logo       
<prev   next>

[LOGS] Summary of large-scale portscanning detects: msg#00021

security.intrusions

Subject: [LOGS] Summary of large-scale portscanning detects

The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0500.

May 8 00:23:36 219.234.121.8:22002 -> xxx.yyy.1.0:3127 SYN ******S*
May 8 00:23:37 219.234.121.8:22002 -> xxx.yyy.1.0:1080 SYN ******S*
May 8 00:23:37 219.234.121.8:22002 -> xxx.yyy.1.0:10080 SYN ******S*
May 8 00:23:37 219.234.121.8:22002 -> xxx.yyy.1.0:3128 SYN ******S*
May 8 00:23:37 219.234.121.8:22002 -> xxx.yyy.1.1:3127 SYN ******S*
May 8 00:23:37 219.234.121.8:22002 -> xxx.yyy.1.1:1080 SYN ******S*
May 8 00:23:37 219.234.121.8:22002 -> xxx.yyy.1.1:10080 SYN ******S*
May 8 00:23:37 219.234.121.8:22002 -> xxx.yyy.1.1:3128 SYN ******S*
[...]
May 8 07:48:27 219.234.121.8:22002 -> xxx.yyy.255.253:3128 SYN ******S*
May 8 07:48:27 219.234.121.8:22002 -> xxx.yyy.255.254:3127 SYN ******S*
May 8 07:48:27 219.234.121.8:22002 -> xxx.yyy.255.254:1080 SYN ******S*
May 8 07:48:27 219.234.121.8:22002 -> xxx.yyy.255.254:10080 SYN ******S*
May 8 07:48:27 219.234.121.8:22002 -> xxx.yyy.255.254:3128 SYN ******S*
May 8 07:48:27 219.234.121.8:22002 -> xxx.yyy.255.255:3127 SYN ******S*
May 8 07:48:27 219.234.121.8:22002 -> xxx.yyy.255.255:1080 SYN ******S*
May 8 07:48:27 219.234.121.8:22002 -> xxx.yyy.255.255:10080 SYN ******S*
May 8 07:48:27 219.234.121.8:22002 -> xxx.yyy.255.255:3128 SYN ******S*
178331

May 8 21:34:56 212.170.17.9:4961 -> xxx.yyy.1.0:443 SYN ******S*
May 8 21:34:56 212.170.17.9:4962 -> xxx.yyy.1.1:443 SYN ******S*
May 8 21:34:56 212.170.17.9:4963 -> xxx.yyy.1.2:443 SYN ******S*
May 8 21:34:59 212.170.17.9:4964 -> xxx.yyy.1.3:443 SYN ******S*
May 8 21:34:59 212.170.17.9:4965 -> xxx.yyy.1.4:443 SYN ******S*
May 8 21:34:59 212.170.17.9:4966 -> xxx.yyy.1.5:443 SYN ******S*
May 8 21:34:59 212.170.17.9:4967 -> xxx.yyy.1.6:443 SYN ******S*
May 8 21:34:59 212.170.17.9:4968 -> xxx.yyy.1.7:443 SYN ******S*
[...]
May 8 23:22:43 212.170.17.9:2979 -> xxx.yyy.255.193:443 SYN ******S*
May 8 23:22:43 212.170.17.9:2980 -> xxx.yyy.255.194:443 SYN ******S*
May 8 23:22:43 212.170.17.9:2981 -> xxx.yyy.255.195:443 SYN ******S*
May 8 23:22:43 212.170.17.9:2982 -> xxx.yyy.255.196:443 SYN ******S*
May 8 23:22:43 212.170.17.9:2983 -> xxx.yyy.255.197:443 SYN ******S*
May 8 23:22:43 212.170.17.9:2984 -> xxx.yyy.255.198:443 SYN ******S*
May 8 23:22:43 212.170.17.9:2985 -> xxx.yyy.255.199:443 SYN ******S*
May 8 23:22:43 212.170.17.9:2986 -> xxx.yyy.255.200:443 SYN ******S*
May 8 23:22:43 212.170.17.9:2987 -> xxx.yyy.255.201:443 SYN ******S*
93231

May 8 00:00:07 4.8.43.18:4826 -> xxx.yyy.195.130:21 SYN ******S*
May 8 00:00:08 4.8.43.18:4819 -> xxx.yyy.195.91:21 SYN ******S*
May 8 00:00:05 4.8.43.18:4811 -> xxx.yyy.195.126:21 SYN ******S*
May 8 00:00:05 4.8.43.18:4812 -> xxx.yyy.195.125:21 SYN ******S*
May 8 00:00:08 4.8.43.18:4821 -> xxx.yyy.195.92:21 SYN ******S*
May 8 00:00:05 4.8.43.18:4822 -> xxx.yyy.14.23:21 SYN ******S*
May 8 00:00:05 4.8.43.18:4814 -> xxx.yyy.195.127:21 SYN ******S*
May 8 00:00:09 4.8.43.18:4823 -> xxx.yyy.195.133:21 SYN ******S*
[...]
May 8 02:39:19 4.8.43.18:1214 -> xxx.yyy.252.150:21 SYN ******S*
May 8 02:39:19 4.8.43.18:1215 -> xxx.yyy.249.5:21 SYN ******S*
May 8 02:39:19 4.8.43.18:1212 -> xxx.yyy.248.165:21 SYN ******S*
May 8 02:39:18 4.8.43.18:1199 -> xxx.yyy.241.184:21 SYN ******S*
May 8 02:39:21 4.8.43.18:1237 -> xxx.yyy.248.165:21 SYN ******S*
May 8 02:39:21 4.8.43.18:1235 -> xxx.yyy.252.150:21 SYN ******S*
May 8 02:39:21 4.8.43.18:1236 -> xxx.yyy.249.5:21 SYN ******S*
May 8 02:39:21 4.8.43.18:1233 -> xxx.yyy.248.80:21 SYN ******S*
May 8 02:39:21 4.8.43.18:1230 -> xxx.yyy.248.110:23 SYN ******S*
92156

