logo       
<prev   next>

[LOGS] Summary of large-scale portscanning detects: msg#00000

security.intrusions

Subject: [LOGS] Summary of large-scale portscanning detects

The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0500.

Apr 30 12:40:29 134.159.122.229:3113 -> xxx.yyy.1.1:139 SYN ******S*
Apr 30 12:40:26 134.159.122.229:3118 -> xxx.yyy.1.6:139 SYN ******S*
Apr 30 12:40:29 134.159.122.229:3121 -> xxx.yyy.1.9:139 SYN ******S*
Apr 30 12:40:26 134.159.122.229:3122 -> xxx.yyy.1.10:139 SYN ******S*
Apr 30 12:40:26 134.159.122.229:3124 -> xxx.yyy.1.12:139 SYN ******S*
Apr 30 12:40:28 134.159.122.229:3136 -> xxx.yyy.1.21:139 SYN ******S*
Apr 30 12:40:28 134.159.122.229:3135 -> xxx.yyy.1.20:139 SYN ******S*
Apr 30 12:40:28 134.159.122.229:3139 -> xxx.yyy.1.24:139 SYN ******S*
[...]
Apr 30 19:54:41 134.159.122.229:3505 -> xxx.yyy.240.216:139 SYN ******S*
Apr 30 19:54:41 134.159.122.229:3507 -> xxx.yyy.240.218:139 SYN ******S*
Apr 30 19:54:41 134.159.122.229:3508 -> xxx.yyy.240.219:139 SYN ******S*
Apr 30 19:54:41 134.159.122.229:3545 -> xxx.yyy.240.240:139 SYN ******S*
Apr 30 19:54:42 134.159.122.229:3537 -> xxx.yyy.240.235:139 SYN ******S*
Apr 30 19:54:42 134.159.122.229:3510 -> xxx.yyy.240.221:139 SYN ******S*
Apr 30 19:54:43 134.159.122.229:3538 -> xxx.yyy.240.236:139 SYN ******S*
Apr 30 19:54:47 134.159.122.229:3524 -> xxx.yyy.240.230:139 SYN ******S*
76470

Apr 30 04:41:30 81.57.160.182:3165 -> xxx.yyy.1.1:8000 SYN ******S*
Apr 30 04:41:30 81.57.160.182:3166 -> xxx.yyy.1.2:8000 SYN ******S*
Apr 30 04:41:32 81.57.160.182:3167 -> xxx.yyy.1.3:8000 SYN ******S*
Apr 30 04:41:32 81.57.160.182:3168 -> xxx.yyy.1.4:8000 SYN ******S*
Apr 30 04:41:32 81.57.160.182:3170 -> xxx.yyy.1.5:8000 SYN ******S*
Apr 30 04:41:32 81.57.160.182:3171 -> xxx.yyy.1.6:8000 SYN ******S*
Apr 30 04:41:29 81.57.160.182:3173 -> xxx.yyy.1.7:8000 SYN ******S*
Apr 30 04:41:32 81.57.160.182:3176 -> xxx.yyy.1.9:8000 SYN ******S*
[...]
Apr 30 04:54:22 81.57.160.182:4322 -> xxx.yyy.255.244:8000 SYN ******S*
Apr 30 04:54:22 81.57.160.182:4325 -> xxx.yyy.255.245:8000 SYN ******S*
Apr 30 04:54:22 81.57.160.182:4327 -> xxx.yyy.255.246:8000 SYN ******S*
Apr 30 04:54:22 81.57.160.182:4330 -> xxx.yyy.255.247:8000 SYN ******S*
Apr 30 04:54:22 81.57.160.182:4335 -> xxx.yyy.255.249:8000 SYN ******S*
Apr 30 04:54:22 81.57.160.182:4338 -> xxx.yyy.255.250:8000 SYN ******S*
Apr 30 04:54:22 81.57.160.182:4341 -> xxx.yyy.255.251:8000 SYN ******S*
Apr 30 04:54:22 81.57.160.182:4345 -> xxx.yyy.255.252:8000 SYN ******S*
Apr 30 04:54:22 81.57.160.182:4348 -> xxx.yyy.255.253:8000 SYN ******S*
62800

Apr 30 00:00:13 193.129.76.82:60762 -> xxx.yyy.253.111:2745 SYN ******S*
Apr 30 00:00:13 193.129.76.82:60783 -> xxx.yyy.196.6:2745 SYN ******S*
Apr 30 00:00:15 193.129.76.82:60427 -> xxx.yyy.210.180:2745 SYN ******S*
Apr 30 00:00:15 193.129.76.82:60434 -> xxx.yyy.187.13:2745 SYN ******S*
Apr 30 00:00:15 193.129.76.82:60731 -> xxx.yyy.228.152:2745 SYN ******S*
Apr 30 00:00:16 193.129.76.82:60492 -> xxx.yyy.219.195:2745 SYN ******S*
Apr 30 00:00:19 193.129.76.82:60619 -> xxx.yyy.181.249:2745 SYN ******S*
Apr 30 00:02:47 193.129.76.82:4661 -> xxx.yyy.240.106:2745 SYN ******S*
[...]
Apr 30 23:59:43 193.129.76.82:57399 -> xxx.yyy.247.112:2745 SYN ******S*
Apr 30 23:59:44 193.129.76.82:36708 -> xxx.yyy.132.216:2745 SYN ******S*
Apr 30 23:59:45 193.129.76.82:23970 -> xxx.yyy.141.227:2745 SYN ******S*
Apr 30 23:59:45 193.129.76.82:36409 -> xxx.yyy.139.221:2745 SYN ******S*
Apr 30 23:59:47 193.129.76.82:36480 -> xxx.yyy.215.209:2745 SYN ******S*
Apr 30 23:59:48 193.129.76.82:26646 -> xxx.yyy.137.116:2745 SYN ******S*
Apr 30 23:59:49 193.129.76.82:36774 -> xxx.yyy.215.188:2745 SYN ******S*
Apr 30 23:59:53 193.129.76.82:36708 -> xxx.yyy.132.216:2745 SYN ******S*
62328

