logo       
<prev   next>

[LOGS] Summary of large-scale portscanning detects: msg#00051

security.intrusions

Subject: [LOGS] Summary of large-scale portscanning detects

The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0500.

May 17 00:00:11 64.5.49.251:2383 -> xxx.yyy.202.247:2745 SYN ******S*
May 17 00:00:06 64.5.49.251:2203 -> xxx.yyy.145.35:2745 SYN ******S*
May 17 00:00:07 64.5.49.251:2216 -> xxx.yyy.169.24:2745 SYN ******S*
May 17 00:00:08 64.5.49.251:2294 -> xxx.yyy.171.210:2745 SYN ******S*
May 17 00:00:08 64.5.49.251:2299 -> xxx.yyy.68.130:2745 SYN ******S*
May 17 00:00:11 64.5.49.251:2780 -> xxx.yyy.201.196:2745 SYN ******S*
May 17 00:00:14 64.5.49.251:2780 -> xxx.yyy.201.196:2745 SYN ******S*
May 17 00:00:14 64.5.49.251:2909 -> xxx.yyy.245.177:2745 SYN ******S*
[...]
May 17 23:59:56 64.5.49.251:2815 -> xxx.yyy.142.157:2745 SYN ******S*
May 17 23:59:53 64.5.49.251:2691 -> xxx.yyy.79.84:2745 SYN ******S*
May 17 23:59:56 64.5.49.251:2850 -> xxx.yyy.162.168:2745 SYN ******S*
May 17 23:59:54 64.5.49.251:2035 -> xxx.yyy.86.226:2745 SYN ******S*
May 18 00:00:00 64.5.49.251:3002 -> xxx.yyy.151.81:2745 SYN ******S*
May 17 23:59:59 64.5.49.251:3114 -> xxx.yyy.218.87:2745 SYN ******S*
May 17 23:59:59 64.5.49.251:2691 -> xxx.yyy.79.84:2745 SYN ******S*
May 18 00:00:00 64.5.49.251:3158 -> xxx.yyy.88.204:2745 SYN ******S*
May 18 00:00:00 64.5.49.251:3164 -> xxx.yyy.204.57:2745 SYN ******S*
148026

May 17 07:14:11 164.125.144.50:38432 -> xxx.yyy.1.1:443 SYN ******S*
May 17 07:14:11 164.125.144.50:38433 -> xxx.yyy.1.2:443 SYN ******S*
May 17 07:14:14 164.125.144.50:38434 -> xxx.yyy.1.3:443 SYN ******S*
May 17 07:14:14 164.125.144.50:38435 -> xxx.yyy.1.4:443 SYN ******S*
May 17 07:14:11 164.125.144.50:38431 -> xxx.yyy.1.0:443 SYN ******S*
May 17 07:14:14 164.125.144.50:38436 -> xxx.yyy.1.5:443 SYN ******S*
May 17 07:14:14 164.125.144.50:38437 -> xxx.yyy.1.6:443 SYN ******S*
May 17 07:14:14 164.125.144.50:38438 -> xxx.yyy.1.7:443 SYN ******S*
[...]
May 17 07:55:53 164.125.144.50:59377 -> xxx.yyy.255.247:443 SYN ******S*
May 17 07:55:53 164.125.144.50:59378 -> xxx.yyy.255.248:443 SYN ******S*
May 17 07:55:53 164.125.144.50:59379 -> xxx.yyy.255.249:443 SYN ******S*
May 17 07:55:53 164.125.144.50:59380 -> xxx.yyy.255.250:443 SYN ******S*
May 17 07:55:53 164.125.144.50:59381 -> xxx.yyy.255.251:443 SYN ******S*
May 17 07:55:53 164.125.144.50:59382 -> xxx.yyy.255.252:443 SYN ******S*
May 17 07:55:53 164.125.144.50:59383 -> xxx.yyy.255.253:443 SYN ******S*
May 17 07:55:53 164.125.144.50:59384 -> xxx.yyy.255.254:443 SYN ******S*
94446

May 17 23:12:23 212.52.160.10:2103 -> xxx.yyy.1.1:4000 SYN ******S*
May 17 23:12:24 212.52.160.10:2104 -> xxx.yyy.1.2:4000 SYN ******S*
May 17 23:12:25 212.52.160.10:2105 -> xxx.yyy.1.3:4000 SYN ******S*
May 17 23:12:25 212.52.160.10:2106 -> xxx.yyy.1.4:4000 SYN ******S*
May 17 23:12:25 212.52.160.10:2107 -> xxx.yyy.1.5:4000 SYN ******S*
May 17 23:12:25 212.52.160.10:2108 -> xxx.yyy.1.6:4000 SYN ******S*
May 17 23:12:25 212.52.160.10:2109 -> xxx.yyy.1.7:4000 SYN ******S*
May 17 23:12:25 212.52.160.10:2110 -> xxx.yyy.1.8:4000 SYN ******S*
[...]
May 17 23:23:59 212.52.160.10:3755 -> xxx.yyy.255.248:4000 SYN ******S*
May 17 23:23:59 212.52.160.10:3752 -> xxx.yyy.255.245:4000 SYN ******S*
May 17 23:23:59 212.52.160.10:3759 -> xxx.yyy.255.252:4000 SYN ******S*
May 17 23:23:59 212.52.160.10:3756 -> xxx.yyy.255.249:4000 SYN ******S*
May 17 23:23:59 212.52.160.10:3753 -> xxx.yyy.255.246:4000 SYN ******S*
May 17 23:23:59 212.52.160.10:3757 -> xxx.yyy.255.250:4000 SYN ******S*
May 17 23:23:59 212.52.160.10:3754 -> xxx.yyy.255.247:4000 SYN ******S*
May 17 23:23:59 212.52.160.10:3751 -> xxx.yyy.255.244:4000 SYN ******S*
May 17 23:23:59 212.52.160.10:3761 -> xxx.yyy.255.254:4000 SYN ******S*
73743

