logo       
<prev   next>

[LOGS] Summary of large-scale portscanning detects: msg#00076

security.intrusions

Subject: [LOGS] Summary of large-scale portscanning detects

The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0500.

May 23 03:27:08 212.235.67.162:3700 -> xxx.yyy.1.0:21 SYN ******S*
May 23 03:27:08 212.235.67.162:3701 -> xxx.yyy.1.1:21 SYN ******S*
May 23 03:27:08 212.235.67.162:3702 -> xxx.yyy.1.2:21 SYN ******S*
May 23 03:27:08 212.235.67.162:3703 -> xxx.yyy.1.3:21 SYN ******S*
May 23 03:27:08 212.235.67.162:3704 -> xxx.yyy.1.4:21 SYN ******S*
May 23 03:27:08 212.235.67.162:3705 -> xxx.yyy.1.5:21 SYN ******S*
May 23 03:27:08 212.235.67.162:3706 -> xxx.yyy.1.6:21 SYN ******S*
May 23 03:27:08 212.235.67.162:3707 -> xxx.yyy.1.7:21 SYN ******S*
[...]
May 23 04:07:56 212.235.67.162:3688 -> xxx.yyy.255.240:21 SYN ******S*
May 23 04:07:56 212.235.67.162:3693 -> xxx.yyy.255.245:21 SYN ******S*
May 23 04:07:56 212.235.67.162:3695 -> xxx.yyy.255.247:21 SYN ******S*
May 23 04:07:56 212.235.67.162:3696 -> xxx.yyy.255.248:21 SYN ******S*
May 23 04:07:56 212.235.67.162:3698 -> xxx.yyy.255.250:21 SYN ******S*
May 23 04:07:56 212.235.67.162:3700 -> xxx.yyy.255.252:21 SYN ******S*
May 23 04:07:56 212.235.67.162:3701 -> xxx.yyy.255.253:21 SYN ******S*
May 23 04:07:56 212.235.67.162:3702 -> xxx.yyy.255.254:21 SYN ******S*
78040

May 23 12:51:04 83.112.249.214:4820 -> xxx.yyy.243.155:139 SYN ******S*
May 23 12:51:04 83.112.249.214:4824 -> xxx.yyy.231.54:139 SYN ******S*
May 23 12:51:04 83.112.249.214:4825 -> xxx.yyy.218.209:139 SYN ******S*
May 23 12:51:04 83.112.249.214:4826 -> xxx.yyy.206.108:139 SYN ******S*
May 23 12:51:04 83.112.249.214:4828 -> xxx.yyy.194.7:139 SYN ******S*
May 23 12:51:04 83.112.249.214:4829 -> xxx.yyy.181.162:139 SYN ******S*
May 23 12:51:04 83.112.249.214:4830 -> xxx.yyy.169.61:139 SYN ******S*
May 23 12:51:04 83.112.249.214:4832 -> xxx.yyy.156.216:139 SYN ******S*
[...]
May 23 15:41:36 83.112.249.214:1891 -> xxx.yyy.214.254:139 SYN ******S*
May 23 15:41:36 83.112.249.214:1894 -> xxx.yyy.190.52:139 SYN ******S*
May 23 15:41:36 83.112.249.214:1897 -> xxx.yyy.202.153:139 SYN ******S*
May 23 15:41:36 83.112.249.214:1900 -> xxx.yyy.153.5:139 SYN ******S*
May 23 15:41:36 83.112.249.214:1903 -> xxx.yyy.165.106:139 SYN ******S*
May 23 15:41:36 83.112.249.214:1905 -> xxx.yyy.177.207:139 SYN ******S*
May 23 15:41:36 83.112.249.214:1906 -> xxx.yyy.140.160:139 SYN ******S*
May 23 15:41:36 83.112.249.214:1907 -> xxx.yyy.128.59:139 SYN ******S*
May 23 15:41:37 83.112.249.214:1921 -> xxx.yyy.78.167:139 SYN ******S*
77829

May 23 09:07:11 66.141.60.148:52689 -> xxx.yyy.1.0:8000 SYN ******S*
May 23 09:07:11 66.141.60.148:52690 -> xxx.yyy.1.1:8000 SYN ******S*
May 23 09:07:11 66.141.60.148:52692 -> xxx.yyy.1.2:8000 SYN ******S*
May 23 09:07:13 66.141.60.148:52693 -> xxx.yyy.1.3:8000 SYN ******S*
May 23 09:07:13 66.141.60.148:52695 -> xxx.yyy.1.4:8000 SYN ******S*
May 23 09:07:13 66.141.60.148:52696 -> xxx.yyy.1.5:8000 SYN ******S*
May 23 09:07:13 66.141.60.148:52698 -> xxx.yyy.1.6:8000 SYN ******S*
May 23 09:07:13 66.141.60.148:52699 -> xxx.yyy.1.7:8000 SYN ******S*
[...]
May 23 10:18:23 66.141.60.148:62126 -> xxx.yyy.255.248:8000 SYN ******S*
May 23 10:18:23 66.141.60.148:62135 -> xxx.yyy.255.254:8000 SYN ******S*
May 23 10:18:23 66.141.60.148:62114 -> xxx.yyy.255.240:8000 SYN ******S*
May 23 10:18:23 66.141.60.148:62119 -> xxx.yyy.255.243:8000 SYN ******S*
May 23 10:18:23 66.141.60.148:62127 -> xxx.yyy.255.249:8000 SYN ******S*
May 23 10:18:23 66.141.60.148:62123 -> xxx.yyy.255.246:8000 SYN ******S*
May 23 10:18:23 66.141.60.148:62132 -> xxx.yyy.255.252:8000 SYN ******S*
May 23 10:18:23 66.141.60.148:62111 -> xxx.yyy.255.238:8000 SYN ******S*
74860

