[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Wed Sep 8 11:50:44 GMT 2004
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0500.
Sep 7 04:34:48 82.38.217.122:1483 -> xxx.yyy.1.0:1433 SYN ******S*
Sep 7 04:34:48 82.38.217.122:1486 -> xxx.yyy.1.1:1433 SYN ******S*
Sep 7 04:34:48 82.38.217.122:1488 -> xxx.yyy.1.2:1433 SYN ******S*
Sep 7 04:34:48 82.38.217.122:1489 -> xxx.yyy.1.3:1433 SYN ******S*
Sep 7 04:34:48 82.38.217.122:1492 -> xxx.yyy.1.4:1433 SYN ******S*
Sep 7 04:34:48 82.38.217.122:1494 -> xxx.yyy.1.5:1433 SYN ******S*
Sep 7 04:34:48 82.38.217.122:1496 -> xxx.yyy.1.6:1433 SYN ******S*
Sep 7 04:34:48 82.38.217.122:1498 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Sep 7 08:33:44 82.38.217.122:3724 -> xxx.yyy.255.247:1433 SYN ******S*
Sep 7 08:33:44 82.38.217.122:3722 -> xxx.yyy.255.245:1433 SYN ******S*
Sep 7 08:33:44 82.38.217.122:3734 -> xxx.yyy.255.248:1433 SYN ******S*
Sep 7 08:33:44 82.38.217.122:3742 -> xxx.yyy.255.249:1433 SYN ******S*
Sep 7 08:33:44 82.38.217.122:3749 -> xxx.yyy.255.250:1433 SYN ******S*
Sep 7 08:33:44 82.38.217.122:3763 -> xxx.yyy.255.252:1433 SYN ******S*
Sep 7 08:33:45 82.38.217.122:3756 -> xxx.yyy.255.251:1433 SYN ******S*
Sep 7 08:33:45 82.38.217.122:3774 -> xxx.yyy.255.253:1433 SYN ******S*
Sep 7 08:33:45 82.38.217.122:3787 -> xxx.yyy.255.254:1433 SYN ******S*
119071
Sep 7 13:20:51 195.16.49.195:3140 -> xxx.yyy.1.1:1433 SYN ******S*
Sep 7 13:20:48 195.16.49.195:3146 -> xxx.yyy.1.4:1433 SYN ******S*
Sep 7 13:20:48 195.16.49.195:3159 -> xxx.yyy.1.10:1433 SYN ******S*
Sep 7 13:20:48 195.16.49.195:3161 -> xxx.yyy.1.11:1433 SYN ******S*
Sep 7 13:20:51 195.16.49.195:3168 -> xxx.yyy.1.15:1433 SYN ******S*
Sep 7 13:20:48 195.16.49.195:3170 -> xxx.yyy.1.16:1433 SYN ******S*
Sep 7 13:20:48 195.16.49.195:3177 -> xxx.yyy.1.19:1433 SYN ******S*
Sep 7 13:20:51 195.16.49.195:3178 -> xxx.yyy.1.20:1433 SYN ******S*
[...]
Sep 7 14:43:13 195.16.49.195:4583 -> xxx.yyy.255.202:1433 SYN ******S*
Sep 7 14:43:13 195.16.49.195:4502 -> xxx.yyy.255.197:1433 SYN ******S*
Sep 7 14:43:14 195.16.49.195:4659 -> xxx.yyy.255.207:1433 SYN ******S*
Sep 7 14:43:14 195.16.49.195:4679 -> xxx.yyy.255.210:1433 SYN ******S*
Sep 7 14:43:14 195.16.49.195:4742 -> xxx.yyy.255.217:1433 SYN ******S*
Sep 7 14:43:14 195.16.49.195:4841 -> xxx.yyy.255.226:1433 SYN ******S*
Sep 7 14:43:14 195.16.49.195:4860 -> xxx.yyy.255.235:1433 SYN ******S*
Sep 7 14:43:14 195.16.49.195:4866 -> xxx.yyy.255.238:1433 SYN ******S*
Sep 7 14:43:14 195.16.49.195:4897 -> xxx.yyy.255.250:1433 SYN ******S*
73283
Sep 7 19:02:03 83.130.225.199:3878 -> xxx.yyy.1.0:1433 SYN ******S*
Sep 7 19:02:03 83.130.225.199:3887 -> xxx.yyy.1.4:1433 SYN ******S*
Sep 7 19:02:03 83.130.225.199:3890 -> xxx.yyy.1.5:1433 SYN ******S*
Sep 7 19:02:03 83.130.225.199:3901 -> xxx.yyy.1.10:1433 SYN ******S*
Sep 7 19:02:03 83.130.225.199:3905 -> xxx.yyy.1.12:1433 SYN ******S*
Sep 7 19:02:03 83.130.225.199:3902 -> xxx.yyy.1.11:1433 SYN ******S*
Sep 7 19:02:04 83.130.225.199:3910 -> xxx.yyy.1.14:1433 SYN ******S*
Sep 7 19:02:04 83.130.225.199:3926 -> xxx.yyy.1.21:1433 SYN ******S*
[...]
Sep 7 22:50:48 83.130.225.199:3494 -> xxx.yyy.255.243:1433 SYN ******S*
Sep 7 22:50:48 83.130.225.199:3497 -> xxx.yyy.255.244:1433 SYN ******S*
Sep 7 22:50:49 83.130.225.199:3507 -> xxx.yyy.255.246:1433 SYN ******S*
Sep 7 22:50:49 83.130.225.199:3512 -> xxx.yyy.255.247:1433 SYN ******S*
Sep 7 22:50:49 83.130.225.199:3518 -> xxx.yyy.255.248:1433 SYN ******S*
Sep 7 22:50:49 83.130.225.199:3526 -> xxx.yyy.255.250:1433 SYN ******S*
Sep 7 22:50:49 83.130.225.199:3530 -> xxx.yyy.255.252:1433 SYN ******S*
Sep 7 22:50:50 83.130.225.199:3548 -> xxx.yyy.255.254:1433 SYN ******S*
70021
Sep 7 01:36:47 213.161.195.53:3081 -> xxx.yyy.1.2:2277 SYN ******S*
Sep 7 01:36:47 213.161.195.53:3084 -> xxx.yyy.1.3:2277 SYN ******S*
Sep 7 01:36:45 213.161.195.53:3090 -> xxx.yyy.1.5:2277 SYN ******S*
Sep 7 01:36:45 213.161.195.53:3093 -> xxx.yyy.1.6:2277 SYN ******S*
Sep 7 01:36:45 213.161.195.53:3096 -> xxx.yyy.1.7:2277 SYN ******S*
Sep 7 01:36:45 213.161.195.53:3099 -> xxx.yyy.1.8:2277 SYN ******S*
Sep 7 01:36:45 213.161.195.53:3102 -> xxx.yyy.1.9:2277 SYN ******S*
Sep 7 01:36:45 213.161.195.53:3105 -> xxx.yyy.1.10:2277 SYN ******S*
[...]