May 17 21:03:39 216.139.40.166:2252 -> xxx.yyy.1.2:1433 SYN ******S*
May 17 21:03:39 216.139.40.166:2251 -> xxx.yyy.1.1:1433 SYN ******S*
May 17 21:03:39 216.139.40.166:2253 -> xxx.yyy.1.3:1433 SYN ******S*
May 17 21:03:39 216.139.40.166:2256 -> xxx.yyy.1.6:1433 SYN ******S*
May 17 21:03:39 216.139.40.166:2254 -> xxx.yyy.1.4:1433 SYN ******S*
May 17 21:03:39 216.139.40.166:2258 -> xxx.yyy.1.8:1433 SYN ******S*
May 17 21:03:39 216.139.40.166:2255 -> xxx.yyy.1.5:1433 SYN ******S*
May 17 21:03:39 216.139.40.166:2259 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
May 17 21:14:55 216.139.40.166:1440 -> xxx.yyy.255.194:1433 SYN ******S*
May 17 21:14:55 216.139.40.166:1436 -> xxx.yyy.255.190:1433 SYN ******S*
May 17 21:14:55 216.139.40.166:1437 -> xxx.yyy.255.191:1433 SYN ******S*
May 17 21:14:55 216.139.40.166:1438 -> xxx.yyy.255.192:1433 SYN ******S*
May 17 21:14:55 216.139.40.166:1451 -> xxx.yyy.255.205:1433 SYN ******S*
May 17 21:14:55 216.139.40.166:1448 -> xxx.yyy.255.202:1433 SYN ******S*
May 17 21:14:55 216.139.40.166:1449 -> xxx.yyy.255.203:1433 SYN ******S*
May 17 21:14:55 216.139.40.166:1447 -> xxx.yyy.255.201:1433 SYN ******S*
73386

May 17 20:12:23 24.58.145.47:2012 -> xxx.yyy.1.1:445 SYN ******S*
May 17 20:12:23 24.58.145.47:2013 -> xxx.yyy.1.2:445 SYN ******S*
May 17 20:12:23 24.58.145.47:2014 -> xxx.yyy.1.3:445 SYN ******S*
May 17 20:12:23 24.58.145.47:2015 -> xxx.yyy.1.4:445 SYN ******S*
May 17 20:12:20 24.58.145.47:2016 -> xxx.yyy.1.5:445 SYN ******S*
May 17 20:12:20 24.58.145.47:2017 -> xxx.yyy.1.6:445 SYN ******S*
May 17 20:12:23 24.58.145.47:2018 -> xxx.yyy.1.7:445 SYN ******S*
May 17 20:12:23 24.58.145.47:2019 -> xxx.yyy.1.8:445 SYN ******S*
[...]
May 17 20:24:04 24.58.145.47:4286 -> xxx.yyy.255.243:445 SYN ******S*
May 17 20:24:04 24.58.145.47:4285 -> xxx.yyy.255.242:445 SYN ******S*
May 17 20:24:04 24.58.145.47:4290 -> xxx.yyy.255.247:445 SYN ******S*
May 17 20:24:04 24.58.145.47:4291 -> xxx.yyy.255.248:445 SYN ******S*
May 17 20:24:04 24.58.145.47:4292 -> xxx.yyy.255.249:445 SYN ******S*
May 17 20:24:04 24.58.145.47:4293 -> xxx.yyy.255.250:445 SYN ******S*
May 17 20:24:04 24.58.145.47:4294 -> xxx.yyy.255.251:445 SYN ******S*
May 17 20:24:04 24.58.145.47:4295 -> xxx.yyy.255.252:445 SYN ******S*
May 17 20:24:04 24.58.145.47:4296 -> xxx.yyy.255.253:445 SYN ******S*
72012

May 17 14:01:20 64.0.211.50:4272 -> xxx.yyy.1.1:4898 SYN ******S*
May 17 14:01:20 64.0.211.50:4277 -> xxx.yyy.1.2:4898 SYN ******S*
May 17 14:01:21 64.0.211.50:4282 -> xxx.yyy.1.3:4898 SYN ******S*
May 17 14:01:18 64.0.211.50:4287 -> xxx.yyy.1.4:4898 SYN ******S*
May 17 14:01:21 64.0.211.50:4292 -> xxx.yyy.1.5:4898 SYN ******S*
May 17 14:01:21 64.0.211.50:4298 -> xxx.yyy.1.6:4898 SYN ******S*
May 17 14:01:21 64.0.211.50:4302 -> xxx.yyy.1.7:4898 SYN ******S*
May 17 14:01:18 64.0.211.50:4307 -> xxx.yyy.1.8:4898 SYN ******S*
[...]
May 17 14:17:13 64.0.211.50:3006 -> xxx.yyy.255.215:4898 SYN ******S*
May 17 14:17:13 64.0.211.50:3012 -> xxx.yyy.255.216:4898 SYN ******S*
May 17 14:17:13 64.0.211.50:3018 -> xxx.yyy.255.217:4898 SYN ******S*
May 17 14:17:13 64.0.211.50:3048 -> xxx.yyy.255.222:4898 SYN ******S*
May 17 14:17:14 64.0.211.50:3054 -> xxx.yyy.255.223:4898 SYN ******S*
May 17 14:17:14 64.0.211.50:3042 -> xxx.yyy.255.221:4898 SYN ******S*
May 17 14:17:14 64.0.211.50:3076 -> xxx.yyy.255.226:4898 SYN ******S*
May 17 14:17:14 64.0.211.50:3083 -> xxx.yyy.255.227:4898 SYN ******S*
May 17 14:17:14 64.0.211.50:3143 -> xxx.yyy.255.237:4898 SYN ******S*
71766

