[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Thu Oct 21 13:07:54 GMT 2004
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0500.
Oct 20 03:03:02 159.178.65.142:1125 -> xxx.yyy.1.1:4899 SYN ******S*
Oct 20 03:03:02 159.178.65.142:1126 -> xxx.yyy.1.2:4899 SYN ******S*
Oct 20 03:03:02 159.178.65.142:1127 -> xxx.yyy.1.3:4899 SYN ******S*
Oct 20 03:03:04 159.178.65.142:1128 -> xxx.yyy.1.4:4899 SYN ******S*
Oct 20 03:03:04 159.178.65.142:1129 -> xxx.yyy.1.5:4899 SYN ******S*
Oct 20 03:03:04 159.178.65.142:1130 -> xxx.yyy.1.6:4899 SYN ******S*
Oct 20 03:03:04 159.178.65.142:1131 -> xxx.yyy.1.7:4899 SYN ******S*
Oct 20 03:03:04 159.178.65.142:1132 -> xxx.yyy.1.8:4899 SYN ******S*
[...]
Oct 20 03:26:01 159.178.65.142:1463 -> xxx.yyy.255.185:4899 SYN ******S*
Oct 20 03:26:01 159.178.65.142:1532 -> xxx.yyy.255.254:4899 SYN ******S*
Oct 20 03:26:01 159.178.65.142:1531 -> xxx.yyy.255.253:4899 SYN ******S*
Oct 20 03:26:01 159.178.65.142:1530 -> xxx.yyy.255.252:4899 SYN ******S*
Oct 20 03:26:01 159.178.65.142:1528 -> xxx.yyy.255.250:4899 SYN ******S*
Oct 20 03:26:01 159.178.65.142:1529 -> xxx.yyy.255.251:4899 SYN ******S*
Oct 20 03:26:01 159.178.65.142:1527 -> xxx.yyy.255.249:4899 SYN ******S*
Oct 20 03:26:01 159.178.65.142:1526 -> xxx.yyy.255.248:4899 SYN ******S*
89682
Oct 20 07:01:55 212.33.141.157:1396 -> xxx.yyy.1.1:4000 SYN ******S*
Oct 20 07:01:55 212.33.141.157:1397 -> xxx.yyy.1.2:4000 SYN ******S*
Oct 20 07:01:55 212.33.141.157:1398 -> xxx.yyy.1.3:4000 SYN ******S*
Oct 20 07:01:57 212.33.141.157:1399 -> xxx.yyy.1.4:4000 SYN ******S*
Oct 20 07:01:54 212.33.141.157:1400 -> xxx.yyy.1.5:4000 SYN ******S*
Oct 20 07:01:57 212.33.141.157:1401 -> xxx.yyy.1.6:4000 SYN ******S*
Oct 20 07:01:57 212.33.141.157:1402 -> xxx.yyy.1.7:4000 SYN ******S*
Oct 20 07:01:57 212.33.141.157:1403 -> xxx.yyy.1.8:4000 SYN ******S*
[...]
Oct 20 07:23:04 212.33.141.157:1807 -> xxx.yyy.255.238:4000 SYN ******S*
Oct 20 07:23:04 212.33.141.157:1814 -> xxx.yyy.255.245:4000 SYN ******S*
Oct 20 07:23:04 212.33.141.157:1815 -> xxx.yyy.255.246:4000 SYN ******S*
Oct 20 07:23:04 212.33.141.157:1812 -> xxx.yyy.255.243:4000 SYN ******S*
Oct 20 07:23:04 212.33.141.157:1816 -> xxx.yyy.255.247:4000 SYN ******S*
Oct 20 07:23:05 212.33.141.157:1819 -> xxx.yyy.255.250:4000 SYN ******S*
Oct 20 07:23:05 212.33.141.157:1820 -> xxx.yyy.255.251:4000 SYN ******S*
Oct 20 07:23:05 212.33.141.157:1823 -> xxx.yyy.255.254:4000 SYN ******S*
72259
Oct 20 15:46:09 82.225.229.18:4680 -> xxx.yyy.1.0:1433 SYN ******S*
Oct 20 15:46:09 82.225.229.18:4681 -> xxx.yyy.1.1:1433 SYN ******S*
Oct 20 15:46:09 82.225.229.18:4684 -> xxx.yyy.1.2:1433 SYN ******S*
Oct 20 15:46:07 82.225.229.18:4699 -> xxx.yyy.1.11:1433 SYN ******S*
Oct 20 15:46:10 82.225.229.18:4700 -> xxx.yyy.1.12:1433 SYN ******S*
Oct 20 15:46:07 82.225.229.18:4703 -> xxx.yyy.1.14:1433 SYN ******S*
Oct 20 15:46:07 82.225.229.18:4704 -> xxx.yyy.1.15:1433 SYN ******S*
Oct 20 15:46:07 82.225.229.18:4705 -> xxx.yyy.1.16:1433 SYN ******S*
[...]
