logo       
<prev   next>

[LOGS] Summary of large-scale portscanning detects: msg#00091

security.intrusions

Subject: [LOGS] Summary of large-scale portscanning detects

The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0500.

May 27 01:00:02 24.79.178.189:3278 -> xxx.yyy.175.1:21 SYN ******S*
May 27 01:00:02 24.79.178.189:3280 -> xxx.yyy.175.1:445 SYN ******S*
May 27 01:00:02 24.79.178.189:3282 -> xxx.yyy.175.2:21 SYN ******S*
May 27 01:00:02 24.79.178.189:3283 -> xxx.yyy.175.2:445 SYN ******S*
May 27 01:00:03 24.79.178.189:3286 -> xxx.yyy.175.3:21 SYN ******S*
May 27 01:00:03 24.79.178.189:3287 -> xxx.yyy.175.3:445 SYN ******S*
May 27 01:00:03 24.79.178.189:3290 -> xxx.yyy.175.4:21 SYN ******S*
May 27 01:00:03 24.79.178.189:3291 -> xxx.yyy.175.4:445 SYN ******S*
[...]
May 27 11:55:53 24.79.178.189:4373 -> xxx.yyy.255.252:21 SYN ******S*
May 27 11:55:53 24.79.178.189:4353 -> xxx.yyy.255.247:21 SYN ******S*
May 27 11:55:54 24.79.178.189:4357 -> xxx.yyy.255.248:21 SYN ******S*
May 27 11:55:57 24.79.178.189:4377 -> xxx.yyy.255.253:21 SYN ******S*
May 27 11:55:54 24.79.178.189:4361 -> xxx.yyy.255.249:21 SYN ******S*
May 27 11:55:57 24.79.178.189:4381 -> xxx.yyy.255.254:21 SYN ******S*
May 27 11:55:55 24.79.178.189:4365 -> xxx.yyy.255.250:21 SYN ******S*
May 27 11:55:56 24.79.178.189:4369 -> xxx.yyy.255.251:21 SYN ******S*
May 27 11:55:56 24.79.178.189:4373 -> xxx.yyy.255.252:21 SYN ******S*
296013

May 27 00:54:41 218.11.168.215:53993 -> xxx.yyy.1.0:2277 SYN ******S*
May 27 00:54:41 218.11.168.215:53994 -> xxx.yyy.1.1:2277 SYN ******S*
May 27 00:54:41 218.11.168.215:53995 -> xxx.yyy.1.2:2277 SYN ******S*
May 27 00:54:45 218.11.168.215:53996 -> xxx.yyy.1.3:2277 SYN ******S*
May 27 00:54:45 218.11.168.215:53997 -> xxx.yyy.1.4:2277 SYN ******S*
May 27 00:54:45 218.11.168.215:53998 -> xxx.yyy.1.5:2277 SYN ******S*
May 27 00:54:45 218.11.168.215:53999 -> xxx.yyy.1.6:2277 SYN ******S*
May 27 00:54:45 218.11.168.215:54000 -> xxx.yyy.1.7:2277 SYN ******S*
[...]
May 27 02:04:06 218.11.168.215:4929 -> xxx.yyy.255.244:2277 SYN ******S*
May 27 02:04:06 218.11.168.215:4928 -> xxx.yyy.255.243:2277 SYN ******S*
May 27 02:04:06 218.11.168.215:4930 -> xxx.yyy.255.245:2277 SYN ******S*
May 27 02:04:06 218.11.168.215:4931 -> xxx.yyy.255.246:2277 SYN ******S*
May 27 02:04:06 218.11.168.215:4932 -> xxx.yyy.255.247:2277 SYN ******S*
May 27 02:04:06 218.11.168.215:4936 -> xxx.yyy.255.250:2277 SYN ******S*
May 27 02:04:07 218.11.168.215:4937 -> xxx.yyy.255.251:2277 SYN ******S*
May 27 02:04:07 218.11.168.215:4941 -> xxx.yyy.255.252:2277 SYN ******S*
May 27 02:04:07 218.11.168.215:4942 -> xxx.yyy.255.253:2277 SYN ******S*
104653

May 27 18:31:28 68.78.105.171:22002 -> xxx.yyy.1.0:3127 SYN ******S*
May 27 18:31:28 68.78.105.171:22002 -> xxx.yyy.1.0:1080 SYN ******S*
May 27 18:31:28 68.78.105.171:22002 -> xxx.yyy.1.0:10080 SYN ******S*
May 27 18:31:28 68.78.105.171:22002 -> xxx.yyy.1.0:3128 SYN ******S*
May 27 18:31:28 68.78.105.171:22002 -> xxx.yyy.1.1:3127 SYN ******S*
May 27 18:31:28 68.78.105.171:22002 -> xxx.yyy.1.1:1080 SYN ******S*
May 27 18:31:28 68.78.105.171:22002 -> xxx.yyy.1.1:10080 SYN ******S*
May 27 18:31:28 68.78.105.171:22002 -> xxx.yyy.1.1:3128 SYN ******S*
[...]
May 27 23:59:57 68.78.105.171:22002 -> xxx.yyy.175.144:3127 SYN ******S*
May 27 23:59:57 68.78.105.171:22002 -> xxx.yyy.175.144:1080 SYN ******S*
May 27 23:59:57 68.78.105.171:22002 -> xxx.yyy.175.144:10080 SYN ******S*
May 27 23:59:57 68.78.105.171:22002 -> xxx.yyy.175.144:3128 SYN ******S*
May 27 23:59:57 68.78.105.171:22002 -> xxx.yyy.175.145:3127 SYN ******S*
May 27 23:59:57 68.78.105.171:22002 -> xxx.yyy.175.145:1080 SYN ******S*
May 27 23:59:57 68.78.105.171:22002 -> xxx.yyy.175.145:10080 SYN ******S*
May 27 23:59:57 68.78.105.171:22002 -> xxx.yyy.175.145:3128 SYN ******S*
May 27 23:59:57 68.78.105.171:22002 -> xxx.yyy.175.146:3127 SYN ******S*
97846

