[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Wed Oct 27 16:14:59 GMT 2004
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0500.
Oct 26 00:14:45 208.217.175.254:34378 -> xxx.yyy.1.1:1433 SYN ******S*
Oct 26 00:14:45 208.217.175.254:34379 -> xxx.yyy.1.2:1433 SYN ******S*
Oct 26 00:14:46 208.217.175.254:34380 -> xxx.yyy.1.3:1433 SYN ******S*
Oct 26 00:14:45 208.217.175.254:34383 -> xxx.yyy.1.5:1433 SYN ******S*
Oct 26 00:14:46 208.217.175.254:34386 -> xxx.yyy.1.7:1433 SYN ******S*
Oct 26 00:14:43 208.217.175.254:34387 -> xxx.yyy.1.8:1433 SYN ******S*
Oct 26 00:14:46 208.217.175.254:34394 -> xxx.yyy.1.11:1433 SYN ******S*
Oct 26 00:14:46 208.217.175.254:34396 -> xxx.yyy.1.12:1433 SYN ******S*
[...]
Oct 26 04:03:44 208.217.175.254:52740 -> xxx.yyy.255.244:1433 SYN ******S*
Oct 26 04:03:44 208.217.175.254:52737 -> xxx.yyy.255.241:1433 SYN ******S*
Oct 26 04:03:44 208.217.175.254:52748 -> xxx.yyy.255.251:1433 SYN ******S*
Oct 26 04:03:44 208.217.175.254:52752 -> xxx.yyy.255.254:1433 SYN ******S*
Oct 26 04:03:44 208.217.175.254:52749 -> xxx.yyy.255.252:1433 SYN ******S*
Oct 26 04:03:44 208.217.175.254:52746 -> xxx.yyy.255.249:1433 SYN ******S*
Oct 26 04:03:44 208.217.175.254:52747 -> xxx.yyy.255.250:1433 SYN ******S*
Oct 26 04:03:44 208.217.175.254:52751 -> xxx.yyy.255.253:1433 SYN ******S*
105053
Oct 26 04:16:42 216.240.150.254:1619 -> xxx.yyy.1.1:443 SYN ******S*
Oct 26 04:16:42 216.240.150.254:1620 -> xxx.yyy.1.2:443 SYN ******S*
Oct 26 04:16:44 216.240.150.254:1624 -> xxx.yyy.1.6:443 SYN ******S*
Oct 26 04:16:44 216.240.150.254:1625 -> xxx.yyy.1.7:443 SYN ******S*
Oct 26 04:16:44 216.240.150.254:1627 -> xxx.yyy.1.9:443 SYN ******S*
Oct 26 04:16:42 216.240.150.254:1629 -> xxx.yyy.1.11:443 SYN ******S*
Oct 26 04:16:44 216.240.150.254:1630 -> xxx.yyy.1.12:443 SYN ******S*
Oct 26 04:16:41 216.240.150.254:1631 -> xxx.yyy.1.13:443 SYN ******S*
[...]
Oct 26 04:29:13 216.240.150.254:4072 -> xxx.yyy.255.247:443 SYN ******S*
Oct 26 04:29:13 216.240.150.254:4073 -> xxx.yyy.255.248:443 SYN ******S*
Oct 26 04:29:13 216.240.150.254:4074 -> xxx.yyy.255.249:443 SYN ******S*
Oct 26 04:29:13 216.240.150.254:4075 -> xxx.yyy.255.250:443 SYN ******S*
Oct 26 04:29:13 216.240.150.254:4071 -> xxx.yyy.255.246:443 SYN ******S*
Oct 26 04:29:13 216.240.150.254:4076 -> xxx.yyy.255.251:443 SYN ******S*
Oct 26 04:29:13 216.240.150.254:4077 -> xxx.yyy.255.252:443 SYN ******S*
Oct 26 04:29:13 216.240.150.254:4079 -> xxx.yyy.255.254:443 SYN ******S*
67505
Oct 26 08:17:45 12.107.104.58:35669 -> xxx.yyy.1.1:1433 SYN ******S*
Oct 26 08:17:45 12.107.104.58:35670 -> xxx.yyy.1.2:1433 SYN ******S*
Oct 26 08:17:42 12.107.104.58:35671 -> xxx.yyy.1.3:1433 SYN ******S*
Oct 26 08:17:45 12.107.104.58:35672 -> xxx.yyy.1.4:1433 SYN ******S*
Oct 26 08:17:42 12.107.104.58:35673 -> xxx.yyy.1.5:1433 SYN ******S*
Oct 26 08:17:42 12.107.104.58:35674 -> xxx.yyy.1.6:1433 SYN ******S*
Oct 26 08:17:45 12.107.104.58:35675 -> xxx.yyy.1.7:1433 SYN ******S*
Oct 26 08:17:45 12.107.104.58:35676 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Oct 26 09:11:05 12.107.104.58:53011 -> xxx.yyy.zzz.219:1433 SYN ******S*
Oct 26 09:11:05 12.107.104.58:52976 -> xxx.yyy.zzz.184:1433 SYN ******S*
Oct 26 09:11:05 12.107.104.58:52944 -> xxx.yyy.zzz.152:1433 SYN ******S*
Oct 26 09:11:05 12.107.104.58:53024 -> xxx.yyy.zzz.232:1433 SYN ******S*
Oct 26 09:11:05 12.107.104.58:53040 -> xxx.yyy.zzz.248:1433 SYN ******S*
Oct 26 09:11:05 12.107.104.58:53008 -> xxx.yyy.zzz.216:1433 SYN ******S*
Oct 26 09:11:05 12.107.104.58:52954 -> xxx.yyy.zzz.162:1433 SYN ******S*
Oct 26 09:11:05 12.107.104.58:53018 -> xxx.yyy.zzz.226:1433 SYN ******S*
Oct 26 09:11:05 12.107.104.58:53015 -> xxx.yyy.zzz.223:1433 SYN ******S*
64509
Oct 26 05:13:18 203.124.142.228:4293 -> xxx.yyy.1.1:8000 SYN ******S*
Oct 26 05:13:18 203.124.142.228:4294 -> xxx.yyy.1.2:8000 SYN ******S*
Oct 26 05:13:18 203.124.142.228:4295 -> xxx.yyy.1.3:8000 SYN ******S*
Oct 26 05:13:19 203.124.142.228:4296 -> xxx.yyy.1.4:8000 SYN ******S*
Oct 26 05:13:19 203.124.142.228:4297 -> xxx.yyy.1.5:8000 SYN ******S*
Oct 26 05:13:19 203.124.142.228:4298 -> xxx.yyy.1.6:8000 SYN ******S*
Oct 26 05:13:19 203.124.142.228:4299 -> xxx.yyy.1.7:8000 SYN ******S*
Oct 26 05:13:19 203.124.142.228:4302 -> xxx.yyy.1.10:8000 SYN ******S*
[...]
