[Intrusions] [LOGS] Summary of large-scale portscanning detects

Ken.Connelly at uni.edu Ken.Connelly at uni.edu
Sat Jan 1 14:35:57 GMT 2005


The following extracts show the beginning and ending of scan activity
was detected on my network.  The number following each set is the total
number of probes for that source.  Timestamps are GMT-0600.

Dec 31 17:45:57 222.104.208.84:3531 -> xxx.yyy.33.1:4899 SYN ******S* 
Dec 31 17:45:57 222.104.208.84:3532 -> xxx.yyy.33.1:5900 SYN ******S* 
Dec 31 17:45:58 222.104.208.84:3533 -> xxx.yyy.33.2:5900 SYN ******S* 
Dec 31 17:45:58 222.104.208.84:3534 -> xxx.yyy.33.2:4899 SYN ******S* 
Dec 31 17:45:58 222.104.208.84:3535 -> xxx.yyy.33.3:5900 SYN ******S* 
Dec 31 17:45:58 222.104.208.84:3536 -> xxx.yyy.33.3:4899 SYN ******S* 
Dec 31 17:45:58 222.104.208.84:3537 -> xxx.yyy.33.4:5900 SYN ******S* 
Dec 31 17:45:56 222.104.208.84:3538 -> xxx.yyy.33.4:4899 SYN ******S* 
[...]
Dec 31 23:59:57 222.104.208.84:3553 -> xxx.yyy.221.88:5900 SYN ******S* 
Dec 31 23:59:58 222.104.208.84:3568 -> xxx.yyy.220.183:5900 SYN ******S* 
Dec 31 23:59:58 222.104.208.84:3569 -> xxx.yyy.220.126:5900 SYN ******S* 
Dec 31 23:59:58 222.104.208.84:3573 -> xxx.yyy.220.229:5900 SYN ******S* 
Dec 31 23:59:58 222.104.208.84:3576 -> xxx.yyy.132.33:5900 SYN ******S* 
Dec 31 23:59:59 222.104.208.84:3584 -> xxx.yyy.221.167:5900 SYN ******S* 
Dec 31 23:59:59 222.104.208.84:3595 -> xxx.yyy.222.16:5900 SYN ******S* 
Dec 31 23:59:59 222.104.208.84:3618 -> xxx.yyy.220.179:5900 SYN ******S* 
434569

Dec 31 08:31:29 81.218.142.48:22002 -> xxx.yyy.1.0:3127 SYN ******S* 
Dec 31 08:31:29 81.218.142.48:22002 -> xxx.yyy.1.0:1080 SYN ******S* 
Dec 31 08:31:29 81.218.142.48:22002 -> xxx.yyy.1.0:10080 SYN ******S* 
Dec 31 08:31:29 81.218.142.48:22002 -> xxx.yyy.1.0:3128 SYN ******S* 
Dec 31 08:31:29 81.218.142.48:22002 -> xxx.yyy.1.1:3127 SYN ******S* 
Dec 31 08:31:30 81.218.142.48:22002 -> xxx.yyy.1.1:1080 SYN ******S* 
Dec 31 08:31:30 81.218.142.48:22002 -> xxx.yyy.1.1:10080 SYN ******S* 
Dec 31 08:31:30 81.218.142.48:22002 -> xxx.yyy.1.1:3128 SYN ******S* 
[...]
Dec 31 17:38:19 81.218.142.48:22002 -> xxx.yyy.255.253:10080 SYN ******S* 
Dec 31 17:38:19 81.218.142.48:22002 -> xxx.yyy.255.253:3128 SYN ******S* 
Dec 31 17:38:19 81.218.142.48:22002 -> xxx.yyy.255.254:3127 SYN ******S* 
Dec 31 17:38:20 81.218.142.48:22002 -> xxx.yyy.255.254:1080 SYN ******S* 
Dec 31 17:38:20 81.218.142.48:22002 -> xxx.yyy.255.254:3128 SYN ******S* 
Dec 31 17:38:20 81.218.142.48:22002 -> xxx.yyy.255.255:3127 SYN ******S* 
Dec 31 17:38:20 81.218.142.48:22002 -> xxx.yyy.255.255:1080 SYN ******S* 
Dec 31 17:38:20 81.218.142.48:22002 -> xxx.yyy.255.255:10080 SYN ******S* 
Dec 31 17:38:20 81.218.142.48:22002 -> xxx.yyy.255.255:3128 SYN ******S* 
177619

Dec 31 06:02:16 220.35.204.115:22002 -> xxx.yyy.1.0:3127 SYN ******S* 
Dec 31 06:02:16 220.35.204.115:22002 -> xxx.yyy.1.0:1080 SYN ******S* 
Dec 31 06:02:16 220.35.204.115:22002 -> xxx.yyy.1.0:10080 SYN ******S* 
Dec 31 06:02:17 220.35.204.115:22002 -> xxx.yyy.1.0:3128 SYN ******S* 
Dec 31 06:02:17 220.35.204.115:22002 -> xxx.yyy.1.1:3127 SYN ******S* 
Dec 31 06:02:17 220.35.204.115:22002 -> xxx.yyy.1.1:1080 SYN ******S* 
Dec 31 06:02:17 220.35.204.115:22002 -> xxx.yyy.1.1:10080 SYN ******S* 
Dec 31 06:02:17 220.35.204.115:22002 -> xxx.yyy.1.1:3128 SYN ******S* 
[...]
Dec 31 13:21:20 220.35.204.115:22002 -> xxx.yyy.241.53:1080 SYN ******S* 
Dec 31 13:21:20 220.35.204.115:22002 -> xxx.yyy.241.53:10080 SYN ******S* 
Dec 31 13:21:21 220.35.204.115:22002 -> xxx.yyy.241.53:3128 SYN ******S* 
Dec 31 13:21:21 220.35.204.115:22002 -> xxx.yyy.241.54:3127 SYN ******S* 
Dec 31 13:21:21 220.35.204.115:22002 -> xxx.yyy.241.54:1080 SYN ******S* 
Dec 31 13:21:21 220.35.204.115:22002 -> xxx.yyy.241.54:10080 SYN ******S* 
Dec 31 13:21:21 220.35.204.115:22002 -> xxx.yyy.241.54:3128 SYN ******S* 
Dec 31 13:21:21 220.35.204.115:22002 -> xxx.yyy.241.55:3127 SYN ******S* 
Dec 31 13:21:21 220.35.204.115:22002 -> xxx.yyy.241.55:1080 SYN ******S* 
156304