Oct 20 19:27:59 82.225.229.18:3014 -> xxx.yyy.255.201:1433 SYN ******S*
Oct 20 19:27:59 82.225.229.18:3020 -> xxx.yyy.255.204:1433 SYN ******S*
Oct 20 19:28:00 82.225.229.18:3027 -> xxx.yyy.255.205:1433 SYN ******S*
Oct 20 19:28:00 82.225.229.18:3028 -> xxx.yyy.255.206:1433 SYN ******S*
Oct 20 19:28:00 82.225.229.18:3032 -> xxx.yyy.255.207:1433 SYN ******S*
Oct 20 19:28:00 82.225.229.18:3043 -> xxx.yyy.255.213:1433 SYN ******S*
Oct 20 19:28:01 82.225.229.18:3060 -> xxx.yyy.255.216:1433 SYN ******S*
Oct 20 19:28:01 82.225.229.18:3059 -> xxx.yyy.255.215:1433 SYN ******S*
Oct 20 19:28:02 82.225.229.18:3064 -> xxx.yyy.255.225:1433 SYN ******S*
65974
Oct 20 06:57:22 64.187.61.30:1115 -> xxx.yyy.1.1:1433 SYN ******S*
Oct 20 06:57:22 64.187.61.30:1116 -> xxx.yyy.1.2:1433 SYN ******S*
Oct 20 06:57:22 64.187.61.30:1117 -> xxx.yyy.1.3:1433 SYN ******S*
Oct 20 06:57:22 64.187.61.30:1118 -> xxx.yyy.1.4:1433 SYN ******S*
Oct 20 06:57:19 64.187.61.30:1119 -> xxx.yyy.1.5:1433 SYN ******S*
Oct 20 06:57:22 64.187.61.30:1120 -> xxx.yyy.1.6:1433 SYN ******S*
Oct 20 06:57:19 64.187.61.30:1121 -> xxx.yyy.1.7:1433 SYN ******S*
Oct 20 06:57:19 64.187.61.30:1122 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Oct 20 07:00:42 64.187.61.30:2826 -> xxx.yyy.255.181:1433 SYN ******S*
Oct 20 07:00:42 64.187.61.30:2842 -> xxx.yyy.255.197:1433 SYN ******S*
Oct 20 07:00:42 64.187.61.30:2839 -> xxx.yyy.255.194:1433 SYN ******S*
Oct 20 07:00:42 64.187.61.30:3619 -> xxx.yyy.255.243:1433 SYN ******S*
Oct 20 07:00:42 64.187.61.30:4695 -> xxx.yyy.255.254:1433 SYN ******S*
Oct 20 07:00:42 64.187.61.30:2859 -> xxx.yyy.255.213:1433 SYN ******S*
Oct 20 07:00:42 64.187.61.30:2875 -> xxx.yyy.255.229:1433 SYN ******S*
Oct 20 07:00:42 64.187.61.30:2879 -> xxx.yyy.255.232:1433 SYN ******S*
59166
Oct 20 01:16:11 221.152.153.249:4588 -> xxx.yyy.1.1:1433 SYN ******S*
Oct 20 01:16:14 221.152.153.249:4590 -> xxx.yyy.1.2:1433 SYN ******S*
Oct 20 01:16:14 221.152.153.249:4596 -> xxx.yyy.1.3:1433 SYN ******S*
Oct 20 01:16:14 221.152.153.249:4598 -> xxx.yyy.1.4:1433 SYN ******S*
Oct 20 01:16:11 221.152.153.249:4612 -> xxx.yyy.1.7:1433 SYN ******S*
Oct 20 01:16:14 221.152.153.249:4620 -> xxx.yyy.1.10:1433 SYN ******S*
Oct 20 01:16:14 221.152.153.249:4630 -> xxx.yyy.1.12:1433 SYN ******S*
Oct 20 01:16:14 221.152.153.249:4626 -> xxx.yyy.1.11:1433 SYN ******S*
[...]
Oct 20 01:28:06 221.152.153.249:3582 -> xxx.yyy.255.244:1433 SYN ******S*
Oct 20 01:28:06 221.152.153.249:3570 -> xxx.yyy.255.239:1433 SYN ******S*
Oct 20 01:28:06 221.152.153.249:3594 -> xxx.yyy.255.250:1433 SYN ******S*
Oct 20 01:28:06 221.152.153.249:3590 -> xxx.yyy.255.248:1433 SYN ******S*
Oct 20 01:28:06 221.152.153.249:3600 -> xxx.yyy.255.253:1433 SYN ******S*
Oct 20 01:28:06 221.152.153.249:3596 -> xxx.yyy.255.251:1433 SYN ******S*
Oct 20 01:28:06 221.152.153.249:3592 -> xxx.yyy.255.249:1433 SYN ******S*
Oct 20 01:28:06 221.152.153.249:3602 -> xxx.yyy.255.254:1433 SYN ******S*
Oct 20 01:28:06 221.152.153.249:3598 -> xxx.yyy.255.252:1433 SYN ******S*
57873
Oct 20 19:18:56 203.87.161.102:3010 -> xxx.yyy.153.1:1433 SYN ******S*
Oct 20 19:18:56 203.87.161.102:3011 -> xxx.yyy.153.2:1433 SYN ******S*
Oct 20 19:18:56 203.87.161.102:3012 -> xxx.yyy.153.3:1433 SYN ******S*
Oct 20 19:18:56 203.87.161.102:3013 -> xxx.yyy.153.4:1433 SYN ******S*
Oct 20 19:18:53 203.87.161.102:3014 -> xxx.yyy.153.5:1433 SYN ******S*
Oct 20 19:18:56 203.87.161.102:3016 -> xxx.yyy.153.7:1433 SYN ******S*
Oct 20 19:18:53 203.87.161.102:3018 -> xxx.yyy.153.9:1433 SYN ******S*
Oct 20 19:18:56 203.87.161.102:3020 -> xxx.yyy.153.11:1433 SYN ******S*
[...]
