logo       
<prev   next>

[LOGS] Summary of large-scale portscanning detects: msg#00019

security.intrusions

Subject: [LOGS] Summary of large-scale portscanning detects

The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0500.

May 6 18:05:35 24.93.199.215:22002 -> xxx.yyy.1.0:3127 SYN ******S*
May 6 18:05:35 24.93.199.215:22002 -> xxx.yyy.1.0:10080 SYN ******S*
May 6 18:05:36 24.93.199.215:22002 -> xxx.yyy.1.0:3128 SYN ******S*
May 6 18:05:36 24.93.199.215:22002 -> xxx.yyy.1.1:3127 SYN ******S*
May 6 18:05:36 24.93.199.215:22002 -> xxx.yyy.1.1:10080 SYN ******S*
May 6 18:05:36 24.93.199.215:22002 -> xxx.yyy.1.1:1080 SYN ******S*
May 6 18:05:36 24.93.199.215:22002 -> xxx.yyy.1.1:3128 SYN ******S*
May 6 18:05:36 24.93.199.215:22002 -> xxx.yyy.1.2:3127 SYN ******S*
[...]
May 6 23:59:59 24.93.199.215:22002 -> xxx.yyy.201.220:10080 SYN ******S*
May 6 23:59:59 24.93.199.215:22002 -> xxx.yyy.201.220:3128 SYN ******S*
May 6 23:59:59 24.93.199.215:22002 -> xxx.yyy.201.221:3127 SYN ******S*
May 6 23:59:59 24.93.199.215:22002 -> xxx.yyy.201.221:1080 SYN ******S*
May 6 23:59:59 24.93.199.215:22002 -> xxx.yyy.201.221:10080 SYN ******S*
May 6 23:59:59 24.93.199.215:22002 -> xxx.yyy.201.221:3128 SYN ******S*
May 6 23:59:59 24.93.199.215:22002 -> xxx.yyy.201.222:3127 SYN ******S*
May 6 23:59:59 24.93.199.215:22002 -> xxx.yyy.201.222:1080 SYN ******S*
May 6 23:59:59 24.93.199.215:22002 -> xxx.yyy.201.222:10080 SYN ******S*
119799

May 6 22:42:32 212.142.144.91:1796 -> xxx.yyy.1.1:445 SYN ******S*
May 6 22:42:32 212.142.144.91:1799 -> xxx.yyy.1.3:445 SYN ******S*
May 6 22:42:32 212.142.144.91:1798 -> xxx.yyy.1.2:445 SYN ******S*
May 6 22:42:33 212.142.144.91:1801 -> xxx.yyy.1.5:445 SYN ******S*
May 6 22:42:33 212.142.144.91:1800 -> xxx.yyy.1.4:445 SYN ******S*
May 6 22:42:33 212.142.144.91:1802 -> xxx.yyy.1.6:445 SYN ******S*
May 6 22:42:33 212.142.144.91:1803 -> xxx.yyy.1.7:445 SYN ******S*
May 6 22:42:33 212.142.144.91:1804 -> xxx.yyy.1.8:445 SYN ******S*
[...]
May 6 22:54:32 212.142.144.91:1394 -> xxx.yyy.255.247:445 SYN ******S*
May 6 22:54:32 212.142.144.91:1392 -> xxx.yyy.255.245:445 SYN ******S*
May 6 22:54:32 212.142.144.91:1400 -> xxx.yyy.255.253:445 SYN ******S*
May 6 22:54:32 212.142.144.91:1401 -> xxx.yyy.255.254:445 SYN ******S*
May 6 22:54:32 212.142.144.91:1396 -> xxx.yyy.255.249:445 SYN ******S*
May 6 22:54:32 212.142.144.91:1397 -> xxx.yyy.255.250:445 SYN ******S*
May 6 22:54:32 212.142.144.91:1395 -> xxx.yyy.255.248:445 SYN ******S*
May 6 22:54:32 212.142.144.91:1399 -> xxx.yyy.255.252:445 SYN ******S*
May 6 22:54:32 212.142.144.91:1398 -> xxx.yyy.255.251:445 SYN ******S*
68854

May 6 00:55:50 212.100.225.123:1199 -> xxx.yyy.1.1:1433 SYN ******S*
May 6 00:55:50 212.100.225.123:1201 -> xxx.yyy.1.2:1433 SYN ******S*
May 6 00:55:47 212.100.225.123:1203 -> xxx.yyy.1.3:1433 SYN ******S*
May 6 00:55:50 212.100.225.123:1205 -> xxx.yyy.1.4:1433 SYN ******S*
May 6 00:55:47 212.100.225.123:1207 -> xxx.yyy.1.5:1433 SYN ******S*
May 6 00:55:50 212.100.225.123:1209 -> xxx.yyy.1.6:1433 SYN ******S*
May 6 00:55:47 212.100.225.123:1211 -> xxx.yyy.1.7:1433 SYN ******S*
May 6 00:55:47 212.100.225.123:1213 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
May 6 01:45:25 212.100.225.123:2174 -> xxx.yyy.255.242:1433 SYN ******S*
May 6 01:45:25 212.100.225.123:2169 -> xxx.yyy.255.240:1433 SYN ******S*
May 6 01:45:25 212.100.225.123:2183 -> xxx.yyy.255.247:1433 SYN ******S*
May 6 01:45:25 212.100.225.123:2185 -> xxx.yyy.255.248:1433 SYN ******S*
May 6 01:45:25 212.100.225.123:2182 -> xxx.yyy.255.246:1433 SYN ******S*
May 6 01:45:25 212.100.225.123:2187 -> xxx.yyy.255.249:1433 SYN ******S*
May 6 01:45:25 212.100.225.123:2193 -> xxx.yyy.255.252:1433 SYN ******S*
May 6 01:45:25 212.100.225.123:2196 -> xxx.yyy.255.253:1433 SYN ******S*
May 6 01:45:25 212.100.225.123:2198 -> xxx.yyy.255.254:1433 SYN ******S*
57568