Sep 7 01:50:15 213.161.195.53:3687 -> xxx.yyy.255.244:2277 SYN ******S*
Sep 7 01:50:15 213.161.195.53:3709 -> xxx.yyy.255.251:2277 SYN ******S*
Sep 7 01:50:15 213.161.195.53:3703 -> xxx.yyy.255.249:2277 SYN ******S*
Sep 7 01:50:15 213.161.195.53:3697 -> xxx.yyy.255.247:2277 SYN ******S*
Sep 7 01:50:15 213.161.195.53:3690 -> xxx.yyy.255.245:2277 SYN ******S*
Sep 7 01:50:15 213.161.195.53:3706 -> xxx.yyy.255.250:2277 SYN ******S*
Sep 7 01:50:15 213.161.195.53:3714 -> xxx.yyy.255.253:2277 SYN ******S*
Sep 7 01:50:15 213.161.195.53:3717 -> xxx.yyy.255.254:2277 SYN ******S*
66640
Sep 7 14:06:43 82.80.48.138:3167 -> xxx.yyy.1.2:1433 SYN ******S*
Sep 7 14:06:43 82.80.48.138:3168 -> xxx.yyy.1.3:1433 SYN ******S*
Sep 7 14:06:47 82.80.48.138:3169 -> xxx.yyy.1.4:1433 SYN ******S*
Sep 7 14:06:47 82.80.48.138:3172 -> xxx.yyy.1.6:1433 SYN ******S*
Sep 7 14:06:47 82.80.48.138:3174 -> xxx.yyy.1.7:1433 SYN ******S*
Sep 7 14:06:44 82.80.48.138:3176 -> xxx.yyy.1.8:1433 SYN ******S*
Sep 7 14:06:44 82.80.48.138:3177 -> xxx.yyy.1.9:1433 SYN ******S*
Sep 7 14:06:47 82.80.48.138:3178 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
Sep 7 17:55:29 82.80.48.138:4066 -> xxx.yyy.255.244:1433 SYN ******S*
Sep 7 17:55:29 82.80.48.138:4070 -> xxx.yyy.255.245:1433 SYN ******S*
Sep 7 17:55:30 82.80.48.138:4083 -> xxx.yyy.255.249:1433 SYN ******S*
Sep 7 17:55:30 82.80.48.138:4082 -> xxx.yyy.255.248:1433 SYN ******S*
Sep 7 17:55:30 82.80.48.138:4087 -> xxx.yyy.255.250:1433 SYN ******S*
Sep 7 17:55:31 82.80.48.138:4099 -> xxx.yyy.255.252:1433 SYN ******S*
Sep 7 17:55:31 82.80.48.138:4103 -> xxx.yyy.255.253:1433 SYN ******S*
Sep 7 17:55:31 82.80.48.138:4109 -> xxx.yyy.255.254:1433 SYN ******S*
65251
Sep 7 13:27:44 69.30.195.139:3539 -> xxx.yyy.1.2:1433 SYN ******S*
Sep 7 13:27:44 69.30.195.139:3550 -> xxx.yyy.1.6:1433 SYN ******S*
Sep 7 13:27:44 69.30.195.139:3561 -> xxx.yyy.1.10:1433 SYN ******S*
Sep 7 13:27:47 69.30.195.139:3564 -> xxx.yyy.1.13:1433 SYN ******S*
Sep 7 13:27:47 69.30.195.139:3568 -> xxx.yyy.1.14:1433 SYN ******S*
Sep 7 13:27:47 69.30.195.139:3576 -> xxx.yyy.1.15:1433 SYN ******S*
Sep 7 13:27:47 69.30.195.139:3579 -> xxx.yyy.1.16:1433 SYN ******S*
Sep 7 13:27:47 69.30.195.139:3582 -> xxx.yyy.1.17:1433 SYN ******S*
[...]
Sep 7 13:38:42 69.30.195.139:2840 -> xxx.yyy.255.250:1433 SYN ******S*
Sep 7 13:38:42 69.30.195.139:2794 -> xxx.yyy.255.246:1433 SYN ******S*
Sep 7 13:38:42 69.30.195.139:2824 -> xxx.yyy.255.247:1433 SYN ******S*
Sep 7 13:38:42 69.30.195.139:2842 -> xxx.yyy.255.251:1433 SYN ******S*
Sep 7 13:38:42 69.30.195.139:2845 -> xxx.yyy.255.253:1433 SYN ******S*
Sep 7 13:38:42 69.30.195.139:2835 -> xxx.yyy.255.249:1433 SYN ******S*
Sep 7 13:38:42 69.30.195.139:2843 -> xxx.yyy.255.252:1433 SYN ******S*
Sep 7 13:38:42 69.30.195.139:2827 -> xxx.yyy.255.248:1433 SYN ******S*
Sep 7 13:38:42 69.30.195.139:2852 -> xxx.yyy.255.254:1433 SYN ******S*
37839
Sep 7 13:44:33 130.228.96.156:2276 -> xxx.yyy.1.1:62976 SYN ******S*
Sep 7 13:44:34 130.228.96.156:2278 -> xxx.yyy.1.2:62976 SYN ******S*
Sep 7 13:44:35 130.228.96.156:2284 -> xxx.yyy.1.5:62976 SYN ******S*
Sep 7 13:44:33 130.228.96.156:2290 -> xxx.yyy.1.8:62976 SYN ******S*
Sep 7 13:44:33 130.228.96.156:2294 -> xxx.yyy.1.10:62976 SYN ******S*
Sep 7 13:44:33 130.228.96.156:2296 -> xxx.yyy.1.11:62976 SYN ******S*
Sep 7 13:44:33 130.228.96.156:2298 -> xxx.yyy.1.12:62976 SYN ******S*
Sep 7 13:44:36 130.228.96.156:2305 -> xxx.yyy.1.15:62976 SYN ******S*
[...]
