LL - Detection Scoring Truth This is a listing of all attacks in the two weeks of test data, weeks 4 and 5. Each attack has been assigned a unique ID number of the format: WD-HHMMSS. That is, the ID number 41.083456 would indicate: 'Week 4, Day 1 (Monday), at 08:34:56'. The time specified in the ID number is to be used only as a rough indicator of when the attack took place. Exact information about where the attack occurs is given by summarized listfile entries for each attack. These entries are summarized in that if there are several sessions of a single attack that overlap in time (and victim) then they are aggregated and listed at a single listfile entry here. Non-summarized froms of the listfile entry for each attack can be found by clicking the hyper-linked attack ID number. What follows is the Truth as used in the detection scoring phase of the 1999 Evaluation. For the Identification scoring "Truth" try here. ------------------------------------------------------------------------ Description of Fields * IDnum - ID number of this attack instance * Date - Date of this summarized session of this attack * StartTime - Start time of this summarized session * Duration - Duration of this summarized session * Destination - Destination of this summarized session - usually this is the victim of the attack, but not necessarily! * Attackname - Common Name of this attack. * Insider - "in" if the attack source is an Eyrie AFB host, "out" if the attack source is external to the base. * Manual = "man" if the attack (or some major component thereof) was carried out manually by Lincoln or "auto" if the attack was scripted. * Console - "cons" if the attack was carried out from the console of a machine or "rem" if the attack was carried out remotely (with respect to the victim). * Success - "succ" if the attack instance was scessful or "not" if unsucessful. * aDump - "aDmp" if Lincoln has a dump file specifically of that attack instance, otherwise "not". * oDump - "oDmp" if there is evidence of the attack in the outside sniffer dumpfile, otherwise "not". * iDump - "iDmp" if there is evidence of the attack in the inside sniffer dumpfile, otherwise "not". * BSM - "BSM" if there is evidence of the attack in the solaris BSM log, otherwise "not". * SysLogs - "SysLg" if there is evidence of the attack in the system logs that were distributed, otherwise "not". * FSListing - "FSLst" if there is evidence of the attack in the file system information that was distibuted, otherwise "not". * Stealthy - "Stlth" if the attack was considered Stealthy, "Clr" if considered clear. * New - "New" if the attack was considered to be New in the 1999 eval, "Old" if considered old. * Category - category of the attack (with ll prepended to the name) * OS - Victim platform/Operating System of this attack instance (with ll prepended to the name) ------------------------------------------------------------------------ Summarized attack: 41.084031 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 41.08403103/29/1999 08:18:35 00:04:07 172.016.112.050ps out rem succ aDmp oDmp iDmp BSM SysLg FSLst Stlth Old llU2R 41.08403103/29/1999 08:19:37 00:01:56 209.154.098.104ps out rem succ aDmp oDmp iDmp BSM SysLg FSLst Stlth Old llU2R 41.08403103/29/1999 08:29:27 00:00:43 172.016.112.050ps out rem succ aDmp oDmp iDmp BSM SysLg FSLst Stlth Old llU2R 41.08403103/29/1999 08:40:14 00:24:26 172.016.112.050ps out rem succ aDmp oDmp iDmp BSM SysLg FSLst Stlth Old llU2R Summarized attack: 41.084818 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 41.08481803/29/1999 08:48:12 00:00:02 172.016.114.050sendmail out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L  41.08481803/29/1999 08:48:12 00:00:01 202.049.244.010sendmail out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L  llLINUX Summarized attack: 41.090000 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category 41.09000003/29/1999 09:08:00 00:08:00 172.16.112.100ntfsdos man cons succ not not not not SysLg FSLst Clr New llDATA-llU2R- llNT Summarized attack: 41.091531 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 41.09153103/29/1999 09:15:05 00:00:01 172.016.113.050portsweep in auto rem succ aDmp not iDmp not not not Stlth Old llPROBE 41.09153103/29/1999 09:25:21 00:00:01 172.016.113.050portsweep in auto rem succ aDmp not iDmp not not not Stlth Old llPROBE 41.09153103/29/1999 09:35:36 00:00:01 172.016.113.050portsweep in auto rem succ aDmp not iDmp not not not Stlth Old llPROBE Summarized attack: 41.093708 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 41.09370803/29/1999 09:36:23 00:00:01 172.016.114.050sshtrojan out auto rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llR2L SllLINUX 41.09370803/29/1999 09:36:23 00:00:01 202.077.162.213sshtrojan out auto rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llR2L TllLINUX 41.09370803/29/1999 09:38:35 00:03:11 172.016.114.050sshtrojan out auto rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llR2L TllLINUX 41.09370803/29/1999 09:39:37 00:00:31 135.013.216.191sshtrojan out auto rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llR2L TllLINUX Summarized attack: 41.111531 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 41.11153103/29/1999 11:15:15 00:00:01 192.168.001.001portsweep in auto rem succ aDmp not iDmp not not not Stlth Old llPROBE sllCISCO 41.11153103/29/1999 11:16:15 