[Intrusions] [LOGS] Summary of large-scale portscanning detects
Ken.Connelly at uni.edu
Ken.Connelly at uni.edu
Sun Feb 6 13:49:59 GMT 2005
The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0600.
Feb 5 02:21:10 222.121.163.33:3238 -> xxx.yyy.1.1:3632 SYN ******S*
Feb 5 02:21:12 222.121.163.33:3244 -> xxx.yyy.1.4:3632 SYN ******S*
Feb 5 02:21:10 222.121.163.33:3240 -> xxx.yyy.1.2:3632 SYN ******S*
Feb 5 02:21:12 222.121.163.33:3246 -> xxx.yyy.1.5:3632 SYN ******S*
Feb 5 02:21:10 222.121.163.33:3242 -> xxx.yyy.1.3:3632 SYN ******S*
Feb 5 02:21:12 222.121.163.33:3248 -> xxx.yyy.1.6:3632 SYN ******S*
Feb 5 02:21:09 222.121.163.33:3250 -> xxx.yyy.1.7:3632 SYN ******S*
Feb 5 02:21:10 222.121.163.33:3252 -> xxx.yyy.1.8:3632 SYN ******S*
[...]
Feb 5 02:33:26 222.121.163.33:4954 -> xxx.yyy.255.248:3632 SYN ******S*
Feb 5 02:33:26 222.121.163.33:4967 -> xxx.yyy.255.249:3632 SYN ******S*
Feb 5 02:33:26 222.121.163.33:4941 -> xxx.yyy.255.245:3632 SYN ******S*
Feb 5 02:33:26 222.121.163.33:4977 -> xxx.yyy.255.251:3632 SYN ******S*
Feb 5 02:33:26 222.121.163.33:4979 -> xxx.yyy.255.252:3632 SYN ******S*
Feb 5 02:33:26 222.121.163.33:4951 -> xxx.yyy.255.247:3632 SYN ******S*
Feb 5 02:33:26 222.121.163.33:4973 -> xxx.yyy.255.250:3632 SYN ******S*
Feb 5 02:33:26 222.121.163.33:4944 -> xxx.yyy.255.246:3632 SYN ******S*
132505
Feb 5 02:17:38 66.62.24.5:1340 -> xxx.yyy.1.1:34 SYN ******S*
Feb 5 02:17:41 66.62.24.5:1342 -> xxx.yyy.1.2:34 SYN ******S*
Feb 5 02:17:41 66.62.24.5:1344 -> xxx.yyy.1.3:34 SYN ******S*
Feb 5 02:17:41 66.62.24.5:1346 -> xxx.yyy.1.4:34 SYN ******S*
Feb 5 02:17:41 66.62.24.5:1348 -> xxx.yyy.1.5:34 SYN ******S*
Feb 5 02:17:41 66.62.24.5:1350 -> xxx.yyy.1.6:34 SYN ******S*
Feb 5 02:17:41 66.62.24.5:1352 -> xxx.yyy.1.7:34 SYN ******S*
Feb 5 02:17:41 66.62.24.5:1354 -> xxx.yyy.1.8:34 SYN ******S*
[...]
Feb 5 02:29:12 66.62.24.5:4507 -> xxx.yyy.255.242:2129 SYN ******S*
Feb 5 02:29:12 66.62.24.5:4527 -> xxx.yyy.255.245:2129 SYN ******S*
Feb 5 02:29:12 66.62.24.5:4486 -> xxx.yyy.255.240:2129 SYN ******S*
Feb 5 02:29:12 66.62.24.5:4596 -> xxx.yyy.255.254:2129 SYN ******S*
Feb 5 02:29:12 66.62.24.5:4578 -> xxx.yyy.255.251:2129 SYN ******S*
Feb 5 02:29:12 66.62.24.5:4592 -> xxx.yyy.255.253:2129 SYN ******S*
Feb 5 02:29:12 66.62.24.5:4573 -> xxx.yyy.255.250:2129 SYN ******S*
Feb 5 02:29:12 66.62.24.5:4582 -> xxx.yyy.255.252:2129 SYN ******S*
129488
Feb 5 11:59:08 63.200.36.15:1685 -> xxx.yyy.1.1:1433 SYN ******S*
Feb 5 11:59:11 63.200.36.15:1688 -> xxx.yyy.1.2:1433 SYN ******S*
Feb 5 11:59:11 63.200.36.15:1689 -> xxx.yyy.1.3:1433 SYN ******S*
