Alert Table for example_huney_anon.pcapng

Relative Time Packet Source Source Port Destination Dest Port Category Rule Set Signature Severity
130.0 39 118.122.91.181 10234 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
131.0 41 118.122.91.181 10234 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
281.0 101 219.142.13.250 58721 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
282.0 103 219.142.13.250 58721 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
302.0 110 185.53.91.103 5090 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
302.0 110 185.53.91.103 5090 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
398.0 140 58.42.225.225 52568 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
399.0 142 58.42.225.225 52568 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
421.0 166 59.41.254.62 53579 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
422.0 168 59.41.254.62 53579 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
608.0 260 66.240.219.146 20365 192.168.0.2 4070 Attempted Information Leak ET SCAN HID VertX and Edge door controllers discover 2
1233.0 613 222.74.204.51 60336 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
1234.0 615 222.74.204.51 62757 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
2234.0 1078 222.170.128.188 49313 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
2235.0 1080 222.170.128.188 49313 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
2246.0 1088 222.170.128.188 51598 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
2247.0 1090 222.170.128.188 51598 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
3036.0 1451 111.14.58.136 5279 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
3037.0 1453 111.14.58.136 5279 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
3212.0 1584 119.145.169.14 6226 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
3213.0 1586 119.145.169.14 6226 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
3448.0 1717 58.57.194.150 49700 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
3449.0 1719 58.57.194.150 49700 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
3735.0 1903 183.82.32.227 33599 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
3736.0 1905 183.82.32.227 12535 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
4334.0 2381 180.140.243.207 64065 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
4335.0 2385 180.140.243.207 64065 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
4802.0 2614 113.184.70.172 12968 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
4803.0 2618 113.184.70.172 12968 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
4993.0 2726 112.133.244.189 54174 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
4994.0 2728 112.133.244.189 54174 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
5360.0 2971 218.17.238.90 63238 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
5361.0 2973 218.17.238.90 63238 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
5459.0 3017 218.94.156.126 64857 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
5460.0 3019 218.94.156.126 64857 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
5847.0 3346 185.53.91.103 5100 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
5847.0 3346 185.53.91.103 5100 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
5925.0 3372 180.167.198.94 53730 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
5925.0 3374 180.167.198.94 53730 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
6001.0 3409 77.247.109.216 5070 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
6001.0 3409 77.247.109.216 5070 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
6900.0 3926 77.247.110.58 5411 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
6900.0 3926 77.247.110.58 5411 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
7089.0 4062 185.53.88.209 5062 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
7089.0 4062 185.53.88.209 5062 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
7149.0 4095 61.164.152.209 53640 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
7150.0 4097 61.164.152.209 53640 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
7212.0 4155 184.105.139.67 12064 192.168.0.2 161 Attempted Information Leak GPL SNMP public access udp 2
7680.0 4464 120.40.211.207 12984 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
7681.0 4466 120.40.211.207 12984 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
7857.0 4575 101.86.101.137 46712 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
7858.0 4577 101.86.101.137 46712 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
8192.0 4729 27.223.78.170 58111 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
8192.0 4733 27.223.78.170 58111 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
8283.0 4766 117.240.209.138 6936 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
8284.0 4768 117.240.209.138 6936 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
8718.0 5011 77.247.108.38 5216 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
8924.0 5138 112.133.232.75 11763 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
8924.0 5142 112.133.232.75 11763 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
9021.0 5201 40.40.40.138 56956 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
9150.0 5320 60.219.151.84 61056 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
9151.0 5324 60.219.151.84 61056 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
9646.0 5604 216.218.206.75 59729 192.168.0.2 111 Decode of an RPC Query GPL RPC portmap listing UDP 111 2
9703.0 5634 1.202.128.68 49992 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
9845.0 5713 111.35.194.30 4126 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
9846.0 5717 111.35.194.30 4126 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
10510.0 6125 206.161.232.5 37531 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
10511.0 6130 206.161.232.5 65058 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
10585.0 6162 118.122.120.59 64229 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
10586.0 6164 118.122.120.59 64229 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
10712.0 6222 54.38.222.28 5115 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
10712.0 6222 54.38.222.28 5115 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
11210.0 6494 211.32.21.14 6000 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
11273.0 6570 218.86.97.59 55509 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
11274.0 6580 218.86.97.59 55509 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
11289.0 6612 112.133.229.250 55713 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
11290.0 6614 112.133.229.250 55713 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
11402.0 6668 173.225.99.183 5060 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
11402.0 6668 173.225.99.183 5060 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
11430.0 6676 185.53.91.103 5142 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
11430.0 6676 185.53.91.103 5142 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
11454.0 6694 202.60.122.4 60428 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
11455.0 6698 202.60.122.4 60428 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
11508.0 6728 59.40.80.29 52136 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
11509.0 6730 59.40.80.29 52136 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
11689.0 6865 112.9.122.55 3339 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
11854.0 6963 120.85.77.209 50646 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
11855.0 6969 120.85.77.209 50646 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
12045.0 7039 27.124.10.58 56369 192.168.0.2 445 Misc Attack ET DROP Spamhaus DROP Listed Traffic Inbound group 2 2
12272.0 7221 118.74.160.98 56283 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
12272.0 7223 118.74.160.98 56283 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
12296.0 7247 120.85.77.209 51239 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
12297.0 7249 120.85.77.209 51239 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
12728.0 7482 112.133.229.253 38894 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
12729.0 7484 112.133.229.253 38894 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
13107.0 7789 183.82.32.227 23825 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