Sep 7 13:56:22 130.228.96.156:2865 -> xxx.yyy.255.240:62976 SYN ******S*
Sep 7 13:56:22 130.228.96.156:2857 -> xxx.yyy.255.236:62976 SYN ******S*
Sep 7 13:56:22 130.228.96.156:2853 -> xxx.yyy.255.234:62976 SYN ******S*
Sep 7 13:56:22 130.228.96.156:2859 -> xxx.yyy.255.237:62976 SYN ******S*
Sep 7 13:56:22 130.228.96.156:2873 -> xxx.yyy.255.244:62976 SYN ******S*
Sep 7 13:56:22 130.228.96.156:2877 -> xxx.yyy.255.246:62976 SYN ******S*
Sep 7 13:56:22 130.228.96.156:2889 -> xxx.yyy.255.252:62976 SYN ******S*
Sep 7 13:56:22 130.228.96.156:2893 -> xxx.yyy.255.254:62976 SYN ******S*
Sep 7 13:56:22 130.228.96.156:2891 -> xxx.yyy.255.253:62976 SYN ******S*
35469
Sep 7 15:29:09 66.232.140.124:3407 -> xxx.yyy.1.3:1433 SYN ******S*
Sep 7 15:29:09 66.232.140.124:3408 -> xxx.yyy.1.4:1433 SYN ******S*
Sep 7 15:29:09 66.232.140.124:3411 -> xxx.yyy.1.7:1433 SYN ******S*
Sep 7 15:29:09 66.232.140.124:3412 -> xxx.yyy.1.8:1433 SYN ******S*
Sep 7 15:29:09 66.232.140.124:3409 -> xxx.yyy.1.5:1433 SYN ******S*
Sep 7 15:29:09 66.232.140.124:3416 -> xxx.yyy.1.12:1433 SYN ******S*
Sep 7 15:29:09 66.232.140.124:3417 -> xxx.yyy.1.13:1433 SYN ******S*
Sep 7 15:29:12 66.232.140.124:3419 -> xxx.yyy.1.15:1433 SYN ******S*
[...]
Sep 7 15:40:51 66.232.140.124:2064 -> xxx.yyy.255.246:1433 SYN ******S*
Sep 7 15:40:51 66.232.140.124:2059 -> xxx.yyy.255.241:1433 SYN ******S*
Sep 7 15:40:51 66.232.140.124:2057 -> xxx.yyy.255.239:1433 SYN ******S*
Sep 7 15:40:51 66.232.140.124:2060 -> xxx.yyy.255.242:1433 SYN ******S*
Sep 7 15:40:51 66.232.140.124:2061 -> xxx.yyy.255.243:1433 SYN ******S*
Sep 7 15:40:51 66.232.140.124:2072 -> xxx.yyy.255.254:1433 SYN ******S*
Sep 7 15:40:51 66.232.140.124:2069 -> xxx.yyy.255.251:1433 SYN ******S*
Sep 7 15:40:51 66.232.140.124:2070 -> xxx.yyy.255.252:1433 SYN ******S*
34185
Sep 7 19:07:46 213.180.193.68:54403 -> xxx.yyy.1.96:17210 SYN ******S*
Sep 7 19:07:46 213.180.193.68:54403 -> xxx.yyy.1.96:23036 SYN ******S*
Sep 7 19:07:46 213.180.193.68:54403 -> xxx.yyy.1.96:53781 SYN ******S*
Sep 7 19:07:46 213.180.193.68:54403 -> xxx.yyy.1.96:20403 SYN ******S*
Sep 7 19:07:46 213.180.193.68:54403 -> xxx.yyy.1.96:64990 SYN ******S*
Sep 7 19:07:46 213.180.193.68:54403 -> xxx.yyy.1.96:56030 SYN ******S*
Sep 7 19:07:46 213.180.193.68:54403 -> xxx.yyy.1.96:27402 SYN ******S*
Sep 7 19:07:46 213.180.193.68:54403 -> xxx.yyy.1.96:54908 SYN ******S*
[...]
Sep 7 19:15:46 213.180.193.68:54408 -> xxx.yyy.1.96:6020 SYN ******S*
Sep 7 19:15:46 213.180.193.68:54408 -> xxx.yyy.1.96:6014 SYN ******S*
Sep 7 19:15:46 213.180.193.68:54408 -> xxx.yyy.1.96:6001 SYN ******S*
Sep 7 19:48:01 213.180.193.68:49944 -> xxx.yyy.1.96:22 SYN ******S*
Sep 7 19:48:01 213.180.193.68:40804 -> xxx.yyy.1.96:465 SYN ******S*
Sep 7 19:48:01 213.180.193.68:44844 -> xxx.yyy.1.96:8009 SYN ******S*
Sep 7 19:48:01 213.180.193.68:61826 -> xxx.yyy.1.96:8080 SYN ******S*
Sep 7 19:48:01 213.180.193.68:63175 -> xxx.yyy.1.96:10443 SYN ******S*
Sep 7 19:48:01 213.180.193.68:36822 -> xxx.yyy.1.96:20022 SYN ******S*
33338
Sep 7 10:00:16 218.4.49.178:3762 -> xxx.yyy.1.3:1433 SYN ******S*
Sep 7 10:00:16 218.4.49.178:3765 -> xxx.yyy.1.2:1433 SYN ******S*
Sep 7 10:00:16 218.4.49.178:3769 -> xxx.yyy.1.8:1433 SYN ******S*
Sep 7 10:00:16 218.4.49.178:3770 -> xxx.yyy.1.9:1433 SYN ******S*
Sep 7 10:00:19 218.4.49.178:3771 -> xxx.yyy.1.10:1433 SYN ******S*
Sep 7 10:00:19 218.4.49.178:3775 -> xxx.yyy.1.14:1433 SYN ******S*
Sep 7 10:00:17 218.4.49.178:3782 -> xxx.yyy.1.21:1433 SYN ******S*
Sep 7 10:00:17 218.4.49.178:3784 -> xxx.yyy.1.23:1433 SYN ******S*
[...]