00:00:01 192.168.001.001portsweep in auto rem succ aDmp not iDmp not not not Stlth Old llPROBE 41.11153103/29/1999 11:17:15 00:00:01 192.168.001.001portsweep in auto rem succ aDmp not iDmp not not not Stlth Old llPROBE 41.11153103/29/1999 11:18:15 00:00:01 192.168.001.001portsweep in auto rem succ aDmp not iDmp not not not Stlth Old llPROBE llCISCO 41.11153103/29/1999 11:19:15 00:00:01 192.168.001.001portsweep in auto rem succ aDmp not iDmp not not not Stlth Old llPROBE Summarized attack: 41.112127 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 41.11212703/29/1999 11:22:43 00:01:17 172.016.114.168xsnoop out rem succ aDmp oDmp iDmp not not not Clr Old llR2L Summarized attack: 41.114554 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 41.11455403/29/1999 11:45:12 00:25:35 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 41.11455403/29/1999 12:10:48 00:07:55 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 4qllCISCO Summarized attack: 41.114703 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 41.11470303/29/1999 11:47:16 00:00:10 172.016.113.050guesstelnet out auto rem succ aDmp oDmp iDmp not SysLg not Clr Old llR2L Summarized attack: 41.122222 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 41.12222203/29/1999 12:22:15 00:00:01 172.016.112.100portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE mllNT 41.12222203/29/1999 12:22:15 00:00:03 153.107.252.061portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 41.12222203/29/1999 12:23:55 00:00:01 172.016.112.100portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE nllNT 41.12222203/29/1999 12:25:35 00:00:01 172.016.112.100portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 41.12222203/29/1999 12:27:15 00:00:01 172.016.112.100portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE rllNT Summarized attack: 41.133333 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 41.13333303/29/1999 13:33:16 00:00:21 172.016.112.050guessftp in auto rem succ aDmp not iDmp BSM SysLg not Clr Old llR2L  41.13333303/29/1999 13:33:20 00:00:01 172.016.118.070guessftp in auto rem succ aDmp not iDmp BSM SysLg not Clr Old llR2L magllSOLARIS 41.13333303/29/1999 13:33:25 00:00:01 172.016.118.070guessftp in auto rem succ aDmp not iDmp BSM SysLg not Clr Old llR2L hatllSOLARIS 41.13333303/29/1999 13:33:29 00:00:01 172.016.118.070guessftp in auto rem succ aDmp not iDmp BSM SysLg not Clr Old llR2L thllSOLARIS 41.13333303/29/1999 13:33:33 00:00:01 172.016.118.070guessftp in auto rem succ aDmp not iDmp BSM SysLg not Clr Old llR2L meallSOLARIS 41.13333303/29/1999 13:33:37 00:00:01 172.016.118.070guessftp in auto rem succ aDmp not iDmp BSM SysLg not Clr Old llR2L ommllSOLARIS Summarized attack: 41.135830 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 41.13583003/29/1999 13:58:16 00:00:12 172.016.112.050ftpwrite out auto rem succ aDmp oDmp iDmp BSM SysLg FSLst Clr Old llR2L ttlllSOLARIS 41.13583003/29/1999 13:58:20 00:00:01 194.027.251.021ftpwrite out auto rem succ aDmp oDmp iDmp BSM SysLg FSLst Clr Old llR2L 41.13583003/29/1999 14:03:29 00:00:32 172.016.112.050ftpwrite out auto rem succ aDmp oDmp iDmp BSM SysLg FSLst Clr Old llR2L rprllSOLARIS Summarized attack: 41.155048 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 41.15504803/29/1999 15:50:15 00:23:26 172.016.112.100yaga in auto rem succ aDmp not iDmp not SysLg not Clr New llU2R $UUllNT 41.15504803/29/1999 19:50:16 00:13:05 172.016.112.100yaga in auto rem succ aDmp not iDmp not SysLg not Clr New llU2R yUllNT Summarized attack: 41.161308 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 41.16130803/29/1999 16:13:08 00:15:05 172.016.112.100crashii in auto rem succ aDmp not iDmp not not not Clr Old llDOS f Summarized attack: 41.162715 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 41.16271503/29/1999 16:27:10 00:00:01 172.016.114.169portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE llLINUX 41.16271503/29/1999 16:27:16 00:00:01 172.016.114.169portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 41.16271503/29/1999 16:28:22 00:00:01 172.016.114.169portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 41.16271503/29/1999 16:28:28 00:00:01 172.016.114.169portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 41.16271503/29/1999 16:29:34 00:00:01 172.016.114.169portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 41.16271503/29/1999 16:29:40 00:00:01 172.016.114.169portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE llLINUX 41.16271503/29/1999 16:30:46 00:00:01 172.016.114.169portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE xllLINUX 41.16271503/29/1999 16:30:52 00:00:01 172.016.114.169portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 41.16271503/29/1999 16:31:59 00:00:01 172.016.114.169portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 41.16271503/29/1999 16:32:05 00:00:01 172.016.114.169portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE llLINUX Summarized attack: 41.182453 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 41.18245303/29/1999 18:24:19 00:08:41 172.016.112.050secret out auto rem succ aDmp oDmp iDmp BSM not FSLst Clr New llDATA QllSOLARIS 41.18245303/29/1999 18:27:45 00:00:01 195.115.218.108secret out auto rem succ aDmp oDmp iDmp BSM not FSLst Clr New llDATA RllSOLARIS Summarized attack: 41.213446 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 