30 22:45:38 68.77.94.30:4087 -> xxx.yyy.1.3:1433 SYN ******S*
Sep 30 22:45:38 68.77.94.30:4088 -> xxx.yyy.1.4:1433 SYN ******S*
Sep 30 22:45:38 68.77.94.30:4089 -> xxx.yyy.1.5:1433 SYN ******S*
Sep 30 22:45:35 68.77.94.30:4091 -> xxx.yyy.1.7:1433 SYN ******S*
Sep 30 22:45:38 68.77.94.30:4093 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
Sep 30 23:59:59 68.77.94.30:3275 -> xxx.yyy.83.186:1433 SYN ******S*
Sep 30 23:59:59 68.77.94.30:3425 -> xxx.yyy.83.242:1433 SYN ******S*
Sep 30 23:59:59 68.77.94.30:3432 -> xxx.yyy.83.246:1433 SYN ******S*
Sep 30 23:59:59 68.77.94.30:3436 -> xxx.yyy.83.249:1433 SYN ******S*
Sep 30 23:59:59 68.77.94.30:3437 -> xxx.yyy.83.250:1433 SYN ******S*
Sep 30 23:59:59 68.77.94.30:3279 -> xxx.yyy.83.187:1433 SYN ******S*
Sep 30 23:59:59 68.77.94.30:3283 -> xxx.yyy.83.188:1433 SYN ******S*
Sep 30 23:59:59 68.77.94.30:3288 -> xxx.yyy.83.189:1433 SYN ******S*
14706
[...]
10673
Sep 30 00:01:21 65.54.188.52:18596 -> xxx.yyy.241.255:80 SYN ******S*
Sep 30 00:01:21 65.54.188.52:18899 -> xxx.yyy.241.179:80 SYN ******S*
Sep 30 00:01:25 65.54.188.52:20370 -> xxx.yyy.212.103:80 SYN ******S*
Sep 30 00:01:25 65.54.188.52:20536 -> xxx.yyy.1.13:80 SYN ******S*
Sep 30 00:01:25 65.54.188.52:20368 -> xxx.yyy.234.52:80 SYN ******S*
Sep 30 00:01:25 65.54.188.52:20472 -> xxx.yyy.241.29:80 SYN ******S*
Sep 30 00:01:29 65.54.188.52:21775 -> xxx.yyy.234.52:80 SYN ******S*
Sep 30 00:01:27 65.54.188.52:21343 -> xxx.yyy.212.103:80 SYN ******S*
[...]
Sep 30 23:59:18 65.54.188.52:43930 -> xxx.yyy.241.255:80 SYN ******S*
Sep 30 23:59:18 65.54.188.52:43998 -> xxx.yyy.241.179:80 SYN ******S*
Sep 30 23:59:23 65.54.188.52:45576 -> xxx.yyy.1.13:80 SYN ******S*
Sep 30 23:59:27 65.54.188.52:47022 -> xxx.yyy.234.52:80 SYN ******S*
Sep 30 23:59:26 65.54.188.52:46621 -> xxx.yyy.236.22:80 SYN ******S*
Sep 30 23:59:26 65.54.188.52:46663 -> xxx.yyy.1.13:80 SYN ******S*
Sep 30 23:59:29 65.54.188.52:47619 -> xxx.yyy.1.13:80 SYN ******S*
Sep 30 23:59:28 65.54.188.52:47130 -> xxx.yyy.236.22:80 SYN ******S*
Sep 30 23:59:29 65.54.188.52:47489 -> xxx.yyy.234.52:80 SYN ******S*
10184
Sep 30 23:55:27 203.230.220.155:3895 -> xxx.yyy.174.3:5554 SYN ******S*
Sep 30 23:55:28 203.230.220.155:4393 -> xxx.yyy.174.3:1023 SYN ******S*
Sep 30 23:55:30 203.230.220.155:1398 -> xxx.yyy.174.3:9898 SYN ******S*
Sep 30 23:55:27 203.230.220.155:3899 -> xxx.yyy.174.7:5554 SYN ******S*
Sep 30 23:55:30 203.230.220.155:1401 -> xxx.yyy.174.7:9898 SYN ******S*
Sep 30 23:55:27 203.230.220.155:3907 -> xxx.yyy.174.59:5554 SYN ******S*
Sep 30 23:55:28 203.230.220.155:4405 -> xxx.yyy.174.59:1023 SYN ******S*
Sep 30 23:55:30 203.230.220.155:1410 -> xxx.yyy.174.59:9898 SYN ******S*
[...]
