logo       
<prev   next>

[LOGS] Summary of large-scale portscanning detects: msg#00096

security.intrusions

Subject: [LOGS] Summary of large-scale portscanning detects

The following extracts show the beginning and ending of scan activity
was detected on my network. The number following each set is the total
number of probes for that source. Timestamps are GMT-0500.

May 30 03:32:35 221.2.89.99:4826 -> xxx.yyy.252.246:2745 SYN ******S*
May 30 03:32:35 221.2.89.99:4830 -> xxx.yyy.252.246:3127 SYN ******S*
May 30 03:32:35 221.2.89.99:4828 -> xxx.yyy.252.246:1025 SYN ******S*
May 30 03:32:35 221.2.89.99:4831 -> xxx.yyy.252.246:6129 SYN ******S*
May 30 03:32:35 221.2.89.99:4833 -> xxx.yyy.252.246:80 SYN ******S*
May 30 03:32:41 221.2.89.99:4833 -> xxx.yyy.252.246:80 SYN ******S*
May 30 03:32:41 221.2.89.99:4826 -> xxx.yyy.252.246:2745 SYN ******S*
May 30 03:32:41 221.2.89.99:4830 -> xxx.yyy.252.246:3127 SYN ******S*
[...]
May 30 23:59:59 221.2.89.99:4132 -> xxx.yyy.145.218:2745 SYN ******S*
May 30 23:59:59 221.2.89.99:3832 -> xxx.yyy.204.93:2745 SYN ******S*
May 31 00:00:00 221.2.89.99:4412 -> xxx.yyy.208.249:2745 SYN ******S*
May 31 00:00:00 221.2.89.99:4414 -> xxx.yyy.208.249:1025 SYN ******S*
May 31 00:00:00 221.2.89.99:4416 -> xxx.yyy.208.249:3127 SYN ******S*
May 31 00:00:00 221.2.89.99:4417 -> xxx.yyy.208.249:6129 SYN ******S*
May 31 00:00:00 221.2.89.99:3866 -> xxx.yyy.162.16:2745 SYN ******S*
May 31 00:00:00 221.2.89.99:4435 -> xxx.yyy.133.126:2745 SYN ******S*
May 31 00:00:00 221.2.89.99:4442 -> xxx.yyy.195.254:2745 SYN ******S*
141299

May 30 11:39:23 204.95.173.53:1890 -> xxx.yyy.1.1:445 SYN ******S*
May 30 11:39:23 204.95.173.53:1891 -> xxx.yyy.1.2:445 SYN ******S*
May 30 11:39:23 204.95.173.53:1892 -> xxx.yyy.1.3:445 SYN ******S*
May 30 11:39:23 204.95.173.53:1893 -> xxx.yyy.1.4:445 SYN ******S*
May 30 11:39:23 204.95.173.53:1894 -> xxx.yyy.1.5:445 SYN ******S*
May 30 11:39:24 204.95.173.53:1895 -> xxx.yyy.1.6:445 SYN ******S*
May 30 11:39:24 204.95.173.53:1896 -> xxx.yyy.1.7:445 SYN ******S*
May 30 11:39:24 204.95.173.53:1897 -> xxx.yyy.1.8:445 SYN ******S*
[...]
May 30 11:50:19 204.95.173.53:4837 -> xxx.yyy.255.250:445 SYN ******S*
May 30 11:50:19 204.95.173.53:4834 -> xxx.yyy.255.247:445 SYN ******S*
May 30 11:50:19 204.95.173.53:4838 -> xxx.yyy.255.251:445 SYN ******S*
May 30 11:50:19 204.95.173.53:4835 -> xxx.yyy.255.248:445 SYN ******S*
May 30 11:50:19 204.95.173.53:4839 -> xxx.yyy.255.252:445 SYN ******S*
May 30 11:50:19 204.95.173.53:4832 -> xxx.yyy.255.245:445 SYN ******S*
May 30 11:50:19 204.95.173.53:4836 -> xxx.yyy.255.249:445 SYN ******S*
May 30 11:50:19 204.95.173.53:4833 -> xxx.yyy.255.246:445 SYN ******S*
74346

May 30 15:17:28 80.110.49.49:38703 -> xxx.yyy.1.1:1433 SYN ******S*
May 30 15:17:28 80.110.49.49:38704 -> xxx.yyy.1.2:1433 SYN ******S*
May 30 15:17:28 80.110.49.49:38705 -> xxx.yyy.1.3:1433 SYN ******S*
May 30 15:17:28 80.110.49.49:38706 -> xxx.yyy.1.4:1433 SYN ******S*
May 30 15:17:28 80.110.49.49:38707 -> xxx.yyy.1.5:1433 SYN ******S*
May 30 15:17:28 80.110.49.49:38708 -> xxx.yyy.1.6:1433 SYN ******S*
May 30 15:17:28 80.110.49.49:38709 -> xxx.yyy.1.7:1433 SYN ******S*
May 30 15:17:28 80.110.49.49:38710 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
May 30 15:28:28 80.110.49.49:44250 -> xxx.yyy.255.247:1433 SYN ******S*
May 30 15:28:28 80.110.49.49:44244 -> xxx.yyy.255.241:1433 SYN ******S*
May 30 15:28:28 80.110.49.49:44251 -> xxx.yyy.255.248:1433 SYN ******S*
May 30 15:28:28 80.110.49.49:44245 -> xxx.yyy.255.242:1433 SYN ******S*
May 30 15:28:28 80.110.49.49:44253 -> xxx.yyy.255.250:1433 SYN ******S*
May 30 15:28:28 80.110.49.49:44254 -> xxx.yyy.255.251:1433 SYN ******S*
May 30 15:28:28 80.110.49.49:44255 -> xxx.yyy.255.252:1433 SYN ******S*
May 30 15:28:28 80.110.49.49:44256 -> xxx.yyy.255.253:1433 SYN ******S*
May 30 15:28:28 80.110.49.49:44257 -> xxx.yyy.255.254:1433 SYN ******S*
73159