Sep 7 10:11:20 218.4.49.178:4776 -> xxx.yyy.255.239:1433 SYN ******S*
Sep 7 10:11:20 218.4.49.178:4786 -> xxx.yyy.255.249:1433 SYN ******S*
Sep 7 10:11:20 218.4.49.178:4779 -> xxx.yyy.255.242:1433 SYN ******S*
Sep 7 10:11:20 218.4.49.178:4782 -> xxx.yyy.255.245:1433 SYN ******S*
Sep 7 10:11:20 218.4.49.178:4787 -> xxx.yyy.255.250:1433 SYN ******S*
Sep 7 10:11:20 218.4.49.178:4781 -> xxx.yyy.255.244:1433 SYN ******S*
Sep 7 10:11:20 218.4.49.178:4780 -> xxx.yyy.255.243:1433 SYN ******S*
Sep 7 10:11:20 218.4.49.178:4783 -> xxx.yyy.255.246:1433 SYN ******S*
31220
Sep 7 14:13:44 143.233.244.10:1411 -> xxx.yyy.1.1:8000 SYN ******S*
Sep 7 14:13:43 143.233.244.10:1417 -> xxx.yyy.1.7:8000 SYN ******S*
Sep 7 14:13:44 143.233.244.10:1423 -> xxx.yyy.1.13:8000 SYN ******S*
Sep 7 14:13:44 143.233.244.10:1424 -> xxx.yyy.1.14:8000 SYN ******S*
Sep 7 14:13:43 143.233.244.10:1426 -> xxx.yyy.1.16:8000 SYN ******S*
Sep 7 14:13:44 143.233.244.10:1427 -> xxx.yyy.1.17:8000 SYN ******S*
Sep 7 14:13:44 143.233.244.10:1431 -> xxx.yyy.1.21:8000 SYN ******S*
Sep 7 14:13:43 143.233.244.10:1434 -> xxx.yyy.1.24:8000 SYN ******S*
[...]
Sep 7 14:22:00 143.233.244.10:1621 -> xxx.yyy.255.252:8000 SYN ******S*
Sep 7 14:22:00 143.233.244.10:1605 -> xxx.yyy.255.236:8000 SYN ******S*
Sep 7 14:22:00 143.233.244.10:1570 -> xxx.yyy.255.201:8000 SYN ******S*
Sep 7 14:22:00 143.233.244.10:1602 -> xxx.yyy.255.233:8000 SYN ******S*
Sep 7 14:22:00 143.233.244.10:1586 -> xxx.yyy.255.217:8000 SYN ******S*
Sep 7 14:22:00 143.233.244.10:1567 -> xxx.yyy.255.198:8000 SYN ******S*
Sep 7 14:22:00 143.233.244.10:1599 -> xxx.yyy.255.230:8000 SYN ******S*
Sep 7 14:22:00 143.233.244.10:1615 -> xxx.yyy.255.246:8000 SYN ******S*
30051
Sep 7 09:55:48 211.229.89.88:4069 -> xxx.yyy.1.1:4899 SYN ******S*
Sep 7 09:55:47 211.229.89.88:4072 -> xxx.yyy.1.4:4899 SYN ******S*
Sep 7 09:55:47 211.229.89.88:4073 -> xxx.yyy.1.5:4899 SYN ******S*
Sep 7 09:55:47 211.229.89.88:4076 -> xxx.yyy.1.8:4899 SYN ******S*
Sep 7 09:55:47 211.229.89.88:4074 -> xxx.yyy.1.6:4899 SYN ******S*
Sep 7 09:55:47 211.229.89.88:4077 -> xxx.yyy.1.9:4899 SYN ******S*
Sep 7 09:55:47 211.229.89.88:4080 -> xxx.yyy.1.12:4899 SYN ******S*
Sep 7 09:55:47 211.229.89.88:4078 -> xxx.yyy.1.10:4899 SYN ******S*
[...]
Sep 7 10:02:47 211.229.89.88:2220 -> xxx.yyy.255.238:4899 SYN ******S*
Sep 7 10:02:47 211.229.89.88:2221 -> xxx.yyy.255.239:4899 SYN ******S*
Sep 7 10:02:47 211.229.89.88:2224 -> xxx.yyy.255.242:4899 SYN ******S*
Sep 7 10:02:47 211.229.89.88:2225 -> xxx.yyy.255.243:4899 SYN ******S*
Sep 7 10:02:47 211.229.89.88:2226 -> xxx.yyy.255.244:4899 SYN ******S*
Sep 7 10:02:47 211.229.89.88:2228 -> xxx.yyy.255.246:4899 SYN ******S*
Sep 7 10:02:47 211.229.89.88:2230 -> xxx.yyy.255.248:4899 SYN ******S*
Sep 7 10:02:48 211.229.89.88:2235 -> xxx.yyy.255.253:4899 SYN ******S*
Sep 7 10:02:48 211.229.89.88:2233 -> xxx.yyy.255.251:4899 SYN ******S*
29096
Sep 7 11:53:18 218.20.224.86:1401 -> xxx.yyy.1.3:1433 SYN ******S*
Sep 7 11:53:19 218.20.224.86:1406 -> xxx.yyy.1.8:1433 SYN ******S*
Sep 7 11:53:16 218.20.224.86:1412 -> xxx.yyy.1.14:1433 SYN ******S*
Sep 7 11:53:19 218.20.224.86:1419 -> xxx.yyy.1.21:1433 SYN ******S*
Sep 7 11:53:16 218.20.224.86:1421 -> xxx.yyy.1.23:1433 SYN ******S*
Sep 7 11:53:16 218.20.224.86:1416 -> xxx.yyy.1.18:1433 SYN ******S*
Sep 7 11:53:16 218.20.224.86:1424 -> xxx.yyy.1.26:1433 SYN ******S*
Sep 7 11:53:16 218.20.224.86:1433 -> xxx.yyy.1.35:1433 SYN ******S*
[...]