May 8 02:13:18 141.83.125.211:4200 -> xxx.yyy.1.1:139 SYN ******S*
May 8 02:13:18 141.83.125.211:4201 -> xxx.yyy.1.2:139 SYN ******S*
May 8 02:13:18 141.83.125.211:4202 -> xxx.yyy.1.3:139 SYN ******S*
May 8 02:13:18 141.83.125.211:4203 -> xxx.yyy.1.4:139 SYN ******S*
May 8 02:13:18 141.83.125.211:4204 -> xxx.yyy.1.5:139 SYN ******S*
May 8 02:13:18 141.83.125.211:4205 -> xxx.yyy.1.6:139 SYN ******S*
May 8 02:13:18 141.83.125.211:4206 -> xxx.yyy.1.7:139 SYN ******S*
May 8 02:13:18 141.83.125.211:4207 -> xxx.yyy.1.8:139 SYN ******S*
[...]
May 8 02:24:19 141.83.125.211:4619 -> xxx.yyy.255.201:139 SYN ******S*
May 8 02:24:19 141.83.125.211:4613 -> xxx.yyy.255.195:139 SYN ******S*
May 8 02:24:19 141.83.125.211:4620 -> xxx.yyy.255.202:139 SYN ******S*
May 8 02:24:19 141.83.125.211:4617 -> xxx.yyy.255.199:139 SYN ******S*
May 8 02:24:19 141.83.125.211:4614 -> xxx.yyy.255.196:139 SYN ******S*
May 8 02:24:19 141.83.125.211:4621 -> xxx.yyy.255.203:139 SYN ******S*
May 8 02:24:19 141.83.125.211:4618 -> xxx.yyy.255.200:139 SYN ******S*
May 8 02:24:19 141.83.125.211:4615 -> xxx.yyy.255.197:139 SYN ******S*
May 8 02:24:20 141.83.125.211:4694 -> xxx.yyy.255.251:139 SYN ******S*
73389

May 8 02:48:11 213.223.105.74:3606 -> xxx.yyy.1.1:6129 SYN ******S*
May 8 02:48:11 213.223.105.74:3607 -> xxx.yyy.1.2:6129 SYN ******S*
May 8 02:48:13 213.223.105.74:3608 -> xxx.yyy.1.3:6129 SYN ******S*
May 8 02:48:13 213.223.105.74:3609 -> xxx.yyy.1.4:6129 SYN ******S*
May 8 02:48:13 213.223.105.74:3610 -> xxx.yyy.1.5:6129 SYN ******S*
May 8 02:48:13 213.223.105.74:3611 -> xxx.yyy.1.6:6129 SYN ******S*
May 8 02:48:13 213.223.105.74:3612 -> xxx.yyy.1.7:6129 SYN ******S*
May 8 02:48:13 213.223.105.74:3613 -> xxx.yyy.1.8:6129 SYN ******S*
[...]
May 8 02:59:08 213.223.105.74:1097 -> xxx.yyy.255.244:6129 SYN ******S*
May 8 02:59:08 213.223.105.74:1104 -> xxx.yyy.255.251:6129 SYN ******S*
May 8 02:59:08 213.223.105.74:1099 -> xxx.yyy.255.246:6129 SYN ******S*
May 8 02:59:08 213.223.105.74:1103 -> xxx.yyy.255.250:6129 SYN ******S*
May 8 02:59:08 213.223.105.74:1096 -> xxx.yyy.255.243:6129 SYN ******S*
May 8 02:59:08 213.223.105.74:1102 -> xxx.yyy.255.249:6129 SYN ******S*
May 8 02:59:08 213.223.105.74:1106 -> xxx.yyy.255.253:6129 SYN ******S*
May 8 02:59:08 213.223.105.74:1107 -> xxx.yyy.255.254:6129 SYN ******S*
71873