May 30 03:19:14 128.255.121.182:1296 -> xxx.yyy.1.1:2400 SYN ******S*
May 30 03:19:14 128.255.121.182:1297 -> xxx.yyy.1.2:2400 SYN ******S*
May 30 03:19:16 128.255.121.182:1298 -> xxx.yyy.1.3:2400 SYN ******S*
May 30 03:19:13 128.255.121.182:1299 -> xxx.yyy.1.4:2400 SYN ******S*
May 30 03:19:16 128.255.121.182:1300 -> xxx.yyy.1.5:2400 SYN ******S*
May 30 03:19:16 128.255.121.182:1301 -> xxx.yyy.1.6:2400 SYN ******S*
May 30 03:19:16 128.255.121.182:1302 -> xxx.yyy.1.7:2400 SYN ******S*
May 30 03:19:16 128.255.121.182:1303 -> xxx.yyy.1.8:2400 SYN ******S*
[...]
May 30 03:30:09 128.255.121.182:3911 -> xxx.yyy.255.211:2400 SYN ******S*
May 30 03:30:09 128.255.121.182:3918 -> xxx.yyy.255.218:2400 SYN ******S*
May 30 03:30:09 128.255.121.182:3915 -> xxx.yyy.255.215:2400 SYN ******S*
May 30 03:30:09 128.255.121.182:3912 -> xxx.yyy.255.212:2400 SYN ******S*
May 30 03:30:10 128.255.121.182:3925 -> xxx.yyy.255.225:2400 SYN ******S*
May 30 03:30:10 128.255.121.182:3922 -> xxx.yyy.255.222:2400 SYN ******S*
May 30 03:30:10 128.255.121.182:3923 -> xxx.yyy.255.223:2400 SYN ******S*
May 30 03:30:10 128.255.121.182:3924 -> xxx.yyy.255.224:2400 SYN ******S*
May 30 03:30:10 128.255.121.182:3921 -> xxx.yyy.255.221:2400 SYN ******S*
72945

May 30 11:10:13 212.150.41.17:3837 -> xxx.yyy.1.2:445 SYN ******S*
May 30 11:10:13 212.150.41.17:3836 -> xxx.yyy.1.1:445 SYN ******S*
May 30 11:10:13 212.150.41.17:3838 -> xxx.yyy.1.3:445 SYN ******S*
May 30 11:10:10 212.150.41.17:3839 -> xxx.yyy.1.4:445 SYN ******S*
May 30 11:10:13 212.150.41.17:3841 -> xxx.yyy.1.6:445 SYN ******S*
May 30 11:10:13 212.150.41.17:3844 -> xxx.yyy.1.9:445 SYN ******S*
May 30 11:10:13 212.150.41.17:3840 -> xxx.yyy.1.5:445 SYN ******S*
May 30 11:10:13 212.150.41.17:3845 -> xxx.yyy.1.10:445 SYN ******S*
[...]
May 30 11:21:53 212.150.41.17:2692 -> xxx.yyy.255.245:445 SYN ******S*
May 30 11:21:53 212.150.41.17:2693 -> xxx.yyy.255.246:445 SYN ******S*
May 30 11:21:53 212.150.41.17:2694 -> xxx.yyy.255.247:445 SYN ******S*
May 30 11:21:53 212.150.41.17:2696 -> xxx.yyy.255.249:445 SYN ******S*
May 30 11:21:53 212.150.41.17:2697 -> xxx.yyy.255.250:445 SYN ******S*
May 30 11:21:53 212.150.41.17:2699 -> xxx.yyy.255.252:445 SYN ******S*
May 30 11:21:53 212.150.41.17:2700 -> xxx.yyy.255.253:445 SYN ******S*
May 30 11:21:53 212.150.41.17:2701 -> xxx.yyy.255.254:445 SYN ******S*
72375

May 30 10:29:05 202.159.17.98:4246 -> xxx.yyy.1.1:1433 SYN ******S*
May 30 10:29:05 202.159.17.98:4247 -> xxx.yyy.1.2:1433 SYN ******S*
May 30 10:29:05 202.159.17.98:4248 -> xxx.yyy.1.3:1433 SYN ******S*
May 30 10:29:05 202.159.17.98:4249 -> xxx.yyy.1.4:1433 SYN ******S*
May 30 10:29:05 202.159.17.98:4250 -> xxx.yyy.1.5:1433 SYN ******S*
May 30 10:29:05 202.159.17.98:4251 -> xxx.yyy.1.6:1433 SYN ******S*
May 30 10:29:02 202.159.17.98:4252 -> xxx.yyy.1.7:1433 SYN ******S*
May 30 10:29:02 202.159.17.98:4253 -> xxx.yyy.1.8:1433 SYN ******S*
[...]
May 30 10:40:45 202.159.17.98:3161 -> xxx.yyy.255.245:1433 SYN ******S*
May 30 10:40:45 202.159.17.98:3157 -> xxx.yyy.255.241:1433 SYN ******S*
May 30 10:40:45 202.159.17.98:3166 -> xxx.yyy.255.250:1433 SYN ******S*
May 30 10:40:45 202.159.17.98:3170 -> xxx.yyy.255.254:1433 SYN ******S*
May 30 10:40:45 202.159.17.98:3167 -> xxx.yyy.255.251:1433 SYN ******S*
May 30 10:40:45 202.159.17.98:3164 -> xxx.yyy.255.248:1433 SYN ******S*
May 30 10:40:45 202.159.17.98:3168 -> xxx.yyy.255.252:1433 SYN ******S*
May 30 10:40:45 202.159.17.98:3169 -> xxx.yyy.255.253:1433 SYN ******S*
May 30 10:40:45 202.159.17.98:3165 -> xxx.yyy.255.249:1433 SYN ******S*
71189

