logo       
<prev   next>

[LOGS] Summary of large-scale portscanning detects: msg#00082

security.intrusions

Subject: [LOGS] Summary of large-scale portscanning detects

The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0500.

May 25 18:42:21 196.15.208.130:2665 -> xxx.yyy.1.1:6129 SYN ******S*
May 25 18:42:21 196.15.208.130:2666 -> xxx.yyy.1.2:6129 SYN ******S*
May 25 18:42:22 196.15.208.130:2667 -> xxx.yyy.1.3:6129 SYN ******S*
May 25 18:42:22 196.15.208.130:2668 -> xxx.yyy.1.4:6129 SYN ******S*
May 25 18:42:22 196.15.208.130:2669 -> xxx.yyy.1.5:6129 SYN ******S*
May 25 18:42:22 196.15.208.130:2670 -> xxx.yyy.1.6:6129 SYN ******S*
May 25 18:42:22 196.15.208.130:2671 -> xxx.yyy.1.7:6129 SYN ******S*
May 25 18:42:22 196.15.208.130:2672 -> xxx.yyy.1.8:6129 SYN ******S*
[...]
May 25 18:53:14 196.15.208.130:1635 -> xxx.yyy.255.226:6129 SYN ******S*
May 25 18:53:14 196.15.208.130:1632 -> xxx.yyy.255.223:6129 SYN ******S*
May 25 18:53:14 196.15.208.130:1629 -> xxx.yyy.255.220:6129 SYN ******S*
May 25 18:53:14 196.15.208.130:1636 -> xxx.yyy.255.227:6129 SYN ******S*
May 25 18:53:14 196.15.208.130:1630 -> xxx.yyy.255.221:6129 SYN ******S*
May 25 18:53:14 196.15.208.130:1637 -> xxx.yyy.255.228:6129 SYN ******S*
May 25 18:53:14 196.15.208.130:1634 -> xxx.yyy.255.225:6129 SYN ******S*
May 25 18:53:14 196.15.208.130:1631 -> xxx.yyy.255.222:6129 SYN ******S*
73458

May 25 17:55:04 24.218.69.55:2322 -> xxx.yyy.1.1:4000 SYN ******S*
May 25 17:55:04 24.218.69.55:2324 -> xxx.yyy.1.2:4000 SYN ******S*
May 25 17:55:06 24.218.69.55:2325 -> xxx.yyy.1.3:4000 SYN ******S*
May 25 17:55:06 24.218.69.55:2326 -> xxx.yyy.1.4:4000 SYN ******S*
May 25 17:55:06 24.218.69.55:2327 -> xxx.yyy.1.5:4000 SYN ******S*
May 25 17:55:06 24.218.69.55:2328 -> xxx.yyy.1.6:4000 SYN ******S*
May 25 17:55:06 24.218.69.55:2329 -> xxx.yyy.1.7:4000 SYN ******S*
May 25 17:55:06 24.218.69.55:2330 -> xxx.yyy.1.8:4000 SYN ******S*
[...]
May 25 18:06:02 24.218.69.55:1302 -> xxx.yyy.255.250:4000 SYN ******S*
May 25 18:06:02 24.218.69.55:1296 -> xxx.yyy.255.244:4000 SYN ******S*
May 25 18:06:02 24.218.69.55:1299 -> xxx.yyy.255.247:4000 SYN ******S*
May 25 18:06:02 24.218.69.55:1300 -> xxx.yyy.255.248:4000 SYN ******S*
May 25 18:06:02 24.218.69.55:1303 -> xxx.yyy.255.251:4000 SYN ******S*
May 25 18:06:02 24.218.69.55:1297 -> xxx.yyy.255.245:4000 SYN ******S*
May 25 18:06:02 24.218.69.55:1304 -> xxx.yyy.255.252:4000 SYN ******S*
May 25 18:06:02 24.218.69.55:1306 -> xxx.yyy.255.254:4000 SYN ******S*
72698

May 25 00:12:39 217.82.162.120:1520 -> xxx.yyy.1.1:443 SYN ******S*
May 25 00:12:39 217.82.162.120:1521 -> xxx.yyy.1.2:443 SYN ******S*
May 25 00:12:38 217.82.162.120:1522 -> xxx.yyy.1.3:443 SYN ******S*
May 25 00:12:38 217.82.162.120:1523 -> xxx.yyy.1.4:443 SYN ******S*
May 25 00:12:41 217.82.162.120:1524 -> xxx.yyy.1.5:443 SYN ******S*
May 25 00:12:41 217.82.162.120:1525 -> xxx.yyy.1.6:443 SYN ******S*
May 25 00:12:41 217.82.162.120:1526 -> xxx.yyy.1.7:443 SYN ******S*
May 25 00:12:41 217.82.162.120:1527 -> xxx.yyy.1.8:443 SYN ******S*
[...]
May 25 00:24:20 217.82.162.120:3745 -> xxx.yyy.255.202:443 SYN ******S*
May 25 00:24:20 217.82.162.120:3747 -> xxx.yyy.255.204:443 SYN ******S*
May 25 00:24:21 217.82.162.120:3748 -> xxx.yyy.255.205:443 SYN ******S*
May 25 00:24:21 217.82.162.120:3749 -> xxx.yyy.255.206:443 SYN ******S*
May 25 00:24:21 217.82.162.120:3750 -> xxx.yyy.255.207:443 SYN ******S*
May 25 00:24:21 217.82.162.120:3751 -> xxx.yyy.255.208:443 SYN ******S*
May 25 00:24:21 217.82.162.120:3752 -> xxx.yyy.255.209:443 SYN ******S*
May 25 00:24:21 217.82.162.120:3753 -> xxx.yyy.255.210:443 SYN ******S*
May 25 00:24:21 217.82.162.120:3754 -> xxx.yyy.255.211:443 SYN ******S*
71432

