|
[LOGS] Summary of large-scale portscanning detects: msg#00081security.intrusions
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0500. May 24 09:15:21 66.131.82.63:22002 -> xxx.yyy.1.0:3127 SYN ******S* May 24 09:15:21 66.131.82.63:22002 -> xxx.yyy.1.0:1080 SYN ******S* May 24 09:15:21 66.131.82.63:22002 -> xxx.yyy.1.0:10080 SYN ******S* May 24 09:15:21 66.131.82.63:22002 -> xxx.yyy.1.0:3128 SYN ******S* May 24 09:15:21 66.131.82.63:22002 -> xxx.yyy.1.1:3127 SYN ******S* May 24 09:15:21 66.131.82.63:22002 -> xxx.yyy.1.1:1080 SYN ******S* May 24 09:15:21 66.131.82.63:22002 -> xxx.yyy.1.1:10080 SYN ******S* May 24 09:15:21 66.131.82.63:22002 -> xxx.yyy.1.1:3128 SYN ******S* [...] May 24 15:09:50 66.131.82.63:22002 -> xxx.yyy.206.18:10080 SYN ******S* May 24 15:09:50 66.131.82.63:22002 -> xxx.yyy.206.18:3128 SYN ******S* May 24 15:09:50 66.131.82.63:22002 -> xxx.yyy.206.19:3127 SYN ******S* May 24 15:09:50 66.131.82.63:22002 -> xxx.yyy.206.19:1080 SYN ******S* May 24 15:09:50 66.131.82.63:22002 -> xxx.yyy.206.19:3128 SYN ******S* May 24 15:09:50 66.131.82.63:22002 -> xxx.yyy.206.19:10080 SYN ******S* May 24 15:09:50 66.131.82.63:22002 -> xxx.yyy.206.20:3127 SYN ******S* May 24 15:09:50 66.131.82.63:22002 -> xxx.yyy.206.20:1080 SYN ******S* May 24 15:09:50 66.131.82.63:22002 -> xxx.yyy.206.20:10080 SYN ******S* 139545 May 24 00:00:07 61.222.11.226:61248 -> xxx.yyy.144.194:2745 SYN ******S* May 24 00:00:07 61.222.11.226:61250 -> xxx.yyy.71.31:2745 SYN ******S* May 24 00:00:07 61.222.11.226:61252 -> xxx.yyy.71.31:1025 SYN ******S* May 24 00:00:08 61.222.11.226:61303 -> xxx.yyy.68.16:2745 SYN ******S* May 24 00:00:08 61.222.11.226:61305 -> xxx.yyy.68.16:1025 SYN ******S* May 24 00:00:08 61.222.11.226:61306 -> xxx.yyy.68.16:445 SYN ******S* May 24 00:00:08 61.222.11.226:61307 -> xxx.yyy.68.16:3127 SYN ******S* May 24 00:00:08 61.222.11.226:61308 -> xxx.yyy.68.16:6129 SYN ******S* [...] May 24 15:09:43 61.222.11.226:18668 -> xxx.yyy.1.158:6129 SYN ******S* May 24 15:09:43 61.222.11.226:18660 -> xxx.yyy.1.158:2745 SYN ******S* May 24 15:09:47 61.222.11.226:18947 -> xxx.yyy.145.103:2745 SYN ******S* May 24 15:09:47 61.222.11.226:18949 -> xxx.yyy.145.103:1025 SYN ******S* May 24 15:09:47 61.222.11.226:18950 -> xxx.yyy.145.103:445 SYN ******S* May 24 15:09:47 61.222.11.226:18951 -> xxx.yyy.145.103:3127 SYN ******S* May 24 15:09:47 61.222.11.226:18952 -> xxx.yyy.145.103:6129 SYN ******S* May 24 15:09:47 61.222.11.226:18953 -> xxx.yyy.145.103:139 SYN ******S* 104240 May 24 09:37:51 80.38.92.77:54699 -> xxx.yyy.1.0:111 SYN ******S* May 24 09:37:51 80.38.92.77:54700 -> xxx.yyy.1.1:111 SYN ******S* May 24 09:37:51 80.38.92.77:54701 -> xxx.yyy.1.2:111 SYN ******S* May 24 09:37:51 80.38.92.77:54702 -> xxx.yyy.1.3:111 SYN ******S* May 24 09:37:51 80.38.92.77:54703 -> xxx.yyy.1.4:111 SYN ******S* May 24 09:37:51 80.38.92.77:54704 -> xxx.yyy.1.5:111 SYN ******S* May 24 09:37:51 80.38.92.77:54705 -> xxx.yyy.1.6:111 SYN ******S* May 24 09:37:51 80.38.92.77:54706 -> xxx.yyy.1.7:111 SYN ******S* [...] May 24 09:55:36 80.38.92.77:54453 -> xxx.yyy.255.247:111 SYN ******S* May 24 09:55:36 80.38.92.77:54454 -> xxx.yyy.255.248:111 SYN ******S* May 24 09:55:36 80.38.92.77:54455 -> xxx.yyy.255.249:111 SYN ******S* May 24 09:55:36 80.38.92.77:54456 -> xxx.yyy.255.250:111 SYN ******S* May 24 09:55:36 80.38.92.77:54457 -> xxx.yyy.255.251:111 SYN ******S* May 24 09:55:36 80.38.92.77:54458 -> xxx.yyy.255.252:111 SYN ******S* May 24 09:55:36 80.38.92.77:54459 -> xxx.yyy.255.253:111 SYN ******S* May 24 09:55:36 80.38.92.77:54460 -> xxx.yyy.255.254:111 SYN ******S* May 24 09:55:36 80.38.92.77:54461 -> xxx.yyy.255.255:111 SYN ******S* 77710 May 24 03:20:44 194.72.35.198:4580 -> xxx.yyy.1.1:4898 SYN ******S* May 24 03:20:44 194.72.35.198:4585 -> xxx.yyy.1.2:4898 SYN ******S* May 24 03:20:45 194.72.35.198:4590 -> xxx.yyy.1.3:4898 SYN ******S* May 24 03:20:45 194.72.35.198:4595 -> xxx.yyy.1.4:4898 SYN ******S* May 24 03:20:45 194.72.35.198:4600 -> xxx.yyy.1.5:4898 SYN ******S* May 24 03:20:45 194.72.35.198:4605 -> xxx.yyy.1.6:4898 SYN ******S* May 24 03:20:45 194.72.35.198:4610 -> xxx.yyy.1.7:4898 SYN ******S* May 24 03:20:45 194.72.35.198:4615 -> xxx.yyy.1.8:4898 SYN ******S* [...] May 24 03:43:29 194.72.35.198:3251 -> xxx.yyy.255.191:4898 SYN ******S* May 24 03:43:30 194.72.35.198:3260 -> xxx.yyy.255.193:4898 SYN ******S* May 24 03:43:31 194.72.35.198:3547 -> xxx.yyy.255.251:4898 SYN ******S* May 24 03:43:31 194.72.35.198:3532 -> xxx.yyy.255.248:4898 SYN ******S* May 24 03:43:31 194.72.35.198:3542 -> xxx.yyy.255.250:4898 SYN ******S* May 24 03:43:31 194.72.35.198:3551 -> xxx.yyy.255.252:4898 SYN ******S* May 24 03:43:31 194.72.35.198:3537 -> xxx.yyy.255.249:4898 SYN ******S* May 24 03:43:31 194.72.35.198:3555 -> xxx.yyy.255.253:4898 SYN ******S* May 24 03:43:31 194.72.35.198:3561 -> xxx.yyy.255.254:4898 SYN ******S* 75071 May 24 03:58:08 12.4.60.146:2255 -> xxx.yyy.1.1:8000 SYN ******S* May 24 03:58:08 12.4.60.146:2256 -> xxx.yyy.1.2:8000 SYN ******S* May 24 03:58:10 12.4.60.146:2257 -> xxx.yyy.1.3:8000 SYN ******S* May 24 03:58:10 12.4.60.146:2258 -> xxx.yyy.1.4:8000 SYN ******S* May 24 03:58:10 12.4.60.146:2259 -> xxx.yyy.1.5:8000 SYN ******S* May 24 03:58:10 12.4.60.146:2260 -> xxx.yyy.1.6:8000 SYN ******S* May 24 03:58:10 12.4.60.146:2261 -> xxx.yyy.1.7:8000 SYN ******S* May 24 03:58:10 12.4.60.146:2262 -> xxx.yyy.1.8:8000 SYN ******S* [...] May 24 04:24:43 12.4.60.146:2044 -> xxx.yyy.255.210:8000 SYN ******S* May 24 04:24:43 12.4.60.146:2049 -> xxx.yyy.255.215:8000 SYN ******S* May 24 04:24:43 12.4.60.146:2050 -> xxx.yyy.255.216:8000 SYN ******S* May 24 04:24:43 12.4.60.146:2051 -> xxx.yyy.255.217:8000 SYN ******S* May 24 04:24:43 12.4.60.146:2047 -> xxx.yyy.255.213:8000 SYN ******S* May 24 04:24:43 12.4.60.146:2048 -> xxx.yyy.255.214:8000 SYN ******S* May 24 04:24:43 12.4.60.146:2053 -> xxx.yyy.255.219:8000 SYN ******S* May 24 04:24:43 12.4.60.146:2054 -> xxx.yyy.255.220:8000 SYN ******S* May 24 04:24:43 12.4.60.146:2052 -> xxx.yyy.255.218:8000 SYN ******S* 74195 May 24 07:26:39 216.254.89.254:3426 -> xxx.yyy.1.1:8000 SYN ******S* May 24 07:26:38 216.254.89.254:3427 -> xxx.yyy.1.2:8000 SYN ******S* May 24 07:26:40 216.254.89.254:3428 -> xxx.yyy.1.3:8000 SYN ******S* May 24 07:26:40 216.254.89.254:3429 -> xxx.yyy.1.4:8000 SYN ******S* May 24 07:26:40 216.254.89.254:3430 -> xxx.yyy.1.5:8000 SYN ******S* May 24 07:26:40 216.254.89.254:3431 -> xxx.yyy.1.6:8000 SYN ******S* May 24 07:26:40 216.254.89.254:3432 -> xxx.yyy.1.7:8000 SYN ******S* May 24 07:26:40 216.254.89.254:3435 -> xxx.yyy.1.10:8000 SYN ******S* [...] May 24 07:37:35 216.254.89.254:2255 -> xxx.yyy.255.244:8000 SYN ******S* May 24 07:37:35 216.254.89.254:2259 -> xxx.yyy.255.248:8000 SYN ******S* May 24 07:37:35 216.254.89.254:2256 -> xxx.yyy.255.245:8000 SYN ******S* May 24 07:37:35 216.254.89.254:2253 -> xxx.yyy.255.242:8000 SYN ******S* May 24 07:37:35 216.254.89.254:2260 -> xxx.yyy.255.249:8000 SYN ******S* May 24 07:37:35 216.254.89.254:2264 -> xxx.yyy.255.253:8000 SYN ******S* May 24 07:37:35 216.254.89.254:2265 -> xxx.yyy.255.254:8000 SYN ******S* May 24 07:37:35 216.254.89.254:2263 -> xxx.yyy.255.252:8000 SYN ******S* 71980 May 24 00:00:07 66.205.41.140:3750 -> xxx.yyy.94.77:2745 SYN ******S* May 24 00:00:07 66.205.41.140:3756 -> xxx.yyy.94.77:1025 SYN ******S* May 24 00:00:07 66.205.41.140:3769 -> xxx.yyy.94.77:445 SYN ******S* May 24 00:00:07 66.205.41.140:3774 -> xxx.yyy.94.77:3127 SYN ******S* May 24 00:00:07 66.205.41.140:3786 -> xxx.yyy.94.77:6129 SYN ******S* May 24 00:00:07 66.205.41.140:3807 -> xxx.yyy.94.77:80 SYN ******S* May 24 00:00:04 66.205.41.140:4690 -> xxx.yyy.153.22:1025 SYN ******S* May 24 00:00:04 66.205.41.140:4656 -> xxx.yyy.153.22:2745 SYN ******S* [...] May 24 12:33:43 66.205.41.140:1939 -> xxx.yyy.252.108:445 SYN ******S* May 24 12:33:43 66.205.41.140:4300 -> xxx.yyy.129.49:445 SYN ******S* May 24 12:33:43 66.205.41.140:2920 -> xxx.yyy.129.49:2745 SYN ******S* May 24 12:33:43 66.205.41.140:4331 -> xxx.yyy.129.49:3127 SYN ******S* May 24 12:33:43 66.205.41.140:4417 -> xxx.yyy.129.49:6129 SYN ******S* May 24 12:33:43 66.205.41.140:4293 -> xxx.yyy.129.49:1025 SYN ******S* May 24 12:33:46 66.205.41.140:3118 -> xxx.yyy.209.27:3127 SYN ******S* May 24 12:33:46 66.205.41.140:2651 -> xxx.yyy.209.27:1025 SYN ******S* May 24 12:33:46 66.205.41.140:2832 -> xxx.yyy.209.27:445 SYN ******S* 71889 May 24 00:00:07 202.103.49.196:26574 -> xxx.yyy.193.223:2745 SYN ******S* May 24 00:00:07 202.103.49.196:5399 -> xxx.yyy.193.223:1025 SYN ******S* May 24 00:00:05 202.103.49.196:28836 -> xxx.yyy.107.99:1025 SYN ******S* May 24 00:00:05 202.103.49.196:16259 -> xxx.yyy.107.99:2745 SYN ******S* May 24 00:00:05 202.103.49.196:28186 -> xxx.yyy.68.215:2745 SYN ******S* May 24 00:00:05 202.103.49.196:57324 -> xxx.yyy.68.215:3127 SYN ******S* May 24 00:00:05 202.103.49.196:28200 -> xxx.yyy.68.215:6129 SYN ******S* May 24 00:00:05 202.103.49.196:65067 -> xxx.yyy.167.176:2745 SYN ******S* [...] May 24 05:45:32 202.103.49.196:12557 -> xxx.yyy.211.102:2745 SYN ******S* May 24 05:45:33 202.103.49.196:34756 -> xxx.yyy.162.205:2745 SYN ******S* May 24 05:45:36 202.103.49.196:30265 -> xxx.yyy.217.153:1025 SYN ******S* May 24 05:45:36 202.103.49.196:34756 -> xxx.yyy.162.205:2745 SYN ******S* May 24 05:45:36 202.103.49.196:26161 -> xxx.yyy.162.205:1025 SYN ******S* May 24 05:45:38 202.103.49.196:30468 -> xxx.yyy.146.80:1025 SYN ******S* May 24 05:45:39 202.103.49.196:34547 -> xxx.yyy.214.199:1025 SYN ******S* May 24 05:45:42 202.103.49.196:12557 -> xxx.yyy.211.102:2745 SYN ******S* May 24 05:45:42 202.103.49.196:34756 -> xxx.yyy.162.205:2745 SYN ******S* 65072 May 24 00:00:30 61.133.63.113:10621 -> xxx.yyy.68.103:2745 SYN ******S* May 24 00:00:32 61.133.63.113:14899 -> xxx.yyy.234.3:2745 SYN ******S* May 24 00:00:32 61.133.63.113:19414 -> xxx.yyy.234.3:1025 SYN ******S* May 24 00:00:34 61.133.63.113:4195 -> xxx.yyy.208.78:2745 SYN ******S* May 24 00:00:34 61.133.63.113:30335 -> xxx.yyy.11.244:2745 SYN ******S* May 24 00:00:38 61.133.63.113:51765 -> xxx.yyy.233.116:2745 SYN ******S* May 24 00:00:38 61.133.63.113:11286 -> xxx.yyy.221.101:2745 SYN ******S* May 24 00:00:38 61.133.63.113:27760 -> xxx.yyy.221.101:1025 SYN ******S* [...] May 24 09:11:41 61.133.63.113:48912 -> xxx.yyy.216.108:1025 SYN ******S* May 24 09:11:41 61.133.63.113:52090 -> xxx.yyy.155.216:2745 SYN ******S* May 24 09:11:44 61.133.63.113:34170 -> xxx.yyy.90.42:2745 SYN ******S* May 24 09:11:44 61.133.63.113:46731 -> xxx.yyy.90.42:1025 SYN ******S* May 24 09:11:42 61.133.63.113:41412 -> xxx.yyy.160.62:2745 SYN ******S* May 24 09:11:42 61.133.63.113:12480 -> xxx.yyy.160.62:1025 SYN ******S* May 24 09:11:42 61.133.63.113:5599 -> xxx.yyy.78.112:2745 SYN ******S* May 24 09:11:45 61.133.63.113:12480 -> xxx.yyy.160.62:1025 SYN ******S* 45514 May 24 05:18:41 202.56.254.142:3071 -> xxx.yyy.1.1:4899 SYN ******S* May 24 05:18:41 202.56.254.142:3073 -> xxx.yyy.1.2:4899 SYN ******S* May 24 05:18:39 202.56.254.142:3078 -> xxx.yyy.1.3:4899 SYN ******S* May 24 05:18:39 202.56.254.142:3079 -> xxx.yyy.1.4:4899 SYN ******S* May 24 05:18:39 202.56.254.142:3081 -> xxx.yyy.1.5:4899 SYN ******S* May 24 05:18:39 202.56.254.142:3082 -> xxx.yyy.1.6:4899 SYN ******S* May 24 05:18:39 202.56.254.142:3083 -> xxx.yyy.1.7:4899 SYN ******S* May 24 05:18:39 202.56.254.142:3085 -> xxx.yyy.1.8:4899 SYN ******S* [...] May 24 05:30:18 202.56.254.142:3427 -> xxx.yyy.255.247:4899 SYN ******S* May 24 05:30:18 202.56.254.142:3428 -> xxx.yyy.255.248:4899 SYN ******S* May 24 05:30:18 202.56.254.142:3430 -> xxx.yyy.255.249:4899 SYN ******S* May 24 05:30:18 202.56.254.142:3431 -> xxx.yyy.255.250:4899 SYN ******S* May 24 05:30:18 202.56.254.142:3433 -> xxx.yyy.255.251:4899 SYN ******S* May 24 05:30:18 202.56.254.142:3436 -> xxx.yyy.255.252:4899 SYN ******S* May 24 05:30:18 202.56.254.142:3437 -> xxx.yyy.255.253:4899 SYN ******S* May 24 05:30:18 202.56.254.142:3438 -> xxx.yyy.255.254:4899 SYN ******S* 45426 May 24 00:49:17 82.49.5.219:22478 -> xxx.yyy.1.0:21 SYN ******S* May 24 00:49:17 82.49.5.219:24515 -> xxx.yyy.1.1:21 SYN ******S* May 24 00:49:17 82.49.5.219:22976 -> xxx.yyy.1.2:21 SYN ******S* May 24 00:49:17 82.49.5.219:24815 -> xxx.yyy.1.3:21 SYN ******S* May 24 00:49:17 82.49.5.219:24149 -> xxx.yyy.1.4:21 SYN ******S* May 24 00:49:17 82.49.5.219:24542 -> xxx.yyy.1.5:21 SYN ******S* May 24 00:49:17 82.49.5.219:22991 -> xxx.yyy.1.6:21 SYN ******S* May 24 00:49:17 82.49.5.219:24053 -> xxx.yyy.1.7:21 SYN ******S* [...] May 24 00:58:12 82.49.5.219:21308 -> xxx.yyy.255.248:21 SYN ******S* May 24 00:58:12 82.49.5.219:24220 -> xxx.yyy.255.249:21 SYN ******S* May 24 00:58:12 82.49.5.219:23800 -> xxx.yyy.255.250:21 SYN ******S* May 24 00:58:12 82.49.5.219:21256 -> xxx.yyy.255.251:21 SYN ******S* May 24 00:58:12 82.49.5.219:24194 -> xxx.yyy.255.252:21 SYN ******S* May 24 00:58:12 82.49.5.219:23445 -> xxx.yyy.255.253:21 SYN ******S* May 24 00:58:12 82.49.5.219:25170 -> xxx.yyy.255.254:21 SYN ******S* May 24 00:58:12 82.49.5.219:25170 -> xxx.yyy.255.255:21 SYN ******S* 44236 May 24 02:29:09 211.96.232.46:4473 -> xxx.yyy.148.56:2745 SYN ******S* May 24 02:29:09 211.96.232.46:4498 -> xxx.yyy.181.17:2745 SYN ******S* May 24 02:29:09 211.96.232.46:4521 -> xxx.yyy.12.179:2745 SYN ******S* May 24 02:29:09 211.96.232.46:4523 -> xxx.yyy.12.179:1025 SYN ******S* May 24 02:29:09 211.96.232.46:4525 -> xxx.yyy.12.179:3127 SYN ******S* May 24 02:29:09 211.96.232.46:4526 -> xxx.yyy.12.179:6129 SYN ******S* May 24 02:29:09 211.96.232.46:4528 -> xxx.yyy.12.179:80 SYN ******S* May 24 02:29:07 211.96.232.46:1578 -> xxx.yyy.184.166:2745 SYN ******S* [...] May 24 08:11:19 211.96.232.46:3773 -> xxx.yyy.207.61:6129 SYN ******S* May 24 08:11:19 211.96.232.46:3775 -> xxx.yyy.207.61:80 SYN ******S* May 24 08:11:19 211.96.232.46:3768 -> xxx.yyy.207.61:2745 SYN ******S* May 24 08:11:19 211.96.232.46:3772 -> xxx.yyy.207.61:3127 SYN ******S* May 24 08:11:25 211.96.232.46:3770 -> xxx.yyy.207.61:1025 SYN ******S* May 24 08:11:25 211.96.232.46:3773 -> xxx.yyy.207.61:6129 SYN ******S* May 24 08:11:25 211.96.232.46:3775 -> xxx.yyy.207.61:80 SYN ******S* May 24 08:11:25 211.96.232.46:3768 -> xxx.yyy.207.61:2745 SYN ******S* May 24 08:11:25 211.96.232.46:3772 -> xxx.yyy.207.61:3127 SYN ******S* 39444 May 24 00:00:05 219.159.48.243:10579 -> xxx.yyy.224.164:2745 SYN ******S* May 24 00:00:11 219.159.48.243:10791 -> xxx.yyy.82.180:2745 SYN ******S* May 24 00:00:11 219.159.48.243:10958 -> xxx.yyy.199.177:2745 SYN ******S* May 24 00:00:11 219.159.48.243:10960 -> xxx.yyy.199.177:1025 SYN ******S* May 24 00:00:11 219.159.48.243:10965 -> xxx.yyy.207.221:2745 SYN ******S* May 24 00:00:11 219.159.48.243:11053 -> xxx.yyy.166.215:2745 SYN ******S* May 24 00:00:11 219.159.48.243:11055 -> xxx.yyy.166.215:1025 SYN ******S* May 24 00:00:14 219.159.48.243:11055 -> xxx.yyy.166.215:1025 SYN ******S* [...] May 24 07:01:31 219.159.48.243:28483 -> xxx.yyy.75.52:1025 SYN ******S* May 24 07:01:29 219.159.48.243:28364 -> xxx.yyy.172.27:2745 SYN ******S* May 24 07:01:29 219.159.48.243:28162 -> xxx.yyy.165.98:1025 SYN ******S* May 24 07:01:29 219.159.48.243:28160 -> xxx.yyy.165.98:2745 SYN ******S* May 24 07:01:30 219.159.48.243:28530 -> xxx.yyy.213.130:2745 SYN ******S* May 24 07:01:30 219.159.48.243:28532 -> xxx.yyy.213.130:1025 SYN ******S* May 24 07:01:30 219.159.48.243:28203 -> xxx.yyy.208.156:3127 SYN ******S* May 24 07:01:30 219.159.48.243:28201 -> xxx.yyy.208.156:1025 SYN ******S* May 24 07:01:30 219.159.48.243:28209 -> xxx.yyy.206.252:2745 SYN ******S* 38216 May 24 02:29:16 203.175.134.224:1096 -> xxx.yyy.65.32:2745 SYN ******S* May 24 02:29:16 203.175.134.224:1106 -> xxx.yyy.65.32:3127 SYN ******S* May 24 02:29:16 203.175.134.224:1117 -> xxx.yyy.65.32:6129 SYN ******S* May 24 02:29:16 203.175.134.224:1120 -> xxx.yyy.65.32:80 SYN ******S* May 24 02:29:20 203.175.134.224:1589 -> xxx.yyy.232.74:2745 SYN ******S* May 24 02:29:20 203.175.134.224:2184 -> xxx.yyy.29.232:2745 SYN ******S* May 24 02:29:20 203.175.134.224:2188 -> xxx.yyy.29.232:3127 SYN ******S* May 24 02:29:20 203.175.134.224:2193 -> xxx.yyy.29.232:6129 SYN ******S* [...] May 24 05:11:46 203.175.134.224:2681 -> xxx.yyy.208.240:2745 SYN ******S* May 24 05:11:46 203.175.134.224:2694 -> xxx.yyy.208.240:3127 SYN ******S* May 24 05:11:46 203.175.134.224:2695 -> xxx.yyy.208.240:6129 SYN ******S* May 24 05:11:46 203.175.134.224:2700 -> xxx.yyy.208.240:80 SYN ******S* May 24 05:11:47 203.175.134.224:2013 -> xxx.yyy.241.64:2745 SYN ******S* May 24 05:11:47 203.175.134.224:2018 -> xxx.yyy.242.229:2745 SYN ******S* May 24 05:11:48 203.175.134.224:2543 -> xxx.yyy.186.205:2745 SYN ******S* May 24 05:11:48 203.175.134.224:2067 -> xxx.yyy.245.15:2745 SYN ******S* May 24 05:11:48 203.175.134.224:2847 -> xxx.yyy.169.94:2745 SYN ******S* 37140 May 24 00:35:05 61.93.235.6:22002 -> xxx.yyy.1.0:3127 SYN ******S* May 24 00:35:05 61.93.235.6:22002 -> xxx.yyy.1.0:1080 SYN ******S* May 24 00:35:05 61.93.235.6:22002 -> xxx.yyy.1.0:10080 SYN ******S* May 24 00:35:05 61.93.235.6:22002 -> xxx.yyy.1.0:3128 SYN ******S* May 24 00:35:05 61.93.235.6:22002 -> xxx.yyy.1.1:3127 SYN ******S* May 24 00:35:06 61.93.235.6:22002 -> xxx.yyy.1.1:1080 SYN ******S* May 24 00:35:06 61.93.235.6:22002 -> xxx.yyy.1.1:10080 SYN ******S* May 24 00:35:06 61.93.235.6:22002 -> xxx.yyy.1.1:3128 SYN ******S* [...] May 24 04:15:22 61.93.235.6:22002 -> xxx.yyy.95.254:3127 SYN ******S* May 24 04:15:22 61.93.235.6:22002 -> xxx.yyy.95.254:1080 SYN ******S* May 24 04:15:22 61.93.235.6:22002 -> xxx.yyy.95.254:10080 SYN ******S* May 24 04:15:22 61.93.235.6:22002 -> xxx.yyy.95.254:3128 SYN ******S* May 24 04:15:23 61.93.235.6:22002 -> xxx.yyy.95.255:3127 SYN ******S* May 24 04:15:23 61.93.235.6:22002 -> xxx.yyy.95.255:1080 SYN ******S* May 24 04:15:23 61.93.235.6:22002 -> xxx.yyy.95.255:10080 SYN ******S* May 24 04:15:23 61.93.235.6:22002 -> xxx.yyy.95.255:3128 SYN ******S* 36456 May 24 00:01:04 203.67.236.171:3595 -> xxx.yyy.251.59:2745 SYN ******S* May 24 00:01:06 203.67.236.171:3652 -> xxx.yyy.67.183:2745 SYN ******S* May 24 00:01:06 203.67.236.171:3654 -> xxx.yyy.67.183:1025 SYN ******S* May 24 00:01:06 203.67.236.171:3656 -> xxx.yyy.67.183:3127 SYN ******S* May 24 00:01:06 203.67.236.171:3657 -> xxx.yyy.67.183:6129 SYN ******S* May 24 00:01:06 203.67.236.171:3658 -> xxx.yyy.67.183:139 SYN ******S* May 24 00:01:06 203.67.236.171:3659 -> xxx.yyy.67.183:80 SYN ******S* May 24 00:01:09 203.67.236.171:3923 -> xxx.yyy.151.242:2745 SYN ******S* [...] May 24 07:37:35 203.67.236.171:3738 -> xxx.yyy.86.97:139 SYN ******S* May 24 07:37:38 203.67.236.171:3265 -> xxx.yyy.241.95:1025 SYN ******S* May 24 07:37:38 203.67.236.171:3261 -> xxx.yyy.241.95:2745 SYN ******S* May 24 07:37:41 203.67.236.171:3737 -> xxx.yyy.86.97:6129 SYN ******S* May 24 07:37:41 203.67.236.171:3730 -> xxx.yyy.86.97:2745 SYN ******S* May 24 07:37:41 203.67.236.171:3740 -> xxx.yyy.86.97:80 SYN ******S* May 24 07:37:41 203.67.236.171:3735 -> xxx.yyy.86.97:3127 SYN ******S* May 24 07:37:41 203.67.236.171:3732 -> xxx.yyy.86.97:1025 SYN ******S* May 24 07:37:41 203.67.236.171:3738 -> xxx.yyy.86.97:139 SYN ******S* 33832 May 24 00:00:04 202.99.60.165:2919 -> xxx.yyy.229.47:2745 SYN ******S* May 24 00:00:07 202.99.60.165:2989 -> xxx.yyy.158.22:2745 SYN ******S* May 24 00:00:07 202.99.60.165:2991 -> xxx.yyy.158.22:1025 SYN ******S* May 24 00:00:05 202.99.60.165:2897 -> xxx.yyy.72.23:1025 SYN ******S* May 24 00:00:05 202.99.60.165:54911 -> xxx.yyy.72.23:6129 SYN ******S* May 24 00:00:05 202.99.60.165:2895 -> xxx.yyy.72.23:2745 SYN ******S* May 24 00:00:05 202.99.60.165:54910 -> xxx.yyy.72.23:3127 SYN ******S* May 24 00:00:05 202.99.60.165:2901 -> xxx.yyy.72.23:139 SYN ******S* [...] May 24 05:09:43 202.99.60.165:4768 -> xxx.yyy.79.238:1025 SYN ******S* May 24 05:09:43 202.99.60.165:4785 -> xxx.yyy.79.238:80 SYN ******S* May 24 05:09:43 202.99.60.165:4811 -> xxx.yyy.186.94:2745 SYN ******S* May 