Sep 7 12:10:31 218.20.224.86:2496 -> xxx.yyy.255.233:1433 SYN ******S*
Sep 7 12:10:31 218.20.224.86:2489 -> xxx.yyy.255.226:1433 SYN ******S*
Sep 7 12:10:31 218.20.224.86:2500 -> xxx.yyy.255.237:1433 SYN ******S*
Sep 7 12:10:31 218.20.224.86:2493 -> xxx.yyy.255.230:1433 SYN ******S*
Sep 7 12:10:31 218.20.224.86:2495 -> xxx.yyy.255.232:1433 SYN ******S*
Sep 7 12:10:31 218.20.224.86:2510 -> xxx.yyy.255.247:1433 SYN ******S*
Sep 7 12:10:32 218.20.224.86:2509 -> xxx.yyy.255.246:1433 SYN ******S*
Sep 7 12:10:32 218.20.224.86:2511 -> xxx.yyy.255.248:1433 SYN ******S*
Sep 7 12:10:32 218.20.224.86:2515 -> xxx.yyy.255.252:1433 SYN ******S*
28910
Sep 7 00:13:33 212.56.135.148:2063 -> xxx.yyy.1.8:80 SYN ******S*
Sep 7 00:13:30 212.56.135.148:2064 -> xxx.yyy.1.9:80 SYN ******S*
Sep 7 00:13:30 212.56.135.148:2074 -> xxx.yyy.1.17:80 SYN ******S*
Sep 7 00:13:33 212.56.135.148:2075 -> xxx.yyy.1.18:80 SYN ******S*
Sep 7 00:13:30 212.56.135.148:2093 -> xxx.yyy.1.35:80 SYN ******S*
Sep 7 00:13:30 212.56.135.148:2101 -> xxx.yyy.1.43:80 SYN ******S*
Sep 7 00:13:33 212.56.135.148:2110 -> xxx.yyy.1.52:80 SYN ******S*
Sep 7 00:13:30 212.56.135.148:2121 -> xxx.yyy.1.61:80 SYN ******S*
[...]
Sep 7 00:22:22 212.56.135.148:1264 -> xxx.yyy.255.219:80 SYN ******S*
Sep 7 00:22:22 212.56.135.148:1301 -> xxx.yyy.255.254:80 SYN ******S*
Sep 7 00:22:22 212.56.135.148:1298 -> xxx.yyy.255.251:80 SYN ******S*
Sep 7 00:22:22 212.56.135.148:1294 -> xxx.yyy.255.248:80 SYN ******S*
Sep 7 00:22:22 212.56.135.148:1271 -> xxx.yyy.255.226:80 SYN ******S*
Sep 7 00:22:22 212.56.135.148:1284 -> xxx.yyy.255.239:80 SYN ******S*
Sep 7 00:22:22 212.56.135.148:1268 -> xxx.yyy.255.223:80 SYN ******S*
Sep 7 00:22:22 212.56.135.148:1281 -> xxx.yyy.255.236:80 SYN ******S*
21833
Sep 7 21:49:12 24.45.180.116:4971 -> xxx.yyy.1.1:1433 SYN ******S*
Sep 7 21:49:12 24.45.180.116:4972 -> xxx.yyy.1.2:1433 SYN ******S*
Sep 7 21:49:12 24.45.180.116:4973 -> xxx.yyy.1.3:1433 SYN ******S*
Sep 7 21:49:12 24.45.180.116:4974 -> xxx.yyy.1.4:1433 SYN ******S*
Sep 7 21:49:12 24.45.180.116:4976 -> xxx.yyy.1.6:1433 SYN ******S*
Sep 7 21:49:12 24.45.180.116:4978 -> xxx.yyy.1.7:1433 SYN ******S*
Sep 7 21:49:12 24.45.180.116:4979 -> xxx.yyy.1.8:1433 SYN ******S*
Sep 7 21:49:12 24.45.180.116:4981 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
Sep 7 21:57:49 24.45.180.116:3343 -> xxx.yyy.255.240:1433 SYN ******S*
Sep 7 21:57:49 24.45.180.116:3345 -> xxx.yyy.255.242:1433 SYN ******S*
Sep 7 21:57:49 24.45.180.116:3346 -> xxx.yyy.255.243:1433 SYN ******S*
Sep 7 21:57:49 24.45.180.116:3348 -> xxx.yyy.255.245:1433 SYN ******S*
Sep 7 21:57:49 24.45.180.116:3349 -> xxx.yyy.255.246:1433 SYN ******S*
Sep 7 21:57:49 24.45.180.116:3351 -> xxx.yyy.255.248:1433 SYN ******S*
Sep 7 21:57:49 24.45.180.116:3352 -> xxx.yyy.255.249:1433 SYN ******S*
Sep 7 21:57:49 24.45.180.116:3353 -> xxx.yyy.255.250:1433 SYN ******S*
Sep 7 21:57:49 24.45.180.116:3355 -> xxx.yyy.255.252:1433 SYN ******S*
21147
Sep 7 22:36:31 200.155.57.92:3647 -> xxx.yyy.1.30:1433 SYN ******S*
Sep 7 22:36:31 200.155.57.92:3692 -> xxx.yyy.1.35:1433 SYN ******S*
Sep 7 22:36:31 200.155.57.92:3693 -> xxx.yyy.1.36:1433 SYN ******S*
Sep 7 22:36:34 200.155.57.92:3706 -> xxx.yyy.1.43:1433 SYN ******S*
Sep 7 22:36:32 200.155.57.92:3224 -> xxx.yyy.1.0:1433 SYN ******S*
Sep 7 22:36:32 200.155.57.92:3241 -> xxx.yyy.1.1:1433 SYN ******S*
Sep 7 22:36:32 200.155.57.92:3249 -> xxx.yyy.1.2:1433 SYN ******S*
Sep 7 22:36:33 200.155.57.92:3255 -> xxx.yyy.1.3:1433 SYN ******S*
[...]
