[28866.551759] audit: type=1400 audit(1490031118.039:668): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8476" pid=8478 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [28866.551779] audit: type=1400 audit(1490031118.039:669): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8476" pid=8478 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [28866.551823] audit: type=1400 audit(1490031118.039:670): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=8478 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [28866.551842] audit: type=1400 audit(1490031118.039:671): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=8478 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [28866.551864] audit: type=1400 audit(1490031118.039:672): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=8478 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [28891.762207] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=66.240.236.119 DST=151.236.37.52 LEN=40 TOS=0x10 PREC=0x00 TTL=109 ID=2258 PROTO=TCP SPT=56218 DPT=37 WINDOW=43613 RES=0x00 SYN URGP=0 [28922.413480] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=81.215.201.220 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=59563 PROTO=TCP SPT=40467 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [28934.401845] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=163.172.210.65 DST=151.236.37.52 LEN=436 TOS=0x08 PREC=0x00 TTL=52 ID=42432 DF PROTO=UDP SPT=5060 DPT=5060 LEN=416 [28937.985286] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.210.107.60 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=121 ID=24974 DF PROTO=TCP SPT=62629 DPT=8880 WINDOW=8192 RES=0x00 SYN URGP=0 [28940.985241] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.210.107.60 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=121 ID=26274 DF PROTO=TCP SPT=62629 DPT=8880 WINDOW=8192 RES=0x00 SYN URGP=0 [28946.984391] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.210.107.60 DST=151.236.37.52 LEN=48 TOS=0x00 PREC=0x00 TTL=121 ID=28860 DF PROTO=TCP SPT=62629 DPT=8880 WINDOW=8192 RES=0x00 SYN URGP=0 [28969.166869] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=220.180.74.153 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=11155 PROTO=TCP SPT=40411 DPT=23 WINDOW=14420 RES=0x00 SYN URGP=0 [29014.581024] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.106.7.91 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=9840 PROTO=TCP SPT=21855 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [29056.968308] audit_printk_skb: 12 callbacks suppressed [29056.968311] audit: type=1400 audit(1490031308.459:677): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8479" pid=8479 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [29056.968323] audit: type=1400 audit(1490031308.459:678): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8479" pid=8479 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [29056.968334] audit: type=1400 audit(1490031308.459:679): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8479" pid=8479 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [29056.968767] audit: type=1400 audit(1490031308.459:680): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8479" pid=8479 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [29070.502685] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=89.248.167.131 DST=151.236.37.52 LEN=145 TOS=0x00 PREC=0x00 TTL=121 ID=38807 PROTO=UDP SPT=48134 DPT=88 LEN=125 [29083.153797] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=36.84.229.9 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=19353 PROTO=TCP SPT=35218 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [29141.457147] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=190.181.72.134 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=16682 PROTO=TCP SPT=20573 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [29163.602739] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=142.54.108.92 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=52199 PROTO=TCP SPT=24314 DPT=23 WINDOW=36875 RES=0x00 SYN URGP=0 [29213.761947] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=185.40.4.18 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=61563 PROTO=TCP SPT=42799 DPT=8088 WINDOW=1024 RES=0x00 SYN URGP=0 [29271.313189] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.223.133.8 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=5366 PROTO=TCP SPT=53281 DPT=3530 WINDOW=1024 RES=0x00 SYN URGP=0 [29298.561687] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=176.102.193.12 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=56 ID=47738 PROTO=TCP SPT=7843 DPT=23 WINDOW=47916 RES=0x00 SYN URGP=0 [29333.830647] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=115.231.222.151 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=256 PROTO=TCP SPT=62951 DPT=8089 WINDOW=16384 RES=0x00 SYN URGP=0 [29380.576147] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=213.248.144.36 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=17127 PROTO=TCP SPT=63543 DPT=23 WINDOW=34375 RES=0x00 SYN URGP=0 [29397.010564] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=180.97.215.139 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=112 ID=256 PROTO=TCP SPT=4514 DPT=8080 WINDOW=16384 RES=0x00 SYN URGP=0 [29433.196364] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.223.133.8 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=44901 PROTO=TCP SPT=53281 DPT=3512 WINDOW=1024 RES=0x00 SYN URGP=0 [29502.618708] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=59.127.3.116 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=41377 PROTO=TCP SPT=53636 DPT=23 WINDOW=61116 RES=0x00 SYN URGP=0 [29502.929664] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=77.50.32.128 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=244 ID=6306 PROTO=TCP SPT=42878 DPT=8000 WINDOW=1024 RES=0x00 SYN URGP=0 [29574.540221] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=101.250.187.11 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=40 ID=36587 PROTO=TCP SPT=16224 DPT=23 WINDOW=9336 RES=0x00 SYN URGP=0 [29580.063987] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=58.210.79.43 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=20754 PROTO=TCP SPT=36205 DPT=23 WINDOW=20876 RES=0x00 SYN URGP=0 [29660.198480] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=86.35.210.94 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=55 ID=8297 PROTO=TCP SPT=12920 DPT=23 WINDOW=8016 RES=0x00 SYN URGP=0 [29715.804172] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=35519 DF PROTO=TCP SPT=2239 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [29718.799030] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=13335 DF PROTO=TCP SPT=2239 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [29724.804436] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=52636 DF PROTO=TCP SPT=2239 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [29725.169740] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=200.145.119.126 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=47625 PROTO=TCP SPT=13174 DPT=23 WINDOW=24342 RES=0x00 SYN URGP=0 [29761.500031] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=88.60.252.35 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=32773 PROTO=TCP SPT=18098 DPT=7547 WINDOW=21938 RES=0x00 SYN URGP=0 [29763.271740] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=220.161.8.122 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=9419 PROTO=TCP SPT=41122 DPT=2323 WINDOW=38546 RES=0x00 SYN URGP=0 [29766.595763] audit: type=1400 audit(1490032018.084:681): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8557" pid=8557 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [29766.595775] audit: type=1400 audit(1490032018.084:682): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8557" pid=8557 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [29766.595787] audit: type=1400 audit(1490032018.084:683): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8557" pid=8557 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [29766.595951] audit: type=1400 audit(1490032018.084:684): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=8557 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [29766.596072] audit: type=1400 audit(1490032018.084:685): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=8557 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [29766.596100] audit: type=1400 audit(1490032018.084:686): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8555" pid=8557 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [29766.596122] audit: type=1400 audit(1490032018.084:687): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8555" pid=8557 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [29766.596162] audit: type=1400 audit(1490032018.084:688): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=8557 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [29766.596181] audit: type=1400 audit(1490032018.084:689): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=8557 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [29766.596207] audit: type=1400 audit(1490032018.084:690): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=8557 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [29784.711356] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=180.116.83.178 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=26024 PROTO=TCP SPT=37889 DPT=23 WINDOW=14835 RES=0x00 SYN URGP=0 [29837.380248] audit_printk_skb: 12 callbacks suppressed [29837.380251] audit: type=1400 audit(1490032088.869:695): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8564" pid=8564 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [29837.380262] audit: type=1400 audit(1490032088.869:696): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8564" pid=8564 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [29837.380274] audit: type=1400 audit(1490032088.869:697): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8564" pid=8564 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [29837.380695] audit: type=1400 audit(1490032088.869:698): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8564" pid=8564 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [29900.553615] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=68.181.195.100 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=54029 PROTO=TCP SPT=52151 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 [29998.040599] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=71.6.216.49 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=54321 PROTO=TCP SPT=25 DPT=25 WINDOW=65535 RES=0x00 SYN URGP=0 [30023.924796] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=2.177.162.150 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=15261 PROTO=TCP SPT=5664 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [30125.217090] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=39.116.79.126 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=45560 PROTO=TCP SPT=16576 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [30155.032463] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=175.152.34.112 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=26676 PROTO=TCP SPT=35633 DPT=902 WINDOW=1024 RES=0x00 SYN URGP=0 [30175.122846] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=122.174.213.122 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=57 ID=60976 PROTO=TCP SPT=52087 DPT=23 WINDOW=64321 RES=0x00 SYN URGP=0 [30295.060313] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=51.15.10.146 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x00 TTL=243 ID=54321 PROTO=TCP SPT=43665 DPT=33904 WINDOW=65535 RES=0x00 SYN URGP=0 [30323.414305] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=217.209.224.215 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=55714 PROTO=TCP SPT=36995 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [30554.424688] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=61.240.144.65 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=26146 PROTO=TCP SPT=52806 DPT=8081 WINDOW=1024 RES=0x00 SYN URGP=0 [30617.820977] audit: type=1400 audit(1490032869.310:699): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8583" pid=8583 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [30617.820989] audit: type=1400 audit(1490032869.310:700): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8583" pid=8583 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [30617.821000] audit: type=1400 audit(1490032869.310:701): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8583" pid=8583 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [30617.821451] audit: type=1400 audit(1490032869.310:702): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8583" pid=8583 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [30666.639482] audit: type=1400 audit(1490032918.130:703): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8585" pid=8585 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [30666.639494] audit: type=1400 audit(1490032918.130:704): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8585" pid=8585 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [30666.639505] audit: type=1400 audit(1490032918.130:705): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8585" pid=8585 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [30666.639659] audit: type=1400 audit(1490032918.130:706): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=8585 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [30666.639702] audit: type=1400 audit(1490032918.130:707): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8582" pid=8585 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [30666.639721] audit: type=1400 audit(1490032918.130:708): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8582" pid=8585 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [30666.639773] audit: type=1400 audit(1490032918.130:709): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=8585 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [30666.639816] audit: type=1400 audit(1490032918.130:710): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=8585 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [30666.639834] audit: type=1400 audit(1490032918.130:711): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=8585 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [30666.639857] audit: type=1400 audit(1490032918.130:712): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=8585 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [30714.607458] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.230.47.41 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=34024 PROTO=TCP SPT=59921 DPT=3361 WINDOW=1024 RES=0x00 SYN URGP=0 [30750.923706] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=79.144.126.70 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x20 TTL=244 ID=50936 PROTO=TCP SPT=53650 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [30764.744257] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=220.116.172.216 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=34136 PROTO=TCP SPT=4247 DPT=23 WINDOW=647 RES=0x00 SYN URGP=0 [30765.940575] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=58.19.145.240 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=65270 PROTO=TCP SPT=31141 DPT=2222 WINDOW=22040 RES=0x00 SYN URGP=0 [30908.415322] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=110.227.248.97 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=7172 PROTO=TCP SPT=24862 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [30943.874939] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=177.99.89.150 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x20 TTL=51 ID=16000 PROTO=TCP SPT=47485 DPT=23 WINDOW=43885 RES=0x00 SYN URGP=0 [30984.235355] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=195.39.86.85 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=3389 PROTO=TCP SPT=49983 DPT=63389 WINDOW=1024 RES=0x00 SYN URGP=0 [31018.881052] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=121.176.201.145 DST=151.236.37.52 LEN=48 TOS=0x00 PREC=0x00 TTL=113 ID=1591 PROTO=UDP SPT=54954 DPT=58091 LEN=28 [31073.242694] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.105.159.98 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=45765 PROTO=TCP SPT=22765 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [31216.484411] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=96.57.122.180 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=54304 PROTO=TCP SPT=58408 DPT=23 WINDOW=2776 RES=0x00 SYN URGP=0 [31223.603426] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=122.116.130.85 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=56030 PROTO=TCP SPT=24127 DPT=23 WINDOW=55748 RES=0x00 SYN URGP=0 [31354.366913] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=89.163.242.118 DST=151.236.37.52 LEN=442 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=UDP SPT=5299 DPT=5060 LEN=422 [31374.060604] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=119.202.222.195 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=7122 PROTO=TCP SPT=64424 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [31422.058179] audit_printk_skb: 12 callbacks suppressed [31422.058182] audit: type=1400 audit(1490033673.546:717): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8671" pid=8671 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [31422.058194] audit: type=1400 audit(1490033673.546:718): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8671" pid=8671 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [31422.058206] audit: type=1400 audit(1490033673.546:719): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8671" pid=8671 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [31422.058681] audit: type=1400 audit(1490033673.546:720): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8671" pid=8671 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [31500.517370] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=190.173.95.242 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x20 TTL=241 ID=7623 PROTO=TCP SPT=9263 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [31548.071955] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=117.190.237.65 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x00 TTL=234 ID=60568 PROTO=TCP SPT=8345 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [31566.742032] audit: type=1400 audit(1490033818.219:721): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8675" pid=8675 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [31566.742045] audit: type=1400 audit(1490033818.219:722): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8675" pid=8675 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [31566.742056] audit: type=1400 audit(1490033818.219:723): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8675" pid=8675 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [31566.742212] audit: type=1400 audit(1490033818.219:724): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=8675 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [31566.742293] audit: type=1400 audit(1490033818.219:725): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=8675 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [31566.742334] audit: type=1400 audit(1490033818.219:726): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=8675 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [31566.742351] audit: type=1400 audit(1490033818.219:727): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=8675 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [31566.742373] audit: type=1400 audit(1490033818.219:728): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=8675 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [31566.742396] audit: type=1400 audit(1490033818.219:729): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8673" pid=8675 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [31566.742418] audit: type=1400 audit(1490033818.219:730): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8673" pid=8675 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [31604.904034] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=177.17.132.17 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x20 TTL=241 ID=47625 PROTO=TCP SPT=45124 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [31623.875580] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=59.173.173.191 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=23261 PROTO=TCP SPT=62492 DPT=23 WINDOW=58382 RES=0x00 SYN URGP=0 [31718.751718] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=163.172.210.65 DST=151.236.37.52 LEN=438 TOS=0x08 PREC=0x00 TTL=52 ID=10222 DF PROTO=UDP SPT=5067 DPT=5060 LEN=418 [31976.602364] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=37.28.172.110 DST=151.236.37.52 LEN=44 TOS=0x08 PREC=0x20 TTL=44 ID=38929 PROTO=TCP SPT=50452 DPT=23 WINDOW=41084 RES=0x00 SYN URGP=0 [31994.516630] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=118.101.215.145 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=58 ID=22721 PROTO=TCP SPT=38920 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [32085.942452] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=27.74.94.111 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=43 ID=47799 PROTO=TCP SPT=55543 DPT=23 WINDOW=63307 RES=0x00 SYN URGP=0 [32130.253098] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=171.251.74.150 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=24553 PROTO=TCP SPT=23322 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [32183.127445] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=84.223.5.28 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=14189 PROTO=TCP SPT=252 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [32207.270985] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=89.163.146.72 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x00 TTL=243 ID=4360 PROTO=TCP SPT=51762 DPT=8023 WINDOW=1024 RES=0x00 SYN URGP=0 [32226.333347] audit_printk_skb: 12 callbacks suppressed [32226.333350] audit: type=1400 audit(1490034477.819:735): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8803" pid=8803 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [32226.333362] audit: type=1400 audit(1490034477.819:736): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8803" pid=8803 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [32226.333373] audit: type=1400 audit(1490034477.819:737): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8803" pid=8803 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [32226.333799] audit: type=1400 audit(1490034477.819:738): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8803" pid=8803 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [32227.813664] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=201.22.28.31 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x20 TTL=51 ID=49778 PROTO=TCP SPT=22878 DPT=23 WINDOW=64790 RES=0x00 SYN URGP=0 [32243.479933] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=123.24.126.161 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=24553 PROTO=TCP SPT=23322 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [32246.229964] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=189.39.126.113 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=49396 PROTO=TCP SPT=7359 DPT=23 WINDOW=3759 RES=0x00 SYN URGP=0 [32393.227313] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=112.163.48.123 DST=151.236.37.52 LEN=122 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=UDP SPT=35875 DPT=1900 LEN=102 [32466.813033] audit: type=1400 audit(1490034718.301:739): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8810" pid=8810 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [32466.813046] audit: type=1400 audit(1490034718.301:740): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8810" pid=8810 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [32466.813057] audit: type=1400 audit(1490034718.301:741): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8810" pid=8810 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [32466.813213] audit: type=1400 audit(1490034718.301:742): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=8810 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [32466.813232] audit: type=1400 audit(1490034718.301:743): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8808" pid=8810 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [32466.813253] audit: type=1400 audit(1490034718.301:744): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8808" pid=8810 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [32466.813329] audit: type=1400 audit(1490034718.301:745): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=8810 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [32466.813370] audit: type=1400 audit(1490034718.301:746): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=8810 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [32466.813410] audit: type=1400 audit(1490034718.301:747): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=8810 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [32466.813438] audit: type=1400 audit(1490034718.301:748): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=8810 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [32618.086712] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=61.240.144.65 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=5357 PROTO=TCP SPT=54606 DPT=3306 WINDOW=1024 RES=0x00 SYN URGP=0 [32628.561452] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=171.247.190.9 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=44 ID=37886 PROTO=TCP SPT=57909 DPT=23 WINDOW=56589 RES=0x00 SYN URGP=0 [32662.145157] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=115.231.217.119 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=102 ID=256 PROTO=TCP SPT=6000 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 [32670.539526] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=61.70.155.91 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=48924 PROTO=TCP SPT=48553 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [32807.034841] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=163.172.144.161 DST=151.236.37.52 LEN=434 TOS=0x00 PREC=0x00 TTL=48 ID=6898 DF PROTO=UDP SPT=5104 DPT=5060 LEN=414 [32877.849373] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=108.234.18.216 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=53621 PROTO=TCP SPT=9306 DPT=23 WINDOW=2418 RES=0x00 SYN URGP=0 [32936.582140] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=116.105.253.102 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=51641 PROTO=TCP SPT=48207 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [32973.176807] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=66.97.229.130 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=29133 PROTO=TCP SPT=55136 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [32987.908222] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=201.69.65.206 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x20 TTL=50 ID=5590 PROTO=TCP SPT=23371 DPT=23 WINDOW=4312 RES=0x00 SYN URGP=0 [33006.756600] audit_printk_skb: 12 callbacks suppressed [33006.756603] audit: type=1400 audit(1490035258.245:753): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8881" pid=8881 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [33006.756615] audit: type=1400 audit(1490035258.245:754): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8881" pid=8881 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [33006.756626] audit: type=1400 audit(1490035258.245:755): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8881" pid=8881 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [33006.757055] audit: type=1400 audit(1490035258.245:756): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8881" pid=8881 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [33153.510978] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=63404 DF PROTO=TCP SPT=46398 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [33156.514309] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=5243 DF PROTO=TCP SPT=46398 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [33162.512595] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=39254 DF PROTO=TCP SPT=46398 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [33186.180037] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=84.91.5.49 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=57829 PROTO=TCP SPT=19304 DPT=23 WINDOW=28488 RES=0x00 SYN URGP=0 [33195.691641] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=181.50.99.215 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=5910 PROTO=TCP SPT=710 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [33318.738100] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=190.52.131.107 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x20 TTL=49 ID=50878 PROTO=TCP SPT=65020 DPT=23 WINDOW=39060 RES=0x00 SYN URGP=0 [33326.820977] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=95.235.102.75 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=23997 PROTO=TCP SPT=63941 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [33366.861850] audit: type=1400 audit(1490035618.349:757): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8890" pid=8890 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [33366.861864] audit: type=1400 audit(1490035618.349:758): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8890" pid=8890 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [33366.861875] audit: type=1400 audit(1490035618.349:759): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8890" pid=8890 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [33366.862031] audit: type=1400 audit(1490035618.349:760): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=8890 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [33366.862045] audit: type=1400 audit(1490035618.349:761): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8888" pid=8890 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [33366.862065] audit: type=1400 audit(1490035618.349:762): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8888" pid=8890 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [33366.862164] audit: type=1400 audit(1490035618.349:763): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=8890 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [33366.862206] audit: type=1400 audit(1490035618.349:764): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=8890 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [33366.862224] audit: type=1400 audit(1490035618.349:765): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=8890 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [33366.862248] audit: type=1400 audit(1490035618.349:766): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=8890 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [33384.642712] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=122.116.206.15 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=37082 PROTO=TCP SPT=39712 DPT=23 WINDOW=35120 RES=0x00 SYN URGP=0 [33418.631198] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=112.162.33.247 DST=151.236.37.52 LEN=122 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=UDP SPT=56847 DPT=1900 LEN=102 [33476.942293] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.145.116.109 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=235 ID=42582 PROTO=TCP SPT=54364 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [33482.655243] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=117.44.27.189 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=115 ID=256 PROTO=TCP SPT=26973 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 [33546.043559] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=86.124.91.50 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=248 ID=32856 PROTO=TCP SPT=6566 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [33573.164863] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=139.162.124.90 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=54321 PROTO=TCP SPT=43301 DPT=47808 WINDOW=65535 RES=0x00 SYN URGP=0 [33679.744228] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=66.240.219.146 DST=151.236.37.52 LEN=40 TOS=0x10 PREC=0x00 TTL=109 ID=12827 PROTO=TCP SPT=59842 DPT=19 WINDOW=31465 RES=0x00 SYN URGP=0 [33787.323544] audit_printk_skb: 12 callbacks suppressed [33787.323547] audit: type=1400 audit(1490036038.808:771): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8892" pid=8892 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [33787.323559] audit: type=1400 audit(1490036038.808:772): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8892" pid=8892 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [33787.323570] audit: type=1400 audit(1490036038.808:773): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8892" pid=8892 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [33787.324032] audit: type=1400 audit(1490036038.808:774): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8892" pid=8892 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [33881.807873] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=109.96.113.123 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=58 ID=3344 PROTO=TCP SPT=14382 DPT=23 WINDOW=8245 RES=0x00 SYN URGP=0 [33896.382374] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=151.232.147.248 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=2954 PROTO=TCP SPT=5992 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [33971.271808] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=94.20.191.30 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=244 ID=13357 PROTO=TCP SPT=46414 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [33996.044934] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=168.1.128.74 DST=151.236.37.52 LEN=388 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=UDP SPT=8787 DPT=5060 LEN=368 [34001.359419] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=42.116.209.71 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=53893 PROTO=TCP SPT=6913 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [34009.407782] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=171.248.128.23 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=58769 PROTO=TCP SPT=63050 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [34266.960263] audit: type=1400 audit(1490036518.448:775): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8940" pid=8940 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [34266.960276] audit: type=1400 audit(1490036518.448:776): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8940" pid=8940 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [34266.960287] audit: type=1400 audit(1490036518.448:777): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8940" pid=8940 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [34266.960442] audit: type=1400 audit(1490036518.448:778): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=8940 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [34266.960522] audit: type=1400 audit(1490036518.448:779): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=8940 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [34266.960563] audit: type=1400 audit(1490036518.448:780): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=8940 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [34266.960581] audit: type=1400 audit(1490036518.448:781): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=8940 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [34266.960603] audit: type=1400 audit(1490036518.448:782): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=8940 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [34266.960643] audit: type=1400 audit(1490036518.448:783): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8938" pid=8940 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [34266.960664] audit: type=1400 audit(1490036518.448:784): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8938" pid=8940 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [34352.374713] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=117.3.69.178 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=46 ID=34492 PROTO=TCP SPT=14848 DPT=23 WINDOW=8472 RES=0x00 SYN URGP=0 [34490.179094] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=163.172.210.65 DST=151.236.37.52 LEN=438 TOS=0x08 PREC=0x00 TTL=52 ID=50075 DF PROTO=UDP SPT=5078 DPT=5060 LEN=418 [34533.773654] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=60.240.220.141 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=47 ID=4330 PROTO=TCP SPT=61067 DPT=23 WINDOW=35811 RES=0x00 SYN URGP=0 [34538.148979] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=212.34.237.6 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=36026 PROTO=TCP SPT=57109 DPT=2323 WINDOW=52485 RES=0x00 SYN URGP=0 [34567.646858] audit_printk_skb: 12 callbacks suppressed [34567.646861] audit: type=1400 audit(1490036819.131:789): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8942" pid=8942 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [34567.646873] audit: type=1400 audit(1490036819.131:790): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8942" pid=8942 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [34567.646884] audit: type=1400 audit(1490036819.131:791): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8942" pid=8942 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [34567.647311] audit: type=1400 audit(1490036819.131:792): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/8942" pid=8942 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [34694.807396] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=185.94.111.1 DST=151.236.37.52 LEN=28 TOS=0x00 PREC=0x00 TTL=241 ID=54321 PROTO=UDP SPT=57498 DPT=19 LEN=8 [34721.304845] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=210.186.110.218 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=248 ID=36263 PROTO=TCP SPT=3545 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [34724.920439] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=222.186.58.213 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=256 PROTO=TCP SPT=50057 DPT=2222 WINDOW=16384 RES=0x00 SYN URGP=0 [34733.767382] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=72.27.95.36 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=53 ID=29504 PROTO=TCP SPT=2196 DPT=23 WINDOW=65512 RES=0x00 SYN URGP=0 [34779.385399] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=78.188.166.28 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=53655 PROTO=TCP SPT=35000 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [34996.969305] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=181.25.46.44 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x20 TTL=53 ID=25401 PROTO=TCP SPT=9831 DPT=23 WINDOW=3658 RES=0x00 SYN URGP=0 [35073.363992] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=114.35.26.138 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=47189 PROTO=TCP SPT=14777 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [35167.050375] audit: type=1400 audit(1490037418.535:793): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9027" pid=9027 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [35167.050388] audit: type=1400 audit(1490037418.535:794): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9027" pid=9027 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [35167.050398] audit: type=1400 audit(1490037418.535:795): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9027" pid=9027 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [35167.050544] audit: type=1400 audit(1490037418.535:796): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=9027 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [35167.050622] audit: type=1400 audit(1490037418.535:797): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=9027 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [35167.050662] audit: type=1400 audit(1490037418.535:798): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9026" pid=9027 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [35167.050682] audit: type=1400 audit(1490037418.535:799): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9026" pid=9027 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [35167.050695] audit: type=1400 audit(1490037418.535:800): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=9027 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [35167.050715] audit: type=1400 audit(1490037418.535:801): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=9027 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [35167.050739] audit: type=1400 audit(1490037418.535:802): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=9027 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [35213.139163] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=146.185.152.191 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=45636 PROTO=TCP SPT=44931 DPT=25565 WINDOW=1024 RES=0x00 SYN URGP=0 [35278.000339] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=183.109.105.101 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=33110 PROTO=TCP SPT=49330 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [35320.471482] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=197.44.241.165 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=62559 PROTO=TCP SPT=57199 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [35351.223289] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=92.42.106.189 DST=151.236.37.52 LEN=443 TOS=0x00 PREC=0x00 TTL=56 ID=6404 DF PROTO=UDP SPT=5733 DPT=5060 LEN=423 [35372.064779] audit_printk_skb: 12 callbacks suppressed [35372.064782] audit: type=1400 audit(1490037623.551:807): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9036" pid=9036 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [35372.064793] audit: type=1400 audit(1490037623.551:808): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9036" pid=9036 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [35372.064804] audit: type=1400 audit(1490037623.551:809): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9036" pid=9036 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [35372.065231] audit: type=1400 audit(1490037623.551:810): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9036" pid=9036 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [35405.729690] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=112.193.171.14 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=52115 PROTO=TCP SPT=39020 DPT=6379 WINDOW=1024 RES=0x00 SYN URGP=0 [35407.608742] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=190.173.164.128 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x20 TTL=241 ID=30729 PROTO=TCP SPT=62691 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [35453.958515] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=171.231.103.213 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=238 ID=11056 PROTO=TCP SPT=56179 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [35467.018994] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=176.223.84.29 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=33769 PROTO=TCP SPT=16983 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [35495.724899] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=112.196.165.187 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=29012 PROTO=TCP SPT=1168 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [35590.755375] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=95.6.33.153 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=42821 PROTO=TCP SPT=42720 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [35635.987270] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=222.186.190.123 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=102 ID=256 PROTO=TCP SPT=6000 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 [35648.156408] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=42.115.188.174 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=23175 PROTO=TCP SPT=23703 DPT=23 WINDOW=25519 RES=0x00 SYN URGP=0 [35687.070787] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=189.62.22.3 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=42343 PROTO=TCP SPT=11705 DPT=23 WINDOW=2457 RES=0x00 SYN URGP=0 [35718.454542] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=157.52.163.87 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=256 PROTO=TCP SPT=38883 DPT=5902 WINDOW=16384 RES=0x00 SYN URGP=0 [35728.126310] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=62.210.181.161 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=7596 PROTO=TCP SPT=56911 DPT=50802 WINDOW=1024 RES=0x00 SYN URGP=0 [35920.023288] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=139.162.89.20 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=TCP SPT=50780 DPT=9999 WINDOW=65535 RES=0x00 SYN URGP=0 [35926.741674] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=189.212.48.223 DST=151.236.37.52 LEN=44 TOS=0x08 PREC=0x00 TTL=236 ID=54227 PROTO=TCP SPT=32338 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [35945.126970] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=188.138.9.50 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x20 TTL=116 ID=35720 PROTO=TCP SPT=49717 DPT=15 WINDOW=59682 RES=0x00 SYN URGP=0 [35976.599907] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=61.240.144.66 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=13246 PROTO=TCP SPT=58205 DPT=3306 WINDOW=1024 RES=0x00 SYN URGP=0 [36067.143195] audit: type=1400 audit(1490038318.627:811): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9159" pid=9159 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [36067.143208] audit: type=1400 audit(1490038318.627:812): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9159" pid=9159 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [36067.143220] audit: type=1400 audit(1490038318.627:813): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9159" pid=9159 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [36067.143377] audit: type=1400 audit(1490038318.627:814): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=9159 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [36067.143460] audit: type=1400 audit(1490038318.627:815): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=9159 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [36067.143508] audit: type=1400 audit(1490038318.627:816): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=9159 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [36067.143524] audit: type=1400 audit(1490038318.627:817): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9158" pid=9159 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [36067.143544] audit: type=1400 audit(1490038318.627:818): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9158" pid=9159 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [36067.143561] audit: type=1400 audit(1490038318.627:819): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=9159 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [36067.143587] audit: type=1400 audit(1490038318.627:820): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=9159 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [36152.488168] audit_printk_skb: 12 callbacks suppressed [36152.488171] audit: type=1400 audit(1490038403.969:825): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9160" pid=9160 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [36152.488182] audit: type=1400 audit(1490038403.969:826): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9160" pid=9160 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [36152.488193] audit: type=1400 audit(1490038403.969:827): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9160" pid=9160 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [36152.488617] audit: type=1400 audit(1490038403.969:828): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9160" pid=9160 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [36275.176865] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=195.191.72.31 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=32662 PROTO=TCP SPT=24430 DPT=23 WINDOW=19838 RES=0x00 SYN URGP=0 [36325.875425] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=189.114.36.161 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x20 TTL=51 ID=49078 PROTO=TCP SPT=59710 DPT=23 WINDOW=57102 RES=0x00 SYN URGP=0 [36381.565503] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=60.10.182.179 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=39148 PROTO=TCP SPT=56210 DPT=23 WINDOW=51586 RES=0x00 SYN URGP=0 [36450.995281] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=78.186.172.163 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=11810 PROTO=TCP SPT=29522 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [36451.779824] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=81.214.56.45 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=25500 PROTO=TCP SPT=54942 DPT=23 WINDOW=22637 RES=0x00 SYN URGP=0 [36454.399909] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=185.128.40.174 DST=151.236.37.52 LEN=220 TOS=0x08 PREC=0x20 TTL=245 ID=54321 PROTO=UDP SPT=35981 DPT=123 LEN=200 [36477.649098] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.122.94.102 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=55 ID=19033 PROTO=TCP SPT=5767 DPT=23 WINDOW=1175 RES=0x00 SYN URGP=0 [36481.968192] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.223.133.13 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=51528 PROTO=TCP SPT=44805 DPT=1289 WINDOW=1024 RES=0x00 SYN URGP=0 [36542.072820] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=114.33.168.24 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=62876 PROTO=TCP SPT=57564 DPT=23 WINDOW=52724 RES=0x00 SYN URGP=0 [36567.596166] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=200.83.240.149 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=6861 PROTO=TCP SPT=58414 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [36581.415730] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=208.93.152.68 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=52657 DF PROTO=TCP SPT=39942 DPT=443 WINDOW=0 RES=0x00 RST URGP=0 [36587.723973] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=26685 DF PROTO=TCP SPT=48535 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [36590.718205] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=23958 DF PROTO=TCP SPT=48535 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [36596.719876] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=24354 DF PROTO=TCP SPT=48535 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [36641.109288] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=195.3.146.97 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=24165 PROTO=TCP SPT=58024 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 [36741.515791] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=117.56.153.234 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=38277 PROTO=TCP SPT=43149 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [36755.816586] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=88.243.242.66 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=30022 PROTO=TCP SPT=64164 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [36761.602611] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=51.15.1.138 DST=151.236.37.52 LEN=68 TOS=0x08 PREC=0x00 TTL=52 ID=724 DF PROTO=UDP SPT=43097 DPT=161 LEN=48 [36791.608826] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=66.240.236.119 DST=151.236.37.52 LEN=40 TOS=0x10 PREC=0x00 TTL=115 ID=41137 PROTO=TCP SPT=58022 DPT=9009 WINDOW=1225 RES=0x00 SYN URGP=0 [36817.813428] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=113.170.149.203 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=51 ID=61076 PROTO=TCP SPT=13994 DPT=23 WINDOW=53586 RES=0x00 SYN URGP=0 [36885.451070] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=95.6.17.232 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=30317 PROTO=TCP SPT=15667 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [36922.695122] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=111.227.112.207 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=459 PROTO=TCP SPT=40642 DPT=23 WINDOW=57522 RES=0x00 SYN URGP=0 [36956.882652] audit: type=1400 audit(1490039208.364:829): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9240" pid=9240 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [36956.882666] audit: type=1400 audit(1490039208.364:830): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9240" pid=9240 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [36956.882677] audit: type=1400 audit(1490039208.364:831): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9240" pid=9240 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [36956.883107] audit: type=1400 audit(1490039208.364:832): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9240" pid=9240 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [36967.194505] audit: type=1400 audit(1490039218.677:833): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9241" pid=9241 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [36967.194518] audit: type=1400 audit(1490039218.677:834): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9241" pid=9241 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [36967.194528] audit: type=1400 audit(1490039218.677:835): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9241" pid=9241 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [36967.194671] audit: type=1400 audit(1490039218.677:836): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=9241 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [36967.194750] audit: type=1400 audit(1490039218.677:837): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=9241 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [36967.194791] audit: type=1400 audit(1490039218.677:838): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=9241 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [36967.194809] audit: type=1400 audit(1490039218.677:839): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=9241 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [36967.194831] audit: type=1400 audit(1490039218.677:840): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=9241 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [36967.194850] audit: type=1400 audit(1490039218.677:841): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9239" pid=9241 