[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Tue Sep 7 16:29:01 GMT 2004
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0500.
Sep 6 05:23:18 212.89.8.121:1615 -> xxx.yyy.1.1:80 SYN ******S*
Sep 6 05:23:18 212.89.8.121:1616 -> xxx.yyy.1.2:80 SYN ******S*
Sep 6 05:23:18 212.89.8.121:1617 -> xxx.yyy.1.3:80 SYN ******S*
Sep 6 05:23:21 212.89.8.121:1619 -> xxx.yyy.1.5:80 SYN ******S*
Sep 6 05:23:21 212.89.8.121:1618 -> xxx.yyy.1.4:80 SYN ******S*
Sep 6 05:23:21 212.89.8.121:1620 -> xxx.yyy.1.6:80 SYN ******S*
Sep 6 05:23:21 212.89.8.121:1622 -> xxx.yyy.1.7:80 SYN ******S*
Sep 6 05:23:21 212.89.8.121:1623 -> xxx.yyy.1.8:80 SYN ******S*
[...]
Sep 6 13:11:23 212.89.8.121:4229 -> xxx.yyy.255.247:6129 SYN ******S*
Sep 6 13:11:23 212.89.8.121:4230 -> xxx.yyy.255.248:6129 SYN ******S*
Sep 6 13:11:23 212.89.8.121:4226 -> xxx.yyy.255.244:6129 SYN ******S*
Sep 6 13:11:23 212.89.8.121:4227 -> xxx.yyy.255.245:6129 SYN ******S*
Sep 6 13:11:23 212.89.8.121:4234 -> xxx.yyy.255.252:6129 SYN ******S*
Sep 6 13:11:23 212.89.8.121:4235 -> xxx.yyy.255.253:6129 SYN ******S*
Sep 6 13:11:23 212.89.8.121:4233 -> xxx.yyy.255.251:6129 SYN ******S*
Sep 6 13:11:23 212.89.8.121:4236 -> xxx.yyy.255.254:6129 SYN ******S*
133997
Sep 6 13:12:44 213.134.250.140:3132 -> xxx.yyy.1.0:1433 SYN ******S*
Sep 6 13:12:44 213.134.250.140:3133 -> xxx.yyy.1.1:1433 SYN ******S*
Sep 6 13:12:41 213.134.250.140:3135 -> xxx.yyy.1.3:1433 SYN ******S*
Sep 6 13:12:44 213.134.250.140:3134 -> xxx.yyy.1.2:1433 SYN ******S*
Sep 6 13:12:41 213.134.250.140:3136 -> xxx.yyy.1.4:1433 SYN ******S*
Sep 6 13:12:44 213.134.250.140:3137 -> xxx.yyy.1.5:1433 SYN ******S*
Sep 6 13:12:44 213.134.250.140:3138 -> xxx.yyy.1.6:1433 SYN ******S*
Sep 6 13:12:44 213.134.250.140:3139 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Sep 6 14:17:56 213.134.250.140:3283 -> xxx.yyy.255.242:1433 SYN ******S*
Sep 6 14:17:56 213.134.250.140:3282 -> xxx.yyy.255.241:1433 SYN ******S*
Sep 6 14:17:56 213.134.250.140:3281 -> xxx.yyy.255.240:1433 SYN ******S*
Sep 6 14:17:56 213.134.250.140:3294 -> xxx.yyy.255.253:1433 SYN ******S*
Sep 6 14:17:56 213.134.250.140:3293 -> xxx.yyy.255.252:1433 SYN ******S*
Sep 6 14:17:56 213.134.250.140:3292 -> xxx.yyy.255.251:1433 SYN ******S*
Sep 6 14:17:56 213.134.250.140:3291 -> xxx.yyy.255.250:1433 SYN ******S*
Sep 6 14:17:56 213.134.250.140:3290 -> xxx.yyy.255.249:1433 SYN ******S*
Sep 6 14:17:56 213.134.250.140:3289 -> xxx.yyy.255.248:1433 SYN ******S*
107309
Sep 6 14:58:58 24.57.54.235:1630 -> xxx.yyy.1.43:1433 SYN ******S*
Sep 6 14:58:58 24.57.54.235:1631 -> xxx.yyy.1.42:1433 SYN ******S*
Sep 6 14:58:58 24.57.54.235:1632 -> xxx.yyy.1.41:1433 SYN ******S*
Sep 6 14:58:58 24.57.54.235:1638 -> xxx.yyy.1.35:1433 SYN ******S*
Sep 6 14:58:58 24.57.54.235:1637 -> xxx.yyy.1.36:1433 SYN ******S*
Sep 6 14:58:58 24.57.54.235:1634 -> xxx.yyy.1.39:1433 SYN ******S*
Sep 6 14:58:58 24.57.54.235:1643 -> xxx.yyy.1.30:1433 SYN ******S*
Sep 6 14:58:58 24.57.54.235:1641 -> xxx.yyy.1.32:1433 SYN ******S*
[...]
