|
[LOGS] Summary of large-scale portscanning detects: msg#00004security.intrusions
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0500. May 3 17:15:04 166.122.235.119:22002 -> xxx.yyy.1.1:10080 SYN ******S* May 3 17:15:04 166.122.235.119:22002 -> xxx.yyy.1.1:3128 SYN ******S* May 3 17:15:05 166.122.235.119:22002 -> xxx.yyy.1.3:3127 SYN ******S* May 3 17:15:05 166.122.235.119:22002 -> xxx.yyy.1.3:10080 SYN ******S* May 3 17:15:05 166.122.235.119:22002 -> xxx.yyy.1.3:3128 SYN ******S* May 3 17:15:05 166.122.235.119:22002 -> xxx.yyy.1.4:3127 SYN ******S* May 3 17:15:05 166.122.235.119:22002 -> xxx.yyy.1.4:1080 SYN ******S* May 3 17:15:06 166.122.235.119:22002 -> xxx.yyy.1.4:3128 SYN ******S* [...] May 3 23:59:58 166.122.235.119:22002 -> xxx.yyy.217.167:1080 SYN ******S* May 3 23:59:58 166.122.235.119:22002 -> xxx.yyy.217.167:10080 SYN ******S* May 3 23:59:58 166.122.235.119:22002 -> xxx.yyy.217.167:3128 SYN ******S* May 3 23:59:58 166.122.235.119:22002 -> xxx.yyy.217.168:3127 SYN ******S* May 3 23:59:58 166.122.235.119:22002 -> xxx.yyy.217.168:10080 SYN ******S* May 3 23:59:58 166.122.235.119:22002 -> xxx.yyy.217.168:3128 SYN ******S* May 3 23:59:58 166.122.235.119:22002 -> xxx.yyy.217.169:3127 SYN ******S* May 3 23:59:58 166.122.235.119:22002 -> xxx.yyy.217.169:1080 SYN ******S* May 3 23:59:58 166.122.235.119:22002 -> xxx.yyy.217.169:10080 SYN ******S* 98410 May 3 23:06:07 207.42.21.208:42080 -> xxx.yyy.1.1:139 SYN ******S* May 3 23:06:10 207.42.21.208:42084 -> xxx.yyy.1.3:139 SYN ******S* May 3 23:06:10 207.42.21.208:42088 -> xxx.yyy.1.5:139 SYN ******S* May 3 23:06:10 207.42.21.208:42090 -> xxx.yyy.1.6:139 SYN ******S* May 3 23:06:10 207.42.21.208:42092 -> xxx.yyy.1.7:139 SYN ******S* May 3 23:06:10 207.42.21.208:42096 -> xxx.yyy.1.9:139 SYN ******S* May 3 23:06:08 207.42.21.208:42098 -> xxx.yyy.1.10:139 SYN ******S* May 3 23:06:11 207.42.21.208:42100 -> xxx.yyy.1.11:139 SYN ******S* [...] May 3 23:17:51 207.42.21.208:44445 -> xxx.yyy.255.232:139 SYN ******S* May 3 23:17:52 207.42.21.208:44476 -> xxx.yyy.255.247:139 SYN ******S* May 3 23:17:52 207.42.21.208:44465 -> xxx.yyy.255.242:139 SYN ******S* May 3 23:17:52 207.42.21.208:44467 -> xxx.yyy.255.243:139 SYN ******S* May 3 23:17:52 207.42.21.208:44471 -> xxx.yyy.255.245:139 SYN ******S* May 3 23:17:52 207.42.21.208:44469 -> xxx.yyy.255.244:139 SYN ******S* May 3 23:17:52 207.42.21.208:44474 -> xxx.yyy.255.246:139 SYN ******S* May 3 23:17:52 207.42.21.208:44463 -> xxx.yyy.255.241:139 SYN ******S* May 3 23:17:52 207.42.21.208:44486 -> xxx.yyy.255.252:139 SYN ******S* 52553 May 3 07:37:40 80.181.194.247:1401 -> xxx.yyy.1.2:445 SYN ******S* May 3 07:37:40 80.181.194.247:1402 -> xxx.yyy.1.3:445 SYN ******S* May 3 07:37:40 80.181.194.247:1403 -> xxx.yyy.1.4:445 SYN ******S* May 3 07:37:43 80.181.194.247:1406 -> xxx.yyy.1.7:445 SYN ******S* May 3 07:37:43 80.181.194.247:1407 -> xxx.yyy.1.8:445 SYN ******S* May 3 07:37:43 80.181.194.247:1408 -> xxx.yyy.1.9:445 SYN ******S* May 3 07:37:43 80.181.194.247:1411 -> xxx.yyy.1.12:445 SYN ******S* May 3 07:37:43 80.181.194.247:1412 -> xxx.yyy.1.13:445 SYN ******S* [...] May 3 07:49:26 80.181.194.247:3577 -> xxx.yyy.255.233:445 SYN ******S* May 3 07:49:26 80.181.194.247:3576 -> xxx.yyy.255.232:445 SYN ******S* May 3 07:49:26 80.181.194.247:3582 -> xxx.yyy.255.238:445 SYN ******S* May 3 07:49:26 80.181.194.247:3575 -> xxx.yyy.255.231:445 SYN ******S* May 3 07:49:26 80.181.194.247:3578 -> xxx.yyy.255.234:445 SYN ******S* May 