13108.0 7791 183.82.32.227 42283 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
13216.0 7865 58.218.66.7 6000 192.168.0.2 3306 Potentially Bad Traffic ET SCAN Suspicious inbound to mySQL port 3306 2
13216.0 7867 58.218.66.7 6000 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
13539.0 8246 221.230.58.250 23843 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
13680.0 8465 104.152.52.23 56093 192.168.0.2 3306 Potentially Bad Traffic ET SCAN Suspicious inbound to mySQL port 3306 2
13690.0 8475 59.41.5.179 2156 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
13815.0 8600 112.133.232.82 29045 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
13816.0 8602 112.133.232.82 29045 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
13826.0 8618 104.152.52.23 56093 192.168.0.2 5432 Potentially Bad Traffic ET SCAN Suspicious inbound to PostgreSQL port 5432 2
14342.0 9131 104.152.52.23 56093 192.168.0.2 161 Attempted Information Leak GPL SNMP public access udp 2
14432.0 9245 104.152.52.23 56093 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
14507.0 9317 77.247.110.19 5107 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
14507.0 9317 77.247.110.19 5107 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
14865.0 9794 122.228.19.80 6821 192.168.0.2 1521 Potentially Bad Traffic ET SCAN Suspicious inbound to Oracle SQL port 1521 2
15314.0 10144 49.50.108.163 1363 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
15315.0 10146 49.50.108.163 1363 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
15447.0 10235 117.144.202.198 40711 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
15448.0 10237 117.144.202.198 40711 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
15556.0 10329 112.101.194.166 63887 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
15556.0 10331 112.101.194.166 63887 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
15673.0 10449 222.74.21.170 50448 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
15674.0 10451 222.74.21.170 50448 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
15752.0 10528 1.56.51.10 56299 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
15753.0 10530 1.56.51.10 56299 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
15850.0 10586 113.4.133.5 31325 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
16448.0 10958 171.248.25.153 57155 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
16889.0 11280 58.187.161.111 55941 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
16890.0 11282 58.187.161.111 55941 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
16944.0 11339 185.53.91.103 5077 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
16944.0 11339 185.53.91.103 5077 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
17385.0 11757 101.68.87.26 49399 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
17386.0 11759 124.160.17.98 49399 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
17397.0 11763 171.34.69.190 61273 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
17398.0 11765 171.34.69.190 48488 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
18554.0 12621 54.38.222.28 5115 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
18554.0 12621 54.38.222.28 5115 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
18892.0 12859 112.133.245.65 10250 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
18892.0 12861 112.133.245.65 10250 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
18932.0 12925 202.198.7.194 38125 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
18933.0 12929 202.198.7.194 41197 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
19630.0 13476 183.31.96.5 9418 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
19631.0 13478 183.31.96.5 9418 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
20143.0 13815 117.2.143.147 60485 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
20143.0 13819 117.2.143.147 60485 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
20202.0 13871 60.12.93.178 58819 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
20203.0 13873 122.225.87.133 58897 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
20699.0 14187 158.69.241.207 5098 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
20699.0 14187 158.69.241.207 5098 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
20980.0 14406 218.26.190.110 12313 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
20980.0 14408 218.26.190.110 12314 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
21125.0 14541 185.53.88.150 5096 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
21125.0 14541 185.53.88.150 5096 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
21249.0 14622 198.108.66.27 56111 192.168.0.2 3306 Potentially Bad Traffic ET SCAN Suspicious inbound to mySQL port 3306 2
21609.0 14953 221.226.75.146 17274 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
21610.0 14959 221.226.75.146 17410 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
21611.0 14961 221.226.75.146 17495 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
22231.0 15469 125.74.110.17 9804 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
22232.0 15475 125.74.110.17 10130 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
22431.0 15682 113.160.180.181 25676 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
22432.0 15684 113.160.180.181 25676 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
22558.0 15775 185.53.91.103 5093 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
22558.0 15775 185.53.91.103 5093 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
22904.0 16003 106.12.201.247 26678 192.168.0.2 3306 Potentially Bad Traffic ET SCAN Suspicious inbound to mySQL port 3306 2
23321.0 16292 52.73.169.169 54905 192.168.0.2 19 Misc Attack ET CINS Active Threat Intelligence Poor Reputation IP group 81 2
23443.0 16343 218.94.156.126 46037 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
23444.0 16345 218.94.156.126 46037 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
24455.0 17107 185.10.68.232 43259 192.168.0.2 3306 Potentially Bad Traffic ET SCAN Suspicious inbound to mySQL port 3306 2
24507.0 17128 123.130.112.90 63578 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
24508.0 17130 123.130.112.90 63578 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
24544.0 17178 211.144.12.75 65083 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
24545.0 17180 211.144.12.75 65083 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
25469.0 17885 211.141.213.135 6000 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
26117.0 20015 42.224.92.11 63515 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
26117.0 20019 42.224.92.11 63515 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
27522.0 24697 80.211.250.181 5076 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
27952.0 26081 124.65.107.42 14064 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
27952.0 26087 124.65.107.42 14064 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
28064.0 26451 185.53.91.103 5069 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
28064.0 26451 185.53.91.103 5069 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
28949.0 29653 59.39.180.170 64536 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
28950.0 29657 59.39.180.170 64536 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
28964.0 29703 54.38.222.28 5060 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
28964.0 29703 54.38.222.28 5060 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
29073.0 30121 112.53.71.175 34936 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
29143.0 30367 171.114.164.18 5177 192.168.0.2 3306 Potentially Bad Traffic ET SCAN Suspicious inbound to mySQL port 3306 2
29367.0 31127 112.133.246.88 17647 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
29367.0 31129 112.133.246.88 17647 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
29518.0 31645 113.166.127.153 36435 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
29519.0 31653 113.166.127.153 36435 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
30483.0 34874 69.162.77.242 5123 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
30483.0 34874 69.162.77.242 5123 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
30648.0 35335 54.38.222.28 5109 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
30648.0 35335 54.38.222.28 5109 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