May 17 17:51:28 68.43.157.103:3918 -> xxx.yyy.1.1:20168 SYN ******S*
May 17 17:51:29 68.43.157.103:3919 -> xxx.yyy.1.2:20168 SYN ******S*
May 17 17:51:31 68.43.157.103:3920 -> xxx.yyy.1.3:20168 SYN ******S*
May 17 17:51:31 68.43.157.103:3921 -> xxx.yyy.1.4:20168 SYN ******S*
May 17 17:51:31 68.43.157.103:3922 -> xxx.yyy.1.5:20168 SYN ******S*
May 17 17:51:31 68.43.157.103:3923 -> xxx.yyy.1.6:20168 SYN ******S*
May 17 17:51:31 68.43.157.103:3924 -> xxx.yyy.1.7:20168 SYN ******S*
May 17 17:51:29 68.43.157.103:3926 -> xxx.yyy.1.9:20168 SYN ******S*
[...]
May 17 19:54:06 68.43.157.103:2254 -> xxx.yyy.255.247:20168 SYN ******S*
May 17 19:54:06 68.43.157.103:2255 -> xxx.yyy.255.248:20168 SYN ******S*
May 17 19:54:06 68.43.157.103:2256 -> xxx.yyy.255.249:20168 SYN ******S*
May 17 19:54:06 68.43.157.103:2257 -> xxx.yyy.255.250:20168 SYN ******S*
May 17 19:54:06 68.43.157.103:2258 -> xxx.yyy.255.251:20168 SYN ******S*
May 17 19:54:07 68.43.157.103:2259 -> xxx.yyy.255.252:20168 SYN ******S*
May 17 19:54:07 68.43.157.103:2260 -> xxx.yyy.255.253:20168 SYN ******S*
May 17 19:54:07 68.43.157.103:2261 -> xxx.yyy.255.254:20168 SYN ******S*
71762

May 17 15:19:08 130.240.23.119:3431 -> xxx.yyy.1.1:445 SYN ******S*
May 17 15:19:08 130.240.23.119:3432 -> xxx.yyy.1.2:445 SYN ******S*
May 17 15:19:08 130.240.23.119:3433 -> xxx.yyy.1.3:445 SYN ******S*
May 17 15:19:08 130.240.23.119:3434 -> xxx.yyy.1.4:445 SYN ******S*
May 17 15:19:05 130.240.23.119:3435 -> xxx.yyy.1.5:445 SYN ******S*
May 17 15:19:08 130.240.23.119:3436 -> xxx.yyy.1.6:445 SYN ******S*
May 17 15:19:08 130.240.23.119:3437 -> xxx.yyy.1.7:445 SYN ******S*
May 17 15:19:08 130.240.23.119:3438 -> xxx.yyy.1.8:445 SYN ******S*
[...]
May 17 15:30:01 130.240.23.119:2326 -> xxx.yyy.255.195:445 SYN ******S*
May 17 15:30:01 130.240.23.119:2321 -> xxx.yyy.255.190:445 SYN ******S*
May 17 15:30:01 130.240.23.119:2322 -> xxx.yyy.255.191:445 SYN ******S*
May 17 15:30:01 130.240.23.119:2320 -> xxx.yyy.255.189:445 SYN ******S*
May 17 15:30:01 130.240.23.119:2323 -> xxx.yyy.255.192:445 SYN ******S*
May 17 15:30:01 130.240.23.119:2327 -> xxx.yyy.255.196:445 SYN ******S*
May 17 15:30:01 130.240.23.119:2324 -> xxx.yyy.255.193:445 SYN ******S*
May 17 15:30:01 130.240.23.119:2328 -> xxx.yyy.255.197:445 SYN ******S*
May 17 15:30:02 130.240.23.119:2361 -> xxx.yyy.255.230:445 SYN ******S*
71601

May 17 01:14:47 209.123.91.145:3124 -> xxx.yyy.1.1:1433 SYN ******S*
May 17 01:14:44 209.123.91.145:3125 -> xxx.yyy.1.2:1433 SYN ******S*
May 17 01:14:47 209.123.91.145:3126 -> xxx.yyy.1.3:1433 SYN ******S*
May 17 01:14:47 209.123.91.145:3127 -> xxx.yyy.1.4:1433 SYN ******S*
May 17 01:14:47 209.123.91.145:3128 -> xxx.yyy.1.5:1433 SYN ******S*
May 17 01:14:47 209.123.91.145:3129 -> xxx.yyy.1.6:1433 SYN ******S*
May 17 01:14:44 209.123.91.145:3130 -> xxx.yyy.1.7:1433 SYN ******S*
May 17 01:14:44 209.123.91.145:3131 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
May 17 01:30:32 209.123.91.145:4279 -> xxx.yyy.255.242:1433 SYN ******S*
May 17 01:30:32 209.123.91.145:4286 -> xxx.yyy.255.249:1433 SYN ******S*
May 17 01:30:32 209.123.91.145:4287 -> xxx.yyy.255.250:1433 SYN ******S*
May 17 01:30:32 209.123.91.145:4284 -> xxx.yyy.255.247:1433 SYN ******S*
May 17 01:30:32 209.123.91.145:4285 -> xxx.yyy.255.248:1433 SYN ******S*
May 17 01:30:32 209.123.91.145:4289 -> xxx.yyy.255.252:1433 SYN ******S*
May 17 01:30:32 209.123.91.145:4290 -> xxx.yyy.255.253:1433 SYN ******S*
May 17 01:30:32 209.123.91.145:4291 -> xxx.yyy.255.254:1433 SYN ******S*
70365

May 17 01:29:54 63.120.109.170:2816 -> xxx.yyy.1.1:2277 SYN ******S*
May 17 01:29:54 63.120.109.170:2817 -> xxx.yyy.1.2:2277 SYN ******S*
May 17 01:29:56 63.120.109.170:2818 -> xxx.yyy.1.3:2277 SYN ******S*
May 17 01:29:56 63.120.109.170:2819 -> xxx.yyy.1.4:2277 SYN ******S*
May 17 01:29:56 63.120.109.170:2820 -> xxx.yyy.1.5:2277 SYN ******S*
May 17 01:29:56 63.120.109.170:2821 -> xxx.yyy.1.6:2277 SYN ******S*
May 17 01:29:56 63.120.109.170:2822 -> xxx.yyy.1.7:2277 SYN ******S*
May 17 01:29:53 63.120.109.170:2823 -> xxx.yyy.1.8:2277 SYN ******S*
[...]
May 17 01:41:37 63.120.109.170:1342 -> xxx.yyy.255.181:2277 SYN ******S*
May 17 01:41:37 63.120.109.170:1356 -> xxx.yyy.255.195:2277 SYN ******S*
May 17 01:41:37 63.120.109.170:1357 -> xxx.yyy.255.196:2277 SYN ******S*
May 17 01:41:37 63.120.109.170:1354 -> xxx.yyy.255.193:2277 SYN ******S*
May 17 01:41:37 63.120.109.170:1351 -> xxx.yyy.255.190:2277 SYN ******S*
May 17 01:41:37 63.120.109.170:1353 -> xxx.yyy.255.192:2277 SYN ******S*
May 17 01:41:37 63.120.109.170:1355 -> xxx.yyy.255.194:2277 SYN ******S*
May 17 01:41:38 63.120.109.170:1379 -> xxx.yyy.255.218:2277 SYN ******S*
69194