Oct 20 20:51:43 203.87.161.102:4784 -> xxx.yyy.255.244:1433 SYN ******S*
Oct 20 20:51:43 203.87.161.102:4788 -> xxx.yyy.255.248:1433 SYN ******S*
Oct 20 20:51:43 203.87.161.102:4791 -> xxx.yyy.255.251:1433 SYN ******S*
Oct 20 20:51:43 203.87.161.102:4792 -> xxx.yyy.255.252:1433 SYN ******S*
Oct 20 20:51:43 203.87.161.102:4789 -> xxx.yyy.255.249:1433 SYN ******S*
Oct 20 20:51:43 203.87.161.102:4790 -> xxx.yyy.255.250:1433 SYN ******S*
Oct 20 20:51:43 203.87.161.102:4793 -> xxx.yyy.255.253:1433 SYN ******S*
Oct 20 20:51:44 203.87.161.102:4794 -> xxx.yyy.255.254:1433 SYN ******S*
44685
Oct 20 18:34:25 169.226.28.101:1838 -> xxx.yyy.1.1:6129 SYN ******S*
Oct 20 18:34:25 169.226.28.101:1840 -> xxx.yyy.1.3:6129 SYN ******S*
Oct 20 18:34:24 169.226.28.101:1842 -> xxx.yyy.1.5:6129 SYN ******S*
Oct 20 18:34:24 169.226.28.101:1843 -> xxx.yyy.1.6:6129 SYN ******S*
Oct 20 18:34:24 169.226.28.101:1845 -> xxx.yyy.1.8:6129 SYN ******S*
Oct 20 18:34:24 169.226.28.101:1846 -> xxx.yyy.1.9:6129 SYN ******S*
Oct 20 18:34:27 169.226.28.101:1847 -> xxx.yyy.1.10:6129 SYN ******S*
Oct 20 18:34:25 169.226.28.101:1848 -> xxx.yyy.1.11:6129 SYN ******S*
[...]
Oct 20 18:45:19 169.226.28.101:3340 -> xxx.yyy.255.242:6129 SYN ******S*
Oct 20 18:45:19 169.226.28.101:3344 -> xxx.yyy.255.246:6129 SYN ******S*
Oct 20 18:45:19 169.226.28.101:3345 -> xxx.yyy.255.247:6129 SYN ******S*
Oct 20 18:45:19 169.226.28.101:3338 -> xxx.yyy.255.240:6129 SYN ******S*
Oct 20 18:45:19 169.226.28.101:3342 -> xxx.yyy.255.244:6129 SYN ******S*
Oct 20 18:45:19 169.226.28.101:3346 -> xxx.yyy.255.248:6129 SYN ******S*
Oct 20 18:45:19 169.226.28.101:3339 -> xxx.yyy.255.241:6129 SYN ******S*
Oct 20 18:45:19 169.226.28.101:3343 -> xxx.yyy.255.245:6129 SYN ******S*
37694
Oct 20 18:59:21 219.133.212.73:23291 -> xxx.yyy.1.8:1433 SYN ******S*
Oct 20 18:59:21 219.133.212.73:23299 -> xxx.yyy.1.10:1433 SYN ******S*
Oct 20 18:59:24 219.133.212.73:23267 -> xxx.yyy.1.2:1433 SYN ******S*
Oct 20 18:59:21 219.133.212.73:23287 -> xxx.yyy.1.7:1433 SYN ******S*
Oct 20 18:59:21 219.133.212.73:23318 -> xxx.yyy.1.16:1433 SYN ******S*
Oct 20 18:59:24 219.133.212.73:23357 -> xxx.yyy.1.26:1433 SYN ******S*
Oct 20 18:59:21 219.133.212.73:23327 -> xxx.yyy.1.18:1433 SYN ******S*
Oct 20 18:59:21 219.133.212.73:23361 -> xxx.yyy.1.27:1433 SYN ******S*
[...]
Oct 20 22:48:02 219.133.212.73:21938 -> xxx.yyy.255.242:1433 SYN ******S*
Oct 20 22:48:02 219.133.212.73:26119 -> xxx.yyy.255.225:1433 SYN ******S*
Oct 20 22:48:04 219.133.212.73:21462 -> xxx.yyy.255.247:1433 SYN ******S*
Oct 20 22:48:05 219.133.212.73:1117 -> xxx.yyy.255.230:1433 SYN ******S*
Oct 20 22:48:07 219.133.212.73:25611 -> xxx.yyy.255.232:1433 SYN ******S*
Oct 20 22:48:07 219.133.212.73:21912 -> xxx.yyy.255.237:1433 SYN ******S*
Oct 20 22:48:08 219.133.212.73:24015 -> xxx.yyy.255.243:1433 SYN ******S*
Oct 20 22:48:10 219.133.212.73:22261 -> xxx.yyy.255.249:1433 SYN ******S*
Oct 20 22:48:13 219.133.212.73:23282 -> xxx.yyy.255.254:1433 SYN ******S*
37328
Oct 20 17:42:09 217.11.100.43:4479 -> xxx.yyy.1.3:4899 SYN ******S*
Oct 20 17:42:08 217.11.100.43:4481 -> xxx.yyy.1.5:4899 SYN ******S*
Oct 20 17:42:08 217.11.100.43:4480 -> xxx.yyy.1.4:4899 SYN ******S*
Oct 20 17:42:08 217.11.100.43:4482 -> xxx.yyy.1.6:4899 SYN ******S*
Oct 20 17:42:08 217.11.100.43:4483 -> xxx.yyy.1.7:4899 SYN ******S*
Oct 20 17:42:08 217.11.100.43:4484 -> xxx.yyy.1.8:4899 SYN ******S*
Oct 20 17:42:11 217.11.100.43:4486 -> xxx.yyy.1.10:4899 SYN ******S*
Oct 20 17:42:08 217.11.100.43:4488 -> xxx.yyy.1.11:4899 SYN ******S*
[...]
