What are the causes an IP internal to "attack" multiple public IP addresses?

We had to many TCP SYN host sweep. Could someone share what could cause the above? Follow copies of the alert details.

evIdsAlert: eventId = 1216742775473866070 = severity = informational Cisco vendor

Author:

hostId: ips

appName: sensorApp

appInstanceId: 403

time: August 8, 2008 19:18:53 UTC offset = 480 timeZone = GMT-08:00

signature: description = TCP SYN host Sweep id = 3030 = S2 version

subsigId: 0

marsCategory: probe/SpecificPorts

interfaceGroup: vs0

VLAN: 0

participants:

striker:

addr: 172.16.5.111 locality = OUT

Port: 3958

target:

addr: 69.63.178.11 locality = OUT

OS: idSource = unknown type = unknown = relevant

target:

addr: 64.62.193.70 locality = OUT

OS: idSource = unknown type = unknown = relevant

target:

addr: 77.67.127.41 locality = OUT

OS: idSource = unknown type = unknown = relevant

target:

addr: 64.215.162.27 locality = OUT

OS: idSource = unknown type = unknown = relevant

target:

addr: 65.55.15.242 locality = OUT

OS: idSource = unknown type = unknown = relevant

target:

addr: 77.67.127.10 locality = OUT

OS: idSource = unknown type = unknown = relevant

target:

addr: 69.63.176.167 locality = OUT

OS: idSource = unknown type = unknown = relevant

target:

addr: 65.242.27.32 locality = OUT

OS: idSource = unknown type = unknown = relevant

target:

addr: 64.209.118.140 locality = OUT

OS: idSource = unknown type = unknown = relevant

target:

addr: 77.67.127.25 locality = OUT

OS: idSource = unknown type = unknown = relevant

target:

addr: 207.200.64.225 locality = OUT

OS: idSource = unknown type = unknown = relevant

target:

addr: 207.68.179.219 locality = OUT

OS: idSource = unknown type = unknown = relevant

target:

addr: 65.55.13.158 locality = OUT

OS: idSource = unknown type = unknown = relevant

target:

addr: 63.217.8.128 locality = OUT

OS: idSource = unknown type = unknown = relevant

target:

addr: 66.151.244.212 locality = OUT

OS: idSource = unknown type = unknown = relevant

target:

addr: 207.200.64.161 locality = OUT

OS: idSource = unknown type = unknown = relevant

alertDetails: InterfaceAttributes: = 'Unknown' physical context = 'Unknown' bottom of basket = "GigabitEthernet0/1 ';

riskRatingValue: 31 targetValueRating = average attackRelevanceRating = relevant

threatRatingValue: 31

Interface: GigabitEthernet0/1 context unknown physical = unknown = backplane = GigabitEthernet0/1

Protocol: tcp

Scans when detected on the network local are "mostly" false positives, that's the official word from Cisco:

http://Tools.Cisco.com/Security/Center/viewIpsSignature.x?signatureId=3030&signatureSubId=0&softwareVersion=6.0&releaseVersion=S2

"Benign triggers.

Scan host 3030 and 3032 signatures detect behaviors that cannot be observed from sources outside the local network, but are normal behaviors for sources within the local network. »

You can filter these signatures of the LAN hosts using event Action filters or tune the signature (using the source / dest. fields inside).

Concerning

Farrukh

Tags: Cisco Security

Similar Questions

  • What are the causes of sd/mmc instead hired san disk

    Card SdHC (San Disk) used to store images from digital camera, when inserted the green light turns on but does not work

    visible on e-machine network (vista 32) system. What are the causes of sd/mmc slot is not to detect the san disk.

    Hi mrpitiful,.

    ·         Is it a laptop or a desktop computer?

    ·         You have built in card reader if it a laptop?

    Check to see if the following is useful.

    Method 1: If you use an external card reader, then try using another.

    Method 2: See the following SanDisk article if it is an internal card reader.

    Computer (with internal card reader) or a digital camera fails to read 4 GB, 8 GB, 16 GB, or 32 GB SDHC card

  • What are the causes my screen to instantly display several small pages?

    What are the causes my screen to instantly display several small pages?

    Your username appears to be rather ironic.

    Given the richness of the information you provided, I guess, whatever the version of Pages that you use, you've opened the model selector.

    Peter

  • What are the causes of error - OR-XNET: the NOR-XNET driver is no longer can communicate with the device.

    Hello

    I use X-NET-PCI8512, OS: Windows 7, C++ (middle of the QT interval).

    I'm pooling of card data (StreamIn member function) to ~ 100 Hz. card reading time (ReadStatus) to ~ 100 Hz.

    After about 40 min (depends on the amount of data in) I get this error:

    (Hex 0xBFF630B2) The NOR-XNET driver cannot communicate with the device. Solution: Make sure that the device was not removed from the computer.

    What are the causes of this error?

    Thanks in advance,

    Aviad

    Hello aviadCielo,

    When you get this error, what does do to make it work again? If you restart your program, start all this work?