May 23 05:40:48 128.118.88.109:4072 -> xxx.yyy.1.1:1433 SYN ******S*
May 23 05:40:48 128.118.88.109:4073 -> xxx.yyy.1.2:1433 SYN ******S*
May 23 05:40:48 128.118.88.109:4074 -> xxx.yyy.1.3:1433 SYN ******S*
May 23 05:40:48 128.118.88.109:4075 -> xxx.yyy.1.4:1433 SYN ******S*
May 23 05:40:46 128.118.88.109:4076 -> xxx.yyy.1.5:1433 SYN ******S*
May 23 05:40:49 128.118.88.109:4077 -> xxx.yyy.1.6:1433 SYN ******S*
May 23 05:40:49 128.118.88.109:4078 -> xxx.yyy.1.7:1433 SYN ******S*
May 23 05:40:49 128.118.88.109:4079 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
May 23 06:05:06 128.118.88.109:1184 -> xxx.yyy.255.208:1433 SYN ******S*
May 23 06:05:06 128.118.88.109:1188 -> xxx.yyy.255.212:1433 SYN ******S*
May 23 06:05:06 128.118.88.109:1185 -> xxx.yyy.255.209:1433 SYN ******S*
May 23 06:05:06 128.118.88.109:1186 -> xxx.yyy.255.210:1433 SYN ******S*
May 23 06:05:06 128.118.88.109:1187 -> xxx.yyy.255.211:1433 SYN ******S*
May 23 06:05:06 128.118.88.109:1189 -> xxx.yyy.255.213:1433 SYN ******S*
May 23 06:05:08 128.118.88.109:1231 -> xxx.yyy.255.253:1433 SYN ******S*
May 23 06:05:08 128.118.88.109:1232 -> xxx.yyy.255.254:1433 SYN ******S*
74433

May 23 18:04:17 194.74.63.86:3684 -> xxx.yyy.1.1:21 SYN ******S*
May 23 18:04:20 194.74.63.86:3685 -> xxx.yyy.1.2:21 SYN ******S*
May 23 18:04:17 194.74.63.86:3686 -> xxx.yyy.1.3:21 SYN ******S*
May 23 18:04:20 194.74.63.86:3687 -> xxx.yyy.1.4:21 SYN ******S*
May 23 18:04:20 194.74.63.86:3688 -> xxx.yyy.1.5:21 SYN ******S*
May 23 18:04:20 194.74.63.86:3689 -> xxx.yyy.1.6:21 SYN ******S*
May 23 18:04:20 194.74.63.86:3690 -> xxx.yyy.1.7:21 SYN ******S*
May 23 18:04:20 194.74.63.86:3691 -> xxx.yyy.1.8:21 SYN ******S*
[...]
May 23 18:15:12 194.74.63.86:2676 -> xxx.yyy.255.223:21 SYN ******S*
May 23 18:15:12 194.74.63.86:2673 -> xxx.yyy.255.220:21 SYN ******S*
May 23 18:15:13 194.74.63.86:2687 -> xxx.yyy.255.234:21 SYN ******S*
May 23 18:15:13 194.74.63.86:2684 -> xxx.yyy.255.231:21 SYN ******S*
May 23 18:15:13 194.74.63.86:2685 -> xxx.yyy.255.232:21 SYN ******S*
May 23 18:15:13 194.74.63.86:2682 -> xxx.yyy.255.229:21 SYN ******S*
May 23 18:15:13 194.74.63.86:2686 -> xxx.yyy.255.233:21 SYN ******S*
May 23 18:15:13 194.74.63.86:2683 -> xxx.yyy.255.230:21 SYN ******S*
74122

May 23 14:43:31 67.81.192.252:34206 -> xxx.yyy.1.1:1023 SYN ******S*
May 23 14:43:31 67.81.192.252:34207 -> xxx.yyy.1.2:1023 SYN ******S*
May 23 14:43:33 67.81.192.252:34208 -> xxx.yyy.1.3:1023 SYN ******S*
May 23 14:43:33 67.81.192.252:34209 -> xxx.yyy.1.4:1023 SYN ******S*
May 23 14:43:33 67.81.192.252:34210 -> xxx.yyy.1.5:1023 SYN ******S*
May 23 14:43:33 67.81.192.252:34211 -> xxx.yyy.1.6:1023 SYN ******S*
May 23 14:43:33 67.81.192.252:34212 -> xxx.yyy.1.7:1023 SYN ******S*
May 23 14:43:33 67.81.192.252:34213 -> xxx.yyy.1.8:1023 SYN ******S*
[...]
May 23 14:54:50 67.81.192.252:37047 -> xxx.yyy.255.146:1023 SYN ******S*
May 23 14:54:50 67.81.192.252:37051 -> xxx.yyy.255.150:1023 SYN ******S*
May 23 14:54:50 67.81.192.252:37048 -> xxx.yyy.255.147:1023 SYN ******S*
May 23 14:54:50 67.81.192.252:37052 -> xxx.yyy.255.151:1023 SYN ******S*
May 23 14:54:50 67.81.192.252:37054 -> xxx.yyy.255.153:1023 SYN ******S*
May 23 14:54:50 67.81.192.252:37049 -> xxx.yyy.255.148:1023 SYN ******S*
May 23 14:54:50 67.81.192.252:37056 -> xxx.yyy.255.155:1023 SYN ******S*
May 23 14:54:51 67.81.192.252:37066 -> xxx.yyy.255.165:1023 SYN ******S*
73608