Oct 20 18:04:45 217.11.100.43:4753 -> xxx.yyy.255.238:4899 SYN ******S*
Oct 20 18:04:45 217.11.100.43:4761 -> xxx.yyy.255.244:4899 SYN ******S*
Oct 20 18:04:45 217.11.100.43:4412 -> xxx.yyy.255.204:4899 SYN ******S*
Oct 20 18:04:45 217.11.100.43:4765 -> xxx.yyy.255.248:4899 SYN ******S*
Oct 20 18:04:45 217.11.100.43:4488 -> xxx.yyy.255.214:4899 SYN ******S*
Oct 20 18:04:45 217.11.100.43:4492 -> xxx.yyy.255.217:4899 SYN ******S*
Oct 20 18:04:45 217.11.100.43:4413 -> xxx.yyy.255.205:4899 SYN ******S*
Oct 20 18:04:45 217.11.100.43:4417 -> xxx.yyy.255.208:4899 SYN ******S*
Oct 20 18:04:45 217.11.100.43:4766 -> xxx.yyy.255.249:4899 SYN ******S*
32170
Oct 20 20:01:56 67.68.232.202:2625 -> xxx.yyy.1.0:1433 SYN ******S*
Oct 20 20:01:53 67.68.232.202:4334 -> xxx.yyy.1.1:1433 SYN ******S*
Oct 20 20:01:56 67.68.232.202:3481 -> xxx.yyy.1.2:1433 SYN ******S*
Oct 20 20:01:56 67.68.232.202:4957 -> xxx.yyy.1.3:1433 SYN ******S*
Oct 20 20:01:56 67.68.232.202:3355 -> xxx.yyy.1.4:1433 SYN ******S*
Oct 20 20:01:56 67.68.232.202:3474 -> xxx.yyy.1.6:1433 SYN ******S*
Oct 20 20:01:56 67.68.232.202:3628 -> xxx.yyy.1.7:1433 SYN ******S*
Oct 20 20:01:56 67.68.232.202:3579 -> xxx.yyy.1.5:1433 SYN ******S*
[...]
Oct 20 21:33:22 67.68.232.202:4833 -> xxx.yyy.255.197:1433 SYN ******S*
Oct 20 21:33:23 67.68.232.202:3557 -> xxx.yyy.255.208:1433 SYN ******S*
Oct 20 21:33:23 67.68.232.202:4320 -> xxx.yyy.255.210:1433 SYN ******S*
Oct 20 21:33:23 67.68.232.202:1235 -> xxx.yyy.255.218:1433 SYN ******S*
Oct 20 21:33:23 67.68.232.202:1114 -> xxx.yyy.255.217:1433 SYN ******S*
Oct 20 21:33:23 67.68.232.202:3221 -> xxx.yyy.255.219:1433 SYN ******S*
Oct 20 21:33:23 67.68.232.202:1469 -> xxx.yyy.255.221:1433 SYN ******S*
Oct 20 21:33:24 67.68.232.202:4848 -> xxx.yyy.255.232:1433 SYN ******S*
Oct 20 21:33:25 67.68.232.202:2995 -> xxx.yyy.255.239:1433 SYN ******S*
26577
Oct 20 15:35:39 83.114.116.109:4715 -> xxx.yyy.1.2:139 SYN ******S*
Oct 20 15:35:39 83.114.116.109:4735 -> xxx.yyy.1.7:139 SYN ******S*
Oct 20 15:35:39 83.114.116.109:4738 -> xxx.yyy.1.25:139 SYN ******S*
Oct 20 15:35:39 83.114.116.109:4739 -> xxx.yyy.1.30:139 SYN ******S*
Oct 20 15:35:39 83.114.116.109:4740 -> xxx.yyy.1.8:139 SYN ******S*
Oct 20 15:35:39 83.114.116.109:4741 -> xxx.yyy.1.22:139 SYN ******S*
Oct 20 15:35:39 83.114.116.109:4742 -> xxx.yyy.1.19:139 SYN ******S*
Oct 20 15:35:39 83.114.116.109:4743 -> xxx.yyy.1.23:139 SYN ******S*
[...]
Oct 20 16:09:45 83.114.116.109:3814 -> xxx.yyy.255.228:139 SYN ******S*
Oct 20 16:09:45 83.114.116.109:3816 -> xxx.yyy.255.239:139 SYN ******S*
Oct 20 16:09:45 83.114.116.109:3817 -> xxx.yyy.255.227:139 SYN ******S*
Oct 20 16:09:45 83.114.116.109:3819 -> xxx.yyy.255.251:139 SYN ******S*
Oct 20 16:09:45 83.114.116.109:3820 -> xxx.yyy.255.229:139 SYN ******S*
Oct 20 16:09:45 83.114.116.109:3821 -> xxx.yyy.255.254:139 SYN ******S*
Oct 20 16:09:45 83.114.116.109:3824 -> xxx.yyy.255.232:139 SYN ******S*
Oct 20 16:09:45 83.114.116.109:3829 -> xxx.yyy.255.231:139 SYN ******S*
Oct 20 16:09:45 83.114.116.109:3830 -> xxx.yyy.255.243:139 SYN ******S*
21371
Oct 20 04:43:36 128.173.43.224:4903 -> xxx.yyy.1.1:2277 SYN ******S*
Oct 20 04:43:36 128.173.43.224:4906 -> xxx.yyy.1.2:2277 SYN ******S*
Oct 20 04:43:36 128.173.43.224:4907 -> xxx.yyy.1.3:2277 SYN ******S*
Oct 20 04:43:38 128.173.43.224:4908 -> xxx.yyy.1.4:2277 SYN ******S*
Oct 20 04:43:38 128.173.43.224:4910 -> xxx.yyy.1.5:2277 SYN ******S*
Oct 20 04:43:38 128.173.43.224:4912 -> xxx.yyy.1.6:2277 SYN ******S*
Oct 20 04:43:38 128.173.43.224:4913 -> xxx.yyy.1.7:2277 SYN ******S*
Oct 20 04:43:38 128.173.43.224:4915 -> xxx.yyy.1.8:2277 SYN ******S*
[...]