Feb 5 11:59:11 63.200.36.15:1693 -> xxx.yyy.1.4:1433 SYN ******S*
Feb 5 11:59:11 63.200.36.15:1697 -> xxx.yyy.1.6:1433 SYN ******S*
Feb 5 11:59:11 63.200.36.15:1698 -> xxx.yyy.1.7:1433 SYN ******S*
Feb 5 11:59:11 63.200.36.15:1699 -> xxx.yyy.1.8:1433 SYN ******S*
Feb 5 11:59:11 63.200.36.15:1701 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
Feb 5 13:53:38 63.200.36.15:3640 -> xxx.yyy.255.242:1433 SYN ******S*
Feb 5 13:53:38 63.200.36.15:3644 -> xxx.yyy.255.245:1433 SYN ******S*
Feb 5 13:53:38 63.200.36.15:3653 -> xxx.yyy.255.248:1433 SYN ******S*
Feb 5 13:53:38 63.200.36.15:3650 -> xxx.yyy.255.246:1433 SYN ******S*
Feb 5 13:53:38 63.200.36.15:3655 -> xxx.yyy.255.250:1433 SYN ******S*
Feb 5 13:53:39 63.200.36.15:3667 -> xxx.yyy.255.254:1433 SYN ******S*
Feb 5 13:53:39 63.200.36.15:3665 -> xxx.yyy.255.252:1433 SYN ******S*
Feb 5 13:53:39 63.200.36.15:3663 -> xxx.yyy.255.251:1433 SYN ******S*
101859
Feb 5 07:51:16 66.210.192.99:39825 -> xxx.yyy.1.0:4512 SYN ******S*
Feb 5 07:51:16 66.210.192.99:39826 -> xxx.yyy.1.1:4512 SYN ******S*
Feb 5 07:51:16 66.210.192.99:39827 -> xxx.yyy.1.2:4512 SYN ******S*
Feb 5 07:51:16 66.210.192.99:39828 -> xxx.yyy.1.3:4512 SYN ******S*
Feb 5 07:51:18 66.210.192.99:39830 -> xxx.yyy.1.5:4512 SYN ******S*
Feb 5 07:51:18 66.210.192.99:39831 -> xxx.yyy.1.6:4512 SYN ******S*
Feb 5 07:51:18 66.210.192.99:39832 -> xxx.yyy.1.7:4512 SYN ******S*
Feb 5 07:51:16 66.210.192.99:39833 -> xxx.yyy.1.8:4512 SYN ******S*
[...]
Feb 5 08:08:24 66.210.192.99:46657 -> xxx.yyy.255.238:4512 SYN ******S*
Feb 5 08:08:24 66.210.192.99:46658 -> xxx.yyy.255.239:4512 SYN ******S*
Feb 5 08:08:24 66.210.192.99:46659 -> xxx.yyy.255.240:4512 SYN ******S*
Feb 5 08:08:24 66.210.192.99:46660 -> xxx.yyy.255.241:4512 SYN ******S*
Feb 5 08:08:24 66.210.192.99:46661 -> xxx.yyy.255.242:4512 SYN ******S*
Feb 5 08:08:24 66.210.192.99:46662 -> xxx.yyy.255.243:4512 SYN ******S*
Feb 5 08:08:24 66.210.192.99:46663 -> xxx.yyy.255.244:4512 SYN ******S*
Feb 5 08:08:24 66.210.192.99:46664 -> xxx.yyy.255.245:4512 SYN ******S*
75169
Feb 5 09:39:44 65.17.94.35:1718 -> xxx.yyy.1.1:3306 SYN ******S*
Feb 5 09:39:41 65.17.94.35:1719 -> xxx.yyy.1.2:3306 SYN ******S*
Feb 5 09:39:45 65.17.94.35:1720 -> xxx.yyy.1.3:3306 SYN ******S*
Feb 5 09:39:45 65.17.94.35:1721 -> xxx.yyy.1.4:3306 SYN ******S*
Feb 5 09:39:45 65.17.94.35:1722 -> xxx.yyy.1.5:3306 SYN ******S*
Feb 5 09:39:45 65.17.94.35:1724 -> xxx.yyy.1.6:3306 SYN ******S*
Feb 5 09:39:45 65.17.94.35:1725 -> xxx.yyy.1.7:3306 SYN ******S*
Feb 5 09:39:45 65.17.94.35:1726 -> xxx.yyy.1.8:3306 SYN ******S*
[...]