Apr 30 03:19:41 213.180.193.68:50373 -> xxx.yyy.190.178:1080 SYN ******S*
Apr 30 03:19:41 213.180.193.68:50374 -> xxx.yyy.190.178:1180 SYN ******S*
Apr 30 03:19:41 213.180.193.68:50396 -> xxx.yyy.190.178:1075 SYN ******S*
Apr 30 03:19:41 213.180.193.68:50394 -> xxx.yyy.190.178:80 SYN ******S*
Apr 30 03:19:41 213.180.193.68:50395 -> xxx.yyy.190.178:81 SYN ******S*
Apr 30 03:19:41 213.180.193.68:50397 -> xxx.yyy.190.178:1182 SYN ******S*
Apr 30 03:19:41 213.180.193.68:50398 -> xxx.yyy.190.178:3128 SYN ******S*
Apr 30 03:19:41 213.180.193.68:50402 -> xxx.yyy.190.178:8080 SYN ******S*
[...]
Apr 30 21:37:42 213.180.193.68:49242 -> xxx.yyy.241.98:25 SYN ******S*
Apr 30 21:37:42 213.180.193.68:49252 -> xxx.yyy.241.98:110 SYN ******S*
Apr 30 21:37:42 213.180.193.68:49256 -> xxx.yyy.241.98:143 SYN ******S*
Apr 30 21:37:42 213.180.193.68:49260 -> xxx.yyy.241.98:220 SYN ******S*
Apr 30 21:37:42 213.180.193.68:49272 -> xxx.yyy.241.98:924 SYN ******S*
Apr 30 21:37:42 213.180.193.68:49282 -> xxx.yyy.241.98:980 SYN ******S*
Apr 30 21:37:42 213.180.193.68:49289 -> xxx.yyy.241.98:993 SYN ******S*
Apr 30 21:37:42 213.180.193.68:49297 -> xxx.yyy.241.98:995 SYN ******S*
Apr 30 21:37:42 213.180.193.68:49306 -> xxx.yyy.241.98:1005 SYN ******S*
61763

Apr 30 00:07:30 148.234.9.16:4006 -> xxx.yyy.1.9:31337 SYN ******S*
Apr 30 00:07:27 148.234.9.16:4007 -> xxx.yyy.1.10:31337 SYN ******S*
Apr 30 00:07:29 148.234.9.16:4008 -> xxx.yyy.1.11:31337 SYN ******S*
Apr 30 00:07:27 148.234.9.16:4012 -> xxx.yyy.1.15:31337 SYN ******S*
Apr 30 00:07:29 148.234.9.16:4013 -> xxx.yyy.1.16:31337 SYN ******S*
Apr 30 00:07:29 148.234.9.16:4014 -> xxx.yyy.1.17:31337 SYN ******S*
Apr 30 00:07:27 148.234.9.16:4015 -> xxx.yyy.1.18:31337 SYN ******S*
Apr 30 00:07:29 148.234.9.16:4017 -> xxx.yyy.1.20:31337 SYN ******S*
[...]
Apr 30 00:19:10 148.234.9.16:2900 -> xxx.yyy.255.193:31337 SYN ******S*
Apr 30 00:19:10 148.234.9.16:2904 -> xxx.yyy.255.197:31337 SYN ******S*
Apr 30 00:19:10 148.234.9.16:2901 -> xxx.yyy.255.194:31337 SYN ******S*
Apr 30 00:19:10 148.234.9.16:2918 -> xxx.yyy.255.211:31337 SYN ******S*
Apr 30 00:19:10 148.234.9.16:2925 -> xxx.yyy.255.218:31337 SYN ******S*
Apr 30 00:19:10 148.234.9.16:2919 -> xxx.yyy.255.212:31337 SYN ******S*
Apr 30 00:19:10 148.234.9.16:2920 -> xxx.yyy.255.213:31337 SYN ******S*
Apr 30 00:19:11 148.234.9.16:2947 -> xxx.yyy.255.240:31337 SYN ******S*
Apr 30 00:19:11 148.234.9.16:2951 -> xxx.yyy.255.244:31337 SYN ******S*
49143

Apr 30 11:58:41 217.204.60.242:4080 -> xxx.yyy.1.1:443 SYN ******S*
Apr 30 11:58:41 217.204.60.242:4081 -> xxx.yyy.1.2:443 SYN ******S*
Apr 30 11:58:42 217.204.60.242:4082 -> xxx.yyy.1.3:443 SYN ******S*
Apr 30 11:58:42 217.204.60.242:4083 -> xxx.yyy.1.4:443 SYN ******S*
Apr 30 11:58:40 217.204.60.242:4085 -> xxx.yyy.1.6:443 SYN ******S*
Apr 30 11:58:40 217.204.60.242:4088 -> xxx.yyy.1.9:443 SYN ******S*
Apr 30 11:58:41 217.204.60.242:4090 -> xxx.yyy.1.11:443 SYN ******S*
Apr 30 11:58:40 217.204.60.242:4091 -> xxx.yyy.1.12:443 SYN ******S*
[...]
Apr 30 12:10:53 217.204.60.242:1601 -> xxx.yyy.255.227:443 SYN ******S*
Apr 30 12:10:53 217.204.60.242:1607 -> xxx.yyy.255.233:443 SYN ******S*
Apr 30 12:10:53 217.204.60.242:1606 -> xxx.yyy.255.232:443 SYN ******S*
Apr 30 12:10:53 217.204.60.242:1615 -> xxx.yyy.255.241:443 SYN ******S*
Apr 30 12:10:53 217.204.60.242:1620 -> xxx.yyy.255.246:443 SYN ******S*
Apr 30 12:10:53 217.204.60.242:1618 -> xxx.yyy.255.244:443 SYN ******S*
Apr 30 12:10:53 217.204.60.242:1621 -> xxx.yyy.255.247:443 SYN ******S*
Apr 30 12:10:53 217.204.60.242:1624 -> xxx.yyy.255.250:443 SYN ******S*
Apr 30 12:10:53 217.204.60.242:1625 -> xxx.yyy.255.251:443 SYN ******S*
44672

