[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Sun Sep 12 21:10:08 GMT 2004
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0500.
Sep 11 07:36:55 221.140.19.113:2034 -> xxx.yyy.1.3:25 SYN ******S*
Sep 11 07:36:55 221.140.19.113:2029 -> xxx.yyy.1.1:25 SYN ******S*
Sep 11 07:36:55 221.140.19.113:2027 -> xxx.yyy.1.0:25 SYN ******S*
Sep 11 07:36:55 221.140.19.113:2044 -> xxx.yyy.1.6:25 SYN ******S*
Sep 11 07:36:55 221.140.19.113:2037 -> xxx.yyy.1.4:25 SYN ******S*
Sep 11 07:36:55 221.140.19.113:2031 -> xxx.yyy.1.2:25 SYN ******S*
Sep 11 07:36:55 221.140.19.113:2040 -> xxx.yyy.1.5:25 SYN ******S*
Sep 11 07:36:55 221.140.19.113:2046 -> xxx.yyy.1.7:25 SYN ******S*
[...]
Sep 11 07:55:34 221.140.19.113:2741 -> xxx.yyy.255.248:25 SYN ******S*
Sep 11 07:55:39 221.140.19.113:2746 -> xxx.yyy.255.251:25 SYN ******S*
Sep 11 07:55:39 221.140.19.113:2747 -> xxx.yyy.255.252:25 SYN ******S*
Sep 11 07:55:39 221.140.19.113:2743 -> xxx.yyy.255.250:25 SYN ******S*
Sep 11 07:55:39 221.140.19.113:2742 -> xxx.yyy.255.249:25 SYN ******S*
Sep 11 07:55:39 221.140.19.113:2759 -> xxx.yyy.255.254:25 SYN ******S*
Sep 11 07:55:39 221.140.19.113:2758 -> xxx.yyy.255.253:25 SYN ******S*
Sep 11 07:55:39 221.140.19.113:2741 -> xxx.yyy.255.248:25 SYN ******S*
86926
Sep 11 11:41:30 80.195.184.190:3341 -> xxx.yyy.1.3:1433 SYN ******S*
Sep 11 11:41:30 80.195.184.190:3343 -> xxx.yyy.1.4:1433 SYN ******S*
Sep 11 11:41:30 80.195.184.190:3344 -> xxx.yyy.1.5:1433 SYN ******S*
Sep 11 11:41:30 80.195.184.190:3345 -> xxx.yyy.1.6:1433 SYN ******S*
Sep 11 11:41:30 80.195.184.190:3346 -> xxx.yyy.1.7:1433 SYN ******S*
Sep 11 11:41:30 80.195.184.190:3350 -> xxx.yyy.1.10:1433 SYN ******S*
Sep 11 11:41:30 80.195.184.190:3354 -> xxx.yyy.1.14:1433 SYN ******S*
Sep 11 11:41:30 80.195.184.190:3355 -> xxx.yyy.1.15:1433 SYN ******S*
[...]
Sep 11 15:30:39 80.195.184.190:1746 -> xxx.yyy.255.246:1433 SYN ******S*
Sep 11 15:30:39 80.195.184.190:1745 -> xxx.yyy.255.245:1433 SYN ******S*
Sep 11 15:30:40 80.195.184.190:1750 -> xxx.yyy.255.247:1433 SYN ******S*
Sep 11 15:30:40 80.195.184.190:1752 -> xxx.yyy.255.248:1433 SYN ******S*
Sep 11 15:30:40 80.195.184.190:1753 -> xxx.yyy.255.249:1433 SYN ******S*
Sep 11 15:30:40 80.195.184.190:1755 -> xxx.yyy.255.250:1433 SYN ******S*
Sep 11 15:30:41 80.195.184.190:1774 -> xxx.yyy.255.252:1433 SYN ******S*
Sep 11 15:30:42 80.195.184.190:1782 -> xxx.yyy.255.254:1433 SYN ******S*
85845
Sep 11 09:01:54 217.164.246.233:60607 -> xxx.yyy.1.1:1433 SYN ******S*
Sep 11 09:01:54 217.164.246.233:60609 -> xxx.yyy.1.3:1433 SYN ******S*
Sep 11 09:01:54 217.164.246.233:60610 -> xxx.yyy.1.4:1433 SYN ******S*
Sep 11 09:01:54 217.164.246.233:60612 -> xxx.yyy.1.6:1433 SYN ******S*
Sep 11 09:01:54 217.164.246.233:60614 -> xxx.yyy.1.8:1433 SYN ******S*
Sep 11 09:01:54 217.164.246.233:60608 -> xxx.yyy.1.2:1433 SYN ******S*
Sep 11 09:01:54 217.164.246.233:60616 -> xxx.yyy.1.10:1433 SYN ******S*
Sep 11 09:01:54 217.164.246.233:60611 -> xxx.yyy.1.5:1433 SYN ******S*
[...]