May 30 00:00:06 210.82.95.137:44263 -> xxx.yyy.207.152:2745 SYN ******S*
May 30 00:00:04 210.82.95.137:41690 -> xxx.yyy.157.253:2745 SYN ******S*
May 30 00:00:10 210.82.95.137:43817 -> xxx.yyy.237.87:1025 SYN ******S*
May 30 00:00:10 210.82.95.137:43240 -> xxx.yyy.237.87:2745 SYN ******S*
May 30 00:00:07 210.82.95.137:42491 -> xxx.yyy.66.222:2745 SYN ******S*
May 30 00:00:07 210.82.95.137:39460 -> xxx.yyy.154.86:2745 SYN ******S*
May 30 00:00:07 210.82.95.137:39657 -> xxx.yyy.154.86:1025 SYN ******S*
May 30 00:00:07 210.82.95.137:42693 -> xxx.yyy.154.86:3127 SYN ******S*
[...]
May 30 19:56:48 210.82.95.137:40372 -> xxx.yyy.87.248:3127 SYN ******S*
May 30 19:56:50 210.82.95.137:33181 -> xxx.yyy.223.187:2745 SYN ******S*
May 30 19:56:50 210.82.95.137:37526 -> xxx.yyy.223.187:1025 SYN ******S*
May 30 19:56:50 210.82.95.137:37737 -> xxx.yyy.223.187:3127 SYN ******S*
May 30 19:56:50 210.82.95.137:43570 -> xxx.yyy.188.175:2745 SYN ******S*
May 30 19:56:53 210.82.95.137:37526 -> xxx.yyy.223.187:1025 SYN ******S*
May 30 19:56:53 210.82.95.137:33181 -> xxx.yyy.223.187:2745 SYN ******S*
May 30 19:56:53 210.82.95.137:37737 -> xxx.yyy.223.187:3127 SYN ******S*
64851

May 30 17:17:17 213.180.193.68:40163 -> xxx.yyy.243.210:6577 SYN ******S*
May 30 17:17:17 213.180.193.68:40163 -> xxx.yyy.243.210:62122 SYN ******S*
May 30 17:17:17 213.180.193.68:40163 -> xxx.yyy.243.210:32050 SYN ******S*
May 30 17:17:17 213.180.193.68:40163 -> xxx.yyy.243.210:52766 SYN ******S*
May 30 17:17:17 213.180.193.68:40163 -> xxx.yyy.243.210:23919 SYN ******S*
May 30 17:17:17 213.180.193.68:40163 -> xxx.yyy.243.210:61909 SYN ******S*
May 30 17:17:17 213.180.193.68:40163 -> xxx.yyy.243.210:46259 SYN ******S*
May 30 17:17:17 213.180.193.68:40163 -> xxx.yyy.243.210:9054 SYN ******S*
[...]
May 30 17:34:57 213.180.193.68:34162 -> xxx.yyy.243.210:8081 SYN ******S*
May 30 17:34:57 213.180.193.68:55575 -> xxx.yyy.243.210:8090 SYN ******S*
May 30 17:34:57 213.180.193.68:53426 -> xxx.yyy.243.210:7033 SYN ******S*
May 30 17:34:57 213.180.193.68:36130 -> xxx.yyy.243.210:5490 SYN ******S*
May 30 17:34:57 213.180.193.68:39880 -> xxx.yyy.243.210:8085 SYN ******S*
May 30 17:34:57 213.180.193.68:48488 -> xxx.yyy.243.210:8095 SYN ******S*
May 30 17:34:57 213.180.193.68:32364 -> xxx.yyy.243.210:8100 SYN ******S*
May 30 17:34:57 213.180.193.68:40578 -> xxx.yyy.243.210:8105 SYN ******S*
May 30 17:34:57 213.180.193.68:30182 -> xxx.yyy.243.210:8110 SYN ******S*
58542

May 30 17:10:06 207.59.45.78:2376 -> xxx.yyy.1.69:1433 SYN ******S*
May 30 17:10:06 207.59.45.78:2377 -> xxx.yyy.1.70:1433 SYN ******S*
May 30 17:10:06 207.59.45.78:2378 -> xxx.yyy.1.71:1433 SYN ******S*
May 30 17:10:06 207.59.45.78:2379 -> xxx.yyy.1.72:1433 SYN ******S*
May 30 17:10:06 207.59.45.78:2380 -> xxx.yyy.1.73:1433 SYN ******S*
May 30 17:10:06 207.59.45.78:2381 -> xxx.yyy.1.74:1433 SYN ******S*
May 30 17:10:06 207.59.45.78:2382 -> xxx.yyy.1.75:1433 SYN ******S*
May 30 17:10:03 207.59.45.78:2383 -> xxx.yyy.1.76:1433 SYN ******S*
[...]
May 30 17:21:44 207.59.45.78:2855 -> xxx.yyy.255.230:1433 SYN ******S*
May 30 17:21:44 207.59.45.78:2859 -> xxx.yyy.255.234:1433 SYN ******S*
May 30 17:21:44 207.59.45.78:2856 -> xxx.yyy.255.231:1433 SYN ******S*
May 30 17:21:44 207.59.45.78:2860 -> xxx.yyy.255.235:1433 SYN ******S*
May 30 17:21:44 207.59.45.78:2857 -> xxx.yyy.255.232:1433 SYN ******S*
May 30 17:21:44 207.59.45.78:2861 -> xxx.yyy.255.236:1433 SYN ******S*
May 30 17:21:44 207.59.45.78:2858 -> xxx.yyy.255.233:1433 SYN ******S*
May 30 17:21:44 207.59.45.78:2862 -> xxx.yyy.255.237:1433 SYN ******S*
48919