Sep 6 18:47:42 24.57.54.235:1232 -> xxx.yyy.255.233:1433 SYN ******S*
Sep 6 18:47:42 24.57.54.235:1242 -> xxx.yyy.255.236:1433 SYN ******S*
Sep 6 18:47:42 24.57.54.235:1240 -> xxx.yyy.255.235:1433 SYN ******S*
Sep 6 18:47:42 24.57.54.235:1238 -> xxx.yyy.255.234:1433 SYN ******S*
Sep 6 18:47:43 24.57.54.235:1247 -> xxx.yyy.255.237:1433 SYN ******S*
Sep 6 18:47:44 24.57.54.235:1305 -> xxx.yyy.255.245:1433 SYN ******S*
Sep 6 18:47:44 24.57.54.235:1310 -> xxx.yyy.255.246:1433 SYN ******S*
Sep 6 18:47:45 24.57.54.235:1340 -> xxx.yyy.255.252:1433 SYN ******S*
95942
Sep 6 03:12:11 216.45.168.89:3496 -> xxx.yyy.1.1:1433 SYN ******S*
Sep 6 03:12:11 216.45.168.89:3497 -> xxx.yyy.1.2:1433 SYN ******S*
Sep 6 03:12:11 216.45.168.89:3498 -> xxx.yyy.1.3:1433 SYN ******S*
Sep 6 03:12:08 216.45.168.89:3499 -> xxx.yyy.1.4:1433 SYN ******S*
Sep 6 03:12:11 216.45.168.89:3500 -> xxx.yyy.1.5:1433 SYN ******S*
Sep 6 03:12:11 216.45.168.89:3501 -> xxx.yyy.1.6:1433 SYN ******S*
Sep 6 03:12:11 216.45.168.89:3502 -> xxx.yyy.1.7:1433 SYN ******S*
Sep 6 03:12:11 216.45.168.89:3503 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Sep 6 03:23:50 216.45.168.89:2109 -> xxx.yyy.255.244:1433 SYN ******S*
Sep 6 03:23:50 216.45.168.89:2112 -> xxx.yyy.255.247:1433 SYN ******S*
Sep 6 03:23:50 216.45.168.89:2113 -> xxx.yyy.255.248:1433 SYN ******S*
Sep 6 03:23:50 216.45.168.89:2114 -> xxx.yyy.255.249:1433 SYN ******S*
Sep 6 03:23:50 216.45.168.89:2115 -> xxx.yyy.255.250:1433 SYN ******S*
Sep 6 03:23:50 216.45.168.89:2116 -> xxx.yyy.255.251:1433 SYN ******S*
Sep 6 03:23:50 216.45.168.89:2117 -> xxx.yyy.255.252:1433 SYN ******S*
Sep 6 03:23:50 216.45.168.89:2118 -> xxx.yyy.255.253:1433 SYN ******S*
Sep 6 03:23:50 216.45.168.89:2119 -> xxx.yyy.255.254:1433 SYN ******S*
69324
Sep 6 18:10:12 220.234.95.108:3591 -> xxx.yyy.1.3:8535 SYN ******S*
Sep 6 18:10:12 220.234.95.108:3592 -> xxx.yyy.1.4:8535 SYN ******S*
Sep 6 18:10:13 220.234.95.108:3594 -> xxx.yyy.1.6:8535 SYN ******S*
Sep 6 18:10:13 220.234.95.108:3595 -> xxx.yyy.1.7:8535 SYN ******S*
Sep 6 18:10:13 220.234.95.108:3598 -> xxx.yyy.1.10:8535 SYN ******S*
Sep 6 18:10:11 220.234.95.108:3599 -> xxx.yyy.1.11:8535 SYN ******S*
Sep 6 18:10:11 220.234.95.108:3588 -> xxx.yyy.1.0:8535 SYN ******S*
Sep 6 18:10:13 220.234.95.108:3601 -> xxx.yyy.1.13:8535 SYN ******S*
[...]
Sep 6 20:17:47 220.234.95.108:3088 -> xxx.yyy.255.236:8535 SYN ******S*
Sep 6 20:17:47 220.234.95.108:3092 -> xxx.yyy.255.240:8535 SYN ******S*
Sep 6 20:17:47 220.234.95.108:3094 -> xxx.yyy.255.242:8535 SYN ******S*
Sep 6 20:17:47 220.234.95.108:3093 -> xxx.yyy.255.241:8535 SYN ******S*
Sep 6 20:17:47 220.234.95.108:3098 -> xxx.yyy.255.246:8535 SYN ******S*
Sep 6 20:17:48 220.234.95.108:3103 -> xxx.yyy.255.251:8535 SYN ******S*
Sep 6 20:17:48 220.234.95.108:3102 -> xxx.yyy.255.250:8535 SYN ******S*
Sep 6 20:17:48 220.234.95.108:3105 -> xxx.yyy.255.252:8535 SYN ******S*
66357
Sep 6 08:00:42 130.228.96.156:2890 -> xxx.yyy.1.1:62976 SYN ******S*
Sep 6 08:00:43 130.228.96.156:2892 -> xxx.yyy.1.2:62976 SYN ******S*
Sep 6 08:00:41 130.228.96.156:2894 -> xxx.yyy.1.3:62976 SYN ******S*
Sep 6 08:00:44 130.228.96.156:2896 -> xxx.yyy.1.4:62976 SYN ******S*
Sep 6 08:00:41 130.228.96.156:2901 -> xxx.yyy.1.6:62976 SYN ******S*
Sep 6 08:00:41 130.228.96.156:2902 -> xxx.yyy.1.7:62976 SYN ******S*
Sep 6 08:00:41 130.228.96.156:2905 -> xxx.yyy.1.8:62976 SYN ******S*
Sep 6 08:00:44 130.228.96.156:2907 -> xxx.yyy.1.9:62976 SYN ******S*
[...]