Sep 11 12:07:03 217.164.246.233:61731 -> xxx.yyy.203.35:1433 SYN ******S*
Sep 11 12:07:04 217.164.246.233:61732 -> xxx.yyy.203.36:1433 SYN ******S*
Sep 11 12:07:05 217.164.246.233:61734 -> xxx.yyy.203.37:1433 SYN ******S*
Sep 11 12:07:05 217.164.246.233:61735 -> xxx.yyy.203.38:1433 SYN ******S*
Sep 11 12:07:05 217.164.246.233:61736 -> xxx.yyy.203.39:1433 SYN ******S*
Sep 11 12:07:05 217.164.246.233:61737 -> xxx.yyy.203.40:1433 SYN ******S*
Sep 11 12:07:06 217.164.246.233:61738 -> xxx.yyy.203.41:1433 SYN ******S*
Sep 11 12:07:06 217.164.246.233:61739 -> xxx.yyy.203.42:1433 SYN ******S*
Sep 11 12:07:06 217.164.246.233:61731 -> xxx.yyy.203.35:1433 SYN ******S*
77310
Sep 11 08:47:16 134.2.125.210:4038 -> xxx.yyy.1.1:3306 SYN ******S*
Sep 11 08:47:16 134.2.125.210:4040 -> xxx.yyy.1.2:3306 SYN ******S*
Sep 11 08:47:16 134.2.125.210:4041 -> xxx.yyy.1.3:3306 SYN ******S*
Sep 11 08:47:14 134.2.125.210:4043 -> xxx.yyy.1.4:3306 SYN ******S*
Sep 11 08:47:17 134.2.125.210:4044 -> xxx.yyy.1.5:3306 SYN ******S*
Sep 11 08:47:17 134.2.125.210:4045 -> xxx.yyy.1.6:3306 SYN ******S*
Sep 11 08:47:17 134.2.125.210:4046 -> xxx.yyy.1.7:3306 SYN ******S*
Sep 11 08:47:17 134.2.125.210:4047 -> xxx.yyy.1.8:3306 SYN ******S*
[...]
Sep 11 08:58:56 134.2.125.210:3305 -> xxx.yyy.255.244:3306 SYN ******S*
Sep 11 08:58:56 134.2.125.210:3306 -> xxx.yyy.255.245:3306 SYN ******S*
Sep 11 08:58:56 134.2.125.210:3308 -> xxx.yyy.255.247:3306 SYN ******S*
Sep 11 08:58:56 134.2.125.210:3307 -> xxx.yyy.255.246:3306 SYN ******S*
Sep 11 08:58:56 134.2.125.210:3309 -> xxx.yyy.255.248:3306 SYN ******S*
Sep 11 08:58:56 134.2.125.210:3310 -> xxx.yyy.255.249:3306 SYN ******S*
Sep 11 08:58:56 134.2.125.210:3311 -> xxx.yyy.255.250:3306 SYN ******S*
Sep 11 08:58:56 134.2.125.210:3312 -> xxx.yyy.255.251:3306 SYN ******S*
Sep 11 08:58:56 134.2.125.210:3315 -> xxx.yyy.255.254:3306 SYN ******S*
70032
Sep 11 18:21:55 207.59.41.66:63339 -> xxx.yyy.1.1:8000 SYN ******S*
Sep 11 18:21:56 207.59.41.66:63340 -> xxx.yyy.1.2:8000 SYN ******S*
Sep 11 18:21:56 207.59.41.66:63341 -> xxx.yyy.1.3:8000 SYN ******S*
Sep 11 18:21:57 207.59.41.66:63342 -> xxx.yyy.1.4:8000 SYN ******S*
Sep 11 18:21:57 207.59.41.66:63343 -> xxx.yyy.1.5:8000 SYN ******S*
Sep 11 18:21:57 207.59.41.66:63344 -> xxx.yyy.1.6:8000 SYN ******S*
Sep 11 18:21:55 207.59.41.66:63345 -> xxx.yyy.1.7:8000 SYN ******S*
Sep 11 18:21:55 207.59.41.66:63346 -> xxx.yyy.1.8:8000 SYN ******S*
[...]
Sep 11 18:33:50 207.59.41.66:5156 -> xxx.yyy.255.241:8000 SYN ******S*
Sep 11 18:33:50 207.59.41.66:5157 -> xxx.yyy.255.242:8000 SYN ******S*
Sep 11 18:33:50 207.59.41.66:5158 -> xxx.yyy.255.243:8000 SYN ******S*
Sep 11 18:33:50 207.59.41.66:5159 -> xxx.yyy.255.244:8000 SYN ******S*
Sep 11 18:33:50 207.59.41.66:5165 -> xxx.yyy.255.250:8000 SYN ******S*
Sep 11 18:33:50 207.59.41.66:5166 -> xxx.yyy.255.251:8000 SYN ******S*
Sep 11 18:33:50 207.59.41.66:5167 -> xxx.yyy.255.252:8000 SYN ******S*
Sep 11 18:33:50 207.59.41.66:5168 -> xxx.yyy.255.253:8000 SYN ******S*
Sep 11 18:33:50 207.59.41.66:5169 -> xxx.yyy.255.254:8000 SYN ******S*
63987
Sep 11 10:43:47 193.231.17.36:55243 -> xxx.yyy.1.37:1433 SYN ******S*
Sep 11 10:43:50 193.231.17.36:55244 -> xxx.yyy.1.38:1433 SYN ******S*
Sep 11 10:43:50 193.231.17.36:55245 -> xxx.yyy.1.39:1433 SYN ******S*
Sep 11 10:43:50 193.231.17.36:55246 -> xxx.yyy.1.40:1433 SYN ******S*
Sep 11 10:43:50 193.231.17.36:55247 -> xxx.yyy.1.41:1433 SYN ******S*
Sep 11 10:43:50 193.231.17.36:55248 -> xxx.yyy.1.42:1433 SYN ******S*
Sep 11 10:43:50 193.231.17.36:55249 -> xxx.yyy.1.43:1433 SYN ******S*
Sep 11 10:43:50 193.231.17.36:55250 -> xxx.yyy.1.44:1433 SYN ******S*
[...]
