|
[LOGS] Summary of large-scale portscanning detects: msg#00049security.intrusions
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0500. May 15 15:10:34 67.21.232.34:22002 -> xxx.yyy.1.0:3127 SYN ******S* May 15 15:10:34 67.21.232.34:22002 -> xxx.yyy.1.0:1080 SYN ******S* May 15 15:10:34 67.21.232.34:22002 -> xxx.yyy.1.0:10080 SYN ******S* May 15 15:10:34 67.21.232.34:22002 -> xxx.yyy.1.0:3128 SYN ******S* May 15 15:10:34 67.21.232.34:22002 -> xxx.yyy.1.1:3127 SYN ******S* May 15 15:10:34 67.21.232.34:22002 -> xxx.yyy.1.1:1080 SYN ******S* May 15 15:10:34 67.21.232.34:22002 -> xxx.yyy.1.1:10080 SYN ******S* May 15 15:10:34 67.21.232.34:22002 -> xxx.yyy.1.1:3128 SYN ******S* [...] May 15 22:30:31 67.21.232.34:22002 -> xxx.yyy.255.254:3127 SYN ******S* May 15 22:30:31 67.21.232.34:22002 -> xxx.yyy.255.254:1080 SYN ******S* May 15 22:30:31 67.21.232.34:22002 -> xxx.yyy.255.254:10080 SYN ******S* May 15 22:30:31 67.21.232.34:22002 -> xxx.yyy.255.254:3128 SYN ******S* May 15 22:30:31 67.21.232.34:22002 -> xxx.yyy.255.255:3127 SYN ******S* May 15 22:30:32 67.21.232.34:22002 -> xxx.yyy.255.255:1080 SYN ******S* May 15 22:30:32 67.21.232.34:22002 -> xxx.yyy.255.255:10080 SYN ******S* May 15 22:30:32 67.21.232.34:22002 -> xxx.yyy.255.255:3128 SYN ******S* 179497 May 15 00:00:04 64.5.49.251:3847 -> xxx.yyy.153.19:2745 SYN ******S* May 15 00:00:06 64.5.49.251:3900 -> xxx.yyy.217.30:2745 SYN ******S* May 15 00:00:08 64.5.49.251:3965 -> xxx.yyy.192.75:2745 SYN ******S* May 15 00:00:05 64.5.49.251:3814 -> xxx.yyy.255.166:2745 SYN ******S* May 15 00:00:05 64.5.49.251:3832 -> xxx.yyy.234.11:2745 SYN ******S* May 15 00:00:06 64.5.49.251:3850 -> xxx.yyy.240.52:2745 SYN ******S* May 15 00:00:06 64.5.49.251:3854 -> xxx.yyy.240.52:1025 SYN ******S* May 15 00:00:08 64.5.49.251:4240 -> xxx.yyy.176.214:2745 SYN ******S* [...] May 15 23:59:55 64.5.49.251:1125 -> xxx.yyy.194.252:1025 SYN ******S* May 15 23:59:55 64.5.49.251:1126 -> xxx.yyy.194.252:445 SYN ******S* May 15 23:59:55 64.5.49.251:1119 -> xxx.yyy.194.252:2745 SYN ******S* May 15 23:59:55 64.5.49.251:1128 -> xxx.yyy.194.252:6129 SYN ******S* May 15 23:59:56 64.5.49.251:1191 -> xxx.yyy.239.141:2745 SYN ******S* May 15 23:59:57 64.5.49.251:1508 -> xxx.yyy.156.222:2745 SYN ******S* May 15 23:59:57 64.5.49.251:1254 -> xxx.yyy.231.255:2745 SYN ******S* May 16 00:00:00 64.5.49.251:1798 -> xxx.yyy.211.193:2745 SYN ******S* May 16 00:00:00 64.5.49.251:1353 -> xxx.yyy.77.250:2745 SYN ******S* 150354 May 15 07:37:23 220.65.55.71:4863 -> xxx.yyy.1.8:443 SYN ******S* May 15 07:37:23 220.65.55.71:4862 -> xxx.yyy.1.7:443 SYN ******S* May 15 07:37:20 220.65.55.71:4855 -> xxx.yyy.1.0:443 SYN ******S* May 15 07:37:20 220.65.55.71:4856 -> xxx.yyy.1.1:443 SYN ******S* May 15 07:37:23 220.65.55.71:4860 -> xxx.yyy.1.5:443 SYN ******S* May 15 07:37:20 220.65.55.71:4857 -> xxx.yyy.1.2:443 SYN ******S* May 15 07:37:23 220.65.55.71:4859 -> xxx.yyy.1.4:443 SYN ******S* May 15 07:37:23 220.65.55.71:4861 -> xxx.yyy.1.6:443 SYN ******S* [...] May 15 08:19:21 220.65.55.71:2515 -> xxx.yyy.255.231:443 SYN ******S* May 15 08:19:21 220.65.55.71:2474 -> xxx.yyy.255.190:443 SYN ******S* May 15 08:19:21 220.65.55.71:2479 -> xxx.yyy.255.195:443 SYN ******S* May 15 08:19:21 220.65.55.71:2512 -> xxx.yyy.255.228:443 SYN ******S* May 15 08:19:21 220.65.55.71:2531 -> xxx.yyy.255.247:443 SYN ******S* May 15 08:19:21 220.65.55.71:2537 -> xxx.yyy.255.253:443 SYN ******S* May 15 08:19:21 220.65.55.71:2524 -> xxx.yyy.255.240:443 SYN ******S* May 15 08:19:21 220.65.55.71:2475 -> xxx.yyy.255.191:443 SYN ******S* May 15 08:19:21 220.65.55.71:2466 -> xxx.yyy.255.182:443 SYN ******S* 79247 May 15 00:00:14 213.213.155.135:3913 -> xxx.yyy.193.10:2745 SYN ******S* May 15 00:00:12 213.213.155.135:4003 -> xxx.yyy.222.117:2745 SYN ******S* May 15 00:00:12 213.213.155.135:4007 -> xxx.yyy.222.117:1025 SYN ******S* May 15 00:00:12 213.213.155.135:4008 -> xxx.yyy.222.117:445 SYN ******S* May 15 00:00:11 