Apr 30 12:47:49 211.209.222.215:62837 -> xxx.yyy.132.18:2745 SYN ******S*
Apr 30 12:47:48 211.209.222.215:62842 -> xxx.yyy.132.18:6129 SYN ******S*
Apr 30 12:47:48 211.209.222.215:62845 -> xxx.yyy.132.18:80 SYN ******S*
Apr 30 12:47:50 211.209.222.215:62844 -> xxx.yyy.132.18:5000 SYN ******S*
Apr 30 12:47:50 211.209.222.215:62936 -> xxx.yyy.241.128:2745 SYN ******S*
Apr 30 12:47:50 211.209.222.215:62941 -> xxx.yyy.241.128:6129 SYN ******S*
Apr 30 12:47:50 211.209.222.215:62938 -> xxx.yyy.241.128:1025 SYN ******S*
Apr 30 12:48:18 211.209.222.215:63654 -> xxx.yyy.169.216:1025 SYN ******S*
[...]
Apr 30 23:58:05 211.209.222.215:63606 -> xxx.yyy.79.80:1025 SYN ******S*
Apr 30 23:58:07 211.209.222.215:63752 -> xxx.yyy.133.74:2745 SYN ******S*
Apr 30 23:58:08 211.209.222.215:63726 -> xxx.yyy.177.158:2745 SYN ******S*
Apr 30 23:58:09 211.209.222.215:63800 -> xxx.yyy.90.227:2745 SYN ******S*
Apr 30 23:58:09 211.209.222.215:63802 -> xxx.yyy.90.227:1025 SYN ******S*
Apr 30 23:58:10 211.209.222.215:63752 -> xxx.yyy.133.74:2745 SYN ******S*
Apr 30 23:58:12 211.209.222.215:63837 -> xxx.yyy.77.140:2745 SYN ******S*
Apr 30 23:58:12 211.209.222.215:63800 -> xxx.yyy.90.227:2745 SYN ******S*
40038

Apr 30 19:04:18 63.77.72.88:3192 -> xxx.yyy.1.1:445 SYN ******S*
Apr 30 19:04:18 63.77.72.88:3193 -> xxx.yyy.1.2:445 SYN ******S*
Apr 30 19:04:18 63.77.72.88:3194 -> xxx.yyy.1.3:445 SYN ******S*
Apr 30 19:04:18 63.77.72.88:3196 -> xxx.yyy.1.5:445 SYN ******S*
Apr 30 19:04:18 63.77.72.88:3195 -> xxx.yyy.1.4:445 SYN ******S*
Apr 30 19:04:18 63.77.72.88:3197 -> xxx.yyy.1.6:445 SYN ******S*
Apr 30 19:04:18 63.77.72.88:3199 -> xxx.yyy.1.8:445 SYN ******S*
Apr 30 19:04:18 63.77.72.88:3203 -> xxx.yyy.1.12:445 SYN ******S*
[...]
Apr 30 19:15:16 63.77.72.88:3042 -> xxx.yyy.255.226:445 SYN ******S*
Apr 30 19:15:16 63.77.72.88:3039 -> xxx.yyy.255.223:445 SYN ******S*
Apr 30 19:15:16 63.77.72.88:3056 -> xxx.yyy.255.240:445 SYN ******S*
Apr 30 19:15:16 63.77.72.88:3057 -> xxx.yyy.255.241:445 SYN ******S*
Apr 30 19:15:16 63.77.72.88:3048 -> xxx.yyy.255.232:445 SYN ******S*
Apr 30 19:15:16 63.77.72.88:3062 -> xxx.yyy.255.246:445 SYN ******S*
Apr 30 19:15:16 63.77.72.88:3064 -> xxx.yyy.255.248:445 SYN ******S*
Apr 30 19:15:16 63.77.72.88:3058 -> xxx.yyy.255.242:445 SYN ******S*
39311

Apr 30 23:49:13 216.41.124.210:3775 -> xxx.yyy.1.3:6129 SYN ******S*
Apr 30 23:49:16 216.41.124.210:3776 -> xxx.yyy.1.4:6129 SYN ******S*
Apr 30 23:49:16 216.41.124.210:3777 -> xxx.yyy.1.5:6129 SYN ******S*
Apr 30 23:49:13 216.41.124.210:3778 -> xxx.yyy.1.6:6129 SYN ******S*
Apr 30 23:49:16 216.41.124.210:3781 -> xxx.yyy.1.9:6129 SYN ******S*
Apr 30 23:49:16 216.41.124.210:3782 -> xxx.yyy.1.10:6129 SYN ******S*
Apr 30 23:49:13 216.41.124.210:3784 -> xxx.yyy.1.12:6129 SYN ******S*
Apr 30 23:49:13 216.41.124.210:3785 -> xxx.yyy.1.13:6129 SYN ******S*
[...]
May 1 00:00:01 216.41.124.210:4172 -> xxx.yyy.236.66:6129 SYN ******S*
May 1 00:00:01 216.41.124.210:4438 -> xxx.yyy.237.77:6129 SYN ******S*
May 1 00:00:01 216.41.124.210:4165 -> xxx.yyy.236.59:6129 SYN ******S*
May 1 00:00:01 216.41.124.210:4440 -> xxx.yyy.237.79:6129 SYN ******S*
May 1 00:00:01 216.41.124.210:4441 -> xxx.yyy.237.80:6129 SYN ******S*
May 1 00:00:01 216.41.124.210:4442 -> xxx.yyy.237.81:6129 SYN ******S*
May 1 00:00:01 216.41.124.210:4443 -> xxx.yyy.237.82:6129 SYN ******S*
May 1 00:00:01 216.41.124.210:4445 -> xxx.yyy.237.84:6129 SYN ******S*
May 1 00:00:01 216.41.124.210:4515 -> xxx.yyy.237.85:6129 SYN ******S*
30303