Sep 6 08:12:31 130.228.96.156:3548 -> xxx.yyy.255.242:62976 SYN ******S*
Sep 6 08:12:31 130.228.96.156:3546 -> xxx.yyy.255.241:62976 SYN ******S*
Sep 6 08:12:31 130.228.96.156:3556 -> xxx.yyy.255.246:62976 SYN ******S*
Sep 6 08:12:31 130.228.96.156:3568 -> xxx.yyy.255.252:62976 SYN ******S*
Sep 6 08:12:31 130.228.96.156:3572 -> xxx.yyy.255.254:62976 SYN ******S*
Sep 6 08:12:31 130.228.96.156:3566 -> xxx.yyy.255.251:62976 SYN ******S*
Sep 6 08:12:31 130.228.96.156:3562 -> xxx.yyy.255.249:62976 SYN ******S*
Sep 6 08:12:31 130.228.96.156:3564 -> xxx.yyy.255.250:62976 SYN ******S*
Sep 6 08:12:31 130.228.96.156:3570 -> xxx.yyy.255.253:62976 SYN ******S*
63073
Sep 6 00:54:26 151.100.2.10:3028 -> xxx.yyy.1.1:1433 SYN ******S*
Sep 6 00:54:26 151.100.2.10:3029 -> xxx.yyy.1.2:1433 SYN ******S*
Sep 6 00:54:26 151.100.2.10:3030 -> xxx.yyy.1.3:1433 SYN ******S*
Sep 6 00:54:26 151.100.2.10:3031 -> xxx.yyy.1.4:1433 SYN ******S*
Sep 6 00:54:26 151.100.2.10:3032 -> xxx.yyy.1.5:1433 SYN ******S*
Sep 6 00:54:26 151.100.2.10:3033 -> xxx.yyy.1.6:1433 SYN ******S*
Sep 6 00:54:26 151.100.2.10:3037 -> xxx.yyy.1.7:1433 SYN ******S*
Sep 6 00:54:26 151.100.2.10:3038 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Sep 6 01:14:25 151.100.2.10:4913 -> xxx.yyy.255.253:1433 SYN ******S*
Sep 6 01:14:25 151.100.2.10:4786 -> xxx.yyy.255.233:1433 SYN ******S*
Sep 6 01:14:25 151.100.2.10:4845 -> xxx.yyy.255.244:1433 SYN ******S*
Sep 6 01:14:25 151.100.2.10:4798 -> xxx.yyy.255.236:1433 SYN ******S*
Sep 6 01:14:25 151.100.2.10:4795 -> xxx.yyy.255.235:1433 SYN ******S*
Sep 6 01:14:25 151.100.2.10:4802 -> xxx.yyy.255.239:1433 SYN ******S*
Sep 6 01:14:25 151.100.2.10:4910 -> xxx.yyy.255.252:1433 SYN ******S*
Sep 6 01:14:25 151.100.2.10:4891 -> xxx.yyy.255.249:1433 SYN ******S*
52948
Sep 6 09:30:52 222.134.202.42:1047 -> xxx.yyy.1.1:1433 SYN ******S*
Sep 6 09:30:52 222.134.202.42:1069 -> xxx.yyy.1.3:1433 SYN ******S*
Sep 6 09:30:52 222.134.202.42:1077 -> xxx.yyy.1.4:1433 SYN ******S*
Sep 6 09:30:52 222.134.202.42:1085 -> xxx.yyy.1.5:1433 SYN ******S*
Sep 6 09:30:53 222.134.202.42:1106 -> xxx.yyy.1.6:1433 SYN ******S*
Sep 6 09:30:50 222.134.202.42:1109 -> xxx.yyy.1.7:1433 SYN ******S*
Sep 6 09:30:50 222.134.202.42:1116 -> xxx.yyy.1.8:1433 SYN ******S*
Sep 6 09:30:50 222.134.202.42:1132 -> xxx.yyy.1.11:1433 SYN ******S*
[...]
Sep 6 11:43:14 222.134.202.42:1818 -> xxx.yyy.148.201:1433 SYN ******S*
Sep 6 11:43:14 222.134.202.42:1829 -> xxx.yyy.148.205:1433 SYN ******S*
Sep 6 11:43:14 222.134.202.42:1842 -> xxx.yyy.148.210:1433 SYN ******S*
Sep 6 11:43:14 222.134.202.42:1831 -> xxx.yyy.148.207:1433 SYN ******S*
Sep 6 11:43:14 222.134.202.42:1849 -> xxx.yyy.148.213:1433 SYN ******S*
Sep 6 11:43:14 222.134.202.42:1854 -> xxx.yyy.148.214:1433 SYN ******S*
Sep 6 11:43:14 222.134.202.42:2003 -> xxx.yyy.148.217:1433 SYN ******S*
Sep 6 11:43:15 222.134.202.42:1468 -> xxx.yyy.148.118:1433 SYN ******S*
40985
Sep 6 23:46:52 134.2.125.210:3414 -> xxx.yyy.1.1:1433 SYN ******S*
Sep 6 23:46:55 134.2.125.210:3417 -> xxx.yyy.1.4:1433 SYN ******S*
Sep 6 23:46:55 134.2.125.210:3418 -> xxx.yyy.1.5:1433 SYN ******S*
Sep 6 23:46:55 134.2.125.210:3419 -> xxx.yyy.1.6:1433 SYN ******S*
Sep 6 23:46:55 134.2.125.210:3420 -> xxx.yyy.1.7:1433 SYN ******S*
Sep 6 23:46:55 134.2.125.210:3422 -> xxx.yyy.1.9:1433 SYN ******S*
Sep 6 23:46:52 134.2.125.210:3423 -> xxx.yyy.1.10:1433 SYN ******S*
Sep 6 23:46:52 134.2.125.210:3424 -> xxx.yyy.1.11:1433 SYN ******S*
[...]
Sep 6 23:58:33 134.2.125.210:2020 -> xxx.yyy.255.242:1433 SYN ******S*
Sep 6 23:58:33 134.2.125.210:2022 -> xxx.yyy.255.244:1433 SYN ******S*
Sep 6 23:58:33 134.2.125.210:2021 -> xxx.yyy.255.243:1433 SYN ******S*
Sep 6 23:58:33 134.2.125.210:2023 -> xxx.yyy.255.245:1433 SYN ******S*
Sep 6 23:58:33 134.2.125.210:2025 -> xxx.yyy.255.247:1433 SYN ******S*
Sep 6 23:58:33 134.2.125.210:2026 -> xxx.yyy.255.248:1433 SYN ******S*
Sep 6 23:58:33 134.2.125.210:2027 -> xxx.yyy.255.249:1433 SYN ******S*
Sep 6 23:58:33 134.2.125.210:2029 -> xxx.yyy.255.251:1433 SYN ******S*
Sep 6 23:58:33 134.2.125.210:2028 -> xxx.yyy.255.250:1433 SYN ******S*
39867
Sep 6 13:38:08 151.205.10.194:2454 -> xxx.yyy.10.0:1433 SYN ******S*
Sep 6 13:38:08 151.205.10.194:2460 -> xxx.yyy.10.3:1433 SYN ******S*
Sep 6 13:38:08 151.205.10.194:2461 -> xxx.yyy.10.4:1433 SYN ******S*
Sep 6 13:38:09 151.205.10.194:2463 -> xxx.yyy.10.5:1433 SYN ******S*
Sep 6 13:38:09 151.205.10.194:2481 -> xxx.yyy.10.6:1433 SYN ******S*
Sep 6 13:38:08 151.205.10.194:2458 -> xxx.yyy.10.2:1433 SYN ******S*
Sep 6 13:38:08 151.205.10.194:2456 -> xxx.yyy.10.1:1433 SYN ******S*
Sep 6 13:38:13 151.205.10.194:2553 -> xxx.yyy.10.7:1433 SYN ******S*
[...]