Dec 31 08:36:39 221.198.27.104:4249 -> xxx.yyy.1.0:1433 SYN ******S* 
Dec 31 08:36:40 221.198.27.104:4252 -> xxx.yyy.1.1:1433 SYN ******S* 
Dec 31 08:36:40 221.198.27.104:4253 -> xxx.yyy.1.2:1433 SYN ******S* 
Dec 31 08:36:40 221.198.27.104:4254 -> xxx.yyy.1.3:1433 SYN ******S* 
Dec 31 08:36:40 221.198.27.104:4255 -> xxx.yyy.1.4:1433 SYN ******S* 
Dec 31 08:36:40 221.198.27.104:4256 -> xxx.yyy.1.5:1433 SYN ******S* 
Dec 31 08:36:40 221.198.27.104:4257 -> xxx.yyy.1.6:1433 SYN ******S* 
Dec 31 08:36:37 221.198.27.104:4258 -> xxx.yyy.1.7:1433 SYN ******S* 
[...]
Dec 31 12:30:07 221.198.27.104:3972 -> xxx.yyy.255.245:1433 SYN ******S* 
Dec 31 12:30:08 221.198.27.104:3985 -> xxx.yyy.255.246:1433 SYN ******S* 
Dec 31 12:30:08 221.198.27.104:3988 -> xxx.yyy.255.247:1433 SYN ******S* 
Dec 31 12:30:08 221.198.27.104:3989 -> xxx.yyy.255.248:1433 SYN ******S* 
Dec 31 12:30:09 221.198.27.104:3995 -> xxx.yyy.255.249:1433 SYN ******S* 
Dec 31 12:30:09 221.198.27.104:3998 -> xxx.yyy.255.250:1433 SYN ******S* 
Dec 31 12:30:10 221.198.27.104:4011 -> xxx.yyy.255.253:1433 SYN ******S* 
Dec 31 12:30:10 221.198.27.104:4013 -> xxx.yyy.255.254:1433 SYN ******S* 
123262

Dec 31 10:37:16 80.8.36.16:2491 -> xxx.yyy.1.4:1433 SYN ******S* 
Dec 31 10:37:16 80.8.36.16:2492 -> xxx.yyy.1.1:1433 SYN ******S* 
Dec 31 10:37:16 80.8.36.16:2493 -> xxx.yyy.1.2:1433 SYN ******S* 
Dec 31 10:37:16 80.8.36.16:2494 -> xxx.yyy.1.5:1433 SYN ******S* 
Dec 31 10:37:16 80.8.36.16:2496 -> xxx.yyy.1.7:1433 SYN ******S* 
Dec 31 10:37:16 80.8.36.16:2495 -> xxx.yyy.1.6:1433 SYN ******S* 
Dec 31 10:37:16 80.8.36.16:2490 -> xxx.yyy.1.3:1433 SYN ******S* 
Dec 31 10:37:16 80.8.36.16:2497 -> xxx.yyy.1.8:1433 SYN ******S* 
[...]
Dec 31 12:33:24 80.8.36.16:1810 -> xxx.yyy.255.245:1433 SYN ******S* 
Dec 31 12:33:24 80.8.36.16:1811 -> xxx.yyy.255.246:1433 SYN ******S* 
Dec 31 12:33:24 80.8.36.16:1820 -> xxx.yyy.255.249:1433 SYN ******S* 
Dec 31 12:33:25 80.8.36.16:1822 -> xxx.yyy.255.250:1433 SYN ******S* 
Dec 31 12:33:25 80.8.36.16:1827 -> xxx.yyy.255.252:1433 SYN ******S* 
Dec 31 12:33:25 80.8.36.16:1826 -> xxx.yyy.255.251:1433 SYN ******S* 
Dec 31 12:33:25 80.8.36.16:1834 -> xxx.yyy.255.254:1433 SYN ******S* 
Dec 31 12:33:25 80.8.36.16:1833 -> xxx.yyy.255.253:1433 SYN ******S* 
123178

Dec 31 07:31:21 151.197.187.9:2862 -> xxx.yyy.1.1:1433 SYN ******S* 
Dec 31 07:31:21 151.197.187.9:2863 -> xxx.yyy.1.2:1433 SYN ******S* 
Dec 31 07:31:21 151.197.187.9:2864 -> xxx.yyy.1.3:1433 SYN ******S* 
Dec 31 07:31:21 151.197.187.9:2865 -> xxx.yyy.1.4:1433 SYN ******S* 
Dec 31 07:31:21 151.197.187.9:2866 -> xxx.yyy.1.5:1433 SYN ******S* 
Dec 31 07:31:21 151.197.187.9:2867 -> xxx.yyy.1.6:1433 SYN ******S* 
Dec 31 07:31:21 151.197.187.9:2868 -> xxx.yyy.1.7:1433 SYN ******S* 
Dec 31 07:31:21 151.197.187.9:2869 -> xxx.yyy.1.8:1433 SYN ******S* 
[...]
Dec 31 09:26:00 151.197.187.9:4062 -> xxx.yyy.255.245:1433 SYN ******S* 
Dec 31 09:26:00 151.197.187.9:4067 -> xxx.yyy.255.248:1433 SYN ******S* 
Dec 31 09:26:00 151.197.187.9:4065 -> xxx.yyy.255.246:1433 SYN ******S* 
Dec 31 09:26:00 151.197.187.9:4066 -> xxx.yyy.255.247:1433 SYN ******S* 
Dec 31 09:26:00 151.197.187.9:4072 -> xxx.yyy.255.250:1433 SYN ******S* 
Dec 31 09:26:00 151.197.187.9:4071 -> xxx.yyy.255.249:1433 SYN ******S* 
Dec 31 09:26:00 151.197.187.9:4085 -> xxx.yyy.255.252:1433 SYN ******S* 
Dec 31 09:26:00 151.197.187.9:4080 -> xxx.yyy.255.251:1433 SYN ******S* 
Dec 31 09:26:00 151.197.187.9:4108 -> xxx.yyy.255.253:1433 SYN ******S* 
122751

