|
常時接続環境には招かれざるお客さんがいっぱいやってきます。以下にはウチの防火壁に激突して成仏した方々の残した痕跡の一部が含まれています。なにかの参考になるでしょうか？ しかし、私は常時接続といっても基本的にドメインを公開してはいませんし、アドレスはグローバルですが、コロコロ変わります。 クラッカーの手口としてはまずポートスキャンして弱いサイトをチェックしてから改めて攻撃、というのがポピュラーだと聞いたことがありますが、そうであればウチなんかは仮にリストに入っても次に来るまでに引っ越してれば安全ともいえますが（ダイアルアップが比較的安全なのは単にこの理由だけです）、リストに入らなくても引越し先でまたスキャンされたりして、結局おんなじヤツに何回もスキャンされてるんでしょうかね？まったくうっとーしーです。 さて、以下のログですが、いちおうお客さんのアドレスは隠してあります。私の勘違いやただ単に乗っ取られてるだけのおマヌケさんもいるでしょうから.....（しかし明日はわが身）。 ご注意： 以下は単に外部から内部サービスへのアクセス（TCPはSYNパケットのみ）を記録したものの一部です。ただし、全てが攻撃（ポートスキャンも「攻撃」といえます）というわけではではありません。たとえば 113 （認証サービス）へのアクセスなどはこちらからの先立つなんらかのアクセスに対応して飛んでくるものだったり...。 以下は１日１回自動更新します。 WEB鯖向け極悪パケットは別で特別に採取しはじめましたので、このページでは公開しないようにしました(2002.03.01)。 Oct 24 00:03:17 PROTO=17 X.X.X.X:10841 X.X.X.X:33436 Oct 24 00:03:21 PROTO=17 X.X.X.X:10841 X.X.X.X:33436 Oct 24 00:03:25 PROTO=17 X.X.X.X:10841 X.X.X.X:33436 Oct 24 00:03:29 PROTO=17 X.X.X.X:10841 X.X.X.X:33436 Oct 24 00:03:32 PROTO=17 X.X.X.X:10841 X.X.X.X:33436 Oct 24 00:03:36 PROTO=17 X.X.X.X:10841 X.X.X.X:33436 Oct 24 00:03:40 PROTO=17 X.X.X.X:10841 X.X.X.X:33436 Oct 24 00:03:44 PROTO=17 X.X.X.X:10841 X.X.X.X:33436 Oct 24 00:03:48 PROTO=17 X.X.X.X:10841 X.X.X.X:33436 Oct 24 00:03:52 PROTO=17 X.X.X.X:10841 X.X.X.X:33436 Oct 24 00:03:56 PROTO=17 X.X.X.X:10841 X.X.X.X:33436 Oct 24 00:04:00 PROTO=17 X.X.X.X:10841 X.X.X.X:33436 Oct 24 00:04:04 PROTO=17 X.X.X.X:11733 X.X.X.X:33436 Oct 24 00:04:15 PROTO=17 X.X.X.X:11733 X.X.X.X:33436 Oct 24 00:04:17 PROTO=17 X.X.X.X:11336 X.X.X.X:33436 Oct 24 00:04:21 PROTO=17 X.X.X.X:11336 X.X.X.X:33436 Oct 24 00:04:24 PROTO=17 X.X.X.X:11733 X.X.X.X:33436 Oct 24 00:04:25 PROTO=17 X.X.X.X:11336 X.X.X.X:33436 Oct 24 00:04:28 PROTO=17 X.X.X.X:11336 X.X.X.X:33436 Oct 24 00:04:32 PROTO=17 X.X.X.X:11336 X.X.X.X:33436 Oct 24 00:04:33 PROTO=17 X.X.X.X:11733 X.X.X.X:33436 Oct 24 00:04:36 PROTO=17 X.X.X.X:11336 X.X.X.X:33436 Oct 24 00:04:42 PROTO=17 X.X.X.X:11733 X.X.X.X:33436 Oct 24 00:04:44 PROTO=17 X.X.X.X:11336 X.X.X.X:33436 Oct 24 00:04:48 PROTO=17 X.X.X.X:11336 X.X.X.X:33436 Oct 24 00:04:51 PROTO=17 X.X.X.X:11336 X.X.X.X:33436 Oct 24 00:04:55 PROTO=17 X.X.X.X:11336 X.X.X.X:33436 Oct 24 00:04:58 PROTO=17 X.X.X.X:11336 X.X.X.X:33436 Oct 24 00:05:02 PROTO=17 X.X.X.X:10613 X.X.X.X:33436 Oct 24 00:05:11 PROTO=17 X.X.X.X:10613 X.X.X.X:33436 Oct 24 00:05:21 PROTO=17 X.X.X.X:11265 X.X.X.X:33436 Oct 24 00:05:25 PROTO=17 X.X.X.X:11265 X.X.X.X:33436 Oct 24 00:05:29 PROTO=17 X.X.X.X:11265 X.X.X.X:33436 Oct 24 00:05:29 PROTO=17 X.X.X.X:10613 X.X.X.X:33436 Oct 24 00:05:33 PROTO=17 X.X.X.X:11265 X.X.X.X:33436 Oct 24 00:05:37 PROTO=17 X.X.X.X:11265 X.X.X.X:33436 Oct 24 00:05:38 PROTO=17 X.X.X.X:10613 X.X.X.X:33436 Oct 24 00:05:41 PROTO=17 X.X.X.X:11265 X.X.X.X:33436 Oct 24 00:05:45 PROTO=17 X.X.X.X:11265 X.X.X.X:33436 Oct 24 00:05:49 PROTO=17 X.X.X.X:11265 X.X.X.X:33436 Oct 24 00:05:52 PROTO=17 X.X.X.X:11265 X.X.X.X:33436 Oct 24 00:05:56 PROTO=17 X.X.X.X:11265 X.X.X.X:33436 Oct 24 00:05:59 PROTO=17 X.X.X.X:11265 X.X.X.X:33436 Oct 24 00:06:03 PROTO=17 X.X.X.X:10213 X.X.X.X:33436 Oct 24 00:06:12 PROTO=17 X.X.X.X:10213 X.X.X.X:33436 Oct 24 00:06:18 PROTO=17 X.X.X.X:10789 X.X.X.X:33436 Oct 24 00:06:21 PROTO=17 X.X.X.X:10213 X.X.X.X:33436 Oct 24 00:06:22 PROTO=17 X.X.X.X:10789 X.X.X.X:33436 Oct 24 00:06:26 PROTO=17 X.X.X.X:10789 X.X.X.X:33436 Oct 24 00:06:30 PROTO=17 X.X.X.X:10789 X.X.X.X:33436 Oct 24 00:06:30 PROTO=17 X.X.X.X:10213 X.X.X.X:33436 Oct 24 00:06:34 PROTO=17 X.X.X.X:10789 X.X.X.X:33436 Oct 24 00:06:38 PROTO=17 X.X.X.X:10789 X.X.X.X:33436 Oct 24 00:06:39 PROTO=17 X.X.X.X:10213 X.X.X.X:33436 Oct 24 00:06:42 PROTO=17 X.X.X.X:10789 X.X.X.X:33436 Oct 24 00:06:43 PROTO=6 X.X.X.X:3124 X.X.X.X:1023 Oct 24 00:06:45 PROTO=6 X.X.X.X:4624 X.X.X.X:9898 Oct 24 00:06:46 PROTO=17 X.X.X.X:10789 X.X.X.X:33436 Oct 24 00:06:49 PROTO=17 X.X.X.X:10789 X.X.X.X:33436 Oct 24 00:06:52 PROTO=17 X.X.X.X:10789 X.X.X.X:33436 Oct 24 00:06:56 PROTO=17 X.X.X.X:10789 X.X.X.X:33436 Oct 24 00:07:00 PROTO=17 X.X.X.X:10789 X.X.X.X:33436 Oct 24 00:07:21 PROTO=17 X.X.X.X:11557 X.X.X.X:33436 Oct 24 00:07:25 PROTO=17 X.X.X.X:11557 X.X.X.X:33436 Oct 24 00:07:29 PROTO=17 X.X.X.X:11557 X.X.X.X:33436 Oct 24 00:07:33 PROTO=17 X.X.X.X:11557 X.X.X.X:33436 Oct 24 00:07:37 