30822.0 35924 122.225.192.78 1317 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
30823.0 35928 122.225.192.78 1317 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
31142.0 36906 111.14.198.170 4198 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
31274.0 37318 35.229.201.154 51653 192.168.0.2 3306 Potentially Bad Traffic ET SCAN Suspicious inbound to mySQL port 3306 2
31851.0 39092 180.111.189.136 16911 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
31852.0 39096 180.111.189.136 16911 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
32288.0 40396 5.238.223.18 65085 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
32289.0 40400 5.238.223.18 65085 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
32450.0 40858 202.62.41.68 49198 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
32451.0 40864 202.62.41.68 49198 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
32615.0 41382 113.134.216.193 15785 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
32616.0 41384 113.134.216.193 15785 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
32669.0 41583 101.71.250.162 50167 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
32772.0 41939 182.139.75.221 30853 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
32773.0 41943 182.139.75.221 30853 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
33309.0 43562 123.114.41.18 53669 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
33309.0 43566 123.114.41.18 53669 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
33350.0 43712 123.130.112.90 62867 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
33351.0 43714 123.130.112.90 62867 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
33354.0 43726 60.218.134.59 52493 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
33355.0 43730 60.218.134.59 19354 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
33725.0 44930 185.53.91.103 5127 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
33725.0 44930 185.53.91.103 5127 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
34285.0 46727 111.176.152.248 64280 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
34286.0 46731 111.176.152.248 64280 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
34691.0 48095 119.185.175.235 60432 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
34692.0 48097 119.185.175.235 60432 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
35364.0 50237 183.2.202.42 5067 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
35364.0 50237 183.2.202.42 5067 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
35413.0 50407 112.38.198.235 7613 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
36485.0 53903 60.208.111.194 23456 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
38745.0 62292 185.53.88.209 5085 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
38745.0 62292 185.53.88.209 5085 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
39151.0 64032 183.63.169.142 63619 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
40052.0 66581 77.247.109.209 5069 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
40294.0 67187 77.247.108.79 5142 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
40294.0 67187 77.247.108.79 5142 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
40579.0 67926 77.247.109.209 5061 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
40579.0 67926 77.247.109.209 5061 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
40607.0 68012 54.38.222.28 5060 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
40607.0 68012 54.38.222.28 5060 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
42654.0 72012 107.170.197.82 34513 192.168.0.2 3306 Potentially Bad Traffic ET SCAN Suspicious inbound to mySQL port 3306 2
42695.0 72036 51.38.12.12 52018 192.168.0.2 443 Misc Attack ET CINS Active Threat Intelligence Poor Reputation IP group 79 2
42708.0 72045 114.247.103.219 58679 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
42709.0 72047 114.247.103.219 58679 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
43571.0 72641 58.218.66.7 6000 192.168.0.2 3306 Potentially Bad Traffic ET SCAN Suspicious inbound to mySQL port 3306 2
43571.0 72643 58.218.66.7 6000 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
43873.0 72763 77.247.109.209 5134 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
43873.0 72763 77.247.109.209 5134 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
44397.0 73027 77.247.109.209 5121 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
44397.0 73027 77.247.109.209 5121 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
44459.0 73073 125.217.205.75 6251 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
44462.0 73085 125.217.205.75 6251 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
45842.0 73861 107.170.203.236 41623 192.168.0.2 3306 Potentially Bad Traffic ET SCAN Suspicious inbound to mySQL port 3306 2
45887.0 73891 77.247.108.79 5089 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
45887.0 73891 77.247.108.79 5089 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
46175.0 74001 27.72.152.12 63053 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
46176.0 74003 27.72.152.12 63053 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
46910.0 74575 43.226.49.237 64866 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
47433.0 74937 27.223.78.170 51854 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
47434.0 74939 223.80.102.186 51854 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
47607.0 75029 77.247.109.209 5099 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
47607.0 75029 77.247.109.209 5099 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
47811.0 75178 212.83.129.182 5072 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
48111.0 75340 77.247.109.209 5112 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
48256.0 75404 196.52.43.51 52247 192.168.0.2 5432 Potentially Bad Traffic ET SCAN Suspicious inbound to PostgreSQL port 5432 2
48461.0 75513 218.65.96.111 46814 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
48462.0 75517 218.65.96.111 46814 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
48630.0 75574 77.247.110.23 5394 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
48630.0 75574 77.247.110.23 5394 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
49606.0 76119 185.173.35.1 54280 192.168.0.2 3306 Potentially Bad Traffic ET SCAN Suspicious inbound to mySQL port 3306 2
49694.0 76169 77.247.110.70 9095 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
49694.0 76169 77.247.110.70 9095 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
49724.0 76179 183.134.68.220 12589 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
50245.0 76540 68.183.53.249 63051 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
50246.0 76542 68.183.53.249 63051 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
50691.0 76739 162.243.144.89 34622 192.168.0.2 5432 Potentially Bad Traffic ET SCAN Suspicious inbound to PostgreSQL port 5432 2
50822.0 76848 196.52.43.113 51356 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
51393.0 77106 77.247.108.79 5129 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
51393.0 77106 77.247.108.79 5129 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
51630.0 77224 196.52.43.112 59789 192.168.0.2 161 Attempted Information Leak GPL SNMP public access udp 2
51725.0 77273 54.38.222.28 5060 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
51725.0 77273 54.38.222.28 5060 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
51928.0 77369 77.247.110.58 6887 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
51928.0 77369 77.247.110.58 6887 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
52394.0 77590 77.247.109.209 5068 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
52394.0 77590 77.247.109.209 5068 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
53045.0 77956 185.53.88.242 5188 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
53045.0 77956 185.53.88.242 5188 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
54030.0 78382 218.108.73.134 55509 192.168.0.2 3306 Potentially Bad Traffic ET SCAN Suspicious inbound to mySQL port 3306 2
54168.0 78449 103.219.30.164 57074 192.168.0.2 3306 Potentially Bad Traffic ET SCAN Suspicious inbound to mySQL port 3306 2
55539.0 79234 212.83.151.25 5062 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
55539.0 79234 212.83.151.25 5062 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
