Print

Print


According to a recent article Dated Dec 22, 2006,   out on the following 
website:
http://www.techweb.com/showArticle.jhtml?articleID=196701740 

Symantec: Another Surge In Worm Scanning For Unpatched Antivirus Software 

"Symantec said Friday that it had detected another surge in scans for a port 
associated with a worm that's been sniffing for vulnerable software made by 
the security company and warned users to patch immediately in case the 
malicious code morphs into something more dangerous.
Sensors monitored by Symantec's DeepSight threat management service have 
reported a significant spike in traffic related to TCP port 2967, which 
Symantec has traced to scans generated by the "Sagevo" worm, recently 
released malware looking for systems running some of the company's 
enterprise antivirus software. " 

After reviewing my firewall and IDP logs, I believe there are a number of 
machines at MSU infected with this worm, if ip addresses of your machines 
are in this list please take action: 

35.8.224.95
35.8.52.8
35.8.52.45
35.8.52.47
35.8.52.70
35.8.52.132
35.8.53.36
35.8.53.59
35.8.53.78
35.8.53.81
35.8.53.84
35.8.53.87
35.8.53.88
35.8.53.92
35.8.53.102
35.8.53.107
35.8.53.115
35.8.53.116
35.8.53.117
35.8.53.120
35.8.53.121
35.8.53.122
35.8.53.123
35.8.53.126
35.8.53.135
35.8.53.139
35.8.53.149
35.8.53.151
35.8.53.153
35.8.53.154
35.8.53.159
35.8.53.160
35.8.53.162
35.8.53.163
35.8.53.165
35.8.53.167
35.8.53.175
35.8.53.177
35.8.53.178
35.8.53.180
35.8.53.181
35.8.53.185
35.8.53.186
35.8.53.196
35.8.53.253
35.8.163.66
35.8.163.75
35.8.224.95
35.8.52.8
35.8.52.10
35.8.224.88
35.8.224.95 


FIREWALL LOG ENTRIES FOLLOW, MY IP ADDRESSES ARE MASKED. 


