logo       
<prev   next>

[LOGS] Summary of large-scale portscanning detects: msg#00030

security.intrusions

Subject: [LOGS] Summary of large-scale portscanning detects

The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0500.

May 9 20:51:45 218.22.21.24:1073 -> xxx.yyy.222.226:2745 SYN ******S*
May 9 20:51:45 218.22.21.24:1075 -> xxx.yyy.222.226:3127 SYN ******S*
May 9 20:51:45 218.22.21.24:1076 -> xxx.yyy.222.226:6129 SYN ******S*
May 9 20:51:45 218.22.21.24:1078 -> xxx.yyy.222.226:5000 SYN ******S*
May 9 20:51:42 218.22.21.24:1061 -> xxx.yyy.88.32:3127 SYN ******S*
May 9 20:51:42 218.22.21.24:1062 -> xxx.yyy.88.32:6129 SYN ******S*
May 9 20:51:42 218.22.21.24:1064 -> xxx.yyy.88.32:5000 SYN ******S*
May 9 20:51:42 218.22.21.24:1119 -> xxx.yyy.157.10:2745 SYN ******S*
[...]
May 9 23:59:57 218.22.21.24:3292 -> xxx.yyy.234.209:2745 SYN ******S*
May 9 23:59:58 218.22.21.24:2680 -> xxx.yyy.249.6:2745 SYN ******S*
May 9 23:59:58 218.22.21.24:2767 -> xxx.yyy.229.112:2745 SYN ******S*
May 9 23:59:58 218.22.21.24:3193 -> xxx.yyy.138.7:2745 SYN ******S*
May 9 23:59:59 218.22.21.24:1963 -> xxx.yyy.241.73:2745 SYN ******S*
May 9 23:59:59 218.22.21.24:1322 -> xxx.yyy.161.66:2745 SYN ******S*
May 9 23:59:59 218.22.21.24:2711 -> xxx.yyy.248.39:2745 SYN ******S*
May 10 00:00:00 218.22.21.24:1315 -> xxx.yyy.80.166:2745 SYN ******S*
87502

May 9 15:52:47 62.52.175.221:4426 -> xxx.yyy.1.1:139 SYN ******S*
May 9 15:52:47 62.52.175.221:4437 -> xxx.yyy.1.2:139 SYN ******S*
May 9 15:52:47 62.52.175.221:4446 -> xxx.yyy.1.3:139 SYN ******S*
May 9 15:52:47 62.52.175.221:4458 -> xxx.yyy.1.4:139 SYN ******S*
May 9 15:52:47 62.52.175.221:1268 -> xxx.yyy.1.5:139 SYN ******S*
May 9 15:52:47 62.52.175.221:1340 -> xxx.yyy.1.6:139 SYN ******S*
May 9 15:52:47 62.52.175.221:1352 -> xxx.yyy.1.7:139 SYN ******S*
May 9 15:52:47 62.52.175.221:1364 -> xxx.yyy.1.8:139 SYN ******S*
[...]
May 9 16:05:27 62.52.175.221:3556 -> xxx.yyy.255.251:139 SYN ******S*
May 9 16:05:27 62.52.175.221:3503 -> xxx.yyy.255.249:139 SYN ******S*
May 9 16:05:27 62.52.175.221:3552 -> xxx.yyy.255.250:139 SYN ******S*
May 9 16:05:27 62.52.175.221:3486 -> xxx.yyy.255.247:139 SYN ******S*
May 9 16:05:27 62.52.175.221:3499 -> xxx.yyy.255.248:139 SYN ******S*
May 9 16:05:27 62.52.175.221:3448 -> xxx.yyy.255.245:139 SYN ******S*
May 9 16:05:27 62.52.175.221:3461 -> xxx.yyy.255.246:139 SYN ******S*
May 9 16:05:27 62.52.175.221:3696 -> xxx.yyy.255.254:139 SYN ******S*
73735

May 9 14:38:30 68.4.239.7:3947 -> xxx.yyy.1.1:6129 SYN ******S*
May 9 14:38:30 68.4.239.7:3948 -> xxx.yyy.1.2:6129 SYN ******S*
May 9 14:38:32 68.4.239.7:3949 -> xxx.yyy.1.3:6129 SYN ******S*
May 9 14:38:32 68.4.239.7:3950 -> xxx.yyy.1.4:6129 SYN ******S*
May 9 14:38:32 68.4.239.7:3951 -> xxx.yyy.1.5:6129 SYN ******S*
May 9 14:38:32 68.4.239.7:3952 -> xxx.yyy.1.6:6129 SYN ******S*
May 9 14:38:32 68.4.239.7:3953 -> xxx.yyy.1.7:6129 SYN ******S*
May 9 14:38:32 68.4.239.7:3954 -> xxx.yyy.1.8:6129 SYN ******S*
[...]
May 9 14:49:43 68.4.239.7:4287 -> xxx.yyy.255.252:6129 SYN ******S*
May 9 14:49:43 68.4.239.7:4284 -> xxx.yyy.255.249:6129 SYN ******S*
May 9 14:49:43 68.4.239.7:4281 -> xxx.yyy.255.246:6129 SYN ******S*
May 9 14:49:43 68.4.239.7:4288 -> xxx.yyy.255.253:6129 SYN ******S*
May 9 14:49:43 68.4.239.7:4285 -> xxx.yyy.255.250:6129 SYN ******S*
May 9 14:49:43 68.4.239.7:4282 -> xxx.yyy.255.247:6129 SYN ******S*
May 9 14:49:43 68.4.239.7:4279 -> xxx.yyy.255.244:6129 SYN ******S*
May 9 14:49:43 68.4.239.7:4289 -> xxx.yyy.255.254:6129 SYN ******S*
73018