May 25 20:39:33 213.187.222.22:1121 -> xxx.yyy.1.1:4000 SYN ******S*
May 25 20:39:33 213.187.222.22:1122 -> xxx.yyy.1.2:4000 SYN ******S*
May 25 20:39:35 213.187.222.22:1123 -> xxx.yyy.1.3:4000 SYN ******S*
May 25 20:39:32 213.187.222.22:1124 -> xxx.yyy.1.4:4000 SYN ******S*
May 25 20:39:35 213.187.222.22:1125 -> xxx.yyy.1.5:4000 SYN ******S*
May 25 20:39:35 213.187.222.22:1126 -> xxx.yyy.1.6:4000 SYN ******S*
May 25 20:39:35 213.187.222.22:1127 -> xxx.yyy.1.7:4000 SYN ******S*
May 25 20:39:35 213.187.222.22:1128 -> xxx.yyy.1.8:4000 SYN ******S*
[...]
May 25 20:53:13 213.187.222.22:3534 -> xxx.yyy.255.210:4000 SYN ******S*
May 25 20:53:13 213.187.222.22:3540 -> xxx.yyy.255.216:4000 SYN ******S*
May 25 20:53:13 213.187.222.22:3542 -> xxx.yyy.255.218:4000 SYN ******S*
May 25 20:53:13 213.187.222.22:3545 -> xxx.yyy.255.221:4000 SYN ******S*
May 25 20:53:13 213.187.222.22:3546 -> xxx.yyy.255.222:4000 SYN ******S*
May 25 20:53:13 213.187.222.22:3547 -> xxx.yyy.255.223:4000 SYN ******S*
May 25 20:53:13 213.187.222.22:3543 -> xxx.yyy.255.219:4000 SYN ******S*
May 25 20:53:13 213.187.222.22:3544 -> xxx.yyy.255.220:4000 SYN ******S*
71275

May 25 14:19:31 12.7.7.126:1809 -> xxx.yyy.1.1:20168 SYN ******S*
May 25 14:19:31 12.7.7.126:1810 -> xxx.yyy.1.2:20168 SYN ******S*
May 25 14:19:32 12.7.7.126:1811 -> xxx.yyy.1.3:20168 SYN ******S*
May 25 14:19:32 12.7.7.126:1812 -> xxx.yyy.1.4:20168 SYN ******S*
May 25 14:19:32 12.7.7.126:1813 -> xxx.yyy.1.5:20168 SYN ******S*
May 25 14:19:29 12.7.7.126:1814 -> xxx.yyy.1.6:20168 SYN ******S*
May 25 14:19:29 12.7.7.126:1815 -> xxx.yyy.1.7:20168 SYN ******S*
May 25 14:19:32 12.7.7.126:1816 -> xxx.yyy.1.8:20168 SYN ******S*
[...]
May 25 14:31:27 12.7.7.126:4262 -> xxx.yyy.255.247:20168 SYN ******S*
May 25 14:31:27 12.7.7.126:4261 -> xxx.yyy.255.246:20168 SYN ******S*
May 25 14:31:27 12.7.7.126:4260 -> xxx.yyy.255.245:20168 SYN ******S*
May 25 14:31:27 12.7.7.126:4264 -> xxx.yyy.255.249:20168 SYN ******S*
May 25 14:31:27 12.7.7.126:4263 -> xxx.yyy.255.248:20168 SYN ******S*
May 25 14:31:27 12.7.7.126:4266 -> xxx.yyy.255.251:20168 SYN ******S*
May 25 14:31:27 12.7.7.126:4265 -> xxx.yyy.255.250:20168 SYN ******S*
May 25 14:31:27 12.7.7.126:4267 -> xxx.yyy.255.252:20168 SYN ******S*
May 25 14:31:28 12.7.7.126:4269 -> xxx.yyy.255.254:20168 SYN ******S*
70137

May 25 13:08:07 159.87.46.103:3623 -> xxx.yyy.1.1:1257 SYN ******S*
May 25 13:08:07 159.87.46.103:3624 -> xxx.yyy.1.2:1257 SYN ******S*
May 25 13:08:10 159.87.46.103:3626 -> xxx.yyy.1.4:1257 SYN ******S*
May 25 13:08:10 159.87.46.103:3627 -> xxx.yyy.1.5:1257 SYN ******S*
May 25 13:08:10 159.87.46.103:3628 -> xxx.yyy.1.6:1257 SYN ******S*
May 25 13:08:10 159.87.46.103:3629 -> xxx.yyy.1.7:1257 SYN ******S*
May 25 13:08:10 159.87.46.103:3630 -> xxx.yyy.1.8:1257 SYN ******S*
May 25 13:08:07 159.87.46.103:3631 -> xxx.yyy.1.9:1257 SYN ******S*
[...]
May 25 13:19:50 159.87.46.103:1151 -> xxx.yyy.255.243:1257 SYN ******S*
May 25 13:19:50 159.87.46.103:1153 -> xxx.yyy.255.245:1257 SYN ******S*
May 25 13:19:51 159.87.46.103:1162 -> xxx.yyy.255.254:1257 SYN ******S*
May 25 13:19:51 159.87.46.103:1160 -> xxx.yyy.255.252:1257 SYN ******S*
May 25 13:19:51 159.87.46.103:1161 -> xxx.yyy.255.253:1257 SYN ******S*
May 25 13:19:51 159.87.46.103:1156 -> xxx.yyy.255.248:1257 SYN ******S*
May 25 13:19:51 159.87.46.103:1157 -> xxx.yyy.255.249:1257 SYN ******S*
May 25 13:19:51 159.87.46.103:1158 -> xxx.yyy.255.250:1257 SYN ******S*
May 25 13:19:51 159.87.46.103:1159 -> xxx.yyy.255.251:1257 SYN ******S*
64480