41.21344603/29/1999 21:34:16 00:00:01 172.016.112.050smurf out auto rem succ aDmp oDmp iDmp not not not Clr Old llDOS }llSOLARIS 41.21344603/29/1999 21:34:26 00:00:01 172.016.112.050smurf out auto rem succ aDmp oDmp iDmp not not not Clr Old llDOS Summarized attack: 42.090909 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 42.09090903/30/1999 09:09:17 00:02:39 172.016.112.050httptunnel out auto rem succ aDmp oDmp BSM SysLg FSLst Clr Old llR2L 42.09090903/30/1999 09:10:44 00:00:07 197.182.091.233httptunnel out auto rem succ aDmp oDmp BSM SysLg FSLst Clr Old llR2L 4 sllSOLARIS Summarized attack: 42.094131 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 42.09413103/30/1999 09:41:12 00:00:01 172.016.114.050phf out auto rem succ aDmp oDmp not not not Clr Old llR2L Summarized attack: 42.104107 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category s datOS 42.10410703/30/1999 10:41:12 00:26:10 172.016.113.050loadmodule out auto rem succ aDmp oDmp not not FSLst Stlth Old llDATA-llU2R- llSUNOS Summarized attack: 42.112913 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category ward OS 42.11291303/30/1999 11:29:17 00:01:45 172.016.112.050ps out auto rem succ aDmp oDmp BSM not FSLst Clr Old llDATA-llU2R- llSOLARIS 42.11291303/30/1999 11:30:50 00:00:01 206.222.003.197ps out auto rem succ aDmp oDmp BSM not FSLst Clr Old llDATA-llU2R- llSOLARIS 42.11291303/30/1999 11:47:10 00:17:59 172.016.112.050ps out auto rem succ aDmp oDmp BSM not FSLst Clr Old llDATA-llU2R- llSOLARIS Summarized attack: 42.120000 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category 42.12000003/30/1999 12:00:00 00:10:00 172.16.112.100ntfsdos man cons succ not not not SysLg FSLst Clr New llDATA-llU2R- llNT Summarized attack: 42.122248 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 42.12224803/30/1999 12:22:13 00:52:29 172.016.114.050secret out auto rem succ aDmp oDmp not not not Clr New llDATA 42.12224803/30/1999 12:48:08 00:00:09 197.218.177.069secret out auto rem succ aDmp oDmp not not not Clr New llDATA f 42.12224803/30/1999 12:53:30 00:15:01 197.218.177.069secret out auto rem succ aDmp oDmp not not not Clr New llDATA Summarized attack: 42.135452 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category 42.13545203/30/1999 13:54:17 00:01:09 172.016.112.194sqlattack out auto rem succ aDmp oDmp not not not Clr Old llDATA-llU2R- llLINUX Summarized attack: 42.143228 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 42.14322803/30/1999 14:32:15 00:00:06 172.016.112.100sechole out auto rem succ aDmp oDmp not SysLg not Clr New llU2R 4wllNT 42.14322803/30/1999 14:32:19 00:00:02 205.160.208.190sechole out auto rem succ aDmp oDmp not SysLg not Clr New llU2R n 42.14322803/30/1999 14:32:23 00:06:33 172.016.112.100sechole out auto rem succ aDmp oDmp not SysLg not Clr New llU2R 42.14322803/30/1999 19:32:15 00:04:52 172.016.112.100sechole out auto rem succ aDmp oDmp not SysLg not Clr New llU2R r*llNT Summarized attack: 42.145441 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 42.14544103/30/1999 14:54:10 00:15:01 172.016.113.050land out auto rem succ aDmp oDmp not SysLg not Clr Old llDOS e illSUNOS Summarized attack: 42.155148 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 42.15514803/30/1999 15:51:16 00:04:27 172.016.114.050mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS , rllLINUX 42.15514803/30/1999 15:51:16 00:00:01 172.016.112.020mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS arllLINUX 42.15514803/30/1999 15:51:16 00:00:01 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS chellLINUX 42.15514803/30/1999 15:51:18 00:00:02 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS thellLINUX 42.15514803/30/1999 15:51:18 00:00:02 172.016.112.194mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS s illLINUX 42.15514803/30/1999 15:51:21 00:00:03 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS selllLINUX 42.15514803/30/1999 15:51:25 00:00:05 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS thllLINUX 42.15514803/30/1999 15:51:26 00:00:01 172.016.112.020mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS ithllLINUX 42.15514803/30/1999 15:51:31 00:00:05 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS fillLINUX 42.15514803/30/1999 15:51:36 00:00:01 172.016.112.020mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS simllLINUX 42.15514803/30/1999 15:51:37 00:00:06 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS ffellLINUX 42.15514803/30/1999 15:51:44 00:00:05 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS werllLINUX 42.15514803/30/1999 15:51:46 00:00:01 172.016.112.020mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS spellLINUX 42.15514803/30/1999 15:51:50 00:00:05 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS llsllLINUX 42.15514803/30/1999 15:51:56 00:00:01 172.016.112.020mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS taillLINUX 42.15514803/30/1999 15:51:56 00:00:05 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS nisllLINUX 42.15514803/30/1999 15:52:02 00:00:05 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS thellLINUX 42.15514803/30/1999 15:52:06 00:00:01 172.016.112.020mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS e nllLINUX 42.15514803/30/1999 15:52:08 00:00:04 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS exillLINUX 42.15514803/30/1999 15:52:13 00:00:06 