May 23 07:39:51 146.110.103.252:3737 -> xxx.yyy.1.1:6129 SYN ******S*
May 23 07:39:51 146.110.103.252:3738 -> xxx.yyy.1.2:6129 SYN ******S*
May 23 07:39:53 146.110.103.252:3739 -> xxx.yyy.1.3:6129 SYN ******S*
May 23 07:39:50 146.110.103.252:3740 -> xxx.yyy.1.4:6129 SYN ******S*
May 23 07:39:53 146.110.103.252:3741 -> xxx.yyy.1.5:6129 SYN ******S*
May 23 07:39:53 146.110.103.252:3742 -> xxx.yyy.1.6:6129 SYN ******S*
May 23 07:39:53 146.110.103.252:3743 -> xxx.yyy.1.7:6129 SYN ******S*
May 23 07:39:53 146.110.103.252:3744 -> xxx.yyy.1.8:6129 SYN ******S*
[...]
May 23 07:51:31 146.110.103.252:2697 -> xxx.yyy.255.248:6129 SYN ******S*
May 23 07:51:31 146.110.103.252:2700 -> xxx.yyy.255.251:6129 SYN ******S*
May 23 07:51:31 146.110.103.252:2694 -> xxx.yyy.255.245:6129 SYN ******S*
May 23 07:51:31 146.110.103.252:2698 -> xxx.yyy.255.249:6129 SYN ******S*
May 23 07:51:31 146.110.103.252:2695 -> xxx.yyy.255.246:6129 SYN ******S*
May 23 07:51:31 146.110.103.252:2696 -> xxx.yyy.255.247:6129 SYN ******S*
May 23 07:51:31 146.110.103.252:2699 -> xxx.yyy.255.250:6129 SYN ******S*
May 23 07:51:31 146.110.103.252:2693 -> xxx.yyy.255.244:6129 SYN ******S*
May 23 07:51:31 146.110.103.252:2703 -> xxx.yyy.255.254:6129 SYN ******S*
70881

May 23 12:26:53 62.15.144.162:9587 -> xxx.yyy.1.1:2401 SYN ******S*
May 23 12:26:54 62.15.144.162:9588 -> xxx.yyy.1.2:2401 SYN ******S*
May 23 12:26:56 62.15.144.162:9589 -> xxx.yyy.1.3:2401 SYN ******S*
May 23 12:26:56 62.15.144.162:9590 -> xxx.yyy.1.4:2401 SYN ******S*
May 23 12:26:56 62.15.144.162:9591 -> xxx.yyy.1.5:2401 SYN ******S*
May 23 12:26:56 62.15.144.162:9592 -> xxx.yyy.1.6:2401 SYN ******S*
May 23 12:26:56 62.15.144.162:9593 -> xxx.yyy.1.7:2401 SYN ******S*
May 23 12:26:53 62.15.144.162:9594 -> xxx.yyy.1.8:2401 SYN ******S*
[...]
May 23 12:38:35 62.15.144.162:10639 -> xxx.yyy.255.210:2401 SYN ******S*
May 23 12:38:35 62.15.144.162:10643 -> xxx.yyy.255.213:2401 SYN ******S*
May 23 12:38:36 62.15.144.162:10653 -> xxx.yyy.255.223:2401 SYN ******S*
May 23 12:38:36 62.15.144.162:10650 -> xxx.yyy.255.220:2401 SYN ******S*
May 23 12:38:36 62.15.144.162:10651 -> xxx.yyy.255.221:2401 SYN ******S*
May 23 12:38:36 62.15.144.162:10648 -> xxx.yyy.255.218:2401 SYN ******S*
May 23 12:38:36 62.15.144.162:10652 -> xxx.yyy.255.222:2401 SYN ******S*
May 23 12:38:36 62.15.144.162:10649 -> xxx.yyy.255.219:2401 SYN ******S*
70145

May 23 12:12:58 82.158.14.181:1066 -> xxx.yyy.1.24:443 SYN ******S*
May 23 12:12:56 82.158.14.181:1071 -> xxx.yyy.1.27:443 SYN ******S*
May 23 12:12:56 82.158.14.181:1070 -> xxx.yyy.1.26:443 SYN ******S*
May 23 12:12:57 82.158.14.181:1072 -> xxx.yyy.1.25:443 SYN ******S*
May 23 12:12:56 82.158.14.181:1043 -> xxx.yyy.1.1:443 SYN ******S*
May 23 12:12:56 82.158.14.181:1044 -> xxx.yyy.1.2:443 SYN ******S*
May 23 12:12:56 82.158.14.181:1048 -> xxx.yyy.1.6:443 SYN ******S*
May 23 12:12:56 82.158.14.181:1045 -> xxx.yyy.1.3:443 SYN ******S*
[...]
May 23 12:55:10 82.158.14.181:2614 -> xxx.yyy.255.195:443 SYN ******S*
May 23 12:55:10 82.158.14.181:2611 -> xxx.yyy.255.192:443 SYN ******S*
May 23 12:55:11 82.158.14.181:2669 -> xxx.yyy.255.250:443 SYN ******S*
May 23 12:55:11 82.158.14.181:2668 -> xxx.yyy.255.249:443 SYN ******S*
May 23 12:55:11 82.158.14.181:2670 -> xxx.yyy.255.251:443 SYN ******S*
May 23 12:55:11 82.158.14.181:2671 -> xxx.yyy.255.252:443 SYN ******S*
May 23 12:55:11 82.158.14.181:2672 -> xxx.yyy.255.253:443 SYN ******S*
May 23 12:55:11 82.158.14.181:2673 -> xxx.yyy.255.254:443 SYN ******S*
69998

May 23 20:18:57 65.27.100.104:3176 -> xxx.yyy.1.2:1433 SYN ******S*
May 23 20:18:57 65.27.100.104:3175 -> xxx.yyy.1.1:1433 SYN ******S*
May 23 20:18:57 65.27.100.104:3177 -> xxx.yyy.1.3:1433 SYN ******S*
May 23 20:18:57 65.27.100.104:3178 -> xxx.yyy.1.4:1433 SYN ******S*
May 23 20:18:57 65.27.100.104:3179 -> xxx.yyy.1.5:1433 SYN ******S*
May 23 20:18:57 65.27.100.104:3180 -> xxx.yyy.1.6:1433 SYN ******S*
May 23 20:18:57 65.27.100.104:3181 -> xxx.yyy.1.7:1433 SYN ******S*
May 23 20:18:57 65.27.100.104:3182 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
May 23 20:32:41 65.27.100.104:1200 -> xxx.yyy.255.246:1433 SYN ******S*
May 23 20:32:41 65.27.100.104:1199 -> xxx.yyy.255.245:1433 SYN ******S*
May 23 20:32:41 65.27.100.104:1198 -> xxx.yyy.255.244:1433 SYN ******S*
May 23 20:32:41 65.27.100.104:1204 -> xxx.yyy.255.250:1433 SYN ******S*
May 23 20:32:41 65.27.100.104:1203 -> xxx.yyy.255.249:1433 SYN ******S*
May 23 20:32:41 65.27.100.104:1201 -> xxx.yyy.255.247:1433 SYN ******S*
May 23 20:32:41 65.27.100.104:1202 -> xxx.yyy.255.248:1433 SYN ******S*
May 23 20:32:41 65.27.100.104:1208 -> xxx.yyy.255.254:1433 SYN ******S*
May 23 20:32:41 65.27.100.104:1207 -> xxx.yyy.255.253:1433 SYN ******S*
65015