Dec 31 07:02:24 213.3.35.218:57462 -> xxx.yyy.10.0:1433 SYN ******S* 
Dec 31 07:02:24 213.3.35.218:57464 -> xxx.yyy.10.2:1433 SYN ******S* 
Dec 31 07:02:24 213.3.35.218:57463 -> xxx.yyy.10.1:1433 SYN ******S* 
Dec 31 07:02:24 213.3.35.218:57466 -> xxx.yyy.10.4:1433 SYN ******S* 
Dec 31 07:02:24 213.3.35.218:57465 -> xxx.yyy.10.3:1433 SYN ******S* 
Dec 31 07:02:24 213.3.35.218:57468 -> xxx.yyy.10.6:1433 SYN ******S* 
Dec 31 07:02:24 213.3.35.218:57467 -> xxx.yyy.10.5:1433 SYN ******S* 
Dec 31 07:02:24 213.3.35.218:57475 -> xxx.yyy.10.7:1433 SYN ******S* 
[...]
Dec 31 10:43:07 213.3.35.218:61295 -> xxx.yyy.255.246:1433 SYN ******S* 
Dec 31 10:43:07 213.3.35.218:61297 -> xxx.yyy.255.247:1433 SYN ******S* 
Dec 31 10:43:07 213.3.35.218:61299 -> xxx.yyy.255.248:1433 SYN ******S* 
Dec 31 10:43:07 213.3.35.218:61306 -> xxx.yyy.255.249:1433 SYN ******S* 
Dec 31 10:43:08 213.3.35.218:61308 -> xxx.yyy.255.250:1433 SYN ******S* 
Dec 31 10:43:08 213.3.35.218:61311 -> xxx.yyy.255.252:1433 SYN ******S* 
Dec 31 10:43:08 213.3.35.218:61310 -> xxx.yyy.255.251:1433 SYN ******S* 
Dec 31 10:43:08 213.3.35.218:61316 -> xxx.yyy.255.253:1433 SYN ******S* 
Dec 31 10:43:08 213.3.35.218:61319 -> xxx.yyy.255.254:1433 SYN ******S* 
122303

Dec 31 01:49:50 211.246.176.116:4277 -> xxx.yyy.64.0:1433 SYN ******S* 
Dec 31 01:49:50 211.246.176.116:4278 -> xxx.yyy.64.1:1433 SYN ******S* 
Dec 31 01:49:50 211.246.176.116:4279 -> xxx.yyy.64.2:1433 SYN ******S* 
Dec 31 01:49:50 211.246.176.116:4280 -> xxx.yyy.64.3:1433 SYN ******S* 
Dec 31 01:49:50 211.246.176.116:4281 -> xxx.yyy.64.4:1433 SYN ******S* 
Dec 31 01:49:50 211.246.176.116:4282 -> xxx.yyy.64.5:1433 SYN ******S* 
Dec 31 01:49:50 211.246.176.116:4283 -> xxx.yyy.64.6:1433 SYN ******S* 
Dec 31 01:49:50 211.246.176.116:4286 -> xxx.yyy.64.9:1433 SYN ******S* 
[...]
Dec 31 04:20:33 211.246.176.116:2994 -> xxx.yyy.232.12:1433 SYN ******S* 
Dec 31 04:20:33 211.246.176.116:2995 -> xxx.yyy.232.13:1433 SYN ******S* 
Dec 31 04:20:33 211.246.176.116:2993 -> xxx.yyy.232.11:1433 SYN ******S* 
Dec 31 04:20:33 211.246.176.116:2999 -> xxx.yyy.232.17:1433 SYN ******S* 
Dec 31 04:20:33 211.246.176.116:3000 -> xxx.yyy.232.18:1433 SYN ******S* 
Dec 31 04:20:33 211.246.176.116:2998 -> xxx.yyy.232.16:1433 SYN ******S* 
Dec 31 04:20:33 211.246.176.116:3001 -> xxx.yyy.232.19:1433 SYN ******S* 
Dec 31 04:20:38 211.246.176.116:3007 -> xxx.yyy.232.21:1433 SYN ******S* 
Dec 31 04:20:38 211.246.176.116:3008 -> xxx.yyy.232.22:1433 SYN ******S* 
96717

Dec 31 21:16:49 61.190.44.81:3200 -> xxx.yyy.184.5:5900 SYN ******S* 
Dec 31 21:16:49 61.190.44.81:3202 -> xxx.yyy.184.6:5900 SYN ******S* 
Dec 31 21:16:49 61.190.44.81:3206 -> xxx.yyy.184.8:5900 SYN ******S* 
Dec 31 21:16:49 61.190.44.81:3209 -> xxx.yyy.184.11:5900 SYN ******S* 
Dec 31 21:16:49 61.190.44.81:3210 -> xxx.yyy.184.10:5900 SYN ******S* 
Dec 31 21:16:49 61.190.44.81:3213 -> xxx.yyy.184.12:5900 SYN ******S* 
Dec 31 21:16:46 61.190.44.81:3215 -> xxx.yyy.184.13:5900 SYN ******S* 
Dec 31 21:16:49 61.190.44.81:3217 -> xxx.yyy.184.14:5900 SYN ******S* 
[...]
Dec 31 22:49:02 61.190.44.81:2757 -> xxx.yyy.221.103:5900 SYN ******S* 
Dec 31 22:49:03 61.190.44.81:2781 -> xxx.yyy.222.25:5900 SYN ******S* 
Dec 31 22:49:05 61.190.44.81:2848 -> xxx.yyy.209.60:5900 SYN ******S* 
Dec 31 22:49:07 61.190.44.81:2919 -> xxx.yyy.221.48:5900 SYN ******S* 
Dec 31 22:49:08 61.190.44.81:2957 -> xxx.yyy.222.11:5900 SYN ******S* 
Dec 31 22:49:10 61.190.44.81:3032 -> xxx.yyy.221.103:5900 SYN ******S* 
Dec 31 22:49:12 61.190.44.81:3079 -> xxx.yyy.222.25:5900 SYN ******S* 
Dec 31 22:49:13 61.190.44.81:3130 -> xxx.yyy.209.60:5900 SYN ******S* 
80438

