logo       
<prev   next>

[LOGS] Summary of large-scale portscanning detects: msg#00020

security.intrusions

Subject: [LOGS] Summary of large-scale portscanning detects

The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0500.

May 7 16:36:32 24.0.84.22:3268 -> xxx.yyy.1.0:8080 SYN ******S*
May 7 16:36:32 24.0.84.22:3269 -> xxx.yyy.1.0:80 SYN ******S*
May 7 16:36:32 24.0.84.22:3271 -> xxx.yyy.1.0:1080 SYN ******S*
May 7 16:36:33 24.0.84.22:3272 -> xxx.yyy.1.1:8080 SYN ******S*
May 7 16:36:33 24.0.84.22:3274 -> xxx.yyy.1.1:80 SYN ******S*
May 7 16:36:34 24.0.84.22:3341 -> xxx.yyy.1.1:1080 SYN ******S*
May 7 16:36:33 24.0.84.22:3277 -> xxx.yyy.1.2:8080 SYN ******S*
May 7 16:36:33 24.0.84.22:3278 -> xxx.yyy.1.2:80 SYN ******S*
[...]
May 7 20:33:53 24.0.84.22:1656 -> xxx.yyy.255.239:1080 SYN ******S*
May 7 20:33:53 24.0.84.22:1657 -> xxx.yyy.255.214:1080 SYN ******S*
May 7 20:33:53 24.0.84.22:1658 -> xxx.yyy.255.240:8080 SYN ******S*
May 7 20:33:53 24.0.84.22:1659 -> xxx.yyy.255.240:80 SYN ******S*
May 7 20:33:53 24.0.84.22:1660 -> xxx.yyy.255.240:1080 SYN ******S*
May 7 20:33:53 24.0.84.22:1661 -> xxx.yyy.255.215:1080 SYN ******S*
May 7 20:33:53 24.0.84.22:1663 -> xxx.yyy.255.241:80 SYN ******S*
May 7 20:33:53 24.0.84.22:1664 -> xxx.yyy.255.241:1080 SYN ******S*
266951

May 7 16:49:43 24.78.55.198:3169 -> xxx.yyy.161.6:21 SYN ******S*
May 7 16:49:43 24.78.55.198:3170 -> xxx.yyy.161.7:21 SYN ******S*
May 7 16:49:43 24.78.55.198:3171 -> xxx.yyy.161.8:21 SYN ******S*
May 7 16:49:43 24.78.55.198:3172 -> xxx.yyy.161.9:21 SYN ******S*
May 7 16:49:43 24.78.55.198:3173 -> xxx.yyy.161.10:21 SYN ******S*
May 7 16:49:43 24.78.55.198:3174 -> xxx.yyy.161.11:21 SYN ******S*
May 7 16:49:41 24.78.55.198:3175 -> xxx.yyy.161.12:21 SYN ******S*
May 7 16:49:43 24.78.55.198:3180 -> xxx.yyy.161.17:21 SYN ******S*
[...]
May 7 22:19:58 24.78.55.198:4371 -> xxx.yyy.164.93:21 SYN ******S*
May 7 22:19:58 24.78.55.198:4369 -> xxx.yyy.164.96:21 SYN ******S*
May 7 22:19:58 24.78.55.198:4367 -> xxx.yyy.164.110:21 SYN ******S*
May 7 22:19:58 24.78.55.198:4365 -> xxx.yyy.164.91:21 SYN ******S*
May 7 22:19:58 24.78.55.198:4375 -> xxx.yyy.164.123:21 SYN ******S*
May 7 22:20:03 24.78.55.198:4377 -> xxx.yyy.164.88:21 SYN ******S*
May 7 22:20:03 24.78.55.198:4381 -> xxx.yyy.164.111:21 SYN ******S*
May 7 22:20:03 24.78.55.198:4379 -> xxx.yyy.164.115:21 SYN ******S*
183699

May 7 16:50:10 4.8.43.18:2773 -> xxx.yyy.161.2:21 SYN ******S*
May 7 16:50:10 4.8.43.18:2774 -> xxx.yyy.161.3:21 SYN ******S*
May 7 16:50:07 4.8.43.18:2775 -> xxx.yyy.161.4:21 SYN ******S*
May 7 16:50:10 4.8.43.18:2776 -> xxx.yyy.161.5:21 SYN ******S*
May 7 16:50:10 4.8.43.18:2777 -> xxx.yyy.161.6:21 SYN ******S*
May 7 16:50:10 4.8.43.18:2779 -> xxx.yyy.161.8:21 SYN ******S*
May 7 16:50:10 4.8.43.18:2772 -> xxx.yyy.161.9:21 SYN ******S*
May 7 16:50:10 4.8.43.18:2780 -> xxx.yyy.161.48:21 SYN ******S*
[...]
May 8 00:00:00 4.8.43.18:4807 -> xxx.yyy.195.129:21 SYN ******S*
May 8 00:00:00 4.8.43.18:4771 -> xxx.yyy.195.97:21 SYN ******S*
May 8 00:00:00 4.8.43.18:4772 -> xxx.yyy.195.98:21 SYN ******S*
May 8 00:00:00 4.8.43.18:4773 -> xxx.yyy.195.96:21 SYN ******S*
May 8 00:00:00 4.8.43.18:4774 -> xxx.yyy.195.101:21 SYN ******S*
May 8 00:00:00 4.8.43.18:4775 -> xxx.yyy.195.99:21 SYN ******S*
May 8 00:00:00 4.8.43.18:4776 -> xxx.yyy.195.100:21 SYN ******S*
May 8 00:00:00 4.8.43.18:4808 -> xxx.yyy.195.124:21 SYN ******S*
May 8 00:00:01 4.8.43.18:4809 -> xxx.yyy.195.130:21 SYN ******S*
162506