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS anllLINUX 42.15514803/30/1999 15:52:18 00:00:01 172.016.112.020mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS eflllLINUX 42.15514803/30/1999 15:52:20 00:00:05 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS d pllLINUX 42.15514803/30/1999 15:52:26 00:00:05 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS apllLINUX 42.15514803/30/1999 15:52:28 00:00:01 172.016.112.020mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS dellLINUX 42.15514803/30/1999 15:52:32 00:00:06 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS forllLINUX 42.15514803/30/1999 15:52:39 00:00:01 172.016.112.020mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS f rllLINUX 42.15514803/30/1999 15:52:39 00:00:30 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS f *llLINUX 42.15514803/30/1999 15:52:49 00:00:01 172.016.112.020mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS ainllLINUX 42.15514803/30/1999 15:53:10 00:00:01 172.016.112.020mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS g illLINUX 42.15514803/30/1999 15:53:10 00:00:05 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS ly llLINUX 42.15514803/30/1999 15:53:16 00:00:05 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS 42.15514803/30/1999 15:53:22 00:00:06 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS d bllLINUX 42.15514803/30/1999 15:53:22 00:00:01 172.016.112.020mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS ut llLINUX 42.15514803/30/1999 15:53:29 00:00:06 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS 42.15514803/30/1999 15:53:34 00:00:01 172.016.112.020mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS . 42.15514803/30/1999 15:53:36 00:00:05 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS thellLINUX 42.15514803/30/1999 15:53:42 00:00:06 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS 42.15514803/30/1999 15:53:44 00:00:01 172.016.112.020mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS 42.15514803/30/1999 15:53:49 00:00:06 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS hlollLINUX 42.15514803/30/1999 15:53:54 00:00:01 172.016.112.020mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS at llLINUX 42.15514803/30/1999 15:53:56 00:00:06 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS 42.15514803/30/1999 15:54:03 00:00:06 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS al llLINUX 42.15514803/30/1999 15:54:04 00:00:01 172.016.112.020mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS challLINUX 42.15514803/30/1999 15:54:10 00:00:06 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS bellLINUX 42.15514803/30/1999 15:54:15 00:00:01 172.016.112.020mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS s. 42.15514803/30/1999 15:54:17 00:00:05 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS thllLINUX 42.15514803/30/1999 15:54:23 00:00:06 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS n, llLINUX 42.15514803/30/1999 15:54:26 00:00:01 172.016.112.020mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS prllLINUX 42.15514803/30/1999 15:54:30 00:00:07 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS callLINUX 42.15514803/30/1999 15:54:36 00:00:01 172.016.112.020mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS uisllLINUX 42.15514803/30/1999 15:54:38 00:00:05 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS merllLINUX 42.15514803/30/1999 15:54:44 00:00:06 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS tollLINUX 42.15514803/30/1999 15:54:46 00:00:01 172.016.112.020mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS 42.15514803/30/1999 15:54:51 00:00:06 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS se llLINUX 42.15514803/30/1999 15:54:58 00:00:06 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS c sllLINUX 42.15514803/30/1999 15:54:59 00:00:01 172.016.112.020mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS ts llLINUX 42.15514803/30/1999 15:55:05 00:00:06 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS prllLINUX 42.15514803/30/1999 15:55:09 00:00:01 172.016.112.020mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS nd llLINUX 42.15514803/30/1999 15:55:12 00:00:06 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS onsllLINUX 42.15514803/30/1999 15:55:19 00:00:01 172.016.112.020mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS ncellLINUX 42.15514803/30/1999 15:55:19 00:00:06 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS *j.llLINUX 42.15514803/30/1999 15:55:26 00:00:06 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS n tllLINUX 42.15514803/30/1999 15:55:29 00:00:01 172.016.112.020mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS ialllLINUX 42.15514803/30/1999 15:55:33 00:00:10 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS he llLINUX 42.15514803/30/1999 15:55:39 00:00:01 172.016.112.020mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS henllLINUX 42.15514803/30/1999 15:55:39 00:00:01 172.016.114.207mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS is llLINUX 42.15514803/30/1999 15:55:51 00:00:01 172.016.112.020mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS a sllLINUX 42.15514803/30/1999 15:56:41 00:00:01 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS r ollLINUX 42.15514803/30/1999 15:58:46 00:00:01 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS prllLINUX 42.15514803/30/1999 16:02:27 00:00:01 194.027.251.021mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS oplllLINUX 42.15514803/30/1999 16:02:27 00:00:01 172.016.113.084mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS *jllLINUX 42.15514803/30/1999 16:02:27 00:00:01 172.016.112.020mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS es llLINUX 42.15514803/30/1999 16:02:39 00:00:01 172.016.112.020mailbomb out auto rem succ aDmp oDmp not not not Clr Old llDOS on llLINUX Summarized attack: 42.174944 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 42.17494403/30/1999 17:49:15 00:03:01 172.016.114.050processtable out auto rem succ aDmp oDmp not not not Clr Old llDOS Summarized attack: 42.210410 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 42.21041003/30/1999 21:04:10 00:15:07 172.016.112.100crashiis out auto rem succ aDmp oDmp not SysLg not Clr Old llDOS Summarized attack: 43.080401 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 43.08040103/31/1999 08:04:14 00:00:03 172.016.114.050satan out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 43.08040103/31/1999 08:04:14 00:00:01 209.030.070.014satan out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 43.08040103/31/1999 08:04:18 00:00:09 172.016.114.050satan out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE >llLINUX 43.08040103/31/1999 08:04:25 00:00:02 209.030.070.014satan out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE Summarized attack: 43.084000 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 43.08400003/31/1999 09:26:12 00:00:04 172.016.112.100netcat_setup out man rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llR2L 43.08400003/31/1999 09:26:12 00:00:03 207.230.054.203netcat_setup out man rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llR2L Summarized attack: 43.093814 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 43.09381403/31/1999 09:38:13 00:00:53 172.016.114.050imap out auto rem succ aDmp oDmp iDmp not not FSLst Clr Old llR2L o tllLINUX Summarized attack: 43.100000 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category 43.10000003/31/1999 10:14:36 00:00:04 172.016.112.100ppmacro out man rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llDATA-llR2L- llNT 43.10000003/31/1999 10:14:36 00:00:03 194.027.251.021ppmacro out man rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llDATA-llR2L- llNT 43.10000003/31/1999 10:23:37 00:00:01 172.016.112.100ppmacro out man rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llDATA-llR2L- llNT 43.10000003/31/1999 10:24:03 00:00:01 172.016.112.100ppmacro out man rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llDATA-llR2L- llNT 43.10000003/31/1999 10:24:09 00:00:01 172.016.112.100ppmacro out man rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llDATA-llR2L- llNT 43.10000003/31/1999 10:26:10 00:00:01 172.016.112.100ppmacro out man rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llDATA-llR2L- llNT 43.10000003/31/1999 10:26:21 00:00:56 172.016.112.100ppmacro out man rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llDATA-llR2L- llNT 43.10000003/31/1999 10:27:21 00:00:16 172.016.112.100ppmacro out man rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llDATA-llR2L- llNT Summarized attack: 43.101313 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 43.10131303/31/1999 10:13:18 00:28:02 172.016.113.050processtable in auto rem succ aDmp not iDmp not SysLg not Clr Old llDOS Summarized attack: 43.103931 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 43.10393103/31/1999 10:38:00 00:03:00 172.016.112.050fdformat man cons succ not not not BSM not not Stlth Old llU2R Summarized attack: 43.110000 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 43.11000003/31/1999 11:11:08 00:00:32 172.016.112.100netcat_breakin out man rem succ aDmp oDmp iDmp not SysLg not Clr New llR2L tllNT Summarized attack: 43.111111 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 43.11111103/31/1999 11:25:39 00:00:47 172.016.112.050warez out auto rem succ aDmp oDmp iDmp BSM SysLg FSLst Clr Old llDOS }llSOLARIS 43.11111103/31/1999 11:26:14 00:00:01 202.027.121.118warez out auto rem succ aDmp oDmp iDmp BSM SysLg FSLst Clr Old llDOS Summarized attack: 43.113032 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 43.11303203/31/1999 11:30:13 00:00:15 172.016.113.050arppoision in auto rem succ aDmp not iDmp not not FSLst Clr New llDOS 43.11303203/31/1999 11:30:30 00:11:04 172.016.113.050arppoision in auto rem succ aDmp not iDmp not not FSLst Clr New llDOS Summarized attack: 43.114500 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 43.11450003/31/1999 12:12:38 00:01:29 172.016.114.050ncftp out auto rem succ aDmp oDmp iDmp not SysLg FSLst Stlth New llR2L 43.11450003/31/1999 12:13:00 00:00:47 152.169.215.104ncftp out auto rem succ aDmp oDmp iDmp not SysLg FSLst Stlth New llR2L Summarized attack: 43.122854 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 43.12285403/31/1999 12:28:15 00:08:12 172.016.112.050secret out auto rem succ aDmp oDmp iDmp BSM not FSLst Clr New llDATA 43.12285403/31/1999 12:31:09 00:00:11 196.037.075.158secret out auto rem succ aDmp oDmp iDmp BSM not FSLst Clr New llDATA Summarized attack: 43.125900 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 43.12590003/31/1999 13:00:32 00:00:01 172.016.112.020named out