Oct 20 04:46:14 128.173.43.224:4049 -> xxx.yyy.106.40:2277 SYN ******S*
Oct 20 04:46:14 128.173.43.224:4061 -> xxx.yyy.106.46:2277 SYN ******S*
Oct 20 04:46:14 128.173.43.224:4043 -> xxx.yyy.106.38:2277 SYN ******S*
Oct 20 04:46:14 128.173.43.224:4120 -> xxx.yyy.106.74:2277 SYN ******S*
Oct 20 04:46:14 128.173.43.224:4121 -> xxx.yyy.106.75:2277 SYN ******S*
Oct 20 04:46:14 128.173.43.224:4158 -> xxx.yyy.106.94:2277 SYN ******S*
Oct 20 04:46:14 128.173.43.224:4224 -> xxx.yyy.106.122:2277 SYN ******S*
Oct 20 04:46:14 128.173.43.224:4290 -> xxx.yyy.106.156:2277 SYN ******S*
19483
Oct 20 11:27:49 64.237.66.110:2596 -> xxx.yyy.1.0:8002 SYN ******S*
Oct 20 11:27:49 64.237.66.110:2598 -> xxx.yyy.1.2:8002 SYN ******S*
Oct 20 11:27:49 64.237.66.110:2601 -> xxx.yyy.1.5:8002 SYN ******S*
Oct 20 11:27:49 64.237.66.110:2599 -> xxx.yyy.1.3:8002 SYN ******S*
Oct 20 11:27:49 64.237.66.110:2600 -> xxx.yyy.1.4:8002 SYN ******S*
Oct 20 11:27:49 64.237.66.110:2602 -> xxx.yyy.1.6:8002 SYN ******S*
Oct 20 11:27:49 64.237.66.110:2603 -> xxx.yyy.1.7:8002 SYN ******S*
Oct 20 11:27:49 64.237.66.110:2617 -> xxx.yyy.1.21:8002 SYN ******S*
[...]
Oct 20 11:28:36 64.237.66.110:2594 -> xxx.yyy.253.188:8002 SYN ******S*
Oct 20 11:28:36 64.237.66.110:2604 -> xxx.yyy.253.198:8002 SYN ******S*
Oct 20 11:28:36 64.237.66.110:2607 -> xxx.yyy.253.201:8002 SYN ******S*
Oct 20 11:28:36 64.237.66.110:2608 -> xxx.yyy.253.202:8002 SYN ******S*
Oct 20 11:28:36 64.237.66.110:2609 -> xxx.yyy.253.203:8002 SYN ******S*
Oct 20 11:28:36 64.237.66.110:2610 -> xxx.yyy.253.204:8002 SYN ******S*
Oct 20 11:28:37 64.237.66.110:2614 -> xxx.yyy.253.208:8002 SYN ******S*
Oct 20 11:28:37 64.237.66.110:2615 -> xxx.yyy.253.209:8002 SYN ******S*
Oct 20 11:28:37 64.237.66.110:2623 -> xxx.yyy.253.217:8002 SYN ******S*
16452
Oct 20 10:53:23 144.164.141.113:4244 -> xxx.yyy.1.0:1433 SYN ******S*
Oct 20 10:53:23 144.164.141.113:4247 -> xxx.yyy.1.1:1433 SYN ******S*
Oct 20 10:53:26 144.164.141.113:4250 -> xxx.yyy.1.4:1433 SYN ******S*
Oct 20 10:53:27 144.164.141.113:4252 -> xxx.yyy.1.6:1433 SYN ******S*
Oct 20 10:53:24 144.164.141.113:4254 -> xxx.yyy.1.7:1433 SYN ******S*
Oct 20 10:53:24 144.164.141.113:4255 -> xxx.yyy.1.8:1433 SYN ******S*
Oct 20 10:53:24 144.164.141.113:4260 -> xxx.yyy.1.9:1433 SYN ******S*
Oct 20 10:53:24 144.164.141.113:4261 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
Oct 20 12:11:35 144.164.141.113:3464 -> xxx.yyy.87.145:1433 SYN ******S*
Oct 20 12:11:35 144.164.141.113:3482 -> xxx.yyy.87.148:1433 SYN ******S*
Oct 20 12:11:35 144.164.141.113:3478 -> xxx.yyy.87.147:1433 SYN ******S*
Oct 20 12:11:35 144.164.141.113:3614 -> xxx.yyy.87.167:1433 SYN ******S*
Oct 20 12:11:35 144.164.141.113:3615 -> xxx.yyy.87.168:1433 SYN ******S*
Oct 20 12:11:35 144.164.141.113:3616 -> xxx.yyy.87.169:1433 SYN ******S*
Oct 20 12:11:35 144.164.141.113:3617 -> xxx.yyy.87.170:1433 SYN ******S*
Oct 20 12:11:36 144.164.141.113:3619 -> xxx.yyy.87.171:1433 SYN ******S*
13695
[...]
12691
[...]
12294
[...]
11643
Oct 20 00:56:16 61.49.191.247:2655 -> xxx.yyy.174.229:5554 SYN ******S*
Oct 20 00:56:17 61.49.191.247:2855 -> xxx.yyy.174.229:1023 SYN ******S*
Oct 20 00:56:16 61.49.191.247:2678 -> xxx.yyy.174.245:5554 SYN ******S*
Oct 20 00:56:19 61.49.191.247:3415 -> xxx.yyy.174.245:9898 SYN ******S*
Oct 20 00:56:16 61.49.191.247:2679 -> xxx.yyy.174.246:5554 SYN ******S*
Oct 20 00:56:19 61.49.191.247:3417 -> xxx.yyy.174.246:9898 SYN ******S*
Oct 20 00:56:16 61.49.191.247:2668 -> xxx.yyy.174.236:5554 SYN ******S*
Oct 20 00:56:19 61.49.191.247:3401 -> xxx.yyy.174.236:9898 SYN ******S*
[...]
