[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Sun Oct 31 17:34:05 GMT 2004
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0500.
Oct 30 17:24:27 148.223.87.19:4188 -> xxx.yyy.1.1:1433 SYN ******S*
Oct 30 17:24:27 148.223.87.19:4189 -> xxx.yyy.1.2:1433 SYN ******S*
Oct 30 17:24:27 148.223.87.19:4190 -> xxx.yyy.1.3:1433 SYN ******S*
Oct 30 17:24:24 148.223.87.19:4191 -> xxx.yyy.1.4:1433 SYN ******S*
Oct 30 17:24:27 148.223.87.19:4192 -> xxx.yyy.1.5:1433 SYN ******S*
Oct 30 17:24:27 148.223.87.19:4193 -> xxx.yyy.1.6:1433 SYN ******S*
Oct 30 17:24:27 148.223.87.19:4194 -> xxx.yyy.1.7:1433 SYN ******S*
Oct 30 17:24:27 148.223.87.19:4195 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Oct 30 23:37:21 148.223.87.19:3839 -> xxx.yyy.255.240:6129 SYN ******S*
Oct 30 23:37:21 148.223.87.19:3840 -> xxx.yyy.255.241:6129 SYN ******S*
Oct 30 23:37:21 148.223.87.19:3832 -> xxx.yyy.255.233:6129 SYN ******S*
Oct 30 23:37:21 148.223.87.19:3845 -> xxx.yyy.255.246:6129 SYN ******S*
Oct 30 23:37:21 148.223.87.19:3850 -> xxx.yyy.255.251:6129 SYN ******S*
Oct 30 23:37:21 148.223.87.19:3846 -> xxx.yyy.255.247:6129 SYN ******S*
Oct 30 23:37:21 148.223.87.19:3842 -> xxx.yyy.255.243:6129 SYN ******S*
Oct 30 23:37:21 148.223.87.19:3847 -> xxx.yyy.255.248:6129 SYN ******S*
Oct 30 23:37:21 148.223.87.19:3848 -> xxx.yyy.255.249:6129 SYN ******S*
123567
Oct 30 07:13:16 82.122.103.44:1885 -> xxx.yyy.1.165:1433 SYN ******S*
Oct 30 07:13:13 82.122.103.44:1828 -> xxx.yyy.1.138:1433 SYN ******S*
Oct 30 07:13:13 82.122.103.44:1830 -> xxx.yyy.1.139:1433 SYN ******S*
Oct 30 07:13:16 82.122.103.44:1887 -> xxx.yyy.1.166:1433 SYN ******S*
Oct 30 07:13:13 82.122.103.44:1832 -> xxx.yyy.1.140:1433 SYN ******S*
Oct 30 07:13:16 82.122.103.44:1890 -> xxx.yyy.1.167:1433 SYN ******S*
Oct 30 07:13:13 82.122.103.44:1834 -> xxx.yyy.1.141:1433 SYN ******S*
Oct 30 07:13:16 82.122.103.44:1892 -> xxx.yyy.1.168:1433 SYN ******S*
[...]
Oct 30 16:41:23 82.122.103.44:2874 -> xxx.yyy.255.246:1433 SYN ******S*
Oct 30 16:41:23 82.122.103.44:2875 -> xxx.yyy.255.247:1433 SYN ******S*
Oct 30 16:41:24 82.122.103.44:2876 -> xxx.yyy.255.248:1433 SYN ******S*
Oct 30 16:41:24 82.122.103.44:2877 -> xxx.yyy.255.249:1433 SYN ******S*
Oct 30 16:41:24 82.122.103.44:2878 -> xxx.yyy.255.250:1433 SYN ******S*
Oct 30 16:41:25 82.122.103.44:2879 -> xxx.yyy.255.251:1433 SYN ******S*
Oct 30 16:41:25 82.122.103.44:2880 -> xxx.yyy.255.252:1433 SYN ******S*
Oct 30 16:41:25 82.122.103.44:2881 -> xxx.yyy.255.253:1433 SYN ******S*
Oct 30 16:41:25 82.122.103.44:2882 -> xxx.yyy.255.254:1433 SYN ******S*
106477
Oct 30 02:42:38 202.126.109.42:62548 -> xxx.yyy.81.53:6348 SYN ******S*
Oct 30 02:42:39 202.126.109.42:62548 -> xxx.yyy.81.53:6348 FIN *******F
Oct 30 16:41:30 202.126.109.42:62045 -> xxx.yyy.1.0:1433 SYN ******S*
Oct 30 16:41:30 202.126.109.42:62049 -> xxx.yyy.1.1:1433 SYN ******S*
Oct 30 16:41:30 202.126.109.42:62059 -> xxx.yyy.1.2:1433 SYN ******S*
Oct 30 16:41:30 202.126.109.42:62086 -> xxx.yyy.1.3:1433 SYN ******S*
Oct 30 16:41:30 202.126.109.42:62088 -> xxx.yyy.1.4:1433 SYN ******S*
Oct 30 16:41:28 202.126.109.42:62090 -> xxx.yyy.1.5:1433 SYN ******S*
[...]