Sep 6 15:31:17 151.205.10.194:2683 -> xxx.yyy.135.61:1433 SYN ******S*
Sep 6 15:31:17 151.205.10.194:2667 -> xxx.yyy.135.45:1433 SYN ******S*
Sep 6 15:31:17 151.205.10.194:2684 -> xxx.yyy.135.62:1433 SYN ******S*
Sep 6 15:31:18 151.205.10.194:2686 -> xxx.yyy.135.64:1433 SYN ******S*
Sep 6 15:31:18 151.205.10.194:2687 -> xxx.yyy.135.65:1433 SYN ******S*
Sep 6 15:31:18 151.205.10.194:2670 -> xxx.yyy.135.48:1433 SYN ******S*
Sep 6 15:31:18 151.205.10.194:2671 -> xxx.yyy.135.49:1433 SYN ******S*
Sep 6 15:31:18 151.205.10.194:2688 -> xxx.yyy.135.66:1433 SYN ******S*
Sep 6 15:31:18 151.205.10.194:2639 -> xxx.yyy.135.17:1433 SYN ******S*
32460
Sep 6 00:17:11 24.214.214.61:4629 -> xxx.yyy.1.0:1433 SYN ******S*
Sep 6 00:17:11 24.214.214.61:4630 -> xxx.yyy.1.1:1433 SYN ******S*
Sep 6 00:17:11 24.214.214.61:4631 -> xxx.yyy.1.2:1433 SYN ******S*
Sep 6 00:17:12 24.214.214.61:4637 -> xxx.yyy.1.3:1433 SYN ******S*
Sep 6 00:17:12 24.214.214.61:4638 -> xxx.yyy.1.4:1433 SYN ******S*
Sep 6 00:17:12 24.214.214.61:4642 -> xxx.yyy.1.5:1433 SYN ******S*
Sep 6 00:17:12 24.214.214.61:4643 -> xxx.yyy.1.6:1433 SYN ******S*
Sep 6 00:17:12 24.214.214.61:4645 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Sep 6 11:27:26 24.214.214.61:3246 -> xxx.yyy.95.247:1433 SYN ******S*
Sep 6 11:27:27 24.214.214.61:3240 -> xxx.yyy.95.245:1433 SYN ******S*
Sep 6 11:27:27 24.214.214.61:3234 -> xxx.yyy.95.244:1433 SYN ******S*
Sep 6 11:27:27 24.214.214.61:3280 -> xxx.yyy.95.255:1433 SYN ******S*
Sep 6 11:27:27 24.214.214.61:3276 -> xxx.yyy.95.254:1433 SYN ******S*
Sep 6 11:27:27 24.214.214.61:3270 -> xxx.yyy.95.253:1433 SYN ******S*
Sep 6 11:27:27 24.214.214.61:3268 -> xxx.yyy.95.252:1433 SYN ******S*
Sep 6 11:27:27 24.214.214.61:3264 -> xxx.yyy.95.251:1433 SYN ******S*
26417
Sep 6 11:30:27 80.180.211.71:3679 -> xxx.yyy.1.0:1433 SYN ******S*
Sep 6 11:30:30 80.180.211.71:3680 -> xxx.yyy.1.1:1433 SYN ******S*
Sep 6 11:30:30 80.180.211.71:3682 -> xxx.yyy.1.2:1433 SYN ******S*
Sep 6 11:30:30 80.180.211.71:3683 -> xxx.yyy.1.3:1433 SYN ******S*
Sep 6 11:30:30 80.180.211.71:3684 -> xxx.yyy.1.4:1433 SYN ******S*
Sep 6 11:30:30 80.180.211.71:3685 -> xxx.yyy.1.5:1433 SYN ******S*
Sep 6 11:30:30 80.180.211.71:3686 -> xxx.yyy.1.6:1433 SYN ******S*
Sep 6 11:30:30 80.180.211.71:3687 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Sep 6 13:10:06 80.180.211.71:3268 -> xxx.yyy.111.228:1433 SYN ******S*
Sep 6 13:10:06 80.180.211.71:3287 -> xxx.yyy.111.229:1433 SYN ******S*
Sep 6 13:10:06 80.180.211.71:3297 -> xxx.yyy.111.231:1433 SYN ******S*
Sep 6 13:10:06 80.180.211.71:3295 -> xxx.yyy.111.230:1433 SYN ******S*
Sep 6 13:10:06 80.180.211.71:3311 -> xxx.yyy.111.233:1433 SYN ******S*
Sep 6 13:10:06 80.180.211.71:3306 -> xxx.yyy.111.232:1433 SYN ******S*
Sep 6 13:10:06 80.180.211.71:3323 -> xxx.yyy.111.234:1433 SYN ******S*
Sep 6 13:10:07 80.180.211.71:3328 -> xxx.yyy.111.235:1433 SYN ******S*
Sep 6 13:10:07 80.180.211.71:3330 -> xxx.yyy.111.236:1433 SYN ******S*
26274
[...]
21759
Sep 6 14:26:33 193.198.140.198:1898 -> xxx.yyy.78.68:1433 SYN ******S*
Sep 6 14:26:30 193.198.140.198:1902 -> xxx.yyy.78.69:1433 SYN ******S*
Sep 6 14:26:30 193.198.140.198:1910 -> xxx.yyy.78.71:1433 SYN ******S*
Sep 6 14:26:33 193.198.140.198:1914 -> xxx.yyy.78.72:1433 SYN ******S*
Sep 6 14:26:30 193.198.140.198:1941 -> xxx.yyy.78.78:1433 SYN ******S*
Sep 6 14:26:30 193.198.140.198:1949 -> xxx.yyy.78.80:1433 SYN ******S*
Sep 6 14:26:30 193.198.140.198:1957 -> xxx.yyy.78.82:1433 SYN ******S*
Sep 6 14:26:33 193.198.140.198:1961 -> xxx.yyy.78.83:1433 SYN ******S*
[...]