Oct 20 00:58:25 61.49.191.247:4295 -> xxx.yyy.195.66:9898 SYN ******S*
Oct 20 00:58:25 61.49.191.247:4301 -> xxx.yyy.195.71:9898 SYN ******S*
Oct 20 00:58:25 61.49.191.247:4305 -> xxx.yyy.195.76:9898 SYN ******S*
Oct 20 00:58:25 61.49.191.247:4302 -> xxx.yyy.195.72:9898 SYN ******S*
Oct 20 00:58:25 61.49.191.247:4304 -> xxx.yyy.195.73:9898 SYN ******S*
Oct 20 00:58:25 61.49.191.247:4308 -> xxx.yyy.195.78:9898 SYN ******S*
Oct 20 00:58:25 61.49.191.247:4309 -> xxx.yyy.195.79:9898 SYN ******S*
Oct 20 00:58:25 61.49.191.247:4349 -> xxx.yyy.195.81:9898 SYN ******S*
Oct 20 00:58:25 61.49.191.247:4454 -> xxx.yyy.195.82:9898 SYN ******S*
9590
Oct 20 22:56:23 141.150.38.199:1630 -> xxx.yyy.1.0:1433 SYN ******S*
Oct 20 22:56:20 141.150.38.199:1634 -> xxx.yyy.1.2:1433 SYN ******S*
Oct 20 22:56:23 141.150.38.199:1635 -> xxx.yyy.1.3:1433 SYN ******S*
Oct 20 22:56:23 141.150.38.199:1636 -> xxx.yyy.1.4:1433 SYN ******S*
Oct 20 22:56:20 141.150.38.199:1639 -> xxx.yyy.1.6:1433 SYN ******S*
Oct 20 22:56:23 141.150.38.199:1642 -> xxx.yyy.1.7:1433 SYN ******S*
Oct 20 22:56:20 141.150.38.199:1645 -> xxx.yyy.1.9:1433 SYN ******S*
Oct 20 22:56:23 141.150.38.199:1647 -> xxx.yyy.1.11:1433 SYN ******S*
[...]
Oct 20 23:59:59 141.150.38.199:4220 -> xxx.yyy.71.224:1433 SYN ******S*
Oct 20 23:59:59 141.150.38.199:4221 -> xxx.yyy.71.225:1433 SYN ******S*
Oct 20 23:59:59 141.150.38.199:4002 -> xxx.yyy.71.173:1433 SYN ******S*
Oct 20 23:59:59 141.150.38.199:4010 -> xxx.yyy.71.174:1433 SYN ******S*
Oct 20 23:59:59 141.150.38.199:4223 -> xxx.yyy.71.227:1433 SYN ******S*
Oct 20 23:59:59 141.150.38.199:4224 -> xxx.yyy.71.228:1433 SYN ******S*
Oct 21 00:00:00 141.150.38.199:4226 -> xxx.yyy.71.229:1433 SYN ******S*
Oct 21 00:00:00 141.150.38.199:4064 -> xxx.yyy.71.180:1433 SYN ******S*
Oct 21 00:00:01 141.150.38.199:4103 -> xxx.yyy.71.187:1433 SYN ******S*
8609
Oct 20 00:01:11 65.54.188.52:31536 -> xxx.yyy.241.20:80 SYN ******S*
Oct 20 00:01:12 65.54.188.52:31852 -> xxx.yyy.241.31:80 SYN ******S*
Oct 20 00:01:13 65.54.188.52:31968 -> xxx.yyy.212.75:80 SYN ******S*
Oct 20 00:01:13 65.54.188.52:32037 -> xxx.yyy.241.255:80 SYN ******S*
Oct 20 00:01:14 65.54.188.52:32282 -> xxx.yyy.241.179:80 SYN ******S*
Oct 20 00:01:15 65.54.188.52:32399 -> xxx.yyy.241.29:80 SYN ******S*
Oct 20 00:01:18 65.54.188.52:33161 -> xxx.yyy.243.44:80 SYN ******S*
Oct 20 00:01:19 65.54.188.52:33579 -> xxx.yyy.236.22:80 SYN ******S*
[...]
Oct 20 13:48:32 65.54.188.52:61306 -> xxx.yyy.236.22:80 SYN ******S*
Oct 20 13:48:33 65.54.188.52:61315 -> xxx.yyy.226.1:80 SYN ******S*
Oct 20 13:48:32 65.54.188.52:61316 -> xxx.yyy.208.6:80 SYN ******S*
Oct 20 13:50:00 65.54.188.52:7198 -> xxx.yyy.1.13:80 SYN ******S*
Oct 20 13:49:58 65.54.188.52:6667 -> xxx.yyy.243.44:80 SYN ******S*
Oct 20 13:49:59 65.54.188.52:6707 -> xxx.yyy.248.4:80 SYN ******S*
Oct 20 13:49:59 65.54.188.52:6710 -> xxx.yyy.212.103:80 SYN ******S*
Oct 20 13:49:59 65.54.188.52:6788 -> xxx.yyy.241.20:80 SYN ******S*
Oct 20 13:49:59 65.54.188.52:7058 -> xxx.yyy.234.52:80 SYN ******S*
8589
Oct 20 06:32:11 222.132.225.178:2363 -> xxx.yyy.1.144:1433 SYN ******S*
Oct 20 06:32:11 222.132.225.178:2367 -> xxx.yyy.1.145:1433 SYN ******S*
Oct 20 06:32:11 222.132.225.178:2369 -> xxx.yyy.1.146:1433 SYN ******S*
Oct 20 06:32:11 222.132.225.178:2371 -> xxx.yyy.1.147:1433 SYN ******S*
Oct 20 06:32:11 222.132.225.178:2375 -> xxx.yyy.1.148:1433 SYN ******S*
Oct 20 06:32:11 222.132.225.178:2377 -> xxx.yyy.1.149:1433 SYN ******S*
Oct 20 06:32:11 222.132.225.178:2379 -> xxx.yyy.1.150:1433 SYN ******S*
Oct 20 06:32:11 222.132.225.178:2383 -> xxx.yyy.1.151:1433 SYN ******S*
[...]