May 6 10:05:52 216.109.9.179:2386 -> xxx.yyy.1.2:6129 SYN ******S*
May 6 10:05:53 216.109.9.179:2388 -> xxx.yyy.1.3:6129 SYN ******S*
May 6 10:05:50 216.109.9.179:2389 -> xxx.yyy.1.4:6129 SYN ******S*
May 6 10:05:53 216.109.9.179:2390 -> xxx.yyy.1.5:6129 SYN ******S*
May 6 10:05:53 216.109.9.179:2391 -> xxx.yyy.1.6:6129 SYN ******S*
May 6 10:05:50 216.109.9.179:2392 -> xxx.yyy.1.7:6129 SYN ******S*
May 6 10:05:50 216.109.9.179:2394 -> xxx.yyy.1.9:6129 SYN ******S*
May 6 10:05:53 216.109.9.179:2395 -> xxx.yyy.1.10:6129 SYN ******S*
[...]
May 6 10:18:34 216.109.9.179:4537 -> xxx.yyy.255.244:6129 SYN ******S*
May 6 10:18:34 216.109.9.179:4541 -> xxx.yyy.255.248:6129 SYN ******S*
May 6 10:18:34 216.109.9.179:4538 -> xxx.yyy.255.245:6129 SYN ******S*
May 6 10:18:34 216.109.9.179:4542 -> xxx.yyy.255.249:6129 SYN ******S*
May 6 10:18:34 216.109.9.179:4539 -> xxx.yyy.255.246:6129 SYN ******S*
May 6 10:18:34 216.109.9.179:4536 -> xxx.yyy.255.243:6129 SYN ******S*
May 6 10:18:34 216.109.9.179:4547 -> xxx.yyy.255.254:6129 SYN ******S*
May 6 10:18:34 216.109.9.179:4545 -> xxx.yyy.255.252:6129 SYN ******S*
May 6 10:18:34 216.109.9.179:4546 -> xxx.yyy.255.253:6129 SYN ******S*
56410

May 6 21:43:24 24.17.10.3:3872 -> xxx.yyy.1.1:1433 SYN ******S*
May 6 21:43:24 24.17.10.3:3873 -> xxx.yyy.1.2:1433 SYN ******S*
May 6 21:43:24 24.17.10.3:3874 -> xxx.yyy.1.3:1433 SYN ******S*
May 6 21:43:24 24.17.10.3:3875 -> xxx.yyy.1.4:1433 SYN ******S*
May 6 21:43:24 24.17.10.3:3876 -> xxx.yyy.1.5:1433 SYN ******S*
May 6 21:43:21 24.17.10.3:3877 -> xxx.yyy.1.6:1433 SYN ******S*
May 6 21:43:22 24.17.10.3:3879 -> xxx.yyy.1.8:1433 SYN ******S*
May 6 21:43:24 24.17.10.3:3880 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
May 6 21:55:03 24.17.10.3:2448 -> xxx.yyy.255.245:1433 SYN ******S*
May 6 21:55:03 24.17.10.3:2449 -> xxx.yyy.255.246:1433 SYN ******S*
May 6 21:55:03 24.17.10.3:2450 -> xxx.yyy.255.247:1433 SYN ******S*
May 6 21:55:03 24.17.10.3:2453 -> xxx.yyy.255.250:1433 SYN ******S*
May 6 21:55:03 24.17.10.3:2454 -> xxx.yyy.255.251:1433 SYN ******S*
May 6 21:55:03 24.17.10.3:2455 -> xxx.yyy.255.252:1433 SYN ******S*
May 6 21:55:03 24.17.10.3:2456 -> xxx.yyy.255.253:1433 SYN ******S*
May 6 21:55:03 24.17.10.3:2457 -> xxx.yyy.255.254:1433 SYN ******S*
54570

May 6 12:17:03 172.177.249.121:60029 -> xxx.yyy.1.2:1433 SYN ******S*
May 6 12:17:03 172.177.249.121:64197 -> xxx.yyy.1.4:1433 SYN ******S*
May 6 12:17:03 172.177.249.121:64225 -> xxx.yyy.1.7:1433 SYN ******S*
May 6 12:17:03 172.177.249.121:65019 -> xxx.yyy.1.8:1433 SYN ******S*
May 6 12:17:03 172.177.249.121:60407 -> xxx.yyy.1.10:1433 SYN ******S*
May 6 12:17:06 172.177.249.121:61937 -> xxx.yyy.1.11:1433 SYN ******S*
May 6 12:17:06 172.177.249.121:57617 -> xxx.yyy.1.12:1433 SYN ******S*
May 6 12:17:06 172.177.249.121:58283 -> xxx.yyy.1.14:1433 SYN ******S*
[...]
May 6 12:49:07 172.177.249.121:63855 -> xxx.yyy.255.242:1433 SYN ******S*
May 6 12:49:07 172.177.249.121:58899 -> xxx.yyy.255.243:1433 SYN ******S*
May 6 12:49:07 172.177.249.121:60419 -> xxx.yyy.255.247:1433 SYN ******S*
May 6 12:49:07 172.177.249.121:65193 -> xxx.yyy.255.249:1433 SYN ******S*
May 6 12:49:07 172.177.249.121:65423 -> xxx.yyy.255.250:1433 SYN ******S*
May 6 12:49:07 172.177.249.121:59567 -> xxx.yyy.255.251:1433 SYN ******S*
May 6 12:49:07 172.177.249.121:64441 -> xxx.yyy.255.253:1433 SYN ******S*
May 6 12:49:07 172.177.249.121:57705 -> xxx.yyy.255.254:1433 SYN ******S*
49684