Oct 30 20:28:13 202.126.109.42:61439 -> xxx.yyy.255.232:1433 SYN ******S*
Oct 30 20:28:14 202.126.109.42:61538 -> xxx.yyy.255.234:1433 SYN ******S*
Oct 30 20:28:14 202.126.109.42:61545 -> xxx.yyy.255.235:1433 SYN ******S*
Oct 30 20:28:15 202.126.109.42:61659 -> xxx.yyy.255.237:1433 SYN ******S*
Oct 30 20:28:15 202.126.109.42:61712 -> xxx.yyy.255.239:1433 SYN ******S*
Oct 30 20:28:15 202.126.109.42:61738 -> xxx.yyy.255.241:1433 SYN ******S*
Oct 30 20:28:16 202.126.109.42:61752 -> xxx.yyy.255.243:1433 SYN ******S*
Oct 30 20:28:16 202.126.109.42:61806 -> xxx.yyy.255.244:1433 SYN ******S*
Oct 30 20:28:16 202.126.109.42:61866 -> xxx.yyy.255.253:1433 SYN ******S*
100052
Oct 30 21:59:28 198.173.169.20:3742 -> xxx.yyy.1.1:4899 SYN ******S*
Oct 30 21:59:28 198.173.169.20:3743 -> xxx.yyy.1.2:4899 SYN ******S*
Oct 30 21:59:28 198.173.169.20:3744 -> xxx.yyy.1.3:4899 SYN ******S*
Oct 30 21:59:26 198.173.169.20:3745 -> xxx.yyy.1.4:4899 SYN ******S*
Oct 30 21:59:29 198.173.169.20:3750 -> xxx.yyy.1.7:4899 SYN ******S*
Oct 30 21:59:26 198.173.169.20:3751 -> xxx.yyy.1.8:4899 SYN ******S*
Oct 30 21:59:29 198.173.169.20:3752 -> xxx.yyy.1.9:4899 SYN ******S*
Oct 30 21:59:29 198.173.169.20:3753 -> xxx.yyy.1.10:4899 SYN ******S*
[...]
Oct 30 22:49:23 198.173.169.20:1250 -> xxx.yyy.255.241:4899 SYN ******S*
Oct 30 22:49:23 198.173.169.20:1256 -> xxx.yyy.255.245:4899 SYN ******S*
Oct 30 22:49:23 198.173.169.20:1266 -> xxx.yyy.255.253:4899 SYN ******S*
Oct 30 22:49:23 198.173.169.20:1253 -> xxx.yyy.255.242:4899 SYN ******S*
Oct 30 22:49:23 198.173.169.20:1261 -> xxx.yyy.255.250:4899 SYN ******S*
Oct 30 22:49:23 198.173.169.20:1257 -> xxx.yyy.255.246:4899 SYN ******S*
Oct 30 22:49:23 198.173.169.20:1267 -> xxx.yyy.255.254:4899 SYN ******S*
Oct 30 22:49:23 198.173.169.20:1263 -> xxx.yyy.255.251:4899 SYN ******S*
89677
Oct 30 00:37:36 213.180.210.35:52584 -> xxx.yyy.67.189:1080 SYN ******S*
Oct 30 00:37:36 213.180.210.35:54001 -> xxx.yyy.67.189:1075 SYN ******S*
Oct 30 00:37:36 213.180.210.35:48852 -> xxx.yyy.67.189:80 SYN ******S*
Oct 30 00:37:36 213.180.210.35:33613 -> xxx.yyy.67.189:81 SYN ******S*
Oct 30 00:37:36 213.180.210.35:44150 -> xxx.yyy.67.189:3128 SYN ******S*
Oct 30 00:37:36 213.180.210.35:45784 -> xxx.yyy.67.189:4480 SYN ******S*
Oct 30 00:37:36 213.180.210.35:52364 -> xxx.yyy.67.189:6588 SYN ******S*
Oct 30 00:37:36 213.180.210.35:35496 -> xxx.yyy.67.189:8000 SYN ******S*
[...]
Oct 30 10:57:28 213.180.210.35:39754 -> xxx.yyy.200.212:80 SYN ******S*
Oct 30 10:57:28 213.180.210.35:44842 -> xxx.yyy.200.212:81 SYN ******S*
Oct 30 10:57:28 213.180.210.35:56988 -> xxx.yyy.200.212:3128 SYN ******S*
Oct 30 10:57:28 213.180.210.35:51105 -> xxx.yyy.200.212:4480 SYN ******S*
Oct 30 10:57:28 213.180.210.35:35268 -> xxx.yyy.200.212:6588 SYN ******S*
Oct 30 10:57:28 213.180.210.35:49694 -> xxx.yyy.200.212:8000 SYN ******S*
Oct 30 10:57:28 213.180.210.35:64602 -> xxx.yyy.200.212:8080 SYN ******S*
Oct 30 10:57:28 213.180.210.35:30975 -> xxx.yyy.200.212:8081 SYN ******S*
Oct 30 10:57:28 213.180.210.35:61957 -> xxx.yyy.200.212:8090 SYN ******S*
69783
Oct 30 01:54:40 211.239.150.99:2335 -> xxx.yyy.1.5:1433 SYN ******S*
Oct 30 01:54:40 211.239.150.99:2340 -> xxx.yyy.1.10:1433 SYN ******S*
Oct 30 01:54:37 211.239.150.99:2341 -> xxx.yyy.1.11:1433 SYN ******S*
Oct 30 01:54:40 211.239.150.99:2343 -> xxx.yyy.1.13:1433 SYN ******S*
Oct 30 01:54:40 211.239.150.99:2344 -> xxx.yyy.1.14:1433 SYN ******S*
Oct 30 01:54:40 211.239.150.99:2345 -> xxx.yyy.1.15:1433 SYN ******S*
Oct 30 01:54:40 211.239.150.99:2346 -> xxx.yyy.1.16:1433 SYN ******S*
Oct 30 01:54:40 211.239.150.99:2348 -> xxx.yyy.1.18:1433 SYN ******S*
[...]