May 25 14:13:38 202.163.222.253:36551 -> xxx.yyy.1.0:21 SYN ******S*
May 25 14:13:38 202.163.222.253:36552 -> xxx.yyy.1.1:21 SYN ******S*
May 25 14:13:38 202.163.222.253:36553 -> xxx.yyy.1.2:21 SYN ******S*
May 25 14:13:38 202.163.222.253:36554 -> xxx.yyy.1.3:21 SYN ******S*
May 25 14:13:38 202.163.222.253:36555 -> xxx.yyy.1.4:21 SYN ******S*
May 25 14:13:38 202.163.222.253:36556 -> xxx.yyy.1.5:21 SYN ******S*
May 25 14:13:38 202.163.222.253:36557 -> xxx.yyy.1.6:21 SYN ******S*
May 25 14:13:38 202.163.222.253:36558 -> xxx.yyy.1.7:21 SYN ******S*
[...]
May 25 14:46:53 202.163.222.253:35258 -> xxx.yyy.255.248:21 SYN ******S*
May 25 14:46:53 202.163.222.253:35259 -> xxx.yyy.255.249:21 SYN ******S*
May 25 14:46:53 202.163.222.253:35260 -> xxx.yyy.255.250:21 SYN ******S*
May 25 14:46:53 202.163.222.253:35261 -> xxx.yyy.255.251:21 SYN ******S*
May 25 14:46:53 202.163.222.253:35262 -> xxx.yyy.255.252:21 SYN ******S*
May 25 14:46:53 202.163.222.253:35263 -> xxx.yyy.255.253:21 SYN ******S*
May 25 14:46:53 202.163.222.253:35264 -> xxx.yyy.255.254:21 SYN ******S*
May 25 14:46:53 202.163.222.253:35265 -> xxx.yyy.255.255:21 SYN ******S*
52145

May 25 21:56:16 216.145.244.187:1049 -> xxx.yyy.1.0:445 SYN ******S*
May 25 21:56:13 216.145.244.187:1050 -> xxx.yyy.1.1:445 SYN ******S*
May 25 21:56:16 216.145.244.187:1051 -> xxx.yyy.1.2:445 SYN ******S*
May 25 21:56:13 216.145.244.187:1052 -> xxx.yyy.1.3:445 SYN ******S*
May 25 21:56:13 216.145.244.187:1053 -> xxx.yyy.1.4:445 SYN ******S*
May 25 21:56:16 216.145.244.187:1054 -> xxx.yyy.1.5:445 SYN ******S*
May 25 21:56:16 216.145.244.187:1055 -> xxx.yyy.1.6:445 SYN ******S*
May 25 21:56:13 216.145.244.187:1056 -> xxx.yyy.1.7:445 SYN ******S*
[...]
May 25 21:58:15 216.145.244.187:1232 -> xxx.yyy.255.240:445 SYN ******S*
May 25 21:58:15 216.145.244.187:1229 -> xxx.yyy.255.237:445 SYN ******S*
May 25 21:58:15 216.145.244.187:1245 -> xxx.yyy.255.253:445 SYN ******S*
May 25 21:58:15 216.145.244.187:1242 -> xxx.yyy.255.250:445 SYN ******S*
May 25 21:58:15 216.145.244.187:1226 -> xxx.yyy.255.234:445 SYN ******S*
May 25 21:58:15 216.145.244.187:1239 -> xxx.yyy.255.247:445 SYN ******S*
May 25 21:58:15 216.145.244.187:1233 -> xxx.yyy.255.241:445 SYN ******S*
May 25 21:58:15 216.145.244.187:1246 -> xxx.yyy.255.254:445 SYN ******S*
51726

May 25 22:11:57 218.4.138.212:3099 -> xxx.yyy.1.1:1433 SYN ******S*
May 25 22:11:54 218.4.138.212:3100 -> xxx.yyy.1.2:1433 SYN ******S*
May 25 22:11:54 218.4.138.212:3101 -> xxx.yyy.1.3:1433 SYN ******S*
May 25 22:11:57 218.4.138.212:3102 -> xxx.yyy.1.4:1433 SYN ******S*
May 25 22:11:57 218.4.138.212:3103 -> xxx.yyy.1.5:1433 SYN ******S*
May 25 22:11:57 218.4.138.212:3104 -> xxx.yyy.1.6:1433 SYN ******S*
May 25 22:11:54 218.4.138.212:3106 -> xxx.yyy.1.8:1433 SYN ******S*
May 25 22:11:57 218.4.138.212:3107 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
May 25 22:22:50 218.4.138.212:3695 -> xxx.yyy.255.192:1433 SYN ******S*
May 25 22:22:50 218.4.138.212:3699 -> xxx.yyy.255.196:1433 SYN ******S*
May 25 22:22:51 218.4.138.212:3707 -> xxx.yyy.255.204:1433 SYN ******S*
May 25 22:22:51 218.4.138.212:3706 -> xxx.yyy.255.203:1433 SYN ******S*
May 25 22:22:51 218.4.138.212:3713 -> xxx.yyy.255.210:1433 SYN ******S*
May 25 22:22:51 218.4.138.212:3723 -> xxx.yyy.255.220:1433 SYN ******S*
May 25 22:22:51 218.4.138.212:3740 -> xxx.yyy.255.237:1433 SYN ******S*
May 25 22:22:51 218.4.138.212:3741 -> xxx.yyy.255.238:1433 SYN ******S*
May 25 22:22:51 218.4.138.212:3752 -> xxx.yyy.255.249:1433 SYN ******S*
49354