May 9 20:51:45 202.98.141.222:34049 -> xxx.yyy.176.21:3127 SYN ******S*
May 9 20:51:45 202.98.141.222:34050 -> xxx.yyy.176.21:6129 SYN ******S*
May 9 20:51:45 202.98.141.222:34046 -> xxx.yyy.176.21:2745 SYN ******S*
May 9 20:51:45 202.98.141.222:34053 -> xxx.yyy.176.21:5000 SYN ******S*
May 9 20:51:42 202.98.141.222:33944 -> xxx.yyy.202.144:3127 SYN ******S*
May 9 20:51:42 202.98.141.222:33945 -> xxx.yyy.202.144:6129 SYN ******S*
May 9 20:51:42 202.98.141.222:33947 -> xxx.yyy.202.144:5000 SYN ******S*
May 9 20:51:42 202.98.141.222:33993 -> xxx.yyy.238.146:3127 SYN ******S*
[...]
May 10 00:00:00 202.98.141.222:58042 -> xxx.yyy.220.128:2745 SYN ******S*
May 10 00:00:00 202.98.141.222:52066 -> xxx.yyy.218.14:2745 SYN ******S*
May 10 00:00:00 202.98.141.222:56335 -> xxx.yyy.200.162:2745 SYN ******S*
May 10 00:00:00 202.98.141.222:52413 -> xxx.yyy.203.219:2745 SYN ******S*
May 10 00:00:01 202.98.141.222:53108 -> xxx.yyy.148.188:1025 SYN ******S*
May 10 00:00:01 202.98.141.222:53114 -> xxx.yyy.148.188:5000 SYN ******S*
May 10 00:00:01 202.98.141.222:53112 -> xxx.yyy.148.188:6129 SYN ******S*
May 10 00:00:01 202.98.141.222:59571 -> xxx.yyy.161.251:2745 SYN ******S*
May 10 00:00:01 202.98.141.222:53207 -> xxx.yyy.176.249:2745 SYN ******S*
71882

May 9 07:35:37 195.141.103.60:1931 -> xxx.yyy.1.1:139 SYN ******S*
May 9 07:35:37 195.141.103.60:1934 -> xxx.yyy.1.2:139 SYN ******S*
May 9 07:35:37 195.141.103.60:1937 -> xxx.yyy.1.3:139 SYN ******S*
May 9 07:35:34 195.141.103.60:1940 -> xxx.yyy.1.4:139 SYN ******S*
May 9 07:35:34 195.141.103.60:1943 -> xxx.yyy.1.5:139 SYN ******S*
May 9 07:35:37 195.141.103.60:1946 -> xxx.yyy.1.6:139 SYN ******S*
May 9 07:35:37 195.141.103.60:1949 -> xxx.yyy.1.7:139 SYN ******S*
May 9 07:35:37 195.141.103.60:1953 -> xxx.yyy.1.8:139 SYN ******S*
[...]
May 9 07:48:13 195.141.103.60:1359 -> xxx.yyy.254.154:139 SYN ******S*
May 9 07:48:15 195.141.103.60:1656 -> xxx.yyy.254.250:139 SYN ******S*
May 9 07:48:15 195.141.103.60:1650 -> xxx.yyy.254.248:139 SYN ******S*
May 9 07:48:15 195.141.103.60:1653 -> xxx.yyy.254.249:139 SYN ******S*
May 9 07:48:15 195.141.103.60:1646 -> xxx.yyy.254.247:139 SYN ******S*
May 9 07:48:15 195.141.103.60:1659 -> xxx.yyy.254.251:139 SYN ******S*
May 9 07:48:15 195.141.103.60:1643 -> xxx.yyy.254.246:139 SYN ******S*
May 9 07:48:15 195.141.103.60:1640 -> xxx.yyy.254.245:139 SYN ******S*
May 9 07:48:15 195.141.103.60:1669 -> xxx.yyy.254.254:139 SYN ******S*
71377

May 9 04:05:44 216.224.229.142:2728 -> xxx.yyy.1.1:21 SYN ******S*
May 9 04:05:44 216.224.229.142:2729 -> xxx.yyy.1.2:21 SYN ******S*
May 9 04:05:46 216.224.229.142:2730 -> xxx.yyy.1.3:21 SYN ******S*
May 9 04:05:46 216.224.229.142:2731 -> xxx.yyy.1.4:21 SYN ******S*
May 9 04:05:46 216.224.229.142:2732 -> xxx.yyy.1.5:21 SYN ******S*
May 9 04:05:46 216.224.229.142:2733 -> xxx.yyy.1.6:21 SYN ******S*
May 9 04:05:46 216.224.229.142:2734 -> xxx.yyy.1.7:21 SYN ******S*
May 9 04:05:46 216.224.229.142:2735 -> xxx.yyy.1.8:21 SYN ******S*
[...]
May 9 04:19:07 216.224.229.142:4370 -> xxx.yyy.255.236:21 SYN ******S*
May 9 04:19:07 216.224.229.142:4380 -> xxx.yyy.255.246:21 SYN ******S*
May 9 04:19:07 216.224.229.142:4387 -> xxx.yyy.255.253:21 SYN ******S*
May 9 04:19:07 216.224.229.142:4384 -> xxx.yyy.255.250:21 SYN ******S*
May 9 04:19:07 216.224.229.142:4381 -> xxx.yyy.255.247:21 SYN ******S*
May 9 04:19:07 216.224.229.142:4385 -> xxx.yyy.255.251:21 SYN ******S*
May 9 04:19:08 216.224.229.142:4382 -> xxx.yyy.255.248:21 SYN ******S*
May 9 04:19:08 216.224.229.142:4386 -> xxx.yyy.255.252:21 SYN ******S*
May 9 04:19:08 216.224.229.142:4383 -> xxx.yyy.255.249:21 SYN ******S*
71304