May 17 00:00:06 209.63.202.201:4582 -> xxx.yyy.198.71:2745 SYN ******S*
May 17 00:00:07 209.63.202.201:4699 -> xxx.yyy.231.10:2745 SYN ******S*
May 17 00:00:10 209.63.202.201:2125 -> xxx.yyy.135.146:2745 SYN ******S*
May 17 00:00:08 209.63.202.201:4961 -> xxx.yyy.65.13:2745 SYN ******S*
May 17 00:00:12 209.63.202.201:2410 -> xxx.yyy.16.206:2745 SYN ******S*
May 17 00:00:10 209.63.202.201:1225 -> xxx.yyy.137.25:2745 SYN ******S*
May 17 00:00:16 209.63.202.201:2125 -> xxx.yyy.135.146:2745 SYN ******S*
May 17 00:00:20 209.63.202.201:4300 -> xxx.yyy.93.162:2745 SYN ******S*
[...]
May 17 23:59:39 209.63.202.201:2356 -> xxx.yyy.199.216:2745 SYN ******S*
May 17 23:59:43 209.63.202.201:1758 -> xxx.yyy.238.233:2745 SYN ******S*
May 17 23:59:45 209.63.202.201:2289 -> xxx.yyy.182.215:2745 SYN ******S*
May 17 23:59:45 209.63.202.201:2356 -> xxx.yyy.199.216:2745 SYN ******S*
May 17 23:59:48 209.63.202.201:4903 -> xxx.yyy.236.174:2745 SYN ******S*
May 17 23:59:52 209.63.202.201:4976 -> xxx.yyy.223.232:2745 SYN ******S*
May 17 23:59:52 209.63.202.201:1079 -> xxx.yyy.203.167:2745 SYN ******S*
May 17 23:59:51 209.63.202.201:4903 -> xxx.yyy.236.174:2745 SYN ******S*
46739

May 17 00:00:04 218.149.115.25:22002 -> xxx.yyy.197.196:10080 SYN ******S*
May 17 00:00:04 218.149.115.25:22002 -> xxx.yyy.197.197:1080 SYN ******S*
May 17 00:00:04 218.149.115.25:22002 -> xxx.yyy.197.197:3128 SYN ******S*
May 17 00:00:05 218.149.115.25:22002 -> xxx.yyy.197.198:10080 SYN ******S*
May 17 00:00:05 218.149.115.25:22002 -> xxx.yyy.197.198:3128 SYN ******S*
May 17 00:00:05 218.149.115.25:22002 -> xxx.yyy.197.199:10080 SYN ******S*
May 17 00:00:05 218.149.115.25:22002 -> xxx.yyy.197.199:3128 SYN ******S*
May 17 00:00:05 218.149.115.25:22002 -> xxx.yyy.197.200:1080 SYN ******S*
[...]
May 17 01:44:38 218.149.115.25:22002 -> xxx.yyy.255.253:10080 SYN ******S*
May 17 01:44:38 218.149.115.25:22002 -> xxx.yyy.255.253:3128 SYN ******S*
May 17 01:44:39 218.149.115.25:22002 -> xxx.yyy.255.254:1080 SYN ******S*
May 17 01:44:39 218.149.115.25:22002 -> xxx.yyy.255.254:10080 SYN ******S*
May 17 01:44:39 218.149.115.25:22002 -> xxx.yyy.255.254:3128 SYN ******S*
May 17 01:44:39 218.149.115.25:22002 -> xxx.yyy.255.255:1080 SYN ******S*
May 17 01:44:39 218.149.115.25:22002 -> xxx.yyy.255.255:10080 SYN ******S*
May 17 01:44:39 218.149.115.25:22002 -> xxx.yyy.255.255:3128 SYN ******S*
43206

May 17 15:53:50 218.109.136.58:3008 -> xxx.yyy.1.64:559 SYN ******S*
May 17 15:53:50 218.109.136.58:3007 -> xxx.yyy.1.63:559 SYN ******S*
May 17 15:53:50 218.109.136.58:3006 -> xxx.yyy.1.62:559 SYN ******S*
May 17 15:53:50 218.109.136.58:3005 -> xxx.yyy.1.61:559 SYN ******S*
May 17 15:53:50 218.109.136.58:3001 -> xxx.yyy.1.60:559 SYN ******S*
May 17 15:53:50 218.109.136.58:4994 -> xxx.yyy.1.54:559 SYN ******S*
May 17 15:53:50 218.109.136.58:4982 -> xxx.yyy.1.42:559 SYN ******S*
May 17 15:53:50 218.109.136.58:4981 -> xxx.yyy.1.41:559 SYN ******S*
[...]
May 17 16:07:26 218.109.136.58:4384 -> xxx.yyy.254.247:559 SYN ******S*
May 17 16:07:26 218.109.136.58:4385 -> xxx.yyy.254.248:559 SYN ******S*
May 17 16:07:27 218.109.136.58:3191 -> xxx.yyy.254.249:559 SYN ******S*
May 17 16:07:27 218.109.136.58:3193 -> xxx.yyy.254.250:559 SYN ******S*
May 17 16:07:27 218.109.136.58:3194 -> xxx.yyy.254.251:559 SYN ******S*
May 17 16:07:27 218.109.136.58:3195 -> xxx.yyy.254.252:559 SYN ******S*
May 17 16:07:27 218.109.136.58:3196 -> xxx.yyy.254.253:559 SYN ******S*
May 17 16:07:27 218.109.136.58:3197 -> xxx.yyy.254.254:559 SYN ******S*
May 17 16:07:27 218.109.136.58:3198 -> xxx.yyy.254.255:559 SYN ******S*
40920