Apr 30 12:47:48 203.195.216.122:1494 -> xxx.yyy.111.167:3127 SYN ******S*
Apr 30 12:47:48 203.195.216.122:1495 -> xxx.yyy.111.167:6129 SYN ******S*
Apr 30 12:47:48 203.195.216.122:1497 -> xxx.yyy.111.167:5000 SYN ******S*
Apr 30 12:47:48 203.195.216.122:1659 -> xxx.yyy.152.212:5000 SYN ******S*
Apr 30 12:47:48 203.195.216.122:1652 -> xxx.yyy.152.212:2745 SYN ******S*
Apr 30 12:47:48 203.195.216.122:1654 -> xxx.yyy.152.212:1025 SYN ******S*
Apr 30 12:47:48 203.195.216.122:1656 -> xxx.yyy.152.212:3127 SYN ******S*
Apr 30 12:47:51 203.195.216.122:4566 -> xxx.yyy.246.159:2745 SYN ******S*
[...]
Apr 30 23:59:58 203.195.216.122:3234 -> xxx.yyy.243.117:2745 SYN ******S*
Apr 30 23:59:58 203.195.216.122:4559 -> xxx.yyy.161.91:2745 SYN ******S*
Apr 30 23:59:58 203.195.216.122:4634 -> xxx.yyy.32.217:2745 SYN ******S*
Apr 30 23:59:58 203.195.216.122:4536 -> xxx.yyy.181.205:2745 SYN ******S*
Apr 30 23:59:59 203.195.216.122:1076 -> xxx.yyy.166.104:2745 SYN ******S*
Apr 30 23:59:59 203.195.216.122:2921 -> xxx.yyy.71.186:2745 SYN ******S*
May 1 00:00:00 203.195.216.122:2937 -> xxx.yyy.193.18:2745 SYN ******S*
May 1 00:00:00 203.195.216.122:1177 -> xxx.yyy.84.147:2745 SYN ******S*
May 1 00:00:00 203.195.216.122:1183 -> xxx.yyy.163.43:2745 SYN ******S*
29815

Apr 30 00:02:59 65.195.133.120:54262 -> xxx.yyy.14.72:2745 SYN ******S*
Apr 30 00:02:59 65.195.133.120:54288 -> xxx.yyy.230.240:2745 SYN ******S*
Apr 30 00:02:59 65.195.133.120:54289 -> xxx.yyy.230.240:6129 SYN ******S*
Apr 30 00:02:58 65.195.133.120:54407 -> xxx.yyy.149.76:2745 SYN ******S*
Apr 30 00:02:59 65.195.133.120:53798 -> xxx.yyy.71.35:2745 SYN ******S*
Apr 30 00:02:59 65.195.133.120:53884 -> xxx.yyy.152.29:2745 SYN ******S*
Apr 30 00:02:59 65.195.133.120:53885 -> xxx.yyy.152.29:6129 SYN ******S*
Apr 30 00:03:03 65.195.133.120:54407 -> xxx.yyy.149.76:2745 SYN ******S*
[...]
Apr 30 23:59:48 65.195.133.120:19430 -> xxx.yyy.179.85:2745 SYN ******S*
Apr 30 23:59:48 65.195.133.120:19835 -> xxx.yyy.192.54:2745 SYN ******S*
Apr 30 23:59:55 65.195.133.120:19983 -> xxx.yyy.232.140:2745 SYN ******S*
Apr 30 23:59:53 65.195.133.120:19606 -> xxx.yyy.196.80:1025 SYN ******S*
Apr 30 23:59:53 65.195.133.120:19605 -> xxx.yyy.196.80:2745 SYN ******S*
Apr 30 23:59:53 65.195.133.120:19618 -> xxx.yyy.163.194:2745 SYN ******S*
Apr 30 23:59:53 65.195.133.120:20027 -> xxx.yyy.138.23:2745 SYN ******S*
Apr 30 23:59:56 65.195.133.120:20027 -> xxx.yyy.138.23:2745 SYN ******S*
Apr 30 23:59:57 65.195.133.120:19835 -> xxx.yyy.192.54:2745 SYN ******S*
27801

Apr 30 08:20:32 213.178.67.34:4684 -> xxx.yyy.1.13:445 SYN ******S*
Apr 30 08:20:32 213.178.67.34:4696 -> xxx.yyy.1.25:445 SYN ******S*
Apr 30 08:20:32 213.178.67.34:4699 -> xxx.yyy.1.28:445 SYN ******S*
Apr 30 08:20:32 213.178.67.34:4653 -> xxx.yyy.1.32:445 SYN ******S*
Apr 30 08:20:32 213.178.67.34:4654 -> xxx.yyy.1.33:445 SYN ******S*
Apr 30 08:20:32 213.178.67.34:4657 -> xxx.yyy.1.36:445 SYN ******S*
Apr 30 08:20:32 213.178.67.34:4661 -> xxx.yyy.1.40:445 SYN ******S*
Apr 30 08:20:32 213.178.67.34:4662 -> xxx.yyy.1.41:445 SYN ******S*
[...]
Apr 30 11:34:32 213.178.67.34:4655 -> xxx.yyy.255.114:1433 SYN ******S*
Apr 30 11:34:32 213.178.67.34:4656 -> xxx.yyy.255.115:1433 SYN ******S*
Apr 30 11:34:32 213.178.67.34:4657 -> xxx.yyy.255.116:1433 SYN ******S*
Apr 30 11:34:32 213.178.67.34:4658 -> xxx.yyy.255.117:1433 SYN ******S*
Apr 30 11:34:32 213.178.67.34:4659 -> xxx.yyy.255.118:1433 SYN ******S*
Apr 30 11:34:32 213.178.67.34:4666 -> xxx.yyy.255.125:1433 SYN ******S*
Apr 30 11:34:32 213.178.67.34:4670 -> xxx.yyy.255.129:1433 SYN ******S*
Apr 30 11:34:32 213.178.67.34:4671 -> xxx.yyy.255.130:1433 SYN ******S*
Apr 30 11:34:32 213.178.67.34:4672 -> xxx.yyy.255.131:1433 SYN ******S*
22451