May 9 09:46:17 65.160.28.196:1259 -> xxx.yyy.1.1:1433 SYN ******S*
May 9 09:46:17 65.160.28.196:1260 -> xxx.yyy.1.2:1433 SYN ******S*
May 9 09:46:14 65.160.28.196:1261 -> xxx.yyy.1.3:1433 SYN ******S*
May 9 09:46:17 65.160.28.196:1262 -> xxx.yyy.1.4:1433 SYN ******S*
May 9 09:46:17 65.160.28.196:1263 -> xxx.yyy.1.5:1433 SYN ******S*
May 9 09:46:17 65.160.28.196:1264 -> xxx.yyy.1.6:1433 SYN ******S*
May 9 09:46:17 65.160.28.196:1265 -> xxx.yyy.1.7:1433 SYN ******S*
May 9 09:46:17 65.160.28.196:1266 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
May 9 09:58:25 65.160.28.196:3672 -> xxx.yyy.255.243:1433 SYN ******S*
May 9 09:58:25 65.160.28.196:3679 -> xxx.yyy.255.250:1433 SYN ******S*
May 9 09:58:25 65.160.28.196:3676 -> xxx.yyy.255.247:1433 SYN ******S*
May 9 09:58:25 65.160.28.196:3673 -> xxx.yyy.255.244:1433 SYN ******S*
May 9 09:58:25 65.160.28.196:3677 -> xxx.yyy.255.248:1433 SYN ******S*
May 9 09:58:25 65.160.28.196:3674 -> xxx.yyy.255.245:1433 SYN ******S*
May 9 09:58:25 65.160.28.196:3681 -> xxx.yyy.255.252:1433 SYN ******S*
May 9 09:58:25 65.160.28.196:3682 -> xxx.yyy.255.253:1433 SYN ******S*
May 9 09:58:25 65.160.28.196:3683 -> xxx.yyy.255.254:1433 SYN ******S*
71295

May 9 20:51:45 211.167.159.65:39499 -> xxx.yyy.185.226:2745 SYN ******S*
May 9 20:51:42 211.167.159.65:39502 -> xxx.yyy.185.226:5000 SYN ******S*
May 9 20:51:45 211.167.159.65:39500 -> xxx.yyy.185.226:3127 SYN ******S*
May 9 20:51:45 211.167.159.65:39501 -> xxx.yyy.185.226:6129 SYN ******S*
May 9 20:51:42 211.167.159.65:39517 -> xxx.yyy.212.250:6129 SYN ******S*
May 9 20:51:45 211.167.159.65:39525 -> xxx.yyy.212.250:5000 SYN ******S*
May 9 20:51:45 211.167.159.65:39513 -> xxx.yyy.212.250:3127 SYN ******S*
May 9 20:51:45 211.167.159.65:39485 -> xxx.yyy.212.250:2745 SYN ******S*
[...]
May 9 23:59:59 211.167.159.65:22672 -> xxx.yyy.84.202:2745 SYN ******S*
May 9 23:59:59 211.167.159.65:20408 -> xxx.yyy.203.245:2745 SYN ******S*
May 9 23:59:59 211.167.159.65:22785 -> xxx.yyy.163.72:2745 SYN ******S*
May 9 23:59:59 211.167.159.65:20733 -> xxx.yyy.92.224:2745 SYN ******S*
May 9 23:59:59 211.167.159.65:22821 -> xxx.yyy.75.167:2745 SYN ******S*
May 9 23:59:59 211.167.159.65:22893 -> xxx.yyy.134.177:2745 SYN ******S*
May 10 00:00:00 211.167.159.65:23939 -> xxx.yyy.80.130:2745 SYN ******S*
May 10 00:00:00 211.167.159.65:20688 -> xxx.yyy.11.235:2745 SYN ******S*
May 10 00:00:01 211.167.159.65:24516 -> xxx.yyy.90.61:2745 SYN ******S*
70326

May 9 07:08:46 81.48.121.160:4574 -> xxx.yyy.1.1:6129 SYN ******S*
May 9 07:08:46 81.48.121.160:4575 -> xxx.yyy.1.2:6129 SYN ******S*
May 9 07:08:45 81.48.121.160:4576 -> xxx.yyy.1.3:6129 SYN ******S*
May 9 07:08:45 81.48.121.160:4577 -> xxx.yyy.1.4:6129 SYN ******S*
May 9 07:08:48 81.48.121.160:4578 -> xxx.yyy.1.5:6129 SYN ******S*
May 9 07:08:48 81.48.121.160:4579 -> xxx.yyy.1.6:6129 SYN ******S*
May 9 07:08:48 81.48.121.160:4580 -> xxx.yyy.1.7:6129 SYN ******S*
May 9 07:08:45 81.48.121.160:4581 -> xxx.yyy.1.8:6129 SYN ******S*
[...]
May 9 07:25:43 81.48.121.160:4600 -> xxx.yyy.255.237:6129 SYN ******S*
May 9 07:25:43 81.48.121.160:4601 -> xxx.yyy.255.238:6129 SYN ******S*
May 9 07:25:43 81.48.121.160:4602 -> xxx.yyy.255.239:6129 SYN ******S*
May 9 07:25:43 81.48.121.160:4607 -> xxx.yyy.255.244:6129 SYN ******S*
May 9 07:25:43 81.48.121.160:4608 -> xxx.yyy.255.245:6129 SYN ******S*
May 9 07:25:43 81.48.121.160:4609 -> xxx.yyy.255.246:6129 SYN ******S*
May 9 07:25:44 81.48.121.160:4614 -> xxx.yyy.255.251:6129 SYN ******S*
May 9 07:25:44 81.48.121.160:4615 -> xxx.yyy.255.252:6129 SYN ******S*
May 9 07:25:44 81.48.121.160:4616 -> xxx.yyy.255.253:6129 SYN ******S*
68396