Feb 5 10:03:57 65.17.94.35:1924 -> xxx.yyy.zzz.244:3306 SYN ******S*
Feb 5 10:03:57 65.17.94.35:1931 -> xxx.yyy.zzz.251:3306 SYN ******S*
Feb 5 10:03:57 65.17.94.35:1928 -> xxx.yyy.zzz.248:3306 SYN ******S*
Feb 5 10:03:57 65.17.94.35:1925 -> xxx.yyy.zzz.245:3306 SYN ******S*
Feb 5 10:03:57 65.17.94.35:1926 -> xxx.yyy.zzz.246:3306 SYN ******S*
Feb 5 10:03:57 65.17.94.35:1923 -> xxx.yyy.zzz.243:3306 SYN ******S*
Feb 5 10:03:57 65.17.94.35:1930 -> xxx.yyy.zzz.250:3306 SYN ******S*
Feb 5 10:03:58 65.17.94.35:1934 -> xxx.yyy.zzz.254:3306 SYN ******S*
Feb 5 10:03:58 65.17.94.35:1933 -> xxx.yyy.zzz.253:3306 SYN ******S*
71508
Feb 5 18:11:54 82.39.34.226:4591 -> xxx.yyy.1.0:1433 SYN ******S*
Feb 5 18:11:54 82.39.34.226:4592 -> xxx.yyy.1.1:1433 SYN ******S*
Feb 5 18:11:54 82.39.34.226:4594 -> xxx.yyy.1.2:1433 SYN ******S*
Feb 5 18:11:55 82.39.34.226:4595 -> xxx.yyy.1.3:1433 SYN ******S*
Feb 5 18:11:54 82.39.34.226:4596 -> xxx.yyy.1.4:1433 SYN ******S*
Feb 5 18:11:54 82.39.34.226:4597 -> xxx.yyy.1.5:1433 SYN ******S*
Feb 5 18:11:54 82.39.34.226:4598 -> xxx.yyy.1.6:1433 SYN ******S*
Feb 5 18:11:55 82.39.34.226:4599 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
Feb 5 21:08:01 82.39.34.226:2161 -> xxx.yyy.194.3:1433 SYN ******S*
Feb 5 21:08:01 82.39.34.226:2162 -> xxx.yyy.194.4:1433 SYN ******S*
Feb 5 21:08:01 82.39.34.226:2163 -> xxx.yyy.194.5:1433 SYN ******S*
Feb 5 21:08:02 82.39.34.226:2169 -> xxx.yyy.194.9:1433 SYN ******S*
Feb 5 21:08:02 82.39.34.226:2026 -> xxx.yyy.193.214:1433 SYN ******S*
Feb 5 21:08:02 82.39.34.226:2029 -> xxx.yyy.193.215:1433 SYN ******S*
Feb 5 21:08:02 82.39.34.226:2030 -> xxx.yyy.193.216:1433 SYN ******S*
Feb 5 21:08:02 82.39.34.226:2033 -> xxx.yyy.193.217:1433 SYN ******S*
64601
Feb 5 22:57:49 61.219.199.62:4237 -> xxx.yyy.1.37:119 SYN ******S*
Feb 5 22:57:49 61.219.199.62:4242 -> xxx.yyy.1.40:119 SYN ******S*
Feb 5 22:57:47 61.219.199.62:4243 -> xxx.yyy.1.41:119 SYN ******S*
Feb 5 22:57:50 61.219.199.62:4253 -> xxx.yyy.1.43:119 SYN ******S*
Feb 5 22:57:50 61.219.199.62:4322 -> xxx.yyy.1.68:119 SYN ******S*
Feb 5 22:57:50 61.219.199.62:4327 -> xxx.yyy.1.71:119 SYN ******S*
Feb 5 22:57:50 61.219.199.62:4328 -> xxx.yyy.1.72:119 SYN ******S*
Feb 5 22:57:47 61.219.199.62:4329 -> xxx.yyy.1.73:119 SYN ******S*
[...]
Feb 5 23:06:03 61.219.199.62:1638 -> xxx.yyy.255.212:119 SYN ******S*
Feb 5 23:06:03 61.219.199.62:1645 -> xxx.yyy.255.218:119 SYN ******S*
Feb 5 23:06:03 61.219.199.62:1635 -> xxx.yyy.255.209:119 SYN ******S*
Feb 5 23:06:03 61.219.199.62:1670 -> xxx.yyy.255.240:119 SYN ******S*
Feb 5 23:06:03 61.219.199.62:1660 -> xxx.yyy.255.231:119 SYN ******S*
Feb 5 23:06:03 61.219.199.62:1667 -> xxx.yyy.255.237:119 SYN ******S*
Feb 5 23:06:03 61.219.199.62:1681 -> xxx.yyy.255.250:119 SYN ******S*
Feb 5 23:06:03 61.219.199.62:1657 -> xxx.yyy.255.228:119 SYN ******S*
55066
Feb 5 10:36:41 212.33.102.36:2064 -> xxx.yyy.1.70:1433 SYN ******S*
Feb 5 10:36:41 212.33.102.36:2066 -> xxx.yyy.1.71:1433 SYN ******S*
Feb 5 10:36:44 212.33.102.36:1995 -> xxx.yyy.1.36:1433 SYN ******S*
Feb 5 10:36:41 212.33.102.36:2127 -> xxx.yyy.1.101:1433 SYN ******S*
Feb 5 10:36:41 212.33.102.36:1971 -> xxx.yyy.1.24:1433 SYN ******S*
Feb 5 10:36:41 212.33.102.36:1993 -> xxx.yyy.1.35:1433 SYN ******S*
Feb 5 10:36:41 212.33.102.36:2159 -> xxx.yyy.1.117:1433 SYN ******S*
Feb 5 10:36:42 212.33.102.36:1969 -> xxx.yyy.1.23:1433 SYN ******S*
[...]