May 7 19:57:50 141.30.134.78:3166 -> xxx.yyy.1.1:8000 SYN ******S*
May 7 19:57:50 141.30.134.78:3167 -> xxx.yyy.1.2:8000 SYN ******S*
May 7 19:57:52 141.30.134.78:3169 -> xxx.yyy.1.4:8000 SYN ******S*
May 7 19:57:52 141.30.134.78:3170 -> xxx.yyy.1.5:8000 SYN ******S*
May 7 19:57:52 141.30.134.78:3171 -> xxx.yyy.1.6:8000 SYN ******S*
May 7 19:57:52 141.30.134.78:3172 -> xxx.yyy.1.7:8000 SYN ******S*
May 7 19:57:52 141.30.134.78:3173 -> xxx.yyy.1.8:8000 SYN ******S*
May 7 19:57:52 141.30.134.78:3174 -> xxx.yyy.1.9:8000 SYN ******S*
[...]
May 7 20:08:45 141.30.134.78:2051 -> xxx.yyy.255.247:8000 SYN ******S*
May 7 20:08:45 141.30.134.78:2048 -> xxx.yyy.255.244:8000 SYN ******S*
May 7 20:08:45 141.30.134.78:2052 -> xxx.yyy.255.248:8000 SYN ******S*
May 7 20:08:45 141.30.134.78:2049 -> xxx.yyy.255.245:8000 SYN ******S*
May 7 20:08:45 141.30.134.78:2046 -> xxx.yyy.255.242:8000 SYN ******S*
May 7 20:08:45 141.30.134.78:2055 -> xxx.yyy.255.251:8000 SYN ******S*
May 7 20:08:45 141.30.134.78:2058 -> xxx.yyy.255.254:8000 SYN ******S*
May 7 20:08:45 141.30.134.78:2057 -> xxx.yyy.255.253:8000 SYN ******S*
May 7 20:08:45 141.30.134.78:2056 -> xxx.yyy.255.252:8000 SYN ******S*
72105

May 7 22:37:18 216.62.101.136:1786 -> xxx.yyy.1.1:8000 SYN ******S*
May 7 22:37:18 216.62.101.136:1787 -> xxx.yyy.1.2:8000 SYN ******S*
May 7 22:37:17 216.62.101.136:1788 -> xxx.yyy.1.3:8000 SYN ******S*
May 7 22:37:17 216.62.101.136:1789 -> xxx.yyy.1.4:8000 SYN ******S*
May 7 22:37:20 216.62.101.136:1790 -> xxx.yyy.1.5:8000 SYN ******S*
May 7 22:37:20 216.62.101.136:1791 -> xxx.yyy.1.6:8000 SYN ******S*
May 7 22:37:20 216.62.101.136:1792 -> xxx.yyy.1.7:8000 SYN ******S*
May 7 22:37:20 216.62.101.136:1794 -> xxx.yyy.1.9:8000 SYN ******S*
[...]
May 7 22:48:59 216.62.101.136:4140 -> xxx.yyy.255.242:8000 SYN ******S*
May 7 22:48:59 216.62.101.136:4151 -> xxx.yyy.255.253:8000 SYN ******S*
May 7 22:48:59 216.62.101.136:4152 -> xxx.yyy.255.254:8000 SYN ******S*
May 7 22:48:59 216.62.101.136:4148 -> xxx.yyy.255.250:8000 SYN ******S*
May 7 22:48:59 216.62.101.136:4149 -> xxx.yyy.255.251:8000 SYN ******S*
May 7 22:48:59 216.62.101.136:4150 -> xxx.yyy.255.252:8000 SYN ******S*
May 7 22:48:59 216.62.101.136:4146 -> xxx.yyy.255.248:8000 SYN ******S*
May 7 22:48:59 216.62.101.136:4147 -> xxx.yyy.255.249:8000 SYN ******S*
70064

May 7 13:11:35 82.51.191.25:3244 -> xxx.yyy.64.0:445 SYN ******S*
May 7 13:11:35 82.51.191.25:3247 -> xxx.yyy.64.3:445 SYN ******S*
May 7 13:11:32 82.51.191.25:3245 -> xxx.yyy.64.1:445 SYN ******S*
May 7 13:11:35 82.51.191.25:3246 -> xxx.yyy.64.2:445 SYN ******S*
May 7 13:11:35 82.51.191.25:3250 -> xxx.yyy.64.6:445 SYN ******S*
May 7 13:11:35 82.51.191.25:3248 -> xxx.yyy.64.4:445 SYN ******S*
May 7 13:11:35 82.51.191.25:3249 -> xxx.yyy.64.5:445 SYN ******S*
May 7 13:11:35 82.51.191.25:3255 -> xxx.yyy.64.11:445 SYN ******S*
[...]
May 7 18:16:28 82.51.191.25:1176 -> xxx.yyy.180.157:445 SYN ******S*
May 7 18:16:28 82.51.191.25:1178 -> xxx.yyy.180.159:445 SYN ******S*
May 7 18:16:28 82.51.191.25:1179 -> xxx.yyy.180.160:445 SYN ******S*
May 7 18:16:28 82.51.191.25:1180 -> xxx.yyy.180.161:445 SYN ******S*
May 7 18:16:28 82.51.191.25:1181 -> xxx.yyy.180.162:445 SYN ******S*
May 7 18:16:28 82.51.191.25:1182 -> xxx.yyy.180.163:445 SYN ******S*
May 7 18:16:28 82.51.191.25:1183 -> xxx.yyy.180.164:445 SYN ******S*
May 7 18:16:28 82.51.191.25:1185 -> xxx.yyy.180.166:445 SYN ******S*
May 7 18:16:28 82.51.191.25:1184 -> xxx.yyy.180.165:445 SYN ******S*
55850