May 8 03:00:44 202.224.237.106:4048 -> xxx.yyy.1.1:1433 SYN ******S*
May 8 03:00:44 202.224.237.106:4049 -> xxx.yyy.1.2:1433 SYN ******S*
May 8 03:00:44 202.224.237.106:4050 -> xxx.yyy.1.3:1433 SYN ******S*
May 8 03:00:44 202.224.237.106:4051 -> xxx.yyy.1.4:1433 SYN ******S*
May 8 03:00:44 202.224.237.106:4053 -> xxx.yyy.1.6:1433 SYN ******S*
May 8 03:00:44 202.224.237.106:4052 -> xxx.yyy.1.5:1433 SYN ******S*
May 8 03:00:44 202.224.237.106:4054 -> xxx.yyy.1.7:1433 SYN ******S*
May 8 03:00:44 202.224.237.106:4057 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
May 8 03:12:28 202.224.237.106:3248 -> xxx.yyy.255.240:1433 SYN ******S*
May 8 03:12:28 202.224.237.106:3252 -> xxx.yyy.255.244:1433 SYN ******S*
May 8 03:12:28 202.224.237.106:3253 -> xxx.yyy.255.245:1433 SYN ******S*
May 8 03:12:28 202.224.237.106:3249 -> xxx.yyy.255.241:1433 SYN ******S*
May 8 03:12:28 202.224.237.106:3262 -> xxx.yyy.255.254:1433 SYN ******S*
May 8 03:12:28 202.224.237.106:3258 -> xxx.yyy.255.250:1433 SYN ******S*
May 8 03:12:28 202.224.237.106:3259 -> xxx.yyy.255.251:1433 SYN ******S*
May 8 03:12:28 202.224.237.106:3260 -> xxx.yyy.255.252:1433 SYN ******S*
May 8 03:12:28 202.224.237.106:3261 -> xxx.yyy.255.253:1433 SYN ******S*
69741

May 8 17:52:04 213.76.221.121:1303 -> xxx.yyy.1.1:6129 SYN ******S*
May 8 17:52:04 213.76.221.121:1304 -> xxx.yyy.1.2:6129 SYN ******S*
May 8 17:52:02 213.76.221.121:1305 -> xxx.yyy.1.3:6129 SYN ******S*
May 8 17:52:02 213.76.221.121:1306 -> xxx.yyy.1.4:6129 SYN ******S*
May 8 17:52:02 213.76.221.121:1307 -> xxx.yyy.1.5:6129 SYN ******S*
May 8 17:52:05 213.76.221.121:1308 -> xxx.yyy.1.6:6129 SYN ******S*
May 8 17:52:02 213.76.221.121:1309 -> xxx.yyy.1.7:6129 SYN ******S*
May 8 17:52:02 213.76.221.121:1310 -> xxx.yyy.1.8:6129 SYN ******S*
[...]
May 8 18:48:24 213.76.221.121:4540 -> xxx.yyy.255.246:6129 SYN ******S*
May 8 18:48:24 213.76.221.121:4544 -> xxx.yyy.255.250:6129 SYN ******S*
May 8 18:48:24 213.76.221.121:4545 -> xxx.yyy.255.251:6129 SYN ******S*
May 8 18:48:24 213.76.221.121:4541 -> xxx.yyy.255.247:6129 SYN ******S*
May 8 18:48:24 213.76.221.121:4542 -> xxx.yyy.255.248:6129 SYN ******S*
May 8 18:48:24 213.76.221.121:4543 -> xxx.yyy.255.249:6129 SYN ******S*
May 8 18:48:24 213.76.221.121:4548 -> xxx.yyy.255.254:6129 SYN ******S*
May 8 18:48:24 213.76.221.121:4547 -> xxx.yyy.255.253:6129 SYN ******S*
60905

May 8 04:05:41 218.76.57.179:3647 -> xxx.yyy.95.92:3128 SYN ******S*
May 8 04:05:41 218.76.57.179:3669 -> xxx.yyy.150.86:3128 SYN ******S*
May 8 04:05:38 218.76.57.179:3674 -> xxx.yyy.134.177:3128 SYN ******S*
May 8 04:05:41 218.76.57.179:3731 -> xxx.yyy.80.58:3128 SYN ******S*
May 8 04:05:41 218.76.57.179:3716 -> xxx.yyy.82.159:3128 SYN ******S*
May 8 04:05:41 218.76.57.179:3659 -> xxx.yyy.173.84:3128 SYN ******S*
May 8 04:05:41 218.76.57.179:3666 -> xxx.yyy.86.85:3128 SYN ******S*
May 8 04:05:47 218.76.57.179:3674 -> xxx.yyy.134.177:3128 SYN ******S*
[...]
May 8 19:03:08 218.76.57.179:4552 -> xxx.yyy.214.152:3128 SYN ******S*
May 8 19:03:50 218.76.57.179:4757 -> xxx.yyy.65.148:3128 SYN ******S*
May 8 19:03:50 218.76.57.179:4756 -> xxx.yyy.143.91:3128 SYN ******S*
May 8 19:03:44 218.76.57.179:4743 -> xxx.yyy.214.152:3128 SYN ******S*
May 8 19:03:47 218.76.57.179:4768 -> xxx.yyy.209.119:3128 SYN ******S*
May 8 19:03:47 218.76.57.179:4767 -> xxx.yyy.188.217:3128 SYN ******S*
May 8 19:03:49 218.76.57.179:4766 -> xxx.yyy.1.31:3128 SYN ******S*
May 8 19:03:50 218.76.57.179:4794 -> xxx.yyy.74.90:3128 SYN ******S*
May 8 19:03:50 218.76.57.179:4769 -> xxx.yyy.76.2:3128 SYN ******S*
51010