Feb 5 10:48:24 212.33.102.36:3478 -> xxx.yyy.255.240:1433 SYN ******S*
Feb 5 10:48:24 212.33.102.36:3484 -> xxx.yyy.255.243:1433 SYN ******S*
Feb 5 10:48:24 212.33.102.36:3486 -> xxx.yyy.255.244:1433 SYN ******S*
Feb 5 10:48:24 212.33.102.36:3504 -> xxx.yyy.255.253:1433 SYN ******S*
Feb 5 10:48:24 212.33.102.36:3494 -> xxx.yyy.255.248:1433 SYN ******S*
Feb 5 10:48:24 212.33.102.36:3498 -> xxx.yyy.255.250:1433 SYN ******S*
Feb 5 10:48:24 212.33.102.36:3496 -> xxx.yyy.255.249:1433 SYN ******S*
Feb 5 10:48:24 212.33.102.36:3502 -> xxx.yyy.255.252:1433 SYN ******S*
Feb 5 10:48:24 212.33.102.36:3500 -> xxx.yyy.255.251:1433 SYN ******S*
46446
[...]
22068
Feb 5 02:45:10 144.13.47.47:3001 -> xxx.yyy.1.105:6129 SYN ******S*
Feb 5 02:45:10 144.13.47.47:3001 -> xxx.yyy.1.236:6129 SYN ******S*
Feb 5 02:45:10 144.13.47.47:3001 -> xxx.yyy.10.28:6129 SYN ******S*
Feb 5 02:45:10 144.13.47.47:3001 -> xxx.yyy.10.159:6129 SYN ******S*
Feb 5 02:45:10 144.13.47.47:3001 -> xxx.yyy.11.165:6129 SYN ******S*
Feb 5 02:45:10 144.13.47.47:3001 -> xxx.yyy.12.40:6129 SYN ******S*
Feb 5 02:45:10 144.13.47.47:3001 -> xxx.yyy.11.34:6129 SYN ******S*
Feb 5 02:45:10 144.13.47.47:3001 -> xxx.yyy.12.171:6129 SYN ******S*
[...]
Feb 5 03:43:53 144.13.47.47:3001 -> xxx.yyy.252.85:6129 SYN ******S*
Feb 5 03:43:53 144.13.47.47:3001 -> xxx.yyy.252.216:6129 SYN ******S*
Feb 5 03:43:53 144.13.47.47:3001 -> xxx.yyy.253.91:6129 SYN ******S*
Feb 5 03:43:53 144.13.47.47:3001 -> xxx.yyy.253.222:6129 SYN ******S*
Feb 5 03:43:53 144.13.47.47:3001 -> xxx.yyy.254.97:6129 SYN ******S*
Feb 5 03:43:53 144.13.47.47:3001 -> xxx.yyy.254.228:6129 SYN ******S*
Feb 5 03:43:53 144.13.47.47:3001 -> xxx.yyy.255.103:6129 SYN ******S*
Feb 5 03:43:53 144.13.47.47:3001 -> xxx.yyy.255.234:6129 SYN ******S*
20039
Feb 5 03:10:38 67.18.110.51:1652 -> xxx.yyy.1.0:3306 SYN ******S*
Feb 5 03:10:38 67.18.110.51:1653 -> xxx.yyy.1.1:3306 SYN ******S*
Feb 5 03:10:38 67.18.110.51:1654 -> xxx.yyy.1.2:3306 SYN ******S*
Feb 5 03:10:38 67.18.110.51:1655 -> xxx.yyy.1.3:3306 SYN ******S*
Feb 5 03:10:38 67.18.110.51:1656 -> xxx.yyy.1.4:3306 SYN ******S*
Feb 5 03:10:38 67.18.110.51:1657 -> xxx.yyy.1.5:3306 SYN ******S*
Feb 5 03:10:38 67.18.110.51:1658 -> xxx.yyy.1.6:3306 SYN ******S*
Feb 5 03:10:38 67.18.110.51:1659 -> xxx.yyy.1.7:3306 SYN ******S*
[...]
Feb 5 03:10:59 67.18.110.51:1654 -> xxx.yyy.255.232:3306 SYN ******S*
Feb 5 03:10:59 67.18.110.51:1655 -> xxx.yyy.255.233:3306 SYN ******S*
Feb 5 03:10:59 67.18.110.51:1669 -> xxx.yyy.255.247:3306 SYN ******S*
Feb 5 03:10:59 67.18.110.51:1670 -> xxx.yyy.255.248:3306 SYN ******S*
Feb 5 03:10:59 67.18.110.51:1671 -> xxx.yyy.255.249:3306 SYN ******S*
Feb 5 03:10:59 67.18.110.51:1674 -> xxx.yyy.255.252:3306 SYN ******S*
Feb 5 03:10:59 67.18.110.51:1675 -> xxx.yyy.255.253:3306 SYN ******S*
Feb 5 03:10:59 67.18.110.51:1676 -> xxx.yyy.255.254:3306 SYN ******S*
19054
Feb 5 22:54:25 148.221.67.123:3415 -> xxx.yyy.15.194:1433 SYN ******S*
Feb 5 22:54:28 148.221.67.123:3414 -> xxx.yyy.15.193:1433 SYN ******S*
Feb 5 22:54:28 148.221.67.123:3419 -> xxx.yyy.15.195:1433 SYN ******S*
Feb 5 22:54:28 148.221.67.123:3420 -> xxx.yyy.15.196:1433 SYN ******S*
Feb 5 22:54:28 148.221.67.123:1025 -> xxx.yyy.15.189:1433 SYN ******S*
Feb 5 22:54:28 148.221.67.123:1025 -> xxx.yyy.15.191:1433 SYN ******S*
Feb 5 22:54:28 148.221.67.123:1025 -> xxx.yyy.15.190:1433 SYN ******S*
Feb 5 22:54:28 148.221.67.123:1025 -> xxx.yyy.15.192:1433 SYN ******S*
[...]