213.213.155.135:3861 -> xxx.yyy.170.157:1025 SYN ******S* May 15 00:00:11 213.213.155.135:3856 -> xxx.yyy.170.157:2745 SYN ******S* May 15 00:00:15 213.213.155.135:4139 -> xxx.yyy.70.176:2745 SYN ******S* May 15 00:00:18 213.213.155.135:4007 -> xxx.yyy.222.117:1025 SYN ******S* [...] May 15 13:26:36 213.213.155.135:3419 -> xxx.yyy.93.95:2745 SYN ******S* May 15 13:26:36 213.213.155.135:3423 -> xxx.yyy.93.95:1025 SYN ******S* May 15 13:26:36 213.213.155.135:3554 -> xxx.yyy.213.34:2745 SYN ******S* May 15 13:26:37 213.213.155.135:3579 -> xxx.yyy.203.233:2745 SYN ******S* May 15 13:26:37 213.213.155.135:3584 -> xxx.yyy.203.233:1025 SYN ******S* May 15 13:26:38 213.213.155.135:3458 -> xxx.yyy.11.12:2745 SYN ******S* May 15 13:26:38 213.213.155.135:3460 -> xxx.yyy.11.12:1025 SYN ******S* May 15 13:26:40 213.213.155.135:3783 -> xxx.yyy.195.52:2745 SYN ******S* May 15 13:26:42 213.213.155.135:3554 -> xxx.yyy.213.34:2745 SYN ******S* 77943 May 15 18:22:44 62.97.90.73:1943 -> xxx.yyy.1.1:445 SYN ******S* May 15 18:22:44 62.97.90.73:1944 -> xxx.yyy.1.2:445 SYN ******S* May 15 18:22:44 62.97.90.73:1945 -> xxx.yyy.1.3:445 SYN ******S* May 15 18:22:44 62.97.90.73:1946 -> xxx.yyy.1.4:445 SYN ******S* May 15 18:22:44 62.97.90.73:1947 -> xxx.yyy.1.5:445 SYN ******S* May 15 18:22:44 62.97.90.73:1948 -> xxx.yyy.1.6:445 SYN ******S* May 15 18:22:42 62.97.90.73:1949 -> xxx.yyy.1.7:445 SYN ******S* May 15 18:22:42 62.97.90.73:1950 -> xxx.yyy.1.8:445 SYN ******S* [...] May 15 18:33:45 62.97.90.73:2870 -> xxx.yyy.255.211:445 SYN ******S* May 15 18:33:45 62.97.90.73:2872 -> xxx.yyy.255.213:445 SYN ******S* May 15 18:33:45 62.97.90.73:2876 -> xxx.yyy.255.217:445 SYN ******S* May 15 18:33:45 62.97.90.73:2873 -> xxx.yyy.255.214:445 SYN ******S* May 15 18:33:45 62.97.90.73:2877 -> xxx.yyy.255.218:445 SYN ******S* May 15 18:33:45 62.97.90.73:2874 -> xxx.yyy.255.215:445 SYN ******S* May 15 18:33:45 62.97.90.73:2878 -> xxx.yyy.255.219:445 SYN ******S* May 15 18:33:45 62.97.90.73:2875 -> xxx.yyy.255.216:445 SYN ******S* May 15 18:33:46 62.97.90.73:2882 -> xxx.yyy.255.223:445 SYN ******S* 74782 May 15 14:39:09 160.85.172.23:2118 -> xxx.yyy.1.1:8000 SYN ******S* May 15 14:39:09 160.85.172.23:2119 -> xxx.yyy.1.2:8000 SYN ******S* May 15 14:39:11 160.85.172.23:2120 -> xxx.yyy.1.3:8000 SYN ******S* May 15 14:39:11 160.85.172.23:2121 -> xxx.yyy.1.4:8000 SYN ******S* May 15 14:39:11 160.85.172.23:2122 -> xxx.yyy.1.5:8000 SYN ******S* May 15 14:39:11 160.85.172.23:2123 -> xxx.yyy.1.6:8000 SYN ******S* May 15 14:39:08 160.85.172.23:2124 -> xxx.yyy.1.7:8000 SYN ******S* May 15 14:39:11 160.85.172.23:2125 -> xxx.yyy.1.8:8000 SYN ******S* [...] May 15 14:50:06 160.85.172.23:4964 -> xxx.yyy.255.244:8000 SYN ******S* May 15 14:50:06 160.85.172.23:4966 -> xxx.yyy.255.246:8000 SYN ******S* May 15 14:50:06 160.85.172.23:4967 -> xxx.yyy.255.247:8000 SYN ******S* May 15 14:50:06 160.85.172.23:4968 -> xxx.yyy.255.248:8000 SYN ******S* May 15 14:50:06 160.85.172.23:4969 -> xxx.yyy.255.249:8000 SYN ******S* May 15 14:50:06 160.85.172.23:4970 -> xxx.yyy.255.250:8000 SYN ******S* May 15 14:50:06 160.85.172.23:4971 -> xxx.yyy.255.251:8000 SYN ******S* May 15 14:50:06 160.85.172.23:4972 -> xxx.yyy.255.252:8000 SYN ******S* May 15 14:50:06 160.85.172.23:4974 -> xxx.yyy.255.254:8000 SYN ******S* 73109 May 15 08:54:55 131.155.184.26:2379 -> xxx.yyy.1.1:4899 SYN ******S* May 15 08:54:55 131.155.184.26:2380 -> xxx.yyy.1.2:4899 SYN ******S* May 15 08:54:56 131.155.184.26:2381 -> xxx.yyy.1.3:4899 SYN ******S* May 15 08:54:56 131.155.184.26:2382 -> xxx.yyy.1.4:4899 SYN ******S* May 15 08:54:56 131.155.184.26:2383 -> xxx.yyy.1.5:4899 SYN ******S* May 15 08:54:54 131.155.184.26:2384 -> xxx.yyy.1.6:4899 SYN ******S* May 15 08:54:57 131.155.184.26:2385 -> xxx.yyy.1.7:4899 SYN ******S* May 15 08:54:57 131.155.184.26:2386 -> xxx.yyy.1.8:4899 SYN ******S* [...] May 15 09:05:49 131.155.184.26:1346 -> xxx.yyy.255.245:4899 SYN ******S* May 15 09:05:49 131.155.184.26:1343 -> xxx.yyy.255.242:4899 SYN ******S* May 15 09:05:49 131.155.184.26:1350 -> xxx.yyy.255.249:4899 SYN ******S* May 15 09:05:49 131.155.184.26:1347 -> xxx.yyy.255.246:4899 SYN ******S* May 15 09:05:49 131.155.184.26:1344 -> xxx.yyy.255.243:4899 SYN ******S* May 15 09:05:49 131.155.184.26:1348 -> xxx.yyy.255.247:4899 SYN ******S* May 15 09:05:49 131.155.184.26:1342 -> xxx.yyy.255.241:4899 SYN ******S* May 15 09:05:49 131.155.184.26:1349 -> xxx.yyy.255.248:4899 SYN ******S* 73014 May 15 17:48:35 217.57.226.156:4227 -> xxx.yyy.1.1:139 SYN ******S* May 15 17:48:35 217.57.226.156:4228 -> xxx.yyy.1.2:139 SYN ******S* May 15 17:48:35 217.57.226.156:4229 -> xxx.yyy.1.3:139 SYN ******S* May 15 17:48:32 217.57.226.156:4230 -> xxx.yyy.1.4:139 SYN ******S* May 15 17:48:35 217.57.226.156:4231 -> xxx.yyy.1.5:139 SYN ******S* May 15 17:48:36 217.57.226.156:4232 -> xxx.yyy.1.6:139 SYN ******S* May 15 17:48:35 217.57.226.156:4233 -> xxx.yyy.1.7:139 SYN ******S* May 15 17:48:35 217.57.226.156:4234 -> xxx.yyy.1.8:139 SYN ******S* [...] May 15 17:59:32 217.57.226.156:3213 -> xxx.yyy.255.245:139 SYN ******S* May 15 17:59:32 217.57.226.156:3217 -> xxx.yyy.255.249:139 SYN ******S* May 15 17:59:32 217.57.226.156:3214 -> xxx.yyy.255.246:139 SYN ******S* May 15 17:59:32 217.57.226.156:3211 -> xxx.yyy.255.243:139 SYN ******S* May 15 17:59:32 217.57.226.156:3218 -> xxx.yyy.255.250:139 SYN ******S* May 15 17:59:32 217.57.226.156:3215 -> xxx.yyy.255.247:139 SYN ******S* May 15 17:59:32 217.57.226.156:3212 -> xxx.yyy.255.244:139 SYN ******S* May 15 17:59:32 217.57.226.156:3222 -> xxx.yyy.255.254:139 SYN ******S* May 15 17:59:32 217.57.226.156:3221 -> xxx.yyy.255.253:139 SYN ******S* 72954 May 15 16:03:53 80.191.163.12:1568 -> xxx.yyy.1.1:6129 SYN ******S* May 15 16:03:53 80.191.163.12:1569 -> xxx.yyy.1.2:6129 SYN ******S* May 15 16:03:54 80.191.163.12:1570 -> xxx.yyy.1.3:6129 SYN ******S* May 15 16:03:54 80.191.163.12:1571 -> xxx.yyy.1.4:6129 SYN ******S* May 15 16:03:54 80.191.163.12:1572 -> xxx.yyy.1.5:6129 SYN ******S* May 15 16:03:54 80.191.163.12:1573 -> xxx.yyy.1.6:6129 SYN ******S* May 15 16:03:54 80.191.163.12:1574 -> xxx.yyy.1.7:6129 SYN ******S* May 15 16:03:54 80.191.163.12:1575 -> xxx.yyy.1.8:6129 SYN ******S* [...] May 15 16:14:49 80.191.163.12:4201 -> xxx.yyy.255.247:6129 SYN ******S* May 15 16:14:49 80.191.163.12:4198 -> xxx.yyy.255.244:6129 SYN ******S* May 15 16:14:49 80.191.163.12:4195 -> xxx.yyy.255.241:6129 SYN ******S* May 15 16:14:49 80.191.163.12:4208 -> xxx.yyy.255.254:6129 SYN ******S* May 15 16:14:49 80.191.163.12:4205 -> xxx.yyy.255.251:6129 SYN ******S* May 15 16:14:49 80.191.163.12:4206 -> xxx.yyy.255.252:6129 SYN ******S* May 15 16:14:49 80.191.163.12:4203 -> xxx.yyy.255.249:6129 SYN ******S* May 15 16:14:49 80.191.163.12:4207 -> xxx.yyy.255.253:6129 SYN ******S* May 15 16:14:49 80.191.163.12:4204 -> xxx.yyy.255.250:6129 SYN ******S* 72431 May 15 02:51:01 61.35.191.42:1854 -> xxx.yyy.1.1:6129 SYN ******S* May 15 02:51:01 61.35.191.42:1855 -> xxx.yyy.1.2:6129 SYN ******S* May 15 02:51:02 61.35.191.42:1856 -> xxx.yyy.1.3:6129 SYN ******S* May 15 02:51:02 61.35.191.42:1857 -> xxx.yyy.1.4:6129 SYN ******S* May 15 02:51:02 61.35.191.42:1858 -> xxx.yyy.1.5:6129 SYN ******S* May 15 02:50:59 61.35.191.42:1859 -> xxx.yyy.1.6:6129 SYN ******S* May 15 02:50:59 61.35.191.42:1860 -> xxx.yyy.1.7:6129 SYN ******S* May 15 02:51:02 61.35.191.42:1861 -> xxx.yyy.1.8:6129 SYN ******S* [...] May 15 03:04:07 61.35.191.42:3699 -> xxx.yyy.255.247:6129 SYN ******S* May 15 03:04:07 61.35.191.42:3700 -> xxx.yyy.255.248:6129 SYN ******S* May 15 03:04:07 61.35.191.42:3696 -> xxx.yyy.255.244:6129 SYN ******S* May 15 03:04:07 61.35.191.42:3706 -> xxx.yyy.255.254:6129 SYN ******S* May 15 03:04:07 61.35.191.42:3703 -> xxx.yyy.255.251:6129 SYN ******S* May 15 03:04:07 61.35.191.42:3704 -> xxx.yyy.255.252:6129 SYN ******S* May 15 03:04:07 61.35.191.42:3702 -> xxx.yyy.255.250:6129 SYN ******S* May 15 03:04:07 61.35.191.42:3705 -> xxx.yyy.255.253:6129 SYN ******S* 71927 May 15 11:02:49 212.150.41.17:1421 -> xxx.yyy.1.1:20168 SYN ******S* May 15 11:02:47 212.150.41.17:1423 -> xxx.yyy.1.3:20168 SYN ******S* May 15 11:02:50 212.150.41.17:1424 -> xxx.yyy.1.4:20168 SYN ******S* May 15 11:02:49 212.150.41.17:1422 -> xxx.yyy.1.2:20168 SYN ******S* May 15 11:02:50 212.150.41.17:1425 -> xxx.yyy.1.5:20168 SYN ******S* May 15 11:02:50 212.150.41.17:1427 -> xxx.yyy.1.7:20168 SYN ******S* May 15 11:02:50 212.150.41.17:1428 -> xxx.yyy.1.8:20168 SYN ******S* May 15 11:02:50 212.150.41.17:1426 -> xxx.yyy.1.6:20168 SYN ******S* [...] May 15 11:14:30 212.150.41.17:4153 -> xxx.yyy.255.164:20168 SYN ******S* May 15 11:14:30 212.150.41.17:4154 -> xxx.yyy.255.165:20168 SYN ******S* May 15 11:14:30 212.150.41.17:4156 -> xxx.yyy.255.167:20168 SYN ******S* May 15 11:14:30 212.150.41.17:4158 -> xxx.yyy.255.169:20168 SYN ******S* May 15 11:14:30 212.150.41.17:4160 -> xxx.yyy.255.171:20168 SYN ******S* May 15 11:14:30 212.150.41.17:4157 -> xxx.yyy.255.168:20168 SYN ******S* May 15 11:14:30 212.150.41.17:4163 -> xxx.yyy.255.174:20168 SYN ******S* May 15 11:14:30 212.150.41.17:4162 -> xxx.yyy.255.173:20168 SYN ******S* 71731 May 15 20:38:54 64.109.61.3:3612 -> xxx.yyy.1.1:443 SYN ******S* May 15 20:38:54 64.109.61.3:3613 -> xxx.yyy.1.2:443 SYN ******S* May 15 20:38:56 64.109.61.3:3614 -> xxx.yyy.1.3:443 SYN ******S* May 15 20:38:56 64.109.61.3:3615 -> xxx.yyy.1.4:443 SYN ******S* May 15 20:38:56 64.109.61.3:3616 -> xxx.yyy.1.5:443 SYN ******S* May 15 20:38:56 64.109.61.3:3617 -> xxx.yyy.1.6:443 SYN ******S* May 15 20:38:56 64.109.61.3:3618 -> xxx.yyy.1.7:443 SYN ******S* May 15 20:38:53 64.109.61.3:3619 -> xxx.yyy.1.8:443 SYN ******S* [...] May 15 20:50:35 64.109.61.3:4432 -> xxx.yyy.255.244:443 SYN ******S* May 15 20:50:35 64.109.61.3:4433 -> xxx.yyy.255.245:443 SYN ******S* May 15 20:50:35 64.109.61.3:4434 -> xxx.yyy.255.246:443 SYN ******S* May 15 20:50:35 64.109.61.3:4435 -> xxx.yyy.255.247:443 SYN ******S* May 15 20:50:35 64.109.61.3:4436 -> xxx.yyy.255.248:443 SYN ******S* May 15 20:50:35 64.109.61.3:4439 -> xxx.yyy.255.251:443 SYN ******S* May 15 20:50:35 64.109.61.3:4440 -> xxx.yyy.255.252:443 SYN ******S* May 15 20:50:35 64.109.61.3:4441 -> xxx.yyy.255.253:443 SYN ******S* May 15 20:50:35 64.109.61.3:4442 -> xxx.yyy.255.254:443 SYN ******S* 71096 May 15 00:00:03 68.186.232.40:2771 -> xxx.yyy.237.60:2745 SYN ******S* May 15 00:00:03 68.186.232.40:2781 -> xxx.yyy.83.153:1025 SYN ******S* May 15 00:00:03 68.186.232.40:2779 -> xxx.yyy.83.153:2745 SYN ******S* May 15 00:00:04 68.186.232.40:2794 -> xxx.yyy.218.170:2745 SYN ******S* May 15 00:00:04 68.186.232.40:2916 -> xxx.yyy.168.212:2745 SYN ******S* May 15 00:00:05 68.186.232.40:2888 -> xxx.yyy.235.85:2745 SYN ******S* May 15 00:00:05 68.186.232.40:2924 -> xxx.yyy.137.255:2745 SYN ******S* May 15 00:00:06 68.186.232.40:2895 -> xxx.yyy.252.26:2745 SYN ******S* [...] May 15 11:02:28 68.186.232.40:3791 -> xxx.yyy.17.244:2745 SYN ******S* May 15 11:02:32 68.186.232.40:3805 -> xxx.yyy.175.55:2745 SYN ******S* May 15 11:02:33 68.186.232.40:3732 -> xxx.yyy.231.222:2745 SYN ******S* May 15 11:02:34 68.186.232.40:3791 -> xxx.yyy.17.244:2745 SYN ******S* May 15 11:02:35 68.186.232.40:3739 -> xxx.yyy.222.207:2745 SYN ******S* May 15 11:02:38 68.186.232.40:3809 -> xxx.yyy.210.253:2745 SYN ******S* May 15 11:02:36 68.186.232.40:3745 -> xxx.yyy.91.115:2745 SYN ******S* May 15 11:02:36 68.186.232.40:3805 -> xxx.yyy.175.55:2745 SYN ******S* May 15 11:02:37 68.186.232.40:3764 -> xxx.yyy.135.96:2745 SYN ******S* 62483 May 15 13:35:58 213.196.220.16:3364 -> xxx.yyy.196.115:2745 SYN ******S* May 15 13:35:58 213.196.220.16:3371 -> xxx.yyy.196.115:1025 SYN ******S* May 15 13:35:58 213.196.220.16:3374 -> xxx.yyy.196.115:445 SYN ******S* May 15 13:35:58 213.196.220.16:3379 -> xxx.yyy.196.115:3127 SYN ******S* May 15 13:35:58 213.196.220.16:3380 -> xxx.yyy.196.115:6129 SYN ******S* May 15 13:35:58 213.196.220.16:3387 -> xxx.yyy.196.115:139 SYN ******S* May 15 13:36:06 213.196.220.16:3387 -> xxx.yyy.196.115:139 SYN ******S* May 15 13:36:06 213.196.220.16:3380 -> xxx.yyy.196.115:6129 SYN ******S* [...] May 15 23:59:54 213.196.220.16:3554 -> xxx.yyy.82.123:2745 SYN ******S* May 15 23:59:54 213.196.220.16:4197 -> xxx.yyy.67.228:2745 SYN ******S* May 15 23:59:55 213.196.220.16:4485 -> xxx.yyy.15.133:2745 SYN ******S* May 15 23:59:55 213.196.220.16:3430 -> xxx.yyy.174.145:2745 SYN ******S* May 15 23:59:55 213.196.220.16:3348 -> xxx.yyy.143.110:2745 SYN ******S* May 15 23:59:55 213.196.220.16:4048 -> xxx.yyy.74.198:2745 SYN ******S* May 15 23:59:56 213.196.220.16:3929 -> xxx.yyy.66.28:2745 SYN ******S* May 15 23:59:56 213.196.220.16:4739 -> xxx.yyy.169.126:2745 SYN ******S* 51221 May 15 00:00:33 209.63.202.201:2615 -> xxx.yyy.138.138:2745 SYN ******S* May 15 00:00:34 209.63.202.201:2656 -> xxx.yyy.141.177:2745 SYN ******S* May 15 00:00:34 209.63.202.201:2711 -> xxx.yyy.85.175:2745 SYN ******S* May 15 00:00:33 209.63.202.201:2016 -> xxx.yyy.182.37:2745 SYN ******S* May 15 00:00:36 209.63.202.201:2939 -> xxx.yyy.12.221:2745 SYN ******S* May 15 00:00:36 209.63.202.201:2943 -> xxx.yyy.12.221:3127 SYN ******S* May 15 00:00:37 209.63.202.201:2336 -> xxx.yyy.186.108:2745 SYN ******S* May 15 00:00:39 209.63.202.201:2615 -> xxx.yyy.138.138:2745 SYN ******S* [...] May 15 23:59:48 209.63.202.201:3739 -> xxx.yyy.171.152:2745 SYN ******S* May 15 23:59:48 209.63.202.201:3821 -> xxx.yyy.174.218:2745 SYN ******S* May 15 23:59:50 209.63.202.201:4449 -> xxx.yyy.69.223:2745 SYN ******S* May 15 23:59:53 209.63.202.201:4449 -> xxx.yyy.69.223:2745 SYN ******S* May 15 23:59:54 209.63.202.201:4802 -> xxx.yyy.204.121:2745 SYN ******S* May 15 23:59:54 209.63.202.201:3739 -> xxx.yyy.171.152:2745 SYN ******S* May 15 23:59:54 209.63.202.201:3821 -> xxx.yyy.174.218:2745 SYN ******S* May 15 23:59:56 209.63.202.201:4802 -> xxx.yyy.204.121:2745 SYN ******S* 48078 May 15 12:09:38 200.23.18.126:3035 -> xxx.yyy.1.1:1433 SYN ******S* May 15 12:09:38 200.23.18.126:3036 -> xxx.yyy.1.2:1433 SYN ******S* May 15 12:09:38 200.23.18.126:3037 -> xxx.yyy.1.3:1433 SYN ******S* May 15 12:09:38 200.23.18.126:3038 -> xxx.yyy.1.4:1433 SYN ******S* May 15 12:09:38 200.23.18.126:3039 -> xxx.yyy.1.5:1433 SYN ******S* May 15 12:09:38 200.23.18.126:3040 -> xxx.yyy.1.6:1433 SYN ******S* May 15 12:09:38 200.23.18.126:3041 -> xxx.yyy.1.7:1433 SYN ******S* May 15 12:09:38 200.23.18.126:3042 -> xxx.yyy.1.8:1433 SYN ******S* [...] May 15 12:20:41 200.23.18.126:2675 -> xxx.yyy.255.249:1433 SYN ******S* May 15 12:20:41 200.23.18.126:2672 -> xxx.yyy.255.246:1433 SYN ******S* May 15 12:20:41 200.23.18.126:2669 -> xxx.yyy.255.243:1433 SYN ******S* May 15 12:20:41 200.23.18.126:2676 -> xxx.yyy.255.250:1433 SYN ******S* May 15 12:20:41 200.23.18.126:2673 -> xxx.yyy.255.247:1433 SYN ******S* May 15 12:20:41 200.23.18.126:2670 -> xxx.yyy.255.244:1433 SYN ******S* May 15 12:20:41 200.23.18.126:2680 -> xxx.yyy.255.254:1433 SYN ******S* May 15 12:20:41 200.23.18.126:2678 -> xxx.yyy.255.252:1433 SYN ******S* May 15 12:20:41 200.23.18.126:2679 -> xxx.yyy.255.253:1433 SYN ******S* 47494 May 15 09:50:29 61.95.154.8:62860 -> xxx.yyy.150.130:2745 SYN ******S* May 15 09:50:31 61.95.154.8:62864 -> xxx.yyy.151.42:2745 SYN ******S* May 15 09:50:35 61.95.154.8:62877 -> xxx.yyy.201.219:2745 SYN ******S* May 15 09:50:32 61.95.154.8:62877 -> xxx.yyy.85.119:2745 SYN ******S* May 15 09:50:32 61.95.154.8:62877 -> xxx.yyy.85.119:1025 SYN ******S* May 15 09:50:32 61.95.154.8:62877 -> xxx.yyy.85.119:3127 SYN ******S* May 15 09:50:32 61.95.154.8:62877 -> xxx.yyy.85.119:6129 SYN ******S* May 15 09:50:35 61.95.154.8:62885 -> xxx.yyy.202.234:2745 SYN ******S* [...] May 15 23:59:56 61.95.154.8:63492 -> xxx.yyy.233.36:3127 SYN ******S* May 15 23:59:56 61.95.154.8:63492 -> xxx.yyy.233.36:1025 SYN ******S* May 15 23:59:56 61.95.154.8:63492 -> xxx.yyy.233.36:2745 SYN ******S* May 15 23:59:57 61.95.154.8:63499 -> xxx.yyy.241.28:1025 SYN ******S* May 15 23:59:58 61.95.154.8:63515 -> xxx.yyy.171.208:2745 SYN ******S* May 15 23:59:58 61.95.154.8:63515 -> xxx.yyy.171.208:1025 SYN ******S* May 15 23:59:58 61.95.154.8:63515 -> xxx.yyy.171.208:3127 SYN ******S* May 15 23:59:58 61.95.154.8:63515 -> xxx.yyy.171.208:6129 SYN ******S* 27431 May 15 15:03:20 217.186.3.120:2245 -> xxx.yyy.1.0:1433 SYN ******S* May 15 15:03:20 217.186.3.120:2248 -> xxx.yyy.1.1:1433 SYN ******S* May 15 15:03:20 217.186.3.120:2251 -> xxx.yyy.1.2:1433 SYN ******S* May 15 15:03:20 217.186.3.120:2253 -> xxx.yyy.1.3:1433 SYN ******S* May 15 15:03:23 217.186.3.120:2256 -> xxx.yyy.1.4:1433 SYN ******S* May 15 15:03:23 217.186.3.120:2259 -> xxx.yyy.1.5:1433 SYN ******S* May 15 15:03:23 217.186.3.120:2263 -> xxx.yyy.1.6:1433 SYN ******S* May 15 15:03:23 217.186.3.120:2266 -> xxx.yyy.1.7:1433 SYN ******S* [...] May 15 15:43:23 217.186.3.120:3689 -> xxx.yyy.152.117:1433 SYN ******S* May 15 15:43:23 217.186.3.120:3695 -> xxx.yyy.152.119:1433 SYN ******S* May 15 15:43:23 217.186.3.120:3698 -> xxx.yyy.152.120:1433 SYN ******S* May 15 15:43:23 217.186.3.120:3701 -> xxx.yyy.152.121:1433 SYN ******S* May 15 15:43:23 217.186.3.120:3707 -> xxx.yyy.152.123:1433 SYN ******S* May 15 15:43:23 217.186.3.120:3710 -> xxx.yyy.152.124:1433 SYN ******S* May 15 15:43:23 217.186.3.120:3713 -> xxx.yyy.152.125:1433 SYN ******S* May 15 15:43:23 217.186.3.120:3719 -> xxx.yyy.152.127:1433 SYN ******S* May 15 15:43:24 217.186.3.120:3734 -> xxx.yyy.152.132:1433 SYN ******S* 24576 May 15 22:20:23 211.147.203.68:12714 -> xxx.yyy.161.238:1025 SYN ******S* May 15 22:20:23 211.147.203.68:13453 -> xxx.yyy.161.238:2745 SYN ******S* May 15 22:20:26 211.147.203.68:13672 -> xxx.yyy.104.79:2745 SYN ******S* May 15 22:20:28 211.147.203.68:15034 -> xxx.yyy.144.127:2745 SYN ******S* May 15 22:20:28 211.147.203.68:14934 -> xxx.yyy.144.127:1025 SYN ******S* May 15 22:20:26 211.147.203.68:13300 -> xxx.yyy.232.88:1025 SYN ******S* May 15 22:20:26 211.147.203.68:13914 -> xxx.yyy.232.88:2745 SYN ******S* May 15 22:20:26 211.147.203.68:14545 -> xxx.yyy.241.97:2745 SYN ******S* [...] May 15 23:59:57 211.147.203.68:14018 -> xxx.yyy.68.195:2745 SYN ******S* May 15 23:59:57 211.147.203.68:12805 -> xxx.yyy.68.195:1025 SYN ******S* May 15 23:59:57 211.147.203.68:14133 -> xxx.yyy.68.195:6129 SYN ******S* May 15 23:59:57 211.147.203.68:12913 -> xxx.yyy.68.195:3127 SYN ******S* May 15 23:59:57 211.147.203.68:13091 -> xxx.yyy.68.195:80 SYN ******S* May 15 23:59:59 211.147.203.68:12444 -> xxx.yyy.78.141:1025 SYN ******S* May 15 23:59:59 211.147.203.68:13702 -> xxx.yyy.78.141:3127 SYN ******S* May 15 23:59:59 211.147.203.68:14022 -> xxx.yyy.78.141:6129 SYN ******S* May 15 23:59:59 211.147.203.68:14071 -> xxx.yyy.78.141:80 SYN ******S* 24003 May 15 09:50:31 203.195.216.122:3589 -> xxx.yyy.79.241:1025 SYN ******S* May 15 09:50:31 203.195.216.122:3591 -> xxx.yyy.79.241:3127 SYN ******S* May 15 09:50:33 203.195.216.122:3587 -> xxx.yyy.79.241:2745 SYN ******S* May 15 09:50:33 203.195.216.122:3592 -> xxx.yyy.79.241:6129 SYN ******S* May 15 09:50:35 203.195.216.122:3318 -> xxx.yyy.104.203:2745 SYN ******S* May 15 09:50:36 203.195.216.122:2522 -> xxx.yyy.182.154:1025 SYN ******S* May 15 09:50:36 203.195.216.122:2520 -> xxx.yyy.182.154:2745 SYN ******S* May 15 09:50:36 203.195.216.122:2524 -> xxx.yyy.182.154:3127 SYN ******S* [...] May 15 23:59:54 203.195.216.122:1963 -> xxx.yyy.153.33:1025 SYN ******S* May 15 23:59:58 203.195.216.122:4265 -> xxx.yyy.221.52:2745 SYN ******S* May 15 23:59:58 203.195.216.122:4276 -> xxx.yyy.221.52:3127 SYN ******S* May 15 23:59:55 203.195.216.122:4278 -> xxx.yyy.221.52:6129 SYN ******S* May 15 23:59:58 203.195.216.122:4274 -> xxx.yyy.221.52:1025 SYN ******S* May 15 23:59:56 203.195.216.122:3942 -> xxx.yyy.186.167:1025 SYN ******S* May 15 23:59:56 203.195.216.122:1961 -> xxx.yyy.153.33:2745 SYN ******S* May 15 23:59:59 203.195.216.122:1963 -> xxx.yyy.153.33:1025 SYN ******S* May 15 23:59:58 203.195.216.122:1550 -> xxx.yyy.165.145:2745 SYN ******S* 18967 May 15 00:00:37 202.108.87.126:20792 -> xxx.yyy.151.199:2745 SYN ******S* May 15 00:00:39 202.108.87.126:7068 -> xxx.yyy.193.29:2745 SYN ******S* May 15 00:00:39 202.108.87.126:3898 -> xxx.yyy.193.29:1025 SYN ******S* May 15 00:00:41 202.108.87.126:20870 -> xxx.yyy.209.229:2745 SYN ******S* May 15 00:00:38 202.108.87.126:23267 -> xxx.yyy.167.249:2745 SYN ******S* May 15 00:00:42 202.108.87.126:23267 -> xxx.yyy.167.249:2745 SYN ******S* May 15 00:00:44 202.108.87.126:20792 -> xxx.yyy.151.199:2745 SYN ******S* May 15 00:00:46 202.108.87.126:7068 -> xxx.yyy.193.29:2745 SYN ******S* [...] May 15 23:57:50 202.108.87.126:63270 -> xxx.yyy.186.253:2745 SYN ******S* May 15 23:57:50 202.108.87.126:63273 -> xxx.yyy.186.253:6129 SYN ******S* May 15 23:57:50 202.108.87.126:63274 -> xxx.yyy.186.253:80 SYN ******S* May 15 23:57:50 202.108.87.126:63272 -> xxx.yyy.186.253:3127 SYN ******S* May 15 23:57:51 202.108.87.126:63498 -> xxx.yyy.232.244:1025 SYN ******S* May 15 23:57:51 202.108.87.126:63500 -> xxx.yyy.232.244:3127 SYN ******S* May 15 23:57:54 202.108.87.126:63647 -> xxx.yyy.201.30:2745 SYN ******S* May 15 23:57:55 202.108.87.126:64153 -> xxx.yyy.205.244:2745 SYN ******S* May 15 23:57:59 202.108.87.126:64153 -> xxx.yyy.205.244:2745 SYN ******S* 17518 May 15 09:50:33 211.147.203.67:13611 -> xxx.yyy.20.193:2745 SYN ******S* May 15 09:50:39 211.147.203.67:14043 -> xxx.yyy.84.106:2745 SYN ******S* May 15 09:50:39 211.147.203.67:12399 -> xxx.yyy.84.106:1025 SYN ******S* May 15 09:50:39 211.147.203.67:13588 -> xxx.yyy.84.106:3127 SYN ******S* May 15 09:50:36 211.147.203.67:12915 -> xxx.yyy.84.106:80 SYN ******S* May 15 09:50:39 211.147.203.67:12624 -> xxx.yyy.193.4:2745 SYN ******S* May 15 09:50:39 211.147.203.67:13297 -> xxx.yyy.193.4:3127 SYN ******S* May 15 09:50:39 211.147.203.67:12581 -> xxx.yyy.193.4:1025 SYN ******S* [...] May 15 23:59:54 211.147.203.67:15445 -> xxx.yyy.211.211:6129 SYN ******S* May 15 23:59:54 211.147.203.67:15381 -> xxx.yyy.211.211:80 SYN ******S* May 15 23:59:54 211.147.203.67:14507 -> xxx.yyy.32.44:2745 SYN ******S* May 15 23:59:54 211.147.203.67:16006 -> xxx.yyy.32.44:3127 SYN ******S* May 15 23:59:54 211.147.203.67:15082 -> xxx.yyy.32.44:1025 SYN ******S* May 15 23:59:54 211.147.203.67:15622 -> xxx.yyy.32.44:6129 SYN ******S* May 15 23:59:54 211.147.203.67:15081 -> xxx.yyy.32.44:80 SYN ******S* May 15 23:59:55 211.147.203.67:14263 -> xxx.yyy.85.71:1025 SYN ******S* May 15 23:59:55 211.147.203.67:12328 -> xxx.yyy.85.71:2745 SYN ******S* 16228 May 15 09:50:34 202.63.117.165:3387 -> xxx.yyy.146.102:1025 SYN ******S* May 15 09:50:34 202.63.117.165:3385 -> xxx.yyy.146.102:2745 SYN ******S* May 15 09:50:34 202.63.117.165:3428 -> xxx.yyy.186.68:2745 SYN ******S* May 15 09:50:34 202.63.117.165:3430 -> xxx.yyy.186.68:1025 SYN ******S* May 15 09:50:34 202.63.117.165:3432 -> xxx.yyy.186.68:3127 SYN ******S* May 15 09:50:34 202.63.117.165:3433 -> xxx.yyy.186.68:6129 SYN ******S* May 15 09:50:36 202.63.117.165:2905 -> xxx.yyy.165.227:2745 SYN ******S* May 15 09:50:36 202.63.117.165:3617 -> xxx.yyy.178.93:2745 SYN ******S* [...] May 15 23:54:42 202.63.117.165:2055 -> xxx.yyy.162.170:1025 SYN ******S* May 15 23:54:42 202.63.117.165:2053 -> xxx.yyy.162.170:2745 SYN ******S* May 15 23:56:19 202.63.117.165:1887 -> xxx.yyy.172.225:2745 SYN ******S* May 15 23:56:19 202.63.117.165:1889 -> xxx.yyy.172.225:1025 SYN ******S* May 15 23:56:19 202.63.117.165:1891 -> xxx.yyy.172.225:3127 SYN ******S* May 15 23:56:19 202.63.117.165:1892 -> xxx.yyy.172.225:6129 SYN ******S* May 15 23:56:17 202.63.117.165:3352 -> xxx.yyy.248.32:3127 SYN ******S* May 15 23:56:17 202.63.117.165:3350 -> xxx.yyy.248.32:1025 SYN ******S* 13163 May 15 00:00:07 81.173.170.191:3628 -> xxx.yyy.161.107:2745 SYN ******S* May 15 00:00:09 81.173.170.191:3387 -> xxx.yyy.136.100:2745 SYN ******S* May 15 00:00:09 81.173.170.191:3923 -> xxx.yyy.210.13:2745 