May 17 04:28:48 211.34.251.125:59379 -> xxx.yyy.1.3:21 SYN ******S*
May 17 04:28:48 211.34.251.125:59378 -> xxx.yyy.1.2:21 SYN ******S*
May 17 04:28:48 211.34.251.125:59376 -> xxx.yyy.1.0:21 SYN ******S*
May 17 04:28:48 211.34.251.125:59383 -> xxx.yyy.1.6:21 SYN ******S*
May 17 04:28:48 211.34.251.125:59377 -> xxx.yyy.1.1:21 SYN ******S*
May 17 04:28:48 211.34.251.125:59387 -> xxx.yyy.1.10:21 SYN ******S*
May 17 04:28:48 211.34.251.125:59388 -> xxx.yyy.1.11:21 SYN ******S*
May 17 04:28:48 211.34.251.125:59381 -> xxx.yyy.1.4:21 SYN ******S*
[...]
May 17 04:39:41 211.34.251.125:54086 -> xxx.yyy.255.237:21 SYN ******S*
May 17 04:39:41 211.34.251.125:54088 -> xxx.yyy.255.239:21 SYN ******S*
May 17 04:39:41 211.34.251.125:54097 -> xxx.yyy.255.246:21 SYN ******S*
May 17 04:39:41 211.34.251.125:54090 -> xxx.yyy.255.241:21 SYN ******S*
May 17 04:39:41 211.34.251.125:54098 -> xxx.yyy.255.247:21 SYN ******S*
May 17 04:39:41 211.34.251.125:54099 -> xxx.yyy.255.248:21 SYN ******S*
May 17 04:39:41 211.34.251.125:54100 -> xxx.yyy.255.249:21 SYN ******S*
May 17 04:39:41 211.34.251.125:54093 -> xxx.yyy.255.244:21 SYN ******S*
May 17 04:39:41 211.34.251.125:54095 -> xxx.yyy.255.245:21 SYN ******S*
39074

May 17 20:09:59 218.148.110.58:2663 -> xxx.yyy.1.1:559 SYN ******S*
May 17 20:09:59 218.148.110.58:2664 -> xxx.yyy.1.2:559 SYN ******S*
May 17 20:09:57 218.148.110.58:2665 -> xxx.yyy.1.3:559 SYN ******S*
May 17 20:09:57 218.148.110.58:2666 -> xxx.yyy.1.4:559 SYN ******S*
May 17 20:09:58 218.148.110.58:2662 -> xxx.yyy.1.0:559 SYN ******S*
May 17 20:09:57 218.148.110.58:2667 -> xxx.yyy.1.5:559 SYN ******S*
May 17 20:09:57 218.148.110.58:2669 -> xxx.yyy.1.7:559 SYN ******S*
May 17 20:09:57 218.148.110.58:2670 -> xxx.yyy.1.8:559 SYN ******S*
[...]
May 17 20:36:56 218.148.110.58:2476 -> xxx.yyy.254.229:559 SYN ******S*
May 17 20:36:56 218.148.110.58:2506 -> xxx.yyy.254.231:559 SYN ******S*
May 17 20:36:56 218.148.110.58:2475 -> xxx.yyy.254.228:559 SYN ******S*
May 17 20:36:56 218.148.110.58:2507 -> xxx.yyy.254.232:559 SYN ******S*
May 17 20:36:56 218.148.110.58:2508 -> xxx.yyy.254.233:559 SYN ******S*
May 17 20:36:56 218.148.110.58:2477 -> xxx.yyy.254.230:559 SYN ******S*
May 17 20:36:56 218.148.110.58:2510 -> xxx.yyy.254.235:559 SYN ******S*
May 17 20:36:56 218.148.110.58:2509 -> xxx.yyy.254.234:559 SYN ******S*
May 17 20:36:56 218.148.110.58:2535 -> xxx.yyy.254.236:559 SYN ******S*
35401

May 17 04:44:50 62.152.89.98:2780 -> xxx.yyy.218.233:2745 SYN ******S*
May 17 04:44:50 62.152.89.98:2782 -> xxx.yyy.218.233:1025 SYN ******S*
May 17 04:44:50 62.152.89.98:2784 -> xxx.yyy.218.233:3127 SYN ******S*
May 17 04:44:50 62.152.89.98:2785 -> xxx.yyy.218.233:6129 SYN ******S*
May 17 04:44:50 62.152.89.98:2786 -> xxx.yyy.218.233:139 SYN ******S*
May 17 04:44:50 62.152.89.98:2787 -> xxx.yyy.218.233:5000 SYN ******S*
May 17 04:44:50 62.152.89.98:2788 -> xxx.yyy.218.233:80 SYN ******S*
May 17 04:44:54 62.152.89.98:2780 -> xxx.yyy.218.233:2745 SYN ******S*
[...]
May 17 23:59:12 62.152.89.98:3154 -> xxx.yyy.174.203:6129 SYN ******S*
May 17 23:59:12 62.152.89.98:3253 -> xxx.yyy.174.203:139 SYN ******S*
May 17 23:59:10 62.152.89.98:4068 -> xxx.yyy.147.136:2745 SYN ******S*
May 17 23:59:18 62.152.89.98:3253 -> xxx.yyy.174.203:139 SYN ******S*
May 17 23:59:18 62.152.89.98:3154 -> xxx.yyy.174.203:6129 SYN ******S*
May 17 23:59:18 62.152.89.98:3078 -> xxx.yyy.174.203:3127 SYN ******S*
May 17 23:59:18 62.152.89.98:4998 -> xxx.yyy.174.203:1025 SYN ******S*
May 17 23:59:18 62.152.89.98:4970 -> xxx.yyy.174.203:2745 SYN ******S*
19878