56090.0 79519 77.247.109.209 5081 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
56090.0 79519 77.247.109.209 5081 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
56625.0 79734 54.38.222.28 5082 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
56625.0 79734 54.38.222.28 5082 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
57042.0 79948 77.247.108.79 5134 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
57042.0 79948 77.247.108.79 5134 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
59769.0 81096 77.247.109.209 5072 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
59769.0 81096 77.247.109.209 5072 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
59876.0 81139 194.55.187.2 39974 192.168.0.2 3306 Potentially Bad Traffic ET SCAN Suspicious inbound to mySQL port 3306 2
60059.0 81197 222.240.228.80 49012 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
60059.0 81199 222.240.228.80 49012 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
60409.0 81448 68.183.53.249 52045 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
60410.0 81450 68.183.53.249 52045 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
61391.0 81830 54.38.222.28 5095 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
61673.0 81916 195.154.199.206 5102 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
62161.0 82118 144.217.39.181 5098 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
62161.0 82118 144.217.39.181 5098 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
62566.0 82304 77.247.108.79 5079 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
62566.0 82304 77.247.108.79 5079 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
63438.0 82710 77.247.109.209 5082 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
63559.0 82761 71.6.232.6 36639 192.168.0.2 161 Attempted Information Leak GPL SNMP public access udp 2
63783.0 82857 183.2.202.42 5075 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
63783.0 82857 183.2.202.42 5075 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
64520.0 83205 139.162.110.42 52246 192.168.0.2 3306 Potentially Bad Traffic ET SCAN Suspicious inbound to mySQL port 3306 2
64585.0 83247 66.240.205.34 16847 192.168.0.2 443 Misc Attack ET CINS Active Threat Intelligence Poor Reputation IP group 97 2
64615.0 83262 185.53.88.209 5140 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
64615.0 83262 185.53.88.209 5140 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
65489.0 83643 77.247.109.216 5101 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
65489.0 83643 77.247.109.216 5101 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
65756.0 83817 51.68.94.252 5060 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
65756.0 83817 51.68.94.252 5060 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
66675.0 84989 54.38.222.28 5119 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
66675.0 84989 54.38.222.28 5119 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
66833.0 85648 185.53.88.2 5850 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
67188.0 87127 77.247.109.209 5061 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
67188.0 87127 77.247.109.209 5061 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
67554.0 88648 183.2.202.42 5063 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
67554.0 88648 183.2.202.42 5063 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
68174.0 91366 77.247.108.79 5137 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
68174.0 91366 77.247.108.79 5137 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
68400.0 92357 217.61.4.213 5091 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
68400.0 92357 217.61.4.213 5091 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
68844.0 94116 107.170.192.67 56719 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
69188.0 95540 77.247.109.216 5184 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
69188.0 95540 77.247.109.216 5184 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
69450.0 96623 195.154.199.206 5111 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
69450.0 96623 195.154.199.206 5111 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
70454.0 100421 162.243.138.97 39921 192.168.0.2 1521 Potentially Bad Traffic ET SCAN Suspicious inbound to Oracle SQL port 1521 2
70786.0 101710 77.247.109.209 5066 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
70786.0 101710 77.247.109.209 5066 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
70926.0 102241 45.79.110.218 55266 192.168.0.2 8118 Misc Attack ET CINS Active Threat Intelligence Poor Reputation IP group 67 2
71325.0 103724 185.53.88.242 5143 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
71325.0 103724 185.53.88.242 5143 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
71868.0 105936 77.247.108.86 5070 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
71868.0 105936 77.247.108.86 5070 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
71873.0 105948 112.101.194.166 62013 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
71873.0 105956 112.101.194.166 62013 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
72051.0 106625 123.244.31.13 53124 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
72051.0 106629 123.244.31.13 53124 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
72127.0 106916 54.38.222.28 5136 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
72127.0 106916 54.38.222.28 5136 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
72688.0 109105 43.226.49.237 31419 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
72714.0 109218 111.192.228.42 26081 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
72714.0 109224 111.192.228.42 28425 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
72914.0 109997 209.126.67.38 5065 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
72914.0 109997 209.126.67.38 5065 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
72933.0 110073 112.16.145.42 57332 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
72934.0 110077 112.16.145.42 57332 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
73089.0 110611 185.10.68.232 53842 192.168.0.2 3306 Potentially Bad Traffic ET SCAN Suspicious inbound to mySQL port 3306 2
73171.0 110937 195.154.199.206 5074 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
73171.0 110937 195.154.199.206 5074 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
73317.0 111527 218.29.219.42 63644 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
73318.0 111533 218.29.219.42 33598 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
73333.0 111597 27.72.152.12 52012 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
73333.0 111599 27.72.152.12 52012 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
73345.0 111645 77.247.109.216 5086 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
73345.0 111645 77.247.109.216 5086 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
73764.0 113337 77.247.108.79 5156 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
73764.0 113337 77.247.108.79 5156 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
73855.0 113631 173.82.154.174 51142 192.168.0.2 3306 Potentially Bad Traffic ET SCAN Suspicious inbound to mySQL port 3306 2
74092.0 114539 58.218.66.7 6000 192.168.0.2 3306 Potentially Bad Traffic ET SCAN Suspicious inbound to mySQL port 3306 2
74092.0 114541 58.218.66.7 6000 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
74518.0 116081 77.247.109.209 5096 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
74518.0 116081 77.247.109.209 5096 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
74556.0 116235 185.94.111.1 42602 192.168.0.2 161 Attempted Information Leak GPL SNMP public access udp 2
74739.0 117005 122.225.192.78 56697 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
74740.0 117007 122.225.192.78 56697 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
74964.0 117920 185.53.88.209 5080 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
74964.0 117920 185.53.88.209 5080 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
74969.0 117942 223.96.229.124 12930 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
74970.0 117948 223.96.229.124 12930 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
75326.0 119518 222.132.171.37 35721 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
75327.0 119526 222.132.171.37 35721 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
