logo       
<prev   next>

[LOGS] Summary of large-scale portscanning detects: msg#00074

security.intrusions

Subject: [LOGS] Summary of large-scale portscanning detects

The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0500.

May 22 01:50:13 200.1.66.66:22002 -> xxx.yyy.1.0:3127 SYN ******S*
May 22 01:50:13 200.1.66.66:22002 -> xxx.yyy.1.0:1080 SYN ******S*
May 22 01:50:13 200.1.66.66:22002 -> xxx.yyy.1.0:10080 SYN ******S*
May 22 01:50:13 200.1.66.66:22002 -> xxx.yyy.1.0:3128 SYN ******S*
May 22 01:50:13 200.1.66.66:22002 -> xxx.yyy.1.1:3127 SYN ******S*
May 22 01:50:13 200.1.66.66:22002 -> xxx.yyy.1.1:1080 SYN ******S*
May 22 01:50:13 200.1.66.66:22002 -> xxx.yyy.1.1:10080 SYN ******S*
May 22 01:50:13 200.1.66.66:22002 -> xxx.yyy.1.1:3128 SYN ******S*
[...]
May 22 09:49:40 200.1.66.66:22002 -> xxx.yyy.255.253:10080 SYN ******S*
May 22 09:49:40 200.1.66.66:22002 -> xxx.yyy.255.253:3128 SYN ******S*
May 22 09:49:40 200.1.66.66:22002 -> xxx.yyy.255.254:3127 SYN ******S*
May 22 09:49:40 200.1.66.66:22002 -> xxx.yyy.255.254:1080 SYN ******S*
May 22 09:49:40 200.1.66.66:22002 -> xxx.yyy.255.254:10080 SYN ******S*
May 22 09:49:40 200.1.66.66:22002 -> xxx.yyy.255.254:3128 SYN ******S*
May 22 09:49:40 200.1.66.66:22002 -> xxx.yyy.255.255:3127 SYN ******S*
May 22 09:49:41 200.1.66.66:22002 -> xxx.yyy.255.255:10080 SYN ******S*
May 22 09:49:41 200.1.66.66:22002 -> xxx.yyy.255.255:3128 SYN ******S*
178888

May 22 08:01:46 80.19.31.219:1249 -> xxx.yyy.1.1:4000 SYN ******S*
May 22 08:01:46 80.19.31.219:1250 -> xxx.yyy.1.2:4000 SYN ******S*
May 22 08:01:48 80.19.31.219:1251 -> xxx.yyy.1.3:4000 SYN ******S*
May 22 08:01:48 80.19.31.219:1252 -> xxx.yyy.1.4:4000 SYN ******S*
May 22 08:01:48 80.19.31.219:1253 -> xxx.yyy.1.5:4000 SYN ******S*
May 22 08:01:48 80.19.31.219:1254 -> xxx.yyy.1.6:4000 SYN ******S*
May 22 08:01:48 80.19.31.219:1255 -> xxx.yyy.1.7:4000 SYN ******S*
May 22 08:01:48 80.19.31.219:1256 -> xxx.yyy.1.8:4000 SYN ******S*
[...]
May 22 13:55:51 80.19.31.219:3284 -> xxx.yyy.255.243:4000 SYN ******S*
May 22 13:55:51 80.19.31.219:3288 -> xxx.yyy.255.247:4000 SYN ******S*
May 22 13:55:51 80.19.31.219:3285 -> xxx.yyy.255.244:4000 SYN ******S*
May 22 13:55:51 80.19.31.219:3282 -> xxx.yyy.255.241:4000 SYN ******S*
May 22 13:55:51 80.19.31.219:3293 -> xxx.yyy.255.252:4000 SYN ******S*
May 22 13:55:51 80.19.31.219:3294 -> xxx.yyy.255.253:4000 SYN ******S*
May 22 13:55:51 80.19.31.219:3295 -> xxx.yyy.255.254:4000 SYN ******S*
May 22 13:55:51 80.19.31.219:3292 -> xxx.yyy.255.251:4000 SYN ******S*
140392

May 22 05:05:06 130.240.23.219:1704 -> xxx.yyy.1.1:139 SYN ******S*
May 22 05:05:06 130.240.23.219:1705 -> xxx.yyy.1.2:139 SYN ******S*
May 22 05:05:06 130.240.23.219:1706 -> xxx.yyy.1.3:139 SYN ******S*
May 22 05:05:06 130.240.23.219:1707 -> xxx.yyy.1.4:139 SYN ******S*
May 22 05:05:06 130.240.23.219:1708 -> xxx.yyy.1.5:139 SYN ******S*
May 22 05:05:06 130.240.23.219:1709 -> xxx.yyy.1.6:139 SYN ******S*
May 22 05:05:06 130.240.23.219:1710 -> xxx.yyy.1.7:139 SYN ******S*
May 22 05:05:06 130.240.23.219:1711 -> xxx.yyy.1.8:139 SYN ******S*
[...]
May 22 05:16:13 130.240.23.219:2733 -> xxx.yyy.255.249:139 SYN ******S*
May 22 05:16:13 130.240.23.219:2730 -> xxx.yyy.255.246:139 SYN ******S*
May 22 05:16:13 130.240.23.219:2737 -> xxx.yyy.255.253:139 SYN ******S*
May 22 05:16:13 130.240.23.219:2734 -> xxx.yyy.255.250:139 SYN ******S*
May 22 05:16:13 130.240.23.219:2731 -> xxx.yyy.255.247:139 SYN ******S*
May 22 05:16:13 130.240.23.219:2738 -> xxx.yyy.255.254:139 SYN ******S*
May 22 05:16:13 130.240.23.219:2732 -> xxx.yyy.255.248:139 SYN ******S*
May 22 05:16:13 130.240.23.219:2729 -> xxx.yyy.255.245:139 SYN ******S*
May 22 05:16:13 130.240.23.219:2735 -> xxx.yyy.255.251:139 SYN ******S*
77655