Oct 30 02:07:38 211.239.150.99:2675 -> xxx.yyy.255.192:1433 SYN ******S*
Oct 30 02:07:38 211.239.150.99:2678 -> xxx.yyy.255.195:1433 SYN ******S*
Oct 30 02:07:38 211.239.150.99:2679 -> xxx.yyy.255.196:1433 SYN ******S*
Oct 30 02:07:38 211.239.150.99:2677 -> xxx.yyy.255.194:1433 SYN ******S*
Oct 30 02:07:38 211.239.150.99:2676 -> xxx.yyy.255.193:1433 SYN ******S*
Oct 30 02:07:39 211.239.150.99:2688 -> xxx.yyy.255.205:1433 SYN ******S*
Oct 30 02:07:39 211.239.150.99:2702 -> xxx.yyy.255.219:1433 SYN ******S*
Oct 30 02:07:39 211.239.150.99:2729 -> xxx.yyy.255.246:1433 SYN ******S*
65484
Oct 30 00:26:45 202.118.7.130:1292 -> xxx.yyy.1.2:4000 SYN ******S*
Oct 30 00:26:44 202.118.7.130:1294 -> xxx.yyy.1.4:4000 SYN ******S*
Oct 30 00:26:43 202.118.7.130:1293 -> xxx.yyy.1.3:4000 SYN ******S*
Oct 30 00:26:44 202.118.7.130:1295 -> xxx.yyy.1.5:4000 SYN ******S*
Oct 30 00:26:44 202.118.7.130:1297 -> xxx.yyy.1.7:4000 SYN ******S*
Oct 30 00:26:45 202.118.7.130:1298 -> xxx.yyy.1.8:4000 SYN ******S*
Oct 30 00:26:45 202.118.7.130:1300 -> xxx.yyy.1.10:4000 SYN ******S*
Oct 30 00:26:45 202.118.7.130:1299 -> xxx.yyy.1.9:4000 SYN ******S*
[...]
Oct 30 00:38:25 202.118.7.130:3580 -> xxx.yyy.255.242:4000 SYN ******S*
Oct 30 00:38:25 202.118.7.130:3579 -> xxx.yyy.255.241:4000 SYN ******S*
Oct 30 00:38:25 202.118.7.130:3584 -> xxx.yyy.255.246:4000 SYN ******S*
Oct 30 00:38:25 202.118.7.130:3585 -> xxx.yyy.255.247:4000 SYN ******S*
Oct 30 00:38:25 202.118.7.130:3583 -> xxx.yyy.255.245:4000 SYN ******S*
Oct 30 00:38:25 202.118.7.130:3587 -> xxx.yyy.255.249:4000 SYN ******S*
Oct 30 00:38:25 202.118.7.130:3586 -> xxx.yyy.255.248:4000 SYN ******S*
Oct 30 00:38:25 202.118.7.130:3588 -> xxx.yyy.255.250:4000 SYN ******S*
Oct 30 00:38:25 202.118.7.130:3589 -> xxx.yyy.255.251:4000 SYN ******S*
63842
Oct 30 22:39:59 81.15.135.180:3674 -> xxx.yyy.1.1:1521 SYN ******S*
Oct 30 22:39:59 81.15.135.180:3675 -> xxx.yyy.1.2:1521 SYN ******S*
Oct 30 22:39:59 81.15.135.180:3676 -> xxx.yyy.1.3:1521 SYN ******S*
Oct 30 22:40:01 81.15.135.180:3677 -> xxx.yyy.1.4:1521 SYN ******S*
Oct 30 22:40:01 81.15.135.180:3678 -> xxx.yyy.1.5:1521 SYN ******S*
Oct 30 22:40:01 81.15.135.180:3679 -> xxx.yyy.1.6:1521 SYN ******S*
Oct 30 22:39:58 81.15.135.180:3680 -> xxx.yyy.1.7:1521 SYN ******S*
Oct 30 22:39:58 81.15.135.180:3681 -> xxx.yyy.1.8:1521 SYN ******S*
[...]
Oct 30 22:51:06 81.15.135.180:2485 -> xxx.yyy.255.235:1521 SYN ******S*
Oct 30 22:51:06 81.15.135.180:2486 -> xxx.yyy.255.236:1521 SYN ******S*
Oct 30 22:51:06 81.15.135.180:2494 -> xxx.yyy.255.244:1521 SYN ******S*
Oct 30 22:51:06 81.15.135.180:2495 -> xxx.yyy.255.245:1521 SYN ******S*
Oct 30 22:51:06 81.15.135.180:2496 -> xxx.yyy.255.246:1521 SYN ******S*
Oct 30 22:51:06 81.15.135.180:2499 -> xxx.yyy.255.249:1521 SYN ******S*
Oct 30 22:51:06 81.15.135.180:2498 -> xxx.yyy.255.248:1521 SYN ******S*
Oct 30 22:51:06 81.15.135.180:2497 -> xxx.yyy.255.247:1521 SYN ******S*
Oct 30 22:51:06 81.15.135.180:2504 -> xxx.yyy.255.254:1521 SYN ******S*
61002
Oct 30 17:28:18 68.199.45.69:2626 -> xxx.yyy.1.1:2000 SYN ******S*
Oct 30 17:28:21 68.199.45.69:2627 -> xxx.yyy.1.2:2000 SYN ******S*
Oct 30 17:28:18 68.199.45.69:2628 -> xxx.yyy.1.3:2000 SYN ******S*
Oct 30 17:28:21 68.199.45.69:2629 -> xxx.yyy.1.4:2000 SYN ******S*
Oct 30 17:28:18 68.199.45.69:2630 -> xxx.yyy.1.5:2000 SYN ******S*
Oct 30 17:28:18 68.199.45.69:2631 -> xxx.yyy.1.6:2000 SYN ******S*
Oct 30 17:28:21 68.199.45.69:2633 -> xxx.yyy.1.8:2000 SYN ******S*
Oct 30 17:28:21 68.199.45.69:2634 -> xxx.yyy.1.9:2000 SYN ******S*
[...]