Sep 6 15:12:24 193.198.140.198:1340 -> xxx.yyy.129.108:1433 SYN ******S*
Sep 6 15:12:24 193.198.140.198:1337 -> xxx.yyy.129.107:1433 SYN ******S*
Sep 6 15:12:24 193.198.140.198:1334 -> xxx.yyy.129.106:1433 SYN ******S*
Sep 6 15:12:25 193.198.140.198:1490 -> xxx.yyy.129.112:1433 SYN ******S*
Sep 6 15:12:26 193.198.140.198:1519 -> xxx.yyy.129.113:1433 SYN ******S*
Sep 6 15:12:27 193.198.140.198:1544 -> xxx.yyy.129.114:1433 SYN ******S*
Sep 6 15:12:27 193.198.140.198:1546 -> xxx.yyy.129.115:1433 SYN ******S*
Sep 6 15:12:27 193.198.140.198:1547 -> xxx.yyy.129.116:1433 SYN ******S*
Sep 6 15:12:27 193.198.140.198:1549 -> xxx.yyy.129.117:1433 SYN ******S*
13804
Sep 6 17:33:11 217.71.208.70:111 -> xxx.yyy.1.1:111 SYN ******S*
Sep 6 17:33:11 217.71.208.70:111 -> xxx.yyy.1.2:111 SYN ******S*
Sep 6 17:33:11 217.71.208.70:111 -> xxx.yyy.1.3:111 SYN ******S*
Sep 6 17:33:11 217.71.208.70:111 -> xxx.yyy.1.4:111 SYN ******S*
Sep 6 17:33:11 217.71.208.70:111 -> xxx.yyy.1.5:111 SYN ******S*
Sep 6 17:33:11 217.71.208.70:111 -> xxx.yyy.1.6:111 SYN ******S*
Sep 6 17:33:11 217.71.208.70:111 -> xxx.yyy.1.8:111 SYN ******S*
Sep 6 17:33:11 217.71.208.70:111 -> xxx.yyy.1.7:111 SYN ******S*
[...]
Sep 6 17:33:24 217.71.208.70:111 -> xxx.yyy.255.246:111 SYN ******S*
Sep 6 17:33:24 217.71.208.70:111 -> xxx.yyy.255.247:111 SYN ******S*
Sep 6 17:33:24 217.71.208.70:111 -> xxx.yyy.255.248:111 SYN ******S*
Sep 6 17:33:24 217.71.208.70:111 -> xxx.yyy.255.249:111 SYN ******S*
Sep 6 17:33:24 217.71.208.70:111 -> xxx.yyy.255.250:111 SYN ******S*
Sep 6 17:33:24 217.71.208.70:111 -> xxx.yyy.255.251:111 SYN ******S*
Sep 6 17:33:24 217.71.208.70:111 -> xxx.yyy.255.252:111 SYN ******S*
Sep 6 17:33:24 217.71.208.70:111 -> xxx.yyy.255.253:111 SYN ******S*
Sep 6 17:33:24 217.71.208.70:111 -> xxx.yyy.255.254:111 SYN ******S*
11116
Sep 6 23:54:31 60.35.87.165:3351 -> xxx.yyy.71.162:5554 SYN ******S*
Sep 6 23:54:31 60.35.87.165:3353 -> xxx.yyy.71.164:5554 SYN ******S*
Sep 6 23:54:34 60.35.87.165:4032 -> xxx.yyy.71.164:9898 SYN ******S*
Sep 6 23:54:31 60.35.87.165:3354 -> xxx.yyy.71.165:5554 SYN ******S*
Sep 6 23:54:31 60.35.87.165:3349 -> xxx.yyy.71.160:5554 SYN ******S*
Sep 6 23:54:32 60.35.87.165:3576 -> xxx.yyy.71.160:1023 SYN ******S*
Sep 6 23:54:34 60.35.87.165:4028 -> xxx.yyy.71.160:9898 SYN ******S*
Sep 6 23:54:31 60.35.87.165:3352 -> xxx.yyy.71.163:5554 SYN ******S*
[...]
Sep 6 23:56:03 60.35.87.165:3053 -> xxx.yyy.92.9:9898 SYN ******S*
Sep 6 23:56:03 60.35.87.165:3088 -> xxx.yyy.92.18:9898 SYN ******S*
Sep 6 23:56:03 60.35.87.165:3090 -> xxx.yyy.92.20:9898 SYN ******S*
Sep 6 23:56:03 60.35.87.165:3082 -> xxx.yyy.92.12:9898 SYN ******S*
Sep 6 23:56:03 60.35.87.165:3083 -> xxx.yyy.92.13:9898 SYN ******S*
Sep 6 23:56:03 60.35.87.165:3087 -> xxx.yyy.92.17:9898 SYN ******S*
Sep 6 23:56:04 60.35.87.165:3092 -> xxx.yyy.92.21:9898 SYN ******S*
Sep 6 23:56:04 60.35.87.165:3093 -> xxx.yyy.92.22:9898 SYN ******S*
Sep 6 23:56:04 60.35.87.165:3094 -> xxx.yyy.92.23:9898 SYN ******S*
8399
Sep 6 00:00:12 65.54.188.52:62536 -> xxx.yyy.241.20:80 SYN ******S*
Sep 6 00:00:12 65.54.188.52:62367 -> xxx.yyy.241.255:80 SYN ******S*
Sep 6 00:00:12 65.54.188.52:62535 -> xxx.yyy.241.179:80 SYN ******S*
Sep 6 00:00:12 65.54.188.52:62582 -> xxx.yyy.1.60:80 SYN ******S*
Sep 6 00:00:12 65.54.188.52:62632 -> xxx.yyy.1.13:80 SYN ******S*
Sep 6 00:00:12 65.54.188.52:62724 -> xxx.yyy.210.5:80 SYN ******S*
Sep 6 00:00:13 65.54.188.52:63162 -> xxx.yyy.241.29:80 SYN ******S*
Sep 6 00:00:14 65.54.188.52:63561 -> xxx.yyy.234.52:80 SYN ******S*
[...]