May 8 10:19:26 24.86.106.146:1848 -> xxx.yyy.239.1:21 SYN ******S*
May 8 10:19:26 24.86.106.146:1849 -> xxx.yyy.239.2:21 SYN ******S*
May 8 10:19:28 24.86.106.146:1856 -> xxx.yyy.239.5:21 SYN ******S*
May 8 10:19:27 24.86.106.146:1883 -> xxx.yyy.239.3:21 SYN ******S*
May 8 10:19:27 24.86.106.146:1888 -> xxx.yyy.239.4:21 SYN ******S*
May 8 10:19:27 24.86.106.146:1890 -> xxx.yyy.239.6:21 SYN ******S*
May 8 10:19:30 24.86.106.146:2079 -> xxx.yyy.239.7:21 SYN ******S*
May 8 10:19:31 24.86.106.146:2118 -> xxx.yyy.239.5:21 SYN ******S*
[...]
May 8 12:09:31 24.86.106.146:1550 -> xxx.yyy.213.66:21 SYN ******S*
May 8 12:09:35 24.86.106.146:1734 -> xxx.yyy.213.66:21 SYN ******S*
May 8 12:09:39 24.86.106.146:2014 -> xxx.yyy.213.66:21 SYN ******S*
May 8 12:09:43 24.86.106.146:2174 -> xxx.yyy.213.66:21 SYN ******S*
May 8 12:09:47 24.86.106.146:2386 -> xxx.yyy.213.66:21 SYN ******S*
May 8 12:09:51 24.86.106.146:2572 -> xxx.yyy.213.66:21 SYN ******S*
May 8 12:09:55 24.86.106.146:2887 -> xxx.yyy.213.66:21 SYN ******S*
May 8 12:09:59 24.86.106.146:3177 -> xxx.yyy.213.66:21 SYN ******S*
May 8 12:10:00 24.86.106.146:3194 -> xxx.yyy.213.66:21 SYN ******S*
50064

[...]
42539

May 8 06:01:40 217.83.189.93:63975 -> xxx.yyy.1.0:1433 SYN ******S*
May 8 06:01:40 217.83.189.93:63978 -> xxx.yyy.1.1:1433 SYN ******S*
May 8 06:01:40 217.83.189.93:63981 -> xxx.yyy.1.2:1433 SYN ******S*
May 8 06:01:40 217.83.189.93:63984 -> xxx.yyy.1.3:1433 SYN ******S*
May 8 06:01:40 217.83.189.93:63987 -> xxx.yyy.1.4:1433 SYN ******S*
May 8 06:01:40 217.83.189.93:63990 -> xxx.yyy.1.5:1433 SYN ******S*
May 8 06:01:40 217.83.189.93:63993 -> xxx.yyy.1.6:1433 SYN ******S*
May 8 06:01:40 217.83.189.93:63996 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
May 8 06:47:13 217.83.189.93:62554 -> xxx.yyy.171.241:1433 SYN ******S*
May 8 06:47:13 217.83.189.93:62709 -> xxx.yyy.172.16:1433 SYN ******S*
May 8 06:47:13 217.83.189.93:62712 -> xxx.yyy.172.17:1433 SYN ******S*
May 8 06:47:13 217.83.189.93:62560 -> xxx.yyy.171.242:1433 SYN ******S*
May 8 06:47:13 217.83.189.93:62563 -> xxx.yyy.171.243:1433 SYN ******S*
May 8 06:47:13 217.83.189.93:62717 -> xxx.yyy.172.18:1433 SYN ******S*
May 8 06:47:13 217.83.189.93:62722 -> xxx.yyy.172.19:1433 SYN ******S*
May 8 06:47:13 217.83.189.93:62570 -> xxx.yyy.171.244:1433 SYN ******S*
40497

[...]
40059

May 8 00:00:03 217.210.22.2:4283 -> xxx.yyy.176.147:139 SYN ******S*
May 8 00:00:04 217.210.22.2:4299 -> xxx.yyy.176.188:139 SYN ******S*
May 8 00:00:07 217.210.22.2:4356 -> xxx.yyy.176.176:139 SYN ******S*
May 8 00:00:07 217.210.22.2:4359 -> xxx.yyy.176.190:139 SYN ******S*
May 8 00:00:07 217.210.22.2:4363 -> xxx.yyy.176.181:139 SYN ******S*
May 8 00:00:04 217.210.22.2:4303 -> xxx.yyy.176.134:139 SYN ******S*
May 8 00:00:04 217.210.22.2:4367 -> xxx.yyy.176.142:139 SYN ******S*
May 8 00:00:05 217.210.22.2:4369 -> xxx.yyy.176.151:139 SYN ******S*
[...]
May 8 00:52:18 217.210.22.2:2368 -> xxx.yyy.254.217:139 SYN ******S*
May 8 00:52:18 217.210.22.2:2369 -> xxx.yyy.254.241:139 SYN ******S*
May 8 00:52:18 217.210.22.2:2371 -> xxx.yyy.254.219:139 SYN ******S*
May 8 00:52:18 217.210.22.2:2372 -> xxx.yyy.254.223:139 SYN ******S*
May 8 00:52:18 217.210.22.2:2373 -> xxx.yyy.254.234:139 SYN ******S*
May 8 00:52:18 217.210.22.2:2374 -> xxx.yyy.254.228:139 SYN ******S*
May 8 00:52:18 217.210.22.2:2376 -> xxx.yyy.254.233:139 SYN ******S*
May 8 00:52:18 217.210.22.2:2385 -> xxx.yyy.254.227:139 SYN ******S*
May 8 00:52:18 217.210.22.2:2389 -> xxx.yyy.254.243:139 SYN ******S*
37218