May 22 14:31:44 142.179.148.182:2651 -> xxx.yyy.1.1:1433 SYN ******S*
May 22 14:31:44 142.179.148.182:2653 -> xxx.yyy.1.2:1433 SYN ******S*
May 22 14:31:44 142.179.148.182:2655 -> xxx.yyy.1.3:1433 SYN ******S*
May 22 14:31:44 142.179.148.182:2657 -> xxx.yyy.1.4:1433 SYN ******S*
May 22 14:31:41 142.179.148.182:2659 -> xxx.yyy.1.5:1433 SYN ******S*
May 22 14:31:44 142.179.148.182:2661 -> xxx.yyy.1.6:1433 SYN ******S*
May 22 14:31:44 142.179.148.182:2663 -> xxx.yyy.1.7:1433 SYN ******S*
May 22 14:31:44 142.179.148.182:2665 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
May 22 14:42:37 142.179.148.182:2522 -> xxx.yyy.255.220:1433 SYN ******S*
May 22 14:42:37 142.179.148.182:2514 -> xxx.yyy.255.216:1433 SYN ******S*
May 22 14:42:37 142.179.148.182:2524 -> xxx.yyy.255.221:1433 SYN ******S*
May 22 14:42:37 142.179.148.182:2516 -> xxx.yyy.255.217:1433 SYN ******S*
May 22 14:42:38 142.179.148.182:2534 -> xxx.yyy.255.226:1433 SYN ******S*
May 22 14:42:38 142.179.148.182:2542 -> xxx.yyy.255.230:1433 SYN ******S*
May 22 14:42:38 142.179.148.182:2536 -> xxx.yyy.255.227:1433 SYN ******S*
May 22 14:42:38 142.179.148.182:2538 -> xxx.yyy.255.228:1433 SYN ******S*
May 22 14:42:38 142.179.148.182:2540 -> xxx.yyy.255.229:1433 SYN ******S*
74400

May 22 19:05:26 80.53.112.26:3310 -> xxx.yyy.1.2:6129 SYN ******S*
May 22 19:05:28 80.53.112.26:3311 -> xxx.yyy.1.3:6129 SYN ******S*
May 22 19:05:28 80.53.112.26:3312 -> xxx.yyy.1.4:6129 SYN ******S*
May 22 19:05:28 80.53.112.26:3313 -> xxx.yyy.1.5:6129 SYN ******S*
May 22 19:05:28 80.53.112.26:3314 -> xxx.yyy.1.6:6129 SYN ******S*
May 22 19:05:25 80.53.112.26:3315 -> xxx.yyy.1.7:6129 SYN ******S*
May 22 19:05:28 80.53.112.26:3316 -> xxx.yyy.1.8:6129 SYN ******S*
May 22 19:05:28 80.53.112.26:3317 -> xxx.yyy.1.9:6129 SYN ******S*
[...]
May 22 19:16:20 80.53.112.26:2212 -> xxx.yyy.255.180:6129 SYN ******S*
May 22 19:16:20 80.53.112.26:2209 -> xxx.yyy.255.177:6129 SYN ******S*
May 22 19:16:20 80.53.112.26:2226 -> xxx.yyy.255.194:6129 SYN ******S*
May 22 19:16:20 80.53.112.26:2220 -> xxx.yyy.255.188:6129 SYN ******S*
May 22 19:16:20 80.53.112.26:2221 -> xxx.yyy.255.189:6129 SYN ******S*
May 22 19:16:20 80.53.112.26:2218 -> xxx.yyy.255.186:6129 SYN ******S*
May 22 19:16:20 80.53.112.26:2222 -> xxx.yyy.255.190:6129 SYN ******S*
May 22 19:16:20 80.53.112.26:2219 -> xxx.yyy.255.187:6129 SYN ******S*
73997

May 22 16:07:29 209.216.92.186:1273 -> xxx.yyy.1.1:6129 SYN ******S*
May 22 16:07:29 209.216.92.186:1274 -> xxx.yyy.1.2:6129 SYN ******S*
May 22 16:07:31 209.216.92.186:1275 -> xxx.yyy.1.3:6129 SYN ******S*
May 22 16:07:31 209.216.92.186:1276 -> xxx.yyy.1.4:6129 SYN ******S*
May 22 16:07:28 209.216.92.186:1277 -> xxx.yyy.1.5:6129 SYN ******S*
May 22 16:07:31 209.216.92.186:1278 -> xxx.yyy.1.6:6129 SYN ******S*
May 22 16:07:31 209.216.92.186:1279 -> xxx.yyy.1.7:6129 SYN ******S*
May 22 16:07:31 209.216.92.186:1280 -> xxx.yyy.1.8:6129 SYN ******S*
[...]
May 22 16:18:36 209.216.92.186:3817 -> xxx.yyy.255.247:6129 SYN ******S*
May 22 16:18:36 209.216.92.186:3814 -> xxx.yyy.255.244:6129 SYN ******S*
May 22 16:18:36 209.216.92.186:3811 -> xxx.yyy.255.241:6129 SYN ******S*
May 22 16:18:36 209.216.92.186:3824 -> xxx.yyy.255.254:6129 SYN ******S*
May 22 16:18:36 209.216.92.186:3821 -> xxx.yyy.255.251:6129 SYN ******S*
May 22 16:18:36 209.216.92.186:3822 -> xxx.yyy.255.252:6129 SYN ******S*
May 22 16:18:36 209.216.92.186:3823 -> xxx.yyy.255.253:6129 SYN ******S*
May 22 16:18:36 209.216.92.186:3820 -> xxx.yyy.255.250:6129 SYN ******S*
73535