    Secondly, what version of NOR-XNET do you use? It's maybe a software problem that could be resolved by upgrading to NOR-XNET 1.6.

    Finally, can you reproduce this problem with a simple program? If so, you can join the program you use?

  • When I close a program, it seems that the page is molten! What are the causes that

    Just as I said, when I close my Internet explore the page looks as it melts down.

    When I close the Office computer looks like it is melting.

    What are the causes and how can I fix what is wrong

    I ran mcafee and malware programs.

    I have compaq presario v5000

    Windows xp

    32 bit

    do not add ons running.

    I don't see how someone can offer you promising ideas knowing more about your system.  The best you can get is speculation on what might work sometimes maybe. All we seem to know is what sort of a Presario V5000 with XP (there are a lot of different V5000s).

    It worked better in Mode safe or clean boot?  Even if it did, this does not your problem, unless you want to run mode without failure or boot for the rest of your life.

    If you restored to the factory settings in the past, then you have all your video drivers updated?  Chances are good that everything that comes out of the plant is outdated when it leaves the factory.

    If I were you, I would first take a look at your specifications and make sure that your video drivers are up to date.

    Should be considered ditching of McAfee (since it's a famous memory and CPU hog) and replace it with something with a smaller footprint like Microsoft Security Essentials (MSE).  You can simply use the McAfee uninstaller install temporarily and see how things work... you can always reinstall later if you are forced to do it, right?  (but I wouldn't).

    If you still have the problem after all and the verification of your video drivers, check the properties of your system performance (especially the Visual effects) Options.

    Why don't you do this so that we can see what you have:

    Click Start, run and enter in the box:

    Msinfo32

    Click OK, and when the system info summary appears, click on edit, select all (Ctrl-A), copy (Ctrl-C) and paste (Ctrl-V) the information back here in your next reply.

    For video device and driver information, expand components, click view, click on edit, select all, copy and then paste the information here.

    There will be some personal information (such as the user name and the name of the system), and anything that turns information private for you, simply delete the pasted information.

    This will minimize back Q & A and eliminate guesswork.

  • Windows closes programs as it is to melt! What are the causes that

    When I close an Office program looks like it's melting!  Even when I turned off the computer.  What are the causes that?

    Thank you

    Deb

    Hello arcand1772,

    Thank you for the question!

    It is disheartening to know that have problems you while closing programs. As I understand it encounter you problems during the closure of the programmes.

    1. the is the problem with a particular program?

    2. were there any changes (hardware or software) to the computer before the show?

    Post a screenshot of the issue to help you best.

    How i: post a screen shot on this forum? -Microsoft Answers

  • What are the causes videos stop and start again during the transmission?

    What are the causes videos stop and start again during the transmission?

    Hello

    You can update the latest drivers for the video card and check.

    Also perform the clean boot and check:

    http://support.Microsoft.com/kb/310353

    NOTE: When you are finished troubleshooting, make sure that restore you the computer mode normal startup such as suggested in the article above.

    Let us know the results.

  • What are the causes of silverlight N8007 error code.

    What are the causes of silverlight code error N8007?  I have already been able to view the contents of netflicks, but no more.  He has always played by this "Silverlite" program or a recent change?

    Thaks in advance for your answer.

    Hi GaryFelder,
     
    Post your request in the Silverlight forums for assistance on this issue.
     
    Visit the following link to do the same thing:
  • What are the causes of the log of user account on missing cursor in Windows XP? I have two trays of office that they have this same problem. If you restart them the cursor returns?

    What are the causes of the log of user account on missing cursor in Windows XP? I have two trays of office that they have this same problem. If you restart them the cursor returns?

    Hi DaddyJeff,

    1. don't you make changes before the show?
    2. are you referring to the cursor in the area of user password on the login screen of Windows?
    3. when the cursor goes missing, the mouse pointer works on screen?

    It is difficult to say what is causing this problem. If the mouse pointer freezes or stops working, then we recommend you to reinstall the mouse. To do this, try the following steps:
    a. sign in to Windows.
    b. Click Start, click Run, type devmgmt.msc, and then click ok.
    c. in the list of objects, expand mice and other pointing devices.
    d. right click on the sub element and click on uninstall.
    e. unplug the mouse and plug it back.
    f. the Device Manager, select an item in the list, click the Action menu, click scan for hardware changes.
    g. check if the mouse is detected, if so, then install it.

    See mouse USB which is connected to a USB 2.0 hub is not detected by Windows XP


    Note:
    if the problem persists, restore the computer to an earlier time. See How to restore Windows XP to a previous state

    Visit our Microsoft answers feedback Forum and let us know what you think.

  • What are the causes the limit 2 Gig Ram in m1170n Media Center computer?

    What are the causes the limit 2 Gig Ram in m1170n Media Center computer? It can be corrected? Makes for a much slower PC than it could be. I can update only 1 3/4 Gig and yet it can begin.  I tried the bios update that is available on this site, but it doesn't seem to change anything. It would be much nicer I could date within the limits of the operating system. 4 GB. Don't know what I'll use this 4 PC yet, but this could be the deciding factor.