May 7 00:00:04 24.93.199.215:22002 -> xxx.yyy.201.233:3127 SYN ******S*
May 7 00:00:04 24.93.199.215:22002 -> xxx.yyy.201.233:1080 SYN ******S*
May 7 00:00:04 24.93.199.215:22002 -> xxx.yyy.201.233:10080 SYN ******S*
May 7 00:00:04 24.93.199.215:22002 -> xxx.yyy.201.234:3127 SYN ******S*
May 7 00:00:04 24.93.199.215:22002 -> xxx.yyy.201.234:1080 SYN ******S*
May 7 00:00:04 24.93.199.215:22002 -> xxx.yyy.201.234:10080 SYN ******S*
May 7 00:00:04 24.93.199.215:22002 -> xxx.yyy.201.234:3128 SYN ******S*
May 7 00:00:05 24.93.199.215:22002 -> xxx.yyy.201.235:3127 SYN ******S*
[...]
May 7 01:34:03 24.93.199.215:22002 -> xxx.yyy.255.253:3128 SYN ******S*
May 7 01:34:03 24.93.199.215:22002 -> xxx.yyy.255.254:3127 SYN ******S*
May 7 01:34:03 24.93.199.215:22002 -> xxx.yyy.255.254:1080 SYN ******S*
May 7 01:34:03 24.93.199.215:22002 -> xxx.yyy.255.254:10080 SYN ******S*
May 7 01:34:03 24.93.199.215:22002 -> xxx.yyy.255.254:3128 SYN ******S*
May 7 01:34:03 24.93.199.215:22002 -> xxx.yyy.255.255:3127 SYN ******S*
May 7 01:34:03 24.93.199.215:22002 -> xxx.yyy.255.255:1080 SYN ******S*
May 7 01:34:03 24.93.199.215:22002 -> xxx.yyy.255.255:10080 SYN ******S*
May 7 01:34:03 24.93.199.215:22002 -> xxx.yyy.255.255:3128 SYN ******S*
53592

May 7 22:02:58 217.210.22.2:2045 -> xxx.yyy.1.1:139 SYN ******S*
May 7 22:02:58 217.210.22.2:2078 -> xxx.yyy.1.0:139 SYN ******S*
May 7 22:03:00 217.210.22.2:2164 -> xxx.yyy.1.3:139 SYN ******S*
May 7 22:02:57 217.210.22.2:2193 -> xxx.yyy.1.5:139 SYN ******S*
May 7 22:03:01 217.210.22.2:2200 -> xxx.yyy.1.46:139 SYN ******S*
May 7 22:03:00 217.210.22.2:2287 -> xxx.yyy.1.47:139 SYN ******S*
May 7 22:03:01 217.210.22.2:2385 -> xxx.yyy.1.60:139 SYN ******S*
May 7 22:03:03 217.210.22.2:2415 -> xxx.yyy.1.13:139 SYN ******S*
[...]
May 7 23:59:58 217.210.22.2:4121 -> xxx.yyy.176.100:139 SYN ******S*
May 7 23:59:58 217.210.22.2:4122 -> xxx.yyy.176.91:139 SYN ******S*
May 7 23:59:58 217.210.22.2:4123 -> xxx.yyy.176.95:139 SYN ******S*
May 7 23:59:58 217.210.22.2:4124 -> xxx.yyy.176.106:139 SYN ******S*
May 7 23:59:58 217.210.22.2:4126 -> xxx.yyy.176.105:139 SYN ******S*
May 7 23:59:58 217.210.22.2:4137 -> xxx.yyy.176.99:139 SYN ******S*
May 7 23:59:58 217.210.22.2:4139 -> xxx.yyy.176.115:139 SYN ******S*
May 8 00:00:00 217.210.22.2:4159 -> xxx.yyy.176.131:139 SYN ******S*
May 8 00:00:00 217.210.22.2:4242 -> xxx.yyy.176.175:139 SYN ******S*
42332

May 7 00:49:09 201.129.11.208:4530 -> xxx.yyy.1.1:445 SYN ******S*
May 7 00:49:09 201.129.11.208:4531 -> xxx.yyy.1.2:445 SYN ******S*
May 7 00:49:09 201.129.11.208:4532 -> xxx.yyy.1.3:445 SYN ******S*
May 7 00:49:10 201.129.11.208:4533 -> xxx.yyy.1.4:445 SYN ******S*
May 7 00:49:10 201.129.11.208:4534 -> xxx.yyy.1.5:445 SYN ******S*
May 7 00:49:10 201.129.11.208:4535 -> xxx.yyy.1.6:445 SYN ******S*
May 7 00:49:10 201.129.11.208:4536 -> xxx.yyy.1.7:445 SYN ******S*
May 7 00:49:10 201.129.11.208:4537 -> xxx.yyy.1.8:445 SYN ******S*
[...]
May 7 01:06:57 201.129.11.208:4959 -> xxx.yyy.255.246:445 SYN ******S*
May 7 01:06:57 201.129.11.208:4960 -> xxx.yyy.255.247:445 SYN ******S*
May 7 01:06:57 201.129.11.208:4961 -> xxx.yyy.255.248:445 SYN ******S*
May 7 01:06:57 201.129.11.208:4962 -> xxx.yyy.255.249:445 SYN ******S*
May 7 01:06:57 201.129.11.208:4963 -> xxx.yyy.255.250:445 SYN ******S*
May 7 01:06:57 201.129.11.208:4964 -> xxx.yyy.255.251:445 SYN ******S*
May 7 01:06:57 201.129.11.208:4965 -> xxx.yyy.255.252:445 SYN ******S*
May 7 01:06:57 201.129.11.208:4966 -> xxx.yyy.255.253:445 SYN ******S*
May 7 01:06:57 201.129.11.208:4967 -> xxx.yyy.255.254:445 SYN ******S*
41655