May 30 03:24:17 202.97.192.32:1292 -> xxx.yyy.1.1:4899 SYN ******S*
May 30 03:24:16 202.97.192.32:1293 -> xxx.yyy.1.2:4899 SYN ******S*
May 30 03:24:15 202.97.192.32:1295 -> xxx.yyy.1.4:4899 SYN ******S*
May 30 03:24:15 202.97.192.32:1296 -> xxx.yyy.1.5:4899 SYN ******S*
May 30 03:24:15 202.97.192.32:1294 -> xxx.yyy.1.3:4899 SYN ******S*
May 30 03:24:15 202.97.192.32:1299 -> xxx.yyy.1.8:4899 SYN ******S*
May 30 03:24:15 202.97.192.32:1297 -> xxx.yyy.1.6:4899 SYN ******S*
May 30 03:24:15 202.97.192.32:1298 -> xxx.yyy.1.7:4899 SYN ******S*
[...]
May 30 03:30:09 202.97.192.32:1761 -> xxx.yyy.255.246:4899 SYN ******S*
May 30 03:30:09 202.97.192.32:1762 -> xxx.yyy.255.247:4899 SYN ******S*
May 30 03:30:09 202.97.192.32:1763 -> xxx.yyy.255.248:4899 SYN ******S*
May 30 03:30:09 202.97.192.32:1764 -> xxx.yyy.255.249:4899 SYN ******S*
May 30 03:30:09 202.97.192.32:1765 -> xxx.yyy.255.250:4899 SYN ******S*
May 30 03:30:09 202.97.192.32:1767 -> xxx.yyy.255.252:4899 SYN ******S*
May 30 03:30:09 202.97.192.32:1768 -> xxx.yyy.255.253:4899 SYN ******S*
May 30 03:30:09 202.97.192.32:1766 -> xxx.yyy.255.251:4899 SYN ******S*
May 30 03:30:09 202.97.192.32:1769 -> xxx.yyy.255.254:4899 SYN ******S*
44496

May 30 04:25:00 80.139.229.110:40385 -> xxx.yyy.1.1:2401 SYN ******S*
May 30 04:25:00 80.139.229.110:40385 -> xxx.yyy.1.3:2401 SYN ******S*
May 30 04:25:00 80.139.229.110:40385 -> xxx.yyy.1.4:2401 SYN ******S*
May 30 04:25:00 80.139.229.110:40385 -> xxx.yyy.1.5:2401 SYN ******S*
May 30 04:25:01 80.139.229.110:40385 -> xxx.yyy.1.6:2401 SYN ******S*
May 30 04:25:01 80.139.229.110:40385 -> xxx.yyy.1.8:2401 SYN ******S*
May 30 04:25:01 80.139.229.110:40385 -> xxx.yyy.1.9:2401 SYN ******S*
May 30 04:25:01 80.139.229.110:40385 -> xxx.yyy.1.10:2401 SYN ******S*
[...]
May 30 05:06:33 80.139.229.110:40385 -> xxx.yyy.255.246:2401 SYN ******S*
May 30 05:06:33 80.139.229.110:40385 -> xxx.yyy.255.247:2401 SYN ******S*
May 30 05:06:33 80.139.229.110:40385 -> xxx.yyy.255.248:2401 SYN ******S*
May 30 05:06:33 80.139.229.110:40385 -> xxx.yyy.255.249:2401 SYN ******S*
May 30 05:06:33 80.139.229.110:40385 -> xxx.yyy.255.250:2401 SYN ******S*
May 30 05:06:33 80.139.229.110:40385 -> xxx.yyy.255.251:2401 SYN ******S*
May 30 05:06:33 80.139.229.110:40385 -> xxx.yyy.255.252:2401 SYN ******S*
May 30 05:06:33 80.139.229.110:40385 -> xxx.yyy.255.253:2401 SYN ******S*
May 30 05:06:33 80.139.229.110:40385 -> xxx.yyy.255.254:2401 SYN ******S*
40483

May 30 02:11:53 150.183.249.26:33556 -> xxx.yyy.1.1:139 SYN ******S*
May 30 02:11:53 150.183.249.26:33557 -> xxx.yyy.1.2:139 SYN ******S*
May 30 02:11:53 150.183.249.26:33558 -> xxx.yyy.1.3:139 SYN ******S*
May 30 02:11:53 150.183.249.26:33559 -> xxx.yyy.1.4:139 SYN ******S*
May 30 02:11:53 150.183.249.26:33560 -> xxx.yyy.1.5:139 SYN ******S*
May 30 02:11:53 150.183.249.26:33561 -> xxx.yyy.1.6:139 SYN ******S*
May 30 02:11:53 150.183.249.26:33562 -> xxx.yyy.1.7:139 SYN ******S*
May 30 02:11:53 150.183.249.26:33563 -> xxx.yyy.1.8:139 SYN ******S*
[...]
May 30 02:15:11 150.183.249.26:42082 -> xxx.yyy.255.219:139 SYN ******S*
May 30 02:15:11 150.183.249.26:42087 -> xxx.yyy.255.224:139 SYN ******S*
May 30 02:15:11 150.183.249.26:42088 -> xxx.yyy.255.225:139 SYN ******S*
May 30 02:15:11 150.183.249.26:42089 -> xxx.yyy.255.226:139 SYN ******S*
May 30 02:15:11 150.183.249.26:42096 -> xxx.yyy.255.233:139 SYN ******S*
May 30 02:15:11 150.183.249.26:42097 -> xxx.yyy.255.234:139 SYN ******S*
May 30 02:15:11 150.183.249.26:42098 -> xxx.yyy.255.235:139 SYN ******S*
May 30 02:15:11 150.183.249.26:42099 -> xxx.yyy.255.236:139 SYN ******S*
33536

May 30 20:15:41 211.224.165.35:4639 -> xxx.yyy.128.1:4899 SYN ******S*
May 30 20:15:41 211.224.165.35:4640 -> xxx.yyy.128.2:4899 SYN ******S*
May 30 20:15:41 211.224.165.35:4641 -> xxx.yyy.128.3:4899 SYN ******S*
May 30 20:15:42 211.224.165.35:4644 -> xxx.yyy.128.4:4899 SYN ******S*
May 30 20:15:42 211.224.165.35:4645 -> xxx.yyy.128.5:4899 SYN ******S*
May 30 20:15:42 211.224.165.35:4646 -> xxx.yyy.128.6:4899 SYN ******S*
May 30 20:15:42 211.224.165.35:4649 -> xxx.yyy.128.9:4899 SYN ******S*
May 30 20:15:42 211.224.165.35:4647 -> xxx.yyy.128.7:4899 SYN ******S*
[...]
May 30 21:41:15 211.224.165.35:4615 -> xxx.yyy.254.248:4899 SYN ******S*
May 30 21:41:15 211.224.165.35:4614 -> xxx.yyy.254.247:4899 SYN ******S*
May 30 21:41:15 211.224.165.35:4618 -> xxx.yyy.254.249:4899 SYN ******S*
May 30 21:41:15 211.224.165.35:4619 -> xxx.yyy.254.250:4899 SYN ******S*
May 30 21:41:15 211.224.165.35:4620 -> xxx.yyy.254.251:4899 SYN ******S*
May 30 21:41:15 211.224.165.35:4621 -> xxx.yyy.254.252:4899 SYN ******S*
May 30 21:41:16 211.224.165.35:4622 -> xxx.yyy.254.253:4899 SYN ******S*
May 30 21:41:16 211.224.165.35:4623 -> xxx.yyy.254.254:4899 SYN ******S*
32157