Sep 7 23:59:59 200.155.57.92:3119 -> xxx.yyy.94.7:1433 SYN ******S*
Sep 7 23:59:59 200.155.57.92:3120 -> xxx.yyy.94.8:1433 SYN ******S*
Sep 8 00:00:00 200.155.57.92:4917 -> xxx.yyy.93.224:1433 SYN ******S*
Sep 8 00:00:00 200.155.57.92:3135 -> xxx.yyy.94.11:1433 SYN ******S*
Sep 8 00:00:00 200.155.57.92:3136 -> xxx.yyy.94.12:1433 SYN ******S*
Sep 8 00:00:00 200.155.57.92:3137 -> xxx.yyy.94.13:1433 SYN ******S*
Sep 8 00:00:00 200.155.57.92:3139 -> xxx.yyy.94.14:1433 SYN ******S*
Sep 8 00:00:00 200.155.57.92:4780 -> xxx.yyy.93.198:1433 SYN ******S*
17569
Sep 7 16:01:33 69.28.69.138:2746 -> xxx.yyy.1.1:22 SYN ******S*
Sep 7 16:01:33 69.28.69.138:2746 -> xxx.yyy.1.2:22 SYN ******S*
Sep 7 16:01:33 69.28.69.138:2746 -> xxx.yyy.1.3:22 SYN ******S*
Sep 7 16:01:33 69.28.69.138:2746 -> xxx.yyy.1.8:22 SYN ******S*
Sep 7 16:01:33 69.28.69.138:2746 -> xxx.yyy.1.9:22 SYN ******S*
Sep 7 16:01:33 69.28.69.138:2746 -> xxx.yyy.1.11:22 SYN ******S*
Sep 7 16:01:33 69.28.69.138:2746 -> xxx.yyy.1.10:22 SYN ******S*
Sep 7 16:01:33 69.28.69.138:2746 -> xxx.yyy.1.13:22 SYN ******S*
[...]
Sep 7 16:01:59 69.28.69.138:2746 -> xxx.yyy.255.204:22 SYN ******S*
Sep 7 16:01:59 69.28.69.138:2746 -> xxx.yyy.255.206:22 SYN ******S*
Sep 7 16:01:59 69.28.69.138:2746 -> xxx.yyy.255.207:22 SYN ******S*
Sep 7 16:01:59 69.28.69.138:2746 -> xxx.yyy.255.244:22 SYN ******S*
Sep 7 16:01:59 69.28.69.138:2746 -> xxx.yyy.255.248:22 SYN ******S*
Sep 7 16:01:59 69.28.69.138:2746 -> xxx.yyy.255.249:22 SYN ******S*
Sep 7 16:01:59 69.28.69.138:2746 -> xxx.yyy.255.245:22 SYN ******S*
Sep 7 16:01:59 69.28.69.138:2746 -> xxx.yyy.255.246:22 SYN ******S*
12098
[...]
11212
Sep 7 01:01:03 61.48.16.137:3621 -> xxx.yyy.133.238:5554 SYN ******S*
Sep 7 01:01:04 61.48.16.137:3772 -> xxx.yyy.133.238:1023 SYN ******S*
Sep 7 01:01:06 61.48.16.137:4062 -> xxx.yyy.133.238:9898 SYN ******S*
Sep 7 01:01:03 61.48.16.137:3622 -> xxx.yyy.133.237:5554 SYN ******S*
Sep 7 01:01:04 61.48.16.137:3771 -> xxx.yyy.133.237:1023 SYN ******S*
Sep 7 01:01:06 61.48.16.137:4059 -> xxx.yyy.133.237:9898 SYN ******S*
Sep 7 01:01:03 61.48.16.137:3645 -> xxx.yyy.133.240:5554 SYN ******S*
Sep 7 01:01:03 61.48.16.137:3644 -> xxx.yyy.133.239:5554 SYN ******S*
[...]
Sep 7 01:03:27 61.48.16.137:1911 -> xxx.yyy.154.91:9898 SYN ******S*
Sep 7 01:03:27 61.48.16.137:1913 -> xxx.yyy.154.92:9898 SYN ******S*
Sep 7 01:03:27 61.48.16.137:1914 -> xxx.yyy.154.93:9898 SYN ******S*
Sep 7 01:03:27 61.48.16.137:1925 -> xxx.yyy.154.94:9898 SYN ******S*
Sep 7 01:03:27 61.48.16.137:1937 -> xxx.yyy.154.97:9898 SYN ******S*
Sep 7 01:03:27 61.48.16.137:1965 -> xxx.yyy.154.98:9898 SYN ******S*
Sep 7 01:03:27 61.48.16.137:1966 -> xxx.yyy.154.99:9898 SYN ******S*
Sep 7 01:03:27 61.48.16.137:1967 -> xxx.yyy.154.100:9898 SYN ******S*
10389
Sep 7 09:54:10 82.191.216.195:4135 -> xxx.yyy.1.11:1433 SYN ******S*
Sep 7 09:54:12 82.191.216.195:3431 -> xxx.yyy.1.28:1433 SYN ******S*
Sep 7 09:54:12 82.191.216.195:3546 -> xxx.yyy.1.29:1433 SYN ******S*
Sep 7 09:54:15 82.191.216.195:3660 -> xxx.yyy.1.30:1433 SYN ******S*
Sep 7 09:54:13 82.191.216.195:4004 -> xxx.yyy.1.33:1433 SYN ******S*
Sep 7 09:54:15 82.191.216.195:3117 -> xxx.yyy.1.3:1433 SYN ******S*
Sep 7 09:54:15 82.191.216.195:3228 -> xxx.yyy.1.2:1433 SYN ******S*
Sep 7 09:54:16 82.191.216.195:4396 -> xxx.yyy.1.34:1433 SYN ******S*
[...]