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [36967.194870] audit: type=1400 audit(1490039218.677:842): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9239" pid=9241 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [37061.627152] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=66.240.219.146 DST=151.236.37.52 LEN=40 TOS=0x10 PREC=0x00 TTL=109 ID=15008 PROTO=TCP SPT=36877 DPT=23023 WINDOW=50644 RES=0x00 SYN URGP=0 [37102.258735] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.230.47.41 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=46789 PROTO=TCP SPT=59921 DPT=3362 WINDOW=1024 RES=0x00 SYN URGP=0 [37248.019657] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=80.82.70.26 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=47698 PROTO=TCP SPT=49201 DPT=23 WINDOW=1024 RES=0x00 SYN URGP=0 [37252.729358] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.223.133.8 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=4228 PROTO=TCP SPT=53281 DPT=3520 WINDOW=1024 RES=0x00 SYN URGP=0 [37258.369847] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=200.161.174.209 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x20 TTL=240 ID=23649 PROTO=TCP SPT=18066 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [37264.619715] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=163.172.210.65 DST=151.236.37.52 LEN=438 TOS=0x08 PREC=0x00 TTL=52 ID=43125 DF PROTO=UDP SPT=5079 DPT=5060 LEN=418 [37265.119816] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=122.117.170.120 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=1992 PROTO=TCP SPT=20611 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [37346.096146] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=177.40.234.85 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x20 TTL=51 ID=51125 PROTO=TCP SPT=28571 DPT=23 WINDOW=32139 RES=0x00 SYN URGP=0 [37411.642626] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=77.222.187.66 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=40 ID=41517 PROTO=TCP SPT=27047 DPT=23 WINDOW=20888 RES=0x00 SYN URGP=0 [37449.011046] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=49.89.176.179 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=18822 PROTO=TCP SPT=51758 DPT=23 WINDOW=60942 RES=0x00 SYN URGP=0 [37452.146144] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=63.143.122.122 DST=151.236.37.52 LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=8015 PROTO=UDP SPT=40170 DPT=58091 LEN=28 [37536.053732] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.230.47.41 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=9642 PROTO=TCP SPT=59921 DPT=3399 WINDOW=1024 RES=0x00 SYN URGP=0 [37561.472744] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=171.226.173.205 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=235 ID=60316 PROTO=TCP SPT=7579 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [37662.129942] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.223.133.13 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=49781 PROTO=TCP SPT=44805 DPT=2589 WINDOW=1024 RES=0x00 SYN URGP=0 [37737.264138] audit_printk_skb: 12 callbacks suppressed [37737.264140] audit: type=1400 audit(1490039988.750:847): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9249" pid=9249 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [37737.264151] audit: type=1400 audit(1490039988.750:848): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9249" pid=9249 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [37737.264162] audit: type=1400 audit(1490039988.750:849): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9249" pid=9249 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [37737.264588] audit: type=1400 audit(1490039988.750:850): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9249" pid=9249 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [37768.760129] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=213.14.150.56 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=41 ID=44048 PROTO=TCP SPT=2532 DPT=23 WINDOW=61884 RES=0x00 SYN URGP=0 [37861.261313] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=62.210.181.161 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=7723 PROTO=TCP SPT=56962 DPT=50804 WINDOW=1024 RES=0x00 SYN URGP=0 [37867.284498] audit: type=1400 audit(1490040118.768:851): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9253" pid=9253 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [37867.284512] audit: type=1400 audit(1490040118.768:852): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9253" pid=9253 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [37867.284524] audit: type=1400 audit(1490040118.768:853): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9253" pid=9253 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [37867.284685] audit: type=1400 audit(1490040118.768:854): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=9253 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [37867.284700] audit: type=1400 audit(1490040118.768:855): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9252" pid=9253 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [37867.284723] audit: type=1400 audit(1490040118.768:856): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9252" pid=9253 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [37867.284807] audit: type=1400 audit(1490040118.768:857): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=9253 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [37867.284856] audit: type=1400 audit(1490040118.768:858): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=9253 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [37867.284876] audit: type=1400 audit(1490040118.768:859): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=9253 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [37867.284898] audit: type=1400 audit(1490040118.768:860): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=9253 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [37874.519698] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=61.240.144.66 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=31166 PROTO=TCP SPT=40006 DPT=81 WINDOW=1024 RES=0x00 SYN URGP=0 [37889.677086] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=61.240.144.65 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=8244 PROTO=TCP SPT=40006 DPT=5800 WINDOW=1024 RES=0x00 SYN URGP=0 [37978.789692] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=46.201.74.81 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=50044 PROTO=TCP SPT=45372 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [38009.067071] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=115.72.194.121 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=46 ID=14656 PROTO=TCP SPT=22797 DPT=23 WINDOW=44261 RES=0x00 SYN URGP=0 [38052.709260] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.105.61.136 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=48 ID=12585 PROTO=TCP SPT=17904 DPT=23 WINDOW=45080 RES=0x00 SYN URGP=0 [38104.059907] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=1.54.73.201 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=62212 PROTO=TCP SPT=54374 DPT=23 WINDOW=50806 RES=0x00 SYN URGP=0 [38104.978737] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=175.15.233.136 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=27195 PROTO=TCP SPT=59929 DPT=23 WINDOW=63497 RES=0x00 SYN URGP=0 [38105.181327] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=175.15.233.136 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=27195 PROTO=TCP SPT=59929 DPT=23 WINDOW=63497 RES=0x00 SYN URGP=0 [38105.200536] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=175.15.233.136 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=27195 PROTO=TCP SPT=59929 DPT=23 WINDOW=63497 RES=0x00 SYN URGP=0 [38105.227464] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=175.15.233.136 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=27195 PROTO=TCP SPT=59929 DPT=23 WINDOW=63497 RES=0x00 SYN URGP=0 [38105.266660] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=175.15.233.136 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=27195 PROTO=TCP SPT=59929 DPT=23 WINDOW=63497 RES=0x00 SYN URGP=0 [38105.301606] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=175.15.233.136 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=27195 PROTO=TCP SPT=59929 DPT=23 WINDOW=63497 RES=0x00 SYN URGP=0 [38105.318083] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=175.15.233.136 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=27195 PROTO=TCP SPT=59929 DPT=23 WINDOW=63497 RES=0x00 SYN URGP=0 [38114.832063] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=171.247.221.165 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=44 ID=31892 PROTO=TCP SPT=40052 DPT=23 WINDOW=41804 RES=0x00 SYN URGP=0 [38149.689644] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=27.151.176.109 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=26948 PROTO=TCP SPT=45160 DPT=23 WINDOW=38831 RES=0x00 SYN URGP=0 [38149.854849] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=178.136.73.101 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=64407 PROTO=TCP SPT=4754 DPT=23 WINDOW=14002 RES=0x00 SYN URGP=0 [38166.404756] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=110.55.142.64 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=5051 PROTO=TCP SPT=27410 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [38209.702564] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=188.19.18.107 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=9425 PROTO=TCP SPT=60668 DPT=23 WINDOW=9261 RES=0x00 SYN URGP=0 [38283.520024] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=125.208.194.10 DST=151.236.37.52 LEN=122 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=UDP SPT=25195 DPT=1900 LEN=102 [38443.428177] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=59.125.244.74 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=50959 PROTO=TCP SPT=48679 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [38517.678438] audit_printk_skb: 12 callbacks suppressed [38517.678441] audit: type=1400 audit(1490040769.163:865): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9330" pid=9330 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [38517.678452] audit: type=1400 audit(1490040769.163:866): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9330" pid=9330 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [38517.678463] audit: type=1400 audit(1490040769.163:867): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9330" pid=9330 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [38517.678888] audit: type=1400 audit(1490040769.163:868): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9330" pid=9330 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [38656.208861] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=59.126.197.98 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=60138 PROTO=TCP SPT=22291 DPT=23 WINDOW=17667 RES=0x00 SYN URGP=0 [38702.493436] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.223.133.13 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=49642 PROTO=TCP SPT=44805 DPT=4789 WINDOW=1024 RES=0x00 SYN URGP=0 [38704.194499] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=71.6.146.186 DST=151.236.37.52 LEN=40 TOS=0x10 PREC=0x00 TTL=109 ID=19779 PROTO=TCP SPT=13944 DPT=1991 WINDOW=49771 RES=0x00 SYN URGP=0 [38767.354258] audit: type=1400 audit(1490041018.837:869): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9335" pid=9335 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [38767.354271] audit: type=1400 audit(1490041018.837:870): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9335" pid=9335 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [38767.354283] audit: type=1400 audit(1490041018.837:871): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9335" pid=9335 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [38767.354440] audit: type=1400 audit(1490041018.837:872): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=9335 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [38767.354482] audit: type=1400 audit(1490041018.837:873): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9334" pid=9335 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [38767.354503] audit: type=1400 audit(1490041018.837:874): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9334" pid=9335 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [38767.354563] audit: type=1400 audit(1490041018.837:875): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=9335 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [38767.354610] audit: type=1400 audit(1490041018.837:876): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=9335 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [38767.354628] audit: type=1400 audit(1490041018.837:877): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=9335 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [38767.354655] audit: type=1400 audit(1490041018.837:878): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=9335 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [38849.453449] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=97.83.108.216 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x20 TTL=241 ID=619 PROTO=TCP SPT=95 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [38878.554806] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=94.233.36.30 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=58881 PROTO=TCP SPT=59466 DPT=23 WINDOW=4269 RES=0x00 SYN URGP=0 [38983.770069] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=203.222.30.20 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=31755 PROTO=TCP SPT=56571 DPT=23 WINDOW=51171 RES=0x00 SYN URGP=0 [38987.888021] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=27.56.158.140 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=248 ID=11759 PROTO=TCP SPT=5995 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [39136.581062] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=37.187.169.47 DST=151.236.37.52 LEN=442 TOS=0x18 PREC=0x00 TTL=55 ID=53487 DF PROTO=UDP SPT=5845 DPT=5060 LEN=422 [39159.199104] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=111.251.103.17 DST=151.236.37.52 LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=19034 DF PROTO=TCP SPT=2743 DPT=25 WINDOW=64240 RES=0x00 SYN URGP=0 [39162.354983] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=111.251.103.17 DST=151.236.37.52 LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=20884 DF PROTO=TCP SPT=2743 DPT=25 WINDOW=64240 RES=0x00 SYN URGP=0 [39162.465079] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=123.200.118.203 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=36587 PROTO=TCP SPT=16224 DPT=23 WINDOW=9336 RES=0x00 SYN URGP=0 [39168.370502] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=111.251.103.17 DST=151.236.37.52 LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=24958 DF PROTO=TCP SPT=2743 DPT=25 WINDOW=64240 RES=0x00 SYN URGP=0 [39177.221549] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=188.0.105.13 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=23888 PROTO=TCP SPT=2374 DPT=23 WINDOW=29602 RES=0x00 SYN URGP=0 [39297.884078] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=160.176.203.67 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=244 ID=21393 PROTO=TCP SPT=47862 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [39298.040566] audit_printk_skb: 12 callbacks suppressed [39298.040569] audit: type=1400 audit(1490041549.522:883): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9469" pid=9469 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [39298.040580] audit: type=1400 audit(1490041549.522:884): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9469" pid=9469 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [39298.040592] audit: type=1400 audit(1490041549.522:885): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9469" pid=9469 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [39298.041023] audit: type=1400 audit(1490041549.522:886): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9469" pid=9469 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [39427.399223] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=81.17.25.8 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=54321 PROTO=TCP SPT=48918 DPT=2375 WINDOW=65535 RES=0x00 SYN URGP=0 [39524.370384] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=177.132.59.89 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x20 TTL=51 ID=9184 PROTO=TCP SPT=20852 DPT=23 WINDOW=31836 RES=0x00 SYN URGP=0 [39531.454865] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=220.182.3.68 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=49 ID=6783 DF PROTO=TCP SPT=3969 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0 [39534.361375] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=220.182.3.68 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=49 ID=6920 DF PROTO=TCP SPT=3969 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0 [39540.377289] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=220.182.3.68 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=49 ID=7200 DF PROTO=TCP SPT=3969 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0 [39590.366587] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=120.193.156.74 DST=151.236.37.52 LEN=404 TOS=0x04 PREC=0x00 TTL=108 ID=7304 PROTO=UDP SPT=1030 DPT=1434 LEN=384 [39601.943708] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=42.114.70.204 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=32035 PROTO=TCP SPT=38393 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [39618.079307] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.223.133.13 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=29802 PROTO=TCP SPT=44805 DPT=4189 WINDOW=1024 RES=0x00 SYN URGP=0 [39627.338858] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=69.164.195.243 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=54321 PROTO=TCP SPT=43856 DPT=4500 WINDOW=65535 RES=0x00 SYN URGP=0 [39660.048965] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=37.59.17.152 DST=151.236.37.52 LEN=440 TOS=0x10 PREC=0x20 TTL=55 ID=8844 DF PROTO=UDP SPT=5781 DPT=5060 LEN=420 [39667.416213] audit: type=1400 audit(1490041918.893:887): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9485" pid=9485 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [39667.416226] audit: type=1400 audit(1490041918.893:888): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9485" pid=9485 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [39667.416238] audit: type=1400 audit(1490041918.893:889): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9485" pid=9485 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [39667.416415] audit: type=1400 audit(1490041918.893:890): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=9485 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [39667.416498] audit: type=1400 audit(1490041918.893:891): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=9485 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [39667.416545] audit: type=1400 audit(1490041918.893:892): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=9485 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [39667.416564] audit: type=1400 audit(1490041918.893:893): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=9485 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [39667.416590] audit: type=1400 audit(1490041918.893:894): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=9485 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [39667.416613] audit: type=1400 audit(1490041918.893:895): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9483" pid=9485 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [39667.416640] audit: type=1400 audit(1490041918.893:896): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9483" pid=9485 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [39668.430027] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=116.110.6.155 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=1390 PROTO=TCP SPT=18469 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [39681.516185] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=191.35.123.67 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x20 TTL=51 ID=54041 PROTO=TCP SPT=16080 DPT=23 WINDOW=5112 RES=0x00 SYN URGP=0 [39688.992020] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=37.59.17.110 DST=151.236.37.52 LEN=441 TOS=0x10 PREC=0x20 TTL=55 ID=23635 DF PROTO=UDP SPT=5779 DPT=5060 LEN=421 [39712.335264] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=59.15.139.34 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=5767 PROTO=TCP SPT=55732 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [39738.624135] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=61.240.144.65 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=60485 PROTO=TCP SPT=41806 DPT=1433 WINDOW=1024 RES=0x00 SYN URGP=0 [39757.403283] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=61.240.144.66 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=47058 PROTO=TCP SPT=41806 DPT=1080 WINDOW=1024 RES=0x00 SYN URGP=0 [39814.571569] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=60.189.172.152 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=913 PROTO=TCP SPT=25789 DPT=23 WINDOW=44394 RES=0x00 SYN URGP=0 [39858.897529] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=189.120.96.232 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=58281 PROTO=TCP SPT=36407 DPT=23 WINDOW=45327 RES=0x00 SYN URGP=0 [39877.770755] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=171.123.202.154 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=20506 PROTO=TCP SPT=50460 DPT=23 WINDOW=55052 RES=0x00 SYN URGP=0 [39985.169727] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=59.96.6.63 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x00 TTL=238 ID=58773 PROTO=TCP SPT=25335 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [40008.384926] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=163.172.143.149 DST=151.236.37.52 LEN=434 TOS=0x00 PREC=0x00 TTL=48 ID=30844 DF PROTO=UDP SPT=5066 DPT=5060 LEN=414 [40015.165521] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=16483 DF PROTO=TCP SPT=49291 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [40018.164149] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=56185 DF PROTO=TCP SPT=49291 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [40024.165599] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=48393 DF PROTO=TCP SPT=49291 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [40031.781061] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=178.45.239.219 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=55 ID=64859 PROTO=TCP SPT=29399 DPT=23 WINDOW=31454 RES=0x00 SYN URGP=0 [40060.167167] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=163.172.210.65 DST=151.236.37.52 LEN=438 TOS=0x08 PREC=0x00 TTL=52 ID=54719 DF PROTO=UDP SPT=5087 DPT=5060 LEN=418 [40078.349483] audit_printk_skb: 12 callbacks suppressed [40078.349486] audit: type=1400 audit(1490042329.822:901): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9489" pid=9489 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [40078.349497] audit: type=1400 audit(1490042329.822:902): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9489" pid=9489 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [40078.349508] audit: type=1400 audit(1490042329.822:903): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9489" pid=9489 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [40078.349938] audit: type=1400 audit(1490042329.822:904): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9489" pid=9489 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [40113.486045] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=171.229.214.0 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=47304 PROTO=TCP SPT=26052 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [40147.191963] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=125.136.100.238 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=58726 PROTO=TCP SPT=8332 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [40157.522504] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=168.1.128.74 DST=151.236.37.52 LEN=92 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=UDP SPT=34029 DPT=17185 LEN=72 [40382.667812] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=82.221.105.6 DST=151.236.37.52 LEN=220 TOS=0x00 PREC=0x00 TTL=117 ID=43108 PROTO=UDP SPT=14265 DPT=123 LEN=200 [40450.060282] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=123.249.0.134 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=112 ID=256 PROTO=TCP SPT=10269 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 [40567.422868] audit: type=1400 audit(1490042818.906:905): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9567" pid=9567 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [40567.422881] audit: type=1400 audit(1490042818.906:906): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9567" pid=9567 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [40567.422891] audit: type=1400 audit(1490042818.906:907): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9567" pid=9567 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [40567.423042] audit: type=1400 audit(1490042818.906:908): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=9567 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [40567.423125] audit: type=1400 audit(1490042818.906:909): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=9567 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [40567.423166] audit: type=1400 audit(1490042818.906:910): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=9567 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [40567.423174] audit: type=1400 audit(1490042818.906:911): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9566" pid=9567 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [40567.423196] audit: type=1400 audit(1490042818.906:912): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9566" pid=9567 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [40567.423218] audit: type=1400 audit(1490042818.906:913): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=9567 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [40567.423242] audit: type=1400 audit(1490042818.906:914): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=9567 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [40621.440376] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=49.4.142.183 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=114 ID=256 PROTO=TCP SPT=32345 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 [40678.651435] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=78.84.17.109 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=59 ID=41025 PROTO=TCP SPT=9684 DPT=23 WINDOW=14276 RES=0x00 SYN URGP=0 [40723.703148] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=89.163.146.72 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x00 TTL=243 ID=34752 PROTO=TCP SPT=51762 DPT=8013 WINDOW=1024 RES=0x00 SYN URGP=0 [40791.609073] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=89.165.190.104 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=18622 PROTO=TCP SPT=41657 DPT=2323 WINDOW=47521 RES=0x00 SYN URGP=0 [40848.747570] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=123.16.112.171 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=49 ID=6023 PROTO=TCP SPT=45629 DPT=23 WINDOW=33805 RES=0x00 SYN URGP=0 [40870.230530] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=213.119.11.81 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=0 DF PROTO=TCP SPT=47206 DPT=23 WINDOW=300 RES=0x00 SYN URGP=0 [40882.630431] audit_printk_skb: 12 callbacks suppressed [40882.630434] audit: type=1400 audit(1490043134.111:919): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9571" pid=9571 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [40882.630446] audit: type=1400 audit(1490043134.111:920): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9571" pid=9571 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [40882.630457] audit: type=1400 audit(1490043134.111:921): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9571" pid=9571 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [40882.630896] audit: type=1400 audit(1490043134.111:922): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9571" pid=9571 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [40907.776636] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=125.119.120.245 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=13212 PROTO=TCP SPT=52456 DPT=23 WINDOW=59592 RES=0x00 SYN URGP=0 [40932.123824] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=27.197.152.251 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=50207 PROTO=TCP SPT=42047 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [40950.997648] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=118.70.121.110 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=19024 PROTO=TCP SPT=40383 DPT=23 WINDOW=26711 RES=0x00 SYN URGP=0 [40980.416570] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=211.199.202.197 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x60 TTL=240 ID=2995 PROTO=TCP SPT=8091 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [41002.389645] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=112.16.151.206 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0xE0 TTL=46 ID=14594 PROTO=TCP SPT=38613 DPT=23 WINDOW=43501 RES=0x00 SYN URGP=0 [41019.708460] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=46.182.158.51 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=23589 PROTO=TCP SPT=58467 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [41021.269249] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=112.16.172.214 DST=151.236.37.52 LEN=40 TOS=0x18 PREC=0x00 TTL=44 ID=14594 PROTO=TCP SPT=38613 DPT=23 WINDOW=43501 RES=0x00 SYN URGP=0 [41029.138933] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=14.127.253.38 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=49848 PROTO=TCP SPT=17813 DPT=23 WINDOW=15333 RES=0x00 SYN URGP=0 [41127.853362] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=200.216.19.45 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=243 ID=39547 PROTO=TCP SPT=42650 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [41311.804141] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=71.6.216.39 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=54321 PROTO=TCP SPT=3306 DPT=3306 WINDOW=65535 RES=0x00 SYN URGP=0 [41314.425186] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=122.58.228.220 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=3340 PROTO=TCP SPT=57271 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [41424.976072] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=61.240.144.65 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=62298 PROTO=TCP SPT=43606 DPT=8009 WINDOW=1024 RES=0x00 SYN URGP=0 [41467.524876] audit: type=1400 audit(1490043719.006:923): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9581" pid=9581 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [41467.524889] audit: type=1400 audit(1490043719.006:924): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9581" pid=9581 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [41467.524901] audit: type=1400 audit(1490043719.006:925): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9581" pid=9581 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [41467.525059] audit: type=1400 audit(1490043719.006:926): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=9581 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [41467.525145] audit: type=1400 audit(1490043719.006:927): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=9581 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [41467.525192] audit: type=1400 audit(1490043719.006:928): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=9581 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [41467.525212] audit: type=1400 audit(1490043719.006:929): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=9581 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [41467.525224] audit: type=1400 audit(1490043719.006:930): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9580" pid=9581 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [41467.525246] audit: type=1400 audit(1490043719.006:931): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9580" pid=9581 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [41467.525276] audit: type=1400 audit(1490043719.006:932): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=9581 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [41522.635285] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=141.212.122.128 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=54321 PROTO=TCP SPT=36827 DPT=21 WINDOW=65535 RES=0x00 SYN URGP=0 [41522.635315] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=141.212.122.129 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=54321 PROTO=TCP SPT=37254 DPT=21 WINDOW=65535 RES=0x00 SYN URGP=0 [41556.475643] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=221.162.10.217 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=22719 PROTO=TCP SPT=63810 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [41559.923595] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=61.240.144.66 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=27233 PROTO=TCP SPT=43606 DPT=4899 WINDOW=1024 RES=0x00 SYN URGP=0 [41663.117098] audit_printk_skb: 12 callbacks suppressed [41663.117101] audit: type=1400 audit(1490043914.595:937): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9582" pid=9582 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [41663.117113] audit: type=1400 audit(1490043914.595:938): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9582" pid=9582 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [41663.117123] audit: type=1400 audit(1490043914.595:939): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9582" pid=9582 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [41663.117558] audit: type=1400 audit(1490043914.595:940): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9582" pid=9582 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [41725.308688] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=176.40.121.216 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=2167 PROTO=TCP SPT=45457 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [41729.905784] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=112.205.128.240 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=242 ID=1518 PROTO=TCP SPT=44048 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [41837.289553] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=120.38.207.253 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=28763 PROTO=TCP SPT=33019 DPT=23 WINDOW=3915 RES=0x00 SYN URGP=0 [42039.376018] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.2.240.233 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=56 ID=8333 PROTO=TCP SPT=51139 DPT=23 WINDOW=47539 RES=0x00 SYN URGP=0 [42042.899728] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=89.163.242.120 DST=151.236.37.52 LEN=442 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=UDP SPT=5125 DPT=5060 LEN=422 [42168.910826] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=151.177.174.97 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=47 ID=16213 PROTO=TCP SPT=53751 DPT=23 WINDOW=44935 RES=0x00 SYN URGP=0 [42185.474679] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=188.126.45.119 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x20 TTL=242 ID=26288 PROTO=TCP SPT=29985 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [42219.689933] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=222.186.190.123 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=102 ID=256 PROTO=TCP SPT=6000 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 [42251.037166] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=139.162.109.43 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=TCP SPT=60829 DPT=111 WINDOW=65535 RES=0x00 SYN URGP=0 [42346.396163] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=1.34.116.226 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=7645 PROTO=TCP SPT=46084 DPT=23 WINDOW=16876 RES=0x00 SYN URGP=0 [42355.487113] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=182.18.72.83 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=114 ID=256 PROTO=TCP SPT=4361 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 [42367.555033] audit: type=1400 audit(1490044619.035:941): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9660" pid=9660 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [42367.555046] audit: type=1400 audit(1490044619.035:942): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9660" pid=9660 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [42367.555057] audit: type=1400 audit(1490044619.035:943): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9660" pid=9660 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [42367.555210] audit: type=1400 audit(1490044619.035:944): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=9660 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [42367.555288] audit: type=1400 audit(1490044619.035:945): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=9660 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [42367.555327] audit: type=1400 audit(1490044619.035:946): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=9660 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [42367.555345] audit: type=1400 audit(1490044619.035:947): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=9660 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [42367.555368] audit: type=1400 audit(1490044619.035:948): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=9660 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [42367.555418] audit: type=1400 audit(1490044619.035:949): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=9660 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [42367.555439] audit: type=1400 audit(1490044619.035:950): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=9660 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [42427.542069] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=118.103.126.194 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=11852 PROTO=TCP SPT=40084 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 [42443.598586] audit_printk_skb: 12 callbacks suppressed [42443.598589] audit: type=1400 audit(1490044695.079:955): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9670" pid=9670 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [42443.598600] audit: type=1400 audit(1490044695.079:956): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9670" pid=9670 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [42443.598609] audit: type=1400 audit(1490044695.079:957): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9670" pid=9670 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [42443.599027] audit: type=1400 audit(1490044695.079:958): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9670" pid=9670 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [42462.136256] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=2.190.189.132 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=36237 PROTO=TCP SPT=5572 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [42487.683098] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=50.195.110.73 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=16930 PROTO=TCP SPT=29779 DPT=23 WINDOW=65483 RES=0x00 SYN URGP=0 [42599.260759] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=49.4.142.152 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=106 ID=256 PROTO=TCP SPT=6000 DPT=2222 WINDOW=16384 RES=0x00 SYN URGP=0 [42797.693022] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=89.163.146.72 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x00 TTL=243 ID=24947 PROTO=TCP SPT=51762 DPT=8006 WINDOW=1024 RES=0x00 SYN URGP=0 [42835.727348] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=107.179.45.27 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=103 ID=256 PROTO=TCP SPT=6000 DPT=3389 WINDOW=16384 RES=0x00 SYN URGP=0 [42837.195306] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=185.94.111.1 DST=151.236.37.52 LEN=28 TOS=0x00 PREC=0x00 TTL=241 ID=54321 PROTO=UDP SPT=37221 DPT=17 LEN=8 [42839.502048] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=163.172.210.65 DST=151.236.37.52 LEN=438 TOS=0x08 PREC=0x00 TTL=52 ID=4642 DF PROTO=UDP SPT=5076 DPT=5060 LEN=418 [42847.755522] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=191.96.249.97 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=14219 PROTO=TCP SPT=58744 DPT=8080 WINDOW=1024 RES=0x00 SYN URGP=0 [42895.849072] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=125.162.235.76 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=20736 PROTO=TCP SPT=48043 DPT=81 WINDOW=1460 RES=0x00 SYN URGP=0 [42907.434889] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.235.9.60 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=64844 PROTO=TCP SPT=41796 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [43015.967722] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=189.82.241.190 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=52 ID=1751 PROTO=TCP SPT=54779 DPT=23 WINDOW=63699 RES=0x00 SYN URGP=0 [43056.274461] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=191.240.66.182 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=31385 DF PROTO=TCP SPT=2645 DPT=23 WINDOW=5840 RES=0x00 SYN URGP=0 [43059.273606] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=191.240.66.182 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=31386 DF PROTO=TCP SPT=2645 DPT=23 WINDOW=5840 RES=0x00 SYN URGP=0 [43065.273495] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=191.240.66.182 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=31387 DF PROTO=TCP SPT=2645 DPT=23 WINDOW=5840 RES=0x00 SYN URGP=0 [43111.905775] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=36.85.36.160 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=49 ID=18949 PROTO=TCP SPT=13556 DPT=23 WINDOW=65060 RES=0x00 SYN URGP=0 [43179.704618] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=181.92.83.26 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=10003 PROTO=TCP SPT=2419 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [43248.244052] audit: type=1400 audit(1490045499.725:959): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9793" pid=9793 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [43248.244065] audit: type=1400 audit(1490045499.725:960): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9793" pid=9793 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [43248.244077] audit: type=1400 audit(1490045499.725:961): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9793" pid=9793 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [43248.244511] audit: type=1400 audit(1490045499.725:962): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9793" pid=9793 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [43252.596524] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=66.240.192.138 DST=151.236.37.52 LEN=29 TOS=0x10 PREC=0x00 TTL=115 ID=9313 PROTO=UDP SPT=63487 DPT=53413 LEN=9 [43267.630512] audit: type=1400 audit(1490045519.106:963): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9795" pid=9795 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [43267.630524] audit: type=1400 audit(1490045519.106:964): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9795" pid=9795 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [43267.630535] audit: type=1400 audit(1490045519.106:965): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9795" pid=9795 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [43267.630686] audit: type=1400 audit(1490045519.106:966): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=9795 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [43267.630738] audit: type=1400 audit(1490045519.106:967): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9794" pid=9795 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [43267.630758] audit: type=1400 audit(1490045519.106:968): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9794" pid=9795 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [43267.630799] audit: type=1400 audit(1490045519.106:969): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=9795 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [43267.630839] audit: type=1400 audit(1490045519.106:970): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=9795 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [43267.630856] audit: type=1400 audit(1490045519.106:971): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=9795 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [43267.630879] audit: type=1400 audit(1490045519.106:972): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=9795 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [43348.395985] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=191.82.75.18 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x20 TTL=51 ID=23517 PROTO=TCP SPT=14553 DPT=2222 WINDOW=20668 RES=0x00 SYN URGP=0 [43367.581717] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=123.140.114.9 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=29724 PROTO=TCP SPT=5691 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [43393.080828] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=115.74.248.75 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=47 ID=50887 PROTO=TCP SPT=24516 DPT=23 WINDOW=2302 RES=0x00 SYN URGP=0 [43441.678397] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=186.108.149.231 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=49 ID=4493 PROTO=TCP SPT=1371 DPT=23 WINDOW=31531 RES=0x00 SYN URGP=0 [43447.827603] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=103.37.45.50 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=112 ID=256 PROTO=TCP SPT=25140 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 [43448.155378] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=29898 DF PROTO=TCP SPT=14096 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [43451.151591] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=39132 DF PROTO=TCP SPT=14096 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [43457.157787] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=41109 DF PROTO=TCP SPT=14096 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [43569.446809] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=89.45.207.152 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=24036 PROTO=TCP SPT=36643 DPT=23 WINDOW=47379 RES=0x00 SYN URGP=0 [43578.452159] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=61.240.144.66 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=23097 PROTO=TCP SPT=45406 DPT=27017 WINDOW=1024 RES=0x00 SYN URGP=0 [43664.927763] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.230.47.41 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=11897 PROTO=TCP SPT=59921 DPT=4395 WINDOW=1024 RES=0x00 SYN URGP=0 [43676.828189] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=222.187.224.190 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=112 ID=256 PROTO=TCP SPT=56076 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 [43776.028574] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=49.4.142.152 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=106 ID=256 PROTO=TCP SPT=6000 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 [43836.437655] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=187.59.242.188 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x20 TTL=51 ID=44654 PROTO=TCP SPT=27976 DPT=23 WINDOW=32600 RES=0x00 SYN URGP=0 [43842.024333] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=1.52.151.9 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=14194 PROTO=TCP SPT=34302 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [43857.062350] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=123.19.168.81 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=52 ID=65393 PROTO=TCP SPT=35662 DPT=23 WINDOW=8407 RES=0x00 SYN URGP=0 [43919.337160] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=1.34.167.34 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=8157 PROTO=TCP SPT=58879 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [43933.068728] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=213.167.206.14 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=37490 PROTO=TCP SPT=2316 DPT=23 WINDOW=261 RES=0x00 SYN URGP=0 [43986.753133] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=78.189.10.146 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=12884 PROTO=TCP SPT=40756 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [44007.878784] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=115.23.214.191 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=4335 PROTO=TCP SPT=36516 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [44028.517940] audit_printk_skb: 12 callbacks suppressed [44028.517943] audit: type=1400 audit(1490046279.994:977): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9871" pid=9871 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [44028.517954] audit: type=1400 audit(1490046279.994:978): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9871" pid=9871 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [44028.517965] audit: type=1400 audit(1490046279.994:979): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9871" pid=9871 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [44028.518406] audit: type=1400 audit(1490046279.994:980): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9871" pid=9871 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [44086.860750] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=103.15.252.207 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=54 ID=1325 PROTO=TCP SPT=21874 DPT=23 WINDOW=49305 RES=0x00 SYN URGP=0 [44129.117808] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=103.37.45.166 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=112 ID=256 PROTO=TCP SPT=58381 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 [44167.681826] audit: type=1400 audit(1490046419.156:981): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9875" pid=9875 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [44167.681839] audit: type=1400 audit(1490046419.156:982): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9875" pid=9875 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [44167.681851] audit: type=1400 audit(1490046419.156:983): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9875" pid=9875 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [44167.682007] audit: type=1400 audit(1490046419.156:984): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9874" pid=9875 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [44167.682058] audit: type=1400 audit(1490046419.156:985): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9874" pid=9875 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [44167.682080] audit: type=1400 audit(1490046419.156:986): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=9875 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [44167.682167] audit: type=1400 audit(1490046419.156:987): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=9875 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [44167.682214] audit: type=1400 audit(1490046419.156:988): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=9875 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [44167.682234] audit: type=1400 audit(1490046419.156:989): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=9875 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [44167.682262] audit: type=1400 audit(1490046419.156:990): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=9875 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [44188.551260] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.226.237.44 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=37795 PROTO=TCP SPT=49565 DPT=23 WINDOW=47227 RES=0x00 SYN URGP=0 [44192.121396] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=27.198.34.210 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=62195 PROTO=TCP SPT=36694 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [44261.165106] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=176.120.203.223 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=8429 PROTO=TCP SPT=60872 DPT=23 WINDOW=63184 RES=0x00 SYN URGP=0 [44286.488817] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=213.249.226.252 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=40052 PROTO=TCP SPT=14702 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [44332.863472] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=114.32.240.221 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=17216 PROTO=TCP SPT=23263 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [44347.686255] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=88.249.231.97 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=43831 PROTO=TCP SPT=6111 DPT=2323 WINDOW=27055 RES=0x00 SYN URGP=0 [44350.802200] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=113.133.24.248 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=36628 PROTO=TCP SPT=3542 DPT=23 WINDOW=63550 RES=0x00 SYN URGP=0 [44402.916508] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=123.249.57.202 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=105 ID=256 PROTO=TCP SPT=6000 DPT=1433 WINDOW=16384 RES=0x00 SYN URGP=0 [44493.120310] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=176.41.168.150 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=233 ID=58210 PROTO=TCP SPT=18734 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [44495.145954] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=39.172.135.147 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0xE0 TTL=46 ID=42234 PROTO=TCP SPT=2496 DPT=23 WINDOW=7120 RES=0x00 SYN URGP=0 [44516.645859] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=1.34.119.144 DST=151.236.37.52 LEN=552 TOS=0x00 PREC=0x00 TTL=48 ID=50248 PROTO=TCP SPT=64830 DPT=32271 WINDOW=29044 RES=0x00 ACK URGP=0 [44597.343557] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=2.187.110.7 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=54591 