May 27 02:14:42 207.241.152.39:46102 -> xxx.yyy.1.0:80 SYN ******S*
May 27 02:14:42 207.241.152.39:46103 -> xxx.yyy.1.1:80 SYN ******S*
May 27 02:14:42 207.241.152.39:46104 -> xxx.yyy.1.2:80 SYN ******S*
May 27 02:14:45 207.241.152.39:46105 -> xxx.yyy.1.3:80 SYN ******S*
May 27 02:14:45 207.241.152.39:46114 -> xxx.yyy.1.4:80 SYN ******S*
May 27 02:14:45 207.241.152.39:46115 -> xxx.yyy.1.5:80 SYN ******S*
May 27 02:14:45 207.241.152.39:46116 -> xxx.yyy.1.6:80 SYN ******S*
May 27 02:14:45 207.241.152.39:46117 -> xxx.yyy.1.7:80 SYN ******S*
[...]
May 27 03:18:56 207.241.152.39:47064 -> xxx.yyy.255.246:80 SYN ******S*
May 27 03:18:56 207.241.152.39:47065 -> xxx.yyy.255.247:80 SYN ******S*
May 27 03:18:56 207.241.152.39:47091 -> xxx.yyy.255.248:80 SYN ******S*
May 27 03:18:56 207.241.152.39:47095 -> xxx.yyy.255.252:80 SYN ******S*
May 27 03:18:56 207.241.152.39:4985 -> xxx.yyy.255.249:80 SYN ******S*
May 27 03:18:56 207.241.152.39:47093 -> xxx.yyy.255.250:80 SYN ******S*
May 27 03:18:56 207.241.152.39:47094 -> xxx.yyy.255.251:80 SYN ******S*
May 27 03:18:56 207.241.152.39:47096 -> xxx.yyy.255.253:80 SYN ******S*
May 27 03:18:56 207.241.152.39:4986 -> xxx.yyy.255.254:80 SYN ******S*
85205

May 27 21:03:12 217.136.39.104:4199 -> xxx.yyy.1.0:21 SYN ******S*
May 27 21:03:12 217.136.39.104:4200 -> xxx.yyy.1.1:21 SYN ******S*
May 27 21:03:12 217.136.39.104:4201 -> xxx.yyy.1.2:21 SYN ******S*
May 27 21:03:12 217.136.39.104:4202 -> xxx.yyy.1.3:21 SYN ******S*
May 27 21:03:12 217.136.39.104:4203 -> xxx.yyy.1.4:21 SYN ******S*
May 27 21:03:12 217.136.39.104:4204 -> xxx.yyy.1.5:21 SYN ******S*
May 27 21:03:12 217.136.39.104:4205 -> xxx.yyy.1.6:21 SYN ******S*
May 27 21:03:12 217.136.39.104:4206 -> xxx.yyy.1.7:21 SYN ******S*
[...]
May 27 21:49:43 217.136.39.104:4191 -> xxx.yyy.255.247:21 SYN ******S*
May 27 21:49:43 217.136.39.104:4192 -> xxx.yyy.255.248:21 SYN ******S*
May 27 21:49:43 217.136.39.104:4193 -> xxx.yyy.255.249:21 SYN ******S*
May 27 21:49:43 217.136.39.104:4194 -> xxx.yyy.255.250:21 SYN ******S*
May 27 21:49:43 217.136.39.104:4195 -> xxx.yyy.255.251:21 SYN ******S*
May 27 21:49:43 217.136.39.104:4196 -> xxx.yyy.255.252:21 SYN ******S*
May 27 21:49:43 217.136.39.104:4197 -> xxx.yyy.255.253:21 SYN ******S*
May 27 21:49:43 217.136.39.104:4198 -> xxx.yyy.255.254:21 SYN ******S*
77591

May 27 16:36:03 80.128.125.253:3106 -> xxx.yyy.1.0:1433 SYN ******S*
May 27 16:36:06 80.128.125.253:3109 -> xxx.yyy.1.1:1433 SYN ******S*
May 27 16:36:06 80.128.125.253:3111 -> xxx.yyy.1.2:1433 SYN ******S*
May 27 16:36:06 80.128.125.253:3114 -> xxx.yyy.1.3:1433 SYN ******S*
May 27 16:36:03 80.128.125.253:3119 -> xxx.yyy.1.4:1433 SYN ******S*
May 27 16:36:04 80.128.125.253:3128 -> xxx.yyy.1.6:1433 SYN ******S*
May 27 16:36:04 80.128.125.253:3142 -> xxx.yyy.1.7:1433 SYN ******S*
May 27 16:36:04 80.128.125.253:3154 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
May 27 17:46:18 80.128.125.253:3777 -> xxx.yyy.255.247:1433 SYN ******S*
May 27 17:46:18 80.128.125.253:3779 -> xxx.yyy.255.248:1433 SYN ******S*
May 27 17:46:18 80.128.125.253:3781 -> xxx.yyy.255.249:1433 SYN ******S*
May 27 17:46:18 80.128.125.253:3783 -> xxx.yyy.255.250:1433 SYN ******S*
May 27 17:46:18 80.128.125.253:3785 -> xxx.yyy.255.251:1433 SYN ******S*
May 27 17:46:18 80.128.125.253:3787 -> xxx.yyy.255.252:1433 SYN ******S*
May 27 17:46:18 80.128.125.253:3789 -> xxx.yyy.255.253:1433 SYN ******S*
May 27 17:46:18 80.128.125.253:3791 -> xxx.yyy.255.254:1433 SYN ******S*
76706