Oct 26 05:30:45 203.124.142.228:2444 -> xxx.yyy.255.210:8000 SYN ******S*
Oct 26 05:30:45 203.124.142.228:2412 -> xxx.yyy.255.178:8000 SYN ******S*
Oct 26 05:30:45 203.124.142.228:2457 -> xxx.yyy.255.223:8000 SYN ******S*
Oct 26 05:30:45 203.124.142.228:2329 -> xxx.yyy.255.159:8000 SYN ******S*
Oct 26 05:30:45 203.124.142.228:2425 -> xxx.yyy.255.191:8000 SYN ******S*
Oct 26 05:30:46 203.124.142.228:2468 -> xxx.yyy.255.234:8000 SYN ******S*
Oct 26 05:30:46 203.124.142.228:2465 -> xxx.yyy.255.231:8000 SYN ******S*
Oct 26 05:30:46 203.124.142.228:2466 -> xxx.yyy.255.232:8000 SYN ******S*
Oct 26 05:30:46 203.124.142.228:2467 -> xxx.yyy.255.233:8000 SYN ******S*
60718
Oct 26 02:16:21 193.163.220.58:55781 -> xxx.yyy.241.101:36378 SYN ******S*
Oct 26 02:16:21 193.163.220.58:55782 -> xxx.yyy.241.101:64202 SYN ******S*
Oct 26 02:16:21 193.163.220.58:55783 -> xxx.yyy.241.101:46381 SYN ******S*
Oct 26 02:16:21 193.163.220.58:55784 -> xxx.yyy.241.101:12385 SYN ******S*
Oct 26 02:16:21 193.163.220.58:55785 -> xxx.yyy.241.101:31583 SYN ******S*
Oct 26 02:16:21 193.163.220.58:55786 -> xxx.yyy.241.101:55291 SYN ******S*
Oct 26 02:16:21 193.163.220.58:55787 -> xxx.yyy.241.101:6099 SYN ******S*
Oct 26 02:16:21 193.163.220.58:55788 -> xxx.yyy.241.101:4248 SYN ******S*
[...]
Oct 26 02:24:02 193.163.220.58:60632 -> xxx.yyy.241.101:6001 SYN ******S*
Oct 26 02:24:02 193.163.220.58:60635 -> xxx.yyy.241.101:143 SYN ******S*
Oct 26 02:24:02 193.163.220.58:60636 -> xxx.yyy.241.101:6033 SYN ******S*
Oct 26 02:24:02 193.163.220.58:60637 -> xxx.yyy.241.101:6049 SYN ******S*
Oct 26 02:24:02 193.163.220.58:60639 -> xxx.yyy.241.101:138 SYN ******S*
Oct 26 02:24:02 193.163.220.58:60640 -> xxx.yyy.241.101:27374 SYN ******S*
Oct 26 02:24:03 193.163.220.58:65059 -> xxx.yyy.241.101:3389 SYN ******S*
Oct 26 02:24:03 193.163.220.58:65060 -> xxx.yyy.241.101:14321 SYN ******S*
57018
[...]