May 23 20:13:20 218.108.39.132:41545 -> xxx.yyy.145.36:2745 SYN ******S*
May 23 20:13:20 218.108.39.132:58951 -> xxx.yyy.145.36:1025 SYN ******S*
May 23 20:13:20 218.108.39.132:10062 -> xxx.yyy.145.36:3127 SYN ******S*
May 23 20:13:20 218.108.39.132:28763 -> xxx.yyy.145.36:6129 SYN ******S*
May 23 20:13:20 218.108.39.132:62915 -> xxx.yyy.145.36:80 SYN ******S*
May 23 20:13:18 218.108.39.132:7535 -> xxx.yyy.211.29:2745 SYN ******S*
May 23 20:13:18 218.108.39.132:21616 -> xxx.yyy.211.29:1025 SYN ******S*
May 23 20:13:18 218.108.39.132:42712 -> xxx.yyy.211.29:3127 SYN ******S*
[...]
May 23 21:33:31 218.108.39.132:26737 -> xxx.yyy.104.214:3127 SYN ******S*
May 23 21:33:32 218.108.39.132:40174 -> xxx.yyy.183.211:2745 SYN ******S*
May 23 21:33:32 218.108.39.132:48648 -> xxx.yyy.183.211:1025 SYN ******S*
May 23 21:33:32 218.108.39.132:7100 -> xxx.yyy.183.211:3127 SYN ******S*
May 23 21:33:32 218.108.39.132:6445 -> xxx.yyy.183.211:6129 SYN ******S*
May 23 21:33:32 218.108.39.132:60483 -> xxx.yyy.87.39:2745 SYN ******S*
May 23 21:33:32 218.108.39.132:48522 -> xxx.yyy.87.39:1025 SYN ******S*
May 23 21:33:32 218.108.39.132:26261 -> xxx.yyy.87.39:3127 SYN ******S*
May 23 21:33:32 218.108.39.132:49086 -> xxx.yyy.204.234:2745 SYN ******S*
53909

May 23 05:47:35 221.6.10.1:3619 -> xxx.yyy.1.5:111 SYN ******S*
May 23 05:47:35 221.6.10.1:3635 -> xxx.yyy.1.21:111 SYN ******S*
May 23 05:47:35 221.6.10.1:3640 -> xxx.yyy.1.26:111 SYN ******S*
May 23 05:47:35 221.6.10.1:3647 -> xxx.yyy.1.33:111 SYN ******S*
May 23 05:47:35 221.6.10.1:3661 -> xxx.yyy.1.47:111 SYN ******S*
May 23 05:47:35 221.6.10.1:3621 -> xxx.yyy.1.7:111 SYN ******S*
May 23 05:47:35 221.6.10.1:3630 -> xxx.yyy.1.16:111 SYN ******S*
May 23 05:47:35 221.6.10.1:3633 -> xxx.yyy.1.19:111 SYN ******S*
[...]
May 23 05:50:53 221.6.10.1:4786 -> xxx.yyy.255.2:111 SYN ******S*
May 23 05:50:53 221.6.10.1:4782 -> xxx.yyy.254.253:111 SYN ******S*
May 23 05:50:53 221.6.10.1:4772 -> xxx.yyy.254.243:111 SYN ******S*
May 23 05:50:53 221.6.10.1:4790 -> xxx.yyy.255.6:111 SYN ******S*
May 23 05:50:53 221.6.10.1:4792 -> xxx.yyy.255.8:111 SYN ******S*
May 23 05:50:53 221.6.10.1:4793 -> xxx.yyy.255.9:111 SYN ******S*
May 23 05:50:53 221.6.10.1:4794 -> xxx.yyy.255.10:111 SYN ******S*
May 23 05:50:53 221.6.10.1:4744 -> xxx.yyy.254.215:111 SYN ******S*
May 23 05:50:53 221.6.10.1:4745 -> xxx.yyy.254.216:111 SYN ******S*
49217

May 23 20:13:22 202.110.209.10:51884 -> xxx.yyy.144.3:2745 SYN ******S*
May 23 20:13:22 202.110.209.10:51889 -> xxx.yyy.144.3:1025 SYN ******S*
May 23 20:13:22 202.110.209.10:51900 -> xxx.yyy.144.3:3127 SYN ******S*
May 23 20:13:22 202.110.209.10:51904 -> xxx.yyy.144.3:6129 SYN ******S*
May 23 20:13:22 202.110.209.10:51914 -> xxx.yyy.144.3:80 SYN ******S*
May 23 20:13:20 202.110.209.10:52625 -> xxx.yyy.82.78:2745 SYN ******S*
May 23 20:13:20 202.110.209.10:52657 -> xxx.yyy.82.78:1025 SYN ******S*
May 23 20:13:20 202.110.209.10:53098 -> xxx.yyy.32.41:2745 SYN ******S*
[...]
May 23 21:33:33 202.110.209.10:52044 -> xxx.yyy.225.111:1025 SYN ******S*
May 23 21:33:33 202.110.209.10:52058 -> xxx.yyy.225.111:3127 SYN ******S*
May 23 21:33:33 202.110.209.10:52418 -> xxx.yyy.247.46:2745 SYN ******S*
May 23 21:33:33 202.110.209.10:52424 -> xxx.yyy.247.46:1025 SYN ******S*
May 23 21:33:34 202.110.209.10:57372 -> xxx.yyy.186.46:2745 SYN ******S*
May 23 21:33:34 202.110.209.10:56451 -> xxx.yyy.93.58:2745 SYN ******S*
May 23 21:33:34 202.110.209.10:56480 -> xxx.yyy.93.58:3127 SYN ******S*
May 23 21:33:34 202.110.209.10:56476 -> xxx.yyy.93.58:1025 SYN ******S*
May 23 21:33:34 202.110.209.10:56492 -> xxx.yyy.93.58:6129 SYN ******S*
45731