24 05:09:44 202.99.60.165:1119 -> xxx.yyy.79.35:2745 SYN ******S* May 24 05:09:45 202.99.60.165:4405 -> xxx.yyy.79.204:2745 SYN ******S* May 24 05:09:45 202.99.60.165:4456 -> xxx.yyy.235.235:1025 SYN ******S* May 24 05:09:45 202.99.60.165:4449 -> xxx.yyy.235.235:2745 SYN ******S* May 24 05:09:47 202.99.60.165:1119 -> xxx.yyy.79.35:2745 SYN ******S* May 24 05:09:47 202.99.60.165:1279 -> xxx.yyy.222.93:2745 SYN ******S* 30185 May 24 09:36:06 221.6.9.1:2767 -> xxx.yyy.1.11:111 SYN ******S* May 24 09:36:06 221.6.9.1:2777 -> xxx.yyy.1.21:111 SYN ******S* May 24 09:36:06 221.6.9.1:2786 -> xxx.yyy.1.30:111 SYN ******S* May 24 09:36:06 221.6.9.1:2808 -> xxx.yyy.1.52:111 SYN ******S* May 24 09:36:06 221.6.9.1:2813 -> xxx.yyy.1.57:111 SYN ******S* May 24 09:36:06 221.6.9.1:2762 -> xxx.yyy.1.6:111 SYN ******S* May 24 09:36:06 221.6.9.1:2759 -> xxx.yyy.1.3:111 SYN ******S* May 24 09:36:06 221.6.9.1:2826 -> xxx.yyy.1.70:111 SYN ******S* [...] May 24 09:39:22 221.6.9.1:1368 -> xxx.yyy.255.205:111 SYN ******S* May 24 09:39:22 221.6.9.1:1367 -> xxx.yyy.255.204:111 SYN ******S* May 24 09:39:22 221.6.9.1:1369 -> xxx.yyy.255.206:111 SYN ******S* May 24 09:39:22 221.6.9.1:1363 -> xxx.yyy.255.200:111 SYN ******S* May 24 09:39:22 221.6.9.1:1365 -> xxx.yyy.255.202:111 SYN ******S* May 24 09:39:22 221.6.9.1:1373 -> xxx.yyy.255.210:111 SYN ******S* May 24 09:39:24 221.6.9.1:4251 -> xxx.yyy.253.211:111 SYN ******S* May 24 09:39:24 221.6.9.1:4252 -> xxx.yyy.253.212:111 SYN ******S* 29937 May 24 00:00:03 220.93.24.23:1192 -> xxx.yyy.151.53:2745 SYN ******S* May 24 00:00:04 220.93.24.23:4760 -> xxx.yyy.232.145:2745 SYN ******S* May 24 00:00:04 220.93.24.23:4817 -> xxx.yyy.177.174:1025 SYN ******S* May 24 00:00:04 220.93.24.23:4813 -> xxx.yyy.177.174:2745 SYN ******S* May 24 00:00:05 220.93.24.23:4833 -> xxx.yyy.203.29:2745 SYN ******S* May 24 00:00:06 220.93.24.23:1294 -> xxx.yyy.86.179:2745 SYN ******S* May 24 00:00:06 220.93.24.23:4983 -> xxx.yyy.229.125:1025 SYN ******S* May 24 00:00:07 220.93.24.23:1035 -> xxx.yyy.144.144:2745 SYN ******S* [...] May 24 05:40:45 220.93.24.23:1440 -> xxx.yyy.209.141:2745 SYN ******S* May 24 05:40:47 220.93.24.23:1183 -> xxx.yyy.111.120:2745 SYN ******S* May 24 05:40:49 220.93.24.23:1276 -> xxx.yyy.244.76:1025 SYN ******S* May 24 05:40:49 220.93.24.23:1284 -> xxx.yyy.212.241:2745 SYN ******S* May 24 05:40:53 220.93.24.23:2015 -> xxx.yyy.164.24:2745 SYN ******S* May 24 05:40:53 220.93.24.23:2029 -> xxx.yyy.246.246:2745 SYN ******S* May 24 05:40:54 220.93.24.23:2084 -> xxx.yyy.136.195:2745 SYN ******S* May 24 05:40:54 220.93.24.23:2087 -> xxx.yyy.136.195:1025 SYN ******S* 28564 May 24 00:00:16 61.255.43.209:4323 -> xxx.yyy.234.83:2745 SYN ******S* May 24 00:00:10 61.255.43.209:3248 -> xxx.yyy.219.32:2745 SYN ******S* May 24 00:00:11 61.255.43.209:3308 -> xxx.yyy.79.43:2745 SYN ******S* May 24 00:00:16 61.255.43.209:1376 -> xxx.yyy.199.144:2745 SYN ******S* May 24 00:00:15 61.255.43.209:1386 -> xxx.yyy.132.71:2745 SYN ******S* May 24 00:00:18 61.255.43.209:1970 -> xxx.yyy.140.160:2745 SYN ******S* May 24 00:00:21 61.255.43.209:1970 -> xxx.yyy.140.160:2745 SYN ******S* May 24 00:00:22 61.255.43.209:1376 -> xxx.yyy.199.144:2745 SYN ******S* [...] May 24 08:06:22 61.255.43.209:2978 -> xxx.yyy.179.236:2745 SYN ******S* May 24 08:06:24 61.255.43.209:1824 -> xxx.yyy.207.144:2745 SYN ******S* May 24 08:06:25 61.255.43.209:1852 -> xxx.yyy.67.230:2745 SYN ******S* May 24 08:06:25 61.255.43.209:2978 -> xxx.yyy.179.236:2745 SYN ******S* May 24 08:06:27 61.255.43.209:2486 -> xxx.yyy.238.47:2745 SYN ******S* May 24 08:06:28 61.255.43.209:2581 -> xxx.yyy.226.238:139 SYN ******S* May 24 08:06:28 61.255.43.209:2569 -> xxx.yyy.226.238:2745 SYN ******S* May 24 08:06:28 61.255.43.209:2578 -> xxx.yyy.226.238:6129 SYN ******S* May 24 08:06:31 61.255.43.209:2978 -> xxx.yyy.179.236:2745 SYN ******S* 27469 May 24 00:00:06 218.30.129.78:41374 -> xxx.yyy.174.53:2745 SYN ******S* May 24 00:00:12 218.30.129.78:41402 -> xxx.yyy.174.53:139 