PROTO=17 X.X.X.X:11557 X.X.X.X:33436 Oct 24 00:07:41 PROTO=17 X.X.X.X:11557 X.X.X.X:33436 Oct 24 00:07:45 PROTO=17 X.X.X.X:11557 X.X.X.X:33436 Oct 24 00:07:49 PROTO=17 X.X.X.X:11557 X.X.X.X:33436 Oct 24 00:07:53 PROTO=17 X.X.X.X:11557 X.X.X.X:33436 Oct 24 00:07:57 PROTO=17 X.X.X.X:11557 X.X.X.X:33436 Oct 24 00:08:00 PROTO=17 X.X.X.X:11557 X.X.X.X:33436 Oct 24 00:08:04 PROTO=17 X.X.X.X:11176 X.X.X.X:33436 Oct 24 00:08:13 PROTO=17 X.X.X.X:11176 X.X.X.X:33436 Oct 24 00:08:22 PROTO=17 X.X.X.X:11176 X.X.X.X:33436 Oct 24 00:08:27 PROTO=17 X.X.X.X:12484 X.X.X.X:33436 Oct 24 00:08:31 PROTO=17 X.X.X.X:11176 X.X.X.X:33436 Oct 24 00:08:40 PROTO=17 X.X.X.X:11176 X.X.X.X:33436 Oct 24 00:08:41 PROTO=17 X.X.X.X:12484 X.X.X.X:33436 Oct 24 00:08:55 PROTO=17 X.X.X.X:12484 X.X.X.X:33436 Oct 24 00:09:09 PROTO=17 X.X.X.X:12484 X.X.X.X:33436 Oct 24 00:09:23 PROTO=17 X.X.X.X:12484 X.X.X.X:33436 Oct 24 00:09:27 PROTO=17 X.X.X.X:11041 X.X.X.X:33436 Oct 24 00:09:31 PROTO=17 X.X.X.X:11041 X.X.X.X:33436 Oct 24 00:09:35 PROTO=17 X.X.X.X:11041 X.X.X.X:33436 Oct 24 00:09:38 PROTO=17 X.X.X.X:11041 X.X.X.X:33436 Oct 24 00:09:41 PROTO=17 X.X.X.X:11041 X.X.X.X:33436 Oct 24 00:09:45 PROTO=17 X.X.X.X:11041 X.X.X.X:33436 Oct 24 00:09:49 PROTO=17 X.X.X.X:11041 X.X.X.X:33436 Oct 24 00:09:53 PROTO=17 X.X.X.X:11041 X.X.X.X:33436 Oct 24 00:09:57 PROTO=17 X.X.X.X:11041 X.X.X.X:33436 Oct 24 00:10:01 PROTO=17 X.X.X.X:11041 X.X.X.X:33436 Oct 24 00:10:05 PROTO=17 X.X.X.X:11041 X.X.X.X:33436 Oct 24 00:10:09 PROTO=17 X.X.X.X:11041 X.X.X.X:33436 Oct 24 00:10:12 PROTO=17 X.X.X.X:10749 X.X.X.X:33436 Oct 24 00:10:17 PROTO=17 X.X.X.X:11382 X.X.X.X:33436 Oct 24 00:10:21 PROTO=17 X.X.X.X:10749 X.X.X.X:33436 Oct 24 00:10:21 PROTO=17 X.X.X.X:11382 X.X.X.X:33436 Oct 24 00:10:25 PROTO=17 X.X.X.X:11382 X.X.X.X:33436 Oct 24 00:10:29 PROTO=17 X.X.X.X:11382 X.X.X.X:33436 Oct 24 00:10:30 PROTO=17 X.X.X.X:10749 X.X.X.X:33436 Oct 24 00:10:33 PROTO=17 X.X.X.X:11382 X.X.X.X:33436 Oct 24 00:10:37 PROTO=17 X.X.X.X:11382 X.X.X.X:33436 Oct 24 00:10:39 PROTO=17 X.X.X.X:10749 X.X.X.X:33436 Oct 24 00:10:41 PROTO=17 X.X.X.X:11382 X.X.X.X:33436 Oct 24 00:10:45 PROTO=17 X.X.X.X:11382 X.X.X.X:33436 Oct 24 00:10:48 PROTO=17 X.X.X.X:10749 X.X.X.X:33436 Oct 24 00:10:49 PROTO=17 X.X.X.X:11382 X.X.X.X:33436 Oct 24 00:10:52 PROTO=17 X.X.X.X:11382 X.X.X.X:33436 Oct 24 00:10:56 PROTO=17 X.X.X.X:11382 X.X.X.X:33436 Oct 24 00:11:00 PROTO=17 X.X.X.X:11382 X.X.X.X:33436 Oct 24 00:11:17 PROTO=17 X.X.X.X:12215 X.X.X.X:33436 Oct 24 00:11:21 PROTO=17 X.X.X.X:12215 X.X.X.X:33436 Oct 24 00:11:25 PROTO=17 X.X.X.X:12215 X.X.X.X:33436 Oct 24 00:11:29 PROTO=17 X.X.X.X:12215 X.X.X.X:33436 Oct 24 00:11:33 PROTO=17 X.X.X.X:12215 X.X.X.X:33436 Oct 24 00:11:37 PROTO=17 X.X.X.X:12215 X.X.X.X:33436 Oct 24 00:11:41 PROTO=17 X.X.X.X:12215 X.X.X.X:33436 Oct 24 00:11:45 PROTO=17 X.X.X.X:12215 X.X.X.X:33436 Oct 24 00:11:49 PROTO=17 X.X.X.X:12215 X.X.X.X:33436 Oct 24 00:11:52 PROTO=17 X.X.X.X:12215 X.X.X.X:33436 Oct 24 00:11:56 PROTO=17 X.X.X.X:12215 X.X.X.X:33436 Oct 24 00:11:59 PROTO=17 X.X.X.X:12215 X.X.X.X:33436 Oct 24 00:12:26 PROTO=17 X.X.X.X:11793 X.X.X.X:33436 Oct 24 00:12:40 PROTO=17 X.X.X.X:11793 X.X.X.X:33436 Oct 24 00:12:54 PROTO=17 X.X.X.X:11793 X.X.X.X:33436 Oct 24 00:13:08 PROTO=17 X.X.X.X:11793 X.X.X.X:33436 Oct 24 00:13:16 PROTO=17 X.X.X.X:10339 X.X.X.X:33436 Oct 24 00:13:22 PROTO=17 X.X.X.X:11793 X.X.X.X:33436 Oct 24 00:13:30 PROTO=17 X.X.X.X:10339 X.X.X.X:33436 Oct 24 00:13:44 PROTO=17 X.X.X.X:10339 X.X.X.X:33436 Oct 24 00:13:58 PROTO=17 X.X.X.X:10339 X.X.X.X:33436 Oct 24 00:14:12 PROTO=17 X.X.X.X:10339 X.X.X.X:33436 Oct 24 00:14:17 PROTO=17 X.X.X.X:11320 X.X.X.X:33436 Oct 24 00:14:21 PROTO=17 X.X.X.X:11320 X.X.X.X:33436 Oct 24 00:14:25 PROTO=17 X.X.X.X:11320 X.X.X.X:33436 Oct 24 00:14:29 PROTO=17 X.X.X.X:11320 X.X.X.X:33436 Oct 24 00:14:33 PROTO=17 X.X.X.X:11320 X.X.X.X:33436 Oct 24 00:14:37 PROTO=17 X.X.X.X:11320 X.X.X.X:33436 Oct 24 00:14:41 PROTO=17 X.X.X.X:11320 X.X.X.X:33436 Oct 24 00:14:44 PROTO=17 X.X.X.X:11320 X.X.X.X:33436 Oct 24 00:14:48 PROTO=17 X.X.X.X:11320 X.X.X.X:33436 Oct 24 00:14:52 PROTO=17 X.X.X.X:11320 X.X.X.X:33436 Oct 24 00:14:56 PROTO=17 X.X.X.X:11320 X.X.X.X:33436 Oct 24 00:15:00 PROTO=17 