PROTO=TCP SPT=46389 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [44728.665447] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=222.186.58.12 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=104 ID=256 PROTO=TCP SPT=6000 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 [44750.346238] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=183.80.118.47 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=61089 PROTO=TCP SPT=33589 DPT=23 WINDOW=14229 RES=0x00 SYN URGP=0 [44797.130429] audit_printk_skb: 12 callbacks suppressed [44797.130432] audit: type=1400 audit(1490047048.609:995): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9883" pid=9883 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [44797.130443] audit: type=1400 audit(1490047048.609:996): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9883" pid=9883 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [44797.130454] audit: type=1400 audit(1490047048.609:997): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9883" pid=9883 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [44797.130888] audit: type=1400 audit(1490047048.609:998): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9883" pid=9883 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [44838.140559] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=220.161.205.138 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=115 ID=256 PROTO=TCP SPT=3282 DPT=3389 WINDOW=16384 RES=0x00 SYN URGP=0 [44890.140336] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=1.54.80.208 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=59472 PROTO=TCP SPT=23987 DPT=23 WINDOW=17832 RES=0x00 SYN URGP=0 [44890.592699] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=213.202.253.20 DST=151.236.37.52 LEN=442 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=UDP SPT=5299 DPT=5060 LEN=422 [44954.592707] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=41.32.5.197 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=47 ID=40692 PROTO=TCP SPT=33464 DPT=2323 WINDOW=46216 RES=0x00 SYN URGP=0 [44962.889342] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=87.117.47.180 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=53 ID=50271 PROTO=TCP SPT=40335 DPT=23 WINDOW=36767 RES=0x00 SYN URGP=0 [44965.249306] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=119.206.66.137 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=19586 PROTO=TCP SPT=20503 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [45022.523269] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=79.91.115.204 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=14538 PROTO=TCP SPT=56510 DPT=23 WINDOW=47574 RES=0x00 SYN URGP=0 [45067.782456] audit: type=1400 audit(1490047319.261:999): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9886" pid=9886 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [45067.782469] audit: type=1400 audit(1490047319.261:1000): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9886" pid=9886 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [45067.782481] audit: type=1400 audit(1490047319.261:1001): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9886" pid=9886 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [45067.782646] audit: type=1400 audit(1490047319.261:1002): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=9886 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [45067.782732] audit: type=1400 audit(1490047319.261:1003): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=9886 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [45067.782777] audit: type=1400 audit(1490047319.261:1004): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=9886 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [45067.782796] audit: type=1400 audit(1490047319.261:1005): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=9886 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [45067.782822] audit: type=1400 audit(1490047319.261:1006): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=9886 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [45067.782873] audit: type=1400 audit(1490047319.261:1007): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=9886 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [45067.782896] audit: type=1400 audit(1490047319.261:1008): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=9886 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [45098.114943] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=113.190.29.185 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=49 ID=19040 PROTO=TCP SPT=59829 DPT=23 WINDOW=64421 RES=0x00 SYN URGP=0 [45188.389989] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=143.202.77.82 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=46 ID=44681 PROTO=TCP SPT=57326 DPT=23 WINDOW=34238 RES=0x00 SYN URGP=0 [45224.432898] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=176.58.123.20 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=54321 PROTO=TCP SPT=39033 DPT=2152 WINDOW=65535 RES=0x00 SYN URGP=0 [45288.303060] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=61.178.199.38 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=4151 PROTO=TCP SPT=37582 DPT=23 WINDOW=44534 RES=0x00 SYN URGP=0 [45301.080755] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=193.189.77.101 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=32811 PROTO=TCP SPT=4391 DPT=23 WINDOW=46142 RES=0x00 SYN URGP=0 [45306.625176] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=88.245.8.178 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=49 ID=57862 PROTO=TCP SPT=49734 DPT=23 WINDOW=64894 RES=0x00 SYN URGP=0 [45346.108054] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=187.87.254.129 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x00 TTL=42 ID=30672 PROTO=TCP SPT=34862 DPT=23 WINDOW=42246 RES=0x00 SYN URGP=0 [45423.081348] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=139.162.120.76 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=54321 PROTO=TCP SPT=51021 DPT=81 WINDOW=65535 RES=0x00 SYN URGP=0 [45482.448238] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=192.228.202.104 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=50506 PROTO=TCP SPT=27882 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [45601.598615] audit_printk_skb: 6 callbacks suppressed [45601.598617] audit: type=1400 audit(1490047853.075:1011): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9964" pid=9964 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [45601.598630] audit: type=1400 audit(1490047853.075:1012): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9964" pid=9964 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [45601.598641] audit: type=1400 audit(1490047853.075:1013): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9964" pid=9964 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [45601.599078] audit: type=1400 audit(1490047853.075:1014): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9964" pid=9964 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [45626.676277] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=163.172.210.65 DST=151.236.37.52 LEN=438 TOS=0x08 PREC=0x00 TTL=52 ID=14546 DF PROTO=UDP SPT=5063 DPT=5060 LEN=418 [45647.231229] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=104.218.221.174 DST=151.236.37.52 LEN=44 TOS=0x10 PREC=0x00 TTL=51 ID=27141 PROTO=TCP SPT=43517 DPT=23 WINDOW=48109 RES=0x00 SYN URGP=0 [45816.156216] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=43.241.213.74 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=54321 PROTO=TCP SPT=53282 DPT=8888 WINDOW=65535 RES=0x00 SYN URGP=0 [45853.411874] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=82.145.55.34 DST=151.236.37.52 LEN=439 TOS=0x00 PREC=0x00 TTL=56 ID=55687 DF PROTO=UDP SPT=5194 DPT=5070 LEN=419 [45879.198211] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.245.224.156 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=10495 PROTO=TCP SPT=2613 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [45907.118892] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=123.21.71.250 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=1741 PROTO=TCP SPT=40342 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [45920.740610] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=122.117.227.19 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=43345 PROTO=TCP SPT=44396 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [45964.938050] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=122.224.153.109 DST=151.236.37.52 LEN=41 TOS=0x00 PREC=0x00 TTL=114 ID=2039 DF PROTO=UDP SPT=23723 DPT=9600 LEN=21 [45967.813554] audit: type=1400 audit(1490048219.286:1015): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9972" pid=9972 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [45967.813567] audit: type=1400 audit(1490048219.286:1016): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9972" pid=9972 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [45967.813578] audit: type=1400 audit(1490048219.286:1017): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/9972" pid=9972 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [45967.813729] audit: type=1400 audit(1490048219.286:1018): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=9972 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [45967.813810] audit: type=1400 audit(1490048219.286:1019): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=9972 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [45967.813850] audit: type=1400 audit(1490048219.286:1020): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=9972 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [45967.813867] audit: type=1400 audit(1490048219.286:1021): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=9972 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [45967.813890] audit: type=1400 audit(1490048219.286:1022): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=9972 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [45967.813938] audit: type=1400 audit(1490048219.286:1023): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=9972 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [45967.813960] audit: type=1400 audit(1490048219.286:1024): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=9972 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [45993.119040] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=122.224.153.109 DST=151.236.37.52 LEN=41 TOS=0x00 PREC=0x00 TTL=114 ID=3786 DF PROTO=UDP SPT=23723 DPT=9600 LEN=21 [46002.627743] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=49.48.251.144 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=64503 PROTO=TCP SPT=49853 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [46021.579125] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=122.224.153.109 DST=151.236.37.52 LEN=129 TOS=0x00 PREC=0x00 TTL=114 ID=579 DF PROTO=UDP SPT=23723 DPT=1701 LEN=109 [46050.600065] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=89.163.242.169 DST=151.236.37.52 LEN=442 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=UDP SPT=5110 DPT=5060 LEN=422 [46232.270098] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=51.15.13.81 DST=151.236.37.52 LEN=434 TOS=0x08 PREC=0x00 TTL=52 ID=61241 DF PROTO=UDP SPT=5066 DPT=5060 LEN=414 [46261.094892] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=80.13.173.21 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=51 ID=59382 PROTO=TCP SPT=13692 DPT=23 WINDOW=56204 RES=0x00 SYN URGP=0 [46296.256353] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=168.1.128.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=UDP SPT=3676 DPT=44818 LEN=32 [46345.231356] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.197.235.3 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=11634 PROTO=TCP SPT=48514 DPT=33890 WINDOW=1024 RES=0x00 SYN URGP=0 [46406.156974] audit_printk_skb: 6 callbacks suppressed [46406.156976] audit: type=1400 audit(1490048657.629:1027): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10096" pid=10096 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [46406.156988] audit: type=1400 audit(1490048657.629:1028): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10096" pid=10096 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [46406.156999] audit: type=1400 audit(1490048657.629:1029): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10096" pid=10096 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [46406.157422] audit: type=1400 audit(1490048657.629:1030): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10096" pid=10096 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [46410.323477] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=138.197.2.184 DST=151.236.37.52 LEN=37 TOS=0x00 PREC=0x00 TTL=55 ID=0 DF PROTO=UDP SPT=43225 DPT=123 LEN=17 [46500.111804] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=79.126.85.46 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=55 ID=64645 PROTO=TCP SPT=28691 DPT=23 WINDOW=30746 RES=0x00 SYN URGP=0 [46545.451934] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=116.126.188.80 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=3180 PROTO=TCP SPT=37469 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [46590.464499] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=79.17.82.82 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=242 ID=56318 PROTO=TCP SPT=2113 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [46629.748622] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=183.14.168.251 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=50530 PROTO=TCP SPT=25407 DPT=23 WINDOW=27446 RES=0x00 SYN URGP=0 [46653.587032] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=201.172.24.116 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x00 TTL=234 ID=40765 PROTO=TCP SPT=9303 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [46672.989756] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=175.158.183.249 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x40 TTL=241 ID=4718 PROTO=TCP SPT=352 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [46678.232406] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=200.116.145.103 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=53348 PROTO=TCP SPT=39598 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [46838.168857] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=201.212.83.162 DST=151.236.37.52 LEN=40 TOS=0x16 PREC=0x00 TTL=35 ID=43897 PROTO=TCP SPT=36547 DPT=23 WINDOW=3948 RES=0x00 SYN URGP=0 [46867.822557] audit: type=1400 audit(1490049119.297:1031): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10146" pid=10146 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [46867.822571] audit: type=1400 audit(1490049119.297:1032): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10146" pid=10146 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [46867.822583] audit: type=1400 audit(1490049119.297:1033): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10146" pid=10146 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [46867.822742] audit: type=1400 audit(1490049119.297:1034): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=10146 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [46867.822828] audit: type=1400 audit(1490049119.297:1035): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=10146 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [46867.822875] audit: type=1400 audit(1490049119.297:1036): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=10146 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [46867.822894] audit: type=1400 audit(1490049119.297:1037): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=10146 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [46867.822922] audit: type=1400 audit(1490049119.297:1038): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=10146 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [46867.822977] audit: type=1400 audit(1490049119.297:1039): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=10146 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [46867.823000] audit: type=1400 audit(1490049119.297:1040): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=10146 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [46882.089184] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=60320 DF PROTO=TCP SPT=59372 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [46885.093282] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=64351 DF PROTO=TCP SPT=59372 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [46891.092347] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=8839 DF PROTO=TCP SPT=59372 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [46892.652748] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=60.163.146.251 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x00 TTL=50 ID=27626 PROTO=TCP SPT=4801 DPT=23 WINDOW=3347 RES=0x00 SYN URGP=0 [46894.065377] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=222.184.150.19 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=10270 PROTO=TCP SPT=14946 DPT=2323 WINDOW=52140 RES=0x00 SYN URGP=0 [47186.630486] audit_printk_skb: 6 callbacks suppressed [47186.630489] audit: type=1400 audit(1490049438.107:1043): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10151" pid=10151 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [47186.630500] audit: type=1400 audit(1490049438.107:1044): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10151" pid=10151 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [47186.630512] audit: type=1400 audit(1490049438.107:1045): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10151" pid=10151 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [47186.630946] audit: type=1400 audit(1490049438.107:1046): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10151" pid=10151 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [47276.608112] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=2.187.143.221 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=63950 PROTO=TCP SPT=15678 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [47296.218870] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=194.58.165.204 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=58061 PROTO=TCP SPT=27842 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [47297.032535] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=114.33.197.113 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=60292 PROTO=TCP SPT=36349 DPT=23 WINDOW=30741 RES=0x00 SYN URGP=0 [47347.717639] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=218.164.116.64 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=62070 PROTO=TCP SPT=23407 DPT=23 WINDOW=27999 RES=0x00 SYN URGP=0 [47384.829431] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=203.222.30.20 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=31755 PROTO=TCP SPT=56571 DPT=23 WINDOW=51171 RES=0x00 SYN URGP=0 [47391.475176] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=202.122.10.154 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=13857 PROTO=TCP SPT=65402 DPT=8000 WINDOW=1460 RES=0x00 SYN URGP=0 [47399.600344] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=185.142.236.213 DST=151.236.37.52 LEN=56 TOS=0x08 PREC=0x00 TTL=53 ID=43424 DF PROTO=UDP SPT=46931 DPT=53 LEN=36 [47600.060331] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=120.132.4.239 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=233 ID=41043 PROTO=TCP SPT=16854 DPT=1099 WINDOW=8192 RES=0x00 SYN URGP=0 [47629.347763] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=187.192.125.248 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=48775 PROTO=TCP SPT=21173 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [47634.569422] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=78.187.242.42 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=53081 PROTO=TCP SPT=34488 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [47725.628606] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=223.82.246.140 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x00 TTL=108 ID=1304 PROTO=TCP SPT=48406 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 [47737.526809] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=220.132.137.178 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=10287 PROTO=TCP SPT=35276 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [47749.829482] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=177.97.201.14 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x20 TTL=50 ID=25726 PROTO=TCP SPT=58252 DPT=23 WINDOW=40444 RES=0x00 SYN URGP=0 [47758.075076] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=45.126.208.34 DST=151.236.37.52 LEN=442 TOS=0x00 PREC=0x00 TTL=50 ID=35025 DF PROTO=UDP SPT=5166 DPT=5060 LEN=422 [47767.924570] audit: type=1400 audit(1490050019.400:1047): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10226" pid=10226 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [47767.924583] audit: type=1400 audit(1490050019.400:1048): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10226" pid=10226 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [47767.924595] audit: type=1400 audit(1490050019.400:1049): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10226" pid=10226 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [47767.924747] audit: type=1400 audit(1490050019.400:1050): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=10226 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [47767.924825] audit: type=1400 audit(1490050019.400:1051): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=10226 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [47767.924868] audit: type=1400 audit(1490050019.400:1052): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=10226 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [47767.924885] audit: type=1400 audit(1490050019.400:1053): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=10226 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [47767.924909] audit: type=1400 audit(1490050019.400:1054): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=10226 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [47767.924959] audit: type=1400 audit(1490050019.400:1055): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=10226 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [47767.924982] audit: type=1400 audit(1490050019.400:1056): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=10226 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [47791.918527] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=222.186.10.245 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=103 ID=256 PROTO=TCP SPT=6000 DPT=1433 WINDOW=16384 RES=0x00 SYN URGP=0 [47815.698945] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=121.147.117.1 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=39797 PROTO=TCP SPT=23660 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [47938.735435] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=112.5.237.230 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0xE0 TTL=41 ID=45997 PROTO=TCP SPT=16063 DPT=23 WINDOW=63583 RES=0x00 SYN URGP=0 [47949.716525] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.223.133.13 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=55608 PROTO=TCP SPT=44805 DPT=4389 WINDOW=1024 RES=0x00 SYN URGP=0 [47967.197008] audit_printk_skb: 6 callbacks suppressed [47967.197011] audit: type=1400 audit(1490050218.671:1059): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10231" pid=10231 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [47967.197023] audit: type=1400 audit(1490050218.671:1060): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10231" pid=10231 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [47967.197034] audit: type=1400 audit(1490050218.671:1061): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10231" pid=10231 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [47967.197465] audit: type=1400 audit(1490050218.671:1062): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10231" pid=10231 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [48084.702650] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=223.78.183.137 DST=151.236.37.52 LEN=40 TOS=0x18 PREC=0x00 TTL=45 ID=42863 PROTO=TCP SPT=13742 DPT=23 WINDOW=28670 RES=0x00 SYN URGP=0 [48088.186592] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=101.250.186.238 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=39 ID=52307 PROTO=TCP SPT=8312 DPT=23 WINDOW=8000 RES=0x00 SYN URGP=0 [48150.703552] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=51.254.167.11 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=42056 PROTO=TCP SPT=49867 DPT=6000 WINDOW=1024 RES=0x00 SYN URGP=0 [48158.056292] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=190.50.193.34 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x20 TTL=51 ID=16600 PROTO=TCP SPT=24418 DPT=23 WINDOW=30543 RES=0x00 SYN URGP=0 [48182.292955] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=181.226.147.127 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x20 TTL=50 ID=62735 PROTO=TCP SPT=20837 DPT=23 WINDOW=13325 RES=0x00 SYN URGP=0 [48275.804297] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=36.77.148.24 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=58749 PROTO=TCP SPT=29384 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [48287.450378] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=203.222.30.20 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=31755 PROTO=TCP SPT=56571 DPT=2323 WINDOW=51171 RES=0x00 SYN URGP=0 [48392.815113] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=163.172.210.65 DST=151.236.37.52 LEN=438 TOS=0x08 PREC=0x00 TTL=52 ID=47986 DF PROTO=UDP SPT=5082 DPT=5060 LEN=418 [48396.037972] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=39.169.16.161 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0xE0 TTL=43 ID=4201 PROTO=TCP SPT=22922 DPT=23 WINDOW=19354 RES=0x00 SYN URGP=0 [48420.201212] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=116.109.80.78 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=235 ID=23775 PROTO=TCP SPT=38000 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [48460.375506] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=179.208.179.14 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=15917 PROTO=TCP SPT=53695 DPT=23 WINDOW=45007 RES=0x00 SYN URGP=0 [48475.091584] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=187.140.157.65 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=4786 PROTO=TCP SPT=8638 DPT=23 WINDOW=13230 RES=0x00 SYN URGP=0 [48542.473477] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=82.79.227.213 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=56 ID=41721 PROTO=TCP SPT=12467 DPT=23 WINDOW=1667 RES=0x00 SYN URGP=0 [48668.004872] audit: type=1400 audit(1490050919.479:1063): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10254" pid=10254 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [48668.004885] audit: type=1400 audit(1490050919.479:1064): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10254" pid=10254 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [48668.004895] audit: type=1400 audit(1490050919.479:1065): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10254" pid=10254 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [48668.005051] audit: type=1400 audit(1490050919.479:1066): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=10254 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [48668.005129] audit: type=1400 audit(1490050919.479:1067): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=10254 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [48668.005169] audit: type=1400 audit(1490050919.479:1068): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=10254 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [48668.005186] audit: type=1400 audit(1490050919.479:1069): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=10254 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [48668.005208] audit: type=1400 audit(1490050919.479:1070): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=10254 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [48668.005259] audit: type=1400 audit(1490050919.479:1071): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=10254 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [48668.005279] audit: type=1400 audit(1490050919.479:1072): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=10254 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [48680.923217] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=179.155.21.173 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=20931 PROTO=TCP SPT=53933 DPT=23 WINDOW=40273 RES=0x00 SYN URGP=0 [48741.303314] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=1.34.98.136 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=45946 PROTO=TCP SPT=12278 DPT=23 WINDOW=3030 RES=0x00 SYN URGP=0 [48747.843167] audit_printk_skb: 6 callbacks suppressed [48747.843170] audit: type=1400 audit(1490050999.314:1075): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10257" pid=10257 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [48747.843181] audit: type=1400 audit(1490050999.314:1076): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10257" pid=10257 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [48747.843192] audit: type=1400 audit(1490050999.314:1077): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10257" pid=10257 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [48747.843621] audit: type=1400 audit(1490050999.314:1078): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10257" pid=10257 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [48784.945314] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=45.126.208.10 DST=151.236.37.52 LEN=447 TOS=0x00 PREC=0x00 TTL=50 ID=59485 DF PROTO=UDP SPT=5390 DPT=5060 LEN=427 [48846.649479] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=46.34.132.166 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=4769 PROTO=TCP SPT=6629 DPT=23 WINDOW=1096 RES=0x00 SYN URGP=0 [48860.894590] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=187.37.2.14 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=47238 PROTO=TCP SPT=20531 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [48999.580172] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=118.100.5.116 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=58 ID=27754 PROTO=TCP SPT=25194 DPT=23 WINDOW=58309 RES=0x00 SYN URGP=0 [49044.240740] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=93.118.249.97 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=243 ID=26261 PROTO=TCP SPT=37572 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [49240.660901] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=149.91.91.34 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=58334 PROTO=TCP SPT=42666 DPT=2083 WINDOW=1024 RES=0x00 SYN URGP=0 [49249.545249] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=113.170.101.138 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=242 ID=52726 PROTO=TCP SPT=19743 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [49257.981343] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.230.47.41 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=29577 PROTO=TCP SPT=59921 DPT=3355 WINDOW=1024 RES=0x00 SYN URGP=0 [49333.709185] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=192.200.209.35 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=54321 PROTO=TCP SPT=35753 DPT=789 WINDOW=65535 RES=0x00 SYN URGP=0 [49370.976276] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=36.78.107.41 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=63404 PROTO=TCP SPT=26065 DPT=88 WINDOW=1460 RES=0x00 SYN URGP=0 [49490.124134] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=108.162.39.19 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=5074 PROTO=TCP SPT=63047 DPT=23 WINDOW=58455 RES=0x00 SYN URGP=0 [49491.632399] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=46.1.124.32 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=235 ID=13577 PROTO=TCP SPT=9532 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [49528.345256] audit: type=1400 audit(1490051779.817:1079): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10340" pid=10340 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [49528.345269] audit: type=1400 audit(1490051779.817:1080): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10340" pid=10340 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [49528.345281] audit: type=1400 audit(1490051779.817:1081): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10340" pid=10340 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [49528.345718] audit: type=1400 audit(1490051779.817:1082): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10340" pid=10340 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [49535.278906] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=79.127.97.4 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=48 ID=21263 PROTO=TCP SPT=61968 DPT=23 WINDOW=33438 RES=0x00 SYN URGP=0 [49568.079797] audit: type=1400 audit(1490051819.551:1083): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10341" pid=10341 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [49568.079811] audit: type=1400 audit(1490051819.551:1084): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10341" pid=10341 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [49568.079822] audit: type=1400 audit(1490051819.551:1085): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10341" pid=10341 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [49568.079979] audit: type=1400 audit(1490051819.551:1086): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=10341 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [49568.080138] audit: type=1400 audit(1490051819.555:1087): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=10341 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [49568.080185] audit: type=1400 audit(1490051819.555:1088): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=10341 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [49568.080203] audit: type=1400 audit(1490051819.555:1089): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=10341 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [49568.080227] audit: type=1400 audit(1490051819.555:1090): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=10341 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [49568.080280] audit: type=1400 audit(1490051819.555:1091): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=10341 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [49568.080303] audit: type=1400 audit(1490051819.555:1092): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=10341 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [49671.837018] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=220.133.110.121 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=1233 PROTO=TCP SPT=50114 DPT=23 WINDOW=55514 RES=0x00 SYN URGP=0 [49681.920243] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.234.36.111 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=34917 PROTO=TCP SPT=22347 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [49711.967195] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=113.23.13.57 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=27487 PROTO=TCP SPT=53308 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [49755.392790] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=191.185.232.144 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=55894 PROTO=TCP SPT=14244 DPT=23 WINDOW=9652 RES=0x00 SYN URGP=0 [49958.746036] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=178.156.181.104 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x20 TTL=54 ID=19040 PROTO=TCP SPT=59829 DPT=23 WINDOW=64421 RES=0x00 SYN URGP=0 [50002.526836] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.230.47.41 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=54799 PROTO=TCP SPT=59921 DPT=3333 WINDOW=1024 RES=0x00 SYN URGP=0 [50128.051271] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=14.169.139.69 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=53053 PROTO=TCP SPT=1963 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [50184.948606] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=99.247.52.172 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=14962 PROTO=TCP SPT=50455 DPT=23 WINDOW=1743 RES=0x00 SYN URGP=0 [50246.440468] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.230.47.41 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=36534 PROTO=TCP SPT=59921 DPT=4398 WINDOW=1024 RES=0x00 SYN URGP=0 [50296.812957] audit_printk_skb: 6 callbacks suppressed [50296.812960] audit: type=1400 audit(1490052548.287:1095): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10481" pid=10481 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [50296.812972] audit: type=1400 audit(1490052548.287:1096): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10481" pid=10481 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [50296.812983] audit: type=1400 audit(1490052548.287:1097): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10481" pid=10481 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [50296.813414] audit: type=1400 audit(1490052548.287:1098): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10481" pid=10481 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [50318.809524] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=11002 DF PROTO=TCP SPT=52028 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [50321.804946] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=6714 DF PROTO=TCP SPT=52028 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [50327.804960] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=844 DF PROTO=TCP SPT=52028 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [50379.329972] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=80.8.119.199 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=242 ID=32035 PROTO=TCP SPT=38393 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [50414.372013] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=175.200.26.175 DST=151.236.37.52 LEN=122 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=UDP SPT=56729 DPT=1900 LEN=102 [50443.125321] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=71.6.216.53 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=54321 PROTO=TCP SPT=3389 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0 [50445.955086] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=210.222.142.88 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=36347 PROTO=TCP SPT=35540 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [50468.130535] audit: type=1400 audit(1490052719.605:1099): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10484" pid=10484 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [50468.130561] audit: type=1400 audit(1490052719.605:1100): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10484" pid=10484 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [50468.130572] audit: type=1400 audit(1490052719.605:1101): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10484" pid=10484 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [50468.130775] audit: type=1400 audit(1490052719.605:1102): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=10484 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [50468.130885] audit: type=1400 audit(1490052719.605:1103): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=10484 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [50468.130937] audit: type=1400 audit(1490052719.605:1104): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=10484 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [50468.130965] audit: type=1400 audit(1490052719.605:1105): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=10484 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [50468.130998] audit: type=1400 audit(1490052719.605:1106): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=10484 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [50468.131058] audit: type=1400 audit(1490052719.605:1107): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=10484 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [50468.131089] audit: type=1400 audit(1490052719.605:1108): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=10484 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [50533.354870] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=95.65.182.102 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=24836 PROTO=TCP SPT=43790 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [50719.075879] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=183.234.103.86 DST=151.236.37.52 LEN=48 TOS=0x14 PREC=0xC0 TTL=107 ID=17610 DF PROTO=TCP SPT=4569 DPT=1433 WINDOW=65535 RES=0x00 SYN URGP=0 [50721.996704] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=183.234.103.86 DST=151.236.37.52 LEN=48 TOS=0x14 PREC=0xC0 TTL=107 ID=19737 DF PROTO=TCP SPT=4569 DPT=1433 WINDOW=65535 RES=0x00 SYN URGP=0 [50903.235850] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=112.169.208.164 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=47219 PROTO=TCP SPT=40632 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [50909.315400] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=130.193.122.52 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=31027 PROTO=TCP SPT=59663 DPT=23 WINDOW=61975 RES=0x00 SYN URGP=0 [50952.973663] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=81.248.138.180 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=52 ID=8767 PROTO=TCP SPT=35364 DPT=23 WINDOW=43415 RES=0x00 SYN URGP=0 [51101.414768] audit_printk_skb: 6 callbacks suppressed [51101.414772] audit: type=1400 audit(1490053352.886:1111): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10560" pid=10560 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [51101.414786] audit: type=1400 audit(1490053352.886:1112): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10560" pid=10560 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [51101.414800] audit: type=1400 audit(1490053352.886:1113): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10560" pid=10560 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [51101.415239] audit: type=1400 audit(1490053352.886:1114): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10560" pid=10560 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [51166.691669] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=163.172.210.65 DST=151.236.37.52 LEN=438 TOS=0x08 PREC=0x00 TTL=52 ID=55845 DF PROTO=UDP SPT=5094 DPT=5060 LEN=418 [51195.696979] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=82.41.61.234 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=64811 PROTO=TCP SPT=36331 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [51296.597583] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=163.172.206.89 DST=151.236.37.52 LEN=440 TOS=0x00 PREC=0x00 TTL=51 ID=30120 DF PROTO=UDP SPT=5063 DPT=5060 LEN=420 [51306.266553] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=212.57.180.49 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=20782 PROTO=TCP SPT=61622 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [51368.188356] audit: type=1400 audit(1490053619.663:1115): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10564" pid=10564 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [51368.188369] audit: type=1400 audit(1490053619.663:1116): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10564" pid=10564 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [51368.188380] audit: type=1400 audit(1490053619.663:1117): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10564" pid=10564 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [51368.188533] audit: type=1400 audit(1490053619.663:1118): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=10564 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [51368.188611] audit: type=1400 audit(1490053619.663:1119): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=10564 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [51368.188653] audit: type=1400 audit(1490053619.663:1120): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=10564 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [51368.188671] audit: type=1400 audit(1490053619.663:1121): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=10564 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [51368.188693] audit: type=1400 audit(1490053619.663:1122): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=10564 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [51368.188741] audit: type=1400 audit(1490053619.663:1123): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=10564 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [51368.188762] audit: type=1400 audit(1490053619.663:1124): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=10564 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [51373.821032] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=203.212.108.211 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=39 ID=11386 PROTO=TCP SPT=33145 DPT=23 WINDOW=34438 RES=0x00 SYN URGP=0 [51434.885397] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=119.206.5.221 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=13419 PROTO=TCP SPT=29239 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [51497.033475] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=216.221.197.77 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=33680 PROTO=TCP SPT=13675 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [51606.492091] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=80.82.78.188 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=13757 PROTO=TCP SPT=50354 DPT=587 WINDOW=1024 RES=0x00 SYN URGP=0 [51607.605615] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=197.50.143.26 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=22436 PROTO=TCP SPT=30662 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [51778.669381] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=121.17.142.204 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=5067 PROTO=TCP SPT=38322 DPT=23 WINDOW=34722 RES=0x00 SYN URGP=0 [51816.152815] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=190.173.239.55 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x20 TTL=51 ID=12501 PROTO=TCP SPT=44394 DPT=2222 WINDOW=52750 RES=0x00 SYN URGP=0 [51859.571916] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=213.7.220.164 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=63868 PROTO=TCP SPT=38913 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [51881.722222] audit_printk_skb: 6 callbacks suppressed [51881.722225] audit: type=1400 audit(1490054133.196:1127): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10575" pid=10575 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [51881.722237] audit: type=1400 audit(1490054133.196:1128): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10575" pid=10575 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [51881.722248] audit: type=1400 audit(1490054133.196:1129): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10575" pid=10575 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [51881.722679] audit: type=1400 audit(1490054133.196:1130): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10575" pid=10575 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [51897.794528] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.223.133.13 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=7763 PROTO=TCP SPT=44805 DPT=1389 WINDOW=1024 RES=0x00 SYN URGP=0 [52013.188286] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=171.234.8.5 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=40188 PROTO=TCP SPT=45021 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [52052.670447] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.223.133.13 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=51123 PROTO=TCP SPT=44805 DPT=2189 WINDOW=1024 RES=0x00 SYN URGP=0 [52116.506228] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=122.117.60.166 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=51254 PROTO=TCP SPT=27576 DPT=23 WINDOW=44097 RES=0x00 SYN URGP=0 [52189.474641] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=78.187.46.162 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=60187 PROTO=TCP SPT=33310 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [52201.179722] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=186.210.102.84 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=55406 PROTO=TCP SPT=55159 DPT=23 WINDOW=14727 RES=0x00 SYN URGP=0 [52258.438472] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=200.175.249.86 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x20 TTL=242 ID=45800 PROTO=TCP SPT=42775 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [52268.230004] audit: type=1400 audit(1490054519.702:1131): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10584" pid=10584 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [52268.230016] audit: type=1400 audit(1490054519.702:1132): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10584" pid=10584 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [52268.230027] audit: type=1400 audit(1490054519.702:1133): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10584" pid=10584 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [52268.230176] audit: type=1400 audit(1490054519.702:1134): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=10584 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [52268.230255] audit: type=1400 audit(1490054519.702:1135): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=10584 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [52268.230294] audit: type=1400 audit(1490054519.702:1136): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=10584 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [52268.230312] audit: type=1400 audit(1490054519.702:1137): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=10584 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [52268.230335] audit: type=1400 audit(1490054519.702:1138): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=10584 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [52268.230385] audit: type=1400 audit(1490054519.702:1139): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=10584 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [52268.230407] audit: type=1400 audit(1490054519.702:1140): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=10584 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [52365.726632] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=189.114.195.238 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x20 TTL=242 ID=3968 PROTO=TCP SPT=43090 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [52397.584053] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=122.243.172.107 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=17041 PROTO=TCP SPT=41209 DPT=23 WINDOW=43248 RES=0x00 SYN URGP=0 [52423.464415] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=168.1.128.53 DST=151.236.37.52 LEN=32 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=UDP SPT=24720 DPT=5351 LEN=12 [52498.914526] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=83.22.240.241 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=52 ID=62984 PROTO=TCP SPT=39974 DPT=23 WINDOW=1681 RES=0x00 SYN URGP=0 [52502.819565] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=191.23.117.39 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x20 TTL=241 ID=60359 PROTO=TCP SPT=42650 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [52511.245930] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=49.4.143.142 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=114 ID=256 PROTO=TCP SPT=6752 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 [52581.305921] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=123.133.65.58 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=54321 PROTO=TCP SPT=50384 DPT=993 WINDOW=65535 RES=0x00 SYN URGP=0 [52641.888951] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=187.66.182.113 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=56962 PROTO=TCP SPT=9101 DPT=23 WINDOW=5565 RES=0x00 SYN URGP=0 [52662.064608] audit_printk_skb: 6 callbacks suppressed [52662.064611] audit: type=1400 audit(1490054913.534:1143): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10593" pid=10593 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [52662.064623] audit: type=1400 audit(1490054913.534:1144): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10593" pid=10593 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [52662.064635] audit: type=1400 audit(1490054913.534:1145): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10593" pid=10593 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [52662.065073] audit: type=1400 audit(1490054913.534:1146): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10593" pid=10593 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [52695.125153] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=218.161.88.239 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=19231 PROTO=TCP SPT=34423 DPT=23 WINDOW=63495 RES=0x00 SYN URGP=0 [52709.530016] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=216.218.206.106 DST=151.236.37.52 LEN=92 TOS=0x00 PREC=0x00 TTL=55 ID=21045 DF PROTO=UDP SPT=56998 DPT=500 LEN=72 [52729.302745] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=179.178.68.167 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x20 TTL=50 ID=47231 PROTO=TCP SPT=24438 DPT=23 WINDOW=22737 RES=0x00 SYN URGP=0 [52831.707949] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.230.47.41 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=48441 PROTO=TCP SPT=59921 DPT=3339 WINDOW=1024 RES=0x00 SYN URGP=0 [52837.344397] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=185.159.36.69 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x00 TTL=243 ID=20240 PROTO=TCP SPT=61234 DPT=8500 WINDOW=1024 RES=0x00 SYN URGP=0 [52909.202346] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=116.103.176.129 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=49 ID=14603 PROTO=TCP SPT=52352 DPT=23 WINDOW=59552 RES=0x00 SYN URGP=0 [53115.186750] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=222.186.58.181 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=104 ID=256 PROTO=TCP SPT=6000 DPT=1433 WINDOW=16384 RES=0x00 SYN URGP=0 [53121.867411] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=95.239.214.97 