May 23 08:06:19 217.236.97.249:64807 -> xxx.yyy.1.0:1433 SYN ******S*
May 23 08:06:19 217.236.97.249:64808 -> xxx.yyy.1.1:1433 SYN ******S*
May 23 08:06:19 217.236.97.249:64809 -> xxx.yyy.1.2:1433 SYN ******S*
May 23 08:06:19 217.236.97.249:64810 -> xxx.yyy.1.3:1433 SYN ******S*
May 23 08:06:19 217.236.97.249:64811 -> xxx.yyy.1.4:1433 SYN ******S*
May 23 08:06:19 217.236.97.249:64812 -> xxx.yyy.1.5:1433 SYN ******S*
May 23 08:06:19 217.236.97.249:64813 -> xxx.yyy.1.6:1433 SYN ******S*
May 23 08:06:19 217.236.97.249:64814 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
May 23 08:17:16 217.236.97.249:64822 -> xxx.yyy.255.246:1433 SYN ******S*
May 23 08:17:16 217.236.97.249:64823 -> xxx.yyy.255.247:1433 SYN ******S*
May 23 08:17:16 217.236.97.249:64824 -> xxx.yyy.255.248:1433 SYN ******S*
May 23 08:17:16 217.236.97.249:64825 -> xxx.yyy.255.249:1433 SYN ******S*
May 23 08:17:16 217.236.97.249:64826 -> xxx.yyy.255.250:1433 SYN ******S*
May 23 08:17:16 217.236.97.249:64827 -> xxx.yyy.255.251:1433 SYN ******S*
May 23 08:17:16 217.236.97.249:64828 -> xxx.yyy.255.252:1433 SYN ******S*
May 23 08:17:16 217.236.97.249:64829 -> xxx.yyy.255.253:1433 SYN ******S*
May 23 08:17:16 217.236.97.249:64830 -> xxx.yyy.255.254:1433 SYN ******S*
44760

May 23 11:20:48 211.157.101.25:36823 -> xxx.yyy.1.0:21 SYN ******S*
May 23 11:20:48 211.157.101.25:36824 -> xxx.yyy.1.1:21 SYN ******S*
May 23 11:20:48 211.157.101.25:36827 -> xxx.yyy.1.3:21 SYN ******S*
May 23 11:20:48 211.157.101.25:36826 -> xxx.yyy.1.2:21 SYN ******S*
May 23 11:20:48 211.157.101.25:36828 -> xxx.yyy.1.4:21 SYN ******S*
May 23 11:20:48 211.157.101.25:36829 -> xxx.yyy.1.5:21 SYN ******S*
May 23 11:20:48 211.157.101.25:36831 -> xxx.yyy.1.6:21 SYN ******S*
May 23 11:20:48 211.157.101.25:36832 -> xxx.yyy.1.7:21 SYN ******S*
[...]
May 23 11:31:40 211.157.101.25:48422 -> xxx.yyy.255.247:21 SYN ******S*
May 23 11:31:40 211.157.101.25:48423 -> xxx.yyy.255.248:21 SYN ******S*
May 23 11:31:40 211.157.101.25:48424 -> xxx.yyy.255.249:21 SYN ******S*
May 23 11:31:40 211.157.101.25:48425 -> xxx.yyy.255.250:21 SYN ******S*
May 23 11:31:40 211.157.101.25:48430 -> xxx.yyy.255.253:21 SYN ******S*
May 23 11:31:40 211.157.101.25:48427 -> xxx.yyy.255.251:21 SYN ******S*
May 23 11:31:40 211.157.101.25:48428 -> xxx.yyy.255.252:21 SYN ******S*
May 23 11:31:40 211.157.101.25:48482 -> xxx.yyy.255.254:21 SYN ******S*
May 23 11:31:40 211.157.101.25:48483 -> xxx.yyy.255.255:21 SYN ******S*
44613

May 23 14:57:53 129.8.47.28:43521 -> xxx.yyy.1.1:8000 SYN ******S*
May 23 14:57:53 129.8.47.28:24145 -> xxx.yyy.1.2:8000 SYN ******S*
May 23 14:57:53 129.8.47.28:45642 -> xxx.yyy.1.3:8000 SYN ******S*
May 23 14:57:53 129.8.47.28:65024 -> xxx.yyy.1.4:8000 SYN ******S*
May 23 14:57:53 129.8.47.28:28454 -> xxx.yyy.1.5:8000 SYN ******S*
May 23 14:57:53 129.8.47.28:827 -> xxx.yyy.1.6:8000 SYN ******S*
May 23 14:57:53 129.8.47.28:1317 -> xxx.yyy.1.7:8000 SYN ******S*
May 23 14:57:53 129.8.47.28:24950 -> xxx.yyy.1.8:8000 SYN ******S*
[...]
May 23 14:58:59 129.8.47.28:29710 -> xxx.yyy.255.247:8000 SYN ******S*
May 23 14:58:59 129.8.47.28:1588 -> xxx.yyy.255.248:8000 SYN ******S*
May 23 14:58:59 129.8.47.28:1372 -> xxx.yyy.255.249:8000 SYN ******S*
May 23 14:58:59 129.8.47.28:58633 -> xxx.yyy.255.250:8000 SYN ******S*
May 23 14:58:59 129.8.47.28:49777 -> xxx.yyy.255.251:8000 SYN ******S*
May 23 14:58:59 129.8.47.28:15186 -> xxx.yyy.255.252:8000 SYN ******S*
May 23 14:58:59 129.8.47.28:27744 -> xxx.yyy.255.253:8000 SYN ******S*
May 23 14:58:59 129.8.47.28:13407 -> xxx.yyy.255.254:8000 SYN ******S*
41022