3 07:49:26 80.181.194.247:3587 -> xxx.yyy.255.243:445 SYN ******S* May 3 07:49:26 80.181.194.247:3590 -> xxx.yyy.255.246:445 SYN ******S* May 3 07:49:26 80.181.194.247:3591 -> xxx.yyy.255.247:445 SYN ******S* May 3 07:49:26 80.181.194.247:3596 -> xxx.yyy.255.252:445 SYN ******S* 51969 May 3 00:58:38 216.224.229.142:2525 -> xxx.yyy.1.2:139 SYN ******S* May 3 00:58:38 216.224.229.142:2526 -> xxx.yyy.1.3:139 SYN ******S* May 3 00:58:38 216.224.229.142:2528 -> xxx.yyy.1.5:139 SYN ******S* May 3 00:58:38 216.224.229.142:2529 -> xxx.yyy.1.6:139 SYN ******S* May 3 00:58:38 216.224.229.142:2530 -> xxx.yyy.1.7:139 SYN ******S* May 3 00:58:38 216.224.229.142:2531 -> xxx.yyy.1.8:139 SYN ******S* May 3 00:58:35 216.224.229.142:2532 -> xxx.yyy.1.9:139 SYN ******S* May 3 00:58:38 216.224.229.142:2534 -> xxx.yyy.1.11:139 SYN ******S* [...] May 3 01:11:56 216.224.229.142:4405 -> xxx.yyy.255.237:139 SYN ******S* May 3 01:11:56 216.224.229.142:4402 -> xxx.yyy.255.234:139 SYN ******S* May 3 01:11:56 216.224.229.142:4413 -> xxx.yyy.255.245:139 SYN ******S* May 3 01:11:56 216.224.229.142:4411 -> xxx.yyy.255.243:139 SYN ******S* May 3 01:11:56 216.224.229.142:4414 -> xxx.yyy.255.246:139 SYN ******S* May 3 01:11:56 216.224.229.142:4415 -> xxx.yyy.255.247:139 SYN ******S* May 3 01:11:56 216.224.229.142:4420 -> xxx.yyy.255.252:139 SYN ******S* May 3 01:11:56 216.224.229.142:4421 -> xxx.yyy.255.253:139 SYN ******S* 44351 May 3 00:00:10 65.195.133.120:28620 -> xxx.yyy.141.109:2745 SYN ******S* May 3 00:00:10 65.195.133.120:28621 -> xxx.yyy.141.109:1025 SYN ******S* May 3 00:00:10 65.195.133.120:28623 -> xxx.yyy.141.109:3127 SYN ******S* May 3 00:00:13 65.195.133.120:28637 -> xxx.yyy.224.81:2745 SYN ******S* May 3 00:00:14 65.195.133.120:28667 -> xxx.yyy.86.87:2745 SYN ******S* May 3 00:00:12 65.195.133.120:28690 -> xxx.yyy.14.157:1025 SYN ******S* May 3 00:00:19 65.195.133.120:28620 -> xxx.yyy.141.109:2745 SYN ******S* May 3 00:00:19 65.195.133.120:28623 -> xxx.yyy.141.109:3127 SYN ******S* [...] May 3 23:59:54 65.195.133.120:1661 -> xxx.yyy.137.240:2745 SYN ******S* May 3 23:59:54 65.195.133.120:1595 -> xxx.yyy.254.221:2745 SYN ******S* May 3 23:59:54 65.195.133.120:1600 -> xxx.yyy.161.252:6129 SYN ******S* May 3 23:59:54 65.195.133.120:1599 -> xxx.yyy.161.252:2745 SYN ******S* May 3 23:59:55 65.195.133.120:1715 -> xxx.yyy.75.182:2745 SYN ******S* May 3 23:59:56 65.195.133.120:1647 -> xxx.yyy.252.8:2745 SYN ******S* May 3 23:59:58 65.195.133.120:1715 -> xxx.yyy.75.182:2745 SYN ******S* May 4 00:00:00 65.195.133.120:1600 -> xxx.yyy.161.252:6129 SYN ******S* May 4 00:00:00 65.195.133.120:1599 -> xxx.yyy.161.252:2745 SYN ******S* 43597 May 3 00:02:14 193.129.76.82:35071 -> xxx.yyy.249.251:1025 SYN ******S* May 3 00:02:11 193.129.76.82:36323 -> xxx.yyy.249.251:445 SYN ******S* May 3 00:02:11 193.129.76.82:15260 -> xxx.yyy.249.251:3127 SYN ******S* May 3 00:02:14 193.129.76.82:62696 -> xxx.yyy.249.251:2745 SYN ******S* May 3 00:02:12 193.129.76.82:50694 -> xxx.yyy.148.253:2745 SYN ******S* May 3 00:02:14 193.129.76.82:56653 -> xxx.yyy.105.135:2745 SYN ******S* May 3 00:02:17 193.129.76.82:51665 -> xxx.yyy.79.143:2745 SYN ******S* May 3 00:03:19 193.129.76.82:10765 -> xxx.yyy.111.112:2745 SYN ******S* [...] May 3 23:59:55 193.129.76.82:63190 -> xxx.yyy.231.8:2745 SYN ******S* May 3 23:59:57 193.129.76.82:30324 -> xxx.yyy.12.230:2745 SYN ******S* May 3 23:59:57 193.129.76.82:57953 -> xxx.yyy.211.211:2745 SYN ******S* May 4 00:00:01 