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=7435 PROTO=TCP SPT=37626 DPT=23 WINDOW=47831 RES=0x00 SYN URGP=0 [53155.376829] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=27.152.200.65 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=28868 PROTO=TCP SPT=20922 DPT=23 WINDOW=48323 RES=0x00 SYN URGP=0 [53168.258021] audit: type=1400 audit(1490055419.730:1147): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10672" pid=10672 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [53168.258034] audit: type=1400 audit(1490055419.730:1148): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10672" pid=10672 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [53168.258046] audit: type=1400 audit(1490055419.730:1149): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10672" pid=10672 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [53168.258201] audit: type=1400 audit(1490055419.730:1150): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=10672 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [53168.258281] audit: type=1400 audit(1490055419.730:1151): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=10672 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [53168.258323] audit: type=1400 audit(1490055419.730:1152): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=10672 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [53168.258342] audit: type=1400 audit(1490055419.730:1153): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=10672 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [53168.258364] audit: type=1400 audit(1490055419.730:1154): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=10672 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [53168.258416] audit: type=1400 audit(1490055419.730:1155): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=10672 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [53168.258437] audit: type=1400 audit(1490055419.730:1156): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=10672 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [53226.206157] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=92.30.212.104 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=39881 PROTO=TCP SPT=10516 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [53229.031590] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=37.61.217.162 DST=151.236.37.52 LEN=438 TOS=0x00 PREC=0x00 TTL=53 ID=0 DF PROTO=UDP SPT=6966 DPT=5060 LEN=418 [53240.668949] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=185.35.62.90 DST=151.236.37.52 LEN=63 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=60707 DPT=47808 LEN=43 [53257.262888] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=182.39.224.224 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=28126 PROTO=TCP SPT=25842 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [53257.419929] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=39895 DF PROTO=TCP SPT=40196 DPT=60001 WINDOW=29200 RES=0x00 SYN URGP=0 [53258.421104] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=39896 DF PROTO=TCP SPT=40196 DPT=60001 WINDOW=29200 RES=0x00 SYN URGP=0 [53260.427952] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=39897 DF PROTO=TCP SPT=40196 DPT=60001 WINDOW=29200 RES=0x00 SYN URGP=0 [53264.435931] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=39898 DF PROTO=TCP SPT=40196 DPT=60001 WINDOW=29200 RES=0x00 SYN URGP=0 [53326.701213] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=93.124.253.24 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=20121 PROTO=TCP SPT=14423 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [53442.528169] audit_printk_skb: 6 callbacks suppressed [53442.528172] audit: type=1400 audit(1490055693.999:1159): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10683" pid=10683 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [53442.528183] audit: type=1400 audit(1490055693.999:1160): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10683" pid=10683 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [53442.528194] audit: type=1400 audit(1490055693.999:1161): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10683" pid=10683 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [53442.528629] audit: type=1400 audit(1490055693.999:1162): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10683" pid=10683 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [53445.332373] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=116.100.13.212 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=236 ID=22669 PROTO=TCP SPT=16647 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [53530.423574] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=46.217.169.212 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=53662 PROTO=TCP SPT=54192 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [53552.354788] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=92.112.121.191 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=56 ID=47659 PROTO=TCP SPT=51812 DPT=23 WINDOW=1173 RES=0x00 SYN URGP=0 [53565.007696] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=83.209.184.237 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=29102 PROTO=TCP SPT=12833 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [53580.955841] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=184.105.247.250 DST=151.236.37.52 LEN=51 TOS=0x00 PREC=0x00 TTL=55 ID=57693 DF PROTO=UDP SPT=41630 DPT=623 LEN=31 [53581.875102] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=83.172.98.147 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x20 TTL=51 ID=7170 PROTO=TCP SPT=65425 DPT=23 WINDOW=55228 RES=0x00 SYN URGP=0 [53626.002130] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=119.74.169.160 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=6408 PROTO=TCP SPT=26246 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [53644.339897] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=71.6.146.186 DST=151.236.37.52 LEN=40 TOS=0x10 PREC=0x00 TTL=115 ID=7886 PROTO=TCP SPT=10864 DPT=53 WINDOW=55453 RES=0x00 SYN URGP=0 [53701.638446] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=81.230.122.191 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=58530 PROTO=TCP SPT=37929 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [53719.711313] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=201.212.250.16 DST=151.236.37.52 LEN=40 TOS=0x02 PREC=0x00 TTL=238 ID=29381 PROTO=TCP SPT=25608 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [53748.801322] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=64857 DF PROTO=TCP SPT=64216 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [53751.802601] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=49703 DF PROTO=TCP SPT=64216 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [53757.807641] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=42254 DF PROTO=TCP SPT=64216 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [53925.332808] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=61.219.249.189 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=47846 PROTO=TCP SPT=53824 DPT=23 WINDOW=49232 RES=0x00 SYN URGP=0 [53936.028424] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=110.77.241.159 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=12668 PROTO=TCP SPT=8891 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [53953.226958] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=163.172.210.65 DST=151.236.37.52 LEN=438 TOS=0x08 PREC=0x00 TTL=52 ID=23646 DF PROTO=UDP SPT=5085 DPT=5060 LEN=418 [53990.998757] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=117.0.54.210 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=7089 PROTO=TCP SPT=52635 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [54068.269718] audit: type=1400 audit(1490056319.738:1163): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10820" pid=10820 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [54068.269731] audit: type=1400 audit(1490056319.738:1164): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10820" pid=10820 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [54068.269742] audit: type=1400 audit(1490056319.738:1165): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10820" pid=10820 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [54068.269893] audit: type=1400 audit(1490056319.738:1166): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=10820 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [54068.269974] audit: type=1400 audit(1490056319.738:1167): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=10820 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [54068.270014] audit: type=1400 audit(1490056319.738:1168): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=10820 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [54068.270033] audit: type=1400 audit(1490056319.738:1169): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=10820 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [54068.270056] audit: type=1400 audit(1490056319.738:1170): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=10820 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [54068.270105] audit: type=1400 audit(1490056319.738:1171): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=10820 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [54068.270127] audit: type=1400 audit(1490056319.738:1172): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=10820 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [54110.893860] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=136.24.77.24 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=46320 PROTO=TCP SPT=20578 DPT=2323 WINDOW=32074 RES=0x00 SYN URGP=0 [54156.672863] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=184.105.139.70 DST=151.236.37.52 LEN=42 TOS=0x00 PREC=0x00 TTL=55 ID=28040 DF PROTO=UDP SPT=24959 DPT=69 LEN=22 [54166.424512] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.116.117.154 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=21982 PROTO=TCP SPT=49208 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [54222.873042] audit_printk_skb: 6 callbacks suppressed [54222.873046] audit: type=1400 audit(1490056474.339:1175): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10858" pid=10858 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [54222.873058] audit: type=1400 audit(1490056474.339:1176): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10858" pid=10858 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [54222.873069] audit: type=1400 audit(1490056474.339:1177): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10858" pid=10858 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [54222.873494] audit: type=1400 audit(1490056474.339:1178): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10858" pid=10858 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [54307.613365] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=171.234.137.211 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=16518 PROTO=TCP SPT=39532 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [54376.334056] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=179.219.140.56 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=36656 PROTO=TCP SPT=2145 DPT=23 WINDOW=5254 RES=0x00 SYN URGP=0 [54389.506334] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.197.234.22 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=19723 PROTO=TCP SPT=56365 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 [54398.899805] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=89.248.172.16 DST=151.236.37.52 LEN=810 TOS=0x00 PREC=0x00 TTL=121 ID=49880 PROTO=UDP SPT=53730 DPT=3702 LEN=790 [54461.044069] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=171.228.79.38 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=43 ID=57895 PROTO=TCP SPT=31745 DPT=2323 WINDOW=35305 RES=0x00 SYN URGP=0 [54473.974228] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=114.243.160.79 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=57975 PROTO=TCP SPT=45057 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [54717.082087] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=59.102.40.218 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=46 ID=17010 PROTO=TCP SPT=31847 DPT=23 WINDOW=20815 RES=0x00 SYN URGP=0 [54720.137021] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=79.79.147.116 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=56 ID=9694 PROTO=TCP SPT=20103 DPT=23 WINDOW=18319 RES=0x00 SYN URGP=0 [54741.809492] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=171.246.196.10 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=235 ID=54422 PROTO=TCP SPT=76 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [54968.369530] audit: type=1400 audit(1490057219.839:1179): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10944" pid=10944 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [54968.369543] audit: type=1400 audit(1490057219.839:1180): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10944" pid=10944 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [54968.369555] audit: type=1400 audit(1490057219.839:1181): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10944" pid=10944 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [54968.369709] audit: type=1400 audit(1490057219.839:1182): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=10944 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [54968.369794] audit: type=1400 audit(1490057219.839:1183): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=10944 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [54968.369840] audit: type=1400 audit(1490057219.839:1184): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=10944 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [54968.369860] audit: type=1400 audit(1490057219.839:1185): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=10944 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [54968.369883] audit: type=1400 audit(1490057219.839:1186): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=10944 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [54968.369935] audit: type=1400 audit(1490057219.839:1187): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=10944 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [54968.369962] audit: type=1400 audit(1490057219.839:1188): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=10944 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [54977.753111] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=147.75.100.183 DST=151.236.37.52 LEN=29 TOS=0x00 PREC=0x00 TTL=53 ID=2256 DF PROTO=UDP SPT=44741 DPT=19 LEN=9 [54988.136274] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=177.183.35.12 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=30929 PROTO=TCP SPT=3140 DPT=23 WINDOW=14964 RES=0x00 SYN URGP=0 [55003.376158] audit_printk_skb: 6 callbacks suppressed [55003.376161] audit: type=1400 audit(1490057254.842:1191): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10946" pid=10946 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [55003.376172] audit: type=1400 audit(1490057254.842:1192): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10946" pid=10946 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [55003.376183] audit: type=1400 audit(1490057254.842:1193): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10946" pid=10946 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [55003.376606] audit: type=1400 audit(1490057254.842:1194): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10946" pid=10946 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [55050.362346] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=59.127.194.205 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=19803 PROTO=TCP SPT=62651 DPT=23 WINDOW=59051 RES=0x00 SYN URGP=0 [55062.428436] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=94.55.163.1 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=19040 PROTO=TCP SPT=59829 DPT=23 WINDOW=64421 RES=0x00 SYN URGP=0 [55065.648442] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=211.137.82.38 DST=151.236.37.52 LEN=404 TOS=0x14 PREC=0x00 TTL=109 ID=52684 PROTO=UDP SPT=1317 DPT=1434 LEN=384 [55082.513937] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=49.4.143.192 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=113 ID=256 PROTO=TCP SPT=27696 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 [55097.350853] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.143.44.202 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=50864 PROTO=TCP SPT=42438 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [55158.245279] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=188.241.21.111 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x20 TTL=55 ID=4333 PROTO=TCP SPT=4208 DPT=23 WINDOW=28160 RES=0x00 SYN URGP=0 [55172.244949] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=201.190.166.213 DST=151.236.37.52 LEN=29 TOS=0x00 PREC=0x20 TTL=50 ID=35301 DF PROTO=UDP SPT=54474 DPT=53413 LEN=9 [55174.637146] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=201.190.166.213 DST=151.236.37.52 LEN=29 TOS=0x00 PREC=0x20 TTL=50 ID=35302 DF PROTO=UDP SPT=54474 DPT=53413 LEN=9 [55179.043325] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=201.190.166.213 DST=151.236.37.52 LEN=29 TOS=0x00 PREC=0x20 TTL=50 ID=35303 DF PROTO=UDP SPT=54474 DPT=53413 LEN=9 [55269.094780] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.40.229.207 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=24417 PROTO=TCP SPT=28299 DPT=23 WINDOW=33882 RES=0x00 SYN URGP=0 [55297.038813] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=95.128.185.118 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=46891 PROTO=TCP SPT=52304 DPT=23 WINDOW=27396 RES=0x00 SYN URGP=0 [55310.250903] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=139.162.58.106 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=54321 PROTO=TCP SPT=41250 DPT=6379 WINDOW=65535 RES=0x00 SYN URGP=0 [55472.156147] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=190.140.15.43 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=7914 PROTO=TCP SPT=27987 DPT=23 WINDOW=30283 RES=0x00 SYN URGP=0 [55487.960058] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=187.177.21.194 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=243 ID=40405 PROTO=TCP SPT=56334 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [55495.170723] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=152.204.22.234 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x20 TTL=51 ID=59640 PROTO=TCP SPT=34130 DPT=2222 WINDOW=1870 RES=0x00 SYN URGP=0 [55503.994368] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=59.1.108.205 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=58521 PROTO=TCP SPT=40798 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [55537.370916] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.230.121.168 DST=151.236.37.52 LEN=36 TOS=0x00 PREC=0x00 TTL=55 ID=0 DF PROTO=UDP SPT=45203 DPT=123 LEN=16 [55544.752241] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=54.202.127.24 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x00 TTL=232 ID=40512 PROTO=TCP SPT=57193 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 [55599.362996] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.197.235.10 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=7037 PROTO=TCP SPT=55936 DPT=3393 WINDOW=1024 RES=0x00 SYN URGP=0 [55771.746732] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=27.156.108.148 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=40634 PROTO=TCP SPT=60871 DPT=23 WINDOW=34991 RES=0x00 SYN URGP=0 [55795.877454] audit: type=1400 audit(1490058047.344:1195): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10953" pid=10953 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [55795.877468] audit: type=1400 audit(1490058047.344:1196): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10953" pid=10953 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [55795.877479] audit: type=1400 audit(1490058047.344:1197): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10953" pid=10953 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [55795.877906] audit: type=1400 audit(1490058047.344:1198): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10953" pid=10953 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [55832.551421] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=122.150.76.44 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x40 TTL=241 ID=35001 PROTO=TCP SPT=25489 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [55868.391362] audit: type=1400 audit(1490058119.860:1199): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10956" pid=10956 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [55868.391375] audit: type=1400 audit(1490058119.860:1200): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10956" pid=10956 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [55868.391385] audit: type=1400 audit(1490058119.860:1201): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/10956" pid=10956 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [55868.391533] audit: type=1400 audit(1490058119.860:1202): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=10956 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [55868.391613] audit: type=1400 audit(1490058119.860:1203): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=10956 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [55868.391653] audit: type=1400 audit(1490058119.860:1204): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=10956 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [55868.391671] audit: type=1400 audit(1490058119.860:1205): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=10956 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [55868.391694] audit: type=1400 audit(1490058119.860:1206): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=10956 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [55868.391742] audit: type=1400 audit(1490058119.860:1207): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=10956 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [55868.391763] audit: type=1400 audit(1490058119.860:1208): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=10956 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [55962.523575] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=122.117.54.213 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=51685 PROTO=TCP SPT=61586 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [56013.498241] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=189.122.62.22 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=50054 PROTO=TCP SPT=59087 DPT=23 WINDOW=39103 RES=0x00 SYN URGP=0 [56030.549296] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=122.116.250.112 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=47002 PROTO=TCP SPT=31365 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [56103.485856] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.211.0.11 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=39303 PROTO=TCP SPT=51895 DPT=3391 WINDOW=1024 RES=0x00 SYN URGP=0 [56107.538584] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=118.209.68.37 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=16298 PROTO=TCP SPT=1734 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [56107.651771] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=49.64.166.176 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=35067 PROTO=TCP SPT=23102 DPT=23 WINDOW=59281 RES=0x00 SYN URGP=0 [56107.869189] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=123.2.45.222 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x40 TTL=240 ID=16605 PROTO=TCP SPT=59049 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [56153.564055] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.197.235.10 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=52752 PROTO=TCP SPT=55936 DPT=3392 WINDOW=1024 RES=0x00 SYN URGP=0 [56311.006203] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=49.4.142.179 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=114 ID=256 PROTO=TCP SPT=14499 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 [56325.872891] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=163.172.125.69 DST=151.236.37.52 LEN=444 TOS=0x00 PREC=0x00 TTL=53 ID=8883 DF PROTO=UDP SPT=6369 DPT=5060 LEN=424 [56330.143765] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.230.47.41 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=59190 PROTO=TCP SPT=59921 DPT=4393 WINDOW=1024 RES=0x00 SYN URGP=0 [56588.433420] audit_printk_skb: 6 callbacks suppressed [56588.433424] audit: type=1400 audit(1490058839.903:1211): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11037" pid=11037 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [56588.433436] audit: type=1400 audit(1490058839.903:1212): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11037" pid=11037 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [56588.433447] audit: type=1400 audit(1490058839.903:1213): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11037" pid=11037 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [56588.433874] audit: type=1400 audit(1490058839.903:1214): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11037" pid=11037 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [56588.988244] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=81.192.139.25 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=27088 PROTO=TCP SPT=5449 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [56593.660082] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=171.235.159.68 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=44 ID=5457 PROTO=TCP SPT=19608 DPT=23 WINDOW=24200 RES=0x00 SYN URGP=0 [56705.000903] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=14.166.63.35 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=51 ID=40023 PROTO=TCP SPT=43967 DPT=23 WINDOW=34455 RES=0x00 SYN URGP=0 [56729.709342] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=163.172.210.65 DST=151.236.37.52 LEN=438 TOS=0x08 PREC=0x00 TTL=52 ID=45037 DF PROTO=UDP SPT=5095 DPT=5060 LEN=418 [56768.484470] audit: type=1400 audit(1490059019.952:1215): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11040" pid=11040 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [56768.484482] audit: type=1400 audit(1490059019.952:1216): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11040" pid=11040 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [56768.484493] audit: type=1400 audit(1490059019.952:1217): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11040" pid=11040 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [56768.484639] audit: type=1400 audit(1490059019.952:1218): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=11040 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [56768.484719] audit: type=1400 audit(1490059019.952:1219): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=11040 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [56768.484762] audit: type=1400 audit(1490059019.952:1220): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=11040 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [56768.484779] audit: type=1400 audit(1490059019.952:1221): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=11040 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [56768.484802] audit: type=1400 audit(1490059019.952:1222): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=11040 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [56768.484853] audit: type=1400 audit(1490059019.952:1223): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=11040 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [56768.484874] audit: type=1400 audit(1490059019.952:1224): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=11040 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [56848.072605] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=218.215.80.148 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=64300 PROTO=TCP SPT=53883 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [56921.671888] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=116.72.17.232 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=5023 PROTO=TCP SPT=36829 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [57017.422876] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=180.97.215.112 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=105 ID=256 PROTO=TCP SPT=6000 DPT=1434 WINDOW=16384 RES=0x00 SYN URGP=0 [57029.320626] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=221.226.226.142 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=25272 PROTO=TCP SPT=54615 DPT=23 WINDOW=60015 RES=0x00 SYN URGP=0 [57050.228060] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=71.6.135.131 DST=151.236.37.52 LEN=40 TOS=0x10 PREC=0x00 TTL=109 ID=54966 PROTO=TCP SPT=49717 DPT=55554 WINDOW=43285 RES=0x00 SYN URGP=0 [57092.748006] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=89.248.167.131 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=121 ID=38240 PROTO=TCP SPT=6861 DPT=110 WINDOW=29296 RES=0x00 SYN URGP=0 [57191.533566] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.136.149.230 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=35141 PROTO=TCP SPT=65347 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [57192.834044] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=5010 DF PROTO=TCP SPT=47586 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [57195.829994] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=15971 DF PROTO=TCP SPT=47586 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [57201.830347] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=39886 DF PROTO=TCP SPT=47586 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [57229.247568] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=190.147.64.224 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=62371 PROTO=TCP SPT=2133 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [57239.071761] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=181.121.5.21 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x20 TTL=241 ID=47907 PROTO=TCP SPT=12697 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [57245.841171] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=108.213.26.154 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=56111 PROTO=TCP SPT=27322 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [57302.570897] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=54106 DF PROTO=TCP SPT=58178 DPT=81 WINDOW=29200 RES=0x00 SYN URGP=0 [57303.574178] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=54107 DF PROTO=TCP SPT=58178 DPT=81 WINDOW=29200 RES=0x00 SYN URGP=0 [57305.577095] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=54108 DF PROTO=TCP SPT=58178 DPT=81 WINDOW=29200 RES=0x00 SYN URGP=0 [57309.582778] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=54109 DF PROTO=TCP SPT=58178 DPT=81 WINDOW=29200 RES=0x00 SYN URGP=0 [57343.931694] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.211.0.11 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=45786 PROTO=TCP SPT=51927 DPT=3398 WINDOW=1024 RES=0x00 SYN URGP=0 [57345.824030] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=88.83.53.186 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=26182 PROTO=TCP SPT=40664 DPT=23 WINDOW=42328 RES=0x00 SYN URGP=0 [57369.052983] audit_printk_skb: 6 callbacks suppressed [57369.052986] audit: type=1400 audit(1490059620.519:1227): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11169" pid=11169 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [57369.052998] audit: type=1400 audit(1490059620.519:1228): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11169" pid=11169 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [57369.053008] audit: type=1400 audit(1490059620.519:1229): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11169" pid=11169 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [57369.053442] audit: type=1400 audit(1490059620.519:1230): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11169" pid=11169 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [57400.155623] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=182.18.72.81 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=113 ID=256 PROTO=TCP SPT=37833 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 [57438.233795] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.230.47.41 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=21638 PROTO=TCP SPT=59921 DPT=3350 WINDOW=1024 RES=0x00 SYN URGP=0 [57466.703797] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=211.40.43.253 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=31482 PROTO=TCP SPT=49387 DPT=23 WINDOW=60867 RES=0x00 SYN URGP=0 [57478.657747] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=185.158.113.66 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=43876 DPT=7547 WINDOW=65535 RES=0x00 SYN URGP=0 [57532.110903] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=117.1.230.175 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=45 ID=51315 PROTO=TCP SPT=9015 DPT=23 WINDOW=7183 RES=0x00 SYN URGP=0 [57580.890925] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=14.148.207.170 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=65172 PROTO=TCP SPT=14342 DPT=23 WINDOW=21158 RES=0x00 SYN URGP=0 [57589.619292] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=74.82.47.26 DST=151.236.37.52 LEN=70 TOS=0x00 PREC=0x00 TTL=55 ID=50037 DF PROTO=UDP SPT=7735 DPT=53 LEN=50 [57605.049258] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=62.219.73.80 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=56 ID=59728 PROTO=TCP SPT=31421 DPT=23 WINDOW=19597 RES=0x00 SYN URGP=0 [57668.578254] audit: type=1400 audit(1490059920.043:1231): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11173" pid=11173 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [57668.578267] audit: type=1400 audit(1490059920.043:1232): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11173" pid=11173 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [57668.578278] audit: type=1400 audit(1490059920.043:1233): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11173" pid=11173 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [57668.578429] audit: type=1400 audit(1490059920.043:1234): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=11173 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [57668.578520] audit: type=1400 audit(1490059920.043:1235): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=11173 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [57668.578562] audit: type=1400 audit(1490059920.043:1236): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=11173 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [57668.578580] audit: type=1400 audit(1490059920.043:1237): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=11173 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [57668.578602] audit: type=1400 audit(1490059920.043:1238): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=11173 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [57668.578652] audit: type=1400 audit(1490059920.043:1239): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=11173 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [57668.578673] audit: type=1400 audit(1490059920.043:1240): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=11173 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [57682.907665] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=220.134.86.127 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=32089 PROTO=TCP SPT=50802 DPT=23 WINDOW=56682 RES=0x00 SYN URGP=0 [57704.201522] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=187.75.194.141 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x20 TTL=50 ID=33117 PROTO=TCP SPT=29003 DPT=23 WINDOW=27219 RES=0x00 SYN URGP=0 [57749.709707] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=41.102.66.46 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=25160 PROTO=TCP SPT=37099 DPT=23 WINDOW=35056 RES=0x00 SYN URGP=0 [57754.438836] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=80.82.70.26 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=44741 PROTO=TCP SPT=50801 DPT=23 WINDOW=1024 RES=0x00 SYN URGP=0 [57787.819162] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.230.47.39 DST=151.236.37.52 LEN=48 TOS=0x00 PREC=0x00 TTL=121 ID=44377 PROTO=TCP SPT=59954 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0 [57816.144867] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.230.47.41 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=7486 PROTO=TCP SPT=59921 DPT=3352 WINDOW=1024 RES=0x00 SYN URGP=0 [57826.908425] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=186.57.32.253 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x20 TTL=53 ID=47566 PROTO=TCP SPT=12618 DPT=2323 WINDOW=6503 RES=0x00 SYN URGP=0 [57893.147588] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=184.105.139.84 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=55 ID=3874 DF PROTO=UDP SPT=42193 DPT=123 LEN=20 [57921.057638] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.197.235.10 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=31263 PROTO=TCP SPT=55936 DPT=3390 WINDOW=1024 RES=0x00 SYN URGP=0 [58149.531816] audit_printk_skb: 6 callbacks suppressed [58149.531819] audit: type=1400 audit(1490060400.997:1243): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11257" pid=11257 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [58149.531831] audit: type=1400 audit(1490060400.997:1244): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11257" pid=11257 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [58149.531842] audit: type=1400 audit(1490060400.997:1245): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11257" pid=11257 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [58149.532309] audit: type=1400 audit(1490060401.001:1246): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11257" pid=11257 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [58152.295200] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=14.176.115.58 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=58194 PROTO=TCP SPT=24849 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [58152.800136] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=222.186.58.12 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=104 ID=256 PROTO=TCP SPT=6000 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 [58168.549885] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=190.172.82.190 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x20 TTL=51 ID=22317 PROTO=TCP SPT=20439 DPT=23 WINDOW=28659 RES=0x00 SYN URGP=0 [58263.366699] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=77.120.172.179 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=23191 PROTO=TCP SPT=3257 DPT=23 WINDOW=10393 RES=0x00 SYN URGP=0 [58299.459575] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=118.163.41.12 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=57466 PROTO=TCP SPT=6376 DPT=23 WINDOW=33120 RES=0x00 SYN URGP=0 [58348.264791] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=74.82.47.40 DST=151.236.37.52 LEN=48 TOS=0x00 PREC=0x00 TTL=55 ID=25978 DF PROTO=UDP SPT=56121 DPT=523 LEN=28 [58499.548606] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=168.1.128.54 DST=151.236.37.52 LEN=74 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=UDP SPT=44168 DPT=5353 LEN=54 [58502.380435] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=171.235.111.111 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=44 ID=26039 PROTO=TCP SPT=52215 DPT=23 WINDOW=15903 RES=0x00 SYN URGP=0 [58558.479489] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=211.229.61.81 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=63663 PROTO=TCP SPT=45306 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [58568.628676] audit: type=1400 audit(1490060820.095:1247): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11266" pid=11266 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [58568.628695] audit: type=1400 audit(1490060820.095:1248): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11266" pid=11266 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [58568.628711] audit: type=1400 audit(1490060820.095:1249): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11266" pid=11266 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [58568.628928] audit: type=1400 audit(1490060820.095:1250): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=11266 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [58568.629059] audit: type=1400 audit(1490060820.095:1251): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=11266 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [58568.629131] audit: type=1400 audit(1490060820.095:1252): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=11266 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [58568.629163] audit: type=1400 audit(1490060820.095:1253): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=11266 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [58568.629199] audit: type=1400 audit(1490060820.095:1254): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=11266 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [58568.629276] audit: type=1400 audit(1490060820.095:1255): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=11266 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [58568.629310] audit: type=1400 audit(1490060820.095:1256): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=11266 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [58597.817440] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=191.35.11.246 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x20 TTL=50 ID=30737 PROTO=TCP SPT=25195 DPT=23 WINDOW=21595 RES=0x00 SYN URGP=0 [58638.414033] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=27.2.49.156 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x20 TTL=52 ID=63970 PROTO=TCP SPT=23564 DPT=23 WINDOW=14692 RES=0x00 SYN URGP=0 [58642.935299] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=196.202.83.28 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=242 ID=21115 PROTO=TCP SPT=57983 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [58674.034692] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.122.13.36 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=10741 PROTO=TCP SPT=63100 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [58744.966632] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.197.235.10 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=3661 PROTO=TCP SPT=55936 DPT=3391 WINDOW=1024 RES=0x00 SYN URGP=0 [58846.521616] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=200.127.250.9 DST=151.236.37.52 LEN=40 TOS=0x02 PREC=0x00 TTL=39 ID=54529 PROTO=TCP SPT=2543 DPT=23 WINDOW=36974 RES=0x00 SYN URGP=0 [58925.522357] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=203.222.30.20 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=31755 PROTO=TCP SPT=56571 DPT=23 WINDOW=51171 RES=0x00 SYN URGP=0 [58954.079454] audit_printk_skb: 6 callbacks suppressed [58954.079457] audit: type=1400 audit(1490061205.543:1259): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11269" pid=11269 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [58954.079468] audit: type=1400 audit(1490061205.543:1260): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11269" pid=11269 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [58954.079480] audit: type=1400 audit(1490061205.543:1261): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11269" pid=11269 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [58954.079908] audit: type=1400 audit(1490061205.543:1262): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11269" pid=11269 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [58960.604009] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=108.61.122.216 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=54321 PROTO=TCP SPT=40587 DPT=10003 WINDOW=65535 RES=0x00 SYN URGP=0 [58969.643976] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=123.21.159.245 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=42774 PROTO=TCP SPT=40287 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [58977.120297] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=49.159.92.88 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=46 ID=44052 PROTO=TCP SPT=54978 DPT=23 WINDOW=50386 RES=0x00 SYN URGP=0 [59051.831314] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=27.75.25.19 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=234 ID=31018 PROTO=TCP SPT=36047 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [59072.633434] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=168.196.207.16 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=41263 PROTO=TCP SPT=24781 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [59123.495156] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=113.61.136.167 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=35580 PROTO=TCP SPT=9247 DPT=23 WINDOW=23151 RES=0x00 SYN URGP=0 [59158.330957] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=49.4.142.41 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=114 ID=256 PROTO=TCP SPT=30962 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 [59169.288746] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=23.117.59.33 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=22173 PROTO=TCP SPT=61548 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [59243.176663] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=193.138.219.45 DST=151.236.37.52 LEN=118 TOS=0x00 PREC=0x00 TTL=246 ID=7726 PROTO=UDP SPT=56885 DPT=1194 LEN=98 [59325.516296] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=55668 DF PROTO=TCP SPT=36260 DPT=82 WINDOW=29200 RES=0x00 SYN URGP=0 [59326.517988] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=55669 DF PROTO=TCP SPT=36260 DPT=82 WINDOW=29200 RES=0x00 SYN URGP=0 [59328.522153] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=55670 DF PROTO=TCP SPT=36260 DPT=82 WINDOW=29200 RES=0x00 SYN URGP=0 [59332.530355] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=55671 DF PROTO=TCP SPT=36260 DPT=82 WINDOW=29200 RES=0x00 SYN URGP=0 [59353.337284] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=123.164.227.204 DST=151.236.37.52 LEN=48 TOS=0x00 PREC=0x00 TTL=115 ID=62638 PROTO=TCP SPT=51433 DPT=8888 WINDOW=65535 RES=0x00 SYN URGP=0 [59411.929048] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=177.34.104.19 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=61692 PROTO=TCP SPT=51825 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [59468.719600] audit: type=1400 audit(1490061720.187:1263): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11278" pid=11278 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [59468.719613] audit: type=1400 audit(1490061720.187:1264): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11278" pid=11278 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [59468.719625] audit: type=1400 audit(1490061720.187:1265): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11278" pid=11278 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [59468.719778] audit: type=1400 audit(1490061720.187:1266): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=11278 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [59468.719857] audit: type=1400 audit(1490061720.187:1267): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=11278 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [59468.719900] audit: type=1400 audit(1490061720.187:1268): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=11278 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [59468.719918] audit: type=1400 audit(1490061720.187:1269): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=11278 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [59468.719940] audit: type=1400 audit(1490061720.187:1270): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=11278 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [59468.719989] audit: type=1400 audit(1490061720.187:1271): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=11278 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [59468.720064] audit: type=1400 audit(1490061720.187:1272): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=11278 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [59475.957361] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=209.126.136.2 DST=151.236.37.52 LEN=71 TOS=0x00 PREC=0x00 TTL=242 ID=54321 PROTO=UDP SPT=34576 DPT=161 LEN=51 [59511.904063] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=163.172.210.65 DST=151.236.37.52 LEN=438 TOS=0x08 PREC=0x00 TTL=52 ID=1346 DF PROTO=UDP SPT=5088 DPT=5060 LEN=418 [59573.010388] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=93.122.207.78 DST=151.236.37.52 LEN=40 TOS=0x10 PREC=0x00 TTL=52 ID=25504 PROTO=TCP SPT=43683 DPT=23 WINDOW=17491 RES=0x00 SYN URGP=0 [59580.187092] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=179.181.85.97 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x20 TTL=50 ID=54734 PROTO=TCP SPT=52257 DPT=23 WINDOW=56881 RES=0x00 SYN URGP=0 [59645.517835] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=185.35.62.36 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=60630 DPT=502 WINDOW=65535 RES=0x00 SYN URGP=0 [59658.739289] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=183.245.86.50 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0xE0 TTL=43 ID=43257 PROTO=TCP SPT=28287 DPT=23 WINDOW=32911 RES=0x00 SYN URGP=0 [59758.812957] audit_printk_skb: 6 callbacks suppressed [59758.812959] audit: type=1400 audit(1490062010.280:1275): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11287" pid=11287 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [59758.812971] audit: type=1400 audit(1490062010.280:1276): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11287" pid=11287 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [59758.812982] audit: type=1400 audit(1490062010.280:1277): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11287" pid=11287 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [59758.813408] audit: type=1400 audit(1490062010.280:1278): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11287" pid=11287 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [59768.749136] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=220.130.213.9 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=47 ID=8083 PROTO=TCP SPT=12947 DPT=23 WINDOW=59258 RES=0x00 SYN URGP=0 [59837.146334] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.197.235.10 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=38839 PROTO=TCP SPT=55936 DPT=3399 WINDOW=1024 RES=0x00 SYN URGP=0 [59895.508563] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=116.251.21.207 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=10203 PROTO=TCP SPT=39656 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [60213.631916] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=80.82.77.139 DST=151.236.37.52 LEN=257 TOS=0x00 PREC=0x00 TTL=120 ID=17902 PROTO=UDP SPT=26810 DPT=5060 LEN=237 [60309.384882] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=42.118.118.187 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=17098 PROTO=TCP SPT=14456 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [60333.009274] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=201.201.168.250 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=235 ID=34242 PROTO=TCP SPT=61546 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [60345.204437] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=181.72.71.48 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=55983 PROTO=TCP SPT=22936 DPT=23 WINDOW=28584 RES=0x00 SYN URGP=0 [60368.813013] audit: type=1400 audit(1490062620.275:1279): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11365" pid=11365 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [60368.813026] audit: type=1400 audit(1490062620.275:1280): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11365" pid=11365 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [60368.813037] audit: type=1400 audit(1490062620.275:1281): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11365" pid=11365 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [60368.813186] audit: type=1400 audit(1490062620.275:1282): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=11365 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [60368.813265] audit: type=1400 audit(1490062620.275:1283): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=11365 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [60368.813306] audit: type=1400 audit(1490062620.275:1284): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=11365 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [60368.813324] audit: type=1400 audit(1490062620.275:1285): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=11365 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [60368.813347] audit: type=1400 audit(1490062620.275:1286): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=11365 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [60368.813398] audit: type=1400 audit(1490062620.275:1287): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=11365 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [60368.813419] audit: type=1400 audit(1490062620.275:1288): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=11365 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [60473.830265] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=78.189.137.70 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=49256 PROTO=TCP SPT=22916 DPT=23 WINDOW=18838 RES=0x00 SYN URGP=0 [60539.203229] audit_printk_skb: 6 callbacks suppressed [60539.203232] audit: type=1400 audit(1490062790.667:1291): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11377" pid=11377 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [60539.203244] audit: type=1400 audit(1490062790.667:1292): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11377" pid=11377 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [60539.203255] audit: type=1400 audit(1490062790.667:1293): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11377" pid=11377 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [60539.203679] audit: type=1400 audit(1490062790.667:1294): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11377" pid=11377 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [60577.662479] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=184.105.139.71 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=35489 