Feb 6 00:00:00 148.221.67.123:3491 -> xxx.yyy.87.230:1433 SYN ******S*
Feb 6 00:00:00 148.221.67.123:3492 -> xxx.yyy.87.231:1433 SYN ******S*
Feb 6 00:00:00 148.221.67.123:3499 -> xxx.yyy.87.235:1433 SYN ******S*
Feb 6 00:00:00 148.221.67.123:3500 -> xxx.yyy.87.236:1433 SYN ******S*
Feb 6 00:00:00 148.221.67.123:3501 -> xxx.yyy.87.237:1433 SYN ******S*
Feb 6 00:00:00 148.221.67.123:3502 -> xxx.yyy.87.238:1433 SYN ******S*
Feb 6 00:00:00 148.221.67.123:3503 -> xxx.yyy.87.239:1433 SYN ******S*
Feb 6 00:00:00 148.221.67.123:3504 -> xxx.yyy.87.240:1433 SYN ******S*
Feb 6 00:00:01 148.221.67.123:3512 -> xxx.yyy.87.248:1433 SYN ******S*
18051
[...]
16197
Feb 5 01:25:58 222.82.236.254:2855 -> xxx.yyy.1.3:42 SYN ******S*
Feb 5 01:25:58 222.82.236.254:2867 -> xxx.yyy.1.9:42 SYN ******S*
Feb 5 01:25:58 222.82.236.254:2847 -> xxx.yyy.1.1:42 SYN ******S*
Feb 5 01:25:58 222.82.236.254:2846 -> xxx.yyy.1.0:42 SYN ******S*
Feb 5 01:25:58 222.82.236.254:2857 -> xxx.yyy.1.5:42 SYN ******S*
Feb 5 01:25:58 222.82.236.254:2858 -> xxx.yyy.1.6:42 SYN ******S*
Feb 5 01:25:58 222.82.236.254:2868 -> xxx.yyy.1.10:42 SYN ******S*
Feb 5 01:25:58 222.82.236.254:2940 -> xxx.yyy.1.46:42 SYN ******S*
[...]
Feb 5 18:58:09 222.82.236.254:6000 -> xxx.yyy.zzz.255:42 SYN ******S*
Feb 5 18:58:09 222.82.236.254:6000 -> xxx.yyy.zzz.254:42 SYN ******S*
Feb 5 18:58:09 222.82.236.254:6000 -> xxx.yyy.zzz.226:42 SYN ******S*
Feb 5 18:58:09 222.82.236.254:6000 -> xxx.yyy.zzz.232:42 SYN ******S*
Feb 5 18:58:09 222.82.236.254:6000 -> xxx.yyy.zzz.233:42 SYN ******S*
Feb 5 18:58:09 222.82.236.254:6000 -> xxx.yyy.zzz.240:42 SYN ******S*
Feb 5 18:58:09 222.82.236.254:6000 -> xxx.yyy.zzz.242:42 SYN ******S*
Feb 5 18:58:09 222.82.236.254:6000 -> xxx.yyy.zzz.244:42 SYN ******S*
Feb 5 18:58:09 222.82.236.254:6000 -> xxx.yyy.zzz.249:42 SYN ******S*
15111
Feb 5 21:54:29 84.58.0.9:3962 -> xxx.yyy.1.5:1433 SYN ******S*
Feb 5 21:54:32 84.58.0.9:3797 -> xxx.yyy.1.6:1433 SYN ******S*
Feb 5 21:54:33 84.58.0.9:3871 -> xxx.yyy.1.30:1433 SYN ******S*
Feb 5 21:54:33 84.58.0.9:3599 -> xxx.yyy.1.38:1433 SYN ******S*
Feb 5 21:54:33 84.58.0.9:3981 -> xxx.yyy.1.43:1433 SYN ******S*
Feb 5 21:54:30 84.58.0.9:3108 -> xxx.yyy.1.48:1433 SYN ******S*
Feb 5 21:54:33 84.58.0.9:3478 -> xxx.yyy.1.51:1433 SYN ******S*
Feb 5 21:54:33 84.58.0.9:3982 -> xxx.yyy.1.55:1433 SYN ******S*
[...]