May 27 19:29:30 206.80.97.148:1798 -> xxx.yyy.1.1:139 SYN ******S*
May 27 19:29:27 206.80.97.148:1799 -> xxx.yyy.1.2:139 SYN ******S*
May 27 19:29:30 206.80.97.148:1800 -> xxx.yyy.1.3:139 SYN ******S*
May 27 19:29:30 206.80.97.148:1801 -> xxx.yyy.1.4:139 SYN ******S*
May 27 19:29:30 206.80.97.148:1802 -> xxx.yyy.1.5:139 SYN ******S*
May 27 19:29:30 206.80.97.148:1803 -> xxx.yyy.1.6:139 SYN ******S*
May 27 19:29:30 206.80.97.148:1804 -> xxx.yyy.1.7:139 SYN ******S*
May 27 19:29:30 206.80.97.148:1805 -> xxx.yyy.1.8:139 SYN ******S*
[...]
May 27 19:40:26 206.80.97.148:4356 -> xxx.yyy.255.245:139 SYN ******S*
May 27 19:40:26 206.80.97.148:4353 -> xxx.yyy.255.242:139 SYN ******S*
May 27 19:40:26 206.80.97.148:4360 -> xxx.yyy.255.249:139 SYN ******S*
May 27 19:40:26 206.80.97.148:4357 -> xxx.yyy.255.246:139 SYN ******S*
May 27 19:40:26 206.80.97.148:4364 -> xxx.yyy.255.253:139 SYN ******S*
May 27 19:40:26 206.80.97.148:4365 -> xxx.yyy.255.254:139 SYN ******S*
May 27 19:40:26 206.80.97.148:4362 -> xxx.yyy.255.251:139 SYN ******S*
May 27 19:40:26 206.80.97.148:4363 -> xxx.yyy.255.252:139 SYN ******S*
74193

May 27 07:18:58 212.247.86.202:3137 -> xxx.yyy.1.1:1433 SYN ******S*
May 27 07:18:58 212.247.86.202:3138 -> xxx.yyy.1.2:1433 SYN ******S*
May 27 07:18:58 212.247.86.202:3139 -> xxx.yyy.1.3:1433 SYN ******S*
May 27 07:18:58 212.247.86.202:3140 -> xxx.yyy.1.4:1433 SYN ******S*
May 27 07:18:58 212.247.86.202:3141 -> xxx.yyy.1.5:1433 SYN ******S*
May 27 07:18:55 212.247.86.202:3142 -> xxx.yyy.1.6:1433 SYN ******S*
May 27 07:18:58 212.247.86.202:3143 -> xxx.yyy.1.7:1433 SYN ******S*
May 27 07:18:58 212.247.86.202:3144 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
May 27 07:31:13 212.247.86.202:1819 -> xxx.yyy.255.250:1433 SYN ******S*
May 27 07:31:13 212.247.86.202:1821 -> xxx.yyy.255.252:1433 SYN ******S*
May 27 07:31:13 212.247.86.202:1823 -> xxx.yyy.255.254:1433 SYN ******S*
May 27 07:31:13 212.247.86.202:1815 -> xxx.yyy.255.246:1433 SYN ******S*
May 27 07:31:13 212.247.86.202:1817 -> xxx.yyy.255.248:1433 SYN ******S*
May 27 07:31:13 212.247.86.202:1820 -> xxx.yyy.255.251:1433 SYN ******S*
May 27 07:31:13 212.247.86.202:1814 -> xxx.yyy.255.245:1433 SYN ******S*
May 27 07:31:13 212.247.86.202:1818 -> xxx.yyy.255.249:1433 SYN ******S*
74111

May 27 00:34:59 206.231.224.218:48259 -> xxx.yyy.1.1:8000 SYN ******S*
May 27 00:34:59 206.231.224.218:48260 -> xxx.yyy.1.2:8000 SYN ******S*
May 27 00:35:01 206.231.224.218:48261 -> xxx.yyy.1.3:8000 SYN ******S*
May 27 00:35:01 206.231.224.218:48262 -> xxx.yyy.1.4:8000 SYN ******S*
May 27 00:35:01 206.231.224.218:48263 -> xxx.yyy.1.5:8000 SYN ******S*
May 27 00:35:01 206.231.224.218:48264 -> xxx.yyy.1.6:8000 SYN ******S*
May 27 00:35:01 206.231.224.218:48265 -> xxx.yyy.1.7:8000 SYN ******S*
May 27 00:35:01 206.231.224.218:48266 -> xxx.yyy.1.8:8000 SYN ******S*
[...]
May 27 00:48:00 206.231.224.218:51495 -> xxx.yyy.255.247:8000 SYN ******S*
May 27 00:48:00 206.231.224.218:51497 -> xxx.yyy.255.249:8000 SYN ******S*
May 27 00:48:00 206.231.224.218:51496 -> xxx.yyy.255.248:8000 SYN ******S*
May 27 00:48:00 206.231.224.218:51498 -> xxx.yyy.255.250:8000 SYN ******S*
May 27 00:48:00 206.231.224.218:51499 -> xxx.yyy.255.251:8000 SYN ******S*
May 27 00:48:00 206.231.224.218:51492 -> xxx.yyy.255.244:8000 SYN ******S*
May 27 00:48:00 206.231.224.218:51501 -> xxx.yyy.255.253:8000 SYN ******S*
May 27 00:48:00 206.231.224.218:51503 -> xxx.yyy.255.254:8000 SYN ******S*
71341

May 27 04:47:08 12.153.53.23:1919 -> xxx.yyy.1.1:8000 SYN ******S*
May 27 04:47:08 12.153.53.23:1920 -> xxx.yyy.1.2:8000 SYN ******S*
May 27 04:47:10 12.153.53.23:1921 -> xxx.yyy.1.3:8000 SYN ******S*
May 27 04:47:10 12.153.53.23:1922 -> xxx.yyy.1.4:8000 SYN ******S*
May 27 04:47:10 12.153.53.23:1923 -> xxx.yyy.1.5:8000 SYN ******S*
May 27 04:47:10 12.153.53.23:1924 -> xxx.yyy.1.6:8000 SYN ******S*
May 27 04:47:10 12.153.53.23:1925 -> xxx.yyy.1.7:8000 SYN ******S*
May 27 04:47:10 12.153.53.23:1926 -> xxx.yyy.1.8:8000 SYN ******S*
[...]
May 27 04:58:51 12.153.53.23:4391 -> xxx.yyy.254.250:8000 SYN ******S*
May 27 04:58:51 12.153.53.23:4384 -> xxx.yyy.254.243:8000 SYN ******S*
May 27 04:58:51 12.153.53.23:4388 -> xxx.yyy.254.247:8000 SYN ******S*
May 27 04:58:51 12.153.53.23:4389 -> xxx.yyy.254.248:8000 SYN ******S*
May 27 04:58:51 12.153.53.23:4385 -> xxx.yyy.254.244:8000 SYN ******S*
May 27 04:58:51 12.153.53.23:4386 -> xxx.yyy.254.245:8000 SYN ******S*
May 27 04:58:51 12.153.53.23:4395 -> xxx.yyy.254.254:8000 SYN ******S*
May 27 04:58:51 12.153.53.23:4394 -> xxx.yyy.254.253:8000 SYN ******S*
70938