DPT=7547 WINDOW=65535 RES=0x00 SYN URGP=0 [60610.520334] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=14.169.209.32 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=7800 PROTO=TCP SPT=22503 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [60631.000495] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=54138 DF PROTO=TCP SPT=46251 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [60634.001231] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=49573 DF PROTO=TCP SPT=46251 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [60637.351562] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=203.222.30.20 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=31755 PROTO=TCP SPT=56571 DPT=23 WINDOW=51171 RES=0x00 SYN URGP=0 [60640.004186] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=28708 DF PROTO=TCP SPT=46251 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [60648.709183] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=211.221.140.111 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=30378 PROTO=TCP SPT=38105 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [60657.616347] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=185.129.148.205 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=34032 PROTO=TCP SPT=41418 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 [60662.228588] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=79.136.110.199 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=41588 PROTO=TCP SPT=58535 DPT=23 WINDOW=49287 RES=0x00 SYN URGP=0 [60736.010851] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=139.162.70.53 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=54321 PROTO=TCP SPT=49442 DPT=1080 WINDOW=65535 RES=0x00 SYN URGP=0 [60764.345146] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=189.115.15.155 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x20 TTL=51 ID=21537 PROTO=TCP SPT=35958 DPT=23 WINDOW=40550 RES=0x00 SYN URGP=0 [60824.269406] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=176.105.202.150 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=56 ID=50296 PROTO=TCP SPT=20729 DPT=23 WINDOW=32209 RES=0x00 SYN URGP=0 [60824.959904] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=221.232.247.2 DST=151.236.37.52 LEN=404 TOS=0x00 PREC=0x00 TTL=115 ID=30435 PROTO=UDP SPT=2705 DPT=1434 LEN=384 [60841.046391] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=197.44.177.14 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=19330 PROTO=TCP SPT=9310 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [60849.711003] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=171.224.93.94 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=48 ID=28485 PROTO=TCP SPT=4207 DPT=23 WINDOW=29559 RES=0x00 SYN URGP=0 [60969.258772] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=177.205.43.70 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x20 TTL=51 ID=31042 PROTO=TCP SPT=64892 DPT=2323 WINDOW=61292 RES=0x00 SYN URGP=0 [61151.250428] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=163.172.217.217 DST=151.236.37.52 LEN=434 TOS=0x08 PREC=0x00 TTL=52 ID=13469 DF PROTO=UDP SPT=5069 DPT=5060 LEN=414 [61268.313796] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=180.109.254.181 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=42042 PROTO=TCP SPT=9629 DPT=2323 WINDOW=2229 RES=0x00 SYN URGP=0 [61268.878362] audit: type=1400 audit(1490063520.342:1295): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11499" pid=11499 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [61268.878376] audit: type=1400 audit(1490063520.342:1296): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11499" pid=11499 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [61268.878387] audit: type=1400 audit(1490063520.342:1297): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11499" pid=11499 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [61268.878540] audit: type=1400 audit(1490063520.342:1298): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=11499 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [61268.878620] audit: type=1400 audit(1490063520.342:1299): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=11499 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [61268.878661] audit: type=1400 audit(1490063520.342:1300): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=11499 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [61268.878680] audit: type=1400 audit(1490063520.342:1301): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=11499 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [61268.878702] audit: type=1400 audit(1490063520.342:1302): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=11499 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [61268.878753] audit: type=1400 audit(1490063520.342:1303): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=11499 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [61268.878775] audit: type=1400 audit(1490063520.342:1304): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=11499 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [61295.586209] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=180.109.254.181 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=42042 PROTO=TCP SPT=9629 DPT=23 WINDOW=2229 RES=0x00 SYN URGP=0 [61314.361246] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=80.85.84.75 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=32958 PROTO=TCP SPT=57721 DPT=5900 WINDOW=1024 RES=0x00 SYN URGP=0 [61319.630465] audit_printk_skb: 6 callbacks suppressed [61319.630468] audit: type=1400 audit(1490063571.095:1307): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11501" pid=11501 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [61319.630480] audit: type=1400 audit(1490063571.095:1308): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11501" pid=11501 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [61319.630490] audit: type=1400 audit(1490063571.095:1309): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11501" pid=11501 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [61319.630916] audit: type=1400 audit(1490063571.095:1310): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11501" pid=11501 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [61348.579376] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=62040 DF PROTO=TCP SPT=56002 DPT=83 WINDOW=29200 RES=0x00 SYN URGP=0 [61349.582308] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=62041 DF PROTO=TCP SPT=56002 DPT=83 WINDOW=29200 RES=0x00 SYN URGP=0 [61351.585310] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=62042 DF PROTO=TCP SPT=56002 DPT=83 WINDOW=29200 RES=0x00 SYN URGP=0 [61352.772352] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=1.60.33.129 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=6974 PROTO=TCP SPT=30675 DPT=23 WINDOW=39203 RES=0x00 SYN URGP=0 [61355.590647] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=62043 DF PROTO=TCP SPT=56002 DPT=83 WINDOW=29200 RES=0x00 SYN URGP=0 [61411.014277] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=182.18.72.126 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=114 ID=256 PROTO=TCP SPT=38515 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 [61471.000598] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=188.24.120.29 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=57 ID=27566 PROTO=TCP SPT=31341 DPT=23 WINDOW=26749 RES=0x00 SYN URGP=0 [61603.783555] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=190.11.206.43 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x20 TTL=239 ID=15486 PROTO=TCP SPT=13765 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [61719.327853] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=81.82.208.234 DST=151.236.37.52 LEN=52 TOS=0x02 PREC=0x00 TTL=114 ID=24199 DF PROTO=TCP SPT=62210 DPT=3389 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 [61720.324312] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=81.82.208.234 DST=151.236.37.52 LEN=52 TOS=0x02 PREC=0x00 TTL=114 ID=25469 DF PROTO=TCP SPT=63451 DPT=3389 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 [61864.070372] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=114.130.13.86 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=21917 PROTO=TCP SPT=21357 DPT=2323 WINDOW=32325 RES=0x00 SYN URGP=0 [61879.279859] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.75.36.245 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=36820 PROTO=TCP SPT=22820 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [61887.760806] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=190.180.2.89 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x20 TTL=243 ID=40980 PROTO=TCP SPT=62786 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [61987.370868] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=118.208.139.136 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=1948 PROTO=TCP SPT=56389 DPT=5555 WINDOW=3503 RES=0x00 SYN URGP=0 [62032.115614] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=92.42.106.189 DST=151.236.37.52 LEN=442 TOS=0x00 PREC=0x00 TTL=56 ID=58472 DF PROTO=UDP SPT=5665 DPT=5060 LEN=422 [62088.470455] audit: type=1400 audit(1490064339.935:1311): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11656" pid=11656 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [62088.470468] audit: type=1400 audit(1490064339.935:1312): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11656" pid=11656 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [62088.470480] audit: type=1400 audit(1490064339.935:1313): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11656" pid=11656 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [62088.470909] audit: type=1400 audit(1490064339.935:1314): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11656" pid=11656 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [62123.118783] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=119.36.21.161 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=30702 PROTO=TCP SPT=53932 DPT=2222 WINDOW=53258 RES=0x00 SYN URGP=0 [62130.411742] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=167.249.188.232 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=19576 PROTO=TCP SPT=37353 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [62135.080655] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=189.135.137.40 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=51 ID=52508 PROTO=TCP SPT=2122 DPT=23 WINDOW=9570 RES=0x00 SYN URGP=0 [62193.068457] audit: type=1400 audit(1490064444.529:1315): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11660" pid=11660 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [62193.068469] audit: type=1400 audit(1490064444.529:1316): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11660" pid=11660 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [62193.068481] audit: type=1400 audit(1490064444.529:1317): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11660" pid=11660 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [62193.068633] audit: type=1400 audit(1490064444.529:1318): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=11660 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [62193.068712] audit: type=1400 audit(1490064444.529:1319): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=11660 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [62193.068755] audit: type=1400 audit(1490064444.529:1320): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=11660 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [62193.068773] audit: type=1400 audit(1490064444.529:1321): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=11660 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [62193.068797] audit: type=1400 audit(1490064444.529:1322): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=11660 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [62193.068846] audit: type=1400 audit(1490064444.529:1323): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=11660 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [62193.068869] audit: type=1400 audit(1490064444.529:1324): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=11660 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [62201.803679] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=184.105.247.252 DST=151.236.37.52 LEN=29 TOS=0x00 PREC=0x00 TTL=55 ID=9587 DF PROTO=UDP SPT=47421 DPT=53413 LEN=9 [62310.979911] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=163.172.210.65 DST=151.236.37.52 LEN=438 TOS=0x08 PREC=0x00 TTL=52 ID=42980 DF PROTO=UDP SPT=5060 DPT=5060 LEN=418 [62415.383798] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=188.26.119.143 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=58 ID=36046 PROTO=TCP SPT=35549 DPT=23 WINDOW=39117 RES=0x00 SYN URGP=0 [62418.786476] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=80.82.77.139 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=120 ID=46304 PROTO=TCP SPT=18242 DPT=1234 WINDOW=9302 RES=0x00 SYN URGP=0 [62419.255360] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=178.211.20.24 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=55 ID=2951 PROTO=TCP SPT=31698 DPT=23 WINDOW=17642 RES=0x00 SYN URGP=0 [62478.241736] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=80.82.77.33 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=120 ID=54206 PROTO=TCP SPT=49717 DPT=11 WINDOW=25854 RES=0x00 SYN URGP=0 [62492.246428] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=46.209.171.86 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=235 ID=12292 PROTO=TCP SPT=38203 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [62492.679344] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=190.130.27.70 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=50397 PROTO=TCP SPT=57128 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [62508.700723] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=89.163.242.160 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x00 TTL=243 ID=52859 DF PROTO=TCP SPT=13905 DPT=81 WINDOW=512 RES=0x00 SYN URGP=0 [62658.139058] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=82.81.130.142 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=246 ID=25001 PROTO=TCP SPT=34298 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [62773.366828] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=27.147.2.208 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=45 ID=54198 PROTO=TCP SPT=57730 DPT=23 WINDOW=52394 RES=0x00 SYN URGP=0 [62845.471385] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=90.181.206.40 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=62032 PROTO=TCP SPT=63402 DPT=23 WINDOW=1860 RES=0x00 SYN URGP=0 [62869.630460] audit_printk_skb: 6 callbacks suppressed [62869.630463] audit: type=1400 audit(1490065121.094:1327): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11682" pid=11682 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [62869.630475] audit: type=1400 audit(1490065121.094:1328): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11682" pid=11682 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [62869.630486] audit: type=1400 audit(1490065121.094:1329): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11682" pid=11682 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [62869.630915] audit: type=1400 audit(1490065121.094:1330): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11682" pid=11682 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [62893.710911] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=181.231.125.69 DST=151.236.37.52 LEN=40 TOS=0x02 PREC=0x00 TTL=39 ID=9309 PROTO=TCP SPT=41118 DPT=2323 WINDOW=64206 RES=0x00 SYN URGP=0 [62939.148552] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=58.22.80.78 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=50 ID=6248 DF PROTO=TCP SPT=51143 DPT=4899 WINDOW=8192 RES=0x00 SYN URGP=0 [62942.153090] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=58.22.80.78 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=50 ID=6555 DF PROTO=TCP SPT=51143 DPT=4899 WINDOW=8192 RES=0x00 SYN URGP=0 [62948.163775] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=58.22.80.78 DST=151.236.37.52 LEN=48 TOS=0x00 PREC=0x00 TTL=50 ID=7275 DF PROTO=TCP SPT=51143 DPT=4899 WINDOW=8192 RES=0x00 SYN URGP=0 [62958.329473] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=178.205.33.173 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=59927 PROTO=TCP SPT=14743 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [62978.568924] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=49.191.0.105 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=43 ID=43841 PROTO=TCP SPT=23022 DPT=23 WINDOW=38687 RES=0x00 SYN URGP=0 [63038.670496] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=185.35.62.31 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=60690 DPT=1883 WINDOW=65535 RES=0x00 SYN URGP=0 [63087.346529] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=177.137.73.48 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=5294 PROTO=TCP SPT=2250 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [63093.164390] audit: type=1400 audit(1490065344.626:1331): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11685" pid=11685 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [63093.164403] audit: type=1400 audit(1490065344.626:1332): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11685" pid=11685 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [63093.164415] audit: type=1400 audit(1490065344.626:1333): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11685" pid=11685 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [63093.164565] audit: type=1400 audit(1490065344.626:1334): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=11685 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [63093.164652] audit: type=1400 audit(1490065344.626:1335): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=11685 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [63093.164696] audit: type=1400 audit(1490065344.626:1336): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=11685 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [63093.164715] audit: type=1400 audit(1490065344.626:1337): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=11685 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [63093.164740] audit: type=1400 audit(1490065344.626:1338): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=11685 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [63093.164791] audit: type=1400 audit(1490065344.626:1339): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=11685 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [63093.164813] audit: type=1400 audit(1490065344.626:1340): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=11685 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [63213.724117] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=42.93.129.133 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=27085 PROTO=TCP SPT=36624 DPT=23 WINDOW=47392 RES=0x00 SYN URGP=0 [63255.493833] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=51.15.10.146 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x00 TTL=243 ID=54321 PROTO=TCP SPT=52404 DPT=47857 WINDOW=65535 RES=0x00 SYN URGP=0 [63280.153070] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=168.181.176.1 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x20 TTL=53 ID=55994 PROTO=TCP SPT=64110 DPT=23 WINDOW=33822 RES=0x00 SYN URGP=0 [63371.603386] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=51451 DF PROTO=TCP SPT=35396 DPT=84 WINDOW=29200 RES=0x00 SYN URGP=0 [63372.605833] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=51452 DF PROTO=TCP SPT=35396 DPT=84 WINDOW=29200 RES=0x00 SYN URGP=0 [63374.610691] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=51453 DF PROTO=TCP SPT=35396 DPT=84 WINDOW=29200 RES=0x00 SYN URGP=0 [63378.618304] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=51454 DF PROTO=TCP SPT=35396 DPT=84 WINDOW=29200 RES=0x00 SYN URGP=0 [63467.576042] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=184.105.139.81 DST=151.236.37.52 LEN=35 TOS=0x00 PREC=0x00 TTL=55 ID=45145 DF PROTO=UDP SPT=15545 DPT=177 LEN=15 [63582.479376] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=78.188.168.245 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=23620 PROTO=TCP SPT=31360 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [63674.206028] audit_printk_skb: 6 callbacks suppressed [63674.206030] audit: type=1400 audit(1490065925.667:1343): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11774" pid=11774 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [63674.206042] audit: type=1400 audit(1490065925.667:1344): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11774" pid=11774 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [63674.206054] audit: type=1400 audit(1490065925.667:1345): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11774" pid=11774 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [63674.206492] audit: type=1400 audit(1490065925.667:1346): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11774" pid=11774 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [63697.984198] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=123.195.97.79 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=45 ID=47899 PROTO=TCP SPT=60820 DPT=23 WINDOW=26066 RES=0x00 SYN URGP=0 [63748.019483] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.223.133.13 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=22598 PROTO=TCP SPT=44805 DPT=2689 WINDOW=1024 RES=0x00 SYN URGP=0 [63907.283573] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=114.237.204.54 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=32150 PROTO=TCP SPT=7227 DPT=23 WINDOW=58876 RES=0x00 SYN URGP=0 [63993.177400] audit: type=1400 audit(1490066244.639:1347): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11786" pid=11786 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [63993.177414] audit: type=1400 audit(1490066244.639:1348): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11786" pid=11786 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [63993.177425] audit: type=1400 audit(1490066244.639:1349): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11786" pid=11786 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [63993.177580] audit: type=1400 audit(1490066244.639:1350): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=11786 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [63993.177661] audit: type=1400 audit(1490066244.639:1351): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=11786 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [63993.177704] audit: type=1400 audit(1490066244.639:1352): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=11786 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [63993.177721] audit: type=1400 audit(1490066244.639:1353): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=11786 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [63993.177770] audit: type=1400 audit(1490066244.639:1354): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=11786 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [63993.177823] audit: type=1400 audit(1490066244.639:1355): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=11786 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [63993.177845] audit: type=1400 audit(1490066244.639:1356): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=11786 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [64041.970584] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=89.163.144.91 DST=151.236.37.52 LEN=442 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=UDP SPT=5229 DPT=5060 LEN=422 [64066.724059] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=35593 DF PROTO=TCP SPT=49222 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [64069.717138] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=20174 DF PROTO=TCP SPT=49222 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [64075.716772] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=24708 DF PROTO=TCP SPT=49222 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [64079.279900] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=167.60.61.159 DST=151.236.37.52 LEN=44 TOS=0x08 PREC=0x00 TTL=45 ID=18059 PROTO=TCP SPT=47720 DPT=23 WINDOW=35928 RES=0x00 SYN URGP=0 [64179.503319] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=116.105.192.125 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=49 ID=43327 PROTO=TCP SPT=18768 DPT=23 WINDOW=9520 RES=0x00 SYN URGP=0 [64280.490629] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=189.244.40.86 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=32807 PROTO=TCP SPT=33952 DPT=23 WINDOW=38576 RES=0x00 SYN URGP=0 [64327.529345] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.238.169.119 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=4291 PROTO=TCP SPT=26895 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [64336.649167] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=114.199.162.242 DST=151.236.37.52 LEN=122 TOS=0x00 PREC=0x00 TTL=47 ID=0 DF PROTO=UDP SPT=46976 DPT=1900 LEN=102 [64454.701240] audit_printk_skb: 6 callbacks suppressed [64454.701243] audit: type=1400 audit(1490066706.163:1359): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11908" pid=11908 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [64454.701254] audit: type=1400 audit(1490066706.163:1360): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11908" pid=11908 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [64454.701265] audit: type=1400 audit(1490066706.163:1361): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11908" pid=11908 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [64454.701697] audit: type=1400 audit(1490066706.163:1362): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11908" pid=11908 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [64514.805682] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=190.190.145.170 DST=151.236.37.52 LEN=40 TOS=0x02 PREC=0x00 TTL=230 ID=6615 PROTO=TCP SPT=33705 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [64517.776034] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=89.37.58.41 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=40492 PROTO=TCP SPT=50105 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [64588.237386] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=168.1.128.74 DST=151.236.37.52 LEN=30 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=UDP SPT=32861 DPT=5632 LEN=10 [64685.839473] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=46.217.10.217 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=42 ID=41934 PROTO=TCP SPT=28117 DPT=23 WINDOW=30413 RES=0x00 SYN URGP=0 [64726.851538] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=80.82.79.104 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=64655 PROTO=TCP SPT=46959 DPT=8080 WINDOW=1024 RES=0x00 SYN URGP=0 [64762.613624] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=77.227.126.128 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=51 ID=18650 PROTO=TCP SPT=21244 DPT=23 WINDOW=16620 RES=0x00 SYN URGP=0 [64803.021025] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=219.89.205.78 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=44 ID=2434 PROTO=TCP SPT=45184 DPT=23 WINDOW=41616 RES=0x00 SYN URGP=0 [64835.827983] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=176.202.180.109 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=61166 PROTO=TCP SPT=249 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [64893.263775] audit: type=1400 audit(1490067144.723:1363): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11916" pid=11916 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [64893.263788] audit: type=1400 audit(1490067144.723:1364): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11916" pid=11916 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [64893.263799] audit: type=1400 audit(1490067144.723:1365): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11916" pid=11916 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [64893.263955] audit: type=1400 audit(1490067144.723:1366): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=11916 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [64893.264103] audit: type=1400 audit(1490067144.727:1367): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=11916 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [64893.264151] audit: type=1400 audit(1490067144.727:1368): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=11916 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [64893.264170] audit: type=1400 audit(1490067144.727:1369): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=11916 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [64893.264193] audit: type=1400 audit(1490067144.727:1370): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=11916 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [64893.264243] audit: type=1400 audit(1490067144.727:1371): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=11916 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [64893.264265] audit: type=1400 audit(1490067144.727:1372): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=11916 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [64911.214723] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=89.175.152.77 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x20 TTL=53 ID=50525 PROTO=TCP SPT=36409 DPT=23 WINDOW=32759 RES=0x00 SYN URGP=0 [64958.786251] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=113.190.122.207 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=49 ID=2331 PROTO=TCP SPT=17180 DPT=23 WINDOW=20748 RES=0x00 SYN URGP=0 [64995.540780] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=182.18.72.82 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=114 ID=256 PROTO=TCP SPT=62626 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 [65070.935821] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=120.80.202.29 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=47397 PROTO=TCP SPT=21411 DPT=23 WINDOW=41618 RES=0x00 SYN URGP=0 [65075.159518] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=163.172.210.65 DST=151.236.37.52 LEN=437 TOS=0x08 PREC=0x00 TTL=52 ID=25554 DF PROTO=UDP SPT=5083 DPT=5060 LEN=417 [65109.889917] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=120.14.200.76 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=26318 PROTO=TCP SPT=58479 DPT=23 WINDOW=49231 RES=0x00 SYN URGP=0 [65124.126412] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=203.222.30.20 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=31755 PROTO=TCP SPT=56571 DPT=23 WINDOW=51171 RES=0x00 SYN URGP=0 [65196.895896] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=119.62.145.70 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=59407 PROTO=TCP SPT=32162 DPT=23 WINDOW=20618 RES=0x00 SYN URGP=0 [65210.895775] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=176.223.61.47 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=61627 PROTO=TCP SPT=17056 DPT=23 WINDOW=59183 RES=0x00 SYN URGP=0 [65229.240126] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=190.146.88.63 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=15889 PROTO=TCP SPT=56054 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [65259.304338] audit_printk_skb: 6 callbacks suppressed [65259.304341] audit: type=1400 audit(1490067510.767:1375): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11921" pid=11921 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [65259.304352] audit: type=1400 audit(1490067510.767:1376): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11921" pid=11921 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [65259.304363] audit: type=1400 audit(1490067510.767:1377): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11921" pid=11921 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [65259.304783] audit: type=1400 audit(1490067510.767:1378): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11921" pid=11921 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [65270.224545] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=2.190.140.102 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=44415 PROTO=TCP SPT=2385 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [65333.393723] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.230.47.41 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=24491 PROTO=TCP SPT=59921 DPT=3344 WINDOW=1024 RES=0x00 SYN URGP=0 [65394.636664] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=9300 DF PROTO=TCP SPT=52610 DPT=85 WINDOW=29200 RES=0x00 SYN URGP=0 [65395.637882] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=9301 DF PROTO=TCP SPT=52610 DPT=85 WINDOW=29200 RES=0x00 SYN URGP=0 [65397.642476] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=9302 DF PROTO=TCP SPT=52610 DPT=85 WINDOW=29200 RES=0x00 SYN URGP=0 [65401.647100] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=9303 DF PROTO=TCP SPT=52610 DPT=85 WINDOW=29200 RES=0x00 SYN URGP=0 [65480.735235] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=128.194.134.231 DST=151.236.37.52 LEN=78 TOS=0x00 PREC=0x00 TTL=115 ID=47003 PROTO=UDP SPT=47003 DPT=53 LEN=58 [65480.735266] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=128.194.134.231 DST=151.236.37.52 LEN=78 TOS=0x00 PREC=0x00 TTL=115 ID=47003 PROTO=UDP SPT=47003 DPT=53 LEN=58 [65518.881749] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=115.77.1.143 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=238 ID=32704 PROTO=TCP SPT=3535 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [65540.165253] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=124.153.128.46 DST=151.236.37.52 LEN=122 TOS=0x00 PREC=0x00 TTL=49 ID=0 DF PROTO=UDP SPT=46976 DPT=1900 LEN=102 [65546.837134] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=192.168.0.110 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=35980 PROTO=TCP SPT=52706 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [65569.598822] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.236.24.159 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=25083 PROTO=TCP SPT=12005 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [65606.620405] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=147.75.100.183 DST=151.236.37.52 LEN=29 TOS=0x00 PREC=0x00 TTL=53 ID=59961 DF PROTO=UDP SPT=59730 DPT=19 LEN=9 [65776.110719] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=42.119.148.207 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=5969 PROTO=TCP SPT=21161 DPT=23 WINDOW=28049 RES=0x00 SYN URGP=0 [65782.100687] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=79.33.199.26 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=43970 PROTO=TCP SPT=41985 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [65793.352575] audit: type=1400 audit(1490068044.812:1379): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11997" pid=11997 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [65793.352588] audit: type=1400 audit(1490068044.812:1380): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11997" pid=11997 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [65793.352600] audit: type=1400 audit(1490068044.812:1381): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/11997" pid=11997 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [65793.352749] audit: type=1400 audit(1490068044.812:1382): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=11997 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [65793.352828] audit: type=1400 audit(1490068044.812:1383): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=11997 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [65793.352870] audit: type=1400 audit(1490068044.812:1384): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=11997 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [65793.352889] audit: type=1400 audit(1490068044.812:1385): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=11997 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [65793.352914] audit: type=1400 audit(1490068044.812:1386): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=11997 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [65793.352963] audit: type=1400 audit(1490068044.812:1387): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=11997 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [65793.352984] audit: type=1400 audit(1490068044.812:1388): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=11997 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [65844.406844] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=79.118.132.209 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=248 ID=46458 PROTO=TCP SPT=16716 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [65867.801223] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=220.133.196.145 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=52839 PROTO=TCP SPT=19352 DPT=2323 WINDOW=20608 RES=0x00 SYN URGP=0 [66039.761359] audit_printk_skb: 6 callbacks suppressed [66039.761362] audit: type=1400 audit(1490068291.223:1391): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12001" pid=12001 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [66039.761373] audit: type=1400 audit(1490068291.223:1392): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12001" pid=12001 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [66039.761384] audit: type=1400 audit(1490068291.223:1393): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12001" pid=12001 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [66039.761805] audit: type=1400 audit(1490068291.223:1394): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12001" pid=12001 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [66451.976641] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=175.194.163.33 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=14989 PROTO=TCP SPT=38042 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [66542.065046] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=59.127.23.170 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=64901 PROTO=TCP SPT=23985 DPT=23 WINDOW=14553 RES=0x00 SYN URGP=0 [66621.779324] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=71.6.146.185 DST=151.236.37.52 LEN=40 TOS=0x10 PREC=0x00 TTL=109 ID=31793 PROTO=TCP SPT=41665 DPT=995 WINDOW=8602 RES=0x00 SYN URGP=0 [66693.449555] audit: type=1400 audit(1490068944.908:1395): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12014" pid=12014 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [66693.449569] audit: type=1400 audit(1490068944.908:1396): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12014" pid=12014 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [66693.449580] audit: type=1400 audit(1490068944.908:1397): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12014" pid=12014 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [66693.449736] audit: type=1400 audit(1490068944.908:1398): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=12014 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [66693.449815] audit: type=1400 audit(1490068944.908:1399): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=12014 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [66693.449873] audit: type=1400 audit(1490068944.908:1400): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=12014 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [66693.449892] audit: type=1400 audit(1490068944.908:1401): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=12014 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [66693.449915] audit: type=1400 audit(1490068944.908:1402): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=12014 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [66693.449975] audit: type=1400 audit(1490068944.908:1403): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=12014 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [66693.449996] audit: type=1400 audit(1490068944.908:1404): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=12014 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [66794.877866] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=92.80.246.141 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=56 ID=176 PROTO=TCP SPT=6974 DPT=23 WINDOW=17261 RES=0x00 SYN URGP=0 [66844.200498] audit_printk_skb: 6 callbacks suppressed [66844.200501] audit: type=1400 audit(1490069095.660:1407): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12016" pid=12016 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [66844.200513] audit: type=1400 audit(1490069095.660:1408): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12016" pid=12016 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [66844.200524] audit: type=1400 audit(1490069095.660:1409): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12016" pid=12016 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [66844.200946] audit: type=1400 audit(1490069095.660:1410): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12016" pid=12016 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [66867.322685] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=221.226.226.141 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=5431 PROTO=TCP SPT=14186 DPT=23 WINDOW=346 RES=0x00 SYN URGP=0 [66877.143953] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=45.32.169.41 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=49 ID=9496 DF PROTO=TCP SPT=4935 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0 [66898.055001] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=190.248.193.202 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=27725 PROTO=TCP SPT=5383 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [66910.630861] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=190.226.71.194 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=10061 PROTO=TCP SPT=10707 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [67012.780029] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=120.12.183.202 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=34641 PROTO=TCP SPT=38269 DPT=23 WINDOW=45405 RES=0x00 SYN URGP=0 [67029.766742] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=182.18.72.116 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=114 ID=256 PROTO=TCP SPT=37713 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 [67251.354902] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=71.6.135.131 DST=151.236.37.52 LEN=40 TOS=0x10 PREC=0x00 TTL=109 ID=15663 PROTO=TCP SPT=30139 DPT=2181 WINDOW=18084 RES=0x00 SYN URGP=0 [67290.284543] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=171.247.229.20 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=44 ID=13956 PROTO=TCP SPT=23144 DPT=23 WINDOW=42632 RES=0x00 SYN URGP=0 [67321.618526] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=193.201.225.15 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=22363 PROTO=TCP SPT=51575 DPT=3394 WINDOW=1024 RES=0x00 SYN URGP=0 [67323.639219] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=203.222.30.20 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=31755 PROTO=TCP SPT=56571 DPT=23 WINDOW=51171 RES=0x00 SYN URGP=0 [67382.060689] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=104.192.1.3 DST=151.236.37.52 LEN=56 TOS=0x00 PREC=0x00 TTL=50 ID=0 DF PROTO=UDP SPT=57477 DPT=53 LEN=36 [67386.389783] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=216.218.206.93 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=46832 DPT=9200 WINDOW=65535 RES=0x00 SYN URGP=0 [67386.555823] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=71.6.135.131 DST=151.236.37.52 LEN=40 TOS=0x10 PREC=0x00 TTL=115 ID=13532 PROTO=TCP SPT=58022 DPT=84 WINDOW=32458 RES=0x00 SYN URGP=0 [67396.598524] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=203.222.30.20 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=31755 PROTO=TCP SPT=56571 DPT=23 WINDOW=51171 RES=0x00 SYN URGP=0 [67415.274989] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=220.84.249.108 DST=151.236.37.52 LEN=122 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=UDP SPT=57906 DPT=1900 LEN=102 [67417.588444] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=49.73.97.131 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=163 PROTO=TCP SPT=53523 DPT=23 WINDOW=49923 RES=0x00 SYN URGP=0 [67417.994554] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=8031 DF PROTO=TCP SPT=43050 DPT=86 WINDOW=29200 RES=0x00 SYN URGP=0 [67418.996741] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=8032 DF PROTO=TCP SPT=43050 DPT=86 WINDOW=29200 RES=0x00 SYN URGP=0 [67421.001205] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=8033 DF PROTO=TCP SPT=43050 DPT=86 WINDOW=29200 RES=0x00 SYN URGP=0 [67425.009574] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=8034 DF PROTO=TCP SPT=43050 DPT=86 WINDOW=29200 RES=0x00 SYN URGP=0 [67425.087064] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=120.24.161.21 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=111 ID=16779 DF PROTO=TCP SPT=59903 DPT=21 WINDOW=8192 RES=0x00 SYN URGP=0 [67428.163673] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=120.24.161.21 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=111 ID=17099 DF PROTO=TCP SPT=59903 DPT=21 WINDOW=8192 RES=0x00 SYN URGP=0 [67499.973642] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=4489 DF PROTO=TCP SPT=62710 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [67502.968760] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=19332 DF PROTO=TCP SPT=62710 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [67508.967571] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=26435 DF PROTO=TCP SPT=62710 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [67560.779488] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=60.250.150.121 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=20123 PROTO=TCP SPT=63161 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [67574.562974] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=132.248.248.232 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x00 TTL=233 ID=63074 PROTO=TCP SPT=20772 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [67593.502635] audit: type=1400 audit(1490069844.962:1411): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12110" pid=12110 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [67593.502648] audit: type=1400 audit(1490069844.962:1412): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12110" pid=12110 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [67593.502659] audit: type=1400 audit(1490069844.962:1413): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12110" pid=12110 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [67593.502809] audit: type=1400 audit(1490069844.962:1414): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=12110 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [67593.502891] audit: type=1400 audit(1490069844.962:1415): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=12110 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [67593.502934] audit: type=1400 audit(1490069844.962:1416): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=12110 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [67593.502953] audit: type=1400 audit(1490069844.962:1417): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=12110 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [67593.502976] audit: type=1400 audit(1490069844.962:1418): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=12110 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [67593.503028] audit: type=1400 audit(1490069844.962:1419): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=12110 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [67593.503049] audit: type=1400 audit(1490069844.962:1420): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=12110 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [67620.659360] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=112.65.221.4 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=114 ID=256 PROTO=TCP SPT=43477 DPT=8083 WINDOW=16384 RES=0x00 SYN URGP=0 [67639.522470] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=109.97.94.32 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=56 ID=30232 PROTO=TCP SPT=19790 DPT=23 WINDOW=21845 RES=0x00 SYN URGP=0 [67648.852905] audit_printk_skb: 6 callbacks suppressed [67648.852908] audit: type=1400 audit(1490069900.310:1423): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12112" pid=12112 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [67648.852919] audit: type=1400 audit(1490069900.310:1424): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12112" pid=12112 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [67648.852930] audit: type=1400 audit(1490069900.310:1425): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12112" pid=12112 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [67648.853352] audit: type=1400 audit(1490069900.310:1426): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12112" pid=12112 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [67665.071342] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=175.207.136.155 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=51099 PROTO=TCP SPT=61651 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [67684.153125] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=112.65.221.4 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=114 ID=256 PROTO=TCP SPT=29669 DPT=8088 WINDOW=16384 RES=0x00 SYN URGP=0 [67864.920978] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=163.172.210.65 DST=151.236.37.52 LEN=438 TOS=0x08 PREC=0x00 TTL=52 ID=25972 DF PROTO=UDP SPT=5064 DPT=5060 LEN=418 [67893.075681] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=114.32.137.102 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=45425 PROTO=TCP SPT=23636 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [67992.126781] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=221.179.244.249 DST=151.236.37.52 LEN=40 TOS=0x04 PREC=0x00 TTL=110 ID=256 PROTO=TCP SPT=43699 DPT=1433 WINDOW=16384 RES=0x00 SYN URGP=0 [67994.049188] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=93.174.95.106 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=121 ID=53004 PROTO=TCP SPT=58022 DPT=1471 WINDOW=21590 RES=0x00 SYN URGP=0 [68055.496940] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.211.0.11 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=14569 PROTO=TCP SPT=51927 DPT=3397 WINDOW=1024 RES=0x00 SYN URGP=0 [68108.075258] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=221.179.244.249 DST=151.236.37.52 LEN=40 TOS=0x04 PREC=0x00 TTL=110 ID=256 PROTO=TCP SPT=2276 DPT=1433 WINDOW=16384 RES=0x00 SYN URGP=0 [68121.188309] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=188.19.104.176 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=106 PROTO=TCP SPT=35547 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [68230.564943] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=106.75.18.144 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=54321 PROTO=TCP SPT=38762 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0 [68241.543332] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=183.155.230.183 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=27993 PROTO=TCP SPT=49505 DPT=23 WINDOW=12687 RES=0x00 SYN URGP=0 [68245.116643] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=177.106.214.196 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=31694 PROTO=TCP SPT=31691 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [68248.089895] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=124.119.214.229 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=31196 PROTO=TCP SPT=20989 DPT=23 WINDOW=17389 RES=0x00 SYN URGP=0 [68286.215286] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=181.208.57.106 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=43 ID=44347 PROTO=TCP SPT=47159 DPT=23 WINDOW=43559 RES=0x00 SYN URGP=0 [68310.189382] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=187.121.169.211 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=2248 PROTO=TCP SPT=14186 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [68330.660323] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=113.162.32.51 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=62238 PROTO=TCP SPT=56052 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [68338.118958] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=118.233.182.247 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=44 ID=64870 PROTO=TCP SPT=23377 DPT=2323 WINDOW=20151 RES=0x00 SYN URGP=0 [68360.165767] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=113.109.27.128 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=17538 PROTO=TCP SPT=27518 DPT=23 WINDOW=15663 RES=0x00 SYN URGP=0 [68389.042495] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=198.20.87.98 DST=151.236.37.52 LEN=40 TOS=0x10 PREC=0x00 TTL=115 ID=57580 PROTO=TCP SPT=59842 DPT=19 WINDOW=49779 RES=0x00 SYN URGP=0 [68423.137836] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=14.166.169.21 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=13312 PROTO=TCP SPT=35332 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [68429.242156] audit: type=1400 audit(1490070680.702:1427): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12234" pid=12234 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [68429.242169] audit: type=1400 audit(1490070680.702:1428): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12234" pid=12234 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [68429.242180] audit: type=1400 audit(1490070680.702:1429): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12234" pid=12234 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [68429.242607] audit: type=1400 audit(1490070680.702:1430): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12234" pid=12234 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [68480.556298] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=46.0.110.57 DST=151.236.37.52 LEN=40 TOS=0x10 PREC=0x00 TTL=247 ID=53318 PROTO=TCP SPT=1946 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [68493.509302] audit: type=1400 audit(1490070744.966:1431): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12236" pid=12236 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [68493.509316] audit: type=1400 audit(1490070744.966:1432): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12236" pid=12236 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [68493.509327] audit: type=1400 audit(1490070744.966:1433): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12236" pid=12236 