75387.0 119772 222.168.130.186 55444 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
75388.0 119778 222.168.130.186 56981 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
75556.0 120476 217.61.4.213 5124 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
75556.0 120476 217.61.4.213 5124 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
75620.0 120742 123.178.21.90 62594 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
75621.0 120749 123.178.21.90 62594 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
75889.0 121769 180.104.119.186 50381 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
75889.0 121771 180.104.119.186 50381 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
75890.0 121783 180.104.119.186 50381 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
75935.0 121948 220.199.118.207 58054 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
75935.0 121952 220.199.118.207 58054 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
75943.0 121980 125.126.60.148 50732 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
75943.0 121994 125.126.60.148 50732 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
75944.0 121998 125.126.60.148 50732 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
76080.0 122539 59.34.157.39 18519 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
76081.0 122543 59.34.157.39 18519 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
76232.0 123100 121.205.49.108 13217 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
76532.0 124099 183.2.202.42 5063 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
76532.0 124099 183.2.202.42 5063 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
76552.0 124103 14.23.92.218 61530 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
76552.0 124105 14.23.92.218 61530 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
76596.0 124123 194.63.143.12 5142 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
76596.0 124123 194.63.143.12 5142 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
76710.0 124158 221.13.128.20 61449 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
76711.0 124160 221.13.128.20 61449 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
76768.0 124168 117.2.143.147 52461 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
76769.0 124170 117.2.143.147 52461 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
77044.0 124262 218.6.160.11 7627 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
77358.0 124428 112.99.84.160 17467 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
77358.0 124432 112.99.84.160 17638 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
77636.0 124555 128.206.118.37 5061 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
77636.0 124555 128.206.118.37 5061 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
77829.0 124643 142.4.13.135 5487 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
77829.0 124643 142.4.13.135 5487 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
78065.0 124739 222.186.56.152 21149 192.168.0.2 3306 Potentially Bad Traffic ET SCAN Suspicious inbound to mySQL port 3306 2
78149.0 124780 218.29.219.42 58183 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
78150.0 124786 218.29.219.42 62899 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
78157.0 124788 218.94.100.140 18775 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
78158.0 124790 218.94.100.140 19031 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
78172.0 124800 77.247.109.209 5063 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
78172.0 124800 77.247.109.209 5063 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
78326.0 124853 185.53.88.209 5088 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
78326.0 124853 185.53.88.209 5088 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
78352.0 124865 202.60.125.207 61446 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
78353.0 124867 202.60.125.207 61446 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
78443.0 124892 223.100.27.233 57316 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
78444.0 124894 223.100.27.233 57316 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
78544.0 124936 125.69.81.33 60838 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
78597.0 124945 203.156.183.241 58117 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
78598.0 124947 203.156.183.241 58117 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
78806.0 125038 111.59.236.28 52704 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
78871.0 125065 185.53.88.209 5083 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
78871.0 125065 185.53.88.209 5083 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
78911.0 125077 222.173.72.166 60927 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
78911.0 125079 222.173.72.166 60927 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
78924.0 125083 185.176.26.100 42568 192.168.0.2 3306 Potentially Bad Traffic ET SCAN Suspicious inbound to mySQL port 3306 2
78956.0 125099 113.101.36.21 1308 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
78957.0 125101 113.101.36.21 1308 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
78966.0 125103 157.122.68.100 55302 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
78967.0 125105 157.122.68.100 55302 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
79194.0 125204 2.191.189.59 63919 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
79194.0 125206 2.191.189.59 63919 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
79195.0 125208 2.191.189.59 63919 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
79196.0 125210 2.191.189.59 63919 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
79210.0 125212 77.247.108.79 5083 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
79210.0 125212 77.247.108.79 5083 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
79249.0 125219 218.94.101.106 11818 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
79250.0 125221 218.94.101.106 11818 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
79251.0 125226 218.94.101.106 11818 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
79298.0 125253 36.23.90.177 17874 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
79299.0 125255 36.23.90.177 17881 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
79336.0 125275 110.255.5.212 49743 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
79337.0 125280 110.255.5.212 49743 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
79388.0 125308 111.78.216.79 36591 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
79388.0 125310 111.78.216.79 36591 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
79412.0 125322 14.228.245.9 56320 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
79413.0 125324 14.228.245.9 56320 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
79728.0 125429 101.249.139.28 9085 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
79729.0 125433 101.249.139.28 9085 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
79827.0 125458 59.172.77.252 56794 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
79828.0 125460 59.172.77.252 56794 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
79970.0 125500 59.172.58.86 53111 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
79971.0 125502 59.172.58.86 53111 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
80074.0 125528 125.69.81.33 64018 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
80121.0 125543 115.238.175.90 61191 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
80122.0 125545 115.238.175.90 61191 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
80164.0 125547 111.17.214.112 58684 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
80179.0 125555 58.56.158.198 64809 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
80180.0 125557 58.56.158.198 64809 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
80345.0 125598 218.94.101.106 12670 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
80346.0 125600 218.94.101.106 12670 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
80347.0 125602 218.94.101.106 12670 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
80377.0 125607 158.69.241.207 5085 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
80377.0 125607 158.69.241.207 5085 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
80386.0 125609 185.53.88.203 6522 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