Oct 20 07:01:09 222.132.225.178:2996 -> xxx.yyy.33.247:1433 SYN ******S*
Oct 20 07:01:09 222.132.225.178:2994 -> xxx.yyy.33.246:1433 SYN ******S*
Oct 20 07:01:09 222.132.225.178:3010 -> xxx.yyy.33.250:1433 SYN ******S*
Oct 20 07:01:09 222.132.225.178:3014 -> xxx.yyy.33.251:1433 SYN ******S*
Oct 20 07:01:09 222.132.225.178:3016 -> xxx.yyy.33.252:1433 SYN ******S*
Oct 20 07:01:09 222.132.225.178:3021 -> xxx.yyy.33.253:1433 SYN ******S*
Oct 20 07:01:09 222.132.225.178:3030 -> xxx.yyy.33.255:1433 SYN ******S*
Oct 20 07:01:09 222.132.225.178:3027 -> xxx.yyy.33.254:1433 SYN ******S*
8326
Oct 20 23:58:22 60.35.181.156:3170 -> xxx.yyy.133.20:5554 SYN ******S*
Oct 20 23:58:25 60.35.181.156:1311 -> xxx.yyy.133.20:9898 SYN ******S*
Oct 20 23:58:22 60.35.181.156:3169 -> xxx.yyy.133.19:5554 SYN ******S*
Oct 20 23:58:25 60.35.181.156:1306 -> xxx.yyy.133.19:9898 SYN ******S*
Oct 20 23:58:22 60.35.181.156:3171 -> xxx.yyy.133.21:5554 SYN ******S*
Oct 20 23:58:23 60.35.181.156:3712 -> xxx.yyy.133.21:1023 SYN ******S*
Oct 20 23:58:22 60.35.181.156:3174 -> xxx.yyy.133.32:5554 SYN ******S*
Oct 20 23:58:23 60.35.181.156:3715 -> xxx.yyy.133.32:1023 SYN ******S*
[...]
Oct 20 23:59:04 60.35.181.156:2421 -> xxx.yyy.153.112:9898 SYN ******S*
Oct 20 23:59:04 60.35.181.156:2443 -> xxx.yyy.153.99:9898 SYN ******S*
Oct 20 23:59:04 60.35.181.156:2444 -> xxx.yyy.153.120:9898 SYN ******S*
Oct 20 23:59:04 60.35.181.156:2446 -> xxx.yyy.153.118:9898 SYN ******S*
Oct 20 23:59:04 60.35.181.156:2458 -> xxx.yyy.153.125:9898 SYN ******S*
Oct 20 23:59:04 60.35.181.156:2474 -> xxx.yyy.153.126:9898 SYN ******S*
Oct 20 23:59:04 60.35.181.156:2440 -> xxx.yyy.153.116:9898 SYN ******S*
Oct 20 23:59:04 60.35.181.156:2475 -> xxx.yyy.153.119:9898 SYN ******S*
Oct 20 23:59:04 60.35.181.156:2543 -> xxx.yyy.153.128:9898 SYN ******S*
7207
Oct 20 00:55:23 61.53.38.71:3091 -> xxx.yyy.174.5:1023 SYN ******S*
Oct 20 00:55:25 61.53.38.71:3649 -> xxx.yyy.174.5:9898 SYN ******S*
Oct 20 00:55:23 61.53.38.71:3093 -> xxx.yyy.174.10:1023 SYN ******S*
Oct 20 00:55:25 61.53.38.71:3651 -> xxx.yyy.174.10:9898 SYN ******S*
Oct 20 00:55:23 61.53.38.71:3096 -> xxx.yyy.174.20:1023 SYN ******S*
Oct 20 00:55:23 61.53.38.71:3097 -> xxx.yyy.174.21:1023 SYN ******S*
Oct 20 00:55:25 61.53.38.71:3655 -> xxx.yyy.174.21:9898 SYN ******S*
Oct 20 00:55:23 61.53.38.71:3095 -> xxx.yyy.174.19:1023 SYN ******S*
[...]
Oct 20 00:56:39 61.53.38.71:2235 -> xxx.yyy.174.215:9898 SYN ******S*
Oct 20 00:56:39 61.53.38.71:2234 -> xxx.yyy.174.214:9898 SYN ******S*
Oct 20 00:56:39 61.53.38.71:2237 -> xxx.yyy.174.216:9898 SYN ******S*
Oct 20 00:56:39 61.53.38.71:2238 -> xxx.yyy.174.217:9898 SYN ******S*
Oct 20 00:56:39 61.53.38.71:2251 -> xxx.yyy.174.222:9898 SYN ******S*
Oct 20 00:56:39 61.53.38.71:2252 -> xxx.yyy.174.223:9898 SYN ******S*
Oct 20 00:56:39 61.53.38.71:2253 -> xxx.yyy.174.224:9898 SYN ******S*
Oct 20 00:56:39 61.53.38.71:2265 -> xxx.yyy.174.226:9898 SYN ******S*
Oct 20 00:56:39 61.53.38.71:2267 -> xxx.yyy.174.220:9898 SYN ******S*
6267
Oct 20 17:06:06 141.150.138.196:3341 -> xxx.yyy.1.0:1433 SYN ******S*
Oct 20 17:06:03 141.150.138.196:4141 -> xxx.yyy.1.2:1433 SYN ******S*
Oct 20 17:06:03 141.150.138.196:4929 -> xxx.yyy.1.9:1433 SYN ******S*
Oct 20 17:06:03 141.150.138.196:4520 -> xxx.yyy.1.18:1433 SYN ******S*
Oct 20 17:06:04 141.150.138.196:3567 -> xxx.yyy.1.25:1433 SYN ******S*
Oct 20 17:06:04 141.150.138.196:3804 -> xxx.yyy.1.28:1433 SYN ******S*
Oct 20 17:06:04 141.150.138.196:3909 -> xxx.yyy.1.29:1433 SYN ******S*
Oct 20 17:06:07 141.150.138.196:3007 -> xxx.yyy.1.30:1433 SYN ******S*
[...]