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [68493.509481] audit: type=1400 audit(1490070744.966:1434): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=12236 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [68493.509562] audit: type=1400 audit(1490070744.966:1435): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=12236 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [68493.509603] audit: type=1400 audit(1490070744.966:1436): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=12236 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [68493.509622] audit: type=1400 audit(1490070744.966:1437): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=12236 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [68493.509645] audit: type=1400 audit(1490070744.966:1438): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=12236 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [68493.509694] audit: type=1400 audit(1490070744.966:1439): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=12236 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [68493.509715] audit: type=1400 audit(1490070744.966:1440): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=12236 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [68551.903228] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=79.109.122.164 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=46246 PROTO=TCP SPT=53749 DPT=23 WINDOW=53958 RES=0x00 SYN URGP=0 [68616.704587] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=71.6.216.51 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=54321 PROTO=TCP SPT=389 DPT=389 WINDOW=65535 RES=0x00 SYN URGP=0 [68720.026899] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=190.3.201.161 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=59394 PROTO=TCP SPT=13795 DPT=23 WINDOW=10227 RES=0x00 SYN URGP=0 [68759.418799] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=190.252.115.105 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x20 TTL=49 ID=11839 PROTO=TCP SPT=35548 DPT=23 WINDOW=39116 RES=0x00 SYN URGP=0 [69041.334628] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=45.33.83.148 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=32900 DPT=25 WINDOW=65535 RES=0x00 SYN URGP=0 [69200.097415] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=190.29.27.139 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=51105 PROTO=TCP SPT=21131 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [69200.099995] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=119.49.64.220 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=18650 PROTO=TCP SPT=21244 DPT=23 WINDOW=16620 RES=0x00 SYN URGP=0 [69209.787045] audit_printk_skb: 6 callbacks suppressed [69209.787048] audit: type=1400 audit(1490071461.241:1443): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12312" pid=12312 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [69209.787060] audit: type=1400 audit(1490071461.241:1444): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12312" pid=12312 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [69209.787071] audit: type=1400 audit(1490071461.241:1445): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12312" pid=12312 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [69209.787502] audit: type=1400 audit(1490071461.241:1446): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12312" pid=12312 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [69211.212215] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=182.186.194.205 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=21137 PROTO=TCP SPT=24916 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [69295.592412] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=216.218.206.123 DST=151.236.37.52 LEN=68 TOS=0x00 PREC=0x00 TTL=55 ID=1035 DF PROTO=UDP SPT=6848 DPT=111 LEN=48 [69313.661933] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=80.183.103.227 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=14863 PROTO=TCP SPT=38727 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [69317.135743] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=189.55.55.233 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=65366 PROTO=TCP SPT=44051 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [69370.220750] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=2.60.13.26 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=37278 PROTO=TCP SPT=60313 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [69393.590219] audit: type=1400 audit(1490071645.045:1447): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12315" pid=12315 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [69393.590231] audit: type=1400 audit(1490071645.045:1448): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12315" pid=12315 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [69393.590242] audit: type=1400 audit(1490071645.045:1449): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12315" pid=12315 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [69393.590394] audit: type=1400 audit(1490071645.045:1450): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=12315 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [69393.590471] audit: type=1400 audit(1490071645.045:1451): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=12315 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [69393.590512] audit: type=1400 audit(1490071645.045:1452): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=12315 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [69393.590530] audit: type=1400 audit(1490071645.045:1453): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=12315 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [69393.590552] audit: type=1400 audit(1490071645.045:1454): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=12315 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [69393.590601] audit: type=1400 audit(1490071645.045:1455): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=12315 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [69393.590622] audit: type=1400 audit(1490071645.045:1456): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=12315 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [69408.619576] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=1.34.119.144 DST=151.236.37.52 LEN=552 TOS=0x00 PREC=0x00 TTL=48 ID=50248 PROTO=TCP SPT=64830 DPT=32271 WINDOW=29044 RES=0x00 ACK URGP=0 [69442.815794] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=26927 DF PROTO=TCP SPT=47386 DPT=88 WINDOW=29200 RES=0x00 SYN URGP=0 [69443.817210] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=26928 DF PROTO=TCP SPT=47386 DPT=88 WINDOW=29200 RES=0x00 SYN URGP=0 [69445.820351] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=26929 DF PROTO=TCP SPT=47386 DPT=88 WINDOW=29200 RES=0x00 SYN URGP=0 [69449.828345] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=26930 DF PROTO=TCP SPT=47386 DPT=88 WINDOW=29200 RES=0x00 SYN URGP=0 [69692.184592] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=42.116.158.237 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=46163 PROTO=TCP SPT=62893 DPT=23 WINDOW=4289 RES=0x00 SYN URGP=0 [69730.467883] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=182.18.72.115 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=113 ID=256 PROTO=TCP SPT=47649 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 [69754.096433] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=121.217.235.151 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x40 TTL=240 ID=54096 PROTO=TCP SPT=61122 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [69754.351388] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=81.225.23.155 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=11007 PROTO=TCP SPT=8001 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [69895.811087] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=60.205.209.104 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=103 ID=256 PROTO=TCP SPT=6000 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 [69979.850419] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=114.229.92.153 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=44863 PROTO=TCP SPT=43978 DPT=23 WINDOW=6267 RES=0x00 SYN URGP=0 [70014.663076] audit_printk_skb: 6 callbacks suppressed [70014.663079] audit: type=1400 audit(1490072266.116:1459): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12329" pid=12329 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [70014.663091] audit: type=1400 audit(1490072266.116:1460): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12329" pid=12329 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [70014.663102] audit: type=1400 audit(1490072266.116:1461): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12329" pid=12329 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [70014.663534] audit: type=1400 audit(1490072266.116:1462): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12329" pid=12329 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [70077.586720] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=220.123.41.92 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=50999 PROTO=TCP SPT=46979 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [70101.379728] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=204.152.209.149 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=30821 PROTO=TCP SPT=52359 DPT=3128 WINDOW=1024 RES=0x00 SYN URGP=0 [70102.627272] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=95.14.68.132 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=10304 PROTO=TCP SPT=57183 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [70234.261632] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=115.77.125.34 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=236 ID=57841 PROTO=TCP SPT=9785 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [70246.633346] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=89.121.173.234 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=55 ID=62330 PROTO=TCP SPT=52167 DPT=23 WINDOW=9527 RES=0x00 SYN URGP=0 [70270.263467] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.230.47.41 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=59829 PROTO=TCP SPT=59921 DPT=3384 WINDOW=1024 RES=0x00 SYN URGP=0 [70293.692192] audit: type=1400 audit(1490072545.150:1463): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12344" pid=12344 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [70293.692205] audit: type=1400 audit(1490072545.150:1464): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12344" pid=12344 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [70293.692216] audit: type=1400 audit(1490072545.150:1465): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/12344" pid=12344 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [70293.692366] audit: type=1400 audit(1490072545.150:1466): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=12344 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [70293.692447] audit: type=1400 audit(1490072545.150:1467): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=12344 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [70293.692490] audit: type=1400 audit(1490072545.150:1468): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=12344 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [70293.692508] audit: type=1400 audit(1490072545.150:1469): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=12344 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [70293.692531] audit: type=1400 audit(1490072545.150:1470): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=12344 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [70293.692580] audit: type=1400 audit(1490072545.150:1471): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=12344 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [70293.692601] audit: type=1400 audit(1490072545.150:1472): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=12344 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [70322.606347] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=106.120.31.189 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=51 ID=36988 PROTO=TCP SPT=19623 DPT=23 WINDOW=43467 RES=0x00 SYN URGP=0 [70337.477370] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=37.98.215.215 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=52 ID=10451 PROTO=TCP SPT=27726 DPT=23 WINDOW=6966 RES=0x00 SYN URGP=0 [70381.525795] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=213.248.179.82 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=235 ID=55752 PROTO=TCP SPT=1310 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [70415.377315] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=212.118.253.117 DST=151.236.37.52 LEN=44 TOS=0x08 PREC=0x20 TTL=1 ID=0 DF PROTO=UDP SPT=33217 DPT=33441 LEN=24 [70416.377700] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=212.118.253.117 DST=151.236.37.52 LEN=44 TOS=0x08 PREC=0x20 TTL=2 ID=0 DF PROTO=UDP SPT=33217 DPT=33442 LEN=24 [70417.377824] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=212.118.253.117 DST=151.236.37.52 LEN=44 TOS=0x08 PREC=0x20 TTL=3 ID=0 DF PROTO=UDP SPT=33217 DPT=33443 LEN=24 [70418.378294] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=212.118.253.117 DST=151.236.37.52 LEN=44 TOS=0x08 PREC=0x20 TTL=4 ID=0 DF PROTO=UDP SPT=33217 DPT=33444 LEN=24 [70419.386601] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=212.118.253.113 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=1 ID=0 DF PROTO=UDP SPT=33220 DPT=33439 LEN=24 [70419.421979] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.245.100.9 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=55084 PROTO=TCP SPT=5949 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [70420.387651] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=212.118.253.113 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=2 ID=0 DF PROTO=UDP SPT=33220 DPT=33440 LEN=24 [70421.387193] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=212.118.253.113 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=3 ID=0 DF PROTO=UDP SPT=33220 DPT=33441 LEN=24 [70422.388579] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=212.118.253.113 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=4 ID=0 DF PROTO=UDP SPT=33220 DPT=33442 LEN=24 [70423.399073] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=212.118.253.115 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=1 ID=0 DF PROTO=UDP SPT=33218 DPT=33440 LEN=24 [70493.213104] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=41.213.192.249 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=9763 PROTO=TCP SPT=20709 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [70502.170619] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=203.222.30.20 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=31755 PROTO=TCP SPT=56571 DPT=23 WINDOW=51171 RES=0x00 SYN URGP=0 [70554.102679] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=185.35.62.71 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=60054 DPT=8883 WINDOW=65535 RES=0x00 SYN URGP=0 [70571.660177] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=106.69.59.232 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=59373 PROTO=TCP SPT=54118 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [70607.403654] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=212.20.52.170 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=10159 PROTO=TCP SPT=3630 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [70622.398699] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=168.1.128.35 DST=151.236.37.52 LEN=30 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=UDP SPT=21283 DPT=5632 LEN=10 [70660.120511] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=163.172.210.65 DST=151.236.37.52 LEN=436 TOS=0x08 PREC=0x00 TTL=52 ID=15402 DF PROTO=UDP SPT=5079 DPT=5060 LEN=416 [70702.828073] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=203.222.30.20 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=31755 PROTO=TCP SPT=56571 DPT=23 WINDOW=51171 RES=0x00 SYN URGP=0 [70728.936305] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=129.250.206.86 DST=151.236.37.52 LEN=66 TOS=0x00 PREC=0x00 TTL=53 ID=35490 DF PROTO=UDP SPT=34278 DPT=161 LEN=46 [70728.936333] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=129.250.206.86 DST=151.236.37.52 LEN=66 TOS=0x00 PREC=0x00 TTL=53 ID=35491 DF PROTO=UDP SPT=34278 DPT=161 LEN=46 [70819.435317] audit_printk_skb: 6 callbacks suppressed [70819.435321] audit: type=1400 audit(1490073070.887:1475): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/14740" pid=14740 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [70819.435332] audit: type=1400 audit(1490073070.887:1476): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/14740" pid=14740 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [70819.435344] audit: type=1400 audit(1490073070.887:1477): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/14740" pid=14740 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [70819.435768] audit: type=1400 audit(1490073070.887:1478): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/14740" pid=14740 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [70851.716966] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.223.133.13 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=9870 PROTO=TCP SPT=44805 DPT=1789 WINDOW=1024 RES=0x00 SYN URGP=0 [70862.614192] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=74.82.47.54 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=56355 DPT=11211 WINDOW=65535 RES=0x00 SYN URGP=0 [70938.729061] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=14290 DF PROTO=TCP SPT=14426 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [70941.731447] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=53132 DF PROTO=TCP SPT=14426 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [70947.815551] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=16186 DF PROTO=TCP SPT=14426 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [70951.884530] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=121.163.169.33 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=38784 PROTO=TCP SPT=14030 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [71005.141325] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=103.58.96.253 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=247 ID=46552 PROTO=TCP SPT=22934 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [71086.258957] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=111.160.73.58 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=5769 PROTO=TCP SPT=62860 DPT=23 WINDOW=59292 RES=0x00 SYN URGP=0 [71104.546490] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=139.162.78.6 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=4399 DF PROTO=TCP SPT=33346 DPT=110 WINDOW=2920 RES=0x00 SYN URGP=0 [71105.566527] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=139.162.78.6 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=4400 DF PROTO=TCP SPT=33346 DPT=110 WINDOW=2920 RES=0x00 SYN URGP=0 [71107.780678] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=139.162.78.6 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=4401 DF PROTO=TCP SPT=33346 DPT=110 WINDOW=2920 RES=0x00 SYN URGP=0 [71110.695415] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=139.162.78.6 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=16951 DF PROTO=TCP SPT=53982 DPT=110 WINDOW=2920 RES=0x00 SYN URGP=0 [71111.712150] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=139.162.78.6 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=16952 DF PROTO=TCP SPT=53982 DPT=110 WINDOW=2920 RES=0x00 SYN URGP=0 [71113.764788] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=139.162.78.6 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=16953 DF PROTO=TCP SPT=53982 DPT=110 WINDOW=2920 RES=0x00 SYN URGP=0 [71119.987267] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=139.162.78.6 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=18804 DF PROTO=TCP SPT=55370 DPT=110 WINDOW=2920 RES=0x00 SYN URGP=0 [71120.996222] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=139.162.78.6 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=18805 DF PROTO=TCP SPT=55370 DPT=110 WINDOW=2920 RES=0x00 SYN URGP=0 [71123.158219] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=139.162.78.6 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=18806 DF PROTO=TCP SPT=55370 DPT=110 WINDOW=2920 RES=0x00 SYN URGP=0 [71128.895759] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=139.162.78.6 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=42014 DF PROTO=TCP SPT=34704 DPT=110 WINDOW=2920 RES=0x00 SYN URGP=0 [71129.897711] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=139.162.78.6 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=42015 DF PROTO=TCP SPT=34704 DPT=110 WINDOW=2920 RES=0x00 SYN URGP=0 [71148.317923] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=139.162.78.6 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=29632 DF PROTO=TCP SPT=60280 DPT=110 WINDOW=2920 RES=0x00 SYN URGP=0 [71166.540561] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=139.162.78.6 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=22274 DF PROTO=TCP SPT=52462 DPT=110 WINDOW=2920 RES=0x00 SYN URGP=0 [71193.794171] audit: type=1400 audit(1490073445.249:1479): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/14753" pid=14753 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [71193.794184] audit: type=1400 audit(1490073445.249:1480): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/14753" pid=14753 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [71193.794195] audit: type=1400 audit(1490073445.249:1481): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/14753" pid=14753 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [71193.794349] audit: type=1400 audit(1490073445.249:1482): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=14753 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [71193.794431] audit: type=1400 audit(1490073445.249:1483): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=14753 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [71193.794473] audit: type=1400 audit(1490073445.249:1484): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=14753 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [71193.794491] audit: type=1400 audit(1490073445.249:1485): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=14753 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [71193.794514] audit: type=1400 audit(1490073445.249:1486): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=14753 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [71193.794563] audit: type=1400 audit(1490073445.249:1487): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=14753 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [71193.794584] audit: type=1400 audit(1490073445.249:1488): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=14753 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [71221.296599] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=103.240.126.33 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=44 ID=36757 PROTO=TCP SPT=8234 DPT=23 WINDOW=40667 RES=0x00 SYN URGP=0 [71287.869778] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=79.21.18.54 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=39990 PROTO=TCP SPT=32854 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [71293.572686] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=139.162.88.20 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=54321 PROTO=TCP SPT=36201 DPT=21 WINDOW=65535 RES=0x00 SYN URGP=0 [71346.075537] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=61.167.123.43 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=34108 PROTO=TCP SPT=40744 DPT=23 WINDOW=8678 RES=0x00 SYN URGP=0 [71417.904934] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=2.184.137.171 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=31804 PROTO=TCP SPT=61735 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [71466.857584] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=50169 DF PROTO=TCP SPT=48792 DPT=89 WINDOW=29200 RES=0x00 SYN URGP=0 [71467.858876] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=50170 DF PROTO=TCP SPT=48792 DPT=89 WINDOW=29200 RES=0x00 SYN URGP=0 [71469.863410] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=50171 DF PROTO=TCP SPT=48792 DPT=89 WINDOW=29200 RES=0x00 SYN URGP=0 [71473.871237] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=50172 DF PROTO=TCP SPT=48792 DPT=89 WINDOW=29200 RES=0x00 SYN URGP=0 [71517.694853] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=111.251.99.9 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=104 ID=17362 PROTO=TCP SPT=6000 DPT=25 WINDOW=16384 RES=0x00 SYN URGP=0 [71580.233263] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=2.187.148.111 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=40211 PROTO=TCP SPT=62744 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [71589.239472] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=184.105.247.199 DST=151.236.37.52 LEN=30 TOS=0x00 PREC=0x00 TTL=55 ID=45840 DF PROTO=UDP SPT=54917 DPT=5351 LEN=10 [71590.816433] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=113.75.232.32 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=42644 PROTO=TCP SPT=55190 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [71599.812982] audit_printk_skb: 6 callbacks suppressed [71599.812985] audit: type=1400 audit(1490073851.266:1491): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/14869" pid=14869 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [71599.812995] audit: type=1400 audit(1490073851.266:1492): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/14869" pid=14869 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [71599.813007] audit: type=1400 audit(1490073851.266:1493): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/14869" pid=14869 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [71599.813440] audit: type=1400 audit(1490073851.266:1494): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/14869" pid=14869 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [71629.598157] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=89.211.80.143 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=56 ID=60666 PROTO=TCP SPT=25053 DPT=23 WINDOW=34824 RES=0x00 SYN URGP=0 [71734.485877] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=180.97.215.172 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=112 ID=256 PROTO=TCP SPT=64700 DPT=2433 WINDOW=16384 RES=0x00 SYN URGP=0 [71735.983796] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=171.250.199.225 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=47 ID=9218 PROTO=TCP SPT=26611 DPT=23 WINDOW=30179 RES=0x00 SYN URGP=0 [71744.493352] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=132.255.80.155 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x00 TTL=47 ID=45568 PROTO=TCP SPT=44003 DPT=23 WINDOW=7936 RES=0x00 SYN URGP=0 [71787.509632] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=107.179.45.134 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=256 PROTO=TCP SPT=12766 DPT=2375 WINDOW=16384 RES=0x00 SYN URGP=0 [71883.828828] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=106.51.7.232 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=47 ID=23979 PROTO=TCP SPT=55550 DPT=23 WINDOW=51950 RES=0x00 SYN URGP=0 [71946.327451] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=27.74.77.163 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=47 ID=9480 PROTO=TCP SPT=23932 DPT=23 WINDOW=40612 RES=0x00 SYN URGP=0 [72027.111716] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=181.230.121.165 DST=151.236.37.52 LEN=40 TOS=0x02 PREC=0x00 TTL=40 ID=53662 PROTO=TCP SPT=47372 DPT=23 WINDOW=16317 RES=0x00 SYN URGP=0 [72030.567661] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=114.35.43.223 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=18595 PROTO=TCP SPT=25945 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [72093.871587] audit: type=1400 audit(1490074345.324:1495): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20309" pid=20309 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [72093.871601] audit: type=1400 audit(1490074345.324:1496): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20309" pid=20309 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [72093.871613] audit: type=1400 audit(1490074345.324:1497): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20309" pid=20309 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [72093.871768] audit: type=1400 audit(1490074345.324:1498): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=20309 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [72093.871851] audit: type=1400 audit(1490074345.324:1499): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=20309 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [72093.871894] audit: type=1400 audit(1490074345.324:1500): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=20309 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [72093.871913] audit: type=1400 audit(1490074345.324:1501): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=20309 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [72093.871935] audit: type=1400 audit(1490074345.324:1502): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=20309 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [72093.872487] audit: type=1400 audit(1490074345.324:1503): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=20309 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [72093.872510] audit: type=1400 audit(1490074345.324:1504): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=20309 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [72166.451962] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.93.93.41 DST=151.236.37.52 LEN=438 TOS=0x00 PREC=0x00 TTL=55 ID=13419 DF PROTO=UDP SPT=5243 DPT=5060 LEN=418 [72172.274839] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=123.249.27.92 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=112 ID=256 PROTO=TCP SPT=54645 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 [72216.519557] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=2.134.196.239 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=632 DF PROTO=TCP SPT=58727 DPT=21 WINDOW=8192 RES=0x00 SYN URGP=0 [72219.526645] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=2.134.196.239 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=942 DF PROTO=TCP SPT=58727 DPT=21 WINDOW=8192 RES=0x00 SYN URGP=0 [72225.524177] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=2.134.196.239 DST=151.236.37.52 LEN=48 TOS=0x00 PREC=0x00 TTL=114 ID=1658 DF PROTO=TCP SPT=58727 DPT=21 WINDOW=8192 RES=0x00 SYN URGP=0 [72235.054553] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=184.105.139.67 DST=151.236.37.52 LEN=113 TOS=0x00 PREC=0x00 TTL=55 ID=65246 DF PROTO=UDP SPT=50527 DPT=161 LEN=93 [72325.507759] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=27.3.90.146 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=21735 PROTO=TCP SPT=30071 DPT=23 WINDOW=19023 RES=0x00 SYN URGP=0 [72374.566982] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=77.29.101.246 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=233 ID=49474 PROTO=TCP SPT=50974 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [72399.912314] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=122.156.28.129 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=31778 PROTO=TCP SPT=31436 DPT=2323 WINDOW=26844 RES=0x00 SYN URGP=0 [72404.484695] audit_printk_skb: 6 callbacks suppressed [72404.484698] audit: type=1400 audit(1490074655.940:1507): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20325" pid=20325 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [72404.484709] audit: type=1400 audit(1490074655.940:1508): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20325" pid=20325 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [72404.484720] audit: type=1400 audit(1490074655.940:1509): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20325" pid=20325 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [72404.485150] audit: type=1400 audit(1490074655.940:1510): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20325" pid=20325 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [72414.690367] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=190.62.1.66 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=25930 PROTO=TCP SPT=21831 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [72488.643032] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=89.163.144.91 DST=151.236.37.52 LEN=441 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=UDP SPT=5386 DPT=5060 LEN=421 [72502.819181] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=175.18.79.154 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=55511 PROTO=TCP SPT=47749 DPT=23 WINDOW=21621 RES=0x00 SYN URGP=0 [72523.751143] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=220.128.124.48 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=5373 PROTO=TCP SPT=51313 DPT=2323 WINDOW=55905 RES=0x00 SYN URGP=0 [72587.680775] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.230.47.41 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=4446 PROTO=TCP SPT=59921 DPT=3377 WINDOW=1024 RES=0x00 SYN URGP=0 [72619.095298] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=92.23.159.153 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=20486 PROTO=TCP SPT=18036 DPT=23 WINDOW=27484 RES=0x00 SYN URGP=0 [72698.254480] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=177.16.185.77 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x20 TTL=242 ID=17366 PROTO=TCP SPT=36335 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [72824.204876] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=178.46.5.135 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=17859 PROTO=TCP SPT=31224 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [72830.395485] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=178.167.75.65 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=55 ID=39086 PROTO=TCP SPT=34037 DPT=23 WINDOW=38629 RES=0x00 SYN URGP=0 [72993.974163] audit: type=1400 audit(1490075245.423:1511): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20427" pid=20427 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [72993.974176] audit: type=1400 audit(1490075245.423:1512): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20427" pid=20427 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [72993.974188] audit: type=1400 audit(1490075245.423:1513): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20427" pid=20427 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [72993.974340] audit: type=1400 audit(1490075245.423:1514): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=20427 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [72993.974423] audit: type=1400 audit(1490075245.423:1515): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=20427 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [72993.974466] audit: type=1400 audit(1490075245.423:1516): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=20427 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [72993.974485] audit: type=1400 audit(1490075245.423:1517): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=20427 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [72993.974509] audit: type=1400 audit(1490075245.423:1518): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=20427 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [72993.974562] audit: type=1400 audit(1490075245.423:1519): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=20427 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [72993.974584] audit: type=1400 audit(1490075245.423:1520): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=20427 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [73002.585679] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=179.186.226.135 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x20 TTL=52 ID=34369 PROTO=TCP SPT=13057 DPT=23 WINDOW=41608 RES=0x00 SYN URGP=0 [73007.159272] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=14.177.193.121 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=51344 PROTO=TCP SPT=10229 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [73068.765957] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=190.173.151.35 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x20 TTL=51 ID=35009 PROTO=TCP SPT=24408 DPT=23 WINDOW=26471 RES=0x00 SYN URGP=0 [73166.418239] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=117.6.197.170 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=8952 PROTO=TCP SPT=34919 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [73185.062721] audit_printk_skb: 6 callbacks suppressed [73185.062724] audit: type=1400 audit(1490075436.517:1523): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20441" pid=20441 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [73185.062736] audit: type=1400 audit(1490075436.517:1524): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20441" pid=20441 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [73185.062747] audit: type=1400 audit(1490075436.517:1525): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20441" pid=20441 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [73185.063179] audit: type=1400 audit(1490075436.517:1526): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20441" pid=20441 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [73218.271373] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=119.193.185.109 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=1732 PROTO=TCP SPT=62053 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [73226.741978] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=41.225.236.235 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=46 ID=1717 PROTO=TCP SPT=63536 DPT=23 WINDOW=32385 RES=0x00 SYN URGP=0 [73269.259515] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=122.116.172.185 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=15127 PROTO=TCP SPT=14451 DPT=23 WINDOW=5467 RES=0x00 SYN URGP=0 [73388.682045] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=27.75.235.145 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=238 ID=33168 PROTO=TCP SPT=43771 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [73421.269604] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=163.172.210.65 DST=151.236.37.52 LEN=438 TOS=0x08 PREC=0x00 TTL=52 ID=8612 DF PROTO=UDP SPT=5086 DPT=5060 LEN=418 [73465.946168] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=177.135.131.172 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=28390 PROTO=TCP SPT=58101 DPT=23 WINDOW=60418 RES=0x00 SYN URGP=0 [73477.195657] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=191.83.118.161 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x20 TTL=51 ID=25782 PROTO=TCP SPT=41235 DPT=2222 WINDOW=35297 RES=0x00 SYN URGP=0 [73490.883146] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=46876 DF PROTO=TCP SPT=56910 DPT=90 WINDOW=29200 RES=0x00 SYN URGP=0 [73491.886863] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=46877 DF PROTO=TCP SPT=56910 DPT=90 WINDOW=29200 RES=0x00 SYN URGP=0 [73493.888578] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=46878 DF PROTO=TCP SPT=56910 DPT=90 WINDOW=29200 RES=0x00 SYN URGP=0 [73497.900191] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=46879 DF PROTO=TCP SPT=56910 DPT=90 WINDOW=29200 RES=0x00 SYN URGP=0 [73576.245069] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=93.118.235.244 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=242 ID=61067 PROTO=TCP SPT=38353 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [73616.611270] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=178.220.225.101 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=52 ID=54476 PROTO=TCP SPT=41376 DPT=23 WINDOW=57296 RES=0x00 SYN URGP=0 [73677.513855] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=88.129.166.90 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=56039 PROTO=TCP SPT=3598 DPT=23 WINDOW=7708 RES=0x00 SYN URGP=0 [73863.795419] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=2.187.192.144 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=45963 PROTO=TCP SPT=20026 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [73894.036357] audit: type=1400 audit(1490076145.488:1527): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20483" pid=20483 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [73894.036370] audit: type=1400 audit(1490076145.488:1528): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20483" pid=20483 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [73894.036382] audit: type=1400 audit(1490076145.488:1529): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20483" pid=20483 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [73894.036534] audit: type=1400 audit(1490076145.488:1530): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=20483 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [73894.036616] audit: type=1400 audit(1490076145.488:1531): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=20483 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [73894.036657] audit: type=1400 audit(1490076145.488:1532): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=20483 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [73894.036675] audit: type=1400 audit(1490076145.488:1533): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=20483 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [73894.036698] audit: type=1400 audit(1490076145.488:1534): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=20483 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [73894.036748] audit: type=1400 audit(1490076145.488:1535): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=20483 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [73894.036770] audit: type=1400 audit(1490076145.488:1536): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=20483 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [73914.832232] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=88.254.84.196 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=36729 PROTO=TCP SPT=62413 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [73984.681688] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=96.68.84.61 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=13409 PROTO=TCP SPT=41500 DPT=23 WINDOW=24811 RES=0x00 SYN URGP=0 [73989.704950] audit_printk_skb: 6 callbacks suppressed [73989.704952] audit: type=1400 audit(1490076241.155:1539): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20488" pid=20488 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [73989.704964] audit: type=1400 audit(1490076241.155:1540): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20488" pid=20488 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [73989.704976] audit: type=1400 audit(1490076241.155:1541): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20488" pid=20488 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [73989.705412] audit: type=1400 audit(1490076241.155:1542): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20488" pid=20488 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [74010.959552] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=87.248.1.136 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x20 TTL=240 ID=54321 PROTO=TCP SPT=49769 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0 [74014.622661] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=220.123.41.92 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=49985 PROTO=TCP SPT=39634 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [74041.569844] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=180.97.106.37 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=235 ID=54321 PROTO=TCP SPT=53798 DPT=1701 WINDOW=65535 RES=0x00 SYN URGP=0 [74071.300726] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.99.241.146 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=57342 PROTO=TCP SPT=18810 DPT=23 WINDOW=21090 RES=0x00 SYN URGP=0 [74097.079512] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.99.241.146 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=57342 PROTO=TCP SPT=18810 DPT=23 WINDOW=21090 RES=0x00 SYN URGP=0 [74104.495551] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=211.54.151.77 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=432 PROTO=TCP SPT=45084 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [74118.615437] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.99.241.146 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=57342 PROTO=TCP SPT=18810 DPT=23 WINDOW=21090 RES=0x00 SYN URGP=0 [74119.864232] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.99.241.146 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=57342 PROTO=TCP SPT=18810 DPT=2323 WINDOW=21090 RES=0x00 SYN URGP=0 [74120.939356] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=185.35.62.17 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=60757 DPT=513 WINDOW=65535 RES=0x00 SYN URGP=0 [74170.621574] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=111.251.103.124 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=104 ID=16104 PROTO=TCP SPT=6000 DPT=25 WINDOW=16384 RES=0x00 SYN URGP=0 [74176.962648] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.99.241.146 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=57342 PROTO=TCP SPT=18810 DPT=23 WINDOW=21090 RES=0x00 SYN URGP=0 [74181.573381] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.99.241.146 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=57342 PROTO=TCP SPT=18810 DPT=2323 WINDOW=21090 RES=0x00 SYN URGP=0 [74188.381135] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.99.241.146 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=57342 PROTO=TCP SPT=18810 DPT=23 WINDOW=21090 RES=0x00 SYN URGP=0 [74226.989888] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.211.2.108 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=64661 PROTO=TCP SPT=54967 DPT=3351 WINDOW=1024 RES=0x00 SYN URGP=0 [74240.289199] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.99.241.146 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=57342 PROTO=TCP SPT=18810 DPT=23 WINDOW=21090 RES=0x00 SYN URGP=0 [74277.876946] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.99.241.146 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=57342 PROTO=TCP SPT=18810 DPT=23 WINDOW=21090 RES=0x00 SYN URGP=0 [74287.396920] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=188.17.37.196 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=34609 PROTO=TCP SPT=21625 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [74289.462781] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=184.105.247.236 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=34370 DPT=27017 WINDOW=65535 RES=0x00 SYN URGP=0 [74296.395969] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.230.47.41 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=54668 PROTO=TCP SPT=59921 DPT=3347 WINDOW=1024 RES=0x00 SYN URGP=0 [74306.932742] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.99.241.146 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=57342 PROTO=TCP SPT=18810 DPT=23 WINDOW=21090 RES=0x00 SYN URGP=0 [74334.423836] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.99.241.146 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=57342 PROTO=TCP SPT=18810 DPT=23 WINDOW=21090 RES=0x00 SYN URGP=0 [74337.139910] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.99.241.146 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=57342 PROTO=TCP SPT=18810 DPT=2323 WINDOW=21090 RES=0x00 SYN URGP=0 [74348.738137] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=184.105.139.125 DST=151.236.37.52 LEN=29 TOS=0x00 PREC=0x00 TTL=55 ID=10720 DF PROTO=UDP SPT=5553 DPT=19 LEN=9 [74349.080109] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.99.241.146 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=57342 PROTO=TCP SPT=18810 DPT=23 WINDOW=21090 RES=0x00 SYN URGP=0 [74369.275715] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=60513 DF PROTO=TCP SPT=25810 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [74372.284016] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=28556 DF PROTO=TCP SPT=25810 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [74374.525252] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.99.241.146 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=57342 PROTO=TCP SPT=18810 DPT=23 WINDOW=21090 RES=0x00 SYN URGP=0 [74378.281681] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=6505 DF PROTO=TCP SPT=25810 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [74399.337346] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.99.241.146 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=57342 PROTO=TCP SPT=18810 DPT=23 WINDOW=21090 RES=0x00 SYN URGP=0 [74446.684821] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=210.18.172.231 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=18472 DF PROTO=TCP SPT=57703 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [74447.681376] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=210.18.172.231 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=18473 DF PROTO=TCP SPT=57703 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [74461.702307] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=210.18.172.231 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=18476 DF PROTO=TCP SPT=57703 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [74481.741743] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.99.241.146 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=57342 PROTO=TCP SPT=18810 DPT=23 WINDOW=21090 RES=0x00 SYN URGP=0 [74510.580518] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.99.241.146 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=57342 PROTO=TCP SPT=18810 DPT=23 WINDOW=21090 RES=0x00 SYN URGP=0 [74562.363971] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=110.55.69.121 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=61339 PROTO=TCP SPT=55795 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [74605.331183] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.99.241.146 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=57342 PROTO=TCP SPT=18810 DPT=23 WINDOW=21090 RES=0x00 SYN URGP=0 [74615.301368] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.99.241.146 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=57342 PROTO=TCP SPT=18810 DPT=23 WINDOW=21090 RES=0x00 SYN URGP=0 [74641.762246] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=209.136.228.90 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=789 PROTO=TCP SPT=56529 DPT=25 WINDOW=1024 RES=0x00 SYN URGP=0 [74663.832104] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=120.14.200.76 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=26318 PROTO=TCP SPT=58479 DPT=23 WINDOW=49231 RES=0x00 SYN URGP=0 [74670.975919] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=120.14.200.76 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=26318 PROTO=TCP SPT=58479 DPT=23 WINDOW=49231 RES=0x00 SYN URGP=0 [74681.010999] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.99.241.146 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=57342 PROTO=TCP SPT=18810 DPT=23 WINDOW=21090 RES=0x00 SYN URGP=0 [74698.786679] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=171.101.153.111 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x20 TTL=240 ID=45485 PROTO=TCP SPT=51684 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [74741.147741] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=1.34.175.253 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=61736 PROTO=TCP SPT=56549 DPT=23 WINDOW=47501 RES=0x00 SYN URGP=0 [74794.138044] audit: type=1400 audit(1490077045.591:1543): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20613" pid=20613 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [74794.138056] audit: type=1400 audit(1490077045.591:1544): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20613" pid=20613 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [74794.138068] audit: type=1400 audit(1490077045.591:1545): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20613" pid=20613 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [74794.138221] audit: type=1400 audit(1490077045.591:1546): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=20613 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [74794.138304] audit: type=1400 audit(1490077045.591:1547): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=20613 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [74794.138346] audit: type=1400 audit(1490077045.591:1548): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=20613 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [74794.138365] audit: type=1400 audit(1490077045.591:1549): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=20613 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [74794.138387] audit: type=1400 audit(1490077045.591:1550): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=20613 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [74794.138436] audit: type=1400 audit(1490077045.591:1551): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=20613 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [74794.138457] audit: type=1400 audit(1490077045.591:1552): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=20613 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [74805.784981] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.99.241.146 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=57342 PROTO=TCP SPT=18810 DPT=23 WINDOW=21090 RES=0x00 SYN URGP=0 [74805.909478] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.99.241.146 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=57342 PROTO=TCP SPT=18810 DPT=23 WINDOW=21090 RES=0x00 SYN URGP=0 [74808.535913] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=31.177.155.238 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=56557 PROTO=TCP SPT=34407 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [74816.746758] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.99.241.146 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=57342 PROTO=TCP SPT=18810 DPT=23 WINDOW=21090 RES=0x00 SYN URGP=0 [74829.643637] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.99.241.146 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=57342 PROTO=TCP SPT=18810 DPT=23 WINDOW=21090 RES=0x00 SYN URGP=0 [74847.646957] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=114.33.50.176 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=61508 PROTO=TCP SPT=17967 DPT=23 WINDOW=35038 RES=0x00 SYN URGP=0 [74853.850764] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.99.241.146 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=57342 PROTO=TCP SPT=18810 DPT=23 WINDOW=21090 RES=0x00 SYN URGP=0 [74877.092928] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.99.241.146 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=57342 PROTO=TCP SPT=18810 DPT=2323 WINDOW=21090 RES=0x00 SYN URGP=0 [74927.627618] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=118.252.226.163 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=57401 PROTO=TCP SPT=35059 DPT=23 WINDOW=2396 RES=0x00 SYN URGP=0 [74927.962389] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=60.191.38.77 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=113 ID=62116 DF PROTO=TCP SPT=41987 DPT=3306 WINDOW=29200 RES=0x00 SYN URGP=0 [74965.067478] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.99.241.146 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=57342 PROTO=TCP SPT=18810 DPT=23 WINDOW=21090 RES=0x00 SYN URGP=0 [74969.220234] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.99.241.146 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=57342 PROTO=TCP SPT=18810 DPT=23 WINDOW=21090 RES=0x00 SYN URGP=0 [75021.979664] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=46.166.161.129 DST=151.236.37.52 LEN=48 TOS=0x00 PREC=0x00 TTL=121 ID=60140 PROTO=TCP SPT=7274 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0 [75026.437442] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.136.170.3 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=60807 PROTO=TCP SPT=58285 DPT=23 WINDOW=61885 RES=0x00 SYN URGP=0 [75077.414060] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=114.35.158.247 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=65424 PROTO=TCP SPT=56779 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [75081.211819] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=77.239.178.6 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=35431 PROTO=TCP SPT=47421 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [75177.086005] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=79.117.137.153 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=57 ID=24295 PROTO=TCP SPT=17088 DPT=23 WINDOW=63600 RES=0x00 SYN URGP=0 [75203.900799] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.99.241.146 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=57342 PROTO=TCP SPT=18810 DPT=23 WINDOW=21090 RES=0x00 SYN URGP=0 [75376.339454] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.211.0.11 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=24643 PROTO=TCP SPT=51927 DPT=3399 WINDOW=1024 RES=0x00 SYN URGP=0 [75377.235042] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=116.108.3.212 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=237 ID=14345 PROTO=TCP SPT=64897 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [75408.101173] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=185.44.230.98 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=60904 PROTO=TCP SPT=48428 DPT=23 WINDOW=18628 RES=0x00 SYN URGP=0 [75452.717280] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=107.179.126.94 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=256 PROTO=TCP SPT=22431 DPT=1433 WINDOW=16384 RES=0x00 SYN URGP=0 [75456.128263] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.211.2.108 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=3360 PROTO=TCP SPT=54967 DPT=3350 WINDOW=1024 RES=0x00 SYN URGP=0 [75491.360957] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=61.57.95.216 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=44 ID=54098 PROTO=TCP SPT=50949 DPT=23 WINDOW=54549 RES=0x00 SYN URGP=0 [75515.015396] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=32108 DF PROTO=TCP SPT=52946 DPT=91 WINDOW=29200 RES=0x00 SYN URGP=0 [75516.016054] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=32109 DF PROTO=TCP SPT=52946 DPT=91 WINDOW=29200 RES=0x00 SYN URGP=0 [75518.020589] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=32110 DF PROTO=TCP SPT=52946 DPT=91 WINDOW=29200 RES=0x00 SYN URGP=0 [75522.025673] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=32111 DF PROTO=TCP SPT=52946 DPT=91 WINDOW=29200 RES=0x00 SYN URGP=0 [75573.072481] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=184.105.247.250 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=51946 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0 [75575.071853] audit_printk_skb: 24 callbacks suppressed [75575.071856] audit: type=1400 audit(1490077826.521:1561): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20660" pid=20660 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [75575.071867] audit: type=1400 audit(1490077826.521:1562): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20660" pid=20660 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [75575.071878] audit: type=1400 audit(1490077826.521:1563): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20660" pid=20660 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [75575.072350] audit: type=1400 audit(1490077826.521:1564): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20660" pid=20660 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [75662.467405] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=167.60.61.159 DST=151.236.37.52 LEN=44 TOS=0x08 PREC=0x00 TTL=45 ID=18059 PROTO=TCP SPT=47720 DPT=23 WINDOW=35928 RES=0x00 SYN URGP=0 [75687.853864] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=151.31.147.21 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=42904 PROTO=TCP SPT=31957 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [75694.237041] audit: type=1400 audit(1490077945.687:1565): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20787" pid=20787 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [75694.237054] audit: type=1400 audit(1490077945.687:1566): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20787" pid=20787 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [75694.237065] audit: type=1400 audit(1490077945.687:1567): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20787" pid=20787 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [75694.237223] audit: type=1400 audit(1490077945.687:1568): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=20787 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [75694.237308] audit: type=1400 audit(1490077945.687:1569): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=20787 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [75694.237352] audit: type=1400 audit(1490077945.687:1570): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=20787 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [75694.237370] audit: type=1400 audit(1490077945.687:1571): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=20787 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [75694.237394] audit: type=1400 audit(1490077945.687:1572): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=20787 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [75694.237443] audit: type=1400 audit(1490077945.687:1573): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=20787 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [75694.237464] audit: type=1400 audit(1490077945.687:1574): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=20787 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [75795.477459] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=92.114.158.193 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x20 TTL=242 ID=24798 PROTO=TCP SPT=5523 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [75834.948092] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=110.248.211.80 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=10312 PROTO=TCP SPT=14939 DPT=23 WINDOW=10315 RES=0x00 SYN URGP=0 [75924.444577] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=85.101.192.76 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=242 ID=2851 PROTO=TCP SPT=56839 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [75953.594656] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=58.209.115.17 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=29948 PROTO=TCP SPT=38033 DPT=23 WINDOW=41633 RES=0x00 SYN URGP=0 [76024.012463] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=216.218.206.105 DST=151.236.37.52 LEN=29 TOS=0x00 PREC=0x00 TTL=55 ID=65029 DF PROTO=UDP SPT=2790 DPT=1434 LEN=9 [76036.559311] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=121.176.32.243 DST=151.236.37.52 LEN=122 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=UDP SPT=27111 DPT=1900 LEN=102 [76071.992606] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=119.138.18.32 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=38917 PROTO=TCP SPT=37415 DPT=23 WINDOW=20991 RES=0x00 SYN URGP=0 [76203.465687] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=163.172.210.65 DST=151.236.37.52 LEN=437 TOS=0x08 PREC=0x00 TTL=52 ID=5392 DF PROTO=UDP SPT=5090 DPT=5060 LEN=417 [76274.297872] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=114.33.69.46 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=30915 PROTO=TCP SPT=47652 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [76275.370058] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=186.45.252.204 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=12400 PROTO=TCP SPT=54270 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [76297.135210] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=203.222.30.20 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=31755 PROTO=TCP SPT=56571 DPT=23 WINDOW=51171 RES=0x00 SYN URGP=0 [76315.003132] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=89.248.167.131 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=121 ID=36967 PROTO=TCP SPT=13443 DPT=5984 WINDOW=35880 RES=0x00 SYN URGP=0 [76316.480193] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=92.44.5.229 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=58822 PROTO=TCP SPT=38190 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [76355.293611] audit_printk_skb: 6 callbacks suppressed [76355.293614] audit: type=1400 audit(1490078606.745:1577): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20891" pid=20891 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [76355.293625] audit: type=1400 audit(1490078606.745:1578): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20891" pid=20891 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [76355.293636] audit: type=1400 audit(1490078606.745:1579): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20891" pid=20891 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [76355.294066] audit: type=1400 audit(1490078606.745:1580): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20891" pid=20891 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [76407.343335] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=171.248.131.36 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=51881 PROTO=TCP SPT=21223 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [76438.816636] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=1.122.38.182 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x40 TTL=237 ID=40905 PROTO=TCP SPT=61472 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [76496.244289] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=121.55.187.241 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=31482 PROTO=TCP SPT=49387 DPT=23 WINDOW=60867 RES=0x00 SYN URGP=0 [76509.072425] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=36.74.207.137 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=49 ID=39156 PROTO=TCP SPT=53059 DPT=81 WINDOW=1460 RES=0x00 SYN URGP=0 [76534.593209] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=39.45.115.116 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=31315 PROTO=TCP SPT=12756 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [76534.712913] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=153.99.123.185 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=17900 DF PROTO=TCP SPT=3379 DPT=23 WINDOW=5808 RES=0x00 SYN URGP=0 [76537.708134] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=153.99.123.185 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=17901 DF PROTO=TCP SPT=3379 DPT=23 WINDOW=5808 RES=0x00 SYN URGP=0 [76551.960425] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=27.74.119.146 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=47 ID=59032 PROTO=TCP SPT=56263 DPT=23 WINDOW=42423 RES=0x00 SYN URGP=0 [76594.336856] audit: type=1400 audit(1490078845.787:1581): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20905" pid=20905 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [76594.336869] audit: type=1400 audit(1490078845.787:1582): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20905" pid=20905 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [76594.336880] audit: type=1400 audit(1490078845.787:1583): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20905" pid=20905 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [76594.337034] audit: type=1400 audit(1490078845.787:1584): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=20905 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [76594.337119] audit: type=1400 audit(1490078845.787:1585): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=20905 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [76594.337161] audit: type=1400 audit(1490078845.787:1586): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=20905 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [76594.337178] audit: type=1400 audit(1490078845.787:1587): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=20905 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [76594.337202] audit: type=1400 audit(1490078845.787:1588): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=20905 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [76594.337253] audit: type=1400 audit(1490078845.787:1589): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=20905 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [76594.337274] audit: type=1400 audit(1490078845.787:1590): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=20905 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [76656.293543] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=187.156.21.164 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=48084 PROTO=TCP SPT=11157 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [76860.453946] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=90.164.136.200 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=58991 PROTO=TCP SPT=6015 DPT=23 WINDOW=12096 RES=0x00 SYN URGP=0 [76930.112555] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=89.163.242.160 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x00 TTL=243 ID=50438 DF PROTO=TCP SPT=13905 DPT=82 WINDOW=512 RES=0x00 SYN URGP=0 [76973.382861] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=168.1.128.37 DST=151.236.37.52 LEN=125 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=UDP SPT=56418 DPT=1900 LEN=105 [77030.089029] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=185.163.109.66 DST=151.236.37.52 LEN=810 TOS=0x10 PREC=0x00 TTL=118 ID=51590 PROTO=UDP SPT=53730 DPT=3702 LEN=790 [77075.018607] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=175.200.222.65 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=3682 PROTO=TCP SPT=16494 DPT=23 WINDOW=30302 RES=0x00 SYN URGP=0 [77160.153806] audit_printk_skb: 6 callbacks suppressed [77160.153809] audit: type=1400 audit(1490079411.602:1593): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20941" pid=20941 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [77160.153821] audit: type=1400 audit(1490079411.602:1594): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20941" pid=20941 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [77160.153832] audit: type=1400 audit(1490079411.602:1595): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20941" pid=20941 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [77160.154277] audit: type=1400 audit(1490079411.602:1596): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20941" pid=20941 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [77170.876625] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=117.5.104.43 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=48 ID=43003 PROTO=TCP SPT=27207 DPT=23 WINDOW=30807 RES=0x00 SYN URGP=0 [77198.814115] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=71.6.142.85 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=54321 PROTO=TCP SPT=53238 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 [77244.631747] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=171.247.198.45 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=44 ID=38108 PROTO=TCP SPT=49910 DPT=23 WINDOW=13119 RES=0x00 SYN URGP=0 [77315.725915] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.211.2.108 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=13380 PROTO=TCP SPT=54967 DPT=3355 WINDOW=1024 RES=0x00 SYN URGP=0 [77330.475830] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=24.76.165.1 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=19752 PROTO=TCP SPT=33074 DPT=23 WINDOW=44058 RES=0x00 SYN URGP=0 [77376.417028] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=184.105.139.102 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=55 ID=60856 DF PROTO=UDP SPT=38253 DPT=123 LEN=20 [77423.076605] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=189.27.172.174 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x20 TTL=242 ID=59061 PROTO=TCP SPT=3871 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [77440.445713] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=121.131.144.166 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=18204 PROTO=TCP SPT=20865 DPT=23 WINDOW=12273 RES=0x00 SYN URGP=0 [77459.199340] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=14.171.146.49 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=50 ID=9496 DF PROTO=TCP SPT=55939 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0 [77472.388914] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=189.189.95.160 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=8889 PROTO=TCP SPT=35139 DPT=23 WINDOW=39763 RES=0x00 SYN URGP=0 [77494.224260] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=163.172.143.149 DST=151.236.37.52 LEN=434 TOS=0x00 PREC=0x00 TTL=48 ID=50751 DF PROTO=UDP SPT=5115 DPT=5060 LEN=414 [77494.365129] audit: type=1400 audit(1490079745.815:1597): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20960" pid=20960 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [77494.365146] audit: type=1400 audit(1490079745.815:1598): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20960" pid=20960 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [77494.365162] audit: type=1400 audit(1490079745.815:1599): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/20960" pid=20960 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [77494.365318] audit: type=1400 audit(1490079745.815:1600): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=20960 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [77494.365403] audit: type=1400 audit(1490079745.815:1601): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=20960 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [77494.365446] audit: type=1400 audit(1490079745.815:1602): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=20960 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [77494.365463] audit: type=1400 audit(1490079745.815:1603): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=20960 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [77494.365487] audit: type=1400 audit(1490079745.815:1604): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=20960 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [77494.365537] audit: type=1400 audit(1490079745.815:1605): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=20960 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [77494.365558] audit: type=1400 audit(1490079745.815:1606): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=20960 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [77502.719898] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=78.107.6.15 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=34731 PROTO=TCP SPT=8330 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [77539.921939] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=797 DF PROTO=TCP SPT=53496 DPT=1024 WINDOW=29200 RES=0x00 SYN URGP=0 [77540.926005] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=798 DF PROTO=TCP SPT=53496 DPT=1024 WINDOW=29200 RES=0x00 SYN URGP=0 [77542.928837] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=799 DF PROTO=TCP SPT=53496 DPT=1024 WINDOW=29200 RES=0x00 SYN URGP=0 [77546.933355] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=800 DF PROTO=TCP SPT=53496 DPT=1024 WINDOW=29200 RES=0x00 SYN URGP=0 [77564.161452] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=211.194.66.11 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=51327 PROTO=TCP SPT=2593 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [77609.777324] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=179.233.24.60 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=47449 PROTO=TCP SPT=44356 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [77624.355837] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=219.216.78.129 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=233 ID=54321 PROTO=TCP SPT=33974 DPT=102 WINDOW=65535 RES=0x00 SYN URGP=0 [77629.772048] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=221.192.219.102 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=39652 PROTO=TCP SPT=62593 DPT=23 WINDOW=34970 RES=0x00 SYN URGP=0 [77649.431846] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.239.11.194 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=44668 PROTO=TCP SPT=64450 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [77770.168027] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=119.200.109.47 DST=151.236.37.52 LEN=122 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=UDP SPT=34274 DPT=1900 LEN=102 [77783.825285] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=104.255.70.247 DST=151.236.37.52 LEN=66 TOS=0x00 PREC=0x00 TTL=53 ID=0 DF PROTO=UDP SPT=44159 DPT=161 LEN=46 [77795.141636] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=177.80.93.185 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=10075 PROTO=TCP SPT=55936 DPT=23 WINDOW=45200 RES=0x00 SYN URGP=0 [77804.730496] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=38630 DF PROTO=TCP SPT=47341 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [77807.734251] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=8709 DF PROTO=TCP SPT=47341 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [77813.731002] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=5934 DF PROTO=TCP SPT=47341 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [77913.379024] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=187.58.117.229 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x20 TTL=50 ID=46564 PROTO=TCP SPT=16792 DPT=23 WINDOW=14048 RES=0x00 SYN URGP=0 [77965.130224] audit_printk_skb: 6 callbacks suppressed [77965.130227] audit: type=1400 audit(1490080216.577:1609): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21054" pid=21054 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [77965.130239] audit: type=1400 audit(1490080216.577:1610): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21054" pid=21054 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [77965.130250] audit: type=1400 audit(1490080216.577:1611): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21054" pid=21054 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [77965.130676] audit: type=1400 audit(1490080216.577:1612): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21054" pid=21054 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [78171.268457] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=186.5.215.167 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=22234 PROTO=TCP SPT=47646 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [78193.732275] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=59.127.194.205 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=41144 PROTO=TCP SPT=62651 DPT=23 WINDOW=59051 RES=0x00 SYN URGP=0 [78216.270746] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.211.2.108 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=24818 PROTO=TCP SPT=54967 DPT=3352 WINDOW=1024 RES=0x00 SYN URGP=0 [78248.412984] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=1.34.179.3 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=18185 PROTO=TCP SPT=11169 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [78262.997081] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=203.222.30.20 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=31755 PROTO=TCP SPT=56571 DPT=23 WINDOW=51171 RES=0x00 SYN URGP=0 [78377.165052] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.211.0.11 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=59977 PROTO=TCP SPT=51927 DPT=3396 WINDOW=1024 RES=0x00 SYN URGP=0 [78394.467066] audit: type=1400 audit(1490080645.916:1613): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21089" pid=21089 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [78394.467079] audit: type=1400 audit(1490080645.916:1614): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21089" pid=21089 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [78394.467091] audit: type=1400 audit(1490080645.916:1615): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21089" pid=21089 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [78394.467251] audit: type=1400 audit(1490080645.916:1616): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=21089 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [78394.467341] audit: type=1400 audit(1490080645.916:1617): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=21089 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [78394.467391] audit: type=1400 audit(1490080645.916:1618): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=21089 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [78394.467411] audit: type=1400 audit(1490080645.916:1619): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=21089 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [78394.467439] audit: type=1400 audit(1490080645.916:1620): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=21089 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [78394.467496] audit: type=1400 audit(1490080645.916:1621): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=21089 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [78394.467519] audit: type=1400 audit(1490080645.916:1622): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=21089 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [78551.815196] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=116.104.243.4 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=47 ID=52015 PROTO=TCP SPT=16495 DPT=2323 WINDOW=27975 RES=0x00 SYN URGP=0 [78569.730644] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=182.180.146.195 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=49 ID=18271 PROTO=TCP SPT=3316 DPT=23 WINDOW=13260 RES=0x00 SYN URGP=0 [78570.014278] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=39.45.149.25 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=3026 PROTO=TCP SPT=29521 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [78626.433116] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=79.21.177.192 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=51382 PROTO=TCP SPT=4540 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [78659.474759] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=198.20.69.98 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=115 ID=26683 PROTO=TCP SPT=58022 DPT=51106 WINDOW=16406 RES=0x00 SYN URGP=0 [78674.626422] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=120.146.41.16 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x40 TTL=47 ID=34 PROTO=TCP SPT=43609 DPT=23 WINDOW=45377 RES=0x00 SYN URGP=0 [78746.719940] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=82.146.45.25 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=56 ID=43645 PROTO=TCP SPT=54832 DPT=23 WINDOW=57344 RES=0x00 SYN URGP=0 [78770.006031] audit_printk_skb: 6 callbacks suppressed [78770.006034] audit: type=1400 audit(1490081021.455:1625): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21221" pid=21221 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [78770.006045] audit: type=1400 audit(1490081021.455:1626): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21221" pid=21221 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [78770.006057] audit: type=1400 audit(1490081021.455:1627): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21221" pid=21221 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [78770.006500] audit: type=1400 audit(1490081021.455:1628): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21221" pid=21221 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [78986.616351] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=163.172.210.65 DST=151.236.37.52 LEN=439 TOS=0x08 PREC=0x00 TTL=52 ID=61877 DF PROTO=UDP SPT=5068 DPT=5060 LEN=419 [79058.106151] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=171.226.161.245 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=235 ID=41528 PROTO=TCP SPT=56265 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [79146.312986] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=59.127.11.158 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=23643 PROTO=TCP SPT=32616 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [79180.614770] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=62.148.227.145 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=51545 PROTO=TCP SPT=34181 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [79183.930078] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=83.83.129.165 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=242 ID=7770 PROTO=TCP SPT=44383 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [79294.555015] audit: type=1400 audit(1490081546.001:1629): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21262" pid=21262 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [79294.555029] audit: type=1400 audit(1490081546.001:1630): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21262" pid=21262 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [79294.555040] audit: type=1400 audit(1490081546.001:1631): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21262" pid=21262 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [79294.555199] audit: type=1400 audit(1490081546.001:1632): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=21262 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [79294.555291] audit: type=1400 audit(1490081546.001:1633): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=21262 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [79294.555340] audit: type=1400 audit(1490081546.001:1634): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=21262 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [79294.555360] audit: type=1400 audit(1490081546.001:1635): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=21262 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [79294.555386] audit: type=1400 audit(1490081546.001:1636): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=21262 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [79294.555438] audit: type=1400 audit(1490081546.001:1637): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=21262 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [79294.555462] audit: type=1400 audit(1490081546.001:1638): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=21262 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [79341.303510] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=177.17.197.81 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x20 TTL=241 ID=49495 PROTO=TCP SPT=29071 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [79374.516539] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=181.56.164.220 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=2929 PROTO=TCP SPT=29404 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [79425.962896] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.230.47.41 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=8279 PROTO=TCP SPT=59921 DPT=3360 WINDOW=1024 RES=0x00 SYN URGP=0 [79481.708536] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=101.250.186.235 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=40 ID=36587 PROTO=TCP SPT=16224 DPT=23 WINDOW=9336 RES=0x00 SYN URGP=0 [79563.978818] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=31497 DF PROTO=TCP SPT=46530 DPT=2000 WINDOW=29200 RES=0x00 SYN URGP=0 [79564.982116] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=31498 DF PROTO=TCP SPT=46530 DPT=2000 WINDOW=29200 RES=0x00 SYN URGP=0 [79566.986855] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=31499 DF PROTO=TCP SPT=46530 DPT=2000 WINDOW=29200 RES=0x00 SYN URGP=0 [79570.994727] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=31500 DF PROTO=TCP SPT=46530 DPT=2000 WINDOW=29200 RES=0x00 SYN URGP=0 [79574.721989] audit_printk_skb: 6 callbacks suppressed [79574.721992] audit: type=1400 audit(1490081826.170:1641): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21281" pid=21281 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [79574.722004] audit: type=1400 audit(1490081826.170:1642): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21281" pid=21281 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [79574.722015] audit: type=1400 audit(1490081826.170:1643): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21281" pid=21281 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [79574.722446] audit: type=1400 audit(1490081826.170:1644): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21281" pid=21281 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [79616.744318] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=121.254.76.126 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=1478 PROTO=TCP SPT=26685 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [79662.407597] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=14.161.165.31 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=33867 PROTO=TCP SPT=27283 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [79693.329423] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=163.172.185.147 DST=151.236.37.52 LEN=440 TOS=0x00 PREC=0x00 TTL=50 ID=34240 DF PROTO=UDP SPT=5075 DPT=5060 LEN=420 [79783.431562] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=185.35.62.208 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=60722 DPT=1911 WINDOW=65535 RES=0x00 SYN URGP=0 [79804.949196] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=190.214.152.73 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=45 ID=34777 PROTO=TCP SPT=3691 DPT=23 WINDOW=10086 RES=0x00 SYN URGP=0 [79886.829712] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=184.105.247.215 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=57434 DPT=6379 WINDOW=65535 RES=0x00 SYN URGP=0 [79901.536969] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=184.105.139.73 DST=151.236.37.52 LEN=125 TOS=0x00 PREC=0x00 TTL=55 ID=20366 DF PROTO=UDP SPT=6135 DPT=1900 LEN=105 [80073.875552] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=14.187.226.9 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=50518 PROTO=TCP SPT=5490 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [80122.367175] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=202.182.90.73 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x40 TTL=238 ID=8662 PROTO=TCP SPT=10603 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [80160.642400] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=186.50.161.85 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=244 ID=25119 PROTO=TCP SPT=31238 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [80194.630500] audit: type=1400 audit(1490082446.077:1645): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21383" pid=21383 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [80194.630514] audit: type=1400 audit(1490082446.077:1646): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21383" pid=21383 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [80194.630532] audit: type=1400 audit(1490082446.077:1647): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21383" pid=21383 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [80194.630688] audit: type=1400 audit(1490082446.077:1648): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=21383 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [80194.630775] audit: type=1400 audit(1490082446.077:1649): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=21383 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [80194.630817] audit: type=1400 audit(1490082446.077:1650): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=21383 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [80194.630835] audit: type=1400 audit(1490082446.077:1651): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=21383 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [80194.630859] audit: type=1400 audit(1490082446.077:1652): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=21383 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [80194.630909] audit: type=1400 audit(1490082446.077:1653): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=21383 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [80194.630930] audit: type=1400 audit(1490082446.077:1654): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=21383 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [80209.486490] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=89.248.166.146 DST=151.236.37.52 LEN=48 TOS=0x00 PREC=0x00 TTL=121 ID=60989 PROTO=TCP SPT=48834 DPT=2083 WINDOW=65535 RES=0x00 SYN URGP=0 [80246.384606] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.230.47.41 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=35148 PROTO=TCP SPT=59921 DPT=3366 WINDOW=1024 RES=0x00 SYN URGP=0 [80287.514956] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=2.179.221.37 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=14174 PROTO=TCP SPT=52965 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [80306.719882] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=89.163.146.72 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x00 TTL=243 ID=52440 PROTO=TCP SPT=51762 DPT=8043 WINDOW=1024 RES=0x00 SYN URGP=0 [80379.401730] audit_printk_skb: 6 callbacks suppressed [80379.401733] audit: type=1400 audit(1490082630.848:1657): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21418" pid=21418 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [80379.401745] audit: type=1400 audit(1490082630.848:1658): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21418" pid=21418 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [80379.401756] audit: type=1400 audit(1490082630.848:1659): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21418" pid=21418 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [80379.402183] audit: type=1400 audit(1490082630.848:1660): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21418" pid=21418 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [80632.549146] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=83.67.183.219 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=55 ID=11955 PROTO=TCP SPT=2134 DPT=23 WINDOW=15974 RES=0x00 SYN URGP=0 [80650.571860] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.234.29.104 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=27232 PROTO=TCP SPT=16255 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [80768.819633] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=27.35.236.185 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=57955 PROTO=TCP SPT=59440 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [80966.135278] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=72.178.233.67 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=43 ID=56522 PROTO=TCP SPT=21705 DPT=23 WINDOW=31201 RES=0x00 SYN URGP=0 [81017.038679] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.211.0.11 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=56344 PROTO=TCP SPT=51895 DPT=3394 WINDOW=1024 RES=0x00 SYN URGP=0 [81052.156159] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.230.47.41 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=10271 PROTO=TCP SPT=59921 DPT=3351 WINDOW=1024 RES=0x00 SYN URGP=0 [81094.718016] audit: type=1400 audit(1490083346.163:1661): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21466" pid=21466 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [81094.718030] audit: type=1400 audit(1490083346.163:1662): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21466" pid=21466 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [81094.718041] audit: type=1400 audit(1490083346.163:1663): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21466" pid=21466 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [81094.718197] audit: type=1400 audit(1490083346.163:1664): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=21466 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [81094.718280] audit: type=1400 audit(1490083346.163:1665): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=21466 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [81094.718323] audit: type=1400 audit(1490083346.163:1666): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=21466 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [81094.718342] audit: type=1400 audit(1490083346.163:1667): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=21466 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [81094.718365] audit: type=1400 audit(1490083346.163:1668): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=21466 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [81094.718412] audit: type=1400 audit(1490083346.163:1669): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=21466 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [81094.718435] audit: type=1400 audit(1490083346.163:1670): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=21466 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [81159.933077] audit_printk_skb: 6 callbacks suppressed [81159.933080] audit: type=1400 audit(1490083411.380:1673): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21472" pid=21472 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [81159.933092] audit: type=1400 audit(1490083411.380:1674): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21472" pid=21472 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [81159.933104] audit: type=1400 audit(1490083411.380:1675): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21472" pid=21472 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [81159.933535] audit: type=1400 audit(1490083411.380:1676): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21472" pid=21472 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [81199.705776] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.211.2.108 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=14250 PROTO=TCP SPT=54967 DPT=3353 WINDOW=1024 RES=0x00 SYN URGP=0 [81201.522753] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=183.68.187.15 DST=151.236.37.52 LEN=48 TOS=0x00 PREC=0x00 TTL=114 ID=27750 DF PROTO=TCP SPT=56965 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 [81204.463300] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=183.68.187.15 DST=151.236.37.52 LEN=48 TOS=0x00 PREC=0x00 TTL=114 ID=31552 DF PROTO=TCP SPT=56965 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 [81222.410842] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=78.183.250.176 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=47 ID=50688 PROTO=TCP SPT=46248 DPT=23 WINDOW=33432 RES=0x00 SYN URGP=0 [81231.641858] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.211.0.11 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=17462 PROTO=TCP SPT=51895 DPT=3395 WINDOW=1024 RES=0x00 SYN URGP=0 [81234.412308] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=44679 DF PROTO=TCP SPT=48013 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [81237.412095] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=36470 DF PROTO=TCP SPT=48013 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [81243.407274] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=55578 DF PROTO=TCP SPT=48013 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [81330.927311] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=191.96.249.97 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=49438 PROTO=TCP SPT=59823 DPT=8080 WINDOW=1024 RES=0x00 SYN URGP=0 [81354.536001] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=187.41.118.33 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=17405 PROTO=TCP SPT=9591 DPT=2222 WINDOW=51120 RES=0x00 SYN URGP=0 [81384.380524] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=103.242.2.71 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=117 ID=256 PROTO=TCP SPT=62572 DPT=8080 WINDOW=16384 RES=0x00 SYN URGP=0 [81397.528311] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.223.133.13 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=58154 PROTO=TCP SPT=44805 DPT=2789 WINDOW=1024 RES=0x00 SYN URGP=0 [81437.087283] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=113.186.94.173 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=61778 PROTO=TCP SPT=53159 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [81515.723997] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=92.9.117.165 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=61374 PROTO=TCP SPT=56598 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [81545.214716] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=60.249.199.170 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=19446 PROTO=TCP SPT=64383 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [81586.112043] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=80.82.70.26 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=47 PROTO=TCP SPT=52401 DPT=23 WINDOW=1024 RES=0x00 SYN URGP=0 [81587.165496] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=47556 DF PROTO=TCP SPT=37428 DPT=3000 WINDOW=29200 RES=0x00 SYN URGP=0 [81588.167033] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=47557 DF PROTO=TCP SPT=37428 DPT=3000 WINDOW=29200 RES=0x00 SYN URGP=0 [81590.170502] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=47558 DF PROTO=TCP SPT=37428 DPT=3000 WINDOW=29200 RES=0x00 SYN URGP=0 [81593.724853] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=82.78.105.164 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=57 ID=35229 PROTO=TCP SPT=60106 DPT=23 WINDOW=28697 RES=0x00 SYN URGP=0 [81594.175686] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=47559 DF PROTO=TCP SPT=37428 DPT=3000 WINDOW=29200 RES=0x00 SYN URGP=0 [81613.640667] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=200.104.224.41 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=49 ID=3665 PROTO=TCP SPT=56170 DPT=23 WINDOW=58450 RES=0x00 SYN URGP=0 [81745.860129] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=49.4.142.179 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=113 ID=256 PROTO=TCP SPT=44573 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 [81760.553065] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=177.157.210.151 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x20 TTL=50 ID=16712 PROTO=TCP SPT=48766 DPT=2323 WINDOW=49166 RES=0x00 SYN URGP=0 [81761.042140] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=182.119.249.206 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=24076 PROTO=TCP SPT=4250 DPT=2222 WINDOW=56916 RES=0x00 SYN URGP=0 [81763.332073] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=163.172.210.65 DST=151.236.37.52 LEN=438 TOS=0x08 PREC=0x00 TTL=52 ID=37366 DF PROTO=UDP SPT=5078 DPT=5060 LEN=418 [81844.854931] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=88.249.252.77 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=22474 PROTO=TCP SPT=18676 DPT=23 WINDOW=60795 RES=0x00 SYN URGP=0 [81872.225271] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=106.1.210.2 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=46 ID=48757 PROTO=TCP SPT=43486 DPT=23 WINDOW=48078 RES=0x00 SYN URGP=0 [81940.407119] audit: type=1400 audit(1490084191.851:1677): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21587" pid=21587 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [81940.407132] audit: type=1400 audit(1490084191.851:1678): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21587" pid=21587 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [81940.407144] audit: type=1400 audit(1490084191.851:1679): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21587" pid=21587 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [81940.407575] audit: type=1400 audit(1490084191.851:1680): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21587" pid=21587 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [81994.816987] audit: type=1400 audit(1490084246.264:1681): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21598" pid=21598 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [81994.817000] audit: type=1400 audit(1490084246.264:1682): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21598" pid=21598 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [81994.817011] audit: type=1400 audit(1490084246.264:1683): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21598" pid=21598 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [81994.817162] audit: type=1400 audit(1490084246.264:1684): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=21598 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [81994.817246] audit: type=1400 audit(1490084246.264:1685): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=21598 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [81994.817291] audit: type=1400 audit(1490084246.264:1686): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=21598 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [81994.817309] audit: type=1400 audit(1490084246.264:1687): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=21598 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [81994.817333] audit: type=1400 audit(1490084246.264:1688): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=21598 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [81994.817384] audit: type=1400 audit(1490084246.264:1689): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=21598 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [81994.817405] audit: type=1400 audit(1490084246.264:1690): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=21598 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [82053.857772] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=184.105.247.204 DST=151.236.37.52 LEN=80 TOS=0x00 PREC=0x00 TTL=55 ID=15347 DF PROTO=UDP SPT=6835 DPT=389 LEN=60 [82091.134532] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=139.162.22.163 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=54321 PROTO=TCP SPT=56019 DPT=3128 WINDOW=65535 RES=0x00 SYN URGP=0 [82378.960386] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=89.163.242.118 DST=151.236.37.52 LEN=443 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=UDP SPT=5312 DPT=5060 LEN=423 [82409.153962] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=39.89.223.119 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=13402 PROTO=TCP SPT=42126 DPT=23 WINDOW=39862 RES=0x00 SYN URGP=0 [82424.788016] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=195.39.86.85 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=1106 PROTO=TCP SPT=43827 DPT=4444 WINDOW=1024 RES=0x00 SYN URGP=0 [82537.992158] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=190.249.171.241 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=17960 PROTO=TCP SPT=5057 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [82704.199454] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=134.35.198.237 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=12312 PROTO=TCP SPT=26890 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [82745.052929] audit_printk_skb: 6 callbacks suppressed [82745.052932] audit: type=1400 audit(1490084996.494:1693): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21757" pid=21757 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [82745.052944] audit: type=1400 audit(1490084996.494:1694): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21757" pid=21757 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [82745.052955] audit: type=1400 audit(1490084996.494:1695): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21757" pid=21757 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [82745.053390] audit: type=1400 audit(1490084996.494:1696): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21757" pid=21757 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [82786.317146] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=187.18.106.2 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=45 ID=5440 PROTO=TCP SPT=19485 DPT=23 WINDOW=12909 RES=0x00 SYN URGP=0 [82844.120130] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=2.33.41.12 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=33902 PROTO=TCP SPT=44048 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [82894.822709] audit: type=1400 audit(1490085146.265:1697): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21775" pid=21775 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [82894.822722] audit: type=1400 audit(1490085146.265:1698): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21775" pid=21775 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [82894.822733] audit: type=1400 audit(1490085146.265:1699): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21775" pid=21775 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [82894.822888] audit: type=1400 audit(1490085146.265:1700): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=21775 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [82894.822974] audit: type=1400 audit(1490085146.265:1701): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=21775 