May 22 08:01:00 66.115.22.35:4364 -> xxx.yyy.1.1:443 SYN ******S*
May 22 08:01:00 66.115.22.35:4365 -> xxx.yyy.1.2:443 SYN ******S*
May 22 08:01:01 66.115.22.35:4366 -> xxx.yyy.1.3:443 SYN ******S*
May 22 08:01:01 66.115.22.35:4367 -> xxx.yyy.1.4:443 SYN ******S*
May 22 08:01:01 66.115.22.35:4368 -> xxx.yyy.1.5:443 SYN ******S*
May 22 08:01:01 66.115.22.35:4369 -> xxx.yyy.1.6:443 SYN ******S*
May 22 08:01:01 66.115.22.35:4370 -> xxx.yyy.1.7:443 SYN ******S*
May 22 08:01:01 66.115.22.35:4371 -> xxx.yyy.1.8:443 SYN ******S*
[...]
May 22 08:11:57 66.115.22.35:2828 -> xxx.yyy.255.249:443 SYN ******S*
May 22 08:11:57 66.115.22.35:2832 -> xxx.yyy.255.253:443 SYN ******S*
May 22 08:11:57 66.115.22.35:2833 -> xxx.yyy.255.254:443 SYN ******S*
May 22 08:11:57 66.115.22.35:2825 -> xxx.yyy.255.246:443 SYN ******S*
May 22 08:11:57 66.115.22.35:2829 -> xxx.yyy.255.250:443 SYN ******S*
May 22 08:11:57 66.115.22.35:2826 -> xxx.yyy.255.247:443 SYN ******S*
May 22 08:11:57 66.115.22.35:2830 -> xxx.yyy.255.251:443 SYN ******S*
May 22 08:11:57 66.115.22.35:2827 -> xxx.yyy.255.248:443 SYN ******S*
May 22 08:11:57 66.115.22.35:2831 -> xxx.yyy.255.252:443 SYN ******S*
73212

May 22 21:09:06 80.53.23.122:1293 -> xxx.yyy.1.1:445 SYN ******S*
May 22 21:09:06 80.53.23.122:1294 -> xxx.yyy.1.2:445 SYN ******S*
May 22 21:09:09 80.53.23.122:1295 -> xxx.yyy.1.3:445 SYN ******S*
May 22 21:09:09 80.53.23.122:1296 -> xxx.yyy.1.4:445 SYN ******S*
May 22 21:09:09 80.53.23.122:1297 -> xxx.yyy.1.5:445 SYN ******S*
May 22 21:09:09 80.53.23.122:1298 -> xxx.yyy.1.6:445 SYN ******S*
May 22 21:09:09 80.53.23.122:1299 -> xxx.yyy.1.7:445 SYN ******S*
May 22 21:09:09 80.53.23.122:1300 -> xxx.yyy.1.8:445 SYN ******S*
[...]
May 22 21:20:48 80.53.23.122:3886 -> xxx.yyy.255.249:445 SYN ******S*
May 22 21:20:48 80.53.23.122:3884 -> xxx.yyy.255.247:445 SYN ******S*
May 22 21:20:48 80.53.23.122:3882 -> xxx.yyy.255.245:445 SYN ******S*
May 22 21:20:48 80.53.23.122:3883 -> xxx.yyy.255.246:445 SYN ******S*
May 22 21:20:48 80.53.23.122:3881 -> xxx.yyy.255.244:445 SYN ******S*
May 22 21:20:48 80.53.23.122:3879 -> xxx.yyy.255.242:445 SYN ******S*
May 22 21:20:48 80.53.23.122:3889 -> xxx.yyy.255.252:445 SYN ******S*
May 22 21:20:48 80.53.23.122:3890 -> xxx.yyy.255.253:445 SYN ******S*
May 22 21:20:48 80.53.23.122:3891 -> xxx.yyy.255.254:445 SYN ******S*
71962

May 22 09:41:07 66.110.137.59:1074 -> xxx.yyy.1.1:1433 SYN ******S*
May 22 09:41:07 66.110.137.59:1075 -> xxx.yyy.1.2:1433 SYN ******S*
May 22 09:41:07 66.110.137.59:1076 -> xxx.yyy.1.3:1433 SYN ******S*
May 22 09:41:07 66.110.137.59:1077 -> xxx.yyy.1.4:1433 SYN ******S*
May 22 09:41:07 66.110.137.59:1078 -> xxx.yyy.1.5:1433 SYN ******S*
May 22 09:41:07 66.110.137.59:1079 -> xxx.yyy.1.6:1433 SYN ******S*
May 22 09:41:04 66.110.137.59:1081 -> xxx.yyy.1.7:1433 SYN ******S*
May 22 09:41:04 66.110.137.59:1082 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
May 22 09:52:46 66.110.137.59:3864 -> xxx.yyy.255.246:1433 SYN ******S*
May 22 09:52:46 66.110.137.59:3869 -> xxx.yyy.255.250:1433 SYN ******S*
May 22 09:52:46 66.110.137.59:3862 -> xxx.yyy.255.244:1433 SYN ******S*
May 22 09:52:46 66.110.137.59:3866 -> xxx.yyy.255.247:1433 SYN ******S*
May 22 09:52:46 66.110.137.59:3870 -> xxx.yyy.255.251:1433 SYN ******S*
May 22 09:52:46 66.110.137.59:3867 -> xxx.yyy.255.248:1433 SYN ******S*
May 22 09:52:46 66.110.137.59:3863 -> xxx.yyy.255.245:1433 SYN ******S*
May 22 09:52:47 66.110.137.59:3872 -> xxx.yyy.255.253:1433 SYN ******S*
May 22 09:52:47 66.110.137.59:3873 -> xxx.yyy.255.254:1433 SYN ******S*
71883