Oct 30 17:40:44 68.199.45.69:1179 -> xxx.yyy.255.248:2000 SYN ******S*
Oct 30 17:40:44 68.199.45.69:1176 -> xxx.yyy.255.245:2000 SYN ******S*
Oct 30 17:40:44 68.199.45.69:1178 -> xxx.yyy.255.247:2000 SYN ******S*
Oct 30 17:40:44 68.199.45.69:1173 -> xxx.yyy.255.242:2000 SYN ******S*
Oct 30 17:40:44 68.199.45.69:1177 -> xxx.yyy.255.246:2000 SYN ******S*
Oct 30 17:40:44 68.199.45.69:1175 -> xxx.yyy.255.244:2000 SYN ******S*
Oct 30 17:40:44 68.199.45.69:1181 -> xxx.yyy.255.250:2000 SYN ******S*
Oct 30 17:40:44 68.199.45.69:1184 -> xxx.yyy.255.253:2000 SYN ******S*
59702
Oct 30 22:07:28 210.61.139.132:4844 -> xxx.yyy.1.1:1433 SYN ******S*
Oct 30 22:07:28 210.61.139.132:4845 -> xxx.yyy.1.2:1433 SYN ******S*
Oct 30 22:07:28 210.61.139.132:4846 -> xxx.yyy.1.3:1433 SYN ******S*
Oct 30 22:07:28 210.61.139.132:4847 -> xxx.yyy.1.4:1433 SYN ******S*
Oct 30 22:07:28 210.61.139.132:4848 -> xxx.yyy.1.5:1433 SYN ******S*
Oct 30 22:07:28 210.61.139.132:4849 -> xxx.yyy.1.6:1433 SYN ******S*
Oct 30 22:07:28 210.61.139.132:4850 -> xxx.yyy.1.7:1433 SYN ******S*
Oct 30 22:07:28 210.61.139.132:4851 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Oct 30 22:16:45 210.61.139.132:3309 -> xxx.yyy.255.216:1433 SYN ******S*
Oct 30 22:16:45 210.61.139.132:3261 -> xxx.yyy.255.168:1433 SYN ******S*
Oct 30 22:16:45 210.61.139.132:3290 -> xxx.yyy.255.197:1433 SYN ******S*
Oct 30 22:16:45 210.61.139.132:3330 -> xxx.yyy.255.237:1433 SYN ******S*
Oct 30 22:16:45 210.61.139.132:3346 -> xxx.yyy.255.253:1433 SYN ******S*
Oct 30 22:16:45 210.61.139.132:3343 -> xxx.yyy.255.250:1433 SYN ******S*
Oct 30 22:16:45 210.61.139.132:3327 -> xxx.yyy.255.234:1433 SYN ******S*
Oct 30 22:16:45 210.61.139.132:3328 -> xxx.yyy.255.235:1433 SYN ******S*
55949
[...]
51789
Oct 30 16:20:06 194.69.220.170:4362 -> xxx.yyy.1.1:1433 SYN ******S*
Oct 30 16:20:03 194.69.220.170:4363 -> xxx.yyy.1.2:1433 SYN ******S*
Oct 30 16:20:06 194.69.220.170:4364 -> xxx.yyy.1.3:1433 SYN ******S*
Oct 30 16:20:06 194.69.220.170:4365 -> xxx.yyy.1.4:1433 SYN ******S*
Oct 30 16:20:03 194.69.220.170:4366 -> xxx.yyy.1.5:1433 SYN ******S*
Oct 30 16:20:06 194.69.220.170:4367 -> xxx.yyy.1.6:1433 SYN ******S*
Oct 30 16:20:06 194.69.220.170:4374 -> xxx.yyy.1.13:1433 SYN ******S*
Oct 30 16:20:03 194.69.220.170:4375 -> xxx.yyy.1.14:1433 SYN ******S*
[...]