54535
Oct 26 00:29:40 208.144.224.203:4685 -> xxx.yyy.1.1:1433 SYN ******S*
Oct 26 00:29:43 208.144.224.203:4697 -> xxx.yyy.1.2:1433 SYN ******S*
Oct 26 00:29:40 208.144.224.203:4713 -> xxx.yyy.1.3:1433 SYN ******S*
Oct 26 00:29:40 208.144.224.203:4727 -> xxx.yyy.1.4:1433 SYN ******S*
Oct 26 00:29:43 208.144.224.203:4745 -> xxx.yyy.1.5:1433 SYN ******S*
Oct 26 00:29:43 208.144.224.203:4775 -> xxx.yyy.1.7:1433 SYN ******S*
Oct 26 00:29:40 208.144.224.203:4793 -> xxx.yyy.1.8:1433 SYN ******S*
Oct 26 00:29:40 208.144.224.203:4810 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
Oct 26 00:42:36 208.144.224.203:3822 -> xxx.yyy.255.178:1433 SYN ******S*
Oct 26 00:42:36 208.144.224.203:3732 -> xxx.yyy.255.173:1433 SYN ******S*
Oct 26 00:42:36 208.144.224.203:3850 -> xxx.yyy.255.206:1433 SYN ******S*
Oct 26 00:42:36 208.144.224.203:3857 -> xxx.yyy.255.213:1433 SYN ******S*
Oct 26 00:42:36 208.144.224.203:3862 -> xxx.yyy.255.218:1433 SYN ******S*
Oct 26 00:42:36 208.144.224.203:3859 -> xxx.yyy.255.215:1433 SYN ******S*
Oct 26 00:42:36 208.144.224.203:3876 -> xxx.yyy.255.232:1433 SYN ******S*
Oct 26 00:42:36 208.144.224.203:3894 -> xxx.yyy.255.246:1433 SYN ******S*
Oct 26 00:42:36 208.144.224.203:3901 -> xxx.yyy.255.250:1433 SYN ******S*
51015
Oct 26 09:20:47 221.9.105.181:3927 -> xxx.yyy.1.0:1433 SYN ******S*
Oct 26 09:20:50 221.9.105.181:3928 -> xxx.yyy.1.1:1433 SYN ******S*
Oct 26 09:20:50 221.9.105.181:3931 -> xxx.yyy.1.2:1433 SYN ******S*
Oct 26 09:20:50 221.9.105.181:3934 -> xxx.yyy.1.3:1433 SYN ******S*
Oct 26 09:20:50 221.9.105.181:3938 -> xxx.yyy.1.4:1433 SYN ******S*
Oct 26 09:20:47 221.9.105.181:3942 -> xxx.yyy.1.5:1433 SYN ******S*
Oct 26 09:20:47 221.9.105.181:3943 -> xxx.yyy.1.6:1433 SYN ******S*
Oct 26 09:20:50 221.9.105.181:3962 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Oct 26 12:24:56 221.9.105.181:4143 -> xxx.yyy.255.236:1433 SYN ******S*
Oct 26 12:24:56 221.9.105.181:4256 -> xxx.yyy.255.237:1433 SYN ******S*
Oct 26 12:24:56 221.9.105.181:4526 -> xxx.yyy.255.238:1433 SYN ******S*
Oct 26 12:24:57 221.9.105.181:3604 -> xxx.yyy.255.242:1433 SYN ******S*
Oct 26 12:24:59 221.9.105.181:3912 -> xxx.yyy.255.246:1433 SYN ******S*
Oct 26 12:24:59 221.9.105.181:3983 -> xxx.yyy.255.248:1433 SYN ******S*
Oct 26 12:24:59 221.9.105.181:4341 -> xxx.yyy.255.249:1433 SYN ******S*
Oct 26 12:24:59 221.9.105.181:4376 -> xxx.yyy.255.250:1433 SYN ******S*
Oct 26 12:24:59 221.9.105.181:4662 -> xxx.yyy.255.254:1433 SYN ******S*
47218
Oct 26 05:48:21 211.33.174.220:2093 -> xxx.yyy.1.1:4899 SYN ******S*
Oct 26 05:48:21 211.33.174.220:2094 -> xxx.yyy.1.2:4899 SYN ******S*
Oct 26 05:48:19 211.33.174.220:2096 -> xxx.yyy.1.4:4899 SYN ******S*
Oct 26 05:48:19 211.33.174.220:2097 -> xxx.yyy.1.5:4899 SYN ******S*
Oct 26 05:48:21 211.33.174.220:2095 -> xxx.yyy.1.3:4899 SYN ******S*
Oct 26 05:48:19 211.33.174.220:2099 -> xxx.yyy.1.7:4899 SYN ******S*
Oct 26 05:48:19 211.33.174.220:2098 -> xxx.yyy.1.6:4899 SYN ******S*
Oct 26 05:48:21 211.33.174.220:2103 -> xxx.yyy.1.11:4899 SYN ******S*
[...]
Oct 26 05:55:29 211.33.174.220:2163 -> xxx.yyy.255.243:4899 SYN ******S*
Oct 26 05:55:29 211.33.174.220:2165 -> xxx.yyy.255.245:4899 SYN ******S*
Oct 26 05:55:29 211.33.174.220:2166 -> xxx.yyy.255.246:4899 SYN ******S*
Oct 26 05:55:29 211.33.174.220:2168 -> xxx.yyy.255.248:4899 SYN ******S*
Oct 26 05:55:29 211.33.174.220:2169 -> xxx.yyy.255.249:4899 SYN ******S*
Oct 26 05:55:29 211.33.174.220:2170 -> xxx.yyy.255.250:4899 SYN ******S*
Oct 26 05:55:29 211.33.174.220:2173 -> xxx.yyy.255.253:4899 SYN ******S*
Oct 26 05:55:29 211.33.174.220:2174 -> xxx.yyy.255.254:4899 SYN ******S*
43422
Oct 26 10:09:04 169.226.28.104:2650 -> xxx.yyy.1.1:6129 SYN ******S*
Oct 26 10:09:04 169.226.28.104:2651 -> xxx.yyy.1.2:6129 SYN ******S*
Oct 26 10:09:04 169.226.28.104:2652 -> xxx.yyy.1.3:6129 SYN ******S*
Oct 26 10:09:05 169.226.28.104:2653 -> xxx.yyy.1.4:6129 SYN ******S*
Oct 26 10:09:05 169.226.28.104:2654 -> xxx.yyy.1.5:6129 SYN ******S*
Oct 26 10:09:05 169.226.28.104:2656 -> xxx.yyy.1.7:6129 SYN ******S*
Oct 26 10:09:05 169.226.28.104:2657 -> xxx.yyy.1.8:6129 SYN ******S*
Oct 26 10:09:05 169.226.28.104:2658 -> xxx.yyy.1.9:6129 SYN ******S*
[...]