 From 35.8.52.8 - 20 packets
  To XX.XX.XX.XX - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX - 4 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 4 packets
 From 35.8.52.45 - 5 packets
  To XX.XX.XX.XX - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX2 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX0 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
 From 35.8.52.47 - 13 packets
  To XX.XX.XX.XX - 6 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 6 packets
  To XX.XX.XX.XX - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
  To XX.XX.XX.XX - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX2 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX5 - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
  To XX.XX.XX.XX6 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
 From 35.8.52.70 - 8 packets
  To XX.XX.XX.XX - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX0 - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
  To XX.XX.XX.XX2 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX5 - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
 From 35.8.52.132 - 5 packets
  To XX.XX.XX.XX - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX5 - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
 From 35.8.53.36 - 45 packets
  To XX.XX.XX.XX - 4 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 4 packets
  To XX.XX.XX.XX - 4 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 4 packets
  To XX.XX.XX.XX - 7 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 7 packets
  To XX.XX.XX.XX0 - 5 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 5 packets
  To XX.XX.XX.XX2 - 7 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 7 packets
  To XX.XX.XX.XX5 - 4 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 4 packets
  To XX.XX.XX.XX0 - 6 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 6 packets
  To XX.XX.XX.XX6 - 8 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 8 packets
 From 35.8.53.59 - 4 packets
  To XX.XX.XX.XX - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
  To XX.XX.XX.XX - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX2 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
 From 35.8.53.78 - 12 packets
  To XX.XX.XX.XX - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX0 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX2 - 8 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 8 packets
 From 35.8.53.81 - 5 packets
  To XX.XX.XX.XX - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX0 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX2 - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
 From 35.8.53.84 - 16 packets
  To XX.XX.XX.XX - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX - 5 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 5 packets
  To XX.XX.XX.XX0 - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
  To XX.XX.XX.XX5 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX0 - 5 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 5 packets
 From 35.8.53.87 - 25 packets
  To XX.XX.XX.XX - 4 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 4 packets
  To XX.XX.XX.XX - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX - 4 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 4 packets
  To XX.XX.XX.XX0 - 5 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 5 packets
  To XX.XX.XX.XX2 - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX5 - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX6 - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
 From 35.8.53.88 - 26 packets
  To XX.XX.XX.XX - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX - 8 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 8 packets
  To XX.XX.XX.XX - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX0 - 4 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 4 packets
  To XX.XX.XX.XX5 - 4 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 4 packets
  To XX.XX.XX.XX0 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX6 - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
 From 35.8.53.92 - 17 packets
  To XX.XX.XX.XX - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
  To XX.XX.XX.XX - 6 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 6 packets
  To XX.XX.XX.XX0 - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
  To XX.XX.XX.XX2 - 5 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 5 packets
  To XX.XX.XX.XX5 - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
 From 35.8.53.102 - 15 packets
  To XX.XX.XX.XX - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
  To XX.XX.XX.XX2 - 6 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 6 packets
  To XX.XX.XX.XX5 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX0 - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX6 - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
 From 35.8.53.107 - 11 packets
  To XX.XX.XX.XX - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX5 - 4 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 4 packets
  To XX.XX.XX.XX6 - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
 From 35.8.53.115 - 7 packets
  To XX.XX.XX.XX - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
  To XX.XX.XX.XX0 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX6 - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
 From 35.8.53.116 - 2 packets
  To XX.XX.XX.XX - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
 From 35.8.53.117 - 12 packets
  To XX.XX.XX.XX - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
  To XX.XX.XX.XX0 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX2 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX5 - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
  To XX.XX.XX.XX0 - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX6 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
 From 35.8.53.120 - 32 packets
  To XX.XX.XX.XX - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX - 7 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 7 packets
  To XX.XX.XX.XX0 - 4 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 4 packets
  To XX.XX.XX.XX2 - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX5 - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX0 - 4 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 4 packets
  To XX.XX.XX.XX6 - 8 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 8 packets
 From 35.8.53.121 - 18 packets
  To XX.XX.XX.XX - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
  To XX.XX.XX.XX - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX0 - 4 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 4 packets
  To XX.XX.XX.XX2 - 4 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 4 packets
  To XX.XX.XX.XX5 - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX0 - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
 From 35.8.53.122 - 19 packets
  To XX.XX.XX.XX - 4 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 4 packets
  To XX.XX.XX.XX - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX0 - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
  To XX.XX.XX.XX2 - 5 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 5 packets
  To XX.XX.XX.XX5 - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX0 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX6 - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
 From 35.8.53.123 - 13 packets
  To XX.XX.XX.XX0 - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
  To XX.XX.XX.XX2 - 4 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 4 packets
  To XX.XX.XX.XX5 - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX0 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX6 - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
 From 35.8.53.126 - 8 packets
  To XX.XX.XX.XX - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX2 - 5 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 5 packets
  To XX.XX.XX.XX0 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
 From 35.8.53.135 - 12 packets
  To XX.XX.XX.XX - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX2 - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
  To XX.XX.XX.XX5 - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
  To XX.XX.XX.XX6 - 6 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 6 packets
 From 35.8.53.139 - 10 packets