Sep 11 10:54:42 193.231.17.36:56119 -> xxx.yyy.255.234:1433 SYN ******S*
Sep 11 10:54:42 193.231.17.36:56136 -> xxx.yyy.255.251:1433 SYN ******S*
Sep 11 10:54:42 193.231.17.36:56133 -> xxx.yyy.255.248:1433 SYN ******S*
Sep 11 10:54:42 193.231.17.36:56130 -> xxx.yyy.255.245:1433 SYN ******S*
Sep 11 10:54:42 193.231.17.36:56134 -> xxx.yyy.255.249:1433 SYN ******S*
Sep 11 10:54:42 193.231.17.36:56131 -> xxx.yyy.255.246:1433 SYN ******S*
Sep 11 10:54:43 193.231.17.36:56139 -> xxx.yyy.255.254:1433 SYN ******S*
Sep 11 10:54:43 193.231.17.36:56138 -> xxx.yyy.255.253:1433 SYN ******S*
62774
Sep 11 12:35:36 220.125.74.2:19957 -> xxx.yyy.1.1:1433 SYN ******S*
Sep 11 12:35:33 220.125.74.2:19958 -> xxx.yyy.1.2:1433 SYN ******S*
Sep 11 12:35:36 220.125.74.2:19959 -> xxx.yyy.1.3:1433 SYN ******S*
Sep 11 12:35:33 220.125.74.2:19960 -> xxx.yyy.1.4:1433 SYN ******S*
Sep 11 12:35:36 220.125.74.2:19961 -> xxx.yyy.1.5:1433 SYN ******S*
Sep 11 12:35:36 220.125.74.2:19962 -> xxx.yyy.1.6:1433 SYN ******S*
Sep 11 12:35:34 220.125.74.2:19963 -> xxx.yyy.1.7:1433 SYN ******S*
Sep 11 12:35:34 220.125.74.2:19964 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Sep 11 12:47:26 220.125.74.2:30589 -> xxx.yyy.255.238:1433 SYN ******S*
Sep 11 12:47:26 220.125.74.2:30591 -> xxx.yyy.255.240:1433 SYN ******S*
Sep 11 12:47:26 220.125.74.2:30601 -> xxx.yyy.255.248:1433 SYN ******S*
Sep 11 12:47:26 220.125.74.2:30604 -> xxx.yyy.255.251:1433 SYN ******S*
Sep 11 12:47:26 220.125.74.2:30605 -> xxx.yyy.255.252:1433 SYN ******S*
Sep 11 12:47:26 220.125.74.2:30607 -> xxx.yyy.255.254:1433 SYN ******S*
Sep 11 12:47:26 220.125.74.2:30602 -> xxx.yyy.255.249:1433 SYN ******S*
Sep 11 12:47:26 220.125.74.2:30603 -> xxx.yyy.255.250:1433 SYN ******S*
Sep 11 12:47:26 220.125.74.2:30606 -> xxx.yyy.255.253:1433 SYN ******S*
61035
[...]
52829
Sep 11 15:40:00 211.23.238.30:3283 -> xxx.yyy.1.25:1433 SYN ******S*
Sep 11 15:40:02 211.23.238.30:3284 -> xxx.yyy.1.26:1433 SYN ******S*
Sep 11 15:40:02 211.23.238.30:3285 -> xxx.yyy.1.27:1433 SYN ******S*
Sep 11 15:40:00 211.23.238.30:3286 -> xxx.yyy.1.28:1433 SYN ******S*
Sep 11 15:40:02 211.23.238.30:3287 -> xxx.yyy.1.29:1433 SYN ******S*
Sep 11 15:40:02 211.23.238.30:3289 -> xxx.yyy.1.31:1433 SYN ******S*
Sep 11 15:40:00 211.23.238.30:3290 -> xxx.yyy.1.32:1433 SYN ******S*
Sep 11 15:40:02 211.23.238.30:3294 -> xxx.yyy.1.36:1433 SYN ******S*
[...]
Sep 11 15:59:16 211.23.238.30:2973 -> xxx.yyy.255.194:1433 SYN ******S*
Sep 11 15:59:16 211.23.238.30:2974 -> xxx.yyy.255.195:1433 SYN ******S*
Sep 11 15:59:16 211.23.238.30:2978 -> xxx.yyy.255.199:1433 SYN ******S*
Sep 11 15:59:16 211.23.238.30:2979 -> xxx.yyy.255.200:1433 SYN ******S*
Sep 11 15:59:16 211.23.238.30:2984 -> xxx.yyy.255.205:1433 SYN ******S*
Sep 11 15:59:16 211.23.238.30:2994 -> xxx.yyy.255.215:1433 SYN ******S*
Sep 11 15:59:16 211.23.238.30:2999 -> xxx.yyy.255.220:1433 SYN ******S*
Sep 11 15:59:17 211.23.238.30:3010 -> xxx.yyy.255.231:1433 SYN ******S*
Sep 11 15:59:17 211.23.238.30:3015 -> xxx.yyy.255.236:1433 SYN ******S*
47952
Sep 11 08:58:41 81.196.32.53:3022 -> xxx.yyy.1.63:80 SYN ******S*
Sep 11 08:58:44 81.196.32.53:3024 -> xxx.yyy.1.65:80 SYN ******S*
Sep 11 08:58:44 81.196.32.53:3025 -> xxx.yyy.1.66:80 SYN ******S*
Sep 11 08:58:41 81.196.32.53:3023 -> xxx.yyy.1.64:80 SYN ******S*
Sep 11 08:58:44 81.196.32.53:3026 -> xxx.yyy.1.67:80 SYN ******S*
Sep 11 08:58:44 81.196.32.53:3028 -> xxx.yyy.1.69:80 SYN ******S*
Sep 11 08:58:44 81.196.32.53:3029 -> xxx.yyy.1.70:80 SYN ******S*
Sep 11 08:58:44 81.196.32.53:3031 -> xxx.yyy.1.72:80 SYN ******S*
[...]