Oct 26 10:20:22 169.226.28.104:4127 -> xxx.yyy.255.220:6129 SYN ******S*
Oct 26 10:20:22 169.226.28.104:4128 -> xxx.yyy.255.221:6129 SYN ******S*
Oct 26 10:20:22 169.226.28.104:4124 -> xxx.yyy.255.217:6129 SYN ******S*
Oct 26 10:20:22 169.226.28.104:4137 -> xxx.yyy.255.230:6129 SYN ******S*
Oct 26 10:20:22 169.226.28.104:4141 -> xxx.yyy.255.234:6129 SYN ******S*
Oct 26 10:20:22 169.226.28.104:4139 -> xxx.yyy.255.232:6129 SYN ******S*
Oct 26 10:20:22 169.226.28.104:4136 -> xxx.yyy.255.229:6129 SYN ******S*
Oct 26 10:20:22 169.226.28.104:4135 -> xxx.yyy.255.228:6129 SYN ******S*
41944
Oct 26 19:13:13 193.255.139.103:3194 -> xxx.yyy.1.2:1433 SYN ******S*
Oct 26 19:13:13 193.255.139.103:3196 -> xxx.yyy.1.4:1433 SYN ******S*
Oct 26 19:13:13 193.255.139.103:3197 -> xxx.yyy.1.5:1433 SYN ******S*
Oct 26 19:13:14 193.255.139.103:3198 -> xxx.yyy.1.6:1433 SYN ******S*
Oct 26 19:13:17 193.255.139.103:3203 -> xxx.yyy.1.11:1433 SYN ******S*
Oct 26 19:13:17 193.255.139.103:3204 -> xxx.yyy.1.12:1433 SYN ******S*
Oct 26 19:13:17 193.255.139.103:3205 -> xxx.yyy.1.13:1433 SYN ******S*
Oct 26 19:13:17 193.255.139.103:3206 -> xxx.yyy.1.14:1433 SYN ******S*
[...]
Oct 26 19:25:00 193.255.139.103:2359 -> xxx.yyy.255.219:1433 SYN ******S*
Oct 26 19:25:00 193.255.139.103:2356 -> xxx.yyy.255.216:1433 SYN ******S*
Oct 26 19:25:00 193.255.139.103:2353 -> xxx.yyy.255.213:1433 SYN ******S*
Oct 26 19:25:00 193.255.139.103:2360 -> xxx.yyy.255.220:1433 SYN ******S*
Oct 26 19:25:00 193.255.139.103:2357 -> xxx.yyy.255.217:1433 SYN ******S*
Oct 26 19:25:00 193.255.139.103:2355 -> xxx.yyy.255.215:1433 SYN ******S*
Oct 26 19:25:00 193.255.139.103:2358 -> xxx.yyy.255.218:1433 SYN ******S*
Oct 26 19:25:01 193.255.139.103:2384 -> xxx.yyy.255.244:1433 SYN ******S*
Oct 26 19:25:01 193.255.139.103:2381 -> xxx.yyy.255.241:1433 SYN ******S*
41833
Oct 26 00:19:11 62.58.50.220:45726 -> xxx.yyy.241.101:6796 SYN ******S*
Oct 26 00:19:11 62.58.50.220:45760 -> xxx.yyy.241.101:7212 SYN ******S*
Oct 26 00:19:11 62.58.50.220:45762 -> xxx.yyy.241.101:8080 SYN ******S*
Oct 26 00:19:11 62.58.50.220:45763 -> xxx.yyy.241.101:9321 SYN ******S*
Oct 26 00:19:11 62.58.50.220:45764 -> xxx.yyy.241.101:10103 SYN ******S*
Oct 26 00:19:11 62.58.50.220:45766 -> xxx.yyy.241.101:11220 SYN ******S*
Oct 26 00:19:11 62.58.50.220:45732 -> xxx.yyy.241.101:12501 SYN ******S*
Oct 26 00:19:11 62.58.50.220:45733 -> xxx.yyy.241.101:12654 SYN ******S*
[...]
Oct 26 00:38:11 62.58.50.220:46288 -> xxx.yyy.241.101:61239 SYN ******S*
Oct 26 00:38:11 62.58.50.220:46488 -> xxx.yyy.241.101:62059 SYN ******S*
Oct 26 00:38:11 62.58.50.220:46490 -> xxx.yyy.241.101:58769 SYN ******S*
Oct 26 00:38:11 62.58.50.220:46507 -> xxx.yyy.241.101:59302 SYN ******S*
Oct 26 00:38:11 62.58.50.220:46514 -> xxx.yyy.241.101:63917 SYN ******S*
Oct 26 00:38:11 62.58.50.220:46524 -> xxx.yyy.241.101:62341 SYN ******S*
Oct 26 00:38:11 62.58.50.220:46541 -> xxx.yyy.241.101:61952 SYN ******S*
Oct 26 00:38:11 62.58.50.220:46579 -> xxx.yyy.241.101:58176 SYN ******S*
40064
Oct 26 11:01:28 219.151.39.129:2970 -> xxx.yyy.1.0:1433 SYN ******S*
Oct 26 11:01:28 219.151.39.129:2973 -> xxx.yyy.1.3:1433 SYN ******S*
Oct 26 11:01:28 219.151.39.129:2978 -> xxx.yyy.1.8:1433 SYN ******S*
Oct 26 11:01:28 219.151.39.129:2981 -> xxx.yyy.1.11:1433 SYN ******S*
Oct 26 11:01:28 219.151.39.129:2983 -> xxx.yyy.1.13:1433 SYN ******S*
Oct 26 11:01:31 219.151.39.129:2991 -> xxx.yyy.1.21:1433 SYN ******S*
Oct 26 11:01:31 219.151.39.129:3006 -> xxx.yyy.1.36:1433 SYN ******S*
Oct 26 11:01:28 219.151.39.129:3010 -> xxx.yyy.1.40:1433 SYN ******S*
[...]