May 27 16:48:26 80.237.202.244:1338 -> xxx.yyy.1.1:8000 SYN ******S*
May 27 16:48:26 80.237.202.244:1339 -> xxx.yyy.1.2:8000 SYN ******S*
May 27 16:48:28 80.237.202.244:1340 -> xxx.yyy.1.3:8000 SYN ******S*
May 27 16:48:28 80.237.202.244:1341 -> xxx.yyy.1.4:8000 SYN ******S*
May 27 16:48:28 80.237.202.244:1342 -> xxx.yyy.1.5:8000 SYN ******S*
May 27 16:48:25 80.237.202.244:1343 -> xxx.yyy.1.6:8000 SYN ******S*
May 27 16:48:25 80.237.202.244:1344 -> xxx.yyy.1.7:8000 SYN ******S*
May 27 16:48:28 80.237.202.244:1345 -> xxx.yyy.1.8:8000 SYN ******S*
[...]
May 27 17:00:21 80.237.202.244:3592 -> xxx.yyy.255.243:8000 SYN ******S*
May 27 17:00:21 80.237.202.244:3597 -> xxx.yyy.255.248:8000 SYN ******S*
May 27 17:00:21 80.237.202.244:3600 -> xxx.yyy.255.251:8000 SYN ******S*
May 27 17:00:21 80.237.202.244:3602 -> xxx.yyy.255.253:8000 SYN ******S*
May 27 17:00:21 80.237.202.244:3598 -> xxx.yyy.255.249:8000 SYN ******S*
May 27 17:00:21 80.237.202.244:3603 -> xxx.yyy.255.254:8000 SYN ******S*
May 27 17:00:21 80.237.202.244:3601 -> xxx.yyy.255.252:8000 SYN ******S*
May 27 17:00:21 80.237.202.244:3599 -> xxx.yyy.255.250:8000 SYN ******S*
70625

May 27 13:13:29 144.125.40.42:2716 -> xxx.yyy.1.1:445 SYN ******S*
May 27 13:13:32 144.125.40.42:2718 -> xxx.yyy.1.2:445 SYN ******S*
May 27 13:13:32 144.125.40.42:2722 -> xxx.yyy.1.4:445 SYN ******S*
May 27 13:13:32 144.125.40.42:2724 -> xxx.yyy.1.5:445 SYN ******S*
May 27 13:13:32 144.125.40.42:2726 -> xxx.yyy.1.6:445 SYN ******S*
May 27 13:13:32 144.125.40.42:2728 -> xxx.yyy.1.7:445 SYN ******S*
May 27 13:13:32 144.125.40.42:2730 -> xxx.yyy.1.8:445 SYN ******S*
May 27 13:13:32 144.125.40.42:2732 -> xxx.yyy.1.9:445 SYN ******S*
[...]
May 27 13:25:18 144.125.40.42:2976 -> xxx.yyy.255.251:445 SYN ******S*
May 27 13:25:18 144.125.40.42:2966 -> xxx.yyy.255.246:445 SYN ******S*
May 27 13:25:18 144.125.40.42:2972 -> xxx.yyy.255.249:445 SYN ******S*
May 27 13:25:18 144.125.40.42:2978 -> xxx.yyy.255.252:445 SYN ******S*
May 27 13:25:18 144.125.40.42:2968 -> xxx.yyy.255.247:445 SYN ******S*
May 27 13:25:18 144.125.40.42:2974 -> xxx.yyy.255.250:445 SYN ******S*
May 27 13:25:18 144.125.40.42:2980 -> xxx.yyy.255.253:445 SYN ******S*
May 27 13:25:18 144.125.40.42:2970 -> xxx.yyy.255.248:445 SYN ******S*
70607

May 27 06:07:45 202.107.206.2:19286 -> xxx.yyy.141.21:6129 SYN ******S*
May 27 06:07:45 202.107.206.2:54418 -> xxx.yyy.141.21:80 SYN ******S*
May 27 06:07:45 202.107.206.2:30219 -> xxx.yyy.141.21:2745 SYN ******S*
May 27 06:07:45 202.107.206.2:37109 -> xxx.yyy.141.21:3127 SYN ******S*
May 27 06:07:45 202.107.206.2:42818 -> xxx.yyy.141.21:1025 SYN ******S*
May 27 06:07:52 202.107.206.2:1725 -> xxx.yyy.189.152:2745 SYN ******S*
May 27 06:07:52 202.107.206.2:50604 -> xxx.yyy.189.152:1025 SYN ******S*
May 27 06:07:55 202.107.206.2:50604 -> xxx.yyy.189.152:1025 SYN ******S*
[...]
May 27 23:59:32 202.107.206.2:34025 -> xxx.yyy.251.171:1025 SYN ******S*
May 27 23:59:56 202.107.206.2:10642 -> xxx.yyy.65.122:2745 SYN ******S*
May 27 23:59:56 202.107.206.2:30990 -> xxx.yyy.65.122:1025 SYN ******S*
May 27 23:59:56 202.107.206.2:1123 -> xxx.yyy.65.122:3127 SYN ******S*
May 27 23:59:53 202.107.206.2:57522 -> xxx.yyy.65.122:80 SYN ******S*
May 27 23:59:57 202.107.206.2:13800 -> xxx.yyy.69.131:2745 SYN ******S*
May 27 23:59:56 202.107.206.2:11043 -> xxx.yyy.13.62:2745 SYN ******S*
May 27 23:59:56 202.107.206.2:28885 -> xxx.yyy.13.62:1025 SYN ******S*
70237