Apr 30 16:34:57 83.31.0.199:4485 -> xxx.yyy.247.74:2745 SYN ******S*
Apr 30 16:34:57 83.31.0.199:4489 -> xxx.yyy.247.74:1025 SYN ******S*
Apr 30 16:34:57 83.31.0.199:4491 -> xxx.yyy.247.74:3127 SYN ******S*
Apr 30 16:34:57 83.31.0.199:4492 -> xxx.yyy.247.74:6129 SYN ******S*
Apr 30 16:34:57 83.31.0.199:4493 -> xxx.yyy.247.74:139 SYN ******S*
Apr 30 16:34:57 83.31.0.199:4494 -> xxx.yyy.247.74:5000 SYN ******S*
Apr 30 16:35:02 83.31.0.199:4491 -> xxx.yyy.247.74:3127 SYN ******S*
Apr 30 16:35:02 83.31.0.199:4494 -> xxx.yyy.247.74:5000 SYN ******S*
[...]
Apr 30 23:58:53 83.31.0.199:2672 -> xxx.yyy.190.65:2745 SYN ******S*
Apr 30 23:58:57 83.31.0.199:2069 -> xxx.yyy.15.99:1025 SYN ******S*
Apr 30 23:58:58 83.31.0.199:2672 -> xxx.yyy.190.65:2745 SYN ******S*
Apr 30 23:58:58 83.31.0.199:2677 -> xxx.yyy.91.103:2745 SYN ******S*
Apr 30 23:58:58 83.31.0.199:2693 -> xxx.yyy.150.155:2745 SYN ******S*
Apr 30 23:58:59 83.31.0.199:2363 -> xxx.yyy.65.37:2745 SYN ******S*
Apr 30 23:59:00 83.31.0.199:2429 -> xxx.yyy.212.142:2745 SYN ******S*
Apr 30 23:59:00 83.31.0.199:2432 -> xxx.yyy.212.142:1025 SYN ******S*
Apr 30 23:59:04 83.31.0.199:3492 -> xxx.yyy.12.199:2745 SYN ******S*
19387

Apr 30 11:16:17 61.92.202.215:1575 -> xxx.yyy.1.7:65506 SYN ******S*
Apr 30 11:16:16 61.92.202.215:1579 -> xxx.yyy.1.11:65506 SYN ******S*
Apr 30 11:16:17 61.92.202.215:1581 -> xxx.yyy.1.13:65506 SYN ******S*
Apr 30 11:16:16 61.92.202.215:1584 -> xxx.yyy.1.16:65506 SYN ******S*
Apr 30 11:16:14 61.92.202.215:1573 -> xxx.yyy.1.5:65506 SYN ******S*
Apr 30 11:16:14 61.92.202.215:1577 -> xxx.yyy.1.9:65506 SYN ******S*
Apr 30 11:16:14 61.92.202.215:1576 -> xxx.yyy.1.8:65506 SYN ******S*
Apr 30 11:16:16 61.92.202.215:1582 -> xxx.yyy.1.14:65506 SYN ******S*
[...]
Apr 30 12:09:51 61.92.202.215:1898 -> xxx.yyy.160.211:65506 SYN ******S*
Apr 30 12:09:51 61.92.202.215:1904 -> xxx.yyy.160.217:65506 SYN ******S*
Apr 30 12:09:51 61.92.202.215:1899 -> xxx.yyy.160.212:65506 SYN ******S*
Apr 30 12:09:51 61.92.202.215:1906 -> xxx.yyy.160.219:65506 SYN ******S*
Apr 30 12:09:51 61.92.202.215:1907 -> xxx.yyy.160.220:65506 SYN ******S*
Apr 30 12:09:51 61.92.202.215:1901 -> xxx.yyy.160.214:65506 SYN ******S*
Apr 30 12:09:51 61.92.202.215:1903 -> xxx.yyy.160.216:65506 SYN ******S*
Apr 30 12:09:51 61.92.202.215:1905 -> xxx.yyy.160.218:65506 SYN ******S*
17617

Apr 30 21:26:15 130.238.113.170:1159 -> xxx.yyy.1.2:445 SYN ******S*
Apr 30 21:26:15 130.238.113.170:1160 -> xxx.yyy.1.3:445 SYN ******S*
Apr 30 21:26:15 130.238.113.170:1161 -> xxx.yyy.1.4:445 SYN ******S*
Apr 30 21:26:15 130.238.113.170:1162 -> xxx.yyy.1.5:445 SYN ******S*
Apr 30 21:26:15 130.238.113.170:1163 -> xxx.yyy.1.6:445 SYN ******S*
Apr 30 21:26:15 130.238.113.170:1164 -> xxx.yyy.1.7:445 SYN ******S*
Apr 30 21:26:15 130.238.113.170:1171 -> xxx.yyy.1.14:445 SYN ******S*
Apr 30 21:26:15 130.238.113.170:1176 -> xxx.yyy.1.19:445 SYN ******S*
[...]
Apr 30 21:28:27 130.238.113.170:3410 -> xxx.yyy.255.228:445 SYN ******S*
Apr 30 21:28:27 130.238.113.170:3411 -> xxx.yyy.255.229:445 SYN ******S*
Apr 30 21:28:27 130.238.113.170:3412 -> xxx.yyy.255.230:445 SYN ******S*
Apr 30 21:28:27 130.238.113.170:3425 -> xxx.yyy.255.243:445 SYN ******S*
Apr 30 21:28:27 130.238.113.170:3426 -> xxx.yyy.255.244:445 SYN ******S*
Apr 30 21:28:27 130.238.113.170:3427 -> xxx.yyy.255.245:445 SYN ******S*
Apr 30 21:28:27 130.238.113.170:3428 -> xxx.yyy.255.246:445 SYN ******S*
Apr 30 21:28:27 130.238.113.170:3432 -> xxx.yyy.255.250:445 SYN ******S*
17449