Sep 6 23:50:06 65.54.188.52:16210 -> xxx.yyy.249.31:80 SYN ******S*
Sep 6 23:50:09 65.54.188.52:16241 -> xxx.yyy.227.252:80 SYN ******S*
Sep 6 23:50:06 65.54.188.52:16318 -> xxx.yyy.225.122:204 SYN ******S*
Sep 6 23:50:07 65.54.188.52:16478 -> xxx.yyy.1.13:80 SYN ******S*
Sep 6 23:50:09 65.54.188.52:16667 -> xxx.yyy.241.179:80 SYN ******S*
Sep 6 23:50:15 65.54.188.52:16241 -> xxx.yyy.227.252:80 SYN ******S*
Sep 6 23:50:15 65.54.188.52:16210 -> xxx.yyy.249.31:80 SYN ******S*
Sep 6 23:50:16 65.54.188.52:16318 -> xxx.yyy.225.122:204 SYN ******S*
7952
Sep 6 23:53:36 221.190.110.133:2285 -> xxx.yyy.133.245:5554 SYN ******S*
Sep 6 23:53:36 221.190.110.133:2268 -> xxx.yyy.133.239:5554 SYN ******S*
Sep 6 23:53:37 221.190.110.133:2979 -> xxx.yyy.133.239:1023 SYN ******S*
Sep 6 23:53:39 221.190.110.133:1238 -> xxx.yyy.133.239:9898 SYN ******S*
Sep 6 23:53:36 221.190.110.133:2302 -> xxx.yyy.133.254:5554 SYN ******S*
Sep 6 23:53:37 221.190.110.133:3007 -> xxx.yyy.133.254:1023 SYN ******S*
Sep 6 23:53:36 221.190.110.133:2297 -> xxx.yyy.133.250:5554 SYN ******S*
Sep 6 23:53:36 221.190.110.133:2298 -> xxx.yyy.133.249:5554 SYN ******S*
[...]
Sep 6 23:54:28 221.190.110.133:2941 -> xxx.yyy.141.101:9898 SYN ******S*
Sep 6 23:54:28 221.190.110.133:2934 -> xxx.yyy.141.118:9898 SYN ******S*
Sep 6 23:54:28 221.190.110.133:2938 -> xxx.yyy.141.105:9898 SYN ******S*
Sep 6 23:54:28 221.190.110.133:2967 -> xxx.yyy.141.106:9898 SYN ******S*
Sep 6 23:54:28 221.190.110.133:2968 -> xxx.yyy.141.120:9898 SYN ******S*
Sep 6 23:54:28 221.190.110.133:2995 -> xxx.yyy.141.121:9898 SYN ******S*
Sep 6 23:54:28 221.190.110.133:2999 -> xxx.yyy.141.123:9898 SYN ******S*
Sep 6 23:54:28 221.190.110.133:3000 -> xxx.yyy.141.124:9898 SYN ******S*
Sep 6 23:54:28 221.190.110.133:2994 -> xxx.yyy.141.119:9898 SYN ******S*
7790
Sep 6 13:46:50 193.198.130.211:2306 -> xxx.yyy.1.0:1433 SYN ******S*
Sep 6 13:46:50 193.198.130.211:2307 -> xxx.yyy.1.1:1433 SYN ******S*
Sep 6 13:46:50 193.198.130.211:2308 -> xxx.yyy.1.2:1433 SYN ******S*
Sep 6 13:46:50 193.198.130.211:2309 -> xxx.yyy.1.3:1433 SYN ******S*
Sep 6 13:46:50 193.198.130.211:2310 -> xxx.yyy.1.4:1433 SYN ******S*
Sep 6 13:46:47 193.198.130.211:2313 -> xxx.yyy.1.5:1433 SYN ******S*
Sep 6 13:46:50 193.198.130.211:2314 -> xxx.yyy.1.6:1433 SYN ******S*
Sep 6 13:46:50 193.198.130.211:2315 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Sep 6 14:16:36 193.198.130.211:4421 -> xxx.yyy.33.245:1433 SYN ******S*
Sep 6 14:16:37 193.198.130.211:4428 -> xxx.yyy.33.250:1433 SYN ******S*
Sep 6 14:16:37 193.198.130.211:4430 -> xxx.yyy.33.251:1433 SYN ******S*
Sep 6 14:16:37 193.198.130.211:4427 -> xxx.yyy.33.249:1433 SYN ******S*
Sep 6 14:16:37 193.198.130.211:4431 -> xxx.yyy.33.252:1433 SYN ******S*
Sep 6 14:16:37 193.198.130.211:4434 -> xxx.yyy.33.253:1433 SYN ******S*
Sep 6 14:16:37 193.198.130.211:4436 -> xxx.yyy.33.255:1433 SYN ******S*
Sep 6 14:16:37 193.198.130.211:4435 -> xxx.yyy.33.254:1433 SYN ******S*
7695
Sep 6 00:55:56 61.149.218.75:2850 -> xxx.yyy.133.14:5554 SYN ******S*
Sep 6 00:55:57 61.149.218.75:3478 -> xxx.yyy.133.14:1023 SYN ******S*
Sep 6 00:55:59 61.149.218.75:4768 -> xxx.yyy.133.14:9898 SYN ******S*
Sep 6 00:55:56 61.149.218.75:2851 -> xxx.yyy.133.15:5554 SYN ******S*
Sep 6 00:55:57 61.149.218.75:3480 -> xxx.yyy.133.15:1023 SYN ******S*
Sep 6 00:55:59 61.149.218.75:4784 -> xxx.yyy.133.15:9898 SYN ******S*
Sep 6 00:55:56 61.149.218.75:2857 -> xxx.yyy.133.23:5554 SYN ******S*
Sep 6 00:55:57 61.149.218.75:3489 -> xxx.yyy.133.23:1023 SYN ******S*
[...]