Dec 31 04:15:10 217.141.204.70:52954 -> xxx.yyy.1.1:22 SYN ******S* 
Dec 31 04:15:13 217.141.204.70:52958 -> xxx.yyy.1.5:22 SYN ******S* 
Dec 31 04:15:13 217.141.204.70:52959 -> xxx.yyy.1.6:22 SYN ******S* 
Dec 31 04:15:10 217.141.204.70:52962 -> xxx.yyy.1.9:22 SYN ******S* 
Dec 31 04:15:13 217.141.204.70:52961 -> xxx.yyy.1.8:22 SYN ******S* 
Dec 31 04:15:13 217.141.204.70:52960 -> xxx.yyy.1.7:22 SYN ******S* 
Dec 31 04:15:13 217.141.204.70:52963 -> xxx.yyy.1.10:22 SYN ******S* 
Dec 31 04:15:13 217.141.204.70:52966 -> xxx.yyy.1.13:22 SYN ******S* 
[...]
Dec 31 04:25:42 217.141.204.70:61000 -> xxx.yyy.254.244:22 SYN ******S* 
Dec 31 04:25:42 217.141.204.70:32774 -> xxx.yyy.254.249:22 SYN ******S* 
Dec 31 04:25:42 217.141.204.70:32770 -> xxx.yyy.254.245:22 SYN ******S* 
Dec 31 04:25:42 217.141.204.70:32772 -> xxx.yyy.254.247:22 SYN ******S* 
Dec 31 04:25:42 217.141.204.70:32779 -> xxx.yyy.254.254:22 SYN ******S* 
Dec 31 04:25:42 217.141.204.70:32773 -> xxx.yyy.254.248:22 SYN ******S* 
Dec 31 04:25:42 217.141.204.70:32778 -> xxx.yyy.254.253:22 SYN ******S* 
Dec 31 04:25:42 217.141.204.70:32776 -> xxx.yyy.254.251:22 SYN ******S* 
Dec 31 04:25:42 217.141.204.70:32777 -> xxx.yyy.254.252:22 SYN ******S* 
63053

Dec 31 06:46:22 218.104.83.179:4630 -> xxx.yyy.1.0:1433 SYN ******S* 
Dec 31 06:46:22 218.104.83.179:4632 -> xxx.yyy.1.1:1433 SYN ******S* 
Dec 31 06:46:23 218.104.83.179:4634 -> xxx.yyy.1.2:1433 SYN ******S* 
Dec 31 06:46:23 218.104.83.179:4636 -> xxx.yyy.1.3:1433 SYN ******S* 
Dec 31 06:46:23 218.104.83.179:4640 -> xxx.yyy.1.4:1433 SYN ******S* 
Dec 31 06:46:23 218.104.83.179:4643 -> xxx.yyy.1.5:1433 SYN ******S* 
Dec 31 06:46:23 218.104.83.179:4644 -> xxx.yyy.1.6:1433 SYN ******S* 
Dec 31 06:46:23 218.104.83.179:4647 -> xxx.yyy.1.7:1433 SYN ******S* 
[...]
Dec 31 09:00:44 218.104.83.179:37866 -> xxx.yyy.150.178:1433 SYN ******S* 
Dec 31 09:00:44 218.104.83.179:37867 -> xxx.yyy.150.179:1433 SYN ******S* 
Dec 31 09:00:44 218.104.83.179:37646 -> xxx.yyy.150.135:1433 SYN ******S* 
Dec 31 09:00:44 218.104.83.179:37871 -> xxx.yyy.150.180:1433 SYN ******S* 
Dec 31 09:00:44 218.104.83.179:37873 -> xxx.yyy.150.181:1433 SYN ******S* 
Dec 31 09:00:44 218.104.83.179:37874 -> xxx.yyy.150.182:1433 SYN ******S* 
Dec 31 09:00:44 218.104.83.179:37875 -> xxx.yyy.150.183:1433 SYN ******S* 
Dec 31 09:00:44 218.104.83.179:37876 -> xxx.yyy.150.184:1433 SYN ******S* 
Dec 31 09:00:45 218.104.83.179:37882 -> xxx.yyy.150.185:1433 SYN ******S* 
49132