May 8 06:47:17 80.131.221.68:62794 -> xxx.yyy.172.33:1433 SYN ******S*
May 8 06:47:17 80.131.221.68:62796 -> xxx.yyy.172.34:1433 SYN ******S*
May 8 06:47:20 80.131.221.68:62948 -> xxx.yyy.172.66:1433 SYN ******S*
May 8 06:47:18 80.131.221.68:62800 -> xxx.yyy.172.35:1433 SYN ******S*
May 8 06:47:20 80.131.221.68:62953 -> xxx.yyy.172.67:1433 SYN ******S*
May 8 06:47:18 80.131.221.68:62806 -> xxx.yyy.172.36:1433 SYN ******S*
May 8 06:47:21 80.131.221.68:62960 -> xxx.yyy.172.68:1433 SYN ******S*
May 8 06:47:18 80.131.221.68:62810 -> xxx.yyy.172.37:1433 SYN ******S*
[...]
May 8 07:10:24 80.131.221.68:63316 -> xxx.yyy.255.206:1433 SYN ******S*
May 8 07:10:24 80.131.221.68:63502 -> xxx.yyy.255.253:1433 SYN ******S*
May 8 07:10:24 80.131.221.68:63506 -> xxx.yyy.255.254:1433 SYN ******S*
May 8 07:10:24 80.131.221.68:63319 -> xxx.yyy.255.207:1433 SYN ******S*
May 8 07:10:24 80.131.221.68:63324 -> xxx.yyy.255.208:1433 SYN ******S*
May 8 07:10:24 80.131.221.68:63328 -> xxx.yyy.255.209:1433 SYN ******S*
May 8 07:10:24 80.131.221.68:63332 -> xxx.yyy.255.210:1433 SYN ******S*
May 8 07:10:24 80.131.221.68:63335 -> xxx.yyy.255.211:1433 SYN ******S*
37005

May 8 03:48:51 80.219.233.143:3935 -> xxx.yyy.230.2:445 SYN ******S*
May 8 03:48:51 80.219.233.143:3936 -> xxx.yyy.230.3:445 SYN ******S*
May 8 03:48:51 80.219.233.143:3939 -> xxx.yyy.230.6:445 SYN ******S*
May 8 03:48:51 80.219.233.143:3937 -> xxx.yyy.230.4:445 SYN ******S*
May 8 03:48:51 80.219.233.143:3938 -> xxx.yyy.230.5:445 SYN ******S*
May 8 03:48:51 80.219.233.143:3940 -> xxx.yyy.230.7:445 SYN ******S*
May 8 03:48:51 80.219.233.143:3941 -> xxx.yyy.230.8:445 SYN ******S*
May 8 03:48:51 80.219.233.143:3942 -> xxx.yyy.230.9:445 SYN ******S*
[...]
May 8 04:56:39 80.219.233.143:1623 -> xxx.yyy.255.240:445 SYN ******S*
May 8 04:56:39 80.219.233.143:1620 -> xxx.yyy.255.237:445 SYN ******S*
May 8 04:56:39 80.219.233.143:1617 -> xxx.yyy.255.234:445 SYN ******S*
May 8 04:56:39 80.219.233.143:1636 -> xxx.yyy.255.253:445 SYN ******S*
May 8 04:56:39 80.219.233.143:1627 -> xxx.yyy.255.244:445 SYN ******S*
May 8 04:56:39 80.219.233.143:1633 -> xxx.yyy.255.250:445 SYN ******S*
May 8 04:56:39 80.219.233.143:1630 -> xxx.yyy.255.247:445 SYN ******S*
May 8 04:56:39 80.219.233.143:1640 -> xxx.yyy.255.230:445 SYN ******S*
May 8 04:56:39 80.219.233.143:1639 -> xxx.yyy.255.229:445 SYN ******S*
18156