May 7 00:00:50 68.235.35.54:1737 -> xxx.yyy.74.206:10291 SYN ******S*
May 7 00:00:55 68.235.35.54:1757 -> xxx.yyy.74.206:10289 SYN ******S*
May 7 00:00:55 68.235.35.54:1746 -> xxx.yyy.74.206:10288 SYN ******S*
May 7 00:00:53 68.235.35.54:1734 -> xxx.yyy.74.206:10293 SYN ******S*
May 7 00:00:53 68.235.35.54:1748 -> xxx.yyy.74.206:10287 SYN ******S*
May 7 00:01:53 68.235.35.54:1843 -> xxx.yyy.74.206:10291 SYN ******S*
May 7 00:01:48 68.235.35.54:1846 -> xxx.yyy.74.206:10287 SYN ******S*
May 7 00:01:48 68.235.35.54:1848 -> xxx.yyy.74.206:10288 SYN ******S*
[...]
May 7 23:59:41 68.235.35.54:1704 -> xxx.yyy.74.206:10291 SYN ******S*
May 7 23:59:42 68.235.35.54:1706 -> xxx.yyy.74.206:10288 SYN ******S*
May 7 23:59:44 68.235.35.54:1704 -> xxx.yyy.74.206:10291 SYN ******S*
May 7 23:59:47 68.235.35.54:1696 -> xxx.yyy.74.206:10293 SYN ******S*
May 7 23:59:47 68.235.35.54:1714 -> xxx.yyy.74.206:10288 SYN ******S*
May 7 23:59:51 68.235.35.54:1716 -> xxx.yyy.74.206:10289 SYN ******S*
May 7 23:59:50 68.235.35.54:1714 -> xxx.yyy.74.206:10288 SYN ******S*
May 7 23:59:50 68.235.35.54:1704 -> xxx.yyy.74.206:10291 SYN ******S*
35700

[...]
33700

May 7 16:49:36 62.143.4.32:3312 -> xxx.yyy.161.1:21 SYN ******S*
May 7 16:49:36 62.143.4.32:3313 -> xxx.yyy.161.2:21 SYN ******S*
May 7 16:49:36 62.143.4.32:3315 -> xxx.yyy.161.4:21 SYN ******S*
May 7 16:49:36 62.143.4.32:3316 -> xxx.yyy.161.5:21 SYN ******S*
May 7 16:49:36 62.143.4.32:3318 -> xxx.yyy.161.7:21 SYN ******S*
May 7 16:49:36 62.143.4.32:3319 -> xxx.yyy.161.8:21 SYN ******S*
May 7 16:49:33 62.143.4.32:3321 -> xxx.yyy.161.10:21 SYN ******S*
May 7 16:49:36 62.143.4.32:3322 -> xxx.yyy.161.11:21 SYN ******S*
[...]
May 7 18:09:55 62.143.4.32:4714 -> xxx.yyy.221.183:21 SYN ******S*
May 7 18:09:55 62.143.4.32:4715 -> xxx.yyy.1.42:21 SYN ******S*
May 7 18:09:55 62.143.4.32:4713 -> xxx.yyy.1.35:21 SYN ******S*
May 7 18:09:59 62.143.4.32:4728 -> xxx.yyy.221.183:21 SYN ******S*
May 7 18:09:59 62.143.4.32:4729 -> xxx.yyy.1.35:21 SYN ******S*
May 7 18:09:59 62.143.4.32:4732 -> xxx.yyy.1.42:21 SYN ******S*
May 7 18:10:03 62.143.4.32:4759 -> xxx.yyy.221.183:21 SYN ******S*
May 7 18:10:03 62.143.4.32:4757 -> xxx.yyy.1.42:21 SYN ******S*
May 7 18:10:03 62.143.4.32:4760 -> xxx.yyy.1.35:21 SYN ******S*
29418

May 7 16:49:36 213.37.227.151:3641 -> xxx.yyy.161.1:21 SYN ******S*
May 7 16:49:36 213.37.227.151:3651 -> xxx.yyy.161.11:21 SYN ******S*
May 7 16:49:36 213.37.227.151:3655 -> xxx.yyy.161.15:21 SYN ******S*
May 7 16:49:36 213.37.227.151:3644 -> xxx.yyy.161.4:21 SYN ******S*
May 7 16:49:36 213.37.227.151:3647 -> xxx.yyy.161.7:21 SYN ******S*
May 7 16:49:36 213.37.227.151:3652 -> xxx.yyy.161.12:21 SYN ******S*
May 7 16:49:36 213.37.227.151:3645 -> xxx.yyy.161.5:21 SYN ******S*
May 7 16:49:36 213.37.227.151:3649 -> xxx.yyy.161.9:21 SYN ******S*
[...]
May 7 18:38:55 213.37.227.151:3788 -> xxx.yyy.1.42:21 SYN ******S*
May 7 18:38:56 213.37.227.151:3789 -> xxx.yyy.1.35:21 SYN ******S*
May 7 18:38:59 213.37.227.151:3790 -> xxx.yyy.12.25:21 SYN ******S*
May 7 18:39:02 213.37.227.151:3791 -> xxx.yyy.1.42:21 SYN ******S*
May 7 18:39:02 213.37.227.151:3792 -> xxx.yyy.12.22:21 SYN ******S*
May 7 18:39:08 213.37.227.151:3795 -> xxx.yyy.1.42:21 SYN ******S*
May 7 18:39:10 213.37.227.151:3796 -> xxx.yyy.1.35:21 SYN ******S*
May 7 18:39:10 213.37.227.151:3797 -> xxx.yyy.12.22:21 SYN ******S*
May 7 18:39:10 213.37.227.151:3798 -> xxx.yyy.12.25:21 SYN ******S*
28406