May 22 00:51:01 211.53.210.60:3571 -> xxx.yyy.1.1:1433 SYN ******S*
May 22 00:51:01 211.53.210.60:3572 -> xxx.yyy.1.2:1433 SYN ******S*
May 22 00:51:01 211.53.210.60:3573 -> xxx.yyy.1.3:1433 SYN ******S*
May 22 00:51:01 211.53.210.60:3574 -> xxx.yyy.1.4:1433 SYN ******S*
May 22 00:51:01 211.53.210.60:3575 -> xxx.yyy.1.5:1433 SYN ******S*
May 22 00:50:59 211.53.210.60:3576 -> xxx.yyy.1.6:1433 SYN ******S*
May 22 00:50:59 211.53.210.60:3577 -> xxx.yyy.1.7:1433 SYN ******S*
May 22 00:51:02 211.53.210.60:3578 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
May 22 01:02:45 211.53.210.60:2377 -> xxx.yyy.255.244:1433 SYN ******S*
May 22 01:02:45 211.53.210.60:2378 -> xxx.yyy.255.245:1433 SYN ******S*
May 22 01:02:45 211.53.210.60:2379 -> xxx.yyy.255.246:1433 SYN ******S*
May 22 01:02:45 211.53.210.60:2374 -> xxx.yyy.255.241:1433 SYN ******S*
May 22 01:02:45 211.53.210.60:2381 -> xxx.yyy.255.248:1433 SYN ******S*
May 22 01:02:45 211.53.210.60:2384 -> xxx.yyy.255.251:1433 SYN ******S*
May 22 01:02:45 211.53.210.60:2386 -> xxx.yyy.255.253:1433 SYN ******S*
May 22 01:02:45 211.53.210.60:2385 -> xxx.yyy.255.252:1433 SYN ******S*
May 22 01:02:45 211.53.210.60:2387 -> xxx.yyy.255.254:1433 SYN ******S*
71762

May 22 07:21:35 202.134.127.58:3925 -> xxx.yyy.1.1:4899 SYN ******S*
May 22 07:21:35 202.134.127.58:3926 -> xxx.yyy.1.2:4899 SYN ******S*
May 22 07:21:36 202.134.127.58:3927 -> xxx.yyy.1.3:4899 SYN ******S*
May 22 07:21:36 202.134.127.58:3928 -> xxx.yyy.1.4:4899 SYN ******S*
May 22 07:21:36 202.134.127.58:3929 -> xxx.yyy.1.5:4899 SYN ******S*
May 22 07:21:36 202.134.127.58:3930 -> xxx.yyy.1.6:4899 SYN ******S*
May 22 07:21:33 202.134.127.58:3931 -> xxx.yyy.1.7:4899 SYN ******S*
May 22 07:21:33 202.134.127.58:3932 -> xxx.yyy.1.8:4899 SYN ******S*
[...]
May 22 07:35:17 202.134.127.58:1905 -> xxx.yyy.255.246:4899 SYN ******S*
May 22 07:35:17 202.134.127.58:1906 -> xxx.yyy.255.247:4899 SYN ******S*
May 22 07:35:17 202.134.127.58:1907 -> xxx.yyy.255.248:4899 SYN ******S*
May 22 07:35:17 202.134.127.58:1901 -> xxx.yyy.255.242:4899 SYN ******S*
May 22 07:35:17 202.134.127.58:1913 -> xxx.yyy.255.254:4899 SYN ******S*
May 22 07:35:17 202.134.127.58:1911 -> xxx.yyy.255.252:4899 SYN ******S*
May 22 07:35:17 202.134.127.58:1912 -> xxx.yyy.255.253:4899 SYN ******S*
May 22 07:35:17 202.134.127.58:1910 -> xxx.yyy.255.251:4899 SYN ******S*
71444

May 22 15:23:14 134.2.50.3:1236 -> xxx.yyy.1.1:5554 SYN ******S*
May 22 15:23:14 134.2.50.3:1238 -> xxx.yyy.1.2:5554 SYN ******S*
May 22 15:23:16 134.2.50.3:1240 -> xxx.yyy.1.3:5554 SYN ******S*
May 22 15:23:16 134.2.50.3:1242 -> xxx.yyy.1.4:5554 SYN ******S*
May 22 15:23:16 134.2.50.3:1244 -> xxx.yyy.1.5:5554 SYN ******S*
May 22 15:23:16 134.2.50.3:1246 -> xxx.yyy.1.6:5554 SYN ******S*
May 22 15:23:16 134.2.50.3:1248 -> xxx.yyy.1.7:5554 SYN ******S*
May 22 15:23:16 134.2.50.3:1250 -> xxx.yyy.1.8:5554 SYN ******S*
[...]
May 22 15:35:44 134.2.50.3:2144 -> xxx.yyy.255.248:5554 SYN ******S*
May 22 15:35:44 134.2.50.3:2141 -> xxx.yyy.255.245:5554 SYN ******S*
May 22 15:35:44 134.2.50.3:2138 -> xxx.yyy.255.242:5554 SYN ******S*
May 22 15:35:44 134.2.50.3:2142 -> xxx.yyy.255.246:5554 SYN ******S*
May 22 15:35:44 134.2.50.3:2151 -> xxx.yyy.255.253:5554 SYN ******S*
May 22 15:35:44 134.2.50.3:2152 -> xxx.yyy.255.254:5554 SYN ******S*
May 22 15:35:44 134.2.50.3:2149 -> xxx.yyy.255.251:5554 SYN ******S*
May 22 15:35:44 134.2.50.3:2150 -> xxx.yyy.255.252:5554 SYN ******S*
70897