Oct 30 16:40:55 194.69.220.170:2426 -> xxx.yyy.255.163:1433 SYN ******S*
Oct 30 16:40:55 194.69.220.170:2506 -> xxx.yyy.255.243:1433 SYN ******S*
Oct 30 16:40:55 194.69.220.170:2503 -> xxx.yyy.255.240:1433 SYN ******S*
Oct 30 16:40:55 194.69.220.170:2455 -> xxx.yyy.255.192:1433 SYN ******S*
Oct 30 16:40:56 194.69.220.170:2452 -> xxx.yyy.255.189:1433 SYN ******S*
Oct 30 16:40:56 194.69.220.170:2484 -> xxx.yyy.255.221:1433 SYN ******S*
Oct 30 16:40:56 194.69.220.170:2468 -> xxx.yyy.255.205:1433 SYN ******S*
Oct 30 16:40:56 194.69.220.170:2436 -> xxx.yyy.255.173:1433 SYN ******S*
49320
Oct 30 03:01:18 172.182.208.8:2922 -> xxx.yyy.1.0:1433 SYN ******S*
Oct 30 03:01:18 172.182.208.8:2932 -> xxx.yyy.1.2:1433 SYN ******S*
Oct 30 03:01:18 172.182.208.8:2938 -> xxx.yyy.1.3:1433 SYN ******S*
Oct 30 03:01:18 172.182.208.8:2949 -> xxx.yyy.1.5:1433 SYN ******S*
Oct 30 03:01:18 172.182.208.8:2960 -> xxx.yyy.1.7:1433 SYN ******S*
Oct 30 03:01:18 172.182.208.8:2964 -> xxx.yyy.1.8:1433 SYN ******S*
Oct 30 03:01:18 172.182.208.8:2972 -> xxx.yyy.1.9:1433 SYN ******S*
Oct 30 03:01:18 172.182.208.8:2978 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
Oct 30 03:46:20 172.182.208.8:2307 -> xxx.yyy.255.246:1433 SYN ******S*
Oct 30 03:46:20 172.182.208.8:2318 -> xxx.yyy.255.247:1433 SYN ******S*
Oct 30 03:46:20 172.182.208.8:2322 -> xxx.yyy.255.248:1433 SYN ******S*
Oct 30 03:46:20 172.182.208.8:2329 -> xxx.yyy.255.249:1433 SYN ******S*
Oct 30 03:46:20 172.182.208.8:2334 -> xxx.yyy.255.250:1433 SYN ******S*
Oct 30 03:46:20 172.182.208.8:2339 -> xxx.yyy.255.251:1433 SYN ******S*
Oct 30 03:46:20 172.182.208.8:2344 -> xxx.yyy.255.252:1433 SYN ******S*
Oct 30 03:46:20 172.182.208.8:2351 -> xxx.yyy.255.253:1433 SYN ******S*
Oct 30 03:46:20 172.182.208.8:2356 -> xxx.yyy.255.254:1433 SYN ******S*
42450
Oct 30 04:58:00 62.48.177.68:2852 -> xxx.yyy.1.1:4899 SYN ******S*
Oct 30 04:58:00 62.48.177.68:2853 -> xxx.yyy.1.2:4899 SYN ******S*
Oct 30 04:58:00 62.48.177.68:2854 -> xxx.yyy.1.3:4899 SYN ******S*
Oct 30 04:57:58 62.48.177.68:2855 -> xxx.yyy.1.4:4899 SYN ******S*
Oct 30 04:57:58 62.48.177.68:2856 -> xxx.yyy.1.5:4899 SYN ******S*
Oct 30 04:57:58 62.48.177.68:2857 -> xxx.yyy.1.6:4899 SYN ******S*
Oct 30 04:57:58 62.48.177.68:2858 -> xxx.yyy.1.7:4899 SYN ******S*
Oct 30 04:57:58 62.48.177.68:2859 -> xxx.yyy.1.8:4899 SYN ******S*
[...]
Oct 30 05:02:01 62.48.177.68:1374 -> xxx.yyy.255.246:4899 SYN ******S*
Oct 30 05:02:01 62.48.177.68:1375 -> xxx.yyy.255.247:4899 SYN ******S*
Oct 30 05:02:01 62.48.177.68:1376 -> xxx.yyy.255.248:4899 SYN ******S*
Oct 30 05:02:01 62.48.177.68:1378 -> xxx.yyy.255.250:4899 SYN ******S*
Oct 30 05:02:01 62.48.177.68:1379 -> xxx.yyy.255.251:4899 SYN ******S*
Oct 30 05:02:01 62.48.177.68:1380 -> xxx.yyy.255.252:4899 SYN ******S*
Oct 30 05:02:01 62.48.177.68:1381 -> xxx.yyy.255.253:4899 SYN ******S*
Oct 30 05:02:01 62.48.177.68:1382 -> xxx.yyy.255.254:4899 SYN ******S*
39134
Oct 30 00:00:07 65.163.154.2:11679 -> xxx.yyy.211.190:1433 SYN ******S*
Oct 30 00:00:10 65.163.154.2:11689 -> xxx.yyy.211.191:1433 SYN ******S*
Oct 30 00:00:10 65.163.154.2:11707 -> xxx.yyy.211.194:1433 SYN ******S*
Oct 30 00:00:07 65.163.154.2:11715 -> xxx.yyy.211.196:1433 SYN ******S*
Oct 30 00:00:07 65.163.154.2:11719 -> xxx.yyy.211.197:1433 SYN ******S*
Oct 30 00:00:08 65.163.154.2:11725 -> xxx.yyy.211.198:1433 SYN ******S*
Oct 30 00:00:08 65.163.154.2:11726 -> xxx.yyy.211.199:1433 SYN ******S*
Oct 30 00:00:08 65.163.154.2:11730 -> xxx.yyy.211.200:1433 SYN ******S*
[...]
Oct 30 00:43:34 65.163.154.2:34680 -> xxx.yyy.255.245:1433 SYN ******S*
Oct 30 00:43:34 65.163.154.2:34687 -> xxx.yyy.255.246:1433 SYN ******S*
Oct 30 00:43:34 65.163.154.2:34693 -> xxx.yyy.255.247:1433 SYN ******S*
Oct 30 00:43:34 65.163.154.2:34696 -> xxx.yyy.255.248:1433 SYN ******S*
Oct 30 00:43:34 65.163.154.2:34704 -> xxx.yyy.255.249:1433 SYN ******S*
Oct 30 00:43:34 65.163.154.2:34711 -> xxx.yyy.255.250:1433 SYN ******S*
Oct 30 00:43:35 65.163.154.2:34714 -> xxx.yyy.255.251:1433 SYN ******S*
Oct 30 00:43:35 65.163.154.2:34719 -> xxx.yyy.255.252:1433 SYN ******S*
Oct 30 00:43:35 65.163.154.2:34727 -> xxx.yyy.255.254:1433 SYN ******S*
27933
[...]