[...]
27092

May 30 00:00:43 62.57.238.26:2783 -> xxx.yyy.154.237:2745 SYN ******S*
May 30 00:00:48 62.57.238.26:3425 -> xxx.yyy.154.31:2745 SYN ******S*
May 30 00:00:48 62.57.238.26:3427 -> xxx.yyy.154.31:1025 SYN ******S*
May 30 00:00:48 62.57.238.26:3429 -> xxx.yyy.154.31:3127 SYN ******S*
May 30 00:00:48 62.57.238.26:3430 -> xxx.yyy.154.31:6129 SYN ******S*
May 30 00:00:48 62.57.238.26:3432 -> xxx.yyy.154.31:80 SYN ******S*
May 30 00:00:46 62.57.238.26:3294 -> xxx.yyy.83.59:2745 SYN ******S*
May 30 00:00:46 62.57.238.26:3296 -> xxx.yyy.83.59:1025 SYN ******S*
[...]
May 30 21:35:16 62.57.238.26:4739 -> xxx.yyy.159.9:1025 SYN ******S*
May 30 21:35:16 62.57.238.26:4741 -> xxx.yyy.159.9:3127 SYN ******S*
May 30 21:35:16 62.57.238.26:4742 -> xxx.yyy.159.9:6129 SYN ******S*
May 30 21:35:16 62.57.238.26:4744 -> xxx.yyy.159.9:80 SYN ******S*
May 30 21:35:22 62.57.238.26:4744 -> xxx.yyy.159.9:80 SYN ******S*
May 30 21:35:22 62.57.238.26:4742 -> xxx.yyy.159.9:6129 SYN ******S*
May 30 21:35:22 62.57.238.26:4741 -> xxx.yyy.159.9:3127 SYN ******S*
May 30 21:35:22 62.57.238.26:4739 -> xxx.yyy.159.9:1025 SYN ******S*
May 30 21:35:22 62.57.238.26:4736 -> xxx.yyy.159.9:2745 SYN ******S*
18861

May 30 00:00:21 66.147.204.142:1803 -> xxx.yyy.237.114:139 SYN ******S*
May 30 00:00:21 66.147.204.142:1834 -> xxx.yyy.183.182:139 SYN ******S*
May 30 00:00:22 66.147.204.142:2109 -> xxx.yyy.183.182:445 SYN ******S*
May 30 00:00:21 66.147.204.142:1862 -> xxx.yyy.161.102:139 SYN ******S*
May 30 00:00:22 66.147.204.142:2134 -> xxx.yyy.161.102:445 SYN ******S*
May 30 00:00:21 66.147.204.142:1879 -> xxx.yyy.64.16:139 SYN ******S*
May 30 00:00:22 66.147.204.142:2150 -> xxx.yyy.64.16:445 SYN ******S*
May 30 00:00:21 66.147.204.142:1882 -> xxx.yyy.205.0:139 SYN ******S*
[...]
May 30 23:58:35 66.147.204.142:4430 -> xxx.yyy.178.132:445 SYN ******S*
May 30 23:58:35 66.147.204.142:4178 -> xxx.yyy.92.86:139 SYN ******S*
May 30 23:58:35 66.147.204.142:4489 -> xxx.yyy.92.86:445 SYN ******S*
May 30 23:59:03 66.147.204.142:2984 -> xxx.yyy.227.47:139 SYN ******S*
May 30 23:59:04 66.147.204.142:3303 -> xxx.yyy.227.47:445 SYN ******S*
May 30 23:59:04 66.147.204.142:3060 -> xxx.yyy.243.104:139 SYN ******S*
May 30 23:59:04 66.147.204.142:3379 -> xxx.yyy.243.104:445 SYN ******S*
May 30 23:59:04 66.147.204.142:3076 -> xxx.yyy.210.246:139 SYN ******S*
May 30 23:59:04 66.147.204.142:3400 -> xxx.yyy.210.246:445 SYN ******S*
17147

May 30 06:13:57 211.194.238.184:4138 -> xxx.yyy.1.1:4899 SYN ******S*
May 30 06:13:58 211.194.238.184:4139 -> xxx.yyy.1.2:4899 SYN ******S*
May 30 06:13:58 211.194.238.184:4140 -> xxx.yyy.1.3:4899 SYN ******S*
May 30 06:13:58 211.194.238.184:4143 -> xxx.yyy.1.4:4899 SYN ******S*
May 30 06:13:58 211.194.238.184:4144 -> xxx.yyy.1.5:4899 SYN ******S*
May 30 06:13:58 211.194.238.184:4145 -> xxx.yyy.1.6:4899 SYN ******S*
May 30 06:13:58 211.194.238.184:4146 -> xxx.yyy.1.7:4899 SYN ******S*
May 30 06:13:59 211.194.238.184:4147 -> xxx.yyy.1.8:4899 SYN ******S*
[...]
May 30 07:31:50 211.194.238.184:4752 -> xxx.yyy.111.246:4899 SYN ******S*
May 30 07:31:50 211.194.238.184:4755 -> xxx.yyy.111.247:4899 SYN ******S*
May 30 07:31:50 211.194.238.184:4756 -> xxx.yyy.111.248:4899 SYN ******S*
May 30 07:31:50 211.194.238.184:4757 -> xxx.yyy.111.249:4899 SYN ******S*
May 30 07:31:50 211.194.238.184:4758 -> xxx.yyy.111.250:4899 SYN ******S*
May 30 07:31:51 211.194.238.184:4759 -> xxx.yyy.111.251:4899 SYN ******S*
May 30 07:31:51 211.194.238.184:4760 -> xxx.yyy.111.252:4899 SYN ******S*
May 30 07:31:51 211.194.238.184:4763 -> xxx.yyy.111.253:4899 SYN ******S*
May 30 07:31:51 211.194.238.184:4764 -> xxx.yyy.111.254:4899 SYN ******S*
12534