May 25 19:45:57 24.15.214.195:1574 -> xxx.yyy.1.1:2400 SYN ******S*
May 25 19:45:58 24.15.214.195:1575 -> xxx.yyy.1.2:2400 SYN ******S*
May 25 19:46:00 24.15.214.195:1576 -> xxx.yyy.1.3:2400 SYN ******S*
May 25 19:46:00 24.15.214.195:1577 -> xxx.yyy.1.4:2400 SYN ******S*
May 25 19:46:00 24.15.214.195:1578 -> xxx.yyy.1.5:2400 SYN ******S*
May 25 19:46:00 24.15.214.195:1579 -> xxx.yyy.1.6:2400 SYN ******S*
May 25 19:46:00 24.15.214.195:1580 -> xxx.yyy.1.7:2400 SYN ******S*
May 25 19:45:57 24.15.214.195:1589 -> xxx.yyy.1.16:2400 SYN ******S*
[...]
May 25 19:57:01 24.15.214.195:4129 -> xxx.yyy.255.205:2400 SYN ******S*
May 25 19:57:01 24.15.214.195:4126 -> xxx.yyy.255.202:2400 SYN ******S*
May 25 19:57:01 24.15.214.195:4140 -> xxx.yyy.255.216:2400 SYN ******S*
May 25 19:57:01 24.15.214.195:4137 -> xxx.yyy.255.213:2400 SYN ******S*
May 25 19:57:02 24.15.214.195:4134 -> xxx.yyy.255.210:2400 SYN ******S*
May 25 19:57:02 24.15.214.195:4138 -> xxx.yyy.255.214:2400 SYN ******S*
May 25 19:57:02 24.15.214.195:4153 -> xxx.yyy.255.229:2400 SYN ******S*
May 25 19:57:02 24.15.214.195:4161 -> xxx.yyy.255.237:2400 SYN ******S*
May 25 19:57:02 24.15.214.195:4173 -> xxx.yyy.255.249:2400 SYN ******S*
47607

May 25 10:28:57 82.254.54.154:3147 -> xxx.yyy.155.96:1433 SYN ******S*
May 25 10:28:57 82.254.54.154:3150 -> xxx.yyy.155.97:1433 SYN ******S*
May 25 10:28:54 82.254.54.154:3165 -> xxx.yyy.155.98:1433 SYN ******S*
May 25 10:28:57 82.254.54.154:3184 -> xxx.yyy.155.99:1433 SYN ******S*
May 25 10:28:54 82.254.54.154:3201 -> xxx.yyy.155.100:1433 SYN ******S*
May 25 10:28:57 82.254.54.154:3214 -> xxx.yyy.155.101:1433 SYN ******S*
May 25 10:28:55 82.254.54.154:3230 -> xxx.yyy.155.102:1433 SYN ******S*
May 25 10:28:55 82.254.54.154:3254 -> xxx.yyy.155.103:1433 SYN ******S*
[...]
May 25 14:15:14 82.254.54.154:3924 -> xxx.yyy.255.250:1433 SYN ******S*
May 25 14:15:15 82.254.54.154:3361 -> xxx.yyy.255.240:1433 SYN ******S*
May 25 14:15:15 82.254.54.154:4427 -> xxx.yyy.255.254:1433 SYN ******S*
May 25 14:15:17 82.254.54.154:3560 -> xxx.yyy.255.245:1433 SYN ******S*
May 25 14:15:17 82.254.54.154:4269 -> xxx.yyy.255.253:1433 SYN ******S*
May 25 14:15:20 82.254.54.154:3924 -> xxx.yyy.255.250:1433 SYN ******S*
May 25 14:15:21 82.254.54.154:4057 -> xxx.yyy.255.251:1433 SYN ******S*
May 25 14:15:23 82.254.54.154:4269 -> xxx.yyy.255.253:1433 SYN ******S*
May 25 14:15:24 82.254.54.154:4427 -> xxx.yyy.255.254:1433 SYN ******S*
47201

May 25 07:58:25 195.199.37.221:3166 -> xxx.yyy.1.1:1433 SYN ******S*
May 25 07:58:25 195.199.37.221:3167 -> xxx.yyy.1.2:1433 SYN ******S*
May 25 07:58:25 195.199.37.221:3169 -> xxx.yyy.1.4:1433 SYN ******S*
May 25 07:58:25 195.199.37.221:3170 -> xxx.yyy.1.5:1433 SYN ******S*
May 25 07:58:25 195.199.37.221:3172 -> xxx.yyy.1.7:1433 SYN ******S*
May 25 07:58:25 195.199.37.221:3173 -> xxx.yyy.1.8:1433 SYN ******S*
May 25 07:58:25 195.199.37.221:3174 -> xxx.yyy.1.9:1433 SYN ******S*
May 25 07:58:25 195.199.37.221:3175 -> xxx.yyy.1.10:1433 SYN ******S*
[...]
May 25 08:52:55 195.199.37.221:1220 -> xxx.yyy.255.247:1433 SYN ******S*
May 25 08:52:55 195.199.37.221:1221 -> xxx.yyy.255.248:1433 SYN ******S*
May 25 08:52:55 195.199.37.221:1223 -> xxx.yyy.255.250:1433 SYN ******S*
May 25 08:52:55 195.199.37.221:1224 -> xxx.yyy.255.251:1433 SYN ******S*
May 25 08:52:55 195.199.37.221:1225 -> xxx.yyy.255.252:1433 SYN ******S*
May 25 08:52:55 195.199.37.221:1226 -> xxx.yyy.255.253:1433 SYN ******S*
May 25 08:52:55 195.199.37.221:1227 -> xxx.yyy.255.254:1433 SYN ******S*
May 25 08:52:55 195.199.37.221:1213 -> xxx.yyy.255.240:1433 SYN ******S*
43943

May 25 02:32:43 67.164.22.248:3419 -> xxx.yyy.1.1:1433 SYN ******S*
May 25 02:32:43 67.164.22.248:3420 -> xxx.yyy.1.2:1433 SYN ******S*
May 25 02:32:43 67.164.22.248:3421 -> xxx.yyy.1.3:1433 SYN ******S*
May 25 02:32:43 67.164.22.248:3422 -> xxx.yyy.1.4:1433 SYN ******S*
May 25 02:32:43 67.164.22.248:3423 -> xxx.yyy.1.6:1433 SYN ******S*
May 25 02:32:43 67.164.22.248:3424 -> xxx.yyy.1.5:1433 SYN ******S*
May 25 02:32:43 67.164.22.248:3425 -> xxx.yyy.1.7:1433 SYN ******S*
May 25 02:32:43 67.164.22.248:3426 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
May 25 02:38:10 67.164.22.248:4506 -> xxx.yyy.255.245:1433 SYN ******S*
May 25 02:38:10 67.164.22.248:4508 -> xxx.yyy.255.247:1433 SYN ******S*
May 25 02:38:10 67.164.22.248:4509 -> xxx.yyy.255.248:1433 SYN ******S*
May 25 02:38:10 67.164.22.248:4513 -> xxx.yyy.255.252:1433 SYN ******S*
May 25 02:38:10 67.164.22.248:4510 -> xxx.yyy.255.249:1433 SYN ******S*
May 25 02:38:10 67.164.22.248:4511 -> xxx.yyy.255.250:1433 SYN ******S*
May 25 02:38:10 67.164.22.248:4514 -> xxx.yyy.255.253:1433 SYN ******S*
May 25 02:38:10 67.164.22.248:4512 -> xxx.yyy.255.251:1433 SYN ******S*
May 25 02:38:10 67.164.22.248:4515 -> xxx.yyy.255.254:1433 SYN ******S*
43816