[...]
17048

May 8 07:35:03 212.42.91.18:4164 -> xxx.yyy.1.5:1433 SYN ******S*
May 8 07:35:03 212.42.91.18:4171 -> xxx.yyy.1.12:1433 SYN ******S*
May 8 07:35:03 212.42.91.18:4174 -> xxx.yyy.1.15:1433 SYN ******S*
May 8 07:35:03 212.42.91.18:4177 -> xxx.yyy.1.18:1433 SYN ******S*
May 8 07:35:03 212.42.91.18:4180 -> xxx.yyy.1.21:1433 SYN ******S*
May 8 07:35:03 212.42.91.18:4183 -> xxx.yyy.1.24:1433 SYN ******S*
May 8 07:35:03 212.42.91.18:4185 -> xxx.yyy.1.26:1433 SYN ******S*
May 8 07:35:03 212.42.91.18:4188 -> xxx.yyy.1.29:1433 SYN ******S*
[...]
May 8 07:46:51 212.42.91.18:4440 -> xxx.yyy.255.233:1433 SYN ******S*
May 8 07:46:51 212.42.91.18:4443 -> xxx.yyy.255.236:1433 SYN ******S*
May 8 07:46:51 212.42.91.18:4480 -> xxx.yyy.255.239:1433 SYN ******S*
May 8 07:46:51 212.42.91.18:4487 -> xxx.yyy.255.246:1433 SYN ******S*
May 8 07:46:51 212.42.91.18:4490 -> xxx.yyy.255.249:1433 SYN ******S*
May 8 07:46:52 212.42.91.18:4236 -> xxx.yyy.255.29:1433 SYN ******S*
May 8 07:46:52 212.42.91.18:4259 -> xxx.yyy.255.52:1433 SYN ******S*
May 8 07:46:53 212.42.91.18:4316 -> xxx.yyy.255.109:1433 SYN ******S*
14129

May 8 10:03:51 164.67.121.223:22295 -> xxx.yyy.1.1:443 SYN ******S*
May 8 10:03:51 164.67.121.223:23135 -> xxx.yyy.1.2:443 SYN ******S*
May 8 10:03:51 164.67.121.223:21525 -> xxx.yyy.1.3:443 SYN ******S*
May 8 10:03:51 164.67.121.223:24046 -> xxx.yyy.1.4:443 SYN ******S*
May 8 10:03:51 164.67.121.223:23700 -> xxx.yyy.1.5:443 SYN ******S*
May 8 10:03:51 164.67.121.223:23097 -> xxx.yyy.1.6:443 SYN ******S*
May 8 10:03:51 164.67.121.223:22044 -> xxx.yyy.1.7:443 SYN ******S*
May 8 10:03:51 164.67.121.223:25282 -> xxx.yyy.1.8:443 SYN ******S*
[...]
May 8 12:10:27 164.67.121.223:3958 -> xxx.yyy.230.6:443 SYN ******S*
May 8 12:10:28 164.67.121.223:3960 -> xxx.yyy.232.143:443 SYN ******S*
May 8 12:10:28 164.67.121.223:3962 -> xxx.yyy.206.209:443 SYN ******S*
May 8 12:10:29 164.67.121.223:3964 -> xxx.yyy.252.150:443 SYN ******S*
May 8 12:10:29 164.67.121.223:3965 -> xxx.yyy.132.127:443 SYN ******S*
May 8 12:10:30 164.67.121.223:3967 -> xxx.yyy.248.231:443 SYN ******S*
May 8 12:10:31 164.67.121.223:3968 -> xxx.yyy.248.37:443 SYN ******S*
May 8 12:10:31 164.67.121.223:3969 -> xxx.yyy.248.4:443 SYN ******S*
May 8 12:10:32 164.67.121.223:3970 -> xxx.yyy.248.80:443 SYN ******S*
11415

[...]
10215

May 8 05:24:09 218.76.23.214:50699 -> xxx.yyy.1.1:80 SYN ******S*
May 8 05:24:09 218.76.23.214:50700 -> xxx.yyy.1.1:443 SYN ******S*
May 8 05:24:07 218.76.23.214:50701 -> xxx.yyy.1.2:80 SYN ******S*
May 8 05:24:09 218.76.23.214:50702 -> xxx.yyy.1.2:443 SYN ******S*
May 8 05:24:06 218.76.23.214:50703 -> xxx.yyy.1.3:80 SYN ******S*
May 8 05:24:09 218.76.23.214:50704 -> xxx.yyy.1.3:443 SYN ******S*
May 8 05:24:09 218.76.23.214:50705 -> xxx.yyy.1.4:80 SYN ******S*
May 8 05:24:08 218.76.23.214:50706 -> xxx.yyy.1.4:443 SYN ******S*
[...]
May 8 05:40:29 218.76.23.214:50496 -> xxx.yyy.1.63:80 SYN ******S*
May 8 05:40:29 218.76.23.214:50498 -> xxx.yyy.1.64:80 SYN ******S*
May 8 05:40:30 218.76.23.214:50511 -> xxx.yyy.12.28:443 SYN ******S*
May 8 05:40:30 218.76.23.214:50520 -> xxx.yyy.12.34:80 SYN ******S*
May 8 05:40:30 218.76.23.214:50521 -> xxx.yyy.12.34:443 SYN ******S*
May 8 05:40:30 218.76.23.214:50528 -> xxx.yyy.20.21:443 SYN ******S*
May 8 05:40:30 218.76.23.214:50526 -> xxx.yyy.16.8:80 SYN ******S*
May 8 05:40:36 218.76.23.214:50522 -> xxx.yyy.14.22:80 SYN ******S*
May 8 05:40:36 218.76.23.214:50512 -> xxx.yyy.12.29:80 SYN ******S*
8037