May 27 23:12:43 62.214.59.125:1989 -> xxx.yyy.1.1:6129 SYN ******S*
May 27 23:12:43 62.214.59.125:1990 -> xxx.yyy.1.2:6129 SYN ******S*
May 27 23:12:45 62.214.59.125:1991 -> xxx.yyy.1.3:6129 SYN ******S*
May 27 23:12:42 62.214.59.125:1992 -> xxx.yyy.1.4:6129 SYN ******S*
May 27 23:12:42 62.214.59.125:1993 -> xxx.yyy.1.5:6129 SYN ******S*
May 27 23:12:42 62.214.59.125:1994 -> xxx.yyy.1.6:6129 SYN ******S*
May 27 23:12:42 62.214.59.125:1995 -> xxx.yyy.1.7:6129 SYN ******S*
May 27 23:12:45 62.214.59.125:1996 -> xxx.yyy.1.8:6129 SYN ******S*
[...]
May 27 23:29:42 62.214.59.125:2911 -> xxx.yyy.255.238:6129 SYN ******S*
May 27 23:29:42 62.214.59.125:2912 -> xxx.yyy.255.239:6129 SYN ******S*
May 27 23:29:42 62.214.59.125:2913 -> xxx.yyy.255.240:6129 SYN ******S*
May 27 23:29:42 62.214.59.125:2918 -> xxx.yyy.255.245:6129 SYN ******S*
May 27 23:29:42 62.214.59.125:2919 -> xxx.yyy.255.246:6129 SYN ******S*
May 27 23:29:42 62.214.59.125:2920 -> xxx.yyy.255.247:6129 SYN ******S*
May 27 23:29:42 62.214.59.125:2925 -> xxx.yyy.255.252:6129 SYN ******S*
May 27 23:29:42 62.214.59.125:2926 -> xxx.yyy.255.253:6129 SYN ******S*
May 27 23:29:42 62.214.59.125:2927 -> xxx.yyy.255.254:6129 SYN ******S*
67949

May 27 02:09:18 62.20.102.62:3274 -> xxx.yyy.1.1:139 SYN ******S*
May 27 02:09:18 62.20.102.62:3286 -> xxx.yyy.1.2:139 SYN ******S*
May 27 02:09:21 62.20.102.62:3292 -> xxx.yyy.1.3:139 SYN ******S*
May 27 02:09:21 62.20.102.62:3300 -> xxx.yyy.1.4:139 SYN ******S*
May 27 02:09:21 62.20.102.62:3312 -> xxx.yyy.1.5:139 SYN ******S*
May 27 02:09:18 62.20.102.62:3320 -> xxx.yyy.1.6:139 SYN ******S*
May 27 02:09:21 62.20.102.62:3336 -> xxx.yyy.1.7:139 SYN ******S*
May 27 02:09:21 62.20.102.62:3346 -> xxx.yyy.1.8:139 SYN ******S*
[...]
May 27 02:21:30 62.20.102.62:2673 -> xxx.yyy.255.225:139 SYN ******S*
May 27 02:21:30 62.20.102.62:2716 -> xxx.yyy.255.233:139 SYN ******S*
May 27 02:21:30 62.20.102.62:2726 -> xxx.yyy.255.235:139 SYN ******S*
May 27 02:21:30 62.20.102.62:2761 -> xxx.yyy.255.239:139 SYN ******S*
May 27 02:21:30 62.20.102.62:2823 -> xxx.yyy.255.246:139 SYN ******S*
May 27 02:21:30 62.20.102.62:2805 -> xxx.yyy.255.244:139 SYN ******S*
May 27 02:21:30 62.20.102.62:2907 -> xxx.yyy.255.253:139 SYN ******S*
May 27 02:21:30 62.20.102.62:2919 -> xxx.yyy.255.254:139 SYN ******S*
May 27 02:21:30 62.20.102.62:2899 -> xxx.yyy.255.252:139 SYN ******S*
64777

May 27 05:58:57 221.146.83.155:1889 -> xxx.yyy.1.2:4899 SYN ******S*
May 27 05:58:56 221.146.83.155:1890 -> xxx.yyy.1.3:4899 SYN ******S*
May 27 05:58:57 221.146.83.155:1888 -> xxx.yyy.1.1:4899 SYN ******S*
May 27 05:58:56 221.146.83.155:1892 -> xxx.yyy.1.5:4899 SYN ******S*
May 27 05:58:56 221.146.83.155:1891 -> xxx.yyy.1.4:4899 SYN ******S*
May 27 05:58:56 221.146.83.155:1893 -> xxx.yyy.1.6:4899 SYN ******S*
May 27 05:58:56 221.146.83.155:1894 -> xxx.yyy.1.7:4899 SYN ******S*
May 27 05:58:56 221.146.83.155:1897 -> xxx.yyy.1.10:4899 SYN ******S*
[...]
May 27 06:03:49 221.146.83.155:4959 -> xxx.yyy.255.248:4899 SYN ******S*
May 27 06:03:49 221.146.83.155:4958 -> xxx.yyy.255.247:4899 SYN ******S*
May 27 06:03:49 221.146.83.155:4961 -> xxx.yyy.255.249:4899 SYN ******S*
May 27 06:03:49 221.146.83.155:4962 -> xxx.yyy.255.250:4899 SYN ******S*
May 27 06:03:49 221.146.83.155:4971 -> xxx.yyy.255.252:4899 SYN ******S*
May 27 06:03:49 221.146.83.155:4967 -> xxx.yyy.255.251:4899 SYN ******S*
May 27 06:03:49 221.146.83.155:4974 -> xxx.yyy.255.253:4899 SYN ******S*
May 27 06:03:49 221.146.83.155:4976 -> xxx.yyy.255.254:4899 SYN ******S*
45792