Sep 11 09:07:04 81.196.32.53:3280 -> xxx.yyy.255.178:80 SYN ******S*
Sep 11 09:07:04 81.196.32.53:3267 -> xxx.yyy.255.165:80 SYN ******S*
Sep 11 09:07:04 81.196.32.53:3269 -> xxx.yyy.255.167:80 SYN ******S*
Sep 11 09:07:04 81.196.32.53:3268 -> xxx.yyy.255.166:80 SYN ******S*
Sep 11 09:07:04 81.196.32.53:3273 -> xxx.yyy.255.171:80 SYN ******S*
Sep 11 09:07:04 81.196.32.53:3274 -> xxx.yyy.255.172:80 SYN ******S*
Sep 11 09:07:04 81.196.32.53:3272 -> xxx.yyy.255.170:80 SYN ******S*
Sep 11 09:07:04 81.196.32.53:3271 -> xxx.yyy.255.169:80 SYN ******S*
37056
Sep 11 21:48:14 203.150.225.81:1385 -> xxx.yyy.1.1:1433 SYN ******S*
Sep 11 21:48:14 203.150.225.81:1386 -> xxx.yyy.1.2:1433 SYN ******S*
Sep 11 21:48:14 203.150.225.81:1388 -> xxx.yyy.1.3:1433 SYN ******S*
Sep 11 21:48:14 203.150.225.81:1390 -> xxx.yyy.1.5:1433 SYN ******S*
Sep 11 21:48:14 203.150.225.81:1393 -> xxx.yyy.1.7:1433 SYN ******S*
Sep 11 21:48:14 203.150.225.81:1389 -> xxx.yyy.1.4:1433 SYN ******S*
Sep 11 21:48:14 203.150.225.81:1392 -> xxx.yyy.1.6:1433 SYN ******S*
Sep 11 21:48:14 203.150.225.81:1394 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
Sep 11 21:58:27 203.150.225.81:4101 -> xxx.yyy.255.239:1433 SYN ******S*
Sep 11 21:58:27 203.150.225.81:4104 -> xxx.yyy.255.242:1433 SYN ******S*
Sep 11 21:58:27 203.150.225.81:4109 -> xxx.yyy.255.247:1433 SYN ******S*
Sep 11 21:58:27 203.150.225.81:4105 -> xxx.yyy.255.243:1433 SYN ******S*
Sep 11 21:58:27 203.150.225.81:4107 -> xxx.yyy.255.245:1433 SYN ******S*
Sep 11 21:58:27 203.150.225.81:4111 -> xxx.yyy.255.249:1433 SYN ******S*
Sep 11 21:58:27 203.150.225.81:4110 -> xxx.yyy.255.248:1433 SYN ******S*
Sep 11 21:58:27 203.150.225.81:4112 -> xxx.yyy.255.250:1433 SYN ******S*
35519
Sep 11 15:40:15 200.223.249.42:2404 -> xxx.yyy.1.0:1433 SYN ******S*
Sep 11 15:40:15 200.223.249.42:2406 -> xxx.yyy.1.2:1433 SYN ******S*
Sep 11 15:40:15 200.223.249.42:2407 -> xxx.yyy.1.3:1433 SYN ******S*
Sep 11 15:40:15 200.223.249.42:2409 -> xxx.yyy.1.5:1433 SYN ******S*
Sep 11 15:40:15 200.223.249.42:2411 -> xxx.yyy.1.7:1433 SYN ******S*
Sep 11 15:40:15 200.223.249.42:2412 -> xxx.yyy.1.8:1433 SYN ******S*
Sep 11 15:40:15 200.223.249.42:2413 -> xxx.yyy.1.9:1433 SYN ******S*
Sep 11 15:40:15 200.223.249.42:2414 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
Sep 11 17:42:39 200.223.249.42:3525 -> xxx.yyy.137.129:1433 SYN ******S*
Sep 11 17:42:39 200.223.249.42:3522 -> xxx.yyy.137.128:1433 SYN ******S*
Sep 11 17:42:39 200.223.249.42:3529 -> xxx.yyy.137.132:1433 SYN ******S*
Sep 11 17:42:39 200.223.249.42:3528 -> xxx.yyy.137.131:1433 SYN ******S*
Sep 11 17:42:39 200.223.249.42:3527 -> xxx.yyy.137.130:1433 SYN ******S*
Sep 11 17:42:41 200.223.249.42:4313 -> xxx.yyy.137.134:1433 SYN ******S*
Sep 11 17:42:42 200.223.249.42:4314 -> xxx.yyy.137.135:1433 SYN ******S*
Sep 11 17:42:42 200.223.249.42:4315 -> xxx.yyy.137.136:1433 SYN ******S*
35291
Sep 11 07:20:57 211.208.68.52:2292 -> xxx.yyy.1.0:1433 SYN ******S*
Sep 11 07:20:57 211.208.68.52:2293 -> xxx.yyy.1.1:1433 SYN ******S*
Sep 11 07:20:57 211.208.68.52:2296 -> xxx.yyy.1.2:1433 SYN ******S*
Sep 11 07:20:57 211.208.68.52:2298 -> xxx.yyy.1.3:1433 SYN ******S*
Sep 11 07:20:57 211.208.68.52:2299 -> xxx.yyy.1.4:1433 SYN ******S*
Sep 11 07:20:57 211.208.68.52:2302 -> xxx.yyy.1.6:1433 SYN ******S*
Sep 11 07:20:57 211.208.68.52:2305 -> xxx.yyy.1.7:1433 SYN ******S*
Sep 11 07:20:57 211.208.68.52:2300 -> xxx.yyy.1.5:1433 SYN ******S*
[...]