May 17 00:00:05 217.255.117.39:64712 -> xxx.yyy.89.252:139 SYN ******S*
May 17 00:00:07 217.255.117.39:48328 -> xxx.yyy.89.252:445 SYN ******S*
May 17 00:00:05 217.255.117.39:64968 -> xxx.yyy.138.164:139 SYN ******S*
May 17 00:00:07 217.255.117.39:48584 -> xxx.yyy.138.164:445 SYN ******S*
May 17 00:00:08 217.255.117.39:56008 -> xxx.yyy.81.224:445 SYN ******S*
May 17 00:00:08 217.255.117.39:57032 -> xxx.yyy.86.194:445 SYN ******S*
May 17 00:00:08 217.255.117.39:57288 -> xxx.yyy.225.103:445 SYN ******S*
May 17 00:00:08 217.255.117.39:53448 -> xxx.yyy.159.190:139 SYN ******S*
[...]
May 17 02:12:09 217.255.117.39:59594 -> xxx.yyy.208.184:445 SYN ******S*
May 17 02:12:09 217.255.117.39:57802 -> xxx.yyy.164.242:139 SYN ******S*
May 17 02:12:10 217.255.117.39:54474 -> xxx.yyy.224.240:139 SYN ******S*
May 17 02:12:11 217.255.117.39:61898 -> xxx.yyy.237.238:445 SYN ******S*
May 17 02:12:14 217.255.117.39:41418 -> xxx.yyy.164.242:445 SYN ******S*
May 17 02:12:13 217.255.117.39:53706 -> xxx.yyy.233.12:445 SYN ******S*
May 17 02:12:13 217.255.117.39:54474 -> xxx.yyy.224.240:139 SYN ******S*
May 17 02:12:18 217.255.117.39:39626 -> xxx.yyy.224.240:445 SYN ******S*
16932

May 17 00:00:06 166.67.151.152:2636 -> xxx.yyy.232.165:445 SYN ******S*
May 17 00:00:06 166.67.151.152:2637 -> xxx.yyy.232.166:445 SYN ******S*
May 17 00:00:06 166.67.151.152:2638 -> xxx.yyy.232.167:445 SYN ******S*
May 17 00:00:04 166.67.151.152:2639 -> xxx.yyy.232.168:445 SYN ******S*
May 17 00:00:04 166.67.151.152:2613 -> xxx.yyy.232.142:445 SYN ******S*
May 17 00:00:04 166.67.151.152:2549 -> xxx.yyy.232.78:445 SYN ******S*
May 17 00:00:04 166.67.151.152:2546 -> xxx.yyy.232.75:445 SYN ******S*
May 17 00:00:04 166.67.151.152:2610 -> xxx.yyy.232.139:445 SYN ******S*
[...]
May 17 00:09:08 166.67.151.152:1105 -> xxx.yyy.255.226:445 SYN ******S*
May 17 00:09:08 166.67.151.152:1038 -> xxx.yyy.255.159:445 SYN ******S*
May 17 00:09:08 166.67.151.152:1102 -> xxx.yyy.255.223:445 SYN ******S*
May 17 00:09:08 166.67.151.152:1099 -> xxx.yyy.255.220:445 SYN ******S*
May 17 00:09:08 166.67.151.152:1035 -> xxx.yyy.255.156:445 SYN ******S*
May 17 00:09:08 166.67.151.152:1130 -> xxx.yyy.255.251:445 SYN ******S*
May 17 00:09:08 166.67.151.152:1131 -> xxx.yyy.255.252:445 SYN ******S*
May 17 00:09:08 166.67.151.152:1132 -> xxx.yyy.255.253:445 SYN ******S*
May 17 00:09:08 166.67.151.152:1133 -> xxx.yyy.255.254:445 SYN ******S*
15741

May 17 15:49:50 211.175.183.250:1464 -> xxx.yyy.1.0:1433 SYN ******S*
May 17 15:49:50 211.175.183.250:1470 -> xxx.yyy.1.6:1433 SYN ******S*
May 17 15:49:50 211.175.183.250:1466 -> xxx.yyy.1.2:1433 SYN ******S*
May 17 15:49:50 211.175.183.250:1468 -> xxx.yyy.1.4:1433 SYN ******S*
May 17 15:49:50 211.175.183.250:1467 -> xxx.yyy.1.3:1433 SYN ******S*
May 17 15:49:50 211.175.183.250:1465 -> xxx.yyy.1.1:1433 SYN ******S*
May 17 15:49:50 211.175.183.250:1471 -> xxx.yyy.1.7:1433 SYN ******S*
May 17 15:49:50 211.175.183.250:1472 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
May 17 15:50:04 211.175.183.250:1459 -> xxx.yyy.255.225:1433 SYN ******S*
May 17 15:50:04 211.175.183.250:1463 -> xxx.yyy.255.229:1433 SYN ******S*
May 17 15:50:04 211.175.183.250:1462 -> xxx.yyy.255.228:1433 SYN ******S*
May 17 15:50:04 211.175.183.250:1465 -> xxx.yyy.255.231:1433 SYN ******S*
May 17 15:50:04 211.175.183.250:1467 -> xxx.yyy.255.233:1433 SYN ******S*
May 17 15:50:04 211.175.183.250:1466 -> xxx.yyy.255.232:1433 SYN ******S*
May 17 15:50:04 211.175.183.250:1464 -> xxx.yyy.255.230:1433 SYN ******S*
May 17 15:50:04 211.175.183.250:1461 -> xxx.yyy.255.227:1433 SYN ******S*
May 17 15:50:04 211.175.183.250:1471 -> xxx.yyy.255.237:1433 SYN ******S*
15689