May 8 00:01:40 66.190.44.41:2965 -> xxx.yyy.192.180:2745 SYN ******S*
May 8 00:01:41 66.190.44.41:2967 -> xxx.yyy.192.180:1025 SYN ******S*
May 8 00:01:41 66.190.44.41:2970 -> xxx.yyy.196.88:2745 SYN ******S*
May 8 00:01:45 66.190.44.41:3019 -> xxx.yyy.107.185:2745 SYN ******S*
May 8 00:01:45 66.190.44.41:3021 -> xxx.yyy.107.185:1025 SYN ******S*
May 8 00:01:43 66.190.44.41:3031 -> xxx.yyy.89.208:2745 SYN ******S*
May 8 00:01:44 66.190.44.41:3033 -> xxx.yyy.89.208:1025 SYN ******S*
May 8 00:01:46 66.190.44.41:3031 -> xxx.yyy.89.208:2745 SYN ******S*
[...]
May 8 23:54:37 66.190.44.41:2110 -> xxx.yyy.95.235:2745 SYN ******S*
May 8 23:54:37 66.190.44.41:2112 -> xxx.yyy.95.235:1025 SYN ******S*
May 8 23:54:40 66.190.44.41:2110 -> xxx.yyy.95.235:2745 SYN ******S*
May 8 23:54:40 66.190.44.41:2112 -> xxx.yyy.95.235:1025 SYN ******S*
May 8 23:54:42 66.190.44.41:2049 -> xxx.yyy.143.7:2745 SYN ******S*
May 8 23:54:42 66.190.44.41:2052 -> xxx.yyy.83.132:2745 SYN ******S*
May 8 23:54:43 66.190.44.41:2083 -> xxx.yyy.192.19:2745 SYN ******S*
May 8 23:54:46 66.190.44.41:2112 -> xxx.yyy.95.235:1025 SYN ******S*
May 8 23:54:46 66.190.44.41:2110 -> xxx.yyy.95.235:2745 SYN ******S*
7323

May 8 00:00:27 129.24.64.208:4004 -> xxx.yyy.67.197:2745 SYN ******S*
May 8 00:00:27 129.24.64.208:4006 -> xxx.yyy.67.197:1025 SYN ******S*
May 8 00:00:27 129.24.64.208:4036 -> xxx.yyy.159.101:2745 SYN ******S*
May 8 00:00:30 129.24.64.208:4351 -> xxx.yyy.128.158:2745 SYN ******S*
May 8 00:00:29 129.24.64.208:4088 -> xxx.yyy.227.249:2745 SYN ******S*
May 8 00:02:56 129.24.64.208:1363 -> xxx.yyy.252.191:2745 SYN ******S*
May 8 00:02:56 129.24.64.208:1365 -> xxx.yyy.252.191:1025 SYN ******S*
May 8 00:02:58 129.24.64.208:1407 -> xxx.yyy.205.104:2745 SYN ******S*
[...]
May 8 23:59:20 129.24.64.208:3709 -> xxx.yyy.179.116:2745 SYN ******S*
May 8 23:59:25 129.24.64.208:4036 -> xxx.yyy.90.202:2745 SYN ******S*
May 8 23:59:26 129.24.64.208:4075 -> xxx.yyy.95.62:2745 SYN ******S*
May 8 23:59:27 129.24.64.208:3911 -> xxx.yyy.66.243:2745 SYN ******S*
May 8 23:59:27 129.24.64.208:3914 -> xxx.yyy.66.243:1025 SYN ******S*
May 8 23:59:30 129.24.64.208:4222 -> xxx.yyy.20.57:2745 SYN ******S*
May 8 23:59:31 129.24.64.208:4036 -> xxx.yyy.90.202:2745 SYN ******S*
May 8 23:59:32 129.24.64.208:4075 -> xxx.yyy.95.62:2745 SYN ******S*
May 8 23:59:36 129.24.64.208:4222 -> xxx.yyy.20.57:2745 SYN ******S*
5785

May 8 00:02:31 202.102.25.187:14463 -> xxx.yyy.238.219:2745 SYN ******S*
May 8 00:02:33 202.102.25.187:14528 -> xxx.yyy.212.32:2745 SYN ******S*
May 8 00:02:31 202.102.25.187:14229 -> xxx.yyy.190.94:2745 SYN ******S*
May 8 00:02:32 202.102.25.187:14598 -> xxx.yyy.20.116:2745 SYN ******S*
May 8 00:02:33 202.102.25.187:14308 -> xxx.yyy.85.150:2745 SYN ******S*
May 8 00:02:38 202.102.25.187:14842 -> xxx.yyy.105.68:2745 SYN ******S*
May 8 00:02:41 202.102.25.187:14598 -> xxx.yyy.20.116:2745 SYN ******S*
May 8 00:02:47 202.102.25.187:14842 -> xxx.yyy.105.68:2745 SYN ******S*
[...]
May 8 23:54:53 202.102.25.187:20289 -> xxx.yyy.200.166:2745 SYN ******S*
May 8 23:54:47 202.102.25.187:19880 -> xxx.yyy.159.8:2745 SYN ******S*
May 8 23:54:48 202.102.25.187:20020 -> xxx.yyy.195.32:2745 SYN ******S*
May 8 23:54:49 202.102.25.187:20450 -> xxx.yyy.194.225:2745 SYN ******S*
May 8 23:54:50 202.102.25.187:20116 -> xxx.yyy.171.3:2745 SYN ******S*
May 8 23:54:51 202.102.25.187:20173 -> xxx.yyy.144.168:2745 SYN ******S*
May 8 23:54:57 202.102.25.187:20897 -> xxx.yyy.204.99:2745 SYN ******S*
May 8 23:54:57 202.102.25.187:20973 -> xxx.yyy.162.231:2745 SYN ******S*
May 8 23:54:56 202.102.25.187:20450 -> xxx.yyy.194.225:2745 SYN ******S*
4879