80386.0 125609 185.53.88.203 6522 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
80568.0 125663 54.38.222.28 5123 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
80568.0 125663 54.38.222.28 5123 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
80624.0 125691 117.135.232.6 64638 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
80625.0 125693 117.135.232.6 64639 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
81083.0 125855 89.248.167.131 31667 192.168.0.2 5432 Potentially Bad Traffic ET SCAN Suspicious inbound to PostgreSQL port 5432 2
81398.0 125971 218.28.126.207 10981 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
81399.0 125973 218.28.126.207 10981 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
81484.0 125997 162.243.144.104 45278 192.168.0.2 111 Decode of an RPC Query GPL RPC portmap listing UDP 111 2
81520.0 126014 77.247.110.35 5520 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
81885.0 126168 77.247.109.209 5090 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
81885.0 126168 77.247.109.209 5090 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
82027.0 126241 27.72.152.12 64930 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
82027.0 126243 27.72.152.12 64930 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
82037.0 126249 61.188.18.25 47212 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
82038.0 126253 61.188.18.25 47212 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
82159.0 126296 66.240.205.34 9111 192.168.0.2 443 Misc Attack ET CINS Active Threat Intelligence Poor Reputation IP group 97 2
82180.0 126304 184.105.139.105 3707 192.168.0.2 177 Attempted Information Leak GPL RPC xdmcp info query 2
82635.0 126586 115.238.175.90 65497 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
82636.0 126588 115.238.175.90 65497 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
82686.0 126607 185.53.88.244 5155 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
82686.0 126607 185.53.88.244 5155 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
82864.0 126689 59.59.132.12 22237 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
82865.0 126693 59.59.132.12 22237 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
83260.0 126857 120.237.75.104 41212 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
83261.0 126859 120.237.75.104 41212 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
83286.0 126864 61.144.52.114 58648 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
83287.0 126866 61.144.52.114 58648 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
83374.0 126920 183.129.157.60 57260 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
83374.0 126922 183.129.157.60 57260 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
83564.0 127000 119.131.77.172 4352 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
83565.0 127002 119.131.77.172 4416 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
83898.0 127196 68.183.86.97 46869 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
83933.0 127210 175.153.160.146 54132 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
83934.0 127212 175.153.160.146 54132 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
83940.0 127220 106.124.37.10 4910 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
83941.0 127222 106.124.37.10 4910 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
83989.0 127247 223.100.27.233 61825 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
83990.0 127249 223.100.27.233 61825 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
84001.0 127260 218.94.156.126 56020 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
84002.0 127262 218.94.156.126 56020 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
84312.0 127427 106.115.39.238 30624 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
84312.0 127429 106.115.39.238 30624 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
84319.0 127434 112.224.69.108 52158 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
84319.0 127436 112.224.69.108 52159 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
84980.0 127760 77.247.108.79 5149 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
84980.0 127760 77.247.108.79 5149 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
84985.0 127768 221.130.252.39 50201 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
84986.0 127775 221.130.252.39 50744 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
85196.0 127881 107.170.194.158 52798 192.168.0.2 161 Attempted Information Leak GPL SNMP public access udp 2
85431.0 127996 114.247.103.219 19208 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
85495.0 128030 113.248.150.157 5267 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
85496.0 128032 113.248.150.157 5267 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
85558.0 128054 77.247.109.209 5095 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
85558.0 128054 77.247.109.209 5095 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
85689.0 128122 183.2.202.42 5063 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
85689.0 128122 183.2.202.42 5063 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
85990.0 128269 183.64.215.58 34668 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
85991.0 128271 183.64.215.58 34668 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
86074.0 128309 112.95.211.178 32466 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
86074.0 128313 112.95.211.178 32466 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
86197.0 128393 124.114.141.10 50533 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
86198.0 128395 124.114.141.10 50533 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
86513.0 128550 218.28.126.207 12167 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
86514.0 128552 218.28.126.207 12167 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
86569.0 128558 112.6.124.253 5346 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
87220.0 128929 66.79.174.236 41353 192.168.0.2 3306 Potentially Bad Traffic ET SCAN Suspicious inbound to mySQL port 3306 2
87326.0 128978 153.36.201.15 54975 192.168.0.2 3306 Potentially Bad Traffic ET SCAN Suspicious inbound to mySQL port 3306 2
87819.0 129216 14.23.163.253 51303 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
87819.0 129218 14.23.163.253 51303 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
88535.0 129500 62.173.151.168 5070 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
88535.0 129500 62.173.151.168 5070 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
88786.0 129692 59.39.180.170 61146 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
88787.0 129696 59.39.180.170 61146 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
88980.0 129771 171.255.68.26 14924 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
88981.0 129775 171.255.68.26 14924 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
89158.0 129879 89.46.218.190 56077 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
89159.0 129881 89.46.218.190 56077 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
89250.0 129919 77.247.109.209 5088 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
89250.0 129919 77.247.109.209 5088 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
89349.0 129967 101.71.250.162 60295 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
89604.0 130052 180.167.87.113 11737 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
89605.0 130054 180.167.87.113 12013 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
90066.0 130211 220.178.210.94 2499 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
90066.0 130213 220.178.210.94 2499 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
90356.0 130345 111.223.157.143 52686 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
90357.0 130347 111.223.157.143 52686 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
90372.0 130351 151.242.59.233 63573 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
90373.0 130353 151.242.59.233 63573 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
90495.0 130397 77.247.108.79 5146 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
90495.0 130397 77.247.108.79 5146 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
90729.0 130593 112.213.119.1 44046 192.168.0.2 445 Misc Attack ET DROP Spamhaus DROP Listed Traffic Inbound group 21 2
91123.0 130767 175.9.194.18 53847 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
