logo       
<prev   next>

[LOGS] Summary of large-scale portscanning detects: msg#00094

security.intrusions

Subject: [LOGS] Summary of large-scale portscanning detects

The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0500.

May 28 20:41:52 192.197.110.108:4669 -> xxx.yyy.1.0:554 SYN ******S*
May 28 20:41:55 192.197.110.108:4670 -> xxx.yyy.1.1:554 SYN ******S*
May 28 20:41:55 192.197.110.108:4671 -> xxx.yyy.1.2:554 SYN ******S*
May 28 20:41:55 192.197.110.108:4672 -> xxx.yyy.1.3:554 SYN ******S*
May 28 20:41:55 192.197.110.108:4673 -> xxx.yyy.1.4:554 SYN ******S*
May 28 20:41:55 192.197.110.108:4674 -> xxx.yyy.1.5:554 SYN ******S*
May 28 20:41:55 192.197.110.108:4675 -> xxx.yyy.1.6:554 SYN ******S*
May 28 20:41:55 192.197.110.108:4676 -> xxx.yyy.1.7:554 SYN ******S*
[...]
May 28 21:04:28 192.197.110.108:4398 -> xxx.yyy.255.247:554 SYN ******S*
May 28 21:04:28 192.197.110.108:4403 -> xxx.yyy.255.250:554 SYN ******S*
May 28 21:04:28 192.197.110.108:4395 -> xxx.yyy.255.244:554 SYN ******S*
May 28 21:04:28 192.197.110.108:4394 -> xxx.yyy.255.243:554 SYN ******S*
May 28 21:04:28 192.197.110.108:4391 -> xxx.yyy.255.241:554 SYN ******S*
May 28 21:04:28 192.197.110.108:4405 -> xxx.yyy.255.252:554 SYN ******S*
May 28 21:04:28 192.197.110.108:4402 -> xxx.yyy.255.249:554 SYN ******S*
May 28 21:04:28 192.197.110.108:4397 -> xxx.yyy.255.246:554 SYN ******S*
123777

May 28 12:59:36 202.125.163.54:35543 -> xxx.yyy.1.0:443 SYN ******S*
May 28 12:59:36 202.125.163.54:35544 -> xxx.yyy.1.1:443 SYN ******S*
May 28 12:59:39 202.125.163.54:35547 -> xxx.yyy.1.4:443 SYN ******S*
May 28 12:59:36 202.125.163.54:35545 -> xxx.yyy.1.2:443 SYN ******S*
May 28 12:59:39 202.125.163.54:35546 -> xxx.yyy.1.3:443 SYN ******S*
May 28 12:59:39 202.125.163.54:35548 -> xxx.yyy.1.5:443 SYN ******S*
May 28 12:59:39 202.125.163.54:35549 -> xxx.yyy.1.6:443 SYN ******S*
May 28 12:59:39 202.125.163.54:35550 -> xxx.yyy.1.7:443 SYN ******S*
[...]
May 28 13:41:17 202.125.163.54:44463 -> xxx.yyy.255.247:443 SYN ******S*
May 28 13:41:17 202.125.163.54:44464 -> xxx.yyy.255.248:443 SYN ******S*
May 28 13:41:17 202.125.163.54:44465 -> xxx.yyy.255.249:443 SYN ******S*
May 28 13:41:17 202.125.163.54:44466 -> xxx.yyy.255.250:443 SYN ******S*
May 28 13:41:17 202.125.163.54:44468 -> xxx.yyy.255.252:443 SYN ******S*
May 28 13:41:17 202.125.163.54:44467 -> xxx.yyy.255.251:443 SYN ******S*
May 28 13:41:17 202.125.163.54:44469 -> xxx.yyy.255.253:443 SYN ******S*
May 28 13:41:17 202.125.163.54:44470 -> xxx.yyy.255.254:443 SYN ******S*
85684

May 28 00:00:20 202.107.206.2:12843 -> xxx.yyy.71.15:1025 SYN ******S*
May 28 00:00:21 202.107.206.2:56188 -> xxx.yyy.29.232:2745 SYN ******S*
May 28 00:00:21 202.107.206.2:26548 -> xxx.yyy.29.232:1025 SYN ******S*
May 28 00:00:21 202.107.206.2:21707 -> xxx.yyy.107.121:2745 SYN ******S*
May 28 00:00:23 202.107.206.2:41147 -> xxx.yyy.253.225:1025 SYN ******S*
May 28 00:00:27 202.107.206.2:12843 -> xxx.yyy.71.15:1025 SYN ******S*
May 28 00:00:27 202.107.206.2:51749 -> xxx.yyy.71.15:80 SYN ******S*
May 28 00:00:27 202.107.206.2:28550 -> xxx.yyy.71.15:2745 SYN ******S*
[...]
May 28 23:59:51 202.107.206.2:2557 -> xxx.yyy.10.182:80 SYN ******S*
May 28 23:59:55 202.107.206.2:58263 -> xxx.yyy.135.113:2745 SYN ******S*
May 28 23:59:55 202.107.206.2:53508 -> xxx.yyy.81.63:2745 SYN ******S*
May 28 23:59:55 202.107.206.2:50272 -> xxx.yyy.130.81:1025 SYN ******S*
May 28 23:59:55 202.107.206.2:27434 -> xxx.yyy.130.81:2745 SYN ******S*
May 28 23:59:57 202.107.206.2:22156 -> xxx.yyy.242.24:2745 SYN ******S*
May 28 23:59:58 202.107.206.2:58263 -> xxx.yyy.135.113:2745 SYN ******S*
May 28 23:59:58 202.107.206.2:53508 -> xxx.yyy.81.63:2745 SYN ******S*
83765