May 6 13:03:20 209.135.97.164:4302 -> xxx.yyy.1.1:6129 SYN ******S*
May 6 13:03:22 209.135.97.164:4306 -> xxx.yyy.1.5:6129 SYN ******S*
May 6 13:03:22 209.135.97.164:4307 -> xxx.yyy.1.6:6129 SYN ******S*
May 6 13:03:22 209.135.97.164:4308 -> xxx.yyy.1.7:6129 SYN ******S*
May 6 13:03:22 209.135.97.164:4309 -> xxx.yyy.1.8:6129 SYN ******S*
May 6 13:03:22 209.135.97.164:4310 -> xxx.yyy.1.9:6129 SYN ******S*
May 6 13:03:22 209.135.97.164:4311 -> xxx.yyy.1.10:6129 SYN ******S*
May 6 13:03:20 209.135.97.164:4312 -> xxx.yyy.1.11:6129 SYN ******S*
[...]
May 6 13:14:23 209.135.97.164:3183 -> xxx.yyy.255.186:6129 SYN ******S*
May 6 13:14:24 209.135.97.164:3222 -> xxx.yyy.255.225:6129 SYN ******S*
May 6 13:14:24 209.135.97.164:3219 -> xxx.yyy.255.222:6129 SYN ******S*
May 6 13:14:24 209.135.97.164:3223 -> xxx.yyy.255.226:6129 SYN ******S*
May 6 13:14:24 209.135.97.164:3229 -> xxx.yyy.255.232:6129 SYN ******S*
May 6 13:14:24 209.135.97.164:3230 -> xxx.yyy.255.233:6129 SYN ******S*
May 6 13:14:24 209.135.97.164:3234 -> xxx.yyy.255.237:6129 SYN ******S*
May 6 13:14:24 209.135.97.164:3231 -> xxx.yyy.255.234:6129 SYN ******S*
48649

May 6 14:10:43 213.130.144.81:3361 -> xxx.yyy.1.3:443 SYN ******S*
May 6 14:10:43 213.130.144.81:3363 -> xxx.yyy.1.5:443 SYN ******S*
May 6 14:10:43 213.130.144.81:3364 -> xxx.yyy.1.6:443 SYN ******S*
May 6 14:10:43 213.130.144.81:3365 -> xxx.yyy.1.7:443 SYN ******S*
May 6 14:10:43 213.130.144.81:3367 -> xxx.yyy.1.9:443 SYN ******S*
May 6 14:10:43 213.130.144.81:3368 -> xxx.yyy.1.10:443 SYN ******S*
May 6 14:10:44 213.130.144.81:3369 -> xxx.yyy.1.11:443 SYN ******S*
May 6 14:10:43 213.130.144.81:3373 -> xxx.yyy.1.14:443 SYN ******S*
[...]
May 6 14:22:51 213.130.144.81:1884 -> xxx.yyy.255.242:443 SYN ******S*
May 6 14:22:51 213.130.144.81:1882 -> xxx.yyy.255.240:443 SYN ******S*
May 6 14:22:51 213.130.144.81:1893 -> xxx.yyy.255.251:443 SYN ******S*
May 6 14:22:51 213.130.144.81:1896 -> xxx.yyy.255.254:443 SYN ******S*
May 6 14:22:51 213.130.144.81:1890 -> xxx.yyy.255.248:443 SYN ******S*
May 6 14:22:51 213.130.144.81:1891 -> xxx.yyy.255.249:443 SYN ******S*
May 6 14:22:51 213.130.144.81:1895 -> xxx.yyy.255.253:443 SYN ******S*
May 6 14:22:51 213.130.144.81:1894 -> xxx.yyy.255.252:443 SYN ******S*
May 6 14:22:51 213.130.144.81:1892 -> xxx.yyy.255.250:443 SYN ******S*
44895