May 27 08:42:20 61.75.27.107:2182 -> xxx.yyy.1.1:4899 SYN ******S*
May 27 08:42:19 61.75.27.107:2185 -> xxx.yyy.1.4:4899 SYN ******S*
May 27 08:42:19 61.75.27.107:2187 -> xxx.yyy.1.6:4899 SYN ******S*
May 27 08:42:20 61.75.27.107:2183 -> xxx.yyy.1.2:4899 SYN ******S*
May 27 08:42:19 61.75.27.107:2184 -> xxx.yyy.1.3:4899 SYN ******S*
May 27 08:42:19 61.75.27.107:2189 -> xxx.yyy.1.8:4899 SYN ******S*
May 27 08:42:19 61.75.27.107:2186 -> xxx.yyy.1.5:4899 SYN ******S*
May 27 08:42:19 61.75.27.107:2190 -> xxx.yyy.1.9:4899 SYN ******S*
[...]
May 27 08:47:07 61.75.27.107:1910 -> xxx.yyy.255.245:4899 SYN ******S*
May 27 08:47:07 61.75.27.107:1914 -> xxx.yyy.255.249:4899 SYN ******S*
May 27 08:47:07 61.75.27.107:1911 -> xxx.yyy.255.246:4899 SYN ******S*
May 27 08:47:07 61.75.27.107:1917 -> xxx.yyy.255.251:4899 SYN ******S*
May 27 08:47:07 61.75.27.107:1919 -> xxx.yyy.255.252:4899 SYN ******S*
May 27 08:47:07 61.75.27.107:1915 -> xxx.yyy.255.250:4899 SYN ******S*
May 27 08:47:07 61.75.27.107:1920 -> xxx.yyy.255.253:4899 SYN ******S*
May 27 08:47:07 61.75.27.107:1921 -> xxx.yyy.255.254:4899 SYN ******S*
43341

May 27 10:21:08 211.157.101.25:56860 -> xxx.yyy.1.0:21 SYN ******S*
May 27 10:21:08 211.157.101.25:56863 -> xxx.yyy.1.2:21 SYN ******S*
May 27 10:21:08 211.157.101.25:56861 -> xxx.yyy.1.1:21 SYN ******S*
May 27 10:21:08 211.157.101.25:56864 -> xxx.yyy.1.3:21 SYN ******S*
May 27 10:21:08 211.157.101.25:56866 -> xxx.yyy.1.5:21 SYN ******S*
May 27 10:21:08 211.157.101.25:56868 -> xxx.yyy.1.7:21 SYN ******S*
May 27 10:21:08 211.157.101.25:56865 -> xxx.yyy.1.4:21 SYN ******S*
May 27 10:21:08 211.157.101.25:56867 -> xxx.yyy.1.6:21 SYN ******S*
[...]
May 27 10:32:01 211.157.101.25:41496 -> xxx.yyy.255.247:21 SYN ******S*
May 27 10:32:01 211.157.101.25:41497 -> xxx.yyy.255.248:21 SYN ******S*
May 27 10:32:01 211.157.101.25:41500 -> xxx.yyy.255.250:21 SYN ******S*
May 27 10:32:01 211.157.101.25:41499 -> xxx.yyy.255.249:21 SYN ******S*
May 27 10:32:01 211.157.101.25:41503 -> xxx.yyy.255.253:21 SYN ******S*
May 27 10:32:01 211.157.101.25:41501 -> xxx.yyy.255.251:21 SYN ******S*
May 27 10:32:01 211.157.101.25:41502 -> xxx.yyy.255.252:21 SYN ******S*
May 27 10:32:01 211.157.101.25:41505 -> xxx.yyy.255.255:21 SYN ******S*
May 27 10:32:01 211.157.101.25:41504 -> xxx.yyy.255.254:21 SYN ******S*
39958

May 27 06:07:16 62.204.128.10:2088 -> xxx.yyy.251.190:2745 SYN ******S*
May 27 06:07:16 62.204.128.10:2023 -> xxx.yyy.178.254:2745 SYN ******S*
May 27 06:07:19 62.204.128.10:2306 -> xxx.yyy.255.248:2745 SYN ******S*
May 27 06:07:19 62.204.128.10:2308 -> xxx.yyy.255.248:1025 SYN ******S*
May 27 06:07:18 62.204.128.10:2374 -> xxx.yyy.198.63:2745 SYN ******S*
May 27 06:07:22 62.204.128.10:2356 -> xxx.yyy.105.192:2745 SYN ******S*
May 27 06:07:21 62.204.128.10:2358 -> xxx.yyy.105.192:1025 SYN ******S*
May 27 06:07:21 62.204.128.10:2372 -> xxx.yyy.168.104:2745 SYN ******S*
[...]
May 27 11:47:17 62.204.128.10:1967 -> xxx.yyy.165.241:1025 SYN ******S*
May 27 11:47:17 62.204.128.10:1981 -> xxx.yyy.133.104:2745 SYN ******S*
May 27 11:47:14 62.204.128.10:1997 -> xxx.yyy.69.106:2745 SYN ******S*
May 27 11:47:15 62.204.128.10:1619 -> xxx.yyy.207.39:2745 SYN ******S*
May 27 11:47:15 62.204.128.10:1716 -> xxx.yyy.189.19:1025 SYN ******S*
May 27 11:47:16 62.204.128.10:1728 -> xxx.yyy.166.143:2745 SYN ******S*
May 27 11:47:16 62.204.128.10:1944 -> xxx.yyy.225.152:2745 SYN ******S*
May 27 11:47:17 62.204.128.10:2101 -> xxx.yyy.167.193:2745 SYN ******S*
May 27 11:47:18 62.204.128.10:1999 -> xxx.yyy.152.238:2745 SYN ******S*
27810