Sep 11 08:46:20 211.208.68.52:4017 -> xxx.yyy.95.248:1433 SYN ******S*
Sep 11 08:46:21 211.208.68.52:4024 -> xxx.yyy.95.249:1433 SYN ******S*
Sep 11 08:46:21 211.208.68.52:4030 -> xxx.yyy.95.250:1433 SYN ******S*
Sep 11 08:46:22 211.208.68.52:4065 -> xxx.yyy.95.252:1433 SYN ******S*
Sep 11 08:46:22 211.208.68.52:4064 -> xxx.yyy.95.251:1433 SYN ******S*
Sep 11 08:46:22 211.208.68.52:4066 -> xxx.yyy.95.253:1433 SYN ******S*
Sep 11 08:46:22 211.208.68.52:4068 -> xxx.yyy.95.255:1433 SYN ******S*
Sep 11 08:46:22 211.208.68.52:4067 -> xxx.yyy.95.254:1433 SYN ******S*
30785
Sep 11 08:17:57 217.167.199.201:1749 -> xxx.yyy.1.1:554 SYN ******S*
Sep 11 08:17:57 217.167.199.201:1750 -> xxx.yyy.1.2:554 SYN ******S*
Sep 11 08:17:57 217.167.199.201:1751 -> xxx.yyy.1.3:554 SYN ******S*
Sep 11 08:17:59 217.167.199.201:1752 -> xxx.yyy.1.4:554 SYN ******S*
Sep 11 08:17:59 217.167.199.201:1753 -> xxx.yyy.1.5:554 SYN ******S*
Sep 11 08:17:59 217.167.199.201:1754 -> xxx.yyy.1.6:554 SYN ******S*
Sep 11 08:17:59 217.167.199.201:1756 -> xxx.yyy.1.7:554 SYN ******S*
Sep 11 08:17:59 217.167.199.201:1757 -> xxx.yyy.1.8:554 SYN ******S*
[...]
Sep 11 09:25:09 217.167.199.201:3661 -> xxx.yyy.255.203:554 SYN ******S*
Sep 11 09:25:09 217.167.199.201:3693 -> xxx.yyy.255.235:554 SYN ******S*
Sep 11 09:25:09 217.167.199.201:3690 -> xxx.yyy.255.232:554 SYN ******S*
Sep 11 09:25:09 217.167.199.201:3674 -> xxx.yyy.255.216:554 SYN ******S*
Sep 11 09:25:09 217.167.199.201:3703 -> xxx.yyy.255.245:554 SYN ******S*
Sep 11 09:25:09 217.167.199.201:3687 -> xxx.yyy.255.229:554 SYN ******S*
Sep 11 09:25:09 217.167.199.201:3671 -> xxx.yyy.255.213:554 SYN ******S*
Sep 11 09:25:09 217.167.199.201:3681 -> xxx.yyy.255.223:554 SYN ******S*
29252
Sep 11 08:20:56 217.167.114.46:60012 -> xxx.yyy.12.95:554 SYN ******S*
Sep 11 08:20:56 217.167.114.46:60013 -> xxx.yyy.12.96:554 SYN ******S*
Sep 11 08:20:56 217.167.114.46:60014 -> xxx.yyy.12.97:554 SYN ******S*
Sep 11 08:20:56 217.167.114.46:60015 -> xxx.yyy.12.98:554 SYN ******S*
Sep 11 08:20:56 217.167.114.46:60016 -> xxx.yyy.12.99:554 SYN ******S*
Sep 11 08:20:56 217.167.114.46:60017 -> xxx.yyy.12.100:554 SYN ******S*
Sep 11 08:20:59 217.167.114.46:60018 -> xxx.yyy.12.101:554 SYN ******S*
Sep 11 08:20:59 217.167.114.46:60019 -> xxx.yyy.12.102:554 SYN ******S*
[...]
Sep 11 09:24:48 217.167.114.46:48229 -> xxx.yyy.254.227:554 SYN ******S*
Sep 11 09:24:51 217.167.114.46:48181 -> xxx.yyy.254.179:554 SYN ******S*
Sep 11 09:24:51 217.167.114.46:48218 -> xxx.yyy.254.216:554 SYN ******S*
Sep 11 09:24:51 217.167.114.46:48222 -> xxx.yyy.254.220:554 SYN ******S*
Sep 11 09:24:51 217.167.114.46:48220 -> xxx.yyy.254.218:554 SYN ******S*
Sep 11 09:24:51 217.167.114.46:48230 -> xxx.yyy.254.228:554 SYN ******S*
Sep 11 09:24:51 217.167.114.46:48231 -> xxx.yyy.254.229:554 SYN ******S*
Sep 11 09:24:51 217.167.114.46:48227 -> xxx.yyy.254.225:554 SYN ******S*
27374
[...]