Oct 26 14:58:56 219.151.39.129:3431 -> xxx.yyy.255.254:1433 SYN ******S*
Oct 26 14:58:58 219.151.39.129:3359 -> xxx.yyy.255.226:1433 SYN ******S*
Oct 26 14:58:58 219.151.39.129:3341 -> xxx.yyy.255.223:1433 SYN ******S*
Oct 26 14:58:59 219.151.39.129:3388 -> xxx.yyy.255.234:1433 SYN ******S*
Oct 26 14:59:00 219.151.39.129:3415 -> xxx.yyy.255.240:1433 SYN ******S*
Oct 26 14:59:01 219.151.39.129:3407 -> xxx.yyy.255.239:1433 SYN ******S*
Oct 26 14:59:01 219.151.39.129:3430 -> xxx.yyy.255.253:1433 SYN ******S*
Oct 26 14:59:01 219.151.39.129:3421 -> xxx.yyy.255.246:1433 SYN ******S*
39270
Oct 26 00:21:50 24.205.227.37:4846 -> xxx.yyy.32.144:1433 SYN ******S*
Oct 26 00:21:50 24.205.227.37:4858 -> xxx.yyy.32.145:1433 SYN ******S*
Oct 26 00:21:49 24.205.227.37:4808 -> xxx.yyy.32.142:1433 SYN ******S*
Oct 26 00:21:51 24.205.227.37:4815 -> xxx.yyy.32.143:1433 SYN ******S*
Oct 26 00:21:56 24.205.227.37:4870 -> xxx.yyy.32.146:1433 SYN ******S*
Oct 26 00:21:56 24.205.227.37:4846 -> xxx.yyy.32.144:1433 SYN ******S*
Oct 26 00:21:56 24.205.227.37:4858 -> xxx.yyy.32.145:1433 SYN ******S*
Oct 26 00:22:01 24.205.227.37:4885 -> xxx.yyy.32.147:1433 SYN ******S*
[...]
Oct 26 23:59:51 24.205.227.37:4993 -> xxx.yyy.185.89:1433 SYN ******S*
Oct 26 23:59:51 24.205.227.37:4989 -> xxx.yyy.185.85:1433 SYN ******S*
Oct 26 23:59:56 24.205.227.37:4995 -> xxx.yyy.185.91:1433 SYN ******S*
Oct 26 23:59:56 24.205.227.37:4996 -> xxx.yyy.185.92:1433 SYN ******S*
Oct 26 23:59:56 24.205.227.37:4997 -> xxx.yyy.185.93:1433 SYN ******S*
Oct 26 23:59:54 24.205.227.37:4993 -> xxx.yyy.185.89:1433 SYN ******S*
Oct 26 23:59:57 24.205.227.37:4991 -> xxx.yyy.185.87:1433 SYN ******S*
Oct 27 00:00:00 24.205.227.37:4992 -> xxx.yyy.185.88:1433 SYN ******S*
Oct 27 00:00:00 24.205.227.37:4993 -> xxx.yyy.185.89:1433 SYN ******S*
38995
Oct 26 16:52:19 67.127.19.124:3069 -> xxx.yyy.1.2:1433 SYN ******S*
Oct 26 16:52:16 67.127.19.124:3071 -> xxx.yyy.1.4:1433 SYN ******S*
Oct 26 16:52:19 67.127.19.124:3072 -> xxx.yyy.1.5:1433 SYN ******S*
Oct 26 16:52:19 67.127.19.124:3073 -> xxx.yyy.1.6:1433 SYN ******S*
Oct 26 16:52:19 67.127.19.124:3074 -> xxx.yyy.1.7:1433 SYN ******S*
Oct 26 16:52:19 67.127.19.124:3082 -> xxx.yyy.1.15:1433 SYN ******S*
Oct 26 16:52:16 67.127.19.124:3087 -> xxx.yyy.1.20:1433 SYN ******S*
Oct 26 16:52:19 67.127.19.124:3088 -> xxx.yyy.1.21:1433 SYN ******S*
[...]
Oct 26 17:03:14 67.127.19.124:2157 -> xxx.yyy.255.233:1433 SYN ******S*
Oct 26 17:03:14 67.127.19.124:2164 -> xxx.yyy.255.240:1433 SYN ******S*
Oct 26 17:03:14 67.127.19.124:2161 -> xxx.yyy.255.237:1433 SYN ******S*
Oct 26 17:03:14 67.127.19.124:2162 -> xxx.yyy.255.238:1433 SYN ******S*
Oct 26 17:03:14 67.127.19.124:2159 -> xxx.yyy.255.235:1433 SYN ******S*
Oct 26 17:03:14 67.127.19.124:2173 -> xxx.yyy.255.249:1433 SYN ******S*
Oct 26 17:03:14 67.127.19.124:2170 -> xxx.yyy.255.246:1433 SYN ******S*
Oct 26 17:03:14 67.127.19.124:2174 -> xxx.yyy.255.250:1433 SYN ******S*
Oct 26 17:03:14 67.127.19.124:2177 -> xxx.yyy.255.253:1433 SYN ******S*
38219
Oct 26 22:20:46 24.229.139.200:1884 -> xxx.yyy.1.8:4899 SYN ******S*
Oct 26 22:20:46 24.229.139.200:1896 -> xxx.yyy.1.10:4899 SYN ******S*
Oct 26 22:20:47 24.229.139.200:1903 -> xxx.yyy.1.13:4899 SYN ******S*
Oct 26 22:20:47 24.229.139.200:1914 -> xxx.yyy.1.15:4899 SYN ******S*
Oct 26 22:20:47 24.229.139.200:1935 -> xxx.yyy.1.25:4899 SYN ******S*
Oct 26 22:20:47 24.229.139.200:1945 -> xxx.yyy.1.34:4899 SYN ******S*
Oct 26 22:20:47 24.229.139.200:1956 -> xxx.yyy.1.45:4899 SYN ******S*
Oct 26 22:20:47 24.229.139.200:1966 -> xxx.yyy.1.55:4899 SYN ******S*
[...]