    Here are the specifications of your HP Media Center m1170n desktop computer and its card mother PTGD1-(Puffer). Based on the specifications, this model has a maximum HP approved limit memory 4 GB (4 x 1 GB = 4 GB). The problem you are experiencing is perhaps due to incorrect memory modules, modules of memory defective or damaged, defective or damaged memorty slots or a very defective or damaged motherboard.

    Run the available at startup BIOS Diagnostics or download "memtest86" and create a bootable media. Then, run the test on each module individually, in the same housing. If all modules pass, rerun the test... this time by adding an additional module... Repeat until all slots are filled and all modules of memory are used.

    Please post back with your results.

    Please click the White Star of KUDOS to show your appreciation

  • What are the causes of temporary profiles?

    What are the causes and how can I get my original profile once again?

    You may find that the problem is temporary and you connect properly on your next reboot.

    Advice on that is in difficulty a user profile damaged and this may also be of interest the user profile Service has no logon. Could not load user profile as you will see, there is the coincidence of the AV utility read the profile at the same time that Windows 7 trying to read and cela can cause a one-time default to a temporary profile.

    Even if the problem goes away once you are back connected with a suitable profile, create two admin accounts to make sure that you have a good chance to be still able to enter the PC all that is corrupt.  If your user account profile is corrupt, you use an admin to fix things, if an administrator account is corrupt then you use the other admin to fix things, including the creation of a new account admin spare.

  • What are the causes my print spooler continues to operate, and quickly stop again when I restart it? Lexmark P4350 - Windows 7 Edition home premium

    What are the causes to stop working during printing and stop again shortly after I start my print spooler. I also find that my printer takes a long time to start printing after I clicked "Print". I use an all-in-one printer Lexmark P4350 on Windows 7 Home Premium.

    David

    Hi David,

    Thank you for the update.

    Use all the dependency services?

    The solution for slow printing is the print spooler reset.

    When we press the Windows key + R, a window opens. This is called the immediate window.

    I suggest you to uninstall and reinstall the printer drivers and check. Lexmark is not Windows 7 compatible drivers for the printer. So, you can download the drivers for Windows Vista and install in compatibility mode.

    Follow the steps to install in compatibility mode:
    a. right click on the driver installation file and select Properties and then tap or click on the compatibility tab.
    b. check the box run this program in compatibility mode .
    c. press or click the menu drop down and select a previous operating system, and then tap or click OK.

    Reference:
    Video: Compatibility of software and hardware in Windows 7

    http://Windows.Microsoft.com/en-us/Windows7/help/videos/software-and-hardware-compatibility-in-Windows-7

    Let us know if the problem persists.

  • Does anyone know what are the causes for the (!) symbol in red in all my icons of file work?

    Does anyone know what are the causes for the (!) symbol in red in all my icons of file work?

    Most likely your sauvegardΘ (backup status indicator) program, maybe Norton, McAfee or Mozy, indicating the file not saved yet.

  • What are the causes of streaks in the areas not related any cloning with photoshop elements 8 or 11?

    What are the causes of streaks in the areas not related any cloning with photoshop elements 8 or 11?

    You can post a screenshot showing the screen problem?

  • What are the causes with embedded journalists can always be unloaded by the media broken or deleted all my emails? How can I fix it?

    Whenever people send me emails with embedded videos or images, e-mail is always without the media. It will be just the outline of the empty box where it supposed to be with an icon of the page broken tiny in the upper left corner.

    I can't seem to find the cause and the solution, and it happened for a few years already. It has nothing to do with my being always POP and not IMAP account? What are the possible reasons and solutions? Please help, thanks.

    Someone sent me a message with a broken image. Here's what I found.

    There are two factors that control the display of the remote images in email:

Maybe you are looking for

  • How I chose the download file location

    How can I designate where are stored the files I download from the Internet. Can I save files on my desktop? I can't find where the files are current.

  • My phone bill is too much. Someone ask me why?

    HELLO, I live in Tulsa, and I moved into a different House in Jenks 2 months ago. I have AT & T and my phone used to be only $120 Bill, but after I moved my phone bill went up to $600. Help someone because I can't deal with this much longer price. I

  • HDP Agent Device emulator and Bluetooth Stack for Win

    Hi all We have successfully installed the battery Bluetooth for Windows (Toshiba v7.10.01)We would like to know the steps on how to test the examples in the SDK from Toshiba with HDP Agent Device emulator?

  • Construction of a VI on the given schema

    Hi all... I am a beginner in Labview. I want to build a VI in labview 2009. Someone please help me by a VI in labview 2009 according to the figure below.

  • Green light for the volume and shine

    Hello I have a T-61. I just discovered that the green light that appears down to the center of my moniter for volume and shine is gone. Could someone help me get the go-ahead on even once? Thank you reg08