16592
Sep 11 08:38:30 151.203.219.132:50829 -> xxx.yyy.1.0:1433 SYN ******S*
Sep 11 08:38:33 151.203.219.132:50832 -> xxx.yyy.1.1:1433 SYN ******S*
Sep 11 08:38:33 151.203.219.132:50834 -> xxx.yyy.1.2:1433 SYN ******S*
Sep 11 08:38:33 151.203.219.132:50836 -> xxx.yyy.1.3:1433 SYN ******S*
Sep 11 08:38:33 151.203.219.132:50838 -> xxx.yyy.1.4:1433 SYN ******S*
Sep 11 08:38:33 151.203.219.132:50840 -> xxx.yyy.1.5:1433 SYN ******S*
Sep 11 08:38:33 151.203.219.132:50842 -> xxx.yyy.1.6:1433 SYN ******S*
Sep 11 08:38:33 151.203.219.132:50844 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Sep 11 09:45:15 151.203.219.132:50278 -> xxx.yyy.75.91:1433 SYN ******S*
Sep 11 09:45:15 151.203.219.132:50279 -> xxx.yyy.75.92:1433 SYN ******S*
Sep 11 09:45:15 151.203.219.132:50280 -> xxx.yyy.75.93:1433 SYN ******S*
Sep 11 09:45:15 151.203.219.132:50281 -> xxx.yyy.75.94:1433 SYN ******S*
Sep 11 09:45:15 151.203.219.132:50142 -> xxx.yyy.75.30:1433 SYN ******S*
Sep 11 09:45:15 151.203.219.132:50282 -> xxx.yyy.75.95:1433 SYN ******S*
Sep 11 09:45:15 151.203.219.132:50283 -> xxx.yyy.75.96:1433 SYN ******S*
Sep 11 09:45:15 151.203.219.132:50287 -> xxx.yyy.75.98:1433 SYN ******S*
Sep 11 09:45:15 151.203.219.132:50289 -> xxx.yyy.75.99:1433 SYN ******S*
16481
Sep 11 00:56:11 61.55.185.125:3796 -> xxx.yyy.215.1:5554 SYN ******S*
Sep 11 00:56:13 61.55.185.125:4662 -> xxx.yyy.215.1:1023 SYN ******S*
Sep 11 00:56:11 61.55.185.125:3801 -> xxx.yyy.215.6:5554 SYN ******S*
Sep 11 00:56:13 61.55.185.125:4480 -> xxx.yyy.215.6:1023 SYN ******S*
Sep 11 00:56:11 61.55.185.125:3808 -> xxx.yyy.215.13:5554 SYN ******S*
Sep 11 00:56:13 61.55.185.125:4668 -> xxx.yyy.215.13:1023 SYN ******S*
Sep 11 00:56:11 61.55.185.125:3802 -> xxx.yyy.215.7:5554 SYN ******S*
Sep 11 00:56:13 61.55.185.125:4665 -> xxx.yyy.215.7:1023 SYN ******S*
[...]
Sep 11 00:57:11 61.55.185.125:4916 -> xxx.yyy.235.91:9898 SYN ******S*
Sep 11 00:57:11 61.55.185.125:4936 -> xxx.yyy.235.90:9898 SYN ******S*
Sep 11 00:57:11 61.55.185.125:4911 -> xxx.yyy.235.103:9898 SYN ******S*
Sep 11 00:57:11 61.55.185.125:4950 -> xxx.yyy.235.99:9898 SYN ******S*
Sep 11 00:57:11 61.55.185.125:4915 -> xxx.yyy.235.111:9898 SYN ******S*
Sep 11 00:57:11 61.55.185.125:4961 -> xxx.yyy.235.104:9898 SYN ******S*
Sep 11 00:57:11 61.55.185.125:4969 -> xxx.yyy.235.107:9898 SYN ******S*
Sep 11 00:57:11 61.55.185.125:4975 -> xxx.yyy.235.110:9898 SYN ******S*
Sep 11 00:57:11 61.55.185.125:4986 -> xxx.yyy.235.96:9898 SYN ******S*
11255
Sep 11 00:01:17 65.54.188.52:21072 -> xxx.yyy.212.103:80 SYN ******S*
Sep 11 00:01:17 65.54.188.52:21028 -> xxx.yyy.241.255:80 SYN ******S*
Sep 11 00:01:18 65.54.188.52:21283 -> xxx.yyy.241.20:80 SYN ******S*
Sep 11 00:01:15 65.54.188.52:20258 -> xxx.yyy.236.21:80 SYN ******S*
Sep 11 00:01:16 65.54.188.52:20317 -> xxx.yyy.14.23:80 SYN ******S*
Sep 11 00:01:15 65.54.188.52:20325 -> xxx.yyy.208.6:80 SYN ******S*
Sep 11 00:01:16 65.54.188.52:20347 -> xxx.yyy.209.1:80 SYN ******S*
Sep 11 00:01:18 65.54.188.52:21516 -> xxx.yyy.1.13:80 SYN ******S*
[...]
Sep 11 23:59:45 65.54.188.52:11013 -> xxx.yyy.241.98:80 SYN ******S*
Sep 11 23:59:46 65.54.188.52:11160 -> xxx.yyy.241.22:80 SYN ******S*
Sep 11 23:59:47 65.54.188.52:11690 -> xxx.yyy.213.66:80 SYN ******S*
Sep 11 23:59:49 65.54.188.52:12004 -> xxx.yyy.210.5:80 SYN ******S*
Sep 11 23:59:52 65.54.188.52:13184 -> xxx.yyy.1.13:80 SYN ******S*
Sep 11 23:59:54 65.54.188.52:13551 -> xxx.yyy.241.22:80 SYN ******S*
Sep 11 23:59:54 65.54.188.52:13546 -> xxx.yyy.241.98:80 SYN ******S*
Sep 11 23:59:55 65.54.188.52:13951 -> xxx.yyy.213.66:80 SYN ******S*
Sep 11 23:59:57 65.54.188.52:14417 -> xxx.yyy.210.5:80 SYN ******S*
10786
Sep 11 23:52:12 220.125.209.153:1702 -> xxx.yyy.72.124:5554 SYN ******S*
Sep 11 23:52:13 220.125.209.153:2217 -> xxx.yyy.72.124:1023 SYN ******S*
Sep 11 23:52:15 220.125.209.153:3360 -> xxx.yyy.72.124:9898 SYN ******S*
Sep 11 23:52:12 220.125.209.153:1712 -> xxx.yyy.72.128:5554 SYN ******S*
Sep 11 23:52:13 220.125.209.153:2221 -> xxx.yyy.72.128:1023 SYN ******S*
Sep 11 23:52:15 220.125.209.153:3364 -> xxx.yyy.72.128:9898 SYN ******S*
Sep 11 23:52:12 220.125.209.153:1713 -> xxx.yyy.72.129:5554 SYN ******S*
Sep 11 23:52:13 220.125.209.153:2222 -> xxx.yyy.72.129:1023 SYN ******S*
[...]