May 6 12:04:21 64.65.221.192:30898 -> xxx.yyy.1.1:445 SYN ******S*
May 6 12:04:21 64.65.221.192:30900 -> xxx.yyy.1.3:445 SYN ******S*
May 6 12:04:18 64.65.221.192:30903 -> xxx.yyy.1.6:445 SYN ******S*
May 6 12:04:21 64.65.221.192:30910 -> xxx.yyy.1.13:445 SYN ******S*
May 6 12:04:21 64.65.221.192:30911 -> xxx.yyy.1.14:445 SYN ******S*
May 6 12:04:21 64.65.221.192:30912 -> xxx.yyy.1.15:445 SYN ******S*
May 6 12:04:18 64.65.221.192:30913 -> xxx.yyy.1.16:445 SYN ******S*
May 6 12:04:21 64.65.221.192:30914 -> xxx.yyy.1.17:445 SYN ******S*
[...]
May 6 12:16:35 64.65.221.192:33732 -> xxx.yyy.255.237:445 SYN ******S*
May 6 12:16:35 64.65.221.192:33736 -> xxx.yyy.255.241:445 SYN ******S*
May 6 12:16:35 64.65.221.192:33737 -> xxx.yyy.255.242:445 SYN ******S*
May 6 12:16:35 64.65.221.192:33738 -> xxx.yyy.255.243:445 SYN ******S*
May 6 12:16:35 64.65.221.192:33739 -> xxx.yyy.255.244:445 SYN ******S*
May 6 12:16:35 64.65.221.192:33740 -> xxx.yyy.255.245:445 SYN ******S*
May 6 12:16:35 64.65.221.192:33742 -> xxx.yyy.255.247:445 SYN ******S*
May 6 12:16:35 64.65.221.192:33743 -> xxx.yyy.255.248:445 SYN ******S*
May 6 12:16:35 64.65.221.192:33744 -> xxx.yyy.255.249:445 SYN ******S*
43868

May 6 21:52:20 66.87.222.111:3992 -> xxx.yyy.1.3:1433 SYN ******S*
May 6 21:52:20 66.87.222.111:3993 -> xxx.yyy.1.4:1433 SYN ******S*
May 6 21:52:20 66.87.222.111:3994 -> xxx.yyy.1.5:1433 SYN ******S*
May 6 21:52:20 66.87.222.111:3995 -> xxx.yyy.1.6:1433 SYN ******S*
May 6 21:52:20 66.87.222.111:3996 -> xxx.yyy.1.7:1433 SYN ******S*
May 6 21:52:20 66.87.222.111:3997 -> xxx.yyy.1.8:1433 SYN ******S*
May 6 21:52:20 66.87.222.111:3998 -> xxx.yyy.1.9:1433 SYN ******S*
May 6 21:52:20 66.87.222.111:3999 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
May 6 21:57:33 66.87.222.111:1130 -> xxx.yyy.255.89:1433 SYN ******S*
May 6 21:57:33 66.87.222.111:1131 -> xxx.yyy.255.90:1433 SYN ******S*
May 6 21:57:33 66.87.222.111:1132 -> xxx.yyy.255.91:1433 SYN ******S*
May 6 21:57:33 66.87.222.111:1133 -> xxx.yyy.255.92:1433 SYN ******S*
May 6 21:57:33 66.87.222.111:1134 -> xxx.yyy.255.93:1433 SYN ******S*
May 6 21:57:35 66.87.222.111:1307 -> xxx.yyy.255.250:1433 SYN ******S*
May 6 21:57:35 66.87.222.111:1309 -> xxx.yyy.255.252:1433 SYN ******S*
May 6 21:57:35 66.87.222.111:1310 -> xxx.yyy.255.253:1433 SYN ******S*
May 6 21:57:35 66.87.222.111:1311 -> xxx.yyy.255.254:1433 SYN ******S*
29655

[...]
25552

May 6 00:02:03 202.108.87.100:3782 -> xxx.yyy.245.192:2745 SYN ******S*
May 6 00:02:04 202.108.87.100:3889 -> xxx.yyy.16.193:2745 SYN ******S*
May 6 00:02:05 202.108.87.100:3910 -> xxx.yyy.245.71:2745 SYN ******S*
May 6 00:02:09 202.108.87.100:3962 -> xxx.yyy.224.49:2745 SYN ******S*
May 6 00:02:06 202.108.87.100:3826 -> xxx.yyy.134.119:2745 SYN ******S*
May 6 00:02:06 202.108.87.100:3829 -> xxx.yyy.229.13:2745 SYN ******S*
May 6 00:02:07 202.108.87.100:3972 -> xxx.yyy.226.186:2745 SYN ******S*
May 6 00:02:08 202.108.87.100:3996 -> xxx.yyy.175.9:2745 SYN ******S*
[...]
May 6 23:59:19 202.108.87.100:3843 -> xxx.yyy.246.247:2745 SYN ******S*
May 6 23:59:20 202.108.87.100:3349 -> xxx.yyy.200.72:2745 SYN ******S*
May 6 23:59:22 202.108.87.100:3515 -> xxx.yyy.217.182:2745 SYN ******S*
May 6 23:59:23 202.108.87.100:3638 -> xxx.yyy.205.125:2745 SYN ******S*
May 6 23:59:24 202.108.87.100:3663 -> xxx.yyy.251.129:2745 SYN ******S*
May 6 23:59:25 202.108.87.100:3843 -> xxx.yyy.246.247:2745 SYN ******S*
May 6 23:59:29 202.108.87.100:1124 -> xxx.yyy.228.246:2745 SYN ******S*
May 6 23:59:32 202.108.87.100:1124 -> xxx.yyy.228.246:2745 SYN ******S*
14948