21477
Oct 30 01:52:19 80.223.91.212:2443 -> xxx.yyy.1.0:1433 SYN ******S*
Oct 30 01:52:19 80.223.91.212:2447 -> xxx.yyy.1.1:1433 SYN ******S*
Oct 30 01:52:19 80.223.91.212:2452 -> xxx.yyy.1.2:1433 SYN ******S*
Oct 30 01:52:19 80.223.91.212:2459 -> xxx.yyy.1.4:1433 SYN ******S*
Oct 30 01:52:19 80.223.91.212:2462 -> xxx.yyy.1.5:1433 SYN ******S*
Oct 30 01:52:19 80.223.91.212:2467 -> xxx.yyy.1.6:1433 SYN ******S*
Oct 30 01:52:19 80.223.91.212:2471 -> xxx.yyy.1.7:1433 SYN ******S*
Oct 30 01:52:19 80.223.91.212:2474 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Oct 30 03:33:55 80.223.91.212:1255 -> xxx.yyy.92.26:1433 SYN ******S*
Oct 30 03:33:55 80.223.91.212:4614 -> xxx.yyy.92.33:1433 SYN ******S*
Oct 30 03:33:58 80.223.91.212:3820 -> xxx.yyy.92.28:1433 SYN ******S*
Oct 30 03:33:58 80.223.91.212:3776 -> xxx.yyy.92.27:1433 SYN ******S*
Oct 30 03:34:01 80.223.91.212:4614 -> xxx.yyy.92.33:1433 SYN ******S*
Oct 30 03:34:02 80.223.91.212:3047 -> xxx.yyy.92.37:1433 SYN ******S*
Oct 30 03:34:02 80.223.91.212:3120 -> xxx.yyy.92.36:1433 SYN ******S*
Oct 30 03:34:02 80.223.91.212:3357 -> xxx.yyy.92.38:1433 SYN ******S*
Oct 30 03:34:02 80.223.91.212:2020 -> xxx.yyy.92.34:1433 SYN ******S*
20135
[...]
18900
Oct 30 13:45:55 219.106.226.4:36829 -> xxx.yyy.1.103:139 SYN ******S*
Oct 30 13:45:55 219.106.226.4:36832 -> xxx.yyy.1.106:139 SYN ******S*
Oct 30 13:45:55 219.106.226.4:36831 -> xxx.yyy.1.105:139 SYN ******S*
Oct 30 13:45:55 219.106.226.4:36813 -> xxx.yyy.1.87:139 SYN ******S*
Oct 30 13:45:55 219.106.226.4:36827 -> xxx.yyy.1.101:139 SYN ******S*
Oct 30 13:45:55 219.106.226.4:36803 -> xxx.yyy.1.77:139 SYN ******S*
Oct 30 13:45:55 219.106.226.4:36806 -> xxx.yyy.1.80:139 SYN ******S*
Oct 30 13:45:55 219.106.226.4:36805 -> xxx.yyy.1.79:139 SYN ******S*
[...]
Oct 30 13:59:30 219.106.226.4:45678 -> xxx.yyy.255.226:139 SYN ******S*
Oct 30 13:59:30 219.106.226.4:45650 -> xxx.yyy.255.198:139 SYN ******S*
Oct 30 13:59:30 219.106.226.4:45664 -> xxx.yyy.255.212:139 SYN ******S*
Oct 30 13:59:30 219.106.226.4:45668 -> xxx.yyy.255.216:139 SYN ******S*
Oct 30 13:59:30 219.106.226.4:45669 -> xxx.yyy.255.217:139 SYN ******S*
Oct 30 13:59:30 219.106.226.4:45665 -> xxx.yyy.255.213:139 SYN ******S*
Oct 30 13:59:30 219.106.226.4:45687 -> xxx.yyy.255.235:139 SYN ******S*
Oct 30 13:59:30 219.106.226.4:45683 -> xxx.yyy.255.231:139 SYN ******S*
Oct 30 13:59:30 219.106.226.4:45670 -> xxx.yyy.255.218:139 SYN ******S*
14247
Oct 30 23:53:31 202.225.192.19:4091 -> xxx.yyy.174.2:5554 SYN ******S*
Oct 30 23:53:32 202.225.192.19:4774 -> xxx.yyy.174.2:1023 SYN ******S*
Oct 30 23:53:34 202.225.192.19:2074 -> xxx.yyy.174.2:9898 SYN ******S*
Oct 30 23:53:31 202.225.192.19:4092 -> xxx.yyy.174.4:5554 SYN ******S*
Oct 30 23:53:32 202.225.192.19:4775 -> xxx.yyy.174.4:1023 SYN ******S*
Oct 30 23:53:34 202.225.192.19:2075 -> xxx.yyy.174.4:9898 SYN ******S*
Oct 30 23:53:31 202.225.192.19:4093 -> xxx.yyy.174.5:5554 SYN ******S*
Oct 30 23:53:32 202.225.192.19:4779 -> xxx.yyy.174.5:1023 SYN ******S*
[...]