May 9 22:54:30 216.203.25.245:1791 -> xxx.yyy.1.1:1433 SYN ******S*
May 9 22:54:27 216.203.25.245:1792 -> xxx.yyy.1.2:1433 SYN ******S*
May 9 22:54:30 216.203.25.245:1793 -> xxx.yyy.1.3:1433 SYN ******S*
May 9 22:54:30 216.203.25.245:1794 -> xxx.yyy.1.4:1433 SYN ******S*
May 9 22:54:30 216.203.25.245:1795 -> xxx.yyy.1.5:1433 SYN ******S*
May 9 22:54:30 216.203.25.245:1796 -> xxx.yyy.1.6:1433 SYN ******S*
May 9 22:54:30 216.203.25.245:1797 -> xxx.yyy.1.7:1433 SYN ******S*
May 9 22:54:30 216.203.25.245:1798 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
May 9 23:25:06 216.203.25.245:2209 -> xxx.yyy.255.249:1433 SYN ******S*
May 9 23:25:06 216.203.25.245:2207 -> xxx.yyy.255.247:1433 SYN ******S*
May 9 23:25:06 216.203.25.245:2214 -> xxx.yyy.255.254:1433 SYN ******S*
May 9 23:25:06 216.203.25.245:2213 -> xxx.yyy.255.253:1433 SYN ******S*
May 9 23:25:06 216.203.25.245:2211 -> xxx.yyy.255.251:1433 SYN ******S*
May 9 23:25:06 216.203.25.245:2208 -> xxx.yyy.255.248:1433 SYN ******S*
May 9 23:25:06 216.203.25.245:2210 -> xxx.yyy.255.250:1433 SYN ******S*
May 9 23:25:06 216.203.25.245:2212 -> xxx.yyy.255.252:1433 SYN ******S*
63145

May 9 23:11:04 62.58.186.156:4903 -> xxx.yyy.1.1:8000 SYN ******S*
May 9 23:11:03 62.58.186.156:4909 -> xxx.yyy.1.2:8000 SYN ******S*
May 9 23:11:06 62.58.186.156:4921 -> xxx.yyy.1.3:8000 SYN ******S*
May 9 23:11:06 62.58.186.156:4922 -> xxx.yyy.1.4:8000 SYN ******S*
May 9 23:11:06 62.58.186.156:4924 -> xxx.yyy.1.5:8000 SYN ******S*
May 9 23:11:06 62.58.186.156:4925 -> xxx.yyy.1.6:8000 SYN ******S*
May 9 23:11:06 62.58.186.156:4926 -> xxx.yyy.1.7:8000 SYN ******S*
May 9 23:11:03 62.58.186.156:4927 -> xxx.yyy.1.8:8000 SYN ******S*
[...]
May 9 23:23:11 62.58.186.156:3572 -> xxx.yyy.255.246:8000 SYN ******S*
May 9 23:23:11 62.58.186.156:3569 -> xxx.yyy.255.243:8000 SYN ******S*
May 9 23:23:11 62.58.186.156:3578 -> xxx.yyy.255.252:8000 SYN ******S*
May 9 23:23:11 62.58.186.156:3575 -> xxx.yyy.255.249:8000 SYN ******S*
May 9 23:23:11 62.58.186.156:3579 -> xxx.yyy.255.253:8000 SYN ******S*
May 9 23:23:11 62.58.186.156:3576 -> xxx.yyy.255.250:8000 SYN ******S*
May 9 23:23:11 62.58.186.156:3580 -> xxx.yyy.255.254:8000 SYN ******S*
May 9 23:23:11 62.58.186.156:3577 -> xxx.yyy.255.251:8000 SYN ******S*
May 9 23:23:11 62.58.186.156:3574 -> xxx.yyy.255.248:8000 SYN ******S*
61571

May 9 06:40:30 213.113.46.241:2558 -> xxx.yyy.1.0:17300 SYN ******S*
May 9 06:40:30 213.113.46.241:2559 -> xxx.yyy.1.1:17300 SYN ******S*
May 9 06:40:29 213.113.46.241:2561 -> xxx.yyy.1.3:17300 SYN ******S*
May 9 06:40:29 213.113.46.241:2562 -> xxx.yyy.1.4:17300 SYN ******S*
May 9 06:40:29 213.113.46.241:2564 -> xxx.yyy.1.5:17300 SYN ******S*
May 9 06:40:29 213.113.46.241:2565 -> xxx.yyy.1.6:17300 SYN ******S*
May 9 06:40:29 213.113.46.241:2567 -> xxx.yyy.1.8:17300 SYN ******S*
May 9 06:40:31 213.113.46.241:2808 -> xxx.yyy.1.9:17300 SYN ******S*
[...]
May 9 08:29:43 213.113.46.241:1637 -> xxx.yyy.254.247:17300 SYN ******S*
May 9 08:29:43 213.113.46.241:1638 -> xxx.yyy.254.248:17300 SYN ******S*
May 9 08:29:43 213.113.46.241:1639 -> xxx.yyy.254.249:17300 SYN ******S*
May 9 08:29:43 213.113.46.241:1640 -> xxx.yyy.254.250:17300 SYN ******S*
May 9 08:29:43 213.113.46.241:1641 -> xxx.yyy.254.251:17300 SYN ******S*
May 9 08:29:43 213.113.46.241:1642 -> xxx.yyy.254.252:17300 SYN ******S*
May 9 08:29:43 213.113.46.241:1643 -> xxx.yyy.254.253:17300 SYN ******S*
May 9 08:29:43 213.113.46.241:1644 -> xxx.yyy.254.254:17300 SYN ******S*
May 9 08:29:43 213.113.46.241:1645 -> xxx.yyy.254.255:17300 SYN ******S*
43048

May 9 10:45:47 149.169.40.94:2396 -> xxx.yyy.1.1:1433 SYN ******S*
May 9 10:45:47 149.169.40.94:2397 -> xxx.yyy.1.2:1433 SYN ******S*
May 9 10:45:47 149.169.40.94:2398 -> xxx.yyy.1.3:1433 SYN ******S*
May 9 10:45:47 149.169.40.94:2399 -> xxx.yyy.1.4:1433 SYN ******S*
May 9 10:45:47 149.169.40.94:2400 -> xxx.yyy.1.5:1433 SYN ******S*
May 9 10:45:47 149.169.40.94:2401 -> xxx.yyy.1.6:1433 SYN ******S*
May 9 10:45:47 149.169.40.94:2402 -> xxx.yyy.1.7:1433 SYN ******S*
May 9 10:45:47 149.169.40.94:2403 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
May 9 10:57:28 149.169.40.94:2578 -> xxx.yyy.255.195:1433 SYN ******S*
May 9 10:57:28 149.169.40.94:2582 -> xxx.yyy.255.199:1433 SYN ******S*
May 9 10:57:28 149.169.40.94:2585 -> xxx.yyy.255.202:1433 SYN ******S*
May 9 10:57:28 149.169.40.94:2588 -> xxx.yyy.255.205:1433 SYN ******S*
May 9 10:57:28 149.169.40.94:2583 -> xxx.yyy.255.200:1433 SYN ******S*
May 9 10:57:28 149.169.40.94:2586 -> xxx.yyy.255.203:1433 SYN ******S*
May 9 10:57:28 149.169.40.94:2581 -> xxx.yyy.255.198:1433 SYN ******S*
May 9 10:57:28 149.169.40.94:2587 -> xxx.yyy.255.204:1433 SYN ******S*
May 9 10:57:28 149.169.40.94:2584 -> xxx.yyy.255.201:1433 SYN ******S*
42611