Feb 5 22:29:35 84.58.0.9:3026 -> xxx.yyy.255.163:1433 SYN ******S*
Feb 5 22:29:35 84.58.0.9:4448 -> xxx.yyy.255.177:1433 SYN ******S*
Feb 5 22:29:36 84.58.0.9:4963 -> xxx.yyy.255.199:1433 SYN ******S*
Feb 5 22:29:36 84.58.0.9:4965 -> xxx.yyy.255.197:1433 SYN ******S*
Feb 5 22:29:36 84.58.0.9:3045 -> xxx.yyy.255.216:1433 SYN ******S*
Feb 5 22:29:36 84.58.0.9:3883 -> xxx.yyy.255.212:1433 SYN ******S*
Feb 5 22:29:36 84.58.0.9:3622 -> xxx.yyy.255.211:1433 SYN ******S*
Feb 5 22:29:37 84.58.0.9:3115 -> xxx.yyy.255.242:1433 SYN ******S*
Feb 5 22:29:37 84.58.0.9:3820 -> xxx.yyy.255.250:1433 SYN ******S*
14703
Feb 5 06:56:49 81.192.139.93:3661 -> xxx.yyy.72.124:5554 SYN ******S*
Feb 5 06:56:50 81.192.139.93:4465 -> xxx.yyy.72.124:1023 SYN ******S*
Feb 5 06:56:52 81.192.139.93:2096 -> xxx.yyy.72.124:9898 SYN ******S*
Feb 5 06:56:49 81.192.139.93:3662 -> xxx.yyy.72.125:5554 SYN ******S*
Feb 5 06:56:50 81.192.139.93:4466 -> xxx.yyy.72.125:1023 SYN ******S*
Feb 5 06:56:52 81.192.139.93:2097 -> xxx.yyy.72.125:9898 SYN ******S*
Feb 5 06:56:49 81.192.139.93:3663 -> xxx.yyy.72.126:5554 SYN ******S*
Feb 5 06:56:50 81.192.139.93:4467 -> xxx.yyy.72.126:1023 SYN ******S*
[...]
Feb 5 06:57:35 81.192.139.93:1778 -> xxx.yyy.92.155:9898 SYN ******S*
Feb 5 06:57:35 81.192.139.93:1779 -> xxx.yyy.92.156:9898 SYN ******S*
Feb 5 06:57:35 81.192.139.93:1780 -> xxx.yyy.92.157:9898 SYN ******S*
Feb 5 06:57:35 81.192.139.93:1781 -> xxx.yyy.92.158:9898 SYN ******S*
Feb 5 06:57:35 81.192.139.93:1782 -> xxx.yyy.92.159:9898 SYN ******S*
Feb 5 06:57:35 81.192.139.93:1783 -> xxx.yyy.92.160:9898 SYN ******S*
Feb 5 06:57:35 81.192.139.93:1784 -> xxx.yyy.92.161:9898 SYN ******S*
Feb 5 06:57:35 81.192.139.93:1785 -> xxx.yyy.92.165:9898 SYN ******S*
14280
Feb 5 08:52:54 222.99.190.175:2390 -> xxx.yyy.154.104:5554 SYN ******S*
Feb 5 08:52:55 222.99.190.175:2903 -> xxx.yyy.154.104:1023 SYN ******S*
Feb 5 08:52:57 222.99.190.175:3919 -> xxx.yyy.154.104:9898 SYN ******S*
Feb 5 08:52:54 222.99.190.175:2391 -> xxx.yyy.154.105:5554 SYN ******S*
Feb 5 08:52:55 222.99.190.175:2928 -> xxx.yyy.154.105:1023 SYN ******S*
Feb 5 08:52:57 222.99.190.175:3989 -> xxx.yyy.154.105:9898 SYN ******S*
Feb 5 08:52:54 222.99.190.175:2392 -> xxx.yyy.154.106:5554 SYN ******S*
Feb 5 08:52:55 222.99.190.175:2904 -> xxx.yyy.154.106:1023 SYN ******S*
[...]
Feb 5 08:53:38 222.99.190.175:3505 -> xxx.yyy.174.219:9898 SYN ******S*
Feb 5 08:53:38 222.99.190.175:3493 -> xxx.yyy.174.210:9898 SYN ******S*
Feb 5 08:53:38 222.99.190.175:3495 -> xxx.yyy.174.212:9898 SYN ******S*
Feb 5 08:53:38 222.99.190.175:3518 -> xxx.yyy.174.220:9898 SYN ******S*
Feb 5 08:53:38 222.99.190.175:3520 -> xxx.yyy.174.222:9898 SYN ******S*
Feb 5 08:53:38 222.99.190.175:3497 -> xxx.yyy.174.213:9898 SYN ******S*
Feb 5 08:53:38 222.99.190.175:3498 -> xxx.yyy.174.214:9898 SYN ******S*
Feb 5 08:53:38 222.99.190.175:3519 -> xxx.yyy.174.221:9898 SYN ******S*
14279
[...]
12478
[...]