Sep 7 13:03:10 82.191.216.195:3788 -> xxx.yyy.211.66:1433 SYN ******S*
Sep 7 13:03:11 82.191.216.195:4144 -> xxx.yyy.211.69:1433 SYN ******S*
Sep 7 13:03:15 82.191.216.195:4885 -> xxx.yyy.211.73:1433 SYN ******S*
Sep 7 13:03:12 82.191.216.195:1866 -> xxx.yyy.211.81:1433 SYN ******S*
Sep 7 13:03:15 82.191.216.195:2342 -> xxx.yyy.211.85:1433 SYN ******S*
Sep 7 13:03:13 82.191.216.195:2816 -> xxx.yyy.211.89:1433 SYN ******S*
Sep 7 13:03:14 82.191.216.195:3495 -> xxx.yyy.211.95:1433 SYN ******S*
Sep 7 13:03:15 82.191.216.195:2224 -> xxx.yyy.211.84:1433 SYN ******S*
Sep 7 13:03:15 82.191.216.195:2460 -> xxx.yyy.211.86:1433 SYN ******S*
10148
Sep 7 23:55:32 220.127.246.123:1886 -> xxx.yyy.235.112:5554 SYN ******S*
Sep 7 23:55:33 220.127.246.123:2541 -> xxx.yyy.235.112:1023 SYN ******S*
Sep 7 23:55:35 220.127.246.123:3724 -> xxx.yyy.235.112:9898 SYN ******S*
Sep 7 23:55:32 220.127.246.123:1887 -> xxx.yyy.235.113:5554 SYN ******S*
Sep 7 23:55:35 220.127.246.123:3725 -> xxx.yyy.235.113:9898 SYN ******S*
Sep 7 23:55:32 220.127.246.123:1890 -> xxx.yyy.235.116:5554 SYN ******S*
Sep 7 23:55:33 220.127.246.123:2545 -> xxx.yyy.235.116:1023 SYN ******S*
Sep 7 23:55:35 220.127.246.123:3734 -> xxx.yyy.235.116:9898 SYN ******S*
[...]
Sep 7 23:56:58 220.127.246.123:2620 -> xxx.yyy.92.97:9898 SYN ******S*
Sep 7 23:56:58 220.127.246.123:2621 -> xxx.yyy.92.98:9898 SYN ******S*
Sep 7 23:56:58 220.127.246.123:2604 -> xxx.yyy.92.89:9898 SYN ******S*
Sep 7 23:56:58 220.127.246.123:2605 -> xxx.yyy.92.90:9898 SYN ******S*
Sep 7 23:56:58 220.127.246.123:2623 -> xxx.yyy.92.100:9898 SYN ******S*
Sep 7 23:56:58 220.127.246.123:2611 -> xxx.yyy.92.93:9898 SYN ******S*
Sep 7 23:56:58 220.127.246.123:2717 -> xxx.yyy.92.109:9898 SYN ******S*
Sep 7 23:56:58 220.127.246.123:2725 -> xxx.yyy.92.118:9898 SYN ******S*
Sep 7 23:56:58 220.127.246.123:2784 -> xxx.yyy.92.121:9898 SYN ******S*
9310
Sep 7 00:08:36 218.47.194.1:4481 -> xxx.yyy.133.17:5554 SYN ******S*
Sep 7 00:08:38 218.47.194.1:1243 -> xxx.yyy.133.17:1023 SYN ******S*
Sep 7 00:08:40 218.47.194.1:2131 -> xxx.yyy.133.17:9898 SYN ******S*
Sep 7 00:08:36 218.47.194.1:4482 -> xxx.yyy.133.18:5554 SYN ******S*
Sep 7 00:08:38 218.47.194.1:1244 -> xxx.yyy.133.18:1023 SYN ******S*
Sep 7 00:08:37 218.47.194.1:4503 -> xxx.yyy.133.19:5554 SYN ******S*
Sep 7 00:08:38 218.47.194.1:1253 -> xxx.yyy.133.19:1023 SYN ******S*
Sep 7 00:08:40 218.47.194.1:2133 -> xxx.yyy.133.19:9898 SYN ******S*
[...]
Sep 7 00:09:24 218.47.194.1:1209 -> xxx.yyy.153.83:9898 SYN ******S*
Sep 7 00:09:24 218.47.194.1:1227 -> xxx.yyy.153.95:9898 SYN ******S*
Sep 7 00:09:24 218.47.194.1:1228 -> xxx.yyy.153.96:9898 SYN ******S*
Sep 7 00:09:24 218.47.194.1:1250 -> xxx.yyy.153.102:9898 SYN ******S*
Sep 7 00:09:24 218.47.194.1:1290 -> xxx.yyy.153.108:9898 SYN ******S*
Sep 7 00:09:24 218.47.194.1:1292 -> xxx.yyy.153.110:9898 SYN ******S*
Sep 7 00:09:24 218.47.194.1:1366 -> xxx.yyy.153.115:9898 SYN ******S*
Sep 7 00:09:24 218.47.194.1:1418 -> xxx.yyy.153.129:9898 SYN ******S*
9038
Sep 7 09:57:55 81.240.42.212:1468 -> xxx.yyy.1.0:21 SYN ******S*
Sep 7 09:57:55 81.240.42.212:1469 -> xxx.yyy.1.1:21 SYN ******S*
Sep 7 09:57:55 81.240.42.212:1470 -> xxx.yyy.1.2:21 SYN ******S*
Sep 7 09:57:55 81.240.42.212:1471 -> xxx.yyy.1.3:21 SYN ******S*
Sep 7 09:57:55 81.240.42.212:1472 -> xxx.yyy.1.4:21 SYN ******S*
Sep 7 09:57:55 81.240.42.212:1474 -> xxx.yyy.1.6:21 SYN ******S*
Sep 7 09:57:55 81.240.42.212:1476 -> xxx.yyy.1.8:21 SYN ******S*
Sep 7 09:57:55 81.240.42.212:1479 -> xxx.yyy.1.11:21 SYN ******S*
[...]