Oct 26 22:33:05 24.229.139.200:1316 -> xxx.yyy.255.219:4899 SYN ******S*
Oct 26 22:33:05 24.229.139.200:1312 -> xxx.yyy.255.215:4899 SYN ******S*
Oct 26 22:33:05 24.229.139.200:1311 -> xxx.yyy.255.214:4899 SYN ******S*
Oct 26 22:33:05 24.229.139.200:1309 -> xxx.yyy.255.212:4899 SYN ******S*
Oct 26 22:33:05 24.229.139.200:1302 -> xxx.yyy.255.205:4899 SYN ******S*
Oct 26 22:33:05 24.229.139.200:1350 -> xxx.yyy.255.253:4899 SYN ******S*
Oct 26 22:33:05 24.229.139.200:1349 -> xxx.yyy.255.252:4899 SYN ******S*
Oct 26 22:33:05 24.229.139.200:1341 -> xxx.yyy.255.244:4899 SYN ******S*
36213
Oct 26 08:28:27 66.51.223.133:1798 -> xxx.yyy.1.2:1433 SYN ******S*
Oct 26 08:28:27 66.51.223.133:1805 -> xxx.yyy.1.9:1433 SYN ******S*
Oct 26 08:28:27 66.51.223.133:1807 -> xxx.yyy.1.11:1433 SYN ******S*
Oct 26 08:28:27 66.51.223.133:1810 -> xxx.yyy.1.14:1433 SYN ******S*
Oct 26 08:28:27 66.51.223.133:1811 -> xxx.yyy.1.15:1433 SYN ******S*
Oct 26 08:28:27 66.51.223.133:1820 -> xxx.yyy.1.24:1433 SYN ******S*
Oct 26 08:28:27 66.51.223.133:1826 -> xxx.yyy.1.30:1433 SYN ******S*
Oct 26 08:28:27 66.51.223.133:1829 -> xxx.yyy.1.33:1433 SYN ******S*
[...]
Oct 26 08:32:47 66.51.223.133:4957 -> xxx.yyy.255.210:1433 SYN ******S*
Oct 26 08:32:47 66.51.223.133:1054 -> xxx.yyy.255.254:1433 SYN ******S*
Oct 26 08:32:47 66.51.223.133:1047 -> xxx.yyy.255.248:1433 SYN ******S*
Oct 26 08:32:47 66.51.223.133:1044 -> xxx.yyy.255.245:1433 SYN ******S*
Oct 26 08:32:47 66.51.223.133:4952 -> xxx.yyy.255.208:1433 SYN ******S*
Oct 26 08:32:47 66.51.223.133:1028 -> xxx.yyy.255.229:1433 SYN ******S*
Oct 26 08:32:47 66.51.223.133:4970 -> xxx.yyy.255.216:1433 SYN ******S*
Oct 26 08:32:47 66.51.223.133:1038 -> xxx.yyy.255.239:1433 SYN ******S*
Oct 26 08:32:47 66.51.223.133:1035 -> xxx.yyy.255.236:1433 SYN ******S*
35449
[...]
11251
[...]
9131
Oct 26 09:23:55 221.157.13.1:2904 -> xxx.yyy.1.4:4899 SYN ******S*
Oct 26 09:23:55 221.157.13.1:2905 -> xxx.yyy.1.5:4899 SYN ******S*
Oct 26 09:23:57 221.157.13.1:2903 -> xxx.yyy.1.3:4899 SYN ******S*
Oct 26 09:23:55 221.157.13.1:2908 -> xxx.yyy.1.8:4899 SYN ******S*
Oct 26 09:23:55 221.157.13.1:2907 -> xxx.yyy.1.7:4899 SYN ******S*
Oct 26 09:23:55 221.157.13.1:2909 -> xxx.yyy.1.9:4899 SYN ******S*
Oct 26 09:23:57 221.157.13.1:2914 -> xxx.yyy.1.14:4899 SYN ******S*
Oct 26 09:23:55 221.157.13.1:2912 -> xxx.yyy.1.12:4899 SYN ******S*
[...]
Oct 26 09:26:36 221.157.13.1:1607 -> xxx.yyy.183.144:4899 SYN ******S*
Oct 26 09:26:36 221.157.13.1:1620 -> xxx.yyy.183.157:4899 SYN ******S*
Oct 26 09:26:36 221.157.13.1:1608 -> xxx.yyy.183.145:4899 SYN ******S*
Oct 26 09:26:36 221.157.13.1:1622 -> xxx.yyy.183.159:4899 SYN ******S*
Oct 26 09:26:36 221.157.13.1:1623 -> xxx.yyy.183.160:4899 SYN ******S*
Oct 26 09:26:36 221.157.13.1:1611 -> xxx.yyy.183.148:4899 SYN ******S*
Oct 26 09:26:36 221.157.13.1:1610 -> xxx.yyy.183.147:4899 SYN ******S*
Oct 26 09:26:36 221.157.13.1:1624 -> xxx.yyy.183.161:4899 SYN ******S*
8666
Oct 26 00:06:45 60.35.228.63:3204 -> xxx.yyy.133.19:5554 SYN ******S*
Oct 26 00:06:46 60.35.228.63:3240 -> xxx.yyy.133.19:1023 SYN ******S*
Oct 26 00:06:45 60.35.228.63:3225 -> xxx.yyy.134.185:5554 SYN ******S*
Oct 26 00:06:45 60.35.228.63:3232 -> xxx.yyy.134.191:5554 SYN ******S*
Oct 26 00:06:46 60.35.228.63:3272 -> xxx.yyy.134.191:1023 SYN ******S*
Oct 26 00:06:49 60.35.228.63:3338 -> xxx.yyy.134.191:9898 SYN ******S*
Oct 26 00:06:46 60.35.228.63:3238 -> xxx.yyy.133.17:1023 SYN ******S*
Oct 26 00:06:48 60.35.228.63:3305 -> xxx.yyy.133.17:9898 SYN ******S*
[...]