May 28 14:51:59 66.136.35.19:43263 -> xxx.yyy.1.0:111 SYN ******S*
May 28 14:51:59 66.136.35.19:43264 -> xxx.yyy.1.1:111 SYN ******S*
May 28 14:51:59 66.136.35.19:43265 -> xxx.yyy.1.2:111 SYN ******S*
May 28 14:51:59 66.136.35.19:43266 -> xxx.yyy.1.3:111 SYN ******S*
May 28 14:51:59 66.136.35.19:43267 -> xxx.yyy.1.4:111 SYN ******S*
May 28 14:51:59 66.136.35.19:43268 -> xxx.yyy.1.5:111 SYN ******S*
May 28 14:51:59 66.136.35.19:43269 -> xxx.yyy.1.6:111 SYN ******S*
May 28 14:51:59 66.136.35.19:43270 -> xxx.yyy.1.7:111 SYN ******S*
[...]
May 28 15:09:49 66.136.35.19:43084 -> xxx.yyy.255.244:111 SYN ******S*
May 28 15:09:49 66.136.35.19:43086 -> xxx.yyy.255.246:111 SYN ******S*
May 28 15:09:49 66.136.35.19:43087 -> xxx.yyy.255.247:111 SYN ******S*
May 28 15:09:49 66.136.35.19:43090 -> xxx.yyy.255.250:111 SYN ******S*
May 28 15:09:49 66.136.35.19:43091 -> xxx.yyy.255.251:111 SYN ******S*
May 28 15:09:49 66.136.35.19:43092 -> xxx.yyy.255.252:111 SYN ******S*
May 28 15:09:49 66.136.35.19:43095 -> xxx.yyy.255.255:111 SYN ******S*
May 28 15:09:49 66.136.35.19:43094 -> xxx.yyy.255.254:111 SYN ******S*
79318

May 28 12:21:11 217.162.173.95:3815 -> xxx.yyy.1.1:139 SYN ******S*
May 28 12:21:11 217.162.173.95:3816 -> xxx.yyy.1.2:139 SYN ******S*
May 28 12:21:11 217.162.173.95:3817 -> xxx.yyy.1.3:139 SYN ******S*
May 28 12:21:11 217.162.173.95:3818 -> xxx.yyy.1.4:139 SYN ******S*
May 28 12:21:11 217.162.173.95:3819 -> xxx.yyy.1.5:139 SYN ******S*
May 28 12:21:11 217.162.173.95:3820 -> xxx.yyy.1.6:139 SYN ******S*
May 28 12:21:11 217.162.173.95:3821 -> xxx.yyy.1.7:139 SYN ******S*
May 28 12:21:08 217.162.173.95:3822 -> xxx.yyy.1.8:139 SYN ******S*
[...]
May 28 12:34:44 217.162.173.95:1727 -> xxx.yyy.255.187:139 SYN ******S*
May 28 12:34:44 217.162.173.95:1738 -> xxx.yyy.255.198:139 SYN ******S*
May 28 12:34:44 217.162.173.95:1739 -> xxx.yyy.255.199:139 SYN ******S*
May 28 12:34:44 217.162.173.95:1736 -> xxx.yyy.255.196:139 SYN ******S*
May 28 12:34:44 217.162.173.95:1740 -> xxx.yyy.255.200:139 SYN ******S*
May 28 12:34:44 217.162.173.95:1737 -> xxx.yyy.255.197:139 SYN ******S*
May 28 12:34:44 217.162.173.95:1752 -> xxx.yyy.255.212:139 SYN ******S*
May 28 12:34:44 217.162.173.95:1766 -> xxx.yyy.255.226:139 SYN ******S*
May 28 12:34:44 217.162.173.95:1783 -> xxx.yyy.255.243:139 SYN ******S*
75361

May 28 04:15:14 12.221.30.140:3412 -> xxx.yyy.1.6:901 SYN ******S*
May 28 04:15:12 12.221.30.140:3406 -> xxx.yyy.1.0:901 SYN ******S*
May 28 04:15:12 12.221.30.140:3407 -> xxx.yyy.1.1:901 SYN ******S*
May 28 04:15:12 12.221.30.140:3408 -> xxx.yyy.1.2:901 SYN ******S*
May 28 04:15:14 12.221.30.140:3411 -> xxx.yyy.1.5:901 SYN ******S*
May 28 04:15:14 12.221.30.140:3410 -> xxx.yyy.1.4:901 SYN ******S*
May 28 04:15:14 12.221.30.140:3409 -> xxx.yyy.1.3:901 SYN ******S*
May 28 04:15:14 12.221.30.140:3413 -> xxx.yyy.1.7:901 SYN ******S*
[...]
May 28 06:05:20 12.221.30.140:3829 -> xxx.yyy.254.250:901 SYN ******S*
May 28 06:05:20 12.221.30.140:3828 -> xxx.yyy.254.249:901 SYN ******S*
May 28 06:05:20 12.221.30.140:3831 -> xxx.yyy.254.252:901 SYN ******S*
May 28 06:05:20 12.221.30.140:3827 -> xxx.yyy.254.248:901 SYN ******S*
May 28 06:05:20 12.221.30.140:3830 -> xxx.yyy.254.251:901 SYN ******S*
May 28 06:05:20 12.221.30.140:3833 -> xxx.yyy.254.254:901 SYN ******S*
May 28 06:05:20 12.221.30.140:3832 -> xxx.yyy.254.253:901 SYN ******S*
May 28 06:05:20 12.221.30.140:3834 -> xxx.yyy.254.255:901 SYN ******S*
74075