  To XX.XX.XX.XX - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX - 4 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 4 packets
  To XX.XX.XX.XX2 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX5 - 4 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 4 packets
 From 35.8.53.149 - 1 packet
  To XX.XX.XX.XX - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
 From 35.8.53.151 - 20 packets
  To XX.XX.XX.XX - 9 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 9 packets
  To XX.XX.XX.XX - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX2 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX5 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX0 - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
  To XX.XX.XX.XX6 - 4 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 4 packets
 From 35.8.53.153 - 3 packets
  To XX.XX.XX.XX0 - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
  To XX.XX.XX.XX6 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
 From 35.8.53.154 - 4 packets
  To XX.XX.XX.XX - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX0 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX5 - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
 From 35.8.53.159 - 9 packets
  To XX.XX.XX.XX - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX2 - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX5 - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
 From 35.8.53.160 - 6 packets
  To XX.XX.XX.XX2 - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX0 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX6 - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
 From 35.8.53.162 - 6 packets
  To XX.XX.XX.XX - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX0 - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
 From 35.8.53.163 - 17 packets
  To XX.XX.XX.XX - 4 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 4 packets
  To XX.XX.XX.XX - 4 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 4 packets
  To XX.XX.XX.XX2 - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
  To XX.XX.XX.XX5 - 4 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 4 packets
  To XX.XX.XX.XX6 - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
 From 35.8.53.165 - 11 packets
  To XX.XX.XX.XX - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX0 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX5 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX0 - 7 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 7 packets
 From 35.8.53.167 - 6 packets
  To XX.XX.XX.XX0 - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX5 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX0 - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
 From 35.8.53.175 - 9 packets
  To XX.XX.XX.XX - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX2 - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX5 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX0 - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX6 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
 From 35.8.53.177 - 15 packets
  To XX.XX.XX.XX - 5 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 5 packets
  To XX.XX.XX.XX - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
  To XX.XX.XX.XX0 - 4 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 4 packets
  To XX.XX.XX.XX5 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
 From 35.8.53.178 - 14 packets
  To XX.XX.XX.XX - 8 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 8 packets
  To XX.XX.XX.XX2 - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX5 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX0 - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
 From 35.8.53.180 - 19 packets
  To XX.XX.XX.XX - 4 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 4 packets
  To XX.XX.XX.XX - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
  To XX.XX.XX.XX5 - 8 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 8 packets
  To XX.XX.XX.XX0 - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
  To XX.XX.XX.XX6 - 2 packets
     Service: 135 (tcp/135) (INPUT packet died:,eth0,none) - 2 packets
 From 35.8.53.181 - 15 packets
  To XX.XX.XX.XX - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
  To XX.XX.XX.XX0 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX5 - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX0 - 5 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 5 packets
 From 35.8.53.185 - 15 packets
  To XX.XX.XX.XX - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
  To XX.XX.XX.XX0 - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
  To XX.XX.XX.XX5 - 8 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 8 packets
  To XX.XX.XX.XX0 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX6 - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
 From 35.8.53.186 - 5 packets
  To XX.XX.XX.XX - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX2 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
 From 35.8.53.196 - 20 packets
  To XX.XX.XX.XX - 4 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 4 packets
  To XX.XX.XX.XX0 - 4 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 4 packets
  To XX.XX.XX.XX5 - 4 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 4 packets
  To XX.XX.XX.XX0 - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX6 - 5 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 5 packets
 From 35.8.53.253 - 13 packets
  To XX.XX.XX.XX - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX - 4 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 4 packets
  To XX.XX.XX.XX5 - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX0 - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
  To XX.XX.XX.XX6 - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
 From 35.8.163.66 - 6 packets
  To XX.XX.XX.XX - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX0 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX6 - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets
  To XX.XX.XX.XX7 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
 From 35.8.163.75 - 11 packets
  To XX.XX.XX.XX0 - 6 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 6 packets
  To XX.XX.XX.XX2 - 5 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 5 packets
 From 35.8.224.95 - 21 packets
  To XX.XX.XX.XX - 7 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 7 packets
  To XX.XX.XX.XX0 - 6 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 6 packets
  To XX.XX.XX.XX2 - 5 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 5 packets
  To XX.XX.XX.XX5 - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets 

 From 35.8.52.8 - 79 packets
  To XX.XX.XX.XX - 25 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 25 packets
  To XX.XX.XX.XX - 4 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 4 packets
  To XX.XX.XX.XX - 11 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 11 packets
  To XX.XX.XX.XX0 - 14 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 14 packets
  To XX.XX.XX.XX2 - 8 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 8 packets
  To XX.XX.XX.XX5 - 7 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 7 packets
  To XX.XX.XX.XX0 - 4 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 4 packets
  To XX.XX.XX.XX6 - 6 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 6 packets
 From 35.8.52.10 - 91 packets
  To XX.XX.XX.XX - 8 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 8 packets
 From 35.8.224.88 - 15 packets
  To XX.XX.XX.XX - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
  To XX.XX.XX.XX - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX0 - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX5 - 4 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 4 packets
  To XX.XX.XX.XX0 - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX6 - 1 packet
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 1 packet
 From 35.8.224.95 - 16 packets
  To XX.XX.XX.XX - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX2 - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX5 - 3 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 3 packets
  To XX.XX.XX.XX0 - 5 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 5 packets
  To XX.XX.XX.XX6 - 2 packets
     Service: 2967 (tcp/2967) (INPUT packet died:,eth0,none) - 2 packets