May 8 00:08:45 209.173.191.138:4882 -> xxx.yyy.183.75:2745 SYN ******S*
May 8 00:08:43 209.173.191.138:4518 -> xxx.yyy.181.23:2745 SYN ******S*
May 8 00:08:45 209.173.191.138:4551 -> xxx.yyy.150.154:2745 SYN ******S*
May 8 00:08:46 209.173.191.138:4569 -> xxx.yyy.151.50:2745 SYN ******S*
May 8 00:08:49 209.173.191.138:4981 -> xxx.yyy.253.12:2745 SYN ******S*
May 8 00:08:47 209.173.191.138:1045 -> xxx.yyy.249.252:2745 SYN ******S*
May 8 00:08:50 209.173.191.138:1098 -> xxx.yyy.198.104:2745 SYN ******S*
May 8 00:08:50 209.173.191.138:1045 -> xxx.yyy.249.252:2745 SYN ******S*
[...]
May 8 23:53:57 209.173.191.138:2465 -> xxx.yyy.248.161:2745 SYN ******S*
May 8 23:54:01 209.173.191.138:2465 -> xxx.yyy.248.161:2745 SYN ******S*
May 8 23:54:04 209.173.191.138:2390 -> xxx.yyy.144.100:2745 SYN ******S*
May 8 23:54:04 209.173.191.138:2394 -> xxx.yyy.144.100:3127 SYN ******S*
May 8 23:54:04 209.173.191.138:2392 -> xxx.yyy.144.100:1025 SYN ******S*
May 8 23:54:06 209.173.191.138:2429 -> xxx.yyy.86.161:2745 SYN ******S*
May 8 23:54:07 209.173.191.138:2465 -> xxx.yyy.248.161:2745 SYN ******S*
May 8 23:54:08 209.173.191.138:2622 -> xxx.yyy.133.230:2745 SYN ******S*
May 8 23:54:11 209.173.191.138:2622 -> xxx.yyy.133.230:2745 SYN ******S*
4722

May 8 00:03:08 134.102.149.30:3732 -> xxx.yyy.253.23:2745 SYN ******S*
May 8 00:03:08 134.102.149.30:3737 -> xxx.yyy.253.23:1025 SYN ******S*
May 8 00:03:08 134.102.149.30:3748 -> xxx.yyy.253.23:445 SYN ******S*
May 8 00:03:08 134.102.149.30:3750 -> xxx.yyy.253.23:3127 SYN ******S*
May 8 00:03:08 134.102.149.30:3753 -> xxx.yyy.253.23:6129 SYN ******S*
May 8 00:03:08 134.102.149.30:3759 -> xxx.yyy.253.23:80 SYN ******S*
May 8 00:03:08 134.102.149.30:3767 -> xxx.yyy.253.23:139 SYN ******S*
May 8 00:03:08 134.102.149.30:3774 -> xxx.yyy.253.23:1433 SYN ******S*
[...]
May 8 23:50:17 134.102.149.30:3380 -> xxx.yyy.245.105:2745 SYN ******S*
May 8 23:50:17 134.102.149.30:3408 -> xxx.yyy.245.105:1025 SYN ******S*
May 8 23:50:17 134.102.149.30:3415 -> xxx.yyy.245.105:445 SYN ******S*
May 8 23:50:17 134.102.149.30:3417 -> xxx.yyy.245.105:3127 SYN ******S*
May 8 23:50:17 134.102.149.30:3418 -> xxx.yyy.245.105:6129 SYN ******S*
May 8 23:50:17 134.102.149.30:3419 -> xxx.yyy.245.105:80 SYN ******S*
May 8 23:50:17 134.102.149.30:3421 -> xxx.yyy.245.105:139 SYN ******S*
May 8 23:50:17 134.102.149.30:3424 -> xxx.yyy.245.105:1433 SYN ******S*
4406

[...]
3422

--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly@xxxxxxx phone: (319) 273-5850 fax: (319) 273-7373
_______________________________________________
Intrusions mailing list
Intrusions@xxxxxxxxxxxxxx
http://www.dshield.org/mailman/listinfo/intrusions
<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  [LOGS] Summary of large-scale portscanning detects: 00021, Ken . Connelly
Next by Date:  Re: LOGS: GIAC GCIA Version 3.4 Practical Detect- David Chance (2nd Attempt): 00021, skycopp-mail8531
Previous by Thread:  [LOGS] Summary of large-scale portscanning detectsi: 00021, Ken . Connelly
Next by Thread:  [LOGS] Summary of large-scale portscanning detects: 00021, Ken . Connelly
Indexes:  [Date] [Thread] [Top] [All Lists]

Google Custom Search
News | FAQ | advertise