May 22 00:00:50 202.110.229.97:19544 -> xxx.yyy.174.154:2745 SYN ******S*
May 22 00:00:49 202.110.229.97:19001 -> xxx.yyy.241.54:2745 SYN ******S*
May 22 00:00:54 202.110.229.97:19885 -> xxx.yyy.69.36:2745 SYN ******S*
May 22 00:00:54 202.110.229.97:17912 -> xxx.yyy.69.36:3127 SYN ******S*
May 22 00:00:54 202.110.229.97:17202 -> xxx.yyy.69.36:6129 SYN ******S*
May 22 00:00:54 202.110.229.97:59575 -> xxx.yyy.69.36:5000 SYN ******S*
May 22 00:00:53 202.110.229.97:6955 -> xxx.yyy.74.65:2745 SYN ******S*
May 22 00:00:58 202.110.229.97:55014 -> xxx.yyy.201.61:2745 SYN ******S*
[...]
May 22 23:59:15 202.110.229.97:31428 -> xxx.yyy.80.72:3127 SYN ******S*
May 22 23:59:22 202.110.229.97:45068 -> xxx.yyy.184.166:2745 SYN ******S*
May 22 23:59:22 202.110.229.97:4262 -> xxx.yyy.205.59:2745 SYN ******S*
May 22 23:59:20 202.110.229.97:11699 -> xxx.yyy.104.245:6129 SYN ******S*
May 22 23:59:20 202.110.229.97:46208 -> xxx.yyy.104.245:3127 SYN ******S*
May 22 23:59:20 202.110.229.97:16214 -> xxx.yyy.104.245:2745 SYN ******S*
May 22 23:59:20 202.110.229.97:55472 -> xxx.yyy.104.245:5000 SYN ******S*
May 22 23:59:22 202.110.229.97:21016 -> xxx.yyy.80.72:2745 SYN ******S*
May 22 23:59:22 202.110.229.97:31428 -> xxx.yyy.80.72:3127 SYN ******S*
38525

May 22 00:00:42 81.51.107.120:2814 -> xxx.yyy.150.229:2745 SYN ******S*
May 22 00:00:47 81.51.107.120:3113 -> xxx.yyy.155.24:2745 SYN ******S*
May 22 00:00:44 81.51.107.120:3115 -> xxx.yyy.155.24:1025 SYN ******S*
May 22 00:00:44 81.51.107.120:3117 -> xxx.yyy.155.24:3127 SYN ******S*
May 22 00:00:44 81.51.107.120:3118 -> xxx.yyy.155.24:6129 SYN ******S*
May 22 00:00:46 81.51.107.120:3258 -> xxx.yyy.163.142:2745 SYN ******S*
May 22 00:00:48 81.51.107.120:2814 -> xxx.yyy.150.229:2745 SYN ******S*
May 22 00:00:49 81.51.107.120:3258 -> xxx.yyy.163.142:2745 SYN ******S*
[...]
May 22 19:01:17 81.51.107.120:1184 -> xxx.yyy.78.234:2745 SYN ******S*
May 22 19:01:18 81.51.107.120:1277 -> xxx.yyy.219.130:2745 SYN ******S*
May 22 19:01:19 81.51.107.120:4985 -> xxx.yyy.32.159:1025 SYN ******S*
May 22 19:01:19 81.51.107.120:4983 -> xxx.yyy.32.159:2745 SYN ******S*
May 22 19:01:23 81.51.107.120:1166 -> xxx.yyy.173.90:1025 SYN ******S*
May 22 19:01:23 81.51.107.120:1163 -> xxx.yyy.173.90:2745 SYN ******S*
May 22 19:01:23 81.51.107.120:1184 -> xxx.yyy.78.234:2745 SYN ******S*
May 22 19:01:24 81.51.107.120:1560 -> xxx.yyy.186.107:2745 SYN ******S*
May 22 19:01:24 81.51.107.120:1277 -> xxx.yyy.219.130:2745 SYN ******S*
35680

May 22 06:08:51 24.203.145.210:3965 -> xxx.yyy.1.0:1433 SYN ******S*
May 22 06:08:51 24.203.145.210:3970 -> xxx.yyy.1.1:1433 SYN ******S*
May 22 06:08:51 24.203.145.210:3976 -> xxx.yyy.1.2:1433 SYN ******S*
May 22 06:08:51 24.203.145.210:3988 -> xxx.yyy.1.3:1433 SYN ******S*
May 22 06:08:51 24.203.145.210:3993 -> xxx.yyy.1.4:1433 SYN ******S*
May 22 06:08:51 24.203.145.210:4000 -> xxx.yyy.1.5:1433 SYN ******S*
May 22 06:08:51 24.203.145.210:4004 -> xxx.yyy.1.6:1433 SYN ******S*
May 22 06:08:51 24.203.145.210:4008 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
May 22 09:33:43 24.203.145.210:3848 -> xxx.yyy.95.247:1433 SYN ******S*
May 22 09:33:44 24.203.145.210:3854 -> xxx.yyy.95.248:1433 SYN ******S*
May 22 09:33:44 24.203.145.210:4046 -> xxx.yyy.95.249:1433 SYN ******S*
May 22 09:33:44 24.203.145.210:4059 -> xxx.yyy.95.250:1433 SYN ******S*
May 22 09:33:45 24.203.145.210:4105 -> xxx.yyy.95.251:1433 SYN ******S*
May 22 09:33:45 24.203.145.210:4114 -> xxx.yyy.95.252:1433 SYN ******S*
May 22 09:33:45 24.203.145.210:4144 -> xxx.yyy.95.253:1433 SYN ******S*
May 22 09:33:45 24.203.145.210:4157 -> xxx.yyy.95.254:1433 SYN ******S*
May 22 09:33:46 24.203.145.210:4211 -> xxx.yyy.95.255:1433 SYN ******S*
30194