Oct 30 23:54:16 202.225.192.19:1218 -> xxx.yyy.174.39:9898 SYN ******S*
Oct 30 23:54:16 202.225.192.19:1219 -> xxx.yyy.174.32:9898 SYN ******S*
Oct 30 23:54:16 202.225.192.19:1226 -> xxx.yyy.174.40:9898 SYN ******S*
Oct 30 23:54:16 202.225.192.19:1227 -> xxx.yyy.174.41:9898 SYN ******S*
Oct 30 23:54:16 202.225.192.19:1228 -> xxx.yyy.174.42:9898 SYN ******S*
Oct 30 23:54:16 202.225.192.19:1229 -> xxx.yyy.174.43:9898 SYN ******S*
Oct 30 23:54:16 202.225.192.19:1230 -> xxx.yyy.174.46:9898 SYN ******S*
Oct 30 23:54:16 202.225.192.19:1244 -> xxx.yyy.174.48:9898 SYN ******S*
Oct 30 23:54:16 202.225.192.19:1273 -> xxx.yyy.174.49:9898 SYN ******S*
12745
Oct 30 18:32:28 66.98.172.92:1378 -> xxx.yyy.1.0:1433 SYN ******S*
Oct 30 18:32:28 66.98.172.92:1379 -> xxx.yyy.1.1:1433 SYN ******S*
Oct 30 18:32:28 66.98.172.92:1380 -> xxx.yyy.1.2:1433 SYN ******S*
Oct 30 18:32:28 66.98.172.92:1381 -> xxx.yyy.1.3:1433 SYN ******S*
Oct 30 18:32:28 66.98.172.92:1383 -> xxx.yyy.1.5:1433 SYN ******S*
Oct 30 18:32:28 66.98.172.92:1382 -> xxx.yyy.1.4:1433 SYN ******S*
Oct 30 18:32:28 66.98.172.92:1385 -> xxx.yyy.1.7:1433 SYN ******S*
Oct 30 18:32:28 66.98.172.92:1388 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
Oct 30 18:32:45 66.98.172.92:1377 -> xxx.yyy.255.229:1433 SYN ******S*
Oct 30 18:32:45 66.98.172.92:1384 -> xxx.yyy.255.236:1433 SYN ******S*
Oct 30 18:32:45 66.98.172.92:1399 -> xxx.yyy.255.251:1433 SYN ******S*
Oct 30 18:32:45 66.98.172.92:1401 -> xxx.yyy.255.253:1433 SYN ******S*
Oct 30 18:32:45 66.98.172.92:1400 -> xxx.yyy.255.252:1433 SYN ******S*
Oct 30 18:32:45 66.98.172.92:1398 -> xxx.yyy.255.250:1433 SYN ******S*
Oct 30 18:32:45 66.98.172.92:1397 -> xxx.yyy.255.249:1433 SYN ******S*
Oct 30 18:32:45 66.98.172.92:1402 -> xxx.yyy.255.254:1433 SYN ******S*
12419
Oct 30 04:18:27 221.116.253.130:2212 -> xxx.yyy.1.5:111 SYN ******S*
Oct 30 04:18:27 221.116.253.130:2218 -> xxx.yyy.1.11:111 SYN ******S*
Oct 30 04:18:27 221.116.253.130:2214 -> xxx.yyy.1.7:111 SYN ******S*
Oct 30 04:18:27 221.116.253.130:2216 -> xxx.yyy.1.9:111 SYN ******S*
Oct 30 04:18:27 221.116.253.130:2213 -> xxx.yyy.1.6:111 SYN ******S*
Oct 30 04:18:27 221.116.253.130:2215 -> xxx.yyy.1.8:111 SYN ******S*
Oct 30 04:18:27 221.116.253.130:2234 -> xxx.yyy.1.27:111 SYN ******S*
Oct 30 04:18:27 221.116.253.130:2228 -> xxx.yyy.1.21:111 SYN ******S*
[...]
Oct 30 04:21:45 221.116.253.130:3103 -> xxx.yyy.253.218:111 SYN ******S*
Oct 30 04:21:45 221.116.253.130:3100 -> xxx.yyy.253.215:111 SYN ******S*
Oct 30 04:21:45 221.116.253.130:3113 -> xxx.yyy.253.228:111 SYN ******S*
Oct 30 04:21:45 221.116.253.130:3114 -> xxx.yyy.253.229:111 SYN ******S*
Oct 30 04:21:45 221.116.253.130:3117 -> xxx.yyy.253.232:111 SYN ******S*
Oct 30 04:21:45 221.116.253.130:3129 -> xxx.yyy.253.244:111 SYN ******S*
Oct 30 04:21:45 221.116.253.130:3120 -> xxx.yyy.253.235:111 SYN ******S*
Oct 30 04:21:45 221.116.253.130:3130 -> xxx.yyy.253.245:111 SYN ******S*
11454
[...]
10648
Oct 30 00:07:11 59.11.12.175:2917 -> xxx.yyy.72.128:5554 SYN ******S*
Oct 30 00:07:12 59.11.12.175:3302 -> xxx.yyy.72.128:1023 SYN ******S*
Oct 30 00:07:14 59.11.12.175:4133 -> xxx.yyy.72.128:9898 SYN ******S*
Oct 30 00:07:11 59.11.12.175:2920 -> xxx.yyy.72.136:5554 SYN ******S*
Oct 30 00:07:12 59.11.12.175:3313 -> xxx.yyy.72.136:1023 SYN ******S*
Oct 30 00:07:14 59.11.12.175:4144 -> xxx.yyy.72.136:9898 SYN ******S*
Oct 30 00:07:11 59.11.12.175:2931 -> xxx.yyy.72.146:5554 SYN ******S*
Oct 30 00:07:12 59.11.12.175:3320 -> xxx.yyy.72.146:1023 SYN ******S*
[...]