May 6 11:13:33 212.111.8.112:4001 -> xxx.yyy.1.18:445 SYN ******S*
May 6 11:13:33 212.111.8.112:4003 -> xxx.yyy.1.24:445 SYN ******S*
May 6 11:13:33 212.111.8.112:4004 -> xxx.yyy.1.25:445 SYN ******S*
May 6 11:13:34 212.111.8.112:4006 -> xxx.yyy.1.1:445 SYN ******S*
May 6 11:13:31 212.111.8.112:4008 -> xxx.yyy.1.3:445 SYN ******S*
May 6 11:13:31 212.111.8.112:4009 -> xxx.yyy.1.6:445 SYN ******S*
May 6 11:13:31 212.111.8.112:4010 -> xxx.yyy.1.8:445 SYN ******S*
May 6 11:13:31 212.111.8.112:4011 -> xxx.yyy.1.9:445 SYN ******S*
[...]
May 6 14:15:20 212.111.8.112:2742 -> xxx.yyy.156.95:445 SYN ******S*
May 6 14:15:17 212.111.8.112:2743 -> xxx.yyy.156.96:445 SYN ******S*
May 6 14:15:20 212.111.8.112:2744 -> xxx.yyy.156.97:445 SYN ******S*
May 6 14:15:22 212.111.8.112:2739 -> xxx.yyy.156.92:445 SYN ******S*
May 6 14:15:22 212.111.8.112:2741 -> xxx.yyy.156.94:445 SYN ******S*
May 6 14:15:22 212.111.8.112:2740 -> xxx.yyy.156.93:445 SYN ******S*
May 6 14:15:26 212.111.8.112:2744 -> xxx.yyy.156.97:445 SYN ******S*
May 6 14:15:26 212.111.8.112:2743 -> xxx.yyy.156.96:445 SYN ******S*
May 6 14:15:26 212.111.8.112:2742 -> xxx.yyy.156.95:445 SYN ******S*
12544

[...]
10329

May 6 00:00:51 221.10.44.93:38123 -> xxx.yyy.148.145:2745 SYN ******S*
May 6 00:00:52 221.10.44.93:3091 -> xxx.yyy.148.145:1025 SYN ******S*
May 6 00:00:52 221.10.44.93:61259 -> xxx.yyy.148.145:6129 SYN ******S*
May 6 00:00:52 221.10.44.93:28624 -> xxx.yyy.148.145:5000 SYN ******S*
May 6 00:00:52 221.10.44.93:28626 -> xxx.yyy.148.145:80 SYN ******S*
May 6 00:00:52 221.10.44.93:43668 -> xxx.yyy.148.145:3127 SYN ******S*
May 6 00:00:55 221.10.44.93:50088 -> xxx.yyy.221.237:2745 SYN ******S*
May 6 00:01:00 221.10.44.93:3369 -> xxx.yyy.139.135:2745 SYN ******S*
[...]
May 6 23:59:02 221.10.44.93:55169 -> xxx.yyy.231.78:6129 SYN ******S*
May 6 23:59:56 221.10.44.93:23368 -> xxx.yyy.179.62:2745 SYN ******S*
May 6 23:59:55 221.10.44.93:57301 -> xxx.yyy.90.164:1025 SYN ******S*
May 6 23:59:55 221.10.44.93:40636 -> xxx.yyy.90.164:2745 SYN ******S*
May 6 23:59:55 221.10.44.93:57303 -> xxx.yyy.90.164:3127 SYN ******S*
May 7 00:00:01 221.10.44.93:57767 -> xxx.yyy.133.205:2745 SYN ******S*
May 6 23:59:58 221.10.44.93:57772 -> xxx.yyy.133.205:1025 SYN ******S*
May 7 00:00:00 221.10.44.93:41067 -> xxx.yyy.15.88:2745 SYN ******S*
May 7 00:00:00 221.10.44.93:28274 -> xxx.yyy.212.69:2745 SYN ******S*
9977

[...]
9276

May 6 16:01:07 200.226.143.52:4821 -> xxx.yyy.137.230:1433 SYN ******S*
May 6 16:01:07 200.226.143.52:4824 -> xxx.yyy.137.233:1433 SYN ******S*
May 6 16:01:07 200.226.143.52:4826 -> xxx.yyy.137.235:1433 SYN ******S*
May 6 16:01:07 200.226.143.52:4827 -> xxx.yyy.137.236:1433 SYN ******S*
May 6 16:01:07 200.226.143.52:4828 -> xxx.yyy.137.237:1433 SYN ******S*
May 6 16:01:08 200.226.143.52:4830 -> xxx.yyy.137.239:1433 SYN ******S*
May 6 16:01:08 200.226.143.52:4832 -> xxx.yyy.137.241:1433 SYN ******S*
May 6 16:01:08 200.226.143.52:4833 -> xxx.yyy.137.242:1433 SYN ******S*
[...]
May 6 16:18:16 200.226.143.52:3117 -> xxx.yyy.157.5:1433 SYN ******S*
May 6 16:18:16 200.226.143.52:3120 -> xxx.yyy.157.8:1433 SYN ******S*
May 6 16:18:16 200.226.143.52:3071 -> xxx.yyy.156.243:1433 SYN ******S*
May 6 16:18:16 200.226.143.52:3115 -> xxx.yyy.157.3:1433 SYN ******S*
May 6 16:18:16 200.226.143.52:3118 -> xxx.yyy.157.6:1433 SYN ******S*
May 6 16:18:16 200.226.143.52:3121 -> xxx.yyy.157.9:1433 SYN ******S*
May 6 16:18:16 200.226.143.52:3105 -> xxx.yyy.156.253:1433 SYN ******S*
May 6 16:18:17 200.226.143.52:3112 -> xxx.yyy.157.0:1433 SYN ******S*
9160