May 28 19:20:10 130.91.63.35:2133 -> xxx.yyy.1.1:445 SYN ******S*
May 28 19:20:10 130.91.63.35:2134 -> xxx.yyy.1.2:445 SYN ******S*
May 28 19:20:10 130.91.63.35:2135 -> xxx.yyy.1.3:445 SYN ******S*
May 28 19:20:10 130.91.63.35:2136 -> xxx.yyy.1.4:445 SYN ******S*
May 28 19:20:10 130.91.63.35:2137 -> xxx.yyy.1.5:445 SYN ******S*
May 28 19:20:08 130.91.63.35:2138 -> xxx.yyy.1.6:445 SYN ******S*
May 28 19:20:11 130.91.63.35:2139 -> xxx.yyy.1.7:445 SYN ******S*
May 28 19:20:11 130.91.63.35:2140 -> xxx.yyy.1.8:445 SYN ******S*
[...]
May 28 19:32:02 130.91.63.35:4271 -> xxx.yyy.255.243:445 SYN ******S*
May 28 19:32:02 130.91.63.35:4275 -> xxx.yyy.255.247:445 SYN ******S*
May 28 19:32:02 130.91.63.35:4274 -> xxx.yyy.255.246:445 SYN ******S*
May 28 19:32:02 130.91.63.35:4277 -> xxx.yyy.255.249:445 SYN ******S*
May 28 19:32:02 130.91.63.35:4276 -> xxx.yyy.255.248:445 SYN ******S*
May 28 19:32:02 130.91.63.35:4278 -> xxx.yyy.255.250:445 SYN ******S*
May 28 19:32:03 130.91.63.35:4280 -> xxx.yyy.255.252:445 SYN ******S*
May 28 19:32:03 130.91.63.35:4281 -> xxx.yyy.255.253:445 SYN ******S*
May 28 19:32:03 130.91.63.35:4282 -> xxx.yyy.255.254:445 SYN ******S*
72533

May 28 10:24:50 220.68.166.7:3899 -> xxx.yyy.1.1:1433 SYN ******S*
May 28 10:24:47 220.68.166.7:3900 -> xxx.yyy.1.2:1433 SYN ******S*
May 28 10:24:50 220.68.166.7:3901 -> xxx.yyy.1.3:1433 SYN ******S*
May 28 10:24:50 220.68.166.7:3904 -> xxx.yyy.1.6:1433 SYN ******S*
May 28 10:24:50 220.68.166.7:3903 -> xxx.yyy.1.5:1433 SYN ******S*
May 28 10:24:50 220.68.166.7:3905 -> xxx.yyy.1.7:1433 SYN ******S*
May 28 10:24:50 220.68.166.7:3906 -> xxx.yyy.1.8:1433 SYN ******S*
May 28 10:24:50 220.68.166.7:3907 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
May 28 10:35:45 220.68.166.7:2056 -> xxx.yyy.255.238:1433 SYN ******S*
May 28 10:35:45 220.68.166.7:2064 -> xxx.yyy.255.246:1433 SYN ******S*
May 28 10:35:45 220.68.166.7:2057 -> xxx.yyy.255.239:1433 SYN ******S*
May 28 10:35:45 220.68.166.7:2059 -> xxx.yyy.255.241:1433 SYN ******S*
May 28 10:35:45 220.68.166.7:2068 -> xxx.yyy.255.250:1433 SYN ******S*
May 28 10:35:45 220.68.166.7:2071 -> xxx.yyy.255.253:1433 SYN ******S*
May 28 10:35:45 220.68.166.7:2072 -> xxx.yyy.255.254:1433 SYN ******S*
May 28 10:35:45 220.68.166.7:2070 -> xxx.yyy.255.252:1433 SYN ******S*
72147

May 28 21:27:01 149.142.247.245:3208 -> xxx.yyy.1.1:8000 SYN ******S*
May 28 21:27:01 149.142.247.245:3209 -> xxx.yyy.1.2:8000 SYN ******S*
May 28 21:27:03 149.142.247.245:3210 -> xxx.yyy.1.3:8000 SYN ******S*
May 28 21:27:00 149.142.247.245:3211 -> xxx.yyy.1.4:8000 SYN ******S*
May 28 21:27:03 149.142.247.245:3212 -> xxx.yyy.1.5:8000 SYN ******S*
May 28 21:27:03 149.142.247.245:3213 -> xxx.yyy.1.6:8000 SYN ******S*
May 28 21:27:03 149.142.247.245:3214 -> xxx.yyy.1.7:8000 SYN ******S*
May 28 21:27:03 149.142.247.245:3215 -> xxx.yyy.1.8:8000 SYN ******S*
[...]
May 28 21:41:18 149.142.247.245:2296 -> xxx.yyy.255.217:8000 SYN ******S*
May 28 21:41:18 149.142.247.245:2293 -> xxx.yyy.255.214:8000 SYN ******S*
May 28 21:41:18 149.142.247.245:2297 -> xxx.yyy.255.218:8000 SYN ******S*
May 28 21:41:18 149.142.247.245:2294 -> xxx.yyy.255.215:8000 SYN ******S*
May 28 21:41:18 149.142.247.245:2295 -> xxx.yyy.255.216:8000 SYN ******S*
May 28 21:41:18 149.142.247.245:2292 -> xxx.yyy.255.213:8000 SYN ******S*
May 28 21:41:19 149.142.247.245:2302 -> xxx.yyy.255.223:8000 SYN ******S*
May 28 21:41:19 149.142.247.245:2299 -> xxx.yyy.255.220:8000 SYN ******S*
May 28 21:41:19 149.142.247.245:2303 -> xxx.yyy.255.224:8000 SYN ******S*
71638

May 28 10:11:24 212.58.140.204:4262 -> xxx.yyy.1.1:1433 SYN ******S*
May 28 10:11:24 212.58.140.204:4263 -> xxx.yyy.1.2:1433 SYN ******S*
May 28 10:11:24 212.58.140.204:4264 -> xxx.yyy.1.3:1433 SYN ******S*
May 28 10:11:21 212.58.140.204:4265 -> xxx.yyy.1.4:1433 SYN ******S*
May 28 10:11:21 212.58.140.204:4266 -> xxx.yyy.1.5:1433 SYN ******S*
May 28 10:11:24 212.58.140.204:4267 -> xxx.yyy.1.6:1433 SYN ******S*
May 28 10:11:24 212.58.140.204:4269 -> xxx.yyy.1.8:1433 SYN ******S*
May 28 10:11:24 212.58.140.204:4270 -> xxx.yyy.1.9:1433 SYN ******S*
[...]
May 28 12:11:35 212.58.140.204:2044 -> xxx.yyy.255.251:1433 SYN ******S*
May 28 12:11:35 212.58.140.204:2041 -> xxx.yyy.255.248:1433 SYN ******S*
May 28 12:11:35 212.58.140.204:2043 -> xxx.yyy.255.250:1433 SYN ******S*
May 28 12:11:35 212.58.140.204:2038 -> xxx.yyy.255.245:1433 SYN ******S*
May 28 12:11:35 212.58.140.204:2040 -> xxx.yyy.255.247:1433 SYN ******S*
May 28 12:11:35 212.58.140.204:2042 -> xxx.yyy.255.249:1433 SYN ******S*
May 28 12:11:35 212.58.140.204:2045 -> xxx.yyy.255.252:1433 SYN ******S*
May 28 12:11:35 212.58.140.204:2039 -> xxx.yyy.255.246:1433 SYN ******S*
70802