193.129.76.82:28475 -> xxx.yyy.238.57:2745 SYN ******S* May 3 23:59:59 193.129.76.82:53903 -> xxx.yyy.179.149:2745 SYN ******S* May 3 23:59:59 193.129.76.82:63527 -> xxx.yyy.240.130:2745 SYN ******S* May 3 23:59:59 193.129.76.82:59267 -> xxx.yyy.87.118:2745 SYN ******S* May 4 00:00:00 193.129.76.82:16940 -> xxx.yyy.93.108:2745 SYN ******S* 40228 May 3 15:48:13 217.83.94.45:3589 -> xxx.yyy.1.1:1433 SYN ******S* May 3 15:48:10 217.83.94.45:3590 -> xxx.yyy.1.2:1433 SYN ******S* May 3 15:48:13 217.83.94.45:3591 -> xxx.yyy.1.3:1433 SYN ******S* May 3 15:48:10 217.83.94.45:3592 -> xxx.yyy.1.4:1433 SYN ******S* May 3 15:48:10 217.83.94.45:3595 -> xxx.yyy.1.7:1433 SYN ******S* May 3 15:48:10 217.83.94.45:3603 -> xxx.yyy.1.15:1433 SYN ******S* May 3 15:48:10 217.83.94.45:3605 -> xxx.yyy.1.17:1433 SYN ******S* May 3 15:48:10 217.83.94.45:3606 -> xxx.yyy.1.18:1433 SYN ******S* [...] May 3 16:00:32 217.83.94.45:4945 -> xxx.yyy.255.235:1433 SYN ******S* May 3 16:00:32 217.83.94.45:4942 -> xxx.yyy.255.232:1433 SYN ******S* May 3 16:00:32 217.83.94.45:4956 -> xxx.yyy.255.246:1433 SYN ******S* May 3 16:00:32 217.83.94.45:4953 -> xxx.yyy.255.243:1433 SYN ******S* May 3 16:00:32 217.83.94.45:4954 -> xxx.yyy.255.244:1433 SYN ******S* May 3 16:00:32 217.83.94.45:4955 -> xxx.yyy.255.245:1433 SYN ******S* May 3 16:00:32 217.83.94.45:4960 -> xxx.yyy.255.250:1433 SYN ******S* May 3 16:00:32 217.83.94.45:4961 -> xxx.yyy.255.251:1433 SYN ******S* 31843 May 3 14:37:24 198.77.133.24:2566 -> xxx.yyy.1.1:445 SYN ******S* May 3 14:37:24 198.77.133.24:2574 -> xxx.yyy.1.9:445 SYN ******S* May 3 14:37:27 198.77.133.24:2575 -> xxx.yyy.1.10:445 SYN ******S* May 3 14:37:24 198.77.133.24:2576 -> xxx.yyy.1.11:445 SYN ******S* May 3 14:37:24 198.77.133.24:2577 -> xxx.yyy.1.12:445 SYN ******S* May 3 14:37:27 198.77.133.24:2581 -> xxx.yyy.1.16:445 SYN ******S* May 3 14:37:24 198.77.133.24:2582 -> xxx.yyy.1.17:445 SYN ******S* May 3 14:37:27 198.77.133.24:2583 -> xxx.yyy.1.18:445 SYN ******S* [...] May 3 14:49:05 198.77.133.24:4076 -> xxx.yyy.255.238:445 SYN ******S* May 3 14:49:05 198.77.133.24:4073 -> xxx.yyy.255.235:445 SYN ******S* May 3 14:49:05 198.77.133.24:4078 -> xxx.yyy.255.240:445 SYN ******S* May 3 14:49:05 198.77.133.24:4075 -> xxx.yyy.255.237:445 SYN ******S* May 3 14:49:05 198.77.133.24:4077 -> xxx.yyy.255.239:445 SYN ******S* May 3 14:49:05 198.77.133.24:4079 -> xxx.yyy.255.241:445 SYN ******S* May 3 14:49:05 198.77.133.24:4074 -> xxx.yyy.255.236:445 SYN ******S* May 3 14:49:05 198.77.133.24:4070 -> xxx.yyy.255.232:445 SYN ******S* 29928 May 3 14:04:32 63.77.72.88:2103 -> xxx.yyy.1.15:80 SYN ******S* May 3 14:04:32 63.77.72.88:2105 -> xxx.yyy.1.16:80 SYN ******S* May 3 14:04:32 63.77.72.88:2075 -> xxx.yyy.1.2:80 SYN ******S* May 3 14:04:35 63.77.72.88:2077 -> xxx.yyy.1.3:80 SYN ******S* May 3 14:04:32 63.77.72.88:2087 -> xxx.yyy.1.8:80 SYN ******S* May 3 14:04:35 63.77.72.88:2081 -> xxx.yyy.1.5:80 SYN ******S* May 3 14:04:32 63.77.72.88:2140 -> xxx.yyy.1.33:80 SYN ******S* May 3 14:04:35 63.77.72.88:2083 -> xxx.yyy.1.6:80 SYN ******S* [...] May 3 14:14:14 63.77.72.88:3644 -> xxx.yyy.255.201:80 SYN ******S* May 3 14:14:14 63.77.72.88:3683 -> xxx.yyy.255.239:80 SYN ******S* May 3 14:14:14 63.77.72.88:3661 -> xxx.yyy.255.217:80 SYN ******S* May 3 14:14:14 63.77.72.88:3690 -> xxx.yyy.255.246:80 SYN ******S* May 3 14:14:14 63.77.72.88:3671 -> xxx.yyy.255.227:80 SYN ******S* May 3 14:14:14 63.77.72.88:3681 -> xxx.yyy.255.237:80 SYN ******S* May 3 14:14:14 