Oct 26 00:17:07 60.35.228.63:4688 -> xxx.yyy.134.173:9898 SYN ******S*
Oct 26 00:17:07 60.35.228.63:4689 -> xxx.yyy.134.174:9898 SYN ******S*
Oct 26 00:17:07 60.35.228.63:4690 -> xxx.yyy.134.175:9898 SYN ******S*
Oct 26 00:17:07 60.35.228.63:4691 -> xxx.yyy.134.176:9898 SYN ******S*
Oct 26 00:17:07 60.35.228.63:4692 -> xxx.yyy.134.177:9898 SYN ******S*
Oct 26 00:17:08 60.35.228.63:4707 -> xxx.yyy.134.179:9898 SYN ******S*
Oct 26 00:17:08 60.35.228.63:4710 -> xxx.yyy.134.182:9898 SYN ******S*
Oct 26 00:17:08 60.35.228.63:4731 -> xxx.yyy.134.163:9898 SYN ******S*
8454
Oct 26 23:52:43 220.92.156.151:1235 -> xxx.yyy.214.249:5554 SYN ******S*
Oct 26 23:52:44 220.92.156.151:1823 -> xxx.yyy.214.249:1023 SYN ******S*
Oct 26 23:52:43 220.92.156.151:1232 -> xxx.yyy.214.246:5554 SYN ******S*
Oct 26 23:52:44 220.92.156.151:1820 -> xxx.yyy.214.246:1023 SYN ******S*
Oct 26 23:52:43 220.92.156.151:1241 -> xxx.yyy.215.0:5554 SYN ******S*
Oct 26 23:52:44 220.92.156.151:1826 -> xxx.yyy.215.0:1023 SYN ******S*
Oct 26 23:52:43 220.92.156.151:1233 -> xxx.yyy.214.247:5554 SYN ******S*
Oct 26 23:52:44 220.92.156.151:1821 -> xxx.yyy.214.247:1023 SYN ******S*
[...]
Oct 26 23:53:30 220.92.156.151:2573 -> xxx.yyy.235.31:9898 SYN ******S*
Oct 26 23:53:30 220.92.156.151:2599 -> xxx.yyy.235.43:9898 SYN ******S*
Oct 26 23:53:30 220.92.156.151:2606 -> xxx.yyy.235.47:9898 SYN ******S*
Oct 26 23:53:30 220.92.156.151:2668 -> xxx.yyy.235.64:9898 SYN ******S*
Oct 26 23:53:30 220.92.156.151:2664 -> xxx.yyy.235.61:9898 SYN ******S*
Oct 26 23:53:30 220.92.156.151:2683 -> xxx.yyy.235.68:9898 SYN ******S*
Oct 26 23:53:30 220.92.156.151:2703 -> xxx.yyy.235.80:9898 SYN ******S*
Oct 26 23:53:30 220.92.156.151:2745 -> xxx.yyy.235.109:9898 SYN ******S*
8008
Oct 26 23:56:41 220.86.29.206:1295 -> xxx.yyy.133.248:5554 SYN ******S*
Oct 26 23:56:41 220.86.29.206:1301 -> xxx.yyy.133.250:5554 SYN ******S*
Oct 26 23:56:41 220.86.29.206:1312 -> xxx.yyy.134.0:5554 SYN ******S*
Oct 26 23:56:42 220.86.29.206:1585 -> xxx.yyy.134.0:1023 SYN ******S*
Oct 26 23:56:41 220.86.29.206:1317 -> xxx.yyy.133.253:5554 SYN ******S*
Oct 26 23:56:41 220.86.29.206:1318 -> xxx.yyy.134.1:5554 SYN ******S*
Oct 26 23:56:44 220.86.29.206:2168 -> xxx.yyy.134.1:9898 SYN ******S*
Oct 26 23:56:41 220.86.29.206:1358 -> xxx.yyy.134.6:5554 SYN ******S*
[...]
Oct 26 23:58:59 220.86.29.206:2069 -> xxx.yyy.154.97:9898 SYN ******S*
Oct 26 23:58:59 220.86.29.206:2068 -> xxx.yyy.154.96:9898 SYN ******S*
Oct 26 23:58:59 220.86.29.206:2072 -> xxx.yyy.154.78:9898 SYN ******S*
Oct 26 23:58:59 220.86.29.206:2073 -> xxx.yyy.154.79:9898 SYN ******S*
Oct 26 23:58:59 220.86.29.206:2075 -> xxx.yyy.154.80:9898 SYN ******S*
Oct 26 23:58:59 220.86.29.206:2078 -> xxx.yyy.154.82:9898 SYN ******S*
Oct 26 23:58:59 220.86.29.206:2071 -> xxx.yyy.154.76:9898 SYN ******S*
Oct 26 23:58:59 220.86.29.206:2076 -> xxx.yyy.154.81:9898 SYN ******S*
Oct 26 23:58:59 220.86.29.206:2079 -> xxx.yyy.154.83:9898 SYN ******S*
6636
Oct 26 00:56:07 218.76.0.31:1911 -> xxx.yyy.133.16:5554 SYN ******S*
Oct 26 00:56:08 218.76.0.31:2392 -> xxx.yyy.133.16:1023 SYN ******S*
Oct 26 00:56:07 218.76.0.31:1916 -> xxx.yyy.133.21:5554 SYN ******S*
Oct 26 00:56:10 218.76.0.31:3317 -> xxx.yyy.133.21:9898 SYN ******S*
Oct 26 00:56:07 218.76.0.31:1964 -> xxx.yyy.133.69:5554 SYN ******S*
Oct 26 00:56:10 218.76.0.31:3361 -> xxx.yyy.133.69:9898 SYN ******S*
Oct 26 00:56:07 218.76.0.31:1909 -> xxx.yyy.133.14:5554 SYN ******S*
Oct 26 00:56:08 218.76.0.31:2390 -> xxx.yyy.133.14:1023 SYN ******S*
[...]