May 28 11:36:25 148.223.76.195:1096 -> xxx.yyy.1.1:8000 SYN ******S*
May 28 11:36:25 148.223.76.195:1097 -> xxx.yyy.1.2:8000 SYN ******S*
May 28 11:36:24 148.223.76.195:1098 -> xxx.yyy.1.3:8000 SYN ******S*
May 28 11:36:24 148.223.76.195:1099 -> xxx.yyy.1.4:8000 SYN ******S*
May 28 11:36:27 148.223.76.195:1101 -> xxx.yyy.1.6:8000 SYN ******S*
May 28 11:36:27 148.223.76.195:1100 -> xxx.yyy.1.5:8000 SYN ******S*
May 28 11:36:27 148.223.76.195:1103 -> xxx.yyy.1.8:8000 SYN ******S*
May 28 11:36:27 148.223.76.195:1105 -> xxx.yyy.1.10:8000 SYN ******S*
[...]
May 28 12:25:58 148.223.76.195:3026 -> xxx.yyy.255.248:8000 SYN ******S*
May 28 12:25:58 148.223.76.195:3025 -> xxx.yyy.255.247:8000 SYN ******S*
May 28 12:26:01 148.223.76.195:3027 -> xxx.yyy.255.249:8000 SYN ******S*
May 28 12:26:01 148.223.76.195:3028 -> xxx.yyy.255.250:8000 SYN ******S*
May 28 12:26:01 148.223.76.195:3031 -> xxx.yyy.255.253:8000 SYN ******S*
May 28 12:26:01 148.223.76.195:3030 -> xxx.yyy.255.252:8000 SYN ******S*
May 28 12:26:01 148.223.76.195:3032 -> xxx.yyy.255.254:8000 SYN ******S*
May 28 12:26:01 148.223.76.195:3029 -> xxx.yyy.255.251:8000 SYN ******S*
69699

May 28 17:19:38 203.160.169.11:3082 -> xxx.yyy.1.1:4899 SYN ******S*
May 28 17:19:37 203.160.169.11:3083 -> xxx.yyy.1.2:4899 SYN ******S*
May 28 17:19:37 203.160.169.11:3084 -> xxx.yyy.1.3:4899 SYN ******S*
May 28 17:19:37 203.160.169.11:3085 -> xxx.yyy.1.4:4899 SYN ******S*
May 28 17:19:37 203.160.169.11:3086 -> xxx.yyy.1.5:4899 SYN ******S*
May 28 17:19:37 203.160.169.11:3087 -> xxx.yyy.1.6:4899 SYN ******S*
May 28 17:19:37 203.160.169.11:3088 -> xxx.yyy.1.7:4899 SYN ******S*
May 28 17:19:37 203.160.169.11:3089 -> xxx.yyy.1.8:4899 SYN ******S*
[...]
May 28 17:28:14 203.160.169.11:2444 -> xxx.yyy.255.247:4899 SYN ******S*
May 28 17:28:14 203.160.169.11:2446 -> xxx.yyy.255.249:4899 SYN ******S*
May 28 17:28:14 203.160.169.11:2445 -> xxx.yyy.255.248:4899 SYN ******S*
May 28 17:28:14 203.160.169.11:2447 -> xxx.yyy.255.250:4899 SYN ******S*
May 28 17:28:14 203.160.169.11:2449 -> xxx.yyy.255.252:4899 SYN ******S*
May 28 17:28:14 203.160.169.11:2448 -> xxx.yyy.255.251:4899 SYN ******S*
May 28 17:28:14 203.160.169.11:2450 -> xxx.yyy.255.253:4899 SYN ******S*
May 28 17:28:14 203.160.169.11:2451 -> xxx.yyy.255.254:4899 SYN ******S*
48973

May 28 02:07:38 67.82.169.127:1759 -> xxx.yyy.1.1:4899 SYN ******S*
May 28 02:07:38 67.82.169.127:1760 -> xxx.yyy.1.2:4899 SYN ******S*
May 28 02:07:37 67.82.169.127:1761 -> xxx.yyy.1.3:4899 SYN ******S*
May 28 02:07:37 67.82.169.127:1762 -> xxx.yyy.1.4:4899 SYN ******S*
May 28 02:07:37 67.82.169.127:1763 -> xxx.yyy.1.5:4899 SYN ******S*
May 28 02:07:37 67.82.169.127:1764 -> xxx.yyy.1.6:4899 SYN ******S*
May 28 02:07:37 67.82.169.127:1765 -> xxx.yyy.1.7:4899 SYN ******S*
May 28 02:07:37 67.82.169.127:1766 -> xxx.yyy.1.8:4899 SYN ******S*
[...]
May 28 02:11:51 67.82.169.127:2302 -> xxx.yyy.255.246:4899 SYN ******S*
May 28 02:11:51 67.82.169.127:2303 -> xxx.yyy.255.247:4899 SYN ******S*
May 28 02:11:51 67.82.169.127:2304 -> xxx.yyy.255.248:4899 SYN ******S*
May 28 02:11:51 67.82.169.127:2305 -> xxx.yyy.255.249:4899 SYN ******S*
May 28 02:11:51 67.82.169.127:2307 -> xxx.yyy.255.251:4899 SYN ******S*
May 28 02:11:51 67.82.169.127:2306 -> xxx.yyy.255.250:4899 SYN ******S*
May 28 02:11:51 67.82.169.127:2309 -> xxx.yyy.255.253:4899 SYN ******S*
May 28 02:11:51 67.82.169.127:2308 -> xxx.yyy.255.252:4899 SYN ******S*
May 28 02:11:51 67.82.169.127:2310 -> xxx.yyy.255.254:4899 SYN ******S*
44904