Apr 30 12:47:50 82.67.164.142:2730 -> xxx.yyy.173.160:3127 SYN ******S*
Apr 30 12:47:47 82.67.164.142:2732 -> xxx.yyy.173.160:6129 SYN ******S*
Apr 30 12:47:47 82.67.164.142:2733 -> xxx.yyy.173.160:139 SYN ******S*
Apr 30 12:47:50 82.67.164.142:2734 -> xxx.yyy.173.160:5000 SYN ******S*
Apr 30 12:47:50 82.67.164.142:2726 -> xxx.yyy.173.160:2745 SYN ******S*
Apr 30 12:47:50 82.67.164.142:2820 -> xxx.yyy.173.160:80 SYN ******S*
Apr 30 12:47:47 82.67.164.142:2787 -> xxx.yyy.129.112:2745 SYN ******S*
Apr 30 12:47:47 82.67.164.142:2789 -> xxx.yyy.129.112:1025 SYN ******S*
[...]
Apr 30 23:59:02 82.67.164.142:4823 -> xxx.yyy.206.192:2745 SYN ******S*
Apr 30 23:59:03 82.67.164.142:4888 -> xxx.yyy.217.162:1025 SYN ******S*
Apr 30 23:59:05 82.67.164.142:4823 -> xxx.yyy.206.192:2745 SYN ******S*
Apr 30 23:59:06 82.67.164.142:4970 -> xxx.yyy.140.144:2745 SYN ******S*
Apr 30 23:59:06 82.67.164.142:4879 -> xxx.yyy.217.162:2745 SYN ******S*
Apr 30 23:59:06 82.67.164.142:4888 -> xxx.yyy.217.162:1025 SYN ******S*
Apr 30 23:59:09 82.67.164.142:4767 -> xxx.yyy.230.129:2745 SYN ******S*
Apr 30 23:59:15 82.67.164.142:1136 -> xxx.yyy.164.245:1025 SYN ******S*
Apr 30 23:59:15 82.67.164.142:1138 -> xxx.yyy.164.245:3127 SYN ******S*
15417

Apr 30 12:47:48 81.248.50.50:2010 -> xxx.yyy.237.2:2745 SYN ******S*
Apr 30 12:47:47 81.248.50.50:2012 -> xxx.yyy.237.2:1025 SYN ******S*
Apr 30 12:47:46 81.248.50.50:2013 -> xxx.yyy.237.2:445 SYN ******S*
Apr 30 12:47:46 81.248.50.50:2014 -> xxx.yyy.237.2:3127 SYN ******S*
Apr 30 12:47:48 81.248.50.50:2015 -> xxx.yyy.237.2:6129 SYN ******S*
Apr 30 12:47:46 81.248.50.50:2016 -> xxx.yyy.237.2:139 SYN ******S*
Apr 30 12:47:46 81.248.50.50:2017 -> xxx.yyy.237.2:5000 SYN ******S*
Apr 30 12:47:49 81.248.50.50:2039 -> xxx.yyy.141.177:1025 SYN ******S*
[...]
Apr 30 23:58:56 81.248.50.50:3612 -> xxx.yyy.70.238:2745 SYN ******S*
Apr 30 23:58:57 81.248.50.50:3654 -> xxx.yyy.217.51:2745 SYN ******S*
Apr 30 23:58:59 81.248.50.50:3699 -> xxx.yyy.171.185:2745 SYN ******S*
Apr 30 23:59:00 81.248.50.50:3654 -> xxx.yyy.217.51:2745 SYN ******S*
Apr 30 23:59:05 81.248.50.50:3612 -> xxx.yyy.70.238:2745 SYN ******S*
Apr 30 23:59:06 81.248.50.50:3654 -> xxx.yyy.217.51:2745 SYN ******S*
Apr 30 23:59:08 81.248.50.50:3904 -> xxx.yyy.213.157:2745 SYN ******S*
Apr 30 23:59:11 81.248.50.50:3901 -> xxx.yyy.32.122:2745 SYN ******S*
15400

Apr 30 12:48:31 4.65.81.165:1829 -> xxx.yyy.196.65:2745 SYN ******S*
Apr 30 12:48:31 4.65.81.165:1862 -> xxx.yyy.215.164:445 SYN ******S*
Apr 30 12:48:36 4.65.81.165:1901 -> xxx.yyy.149.112:2745 SYN ******S*
Apr 30 12:48:36 4.65.81.165:1903 -> xxx.yyy.149.112:1025 SYN ******S*
Apr 30 12:48:34 4.65.81.165:1942 -> xxx.yyy.155.241:2745 SYN ******S*
Apr 30 12:48:37 4.65.81.165:1945 -> xxx.yyy.155.241:445 SYN ******S*
Apr 30 12:48:34 4.65.81.165:1947 -> xxx.yyy.155.241:6129 SYN ******S*
Apr 30 12:48:37 4.65.81.165:1950 -> xxx.yyy.155.241:80 SYN ******S*
[...]
Apr 30 23:58:41 4.65.81.165:4581 -> xxx.yyy.16.54:2745 SYN ******S*
Apr 30 23:58:41 4.65.81.165:1861 -> xxx.yyy.157.109:2745 SYN ******S*
Apr 30 23:58:41 4.65.81.165:1886 -> xxx.yyy.157.109:1025 SYN ******S*
Apr 30 23:58:42 4.65.81.165:1902 -> xxx.yyy.157.109:3127 SYN ******S*
Apr 30 23:58:42 4.65.81.165:1899 -> xxx.yyy.157.109:445 SYN ******S*
Apr 30 23:58:41 4.65.81.165:2108 -> xxx.yyy.13.103:2745 SYN ******S*
Apr 30 23:58:42 4.65.81.165:4892 -> xxx.yyy.175.107:2745 SYN ******S*
Apr 30 23:58:47 4.65.81.165:1886 -> xxx.yyy.157.109:1025 SYN ******S*
Apr 30 23:58:47 4.65.81.165:1902 -> xxx.yyy.157.109:3127 SYN ******S*
15047