63.77.72.88:3665 -> xxx.yyy.255.221:80 SYN ******S* May 3 14:14:14 63.77.72.88:3645 -> xxx.yyy.255.202:80 SYN ******S* May 3 14:14:14 63.77.72.88:3672 -> xxx.yyy.255.228:80 SYN ******S* 27363 May 3 12:09:29 80.182.82.160:3090 -> xxx.yyy.1.0:139 SYN ******S* May 3 12:09:29 80.182.82.160:4210 -> xxx.yyy.1.2:139 SYN ******S* May 3 12:09:29 80.182.82.160:4328 -> xxx.yyy.1.7:139 SYN ******S* May 3 12:09:29 80.182.82.160:4342 -> xxx.yyy.1.8:139 SYN ******S* May 3 12:09:32 80.182.82.160:4359 -> xxx.yyy.1.9:139 SYN ******S* May 3 12:09:32 80.182.82.160:4411 -> xxx.yyy.1.11:139 SYN ******S* May 3 12:09:32 80.182.82.160:4427 -> xxx.yyy.1.12:139 SYN ******S* May 3 12:09:29 80.182.82.160:4447 -> xxx.yyy.1.14:139 SYN ******S* [...] May 3 13:18:31 80.182.82.160:3777 -> xxx.yyy.255.241:139 SYN ******S* May 3 13:18:31 80.182.82.160:4597 -> xxx.yyy.255.242:139 SYN ******S* May 3 13:18:32 80.182.82.160:3341 -> xxx.yyy.255.244:139 SYN ******S* May 3 13:18:32 80.182.82.160:4073 -> xxx.yyy.255.251:139 SYN ******S* May 3 13:18:32 80.182.82.160:3305 -> xxx.yyy.255.248:139 SYN ******S* May 3 13:18:32 80.182.82.160:4375 -> xxx.yyy.255.249:139 SYN ******S* May 3 13:18:32 80.182.82.160:4993 -> xxx.yyy.255.250:139 SYN ******S* May 3 13:18:33 80.182.82.160:4632 -> xxx.yyy.255.254:139 SYN ******S* 27011 May 3 13:19:56 81.250.27.41:3292 -> xxx.yyy.106.34:2745 SYN ******S* May 3 13:19:51 81.250.27.41:3312 -> xxx.yyy.107.234:2745 SYN ******S* May 3 13:19:51 81.250.27.41:3403 -> xxx.yyy.254.93:2745 SYN ******S* May 3 13:19:54 81.250.27.41:3414 -> xxx.yyy.199.175:2745 SYN ******S* May 3 13:19:53 81.250.27.41:3456 -> xxx.yyy.71.104:1025 SYN ******S* May 3 13:19:53 81.250.27.41:3457 -> xxx.yyy.71.104:445 SYN ******S* May 3 13:19:56 81.250.27.41:3512 -> xxx.yyy.139.57:2745 SYN ******S* May 3 13:19:57 81.250.27.41:3474 -> xxx.yyy.207.153:2745 SYN ******S* [...] May 3 23:59:57 81.250.27.41:2962 -> xxx.yyy.135.244:2745 SYN ******S* May 3 23:59:58 81.250.27.41:2885 -> xxx.yyy.195.39:2745 SYN ******S* May 3 23:59:58 81.250.27.41:2891 -> xxx.yyy.219.182:2745 SYN ******S* May 3 23:59:59 81.250.27.41:2811 -> xxx.yyy.72.254:139 SYN ******S* May 3 23:59:59 81.250.27.41:2810 -> xxx.yyy.72.254:6129 SYN ******S* May 3 23:59:59 81.250.27.41:2809 -> xxx.yyy.72.254:3127 SYN ******S* May 3 23:59:59 81.250.27.41:2808 -> xxx.yyy.72.254:445 SYN ******S* May 3 23:59:59 81.250.27.41:2805 -> xxx.yyy.72.254:2745 SYN ******S* 23953 May 3 15:54:05 165.123.150.129:3041 -> xxx.yyy.1.1:8000 SYN ******S* May 3 15:54:05 165.123.150.129:3054 -> xxx.yyy.1.7:8000 SYN ******S* May 3 15:54:05 165.123.150.129:3059 -> xxx.yyy.1.9:8000 SYN ******S* May 3 15:54:07 165.123.150.129:3063 -> xxx.yyy.1.11:8000 SYN ******S* May 3 15:54:05 165.123.150.129:3065 -> xxx.yyy.1.12:8000 SYN ******S* May 3 15:54:05 165.123.150.129:3072 -> xxx.yyy.1.15:8000 SYN ******S* May 3 15:54:07 165.123.150.129:3083 -> xxx.yyy.1.20:8000 SYN ******S* May 3 15:54:08 165.123.150.129:3093 -> xxx.yyy.1.24:8000 SYN ******S* [...] May 3 16:51:06 165.123.150.129:2320 -> xxx.yyy.171.38:8000 SYN ******S* May 3 16:51:06 165.123.150.129:2327 -> xxx.yyy.171.39:8000 SYN ******S* May 3 16:51:06 165.123.150.129:2333 -> xxx.yyy.171.40:8000 SYN ******S* May 3 16:51:06 165.123.150.129:2351 -> xxx.yyy.171.43:8000 SYN ******S* May 3 16:51:06 165.123.150.129:2367 -> xxx.yyy.171.46:8000 SYN ******S* May 3 16:51:06 165.123.150.129:2377 -> xxx.yyy.171.48:8000 SYN ******S* May 3 16:51:06 165.123.150.129:2385 -> xxx.yyy.171.50:8000 SYN ******S* May 3 16:51:06 165.123.150.129:2388 -> xxx.yyy.171.51:8000 SYN ******S* May 3 16:51:06 165.123.150.129:2392 -> xxx.yyy.171.52:8000 SYN ******S* 23234 May 3 23:38:48 218.106.47.66:3856 -> xxx.yyy.1.1:443 SYN ******S* May 3 23:38:49 218.106.47.66:3929 -> xxx.yyy.1.1:8080 SYN ******S* May 3 23:38:48 218.106.47.66:3857 -> xxx.yyy.1.2:443 SYN ******S* May 3 23:38:49 218.106.47.66:3860 -> xxx.yyy.1.5:443 SYN ******S* May 3 23:38:49 218.106.47.66:3861 -> xxx.yyy.1.6:443 SYN ******S* May 3 23:38:49 218.106.47.66:3862 -> xxx.yyy.1.4:443 SYN ******S* May 3 23:38:49 218.106.47.66:3863 -> xxx.yyy.1.7:443 SYN ******S* May 3 23:38:49 218.106.47.66:3864 -> xxx.yyy.1.8:443 SYN ******S* [...] May 3 23:59:57 218.106.47.66:1396 -> xxx.yyy.95.237:443 SYN ******S* May 3 23:59:57 218.106.47.66:1397 -> xxx.yyy.95.238:443 SYN ******S* May 3 23:59:57 218.106.47.66:1398 -> xxx.yyy.95.239:443 SYN ******S* May 3 23:59:57 218.106.47.66:1400 -> xxx.yyy.95.241:443 SYN ******S* May 3 23:59:57 218.106.47.66:1402 -> xxx.yyy.95.244:443 SYN ******S* May 3 23:59:57 218.106.47.66:1410 -> xxx.yyy.95.251:443 SYN ******S* May 3 23:59:57 218.106.47.66:1407 -> xxx.yyy.95.248:443 SYN ******S* May 3 23:59:57 218.106.47.66:1404 -> xxx.yyy.95.245:443 SYN ******S* May 3 23:59:58 218.106.47.66:1413 -> xxx.yyy.95.254:443 SYN ******S* 22450 May 3 13:20:29 81.108.0.122:2314 -> xxx.yyy.135.49:2745 SYN ******S* May 3 13:20:30 81.108.0.122:2335 -> xxx.yyy.88.237:2745 SYN ******S* May 3 13:20:31 81.108.0.122:2380 -> xxx.yyy.161.214:2745 SYN ******S* May 3 13:20:31 81.108.0.122:2385 -> xxx.yyy.161.214:3127 SYN ******S* May 3 13:20:31 81.108.0.122:2386 -> xxx.yyy.161.214:6129 SYN ******S* May 3 13:20:32 81.108.0.122:2453 -> xxx.yyy.172.136:2745 SYN ******S* May 3 13:20:35 81.108.0.122:2314 -> xxx.yyy.135.49:2745 SYN ******S* May 3 13:20:38 81.108.0.122:2796 -> xxx.yyy.225.63:2745 SYN ******S* [...] May 3 23:59:48 81.108.0.122:3990 -> xxx.yyy.75.122:2745 SYN ******S* May 3 23:59:48 81.108.0.122:3992 -> xxx.yyy.75.122:1025 SYN ******S* May 3 23:59:49 81.108.0.122:4091 -> xxx.yyy.145.51:2745 SYN ******S* May 3 23:59:52 81.108.0.122:4091 -> xxx.yyy.145.51:2745 SYN ******S* May 3 23:59:53 81.108.0.122:3953 -> xxx.yyy.89.113:2745 SYN ******S* May 3 23:59:54 81.108.0.122:4188 -> xxx.yyy.208.74:2745 SYN ******S* May 3 23:59:54 81.108.0.122:3990 -> xxx.yyy.75.122:2745 SYN ******S* May 3 23:59:58 81.108.0.122:4091 -> xxx.yyy.145.51:2745 SYN ******S* 19183 May 3 14:22:38 172.175.81.120:4997 -> xxx.yyy.234.178:1025 SYN ******S* May 3 14:22:35 172.175.81.120:4999 -> xxx.yyy.234.178:3127 SYN ******S* May 3 14:22:36 172.175.81.120:3004 -> xxx.yyy.234.178:6129 SYN ******S* May 3 14:22:36 172.175.81.120:3007 -> xxx.yyy.234.178:80 SYN ******S* May 3 14:22:36 172.175.81.120:4995 -> xxx.yyy.234.178:2745 SYN ******S* May 3 14:22:38 172.175.81.120:3006 -> xxx.yyy.234.178:5000 SYN ******S* May 3 14:22:38 172.175.81.120:3008 -> xxx.yyy.130.214:2745 SYN ******S* May 3 14:22:44 172.175.81.120:3145 -> xxx.yyy.195.75:6129 SYN ******S* [...] May 3 22:33:54 172.175.81.120:4270 -> xxx.yyy.146.190:2745 SYN ******S* May 3 22:33:54 172.175.81.120:4294 -> xxx.yyy.231.0:2745 SYN ******S* May 3 22:33:54 172.175.81.120:4438 -> xxx.yyy.178.153:2745 SYN ******S* May 3 22:33:54 172.175.81.120:4099 -> xxx.yyy.92.61:2745 SYN ******S* May 3 22:33:57 172.175.81.120:4575 -> xxx.yyy.242.188:2745 SYN ******S* May 3 22:33:57 172.175.81.120:4438 -> xxx.yyy.178.153:2745 SYN ******S* May 3 22:33:57 172.175.81.120:4177 -> xxx.yyy.229.195:2745 SYN ******S* May 3 22:34:00 172.175.81.120:4270 -> xxx.yyy.146.190:2745 SYN ******S* 18980 May 3 09:07:33 66.162.193.67:3348 -> xxx.yyy.1.2:1433 SYN ******S* May 3 09:07:33 66.162.193.67:3351 -> xxx.yyy.1.3:1433 SYN ******S* May 3 09:07:33 66.162.193.67:3361 -> xxx.yyy.1.13:1433 SYN ******S* May 3 09:07:33 66.162.193.67:3364 -> xxx.yyy.1.16:1433 SYN ******S* May 3 09:07:33 66.162.193.67:3366 -> xxx.yyy.1.18:1433 SYN ******S* May 3 09:07:33 66.162.193.67:3367 -> xxx.yyy.1.19:1433 SYN ******S* May 3 09:07:33 66.162.193.67:3368 -> xxx.yyy.1.20:1433 SYN ******S* May 3 09:07:33 66.162.193.67:3369 -> xxx.yyy.1.21:1433 SYN ******S* [...] May 3 09:18:50 66.162.193.67:3064 -> xxx.yyy.255.233:1433 SYN ******S* May 3 09:18:50 66.162.193.67:3067 -> xxx.yyy.255.236:1433 SYN ******S* May 3 09:18:50 66.162.193.67:3073 -> xxx.yyy.255.242:1433 SYN ******S* May 3 09:18:50 66.162.193.67:3074 -> xxx.yyy.255.243:1433 SYN ******S* May 3 09:18:50 66.162.193.67:3075 -> xxx.yyy.255.244:1433 SYN ******S* May 3 09:18:50 66.162.193.67:3076 -> xxx.yyy.255.245:1433 SYN ******S* May 3 09:18:50 66.162.193.67:3080 -> xxx.yyy.255.249:1433 SYN ******S* May 3 09:18:50 66.162.193.67:3084 -> xxx.yyy.255.253:1433 SYN ******S* May 3 09:18:50 66.162.193.67:3085 -> xxx.yyy.255.254:1433 SYN ******S* 18878 May 3 16:15:31 67.98.69.166:3049 -> xxx.yyy.1.1:445 SYN ******S* May 3 16:15:31 67.98.69.166:3057 -> xxx.yyy.1.3:445 SYN ******S* May 3 16:15:31 67.98.69.166:3089 -> xxx.yyy.1.11:445 SYN ******S* May 3 16:15:31 67.98.69.166:3097 -> xxx.yyy.1.13:445 SYN ******S* May 3 16:15:34 67.98.69.166:3100 -> xxx.yyy.1.14:445 SYN ******S* May 3 16:15:31 67.98.69.166:3108 -> xxx.yyy.1.16:445 SYN ******S* May 3 16:15:31 67.98.69.166:3113 -> xxx.yyy.1.17:445 SYN ******S* May 3 16:15:31 67.98.69.166:3116 -> xxx.yyy.1.18:445 SYN ******S* [...] May 3 16:27:23 67.98.69.166:3652 -> xxx.yyy.255.48:445 SYN ******S* May 3 16:27:23 67.98.69.166:4355 -> xxx.yyy.255.128:445 SYN ******S* May 3 16:27:23 67.98.69.166:4472 -> xxx.yyy.255.142:445 SYN ******S* May 3 16:27:23 67.98.69.166:3979 -> xxx.yyy.255.83:445 SYN ******S* May 3 16:27:23 67.98.69.166:4128 -> xxx.yyy.255.101:445 SYN ******S* May 3 16:27:23 67.98.69.166:4237 -> xxx.yyy.255.113:445 SYN ******S* May 3 16:27:24 67.98.69.166:4947 -> xxx.yyy.255.208:445 SYN ******S* May 3 16:27:24 67.98.69.166:4997 -> xxx.yyy.255.213:445 SYN ******S* May 3 16:27:24 67.98.69.166:1058 -> xxx.yyy.255.222:445 SYN ******S* 17997 May 3 12:20:04 211.90.88.43:30591 -> xxx.yyy.231.6:2745 SYN ******S* May 3 12:20:01 211.90.88.43:30884 -> xxx.yyy.91.169:1025 SYN ******S* May 3 12:20:04 211.90.88.43:30891 -> xxx.yyy.192.118:2745 SYN ******S* May 3 12:20:01 211.90.88.43:30389 -> xxx.yyy.89.36:2745 SYN ******S* May 3 12:20:01 211.90.88.43:30728 -> xxx.yyy.163.156:2745 SYN ******S* May 3 12:20:04 211.90.88.43:31027 -> xxx.yyy.210.18:2745 SYN ******S* May 3 12:20:07 211.90.88.43:30665 -> xxx.yyy.149.180:2745 SYN ******S* May 3 12:20:07 211.90.88.43:30729 -> xxx.yyy.242.210:2745 SYN ******S* [...] May 3 23:56:48 211.90.88.43:17307 -> xxx.yyy.206.251:2745 SYN ******S* May 3 23:56:51 211.90.88.43:17307 -> xxx.yyy.206.251:2745 SYN ******S* May 3 23:56:51 211.90.88.43:16869 -> xxx.yyy.143.241:2745 SYN ******S* May 3 23:56:55 211.90.88.43:18010 -> xxx.yyy.156.78:2745 SYN ******S* May 3 23:56:57 211.90.88.43:17307 -> xxx.yyy.206.251:2745 SYN ******S* May 3 23:56:59 211.90.88.43:18010 -> xxx.yyy.156.78:2745 SYN ******S* May 3 23:56:59 