May 28 15:05:40 220.170.64.122:60445 -> xxx.yyy.1.20:21 SYN ******S*
May 28 15:05:40 220.170.64.122:60466 -> xxx.yyy.1.38:21 SYN ******S*
May 28 15:05:40 220.170.64.122:60483 -> xxx.yyy.1.50:21 SYN ******S*
May 28 15:05:40 220.170.64.122:60473 -> xxx.yyy.1.44:21 SYN ******S*
May 28 15:05:40 220.170.64.122:60485 -> xxx.yyy.1.52:21 SYN ******S*
May 28 15:05:40 220.170.64.122:60425 -> xxx.yyy.1.2:21 SYN ******S*
May 28 15:05:40 220.170.64.122:60441 -> xxx.yyy.1.16:21 SYN ******S*
May 28 15:05:40 220.170.64.122:60429 -> xxx.yyy.1.6:21 SYN ******S*
[...]
May 28 15:16:32 220.170.64.122:48097 -> xxx.yyy.255.247:21 SYN ******S*
May 28 15:16:32 220.170.64.122:48103 -> xxx.yyy.255.253:21 SYN ******S*
May 28 15:16:32 220.170.64.122:48082 -> xxx.yyy.255.233:21 SYN ******S*
May 28 15:16:32 220.170.64.122:48084 -> xxx.yyy.255.235:21 SYN ******S*
May 28 15:16:32 220.170.64.122:48088 -> xxx.yyy.255.239:21 SYN ******S*
May 28 15:16:32 220.170.64.122:48093 -> xxx.yyy.255.244:21 SYN ******S*
May 28 15:16:32 220.170.64.122:48100 -> xxx.yyy.255.250:21 SYN ******S*
May 28 15:16:32 220.170.64.122:48095 -> xxx.yyy.255.246:21 SYN ******S*
May 28 15:16:32 220.170.64.122:48087 -> xxx.yyy.255.238:21 SYN ******S*
42152

May 28 12:10:00 219.120.96.194:4947 -> xxx.yyy.1.1:4899 SYN ******S*
May 28 12:10:00 219.120.96.194:4948 -> xxx.yyy.1.2:4899 SYN ******S*
May 28 12:09:58 219.120.96.194:4949 -> xxx.yyy.1.3:4899 SYN ******S*
May 28 12:09:58 219.120.96.194:4950 -> xxx.yyy.1.4:4899 SYN ******S*
May 28 12:09:58 219.120.96.194:4951 -> xxx.yyy.1.5:4899 SYN ******S*
May 28 12:09:58 219.120.96.194:4952 -> xxx.yyy.1.6:4899 SYN ******S*
May 28 12:09:58 219.120.96.194:4953 -> xxx.yyy.1.7:4899 SYN ******S*
May 28 12:09:58 219.120.96.194:4954 -> xxx.yyy.1.8:4899 SYN ******S*
[...]
May 28 12:12:38 219.120.96.194:3831 -> xxx.yyy.255.247:4899 SYN ******S*
May 28 12:12:38 219.120.96.194:3832 -> xxx.yyy.255.248:4899 SYN ******S*
May 28 12:12:38 219.120.96.194:3834 -> xxx.yyy.255.249:4899 SYN ******S*
May 28 12:12:38 219.120.96.194:3835 -> xxx.yyy.255.250:4899 SYN ******S*
May 28 12:12:38 219.120.96.194:3836 -> xxx.yyy.255.251:4899 SYN ******S*
May 28 12:12:38 219.120.96.194:3837 -> xxx.yyy.255.252:4899 SYN ******S*
May 28 12:12:38 219.120.96.194:3838 -> xxx.yyy.255.253:4899 SYN ******S*
May 28 12:12:38 219.120.96.194:3839 -> xxx.yyy.255.254:4899 SYN ******S*
41573

May 28 17:04:10 4.15.98.126:1958 -> xxx.yyy.161.162:901 SYN ******S*
May 28 17:04:10 4.15.98.126:1959 -> xxx.yyy.161.163:901 SYN ******S*
May 28 17:04:10 4.15.98.126:1960 -> xxx.yyy.161.164:901 SYN ******S*
May 28 17:04:10 4.15.98.126:1961 -> xxx.yyy.161.165:901 SYN ******S*
May 28 17:04:10 4.15.98.126:1962 -> xxx.yyy.161.166:901 SYN ******S*
May 28 17:04:10 4.15.98.126:1963 -> xxx.yyy.161.167:901 SYN ******S*
May 28 17:04:10 4.15.98.126:1964 -> xxx.yyy.161.168:901 SYN ******S*
May 28 17:04:11 4.15.98.126:1965 -> xxx.yyy.161.169:901 SYN ******S*
[...]
May 28 18:08:06 4.15.98.126:1211 -> xxx.yyy.254.250:901 SYN ******S*
May 28 18:08:06 4.15.98.126:1212 -> xxx.yyy.254.251:901 SYN ******S*
May 28 18:08:06 4.15.98.126:1213 -> xxx.yyy.254.252:901 SYN ******S*
May 28 18:08:06 4.15.98.126:1214 -> xxx.yyy.254.253:901 SYN ******S*
May 28 18:08:06 4.15.98.126:1479 -> xxx.yyy.254.254:901 SYN ******S*
May 28 18:08:06 4.15.98.126:1480 -> xxx.yyy.254.255:901 SYN ******S*
May 28 18:08:09 4.15.98.126:1479 -> xxx.yyy.254.254:901 SYN ******S*
May 28 18:08:09 4.15.98.126:1480 -> xxx.yyy.254.255:901 SYN ******S*
40275