[...]
45176

[...]
41306

Dec 31 09:06:40 212.88.230.61:4224 -> xxx.yyy.1.0:1433 SYN ******S* 
Dec 31 09:06:40 212.88.230.61:4226 -> xxx.yyy.1.1:1433 SYN ******S* 
Dec 31 09:06:40 212.88.230.61:4227 -> xxx.yyy.1.2:1433 SYN ******S* 
Dec 31 09:06:40 212.88.230.61:4228 -> xxx.yyy.1.3:1433 SYN ******S* 
Dec 31 09:06:40 212.88.230.61:4229 -> xxx.yyy.1.4:1433 SYN ******S* 
Dec 31 09:06:40 212.88.230.61:4230 -> xxx.yyy.1.5:1433 SYN ******S* 
Dec 31 09:06:40 212.88.230.61:4232 -> xxx.yyy.1.7:1433 SYN ******S* 
Dec 31 09:06:40 212.88.230.61:4231 -> xxx.yyy.1.6:1433 SYN ******S* 
[...]
Dec 31 11:09:07 212.88.230.61:2723 -> xxx.yyy.137.142:1433 SYN ******S* 
Dec 31 11:09:07 212.88.230.61:2725 -> xxx.yyy.137.143:1433 SYN ******S* 
Dec 31 11:09:08 212.88.230.61:2733 -> xxx.yyy.137.144:1433 SYN ******S* 
Dec 31 11:09:08 212.88.230.61:2734 -> xxx.yyy.137.145:1433 SYN ******S* 
Dec 31 11:09:08 212.88.230.61:2736 -> xxx.yyy.137.146:1433 SYN ******S* 
Dec 31 11:09:08 212.88.230.61:2738 -> xxx.yyy.137.147:1433 SYN ******S* 
Dec 31 11:09:08 212.88.230.61:2740 -> xxx.yyy.137.148:1433 SYN ******S* 
Dec 31 11:09:08 212.88.230.61:2743 -> xxx.yyy.137.149:1433 SYN ******S* 
Dec 31 11:09:08 212.88.230.61:2745 -> xxx.yyy.137.150:1433 SYN ******S* 
41223

Dec 31 02:58:01 217.130.26.93:4677 -> xxx.yyy.1.1:1433 SYN ******S* 
Dec 31 02:58:01 217.130.26.93:4679 -> xxx.yyy.1.3:1433 SYN ******S* 
Dec 31 02:58:01 217.130.26.93:4676 -> xxx.yyy.1.0:1433 SYN ******S* 
Dec 31 02:58:01 217.130.26.93:4678 -> xxx.yyy.1.2:1433 SYN ******S* 
Dec 31 02:58:01 217.130.26.93:4680 -> xxx.yyy.1.4:1433 SYN ******S* 
Dec 31 02:58:01 217.130.26.93:4681 -> xxx.yyy.1.5:1433 SYN ******S* 
Dec 31 02:58:01 217.130.26.93:4685 -> xxx.yyy.1.9:1433 SYN ******S* 
Dec 31 02:58:01 217.130.26.93:4687 -> xxx.yyy.1.11:1433 SYN ******S* 
[...]
Dec 31 02:59:56 217.130.26.93:4642 -> xxx.yyy.255.246:1433 SYN ******S* 
Dec 31 02:59:56 217.130.26.93:4643 -> xxx.yyy.255.247:1433 SYN ******S* 
Dec 31 02:59:56 217.130.26.93:4646 -> xxx.yyy.255.250:1433 SYN ******S* 
Dec 31 02:59:56 217.130.26.93:4644 -> xxx.yyy.255.248:1433 SYN ******S* 
Dec 31 02:59:56 217.130.26.93:4645 -> xxx.yyy.255.249:1433 SYN ******S* 
Dec 31 02:59:56 217.130.26.93:4647 -> xxx.yyy.255.251:1433 SYN ******S* 
Dec 31 02:59:56 217.130.26.93:4648 -> xxx.yyy.255.252:1433 SYN ******S* 
Dec 31 02:59:56 217.130.26.93:4649 -> xxx.yyy.255.253:1433 SYN ******S* 
Dec 31 02:59:56 217.130.26.93:4650 -> xxx.yyy.255.254:1433 SYN ******S* 
39133

Dec 31 08:57:28 213.213.218.44:1852 -> xxx.yyy.1.0:1433 SYN ******S* 
Dec 31 08:57:28 213.213.218.44:1853 -> xxx.yyy.1.1:1433 SYN ******S* 
Dec 31 08:57:28 213.213.218.44:1855 -> xxx.yyy.1.2:1433 SYN ******S* 
Dec 31 08:57:28 213.213.218.44:1857 -> xxx.yyy.1.3:1433 SYN ******S* 
Dec 31 08:57:28 213.213.218.44:1859 -> xxx.yyy.1.4:1433 SYN ******S* 
Dec 31 08:57:28 213.213.218.44:1861 -> xxx.yyy.1.5:1433 SYN ******S* 
Dec 31 08:57:28 213.213.218.44:1863 -> xxx.yyy.1.6:1433 SYN ******S* 
Dec 31 08:57:26 213.213.218.44:1865 -> xxx.yyy.1.7:1433 SYN ******S* 
[...]
Dec 31 10:48:12 213.213.218.44:4485 -> xxx.yyy.111.248:1433 SYN ******S* 
Dec 31 10:48:12 213.213.218.44:4534 -> xxx.yyy.111.249:1433 SYN ******S* 
Dec 31 10:48:13 213.213.218.44:4568 -> xxx.yyy.111.250:1433 SYN ******S* 
Dec 31 10:48:14 213.213.218.44:4648 -> xxx.yyy.111.251:1433 SYN ******S* 
Dec 31 10:48:14 213.213.218.44:4722 -> xxx.yyy.111.252:1433 SYN ******S* 
Dec 31 10:48:14 213.213.218.44:4768 -> xxx.yyy.111.253:1433 SYN ******S* 
Dec 31 10:48:14 213.213.218.44:4790 -> xxx.yyy.111.254:1433 SYN ******S* 
Dec 31 10:48:14 213.213.218.44:4812 -> xxx.yyy.111.255:1433 SYN ******S* 
33847