May 30 00:00:07 219.238.170.136:13640 -> xxx.yyy.91.24:2745 SYN ******S*
May 30 00:00:07 219.238.170.136:14063 -> xxx.yyy.91.24:1025 SYN ******S*
May 30 00:00:07 219.238.170.136:12423 -> xxx.yyy.91.24:3127 SYN ******S*
May 30 00:00:07 219.238.170.136:14050 -> xxx.yyy.91.24:6129 SYN ******S*
May 30 00:00:07 219.238.170.136:14113 -> xxx.yyy.197.4:6129 SYN ******S*
May 30 00:00:07 219.238.170.136:12893 -> xxx.yyy.197.4:2745 SYN ******S*
May 30 00:00:07 219.238.170.136:12335 -> xxx.yyy.197.4:3127 SYN ******S*
May 30 00:00:07 219.238.170.136:12338 -> xxx.yyy.197.4:80 SYN ******S*
[...]
May 30 03:17:52 219.238.170.136:14861 -> xxx.yyy.174.103:1025 SYN ******S*
May 30 03:17:52 219.238.170.136:15122 -> xxx.yyy.174.103:3127 SYN ******S*
May 30 03:17:51 219.238.170.136:12481 -> xxx.yyy.92.84:2745 SYN ******S*
May 30 03:17:54 219.238.170.136:12481 -> xxx.yyy.92.84:2745 SYN ******S*
May 30 03:17:58 219.238.170.136:14861 -> xxx.yyy.174.103:1025 SYN ******S*
May 30 03:17:58 219.238.170.136:15122 -> xxx.yyy.174.103:3127 SYN ******S*
May 30 03:17:58 219.238.170.136:15047 -> xxx.yyy.174.103:2745 SYN ******S*
May 30 03:18:00 219.238.170.136:12481 -> xxx.yyy.92.84:2745 SYN ******S*
10484

May 30 04:12:07 82.44.146.24:3196 -> xxx.yyy.10.1:1433 SYN ******S*
May 30 04:12:08 82.44.146.24:3197 -> xxx.yyy.10.2:1433 SYN ******S*
May 30 04:12:08 82.44.146.24:3199 -> xxx.yyy.10.3:1433 SYN ******S*
May 30 04:12:08 82.44.146.24:3201 -> xxx.yyy.10.4:1433 SYN ******S*
May 30 04:12:08 82.44.146.24:3205 -> xxx.yyy.10.5:1433 SYN ******S*
May 30 04:12:08 82.44.146.24:3208 -> xxx.yyy.10.6:1433 SYN ******S*
May 30 04:12:08 82.44.146.24:3209 -> xxx.yyy.10.7:1433 SYN ******S*
May 30 04:12:08 82.44.146.24:3210 -> xxx.yyy.10.8:1433 SYN ******S*
[...]
May 30 05:03:25 82.44.146.24:3923 -> xxx.yyy.32.243:1433 SYN ******S*
May 30 05:03:25 82.44.146.24:3924 -> xxx.yyy.32.244:1433 SYN ******S*
May 30 05:03:25 82.44.146.24:3925 -> xxx.yyy.32.245:1433 SYN ******S*
May 30 05:03:25 82.44.146.24:3926 -> xxx.yyy.32.246:1433 SYN ******S*
May 30 05:03:25 82.44.146.24:3927 -> xxx.yyy.32.247:1433 SYN ******S*
May 30 05:03:25 82.44.146.24:3928 -> xxx.yyy.32.248:1433 SYN ******S*
May 30 05:03:26 82.44.146.24:3929 -> xxx.yyy.32.249:1433 SYN ******S*
May 30 05:03:26 82.44.146.24:3930 -> xxx.yyy.32.250:1433 SYN ******S*
May 30 05:03:26 82.44.146.24:3931 -> xxx.yyy.32.251:1433 SYN ******S*
7408

May 30 00:00:05 61.235.136.251:41424 -> xxx.yyy.150.42:2745 SYN ******S*
May 30 00:00:05 61.235.136.251:41429 -> xxx.yyy.150.42:1025 SYN ******S*
May 30 00:00:05 61.235.136.251:41032 -> xxx.yyy.184.47:3127 SYN ******S*
May 30 00:00:06 61.235.136.251:41042 -> xxx.yyy.184.47:80 SYN ******S*
May 30 00:00:06 61.235.136.251:41064 -> xxx.yyy.208.142:2745 SYN ******S*
May 30 00:00:06 61.235.136.251:41078 -> xxx.yyy.208.142:6129 SYN ******S*
May 30 00:00:06 61.235.136.251:15595 -> xxx.yyy.208.142:3127 SYN ******S*
May 30 00:00:06 61.235.136.251:23814 -> xxx.yyy.208.142:80 SYN ******S*
[...]
May 30 01:50:05 61.235.136.251:9827 -> xxx.yyy.79.244:80 SYN ******S*
May 30 01:50:06 61.235.136.251:9920 -> xxx.yyy.168.107:6129 SYN ******S*
May 30 01:50:07 61.235.136.251:10425 -> xxx.yyy.158.177:2745 SYN ******S*
May 30 01:50:12 61.235.136.251:10848 -> xxx.yyy.230.74:2745 SYN ******S*
May 30 01:50:12 61.235.136.251:10849 -> xxx.yyy.230.74:1025 SYN ******S*
May 30 01:50:12 61.235.136.251:10850 -> xxx.yyy.230.74:3127 SYN ******S*
May 30 01:50:13 61.235.136.251:10425 -> xxx.yyy.158.177:2745 SYN ******S*
May 30 01:50:13 61.235.136.251:10428 -> xxx.yyy.158.177:6129 SYN ******S*
May 30 01:50:15 61.235.136.251:11001 -> xxx.yyy.15.103:2745 SYN ******S*
7103