May 28 01:11:14 65.140.68.186:6299 -> xxx.yyy.1.0:25 SYN ******S*
May 28 01:11:14 65.140.68.186:6299 -> xxx.yyy.1.1:25 SYN ******S*
May 28 01:11:14 65.140.68.186:6299 -> xxx.yyy.1.2:25 SYN ******S*
May 28 01:11:14 65.140.68.186:6299 -> xxx.yyy.1.3:25 SYN ******S*
May 28 01:11:14 65.140.68.186:6299 -> xxx.yyy.1.4:25 SYN ******S*
May 28 01:11:14 65.140.68.186:6299 -> xxx.yyy.1.5:25 SYN ******S*
May 28 01:11:14 65.140.68.186:6299 -> xxx.yyy.1.6:25 SYN ******S*
May 28 01:11:14 65.140.68.186:6299 -> xxx.yyy.1.7:25 SYN ******S*
[...]
May 28 01:12:13 65.140.68.186:6299 -> xxx.yyy.255.245:25 SYN ******S*
May 28 01:12:13 65.140.68.186:6299 -> xxx.yyy.255.246:25 SYN ******S*
May 28 01:12:13 65.140.68.186:6299 -> xxx.yyy.255.247:25 SYN ******S*
May 28 01:12:13 65.140.68.186:6299 -> xxx.yyy.255.248:25 SYN ******S*
May 28 01:12:13 65.140.68.186:6299 -> xxx.yyy.255.249:25 SYN ******S*
May 28 01:12:13 65.140.68.186:6299 -> xxx.yyy.255.250:25 SYN ******S*
May 28 01:12:13 65.140.68.186:6299 -> xxx.yyy.255.251:25 SYN ******S*
May 28 01:12:13 65.140.68.186:6299 -> xxx.yyy.255.254:25 SYN ******S*
May 28 01:12:13 65.140.68.186:6299 -> xxx.yyy.255.255:25 SYN ******S*
39651

May 28 16:33:54 81.65.160.59:4384 -> xxx.yyy.1.1:4899 SYN ******S*
May 28 16:33:54 81.65.160.59:4385 -> xxx.yyy.1.2:4899 SYN ******S*
May 28 16:33:54 81.65.160.59:4389 -> xxx.yyy.1.4:4899 SYN ******S*
May 28 16:33:54 81.65.160.59:4387 -> xxx.yyy.1.3:4899 SYN ******S*
May 28 16:33:54 81.65.160.59:4390 -> xxx.yyy.1.5:4899 SYN ******S*
May 28 16:33:54 81.65.160.59:4391 -> xxx.yyy.1.6:4899 SYN ******S*
May 28 16:33:54 81.65.160.59:4392 -> xxx.yyy.1.7:4899 SYN ******S*
May 28 16:33:54 81.65.160.59:4393 -> xxx.yyy.1.8:4899 SYN ******S*
[...]
May 28 16:38:06 81.65.160.59:3373 -> xxx.yyy.255.246:4899 SYN ******S*
May 28 16:38:06 81.65.160.59:3375 -> xxx.yyy.255.248:4899 SYN ******S*
May 28 16:38:06 81.65.160.59:3376 -> xxx.yyy.255.249:4899 SYN ******S*
May 28 16:38:06 81.65.160.59:3377 -> xxx.yyy.255.250:4899 SYN ******S*
May 28 16:38:07 81.65.160.59:3378 -> xxx.yyy.255.251:4899 SYN ******S*
May 28 16:38:07 81.65.160.59:3380 -> xxx.yyy.255.253:4899 SYN ******S*
May 28 16:38:07 81.65.160.59:3381 -> xxx.yyy.255.254:4899 SYN ******S*
May 28 16:38:07 81.65.160.59:3379 -> xxx.yyy.255.252:4899 SYN ******S*
38619

May 28 18:05:50 212.235.101.137:2902 -> xxx.yyy.1.1:901 SYN ******S*
May 28 18:05:50 212.235.101.137:2904 -> xxx.yyy.1.3:901 SYN ******S*
May 28 18:05:53 212.235.101.137:2901 -> xxx.yyy.1.0:901 SYN ******S*
May 28 18:05:53 212.235.101.137:2903 -> xxx.yyy.1.2:901 SYN ******S*
May 28 18:05:53 212.235.101.137:2905 -> xxx.yyy.1.4:901 SYN ******S*
May 28 18:05:56 212.235.101.137:3487 -> xxx.yyy.1.5:901 SYN ******S*
May 28 18:05:56 212.235.101.137:3489 -> xxx.yyy.1.7:901 SYN ******S*
May 28 18:05:56 212.235.101.137:3491 -> xxx.yyy.1.9:901 SYN ******S*
[...]
May 28 20:49:30 212.235.101.137:4037 -> xxx.yyy.254.239:901 SYN ******S*
May 28 20:49:30 212.235.101.137:4039 -> xxx.yyy.254.241:901 SYN ******S*
May 28 20:49:30 212.235.101.137:4041 -> xxx.yyy.254.243:901 SYN ******S*
May 28 20:49:30 212.235.101.137:4043 -> xxx.yyy.254.245:901 SYN ******S*
May 28 20:49:30 212.235.101.137:4074 -> xxx.yyy.254.247:901 SYN ******S*
May 28 20:49:30 212.235.101.137:4079 -> xxx.yyy.254.249:901 SYN ******S*
May 28 20:49:30 212.235.101.137:4083 -> xxx.yyy.254.253:901 SYN ******S*
May 28 20:49:30 212.235.101.137:4085 -> xxx.yyy.254.255:901 SYN ******S*
32730