SYN ******S* May 24 00:00:09 218.30.129.78:42707 -> xxx.yyy.246.182:2745 SYN ******S* May 24 00:00:08 218.30.129.78:57987 -> xxx.yyy.129.148:80 SYN ******S* May 24 00:00:12 218.30.129.78:43599 -> xxx.yyy.80.164:2745 SYN ******S* May 24 00:00:12 218.30.129.78:43601 -> xxx.yyy.80.164:1025 SYN ******S* May 24 00:00:10 218.30.129.78:43647 -> xxx.yyy.80.164:139 SYN ******S* May 24 00:00:12 218.30.129.78:43630 -> xxx.yyy.80.164:3127 SYN ******S* [...] May 24 15:07:28 218.30.129.78:58487 -> xxx.yyy.67.248:2745 SYN ******S* May 24 15:07:29 218.30.129.78:58505 -> xxx.yyy.67.248:6129 SYN ******S* May 24 15:07:29 218.30.129.78:58504 -> xxx.yyy.67.248:3127 SYN ******S* May 24 15:07:29 218.30.129.78:58516 -> xxx.yyy.67.248:139 SYN ******S* May 24 15:07:28 218.30.129.78:58407 -> xxx.yyy.107.143:3127 SYN ******S* May 24 15:07:28 218.30.129.78:58414 -> xxx.yyy.107.143:139 SYN ******S* May 24 15:07:33 218.30.129.78:58415 -> xxx.yyy.107.143:80 SYN ******S* May 24 15:07:33 218.30.129.78:58517 -> xxx.yyy.67.248:80 SYN ******S* 25042 May 24 00:00:06 221.224.202.64:59720 -> xxx.yyy.187.97:1025 SYN ******S* May 24 00:00:06 221.224.202.64:59722 -> xxx.yyy.187.97:3127 SYN ******S* May 24 00:00:03 221.224.202.64:59723 -> xxx.yyy.187.97:6129 SYN ******S* May 24 00:00:06 221.224.202.64:59724 -> xxx.yyy.187.97:139 SYN ******S* May 24 00:00:06 221.224.202.64:59725 -> xxx.yyy.187.97:80 SYN ******S* May 24 00:00:06 221.224.202.64:59718 -> xxx.yyy.187.97:2745 SYN ******S* May 24 00:00:09 221.224.202.64:59864 -> xxx.yyy.193.4:2745 SYN ******S* May 24 00:00:07 221.224.202.64:59341 -> xxx.yyy.196.164:2745 SYN ******S* [...] May 24 05:46:23 221.224.202.64:42977 -> xxx.yyy.215.65:2745 SYN ******S* May 24 05:46:23 221.224.202.64:42979 -> xxx.yyy.215.65:1025 SYN ******S* May 24 05:46:25 221.224.202.64:43179 -> xxx.yyy.145.218:2745 SYN ******S* May 24 05:46:26 221.224.202.64:42272 -> xxx.yyy.17.210:2745 SYN ******S* May 24 05:46:27 221.224.202.64:42979 -> xxx.yyy.215.65:1025 SYN ******S* May 24 05:46:27 221.224.202.64:42977 -> xxx.yyy.215.65:2745 SYN ******S* May 24 05:46:27 221.224.202.64:42332 -> xxx.yyy.193.184:2745 SYN ******S* May 24 05:46:27 221.224.202.64:43003 -> xxx.yyy.141.159:2745 SYN ******S* May 24 05:46:29 221.224.202.64:43179 -> xxx.yyy.145.218:2745 SYN ******S* 23600 May 24 00:00:37 202.110.229.97:28369 -> xxx.yyy.80.73:2745 SYN ******S* May 24 00:00:37 202.110.229.97:44320 -> xxx.yyy.80.73:1025 SYN ******S* May 24 00:00:37 202.110.229.97:45511 -> xxx.yyy.80.73:3127 SYN ******S* May 24 00:00:37 202.110.229.97:16760 -> xxx.yyy.80.73:6129 SYN ******S* May 24 00:00:36 202.110.229.97:13121 -> xxx.yyy.143.134:1025 SYN ******S* May 24 00:00:36 202.110.229.97:31014 -> xxx.yyy.143.134:2745 SYN ******S* May 24 00:00:43 202.110.229.97:44320 -> xxx.yyy.80.73:1025 SYN ******S* May 24 00:00:43 202.110.229.97:16760 -> xxx.yyy.80.73:6129 SYN ******S* [...] May 24 10:12:25 202.110.229.97:32623 -> xxx.yyy.163.19:2745 SYN ******S* May 24 10:12:25 202.110.229.97:1154 -> xxx.yyy.163.19:3127 SYN ******S* May 24 10:12:25 202.110.229.97:7275 -> xxx.yyy.163.19:5000 SYN ******S* May 24 10:12:28 202.110.229.97:58086 -> xxx.yyy.241.124:1025 SYN ******S* May 24 10:12:28 202.110.229.97:26149 -> xxx.yyy.241.124:3127 SYN ******S* May 24 10:12:31 202.110.229.97:25515 -> xxx.yyy.163.19:1025 SYN ******S* May 24 10:12:31 202.110.229.97:4221 -> xxx.yyy.163.19:6129 SYN ******S* May 24 10:12:31 202.110.229.97:32623 -> xxx.yyy.163.19:2745 SYN ******S* May 24 10:12:31 202.110.229.97:7275 -> xxx.yyy.163.19:5000 SYN ******S* 20635 May 24 00:00:14 211.167.97.254:30412 -> xxx.yyy.14.46:2745 SYN ******S* May 24 00:00:11 211.167.97.254:47282 -> xxx.yyy.66.152:2745 SYN ******S* May 24 00:00:15 211.167.97.254:48236 -> xxx.yyy.73.179:2745 SYN ******S* May 24 00:00:13 211.167.97.254:47395 -> xxx.yyy.243.211:2745 SYN ******S* May 24 00:00:17 211.167.97.254:39384 -> xxx.yyy.239.220:2745 SYN ******S* May 24 00:00:17 211.167.97.254:21916 -> xxx.yyy.107.248:2745 SYN ******S* May 24 