May 25 08:11:40 24.57.36.8:2243 -> xxx.yyy.1.1:65506 SYN ******S*
May 25 08:11:39 24.57.36.8:2242 -> xxx.yyy.1.0:65506 SYN ******S*
May 25 08:11:39 24.57.36.8:2412 -> xxx.yyy.1.5:65506 SYN ******S*
May 25 08:11:40 24.57.36.8:2244 -> xxx.yyy.1.2:65506 SYN ******S*
May 25 08:11:39 24.57.36.8:2248 -> xxx.yyy.1.3:65506 SYN ******S*
May 25 08:11:39 24.57.36.8:2352 -> xxx.yyy.1.4:65506 SYN ******S*
May 25 08:11:39 24.57.36.8:2413 -> xxx.yyy.1.6:65506 SYN ******S*
May 25 08:11:39 24.57.36.8:2416 -> xxx.yyy.1.9:65506 SYN ******S*
[...]
May 25 08:53:50 24.57.36.8:1226 -> xxx.yyy.254.248:65506 SYN ******S*
May 25 08:53:50 24.57.36.8:1228 -> xxx.yyy.254.250:65506 SYN ******S*
May 25 08:53:50 24.57.36.8:1227 -> xxx.yyy.254.249:65506 SYN ******S*
May 25 08:53:50 24.57.36.8:1229 -> xxx.yyy.254.251:65506 SYN ******S*
May 25 08:53:50 24.57.36.8:1225 -> xxx.yyy.254.247:65506 SYN ******S*
May 25 08:53:50 24.57.36.8:1230 -> xxx.yyy.254.252:65506 SYN ******S*
May 25 08:53:50 24.57.36.8:1231 -> xxx.yyy.254.253:65506 SYN ******S*
May 25 08:53:50 24.57.36.8:1232 -> xxx.yyy.254.254:65506 SYN ******S*
May 25 08:53:50 24.57.36.8:1233 -> xxx.yyy.254.255:65506 SYN ******S*
43096

May 25 16:36:58 203.75.170.220:2277 -> xxx.yyy.1.1:4899 SYN ******S*
May 25 16:36:56 203.75.170.220:2279 -> xxx.yyy.1.3:4899 SYN ******S*
May 25 16:36:58 203.75.170.220:2278 -> xxx.yyy.1.2:4899 SYN ******S*
May 25 16:36:56 203.75.170.220:2281 -> xxx.yyy.1.5:4899 SYN ******S*
May 25 16:36:56 203.75.170.220:2280 -> xxx.yyy.1.4:4899 SYN ******S*
May 25 16:36:56 203.75.170.220:2282 -> xxx.yyy.1.6:4899 SYN ******S*
May 25 16:36:56 203.75.170.220:2283 -> xxx.yyy.1.7:4899 SYN ******S*
May 25 16:36:56 203.75.170.220:2286 -> xxx.yyy.1.10:4899 SYN ******S*
[...]
May 25 16:40:58 203.75.170.220:1697 -> xxx.yyy.255.247:4899 SYN ******S*
May 25 16:40:58 203.75.170.220:1699 -> xxx.yyy.255.249:4899 SYN ******S*
May 25 16:40:58 203.75.170.220:1698 -> xxx.yyy.255.248:4899 SYN ******S*
May 25 16:40:58 203.75.170.220:1700 -> xxx.yyy.255.250:4899 SYN ******S*
May 25 16:40:58 203.75.170.220:1701 -> xxx.yyy.255.251:4899 SYN ******S*
May 25 16:40:58 203.75.170.220:1702 -> xxx.yyy.255.252:4899 SYN ******S*
May 25 16:40:58 203.75.170.220:1704 -> xxx.yyy.255.254:4899 SYN ******S*
May 25 16:40:58 203.75.170.220:1703 -> xxx.yyy.255.253:4899 SYN ******S*
42500

May 25 11:12:17 213.37.211.13:2172 -> xxx.yyy.1.20:901 SYN ******S*
May 25 11:12:16 213.37.211.13:2173 -> xxx.yyy.1.21:901 SYN ******S*
May 25 11:12:15 213.37.211.13:2186 -> xxx.yyy.1.23:901 SYN ******S*
May 25 11:12:16 213.37.211.13:2174 -> xxx.yyy.1.22:901 SYN ******S*
May 25 11:12:18 213.37.211.13:2187 -> xxx.yyy.1.24:901 SYN ******S*
May 25 11:12:18 213.37.211.13:2156 -> xxx.yyy.1.11:901 SYN ******S*
May 25 11:12:21 213.37.211.13:2728 -> xxx.yyy.1.48:901 SYN ******S*
May 25 11:12:21 213.37.211.13:2736 -> xxx.yyy.1.54:901 SYN ******S*
[...]
May 25 13:21:56 213.37.211.13:2039 -> xxx.yyy.254.246:901 SYN ******S*
May 25 13:21:56 213.37.211.13:2038 -> xxx.yyy.254.245:901 SYN ******S*
May 25 13:21:56 213.37.211.13:2037 -> xxx.yyy.254.244:901 SYN ******S*
May 25 13:21:56 213.37.211.13:2022 -> xxx.yyy.254.243:901 SYN ******S*
May 25 13:21:56 213.37.211.13:2041 -> xxx.yyy.254.247:901 SYN ******S*
May 25 13:21:56 213.37.211.13:2057 -> xxx.yyy.254.252:901 SYN ******S*
May 25 13:21:56 213.37.211.13:2053 -> xxx.yyy.254.249:901 SYN ******S*
May 25 13:21:56 213.37.211.13:2044 -> xxx.yyy.254.248:901 SYN ******S*
37592