X.X.X.X:11320 X.X.X.X:33436 Oct 24 00:15:17 PROTO=17 X.X.X.X:10562 X.X.X.X:33436 Oct 24 00:15:21 PROTO=17 X.X.X.X:10562 X.X.X.X:33436 Oct 24 00:15:25 PROTO=17 X.X.X.X:10562 X.X.X.X:33436 Oct 24 00:15:28 PROTO=17 X.X.X.X:10562 X.X.X.X:33436 Oct 24 00:15:32 PROTO=17 X.X.X.X:10562 X.X.X.X:33436 Oct 24 00:15:36 PROTO=17 X.X.X.X:10562 X.X.X.X:33436 Oct 24 00:15:40 PROTO=17 X.X.X.X:10562 X.X.X.X:33436 Oct 24 00:15:44 PROTO=17 X.X.X.X:10562 X.X.X.X:33436 Oct 24 00:15:48 PROTO=17 X.X.X.X:10562 X.X.X.X:33436 Oct 24 00:15:51 PROTO=17 X.X.X.X:10562 X.X.X.X:33436 Oct 24 00:15:55 PROTO=17 X.X.X.X:10562 X.X.X.X:33436 Oct 24 00:15:58 PROTO=17 X.X.X.X:10562 X.X.X.X:33436 Oct 24 00:16:02 PROTO=17 X.X.X.X:11256 X.X.X.X:33436 Oct 24 00:16:11 PROTO=17 X.X.X.X:11256 X.X.X.X:33436 Oct 24 00:16:16 PROTO=17 X.X.X.X:11923 X.X.X.X:33436 Oct 24 00:16:20 PROTO=17 X.X.X.X:11256 X.X.X.X:33436 Oct 24 00:16:29 PROTO=17 X.X.X.X:11256 X.X.X.X:33436 Oct 24 00:16:30 PROTO=17 X.X.X.X:11923 X.X.X.X:33436 Oct 24 00:16:38 PROTO=17 X.X.X.X:11256 X.X.X.X:33436 Oct 24 00:16:44 PROTO=17 X.X.X.X:11923 X.X.X.X:33436 Oct 24 00:16:58 PROTO=17 X.X.X.X:11923 X.X.X.X:33436 Oct 24 00:17:12 PROTO=17 X.X.X.X:11923 X.X.X.X:33436 Oct 24 00:17:27 PROTO=17 X.X.X.X:11233 X.X.X.X:33436 Oct 24 00:17:31 PROTO=17 X.X.X.X:11233 X.X.X.X:33436 Oct 24 00:17:35 PROTO=17 X.X.X.X:11233 X.X.X.X:33436 Oct 24 00:17:39 PROTO=17 X.X.X.X:11233 X.X.X.X:33436 Oct 24 00:17:43 PROTO=17 X.X.X.X:11233 X.X.X.X:33436 Oct 24 00:17:47 PROTO=17 X.X.X.X:11233 X.X.X.X:33436 Oct 24 00:17:51 PROTO=17 X.X.X.X:11233 X.X.X.X:33436 Oct 24 00:17:55 PROTO=17 X.X.X.X:11233 X.X.X.X:33436 Oct 24 00:17:59 PROTO=17 X.X.X.X:11233 X.X.X.X:33436 Oct 24 00:18:02 PROTO=17 X.X.X.X:11233 X.X.X.X:33436 Oct 24 00:18:06 PROTO=17 X.X.X.X:11233 X.X.X.X:33436 Oct 24 00:18:10 PROTO=17 X.X.X.X:11233 X.X.X.X:33436 Oct 24 00:18:17 PROTO=17 X.X.X.X:12387 X.X.X.X:33436 Oct 24 00:18:21 PROTO=17 X.X.X.X:12387 X.X.X.X:33436 Oct 24 00:18:25 PROTO=17 X.X.X.X:12387 X.X.X.X:33436 Oct 24 00:18:29 PROTO=17 X.X.X.X:12387 X.X.X.X:33436 Oct 24 00:18:33 PROTO=17 X.X.X.X:12387 X.X.X.X:33436 Oct 24 00:18:37 PROTO=17 X.X.X.X:12387 X.X.X.X:33436 Oct 24 00:18:40 PROTO=17 X.X.X.X:12387 X.X.X.X:33436 Oct 24 00:18:44 PROTO=17 X.X.X.X:12387 X.X.X.X:33436 Oct 24 00:18:48 PROTO=17 X.X.X.X:12387 X.X.X.X:33436 Oct 24 00:18:52 PROTO=17 X.X.X.X:12387 X.X.X.X:33436 Oct 24 00:18:55 PROTO=17 X.X.X.X:12387 X.X.X.X:33436 Oct 24 00:18:59 PROTO=17 X.X.X.X:12387 X.X.X.X:33436 Oct 24 00:19:03 PROTO=17 X.X.X.X:12418 X.X.X.X:33436 Oct 24 00:19:12 PROTO=17 X.X.X.X:12418 X.X.X.X:33436 Oct 24 00:19:21 PROTO=17 X.X.X.X:12418 X.X.X.X:33436 Oct 24 00:19:30 PROTO=17 X.X.X.X:12418 X.X.X.X:33436 Oct 24 00:19:39 PROTO=17 X.X.X.X:12418 X.X.X.X:33436 Oct 24 00:22:30 PROTO=17 X.X.X.X:10935 X.X.X.X:33436 Oct 24 00:22:34 PROTO=17 X.X.X.X:10935 X.X.X.X:33436 Oct 24 00:22:38 PROTO=17 X.X.X.X:10935 X.X.X.X:33436 Oct 24 00:22:42 PROTO=17 X.X.X.X:10935 X.X.X.X:33436 Oct 24 00:22:46 PROTO=17 X.X.X.X:10935 X.X.X.X:33436 Oct 24 00:22:49 PROTO=17 X.X.X.X:10935 X.X.X.X:33436 Oct 24 00:22:57 PROTO=17 X.X.X.X:10935 X.X.X.X:33436 Oct 24 00:23:01 PROTO=17 X.X.X.X:10935 X.X.X.X:33436 Oct 24 00:23:05 PROTO=17 X.X.X.X:10935 X.X.X.X:33436 Oct 24 00:23:09 PROTO=17 X.X.X.X:10935 X.X.X.X:33436 Oct 24 00:23:12 PROTO=17 X.X.X.X:10935 X.X.X.X:33436 Oct 24 00:23:28 PROTO=17 X.X.X.X:11764 X.X.X.X:33436 Oct 24 00:23:33 PROTO=17 X.X.X.X:11764 X.X.X.X:33436 Oct 24 00:23:37 PROTO=17 X.X.X.X:11764 X.X.X.X:33436 Oct 24 00:23:41 PROTO=17 X.X.X.X:11764 X.X.X.X:33436 Oct 24 00:23:45 PROTO=17 X.X.X.X:11764 X.X.X.X:33436 Oct 24 00:23:49 PROTO=17 X.X.X.X:11764 X.X.X.X:33436 Oct 24 00:23:53 PROTO=17 X.X.X.X:11764 X.X.X.X:33436 Oct 24 00:23:57 PROTO=17 X.X.X.X:11764 X.X.X.X:33436 Oct 24 00:24:00 PROTO=17 X.X.X.X:11764 X.X.X.X:33436 Oct 24 00:24:04 PROTO=17 X.X.X.X:11764 X.X.X.X:33436 Oct 24 00:24:08 PROTO=17 X.X.X.X:11764 X.X.X.X:33436 Oct 24 00:24:11 PROTO=17 X.X.X.X:11764 X.X.X.X:33436 Oct 24 00:24:27 PROTO=17 X.X.X.X:11763 X.X.X.X:33436 Oct 24 00:24:41 PROTO=17 X.X.X.X:11763 X.X.X.X:33436 Oct 24 00:24:55 PROTO=17 X.X.X.X:11763 X.X.X.X:33436 Oct 24 00:25:09 PROTO=17 X.X.X.X:11763 X.X.X.X:33436 Oct 24 00:25:23 PROTO=17 X.X.X.X:11763 