Oct 20 18:07:46 141.150.138.196:4985 -> xxx.yyy.255.224:1433 SYN ******S*
Oct 20 18:07:47 141.150.138.196:4334 -> xxx.yyy.255.241:1433 SYN ******S*
Oct 20 18:07:47 141.150.138.196:3358 -> xxx.yyy.255.245:1433 SYN ******S*
Oct 20 18:07:47 141.150.138.196:4359 -> xxx.yyy.255.246:1433 SYN ******S*
Oct 20 18:07:50 141.150.138.196:4313 -> xxx.yyy.255.195:1433 SYN ******S*
Oct 20 18:07:52 141.150.138.196:4985 -> xxx.yyy.255.224:1433 SYN ******S*
Oct 20 18:07:52 141.150.138.196:3264 -> xxx.yyy.255.227:1433 SYN ******S*
Oct 20 18:07:53 141.150.138.196:4334 -> xxx.yyy.255.241:1433 SYN ******S*
Oct 20 18:07:53 141.150.138.196:4359 -> xxx.yyy.255.246:1433 SYN ******S*
6162
Oct 20 07:00:02 217.217.171.17:1739 -> xxx.yyy.92.246:5554 SYN ******S*
Oct 20 07:00:03 217.217.171.17:2861 -> xxx.yyy.92.246:1023 SYN ******S*
Oct 20 07:00:02 217.217.171.17:1740 -> xxx.yyy.92.247:5554 SYN ******S*
Oct 20 07:00:03 217.217.171.17:2862 -> xxx.yyy.92.247:1023 SYN ******S*
Oct 20 07:00:05 217.217.171.17:3265 -> xxx.yyy.92.247:9898 SYN ******S*
Oct 20 07:00:02 217.217.171.17:1750 -> xxx.yyy.92.255:5554 SYN ******S*
Oct 20 07:00:03 217.217.171.17:2870 -> xxx.yyy.92.255:1023 SYN ******S*
Oct 20 07:00:05 217.217.171.17:3274 -> xxx.yyy.92.255:9898 SYN ******S*
[...]
Oct 20 07:13:49 217.217.171.17:2164 -> xxx.yyy.94.175:9898 SYN ******S*
Oct 20 07:13:47 217.217.171.17:2129 -> xxx.yyy.94.176:1023 SYN ******S*
Oct 20 07:13:49 217.217.171.17:2166 -> xxx.yyy.94.176:9898 SYN ******S*
Oct 20 07:13:47 217.217.171.17:2132 -> xxx.yyy.94.179:1023 SYN ******S*
Oct 20 07:13:49 217.217.171.17:2170 -> xxx.yyy.94.179:9898 SYN ******S*
Oct 20 07:13:47 217.217.171.17:2130 -> xxx.yyy.94.177:1023 SYN ******S*
Oct 20 07:13:49 217.217.171.17:2167 -> xxx.yyy.94.177:9898 SYN ******S*
Oct 20 07:13:47 217.217.171.17:2131 -> xxx.yyy.94.178:1023 SYN ******S*
Oct 20 07:13:49 217.217.171.17:2169 -> xxx.yyy.94.178:9898 SYN ******S*
5838
Oct 20 23:55:57 220.120.28.176:3512 -> xxx.yyy.215.27:5554 SYN ******S*
Oct 20 23:55:57 220.120.28.176:3513 -> xxx.yyy.215.26:5554 SYN ******S*
Oct 20 23:55:57 220.120.28.176:3516 -> xxx.yyy.215.23:5554 SYN ******S*
Oct 20 23:55:57 220.120.28.176:3519 -> xxx.yyy.215.20:5554 SYN ******S*
Oct 20 23:55:57 220.120.28.176:3521 -> xxx.yyy.215.18:5554 SYN ******S*
Oct 20 23:55:57 220.120.28.176:3518 -> xxx.yyy.215.21:5554 SYN ******S*
Oct 20 23:55:57 220.120.28.176:3520 -> xxx.yyy.215.19:5554 SYN ******S*
Oct 20 23:55:57 220.120.28.176:3530 -> xxx.yyy.215.9:5554 SYN ******S*
[...]
Oct 20 23:56:46 220.120.28.176:4389 -> xxx.yyy.235.81:9898 SYN ******S*
Oct 20 23:56:46 220.120.28.176:4413 -> xxx.yyy.235.83:9898 SYN ******S*
Oct 20 23:56:46 220.120.28.176:4478 -> xxx.yyy.235.87:9898 SYN ******S*
Oct 20 23:56:46 220.120.28.176:4483 -> xxx.yyy.235.93:9898 SYN ******S*
Oct 20 23:56:46 220.120.28.176:4469 -> xxx.yyy.235.101:9898 SYN ******S*
Oct 20 23:56:46 220.120.28.176:4498 -> xxx.yyy.235.111:9898 SYN ******S*
Oct 20 23:56:46 220.120.28.176:4493 -> xxx.yyy.235.108:9898 SYN ******S*
Oct 20 23:56:46 220.120.28.176:4495 -> xxx.yyy.235.109:9898 SYN ******S*
5833
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list