man rem succ aDmp oDmp iDmp not SysLg not Clr Old llR2L | 43.12590003/31/1999 13:00:32 00:05:10 194.007.248.153named out man rem succ aDmp oDmp iDmp not SysLg not Clr Old llR2L  Summarized attack: 43.134223 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 43.13422303/31/1999 13:42:16 00:01:56 172.016.113.050guessftp out auto rem succ aDmp oDmp iDmp not SysLg not Clr Old llR2L f ollSUNOS Summarized attack: 43.144547 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 43.14454703/31/1999 18:29:25 00:00:01 172.016.112.100smurf in auto rem succ aDmp not iDmp not not not Clr Old llDOS cepllNT Summarized attack: 43.155357 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 43.15535703/31/1999 15:53:15 00:00:05 172.016.112.050guest out auto rem succ aDmp oDmp iDmp BSM SysLg not Clr Old llR2L CllSOLARIS 43.15535703/31/1999 15:53:21 00:00:05 172.016.112.050guest out auto rem succ aDmp oDmp iDmp BSM SysLg not Clr Old llR2L 43.15535703/31/1999 15:53:27 00:00:05 172.016.112.050guest out auto rem succ aDmp oDmp iDmp BSM SysLg not Clr Old llR2L  43.15535703/31/1999 15:53:33 00:00:05 172.016.112.050guest out auto rem succ aDmp oDmp iDmp BSM SysLg not Clr Old llR2L  43.15535703/31/1999 15:53:39 00:00:05 172.016.112.050guest out auto rem succ aDmp oDmp iDmp BSM SysLg not Clr Old llR2L 43.15535703/31/1999 15:53:45 00:00:05 172.016.112.050guest out auto rem succ aDmp oDmp iDmp BSM SysLg not Clr Old llR2L llSOLARIS 43.15535703/31/1999 15:53:51 00:02:07 172.016.112.050guest out auto rem succ aDmp oDmp iDmp BSM SysLg not Clr Old llR2L 4.{llSOLARIS Summarized attack: 43.164334 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 43.16433403/31/1999 16:43:15 00:00:01 172.016.112.100portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE yllNT 43.16433403/31/1999 16:45:11 00:00:01 172.016.112.100portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE lllNT 43.16433403/31/1999 16:47:08 00:00:01 172.016.112.100portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE lllNT Summarized attack: 43.165422 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 43.16542203/31/1999 16:54:17 00:03:01 172.016.112.050mailbomb out auto rem succ aDmp oDmp iDmp not not not Clr Old llDOS Summarized attack: 43.175811 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 43.17581103/31/1999 17:58:17 00:01:19 172.016.112.050guesstelnet out auto rem succ aDmp oDmp iDmp BSM SysLg not Clr Old llR2L E 43.17581103/31/1999 17:59:37 00:02:28 172.016.112.050guesstelnet out auto rem succ aDmp oDmp iDmp BSM SysLg not Clr Old llR2L Summarized attack: 43.191217 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 43.19121703/31/1999 19:12:16 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:12:21 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:12:26 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:12:31 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:12:36 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:12:41 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:12:46 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:12:51 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:12:56 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:13:01 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:13:06 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:13:12 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:13:17 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:13:22 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:13:27 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:13:32 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:13:37 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:13:42 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:13:47 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:13:52 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:13:57 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:14:02 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:14:07 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:14:12 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:14:17 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:14:23 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:14:28 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:14:33 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:14:38 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:14:43 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:14:48 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:14:53 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:14:58 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:15:03 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:15:08 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:15:13 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:15:18 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:15:23 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:15:29 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:15:34 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:15:39 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:15:44 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:15:49 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:15:54 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:15:59 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:16:04 