Sep 6 00:56:39 61.149.218.75:2284 -> xxx.yyy.153.37:9898 SYN ******S*
Sep 6 00:56:39 61.149.218.75:2350 -> xxx.yyy.153.96:9898 SYN ******S*
Sep 6 00:56:39 61.149.218.75:2715 -> xxx.yyy.141.102:5554 SYN ******S*
Sep 6 00:56:40 61.149.218.75:3160 -> xxx.yyy.138.30:1023 SYN ******S*
Sep 6 00:56:42 61.149.218.75:4198 -> xxx.yyy.138.30:9898 SYN ******S*
Sep 6 00:56:40 61.149.218.75:3216 -> xxx.yyy.141.102:1023 SYN ******S*
Sep 6 00:56:42 61.149.218.75:4284 -> xxx.yyy.141.102:9898 SYN ******S*
Sep 6 00:56:42 61.149.218.75:1169 -> xxx.yyy.146.30:5554 SYN ******S*
Sep 6 00:56:43 61.149.218.75:1668 -> xxx.yyy.146.30:1023 SYN ******S*
7648
Sep 6 23:51:06 221.152.196.75:1400 -> xxx.yyy.71.204:5554 SYN ******S*
Sep 6 23:51:06 221.152.196.75:1412 -> xxx.yyy.71.196:5554 SYN ******S*
Sep 6 23:51:07 221.152.196.75:2230 -> xxx.yyy.71.196:1023 SYN ******S*
Sep 6 23:51:06 221.152.196.75:1404 -> xxx.yyy.71.201:5554 SYN ******S*
Sep 6 23:51:06 221.152.196.75:1406 -> xxx.yyy.71.199:5554 SYN ******S*
Sep 6 23:51:06 221.152.196.75:1413 -> xxx.yyy.71.195:5554 SYN ******S*
Sep 6 23:51:07 221.152.196.75:2231 -> xxx.yyy.71.195:1023 SYN ******S*
Sep 6 23:51:06 221.152.196.75:1439 -> xxx.yyy.71.175:5554 SYN ******S*
[...]
Sep 6 23:51:46 221.152.196.75:2927 -> xxx.yyy.92.7:9898 SYN ******S*
Sep 6 23:51:46 221.152.196.75:2934 -> xxx.yyy.92.13:9898 SYN ******S*
Sep 6 23:51:46 221.152.196.75:2935 -> xxx.yyy.92.14:9898 SYN ******S*
Sep 6 23:51:46 221.152.196.75:2942 -> xxx.yyy.92.21:9898 SYN ******S*
Sep 6 23:51:46 221.152.196.75:2939 -> xxx.yyy.92.18:9898 SYN ******S*
Sep 6 23:51:46 221.152.196.75:2936 -> xxx.yyy.92.15:9898 SYN ******S*
Sep 6 23:51:46 221.152.196.75:2940 -> xxx.yyy.92.19:9898 SYN ******S*
Sep 6 23:51:46 221.152.196.75:2954 -> xxx.yyy.92.25:9898 SYN ******S*
Sep 6 23:51:46 221.152.196.75:2953 -> xxx.yyy.92.24:9898 SYN ******S*
6593
Sep 6 23:55:39 221.155.112.136:2528 -> xxx.yyy.194.147:5554 SYN ******S*
Sep 6 23:55:42 221.155.112.136:4767 -> xxx.yyy.194.147:9898 SYN ******S*
Sep 6 23:55:39 221.155.112.136:2530 -> xxx.yyy.194.149:5554 SYN ******S*
Sep 6 23:55:40 221.155.112.136:3193 -> xxx.yyy.194.149:1023 SYN ******S*
Sep 6 23:55:39 221.155.112.136:2532 -> xxx.yyy.194.148:5554 SYN ******S*
Sep 6 23:55:42 221.155.112.136:4700 -> xxx.yyy.194.148:9898 SYN ******S*
Sep 6 23:55:39 221.155.112.136:2531 -> xxx.yyy.194.124:5554 SYN ******S*
Sep 6 23:55:39 221.155.112.136:2533 -> xxx.yyy.194.126:5554 SYN ******S*
[...]
Sep 6 23:56:34 221.155.112.136:1642 -> xxx.yyy.214.171:9898 SYN ******S*
Sep 6 23:56:34 221.155.112.136:1671 -> xxx.yyy.214.215:9898 SYN ******S*
Sep 6 23:56:34 221.155.112.136:1673 -> xxx.yyy.214.222:9898 SYN ******S*
Sep 6 23:56:34 221.155.112.136:1674 -> xxx.yyy.214.223:9898 SYN ******S*
Sep 6 23:56:34 221.155.112.136:1678 -> xxx.yyy.214.227:9898 SYN ******S*
Sep 6 23:56:34 221.155.112.136:1694 -> xxx.yyy.214.236:9898 SYN ******S*
Sep 6 23:56:34 221.155.112.136:1724 -> xxx.yyy.194.135:9898 SYN ******S*
Sep 6 23:56:35 221.155.112.136:1834 -> xxx.yyy.194.146:9898 SYN ******S*
Sep 6 23:56:35 221.155.112.136:1841 -> xxx.yyy.194.137:9898 SYN ******S*
6466
Sep 6 00:56:14 220.163.192.71:3107 -> xxx.yyy.214.250:5554 SYN ******S*
Sep 6 00:56:14 220.163.192.71:3110 -> xxx.yyy.214.253:5554 SYN ******S*
Sep 6 00:56:14 220.163.192.71:3111 -> xxx.yyy.214.254:5554 SYN ******S*
Sep 6 00:56:15 220.163.192.71:3744 -> xxx.yyy.214.254:1023 SYN ******S*
Sep 6 00:56:14 220.163.192.71:3118 -> xxx.yyy.215.4:5554 SYN ******S*
Sep 6 00:56:14 220.163.192.71:3124 -> xxx.yyy.215.9:5554 SYN ******S*
Sep 6 00:56:17 220.163.192.71:1385 -> xxx.yyy.215.9:9898 SYN ******S*
Sep 6 00:56:14 220.163.192.71:3126 -> xxx.yyy.215.11:5554 SYN ******S*
[...]