May 25 00:00:22 203.177.35.186:1811 -> xxx.yyy.247.155:2745 SYN ******S*
May 25 00:00:24 203.177.35.186:2058 -> xxx.yyy.215.22:2745 SYN ******S*
May 25 00:00:24 203.177.35.186:2062 -> xxx.yyy.215.22:445 SYN ******S*
May 25 00:00:24 203.177.35.186:2061 -> xxx.yyy.215.22:1025 SYN ******S*
May 25 00:00:25 203.177.35.186:1476 -> xxx.yyy.77.228:2745 SYN ******S*
May 25 00:00:29 203.177.35.186:2746 -> xxx.yyy.93.180:2745 SYN ******S*
May 25 00:00:32 203.177.35.186:3215 -> xxx.yyy.66.65:2745 SYN ******S*
May 25 00:00:41 203.177.35.186:4665 -> xxx.yyy.211.189:2745 SYN ******S*
[...]
May 25 05:23:46 203.177.35.186:2135 -> xxx.yyy.94.57:2745 SYN ******S*
May 25 05:23:47 203.177.35.186:2291 -> xxx.yyy.78.189:2745 SYN ******S*
May 25 05:23:48 203.177.35.186:1989 -> xxx.yyy.219.218:2745 SYN ******S*
May 25 05:23:49 203.177.35.186:2347 -> xxx.yyy.233.101:2745 SYN ******S*
May 25 05:23:49 203.177.35.186:2350 -> xxx.yyy.233.101:1025 SYN ******S*
May 25 05:23:50 203.177.35.186:2291 -> xxx.yyy.78.189:2745 SYN ******S*
May 25 05:23:51 203.177.35.186:2042 -> xxx.yyy.16.93:2745 SYN ******S*
May 25 05:23:52 203.177.35.186:2347 -> xxx.yyy.233.101:2745 SYN ******S*
31930

May 25 00:00:09 61.133.63.113:43138 -> xxx.yyy.177.134:2745 SYN ******S*
May 25 00:00:09 61.133.63.113:22978 -> xxx.yyy.177.134:1025 SYN ******S*
May 25 00:00:09 61.133.63.113:4230 -> xxx.yyy.208.199:2745 SYN ******S*
May 25 00:00:09 61.133.63.113:12018 -> xxx.yyy.208.199:1025 SYN ******S*
May 25 00:00:09 61.133.63.113:40837 -> xxx.yyy.208.199:3127 SYN ******S*
May 25 00:00:09 61.133.63.113:49716 -> xxx.yyy.208.199:6129 SYN ******S*
May 25 00:00:07 61.133.63.113:52716 -> xxx.yyy.212.29:3127 SYN ******S*
May 25 00:00:07 61.133.63.113:45384 -> xxx.yyy.212.29:1025 SYN ******S*
[...]
May 25 04:34:19 61.133.63.113:57923 -> xxx.yyy.216.212:2745 SYN ******S*
May 25 04:34:19 61.133.63.113:58323 -> xxx.yyy.216.212:3127 SYN ******S*
May 25 04:34:19 61.133.63.113:58250 -> xxx.yyy.216.212:1025 SYN ******S*
May 25 04:34:20 61.133.63.113:48060 -> xxx.yyy.150.208:80 SYN ******S*
May 25 04:34:20 61.133.63.113:50417 -> xxx.yyy.150.208:6129 SYN ******S*
May 25 04:34:20 61.133.63.113:38301 -> xxx.yyy.150.208:3127 SYN ******S*
May 25 04:34:20 61.133.63.113:47469 -> xxx.yyy.150.208:1025 SYN ******S*
May 25 04:34:20 61.133.63.113:59183 -> xxx.yyy.150.208:2745 SYN ******S*
31210

May 25 00:00:14 218.31.103.99:28669 -> xxx.yyy.228.219:1025 SYN ******S*
May 25 00:00:14 218.31.103.99:28667 -> xxx.yyy.228.219:2745 SYN ******S*
May 25 00:00:15 218.31.103.99:61011 -> xxx.yyy.105.51:2745 SYN ******S*
May 25 00:00:20 218.31.103.99:62766 -> xxx.yyy.104.214:2745 SYN ******S*
May 25 00:00:20 218.31.103.99:62768 -> xxx.yyy.104.214:1025 SYN ******S*
May 25 00:00:20 218.31.103.99:62770 -> xxx.yyy.104.214:3127 SYN ******S*
May 25 00:00:24 218.31.103.99:23520 -> xxx.yyy.12.104:2745 SYN ******S*
May 25 00:00:38 218.31.103.99:49864 -> xxx.yyy.130.215:2745 SYN ******S*
[...]
May 25 21:16:49 218.31.103.99:44394 -> xxx.yyy.239.246:2745 SYN ******S*
May 25 21:16:49 218.31.103.99:15430 -> xxx.yyy.239.246:6129 SYN ******S*
May 25 21:16:49 218.31.103.99:23092 -> xxx.yyy.239.246:80 SYN ******S*
May 25 21:16:49 218.31.103.99:58353 -> xxx.yyy.239.246:3127 SYN ******S*
May 25 21:16:56 218.31.103.99:44394 -> xxx.yyy.239.246:2745 SYN ******S*
May 25 21:16:56 218.31.103.99:41500 -> xxx.yyy.239.246:1025 SYN ******S*
May 25 21:16:56 218.31.103.99:23092 -> xxx.yyy.239.246:80 SYN ******S*
May 25 21:16:56 218.31.103.99:15430 -> xxx.yyy.239.246:6129 SYN ******S*
25098