X.X.X.X:33436 Oct 24 00:26:39 PROTO=17 X.X.X.X:10349 X.X.X.X:33436 Oct 24 00:26:43 PROTO=17 X.X.X.X:10349 X.X.X.X:33436 Oct 24 00:26:47 PROTO=17 X.X.X.X:10349 X.X.X.X:33436 Oct 24 00:26:50 PROTO=17 X.X.X.X:10349 X.X.X.X:33436 Oct 24 00:26:54 PROTO=17 X.X.X.X:10349 X.X.X.X:33436 Oct 24 00:26:58 PROTO=17 X.X.X.X:10349 X.X.X.X:33436 Oct 24 00:27:02 PROTO=17 X.X.X.X:10349 X.X.X.X:33436 Oct 24 00:27:05 PROTO=17 X.X.X.X:10349 X.X.X.X:33436 Oct 24 00:27:09 PROTO=17 X.X.X.X:10349 X.X.X.X:33436 Oct 24 00:27:13 PROTO=17 X.X.X.X:10349 X.X.X.X:33436 Oct 24 00:27:17 PROTO=17 X.X.X.X:10349 X.X.X.X:33436 Oct 24 00:27:21 PROTO=17 X.X.X.X:10349 X.X.X.X:33436 Oct 24 00:27:26 PROTO=17 X.X.X.X:12381 X.X.X.X:33436 Oct 24 00:27:34 PROTO=17 X.X.X.X:12381 X.X.X.X:33436 Oct 24 00:27:43 PROTO=17 X.X.X.X:12381 X.X.X.X:33436 Oct 24 00:27:52 PROTO=17 X.X.X.X:12381 X.X.X.X:33436 Oct 24 00:28:01 PROTO=17 X.X.X.X:12381 X.X.X.X:33436 Oct 24 00:28:31 PROTO=17 X.X.X.X:11938 X.X.X.X:33436 Oct 24 00:28:34 PROTO=17 X.X.X.X:11938 X.X.X.X:33436 Oct 24 00:28:38 PROTO=17 X.X.X.X:11938 X.X.X.X:33436 Oct 24 00:28:42 PROTO=17 X.X.X.X:11938 X.X.X.X:33436 Oct 24 00:28:46 PROTO=17 X.X.X.X:11938 X.X.X.X:33436 Oct 24 00:28:50 PROTO=17 X.X.X.X:11938 X.X.X.X:33436 Oct 24 00:28:54 PROTO=17 X.X.X.X:11938 X.X.X.X:33436 Oct 24 00:28:58 PROTO=17 X.X.X.X:11938 X.X.X.X:33436 Oct 24 00:29:03 PROTO=17 X.X.X.X:11938 X.X.X.X:33436 Oct 24 00:29:06 PROTO=17 X.X.X.X:11938 X.X.X.X:33436 Oct 24 00:29:10 PROTO=17 X.X.X.X:11938 X.X.X.X:33436 Oct 24 00:29:14 PROTO=17 X.X.X.X:11938 X.X.X.X:33436 Oct 24 00:29:19 PROTO=17 X.X.X.X:11721 X.X.X.X:33436 Oct 24 00:29:28 PROTO=17 X.X.X.X:11721 X.X.X.X:33436 Oct 24 00:29:29 PROTO=17 X.X.X.X:10277 X.X.X.X:33436 Oct 24 00:29:36 PROTO=17 X.X.X.X:11721 X.X.X.X:33436 Oct 24 00:29:42 PROTO=17 X.X.X.X:10277 X.X.X.X:33436 Oct 24 00:29:45 PROTO=17 X.X.X.X:11721 X.X.X.X:33436 Oct 24 00:29:54 PROTO=17 X.X.X.X:11721 X.X.X.X:33436 Oct 24 00:29:56 PROTO=17 X.X.X.X:10277 X.X.X.X:33436 Oct 24 00:30:10 PROTO=17 X.X.X.X:10277 X.X.X.X:33436 Oct 24 00:30:24 PROTO=17 X.X.X.X:10277 X.X.X.X:33436 Oct 24 00:50:27 PROTO=6 X.X.X.X:4360 X.X.X.X:1025 Oct 24 00:50:27 PROTO=6 X.X.X.X:4364 X.X.X.X:6129 Oct 24 00:50:27 PROTO=6 X.X.X.X:4371 X.X.X.X:3410 Oct 24 00:50:27 PROTO=6 X.X.X.X:4387 X.X.X.X:5554 Oct 24 00:50:30 PROTO=6 X.X.X.X:4360 X.X.X.X:1025 Oct 24 00:50:30 PROTO=6 X.X.X.X:4364 X.X.X.X:6129 Oct 24 00:50:30 PROTO=6 X.X.X.X:4387 X.X.X.X:5554 Oct 24 00:50:30 PROTO=6 X.X.X.X:4371 X.X.X.X:3410 Oct 24 00:50:36 PROTO=6 X.X.X.X:4360 X.X.X.X:1025 Oct 24 00:50:36 PROTO=6 X.X.X.X:4364 X.X.X.X:6129 Oct 24 00:50:36 PROTO=6 X.X.X.X:4371 X.X.X.X:3410 Oct 24 00:50:36 PROTO=6 X.X.X.X:4387 X.X.X.X:5554 Oct 24 00:56:30 PROTO=6 X.X.X.X:2989 X.X.X.X:12345 Oct 24 00:56:33 PROTO=6 X.X.X.X:2989 X.X.X.X:12345 Oct 24 01:10:45 PROTO=6 X.X.X.X:4403 X.X.X.X:5000 Oct 24 01:53:57 PROTO=6 X.X.X.X:80 X.X.X.X:1631 Oct 24 02:21:19 PROTO=6 X.X.X.X:80 X.X.X.X:1262 Oct 24 02:41:04 PROTO=6 X.X.X.X:3597 X.X.X.X:3389 Oct 24 02:41:07 PROTO=6 X.X.X.X:3597 X.X.X.X:3389 Oct 24 03:55:38 PROTO=6 X.X.X.X:4699 X.X.X.X:4899 Oct 24 06:39:03 PROTO=6 X.X.X.X:53040 X.X.X.X:21 Oct 24 06:39:06 PROTO=6 X.X.X.X:53040 X.X.X.X:21 Oct 24 06:39:11 PROTO=6 X.X.X.X:53040 X.X.X.X:21 Oct 24 07:50:33 PROTO=6 X.X.X.X:4323 X.X.X.X:4899 Oct 24 08:37:02 PROTO=6 X.X.X.X:4609 X.X.X.X:6129 Oct 24 08:37:02 PROTO=6 X.X.X.X:4611 X.X.X.X:3410 Oct 24 08:37:02 PROTO=6 X.X.X.X:4612 X.X.X.X:5554 Oct 24 08:37:02 PROTO=6 X.X.X.X:4621 X.X.X.X:5000 Oct 24 08:37:05 PROTO=6 X.X.X.X:4606 X.X.X.X:1025 Oct 24 08:37:05 PROTO=6 X.X.X.X:4611 X.X.X.X:3410 Oct 24 08:37:05 PROTO=6 X.X.X.X:4609 X.X.X.X:6129 Oct 24 08:37:05 PROTO=6 X.X.X.X:4612 X.X.X.X:5554 Oct 24 08:37:05 PROTO=6 X.X.X.X:4621 X.X.X.X:5000 Oct 24 08:37:11 PROTO=6 X.X.X.X:4621 X.X.X.X:5000 Oct 24 08:37:11 PROTO=6 X.X.X.X:4612 X.X.X.X:5554 Oct 24 08:37:11 PROTO=6 X.X.X.X:4611 X.X.X.X:3410 Oct 24 08:37:11 PROTO=6 X.X.X.X:4609 X.X.X.X:6129 Oct 24 08:37:11 PROTO=6 X.X.X.X:4606 X.X.X.X:1025 Oct 24 08:58:44 PROTO=6 X.X.X.X:3357 X.X.X.X:4899 Oct 24 09:08:43 PROTO=6 X.X.X.X:3978 X.X.X.X:4899 Oct 24 10:05:39 PROTO=6 X.X.X.X:1039 X.X.X.X:2745 Oct 24 10:05:39 PROTO=6 X.X.X.X:1042 X.X.X.X:1025 Oct 24 10:05:39 PROTO=6 