May 9 18:52:21 194.153.210.194:4018 -> xxx.yyy.1.1:445 SYN ******S*
May 9 18:52:18 194.153.210.194:4020 -> xxx.yyy.1.3:445 SYN ******S*
May 9 18:52:21 194.153.210.194:4023 -> xxx.yyy.1.6:445 SYN ******S*
May 9 18:52:21 194.153.210.194:4028 -> xxx.yyy.1.11:445 SYN ******S*
May 9 18:52:19 194.153.210.194:4030 -> xxx.yyy.1.13:445 SYN ******S*
May 9 18:52:22 194.153.210.194:4044 -> xxx.yyy.1.27:445 SYN ******S*
May 9 18:52:22 194.153.210.194:4048 -> xxx.yyy.1.31:445 SYN ******S*
May 9 18:52:19 194.153.210.194:4050 -> xxx.yyy.1.33:445 SYN ******S*
[...]
May 9 19:03:14 194.153.210.194:1495 -> xxx.yyy.255.215:445 SYN ******S*
May 9 19:03:14 194.153.210.194:1513 -> xxx.yyy.255.233:445 SYN ******S*
May 9 19:03:14 194.153.210.194:1507 -> xxx.yyy.255.227:445 SYN ******S*
May 9 19:03:14 194.153.210.194:1508 -> xxx.yyy.255.228:445 SYN ******S*
May 9 19:03:14 194.153.210.194:1505 -> xxx.yyy.255.225:445 SYN ******S*
May 9 19:03:14 194.153.210.194:1506 -> xxx.yyy.255.226:445 SYN ******S*
May 9 19:03:14 194.153.210.194:1509 -> xxx.yyy.255.229:445 SYN ******S*
May 9 19:03:14 194.153.210.194:1512 -> xxx.yyy.255.232:445 SYN ******S*
37287

May 9 10:00:11 62.233.173.106:3677 -> xxx.yyy.1.0:17300 SYN ******S*
May 9 10:00:14 62.233.173.106:3678 -> xxx.yyy.1.1:17300 SYN ******S*
May 9 10:00:14 62.233.173.106:3679 -> xxx.yyy.1.2:17300 SYN ******S*
May 9 10:00:12 62.233.173.106:3680 -> xxx.yyy.1.3:17300 SYN ******S*
May 9 10:00:12 62.233.173.106:3681 -> xxx.yyy.1.4:17300 SYN ******S*
May 9 10:00:12 62.233.173.106:3682 -> xxx.yyy.1.5:17300 SYN ******S*
May 9 10:00:12 62.233.173.106:3683 -> xxx.yyy.1.6:17300 SYN ******S*
May 9 10:00:12 62.233.173.106:3684 -> xxx.yyy.1.7:17300 SYN ******S*
[...]
May 9 11:50:47 62.233.173.106:3954 -> xxx.yyy.254.247:17300 SYN ******S*
May 9 11:50:47 62.233.173.106:3955 -> xxx.yyy.254.248:17300 SYN ******S*
May 9 11:50:47 62.233.173.106:3956 -> xxx.yyy.254.249:17300 SYN ******S*
May 9 11:50:47 62.233.173.106:3957 -> xxx.yyy.254.250:17300 SYN ******S*
May 9 11:50:47 62.233.173.106:3958 -> xxx.yyy.254.251:17300 SYN ******S*
May 9 11:50:47 62.233.173.106:3959 -> xxx.yyy.254.252:17300 SYN ******S*
May 9 11:50:49 62.233.173.106:3960 -> xxx.yyy.254.253:17300 SYN ******S*
May 9 11:50:49 62.233.173.106:3962 -> xxx.yyy.254.255:17300 SYN ******S*
May 9 11:50:49 62.233.173.106:3961 -> xxx.yyy.254.254:17300 SYN ******S*
34333

May 9 11:33:42 202.216.244.124:47700 -> xxx.yyy.1.10:443 SYN ******S*
May 9 11:33:40 202.216.244.124:47704 -> xxx.yyy.1.11:443 SYN ******S*
May 9 11:33:40 202.216.244.124:48405 -> xxx.yyy.1.14:443 SYN ******S*
May 9 11:33:40 202.216.244.124:47708 -> xxx.yyy.1.15:443 SYN ******S*
May 9 11:33:43 202.216.244.124:47711 -> xxx.yyy.1.18:443 SYN ******S*
May 9 11:33:40 202.216.244.124:47712 -> xxx.yyy.1.19:443 SYN ******S*
May 9 11:33:43 202.216.244.124:47705 -> xxx.yyy.1.12:443 SYN ******S*
May 9 11:33:40 202.216.244.124:47706 -> xxx.yyy.1.13:443 SYN ******S*
[...]
May 9 21:34:42 202.216.244.124:33762 -> xxx.yyy.255.161:443 SYN ******S*
May 9 21:34:43 202.216.244.124:33815 -> xxx.yyy.255.207:443 SYN ******S*
May 9 21:34:43 202.216.244.124:33818 -> xxx.yyy.255.210:443 SYN ******S*
May 9 21:34:43 202.216.244.124:33819 -> xxx.yyy.255.211:443 SYN ******S*
May 9 21:34:43 202.216.244.124:33822 -> xxx.yyy.255.214:443 SYN ******S*
May 9 21:34:43 202.216.244.124:33813 -> xxx.yyy.255.205:443 SYN ******S*
May 9 21:34:43 202.216.244.124:33816 -> xxx.yyy.255.208:443 SYN ******S*
May 9 21:34:43 202.216.244.124:33820 -> xxx.yyy.255.212:443 SYN ******S*
May 9 21:34:43 202.216.244.124:33821 -> xxx.yyy.255.213:443 SYN ******S*
34113

