Scribd Logo
Upload

Welcome to Scribd!

  • 73 views

    Scans

    Uploaded by

    barevg
    The document reports on scans detected between December 30, 2020 and January 28, 2021. It shows that a device with the IP address 10.15.15.42 scanned various ports like 80, 443, 137 and 1900 on networks GP-VPN and GWWAN, with over 5,000 scans detected. Several other devices on the Local_Net2 network were also seen scanning port 443 on the GWWAN network. All scans were identified as host sweeps and alerts were triggered with an ID of 8002.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content

    You might also like

    Scans

    Uploaded by

    barevg
    73 views1 page
    The document reports on scans detected between December 30, 2020 and January 28, 2021. It shows that a device with the IP address 10.15.15.42 scanned various ports like 80, 443, 137 and 1900 on networks GP-VPN and GWWAN, with over 5,000 scans detected. Several other devices on the Local_Net2 network were also seen scanning port 443 on the GWWAN network. All scans were identified as host sweeps and alerts were triggered with an ID of 8002.

    Original Description:

    Original Title

    scans

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    The document reports on scans detected between December 30, 2020 and January 28, 2021. It shows that a device with the IP address 10.15.15.42 scanned various ports like 80, 443, 137 and 1900 on networks GP-VPN and GWWAN, with over 5,000 scans detected. Several other devices on the Local_Net2 network were also seen scanning port 443 on the GWWAN network. All scans were identified as host sweeps and alerts were triggered with an ID of 8002.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as pdf or txt
    73 views1 page

    Scans

    Uploaded by

    barevg
    The document reports on scans detected between December 30, 2020 and January 28, 2021. It shows that a device with the IP address 10.15.15.42 scanned various ports like 80, 443, 137 and 1900 on networks GP-VPN and GWWAN, with over 5,000 scans detected. Several other devices on the Local_Net2 network were also seen scanning port 443 on the GWWAN network. All scans were identified as host sweeps and alerts were triggered with an ID of 8002.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as pdf or txt
    of 1