May 30 00:00:03 219.151.173.54:4273 -> xxx.yyy.233.114:1025 SYN ******S*
May 30 00:00:03 219.151.173.54:4271 -> xxx.yyy.233.114:2745 SYN ******S*
May 30 00:00:04 219.151.173.54:4325 -> xxx.yyy.132.58:2745 SYN ******S*
May 30 00:00:04 219.151.173.54:4327 -> xxx.yyy.132.58:1025 SYN ******S*
May 30 00:00:04 219.151.173.54:4329 -> xxx.yyy.132.58:3127 SYN ******S*
May 30 00:00:06 219.151.173.54:4433 -> xxx.yyy.137.62:2745 SYN ******S*
May 30 00:00:09 219.151.173.54:4273 -> xxx.yyy.233.114:1025 SYN ******S*
May 30 00:00:10 219.151.173.54:4329 -> xxx.yyy.132.58:3127 SYN ******S*
[...]
May 30 02:30:39 219.151.173.54:4820 -> xxx.yyy.240.248:6129 SYN ******S*
May 30 02:30:39 219.151.173.54:4813 -> xxx.yyy.240.248:2745 SYN ******S*
May 30 02:30:39 219.151.173.54:4818 -> xxx.yyy.240.248:3127 SYN ******S*
May 30 02:30:39 219.151.173.54:4944 -> xxx.yyy.107.130:2745 SYN ******S*
May 30 02:30:39 219.151.173.54:4951 -> xxx.yyy.107.130:80 SYN ******S*
May 30 02:30:40 219.151.173.54:4950 -> xxx.yyy.107.130:139 SYN ******S*
May 30 02:30:40 219.151.173.54:4946 -> xxx.yyy.107.130:1025 SYN ******S*
May 30 02:30:40 219.151.173.54:3045 -> xxx.yyy.226.183:1025 SYN ******S*
5165

May 30 07:27:50 212.187.58.40:1336 -> xxx.yyy.1.21:80 SYN ******S*
May 30 07:27:50 212.187.58.40:1352 -> xxx.yyy.1.36:80 SYN ******S*
May 30 07:27:50 212.187.58.40:1355 -> xxx.yyy.1.38:80 SYN ******S*
May 30 07:27:53 212.187.58.40:1356 -> xxx.yyy.1.39:80 SYN ******S*
May 30 07:27:53 212.187.58.40:1360 -> xxx.yyy.1.43:80 SYN ******S*
May 30 07:27:50 212.187.58.40:1370 -> xxx.yyy.1.53:80 SYN ******S*
May 30 07:27:50 212.187.58.40:1407 -> xxx.yyy.1.90:80 SYN ******S*
May 30 07:27:50 212.187.58.40:1455 -> xxx.yyy.1.138:80 SYN ******S*
[...]
May 30 07:32:12 212.187.58.40:3255 -> xxx.yyy.255.216:80 SYN ******S*
May 30 07:32:12 212.187.58.40:3256 -> xxx.yyy.255.217:80 SYN ******S*
May 30 07:32:12 212.187.58.40:3257 -> xxx.yyy.255.218:80 SYN ******S*
May 30 07:32:12 212.187.58.40:3258 -> xxx.yyy.255.219:80 SYN ******S*
May 30 07:32:12 212.187.58.40:3259 -> xxx.yyy.255.220:80 SYN ******S*
May 30 07:32:12 212.187.58.40:3261 -> xxx.yyy.255.222:80 SYN ******S*
May 30 07:32:12 212.187.58.40:3262 -> xxx.yyy.255.223:80 SYN ******S*
May 30 07:32:12 212.187.58.40:3263 -> xxx.yyy.255.224:80 SYN ******S*
May 30 07:32:12 212.187.58.40:3264 -> xxx.yyy.255.225:80 SYN ******S*
4894

May 30 00:00:17 61.240.108.130:4070 -> xxx.yyy.134.8:2745 SYN ******S*
May 30 00:00:17 61.240.108.130:4072 -> xxx.yyy.134.8:1025 SYN ******S*
May 30 00:00:17 61.240.108.130:4074 -> xxx.yyy.134.8:3127 SYN ******S*
May 30 00:00:17 61.240.108.130:4075 -> xxx.yyy.134.8:6129 SYN ******S*
May 30 00:00:17 61.240.108.130:4077 -> xxx.yyy.134.8:80 SYN ******S*
May 30 00:00:23 61.240.108.130:4075 -> xxx.yyy.134.8:6129 SYN ******S*
May 30 00:00:23 61.240.108.130:4070 -> xxx.yyy.134.8:2745 SYN ******S*
May 30 00:00:23 61.240.108.130:4074 -> xxx.yyy.134.8:3127 SYN ******S*
[...]
May 30 06:40:21 61.240.108.130:3082 -> xxx.yyy.177.183:1025 SYN ******S*
May 30 06:40:22 61.240.108.130:3090 -> xxx.yyy.177.183:3127 SYN ******S*
May 30 06:40:22 61.240.108.130:3098 -> xxx.yyy.177.183:6129 SYN ******S*
May 30 06:40:27 61.240.108.130:3077 -> xxx.yyy.177.183:2745 SYN ******S*
May 30 06:40:27 61.240.108.130:3082 -> xxx.yyy.177.183:1025 SYN ******S*
May 30 06:40:28 61.240.108.130:3090 -> xxx.yyy.177.183:3127 SYN ******S*
May 30 06:40:28 61.240.108.130:3098 -> xxx.yyy.177.183:6129 SYN ******S*
May 30 06:40:29 61.240.108.130:3108 -> xxx.yyy.177.183:80 SYN ******S*
3759