May 6 04:18:56 61.93.158.162:22002 -> xxx.yyy.1.0:1080 SYN ******S*
May 6 04:18:56 61.93.158.162:22002 -> xxx.yyy.1.0:10080 SYN ******S*
May 6 04:18:56 61.93.158.162:22002 -> xxx.yyy.1.0:3128 SYN ******S*
May 6 04:18:56 61.93.158.162:22002 -> xxx.yyy.1.1:1080 SYN ******S*
May 6 04:18:57 61.93.158.162:22002 -> xxx.yyy.1.1:10080 SYN ******S*
May 6 04:18:57 61.93.158.162:22002 -> xxx.yyy.1.1:3128 SYN ******S*
May 6 04:18:57 61.93.158.162:22002 -> xxx.yyy.1.2:1080 SYN ******S*
May 6 04:18:57 61.93.158.162:22002 -> xxx.yyy.1.2:10080 SYN ******S*
[...]
May 6 05:45:13 61.93.158.162:22002 -> xxx.yyy.32.253:10080 SYN ******S*
May 6 05:45:13 61.93.158.162:22002 -> xxx.yyy.32.253:3128 SYN ******S*
May 6 05:45:13 61.93.158.162:22002 -> xxx.yyy.32.254:1080 SYN ******S*
May 6 05:45:14 61.93.158.162:22002 -> xxx.yyy.32.254:10080 SYN ******S*
May 6 05:45:14 61.93.158.162:22002 -> xxx.yyy.32.254:3128 SYN ******S*
May 6 05:45:14 61.93.158.162:22002 -> xxx.yyy.32.255:1080 SYN ******S*
May 6 05:45:14 61.93.158.162:22002 -> xxx.yyy.32.255:10080 SYN ******S*
May 6 05:45:15 61.93.158.162:22002 -> xxx.yyy.32.255:3128 SYN ******S*
9124

May 6 20:56:59 141.149.206.79:3738 -> xxx.yyy.128.3:445 SYN ******S*
May 6 20:56:59 141.149.206.79:3739 -> xxx.yyy.128.4:445 SYN ******S*
May 6 20:56:59 141.149.206.79:3740 -> xxx.yyy.128.5:445 SYN ******S*
May 6 20:56:59 141.149.206.79:3741 -> xxx.yyy.128.6:445 SYN ******S*
May 6 20:56:59 141.149.206.79:3742 -> xxx.yyy.128.7:445 SYN ******S*
May 6 20:56:59 141.149.206.79:3743 -> xxx.yyy.128.8:445 SYN ******S*
May 6 20:56:59 141.149.206.79:3744 -> xxx.yyy.128.9:445 SYN ******S*
May 6 20:56:59 141.149.206.79:3745 -> xxx.yyy.128.10:445 SYN ******S*
[...]
May 6 21:30:57 141.149.206.79:3081 -> xxx.yyy.140.242:445 SYN ******S*
May 6 21:30:57 141.149.206.79:3078 -> xxx.yyy.140.239:445 SYN ******S*
May 6 21:30:57 141.149.206.79:3075 -> xxx.yyy.140.236:445 SYN ******S*
May 6 21:30:57 141.149.206.79:3079 -> xxx.yyy.140.240:445 SYN ******S*
May 6 21:30:57 141.149.206.79:3076 -> xxx.yyy.140.237:445 SYN ******S*
May 6 21:30:58 141.149.206.79:3080 -> xxx.yyy.140.241:445 SYN ******S*
May 6 21:30:58 141.149.206.79:3077 -> xxx.yyy.140.238:445 SYN ******S*
May 6 21:30:58 141.149.206.79:3082 -> xxx.yyy.140.243:445 SYN ******S*
May 6 21:30:58 141.149.206.79:3083 -> xxx.yyy.140.244:445 SYN ******S*
7737

May 6 02:36:53 4.163.154.129:3918 -> xxx.yyy.128.246:2745 SYN ******S*
May 6 02:36:53 4.163.154.129:3922 -> xxx.yyy.128.246:1025 SYN ******S*
May 6 02:36:53 4.163.154.129:3924 -> xxx.yyy.128.246:445 SYN ******S*
May 6 02:36:53 4.163.154.129:3925 -> xxx.yyy.128.246:3127 SYN ******S*
May 6 02:36:53 4.163.154.129:3927 -> xxx.yyy.128.246:6129 SYN ******S*
May 6 02:36:53 4.163.154.129:3928 -> xxx.yyy.128.246:139 SYN ******S*
May 6 02:36:53 4.163.154.129:3930 -> xxx.yyy.128.246:5000 SYN ******S*
May 6 02:36:53 4.163.154.129:3932 -> xxx.yyy.128.246:80 SYN ******S*
[...]
May 6 04:31:02 4.163.154.129:3253 -> xxx.yyy.67.8:2745 SYN ******S*
May 6 04:31:02 4.163.154.129:4701 -> xxx.yyy.165.91:2745 SYN ******S*
May 6 04:31:03 4.163.154.129:3135 -> xxx.yyy.146.189:2745 SYN ******S*
May 6 04:31:03 4.163.154.129:3143 -> xxx.yyy.146.189:445 SYN ******S*
May 6 04:31:03 4.163.154.129:3137 -> xxx.yyy.146.189:1025 SYN ******S*
May 6 04:31:04 4.163.154.129:4825 -> xxx.yyy.93.237:2745 SYN ******S*
May 6 04:31:05 4.163.154.129:3253 -> xxx.yyy.67.8:2745 SYN ******S*
May 6 04:31:06 4.163.154.129:3450 -> xxx.yyy.206.154:2745 SYN ******S*
May 6 04:31:06 4.163.154.129:3025 -> xxx.yyy.219.227:2745 SYN ******S*
7659