May 22 09:29:24 80.83.133.215:1666 -> xxx.yyy.64.0:1433 SYN ******S*
May 22 09:29:24 80.83.133.215:1672 -> xxx.yyy.64.1:1433 SYN ******S*
May 22 09:29:24 80.83.133.215:1782 -> xxx.yyy.64.2:1433 SYN ******S*
May 22 09:29:24 80.83.133.215:1838 -> xxx.yyy.64.3:1433 SYN ******S*
May 22 09:29:25 80.83.133.215:1845 -> xxx.yyy.64.4:1433 SYN ******S*
May 22 09:29:25 80.83.133.215:1873 -> xxx.yyy.64.5:1433 SYN ******S*
May 22 09:29:25 80.83.133.215:1879 -> xxx.yyy.64.6:1433 SYN ******S*
May 22 09:29:25 80.83.133.215:1978 -> xxx.yyy.64.7:1433 SYN ******S*
[...]
May 22 10:41:29 80.83.133.215:2900 -> xxx.yyy.95.248:1433 SYN ******S*
May 22 10:41:29 80.83.133.215:2999 -> xxx.yyy.95.250:1433 SYN ******S*
May 22 10:41:29 80.83.133.215:2992 -> xxx.yyy.95.249:1433 SYN ******S*
May 22 10:41:29 80.83.133.215:3026 -> xxx.yyy.95.251:1433 SYN ******S*
May 22 10:41:29 80.83.133.215:3160 -> xxx.yyy.95.252:1433 SYN ******S*
May 22 10:41:29 80.83.133.215:3226 -> xxx.yyy.95.253:1433 SYN ******S*
May 22 10:41:30 80.83.133.215:3259 -> xxx.yyy.95.254:1433 SYN ******S*
May 22 10:41:30 80.83.133.215:3334 -> xxx.yyy.95.255:1433 SYN ******S*
22327

May 22 05:20:46 66.130.161.50:3079 -> xxx.yyy.1.0:1433 SYN ******S*
May 22 05:20:46 66.130.161.50:3081 -> xxx.yyy.1.1:1433 SYN ******S*
May 22 05:20:46 66.130.161.50:3084 -> xxx.yyy.1.2:1433 SYN ******S*
May 22 05:20:46 66.130.161.50:3094 -> xxx.yyy.1.3:1433 SYN ******S*
May 22 05:20:47 66.130.161.50:3100 -> xxx.yyy.1.4:1433 SYN ******S*
May 22 05:20:47 66.130.161.50:3102 -> xxx.yyy.1.5:1433 SYN ******S*
May 22 05:20:47 66.130.161.50:3103 -> xxx.yyy.1.6:1433 SYN ******S*
May 22 05:20:47 66.130.161.50:3106 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
May 22 08:14:20 66.130.161.50:3715 -> xxx.yyy.78.89:1433 SYN ******S*
May 22 08:14:21 66.130.161.50:3795 -> xxx.yyy.78.90:1433 SYN ******S*
May 22 08:14:21 66.130.161.50:3336 -> xxx.yyy.78.85:1433 SYN ******S*
May 22 08:14:21 66.130.161.50:3879 -> xxx.yyy.78.91:1433 SYN ******S*
May 22 08:14:22 66.130.161.50:3898 -> xxx.yyy.78.92:1433 SYN ******S*
May 22 08:14:22 66.130.161.50:3399 -> xxx.yyy.78.86:1433 SYN ******S*
May 22 08:14:22 66.130.161.50:3458 -> xxx.yyy.78.87:1433 SYN ******S*
May 22 08:14:22 66.130.161.50:2560 -> xxx.yyy.78.80:1433 SYN ******S*
May 22 08:14:22 66.130.161.50:4017 -> xxx.yyy.78.93:1433 SYN ******S*
18339

May 22 11:22:26 80.83.133.83:2707 -> xxx.yyy.144.235:1433 SYN ******S*
May 22 11:22:26 80.83.133.83:2790 -> xxx.yyy.144.236:1433 SYN ******S*
May 22 11:22:27 80.83.133.83:2840 -> xxx.yyy.144.237:1433 SYN ******S*
May 22 11:22:27 80.83.133.83:2848 -> xxx.yyy.144.238:1433 SYN ******S*
May 22 11:22:27 80.83.133.83:2898 -> xxx.yyy.144.239:1433 SYN ******S*
May 22 11:22:27 80.83.133.83:2906 -> xxx.yyy.144.240:1433 SYN ******S*
May 22 11:22:27 80.83.133.83:2913 -> xxx.yyy.144.241:1433 SYN ******S*
May 22 11:22:27 80.83.133.83:2969 -> xxx.yyy.144.242:1433 SYN ******S*
[...]
May 22 12:12:48 80.83.133.83:2761 -> xxx.yyy.167.82:1433 SYN ******S*
May 22 12:12:49 80.83.133.83:2209 -> xxx.yyy.167.78:1433 SYN ******S*
May 22 12:12:49 80.83.133.83:2856 -> xxx.yyy.167.83:1433 SYN ******S*
May 22 12:12:49 80.83.133.83:2887 -> xxx.yyy.167.84:1433 SYN ******S*
May 22 12:12:49 80.83.133.83:2978 -> xxx.yyy.167.85:1433 SYN ******S*
May 22 12:12:50 80.83.133.83:1198 -> xxx.yyy.167.70:1433 SYN ******S*
May 22 12:12:50 80.83.133.83:3089 -> xxx.yyy.167.86:1433 SYN ******S*
May 22 12:12:50 80.83.133.83:3096 -> xxx.yyy.167.87:1433 SYN ******S*
May 22 12:12:50 80.83.133.83:1204 -> xxx.yyy.167.71:1433 SYN ******S*
15563