May 9 20:51:43 210.22.128.190:31184 -> xxx.yyy.131.246:2745 SYN ******S*
May 9 20:51:43 210.22.128.190:31186 -> xxx.yyy.131.246:6129 SYN ******S*
May 9 20:51:43 210.22.128.190:31187 -> xxx.yyy.131.246:5000 SYN ******S*
May 9 20:51:43 210.22.128.190:31185 -> xxx.yyy.131.246:3127 SYN ******S*
May 9 20:51:44 210.22.128.190:31640 -> xxx.yyy.188.121:2745 SYN ******S*
May 9 20:51:44 210.22.128.190:31645 -> xxx.yyy.188.121:3127 SYN ******S*
May 9 20:51:47 210.22.128.190:31646 -> xxx.yyy.188.121:6129 SYN ******S*
May 9 20:51:44 210.22.128.190:31701 -> xxx.yyy.207.201:2745 SYN ******S*
[...]
May 9 23:59:59 210.22.128.190:43240 -> xxx.yyy.255.55:2745 SYN ******S*
May 9 23:59:59 210.22.128.190:43307 -> xxx.yyy.148.58:2745 SYN ******S*
May 9 23:59:59 210.22.128.190:42228 -> xxx.yyy.197.3:2745 SYN ******S*
May 10 00:00:00 210.22.128.190:42285 -> xxx.yyy.236.177:2745 SYN ******S*
May 10 00:00:00 210.22.128.190:43399 -> xxx.yyy.196.91:2745 SYN ******S*
May 10 00:00:00 210.22.128.190:43409 -> xxx.yyy.196.91:1025 SYN ******S*
May 10 00:00:00 210.22.128.190:44128 -> xxx.yyy.149.126:2745 SYN ******S*
May 10 00:00:00 210.22.128.190:42452 -> xxx.yyy.70.88:1025 SYN ******S*
May 10 00:00:00 210.22.128.190:42447 -> xxx.yyy.70.88:2745 SYN ******S*
31097

May 9 20:42:54 61.166.6.60:51765 -> xxx.yyy.1.0:21 SYN ******S*
May 9 20:42:54 61.166.6.60:51778 -> xxx.yyy.1.13:21 SYN ******S*
May 9 20:42:54 61.166.6.60:51780 -> xxx.yyy.1.15:21 SYN ******S*
May 9 20:42:54 61.166.6.60:51779 -> xxx.yyy.1.14:21 SYN ******S*
May 9 20:42:54 61.166.6.60:51774 -> xxx.yyy.1.9:21 SYN ******S*
May 9 20:42:54 61.166.6.60:51771 -> xxx.yyy.1.6:21 SYN ******S*
May 9 20:42:54 61.166.6.60:51782 -> xxx.yyy.1.17:21 SYN ******S*
May 9 20:42:54 61.166.6.60:51783 -> xxx.yyy.1.18:21 SYN ******S*
[...]
May 9 20:53:35 61.166.6.60:58634 -> xxx.yyy.255.221:21 SYN ******S*
May 9 20:53:35 61.166.6.60:58655 -> xxx.yyy.255.242:21 SYN ******S*
May 9 20:53:35 61.166.6.60:58631 -> xxx.yyy.255.218:21 SYN ******S*
May 9 20:53:35 61.166.6.60:58653 -> xxx.yyy.255.240:21 SYN ******S*
May 9 20:53:35 61.166.6.60:58641 -> xxx.yyy.255.228:21 SYN ******S*
May 9 20:53:35 61.166.6.60:58649 -> xxx.yyy.255.236:21 SYN ******S*
May 9 20:53:35 61.166.6.60:58715 -> xxx.yyy.255.255:21 SYN ******S*
May 9 20:53:35 61.166.6.60:58709 -> xxx.yyy.255.249:21 SYN ******S*
27986

May 9 20:51:48 202.108.87.126:24020 -> xxx.yyy.144.246:2745 SYN ******S*
May 9 20:51:50 202.108.87.126:24169 -> xxx.yyy.191.200:2745 SYN ******S*
May 9 20:51:50 202.108.87.126:24170 -> xxx.yyy.191.200:3127 SYN ******S*
May 9 20:51:50 202.108.87.126:24465 -> xxx.yyy.160.84:2745 SYN ******S*
May 9 20:51:50 202.108.87.126:24239 -> xxx.yyy.177.72:2745 SYN ******S*
May 9 20:51:51 202.108.87.126:24286 -> xxx.yyy.93.155:2745 SYN ******S*
May 9 20:51:53 202.108.87.126:23753 -> xxx.yyy.93.47:2745 SYN ******S*
May 9 20:51:54 202.108.87.126:24881 -> xxx.yyy.198.204:2745 SYN ******S*
[...]
May 9 23:59:52 202.108.87.126:30614 -> xxx.yyy.131.118:2745 SYN ******S*
May 9 23:59:52 202.108.87.126:30615 -> xxx.yyy.131.118:1025 SYN ******S*
May 9 23:59:53 202.108.87.126:30239 -> xxx.yyy.177.28:2745 SYN ******S*
May 9 23:59:53 202.108.87.126:30963 -> xxx.yyy.202.249:2745 SYN ******S*
May 9 23:59:53 202.108.87.126:30277 -> xxx.yyy.193.113:2745 SYN ******S*
May 9 23:59:56 202.108.87.126:30963 -> xxx.yyy.202.249:2745 SYN ******S*
May 9 23:59:58 202.108.87.126:30614 -> xxx.yyy.131.118:2745 SYN ******S*
May 9 23:59:58 202.108.87.126:30615 -> xxx.yyy.131.118:1025 SYN ******S*
May 10 00:00:00 202.108.87.126:30855 -> xxx.yyy.16.181:2745 SYN ******S*
23951