12323
Feb 5 05:02:45 60.22.10.71:1693 -> xxx.yyy.133.14:5554 SYN ******S*
Feb 5 05:02:46 60.22.10.71:2199 -> xxx.yyy.133.14:1023 SYN ******S*
Feb 5 05:02:45 60.22.10.71:1694 -> xxx.yyy.133.15:5554 SYN ******S*
Feb 5 05:02:46 60.22.10.71:2200 -> xxx.yyy.133.15:1023 SYN ******S*
Feb 5 05:02:45 60.22.10.71:1697 -> xxx.yyy.133.16:5554 SYN ******S*
Feb 5 05:02:46 60.22.10.71:2204 -> xxx.yyy.133.16:1023 SYN ******S*
Feb 5 05:02:45 60.22.10.71:1700 -> xxx.yyy.133.19:5554 SYN ******S*
Feb 5 05:02:46 60.22.10.71:2206 -> xxx.yyy.133.19:1023 SYN ******S*
[...]
Feb 5 05:03:31 60.22.10.71:2871 -> xxx.yyy.153.73:9898 SYN ******S*
Feb 5 05:03:31 60.22.10.71:2903 -> xxx.yyy.153.98:9898 SYN ******S*
Feb 5 05:03:31 60.22.10.71:2922 -> xxx.yyy.153.115:9898 SYN ******S*
Feb 5 05:03:31 60.22.10.71:2931 -> xxx.yyy.153.125:9898 SYN ******S*
Feb 5 05:03:31 60.22.10.71:2945 -> xxx.yyy.153.114:9898 SYN ******S*
Feb 5 05:03:31 60.22.10.71:2948 -> xxx.yyy.153.111:9898 SYN ******S*
Feb 5 05:03:31 60.22.10.71:2959 -> xxx.yyy.153.112:9898 SYN ******S*
Feb 5 05:03:31 60.22.10.71:2972 -> xxx.yyy.153.134:9898 SYN ******S*
Feb 5 05:03:31 60.22.10.71:2983 -> xxx.yyy.153.135:9898 SYN ******S*
11966
[...]
11660
Feb 5 22:58:51 220.221.182.247:3178 -> xxx.yyy.153.140:5554 SYN ******S*
Feb 5 22:58:52 220.221.182.247:3414 -> xxx.yyy.153.140:1023 SYN ******S*
Feb 5 22:58:54 220.221.182.247:3822 -> xxx.yyy.153.140:9898 SYN ******S*
Feb 5 22:58:51 220.221.182.247:3173 -> xxx.yyy.153.136:5554 SYN ******S*
Feb 5 22:58:52 220.221.182.247:3410 -> xxx.yyy.153.136:1023 SYN ******S*
Feb 5 22:58:54 220.221.182.247:3814 -> xxx.yyy.153.136:9898 SYN ******S*
Feb 5 22:58:51 220.221.182.247:3174 -> xxx.yyy.153.137:5554 SYN ******S*
Feb 5 22:58:51 220.221.182.247:3177 -> xxx.yyy.153.139:5554 SYN ******S*
[...]
Feb 5 23:00:23 220.221.182.247:2235 -> xxx.yyy.173.252:9898 SYN ******S*
Feb 5 23:00:23 220.221.182.247:2229 -> xxx.yyy.173.246:9898 SYN ******S*
Feb 5 23:00:23 220.221.182.247:2237 -> xxx.yyy.173.254:9898 SYN ******S*
Feb 5 23:00:23 220.221.182.247:2238 -> xxx.yyy.173.255:9898 SYN ******S*
Feb 5 23:00:23 220.221.182.247:2233 -> xxx.yyy.173.250:9898 SYN ******S*
Feb 5 23:00:23 220.221.182.247:2234 -> xxx.yyy.173.251:9898 SYN ******S*
Feb 5 23:00:23 220.221.182.247:2239 -> xxx.yyy.174.0:9898 SYN ******S*
Feb 5 23:00:23 220.221.182.247:2241 -> xxx.yyy.174.1:9898 SYN ******S*
Feb 5 23:00:23 220.221.182.247:2242 -> xxx.yyy.174.2:9898 SYN ******S*
11078
Feb 5 12:45:41 218.65.251.180:2374 -> xxx.yyy.1.23:4899 SYN ******S*
Feb 5 12:45:41 218.65.251.180:2376 -> xxx.yyy.1.25:4899 SYN ******S*
Feb 5 12:45:41 218.65.251.180:2372 -> xxx.yyy.1.21:4899 SYN ******S*
Feb 5 12:45:41 218.65.251.180:2391 -> xxx.yyy.1.66:4899 SYN ******S*
Feb 5 12:45:41 218.65.251.180:2382 -> xxx.yyy.1.43:4899 SYN ******S*
Feb 5 12:45:41 218.65.251.180:2384 -> xxx.yyy.1.45:4899 SYN ******S*
Feb 5 12:45:41 218.65.251.180:2397 -> xxx.yyy.1.72:4899 SYN ******S*
Feb 5 12:45:41 218.65.251.180:2403 -> xxx.yyy.1.78:4899 SYN ******S*
[...]