Dec 31 02:39:34 69.41.170.124:1717 -> xxx.yyy.1.0:1433 SYN ******S* 
Dec 31 02:39:34 69.41.170.124:1718 -> xxx.yyy.1.1:1433 SYN ******S* 
Dec 31 02:39:34 69.41.170.124:1719 -> xxx.yyy.1.2:1433 SYN ******S* 
Dec 31 02:39:34 69.41.170.124:1720 -> xxx.yyy.1.3:1433 SYN ******S* 
Dec 31 02:39:34 69.41.170.124:1721 -> xxx.yyy.1.4:1433 SYN ******S* 
Dec 31 02:39:34 69.41.170.124:1722 -> xxx.yyy.1.5:1433 SYN ******S* 
Dec 31 02:39:34 69.41.170.124:1723 -> xxx.yyy.1.6:1433 SYN ******S* 
Dec 31 02:39:34 69.41.170.124:1724 -> xxx.yyy.1.7:1433 SYN ******S* 
[...]
Dec 31 02:40:21 69.41.170.124:1733 -> xxx.yyy.255.246:1433 SYN ******S* 
Dec 31 02:40:21 69.41.170.124:1734 -> xxx.yyy.255.247:1433 SYN ******S* 
Dec 31 02:40:21 69.41.170.124:1735 -> xxx.yyy.255.248:1433 SYN ******S* 
Dec 31 02:40:21 69.41.170.124:1736 -> xxx.yyy.255.249:1433 SYN ******S* 
Dec 31 02:40:21 69.41.170.124:1737 -> xxx.yyy.255.250:1433 SYN ******S* 
Dec 31 02:40:21 69.41.170.124:1738 -> xxx.yyy.255.251:1433 SYN ******S* 
Dec 31 02:40:21 69.41.170.124:1739 -> xxx.yyy.255.252:1433 SYN ******S* 
Dec 31 02:40:21 69.41.170.124:1740 -> xxx.yyy.255.253:1433 SYN ******S* 
Dec 31 02:40:21 69.41.170.124:1741 -> xxx.yyy.255.254:1433 SYN ******S* 
31805

Dec 31 08:21:27 218.154.192.194:47617 -> xxx.yyy.1.11:22 SYN ******S* 
Dec 31 08:21:31 218.154.192.194:47687 -> xxx.yyy.1.111:22 SYN ******S* 
Dec 31 08:21:28 218.154.192.194:47624 -> xxx.yyy.1.40:22 SYN ******S* 
Dec 31 08:21:31 218.154.192.194:47693 -> xxx.yyy.1.112:22 SYN ******S* 
Dec 31 08:21:28 218.154.192.194:47623 -> xxx.yyy.1.16:22 SYN ******S* 
Dec 31 08:21:28 218.154.192.194:47625 -> xxx.yyy.1.41:22 SYN ******S* 
Dec 31 08:21:30 218.154.192.194:47675 -> xxx.yyy.1.95:22 SYN ******S* 
Dec 31 08:21:34 218.154.192.194:47762 -> xxx.yyy.1.95:22 SYN ******S* 
[...]
Dec 31 09:05:55 218.154.192.194:47006 -> xxx.yyy.243.45:22 SYN ******S* 
Dec 31 09:05:57 218.154.192.194:47071 -> xxx.yyy.241.184:22 SYN ******S* 
Dec 31 09:05:58 218.154.192.194:47092 -> xxx.yyy.241.36:22 SYN ******S* 
Dec 31 09:06:00 218.154.192.194:47155 -> xxx.yyy.243.45:22 SYN ******S* 
Dec 31 09:06:04 218.154.192.194:47308 -> xxx.yyy.243.45:22 SYN ******S* 
Dec 31 09:06:04 218.154.192.194:47313 -> xxx.yyy.241.184:22 SYN ******S* 
Dec 31 09:06:08 218.154.192.194:47465 -> xxx.yyy.243.45:22 SYN ******S* 
Dec 31 09:06:11 218.154.192.194:47559 -> xxx.yyy.241.184:22 SYN ******S* 
30104

Dec 31 00:56:16 218.164.9.108:1341 -> xxx.yyy.1.2:1433 SYN ******S* 
Dec 31 00:56:16 218.164.9.108:1342 -> xxx.yyy.1.3:1433 SYN ******S* 
Dec 31 00:56:16 218.164.9.108:1343 -> xxx.yyy.1.4:1433 SYN ******S* 
Dec 31 00:56:16 218.164.9.108:1344 -> xxx.yyy.1.1:1433 SYN ******S* 
Dec 31 00:56:16 218.164.9.108:1345 -> xxx.yyy.1.5:1433 SYN ******S* 
Dec 31 00:56:16 218.164.9.108:1346 -> xxx.yyy.1.6:1433 SYN ******S* 
Dec 31 00:56:16 218.164.9.108:1347 -> xxx.yyy.1.7:1433 SYN ******S* 
Dec 31 00:56:16 218.164.9.108:1348 -> xxx.yyy.1.8:1433 SYN ******S* 
[...]
Dec 31 01:36:09 218.164.9.108:2981 -> xxx.yyy.90.15:1433 SYN ******S* 
Dec 31 01:36:09 218.164.9.108:2982 -> xxx.yyy.90.16:1433 SYN ******S* 
Dec 31 01:36:09 218.164.9.108:2983 -> xxx.yyy.90.17:1433 SYN ******S* 
Dec 31 01:36:09 218.164.9.108:2988 -> xxx.yyy.90.22:1433 SYN ******S* 
Dec 31 01:36:09 218.164.9.108:2985 -> xxx.yyy.90.19:1433 SYN ******S* 
Dec 31 01:36:09 218.164.9.108:2989 -> xxx.yyy.90.23:1433 SYN ******S* 
Dec 31 01:36:09 218.164.9.108:2986 -> xxx.yyy.90.20:1433 SYN ******S* 
Dec 31 01:36:09 218.164.9.108:2987 -> xxx.yyy.90.21:1433 SYN ******S* 
Dec 31 01:36:09 218.164.9.108:2984 -> xxx.yyy.90.18:1433 SYN ******S* 
27638