X.X.X.X:1045 X.X.X.X:6129 Oct 24 10:05:42 PROTO=6 X.X.X.X:1042 X.X.X.X:1025 Oct 24 10:05:42 PROTO=6 X.X.X.X:1039 X.X.X.X:2745 Oct 24 10:05:42 PROTO=6 X.X.X.X:1045 X.X.X.X:6129 Oct 24 10:05:48 PROTO=6 X.X.X.X:1042 X.X.X.X:1025 Oct 24 10:05:48 PROTO=6 X.X.X.X:1039 X.X.X.X:2745 Oct 24 10:05:48 PROTO=6 X.X.X.X:1045 X.X.X.X:6129 Oct 24 10:05:57 PROTO=6 X.X.X.X:3046 X.X.X.X:2745 Oct 24 10:06:00 PROTO=6 X.X.X.X:3046 X.X.X.X:2745 Oct 24 10:06:06 PROTO=6 X.X.X.X:3046 X.X.X.X:2745 Oct 24 10:15:33 PROTO=6 X.X.X.X:3804 X.X.X.X:9898 Oct 24 11:02:30 PROTO=6 X.X.X.X:3678 X.X.X.X:2745 Oct 24 11:02:30 PROTO=6 X.X.X.X:3685 X.X.X.X:1025 Oct 24 11:02:30 PROTO=6 X.X.X.X:3689 X.X.X.X:6129 Oct 24 11:02:33 PROTO=6 X.X.X.X:3678 X.X.X.X:2745 Oct 24 11:02:33 PROTO=6 X.X.X.X:3685 X.X.X.X:1025 Oct 24 11:02:33 PROTO=6 X.X.X.X:3689 X.X.X.X:6129 Oct 24 11:02:38 PROTO=6 X.X.X.X:3678 X.X.X.X:2745 Oct 24 11:02:39 PROTO=6 X.X.X.X:3689 X.X.X.X:6129 Oct 24 11:02:39 PROTO=6 X.X.X.X:3685 X.X.X.X:1025 Oct 24 11:08:44 PROTO=6 X.X.X.X:2359 X.X.X.X:1025 Oct 24 11:08:47 PROTO=6 X.X.X.X:2359 X.X.X.X:1025 Oct 24 11:08:53 PROTO=6 X.X.X.X:2359 X.X.X.X:1025 Oct 24 11:33:30 PROTO=6 X.X.X.X:3651 X.X.X.X:20168 Oct 24 11:33:33 PROTO=6 X.X.X.X:3651 X.X.X.X:20168 Oct 24 11:33:40 PROTO=6 X.X.X.X:3651 X.X.X.X:20168 Oct 24 11:39:09 PROTO=6 X.X.X.X:1319 X.X.X.X:6129 Oct 24 11:39:09 PROTO=6 X.X.X.X:2240 X.X.X.X:3410 Oct 24 11:39:14 PROTO=6 X.X.X.X:2240 X.X.X.X:3410 Oct 24 11:39:14 PROTO=6 X.X.X.X:1319 X.X.X.X:6129 Oct 24 11:39:22 PROTO=6 X.X.X.X:2240 X.X.X.X:3410 Oct 24 11:39:22 PROTO=6 X.X.X.X:1319 X.X.X.X:6129 Oct 24 12:00:11 PROTO=6 X.X.X.X:3901 X.X.X.X:1025 Oct 24 12:00:11 PROTO=6 X.X.X.X:3903 X.X.X.X:6129 Oct 24 12:00:11 PROTO=6 X.X.X.X:3905 X.X.X.X:3410 Oct 24 12:00:11 PROTO=6 X.X.X.X:3906 X.X.X.X:5554 Oct 24 12:00:14 PROTO=6 X.X.X.X:3901 X.X.X.X:1025 Oct 24 12:00:14 PROTO=6 X.X.X.X:3903 X.X.X.X:6129 Oct 24 12:00:14 PROTO=6 X.X.X.X:3905 X.X.X.X:3410 Oct 24 12:00:14 PROTO=6 X.X.X.X:3906 X.X.X.X:5554 Oct 24 12:00:20 PROTO=6 X.X.X.X:3906 X.X.X.X:5554 Oct 24 12:00:20 PROTO=6 X.X.X.X:3905 X.X.X.X:3410 Oct 24 12:00:20 PROTO=6 X.X.X.X:3903 X.X.X.X:6129 Oct 24 12:00:20 PROTO=6 X.X.X.X:3901 X.X.X.X:1025 Oct 24 12:15:54 PROTO=6 X.X.X.X:3251 X.X.X.X:2745 Oct 24 12:15:54 PROTO=6 X.X.X.X:3253 X.X.X.X:1025 Oct 24 12:15:54 PROTO=6 X.X.X.X:3262 X.X.X.X:6129 Oct 24 12:15:57 PROTO=6 X.X.X.X:3251 X.X.X.X:2745 Oct 24 12:15:57 PROTO=6 X.X.X.X:3253 X.X.X.X:1025 Oct 24 12:15:57 PROTO=6 X.X.X.X:3262 X.X.X.X:6129 Oct 24 12:16:03 PROTO=6 X.X.X.X:3262 X.X.X.X:6129 Oct 24 12:16:03 PROTO=6 X.X.X.X:3253 X.X.X.X:1025 Oct 24 12:16:03 PROTO=6 X.X.X.X:3251 X.X.X.X:2745 Oct 24 12:46:53 PROTO=6 X.X.X.X:4024 X.X.X.X:20168 Oct 24 13:09:15 PROTO=6 X.X.X.X:3718 X.X.X.X:1025 Oct 24 13:09:18 PROTO=6 X.X.X.X:3718 X.X.X.X:1025 Oct 24 13:09:24 PROTO=6 X.X.X.X:3718 X.X.X.X:1025 Oct 24 13:34:13 PROTO=6 X.X.X.X:2856 X.X.X.X:4899 Oct 24 13:46:06 PROTO=6 X.X.X.X:3456 X.X.X.X:2745 Oct 24 13:46:09 PROTO=6 X.X.X.X:3456 X.X.X.X:2745 Oct 24 13:46:15 PROTO=6 X.X.X.X:3456 X.X.X.X:2745 Oct 24 13:54:11 PROTO=6 X.X.X.X:3310 X.X.X.X:2745 Oct 24 13:54:11 PROTO=6 X.X.X.X:3312 X.X.X.X:1025 Oct 24 13:54:11 PROTO=6 X.X.X.X:3319 X.X.X.X:3127 Oct 24 13:54:11 PROTO=6 X.X.X.X:3321 X.X.X.X:6129 Oct 24 13:54:14 PROTO=6 X.X.X.X:3310 X.X.X.X:2745 Oct 24 13:54:14 PROTO=6 X.X.X.X:3312 X.X.X.X:1025 Oct 24 13:54:14 PROTO=6 X.X.X.X:3319 X.X.X.X:3127 Oct 24 13:54:14 PROTO=6 X.X.X.X:3321 X.X.X.X:6129 Oct 24 13:54:20 PROTO=6 X.X.X.X:3321 X.X.X.X:6129 Oct 24 13:54:20 PROTO=6 X.X.X.X:3319 X.X.X.X:3127 Oct 24 13:54:20 PROTO=6 X.X.X.X:3312 X.X.X.X:1025 Oct 24 13:54:20 PROTO=6 X.X.X.X:3310 X.X.X.X:2745 Oct 24 14:21:17 PROTO=6 X.X.X.X:1620 X.X.X.X:12345 Oct 24 14:21:17 PROTO=6 X.X.X.X:1621 X.X.X.X:27374 Oct 24 14:21:17 PROTO=6 X.X.X.X:1622 X.X.X.X:901 Oct 24 14:21:17 PROTO=6 X.X.X.X:1623 X.X.X.X:3410 Oct 24 14:21:20 PROTO=6 X.X.X.X:1620 X.X.X.X:12345 Oct 24 14:21:20 PROTO=6 X.X.X.X:1621 X.X.X.X:27374 Oct 24 14:21:20 PROTO=6 X.X.X.X:1622 X.X.X.X:901 Oct 24 14:21:20 PROTO=6 X.X.X.X:1623 X.X.X.X:3410 Oct 24 14:24:08 PROTO=6 X.X.X.X:3422 X.X.X.X:2745 Oct 24 14:24:08 PROTO=6 X.X.X.X:3427 X.X.X.X:1025 Oct 24 14:24:12 PROTO=6 X.X.X.X:3427 X.X.X.X:1025 Oct 24 14:24:12 