Apr 30 12:48:25 213.36.178.204:1860 -> xxx.yyy.230.133:2745 SYN ******S*
Apr 30 12:48:26 213.36.178.204:1863 -> xxx.yyy.230.133:445 SYN ******S*
Apr 30 12:48:26 213.36.178.204:1865 -> xxx.yyy.230.133:6129 SYN ******S*
Apr 30 12:48:26 213.36.178.204:1866 -> xxx.yyy.230.133:139 SYN ******S*
Apr 30 12:48:26 213.36.178.204:1868 -> xxx.yyy.230.133:80 SYN ******S*
Apr 30 12:48:30 213.36.178.204:2017 -> xxx.yyy.107.15:2745 SYN ******S*
Apr 30 12:48:30 213.36.178.204:2022 -> xxx.yyy.107.15:6129 SYN ******S*
Apr 30 12:48:30 213.36.178.204:2023 -> xxx.yyy.107.15:139 SYN ******S*
[...]
Apr 30 23:54:48 213.36.178.204:2936 -> xxx.yyy.211.130:3127 SYN ******S*
Apr 30 23:54:48 213.36.178.204:2940 -> xxx.yyy.211.130:139 SYN ******S*
Apr 30 23:54:49 213.36.178.204:3240 -> xxx.yyy.136.90:2745 SYN ******S*
Apr 30 23:54:49 213.36.178.204:3243 -> xxx.yyy.136.90:1025 SYN ******S*
Apr 30 23:54:50 213.36.178.204:3246 -> xxx.yyy.136.90:3127 SYN ******S*
Apr 30 23:54:56 213.36.178.204:3246 -> xxx.yyy.136.90:3127 SYN ******S*
Apr 30 23:54:56 213.36.178.204:3248 -> xxx.yyy.136.90:6129 SYN ******S*
Apr 30 23:54:56 213.36.178.204:3259 -> xxx.yyy.136.90:80 SYN ******S*
14650

Apr 30 12:48:05 211.167.203.222:1472 -> xxx.yyy.205.104:5000 SYN ******S*
Apr 30 12:48:02 211.167.203.222:1467 -> xxx.yyy.205.104:1025 SYN ******S*
Apr 30 12:48:02 211.167.203.222:1473 -> xxx.yyy.205.104:80 SYN ******S*
Apr 30 12:48:05 211.167.203.222:1469 -> xxx.yyy.205.104:3127 SYN ******S*
Apr 30 12:48:05 211.167.203.222:1474 -> xxx.yyy.12.51:2745 SYN ******S*
Apr 30 12:48:05 211.167.203.222:1481 -> xxx.yyy.12.51:5000 SYN ******S*
Apr 30 12:48:05 211.167.203.222:1478 -> xxx.yyy.12.51:3127 SYN ******S*
Apr 30 12:48:11 211.167.203.222:1481 -> xxx.yyy.12.51:5000 SYN ******S*
[...]
Apr 30 23:59:42 211.167.203.222:4062 -> xxx.yyy.16.217:2745 SYN ******S*
Apr 30 23:59:42 211.167.203.222:4069 -> xxx.yyy.16.217:5000 SYN ******S*
Apr 30 23:59:42 211.167.203.222:4064 -> xxx.yyy.16.217:1025 SYN ******S*
Apr 30 23:59:42 211.167.203.222:4067 -> xxx.yyy.16.217:6129 SYN ******S*
Apr 30 23:59:40 211.167.203.222:4073 -> xxx.yyy.90.190:2745 SYN ******S*
Apr 30 23:59:48 211.167.203.222:4062 -> xxx.yyy.16.217:2745 SYN ******S*
Apr 30 23:59:48 211.167.203.222:4066 -> xxx.yyy.16.217:3127 SYN ******S*
Apr 30 23:59:48 211.167.203.222:4069 -> xxx.yyy.16.217:5000 SYN ******S*
Apr 30 23:59:48 211.167.203.222:4064 -> xxx.yyy.16.217:1025 SYN ******S*
14415

Apr 30 12:48:34 218.5.180.35:3092 -> xxx.yyy.161.133:1025 SYN ******S*
Apr 30 12:48:34 218.5.180.35:3098 -> xxx.yyy.161.133:80 SYN ******S*
Apr 30 12:48:32 218.5.180.35:3155 -> xxx.yyy.232.168:1025 SYN ******S*
Apr 30 12:48:32 218.5.180.35:3159 -> xxx.yyy.232.168:139 SYN ******S*
Apr 30 12:48:32 218.5.180.35:3161 -> xxx.yyy.232.168:80 SYN ******S*
Apr 30 12:48:35 218.5.180.35:3160 -> xxx.yyy.232.168:5000 SYN ******S*
Apr 30 12:48:34 218.5.180.35:3079 -> xxx.yyy.220.205:2745 SYN ******S*
Apr 30 12:48:35 218.5.180.35:3188 -> xxx.yyy.230.249:2745 SYN ******S*
[...]
Apr 30 23:53:50 218.5.180.35:4195 -> xxx.yyy.67.206:2745 SYN ******S*
Apr 30 23:53:50 218.5.180.35:4291 -> xxx.yyy.187.88:2745 SYN ******S*
Apr 30 23:53:50 218.5.180.35:4406 -> xxx.yyy.187.88:1025 SYN ******S*
Apr 30 23:53:51 218.5.180.35:4864 -> xxx.yyy.213.225:2745 SYN ******S*
Apr 30 23:53:52 218.5.180.35:4146 -> xxx.yyy.231.217:2745 SYN ******S*
Apr 30 23:53:54 218.5.180.35:3560 -> xxx.yyy.227.144:2745 SYN ******S*
Apr 30 23:53:55 218.5.180.35:4195 -> xxx.yyy.67.206:2745 SYN ******S*
Apr 30 23:53:59 218.5.180.35:4758 -> xxx.yyy.224.61:2745 SYN ******S*
13570