Sep 30 23:56:13 203.230.220.155:2393 -> xxx.yyy.174.41:9898 SYN ******S*
Sep 30 23:56:13 203.230.220.155:2406 -> xxx.yyy.174.43:9898 SYN ******S*
Sep 30 23:56:13 203.230.220.155:2410 -> xxx.yyy.174.48:9898 SYN ******S*
Sep 30 23:56:13 203.230.220.155:2404 -> xxx.yyy.174.42:9898 SYN ******S*
Sep 30 23:56:13 203.230.220.155:2412 -> xxx.yyy.174.49:9898 SYN ******S*
Sep 30 23:56:13 203.230.220.155:2411 -> xxx.yyy.174.35:9898 SYN ******S*
Sep 30 23:56:13 203.230.220.155:2413 -> xxx.yyy.174.44:9898 SYN ******S*
Sep 30 23:56:13 203.230.220.155:2428 -> xxx.yyy.174.50:9898 SYN ******S*
Sep 30 23:56:13 203.230.220.155:2429 -> xxx.yyy.174.55:9898 SYN ******S*
9009
Sep 30 02:48:53 218.239.28.108:1966 -> xxx.yyy.1.4:1433 SYN ******S*
Sep 30 02:48:53 218.239.28.108:1983 -> xxx.yyy.1.0:1433 SYN ******S*
Sep 30 02:48:53 218.239.28.108:1980 -> xxx.yyy.1.3:1433 SYN ******S*
Sep 30 02:48:53 218.239.28.108:1982 -> xxx.yyy.1.1:1433 SYN ******S*
Sep 30 02:48:53 218.239.28.108:1981 -> xxx.yyy.1.2:1433 SYN ******S*
Sep 30 02:48:53 218.239.28.108:2013 -> xxx.yyy.1.5:1433 SYN ******S*
Sep 30 02:48:53 218.239.28.108:2016 -> xxx.yyy.1.6:1433 SYN ******S*
Sep 30 02:48:53 218.239.28.108:2019 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Sep 30 03:18:33 218.239.28.108:3736 -> xxx.yyy.33.249:1433 SYN ******S*
Sep 30 03:18:33 218.239.28.108:3738 -> xxx.yyy.33.250:1433 SYN ******S*
Sep 30 03:18:33 218.239.28.108:3739 -> xxx.yyy.33.251:1433 SYN ******S*
Sep 30 03:18:33 218.239.28.108:3741 -> xxx.yyy.33.253:1433 SYN ******S*
Sep 30 03:18:33 218.239.28.108:3740 -> xxx.yyy.33.252:1433 SYN ******S*
Sep 30 03:18:33 218.239.28.108:3742 -> xxx.yyy.33.254:1433 SYN ******S*
Sep 30 03:18:37 218.239.28.108:3752 -> xxx.yyy.33.255:1433 SYN ******S*
Sep 30 03:18:40 218.239.28.108:3752 -> xxx.yyy.33.255:1433 SYN ******S*
Sep 30 03:18:45 218.239.28.108:3752 -> xxx.yyy.33.255:1433 SYN ******S*
8615
Sep 30 00:56:41 221.127.29.146:2092 -> xxx.yyy.194.124:5554 SYN ******S*
Sep 30 00:56:42 221.127.29.146:3093 -> xxx.yyy.194.124:1023 SYN ******S*
Sep 30 00:56:41 221.127.29.146:2095 -> xxx.yyy.194.125:5554 SYN ******S*
Sep 30 00:56:42 221.127.29.146:3101 -> xxx.yyy.194.125:1023 SYN ******S*
Sep 30 00:56:44 221.127.29.146:1548 -> xxx.yyy.194.125:9898 SYN ******S*
Sep 30 00:56:41 221.127.29.146:2099 -> xxx.yyy.194.126:5554 SYN ******S*
Sep 30 00:56:44 221.127.29.146:1552 -> xxx.yyy.194.126:9898 SYN ******S*
Sep 30 00:56:41 221.127.29.146:2102 -> xxx.yyy.194.127:5554 SYN ******S*
[...]