Sep 7 09:59:33 81.240.42.212:1496 -> xxx.yyy.255.208:21 SYN ******S*
Sep 7 09:59:33 81.240.42.212:1498 -> xxx.yyy.255.210:21 SYN ******S*
Sep 7 09:59:33 81.240.42.212:1499 -> xxx.yyy.255.211:21 SYN ******S*
Sep 7 09:59:33 81.240.42.212:1500 -> xxx.yyy.255.212:21 SYN ******S*
Sep 7 09:59:33 81.240.42.212:1502 -> xxx.yyy.255.214:21 SYN ******S*
Sep 7 09:59:33 81.240.42.212:1504 -> xxx.yyy.255.216:21 SYN ******S*
Sep 7 09:59:33 81.240.42.212:1505 -> xxx.yyy.255.217:21 SYN ******S*
Sep 7 09:59:33 81.240.42.212:1506 -> xxx.yyy.255.218:21 SYN ******S*
Sep 7 09:59:34 81.240.42.212:1507 -> xxx.yyy.255.219:21 SYN ******S*
8721
Sep 7 05:36:29 210.58.12.82:1915 -> xxx.yyy.1.0:1433 SYN ******S*
Sep 7 05:36:32 210.58.12.82:1916 -> xxx.yyy.1.1:1433 SYN ******S*
Sep 7 05:36:32 210.58.12.82:1917 -> xxx.yyy.1.2:1433 SYN ******S*
Sep 7 05:36:32 210.58.12.82:1918 -> xxx.yyy.1.3:1433 SYN ******S*
Sep 7 05:36:32 210.58.12.82:1919 -> xxx.yyy.1.4:1433 SYN ******S*
Sep 7 05:36:32 210.58.12.82:1920 -> xxx.yyy.1.5:1433 SYN ******S*
Sep 7 05:36:32 210.58.12.82:1921 -> xxx.yyy.1.6:1433 SYN ******S*
Sep 7 05:36:32 210.58.12.82:1922 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Sep 7 06:06:15 210.58.12.82:3036 -> xxx.yyy.33.247:1433 SYN ******S*
Sep 7 06:06:15 210.58.12.82:3033 -> xxx.yyy.33.246:1433 SYN ******S*
Sep 7 06:06:15 210.58.12.82:3030 -> xxx.yyy.33.245:1433 SYN ******S*
Sep 7 06:06:16 210.58.12.82:3044 -> xxx.yyy.33.248:1433 SYN ******S*
Sep 7 06:06:16 210.58.12.82:3051 -> xxx.yyy.33.251:1433 SYN ******S*
Sep 7 06:06:16 210.58.12.82:3049 -> xxx.yyy.33.250:1433 SYN ******S*
Sep 7 06:06:16 210.58.12.82:3064 -> xxx.yyy.33.252:1433 SYN ******S*
Sep 7 06:06:17 210.58.12.82:3070 -> xxx.yyy.33.253:1433 SYN ******S*
Sep 7 06:06:17 210.58.12.82:3073 -> xxx.yyy.33.255:1433 SYN ******S*
8651
Sep 7 23:50:44 60.35.115.45:4393 -> xxx.yyy.194.124:5554 SYN ******S*
Sep 7 23:50:45 60.35.115.45:1427 -> xxx.yyy.194.124:1023 SYN ******S*
Sep 7 23:50:47 60.35.115.45:2961 -> xxx.yyy.194.124:9898 SYN ******S*
Sep 7 23:50:44 60.35.115.45:4396 -> xxx.yyy.194.126:5554 SYN ******S*
Sep 7 23:50:45 60.35.115.45:1441 -> xxx.yyy.194.126:1023 SYN ******S*
Sep 7 23:50:44 60.35.115.45:4397 -> xxx.yyy.194.128:5554 SYN ******S*
Sep 7 23:50:44 60.35.115.45:4410 -> xxx.yyy.194.144:5554 SYN ******S*
Sep 7 23:50:44 60.35.115.45:4411 -> xxx.yyy.194.125:5554 SYN ******S*
[...]
Sep 7 23:51:29 60.35.115.45:4052 -> xxx.yyy.214.236:9898 SYN ******S*
Sep 7 23:51:29 60.35.115.45:4099 -> xxx.yyy.214.212:9898 SYN ******S*
Sep 7 23:51:29 60.35.115.45:4092 -> xxx.yyy.214.153:9898 SYN ******S*
Sep 7 23:51:29 60.35.115.45:4093 -> xxx.yyy.214.154:9898 SYN ******S*
Sep 7 23:51:29 60.35.115.45:4096 -> xxx.yyy.214.194:9898 SYN ******S*
Sep 7 23:51:29 60.35.115.45:4097 -> xxx.yyy.214.173:9898 SYN ******S*
Sep 7 23:51:29 60.35.115.45:4449 -> xxx.yyy.194.155:9898 SYN ******S*
Sep 7 23:51:29 60.35.115.45:4450 -> xxx.yyy.194.156:9898 SYN ******S*
8422
Sep 7 23:54:32 222.113.60.42:2769 -> xxx.yyy.195.95:5554 SYN ******S*
Sep 7 23:54:33 222.113.60.42:2959 -> xxx.yyy.195.95:1023 SYN ******S*
Sep 7 23:54:35 222.113.60.42:1296 -> xxx.yyy.195.95:9898 SYN ******S*
Sep 7 23:54:32 222.113.60.42:2770 -> xxx.yyy.195.96:5554 SYN ******S*
Sep 7 23:54:33 222.113.60.42:2961 -> xxx.yyy.195.96:1023 SYN ******S*
Sep 7 23:54:35 222.113.60.42:1300 -> xxx.yyy.195.96:9898 SYN ******S*
Sep 7 23:54:32 222.113.60.42:2763 -> xxx.yyy.195.88:5554 SYN ******S*
Sep 7 23:54:33 222.113.60.42:2954 -> xxx.yyy.195.88:1023 SYN ******S*
[...]
Sep 7 23:56:18 222.113.60.42:1819 -> xxx.yyy.215.145:9898 SYN ******S*
Sep 7 23:56:18 222.113.60.42:1832 -> xxx.yyy.215.152:9898 SYN ******S*
Sep 7 23:56:18 222.113.60.42:1845 -> xxx.yyy.215.169:9898 SYN ******S*
Sep 7 23:56:18 222.113.60.42:1842 -> xxx.yyy.215.165:9898 SYN ******S*
Sep 7 23:56:18 222.113.60.42:1848 -> xxx.yyy.215.159:9898 SYN ******S*
Sep 7 23:56:18 222.113.60.42:3936 -> xxx.yyy.215.170:9898 SYN ******S*
Sep 7 23:56:18 222.113.60.42:1924 -> xxx.yyy.215.178:9898 SYN ******S*
Sep 7 23:56:19 222.113.60.42:2003 -> xxx.yyy.215.197:9898 SYN ******S*
Sep 7 23:56:19 222.113.60.42:2015 -> xxx.yyy.215.204:9898 SYN ******S*
7608
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list