[...]
24215

May 25 00:00:04 61.247.240.116:4643 -> xxx.yyy.145.6:1025 SYN ******S*
May 25 00:00:04 61.247.240.116:4647 -> xxx.yyy.145.6:445 SYN ******S*
May 25 00:00:04 61.247.240.116:4641 -> xxx.yyy.145.6:2745 SYN ******S*
May 25 00:00:04 61.247.240.116:4649 -> xxx.yyy.145.6:3127 SYN ******S*
May 25 00:00:10 61.247.240.116:3205 -> xxx.yyy.139.92:2745 SYN ******S*
May 25 00:00:10 61.247.240.116:3207 -> xxx.yyy.139.92:1025 SYN ******S*
May 25 00:00:10 61.247.240.116:3208 -> xxx.yyy.139.92:445 SYN ******S*
May 25 00:00:10 61.247.240.116:3209 -> xxx.yyy.139.92:3127 SYN ******S*
[...]
May 25 10:27:00 61.247.240.116:3144 -> xxx.yyy.224.142:80 SYN ******S*
May 25 10:27:04 61.247.240.116:3082 -> xxx.yyy.154.212:2745 SYN ******S*
May 25 10:27:06 61.247.240.116:3139 -> xxx.yyy.224.142:1025 SYN ******S*
May 25 10:27:06 61.247.240.116:3142 -> xxx.yyy.224.142:6129 SYN ******S*
May 25 10:27:06 61.247.240.116:3144 -> xxx.yyy.224.142:80 SYN ******S*
May 25 10:27:06 61.247.240.116:3137 -> xxx.yyy.224.142:2745 SYN ******S*
May 25 10:27:06 61.247.240.116:3141 -> xxx.yyy.224.142:3127 SYN ******S*
May 25 10:27:06 61.247.240.116:3140 -> xxx.yyy.224.142:445 SYN ******S*
24118

May 25 07:18:39 82.255.52.39:3529 -> xxx.yyy.70.133:1433 SYN ******S*
May 25 07:18:42 82.255.52.39:3548 -> xxx.yyy.70.134:1433 SYN ******S*
May 25 07:18:39 82.255.52.39:3562 -> xxx.yyy.70.135:1433 SYN ******S*
May 25 07:18:43 82.255.52.39:3579 -> xxx.yyy.70.136:1433 SYN ******S*
May 25 07:18:40 82.255.52.39:3598 -> xxx.yyy.70.137:1433 SYN ******S*
May 25 07:18:40 82.255.52.39:3635 -> xxx.yyy.70.139:1433 SYN ******S*
May 25 07:18:43 82.255.52.39:3652 -> xxx.yyy.70.140:1433 SYN ******S*
May 25 07:18:40 82.255.52.39:3669 -> xxx.yyy.70.141:1433 SYN ******S*
[...]
May 25 09:54:01 82.255.52.39:4106 -> xxx.yyy.139.168:1433 SYN ******S*
May 25 09:54:01 82.255.52.39:3926 -> xxx.yyy.139.162:1433 SYN ******S*
May 25 09:54:01 82.255.52.39:3948 -> xxx.yyy.139.163:1433 SYN ******S*
May 25 09:54:02 82.255.52.39:3978 -> xxx.yyy.139.164:1433 SYN ******S*
May 25 09:54:02 82.255.52.39:3989 -> xxx.yyy.139.165:1433 SYN ******S*
May 25 09:54:02 82.255.52.39:4170 -> xxx.yyy.139.170:1433 SYN ******S*
May 25 09:54:02 82.255.52.39:4180 -> xxx.yyy.139.171:1433 SYN ******S*
May 25 09:54:02 82.255.52.39:3524 -> xxx.yyy.139.154:1433 SYN ******S*
18230

May 25 23:33:49 202.160.15.194:3252 -> xxx.yyy.1.23:6112 SYN ******S*
May 25 23:33:49 202.160.15.194:3276 -> xxx.yyy.1.47:6112 SYN ******S*
May 25 23:33:49 202.160.15.194:3308 -> xxx.yyy.1.79:6112 SYN ******S*
May 25 23:33:49 202.160.15.194:3330 -> xxx.yyy.1.101:6112 SYN ******S*
May 25 23:33:49 202.160.15.194:3332 -> xxx.yyy.1.103:6112 SYN ******S*
May 25 23:33:49 202.160.15.194:3331 -> xxx.yyy.1.102:6112 SYN ******S*
May 25 23:33:49 202.160.15.194:3334 -> xxx.yyy.1.105:6112 SYN ******S*
May 25 23:33:49 202.160.15.194:3333 -> xxx.yyy.1.104:6112 SYN ******S*
[...]
May 25 23:37:25 202.160.15.194:3945 -> xxx.yyy.255.74:6112 SYN ******S*
May 25 23:37:25 202.160.15.194:3942 -> xxx.yyy.255.71:6112 SYN ******S*
May 25 23:37:25 202.160.15.194:3953 -> xxx.yyy.255.82:6112 SYN ******S*
May 25 23:37:25 202.160.15.194:3947 -> xxx.yyy.255.76:6112 SYN ******S*
May 25 23:37:25 202.160.15.194:3963 -> xxx.yyy.255.92:6112 SYN ******S*
May 25 23:37:25 202.160.15.194:3951 -> xxx.yyy.255.80:6112 SYN ******S*
May 25 23:37:25 202.160.15.194:3952 -> xxx.yyy.255.81:6112 SYN ******S*
May 25 23:37:25 202.160.15.194:3955 -> xxx.yyy.255.84:6112 SYN ******S*
May 25 23:37:25 202.160.15.194:3970 -> xxx.yyy.255.99:6112 SYN ******S*
16865