Sep 30 00:58:11 221.127.29.146:1696 -> xxx.yyy.214.234:9898 SYN ******S*
Sep 30 00:58:11 221.127.29.146:1719 -> xxx.yyy.214.235:9898 SYN ******S*
Sep 30 00:58:11 221.127.29.146:1726 -> xxx.yyy.214.236:9898 SYN ******S*
Sep 30 00:58:11 221.127.29.146:1969 -> xxx.yyy.214.240:9898 SYN ******S*
Sep 30 00:58:11 221.127.29.146:1995 -> xxx.yyy.214.241:9898 SYN ******S*
Sep 30 00:58:11 221.127.29.146:2483 -> xxx.yyy.214.242:9898 SYN ******S*
Sep 30 00:58:12 221.127.29.146:2668 -> xxx.yyy.214.244:9898 SYN ******S*
Sep 30 00:58:12 221.127.29.146:2677 -> xxx.yyy.214.246:9898 SYN ******S*
7569
Sep 30 00:56:42 218.11.10.121:2057 -> xxx.yyy.175.8:5554 SYN ******S*
Sep 30 00:56:45 218.11.10.121:3572 -> xxx.yyy.175.8:9898 SYN ******S*
Sep 30 00:56:42 218.11.10.121:2067 -> xxx.yyy.174.254:5554 SYN ******S*
Sep 30 00:56:42 218.11.10.121:2059 -> xxx.yyy.175.6:5554 SYN ******S*
Sep 30 00:56:43 218.11.10.121:2639 -> xxx.yyy.175.6:1023 SYN ******S*
Sep 30 00:56:42 218.11.10.121:2061 -> xxx.yyy.175.3:5554 SYN ******S*
Sep 30 00:56:42 218.11.10.121:2066 -> xxx.yyy.174.255:5554 SYN ******S*
Sep 30 00:56:42 218.11.10.121:2065 -> xxx.yyy.175.0:5554 SYN ******S*
[...]
Sep 30 00:57:38 218.11.10.121:2185 -> xxx.yyy.195.83:9898 SYN ******S*
Sep 30 00:57:38 218.11.10.121:2186 -> xxx.yyy.195.84:9898 SYN ******S*
Sep 30 00:57:38 218.11.10.121:2219 -> xxx.yyy.195.88:9898 SYN ******S*
Sep 30 00:57:38 218.11.10.121:2221 -> xxx.yyy.195.77:9898 SYN ******S*
Sep 30 00:57:38 218.11.10.121:2234 -> xxx.yyy.195.81:9898 SYN ******S*
Sep 30 00:57:38 218.11.10.121:2236 -> xxx.yyy.195.75:9898 SYN ******S*
Sep 30 00:57:38 218.11.10.121:2253 -> xxx.yyy.195.87:9898 SYN ******S*
Sep 30 00:57:38 218.11.10.121:2252 -> xxx.yyy.195.85:9898 SYN ******S*
Sep 30 00:57:39 218.11.10.121:2391 -> xxx.yyy.175.9:9898 SYN ******S*
7212
Sep 30 00:56:24 61.138.84.153:2125 -> xxx.yyy.235.112:5554 SYN ******S*
Sep 30 00:56:27 61.138.84.153:4068 -> xxx.yyy.235.112:9898 SYN ******S*
Sep 30 00:56:24 61.138.84.153:2126 -> xxx.yyy.235.113:5554 SYN ******S*
Sep 30 00:56:25 61.138.84.153:2721 -> xxx.yyy.235.113:1023 SYN ******S*
Sep 30 00:56:27 61.138.84.153:4069 -> xxx.yyy.235.113:9898 SYN ******S*
Sep 30 00:56:24 61.138.84.153:2128 -> xxx.yyy.235.115:5554 SYN ******S*
Sep 30 00:56:27 61.138.84.153:4134 -> xxx.yyy.235.115:9898 SYN ******S*
Sep 30 00:56:24 61.138.84.153:2140 -> xxx.yyy.235.126:5554 SYN ******S*
[...]