Sep 11 23:52:53 220.125.209.153:3909 -> xxx.yyy.92.228:9898 SYN ******S*
Sep 11 23:52:53 220.125.209.153:3921 -> xxx.yyy.92.238:9898 SYN ******S*
Sep 11 23:52:53 220.125.209.153:3910 -> xxx.yyy.92.229:9898 SYN ******S*
Sep 11 23:52:53 220.125.209.153:3922 -> xxx.yyy.92.239:9898 SYN ******S*
Sep 11 23:52:53 220.125.209.153:3913 -> xxx.yyy.92.232:9898 SYN ******S*
Sep 11 23:52:53 220.125.209.153:3918 -> xxx.yyy.92.235:9898 SYN ******S*
Sep 11 23:52:53 220.125.209.153:3917 -> xxx.yyy.92.234:9898 SYN ******S*
Sep 11 23:52:53 220.125.209.153:3935 -> xxx.yyy.92.246:9898 SYN ******S*
10569
[...]
10397
Sep 11 23:53:46 220.99.209.36:1214 -> xxx.yyy.153.140:5554 SYN ******S*
Sep 11 23:53:46 220.99.209.36:1215 -> xxx.yyy.153.141:5554 SYN ******S*
Sep 11 23:53:49 220.99.209.36:2828 -> xxx.yyy.153.141:9898 SYN ******S*
Sep 11 23:53:46 220.99.209.36:1218 -> xxx.yyy.153.144:5554 SYN ******S*
Sep 11 23:53:49 220.99.209.36:2832 -> xxx.yyy.153.144:9898 SYN ******S*
Sep 11 23:53:46 220.99.209.36:1219 -> xxx.yyy.153.145:5554 SYN ******S*
Sep 11 23:53:46 220.99.209.36:1235 -> xxx.yyy.153.156:5554 SYN ******S*
Sep 11 23:53:49 220.99.209.36:2849 -> xxx.yyy.153.156:9898 SYN ******S*
[...]
Sep 11 23:54:29 220.99.209.36:2670 -> xxx.yyy.173.191:9898 SYN ******S*
Sep 11 23:54:29 220.99.209.36:2626 -> xxx.yyy.173.160:9898 SYN ******S*
Sep 11 23:54:29 220.99.209.36:2627 -> xxx.yyy.173.161:9898 SYN ******S*
Sep 11 23:54:29 220.99.209.36:2641 -> xxx.yyy.173.171:9898 SYN ******S*
Sep 11 23:54:29 220.99.209.36:2651 -> xxx.yyy.173.180:9898 SYN ******S*
Sep 11 23:54:29 220.99.209.36:2687 -> xxx.yyy.173.207:9898 SYN ******S*
Sep 11 23:54:29 220.99.209.36:2663 -> xxx.yyy.173.188:9898 SYN ******S*
Sep 11 23:54:29 220.99.209.36:2747 -> xxx.yyy.173.254:9898 SYN ******S*
Sep 11 23:54:29 220.99.209.36:2734 -> xxx.yyy.173.244:9898 SYN ******S*
9894
Sep 11 05:13:34 202.156.165.151:2381 -> xxx.yyy.64.0:1433 SYN ******S*
Sep 11 05:13:34 202.156.165.151:2382 -> xxx.yyy.64.1:1433 SYN ******S*
Sep 11 05:13:34 202.156.165.151:2383 -> xxx.yyy.64.2:1433 SYN ******S*
Sep 11 05:13:34 202.156.165.151:2384 -> xxx.yyy.64.3:1433 SYN ******S*
Sep 11 05:13:34 202.156.165.151:2385 -> xxx.yyy.64.4:1433 SYN ******S*
Sep 11 05:13:34 202.156.165.151:2387 -> xxx.yyy.64.6:1433 SYN ******S*
Sep 11 05:13:34 202.156.165.151:2386 -> xxx.yyy.64.5:1433 SYN ******S*
Sep 11 05:13:34 202.156.165.151:2388 -> xxx.yyy.64.7:1433 SYN ******S*
[...]