211.90.88.43:18282 -> xxx.yyy.184.193:2745 SYN ******S* May 3 23:57:02 211.90.88.43:18282 -> xxx.yyy.184.193:2745 SYN ******S* May 3 23:57:08 211.90.88.43:18282 -> xxx.yyy.184.193:2745 SYN ******S* 13856 May 3 12:22:01 81.69.171.122:3792 -> xxx.yyy.174.147:2745 SYN ******S* May 3 12:22:03 81.69.171.122:3953 -> xxx.yyy.210.200:2745 SYN ******S* May 3 12:22:03 81.69.171.122:3973 -> xxx.yyy.210.200:1025 SYN ******S* May 3 12:22:05 81.69.171.122:3974 -> xxx.yyy.210.200:445 SYN ******S* May 3 12:22:04 81.69.171.122:3861 -> xxx.yyy.106.71:445 SYN ******S* May 3 12:22:04 81.69.171.122:3862 -> xxx.yyy.106.71:3127 SYN ******S* May 3 12:22:11 81.69.171.122:3974 -> xxx.yyy.210.200:445 SYN ******S* May 3 12:22:11 81.69.171.122:3953 -> xxx.yyy.210.200:2745 SYN ******S* [...] May 3 23:59:30 81.69.171.122:3112 -> xxx.yyy.252.209:445 SYN ******S* May 3 23:59:30 81.69.171.122:3251 -> xxx.yyy.252.209:3127 SYN ******S* May 3 23:59:30 81.69.171.122:3298 -> xxx.yyy.252.209:139 SYN ******S* May 3 23:59:36 81.69.171.122:3097 -> xxx.yyy.252.209:1025 SYN ******S* May 3 23:59:36 81.69.171.122:4922 -> xxx.yyy.252.209:2745 SYN ******S* May 3 23:59:36 81.69.171.122:3286 -> xxx.yyy.252.209:6129 SYN ******S* May 3 23:59:36 81.69.171.122:3251 -> xxx.yyy.252.209:3127 SYN ******S* May 3 23:59:36 81.69.171.122:3112 -> xxx.yyy.252.209:445 SYN ******S* May 3 23:59:36 81.69.171.122:3298 -> xxx.yyy.252.209:139 SYN ******S* 12317 May 3 00:01:11 219.83.19.175:3616 -> xxx.yyy.192.70:2745 SYN ******S* May 3 00:01:12 219.83.19.175:3626 -> xxx.yyy.139.171:2745 SYN ******S* May 3 00:01:15 219.83.19.175:3632 -> xxx.yyy.233.76:2745 SYN ******S* May 3 00:01:13 219.83.19.175:3588 -> xxx.yyy.165.232:2745 SYN ******S* May 3 00:01:14 219.83.19.175:3672 -> xxx.yyy.236.41:2745 SYN ******S* May 3 00:01:18 219.83.19.175:3760 -> xxx.yyy.253.70:2745 SYN ******S* May 3 00:01:20 219.83.19.175:3616 -> xxx.yyy.192.70:2745 SYN ******S* May 3 00:01:21 219.83.19.175:3626 -> xxx.yyy.139.171:2745 SYN ******S* [...] May 3 23:49:35 219.83.19.175:4033 -> xxx.yyy.78.78:3127 SYN ******S* May 3 23:49:35 219.83.19.175:4032 -> xxx.yyy.78.78:445 SYN ******S* May 3 23:49:35 219.83.19.175:4030 -> xxx.yyy.78.78:1025 SYN ******S* May 3 23:49:35 219.83.19.175:4025 -> xxx.yyy.78.78:2745 SYN ******S* May 3 23:52:22 219.83.19.175:3433 -> xxx.yyy.203.82:2745 SYN ******S* May 3 23:52:22 219.83.19.175:3435 -> xxx.yyy.203.82:1025 SYN ******S* May 3 23:52:23 219.83.19.175:3231 -> xxx.yyy.66.143:1025 SYN ******S* May 3 23:52:23 219.83.19.175:3228 -> xxx.yyy.66.143:2745 SYN ******S* May 3 23:52:23 219.83.19.175:3225 -> xxx.yyy.239.5:2745 SYN ******S* 11969 May 3 00:00:15 217.96.215.67:4468 -> xxx.yyy.77.208:445 SYN ******S* May 3 00:00:18 217.96.215.67:4580 -> xxx.yyy.77.208:6129 SYN ******S* May 3 00:00:15 217.96.215.67:4595 -> xxx.yyy.77.208:139 SYN ******S* May 3 00:00:18 217.96.215.67:3990 -> xxx.yyy.77.208:2745 SYN ******S* May 3 00:00:18 217.96.215.67:4574 -> xxx.yyy.77.208:3127 SYN ******S* May 3 00:00:15 217.96.215.67:3056 -> xxx.yyy.243.148:2745 SYN ******S* May 3 00:00:15 217.96.215.67:3092 -> xxx.yyy.243.148:1025 SYN ******S* May 3 00:00:15 217.96.215.67:3155 -> xxx.yyy.243.148:445 SYN ******S* [...] May 3 23:56:09 217.96.215.67:4702 -> xxx.yyy.202.10:139 SYN ******S* May 3 23:56:09 217.96.215.67:4856 -> xxx.yyy.202.10:80 SYN ******S* May 3 23:58:12 217.96.215.67:4619 -> xxx.yyy.218.241:2745 SYN ******S* May 3 23:58:12 217.96.215.67:4656 -> xxx.yyy.218.241:1025 SYN ******S* May 3 23:58:12 