May 17 04:44:33 81.64.25.163:2609 -> xxx.yyy.193.192:2745 SYN ******S*
May 17 04:44:33 81.64.25.163:2613 -> xxx.yyy.193.192:1025 SYN ******S*
May 17 04:44:33 81.64.25.163:2614 -> xxx.yyy.193.192:445 SYN ******S*
May 17 04:44:33 81.64.25.163:2616 -> xxx.yyy.193.192:6129 SYN ******S*
May 17 04:44:33 81.64.25.163:2615 -> xxx.yyy.193.192:3127 SYN ******S*
May 17 04:44:33 81.64.25.163:2617 -> xxx.yyy.193.192:139 SYN ******S*
May 17 04:44:33 81.64.25.163:2618 -> xxx.yyy.193.192:5000 SYN ******S*
May 17 04:44:33 81.64.25.163:2619 -> xxx.yyy.193.192:80 SYN ******S*
[...]
May 17 17:33:18 81.64.25.163:3981 -> xxx.yyy.156.201:1025 SYN ******S*
May 17 17:33:18 81.64.25.163:3965 -> xxx.yyy.156.201:2745 SYN ******S*
May 17 17:33:18 81.64.25.163:4498 -> xxx.yyy.111.173:2745 SYN ******S*
May 17 17:33:18 81.64.25.163:4500 -> xxx.yyy.200.8:2745 SYN ******S*
May 17 17:33:18 81.64.25.163:4508 -> xxx.yyy.200.8:1025 SYN ******S*
May 17 17:33:24 81.64.25.163:4498 -> xxx.yyy.111.173:2745 SYN ******S*
May 17 17:33:24 81.64.25.163:4508 -> xxx.yyy.200.8:1025 SYN ******S*
May 17 17:33:24 81.64.25.163:4500 -> xxx.yyy.200.8:2745 SYN ******S*
13281

May 17 00:00:27 218.14.88.93:63900 -> xxx.yyy.214.70:3127 SYN ******S*
May 17 00:00:21 218.14.88.93:63896 -> xxx.yyy.214.70:1025 SYN ******S*
May 17 00:00:27 218.14.88.93:63894 -> xxx.yyy.214.70:2745 SYN ******S*
May 17 00:00:23 218.14.88.93:64359 -> xxx.yyy.207.42:2745 SYN ******S*
May 17 00:00:23 218.14.88.93:64364 -> xxx.yyy.207.42:1025 SYN ******S*
May 17 00:00:24 218.14.88.93:64846 -> xxx.yyy.75.74:3127 SYN ******S*
May 17 00:00:26 218.14.88.93:64695 -> xxx.yyy.10.191:1025 SYN ******S*
May 17 00:00:26 218.14.88.93:64693 -> xxx.yyy.10.191:2745 SYN ******S*
[...]
May 17 06:45:04 218.14.88.93:64097 -> xxx.yyy.166.242:139 SYN ******S*
May 17 06:45:04 218.14.88.93:64098 -> xxx.yyy.166.242:5000 SYN ******S*
May 17 06:45:04 218.14.88.93:64104 -> xxx.yyy.166.242:80 SYN ******S*
May 17 06:45:10 218.14.88.93:64087 -> xxx.yyy.166.242:2745 SYN ******S*
May 17 06:45:10 218.14.88.93:64097 -> xxx.yyy.166.242:139 SYN ******S*
May 17 06:45:10 218.14.88.93:64089 -> xxx.yyy.166.242:1025 SYN ******S*
May 17 06:45:10 218.14.88.93:64095 -> xxx.yyy.166.242:6129 SYN ******S*
May 17 06:45:10 218.14.88.93:64098 -> xxx.yyy.166.242:5000 SYN ******S*
May 17 06:45:10 218.14.88.93:64104 -> xxx.yyy.166.242:80 SYN ******S*
13230

May 17 22:53:27 80.39.175.169:2748 -> xxx.yyy.1.80:559 SYN ******S*
May 17 22:53:27 80.39.175.169:2749 -> xxx.yyy.1.81:559 SYN ******S*
May 17 22:53:27 80.39.175.169:2750 -> xxx.yyy.1.82:559 SYN ******S*
May 17 22:53:27 80.39.175.169:2751 -> xxx.yyy.1.83:559 SYN ******S*
May 17 22:53:27 80.39.175.169:2752 -> xxx.yyy.1.84:559 SYN ******S*
May 17 22:53:27 80.39.175.169:2753 -> xxx.yyy.1.85:559 SYN ******S*
May 17 22:53:27 80.39.175.169:2754 -> xxx.yyy.1.86:559 SYN ******S*
May 17 22:53:27 80.39.175.169:2755 -> xxx.yyy.1.87:559 SYN ******S*
[...]
May 17 22:59:25 80.39.175.169:1649 -> xxx.yyy.254.50:559 SYN ******S*
May 17 22:59:25 80.39.175.169:1650 -> xxx.yyy.254.51:559 SYN ******S*
May 17 22:59:25 80.39.175.169:1651 -> xxx.yyy.254.52:559 SYN ******S*
May 17 22:59:25 80.39.175.169:1652 -> xxx.yyy.254.53:559 SYN ******S*
May 17 22:59:25 80.39.175.169:1653 -> xxx.yyy.254.54:559 SYN ******S*
May 17 22:59:25 80.39.175.169:1654 -> xxx.yyy.254.55:559 SYN ******S*
May 17 22:59:25 80.39.175.169:1655 -> xxx.yyy.254.56:559 SYN ******S*
May 17 22:59:25 80.39.175.169:1656 -> xxx.yyy.254.57:559 SYN ******S*
May 17 22:59:25 80.39.175.169:1657 -> xxx.yyy.254.58:559 SYN ******S*
12384