May 7 16:49:36 213.65.121.51:1988 -> xxx.yyy.161.4:21 SYN ******S*
May 7 16:49:36 213.65.121.51:1989 -> xxx.yyy.161.6:21 SYN ******S*
May 7 16:49:36 213.65.121.51:1990 -> xxx.yyy.161.5:21 SYN ******S*
May 7 16:49:36 213.65.121.51:1993 -> xxx.yyy.161.2:21 SYN ******S*
May 7 16:49:36 213.65.121.51:1994 -> xxx.yyy.161.8:21 SYN ******S*
May 7 16:49:36 213.65.121.51:1995 -> xxx.yyy.161.9:21 SYN ******S*
May 7 16:49:36 213.65.121.51:1996 -> xxx.yyy.161.10:21 SYN ******S*
May 7 16:49:36 213.65.121.51:1997 -> xxx.yyy.161.12:21 SYN ******S*
[...]
May 7 17:59:34 213.65.121.51:2227 -> xxx.yyy.232.147:21 SYN ******S*
May 7 17:59:38 213.65.121.51:2230 -> xxx.yyy.232.147:21 SYN ******S*
May 7 17:59:40 213.65.121.51:2232 -> xxx.yyy.232.147:21 SYN ******S*
May 7 17:59:45 213.65.121.51:2235 -> xxx.yyy.232.147:21 SYN ******S*
May 7 17:59:50 213.65.121.51:2239 -> xxx.yyy.232.147:21 SYN ******S*
May 7 17:59:54 213.65.121.51:2242 -> xxx.yyy.232.147:21 SYN ******S*
May 7 17:59:58 213.65.121.51:2245 -> xxx.yyy.232.147:21 SYN ******S*
May 7 18:00:01 213.65.121.51:2250 -> xxx.yyy.232.147:21 SYN ******S*
May 7 18:00:06 213.65.121.51:2254 -> xxx.yyy.232.147:21 SYN ******S*
25329

May 7 16:49:33 81.51.132.225:4447 -> xxx.yyy.161.1:21 SYN ******S*
May 7 16:49:36 81.51.132.225:4449 -> xxx.yyy.161.2:21 SYN ******S*
May 7 16:49:33 81.51.132.225:4450 -> xxx.yyy.161.5:21 SYN ******S*
May 7 16:49:36 81.51.132.225:4452 -> xxx.yyy.161.6:21 SYN ******S*
May 7 16:49:33 81.51.132.225:4451 -> xxx.yyy.161.4:21 SYN ******S*
May 7 16:49:33 81.51.132.225:4453 -> xxx.yyy.161.7:21 SYN ******S*
May 7 16:49:36 81.51.132.225:4454 -> xxx.yyy.161.8:21 SYN ******S*
May 7 16:49:36 81.51.132.225:4456 -> xxx.yyy.161.9:21 SYN ******S*
[...]
May 7 19:37:13 81.51.132.225:1667 -> xxx.yyy.206.209:21 SYN ******S*
May 7 19:37:17 81.51.132.225:1670 -> xxx.yyy.206.209:21 SYN ******S*
May 7 19:37:21 81.51.132.225:1676 -> xxx.yyy.206.209:21 SYN ******S*
May 7 19:37:24 81.51.132.225:1679 -> xxx.yyy.206.209:21 SYN ******S*
May 7 19:37:28 81.51.132.225:1684 -> xxx.yyy.206.209:21 SYN ******S*
May 7 19:37:31 81.51.132.225:1686 -> xxx.yyy.206.209:21 SYN ******S*
May 7 19:37:34 81.51.132.225:1688 -> xxx.yyy.206.209:21 SYN ******S*
May 7 19:37:41 81.51.132.225:1693 -> xxx.yyy.206.209:21 SYN ******S*
May 7 19:37:44 81.51.132.225:1696 -> xxx.yyy.206.209:21 SYN ******S*
24954

May 7 16:50:26 4.8.201.98:1379 -> xxx.yyy.161.1:21 SYN ******S*
May 7 16:50:26 4.8.201.98:1380 -> xxx.yyy.161.2:21 SYN ******S*
May 7 16:50:26 4.8.201.98:1381 -> xxx.yyy.161.3:21 SYN ******S*
May 7 16:50:26 4.8.201.98:1383 -> xxx.yyy.161.6:21 SYN ******S*
May 7 16:50:26 4.8.201.98:1384 -> xxx.yyy.161.7:21 SYN ******S*
May 7 16:50:26 4.8.201.98:1386 -> xxx.yyy.161.9:21 SYN ******S*
May 7 16:50:26 4.8.201.98:1387 -> xxx.yyy.161.5:21 SYN ******S*
May 7 16:50:26 4.8.201.98:1388 -> xxx.yyy.161.10:21 SYN ******S*
[...]
May 7 17:47:34 4.8.201.98:1132 -> xxx.yyy.10.178:21 SYN ******S*
May 7 17:47:37 4.8.201.98:1136 -> xxx.yyy.10.179:21 SYN ******S*
May 7 17:47:40 4.8.201.98:1145 -> xxx.yyy.233.46:21 SYN ******S*
May 7 17:47:38 4.8.201.98:1142 -> xxx.yyy.10.180:21 SYN ******S*
May 7 17:47:44 4.8.201.98:1149 -> xxx.yyy.233.46:21 SYN ******S*
May 7 17:47:41 4.8.201.98:1142 -> xxx.yyy.10.180:21 SYN ******S*
May 7 17:47:48 4.8.201.98:1154 -> xxx.yyy.233.46:21 SYN ******S*
May 7 17:47:52 4.8.201.98:1160 -> xxx.yyy.233.46:21 SYN ******S*
May 7 17:47:56 4.8.201.98:1164 -> xxx.yyy.233.46:21 SYN ******S*
24103