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:16:09 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:16:14 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:16:19 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:16:24 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:16:30 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:16:35 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:16:40 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:16:45 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:16:50 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:16:55 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:17:00 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:17:05 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:17:10 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:17:15 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:17:20 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:17:25 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:17:30 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:17:36 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:17:41 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:17:46 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:17:51 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:17:56 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:18:01 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:18:06 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:18:11 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:18:16 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:18:21 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:18:26 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:18:31 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:18:36 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:18:42 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:18:47 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:18:52 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:18:57 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:19:02 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:19:07 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:19:12 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:19:17 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:19:22 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:19:27 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:19:32 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:19:37 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:19:43 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:19:48 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:19:53 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:19:58 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:20:03 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:20:08 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:20:13 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:20:18 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:20:23 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:20:28 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:20:33 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:20:38 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:20:43 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:20:49 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:20:54 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:20:59 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:21:04 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:21:09 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:21:14 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:21:19 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:21:24 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:21:29 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:21:34 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:21:39 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:21:44 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:21:49 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:21:55 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:22:00 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:22:05 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:22:10 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:22:15 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:22:20 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:22:25 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:22:30 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:22:35 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:22:40 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:22:45 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:22:50 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:22:55 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:23:01 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:23:06 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:23:11 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:23:16 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:23:21 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:23:26 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:23:31 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:23:36 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:23:41 