[...]
7492

May 6 00:00:39 65.100.122.132:81 -> xxx.yyy.84.178:3426 INVALIDACK ***A*R*F
May 6 00:00:44 65.100.122.132:81 -> xxx.yyy.84.178:3450 INVALIDACK ***A*R*F
May 6 00:00:51 65.100.122.132:81 -> xxx.yyy.68.29:2985 INVALIDACK ***A*R*F
May 6 00:01:09 65.100.122.132:81 -> xxx.yyy.67.203:1823 INVALIDACK ***A*R*F
May 6 00:01:17 65.100.122.132:81 -> xxx.yyy.68.29:3075 INVALIDACK ***A*R*F
May 6 00:01:22 65.100.122.132:81 -> xxx.yyy.82.59:4779 INVALIDACK ***A*R*F
May 6 00:01:40 65.100.122.132:81 -> xxx.yyy.84.178:3863 INVALIDACK ***A*R*F
May 6 00:01:58 65.100.122.132:81 -> xxx.yyy.77.60:3027 INVALIDACK ***A*R*F
[...]
May 6 23:57:10 65.100.122.132:81 -> xxx.yyy.73.75:1952 INVALIDACK ***A*R*F
May 6 23:57:30 65.100.122.132:81 -> xxx.yyy.68.11:4481 INVALIDACK ***A*R*F
May 6 23:57:31 65.100.122.132:81 -> xxx.yyy.67.176:3461 INVALIDACK ***A*R*F
May 6 23:58:34 65.100.122.132:81 -> xxx.yyy.67.176:3623 INVALIDACK ***A*R*F
May 6 23:58:46 65.100.122.132:81 -> xxx.yyy.68.29:2418 INVALIDACK ***A*R*F
May 6 23:59:08 65.100.122.132:81 -> xxx.yyy.68.29:2491 INVALIDACK ***A*R*F
May 6 23:59:10 65.100.122.132:81 -> xxx.yyy.68.29:2519 INVALIDACK ***A*R*F
May 6 23:59:36 65.100.122.132:81 -> xxx.yyy.73.193:4106 INVALIDACK ***A*R*F
5197

May 6 00:07:30 66.190.44.41:2746 -> xxx.yyy.156.203:2745 SYN ******S*
May 6 00:07:25 66.190.44.41:2758 -> xxx.yyy.247.150:2745 SYN ******S*
May 6 00:07:26 66.190.44.41:2687 -> xxx.yyy.131.51:2745 SYN ******S*
May 6 00:07:27 66.190.44.41:2700 -> xxx.yyy.94.8:2745 SYN ******S*
May 6 00:07:27 66.190.44.41:2777 -> xxx.yyy.82.52:2745 SYN ******S*
May 6 00:07:27 66.190.44.41:2711 -> xxx.yyy.162.30:2745 SYN ******S*
May 6 00:07:31 66.190.44.41:2758 -> xxx.yyy.247.150:2745 SYN ******S*
May 6 00:07:33 66.190.44.41:2777 -> xxx.yyy.82.52:2745 SYN ******S*
[...]
May 6 23:53:40 66.190.44.41:4597 -> xxx.yyy.252.83:2745 SYN ******S*
May 6 23:53:40 66.190.44.41:4601 -> xxx.yyy.252.83:1025 SYN ******S*
May 6 23:53:43 66.190.44.41:4597 -> xxx.yyy.252.83:2745 SYN ******S*
May 6 23:53:43 66.190.44.41:4601 -> xxx.yyy.252.83:1025 SYN ******S*
May 6 23:53:46 66.190.44.41:4541 -> xxx.yyy.186.143:2745 SYN ******S*
May 6 23:53:48 66.190.44.41:4565 -> xxx.yyy.90.50:2745 SYN ******S*
May 6 23:53:49 66.190.44.41:4601 -> xxx.yyy.252.83:1025 SYN ******S*
May 6 23:53:49 66.190.44.41:4597 -> xxx.yyy.252.83:2745 SYN ******S*
5013

May 6 00:09:33 209.173.191.138:3355 -> xxx.yyy.149.28:2745 SYN ******S*
May 6 00:09:37 209.173.191.138:3504 -> xxx.yyy.156.58:2745 SYN ******S*
May 6 00:09:38 209.173.191.138:3527 -> xxx.yyy.202.193:2745 SYN ******S*
May 6 00:09:39 209.173.191.138:3537 -> xxx.yyy.17.55:2745 SYN ******S*
May 6 00:09:37 209.173.191.138:3542 -> xxx.yyy.229.48:2745 SYN ******S*
May 6 00:09:40 209.173.191.138:3459 -> xxx.yyy.12.81:2745 SYN ******S*
May 6 00:09:43 209.173.191.138:3504 -> xxx.yyy.156.58:2745 SYN ******S*
May 6 00:09:45 209.173.191.138:3527 -> xxx.yyy.202.193:2745 SYN ******S*
[...]
May 6 23:52:33 209.173.191.138:1884 -> xxx.yyy.200.132:2745 SYN ******S*
May 6 23:52:35 209.173.191.138:1915 -> xxx.yyy.95.210:2745 SYN ******S*
May 6 23:52:35 209.173.191.138:1917 -> xxx.yyy.95.210:1025 SYN ******S*
May 6 23:52:35 209.173.191.138:1922 -> xxx.yyy.253.176:2745 SYN ******S*
May 6 23:54:15 209.173.191.138:3658 -> xxx.yyy.232.182:2745 SYN ******S*
May 6 23:54:15 209.173.191.138:3662 -> xxx.yyy.232.182:3127 SYN ******S*
May 6 23:54:15 209.173.191.138:3660 -> xxx.yyy.232.182:1025 SYN ******S*
May 6 23:54:19 209.173.191.138:3841 -> xxx.yyy.91.114:2745 SYN ******S*
May 6 23:54:20 209.173.191.138:3911 -> xxx.yyy.13.253:2745 SYN ******S*
4284

