Probes on Port 135 and 445 continue

From: Felix Tilley (ftilley_at_localhost.localdomain)
Date: 10/08/04

  • Next message: Bit Twister: "Re: Probes on Port 135 and 445 continue" 
    Date: Thu, 07 Oct 2004 20:22:31 -0700

    Can someone figure out a way to close them down?

    ======================================

    Oct 7 20:08:13 -0700 SRC=63.184.16.161 DST=63.184.0.180 PROTO=TCP SPT=1899 DPT=445
    Oct 7 20:08:16 -0700 SRC=63.184.9.6 DST=63.184.0.180 PROTO=TCP SPT=1291 DPT=135
    Oct 7 20:08:18 -0700 SRC=63.184.9.6 DST=63.184.0.180 PROTO=TCP SPT=1291 DPT=135
    Oct 7 20:08:38 -0700 SRC=63.184.0.113 DST=63.184.0.180 PROTO=TCP SPT=2631 DPT=445
    Oct 7 20:08:46 -0700 SRC=63.184.0.113 DST=63.184.0.180 PROTO=TCP SPT=2631 DPT=445
    Oct 7 20:09:11 -0700 SRC=63.184.0.148 DST=63.184.0.180 PROTO=TCP SPT=3648 DPT=445
    Oct 7 20:09:11 -0700 SRC=63.184.49.87 DST=63.184.0.180 PROTO=TCP SPT=3888 DPT=445
    Oct 7 20:09:11 -0700 SRC=63.184.32.75 DST=63.184.0.180 PROTO=TCP SPT=1369 DPT=445
    Oct 7 20:09:14 -0700 SRC=63.184.32.75 DST=63.184.0.180 PROTO=TCP SPT=1369 DPT=445
    Oct 7 20:09:44 -0700 SRC=63.184.104.242 DST=63.184.0.180 PROTO=TCP SPT=4189 DPT=135
    Oct 7 20:09:44 -0700 SRC=63.184.104.242 DST=63.184.0.180 PROTO=TCP SPT=4189 DPT=135
    Oct 7 20:11:12 -0700 SRC=63.184.81.56 DST=63.184.0.180 PROTO=TCP SPT=2054 DPT=135
    Oct 7 20:11:16 -0700 SRC=63.184.81.56 DST=63.184.0.180 PROTO=TCP SPT=2054 DPT=135
    Oct 7 20:12:16 -0700 SRC=63.184.96.32 DST=63.184.0.180 PROTO=TCP SPT=1428 DPT=445
    Oct 7 20:12:22 -0700 SRC=63.184.81.69 DST=63.184.0.180 PROTO=TCP SPT=1323 DPT=135
    Oct 7 20:12:25 -0700 SRC=63.184.81.69 DST=63.184.0.180 PROTO=TCP SPT=1323 DPT=135
    Oct 7 20:12:53 -0700 SRC=63.184.32.247 DST=63.184.0.180 PROTO=TCP SPT=3024 DPT=445
    Oct 7 20:12:56 -0700 SRC=63.184.32.247 DST=63.184.0.180 PROTO=TCP SPT=3024 DPT=445
    Oct 7 20:13:02 -0700 SRC=63.184.32.247 DST=63.184.0.180 PROTO=TCP SPT=3024 DPT=445
    Oct 7 20:13:04 -0700 SRC=63.184.97.54 DST=63.184.0.180 PROTO=TCP SPT=1979 DPT=135
    Oct 7 20:13:09 -0700 SRC=63.184.65.28 DST=63.184.0.180 PROTO=TCP SPT=1287 DPT=135
    Oct 7 20:13:11 -0700 SRC=63.184.97.54 DST=63.184.0.180 PROTO=TCP SPT=1979 DPT=135
    Oct 7 20:13:16 -0700 SRC=63.184.65.28 DST=63.184.0.180 PROTO=TCP SPT=1287 DPT=135
    Oct 7 20:13:23 -0700 SRC=63.184.1.175 DST=63.184.0.180 PROTO=TCP SPT=4502 DPT=135
    Oct 7 20:13:26 -0700 SRC=63.184.1.175 DST=63.184.0.180 PROTO=TCP SPT=4502 DPT=135
    Oct 7 20:14:08 -0700 SRC=63.184.96.175 DST=63.184.0.180 PROTO=TCP SPT=3053 DPT=445
    Oct 7 20:14:11 -0700 SRC=63.184.96.175 DST=63.184.0.180 PROTO=TCP SPT=3053 DPT=445
    Oct 7 20:14:16 -0700 SRC=63.184.81.92 DST=63.184.0.180 PROTO=TCP SPT=1252 DPT=445
    Oct 7 20:14:18 -0700 SRC=63.184.96.217 DST=63.184.0.180 PROTO=TCP SPT=2270 DPT=445
    Oct 7 20:14:21 -0700 SRC=63.184.96.217 DST=63.184.0.180 PROTO=TCP SPT=2270 DPT=445
    Oct 7 20:14:26 -0700 SRC=63.184.65.203 DST=63.184.0.180 PROTO=TCP SPT=2080 DPT=445
    Oct 7 20:14:29 -0700 SRC=63.184.65.203 DST=63.184.0.180 PROTO=TCP SPT=2080 DPT=445
    Oct 7 20:14:53 -0700 SRC=63.184.16.193 DST=63.184.0.180 PROTO=TCP SPT=4846 DPT=135
    Oct 7 20:14:57 -0700 SRC=63.184.16.193 DST=63.184.0.180 PROTO=TCP SPT=4846 DPT=135

  • Next message: Bit Twister: "Re: Probes on Port 135 and 445 continue"