[...]
23927

May 27 01:52:17 140.127.41.139:1710 -> xxx.yyy.1.84:2277 SYN ******S*
May 27 01:52:17 140.127.41.139:1711 -> xxx.yyy.1.85:2277 SYN ******S*
May 27 01:52:17 140.127.41.139:1712 -> xxx.yyy.1.86:2277 SYN ******S*
May 27 01:52:17 140.127.41.139:1713 -> xxx.yyy.1.87:2277 SYN ******S*
May 27 01:52:17 140.127.41.139:1715 -> xxx.yyy.1.89:2277 SYN ******S*
May 27 01:52:17 140.127.41.139:1714 -> xxx.yyy.1.88:2277 SYN ******S*
May 27 01:52:17 140.127.41.139:1716 -> xxx.yyy.1.90:2277 SYN ******S*
May 27 01:52:17 140.127.41.139:1717 -> xxx.yyy.1.91:2277 SYN ******S*
[...]
May 27 20:19:40 140.127.41.139:1518 -> xxx.yyy.249.138:2277 SYN ******S*
May 27 20:19:40 140.127.41.139:1517 -> xxx.yyy.249.137:2277 SYN ******S*
May 27 20:19:40 140.127.41.139:1519 -> xxx.yyy.251.89:2277 SYN ******S*
May 27 20:19:40 140.127.41.139:1520 -> xxx.yyy.254.38:2277 SYN ******S*
May 27 20:19:40 140.127.41.139:1522 -> xxx.yyy.255.17:2277 SYN ******S*
May 27 20:19:40 140.127.41.139:1521 -> xxx.yyy.255.16:2277 SYN ******S*
May 27 20:19:41 140.127.41.139:1523 -> xxx.yyy.255.248:2277 SYN ******S*
May 27 20:19:41 140.127.41.139:1526 -> xxx.yyy.255.249:2277 SYN ******S*
12224

May 27 06:18:40 81.192.113.245:8607 -> xxx.yyy.234.63:3127 SYN ******S*
May 27 06:18:41 81.192.113.245:9685 -> xxx.yyy.206.37:3127 SYN ******S*
May 27 06:18:41 81.192.113.245:9699 -> xxx.yyy.206.37:445 SYN ******S*
May 27 06:18:42 81.192.113.245:9727 -> xxx.yyy.94.214:445 SYN ******S*
May 27 06:18:42 81.192.113.245:9741 -> xxx.yyy.94.214:3127 SYN ******S*
May 27 06:18:43 81.192.113.245:9898 -> xxx.yyy.216.95:80 SYN ******S*
May 27 06:21:45 81.192.113.245:10628 -> xxx.yyy.233.62:3127 SYN ******S*
May 27 06:21:50 81.192.113.245:8636 -> xxx.yyy.13.66:2745 SYN ******S*
[...]
May 27 12:40:24 81.192.113.245:21261 -> xxx.yyy.179.207:2745 SYN ******S*
May 27 12:40:25 81.192.113.245:20400 -> xxx.yyy.139.36:1025 SYN ******S*
May 27 12:40:31 81.192.113.245:20226 -> xxx.yyy.204.104:6129 SYN ******S*
May 27 12:40:32 81.192.113.245:21058 -> xxx.yyy.171.206:1025 SYN ******S*
May 27 12:40:32 81.192.113.245:21059 -> xxx.yyy.171.206:6129 SYN ******S*
May 27 12:40:33 81.192.113.245:14017 -> xxx.yyy.159.153:6129 SYN ******S*
May 27 12:40:33 81.192.113.245:14904 -> xxx.yyy.159.153:80 SYN ******S*
May 27 12:40:34 81.192.113.245:20562 -> xxx.yyy.15.207:3127 SYN ******S*
May 27 12:40:34 81.192.113.245:21627 -> xxx.yyy.191.150:6129 SYN ******S*
6410

May 27 21:58:28 218.148.193.109:2791 -> xxx.yyy.167.91:2745 SYN ******S*
May 27 21:58:28 218.148.193.109:2827 -> xxx.yyy.93.124:2745 SYN ******S*
May 27 21:58:28 218.148.193.109:2831 -> xxx.yyy.93.124:6129 SYN ******S*
May 27 21:58:28 218.148.193.109:2845 -> xxx.yyy.221.246:2745 SYN ******S*
May 27 21:58:28 218.148.193.109:2849 -> xxx.yyy.221.246:6129 SYN ******S*
May 27 21:58:27 218.148.193.109:2970 -> xxx.yyy.220.22:2745 SYN ******S*
May 27 21:58:27 218.148.193.109:2974 -> xxx.yyy.220.22:6129 SYN ******S*
May 27 21:58:34 218.148.193.109:2791 -> xxx.yyy.167.91:2745 SYN ******S*
[...]
May 27 23:59:42 218.148.193.109:2242 -> xxx.yyy.160.81:6129 SYN ******S*
May 27 23:59:44 218.148.193.109:2416 -> xxx.yyy.168.119:2745 SYN ******S*
May 27 23:59:50 218.148.193.109:3341 -> xxx.yyy.184.146:2745 SYN ******S*
May 27 23:59:52 218.148.193.109:3431 -> xxx.yyy.234.128:2745 SYN ******S*
May 27 23:59:52 218.148.193.109:3435 -> xxx.yyy.234.128:6129 SYN ******S*
May 27 23:59:53 218.148.193.109:3341 -> xxx.yyy.184.146:2745 SYN ******S*
May 27 23:59:55 218.148.193.109:3435 -> xxx.yyy.234.128:6129 SYN ******S*
May 27 23:59:55 218.148.193.109:3431 -> xxx.yyy.234.128:2745 SYN ******S*
May 27 23:59:57 218.148.193.109:3912 -> xxx.yyy.204.214:2745 SYN ******S*
5093