Oct 30 00:07:57 59.11.12.175:2961 -> xxx.yyy.73.81:9898 SYN ******S*
Oct 30 00:07:57 59.11.12.175:2963 -> xxx.yyy.73.85:9898 SYN ******S*
Oct 30 00:07:57 59.11.12.175:2968 -> xxx.yyy.73.103:9898 SYN ******S*
Oct 30 00:07:57 59.11.12.175:2988 -> xxx.yyy.73.121:9898 SYN ******S*
Oct 30 00:07:57 59.11.12.175:2967 -> xxx.yyy.73.102:9898 SYN ******S*
Oct 30 00:07:57 59.11.12.175:2969 -> xxx.yyy.73.106:9898 SYN ******S*
Oct 30 00:07:57 59.11.12.175:2970 -> xxx.yyy.73.107:9898 SYN ******S*
Oct 30 00:07:57 59.11.12.175:2971 -> xxx.yyy.73.108:9898 SYN ******S*
Oct 30 00:07:58 59.11.12.175:2975 -> xxx.yyy.73.82:9898 SYN ******S*
9507
Oct 30 00:53:09 221.127.10.72:1191 -> xxx.yyy.235.112:5554 SYN ******S*
Oct 30 00:53:10 221.127.10.72:1771 -> xxx.yyy.235.112:1023 SYN ******S*
Oct 30 00:53:12 221.127.10.72:2917 -> xxx.yyy.235.112:9898 SYN ******S*
Oct 30 00:53:09 221.127.10.72:1192 -> xxx.yyy.235.113:5554 SYN ******S*
Oct 30 00:53:10 221.127.10.72:1772 -> xxx.yyy.235.113:1023 SYN ******S*
Oct 30 00:53:12 221.127.10.72:2918 -> xxx.yyy.235.113:9898 SYN ******S*
Oct 30 00:53:09 221.127.10.72:1232 -> xxx.yyy.235.114:5554 SYN ******S*
Oct 30 00:53:10 221.127.10.72:1788 -> xxx.yyy.235.114:1023 SYN ******S*
[...]
Oct 30 00:53:55 221.127.10.72:4507 -> xxx.yyy.255.191:9898 SYN ******S*
Oct 30 00:53:55 221.127.10.72:4509 -> xxx.yyy.255.193:9898 SYN ******S*
Oct 30 00:53:55 221.127.10.72:4523 -> xxx.yyy.255.195:9898 SYN ******S*
Oct 30 00:53:55 221.127.10.72:4527 -> xxx.yyy.255.196:9898 SYN ******S*
Oct 30 00:53:55 221.127.10.72:4529 -> xxx.yyy.255.198:9898 SYN ******S*
Oct 30 00:53:55 221.127.10.72:4531 -> xxx.yyy.255.200:9898 SYN ******S*
Oct 30 00:53:55 221.127.10.72:4537 -> xxx.yyy.255.201:9898 SYN ******S*
Oct 30 00:53:55 221.127.10.72:4539 -> xxx.yyy.255.203:9898 SYN ******S*
Oct 30 00:53:55 221.127.10.72:4551 -> xxx.yyy.255.212:9898 SYN ******S*
9471
Oct 30 00:56:01 61.149.2.120:1822 -> xxx.yyy.153.137:5554 SYN ******S*
Oct 30 00:56:02 61.149.2.120:2009 -> xxx.yyy.153.137:1023 SYN ******S*
Oct 30 00:56:04 61.149.2.120:2342 -> xxx.yyy.153.137:9898 SYN ******S*
Oct 30 00:56:01 61.149.2.120:1823 -> xxx.yyy.153.138:5554 SYN ******S*
Oct 30 00:56:01 61.149.2.120:1821 -> xxx.yyy.153.136:5554 SYN ******S*
Oct 30 00:56:02 61.149.2.120:2008 -> xxx.yyy.153.136:1023 SYN ******S*
Oct 30 00:56:04 61.149.2.120:2345 -> xxx.yyy.153.136:9898 SYN ******S*
Oct 30 00:56:01 61.149.2.120:1824 -> xxx.yyy.153.139:5554 SYN ******S*
[...]
Oct 30 00:57:59 61.149.2.120:3945 -> xxx.yyy.173.212:9898 SYN ******S*
Oct 30 00:57:59 61.149.2.120:3946 -> xxx.yyy.173.213:9898 SYN ******S*
Oct 30 00:57:59 61.149.2.120:3948 -> xxx.yyy.173.216:9898 SYN ******S*
Oct 30 00:57:59 61.149.2.120:3950 -> xxx.yyy.173.218:9898 SYN ******S*
Oct 30 00:57:59 61.149.2.120:3949 -> xxx.yyy.173.217:9898 SYN ******S*
Oct 30 00:57:59 61.149.2.120:4035 -> xxx.yyy.173.221:9898 SYN ******S*
Oct 30 00:57:59 61.149.2.120:4051 -> xxx.yyy.173.228:9898 SYN ******S*
Oct 30 00:58:00 61.149.2.120:4119 -> xxx.yyy.174.2:9898 SYN ******S*
9366
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list