May 7 16:49:36 24.80.27.147:4140 -> xxx.yyy.161.1:21 SYN ******S*
May 7 16:49:36 24.80.27.147:4141 -> xxx.yyy.161.2:21 SYN ******S*
May 7 16:49:36 24.80.27.147:4142 -> xxx.yyy.161.3:21 SYN ******S*
May 7 16:49:36 24.80.27.147:4143 -> xxx.yyy.161.4:21 SYN ******S*
May 7 16:49:36 24.80.27.147:4144 -> xxx.yyy.161.5:21 SYN ******S*
May 7 16:49:36 24.80.27.147:4146 -> xxx.yyy.161.7:21 SYN ******S*
May 7 16:49:36 24.80.27.147:4147 -> xxx.yyy.161.8:21 SYN ******S*
May 7 16:49:36 24.80.27.147:4148 -> xxx.yyy.161.9:21 SYN ******S*
[...]
May 7 18:05:00 24.80.27.147:1588 -> xxx.yyy.221.183:21 SYN ******S*
May 7 18:05:04 24.80.27.147:1603 -> xxx.yyy.221.183:21 SYN ******S*
May 7 18:05:04 24.80.27.147:1604 -> xxx.yyy.213.66:21 SYN ******S*
May 7 18:05:06 24.80.27.147:1609 -> xxx.yyy.221.183:21 SYN ******S*
May 7 18:05:08 24.80.27.147:1614 -> xxx.yyy.213.66:21 SYN ******S*
May 7 18:05:12 24.80.27.147:1621 -> xxx.yyy.213.66:21 SYN ******S*
May 7 18:05:16 24.80.27.147:1628 -> xxx.yyy.213.66:21 SYN ******S*
May 7 18:05:20 24.80.27.147:1634 -> xxx.yyy.213.66:21 SYN ******S*
23436

May 7 16:49:36 207.134.16.147:1463 -> xxx.yyy.161.3:21 SYN ******S*
May 7 16:49:36 207.134.16.147:1462 -> xxx.yyy.161.2:21 SYN ******S*
May 7 16:49:36 207.134.16.147:1461 -> xxx.yyy.161.1:21 SYN ******S*
May 7 16:49:36 207.134.16.147:1464 -> xxx.yyy.161.4:21 SYN ******S*
May 7 16:49:36 207.134.16.147:1465 -> xxx.yyy.161.5:21 SYN ******S*
May 7 16:49:36 207.134.16.147:1466 -> xxx.yyy.161.6:21 SYN ******S*
May 7 16:49:36 207.134.16.147:1467 -> xxx.yyy.161.7:21 SYN ******S*
May 7 16:49:36 207.134.16.147:1468 -> xxx.yyy.161.8:21 SYN ******S*
[...]
May 7 18:01:54 207.134.16.147:1359 -> xxx.yyy.224.50:21 SYN ******S*
May 7 18:01:57 207.134.16.147:1362 -> xxx.yyy.224.50:21 SYN ******S*
May 7 18:02:01 207.134.16.147:1365 -> xxx.yyy.224.50:21 SYN ******S*
May 7 18:02:06 207.134.16.147:1369 -> xxx.yyy.224.50:21 SYN ******S*
May 7 18:02:10 207.134.16.147:1372 -> xxx.yyy.224.50:21 SYN ******S*
May 7 18:02:14 207.134.16.147:1375 -> xxx.yyy.224.50:21 SYN ******S*
May 7 18:02:17 207.134.16.147:1378 -> xxx.yyy.224.50:21 SYN ******S*
May 7 18:02:22 207.134.16.147:1383 -> xxx.yyy.224.50:21 SYN ******S*
May 7 18:02:26 207.134.16.147:1386 -> xxx.yyy.224.50:21 SYN ******S*
22996

May 7 16:49:38 212.0.195.199:3727 -> xxx.yyy.161.7:21 SYN ******S*
May 7 16:49:38 212.0.195.199:3729 -> xxx.yyy.161.8:21 SYN ******S*
May 7 16:49:38 212.0.195.199:3732 -> xxx.yyy.161.9:21 SYN ******S*
May 7 16:49:38 212.0.195.199:3734 -> xxx.yyy.161.10:21 SYN ******S*
May 7 16:49:38 212.0.195.199:3736 -> xxx.yyy.161.5:21 SYN ******S*
May 7 16:49:38 212.0.195.199:3659 -> xxx.yyy.161.11:21 SYN ******S*
May 7 16:49:38 212.0.195.199:3660 -> xxx.yyy.161.12:21 SYN ******S*
May 7 16:49:38 212.0.195.199:3661 -> xxx.yyy.161.13:21 SYN ******S*
[...]
May 7 17:31:56 212.0.195.199:3530 -> xxx.yyy.140.144:21 SYN ******S*
May 7 17:31:56 212.0.195.199:3550 -> xxx.yyy.140.145:21 SYN ******S*
May 7 17:31:59 212.0.195.199:3558 -> xxx.yyy.140.163:21 SYN ******S*
May 7 17:31:59 212.0.195.199:3560 -> xxx.yyy.140.174:21 SYN ******S*
May 7 17:32:01 212.0.195.199:3562 -> xxx.yyy.140.160:21 SYN ******S*
May 7 17:32:05 212.0.195.199:3568 -> xxx.yyy.140.163:21 SYN ******S*
May 7 17:32:05 212.0.195.199:3570 -> xxx.yyy.140.145:21 SYN ******S*
May 7 17:32:02 212.0.195.199:3560 -> xxx.yyy.140.174:21 SYN ******S*
May 7 17:32:04 212.0.195.199:3562 -> xxx.yyy.140.160:21 SYN ******S*
22911