Dec 31 23:53:19 218.24.170.254:4303 -> xxx.yyy.153.137:5554 SYN ******S* 
Dec 31 23:53:20 218.24.170.254:1163 -> xxx.yyy.153.137:1023 SYN ******S* 
Dec 31 23:53:22 218.24.170.254:2092 -> xxx.yyy.153.137:9898 SYN ******S* 
Dec 31 23:53:19 218.24.170.254:4304 -> xxx.yyy.153.138:5554 SYN ******S* 
Dec 31 23:53:20 218.24.170.254:1164 -> xxx.yyy.153.138:1023 SYN ******S* 
Dec 31 23:53:22 218.24.170.254:2071 -> xxx.yyy.153.138:9898 SYN ******S* 
Dec 31 23:53:19 218.24.170.254:4302 -> xxx.yyy.153.136:5554 SYN ******S* 
Dec 31 23:53:20 218.24.170.254:1162 -> xxx.yyy.153.136:1023 SYN ******S* 
[...]
Dec 31 23:54:04 218.24.170.254:1304 -> xxx.yyy.153.213:9898 SYN ******S* 
Dec 31 23:54:04 218.24.170.254:1306 -> xxx.yyy.153.215:9898 SYN ******S* 
Dec 31 23:54:04 218.24.170.254:1305 -> xxx.yyy.153.214:9898 SYN ******S* 
Dec 31 23:54:04 218.24.170.254:1307 -> xxx.yyy.153.216:9898 SYN ******S* 
Dec 31 23:54:04 218.24.170.254:1308 -> xxx.yyy.173.248:9898 SYN ******S* 
Dec 31 23:54:04 218.24.170.254:1309 -> xxx.yyy.174.0:9898 SYN ******S* 
Dec 31 23:54:04 218.24.170.254:1310 -> xxx.yyy.173.255:9898 SYN ******S* 
Dec 31 23:54:05 218.24.170.254:1333 -> xxx.yyy.153.209:9898 SYN ******S* 
15132

Dec 31 22:51:10 220.116.144.23:2957 -> xxx.yyy.154.129:5554 SYN ******S* 
Dec 31 22:51:11 220.116.144.23:3379 -> xxx.yyy.154.129:1023 SYN ******S* 
Dec 31 22:51:13 220.116.144.23:4236 -> xxx.yyy.154.129:9898 SYN ******S* 
Dec 31 22:51:10 220.116.144.23:2955 -> xxx.yyy.154.131:5554 SYN ******S* 
Dec 31 22:51:11 220.116.144.23:3377 -> xxx.yyy.154.131:1023 SYN ******S* 
Dec 31 22:51:13 220.116.144.23:4234 -> xxx.yyy.154.131:9898 SYN ******S* 
Dec 31 22:51:10 220.116.144.23:2981 -> xxx.yyy.154.104:5554 SYN ******S* 
Dec 31 22:51:11 220.116.144.23:3397 -> xxx.yyy.154.104:1023 SYN ******S* 
[...]
Dec 31 22:51:55 220.116.144.23:2691 -> xxx.yyy.174.6:9898 SYN ******S* 
Dec 31 22:51:55 220.116.144.23:2697 -> xxx.yyy.174.7:9898 SYN ******S* 
Dec 31 22:51:55 220.116.144.23:2700 -> xxx.yyy.174.9:9898 SYN ******S* 
Dec 31 22:51:55 220.116.144.23:2698 -> xxx.yyy.174.8:9898 SYN ******S* 
Dec 31 22:51:55 220.116.144.23:2704 -> xxx.yyy.174.10:9898 SYN ******S* 
Dec 31 22:51:55 220.116.144.23:2706 -> xxx.yyy.174.11:9898 SYN ******S* 
Dec 31 22:51:55 220.116.144.23:2718 -> xxx.yyy.174.12:9898 SYN ******S* 
Dec 31 22:51:55 220.116.144.23:2716 -> xxx.yyy.174.13:9898 SYN ******S* 
Dec 31 22:51:56 220.116.144.23:2862 -> xxx.yyy.174.14:9898 SYN ******S* 
15122

Dec 31 23:56:32 221.127.95.139:4655 -> xxx.yyy.214.246:5554 SYN ******S* 
Dec 31 23:56:33 221.127.95.139:1225 -> xxx.yyy.214.246:1023 SYN ******S* 
Dec 31 23:56:35 221.127.95.139:2681 -> xxx.yyy.214.246:9898 SYN ******S* 
Dec 31 23:56:32 221.127.95.139:4680 -> xxx.yyy.214.247:5554 SYN ******S* 
Dec 31 23:56:33 221.127.95.139:1233 -> xxx.yyy.214.247:1023 SYN ******S* 
Dec 31 23:56:35 221.127.95.139:2684 -> xxx.yyy.214.247:9898 SYN ******S* 
Dec 31 23:56:32 221.127.95.139:4822 -> xxx.yyy.214.249:5554 SYN ******S* 
Dec 31 23:56:33 221.127.95.139:1386 -> xxx.yyy.214.249:1023 SYN ******S* 
[...]
Dec 31 23:58:15 221.127.95.139:1401 -> xxx.yyy.235.112:9898 SYN ******S* 
Dec 31 23:58:13 221.127.95.139:4274 -> xxx.yyy.235.59:9898 SYN ******S* 
Dec 31 23:58:14 221.127.95.139:4831 -> xxx.yyy.235.70:9898 SYN ******S* 
Dec 31 23:58:14 221.127.95.139:4837 -> xxx.yyy.235.99:9898 SYN ******S* 
Dec 31 23:58:14 221.127.95.139:4849 -> xxx.yyy.235.76:9898 SYN ******S* 
Dec 31 23:58:14 221.127.95.139:4881 -> xxx.yyy.235.75:9898 SYN ******S* 
Dec 31 23:58:14 221.127.95.139:4883 -> xxx.yyy.235.74:9898 SYN ******S* 
Dec 31 23:58:14 221.127.95.139:4875 -> xxx.yyy.235.89:9898 SYN ******S* 
14911