May 28 02:05:56 61.132.135.234:4206 -> xxx.yyy.1.1:21 SYN ******S*
May 28 02:05:56 61.132.135.234:4205 -> xxx.yyy.1.0:21 SYN ******S*
May 28 02:05:56 61.132.135.234:4208 -> xxx.yyy.1.3:21 SYN ******S*
May 28 02:05:56 61.132.135.234:4211 -> xxx.yyy.1.5:21 SYN ******S*
May 28 02:05:56 61.132.135.234:4216 -> xxx.yyy.1.6:21 SYN ******S*
May 28 02:05:56 61.132.135.234:4223 -> xxx.yyy.1.10:21 SYN ******S*
May 28 02:05:56 61.132.135.234:4219 -> xxx.yyy.1.7:21 SYN ******S*
May 28 02:05:56 61.132.135.234:4222 -> xxx.yyy.1.9:21 SYN ******S*
[...]
May 28 02:16:48 61.132.135.234:1395 -> xxx.yyy.255.247:21 SYN ******S*
May 28 02:16:48 61.132.135.234:1394 -> xxx.yyy.255.246:21 SYN ******S*
May 28 02:16:48 61.132.135.234:1399 -> xxx.yyy.255.249:21 SYN ******S*
May 28 02:16:48 61.132.135.234:1397 -> xxx.yyy.255.248:21 SYN ******S*
May 28 02:16:48 61.132.135.234:1400 -> xxx.yyy.255.250:21 SYN ******S*
May 28 02:16:48 61.132.135.234:1402 -> xxx.yyy.255.252:21 SYN ******S*
May 28 02:16:48 61.132.135.234:1405 -> xxx.yyy.255.253:21 SYN ******S*
May 28 02:16:48 61.132.135.234:1406 -> xxx.yyy.255.254:21 SYN ******S*
27330

[...]
24506

May 28 14:14:18 80.116.61.9:4720 -> xxx.yyy.17.101:1433 SYN ******S*
May 28 14:14:18 80.116.61.9:4728 -> xxx.yyy.17.102:1433 SYN ******S*
May 28 14:14:18 80.116.61.9:4730 -> xxx.yyy.17.103:1433 SYN ******S*
May 28 14:14:18 80.116.61.9:4732 -> xxx.yyy.17.104:1433 SYN ******S*
May 28 14:14:18 80.116.61.9:4735 -> xxx.yyy.17.105:1433 SYN ******S*
May 28 14:14:18 80.116.61.9:4807 -> xxx.yyy.17.106:1433 SYN ******S*
May 28 14:14:18 80.116.61.9:4810 -> xxx.yyy.17.107:1433 SYN ******S*
May 28 14:14:16 80.116.61.9:4811 -> xxx.yyy.17.108:1433 SYN ******S*
[...]
May 28 16:55:38 80.116.61.9:1289 -> xxx.yyy.88.243:1433 SYN ******S*
May 28 16:55:41 80.116.61.9:4967 -> xxx.yyy.88.237:1433 SYN ******S*
May 28 16:55:42 80.116.61.9:1052 -> xxx.yyy.88.238:1433 SYN ******S*
May 28 16:55:42 80.116.61.9:1080 -> xxx.yyy.88.239:1433 SYN ******S*
May 28 16:55:42 80.116.61.9:1089 -> xxx.yyy.88.240:1433 SYN ******S*
May 28 16:55:42 80.116.61.9:1140 -> xxx.yyy.88.241:1433 SYN ******S*
May 28 16:55:43 80.116.61.9:1217 -> xxx.yyy.88.242:1433 SYN ******S*
May 28 16:55:43 80.116.61.9:1289 -> xxx.yyy.88.243:1433 SYN ******S*
19164

May 28 15:40:55 82.43.71.254:4312 -> xxx.yyy.1.0:1433 SYN ******S*
May 28 15:40:55 82.43.71.254:4317 -> xxx.yyy.1.1:1433 SYN ******S*
May 28 15:40:55 82.43.71.254:4326 -> xxx.yyy.1.2:1433 SYN ******S*
May 28 15:40:55 82.43.71.254:4330 -> xxx.yyy.1.3:1433 SYN ******S*
May 28 15:40:55 82.43.71.254:4334 -> xxx.yyy.1.4:1433 SYN ******S*
May 28 15:40:55 82.43.71.254:4338 -> xxx.yyy.1.5:1433 SYN ******S*
May 28 15:40:55 82.43.71.254:4361 -> xxx.yyy.1.6:1433 SYN ******S*
May 28 15:40:53 82.43.71.254:4390 -> xxx.yyy.1.7:1433 SYN ******S*
[...]
May 28 18:26:21 82.43.71.254:3146 -> xxx.yyy.73.107:1433 SYN ******S*
May 28 18:26:21 82.43.71.254:3178 -> xxx.yyy.73.108:1433 SYN ******S*
May 28 18:26:22 82.43.71.254:3317 -> xxx.yyy.73.109:1433 SYN ******S*
May 28 18:26:23 82.43.71.254:3349 -> xxx.yyy.73.111:1433 SYN ******S*
May 28 18:26:23 82.43.71.254:2964 -> xxx.yyy.73.102:1433 SYN ******S*
May 28 18:26:23 82.43.71.254:2962 -> xxx.yyy.73.101:1433 SYN ******S*
May 28 18:26:23 82.43.71.254:3357 -> xxx.yyy.73.112:1433 SYN ******S*
May 28 18:26:23 82.43.71.254:3374 -> xxx.yyy.73.113:1433 SYN ******S*
May 28 18:26:23 82.43.71.254:3381 -> xxx.yyy.73.114:1433 SYN ******S*
14164