May 7 16:49:36 142.217.174.21:3181 -> xxx.yyy.161.1:21 SYN ******S*
May 7 16:49:36 142.217.174.21:3182 -> xxx.yyy.161.2:21 SYN ******S*
May 7 16:49:36 142.217.174.21:3184 -> xxx.yyy.161.4:21 SYN ******S*
May 7 16:49:36 142.217.174.21:3185 -> xxx.yyy.161.5:21 SYN ******S*
May 7 16:49:36 142.217.174.21:3187 -> xxx.yyy.161.7:21 SYN ******S*
May 7 16:49:36 142.217.174.21:3188 -> xxx.yyy.161.8:21 SYN ******S*
May 7 16:49:36 142.217.174.21:3189 -> xxx.yyy.161.9:21 SYN ******S*
May 7 16:49:33 142.217.174.21:3190 -> xxx.yyy.161.10:21 SYN ******S*
[...]
May 7 17:46:34 142.217.174.21:1619 -> xxx.yyy.227.48:21 SYN ******S*
May 7 17:46:34 142.217.174.21:1620 -> xxx.yyy.227.242:21 SYN ******S*
May 7 17:46:38 142.217.174.21:1642 -> xxx.yyy.227.48:21 SYN ******S*
May 7 17:46:38 142.217.174.21:1640 -> xxx.yyy.227.242:21 SYN ******S*
May 7 17:46:42 142.217.174.21:1704 -> xxx.yyy.227.48:21 SYN ******S*
May 7 17:46:41 142.217.174.21:1700 -> xxx.yyy.227.242:21 SYN ******S*
May 7 17:46:43 142.217.174.21:1708 -> xxx.yyy.227.242:21 SYN ******S*
May 7 17:46:43 142.217.174.21:1710 -> xxx.yyy.227.48:21 SYN ******S*
21880

[...]
21843

May 7 16:50:27 200.42.183.202:4796 -> xxx.yyy.161.1:21 SYN ******S*
May 7 16:50:27 200.42.183.202:4797 -> xxx.yyy.161.2:21 SYN ******S*
May 7 16:50:27 200.42.183.202:4798 -> xxx.yyy.161.3:21 SYN ******S*
May 7 16:50:27 200.42.183.202:4799 -> xxx.yyy.161.4:21 SYN ******S*
May 7 16:50:27 200.42.183.202:4800 -> xxx.yyy.161.5:21 SYN ******S*
May 7 16:50:27 200.42.183.202:4801 -> xxx.yyy.161.6:21 SYN ******S*
May 7 16:50:27 200.42.183.202:4802 -> xxx.yyy.161.7:21 SYN ******S*
May 7 16:50:27 200.42.183.202:4803 -> xxx.yyy.161.8:21 SYN ******S*
[...]
May 7 17:47:08 200.42.183.202:4600 -> xxx.yyy.152.132:21 SYN ******S*
May 7 17:47:08 200.42.183.202:4601 -> xxx.yyy.152.134:21 SYN ******S*
May 7 17:47:08 200.42.183.202:4602 -> xxx.yyy.152.133:21 SYN ******S*
May 7 17:47:08 200.42.183.202:4603 -> xxx.yyy.152.135:21 SYN ******S*
May 7 17:47:08 200.42.183.202:4604 -> xxx.yyy.152.136:21 SYN ******S*
May 7 17:47:08 200.42.183.202:4605 -> xxx.yyy.152.130:21 SYN ******S*
May 7 17:47:09 200.42.183.202:4616 -> xxx.yyy.152.147:21 SYN ******S*
May 7 17:47:12 200.42.183.202:4616 -> xxx.yyy.152.147:21 SYN ******S*
21144

May 7 12:00:52 212.31.242.99:1517 -> xxx.yyy.161.163:17300 SYN ******S*
May 7 12:00:52 212.31.242.99:1516 -> xxx.yyy.161.162:17300 SYN ******S*
May 7 12:00:52 212.31.242.99:1518 -> xxx.yyy.161.164:17300 SYN ******S*
May 7 12:00:52 212.31.242.99:1527 -> xxx.yyy.161.173:17300 SYN ******S*
May 7 12:00:52 212.31.242.99:1530 -> xxx.yyy.161.176:17300 SYN ******S*
May 7 12:00:52 212.31.242.99:1528 -> xxx.yyy.161.174:17300 SYN ******S*
May 7 12:00:52 212.31.242.99:1531 -> xxx.yyy.161.177:17300 SYN ******S*
May 7 12:00:52 212.31.242.99:1534 -> xxx.yyy.161.180:17300 SYN ******S*
[...]
May 7 12:40:45 212.31.242.99:1941 -> xxx.yyy.254.237:17300 SYN ******S*
May 7 12:40:45 212.31.242.99:1944 -> xxx.yyy.254.240:17300 SYN ******S*
May 7 12:40:45 212.31.242.99:1947 -> xxx.yyy.254.243:17300 SYN ******S*
May 7 12:40:45 212.31.242.99:1950 -> xxx.yyy.254.246:17300 SYN ******S*
May 7 12:40:45 212.31.242.99:1953 -> xxx.yyy.254.249:17300 SYN ******S*
May 7 12:40:45 212.31.242.99:1956 -> xxx.yyy.254.252:17300 SYN ******S*
May 7 12:40:47 212.31.242.99:1958 -> xxx.yyy.254.254:17300 SYN ******S*
May 7 12:40:47 212.31.242.99:1959 -> xxx.yyy.254.255:17300 SYN ******S*
20997