Sep 6 00:56:56 220.163.192.71:2575 -> xxx.yyy.235.26:9898 SYN ******S*
Sep 6 00:56:56 220.163.192.71:2632 -> xxx.yyy.235.35:9898 SYN ******S*
Sep 6 00:56:56 220.163.192.71:2789 -> xxx.yyy.235.49:9898 SYN ******S*
Sep 6 00:56:56 220.163.192.71:2786 -> xxx.yyy.235.48:9898 SYN ******S*
Sep 6 00:56:56 220.163.192.71:2851 -> xxx.yyy.235.62:9898 SYN ******S*
Sep 6 00:56:56 220.163.192.71:2751 -> xxx.yyy.235.41:9898 SYN ******S*
Sep 6 00:56:57 220.163.192.71:2833 -> xxx.yyy.235.55:9898 SYN ******S*
Sep 6 00:56:57 220.163.192.71:2866 -> xxx.yyy.235.64:9898 SYN ******S*
Sep 6 00:56:57 220.163.192.71:2917 -> xxx.yyy.235.79:9898 SYN ******S*
6028
Sep 6 00:56:09 218.66.26.128:3065 -> xxx.yyy.174.2:5554 SYN ******S*
Sep 6 00:56:12 218.66.26.128:4100 -> xxx.yyy.174.2:9898 SYN ******S*
Sep 6 00:56:09 218.66.26.128:3097 -> xxx.yyy.174.3:5554 SYN ******S*
Sep 6 00:56:10 218.66.26.128:3438 -> xxx.yyy.174.3:1023 SYN ******S*
Sep 6 00:56:09 218.66.26.128:3111 -> xxx.yyy.174.4:5554 SYN ******S*
Sep 6 00:56:09 218.66.26.128:3260 -> xxx.yyy.174.7:5554 SYN ******S*
Sep 6 00:56:09 218.66.26.128:3295 -> xxx.yyy.174.8:5554 SYN ******S*
Sep 6 00:56:12 218.66.26.128:4181 -> xxx.yyy.174.8:9898 SYN ******S*
[...]
Sep 6 01:03:03 218.66.26.128:4709 -> xxx.yyy.182.199:9898 SYN ******S*
Sep 6 01:03:03 218.66.26.128:4695 -> xxx.yyy.182.192:9898 SYN ******S*
Sep 6 01:03:03 218.66.26.128:4711 -> xxx.yyy.182.198:9898 SYN ******S*
Sep 6 01:03:03 218.66.26.128:4714 -> xxx.yyy.182.197:9898 SYN ******S*
Sep 6 01:03:04 218.66.26.128:1045 -> xxx.yyy.182.209:9898 SYN ******S*
Sep 6 01:03:04 218.66.26.128:1044 -> xxx.yyy.182.210:9898 SYN ******S*
Sep 6 01:03:04 218.66.26.128:1056 -> xxx.yyy.182.202:9898 SYN ******S*
Sep 6 01:03:04 218.66.26.128:1051 -> xxx.yyy.182.205:9898 SYN ******S*
Sep 6 01:03:04 218.66.26.128:1058 -> xxx.yyy.182.200:9898 SYN ******S*
6003
Sep 6 23:59:29 220.123.249.15:4025 -> xxx.yyy.71.160:5554 SYN ******S*
Sep 6 23:59:32 220.123.249.15:2265 -> xxx.yyy.71.160:9898 SYN ******S*
Sep 6 23:59:29 220.123.249.15:4036 -> xxx.yyy.71.163:5554 SYN ******S*
Sep 6 23:59:30 220.123.249.15:1072 -> xxx.yyy.71.163:1023 SYN ******S*
Sep 6 23:59:32 220.123.249.15:2276 -> xxx.yyy.71.163:9898 SYN ******S*
Sep 6 23:59:29 220.123.249.15:4028 -> xxx.yyy.71.162:5554 SYN ******S*
Sep 6 23:59:30 220.123.249.15:1065 -> xxx.yyy.71.162:1023 SYN ******S*
Sep 6 23:59:32 220.123.249.15:2268 -> xxx.yyy.71.162:9898 SYN ******S*
[...]
Sep 7 00:00:00 220.123.249.15:2709 -> xxx.yyy.86.139:1023 SYN ******S*
Sep 7 00:00:00 220.123.249.15:2718 -> xxx.yyy.86.141:1023 SYN ******S*
Sep 7 00:00:00 220.123.249.15:2716 -> xxx.yyy.87.55:5554 SYN ******S*
Sep 7 00:00:00 220.123.249.15:2962 -> xxx.yyy.86.249:1023 SYN ******S*
Sep 7 00:00:00 220.123.249.15:2961 -> xxx.yyy.87.78:5554 SYN ******S*
Sep 7 00:00:00 220.123.249.15:2963 -> xxx.yyy.86.250:1023 SYN ******S*
Sep 7 00:00:00 220.123.249.15:2966 -> xxx.yyy.86.252:1023 SYN ******S*
Sep 7 00:00:00 220.123.249.15:2999 -> xxx.yyy.85.175:9898 SYN ******S*
Sep 7 00:00:01 220.123.249.15:3034 -> xxx.yyy.87.12:1023 SYN ******S*
5962
Sep 6 23:57:05 221.150.214.210:2208 -> xxx.yyy.72.129:5554 SYN ******S*
Sep 6 23:57:05 221.150.214.210:2205 -> xxx.yyy.72.128:5554 SYN ******S*
Sep 6 23:57:05 221.150.214.210:2214 -> xxx.yyy.72.132:5554 SYN ******S*
Sep 6 23:57:06 221.150.214.210:2802 -> xxx.yyy.72.132:1023 SYN ******S*
Sep 6 23:57:08 221.150.214.210:4985 -> xxx.yyy.72.132:9898 SYN ******S*
Sep 6 23:57:05 221.150.214.210:2213 -> xxx.yyy.72.131:5554 SYN ******S*
Sep 6 23:57:05 221.150.214.210:2281 -> xxx.yyy.72.139:5554 SYN ******S*
Sep 6 23:57:06 221.150.214.210:2903 -> xxx.yyy.72.139:1023 SYN ******S*
[...]
Sep 6 23:58:03 221.150.214.210:1892 -> xxx.yyy.92.224:9898 SYN ******S*
Sep 6 23:58:03 221.150.214.210:1926 -> xxx.yyy.92.226:9898 SYN ******S*
Sep 6 23:58:03 221.150.214.210:1970 -> xxx.yyy.92.240:9898 SYN ******S*
Sep 6 23:58:03 221.150.214.210:1964 -> xxx.yyy.92.236:9898 SYN ******S*
Sep 6 23:58:03 221.150.214.210:1989 -> xxx.yyy.92.241:9898 SYN ******S*
Sep 6 23:58:03 221.150.214.210:1986 -> xxx.yyy.92.242:9898 SYN ******S*
Sep 6 23:58:03 221.150.214.210:2002 -> xxx.yyy.92.246:9898 SYN ******S*
Sep 6 23:58:03 221.150.214.210:2009 -> xxx.yyy.92.245:9898 SYN ******S*
5479
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list