May 28 00:00:37 218.4.203.3:58835 -> xxx.yyy.88.179:2745 SYN ******S*
May 28 00:00:37 218.4.203.3:58839 -> xxx.yyy.88.179:3127 SYN ******S*
May 28 00:00:37 218.4.203.3:58837 -> xxx.yyy.88.179:1025 SYN ******S*
May 28 00:00:37 218.4.203.3:58840 -> xxx.yyy.88.179:6129 SYN ******S*
May 28 00:00:37 218.4.203.3:58873 -> xxx.yyy.137.160:1025 SYN ******S*
May 28 00:30:28 218.4.203.3:31955 -> xxx.yyy.243.103:2745 SYN ******S*
May 28 00:30:31 218.4.203.3:31957 -> xxx.yyy.243.103:1025 SYN ******S*
May 28 00:30:31 218.4.203.3:31959 -> xxx.yyy.243.103:3127 SYN ******S*
[...]
May 28 18:15:42 218.4.203.3:46277 -> xxx.yyy.250.36:2745 SYN ******S*
May 28 18:15:43 218.4.203.3:46172 -> xxx.yyy.207.157:2745 SYN ******S*
May 28 18:15:46 218.4.203.3:46277 -> xxx.yyy.250.36:2745 SYN ******S*
May 28 18:15:47 218.4.203.3:46408 -> xxx.yyy.171.61:2745 SYN ******S*
May 28 18:15:49 218.4.203.3:46517 -> xxx.yyy.237.156:2745 SYN ******S*
May 28 18:15:50 218.4.203.3:46408 -> xxx.yyy.171.61:2745 SYN ******S*
May 28 18:15:52 218.4.203.3:46277 -> xxx.yyy.250.36:2745 SYN ******S*
May 28 18:15:53 218.4.203.3:46517 -> xxx.yyy.237.156:2745 SYN ******S*
12349

May 28 10:35:50 80.140.162.184:2302 -> xxx.yyy.153.230:1433 SYN ******S*
May 28 10:35:53 80.140.162.184:2723 -> xxx.yyy.154.16:1433 SYN ******S*
May 28 10:35:50 80.140.162.184:2733 -> xxx.yyy.154.17:1433 SYN ******S*
May 28 10:35:50 80.140.162.184:2322 -> xxx.yyy.153.232:1433 SYN ******S*
May 28 10:35:50 80.140.162.184:2743 -> xxx.yyy.154.18:1433 SYN ******S*
May 28 10:35:53 80.140.162.184:2753 -> xxx.yyy.154.19:1433 SYN ******S*
May 28 10:35:50 80.140.162.184:2332 -> xxx.yyy.153.233:1433 SYN ******S*
May 28 10:35:50 80.140.162.184:2342 -> xxx.yyy.153.234:1433 SYN ******S*
[...]
May 28 10:47:21 80.140.162.184:1171 -> xxx.yyy.191.186:1433 SYN ******S*
May 28 10:47:21 80.140.162.184:1191 -> xxx.yyy.191.188:1433 SYN ******S*
May 28 10:47:21 80.140.162.184:1211 -> xxx.yyy.191.190:1433 SYN ******S*
May 28 10:47:21 80.140.162.184:1221 -> xxx.yyy.191.191:1433 SYN ******S*
May 28 10:47:21 80.140.162.184:1231 -> xxx.yyy.191.192:1433 SYN ******S*
May 28 10:47:21 80.140.162.184:1239 -> xxx.yyy.191.193:1433 SYN ******S*
May 28 10:47:21 80.140.162.184:1250 -> xxx.yyy.191.194:1433 SYN ******S*
May 28 10:47:21 80.140.162.184:1281 -> xxx.yyy.191.197:1433 SYN ******S*
11879

May 28 00:00:22 211.217.218.39:55782 -> xxx.yyy.168.158:2745 SYN ******S*
May 28 00:00:23 211.217.218.39:55251 -> xxx.yyy.181.192:2745 SYN ******S*
May 28 00:00:23 211.217.218.39:55876 -> xxx.yyy.149.19:2745 SYN ******S*
May 28 00:00:23 211.217.218.39:55206 -> xxx.yyy.10.42:2745 SYN ******S*
May 28 00:00:23 211.217.218.39:55834 -> xxx.yyy.10.42:6129 SYN ******S*
May 28 00:00:20 211.217.218.39:55087 -> xxx.yyy.193.236:2745 SYN ******S*
May 28 00:00:22 211.217.218.39:55427 -> xxx.yyy.64.95:2745 SYN ******S*
May 28 00:00:28 211.217.218.39:55782 -> xxx.yyy.168.158:2745 SYN ******S*
[...]
May 28 04:48:14 211.217.218.39:55528 -> xxx.yyy.252.189:2745 SYN ******S*
May 28 04:48:14 211.217.218.39:55958 -> xxx.yyy.252.189:6129 SYN ******S*
May 28 04:48:15 211.217.218.39:55986 -> xxx.yyy.80.183:2745 SYN ******S*
May 28 04:48:18 211.217.218.39:55470 -> xxx.yyy.95.160:2745 SYN ******S*
May 28 04:48:18 211.217.218.39:55856 -> xxx.yyy.95.160:6129 SYN ******S*
May 28 04:48:17 211.217.218.39:55528 -> xxx.yyy.252.189:2745 SYN ******S*
May 28 04:48:17 211.217.218.39:55958 -> xxx.yyy.252.189:6129 SYN ******S*
May 28 04:48:20 211.217.218.39:55400 -> xxx.yyy.180.115:2745 SYN ******S*
May 28 04:48:21 211.217.218.39:55986 -> xxx.yyy.80.183:2745 SYN ******S*
10967

--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly@xxxxxxx phone: (319) 273-5850 fax: (319) 273-7373
_______________________________________________
Intrusions mailing list
Intrusions@xxxxxxxxxxxxxx
http://www.dshield.org/mailman/listinfo/intrusions
<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  LOGS: GIAC GCIA Version 3.5 Practical Detect James Affeld: 00094, James Affeld
Next by Date:  [LOGS] Summary of large-scale portscanning detects: 00094, Ken . Connelly
Previous by Thread:  [LOGS] Summary of large-scale portscanning detectsi: 00094, Ken . Connelly
Next by Thread:  [LOGS] Summary of large-scale portscanning detects: 00094, Ken . Connelly
Indexes:  [Date] [Thread] [Top] [All Lists]

Google Custom Search
News | FAQ | advertise