May 9 00:06:59 211.90.88.43:31591 -> xxx.yyy.1.69:2745 SYN ******S*
May 9 00:07:00 211.90.88.43:31829 -> xxx.yyy.190.247:2745 SYN ******S*
May 9 00:07:00 211.90.88.43:31830 -> xxx.yyy.190.247:1025 SYN ******S*
May 9 00:07:00 211.90.88.43:31831 -> xxx.yyy.190.247:3127 SYN ******S*
May 9 00:07:00 211.90.88.43:31832 -> xxx.yyy.190.247:6129 SYN ******S*
May 9 00:07:00 211.90.88.43:31833 -> xxx.yyy.190.247:5000 SYN ******S*
May 9 00:07:06 211.90.88.43:31591 -> xxx.yyy.1.69:2745 SYN ******S*
May 9 00:07:06 211.90.88.43:31831 -> xxx.yyy.190.247:3127 SYN ******S*
[...]
May 9 23:59:55 211.90.88.43:31200 -> xxx.yyy.134.211:2745 SYN ******S*
May 9 23:59:55 211.90.88.43:56107 -> xxx.yyy.171.86:2745 SYN ******S*
May 9 23:59:56 211.90.88.43:25666 -> xxx.yyy.105.8:2745 SYN ******S*
May 9 23:59:58 211.90.88.43:32507 -> xxx.yyy.83.253:2745 SYN ******S*
May 9 23:59:59 211.90.88.43:25666 -> xxx.yyy.105.8:2745 SYN ******S*
May 9 23:59:59 211.90.88.43:31945 -> xxx.yyy.150.109:2745 SYN ******S*
May 9 23:59:59 211.90.88.43:32777 -> xxx.yyy.83.125:2745 SYN ******S*
May 9 23:59:59 211.90.88.43:32778 -> xxx.yyy.83.125:1025 SYN ******S*
May 10 00:00:00 211.90.88.43:30872 -> xxx.yyy.145.29:2745 SYN ******S*
23192

May 9 20:51:48 218.104.1.6:58782 -> xxx.yyy.161.202:2745 SYN ******S*
May 9 20:51:49 218.104.1.6:58708 -> xxx.yyy.67.198:2745 SYN ******S*
May 9 20:51:51 218.104.1.6:58609 -> xxx.yyy.129.181:2745 SYN ******S*
May 9 20:51:51 218.104.1.6:2288 -> xxx.yyy.223.150:2745 SYN ******S*
May 9 20:51:51 218.104.1.6:3154 -> xxx.yyy.91.185:2745 SYN ******S*
May 9 20:51:51 218.104.1.6:3156 -> xxx.yyy.91.185:3127 SYN ******S*
May 9 20:51:51 218.104.1.6:3157 -> xxx.yyy.91.185:6129 SYN ******S*
May 9 20:51:52 218.104.1.6:58699 -> xxx.yyy.85.195:2745 SYN ******S*
[...]
May 9 23:59:54 218.104.1.6:10802 -> xxx.yyy.165.32:2745 SYN ******S*
May 9 23:59:55 218.104.1.6:11154 -> xxx.yyy.207.112:2745 SYN ******S*
May 9 23:59:56 218.104.1.6:34482 -> xxx.yyy.157.94:2745 SYN ******S*
May 9 23:59:57 218.104.1.6:31489 -> xxx.yyy.90.178:2745 SYN ******S*
May 9 23:59:58 218.104.1.6:13547 -> xxx.yyy.180.12:2745 SYN ******S*
May 9 23:59:58 218.104.1.6:11154 -> xxx.yyy.207.112:2745 SYN ******S*
May 9 23:59:59 218.104.1.6:26477 -> xxx.yyy.181.177:2745 SYN ******S*
May 9 23:59:59 218.104.1.6:60024 -> xxx.yyy.86.160:2745 SYN ******S*
21884

[...]
21710

May 9 20:51:44 218.108.72.14:57289 -> xxx.yyy.217.145:2745 SYN ******S*
May 9 20:51:48 218.108.72.14:57323 -> xxx.yyy.17.172:2745 SYN ******S*
May 9 20:51:48 218.108.72.14:57324 -> xxx.yyy.17.172:3127 SYN ******S*
May 9 20:51:45 218.108.72.14:57325 -> xxx.yyy.17.172:6129 SYN ******S*
May 9 20:51:48 218.108.72.14:57326 -> xxx.yyy.17.172:5000 SYN ******S*
May 9 20:51:46 218.108.72.14:57421 -> xxx.yyy.248.242:2745 SYN ******S*
May 9 20:51:46 218.108.72.14:57591 -> xxx.yyy.163.211:2745 SYN ******S*
May 9 20:51:48 218.108.72.14:57728 -> xxx.yyy.140.237:2745 SYN ******S*
[...]
May 9 23:59:50 218.108.72.14:64989 -> xxx.yyy.212.244:2745 SYN ******S*
May 9 23:59:51 218.108.72.14:65078 -> xxx.yyy.240.169:2745 SYN ******S*
May 9 23:59:54 218.108.72.14:1356 -> xxx.yyy.152.62:2745 SYN ******S*
May 9 23:59:54 218.108.72.14:1357 -> xxx.yyy.152.62:1025 SYN ******S*
May 9 23:59:55 218.108.72.14:1476 -> xxx.yyy.163.16:2745 SYN ******S*
May 9 23:59:57 218.108.72.14:1357 -> xxx.yyy.152.62:1025 SYN ******S*
May 9 23:59:57 218.108.72.14:1356 -> xxx.yyy.152.62:2745 SYN ******S*
May 9 23:59:58 218.108.72.14:1597 -> xxx.yyy.175.204:2745 SYN ******S*
21660