Dec 31 22:55:22 220.127.249.182:2604 -> xxx.yyy.71.160:5554 SYN ******S* 
Dec 31 22:55:23 220.127.249.182:3117 -> xxx.yyy.71.160:1023 SYN ******S* 
Dec 31 22:55:25 220.127.249.182:4083 -> xxx.yyy.71.160:9898 SYN ******S* 
Dec 31 22:55:22 220.127.249.182:2605 -> xxx.yyy.71.161:5554 SYN ******S* 
Dec 31 22:55:23 220.127.249.182:3118 -> xxx.yyy.71.161:1023 SYN ******S* 
Dec 31 22:55:25 220.127.249.182:4087 -> xxx.yyy.71.161:9898 SYN ******S* 
Dec 31 22:55:22 220.127.249.182:2606 -> xxx.yyy.71.162:5554 SYN ******S* 
Dec 31 22:55:23 220.127.249.182:3119 -> xxx.yyy.71.162:1023 SYN ******S* 
[...]
Dec 31 22:56:11 220.127.249.182:2944 -> xxx.yyy.91.102:9898 SYN ******S* 
Dec 31 22:56:11 220.127.249.182:2937 -> xxx.yyy.91.68:9898 SYN ******S* 
Dec 31 22:56:11 220.127.249.182:2940 -> xxx.yyy.91.71:9898 SYN ******S* 
Dec 31 22:56:11 220.127.249.182:2934 -> xxx.yyy.91.65:9898 SYN ******S* 
Dec 31 22:56:11 220.127.249.182:2943 -> xxx.yyy.91.101:9898 SYN ******S* 
Dec 31 22:56:12 220.127.249.182:3318 -> xxx.yyy.92.21:9898 SYN ******S* 
Dec 31 22:56:12 220.127.249.182:3312 -> xxx.yyy.92.18:9898 SYN ******S* 
Dec 31 22:56:12 220.127.249.182:3309 -> xxx.yyy.92.12:9898 SYN ******S* 
14510

Dec 31 23:56:36 218.25.12.200:2110 -> xxx.yyy.71.160:5554 SYN ******S* 
Dec 31 23:56:37 218.25.12.200:2730 -> xxx.yyy.71.160:1023 SYN ******S* 
Dec 31 23:56:39 218.25.12.200:3733 -> xxx.yyy.71.160:9898 SYN ******S* 
Dec 31 23:56:36 218.25.12.200:2113 -> xxx.yyy.71.163:5554 SYN ******S* 
Dec 31 23:56:39 218.25.12.200:3737 -> xxx.yyy.71.163:9898 SYN ******S* 
Dec 31 23:56:36 218.25.12.200:2112 -> xxx.yyy.71.162:5554 SYN ******S* 
Dec 31 23:56:39 218.25.12.200:3736 -> xxx.yyy.71.162:9898 SYN ******S* 
Dec 31 23:56:36 218.25.12.200:2111 -> xxx.yyy.71.161:5554 SYN ******S* 
[...]
Dec 31 23:57:21 218.25.12.200:1337 -> xxx.yyy.91.217:9898 SYN ******S* 
Dec 31 23:57:21 218.25.12.200:1340 -> xxx.yyy.91.220:9898 SYN ******S* 
Dec 31 23:57:21 218.25.12.200:1341 -> xxx.yyy.91.221:9898 SYN ******S* 
Dec 31 23:57:21 218.25.12.200:1342 -> xxx.yyy.91.222:9898 SYN ******S* 
Dec 31 23:57:21 218.25.12.200:1345 -> xxx.yyy.91.223:9898 SYN ******S* 
Dec 31 23:57:21 218.25.12.200:1497 -> xxx.yyy.91.224:9898 SYN ******S* 
Dec 31 23:57:21 218.25.12.200:1499 -> xxx.yyy.91.225:9898 SYN ******S* 
Dec 31 23:57:21 218.25.12.200:1500 -> xxx.yyy.91.226:9898 SYN ******S* 
14146

Dec 31 22:57:38 222.99.145.227:2613 -> xxx.yyy.174.225:5554 SYN ******S* 
Dec 31 22:57:39 222.99.145.227:3510 -> xxx.yyy.174.225:1023 SYN ******S* 
Dec 31 22:57:38 222.99.145.227:2620 -> xxx.yyy.174.227:5554 SYN ******S* 
Dec 31 22:57:39 222.99.145.227:3512 -> xxx.yyy.174.227:1023 SYN ******S* 
Dec 31 22:57:38 222.99.145.227:2629 -> xxx.yyy.174.231:5554 SYN ******S* 
Dec 31 22:57:41 222.99.145.227:1445 -> xxx.yyy.174.231:9898 SYN ******S* 
Dec 31 22:57:38 222.99.145.227:2616 -> xxx.yyy.174.223:5554 SYN ******S* 
Dec 31 22:57:39 222.99.145.227:3446 -> xxx.yyy.174.223:1023 SYN ******S* 
[...]
Dec 31 22:58:50 222.99.145.227:4535 -> xxx.yyy.195.22:9898 SYN ******S* 
Dec 31 22:58:50 222.99.145.227:4538 -> xxx.yyy.195.23:9898 SYN ******S* 
Dec 31 22:58:50 222.99.145.227:4527 -> xxx.yyy.195.21:9898 SYN ******S* 
Dec 31 22:58:50 222.99.145.227:4539 -> xxx.yyy.195.28:9898 SYN ******S* 
Dec 31 22:58:50 222.99.145.227:4561 -> xxx.yyy.195.30:9898 SYN ******S* 
Dec 31 22:58:50 222.99.145.227:4563 -> xxx.yyy.195.32:9898 SYN ******S* 
Dec 31 22:58:50 222.99.145.227:4564 -> xxx.yyy.195.43:9898 SYN ******S* 
Dec 31 22:58:50 222.99.145.227:4562 -> xxx.yyy.195.31:9898 SYN ******S* 
Dec 31 22:58:51 222.99.145.227:4221 -> xxx.yyy.195.74:9898 SYN ******S* 
13416

[...]
13187

--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa                     Cedar Falls, IA  50614-0121
email: Ken.Connelly at uni.edu    phone: (319) 273-5850    fax: (319) 273-7373



More information about the Intrusions mailing list