May 22 00:02:27 202.107.201.163:9504 -> xxx.yyy.251.99:3127 SYN ******S*
May 22 00:02:27 202.107.201.163:9503 -> xxx.yyy.251.99:1025 SYN ******S*
May 22 00:02:27 202.107.201.163:9502 -> xxx.yyy.251.99:2745 SYN ******S*
May 22 00:02:28 202.107.201.163:9915 -> xxx.yyy.155.101:2745 SYN ******S*
May 22 00:02:28 202.107.201.163:9916 -> xxx.yyy.155.101:1025 SYN ******S*
May 22 00:02:31 202.107.201.163:9917 -> xxx.yyy.155.101:3127 SYN ******S*
May 22 00:02:29 202.107.201.163:9963 -> xxx.yyy.137.218:1025 SYN ******S*
May 22 00:02:32 202.107.201.163:9963 -> xxx.yyy.137.218:1025 SYN ******S*
[...]
May 22 23:59:18 202.107.201.163:1210 -> xxx.yyy.248.90:2745 SYN ******S*
May 22 23:59:18 202.107.201.163:1213 -> xxx.yyy.248.90:6129 SYN ******S*
May 22 23:59:23 202.107.201.163:1179 -> xxx.yyy.182.200:2745 SYN ******S*
May 22 23:59:24 202.107.201.163:1210 -> xxx.yyy.248.90:2745 SYN ******S*
May 22 23:59:24 202.107.201.163:1212 -> xxx.yyy.248.90:3127 SYN ******S*
May 22 23:59:24 202.107.201.163:1211 -> xxx.yyy.248.90:1025 SYN ******S*
May 22 23:59:24 202.107.201.163:1213 -> xxx.yyy.248.90:6129 SYN ******S*
May 22 23:59:28 202.107.201.163:1656 -> xxx.yyy.243.19:2745 SYN ******S*
May 22 23:59:32 202.107.201.163:1656 -> xxx.yyy.243.19:2745 SYN ******S*
14933

May 22 21:27:24 142.173.189.121:3456 -> xxx.yyy.10.0:2277 SYN ******S*
May 22 21:27:22 142.173.189.121:3457 -> xxx.yyy.10.1:2277 SYN ******S*
May 22 21:27:22 142.173.189.121:3458 -> xxx.yyy.10.2:2277 SYN ******S*
May 22 21:27:22 142.173.189.121:3459 -> xxx.yyy.10.3:2277 SYN ******S*
May 22 21:27:22 142.173.189.121:3460 -> xxx.yyy.10.4:2277 SYN ******S*
May 22 21:27:22 142.173.189.121:3461 -> xxx.yyy.10.5:2277 SYN ******S*
May 22 21:27:24 142.173.189.121:3462 -> xxx.yyy.10.6:2277 SYN ******S*
May 22 21:27:24 142.173.189.121:3463 -> xxx.yyy.10.7:2277 SYN ******S*
[...]
May 22 21:28:14 142.173.189.121:3070 -> xxx.yyy.255.247:2277 SYN ******S*
May 22 21:28:14 142.173.189.121:3074 -> xxx.yyy.255.250:2277 SYN ******S*
May 22 21:28:14 142.173.189.121:3064 -> xxx.yyy.255.245:2277 SYN ******S*
May 22 21:28:14 142.173.189.121:3053 -> xxx.yyy.255.244:2277 SYN ******S*
May 22 21:28:14 142.173.189.121:3081 -> xxx.yyy.255.253:2277 SYN ******S*
May 22 21:28:14 142.173.189.121:3075 -> xxx.yyy.255.251:2277 SYN ******S*
May 22 21:28:14 142.173.189.121:3072 -> xxx.yyy.255.248:2277 SYN ******S*
May 22 21:28:14 142.173.189.121:3065 -> xxx.yyy.255.246:2277 SYN ******S*
May 22 21:28:14 142.173.189.121:3083 -> xxx.yyy.255.254:2277 SYN ******S*
11979

May 22 19:02:07 81.251.127.113:4564 -> xxx.yyy.76.132:2745 SYN ******S*
May 22 19:02:07 81.251.127.113:4566 -> xxx.yyy.76.132:1025 SYN ******S*
May 22 19:02:07 81.251.127.113:4568 -> xxx.yyy.76.132:3127 SYN ******S*
May 22 19:02:07 81.251.127.113:4569 -> xxx.yyy.76.132:6129 SYN ******S*
May 22 19:02:07 81.251.127.113:4570 -> xxx.yyy.76.132:139 SYN ******S*
May 22 19:02:07 81.251.127.113:4571 -> xxx.yyy.76.132:5000 SYN ******S*
May 22 19:02:07 81.251.127.113:4572 -> xxx.yyy.76.132:80 SYN ******S*
May 22 19:03:04 81.251.127.113:4149 -> xxx.yyy.187.135:2745 SYN ******S*
[...]
May 22 23:59:53 81.251.127.113:4601 -> xxx.yyy.14.243:2745 SYN ******S*
May 22 23:59:53 81.251.127.113:4629 -> xxx.yyy.204.125:2745 SYN ******S*
May 22 23:59:54 81.251.127.113:1442 -> xxx.yyy.134.22:2745 SYN ******S*
May 22 23:59:54 81.251.127.113:4656 -> xxx.yyy.10.248:2745 SYN ******S*
May 22 23:59:55 81.251.127.113:1548 -> xxx.yyy.233.69:2745 SYN ******S*
May 22 23:59:56 81.251.127.113:1442 -> xxx.yyy.134.22:2745 SYN ******S*
May 22 23:59:57 81.251.127.113:1662 -> xxx.yyy.224.219:2745 SYN ******S*
May 22 23:59:58 81.251.127.113:1548 -> xxx.yyy.233.69:2745 SYN ******S*
9239