May 7 16:49:36 216.160.203.230:4437 -> xxx.yyy.161.1:21 SYN ******S*
May 7 16:49:36 216.160.203.230:4438 -> xxx.yyy.161.2:21 SYN ******S*
May 7 16:49:36 216.160.203.230:4439 -> xxx.yyy.161.3:21 SYN ******S*
May 7 16:49:36 216.160.203.230:4440 -> xxx.yyy.161.4:21 SYN ******S*
May 7 16:49:36 216.160.203.230:4441 -> xxx.yyy.161.5:21 SYN ******S*
May 7 16:49:36 216.160.203.230:4442 -> xxx.yyy.161.6:21 SYN ******S*
May 7 16:49:33 216.160.203.230:4443 -> xxx.yyy.161.7:21 SYN ******S*
May 7 16:49:36 216.160.203.230:4444 -> xxx.yyy.161.8:21 SYN ******S*
[...]
May 7 18:01:45 216.160.203.230:1602 -> xxx.yyy.29.214:21 SYN ******S*
May 7 18:01:49 216.160.203.230:1609 -> xxx.yyy.29.214:21 SYN ******S*
May 7 18:01:53 216.160.203.230:1615 -> xxx.yyy.29.214:21 SYN ******S*
May 7 18:01:57 216.160.203.230:1621 -> xxx.yyy.29.214:21 SYN ******S*
May 7 18:02:01 216.160.203.230:1627 -> xxx.yyy.29.214:21 SYN ******S*
May 7 18:02:05 216.160.203.230:1633 -> xxx.yyy.29.214:21 SYN ******S*
May 7 18:02:09 216.160.203.230:1639 -> xxx.yyy.29.214:21 SYN ******S*
May 7 18:02:13 216.160.203.230:1645 -> xxx.yyy.29.214:21 SYN ******S*
May 7 18:02:16 216.160.203.230:1649 -> xxx.yyy.29.214:21 SYN ******S*
20981

May 7 16:49:47 64.231.107.108:1726 -> xxx.yyy.161.1:21 SYN ******S*
May 7 16:49:47 64.231.107.108:1727 -> xxx.yyy.161.5:21 SYN ******S*
May 7 16:49:47 64.231.107.108:1728 -> xxx.yyy.161.6:21 SYN ******S*
May 7 16:49:47 64.231.107.108:1729 -> xxx.yyy.161.7:21 SYN ******S*
May 7 16:49:47 64.231.107.108:1730 -> xxx.yyy.161.8:21 SYN ******S*
May 7 16:49:50 64.231.107.108:1731 -> xxx.yyy.161.9:21 SYN ******S*
May 7 16:49:47 64.231.107.108:1732 -> xxx.yyy.161.2:21 SYN ******S*
May 7 16:49:47 64.231.107.108:1733 -> xxx.yyy.161.3:21 SYN ******S*
[...]
May 7 18:19:47 64.231.107.108:3109 -> xxx.yyy.227.242:21 SYN ******S*
May 7 18:19:51 64.231.107.108:3126 -> xxx.yyy.227.242:21 SYN ******S*
May 7 18:19:54 64.231.107.108:3137 -> xxx.yyy.227.242:21 SYN ******S*
May 7 18:20:00 64.231.107.108:3157 -> xxx.yyy.227.242:21 SYN ******S*
May 7 18:20:04 64.231.107.108:3172 -> xxx.yyy.227.242:21 SYN ******S*
May 7 18:20:07 64.231.107.108:3183 -> xxx.yyy.227.242:21 SYN ******S*
May 7 18:20:11 64.231.107.108:3198 -> xxx.yyy.227.242:21 SYN ******S*
May 7 18:20:16 64.231.107.108:3216 -> xxx.yyy.227.242:21 SYN ******S*
20522

May 7 16:49:36 206.215.14.214:3174 -> xxx.yyy.161.3:21 SYN ******S*
May 7 16:49:36 206.215.14.214:3175 -> xxx.yyy.161.2:21 SYN ******S*
May 7 16:49:36 206.215.14.214:3177 -> xxx.yyy.161.5:21 SYN ******S*
May 7 16:49:36 206.215.14.214:3180 -> xxx.yyy.161.8:21 SYN ******S*
May 7 16:49:36 206.215.14.214:3183 -> xxx.yyy.161.11:21 SYN ******S*
May 7 16:49:36 206.215.14.214:3186 -> xxx.yyy.161.14:21 SYN ******S*
May 7 16:49:33 206.215.14.214:3189 -> xxx.yyy.161.17:21 SYN ******S*
May 7 16:49:33 206.215.14.214:3192 -> xxx.yyy.161.20:21 SYN ******S*
[...]
May 7 18:33:00 206.215.14.214:3753 -> xxx.yyy.16.8:21 SYN ******S*
May 7 18:33:00 206.215.14.214:3754 -> xxx.yyy.16.2:21 SYN ******S*
May 7 18:33:00 206.215.14.214:3752 -> xxx.yyy.16.6:21 SYN ******S*
May 7 18:33:04 206.215.14.214:3770 -> xxx.yyy.16.6:21 SYN ******S*
May 7 18:33:04 206.215.14.214:3768 -> xxx.yyy.16.8:21 SYN ******S*
May 7 18:33:04 206.215.14.214:3769 -> xxx.yyy.16.2:21 SYN ******S*
May 7 18:33:07 206.215.14.214:3781 -> xxx.yyy.16.8:21 SYN ******S*
May 7 18:33:07 206.215.14.214:3780 -> xxx.yyy.16.2:21 SYN ******S*
May 7 18:33:07 206.215.14.214:3782 -> xxx.yyy.16.6:21 SYN ******S*
20431

--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly@xxxxxxx phone: (319) 273-5850 fax: (319) 273-7373
_______________________________________________
Intrusions mailing list
Intrusions@xxxxxxxxxxxxxx
http://www.dshield.org/mailman/listinfo/intrusions
<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  [LOGS] Summary of large-scale portscanning detects: 00020, Ken . Connelly
Next by Date:  [LOGS] Summary of large-scale portscanning detects: 00020, Ken . Connelly
Previous by Thread:  [LOGS] Summary of large-scale portscanning detectsi: 00020, Ken . Connelly
Next by Thread:  [LOGS] Summary of large-scale portscanning detects: 00020, Ken . Connelly
Indexes:  [Date] [Thread] [Top] [All Lists]

Google Custom Search
News | FAQ | advertise