Oct 26 00:57:36 218.76.0.31:1265 -> xxx.yyy.92.216:9898 SYN ******S*
Oct 26 00:57:36 218.76.0.31:3869 -> xxx.yyy.92.229:1023 SYN ******S*
Oct 26 00:57:38 218.76.0.31:1305 -> xxx.yyy.92.229:9898 SYN ******S*
Oct 26 00:57:36 218.76.0.31:3870 -> xxx.yyy.92.230:1023 SYN ******S*
Oct 26 00:57:36 218.76.0.31:1311 -> xxx.yyy.92.235:9898 SYN ******S*
Oct 26 00:57:36 218.76.0.31:1315 -> xxx.yyy.92.239:9898 SYN ******S*
Oct 26 00:57:36 218.76.0.31:4744 -> xxx.yyy.92.85:9898 SYN ******S*
Oct 26 00:57:37 218.76.0.31:1222 -> xxx.yyy.92.183:9898 SYN ******S*
Oct 26 00:57:37 218.76.0.31:1319 -> xxx.yyy.92.243:9898 SYN ******S*
6543
Oct 26 00:56:16 218.61.9.252:2223 -> xxx.yyy.153.137:5554 SYN ******S*
Oct 26 00:56:19 218.61.9.252:2869 -> xxx.yyy.153.137:9898 SYN ******S*
Oct 26 00:56:16 218.61.9.252:2226 -> xxx.yyy.153.136:5554 SYN ******S*
Oct 26 00:56:16 218.61.9.252:2222 -> xxx.yyy.153.142:5554 SYN ******S*
Oct 26 00:56:16 218.61.9.252:2228 -> xxx.yyy.153.143:5554 SYN ******S*
Oct 26 00:56:17 218.61.9.252:2505 -> xxx.yyy.153.143:1023 SYN ******S*
Oct 26 00:56:19 218.61.9.252:2883 -> xxx.yyy.153.143:9898 SYN ******S*
Oct 26 00:56:16 218.61.9.252:2240 -> xxx.yyy.153.146:5554 SYN ******S*
[...]
Oct 26 00:58:09 218.61.9.252:4194 -> xxx.yyy.173.249:9898 SYN ******S*
Oct 26 00:58:09 218.61.9.252:4195 -> xxx.yyy.173.250:9898 SYN ******S*
Oct 26 00:58:09 218.61.9.252:4196 -> xxx.yyy.173.251:9898 SYN ******S*
Oct 26 00:58:09 218.61.9.252:4197 -> xxx.yyy.173.252:9898 SYN ******S*
Oct 26 00:58:09 218.61.9.252:4198 -> xxx.yyy.173.253:9898 SYN ******S*
Oct 26 00:58:09 218.61.9.252:4199 -> xxx.yyy.173.254:9898 SYN ******S*
Oct 26 00:58:09 218.61.9.252:4204 -> xxx.yyy.174.2:9898 SYN ******S*
Oct 26 00:58:09 218.61.9.252:4201 -> xxx.yyy.174.0:9898 SYN ******S*
6132
Oct 26 23:58:41 221.160.38.51:1336 -> xxx.yyy.174.224:5554 SYN ******S*
Oct 26 23:58:42 221.160.38.51:1532 -> xxx.yyy.174.224:1023 SYN ******S*
Oct 26 23:58:44 221.160.38.51:1914 -> xxx.yyy.174.224:9898 SYN ******S*
Oct 26 23:58:41 221.160.38.51:1334 -> xxx.yyy.174.222:5554 SYN ******S*
Oct 26 23:58:42 221.160.38.51:1530 -> xxx.yyy.174.222:1023 SYN ******S*
Oct 26 23:58:44 221.160.38.51:1912 -> xxx.yyy.174.222:9898 SYN ******S*
Oct 26 23:58:41 221.160.38.51:1335 -> xxx.yyy.174.223:5554 SYN ******S*
Oct 26 23:58:44 221.160.38.51:1913 -> xxx.yyy.174.223:9898 SYN ******S*
[...]
Oct 27 00:00:00 221.160.38.51:3813 -> xxx.yyy.193.32:5554 SYN ******S*
Oct 27 00:00:00 221.160.38.51:3817 -> xxx.yyy.193.36:5554 SYN ******S*
Oct 27 00:00:00 221.160.38.51:3814 -> xxx.yyy.193.33:5554 SYN ******S*
Oct 27 00:00:00 221.160.38.51:3831 -> xxx.yyy.193.50:5554 SYN ******S*
Oct 27 00:00:00 221.160.38.51:3816 -> xxx.yyy.193.35:5554 SYN ******S*
Oct 27 00:00:00 221.160.38.51:3815 -> xxx.yyy.193.34:5554 SYN ******S*
Oct 27 00:00:00 221.160.38.51:3818 -> xxx.yyy.193.37:5554 SYN ******S*
Oct 27 00:00:00 221.160.38.51:3830 -> xxx.yyy.193.49:5554 SYN ******S*
Oct 27 00:00:00 221.160.38.51:3845 -> xxx.yyy.193.57:5554 SYN ******S*
5976
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list