May 25 11:36:46 82.64.118.128:1426 -> xxx.yyy.132.136:1433 SYN ******S*
May 25 11:36:46 82.64.118.128:1439 -> xxx.yyy.132.137:1433 SYN ******S*
May 25 11:36:46 82.64.118.128:1451 -> xxx.yyy.132.138:1433 SYN ******S*
May 25 11:36:46 82.64.118.128:1463 -> xxx.yyy.132.139:1433 SYN ******S*
May 25 11:36:46 82.64.118.128:1475 -> xxx.yyy.132.140:1433 SYN ******S*
May 25 11:36:46 82.64.118.128:1487 -> xxx.yyy.132.141:1433 SYN ******S*
May 25 11:36:46 82.64.118.128:1499 -> xxx.yyy.132.142:1433 SYN ******S*
May 25 11:36:46 82.64.118.128:1511 -> xxx.yyy.132.143:1433 SYN ******S*
[...]
May 25 12:56:45 82.64.118.128:2995 -> xxx.yyy.156.151:1433 SYN ******S*
May 25 12:56:45 82.64.118.128:3009 -> xxx.yyy.156.152:1433 SYN ******S*
May 25 12:56:45 82.64.118.128:3054 -> xxx.yyy.156.153:1433 SYN ******S*
May 25 12:56:45 82.64.118.128:3066 -> xxx.yyy.156.154:1433 SYN ******S*
May 25 12:56:45 82.64.118.128:3077 -> xxx.yyy.156.155:1433 SYN ******S*
May 25 12:56:45 82.64.118.128:3088 -> xxx.yyy.156.156:1433 SYN ******S*
May 25 12:56:46 82.64.118.128:3099 -> xxx.yyy.156.157:1433 SYN ******S*
May 25 12:56:46 82.64.118.128:3115 -> xxx.yyy.156.158:1433 SYN ******S*
May 25 12:56:46 82.64.118.128:3126 -> xxx.yyy.156.159:1433 SYN ******S*
16724

May 25 00:00:03 218.9.123.58:4493 -> xxx.yyy.77.93:2745 SYN ******S*
May 25 00:00:03 218.9.123.58:4496 -> xxx.yyy.77.93:1025 SYN ******S*
May 25 00:00:04 218.9.123.58:4500 -> xxx.yyy.77.93:3127 SYN ******S*
May 25 00:00:04 218.9.123.58:4501 -> xxx.yyy.77.93:6129 SYN ******S*
May 25 00:00:04 218.9.123.58:4513 -> xxx.yyy.77.93:80 SYN ******S*
May 25 00:00:03 218.9.123.58:4656 -> xxx.yyy.152.101:2745 SYN ******S*
May 25 00:00:04 218.9.123.58:4075 -> xxx.yyy.213.233:2745 SYN ******S*
May 25 00:00:05 218.9.123.58:4634 -> xxx.yyy.212.197:2745 SYN ******S*
[...]
May 25 01:57:40 218.9.123.58:4460 -> xxx.yyy.29.190:1025 SYN ******S*
May 25 01:57:40 218.9.123.58:4468 -> xxx.yyy.29.190:3127 SYN ******S*
May 25 01:57:40 218.9.123.58:4471 -> xxx.yyy.29.190:6129 SYN ******S*
May 25 01:57:40 218.9.123.58:4474 -> xxx.yyy.29.190:80 SYN ******S*
May 25 01:57:40 218.9.123.58:4783 -> xxx.yyy.1.235:2745 SYN ******S*
May 25 01:57:40 218.9.123.58:4785 -> xxx.yyy.1.235:1025 SYN ******S*
May 25 01:57:42 218.9.123.58:4056 -> xxx.yyy.180.31:3127 SYN ******S*
May 25 01:57:42 218.9.123.58:4052 -> xxx.yyy.180.31:1025 SYN ******S*
May 25 01:57:42 218.9.123.58:4048 -> xxx.yyy.180.31:2745 SYN ******S*
14348

May 25 00:00:10 219.146.181.243:48227 -> xxx.yyy.250.119:2745 SYN ******S*
May 25 00:00:10 219.146.181.243:47217 -> xxx.yyy.196.228:80 SYN ******S*
May 25 00:00:05 219.146.181.243:20040 -> xxx.yyy.196.228:3127 SYN ******S*
May 25 00:00:10 219.146.181.243:25943 -> xxx.yyy.196.228:139 SYN ******S*
May 25 00:00:05 219.146.181.243:28302 -> xxx.yyy.220.189:2745 SYN ******S*
May 25 00:00:10 219.146.181.243:46167 -> xxx.yyy.32.69:6129 SYN ******S*
May 25 00:00:07 219.146.181.243:18739 -> xxx.yyy.32.69:139 SYN ******S*
May 25 00:00:10 219.146.181.243:48729 -> xxx.yyy.32.69:2745 SYN ******S*
[...]
May 25 04:08:55 219.146.181.243:39761 -> xxx.yyy.249.11:3127 SYN ******S*
May 25 04:08:59 219.146.181.243:48799 -> xxx.yyy.106.132:2745 SYN ******S*
May 25 04:08:59 219.146.181.243:22207 -> xxx.yyy.106.132:6129 SYN ******S*
May 25 04:08:59 219.146.181.243:38450 -> xxx.yyy.106.132:80 SYN ******S*
May 25 04:09:01 219.146.181.243:33251 -> xxx.yyy.106.132:139 SYN ******S*
May 25 04:09:01 219.146.181.243:39761 -> xxx.yyy.249.11:3127 SYN ******S*
May 25 04:09:01 219.146.181.243:41695 -> xxx.yyy.249.11:1025 SYN ******S*
May 25 04:09:01 219.146.181.243:45312 -> xxx.yyy.249.11:2745 SYN ******S*
14333

--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly@xxxxxxx phone: (319) 273-5850 fax: (319) 273-7373
_______________________________________________
Intrusions mailing list
Intrusions@xxxxxxxxxxxxxx
http://www.dshield.org/mailman/listinfo/intrusions
<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  [LOGS] Summary of large-scale portscanning detects: 00082, Ken . Connelly
Next by Date:  RE: LOGS: GIAC GCIA Version 3.5 Practical Detect CoenBakkers: 00082, Scott Renna
Previous by Thread:  [LOGS] Summary of large-scale portscanning detectsi: 00082, Ken . Connelly
Next by Thread:  [LOGS] Summary of large-scale portscanning detects: 00082, Ken . Connelly
Indexes:  [Date] [Thread] [Top] [All Lists]

Google Custom Search
News | FAQ | advertise