91123.0 130769 175.9.194.18 53847 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
91303.0 130825 115.194.187.46 48291 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
91304.0 130827 115.194.187.46 48291 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
91707.0 130935 112.133.244.186 11632 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
91707.0 130937 112.133.244.186 11632 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
92090.0 131085 171.41.74.159 26638 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
92091.0 131087 171.41.74.159 27776 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
92139.0 131107 103.205.174.2 60693 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
92140.0 131109 103.205.174.2 60693 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
92168.0 131115 112.133.229.240 48870 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
92169.0 131119 112.133.229.240 48870 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
92257.0 131156 112.133.244.186 38832 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
92257.0 131158 112.133.244.186 38832 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
92401.0 131240 194.63.143.189 5328 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
92401.0 131240 194.63.143.189 5328 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
92654.0 131323 139.183.210.206 49317 192.168.0.2 445 Misc Attack ET DROP Spamhaus DROP Listed Traffic Inbound group 24 2
92772.0 131398 218.94.156.126 15170 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
92772.0 131400 218.94.156.126 15170 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
92823.0 131439 112.133.246.80 37089 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
92824.0 131441 112.133.246.80 37089 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
92949.0 131578 77.247.109.209 5085 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
92949.0 131578 77.247.109.209 5085 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
93304.0 131730 220.175.48.207 40337 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
93305.0 131734 220.175.48.207 40337 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
94516.0 132260 66.240.205.34 6211 192.168.0.2 10134 Misc Attack ET CINS Active Threat Intelligence Poor Reputation IP group 97 2
94864.0 132437 184.105.139.67 31493 192.168.0.2 161 Attempted Information Leak GPL SNMP public access udp 2
94869.0 132439 123.7.18.162 59476 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
94870.0 132441 123.7.18.162 59476 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
95370.0 132667 112.101.194.166 28497 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
95370.0 132669 112.101.194.166 28497 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
95533.0 132708 106.6.12.172 31576 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
95534.0 132710 106.6.12.172 31576 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
96309.0 133037 54.38.222.28 5150 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
96309.0 133037 54.38.222.28 5150 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
96331.0 133051 117.211.164.251 55446 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
96580.0 133170 77.247.110.58 5428 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
96580.0 133170 77.247.110.58 5428 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
96627.0 133189 77.247.108.79 5070 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
96627.0 133189 77.247.108.79 5070 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
96686.0 133212 218.5.9.194 6000 192.168.0.2 3306 Potentially Bad Traffic ET SCAN Suspicious inbound to mySQL port 3306 2
97100.0 133361 112.133.229.250 13545 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
97101.0 133363 112.133.229.250 13545 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
97671.0 133619 176.102.235.156 64668 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
97672.0 133621 176.102.235.156 64668 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
97880.0 133712 77.247.109.121 5060 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
97916.0 133730 112.195.213.83 62248 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
97917.0 133732 112.195.213.83 62248 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
97996.0 133753 77.247.109.219 5074 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
97996.0 133753 77.247.109.219 5074 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
98180.0 133831 183.64.62.164 1041 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
98181.0 133833 183.64.62.164 1041 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
98231.0 133859 158.69.241.207 5065 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
98231.0 133859 158.69.241.207 5065 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
98296.0 133895 59.172.27.18 49919 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
98297.0 133897 59.172.27.18 49919 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
98522.0 133996 222.74.204.51 44786 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
98532.0 134002 43.226.49.237 28577 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
98672.0 134057 111.14.8.167 8521 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
98673.0 134059 111.14.8.167 8521 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
98770.0 134105 113.109.216.87 52011 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
98770.0 134107 113.109.216.87 52011 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
98957.0 134179 40.40.80.72 56281 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
99044.0 134207 115.221.79.148 6000 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
99124.0 134248 125.212.178.175 3210 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
99125.0 134250 125.212.178.175 3210 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
99335.0 134334 103.225.124.198 58989 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
99335.0 134336 103.225.124.198 58989 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
99482.0 134381 112.133.229.241 9523 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
99483.0 134383 112.133.229.241 9523 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
99701.0 134449 218.29.219.43 58294 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
99702.0 134451 218.29.219.43 15192 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
100065.0 134594 112.133.232.64 19855 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
100066.0 134597 112.133.232.64 19855 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
100564.0 135010 121.205.173.98 42608 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
100564.0 135012 121.205.173.98 42608 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
100944.0 135204 58.22.87.35 5066 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
100944.0 135204 58.22.87.35 5066 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
100996.0 135231 5.219.146.238 32026 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
100997.0 135233 5.219.146.238 32026 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
101072.0 135260 183.239.219.146 9933 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
101073.0 135262 183.239.219.146 9933 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
101572.0 135456 216.218.206.111 42985 192.168.0.2 111 Decode of an RPC Query GPL RPC portmap listing UDP 111 2
102012.0 135642 112.133.246.69 8854 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
102012.0 135644 112.133.246.69 8854 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
102190.0 135726 77.247.108.79 5107 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
102190.0 135726 77.247.108.79 5107 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
102243.0 135744 218.67.94.133 52661 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
102244.0 135746 218.67.94.133 52661 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
102393.0 135805 219.142.13.250 58555 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
102394.0 135807 219.142.13.250 58555 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
103693.0 136297 66.240.205.34 1066 192.168.0.2 16464 Misc Attack ET CINS Active Threat Intelligence Poor Reputation IP group 97 2
103717.0 136308 77.247.108.84 5069 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
103717.0 136308 77.247.108.84 5069 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