217.96.215.67:4723 -> xxx.yyy.218.241:3127 SYN ******S* May 3 23:58:12 217.96.215.67:4811 -> xxx.yyy.218.241:6129 SYN ******S* May 3 23:58:12 217.96.215.67:4822 -> xxx.yyy.218.241:139 SYN ******S* May 3 23:58:12 217.96.215.67:4835 -> xxx.yyy.218.241:5000 SYN ******S* May 3 23:58:12 217.96.215.67:4836 -> xxx.yyy.218.241:80 SYN ******S* 10054 May 3 13:19:49 203.195.216.122:4374 -> xxx.yyy.248.14:2745 SYN ******S* May 3 13:19:49 203.195.216.122:1496 -> xxx.yyy.201.217:2745 SYN ******S* May 3 13:19:50 203.195.216.122:3460 -> xxx.yyy.217.213:2745 SYN ******S* May 3 13:19:53 203.195.216.122:1696 -> xxx.yyy.156.97:2745 SYN ******S* May 3 13:19:50 203.195.216.122:1698 -> xxx.yyy.156.97:1025 SYN ******S* May 3 13:19:53 203.195.216.122:1220 -> xxx.yyy.204.45:2745 SYN ******S* May 3 13:19:50 203.195.216.122:1222 -> xxx.yyy.204.45:1025 SYN ******S* May 3 13:19:50 203.195.216.122:4261 -> xxx.yyy.206.221:1025 SYN ******S* [...] May 3 16:33:07 203.195.216.122:3537 -> xxx.yyy.134.207:2745 SYN ******S* May 3 16:33:08 203.195.216.122:3423 -> xxx.yyy.247.21:2745 SYN ******S* May 3 16:33:12 203.195.216.122:3537 -> xxx.yyy.134.207:2745 SYN ******S* May 3 16:33:16 203.195.216.122:3796 -> xxx.yyy.237.217:2745 SYN ******S* May 3 16:36:23 203.195.216.122:3978 -> xxx.yyy.72.33:3127 SYN ******S* May 3 16:36:23 203.195.216.122:3976 -> xxx.yyy.72.33:1025 SYN ******S* May 3 16:36:23 203.195.216.122:3973 -> xxx.yyy.72.33:2745 SYN ******S* May 3 16:36:23 203.195.216.122:4148 -> xxx.yyy.238.90:2745 SYN ******S* May 3 16:36:26 203.195.216.122:4150 -> xxx.yyy.238.90:1025 SYN ******S* 9797 May 3 00:01:12 83.35.14.220:4821 -> xxx.yyy.191.38:445 SYN ******S* May 3 00:01:12 83.35.14.220:4812 -> xxx.yyy.191.38:2745 SYN ******S* May 3 00:01:12 83.35.14.220:3305 -> xxx.yyy.80.113:2745 SYN ******S* May 3 00:01:14 83.35.14.220:3307 -> xxx.yyy.80.113:1025 SYN ******S* May 3 00:01:14 83.35.14.220:3299 -> xxx.yyy.93.180:2745 SYN ******S* May 3 00:01:20 83.35.14.220:3485 -> xxx.yyy.89.142:2745 SYN ******S* May 3 00:01:23 83.35.14.220:3638 -> xxx.yyy.129.69:2745 SYN ******S* May 3 00:02:56 83.35.14.220:3268 -> xxx.yyy.210.195:2745 SYN ******S* [...] May 3 23:57:26 83.35.14.220:3378 -> xxx.yyy.215.20:2745 SYN ******S* May 3 23:57:31 83.35.14.220:3957 -> xxx.yyy.185.59:2745 SYN ******S* May 3 23:59:53 83.35.14.220:4710 -> xxx.yyy.162.99:2745 SYN ******S* May 3 23:59:59 83.35.14.220:3053 -> xxx.yyy.175.239:2745 SYN ******S* May 3 23:59:59 83.35.14.220:3061 -> xxx.yyy.175.239:1025 SYN ******S* May 3 23:59:59 83.35.14.220:3062 -> xxx.yyy.175.239:445 SYN ******S* May 3 23:59:56 83.35.14.220:3065 -> xxx.yyy.175.239:3127 SYN ******S* May 3 23:59:59 83.35.14.220:3223 -> xxx.yyy.132.218:2745 SYN ******S* 8524 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: Ken.Connelly@xxxxxxx phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list Intrusions@xxxxxxxxxxxxxx http://www.dshield.org/mailman/listinfo/intrusions |
|
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| Previous by Date: | LOGS: GIAC GCIA Version 3.4 Practical Detect- David Chance (2nd Attempt): 00004, skycopp-mail8531 |
|---|---|
| Next by Date: | LOGS: GIAC GCIA Version 3.4 Practical Detect (Dana Webber): 00004, Dana Webber |
| Previous by Thread: | [LOGS] Summary of large-scale portscanning detectsi: 00004, Ken . Connelly |
| Next by Thread: | [LOGS] Summary of large-scale portscanning detects: 00004, Ken . Connelly |
| Indexes: | [Date] [Thread] [Top] [All Lists] |
| News | FAQ | advertise |