May 6 00:02:52 129.24.64.208:2166 -> xxx.yyy.90.1:2745 SYN ******S*
May 6 00:02:51 129.24.64.208:2191 -> xxx.yyy.229.70:2745 SYN ******S*
May 6 00:02:50 129.24.64.208:2013 -> xxx.yyy.160.63:2745 SYN ******S*
May 6 00:02:53 129.24.64.208:2206 -> xxx.yyy.130.5:2745 SYN ******S*
May 6 00:02:52 129.24.64.208:2048 -> xxx.yyy.186.248:2745 SYN ******S*
May 6 00:02:55 129.24.64.208:2119 -> xxx.yyy.14.47:2745 SYN ******S*
May 6 00:06:59 129.24.64.208:2968 -> xxx.yyy.174.215:2745 SYN ******S*
May 6 00:07:00 129.24.64.208:2975 -> xxx.yyy.157.49:2745 SYN ******S*
[...]
May 6 23:44:14 129.24.64.208:4872 -> xxx.yyy.225.49:2745 SYN ******S*
May 6 23:44:18 129.24.64.208:1283 -> xxx.yyy.228.194:2745 SYN ******S*
May 6 23:44:19 129.24.64.208:1093 -> xxx.yyy.211.68:2745 SYN ******S*
May 6 23:44:19 129.24.64.208:1095 -> xxx.yyy.211.68:1025 SYN ******S*
May 6 23:44:24 129.24.64.208:1283 -> xxx.yyy.228.194:2745 SYN ******S*
May 6 23:44:28 129.24.64.208:1640 -> xxx.yyy.194.171:2745 SYN ******S*
May 6 23:44:31 129.24.64.208:1640 -> xxx.yyy.194.171:2745 SYN ******S*
May 6 23:44:37 129.24.64.208:1640 -> xxx.yyy.194.171:2745 SYN ******S*
May 6 23:44:42 129.24.64.208:2013 -> xxx.yyy.233.106:2745 SYN ******S*
4256

May 6 00:08:25 202.102.25.187:3105 -> xxx.yyy.105.162:2745 SYN ******S*
May 6 00:08:23 202.102.25.187:2975 -> xxx.yyy.187.196:2745 SYN ******S*
May 6 00:08:26 202.102.25.187:3118 -> xxx.yyy.180.140:2745 SYN ******S*
May 6 00:08:24 202.102.25.187:2996 -> xxx.yyy.133.96:2745 SYN ******S*
May 6 00:08:26 202.102.25.187:3103 -> xxx.yyy.220.7:2745 SYN ******S*
May 6 00:08:32 202.102.25.187:3118 -> xxx.yyy.180.140:2745 SYN ******S*
May 6 00:08:32 202.102.25.187:3267 -> xxx.yyy.29.161:2745 SYN ******S*
May 6 00:08:35 202.102.25.187:3267 -> xxx.yyy.29.161:2745 SYN ******S*
[...]
May 6 23:40:50 202.102.25.187:58267 -> xxx.yyy.237.142:2745 SYN ******S*
May 6 23:40:53 202.102.25.187:58267 -> xxx.yyy.237.142:2745 SYN ******S*
May 6 23:40:53 202.102.25.187:58353 -> xxx.yyy.15.41:2745 SYN ******S*
May 6 23:40:56 202.102.25.187:58353 -> xxx.yyy.15.41:2745 SYN ******S*
May 6 23:40:59 202.102.25.187:58267 -> xxx.yyy.237.142:2745 SYN ******S*
May 6 23:41:00 202.102.25.187:58544 -> xxx.yyy.213.81:2745 SYN ******S*
May 6 23:41:02 202.102.25.187:58353 -> xxx.yyy.15.41:2745 SYN ******S*
May 6 23:41:07 202.102.25.187:58544 -> xxx.yyy.213.81:2745 SYN ******S*
May 6 23:41:10 202.102.25.187:58553 -> xxx.yyy.202.145:2745 SYN ******S*
3979

--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly@xxxxxxx phone: (319) 273-5850 fax: (319) 273-7373
_______________________________________________
Intrusions mailing list
Intrusions@xxxxxxxxxxxxxx
http://www.dshield.org/mailman/listinfo/intrusions
<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  RE: Excessively large URI attacks: 00019, Smith, Donald
Next by Date:  [LOGS] Summary of large-scale portscanning detects: 00019, Ken . Connelly
Previous by Thread:  [LOGS] Summary of large-scale portscanning detectsi: 00019, Ken . Connelly
Next by Thread:  [LOGS] Summary of large-scale portscanning detects: 00019, Ken . Connelly
Indexes:  [Date] [Thread] [Top] [All Lists]

Google Custom Search
News | FAQ | advertise