Apr 30 12:48:04 209.63.247.49:3628 -> xxx.yyy.10.27:3127 SYN ******S*
Apr 30 12:48:07 209.63.247.49:3632 -> xxx.yyy.10.27:80 SYN ******S*
Apr 30 12:48:07 209.63.247.49:3624 -> xxx.yyy.10.27:2745 SYN ******S*
Apr 30 12:48:07 209.63.247.49:3629 -> xxx.yyy.10.27:6129 SYN ******S*
Apr 30 12:48:04 209.63.247.49:3580 -> xxx.yyy.135.160:2745 SYN ******S*
Apr 30 12:48:08 209.63.247.49:3681 -> xxx.yyy.226.27:2745 SYN ******S*
Apr 30 12:48:13 209.63.247.49:3681 -> xxx.yyy.226.27:2745 SYN ******S*
Apr 30 12:48:15 209.63.247.49:3704 -> xxx.yyy.180.117:2745 SYN ******S*
[...]
Apr 30 23:57:07 209.63.247.49:4261 -> xxx.yyy.222.52:2745 SYN ******S*
Apr 30 23:57:11 209.63.247.49:4315 -> xxx.yyy.250.220:1025 SYN ******S*
Apr 30 23:57:11 209.63.247.49:4313 -> xxx.yyy.250.220:2745 SYN ******S*
Apr 30 23:57:15 209.63.247.49:4383 -> xxx.yyy.208.86:2745 SYN ******S*
Apr 30 23:57:17 209.63.247.49:4546 -> xxx.yyy.248.99:2745 SYN ******S*
Apr 30 23:57:20 209.63.247.49:4546 -> xxx.yyy.248.99:2745 SYN ******S*
Apr 30 23:57:26 209.63.247.49:4546 -> xxx.yyy.248.99:2745 SYN ******S*
Apr 30 23:57:28 209.63.247.49:4566 -> xxx.yyy.225.213:2745 SYN ******S*
Apr 30 23:57:34 209.63.247.49:3008 -> xxx.yyy.65.99:2745 SYN ******S*
13032

Apr 30 12:47:47 202.56.198.54:1772 -> xxx.yyy.169.182:2745 SYN ******S*
Apr 30 12:47:47 202.56.198.54:1774 -> xxx.yyy.169.182:1025 SYN ******S*
Apr 30 12:47:47 202.56.198.54:1779 -> xxx.yyy.169.182:5000 SYN ******S*
Apr 30 12:47:47 202.56.198.54:1413 -> xxx.yyy.142.175:6129 SYN ******S*
Apr 30 12:47:47 202.56.198.54:1415 -> xxx.yyy.142.175:5000 SYN ******S*
Apr 30 12:47:47 202.56.198.54:1855 -> xxx.yyy.211.171:1025 SYN ******S*
Apr 30 12:47:47 202.56.198.54:1858 -> xxx.yyy.211.171:6129 SYN ******S*
Apr 30 12:47:48 202.56.198.54:1462 -> xxx.yyy.248.162:2745 SYN ******S*
[...]
Apr 30 23:59:51 202.56.198.54:4174 -> xxx.yyy.67.37:2745 SYN ******S*
Apr 30 23:59:51 202.56.198.54:4177 -> xxx.yyy.134.134:2745 SYN ******S*
Apr 30 23:59:53 202.56.198.54:1635 -> xxx.yyy.206.98:2745 SYN ******S*
Apr 30 23:59:56 202.56.198.54:1789 -> xxx.yyy.87.236:2745 SYN ******S*
Apr 30 23:59:57 202.56.198.54:1581 -> xxx.yyy.73.186:1025 SYN ******S*
Apr 30 23:59:57 202.56.198.54:1579 -> xxx.yyy.73.186:2745 SYN ******S*
Apr 30 23:59:57 202.56.198.54:1586 -> xxx.yyy.144.89:2745 SYN ******S*
May 1 00:00:02 202.56.198.54:4577 -> xxx.yyy.219.113:2745 SYN ******S*
May 1 00:00:02 202.56.198.54:4601 -> xxx.yyy.137.147:2745 SYN ******S*
12465

Apr 30 12:49:05 83.108.38.19:3818 -> xxx.yyy.64.208:2745 SYN ******S*
Apr 30 12:49:08 83.108.38.19:3820 -> xxx.yyy.64.208:1025 SYN ******S*
Apr 30 12:49:05 83.108.38.19:3821 -> xxx.yyy.64.208:445 SYN ******S*
Apr 30 12:49:05 83.108.38.19:3823 -> xxx.yyy.64.208:6129 SYN ******S*
Apr 30 12:49:08 83.108.38.19:3825 -> xxx.yyy.64.208:5000 SYN ******S*
Apr 30 12:49:08 83.108.38.19:3826 -> xxx.yyy.64.208:80 SYN ******S*
Apr 30 12:49:14 83.108.38.19:3826 -> xxx.yyy.64.208:80 SYN ******S*
Apr 30 12:49:14 83.108.38.19:3823 -> xxx.yyy.64.208:6129 SYN ******S*
[...]
Apr 30 23:56:52 83.108.38.19:4549 -> xxx.yyy.228.62:2745 SYN ******S*
Apr 30 23:56:57 83.108.38.19:4799 -> xxx.yyy.79.171:2745 SYN ******S*
Apr 30 23:57:01 83.108.38.19:3067 -> xxx.yyy.217.59:1025 SYN ******S*
Apr 30 23:57:41 83.108.38.19:4114 -> xxx.yyy.191.78:2745 SYN ******S*
Apr 30 23:57:43 83.108.38.19:4235 -> xxx.yyy.89.40:1025 SYN ******S*
Apr 30 23:57:43 83.108.38.19:4236 -> xxx.yyy.89.40:445 SYN ******S*
Apr 30 23:57:46 83.108.38.19:4237 -> xxx.yyy.89.40:3127 SYN ******S*
Apr 30 23:57:46 83.108.38.19:4238 -> xxx.yyy.89.40:6129 SYN ******S*
Apr 30 23:57:45 83.108.38.19:4058 -> xxx.yyy.16.56:2745 SYN ******S*
12239

--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly@xxxxxxx phone: (319) 273-5850 fax: (319) 273-7373
_______________________________________________
Intrusions mailing list
Intrusions@xxxxxxxxxxxxxx
http://www.dshield.org/mailman/listinfo/intrusions
<Prev in Thread] Current Thread [Next in Thread>
Next by Date:  [LOGS] Summary of large-scale portscanning detects: 00000, Ken . Connelly
Next by Thread:  [LOGS] Summary of large-scale portscanning detects: 00000, Ken . Connelly
Indexes:  [Date] [Thread] [Top] [All Lists]

Google Custom Search
News | FAQ | advertise