PROTO=6 X.X.X.X:3422 X.X.X.X:2745 Oct 24 14:24:18 PROTO=6 X.X.X.X:3427 X.X.X.X:1025 Oct 24 14:24:18 PROTO=6 X.X.X.X:3422 X.X.X.X:2745 Oct 24 14:31:16 PROTO=6 X.X.X.X:3065 X.X.X.X:1025 Oct 24 14:31:19 PROTO=6 X.X.X.X:3065 X.X.X.X:1025 Oct 24 14:31:25 PROTO=6 X.X.X.X:3065 X.X.X.X:1025 Oct 24 14:34:33 PROTO=6 X.X.X.X:28366 X.X.X.X:4899 Oct 24 14:34:36 PROTO=6 X.X.X.X:28366 X.X.X.X:4899 Oct 24 14:53:29 PROTO=6 X.X.X.X:5356 X.X.X.X:22 Oct 24 15:04:15 PROTO=6 X.X.X.X:3141 X.X.X.X:2745 Oct 24 15:04:15 PROTO=6 X.X.X.X:3145 X.X.X.X:1025 Oct 24 15:04:15 PROTO=6 X.X.X.X:3162 X.X.X.X:6129 Oct 24 15:04:18 PROTO=6 X.X.X.X:3141 X.X.X.X:2745 Oct 24 15:04:18 PROTO=6 X.X.X.X:3145 X.X.X.X:1025 Oct 24 15:04:18 PROTO=6 X.X.X.X:3162 X.X.X.X:6129 Oct 24 15:04:24 PROTO=6 X.X.X.X:3141 X.X.X.X:2745 Oct 24 15:04:24 PROTO=6 X.X.X.X:3162 X.X.X.X:6129 Oct 24 15:04:24 PROTO=6 X.X.X.X:3145 X.X.X.X:1025 Oct 24 15:27:59 PROTO=6 X.X.X.X:2715 X.X.X.X:5554 Oct 24 15:27:59 PROTO=6 X.X.X.X:3032 X.X.X.X:9898 Oct 24 15:29:27 PROTO=6 X.X.X.X:61033 X.X.X.X:22 Oct 24 15:39:41 PROTO=6 X.X.X.X:3922 X.X.X.X:4899 Oct 24 16:26:40 PROTO=6 X.X.X.X:4167 X.X.X.X:1025 Oct 24 16:26:43 PROTO=6 X.X.X.X:4167 X.X.X.X:1025 Oct 24 16:26:49 PROTO=6 X.X.X.X:4167 X.X.X.X:1025 Oct 24 16:41:34 PROTO=6 X.X.X.X:3672 X.X.X.X:1025 Oct 24 16:53:35 PROTO=6 X.X.X.X:1852 X.X.X.X:2745 Oct 24 16:53:38 PROTO=6 X.X.X.X:1852 X.X.X.X:2745 Oct 24 16:58:13 PROTO=6 X.X.X.X:1732 X.X.X.X:1025 Oct 24 16:58:16 PROTO=6 X.X.X.X:1732 X.X.X.X:1025 Oct 24 16:58:22 PROTO=6 X.X.X.X:1732 X.X.X.X:1025 Oct 24 17:14:43 PROTO=6 X.X.X.X:3255 X.X.X.X:4899 Oct 24 17:47:24 PROTO=6 X.X.X.X:1417 X.X.X.X:901 Oct 24 17:47:27 PROTO=6 X.X.X.X:1417 X.X.X.X:901 Oct 24 17:55:41 PROTO=6 X.X.X.X:3007 X.X.X.X:5554 Oct 24 17:55:42 PROTO=6 X.X.X.X:3308 X.X.X.X:9898 Oct 24 17:57:16 PROTO=6 X.X.X.X:4414 X.X.X.X:1025 Oct 24 18:02:17 PROTO=6 X.X.X.X:4188 X.X.X.X:1025 Oct 24 18:02:20 PROTO=6 X.X.X.X:4188 X.X.X.X:1025 Oct 24 18:02:26 PROTO=6 X.X.X.X:4188 X.X.X.X:1025 Oct 24 18:28:59 PROTO=6 X.X.X.X:2684 X.X.X.X:2745 Oct 24 18:29:02 PROTO=6 X.X.X.X:2684 X.X.X.X:2745 Oct 24 18:29:08 PROTO=6 X.X.X.X:2684 X.X.X.X:2745 Oct 24 18:34:25 PROTO=6 X.X.X.X:3320 X.X.X.X:2745 Oct 24 18:34:28 PROTO=6 X.X.X.X:3320 X.X.X.X:2745 Oct 24 18:34:34 PROTO=6 X.X.X.X:3320 X.X.X.X:2745 Oct 24 19:08:59 PROTO=6 X.X.X.X:54844 X.X.X.X:22 Oct 24 19:16:35 PROTO=6 X.X.X.X:2680 X.X.X.X:3410 Oct 24 19:16:35 PROTO=6 X.X.X.X:2681 X.X.X.X:5554 Oct 24 19:16:35 PROTO=6 X.X.X.X:2684 X.X.X.X:5000 Oct 24 19:16:35 PROTO=6 X.X.X.X:2676 X.X.X.X:1025 Oct 24 19:16:35 PROTO=6 X.X.X.X:2678 X.X.X.X:6129 Oct 24 19:16:40 PROTO=6 X.X.X.X:2680 X.X.X.X:3410 Oct 24 19:16:40 PROTO=6 X.X.X.X:2681 X.X.X.X:5554 Oct 24 19:16:40 PROTO=6 X.X.X.X:2684 X.X.X.X:5000 Oct 24 19:16:40 PROTO=6 X.X.X.X:2676 X.X.X.X:1025 Oct 24 19:16:40 PROTO=6 X.X.X.X:2678 X.X.X.X:6129 Oct 24 21:01:30 PROTO=6 X.X.X.X:1440 X.X.X.X:1025 Oct 24 21:01:30 PROTO=6 X.X.X.X:1442 X.X.X.X:6129 Oct 24 21:01:33 PROTO=6 X.X.X.X:1440 X.X.X.X:1025 Oct 24 21:01:33 PROTO=6 X.X.X.X:1442 X.X.X.X:6129 Oct 24 21:01:39 PROTO=6 X.X.X.X:1442 X.X.X.X:6129 Oct 24 21:01:39 PROTO=6 X.X.X.X:1440 X.X.X.X:1025 Oct 24 21:44:28 PROTO=6 X.X.X.X:1161 X.X.X.X:2745 Oct 24 21:44:28 PROTO=6 X.X.X.X:1179 X.X.X.X:1025 Oct 24 21:44:31 PROTO=6 X.X.X.X:1161 X.X.X.X:2745 Oct 24 21:44:31 PROTO=6 X.X.X.X:1179 X.X.X.X:1025 Oct 24 21:44:37 PROTO=6 X.X.X.X:1179 X.X.X.X:1025 Oct 24 21:44:37 PROTO=6 X.X.X.X:1161 X.X.X.X:2745 Oct 24 21:45:51 PROTO=6 X.X.X.X:4197 X.X.X.X:2745 Oct 24 21:45:51 PROTO=6 X.X.X.X:4205 X.X.X.X:1025 Oct 24 21:45:51 PROTO=6 X.X.X.X:4211 X.X.X.X:3127 Oct 24 21:45:51 PROTO=6 X.X.X.X:4216 X.X.X.X:6129 Oct 24 21:45:54 PROTO=6 X.X.X.X:4197 X.X.X.X:2745 Oct 24 21:45:54 PROTO=6 X.X.X.X:4205 X.X.X.X:1025 Oct 24 21:45:54 PROTO=6 X.X.X.X:4211 X.X.X.X:3127 Oct 24 21:45:54 PROTO=6 X.X.X.X:4216 X.X.X.X:6129 Oct 24 21:46:00 PROTO=6 X.X.X.X:4216 X.X.X.X:6129 Oct 24 21:46:00 PROTO=6 X.X.X.X:4211 X.X.X.X:3127 Oct 24 21:46:00 PROTO=6 X.X.X.X:4205 X.X.X.X:1025 Oct 24 21:46:00 PROTO=6 X.X.X.X:4197 X.X.X.X:2745 Oct 24 22:05:09 PROTO=6 X.X.X.X:1086 X.X.X.X:1025 Oct 24 22:05:09 PROTO=6 X.X.X.X:1089 X.X.X.X:6129 Oct 24 22:05:12 PROTO=6 X.X.X.X:1086 X.X.X.X:1025 Oct 24 22:05:12 