May 23 00:00:57 202.110.229.97:44881 -> xxx.yyy.175.65:2745 SYN ******S*
May 23 00:00:57 202.110.229.97:41264 -> xxx.yyy.175.65:3127 SYN ******S*
May 23 00:00:57 202.110.229.97:48009 -> xxx.yyy.175.65:6129 SYN ******S*
May 23 00:01:02 202.110.229.97:44593 -> xxx.yyy.182.41:2745 SYN ******S*
May 23 00:00:59 202.110.229.97:23756 -> xxx.yyy.66.216:2745 SYN ******S*
May 23 00:01:03 202.110.229.97:48009 -> xxx.yyy.175.65:6129 SYN ******S*
May 23 00:01:03 202.110.229.97:44881 -> xxx.yyy.175.65:2745 SYN ******S*
May 23 00:01:03 202.110.229.97:41264 -> xxx.yyy.175.65:3127 SYN ******S*
[...]
May 23 21:33:28 202.110.229.97:60558 -> xxx.yyy.13.89:1025 SYN ******S*
May 23 21:33:31 202.110.229.97:13766 -> xxx.yyy.13.89:3127 SYN ******S*
May 23 21:33:31 202.110.229.97:3457 -> xxx.yyy.13.89:6129 SYN ******S*
May 23 21:33:31 202.110.229.97:28317 -> xxx.yyy.13.89:5000 SYN ******S*
May 23 21:33:28 202.110.229.97:6756 -> xxx.yyy.249.112:2745 SYN ******S*
May 23 21:33:29 202.110.229.97:35905 -> xxx.yyy.168.25:2745 SYN ******S*
May 23 21:33:29 202.110.229.97:60545 -> xxx.yyy.168.25:1025 SYN ******S*
May 23 21:33:32 202.110.229.97:35905 -> xxx.yyy.168.25:2745 SYN ******S*
May 23 21:33:32 202.110.229.97:60545 -> xxx.yyy.168.25:1025 SYN ******S*
39247

May 23 21:30:00 204.167.145.92:2401 -> xxx.yyy.1.1:2401 SYN ******S*
May 23 21:30:00 204.167.145.92:2401 -> xxx.yyy.1.2:2401 SYN ******S*
May 23 21:30:00 204.167.145.92:2401 -> xxx.yyy.1.3:2401 SYN ******S*
May 23 21:30:00 204.167.145.92:2401 -> xxx.yyy.1.4:2401 SYN ******S*
May 23 21:30:00 204.167.145.92:2401 -> xxx.yyy.1.5:2401 SYN ******S*
May 23 21:30:00 204.167.145.92:2401 -> xxx.yyy.1.6:2401 SYN ******S*
May 23 21:30:00 204.167.145.92:2401 -> xxx.yyy.1.7:2401 SYN ******S*
May 23 21:30:00 204.167.145.92:2401 -> xxx.yyy.1.8:2401 SYN ******S*
[...]
May 23 21:32:02 204.167.145.92:2401 -> xxx.yyy.255.231:2401 SYN ******S*
May 23 21:32:02 204.167.145.92:2401 -> xxx.yyy.255.232:2401 SYN ******S*
May 23 21:32:02 204.167.145.92:2401 -> xxx.yyy.255.233:2401 SYN ******S*
May 23 21:32:02 204.167.145.92:2401 -> xxx.yyy.255.234:2401 SYN ******S*
May 23 21:32:02 204.167.145.92:2401 -> xxx.yyy.255.235:2401 SYN ******S*
May 23 21:32:02 204.167.145.92:2401 -> xxx.yyy.255.236:2401 SYN ******S*
May 23 21:32:02 204.167.145.92:2401 -> xxx.yyy.255.237:2401 SYN ******S*
May 23 21:32:03 204.167.145.92:2401 -> xxx.yyy.255.238:2401 SYN ******S*
36447

May 23 20:13:23 61.187.51.147:24174 -> xxx.yyy.10.86:2745 SYN ******S*
May 23 20:13:22 61.187.51.147:24490 -> xxx.yyy.254.240:3127 SYN ******S*
May 23 20:13:22 61.187.51.147:65059 -> xxx.yyy.254.240:2745 SYN ******S*
May 23 20:13:22 61.187.51.147:61396 -> xxx.yyy.254.240:1025 SYN ******S*
May 23 20:13:22 61.187.51.147:24487 -> xxx.yyy.227.16:1025 SYN ******S*
May 23 20:13:25 61.187.51.147:24481 -> xxx.yyy.227.16:2745 SYN ******S*
May 23 20:13:25 61.187.51.147:24544 -> xxx.yyy.146.79:2745 SYN ******S*
May 23 20:13:25 61.187.51.147:25834 -> xxx.yyy.146.79:1025 SYN ******S*
[...]
May 23 21:33:32 61.187.51.147:28341 -> xxx.yyy.130.25:3127 SYN ******S*
May 23 21:33:32 61.187.51.147:28340 -> xxx.yyy.130.25:1025 SYN ******S*
May 23 21:33:33 61.187.51.147:33871 -> xxx.yyy.86.5:2745 SYN ******S*
May 23 21:33:33 61.187.51.147:42242 -> xxx.yyy.86.5:1025 SYN ******S*
May 23 21:33:33 61.187.51.147:46620 -> xxx.yyy.86.5:3127 SYN ******S*
May 23 21:33:33 61.187.51.147:9203 -> xxx.yyy.86.5:6129 SYN ******S*
May 23 21:33:33 61.187.51.147:16581 -> xxx.yyy.144.182:1025 SYN ******S*
May 23 21:33:33 61.187.51.147:16582 -> xxx.yyy.144.182:3127 SYN ******S*
36279