May 22 22:39:18 220.121.132.118:22002 -> xxx.yyy.1.0:1080 SYN ******S*
May 22 22:39:18 220.121.132.118:22002 -> xxx.yyy.1.0:10080 SYN ******S*
May 22 22:39:18 220.121.132.118:22002 -> xxx.yyy.1.0:3128 SYN ******S*
May 22 22:39:18 220.121.132.118:22002 -> xxx.yyy.1.1:1080 SYN ******S*
May 22 22:39:18 220.121.132.118:22002 -> xxx.yyy.1.1:10080 SYN ******S*
May 22 22:39:18 220.121.132.118:22002 -> xxx.yyy.1.1:3128 SYN ******S*
May 22 22:39:19 220.121.132.118:22002 -> xxx.yyy.1.2:1080 SYN ******S*
May 22 22:39:19 220.121.132.118:22002 -> xxx.yyy.1.2:10080 SYN ******S*
[...]
May 22 23:40:39 220.121.132.118:22002 -> xxx.yyy.32.253:10080 SYN ******S*
May 22 23:40:39 220.121.132.118:22002 -> xxx.yyy.32.253:3128 SYN ******S*
May 22 23:40:39 220.121.132.118:22002 -> xxx.yyy.32.254:1080 SYN ******S*
May 22 23:40:39 220.121.132.118:22002 -> xxx.yyy.32.254:10080 SYN ******S*
May 22 23:40:39 220.121.132.118:22002 -> xxx.yyy.32.254:3128 SYN ******S*
May 22 23:40:39 220.121.132.118:22002 -> xxx.yyy.32.255:1080 SYN ******S*
May 22 23:40:40 220.121.132.118:22002 -> xxx.yyy.32.255:10080 SYN ******S*
May 22 23:40:40 220.121.132.118:22002 -> xxx.yyy.32.255:3128 SYN ******S*
9155

May 22 00:00:40 218.108.28.147:3255 -> xxx.yyy.199.65:2745 SYN ******S*
May 22 00:00:40 218.108.28.147:3256 -> xxx.yyy.199.65:1025 SYN ******S*
May 22 00:00:37 218.108.28.147:3060 -> xxx.yyy.196.159:2745 SYN ******S*
May 22 00:00:37 218.108.28.147:3061 -> xxx.yyy.196.159:1025 SYN ******S*
May 22 00:00:39 218.108.28.147:3316 -> xxx.yyy.14.45:2745 SYN ******S*
May 22 00:00:39 218.108.28.147:3317 -> xxx.yyy.14.45:1025 SYN ******S*
May 22 00:00:39 218.108.28.147:3318 -> xxx.yyy.14.45:3127 SYN ******S*
May 22 00:00:39 218.108.28.147:3319 -> xxx.yyy.14.45:6129 SYN ******S*
[...]
May 22 23:59:26 218.108.28.147:37759 -> xxx.yyy.1.176:3127 SYN ******S*
May 22 23:59:26 218.108.28.147:37760 -> xxx.yyy.1.176:6129 SYN ******S*
May 22 23:59:26 218.108.28.147:37849 -> xxx.yyy.227.67:2745 SYN ******S*
May 22 23:59:29 218.108.28.147:37849 -> xxx.yyy.227.67:2745 SYN ******S*
May 22 23:59:33 218.108.28.147:37760 -> xxx.yyy.1.176:6129 SYN ******S*
May 22 23:59:33 218.108.28.147:37758 -> xxx.yyy.1.176:1025 SYN ******S*
May 22 23:59:33 218.108.28.147:37759 -> xxx.yyy.1.176:3127 SYN ******S*
May 22 23:59:33 218.108.28.147:37757 -> xxx.yyy.1.176:2745 SYN ******S*
May 22 23:59:36 218.108.28.147:37849 -> xxx.yyy.227.67:2745 SYN ******S*
8611

May 22 00:00:46 220.168.28.35:13613 -> xxx.yyy.64.96:2745 SYN ******S*
May 22 00:00:49 220.168.28.35:50109 -> xxx.yyy.158.27:2745 SYN ******S*
May 22 00:00:49 220.168.28.35:3987 -> xxx.yyy.158.27:3127 SYN ******S*
May 22 00:00:49 220.168.28.35:40038 -> xxx.yyy.158.27:6129 SYN ******S*
May 22 00:00:47 220.168.28.35:14728 -> xxx.yyy.16.60:2745 SYN ******S*
May 22 00:00:49 220.168.28.35:18721 -> xxx.yyy.236.196:2745 SYN ******S*
May 22 00:00:52 220.168.28.35:18721 -> xxx.yyy.236.196:2745 SYN ******S*
May 22 00:00:52 220.168.28.35:13613 -> xxx.yyy.64.96:2745 SYN ******S*
[...]
May 22 23:50:51 220.168.28.35:29368 -> xxx.yyy.192.95:2745 SYN ******S*
May 22 23:50:51 220.168.28.35:29307 -> xxx.yyy.172.67:3127 SYN ******S*
May 22 23:50:51 220.168.28.35:29303 -> xxx.yyy.172.67:2745 SYN ******S*
May 22 23:50:45 220.168.28.35:29305 -> xxx.yyy.172.67:1025 SYN ******S*
May 22 23:50:51 220.168.28.35:29308 -> xxx.yyy.172.67:6129 SYN ******S*
May 22 23:50:51 220.168.28.35:30621 -> xxx.yyy.134.73:2745 SYN ******S*
May 22 23:50:53 220.168.28.35:29713 -> xxx.yyy.167.204:2745 SYN ******S*
May 22 23:50:58 220.168.28.35:30621 -> xxx.yyy.134.73:2745 SYN ******S*
8383

--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly@xxxxxxx phone: (319) 273-5850 fax: (319) 273-7373
_______________________________________________
Intrusions mailing list
Intrusions@xxxxxxxxxxxxxx
http://www.dshield.org/mailman/listinfo/intrusions
<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  RE: LOGS: GIAC GCIA Version 3.4 Practical Detect Ian Eaton: 00074, Ian Eaton
Next by Date:  RE: LOGS: GIAC GCIA Version 3.4 Practical Detect IanEaton: 00074, Don Murdoch
Previous by Thread:  [LOGS] Summary of large-scale portscanning detectsi: 00074, Ken . Connelly
Next by Thread:  [LOGS] Summary of large-scale portscanning detects: 00074, Ken . Connelly
Indexes:  [Date] [Thread] [Top] [All Lists]

Google Custom Search
News | FAQ | advertise