Sep 30 00:57:17 61.138.84.153:1353 -> xxx.yyy.255.230:9898 SYN ******S*
Sep 30 00:57:17 61.138.84.153:1358 -> xxx.yyy.255.190:9898 SYN ******S*
Sep 30 00:57:17 61.138.84.153:1365 -> xxx.yyy.255.233:9898 SYN ******S*
Sep 30 00:57:17 61.138.84.153:1371 -> xxx.yyy.255.234:9898 SYN ******S*
Sep 30 00:57:17 61.138.84.153:1369 -> xxx.yyy.255.212:9898 SYN ******S*
Sep 30 00:57:17 61.138.84.153:1384 -> xxx.yyy.255.221:9898 SYN ******S*
Sep 30 00:57:17 61.138.84.153:1389 -> xxx.yyy.255.225:9898 SYN ******S*
Sep 30 00:57:17 61.138.84.153:1432 -> xxx.yyy.255.224:9898 SYN ******S*
Sep 30 00:57:18 61.138.84.153:1564 -> xxx.yyy.255.232:9898 SYN ******S*
6959
Sep 30 00:56:00 221.200.44.29:4624 -> xxx.yyy.214.247:5554 SYN ******S*
Sep 30 00:56:01 221.200.44.29:1251 -> xxx.yyy.214.247:1023 SYN ******S*
Sep 30 00:56:03 221.200.44.29:2412 -> xxx.yyy.214.247:9898 SYN ******S*
Sep 30 00:56:00 221.200.44.29:4623 -> xxx.yyy.214.246:5554 SYN ******S*
Sep 30 00:56:01 221.200.44.29:1250 -> xxx.yyy.214.246:1023 SYN ******S*
Sep 30 00:56:00 221.200.44.29:4625 -> xxx.yyy.214.248:5554 SYN ******S*
Sep 30 00:56:00 221.200.44.29:4627 -> xxx.yyy.214.250:5554 SYN ******S*
Sep 30 00:56:00 221.200.44.29:4626 -> xxx.yyy.214.249:5554 SYN ******S*
[...]
Sep 30 00:56:42 221.200.44.29:2364 -> xxx.yyy.235.39:9898 SYN ******S*
Sep 30 00:56:42 221.200.44.29:2388 -> xxx.yyy.235.90:9898 SYN ******S*
Sep 30 00:56:42 221.200.44.29:2390 -> xxx.yyy.235.92:9898 SYN ******S*
Sep 30 00:56:42 221.200.44.29:2391 -> xxx.yyy.235.93:9898 SYN ******S*
Sep 30 00:56:42 221.200.44.29:2393 -> xxx.yyy.235.95:9898 SYN ******S*
Sep 30 00:56:42 221.200.44.29:2397 -> xxx.yyy.235.99:9898 SYN ******S*
Sep 30 00:56:42 221.200.44.29:2405 -> xxx.yyy.235.107:9898 SYN ******S*
Sep 30 00:56:42 221.200.44.29:2403 -> xxx.yyy.235.105:9898 SYN ******S*
Sep 30 00:56:42 221.200.44.29:2409 -> xxx.yyy.235.111:9898 SYN ******S*
6780
[...]
6459
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list