Feb 5 12:45:55 218.65.251.180:1320 -> xxx.yyy.255.216:4899 SYN ******S*
Feb 5 12:45:55 218.65.251.180:1244 -> xxx.yyy.255.137:4899 SYN ******S*
Feb 5 12:45:55 218.65.251.180:1267 -> xxx.yyy.255.163:4899 SYN ******S*
Feb 5 12:45:55 218.65.251.180:1342 -> xxx.yyy.255.238:4899 SYN ******S*
Feb 5 12:45:55 218.65.251.180:1326 -> xxx.yyy.255.222:4899 SYN ******S*
Feb 5 12:45:55 218.65.251.180:1334 -> xxx.yyy.255.230:4899 SYN ******S*
Feb 5 12:45:55 218.65.251.180:1344 -> xxx.yyy.255.240:4899 SYN ******S*
Feb 5 12:45:55 218.65.251.180:1357 -> xxx.yyy.255.254:4899 SYN ******S*
10376
[...]
10192
Feb 5 23:56:43 60.176.254.225:4730 -> xxx.yyy.72.127:5554 SYN ******S*
Feb 5 23:56:43 60.176.254.225:4731 -> xxx.yyy.72.128:5554 SYN ******S*
Feb 5 23:56:43 60.176.254.225:4736 -> xxx.yyy.72.133:5554 SYN ******S*
Feb 5 23:56:43 60.176.254.225:4732 -> xxx.yyy.72.129:5554 SYN ******S*
Feb 5 23:56:43 60.176.254.225:4737 -> xxx.yyy.72.134:5554 SYN ******S*
Feb 5 23:56:43 60.176.254.225:4733 -> xxx.yyy.72.130:5554 SYN ******S*
Feb 5 23:56:43 60.176.254.225:4734 -> xxx.yyy.72.131:5554 SYN ******S*
Feb 5 23:56:43 60.176.254.225:4738 -> xxx.yyy.72.135:5554 SYN ******S*
[...]
Feb 5 23:57:33 60.176.254.225:3881 -> xxx.yyy.92.241:9898 SYN ******S*
Feb 5 23:57:33 60.176.254.225:3882 -> xxx.yyy.92.240:9898 SYN ******S*
Feb 5 23:57:33 60.176.254.225:3828 -> xxx.yyy.92.216:9898 SYN ******S*
Feb 5 23:57:33 60.176.254.225:3886 -> xxx.yyy.92.238:9898 SYN ******S*
Feb 5 23:57:33 60.176.254.225:3761 -> xxx.yyy.92.219:9898 SYN ******S*
Feb 5 23:57:33 60.176.254.225:3893 -> xxx.yyy.92.221:9898 SYN ******S*
Feb 5 23:57:33 60.176.254.225:3823 -> xxx.yyy.92.245:9898 SYN ******S*
Feb 5 23:57:33 60.176.254.225:3831 -> xxx.yyy.92.239:9898 SYN ******S*
Feb 5 23:57:33 60.176.254.225:3879 -> xxx.yyy.92.243:9898 SYN ******S*
10154
Feb 5 22:58:11 220.100.204.135:2307 -> xxx.yyy.133.234:5554 SYN ******S*
Feb 5 22:58:12 220.100.204.135:2506 -> xxx.yyy.133.234:1023 SYN ******S*
Feb 5 22:58:14 220.100.204.135:2860 -> xxx.yyy.133.234:9898 SYN ******S*
Feb 5 22:58:11 220.100.204.135:2334 -> xxx.yyy.134.5:5554 SYN ******S*
Feb 5 22:58:11 220.100.204.135:2335 -> xxx.yyy.134.6:5554 SYN ******S*
Feb 5 22:58:11 220.100.204.135:2337 -> xxx.yyy.134.8:5554 SYN ******S*
Feb 5 22:58:12 220.100.204.135:2587 -> xxx.yyy.134.8:1023 SYN ******S*
Feb 5 22:58:11 220.100.204.135:2338 -> xxx.yyy.134.9:5554 SYN ******S*
[...]
Feb 5 22:59:54 220.100.204.135:4853 -> xxx.yyy.154.85:9898 SYN ******S*
Feb 5 22:59:52 220.100.204.135:4371 -> xxx.yyy.154.89:1023 SYN ******S*
Feb 5 22:59:54 220.100.204.135:4858 -> xxx.yyy.154.89:9898 SYN ******S*
Feb 5 22:59:52 220.100.204.135:4373 -> xxx.yyy.154.91:1023 SYN ******S*
Feb 5 22:59:54 220.100.204.135:4860 -> xxx.yyy.154.91:9898 SYN ******S*
Feb 5 22:59:53 220.100.204.135:4514 -> xxx.yyy.154.12:9898 SYN ******S*
Feb 5 22:59:53 220.100.204.135:4541 -> xxx.yyy.154.16:9898 SYN ******S*
Feb 5 22:59:54 220.100.204.135:4822 -> xxx.yyy.154.71:9898 SYN ******S*
Feb 5 22:59:54 220.100.204.135:4826 -> xxx.yyy.154.73:9898 SYN ******S*
9846
--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
More information about the Intrusions
mailing list