Sep 11 05:25:46 202.156.165.151:1871 -> xxx.yyy.77.183:1433 SYN ******S*
Sep 11 05:25:46 202.156.165.151:1875 -> xxx.yyy.77.187:1433 SYN ******S*
Sep 11 05:25:46 202.156.165.151:1874 -> xxx.yyy.77.186:1433 SYN ******S*
Sep 11 05:25:46 202.156.165.151:1876 -> xxx.yyy.77.188:1433 SYN ******S*
Sep 11 05:25:46 202.156.165.151:1877 -> xxx.yyy.77.189:1433 SYN ******S*
Sep 11 05:25:46 202.156.165.151:1879 -> xxx.yyy.77.191:1433 SYN ******S*
Sep 11 05:25:46 202.156.165.151:1878 -> xxx.yyy.77.190:1433 SYN ******S*
Sep 11 05:25:46 202.156.165.151:1880 -> xxx.yyy.77.192:1433 SYN ******S*
8864
Sep 11 01:56:10 82.226.144.111:2123 -> xxx.yyy.1.0:1433 SYN ******S*
Sep 11 01:56:10 82.226.144.111:2124 -> xxx.yyy.1.1:1433 SYN ******S*
Sep 11 01:56:10 82.226.144.111:2125 -> xxx.yyy.1.2:1433 SYN ******S*
Sep 11 01:56:10 82.226.144.111:2126 -> xxx.yyy.1.3:1433 SYN ******S*
Sep 11 01:56:10 82.226.144.111:2127 -> xxx.yyy.1.4:1433 SYN ******S*
Sep 11 01:56:10 82.226.144.111:2128 -> xxx.yyy.1.5:1433 SYN ******S*
Sep 11 01:56:10 82.226.144.111:2129 -> xxx.yyy.1.6:1433 SYN ******S*
Sep 11 01:56:10 82.226.144.111:2130 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Sep 11 02:25:49 82.226.144.111:3561 -> xxx.yyy.33.251:1433 SYN ******S*
Sep 11 02:25:49 82.226.144.111:3560 -> xxx.yyy.33.250:1433 SYN ******S*
Sep 11 02:25:49 82.226.144.111:3559 -> xxx.yyy.33.249:1433 SYN ******S*
Sep 11 02:25:49 82.226.144.111:3558 -> xxx.yyy.33.248:1433 SYN ******S*
Sep 11 02:25:49 82.226.144.111:3557 -> xxx.yyy.33.247:1433 SYN ******S*
Sep 11 02:25:49 82.226.144.111:3556 -> xxx.yyy.33.246:1433 SYN ******S*
Sep 11 02:25:49 82.226.144.111:3569 -> xxx.yyy.33.255:1433 SYN ******S*
Sep 11 02:25:49 82.226.144.111:3566 -> xxx.yyy.33.254:1433 SYN ******S*
Sep 11 02:25:49 82.226.144.111:3564 -> xxx.yyy.33.253:1433 SYN ******S*
8661
Sep 11 00:56:57 222.137.77.99:2955 -> xxx.yyy.236.76:5554 SYN ******S*
Sep 11 00:56:58 222.137.77.99:3499 -> xxx.yyy.236.76:1023 SYN ******S*
Sep 11 00:56:57 222.137.77.99:2956 -> xxx.yyy.236.77:5554 SYN ******S*
Sep 11 00:56:57 222.137.77.99:2958 -> xxx.yyy.236.79:5554 SYN ******S*
Sep 11 00:56:57 222.137.77.99:2957 -> xxx.yyy.236.78:5554 SYN ******S*
Sep 11 00:56:57 222.137.77.99:2959 -> xxx.yyy.236.80:5554 SYN ******S*
Sep 11 00:56:58 222.137.77.99:2965 -> xxx.yyy.236.86:5554 SYN ******S*
Sep 11 00:56:59 222.137.77.99:3508 -> xxx.yyy.236.86:1023 SYN ******S*
[...]
Sep 11 00:57:40 222.137.77.99:3558 -> xxx.yyy.255.215:9898 SYN ******S*
Sep 11 00:57:40 222.137.77.99:3559 -> xxx.yyy.255.219:9898 SYN ******S*
Sep 11 00:57:40 222.137.77.99:3574 -> xxx.yyy.255.212:9898 SYN ******S*
Sep 11 00:57:40 222.137.77.99:3572 -> xxx.yyy.255.210:9898 SYN ******S*
Sep 11 00:57:40 222.137.77.99:3576 -> xxx.yyy.255.223:9898 SYN ******S*
Sep 11 00:57:40 222.137.77.99:3578 -> xxx.yyy.255.218:9898 SYN ******S*
Sep 11 00:57:40 222.137.77.99:3581 -> xxx.yyy.255.209:9898 SYN ******S*
Sep 11 00:57:40 222.137.77.99:3580 -> xxx.yyy.255.213:9898 SYN ******S*
Sep 11 00:57:40 222.137.77.99:3579 -> xxx.yyy.255.214:9898 SYN ******S*
7233
Sep 11 23:55:20 218.43.211.7:2263 -> xxx.yyy.215.248:5554 SYN ******S*
Sep 11 23:55:23 218.43.211.7:3788 -> xxx.yyy.215.248:9898 SYN ******S*
Sep 11 23:55:20 218.43.211.7:2264 -> xxx.yyy.215.228:5554 SYN ******S*
Sep 11 23:55:23 218.43.211.7:3768 -> xxx.yyy.215.228:9898 SYN ******S*
Sep 11 23:55:20 218.43.211.7:2265 -> xxx.yyy.215.229:5554 SYN ******S*
Sep 11 23:55:21 218.43.211.7:2715 -> xxx.yyy.215.229:1023 SYN ******S*
Sep 11 23:55:23 218.43.211.7:3769 -> xxx.yyy.215.229:9898 SYN ******S*
Sep 11 23:55:20 218.43.211.7:2266 -> xxx.yyy.215.230:5554 SYN ******S*
[...]
Sep 11 23:56:02 218.43.211.7:1444 -> xxx.yyy.235.244:9898 SYN ******S*
Sep 11 23:56:02 218.43.211.7:1596 -> xxx.yyy.236.15:9898 SYN ******S*
Sep 11 23:56:02 218.43.211.7:1646 -> xxx.yyy.236.29:9898 SYN ******S*
Sep 11 23:56:02 218.43.211.7:1647 -> xxx.yyy.236.30:9898 SYN ******S*
Sep 11 23:56:02 218.43.211.7:1659 -> xxx.yyy.236.39:9898 SYN ******S*
Sep 11 23:56:02 218.43.211.7:1677 -> xxx.yyy.236.57:9898 SYN ******S*
Sep 11 23:56:02 218.43.211.7:1678 -> xxx.yyy.236.58:9898 SYN ******S*
Sep 11 23:56:02 218.43.211.7:1679 -> xxx.yyy.236.59:9898 SYN ******S*
7078
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list