PROTO=6 X.X.X.X:1089 X.X.X.X:6129 Oct 24 22:05:18 PROTO=6 X.X.X.X:1086 X.X.X.X:1025 Oct 24 22:05:18 PROTO=6 X.X.X.X:1089 X.X.X.X:6129 Oct 24 22:09:45 PROTO=6 X.X.X.X:3702 X.X.X.X:2745 Oct 24 22:09:45 PROTO=6 X.X.X.X:3704 X.X.X.X:1025 Oct 24 22:09:45 PROTO=6 X.X.X.X:3706 X.X.X.X:3127 Oct 24 22:09:45 PROTO=6 X.X.X.X:3707 X.X.X.X:6129 Oct 24 22:09:48 PROTO=6 X.X.X.X:3702 X.X.X.X:2745 Oct 24 22:09:48 PROTO=6 X.X.X.X:3706 X.X.X.X:3127 Oct 24 22:09:53 PROTO=6 X.X.X.X:3704 X.X.X.X:1025 Oct 24 22:09:53 PROTO=6 X.X.X.X:3707 X.X.X.X:6129 Oct 24 22:09:53 PROTO=6 X.X.X.X:3702 X.X.X.X:2745 Oct 24 22:09:53 PROTO=6 X.X.X.X:3706 X.X.X.X:3127 Oct 24 22:25:28 PROTO=6 X.X.X.X:3145 X.X.X.X:2745 Oct 24 22:25:28 PROTO=6 X.X.X.X:3174 X.X.X.X:1025 Oct 24 22:25:28 PROTO=6 X.X.X.X:3178 X.X.X.X:3127 Oct 24 22:25:28 PROTO=6 X.X.X.X:3180 X.X.X.X:6129 Oct 24 22:25:31 PROTO=6 X.X.X.X:3145 X.X.X.X:2745 Oct 24 22:25:31 PROTO=6 X.X.X.X:3174 X.X.X.X:1025 Oct 24 22:25:31 PROTO=6 X.X.X.X:3178 X.X.X.X:3127 Oct 24 22:25:31 PROTO=6 X.X.X.X:3180 X.X.X.X:6129 Oct 24 22:25:37 PROTO=6 X.X.X.X:3180 X.X.X.X:6129 Oct 24 22:25:37 PROTO=6 X.X.X.X:3178 X.X.X.X:3127 Oct 24 22:25:37 PROTO=6 X.X.X.X:3174 X.X.X.X:1025 Oct 24 22:25:37 PROTO=6 X.X.X.X:3145 X.X.X.X:2745 Oct 24 22:29:15 PROTO=6 X.X.X.X:1323 X.X.X.X:2745 Oct 24 22:29:15 PROTO=6 X.X.X.X:1342 X.X.X.X:1025 Oct 24 22:29:15 PROTO=6 X.X.X.X:1352 X.X.X.X:6129 Oct 24 22:29:18 PROTO=6 X.X.X.X:1323 X.X.X.X:2745 Oct 24 22:29:18 PROTO=6 X.X.X.X:1342 X.X.X.X:1025 Oct 24 22:29:18 PROTO=6 X.X.X.X:1352 X.X.X.X:6129 Oct 24 22:29:24 PROTO=6 X.X.X.X:1323 X.X.X.X:2745 Oct 24 22:29:24 PROTO=6 X.X.X.X:1342 X.X.X.X:1025 Oct 24 22:29:24 PROTO=6 X.X.X.X:1352 X.X.X.X:6129 Oct 24 23:06:11 PROTO=6 X.X.X.X:2243 X.X.X.X:5554 Oct 24 23:06:12 PROTO=6 X.X.X.X:2764 X.X.X.X:1023 Oct 24 23:06:14 PROTO=6 X.X.X.X:3966 X.X.X.X:9898 Oct 24 23:06:18 PROTO=6 X.X.X.X:1145 X.X.X.X:1023 Oct 24 23:06:34 PROTO=6 X.X.X.X:4015 X.X.X.X:5554 Oct 24 23:06:35 PROTO=6 X.X.X.X:4603 X.X.X.X:1023 Oct 24 23:06:37 PROTO=6 X.X.X.X:1693 X.X.X.X:9898 Oct 24 23:06:40 PROTO=6 X.X.X.X:4949 X.X.X.X:5554 Oct 24 23:06:41 PROTO=6 X.X.X.X:1554 X.X.X.X:1023 Oct 24 23:06:43 PROTO=6 X.X.X.X:2707 X.X.X.X:9898 Oct 24 23:06:44 PROTO=6 X.X.X.X:2886 X.X.X.X:1023 Oct 24 23:06:48 PROTO=6 X.X.X.X:2558 X.X.X.X:5554 Oct 24 23:06:49 PROTO=6 X.X.X.X:2806 X.X.X.X:1023 Oct 24 23:06:51 PROTO=6 X.X.X.X:3394 X.X.X.X:9898 Oct 24 23:06:54 PROTO=6 X.X.X.X:3417 X.X.X.X:5554 Oct 24 23:06:55 PROTO=6 X.X.X.X:3652 X.X.X.X:1023 Oct 24 23:06:57 PROTO=6 X.X.X.X:4134 X.X.X.X:9898 Oct 24 23:07:03 PROTO=6 X.X.X.X:4203 X.X.X.X:1023 Oct 24 23:07:05 PROTO=6 X.X.X.X:1425 X.X.X.X:9898 Oct 24 23:07:13 PROTO=6 X.X.X.X:1758 X.X.X.X:5554 Oct 24 23:07:16 PROTO=6 X.X.X.X:2742 X.X.X.X:9898 Oct 24 23:07:22 PROTO=6 X.X.X.X:4693 X.X.X.X:5554 Oct 24 23:07:23 PROTO=6 X.X.X.X:1243 X.X.X.X:1023 Oct 24 23:07:25 PROTO=6 X.X.X.X:1989 X.X.X.X:9898 Oct 24 23:09:02 PROTO=6 X.X.X.X:1639 X.X.X.X:5554 Oct 24 23:09:05 PROTO=6 X.X.X.X:2832 X.X.X.X:9898 Oct 24 23:18:46 PROTO=6 X.X.X.X:3242 X.X.X.X:4899 Oct 24 23:47:07 PROTO=6 X.X.X.X:4742 X.X.X.X:2745 Oct 24 23:47:07 PROTO=6 X.X.X.X:4751 X.X.X.X:1025 Oct 24 23:47:10 PROTO=6 X.X.X.X:4742 X.X.X.X:2745 Oct 24 23:47:10 PROTO=6 X.X.X.X:4751 X.X.X.X:1025 Oct 24 23:47:16 PROTO=6 X.X.X.X:4751 X.X.X.X:1025 Oct 24 23:47:16 PROTO=6 X.X.X.X:4742 X.X.X.X:2745 - - - - - - DPT=80 Count : 23 Oct 24 11:02:30 PROTO=6 X.X.X.X:3691 X.X.X.X:80 Oct 24 11:02:33 PROTO=6 X.X.X.X:3691 X.X.X.X:80 Oct 24 11:02:39 PROTO=6 X.X.X.X:3691 X.X.X.X:80 Oct 24 11:39:09 PROTO=6 X.X.X.X:3703 X.X.X.X:80 Oct 24 11:39:14 PROTO=6 X.X.X.X:3703 X.X.X.X:80 Oct 24 11:39:22 PROTO=6 X.X.X.X:3703 X.X.X.X:80 Oct 24 13:54:11 PROTO=6 X.X.X.X:3324 X.X.X.X:80 Oct 24 13:54:14 PROTO=6 X.X.X.X:3324 X.X.X.X:80 Oct 24 13:54:20 PROTO=6 X.X.X.X:3324 X.X.X.X:80 Oct 24 16:41:31 PROTO=6 X.X.X.X:3677 X.X.X.X:80 Oct 24 19:16:35 PROTO=6 X.X.X.X:2686 X.X.X.X:80 ..... - - - - - - DPT=1433 Count : 10 Oct 24 08:37:02 PROTO=6 X.X.X.X:4618 X.X.X.X:1433 Oct 24 08:37:05 PROTO=6 X.X.X.X:4618 X.X.X.X:1433 Oct 24 08:37:11 PROTO=6 X.X.X.X:4618 X.X.X.X:1433 Oct 24 12:00:11 PROTO=6 X.X.X.X:3907 X.X.X.X:1433 Oct 24 12:00:14 PROTO=6 X.X.X.X:3907 X.X.X.X:1433 Oct 24 12:00:20 