May 30 06:05:28 69.141.211.79:61358 -> xxx.yyy.237.223:2745 SYN ******S*
May 30 06:05:25 69.141.211.79:61360 -> xxx.yyy.237.223:1025 SYN ******S*
May 30 06:05:28 69.141.211.79:61362 -> xxx.yyy.237.223:3127 SYN ******S*
May 30 06:05:25 69.141.211.79:61363 -> xxx.yyy.237.223:6129 SYN ******S*
May 30 06:05:28 69.141.211.79:61933 -> xxx.yyy.237.223:80 SYN ******S*
May 30 06:05:31 69.141.211.79:62240 -> xxx.yyy.237.223:80 SYN ******S*
May 30 06:05:35 69.141.211.79:62924 -> xxx.yyy.212.127:2745 SYN ******S*
May 30 06:05:35 69.141.211.79:62951 -> xxx.yyy.212.127:1025 SYN ******S*
[...]
May 30 22:00:43 69.141.211.79:62503 -> xxx.yyy.249.218:3127 SYN ******S*
May 30 22:00:43 69.141.211.79:62936 -> xxx.yyy.249.218:6129 SYN ******S*
May 30 22:00:43 69.141.211.79:62938 -> xxx.yyy.249.218:80 SYN ******S*
May 30 22:00:45 69.141.211.79:63286 -> xxx.yyy.249.218:2745 SYN ******S*
May 30 22:00:45 69.141.211.79:63295 -> xxx.yyy.249.218:3127 SYN ******S*
May 30 22:00:46 69.141.211.79:63439 -> xxx.yyy.249.218:6129 SYN ******S*
May 30 22:00:49 69.141.211.79:62938 -> xxx.yyy.249.218:80 SYN ******S*
May 30 22:00:49 69.141.211.79:63904 -> xxx.yyy.249.218:1025 SYN ******S*
2719

May 30 23:57:10 217.31.173.19:38280 -> xxx.yyy.1.4:6112 SYN ******S*
May 30 23:57:10 217.31.173.19:38298 -> xxx.yyy.1.22:6112 SYN ******S*
May 30 23:57:10 217.31.173.19:38330 -> xxx.yyy.1.54:6112 SYN ******S*
May 30 23:57:10 217.31.173.19:38375 -> xxx.yyy.1.99:6112 SYN ******S*
May 30 23:57:10 217.31.173.19:38390 -> xxx.yyy.1.114:6112 SYN ******S*
May 30 23:57:11 217.31.173.19:38408 -> xxx.yyy.1.132:6112 SYN ******S*
May 30 23:57:11 217.31.173.19:38421 -> xxx.yyy.1.145:6112 SYN ******S*
May 30 23:57:11 217.31.173.19:38435 -> xxx.yyy.1.159:6112 SYN ******S*
[...]
May 30 23:59:57 217.31.173.19:37823 -> xxx.yyy.220.160:6112 SYN ******S*
May 30 23:59:57 217.31.173.19:37824 -> xxx.yyy.220.161:6112 SYN ******S*
May 30 23:59:57 217.31.173.19:37825 -> xxx.yyy.220.162:6112 SYN ******S*
May 30 23:59:57 217.31.173.19:37826 -> xxx.yyy.220.163:6112 SYN ******S*
May 30 23:59:58 217.31.173.19:37828 -> xxx.yyy.220.165:6112 SYN ******S*
May 30 23:59:58 217.31.173.19:37832 -> xxx.yyy.220.169:6112 SYN ******S*
May 30 23:59:58 217.31.173.19:37835 -> xxx.yyy.220.172:6112 SYN ******S*
May 30 23:59:58 217.31.173.19:37838 -> xxx.yyy.220.175:6112 SYN ******S*
1901

May 30 13:37:06 217.227.19.69:4602 -> xxx.yyy.1.17:6129 SYN ******S*
May 30 13:37:06 217.227.19.69:4582 -> xxx.yyy.1.47:6129 SYN ******S*
May 30 13:37:06 217.227.19.69:4602 -> xxx.yyy.1.67:6129 SYN ******S*
May 30 13:37:06 217.227.19.69:4582 -> xxx.yyy.1.97:6129 SYN ******S*
May 30 13:37:06 217.227.19.69:4603 -> xxx.yyy.1.118:6129 SYN ******S*
May 30 13:37:06 217.227.19.69:4628 -> xxx.yyy.1.143:6129 SYN ******S*
May 30 13:37:06 217.227.19.69:4603 -> xxx.yyy.1.168:6129 SYN ******S*
May 30 13:37:06 217.227.19.69:4582 -> xxx.yyy.1.197:6129 SYN ******S*
[...]
May 30 13:37:20 217.227.19.69:4618 -> xxx.yyy.255.13:6129 SYN ******S*
May 30 13:37:20 217.227.19.69:4598 -> xxx.yyy.255.43:6129 SYN ******S*
May 30 13:37:20 217.227.19.69:4628 -> xxx.yyy.255.73:6129 SYN ******S*
May 30 13:37:20 217.227.19.69:4607 -> xxx.yyy.255.102:6129 SYN ******S*
May 30 13:37:20 217.227.19.69:4628 -> xxx.yyy.255.123:6129 SYN ******S*
May 30 13:37:20 217.227.19.69:4604 -> xxx.yyy.255.149:6129 SYN ******S*
May 30 13:37:20 217.227.19.69:4628 -> xxx.yyy.255.173:6129 SYN ******S*
May 30 13:37:20 217.227.19.69:4588 -> xxx.yyy.255.183:6129 SYN ******S*
May 30 13:37:20 217.227.19.69:4588 -> xxx.yyy.255.233:6129 SYN ******S*
1900

--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa Cedar Falls, IA 50614-0121
email: Ken.Connelly@xxxxxxx phone: (319) 273-5850 fax: (319) 273-7373
_______________________________________________
Intrusions mailing list
Intrusions@xxxxxxxxxxxxxx
http://www.dshield.org/mailman/listinfo/intrusions
<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  [LOGS] Summary of large-scale portscanning detects: 00096, Ken . Connelly
Previous by Thread:  [LOGS] Summary of large-scale portscanning detectsi: 00096, Ken . Connelly
Next by Thread:  LOGS: GIAC GCIA Version 3.4 Practical Detect- David Chance (2nd Attempt): 00096, skycopp-mail8531
Indexes:  [Date] [Thread] [Top] [All Lists]

Google Custom Search
News | FAQ | advertise