May 23 00:00:07 81.251.127.113:2080 -> xxx.yyy.16.192:2745 SYN ******S*
May 23 00:00:04 81.251.127.113:1548 -> xxx.yyy.233.69:2745 SYN ******S*
May 23 00:00:06 81.251.127.113:2183 -> xxx.yyy.169.157:2745 SYN ******S*
May 23 00:00:06 81.251.127.113:1662 -> xxx.yyy.224.219:2745 SYN ******S*
May 23 00:00:10 81.251.127.113:2214 -> xxx.yyy.255.87:2745 SYN ******S*
May 23 00:00:10 81.251.127.113:2215 -> xxx.yyy.107.187:2745 SYN ******S*
May 23 00:00:10 81.251.127.113:2217 -> xxx.yyy.107.187:1025 SYN ******S*
May 23 00:00:10 81.251.127.113:2221 -> xxx.yyy.107.187:3127 SYN ******S*
[...]
May 23 15:50:05 81.251.127.113:4721 -> xxx.yyy.165.188:5000 SYN ******S*
May 23 15:50:05 81.251.127.113:4713 -> xxx.yyy.165.188:139 SYN ******S*
May 23 15:50:05 81.251.127.113:4711 -> xxx.yyy.165.188:6129 SYN ******S*
May 23 15:50:05 81.251.127.113:4702 -> xxx.yyy.165.188:3127 SYN ******S*
May 23 15:50:05 81.251.127.113:4689 -> xxx.yyy.165.188:1025 SYN ******S*
May 23 15:50:05 81.251.127.113:4664 -> xxx.yyy.165.188:2745 SYN ******S*
May 23 15:50:06 81.251.127.113:1162 -> xxx.yyy.79.29:2745 SYN ******S*
May 23 15:50:06 81.251.127.113:1164 -> xxx.yyy.79.29:1025 SYN ******S*
30910

May 23 00:23:32 198.11.32.207:4833 -> xxx.yyy.1.2:445 SYN ******S*
May 23 00:23:32 198.11.32.207:4834 -> xxx.yyy.1.3:445 SYN ******S*
May 23 00:23:32 198.11.32.207:4835 -> xxx.yyy.1.4:445 SYN ******S*
May 23 00:23:32 198.11.32.207:4836 -> xxx.yyy.1.5:445 SYN ******S*
May 23 00:23:32 198.11.32.207:4837 -> xxx.yyy.1.6:445 SYN ******S*
May 23 00:23:32 198.11.32.207:4838 -> xxx.yyy.1.7:445 SYN ******S*
May 23 00:23:32 198.11.32.207:4839 -> xxx.yyy.1.8:445 SYN ******S*
May 23 00:23:32 198.11.32.207:4840 -> xxx.yyy.1.9:445 SYN ******S*
[...]
May 23 01:17:56 198.11.32.207:3191 -> xxx.yyy.111.249:445 SYN ******S*
May 23 01:17:56 198.11.32.207:3188 -> xxx.yyy.111.246:445 SYN ******S*
May 23 01:17:57 198.11.32.207:3195 -> xxx.yyy.111.253:445 SYN ******S*
May 23 01:17:57 198.11.32.207:3192 -> xxx.yyy.111.250:445 SYN ******S*
May 23 01:17:57 198.11.32.207:3196 -> xxx.yyy.111.254:445 SYN ******S*
May 23 01:17:57 198.11.32.207:3193 -> xxx.yyy.111.251:445 SYN ******S*
May 23 01:17:57 198.11.32.207:3197 -> xxx.yyy.111.255:445 SYN ******S*
May 23 01:17:57 198.11.32.207:3194 -> xxx.yyy.111.252:445 SYN ******S*
30414

May 23 20:13:19 202.99.60.165:1446 -> xxx.yyy.223.50:2745 SYN ******S*
May 23 20:13:21 202.99.60.165:1197 -> xxx.yyy.92.212:2745 SYN ******S*
May 23 20:13:21 202.99.60.165:1199 -> xxx.yyy.92.212:1025 SYN ******S*
May 23 20:13:23 202.99.60.165:1337 -> xxx.yyy.71.25:2745 SYN ******S*
May 23 20:13:23 202.99.60.165:1339 -> xxx.yyy.71.25:1025 SYN ******S*
May 23 20:13:23 202.99.60.165:1344 -> xxx.yyy.71.25:3127 SYN ******S*
May 23 20:13:23 202.99.60.165:1345 -> xxx.yyy.71.25:6129 SYN ******S*
May 23 20:13:23 202.99.60.165:1346 -> xxx.yyy.71.25:139 SYN ******S*
[...]
May 23 21:33:27 202.99.60.165:4173 -> xxx.yyy.191.163:2745 SYN ******S*
May 23 21:33:28 202.99.60.165:3362 -> xxx.yyy.240.141:2745 SYN ******S*
May 23 21:33:31 202.99.60.165:4173 -> xxx.yyy.191.163:2745 SYN ******S*
May 23 21:33:33 202.99.60.165:3325 -> xxx.yyy.17.214:1025 SYN ******S*
May 23 21:33:33 202.99.60.165:3342 -> xxx.yyy.17.214:139 SYN ******S*
May 23 21:33:33 202.99.60.165:3340 -> xxx.yyy.17.214:6129 SYN ******S*
May 23 21:33:33 202.99.60.165:3343 -> xxx.yyy.17.214:80 SYN ******S*
May 23 21:33:33 202.99.60.165:3339 -> xxx.yyy.17.214:3127 SYN ******S*
May 23 21:33:33 202.99.60.165:3719 -> xxx.yyy.196.227:2745 SYN ******S*
28057