    Scans

    Panorama : 2020/12/30 - 2021/01/28


    Source User Device Name Source Zone Source address Source Host Name Destination Zone Destination Port Threat/Content Name ID Action Count
    audit\grimesm BAO_PA-220 GP-VPN 10.15.15.42 10.15.15.42 GWWAN 62078 SCAN: Host Sweep 8002 alert 5.71 k
    BAO_PA-220 GP-VPN 10.15.15.42 10.15.15.42 GWWAN 5355 SCAN: Host Sweep 8002 alert 3.26 k
    BAO_PA-220 GP-VPN 10.15.15.42 10.15.15.42 GWWAN 80 SCAN: Host Sweep 8002 alert 3.13 k
    BAO_PA-220 GP-VPN 10.15.15.42 10.15.15.42 GWWAN 137 SCAN: Host Sweep 8002 alert 2.30 k
    BAO_PA-220 GP-VPN 10.15.15.42 10.15.15.42 GWWAN 1900 SCAN: Host Sweep 8002 alert 2.30 k
    BAO_PA-220 GP-VPN 10.15.15.42 10.15.15.42 GWWAN 3702 SCAN: Host Sweep 8002 alert 2.27 k
    BAO_PA-220 GP-VPN 10.15.15.42 10.15.15.42 GWWAN 445 SCAN: Host Sweep 8002 alert 533
    BAO_PA-220 GP-VPN 10.15.15.42 10.15.15.42 Local_Net2 62078 SCAN: Host Sweep 8002 alert 128
    BAO_PA-220 GP-VPN 10.15.15.42 10.15.15.42 Local_Net2 5355 SCAN: Host Sweep 8002 alert 80
    BAO_PA-220 GP-VPN 10.15.15.42 10.15.15.42 Local_Net2 80 SCAN: Host Sweep 8002 alert 49
    BAO_PA-220 GP-VPN 10.15.15.42 10.15.15.42 Local_Net2 3702 SCAN: Host Sweep 8002 alert 49
    BAO_PA-220 GP-VPN 10.15.15.42 10.15.15.42 Local_Net2 1900 SCAN: Host Sweep 8002 alert 44
    BAO_PA-220 GP-VPN 10.15.15.42 10.15.15.42 Local_Net2 137 SCAN: Host Sweep 8002 alert 35
    BAO_PA-220 GP-VPN 10.15.15.42 10.15.15.42 Local_Net2 445 SCAN: Host Sweep 8002 alert 23
    BAO_PA-220 Local_Net2 192.168.208.42 192.168.208.42 GWWAN 443 SCAN: Host Sweep 8002 alert 4
    BAO_PA-220 GP-VPN 10.15.15.15 10.15.15.15 GWWAN 443 SCAN: Host Sweep 8002 alert 3
    BAO_PA-220 GP-VPN 10.15.15.42 10.15.15.42 GWWAN 443 SCAN: Host Sweep 8002 alert 1
    BAO_PA-220 GP-VPN 10.15.15.42 10.15.15.42 GP-VPN 137 SCAN: Host Sweep 8002 alert 1
    audit\boyceg BAO_PA-220 Local_Net2 192.168.208.107 192.168.208.107 GWWAN 443 SCAN: Host Sweep 8002 alert 21
    audit\phillipsi BAO_PA-220 Local_Net2 192.168.208.66 192.168.208.66 GWWAN 443 SCAN: Host Sweep 8002 alert 12
    audit\elsona BAO_PA-220 Local_Net2 192.168.208.36 192.168.208.36 GWWAN 443 SCAN: Host Sweep 8002 alert 5
    BAO_PA-220 Local_Net2 192.168.208.86 192.168.208.86 GWWAN 443 SCAN: Host Sweep 8002 alert 5
    Unknown BAO_PA-220 Local_Net2 192.168.208.107 192.168.208.107 GWWAN 443 SCAN: Host Sweep 8002 alert 4
    BAO_PA-220 Local_Net2 192.168.208.75 192.168.208.75 GWWAN 443 SCAN: Host Sweep 8002 alert 3
    BAO_PA-220 Local_Net2 192.168.208.122 192.168.208.122 GWWAN 443 SCAN: Host Sweep 8002 alert 2
    BAO_PA-220 Local_Net2 192.168.208.66 192.168.208.66 GWWAN 443 SCAN: Host Sweep 8002 alert 1
    audit\maria BAO_PA-220 Local_Net2 192.168.208.100 192.168.208.100 GWWAN 443 SCAN: Host Sweep 8002 alert 6
    audit\sandifordl BAO_PA-220 Local_Net2 192.168.208.55 192.168.208.55 GWWAN 443 SCAN: Host Sweep 8002 alert 3
    BAO_PA-220 Local_Net2 192.168.208.44 192.168.208.44 GWWAN 443 SCAN: Host Sweep 8002 alert 2
    audit\smithk BAO_PA-220 GP-VPN 10.15.15.25 10.15.15.25 GWWAN 443 SCAN: Host Sweep 8002 alert 4
    BAO_PA-220 Local_Net2 192.168.208.76 192.168.208.76 GWWAN 443 SCAN: Host Sweep 8002 alert 1
    audit\trotmanl BAO_PA-220 Local_Net2 192.168.208.115 192.168.208.115 GWWAN 443 SCAN: Host Sweep 8002 alert 5
    audit\carters BAO_PA-220 Local_Net2 192.168.208.75 192.168.208.75 GWWAN 443 SCAN: Host Sweep 8002 alert 4
    audit\simmonso BAO_PA-220 Local_Net2 192.168.208.51 192.168.208.51 GWWAN 443 SCAN: Host Sweep 8002 alert 2
    BAO_PA-220 GP-VPN 10.15.15.13 10.15.15.13 GWWAN 443 SCAN: Host Sweep 8002 alert 1
    audit\coppinm BAO_PA-220 Local_Net2 192.168.208.57 192.168.208.57 GWWAN 443 SCAN: Host Sweep 8002 alert 2
    audit\chasen BAO_PA-220 Local_Net2 192.168.208.77 192.168.208.77 GWWAN 443 SCAN: Host Sweep 8002 alert 2
    audit\pollardr BAO_PA-220 Local_Net2 192.168.208.32 192.168.208.32 GWWAN 443 SCAN: Host Sweep 8002 alert 2
    audit\suec BAO_PA-220 Local_Net2 192.168.208.110 192.168.208.110 GWWAN 443 SCAN: Host Sweep 8002 alert 2
    audit\bradshawc BAO_PA-220 Local_Net2 192.168.208.98 192.168.208.98 GWWAN 443 SCAN: Host Sweep 8002 alert 2
    audit\williamsk BAO_PA-220 Local_Net2 192.168.208.45 192.168.208.45 GWWAN 443 SCAN: Host Sweep 8002 alert 1
    audit\harewoodc BAO_PA-220 Local_Net2 192.168.208.74 192.168.208.74 GWWAN 443 SCAN: Host Sweep 8002 alert 1
    audit\greavesa BAO_PA-220 Local_Net2 192.168.208.111 192.168.208.111 GWWAN 443 SCAN: Host Sweep 8002 alert 1
    audit\rogersa BAO_PA-220 Local_Net2 192.168.208.96 192.168.208.96 GWWAN 443 SCAN: Host Sweep 8002 alert 1

    http://www.paloaltonetworks.com

    You might also like