BotHunter
®
Live Internet Monitor Page
Computer Science Laboratory
SRI International
Last Updated: Sat Mar 30 23:00:04 2013
www.BOTHUNTER.net
Victim IP
Max Score
Profiles
CCs
Events
192.168.1.41
1.6
VIEW 45
777:7777005 {tcp}
Outbound Scan:
Detected moderate malware port scanning of 10 IPs (6 /24s) (# pkts S/M/O/I=0/10/0/0): 22:10
1:2003068 {tcp}
Outbound Attack:
ET SCAN Potential SSH Scan OUTBOUND; 45452->22
1:2003068 {tcp}
Outbound Attack:
ET SCAN Potential SSH Scan OUTBOUND; 42469->22
1:2003068 {tcp}
Outbound Attack:
ET SCAN Potential SSH Scan OUTBOUND; 57996->22
777:7777005 {tcp}
Outbound Scan:
Detected moderate malware port scanning of 11 IPs (11 /24s) (# pkts S/M/O/I=0/10/0/1): 22:10
1:2003068 {tcp}
Outbound Attack:
ET SCAN Potential SSH Scan OUTBOUND; 58183->22
1:2003068 {tcp}
Outbound Attack:
ET SCAN Potential SSH Scan OUTBOUND; 38198->22
1:2003068 {tcp}
Outbound Attack:
ET SCAN Potential SSH Scan OUTBOUND; 55540->22
777:7777005 {tcp}
Outbound Scan:
Detected moderate malware port scanning of 10 IPs (10 /24s) (# pkts S/M/O/I=0/10/0/0): 22:10
1:2003068 {tcp}
Outbound Attack:
ET SCAN Potential SSH Scan OUTBOUND; 58418->22
777:7777008 {icmp}
Malware Scan:
Detected intense malware port scanning of 46 IPs (29 /24s) (# pkts S/M/O/I=0/45/0/1): 22:45
777:7777005 {tcp}
Outbound Scan:
Detected moderate malware port scanning of 16 IPs (13 /24s) (# pkts S/M/O/I=0/16/0/0): 22:16
777:7777008 {tcp}
Malware Scan:
Detected intense malware port scanning of 25 IPs (19 /24s) (# pkts S/M/O/I=0/25/0/0): 22:25
1:2003068 {tcp}
Outbound Attack:
ET SCAN Potential SSH Scan OUTBOUND; 56245->22
777:7777008 {tcp}
Malware Scan:
Detected intense malware port scanning of 45 IPs (28 /24s) (# pkts S/M/O/I=0/45/0/0): 22:45
1:2003068 {tcp}
Outbound Attack:
ET SCAN Potential SSH Scan OUTBOUND; 57655->22
1:2003068 {tcp}
Outbound Attack:
ET SCAN Potential SSH Scan OUTBOUND; 59036->22
192.168.1.36
0.8
VIEW 18
69.43.161.167
69.43.161.167 , , , .
1:9930009 {tcp}
Bot Space Access:
ET ShadowServer confirmed botnet control server on non-standard port
1:9930020 {udp}
Bot Space Access:
ET ShadowServer confirmed botnet control server on non-standard port