May 27 15:12:01 205.245.101.5:1083 -> xxx.yyy.1.1:139 SYN ******S*
May 27 15:12:01 205.245.101.5:1084 -> xxx.yyy.1.2:139 SYN ******S*
May 27 15:11:58 205.245.101.5:1085 -> xxx.yyy.1.3:139 SYN ******S*
May 27 15:11:58 205.245.101.5:1086 -> xxx.yyy.1.4:139 SYN ******S*
May 27 15:12:02 205.245.101.5:1087 -> xxx.yyy.1.5:139 SYN ******S*
May 27 15:12:02 205.245.101.5:1088 -> xxx.yyy.1.6:139 SYN ******S*
May 27 15:12:02 205.245.101.5:1089 -> xxx.yyy.1.7:139 SYN ******S*
May 27 15:12:02 205.245.101.5:1090 -> xxx.yyy.1.8:139 SYN ******S*
[...]
May 27 15:12:48 205.245.101.5:1652 -> xxx.yyy.17.248:139 SYN ******S*
May 27 15:12:48 205.245.101.5:1654 -> xxx.yyy.17.250:139 SYN ******S*
May 27 15:12:48 205.245.101.5:1649 -> xxx.yyy.17.245:139 SYN ******S*
May 27 15:12:48 205.245.101.5:1651 -> xxx.yyy.17.247:139 SYN ******S*
May 27 15:12:48 205.245.101.5:1648 -> xxx.yyy.17.244:139 SYN ******S*
May 27 15:12:48 205.245.101.5:1653 -> xxx.yyy.17.249:139 SYN ******S*
May 27 15:12:48 205.245.101.5:1658 -> xxx.yyy.17.254:139 SYN ******S*
May 27 15:12:48 205.245.101.5:1657 -> xxx.yyy.17.253:139 SYN ******S*
May 27 15:12:48 205.245.101.5:1659 -> xxx.yyy.17.255:139 SYN ******S*
3595

May 27 20:54:49 140.127.41.142:4392 -> xxx.yyy.29.40:2277 SYN ******S*
May 27 20:54:49 140.127.41.142:4428 -> xxx.yyy.29.59:2277 SYN ******S*
May 27 20:54:49 140.127.41.142:4604 -> xxx.yyy.29.147:2277 SYN ******S*
May 27 20:54:49 140.127.41.142:4672 -> xxx.yyy.29.186:2277 SYN ******S*
May 27 20:54:49 140.127.41.142:4692 -> xxx.yyy.29.193:2277 SYN ******S*
May 27 20:54:49 140.127.41.142:2629 -> xxx.yyy.11.61:2277 SYN ******S*
May 27 20:54:49 140.127.41.142:4805 -> xxx.yyy.29.241:2277 SYN ******S*
May 27 20:54:49 140.127.41.142:2661 -> xxx.yyy.12.5:2277 SYN ******S*
[...]
May 27 20:56:44 140.127.41.142:1207 -> xxx.yyy.255.125:2277 SYN ******S*
May 27 20:56:44 140.127.41.142:1219 -> xxx.yyy.255.135:2277 SYN ******S*
May 27 20:56:45 140.127.41.142:1270 -> xxx.yyy.255.180:2277 SYN ******S*
May 27 20:56:45 140.127.41.142:1271 -> xxx.yyy.255.181:2277 SYN ******S*
May 27 20:56:46 140.127.41.142:1297 -> xxx.yyy.255.205:2277 SYN ******S*
May 27 20:56:46 140.127.41.142:1316 -> xxx.yyy.255.220:2277 SYN ******S*
May 27 20:56:46 140.127.41.142:1321 -> xxx.yyy.255.225:2277 SYN ******S*
May 27 20:56:46 140.127.41.142:1334 -> xxx.yyy.255.236:2277 SYN ******S*
3325

May 27 06:08:21 221.224.83.46:4927 -> xxx.yyy.67.63:80 SYN ******S*
May 27 06:08:19 221.224.83.46:1075 -> xxx.yyy.144.156:2745 SYN ******S*
May 27 06:08:19 221.224.83.46:1096 -> xxx.yyy.171.231:6129 SYN ******S*
May 27 06:08:22 221.224.83.46:1093 -> xxx.yyy.171.231:1025 SYN ******S*
May 27 06:08:25 221.224.83.46:1400 -> xxx.yyy.11.192:2745 SYN ******S*
May 27 06:08:24 221.224.83.46:1539 -> xxx.yyy.212.162:2745 SYN ******S*
May 27 06:08:28 221.224.83.46:1095 -> xxx.yyy.171.231:3127 SYN ******S*
May 27 06:08:30 221.224.83.46:2050 -> xxx.yyy.81.188:2745 SYN ******S*
[...]
May 27 07:03:56 221.224.83.46:1659 -> xxx.yyy.13.60:2745 SYN ******S*
May 27 07:03:59 221.224.83.46:1663 -> xxx.yyy.13.60:3127 SYN ******S*
May 27 07:03:57 221.224.83.46:1665 -> xxx.yyy.13.60:139 SYN ******S*
May 27 07:03:57 221.224.83.46:1666 -> xxx.yyy.13.60:80 SYN ******S*
May 27 07:03:59 221.224.83.46:1664 -> xxx.yyy.13.60:6129 SYN ******S*
May 27 07:04:05 221.224.83.46:1661 -> xxx.yyy.13.60:1025 SYN ******S*
May 27 07:04:06 221.224.83.46:1666 -> xxx.yyy.13.60:80 SYN ******S*
May 27 07:04:06 221.224.83.46:1665 -> xxx.yyy.13.60:139 SYN ******S*
May 27 07:04:10 221.224.83.46:2460 -> xxx.yyy.246.161:2745 SYN ******S*
3279

--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly@xxxxxxx phone: (319) 273-5850 fax: (319) 273-7373
_______________________________________________
Intrusions mailing list
Intrusions@xxxxxxxxxxxxxx
http://www.dshield.org/mailman/listinfo/intrusions
<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  snort http_inspect alerts info: 00091, James Affeld
Next by Date:  LOGS: GIAC GCIA Version 3.5 Practical Detect James Affeld: 00091, James Affeld
Previous by Thread:  Re: [LOGS] Summary of large-scale portscanning detectsi: 00091, Communications Router 2
Next by Thread:  [LOGS] Summary of large-scale portscanning detects: 00091, Ken . Connelly
Indexes:  [Date] [Thread] [Top] [All Lists]

Google Custom Search
News | FAQ | advertise