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [82894.823018] audit: type=1400 audit(1490085146.265:1702): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=21775 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [82894.823038] audit: type=1400 audit(1490085146.265:1703): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=21775 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [82894.823063] audit: type=1400 audit(1490085146.265:1704): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=21775 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [82894.823115] audit: type=1400 audit(1490085146.265:1705): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=21775 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [82894.823138] audit: type=1400 audit(1490085146.265:1706): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=21775 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [82899.309092] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=190.85.67.194 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=45 ID=17195 PROTO=TCP SPT=32085 DPT=23 WINDOW=20605 RES=0x00 SYN URGP=0 [82902.399508] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=94.255.24.97 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=54 ID=21288 PROTO=TCP SPT=31238 DPT=23 WINDOW=17726 RES=0x00 SYN URGP=0 [82908.378336] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=153.99.182.36 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=63243 DF PROTO=TCP SPT=18819 DPT=22 WINDOW=0 RES=0x00 RST URGP=0 [82918.794136] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=153.99.182.36 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=64257 DF PROTO=TCP SPT=18819 DPT=22 WINDOW=0 RES=0x00 RST URGP=0 [82931.889123] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=203.222.30.20 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=31755 PROTO=TCP SPT=56571 DPT=23 WINDOW=51171 RES=0x00 SYN URGP=0 [82944.161521] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=176.58.124.35 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=54321 PROTO=TCP SPT=36330 DPT=9100 WINDOW=65535 RES=0x00 SYN URGP=0 [83016.573375] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.102.225.54 DST=151.236.37.52 LEN=44 TOS=0x08 PREC=0x20 TTL=49 ID=12831 PROTO=TCP SPT=56050 DPT=23 WINDOW=5123 RES=0x00 SYN URGP=0 [83159.555730] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=94.102.49.193 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=121 ID=37198 PROTO=TCP SPT=23183 DPT=37777 WINDOW=16399 RES=0x00 SYN URGP=0 [83202.452742] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=171.92.208.116 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=106 ID=256 PROTO=TCP SPT=6000 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 [83216.670376] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=80.82.77.139 DST=151.236.37.52 LEN=36 TOS=0x00 PREC=0x00 TTL=120 ID=46623 PROTO=UDP SPT=57711 DPT=4800 LEN=16 [83268.956544] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=49.4.142.177 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=114 ID=256 PROTO=TCP SPT=45926 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 [83353.463755] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=117.7.176.135 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=44644 PROTO=TCP SPT=48846 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [83393.725525] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.223.133.13 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=53843 PROTO=TCP SPT=44805 DPT=2389 WINDOW=1024 RES=0x00 SYN URGP=0 [83471.805254] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=139.162.110.42 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=TCP SPT=39956 DPT=3306 WINDOW=65535 RES=0x00 SYN URGP=0 [83546.719661] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=223.13.64.220 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=21443 PROTO=TCP SPT=18015 DPT=23 WINDOW=34711 RES=0x00 SYN URGP=0 [83549.945898] audit_printk_skb: 6 callbacks suppressed [83549.945901] audit: type=1400 audit(1490085801.392:1709): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21881" pid=21881 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [83549.945913] audit: type=1400 audit(1490085801.392:1710): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21881" pid=21881 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [83549.945924] audit: type=1400 audit(1490085801.392:1711): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21881" pid=21881 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [83549.946363] audit: type=1400 audit(1490085801.392:1712): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21881" pid=21881 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [83583.769510] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=114.34.57.76 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=28600 PROTO=TCP SPT=37646 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [83611.069830] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=55949 DF PROTO=TCP SPT=41318 DPT=5000 WINDOW=29200 RES=0x00 SYN URGP=0 [83612.070872] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=55950 DF PROTO=TCP SPT=41318 DPT=5000 WINDOW=29200 RES=0x00 SYN URGP=0 [83614.075227] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=55951 DF PROTO=TCP SPT=41318 DPT=5000 WINDOW=29200 RES=0x00 SYN URGP=0 [83618.089211] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=55952 DF PROTO=TCP SPT=41318 DPT=5000 WINDOW=29200 RES=0x00 SYN URGP=0 [83623.098075] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=114.35.151.221 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=57833 PROTO=TCP SPT=46338 DPT=23 WINDOW=62389 RES=0x00 SYN URGP=0 [83748.080013] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=187.35.146.37 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x20 TTL=50 ID=46374 PROTO=TCP SPT=10891 DPT=23 WINDOW=14491 RES=0x00 SYN URGP=0 [83794.873187] audit: type=1400 audit(1490086046.317:1713): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21898" pid=21898 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [83794.873200] audit: type=1400 audit(1490086046.317:1714): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21898" pid=21898 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [83794.873211] audit: type=1400 audit(1490086046.317:1715): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21898" pid=21898 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [83794.873363] audit: type=1400 audit(1490086046.317:1716): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=21898 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [83794.873445] audit: type=1400 audit(1490086046.317:1717): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=21898 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [83794.873487] audit: type=1400 audit(1490086046.317:1718): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=21898 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [83794.873505] audit: type=1400 audit(1490086046.317:1719): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=21898 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [83794.873530] audit: type=1400 audit(1490086046.317:1720): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=21898 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [83794.873583] audit: type=1400 audit(1490086046.317:1721): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=21898 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [83794.873610] audit: type=1400 audit(1490086046.317:1722): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=21898 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [83800.210986] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=186.67.221.76 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=60816 PROTO=TCP SPT=31022 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [83899.392847] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=59.120.155.202 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=60939 PROTO=TCP SPT=1926 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [83903.236437] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=123.249.12.243 DST=151.236.37.52 LEN=37 TOS=0x00 PREC=0x00 TTL=47 ID=0 DF PROTO=UDP SPT=34460 DPT=123 LEN=17 [84067.640736] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=180.246.27.208 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=49 ID=39429 PROTO=TCP SPT=62665 DPT=23 WINDOW=6713 RES=0x00 SYN URGP=0 [84245.354185] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=193.253.223.205 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=51 ID=33976 PROTO=TCP SPT=47737 DPT=23 WINDOW=8182 RES=0x00 SYN URGP=0 [84245.847770] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=189.15.131.154 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=11824 PROTO=TCP SPT=37644 DPT=23 WINDOW=33052 RES=0x00 SYN URGP=0 [84330.289143] audit_printk_skb: 6 callbacks suppressed [84330.289146] audit: type=1400 audit(1490086581.733:1725): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21943" pid=21943 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [84330.289158] audit: type=1400 audit(1490086581.733:1726): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21943" pid=21943 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [84330.289170] audit: type=1400 audit(1490086581.733:1727): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21943" pid=21943 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [84330.289596] audit: type=1400 audit(1490086581.733:1728): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21943" pid=21943 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [84339.537756] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=112.86.89.186 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=35657 PROTO=TCP SPT=17862 DPT=23 WINDOW=24286 RES=0x00 SYN URGP=0 [84405.647588] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=130.204.8.209 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=243 ID=63833 PROTO=TCP SPT=45212 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [84417.047271] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=171.235.111.111 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=44 ID=26039 PROTO=TCP SPT=52215 DPT=23 WINDOW=15903 RES=0x00 SYN URGP=0 [84427.554735] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=88.247.91.186 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=26967 PROTO=TCP SPT=12139 DPT=23 WINDOW=57320 RES=0x00 SYN URGP=0 [84430.125226] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=182.73.147.210 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=57 ID=39494 PROTO=TCP SPT=4475 DPT=23 WINDOW=10059 RES=0x00 SYN URGP=0 [84495.397812] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=153.99.182.36 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=59489 DF PROTO=TCP SPT=64349 DPT=22 WINDOW=0 RES=0x00 RST URGP=0 [84498.042813] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=153.99.182.36 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=59749 DF PROTO=TCP SPT=64349 DPT=22 WINDOW=0 RES=0x00 RST URGP=0 [84513.932810] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=153.99.182.36 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=61596 DF PROTO=TCP SPT=64349 DPT=22 WINDOW=0 RES=0x00 RST URGP=0 [84551.151823] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=163.172.210.65 DST=151.236.37.52 LEN=438 TOS=0x08 PREC=0x00 TTL=52 ID=44285 DF PROTO=UDP SPT=5087 DPT=5060 LEN=418 [84675.338097] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=59371 DF PROTO=TCP SPT=2860 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [84678.335296] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=8562 DF PROTO=TCP SPT=2860 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [84684.336692] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=21000 DF PROTO=TCP SPT=2860 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [84694.907070] audit: type=1400 audit(1490086946.352:1729): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21967" pid=21967 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [84694.907088] audit: type=1400 audit(1490086946.352:1730): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21967" pid=21967 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [84694.907104] audit: type=1400 audit(1490086946.352:1731): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/21967" pid=21967 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [84694.907313] audit: type=1400 audit(1490086946.352:1732): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=21967 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [84694.907433] audit: type=1400 audit(1490086946.352:1733): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=21967 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [84694.907499] audit: type=1400 audit(1490086946.352:1734): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=21967 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [84694.907533] audit: type=1400 audit(1490086946.352:1735): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=21967 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [84694.907573] audit: type=1400 audit(1490086946.352:1736): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=21967 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [84694.907650] audit: type=1400 audit(1490086946.352:1737): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=21967 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [84694.907688] audit: type=1400 audit(1490086946.352:1738): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=21967 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [84713.457696] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=223.198.218.192 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=21888 PROTO=TCP SPT=44953 DPT=23 WINDOW=48521 RES=0x00 SYN URGP=0 [84714.564894] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=223.198.218.192 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=21888 PROTO=TCP SPT=44953 DPT=23 WINDOW=48521 RES=0x00 SYN URGP=0 [84716.643243] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=223.198.218.192 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=21888 PROTO=TCP SPT=44953 DPT=23 WINDOW=48521 RES=0x00 SYN URGP=0 [84726.373929] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=223.198.218.192 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=21888 PROTO=TCP SPT=44953 DPT=23 WINDOW=48521 RES=0x00 SYN URGP=0 [84731.687201] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=223.198.218.192 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=21888 PROTO=TCP SPT=44953 DPT=23 WINDOW=48521 RES=0x00 SYN URGP=0 [84778.711837] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=112.166.251.121 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=20632 PROTO=TCP SPT=46205 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [84784.223865] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=27.77.1.119 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=11909 PROTO=TCP SPT=19866 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [84880.878057] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=198.176.55.48 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=53 ID=9496 DF PROTO=TCP SPT=4935 DPT=3389 WINDOW=65535 RES=0x00 SYN URGP=0 [84906.119608] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=78.181.56.17 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=36501 PROTO=TCP SPT=19661 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [84926.701042] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=171.247.154.129 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=235 ID=7108 PROTO=TCP SPT=7062 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [85056.595823] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=171.235.215.246 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=44 ID=44530 PROTO=TCP SPT=28605 DPT=23 WINDOW=17045 RES=0x00 SYN URGP=0 [85135.130484] audit_printk_skb: 6 callbacks suppressed [85135.130488] audit: type=1400 audit(1490087386.572:1741): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22128" pid=22128 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [85135.130500] audit: type=1400 audit(1490087386.572:1742): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22128" pid=22128 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [85135.130511] audit: type=1400 audit(1490087386.572:1743): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22128" pid=22128 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [85135.130951] audit: type=1400 audit(1490087386.572:1744): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22128" pid=22128 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [85187.018711] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=27.74.139.13 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=237 ID=6574 PROTO=TCP SPT=17475 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [85272.009000] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=203.109.66.214 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=27684 PROTO=TCP SPT=40438 DPT=23 WINDOW=60046 RES=0x00 SYN URGP=0 [85325.541110] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.230.47.41 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=22847 PROTO=TCP SPT=59921 DPT=3380 WINDOW=1024 RES=0x00 SYN URGP=0 [85435.644270] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=142.4.17.60 DST=151.236.37.52 LEN=434 TOS=0x00 PREC=0x00 TTL=49 ID=0 DF PROTO=UDP SPT=5382 DPT=9070 LEN=414 [85458.595006] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=80.82.77.139 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=120 ID=48877 PROTO=TCP SPT=58022 DPT=3542 WINDOW=48552 RES=0x00 SYN URGP=0 [85471.907971] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=200.87.60.78 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x20 TTL=50 ID=34671 PROTO=TCP SPT=60013 DPT=23 WINDOW=56413 RES=0x00 SYN URGP=0 [85546.969661] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.197.234.79 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=2632 PROTO=TCP SPT=47447 DPT=3306 WINDOW=1024 RES=0x00 SYN URGP=0 [85554.173317] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=49.4.142.81 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=106 ID=256 PROTO=TCP SPT=6000 DPT=3389 WINDOW=16384 RES=0x00 SYN URGP=0 [85573.436782] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=190.227.253.118 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=62744 PROTO=TCP SPT=31738 DPT=23 WINDOW=27114 RES=0x00 SYN URGP=0 [85594.916631] audit: type=1400 audit(1490087846.357:1745): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22164" pid=22164 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [85594.916644] audit: type=1400 audit(1490087846.357:1746): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22164" pid=22164 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [85594.916655] audit: type=1400 audit(1490087846.357:1747): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22164" pid=22164 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [85594.916817] audit: type=1400 audit(1490087846.357:1748): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=22164 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [85594.916906] audit: type=1400 audit(1490087846.357:1749): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=22164 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [85594.916955] audit: type=1400 audit(1490087846.357:1750): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=22164 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [85594.916975] audit: type=1400 audit(1490087846.357:1751): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=22164 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [85594.916998] audit: type=1400 audit(1490087846.357:1752): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=22164 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [85594.917053] audit: type=1400 audit(1490087846.357:1753): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=22164 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [85594.917075] audit: type=1400 audit(1490087846.357:1754): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=22164 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [85620.588637] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=79.21.177.192 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=27669 PROTO=TCP SPT=35470 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [85634.188098] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=58063 DF PROTO=TCP SPT=43516 DPT=6001 WINDOW=29200 RES=0x00 SYN URGP=0 [85635.191418] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=58064 DF PROTO=TCP SPT=43516 DPT=6001 WINDOW=29200 RES=0x00 SYN URGP=0 [85637.197967] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=58065 DF PROTO=TCP SPT=43516 DPT=6001 WINDOW=29200 RES=0x00 SYN URGP=0 [85641.206449] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=58066 DF PROTO=TCP SPT=43516 DPT=6001 WINDOW=29200 RES=0x00 SYN URGP=0 [85649.075106] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.211.0.11 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=12049 PROTO=TCP SPT=51895 DPT=3392 WINDOW=1024 RES=0x00 SYN URGP=0 [85705.970031] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=113.254.123.17 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=105 ID=256 PROTO=TCP SPT=6000 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 [85800.577425] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=201.14.243.147 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=60606 PROTO=TCP SPT=14129 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [85846.574739] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=42.119.36.115 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=19140 PROTO=TCP SPT=43076 DPT=23 WINDOW=40564 RES=0x00 SYN URGP=0 [85915.618182] audit_printk_skb: 6 callbacks suppressed [85915.618185] audit: type=1400 audit(1490088167.062:1757): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22186" pid=22186 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [85915.618196] audit: type=1400 audit(1490088167.062:1758): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22186" pid=22186 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [85915.618208] audit: type=1400 audit(1490088167.062:1759): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22186" pid=22186 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [85915.618638] audit: type=1400 audit(1490088167.062:1760): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22186" pid=22186 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [85953.466810] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=119.126.203.110 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=12771 PROTO=TCP SPT=3277 DPT=23 WINDOW=15606 RES=0x00 SYN URGP=0 [85958.436757] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=217.175.1.85 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=246 ID=18556 PROTO=TCP SPT=41151 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [85968.082666] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=78.188.198.116 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=53060 PROTO=TCP SPT=24895 DPT=23 WINDOW=8015 RES=0x00 SYN URGP=0 [86011.595326] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=108.29.94.54 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=12958 PROTO=TCP SPT=49904 DPT=23 WINDOW=16480 RES=0x00 SYN URGP=0 [86117.834121] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=185.35.62.56 DST=151.236.37.52 LEN=70 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=60894 DPT=161 LEN=50 [86118.638758] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=114.34.56.225 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=44162 PROTO=TCP SPT=57461 DPT=23 WINDOW=56750 RES=0x00 SYN URGP=0 [86190.449550] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=83.66.172.55 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=233 ID=29798 PROTO=TCP SPT=48180 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [86228.042917] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=106.1.41.196 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=46 ID=25977 PROTO=TCP SPT=2560 DPT=23 WINDOW=15408 RES=0x00 SYN URGP=0 [86243.475514] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=220.132.93.97 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=34645 PROTO=TCP SPT=3345 DPT=23 WINDOW=7937 RES=0x00 SYN URGP=0 [86318.239729] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=114.34.56.225 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=44162 PROTO=TCP SPT=57461 DPT=23 WINDOW=56750 RES=0x00 SYN URGP=0 [86391.695084] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=114.34.56.225 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=44162 PROTO=TCP SPT=57461 DPT=23 WINDOW=56750 RES=0x00 SYN URGP=0 [86402.514580] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=94.102.53.189 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=7078 PROTO=TCP SPT=55767 DPT=554 WINDOW=1024 RES=0x00 SYN URGP=0 [86494.962568] audit: type=1400 audit(1490088746.401:1761): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22340" pid=22340 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [86494.962582] audit: type=1400 audit(1490088746.401:1762): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22340" pid=22340 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [86494.962593] audit: type=1400 audit(1490088746.401:1763): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22340" pid=22340 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [86494.962801] audit: type=1400 audit(1490088746.401:1764): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=22340 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [86494.962881] audit: type=1400 audit(1490088746.401:1765): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22166" pid=22340 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [86494.962902] audit: type=1400 audit(1490088746.401:1766): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22166" pid=22340 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [86494.962919] audit: type=1400 audit(1490088746.401:1767): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=22340 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [86494.962962] audit: type=1400 audit(1490088746.401:1768): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=22340 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [86494.962981] audit: type=1400 audit(1490088746.401:1769): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=22340 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [86494.963003] audit: type=1400 audit(1490088746.401:1770): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=22340 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [86513.952787] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=80.55.207.13 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=243 ID=48142 PROTO=TCP SPT=47557 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [86538.973362] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=141.212.122.22 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=54321 PROTO=TCP SPT=33961 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 [86538.973397] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=141.212.122.23 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=54321 PROTO=TCP SPT=36182 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 [86546.294811] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=180.150.177.114 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=235 ID=54321 PROTO=TCP SPT=49561 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0 [86553.583196] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=45.125.223.74 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=60023 PROTO=TCP SPT=2878 DPT=23 WINDOW=52423 RES=0x00 SYN URGP=0 [86566.574612] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=195.154.182.238 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=8544 DF PROTO=TCP SPT=253 DPT=50804 WINDOW=512 RES=0x00 SYN URGP=0 [86602.716279] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=114.34.56.225 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=44162 PROTO=TCP SPT=57461 DPT=23 WINDOW=56750 RES=0x00 SYN URGP=0 [86604.870902] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=188.26.123.77 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=248 ID=9146 PROTO=TCP SPT=9995 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [86651.006578] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=23.27.127.246 DST=151.236.37.52 LEN=64 TOS=0x00 PREC=0x00 TTL=120 ID=65535 DF PROTO=TCP SPT=4445 DPT=135 WINDOW=65535 RES=0x00 SYN URGP=0 [86691.885226] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=177.32.193.50 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=3240 PROTO=TCP SPT=42032 DPT=23 WINDOW=39688 RES=0x00 SYN URGP=0 [86704.650009] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=78.181.101.63 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=33313 PROTO=TCP SPT=42174 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [86706.938445] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=41.32.179.245 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=51 ID=13584 PROTO=TCP SPT=26657 DPT=23 WINDOW=5713 RES=0x00 SYN URGP=0 [86716.365131] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=123.249.79.241 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=103 ID=256 PROTO=TCP SPT=6000 DPT=1433 WINDOW=16384 RES=0x00 SYN URGP=0 [86720.374728] audit_printk_skb: 12 callbacks suppressed [86720.374731] audit: type=1400 audit(1490088971.818:1775): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22353" pid=22353 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [86720.374743] audit: type=1400 audit(1490088971.818:1776): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22353" pid=22353 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [86720.374755] audit: type=1400 audit(1490088971.818:1777): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22353" pid=22353 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [86720.375197] audit: type=1400 audit(1490088971.818:1778): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22353" pid=22353 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [86725.580275] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=122.116.46.85 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=61111 PROTO=TCP SPT=18791 DPT=23 WINDOW=27975 RES=0x00 SYN URGP=0 [86744.027933] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=114.34.56.225 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=44162 PROTO=TCP SPT=57461 DPT=23 WINDOW=56750 RES=0x00 SYN URGP=0 [86755.803068] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=189.231.254.57 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=49 ID=43161 PROTO=TCP SPT=52114 DPT=23 WINDOW=46562 RES=0x00 SYN URGP=0 [86788.488574] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=114.34.56.225 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=44162 PROTO=TCP SPT=57461 DPT=23 WINDOW=56750 RES=0x00 SYN URGP=0 [87023.164620] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=116.104.249.221 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=64345 PROTO=TCP SPT=51220 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [87064.648212] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=1.34.180.90 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=14295 PROTO=TCP SPT=2895 DPT=23 WINDOW=6495 RES=0x00 SYN URGP=0 [87068.543747] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=71.6.165.200 DST=151.236.37.52 LEN=40 TOS=0x10 PREC=0x00 TTL=115 ID=12297 PROTO=TCP SPT=46640 DPT=10000 WINDOW=27436 RES=0x00 SYN URGP=0 [87120.851732] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=116.74.97.24 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=977 PROTO=TCP SPT=3230 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [87144.686950] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=184.105.247.247 DST=151.236.37.52 LEN=74 TOS=0x00 PREC=0x00 TTL=55 ID=49973 DF PROTO=UDP SPT=24608 DPT=5353 LEN=54 [87147.817239] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=117.41.229.53 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=104 ID=256 PROTO=TCP SPT=6000 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0 [87230.095518] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=83.209.66.231 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=46931 PROTO=TCP SPT=19156 DPT=23 WINDOW=20940 RES=0x00 SYN URGP=0 [87283.633029] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=117.195.155.178 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=21900 PROTO=TCP SPT=7604 DPT=23 WINDOW=62785 RES=0x00 SYN URGP=0 [87314.176973] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=123.3.203.201 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x40 TTL=240 ID=7543 PROTO=TCP SPT=40755 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [87316.062196] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=163.172.210.65 DST=151.236.37.52 LEN=439 TOS=0x08 PREC=0x00 TTL=52 ID=17833 DF PROTO=UDP SPT=5086 DPT=5060 LEN=419 [87374.404055] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=219.68.251.227 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=43974 PROTO=TCP SPT=13395 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [87395.039640] audit: type=1400 audit(1490089646.480:1779): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22466" pid=22466 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [87395.039653] audit: type=1400 audit(1490089646.480:1780): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22466" pid=22466 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [87395.039665] audit: type=1400 audit(1490089646.480:1781): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22466" pid=22466 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [87395.039824] audit: type=1400 audit(1490089646.480:1782): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=22466 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [87395.039914] audit: type=1400 audit(1490089646.480:1783): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=22466 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [87395.039964] audit: type=1400 audit(1490089646.480:1784): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=22466 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [87395.039974] audit: type=1400 audit(1490089646.480:1785): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22342" pid=22466 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [87395.040031] audit: type=1400 audit(1490089646.480:1786): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22342" pid=22466 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [87395.040221] audit: type=1400 audit(1490089646.480:1787): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=22466 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [87395.040265] audit: type=1400 audit(1490089646.480:1788): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=22466 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [87442.897119] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=27.76.116.172 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=238 ID=20829 PROTO=TCP SPT=57272 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [87452.499524] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=108.46.61.31 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=37908 PROTO=TCP SPT=54082 DPT=23 WINDOW=49490 RES=0x00 SYN URGP=0 [87455.789186] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=168.1.128.38 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=9266 PROTO=TCP SPT=8236 DPT=25 WINDOW=1024 RES=0x00 SYN URGP=0 [87525.194048] audit_printk_skb: 12 callbacks suppressed [87525.194051] audit: type=1400 audit(1490089776.634:1793): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22474" pid=22474 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [87525.194063] audit: type=1400 audit(1490089776.634:1794): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22474" pid=22474 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [87525.194075] audit: type=1400 audit(1490089776.634:1795): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22474" pid=22474 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [87525.194509] audit: type=1400 audit(1490089776.634:1796): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22474" pid=22474 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [87541.069327] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=171.235.111.111 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=44 ID=26039 PROTO=TCP SPT=52215 DPT=23 WINDOW=15903 RES=0x00 SYN URGP=0 [87653.776945] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=188.16.29.170 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=9783 PROTO=TCP SPT=40713 DPT=2222 WINDOW=65381 RES=0x00 SYN URGP=0 [87656.282026] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=47582 DF PROTO=TCP SPT=37388 DPT=6002 WINDOW=29200 RES=0x00 SYN URGP=0 [87657.283093] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=47583 DF PROTO=TCP SPT=37388 DPT=6002 WINDOW=29200 RES=0x00 SYN URGP=0 [87659.287257] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=47584 DF PROTO=TCP SPT=37388 DPT=6002 WINDOW=29200 RES=0x00 SYN URGP=0 [87663.296086] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=47585 DF PROTO=TCP SPT=37388 DPT=6002 WINDOW=29200 RES=0x00 SYN URGP=0 [87726.272928] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=202.88.93.176 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=39115 PROTO=TCP SPT=51472 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [87817.052811] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=101.108.118.79 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=30046 PROTO=TCP SPT=13763 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [87844.619701] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=186.45.129.41 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=23359 PROTO=TCP SPT=6994 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [87925.498469] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=178.35.56.226 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=24511 PROTO=TCP SPT=58133 DPT=23 WINDOW=60188 RES=0x00 SYN URGP=0 [87961.048227] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=27.64.15.105 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=235 ID=42756 PROTO=TCP SPT=9879 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [88043.960033] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=58.236.116.168 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=29284 PROTO=TCP SPT=31532 DPT=23 WINDOW=2376 RES=0x00 SYN URGP=0 [88054.031337] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=14.200.141.235 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=10950 PROTO=TCP SPT=27306 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [88130.345062] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=15198 DF PROTO=TCP SPT=13019 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [88133.339327] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=13934 DF PROTO=TCP SPT=13019 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [88139.344566] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=173.70.100.50 DST=151.236.37.52 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=31429 DF PROTO=TCP SPT=13019 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 [88295.130516] audit: type=1400 audit(1490090546.570:1797): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22804" pid=22804 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [88295.130529] audit: type=1400 audit(1490090546.570:1798): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22804" pid=22804 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [88295.130542] audit: type=1400 audit(1490090546.570:1799): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22804" pid=22804 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [88295.130706] audit: type=1400 audit(1490090546.570:1800): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=22804 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [88295.130811] audit: type=1400 audit(1490090546.570:1801): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=22804 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [88295.130856] audit: type=1400 audit(1490090546.570:1802): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=22804 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [88295.130874] audit: type=1400 audit(1490090546.570:1803): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22470" pid=22804 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [88295.130895] audit: type=1400 audit(1490090546.570:1804): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22470" pid=22804 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [88295.130909] audit: type=1400 audit(1490090546.570:1805): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=22804 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [88295.130932] audit: type=1400 audit(1490090546.570:1806): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=22804 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [88324.711590] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=216.158.238.170 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=29042 PROTO=TCP SPT=65535 DPT=8545 WINDOW=1024 RES=0x00 SYN URGP=0 [88330.165335] audit_printk_skb: 12 callbacks suppressed [88330.165338] audit: type=1400 audit(1490090581.603:1811): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22809" pid=22809 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [88330.165349] audit: type=1400 audit(1490090581.603:1812): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22809" pid=22809 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [88330.165360] audit: type=1400 audit(1490090581.603:1813): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22809" pid=22809 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [88330.165785] audit: type=1400 audit(1490090581.603:1814): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22809" pid=22809 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [88352.067429] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=89.163.144.91 DST=151.236.37.52 LEN=442 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=UDP SPT=5161 DPT=5060 LEN=422 [88368.800965] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=27.190.228.57 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=29548 PROTO=TCP SPT=49171 DPT=23 WINDOW=60731 RES=0x00 SYN URGP=0 [88381.756136] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.230.47.41 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=9876 PROTO=TCP SPT=59921 DPT=3371 WINDOW=1024 RES=0x00 SYN URGP=0 [88579.015030] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=80.184.5.121 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=15419 PROTO=TCP SPT=7515 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [88696.051210] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=105.228.95.14 DST=151.236.37.52 LEN=40 TOS=0x14 PREC=0x00 TTL=244 ID=61793 PROTO=TCP SPT=28051 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [88743.853700] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=92.42.106.189 DST=151.236.37.52 LEN=440 TOS=0x00 PREC=0x00 TTL=56 ID=5570 DF PROTO=UDP SPT=5726 DPT=5060 LEN=420 [88839.224033] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=41.38.45.219 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=36667 PROTO=TCP SPT=25247 DPT=23 WINDOW=2039 RES=0x00 SYN URGP=0 [88888.209666] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=223.252.223.19 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=25434 DF PROTO=TCP SPT=40034 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [88889.209128] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=223.252.223.19 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=25435 DF PROTO=TCP SPT=40034 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [89046.176962] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=223.89.220.77 DST=151.236.37.52 LEN=40 TOS=0x18 PREC=0x00 TTL=44 ID=43763 PROTO=TCP SPT=56654 DPT=23 WINDOW=57974 RES=0x00 SYN URGP=0 [89110.738640] audit: type=1400 audit(1490091362.180:1815): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22922" pid=22922 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [89110.738653] audit: type=1400 audit(1490091362.180:1816): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22922" pid=22922 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [89110.738665] audit: type=1400 audit(1490091362.180:1817): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22922" pid=22922 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [89110.739093] audit: type=1400 audit(1490091362.180:1818): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22922" pid=22922 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [89171.525714] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=167.61.80.92 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=50 ID=41829 PROTO=TCP SPT=35950 DPT=23 WINDOW=45910 RES=0x00 SYN URGP=0 [89193.140405] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=171.235.111.111 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=44 ID=26039 PROTO=TCP SPT=52215 DPT=23 WINDOW=15903 RES=0x00 SYN URGP=0 [89195.182925] audit: type=1400 audit(1490091446.621:1819): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22936" pid=22936 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [89195.182938] audit: type=1400 audit(1490091446.621:1820): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22936" pid=22936 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [89195.182949] audit: type=1400 audit(1490091446.621:1821): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22936" pid=22936 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [89195.183105] audit: type=1400 audit(1490091446.621:1822): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=22936 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [89195.183190] audit: type=1400 audit(1490091446.621:1823): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=22936 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [89195.183235] audit: type=1400 audit(1490091446.621:1824): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=22936 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [89195.183254] audit: type=1400 audit(1490091446.621:1825): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=22936 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [89195.183266] audit: type=1400 audit(1490091446.621:1826): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22808" pid=22936 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [89195.183287] audit: type=1400 audit(1490091446.621:1827): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/22808" pid=22936 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [89195.183313] audit: type=1400 audit(1490091446.621:1828): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=22936 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [89214.519541] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=95.9.127.34 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=48 ID=45312 PROTO=TCP SPT=46938 DPT=23 WINDOW=33130 RES=0x00 SYN URGP=0 [89270.652266] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=121.135.132.42 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=0 DF PROTO=TCP SPT=54221 DPT=23 WINDOW=300 RES=0x00 SYN URGP=0 [89310.050516] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=178.72.92.166 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=22586 PROTO=TCP SPT=26495 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [89321.687554] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=103.37.146.238 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=54321 PROTO=TCP SPT=36080 DPT=9999 WINDOW=65535 RES=0x00 SYN URGP=0 [89339.486626] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.223.133.13 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=38869 PROTO=TCP SPT=44805 DPT=1589 WINDOW=1024 RES=0x00 SYN URGP=0 [89374.161182] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=93.110.148.223 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=51718 PROTO=TCP SPT=58631 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [89462.468994] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.211.2.108 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=15606 PROTO=TCP SPT=54967 DPT=3354 WINDOW=1024 RES=0x00 SYN URGP=0 [89507.139031] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.95.8.8 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=17556 PROTO=TCP SPT=28393 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 [89576.807905] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.223.133.13 DST=151.236.37.52 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=53989 PROTO=TCP SPT=44805 DPT=4589 WINDOW=1024 RES=0x00 SYN URGP=0 [89602.225103] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=109.100.207.108 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=246 ID=23346 PROTO=TCP SPT=41346 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [89678.189193] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=27661 DF PROTO=TCP SPT=56460 DPT=6003 WINDOW=29200 RES=0x00 SYN URGP=0 [89679.191056] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=27662 DF PROTO=TCP SPT=56460 DPT=6003 WINDOW=29200 RES=0x00 SYN URGP=0 [89681.195046] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=27663 DF PROTO=TCP SPT=56460 DPT=6003 WINDOW=29200 RES=0x00 SYN URGP=0 [89685.209700] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=5.188.211.68 DST=151.236.37.52 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=27664 DF PROTO=TCP SPT=56460 DPT=6003 WINDOW=29200 RES=0x00 SYN URGP=0 [89785.029734] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=89.216.25.5 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=62933 PROTO=TCP SPT=11097 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 [89818.143749] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=14.187.132.140 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=40104 PROTO=TCP SPT=44158 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [89819.127064] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=176.227.190.169 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=65068 PROTO=TCP SPT=43552 DPT=23 WINDOW=23534 RES=0x00 SYN URGP=0 [89844.404849] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=203.222.30.20 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=31755 PROTO=TCP SPT=56571 DPT=23 WINDOW=51171 RES=0x00 SYN URGP=0 [89879.738506] audit_printk_skb: 12 callbacks suppressed [89879.738509] audit: type=1400 audit(1490092131.178:1833): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/23090" pid=23090 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [89879.738520] audit: type=1400 audit(1490092131.178:1834): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/23090" pid=23090 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [89879.738531] audit: type=1400 audit(1490092131.178:1835): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/23090" pid=23090 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [89879.738963] audit: type=1400 audit(1490092131.178:1836): apparmor="ALLOWED" operation="unlink" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/23090" pid=23090 comm="smbd" requested_mask="d" denied_mask="d" fsuid=0 ouid=0 [89952.466811] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=91.197.235.10 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=47416 PROTO=TCP SPT=52291 DPT=4000 WINDOW=1024 RES=0x00 SYN URGP=0 [89958.044100] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=222.92.7.250 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=7551 PROTO=TCP SPT=55057 DPT=23 WINDOW=29342 RES=0x00 SYN URGP=0 [90095.261135] audit: type=1400 audit(1490092346.698:1837): apparmor="ALLOWED" operation="mknod" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/23104" pid=23104 comm="smbd" requested_mask="c" denied_mask="c" fsuid=0 ouid=0 [90095.261148] audit: type=1400 audit(1490092346.698:1838): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/23104" pid=23104 comm="smbd" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0 [90095.261160] audit: type=1400 audit(1490092346.698:1839): apparmor="ALLOWED" operation="truncate" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/23104" pid=23104 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [90095.261319] audit: type=1400 audit(1490092346.698:1840): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1906" pid=23104 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [90095.261410] audit: type=1400 audit(1490092346.698:1841): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1913" pid=23104 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [90095.261462] audit: type=1400 audit(1490092346.698:1842): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1868" pid=23104 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [90095.261483] audit: type=1400 audit(1490092346.698:1843): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1909" pid=23104 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [90095.261511] audit: type=1400 audit(1490092346.698:1844): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1903" pid=23104 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [90095.261567] audit: type=1400 audit(1490092346.698:1845): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1870" pid=23104 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [90095.261594] audit: type=1400 audit(1490092346.698:1846): apparmor="ALLOWED" operation="open" profile="/usr/sbin/smbd" name="/run/samba/msg.lock/1869" pid=23104 comm="smbd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 [90100.583312] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=163.172.210.65 DST=151.236.37.52 LEN=438 TOS=0x08 PREC=0x00 TTL=52 ID=26721 DF PROTO=UDP SPT=5067 DPT=5060 LEN=418 [90255.971156] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=92.237.32.55 DST=151.236.37.52 LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=39152 PROTO=TCP SPT=62717 DPT=5358 WINDOW=14600 RES=0x00 SYN URGP=0 [90289.198562] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=89.248.167.131 DST=151.236.37.52 LEN=40 TOS=0x00 PREC=0x00 TTL=121 ID=16342 PROTO=TCP SPT=38660 DPT=104 WINDOW=52195 RES=0x00 SYN URGP=0 [90291.164435] [UFW BLOCK] IN=eth0 OUT= MAC=02:01:00:01:83:86:f8:c2:88:71:10:ff:08:00 SRC=163.172.144.161 DST=151.236.37.52 LEN=434 TOS=0x00 PREC=0x00 TTL=48 ID=28408 DF PROTO=UDP SPT=5063 DPT=5060 LEN=414