104104.0 136466 180.168.124.179 16918 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
104105.0 136470 180.168.124.179 17042 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
104454.0 136706 77.247.108.93 5240 192.168.0.2 5060 Attempted Information Leak ET VOIP Modified Sipvicious Asterisk PBX User-Agent 2
104699.0 136767 58.218.66.7 6000 192.168.0.2 3306 Potentially Bad Traffic ET SCAN Suspicious inbound to mySQL port 3306 2
104699.0 136769 58.218.66.7 6000 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
104998.0 136901 80.211.250.181 5093 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
105737.0 137250 58.42.241.100 59776 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
105738.0 137252 58.42.241.100 59776 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
105754.0 137257 112.65.141.22 27778 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
105755.0 137259 112.65.141.22 27979 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
105963.0 137307 60.12.84.250 61269 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
105963.0 137309 60.12.84.250 61269 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
106040.0 137334 54.38.222.28 5120 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
106040.0 137334 54.38.222.28 5120 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
106049.0 137342 180.166.103.51 42710 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
106050.0 137344 180.166.103.51 42710 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
106652.0 137583 158.69.241.207 5072 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
106652.0 137583 158.69.241.207 5072 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
106879.0 137656 112.133.229.92 38808 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
106880.0 137658 112.133.229.92 38808 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
106922.0 137687 218.29.219.35 23386 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
106923.0 137689 218.29.219.35 7223 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
107209.0 137772 218.56.105.171 53859 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
107210.0 137774 218.56.105.171 53859 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
107210.0 137776 218.56.105.171 53859 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
107262.0 137797 118.122.91.181 10359 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
107263.0 137799 118.122.91.181 10359 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
107319.0 137816 192.155.98.196 18381 192.168.0.2 3306 Potentially Bad Traffic ET SCAN Suspicious inbound to mySQL port 3306 2
107813.0 137989 77.247.108.79 5106 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
107880.0 138023 112.133.229.255 7306 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
107881.0 138025 112.133.229.255 7306 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
108266.0 138191 112.209.250.219 20419 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
108267.0 138193 112.209.250.219 21429 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
108299.0 138211 14.251.80.6 52434 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
108300.0 138213 14.251.80.6 52434 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
108499.0 138297 112.133.229.92 47507 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
108500.0 138299 112.133.229.92 47507 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
108629.0 138367 218.77.84.55 61790 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
108630.0 138373 218.77.84.55 61790 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
108983.0 138544 198.108.66.20 41344 192.168.0.2 1521 Potentially Bad Traffic ET SCAN Suspicious inbound to Oracle SQL port 1521 2
109426.0 138796 77.247.109.121 5102 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
109426.0 138796 77.247.109.121 5102 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
109561.0 138880 58.57.194.150 58246 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
109562.0 138882 58.57.194.150 58246 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
110044.0 139250 211.141.83.125 9174 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
110045.0 139252 211.141.83.125 9175 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
110128.0 139302 59.39.180.170 52095 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
110129.0 139306 59.39.180.170 52095 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
110290.0 139434 81.31.246.217 58003 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
110291.0 139436 81.31.246.217 58003 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
110693.0 139786 77.247.109.219 5074 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
110693.0 139786 77.247.109.219 5074 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
110721.0 139811 88.99.76.20 53201 192.168.0.2 3306 Potentially Bad Traffic ET SCAN Suspicious inbound to mySQL port 3306 2
111326.0 140072 66.240.205.34 20368 192.168.0.2 4157 Misc Attack ET CINS Active Threat Intelligence Poor Reputation IP group 97 2
112307.0 140520 112.133.229.92 18009 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
112308.0 140522 112.133.229.92 18009 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
112689.0 140623 185.94.111.1 50543 192.168.0.2 111 Decode of an RPC Query GPL RPC portmap listing UDP 111 2
113405.0 140896 77.247.108.79 5088 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
113405.0 140896 77.247.108.79 5088 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
113744.0 141082 223.83.128.196 46407 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
114466.0 141466 60.2.35.58 52409 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
114467.0 141468 60.2.35.58 52409 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
115089.0 141725 14.251.80.6 59797 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
115089.0 141727 14.251.80.6 59797 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
115692.0 142061 66.240.236.119 18438 192.168.0.2 2323 Misc Attack ET CINS Active Threat Intelligence Poor Reputation IP group 97 2
115867.0 142134 58.51.63.28 52514 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
115868.0 142136 58.51.63.28 52366 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
116481.0 142376 185.173.35.21 57498 192.168.0.2 161 Attempted Information Leak GPL SNMP public access udp 2
116485.0 142381 54.38.222.28 5061 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
116485.0 142381 54.38.222.28 5061 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
116712.0 142489 185.53.88.244 5187 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
116712.0 142489 185.53.88.244 5187 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
117000.0 142614 117.144.2.86 57085 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
117001.0 142616 117.144.2.86 57085 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
117085.0 142656 185.53.88.209 5063 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
117085.0 142656 185.53.88.209 5063 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
117672.0 142932 14.251.80.6 49259 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
117672.0 142936 14.251.80.6 49259 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
117964.0 143097 192.228.100.98 40835 192.168.0.2 3306 Potentially Bad Traffic ET SCAN Suspicious inbound to mySQL port 3306 2
118921.0 143472 77.247.108.79 5142 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
118921.0 143472 77.247.108.79 5142 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
118941.0 143492 183.2.202.42 5077 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
118941.0 143492 183.2.202.42 5077 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
118990.0 143501 221.224.113.227 11787 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
119319.0 143640 58.214.34.66 16359 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
119320.0 143642 58.214.34.66 43302 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
120545.0 144192 59.46.181.226 64386 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
121664.0 144717 218.201.222.15 27696 192.168.0.2 1433 Potentially Bad Traffic ET SCAN Suspicious inbound to MSSQL port 1433 2
122317.0 144944 54.38.222.28 5060 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious Scan 2
122317.0 144944 54.38.222.28 5060 192.168.0.2 5060 Attempted Information Leak ET SCAN Sipvicious User-Agent Detected (friendly-scanner) 2
Open in new window Done