Research Article

Network Security Situation Assessment Model Based on Extended Hidden Markov

Table 5

IPS original log.

Attack IDTimeAttack nameSource IPDestination IPSource portDestination portApplication protocolHit countsAttack level

1510002492015/11/3 0:00SMTP mail vulnerability27.24.159.231168.160.167.282447625SMTP1Prompt
1510002492015/11/3 0:00SMTP mail vulnerability116.207.12.175168.160.167.28272425SMTP1Prompt
1510002492015/11/3 0:00SMTP mail vulnerability221.239.226.214168.160.200.18285825SMTP1Prompt
1510002492015/11/3 0:00SMTP mail vulnerability221.239.226.214168.160.200.18285825SMTP1Prompt
1510002492015/11/3 0:01SMTP mail vulnerability119.147.194.226168.160.1.1044727125SMTP1Prompt
1510002492015/11/3 0:01SMTP mail vulnerability119.147.194.226168.160.1.1044727125SMTP1Prompt
1510002492015/11/3 0:01SMTP mail vulnerability111.176.71.222168.160.200.18384325SMTP1Prompt
1510002492015/11/3 0:01SMTP mail vulnerability27.24.159.228168.160.1.1041168225SMTP1Prompt
1510002492015/11/3 0:01SMTP mail vulnerability27.24.159.228168.160.1.1041168225SMTP1Prompt
1510002492015/11/3 0:01SMTP mail vulnerability49.70.232.139168.160.1.109468725SMTP1Prompt
1510002492015/11/3 0:01SMTP mail vulnerability116.207.13.72168.160.200.18178525SMTP1Prompt
1510002492015/11/3 0:01SMTP mail vulnerability116.207.13.72168.160.200.18178525SMTP1Prompt
1510002492015/11/3 0:02SMTP mail vulnerability27.24.159.231168.160.167.28298125SMTP1Prompt
1510002492015/11/3 0:02SMTP mail vulnerability111.176.77.199168.160.200.18310125SMTP1Prompt
1510002492015/11/3 0:02SMTP mail vulnerability111.176.77.199168.160.200.18310125SMTP1Prompt