00:00:15 211.167.97.254:47584 -> xxx.yyy.152.150:1025 SYN ******S* May 24 00:00:15 211.167.97.254:38686 -> xxx.yyy.152.150:2745 SYN ******S* [...] May 24 12:43:17 211.167.97.254:21484 -> xxx.yyy.64.5:1025 SYN ******S* May 24 12:43:17 211.167.97.254:19307 -> xxx.yyy.64.5:3127 SYN ******S* May 24 12:43:17 211.167.97.254:21485 -> xxx.yyy.64.5:6129 SYN ******S* May 24 12:43:17 211.167.97.254:17172 -> xxx.yyy.64.5:80 SYN ******S* May 24 12:43:23 211.167.97.254:21483 -> xxx.yyy.64.5:2745 SYN ******S* May 24 12:43:23 211.167.97.254:19307 -> xxx.yyy.64.5:3127 SYN ******S* May 24 12:43:23 211.167.97.254:21484 -> xxx.yyy.64.5:1025 SYN ******S* May 24 12:43:23 211.167.97.254:21485 -> xxx.yyy.64.5:6129 SYN ******S* May 24 12:43:23 211.167.97.254:17172 -> xxx.yyy.64.5:80 SYN ******S* 20448 May 24 01:04:33 210.65.75.66:19814 -> xxx.yyy.70.155:2745 SYN ******S* May 24 01:04:33 210.65.75.66:19817 -> xxx.yyy.70.155:3127 SYN ******S* May 24 01:04:33 210.65.75.66:19818 -> xxx.yyy.70.155:6129 SYN ******S* May 24 01:04:33 210.65.75.66:19816 -> xxx.yyy.70.155:1025 SYN ******S* May 24 01:04:32 210.65.75.66:19459 -> xxx.yyy.251.147:2745 SYN ******S* May 24 01:04:33 210.65.75.66:19967 -> xxx.yyy.240.113:2745 SYN ******S* May 24 01:04:34 210.65.75.66:19995 -> xxx.yyy.184.246:2745 SYN ******S* May 24 01:04:36 210.65.75.66:19967 -> xxx.yyy.240.113:2745 SYN ******S* [...] May 24 04:40:34 210.65.75.66:24864 -> xxx.yyy.197.1:6129 SYN ******S* May 24 04:40:34 210.65.75.66:24863 -> xxx.yyy.197.1:3127 SYN ******S* May 24 04:40:37 210.65.75.66:24862 -> xxx.yyy.197.1:1025 SYN ******S* May 24 04:40:37 210.65.75.66:24864 -> xxx.yyy.197.1:6129 SYN ******S* May 24 04:40:37 210.65.75.66:24860 -> xxx.yyy.197.1:2745 SYN ******S* May 24 04:40:37 210.65.75.66:24863 -> xxx.yyy.197.1:3127 SYN ******S* May 24 04:40:37 210.65.75.66:24727 -> xxx.yyy.211.100:2745 SYN ******S* May 24 04:40:37 210.65.75.66:24729 -> xxx.yyy.211.100:1025 SYN ******S* May 24 04:40:37 210.65.75.66:24730 -> xxx.yyy.211.100:3127 SYN ******S* 16298 May 24 00:00:04 218.94.3.37:46567 -> xxx.yyy.232.16:2745 SYN ******S* May 24 00:00:05 218.94.3.37:46433 -> xxx.yyy.69.38:2745 SYN ******S* May 24 00:00:07 218.94.3.37:46055 -> xxx.yyy.75.235:6129 SYN ******S* May 24 00:00:07 218.94.3.37:46057 -> xxx.yyy.75.235:80 SYN ******S* May 24 00:00:07 218.94.3.37:46054 -> xxx.yyy.75.235:3127 SYN ******S* May 24 00:00:07 218.94.3.37:46056 -> xxx.yyy.75.235:139 SYN ******S* May 24 00:00:07 218.94.3.37:46052 -> xxx.yyy.75.235:1025 SYN ******S* May 24 00:00:07 218.94.3.37:46050 -> xxx.yyy.75.235:2745 SYN ******S* [...] May 24 04:45:39 218.94.3.37:41403 -> xxx.yyy.153.16:2745 SYN ******S* May 24 04:45:36 218.94.3.37:41407 -> xxx.yyy.153.16:1025 SYN ******S* May 24 04:45:39 218.94.3.37:41414 -> xxx.yyy.153.16:6129 SYN ******S* May 24 04:45:39 218.94.3.37:41412 -> xxx.yyy.153.16:3127 SYN ******S* May 24 04:45:39 218.94.3.37:41415 -> xxx.yyy.153.16:139 SYN ******S* May 24 04:45:45 218.94.3.37:41412 -> xxx.yyy.153.16:3127 SYN ******S* May 24 04:45:45 218.94.3.37:41415 -> xxx.yyy.153.16:139 SYN ******S* May 24 04:45:45 218.94.3.37:41407 -> xxx.yyy.153.16:1025 SYN ******S* May 24 04:45:45 218.94.3.37:41403 -> xxx.yyy.153.16:2745 SYN ******S* 15731 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: Ken.Connelly@xxxxxxx phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list Intrusions@xxxxxxxxxxxxxx http://www.dshield.org/mailman/listinfo/intrusions |
|
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| Previous by Date: | Re: LOGS: GIAC GCIA Version 3.5 Practical Detect Coen Bakkers: 00081, James Affeld |
|---|---|
| Next by Date: | [LOGS] Summary of large-scale portscanning detects: 00081, Ken . Connelly |
| Previous by Thread: | Re: LOGS: GIAC GCIA Version 3.4 Practical Detect Alva Lease 'Skip' Duckwall IVi: 00081, Johnny Wong |
| Next by Thread: | [LOGS] Summary of large-scale portscanning detects: 00081, Ken . Connelly |
| Indexes: | [Date] [Thread] [Top] [All Lists] |
| News | FAQ | advertise |