SYN ******S* May 15 00:00:12 81.173.170.191:3568 -> xxx.yyy.93.52:2745 SYN ******S* May 15 00:00:09 81.173.170.191:3932 -> xxx.yyy.233.252:2745 SYN ******S* May 15 00:00:10 81.173.170.191:3761 -> xxx.yyy.171.37:2745 SYN ******S* May 15 00:00:11 81.173.170.191:4040 -> xxx.yyy.155.98:2745 SYN ******S* May 15 00:00:13 81.173.170.191:3761 -> xxx.yyy.171.37:2745 SYN ******S* [...] May 15 02:01:35 81.173.170.191:4864 -> xxx.yyy.17.148:2745 SYN ******S* May 15 02:01:32 81.173.170.191:4120 -> xxx.yyy.73.179:2745 SYN ******S* May 15 02:01:32 81.173.170.191:4146 -> xxx.yyy.73.179:1025 SYN ******S* May 15 02:01:32 81.173.170.191:4265 -> xxx.yyy.195.155:2745 SYN ******S* May 15 02:01:34 81.173.170.191:4643 -> xxx.yyy.253.110:445 SYN ******S* May 15 02:01:34 81.173.170.191:4634 -> xxx.yyy.253.110:1025 SYN ******S* May 15 02:01:34 81.173.170.191:4579 -> xxx.yyy.253.110:2745 SYN ******S* May 15 02:01:34 81.173.170.191:3310 -> xxx.yyy.176.207:2745 SYN ******S* 12582 May 15 09:50:34 61.95.144.61:1412 -> xxx.yyy.17.25:2745 SYN ******S* May 15 09:50:38 61.95.144.61:1488 -> xxx.yyy.184.226:1025 SYN ******S* May 15 09:50:38 61.95.144.61:1486 -> xxx.yyy.184.226:2745 SYN ******S* May 15 09:50:38 61.95.144.61:1501 -> xxx.yyy.155.189:2745 SYN ******S* May 15 09:50:36 61.95.144.61:1758 -> xxx.yyy.214.197:3127 SYN ******S* May 15 09:50:39 61.95.144.61:1756 -> xxx.yyy.214.197:1025 SYN ******S* May 15 09:50:39 61.95.144.61:1759 -> xxx.yyy.214.197:6129 SYN ******S* May 15 09:50:40 61.95.144.61:1754 -> xxx.yyy.214.197:2745 SYN ******S* [...] May 15 23:59:44 61.95.144.61:3667 -> xxx.yyy.135.184:3127 SYN ******S* May 15 23:59:45 61.95.144.61:3665 -> xxx.yyy.135.184:1025 SYN ******S* May 15 23:59:45 61.95.144.61:3700 -> xxx.yyy.77.100:1025 SYN ******S* May 15 23:59:45 61.95.144.61:3698 -> xxx.yyy.77.100:2745 SYN ******S* May 15 23:59:47 61.95.144.61:3723 -> xxx.yyy.71.232:2745 SYN ******S* May 15 23:59:47 61.95.144.61:3566 -> xxx.yyy.150.22:2745 SYN ******S* May 15 23:59:49 61.95.144.61:3638 -> xxx.yyy.147.153:2745 SYN ******S* May 15 23:59:53 61.95.144.61:4068 -> xxx.yyy.11.183:2745 SYN ******S* 12175 May 15 09:50:51 202.53.76.18:4152 -> xxx.yyy.215.2:2745 SYN ******S* May 15 09:50:51 202.53.76.18:4154 -> xxx.yyy.215.2:1025 SYN ******S* May 15 09:50:51 202.53.76.18:4157 -> xxx.yyy.215.2:6129 SYN ******S* May 15 09:50:52 202.53.76.18:2287 -> xxx.yyy.78.180:2745 SYN ******S* May 15 09:50:52 202.53.76.18:2312 -> xxx.yyy.250.11:2745 SYN ******S* May 15 09:50:52 202.53.76.18:2314 -> xxx.yyy.250.11:1025 SYN ******S* May 15 09:50:52 202.53.76.18:2316 -> xxx.yyy.250.11:3127 SYN ******S* May 15 09:50:52 202.53.76.18:2317 -> xxx.yyy.250.11:6129 SYN ******S* [...] May 15 23:58:49 202.53.76.18:2376 -> xxx.yyy.220.148:2745 SYN ******S* May 15 23:58:49 202.53.76.18:2486 -> xxx.yyy.214.188:2745 SYN ******S* May 15 23:58:52 202.53.76.18:2255 -> xxx.yyy.203.24:2745 SYN ******S* May 15 23:58:53 202.53.76.18:2376 -> xxx.yyy.220.148:2745 SYN ******S* May 15 23:58:57 202.53.76.18:2769 -> xxx.yyy.32.167:2745 SYN ******S* May 15 23:58:58 202.53.76.18:2798 -> xxx.yyy.175.45:2745 SYN ******S* May 15 23:58:59 202.53.76.18:2486 -> xxx.yyy.214.188:2745 SYN ******S* May 15 23:59:00 202.53.76.18:2769 -> xxx.yyy.32.167:2745 SYN ******S* 10963 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: Ken.Connelly@xxxxxxx phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list Intrusions@xxxxxxxxxxxxxx http://www.dshield.org/mailman/listinfo/intrusions |
|
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| Previous by Date: | RE:strange mail connections: 00049, lola marais |
|---|---|
| Next by Date: | [LOGS] Summary of large-scale portscanning detects: 00049, Ken . Connelly |
| Previous by Thread: | [LOGS] Summary of large-scale portscanning detectsi: 00049, Ken . Connelly |
| Next by Thread: | [LOGS] Summary of large-scale portscanning detects: 00049, Ken . Connelly |
| Indexes: | [Date] [Thread] [Top] [All Lists] |
| News | FAQ | advertise |