PROTO=6 X.X.X.X:3907 X.X.X.X:1433 Oct 24 19:16:35 PROTO=6 X.X.X.X:2682 X.X.X.X:1433 Oct 24 19:16:40 PROTO=6 X.X.X.X:2682 X.X.X.X:1433 Oct 24 22:23:02 PROTO=6 X.X.X.X:4414 X.X.X.X:1433 Oct 24 22:23:05 PROTO=6 X.X.X.X:4414 X.X.X.X:1433 ..... - - - - - - DPT=137 Count : 67 Oct 24 00:18:08 PROTO=17 X.X.X.X:63691 X.X.X.X:137 Oct 24 00:22:11 PROTO=17 X.X.X.X:1027 X.X.X.X:137 Oct 24 00:24:43 PROTO=17 X.X.X.X:1039 X.X.X.X:137 Oct 24 00:41:02 PROTO=17 X.X.X.X:1025 X.X.X.X:137 Oct 24 00:58:11 PROTO=17 X.X.X.X:1031 X.X.X.X:137 Oct 24 01:19:06 PROTO=17 X.X.X.X:1027 X.X.X.X:137 Oct 24 02:11:02 PROTO=17 X.X.X.X:1027 X.X.X.X:137 Oct 24 02:15:57 PROTO=17 X.X.X.X:1045 X.X.X.X:137 Oct 24 02:17:55 PROTO=17 X.X.X.X:61426 X.X.X.X:137 Oct 24 02:18:11 PROTO=17 X.X.X.X:62583 X.X.X.X:137 Oct 24 02:28:38 PROTO=17 X.X.X.X:1025 X.X.X.X:137 ..... - - - - - - DPT=445 Count : 1990 Oct 24 00:01:03 PROTO=6 X.X.X.X:4874 X.X.X.X:445 Oct 24 00:01:06 PROTO=6 X.X.X.X:4874 X.X.X.X:445 Oct 24 00:06:16 PROTO=6 X.X.X.X:1041 X.X.X.X:445 Oct 24 00:06:19 PROTO=6 X.X.X.X:1041 X.X.X.X:445 Oct 24 00:09:10 PROTO=6 X.X.X.X:2445 X.X.X.X:445 Oct 24 00:09:13 PROTO=6 X.X.X.X:2445 X.X.X.X:445 Oct 24 00:13:52 PROTO=6 X.X.X.X:3857 X.X.X.X:445 Oct 24 00:13:55 PROTO=6 X.X.X.X:3857 X.X.X.X:445 Oct 24 00:15:22 PROTO=6 X.X.X.X:3057 X.X.X.X:445 Oct 24 00:15:24 PROTO=6 X.X.X.X:3057 X.X.X.X:445 Oct 24 00:15:36 PROTO=6 X.X.X.X:3092 X.X.X.X:445 ..... - - - - - - DPT=1434 Count : 3 Oct 24 03:16:51 PROTO=17 X.X.X.X:1045 X.X.X.X:1434 Oct 24 14:58:54 PROTO=17 X.X.X.X:3575 X.X.X.X:1434 Oct 24 16:26:10 PROTO=17 X.X.X.X:1054 X.X.X.X:1434 ..... - - - - - - DPT=139 Count : 109 Oct 24 01:38:50 PROTO=6 X.X.X.X:2209 X.X.X.X:139 Oct 24 01:38:53 PROTO=6 X.X.X.X:2209 X.X.X.X:139 Oct 24 02:02:36 PROTO=6 X.X.X.X:2261 X.X.X.X:139 Oct 24 02:02:40 PROTO=6 X.X.X.X:2261 X.X.X.X:139 Oct 24 02:15:22 PROTO=6 X.X.X.X:4346 X.X.X.X:139 Oct 24 02:15:24 PROTO=6 X.X.X.X:4346 X.X.X.X:139 Oct 24 02:22:01 PROTO=6 X.X.X.X:3952 X.X.X.X:139 Oct 24 02:22:04 PROTO=6 X.X.X.X:3952 X.X.X.X:139 Oct 24 02:22:33 PROTO=6 X.X.X.X:2909 X.X.X.X:139 Oct 24 02:22:36 PROTO=6 X.X.X.X:2909 X.X.X.X:139 Oct 24 02:28:01 PROTO=6 X.X.X.X:3550 X.X.X.X:139 ..... - - - - - - DPT=135 Count : 1885 Oct 24 00:00:38 PROTO=6 X.X.X.X:2392 X.X.X.X:135 Oct 24 00:00:41 PROTO=6 X.X.X.X:2392 X.X.X.X:135 Oct 24 00:01:02 PROTO=6 X.X.X.X:4811 X.X.X.X:135 Oct 24 00:01:05 PROTO=6 X.X.X.X:4811 X.X.X.X:135 Oct 24 00:02:07 PROTO=6 X.X.X.X:2180 X.X.X.X:135 Oct 24 00:02:10 PROTO=6 X.X.X.X:2180 X.X.X.X:135 Oct 24 00:02:57 PROTO=6 X.X.X.X:3088 X.X.X.X:135 Oct 24 00:03:00 PROTO=6 X.X.X.X:3088 X.X.X.X:135 Oct 24 00:07:24 PROTO=6 X.X.X.X:4558 X.X.X.X:135 Oct 24 00:07:51 PROTO=6 X.X.X.X:4664 X.X.X.X:135 Oct 24 00:07:54 PROTO=6 X.X.X.X:4664 X.X.X.X:135 ..... ※ログにおける PROTP=6 は tcp, PROTP=17 は udp パケットを表します。 ※二つの X.X.X.X:NUM の前者が発行元、後者が宛先（ウチ）です。 NUM がポート番号です。 ※まあ、つまり /var/log/messages を編集しているだけです。 ドメインが公開されていない１個人のところへもこれだけのもの（あるいはこれ以上）が来るのです。驚いた方もいるでしょう。 いちおう、目立つものについてコメントしておきましょう。 ◆ tcp 111 ---> RPC といわれるもので、簡単に言えば遠隔操作可能なものがあるか調べている。たとえば NFS でも使います。スキャニングではとてもありがち。 ◆ udp 137 ---> Windows ネットワークのNetBIOSプロトコルで使う。Windows ディレクトリが共有設定になっていれば外部から丸見えになるが.....攻撃とは言えないか。 ※現在はBugbearワームが中心です ◆ tcp 53 ---> DNSを探している（DNS はudp も使います）。DNS でよく使われる bind というアプリケーションはセキュリティホールがよく見つかる。よくあるのはバッファオーバーフロー攻撃といって、ルート権限を不正取得して乗っ取ろうとかいうもので、バックドアやウィルスを仕込まれてしまうこともある。 ◆ tcp 23 ---> telnet 接続の可否を調べている、連続の場合はトライしている。これにやられたらいくらなんでも恥。 ◆ tcp 80 ---> 公開していない場合にもかかわらずWebサーバーにアクセスしている。つまり存在を調べている。 ※たいがいはお馴染みのCodeRedと亜種、Nimda ◆ tcp 1433 ---> MS SQLサーバーへの接続 ※SQL spidaワーム ◆ tcp 3389 --->WinのTerminalServerかな？わしそんなに金持ちじゃないもんね。 ◆ tcp 98 --->linuxconfですかね。たしかに閉め忘れしやすいけどね。 ◆ tcp 8080 --->プロ棋士（おいおいなんちゅう変換すんの...）ですか。足跡消しできるか調べるつもり？ ◆ tcp 12345 --->なるほど、こんなのもあるんですね。netbusですか、トロイの木馬さんを探してるのだそうです。トロイを仕掛けられた上にさらに別の奴に弄ばれるのはかなり悲しいですなあ。 ◆ tcp 31337 --->トロイの木馬を利用したBackOrificeというツールを探しているようです。ウチのsnortも騒いでおりました。しかしBackOrificeの場合、自分でウマイ具合に鯖を仕込めたならほかのポートも使えるはずなので、わざわざバレバレポートを叩くからには他人のおこぼれに預ろうとしているか、単なるのーたりんかどちらかですな、日本時間2001/07/16 19:36のXXXXX.abo.wanadoo.frさんほかの方々です。ナメンナよ！ ◆ tcp 27374 --->これもトロイ。 ◆ tcp 515 --->印刷ポートのプローブ LPRng(Red Hat), lpd(X BSD)に脆弱性アリ。 ◆ tcp 3128 --->プロ騎士（またこんな変換...） ◆ tcp 1080 --->これも SOCKS とか「ぷろきし」でよく使われる番号 |