May 9 20:51:45 202.169.224.164:1154 -> xxx.yyy.67.119:2745 SYN ******S*
May 9 20:51:45 202.169.224.164:1156 -> xxx.yyy.67.119:3127 SYN ******S*
May 9 20:51:45 202.169.224.164:1159 -> xxx.yyy.67.119:5000 SYN ******S*
May 9 20:51:45 202.169.224.164:1157 -> xxx.yyy.67.119:6129 SYN ******S*
May 9 20:51:45 202.169.224.164:1199 -> xxx.yyy.177.26:6129 SYN ******S*
May 9 20:51:45 202.169.224.164:1201 -> xxx.yyy.177.26:5000 SYN ******S*
May 9 20:51:45 202.169.224.164:1196 -> xxx.yyy.177.26:2745 SYN ******S*
May 9 20:51:45 202.169.224.164:1198 -> xxx.yyy.177.26:3127 SYN ******S*
[...]
May 9 23:58:29 202.169.224.164:1114 -> xxx.yyy.234.185:2745 SYN ******S*
May 9 23:58:32 202.169.224.164:1925 -> xxx.yyy.69.174:2745 SYN ******S*
May 9 23:58:32 202.169.224.164:1075 -> xxx.yyy.146.161:1025 SYN ******S*
May 9 23:58:32 202.169.224.164:1073 -> xxx.yyy.146.161:2745 SYN ******S*
May 9 23:58:34 202.169.224.164:1209 -> xxx.yyy.214.109:2745 SYN ******S*
May 9 23:58:35 202.169.224.164:1114 -> xxx.yyy.234.185:2745 SYN ******S*
May 9 23:58:37 202.169.224.164:1209 -> xxx.yyy.214.109:2745 SYN ******S*
May 9 23:58:43 202.169.224.164:1209 -> xxx.yyy.214.109:2745 SYN ******S*
May 9 23:58:47 202.169.224.164:1368 -> xxx.yyy.79.130:2745 SYN ******S*
21490

May 9 20:51:46 61.49.187.237:59356 -> xxx.yyy.203.223:2745 SYN ******S*
May 9 20:51:46 61.49.187.237:59358 -> xxx.yyy.203.223:3127 SYN ******S*
May 9 20:51:46 61.49.187.237:59359 -> xxx.yyy.203.223:6129 SYN ******S*
May 9 20:51:46 61.49.187.237:59361 -> xxx.yyy.203.223:5000 SYN ******S*
May 9 20:51:44 61.49.187.237:59389 -> xxx.yyy.220.199:2745 SYN ******S*
May 9 20:51:43 61.49.187.237:59391 -> xxx.yyy.220.199:3127 SYN ******S*
May 9 20:51:44 61.49.187.237:59392 -> xxx.yyy.220.199:6129 SYN ******S*
May 9 20:51:43 61.49.187.237:59394 -> xxx.yyy.220.199:5000 SYN ******S*
[...]
May 9 23:59:47 61.49.187.237:57718 -> xxx.yyy.183.253:5000 SYN ******S*
May 9 23:59:48 61.49.187.237:57744 -> xxx.yyy.84.129:2745 SYN ******S*
May 9 23:59:49 61.49.187.237:58121 -> xxx.yyy.137.212:2745 SYN ******S*
May 9 23:59:49 61.49.187.237:57799 -> xxx.yyy.159.24:2745 SYN ******S*
May 9 23:59:49 61.49.187.237:57830 -> xxx.yyy.130.221:2745 SYN ******S*
May 9 23:59:52 61.49.187.237:58148 -> xxx.yyy.68.77:2745 SYN ******S*
May 9 23:59:55 61.49.187.237:58121 -> xxx.yyy.137.212:2745 SYN ******S*
May 9 23:59:56 61.49.187.237:58067 -> xxx.yyy.240.119:2745 SYN ******S*
21425

May 9 20:51:42 199.33.79.4:63127 -> xxx.yyy.187.235:2745 SYN ******S*
May 9 20:51:42 199.33.79.4:57848 -> xxx.yyy.187.235:3127 SYN ******S*
May 9 20:51:44 199.33.79.4:20541 -> xxx.yyy.187.235:6129 SYN ******S*
May 9 20:51:44 199.33.79.4:33255 -> xxx.yyy.187.235:139 SYN ******S*
May 9 20:51:44 199.33.79.4:45283 -> xxx.yyy.187.235:5000 SYN ******S*
May 9 20:51:44 199.33.79.4:14268 -> xxx.yyy.160.65:2745 SYN ******S*
May 9 20:51:44 199.33.79.4:34898 -> xxx.yyy.160.65:3127 SYN ******S*
May 9 20:51:44 199.33.79.4:24945 -> xxx.yyy.160.65:6129 SYN ******S*
[...]
May 9 23:59:53 199.33.79.4:13985 -> xxx.yyy.15.193:2745 SYN ******S*
May 9 23:59:54 199.33.79.4:62690 -> xxx.yyy.167.148:2745 SYN ******S*
May 9 23:59:55 199.33.79.4:53885 -> xxx.yyy.195.183:2745 SYN ******S*
May 9 23:59:59 199.33.79.4:52337 -> xxx.yyy.153.24:2745 SYN ******S*
May 9 23:59:56 199.33.79.4:13985 -> xxx.yyy.15.193:2745 SYN ******S*
May 9 23:59:57 199.33.79.4:62690 -> xxx.yyy.167.148:2745 SYN ******S*
May 9 23:59:58 199.33.79.4:53885 -> xxx.yyy.195.183:2745 SYN ******S*
May 9 23:59:58 199.33.79.4:48853 -> xxx.yyy.219.156:2745 SYN ******S*
20837

--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly@xxxxxxx phone: (319) 273-5850 fax: (319) 273-7373
_______________________________________________
Intrusions mailing list
Intrusions@xxxxxxxxxxxxxx
http://www.dshield.org/mailman/listinfo/intrusions
<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  Re: LOGS: GIAC GCIA Version 3.4 Practical Detect JamesStevenson: 00030, Johnny Wong
Next by Date:  [LOGS] Summary of large-scale portscanning detects: 00030, Ken . Connelly
Previous by Thread:  [LOGS] Summary of large-scale portscanning detectsi: 00030, Ken . Connelly
Next by Thread:  [LOGS] Summary of large-scale portscanning detects: 00030, Ken . Connelly
Indexes:  [Date] [Thread] [Top] [All Lists]

Google Custom Search
News | FAQ | advertise