May 23 11:06:42 67.68.51.209:4366 -> xxx.yyy.1.0:1433 SYN ******S*
May 23 11:06:42 67.68.51.209:4370 -> xxx.yyy.1.1:1433 SYN ******S*
May 23 11:06:42 67.68.51.209:4374 -> xxx.yyy.1.2:1433 SYN ******S*
May 23 11:06:42 67.68.51.209:4379 -> xxx.yyy.1.3:1433 SYN ******S*
May 23 11:06:42 67.68.51.209:4385 -> xxx.yyy.1.4:1433 SYN ******S*
May 23 11:06:40 67.68.51.209:4709 -> xxx.yyy.1.5:1433 SYN ******S*
May 23 11:06:40 67.68.51.209:4921 -> xxx.yyy.1.6:1433 SYN ******S*
May 23 11:06:40 67.68.51.209:1026 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
May 23 14:39:52 67.68.51.209:3308 -> xxx.yyy.95.247:1433 SYN ******S*
May 23 14:39:53 67.68.51.209:3342 -> xxx.yyy.95.248:1433 SYN ******S*
May 23 14:39:53 67.68.51.209:3351 -> xxx.yyy.95.249:1433 SYN ******S*
May 23 14:39:53 67.68.51.209:3358 -> xxx.yyy.95.250:1433 SYN ******S*
May 23 14:39:53 67.68.51.209:3372 -> xxx.yyy.95.251:1433 SYN ******S*
May 23 14:39:53 67.68.51.209:3381 -> xxx.yyy.95.252:1433 SYN ******S*
May 23 14:39:54 67.68.51.209:3392 -> xxx.yyy.95.253:1433 SYN ******S*
May 23 14:39:54 67.68.51.209:3407 -> xxx.yyy.95.254:1433 SYN ******S*
May 23 14:39:54 67.68.51.209:3427 -> xxx.yyy.95.255:1433 SYN ******S*
27714

May 23 20:13:23 218.4.51.46:49922 -> xxx.yyy.15.96:2745 SYN ******S*
May 23 20:13:23 218.4.51.46:51028 -> xxx.yyy.169.199:2745 SYN ******S*
May 23 20:13:24 218.4.51.46:51328 -> xxx.yyy.12.61:2745 SYN ******S*
May 23 20:13:28 218.4.51.46:51541 -> xxx.yyy.250.31:1025 SYN ******S*
May 23 20:13:28 218.4.51.46:51538 -> xxx.yyy.250.31:2745 SYN ******S*
May 23 20:13:29 218.4.51.46:51976 -> xxx.yyy.72.251:2745 SYN ******S*
May 23 20:13:29 218.4.51.46:52842 -> xxx.yyy.152.88:2745 SYN ******S*
May 23 20:13:32 218.4.51.46:52842 -> xxx.yyy.152.88:2745 SYN ******S*
[...]
May 23 21:33:31 218.4.51.46:41057 -> xxx.yyy.183.96:2745 SYN ******S*
May 23 21:33:31 218.4.51.46:43442 -> xxx.yyy.13.87:1025 SYN ******S*
May 23 21:33:31 218.4.51.46:43440 -> xxx.yyy.13.87:2745 SYN ******S*
May 23 21:33:32 218.4.51.46:45326 -> xxx.yyy.82.174:2745 SYN ******S*
May 23 21:33:33 218.4.51.46:45525 -> xxx.yyy.149.176:1025 SYN ******S*
May 23 21:33:33 218.4.51.46:45523 -> xxx.yyy.149.176:2745 SYN ******S*
May 23 21:33:33 218.4.51.46:42025 -> xxx.yyy.184.241:2745 SYN ******S*
May 23 21:33:33 218.4.51.46:42029 -> xxx.yyy.184.241:3127 SYN ******S*
27320

[...]
24030

May 23 12:10:37 211.90.88.43:41172 -> xxx.yyy.242.190:2745 SYN ******S*
May 23 12:10:40 211.90.88.43:41193 -> xxx.yyy.242.190:1025 SYN ******S*
May 23 12:10:40 211.90.88.43:53850 -> xxx.yyy.242.190:3127 SYN ******S*
May 23 12:10:40 211.90.88.43:41216 -> xxx.yyy.242.190:6129 SYN ******S*
May 23 12:10:40 211.90.88.43:53855 -> xxx.yyy.242.190:5000 SYN ******S*
May 23 12:10:40 211.90.88.43:53856 -> xxx.yyy.242.190:80 SYN ******S*
May 23 12:10:46 211.90.88.43:41193 -> xxx.yyy.242.190:1025 SYN ******S*
May 23 12:10:46 211.90.88.43:41216 -> xxx.yyy.242.190:6129 SYN ******S*
[...]
May 23 21:33:30 211.90.88.43:44677 -> xxx.yyy.74.150:1025 SYN ******S*
May 23 21:33:31 211.90.88.43:25655 -> xxx.yyy.166.32:2745 SYN ******S*
May 23 21:33:32 211.90.88.43:43395 -> xxx.yyy.242.167:1025 SYN ******S*
May 23 21:33:32 211.90.88.43:56306 -> xxx.yyy.242.167:6129 SYN ******S*
May 23 21:33:32 211.90.88.43:43397 -> xxx.yyy.242.167:80 SYN ******S*
May 23 21:33:32 211.90.88.43:3776 -> xxx.yyy.242.167:2745 SYN ******S*
May 23 21:33:32 211.90.88.43:43396 -> xxx.yyy.242.167:3127 SYN ******S*
May 23 21:33:32 211.90.88.43:46440 -> xxx.yyy.190.10:2745 SYN ******S*
May 23 21:33:32 211.90.88.43:40585 -> xxx.yyy.204.244:2745 SYN ******S*
22856

--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly@xxxxxxx phone: (319) 273-5850 fax: (319) 273-7373
_______________________________________________
Intrusions mailing list
Intrusions@xxxxxxxxxxxxxx
http://www.dshield.org/mailman/listinfo/intrusions
<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  RE: LOGS: GIAC GCIA Version 3.4 Practical Detect IanEaton: 00076, Don Murdoch
Next by Date:  LOGS: GIAC GCIA Version 3.4 Practical Detect Alva Lease 'Skip' Duckwall IV: 00076, skip1@xxxxxxxxxxxx
Previous by Thread:  [LOGS] Summary of large-scale portscanning detectsi: 00076, Ken . Connelly
Next by Thread:  LOGS: GIAC GCIA Version 3.4 Practical Detect Alva Lease 'Skip' Duckwall IV: 00076, skip1@xxxxxxxxxxxx
Indexes:  [Date] [Thread] [Top] [All Lists]

Google Custom Search
News | FAQ | advertise