May 17 12:57:11 80.201.153.64:3046 -> xxx.yyy.1.1:139 SYN ******S*
May 17 12:57:11 80.201.153.64:3047 -> xxx.yyy.1.2:139 SYN ******S*
May 17 12:57:11 80.201.153.64:3048 -> xxx.yyy.1.3:139 SYN ******S*
May 17 12:57:11 80.201.153.64:3049 -> xxx.yyy.1.4:139 SYN ******S*
May 17 12:57:11 80.201.153.64:3050 -> xxx.yyy.1.5:139 SYN ******S*
May 17 12:57:11 80.201.153.64:3052 -> xxx.yyy.1.7:139 SYN ******S*
May 17 12:57:11 80.201.153.64:3053 -> xxx.yyy.1.8:139 SYN ******S*
May 17 12:57:11 80.201.153.64:3054 -> xxx.yyy.1.9:139 SYN ******S*
[...]
May 17 15:17:36 80.201.153.64:3371 -> xxx.yyy.17.244:445 SYN ******S*
May 17 15:17:36 80.201.153.64:3372 -> xxx.yyy.17.245:445 SYN ******S*
May 17 15:17:36 80.201.153.64:3373 -> xxx.yyy.17.248:445 SYN ******S*
May 17 15:17:36 80.201.153.64:3374 -> xxx.yyy.17.249:445 SYN ******S*
May 17 15:17:36 80.201.153.64:3375 -> xxx.yyy.17.251:445 SYN ******S*
May 17 15:17:36 80.201.153.64:3376 -> xxx.yyy.17.250:445 SYN ******S*
May 17 15:17:36 80.201.153.64:3377 -> xxx.yyy.17.253:445 SYN ******S*
May 17 15:17:36 80.201.153.64:3378 -> xxx.yyy.17.252:445 SYN ******S*
May 17 15:17:36 80.201.153.64:3379 -> xxx.yyy.17.254:445 SYN ******S*
10689

May 17 04:44:37 199.33.79.4:60780 -> xxx.yyy.226.127:2745 SYN ******S*
May 17 04:44:37 199.33.79.4:5205 -> xxx.yyy.226.127:445 SYN ******S*
May 17 04:44:37 199.33.79.4:21203 -> xxx.yyy.226.127:1025 SYN ******S*
May 17 04:44:37 199.33.79.4:36902 -> xxx.yyy.133.54:2745 SYN ******S*
May 17 04:44:39 199.33.79.4:57745 -> xxx.yyy.138.113:2745 SYN ******S*
May 17 04:44:39 199.33.79.4:5935 -> xxx.yyy.138.113:1025 SYN ******S*
May 17 04:44:39 199.33.79.4:28606 -> xxx.yyy.138.113:445 SYN ******S*
May 17 04:44:39 199.33.79.4:1806 -> xxx.yyy.138.113:3127 SYN ******S*
[...]
May 17 19:15:12 199.33.79.4:7187 -> xxx.yyy.16.41:139 SYN ******S*
May 17 19:15:12 199.33.79.4:20040 -> xxx.yyy.16.41:5000 SYN ******S*
May 17 19:15:18 199.33.79.4:14394 -> xxx.yyy.16.41:6129 SYN ******S*
May 17 19:15:18 199.33.79.4:22038 -> xxx.yyy.16.41:2745 SYN ******S*
May 17 19:15:18 199.33.79.4:58065 -> xxx.yyy.16.41:3127 SYN ******S*
May 17 19:15:18 199.33.79.4:41949 -> xxx.yyy.16.41:445 SYN ******S*
May 17 19:15:18 199.33.79.4:20040 -> xxx.yyy.16.41:5000 SYN ******S*
May 17 19:15:18 199.33.79.4:7187 -> xxx.yyy.16.41:139 SYN ******S*
May 17 19:15:18 199.33.79.4:6291 -> xxx.yyy.16.41:1025 SYN ******S*
9804

May 17 00:00:05 192.115.194.145:3884 -> xxx.yyy.197.150:2745 SYN ******S*
May 17 00:00:05 192.115.194.145:3890 -> xxx.yyy.197.150:1025 SYN ******S*
May 17 00:00:05 192.115.194.145:3893 -> xxx.yyy.197.150:445 SYN ******S*
May 17 00:00:05 192.115.194.145:3894 -> xxx.yyy.197.150:3127 SYN ******S*
May 17 00:00:05 192.115.194.145:3895 -> xxx.yyy.197.150:6129 SYN ******S*
May 17 00:00:05 192.115.194.145:3899 -> xxx.yyy.197.150:139 SYN ******S*
May 17 00:00:05 192.115.194.145:3900 -> xxx.yyy.197.150:80 SYN ******S*
May 17 00:00:06 192.115.194.145:2045 -> xxx.yyy.246.37:2745 SYN ******S*
[...]
May 17 03:43:49 192.115.194.145:2137 -> xxx.yyy.136.239:2745 SYN ******S*
May 17 03:43:49 192.115.194.145:2144 -> xxx.yyy.136.239:3127 SYN ******S*
May 17 03:43:49 192.115.194.145:2142 -> xxx.yyy.136.239:445 SYN ******S*
May 17 03:43:49 192.115.194.145:2140 -> xxx.yyy.136.239:1025 SYN ******S*
May 17 03:43:52 192.115.194.145:2265 -> xxx.yyy.206.194:2745 SYN ******S*
May 17 03:43:53 192.115.194.145:2415 -> xxx.yyy.144.157:445 SYN ******S*
May 17 03:43:53 192.115.194.145:2421 -> xxx.yyy.144.157:3127 SYN ******S*
May 17 03:43:53 192.115.194.145:2413 -> xxx.yyy.144.157:1025 SYN ******S*
May 17 03:43:53 192.115.194.145:2411 -> xxx.yyy.144.157:2745 SYN ******S*
8997

--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly@xxxxxxx phone: (319) 273-5850 fax: (319) 273-7373
_______________________________________________
Intrusions mailing list
Intrusions@xxxxxxxxxxxxxx
http://www.dshield.org/mailman/listinfo/intrusions
<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  [LOGS] Summary of large-scale portscanning detects: 00051, Ken . Connelly
Next by Date:  Strange ICMP: 00051, Ron Shuck
Previous by Thread:  [LOGS] Summary of large-scale portscanning detectsi: 00051, Ken . Connelly
Next by Thread:  [LOGS] Summary of large-scale portscanning detects: 00051, Ken . Connelly
Indexes:  [Date] [Thread] [Top] [All Lists]

Google Custom Search
News | FAQ | advertise