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:23:46 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:23:51 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:23:56 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:24:02 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:24:07 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:24:12 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:24:17 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:24:22 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:24:27 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:24:32 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:24:37 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:24:42 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:24:47 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:24:52 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:24:58 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:25:03 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:25:08 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:25:13 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:25:18 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:25:23 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:25:28 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:25:33 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:25:39 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:25:44 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:25:49 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:25:54 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:25:59 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:26:04 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:26:09 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:26:14 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:26:19 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:26:24 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:26:29 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:26:34 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:26:39 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:26:45 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:26:50 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:26:55 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:27:00 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:27:05 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:27:10 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:27:15 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:27:20 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:27:25 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:27:30 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:27:35 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:27:40 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:27:45 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:27:51 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:27:56 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:28:01 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:28:06 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:28:11 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:28:16 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:28:21 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:28:26 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:28:31 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:28:36 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:28:41 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:28:46 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:28:51 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:28:57 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:29:02 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:29:07 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 43.19121703/31/1999 19:29:12 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L Summarized attack: 44.080000 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 44.08000004/01/1999 08:00:03 00:00:58 206.048.044.018ntis out auto rem succ aDmp oDmp iDmp not SysLg not Clr Old llPROBE llNT 44.08000004/01/1999 08:01:01 00:15:03 172.016.112.100ntis out auto rem succ aDmp oDmp iDmp not SysLg not Clr Old llPROBE Summarized attack: 44.080757 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 44.08075704/01/1999 08:07:11 00:00:01 172.016.112.001ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 44.08075704/01/1999 08:07:21 00:00:01 172.016.112.002ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 44.08075704/01/1999 08:07:31 00:00:01 172.016.112.003ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE llALL 44.08075704/01/1999 08:07:41 00:00:01 172.016.112.004ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 44.08075704/01/1999 08:07:51 00:00:01 172.016.112.005ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 44.08075704/01/1999 08:07:51 00:00:01 194.027.251.021ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE llALL 44.08075704/01/1999 08:08:02 00:00:01 172.016.112.006ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 44.08075704/01/1999 08:08:12 00:00:01 172.016.112.007ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 44.08075704/01/1999 08:08:22 00:00:01 172.016.112.008ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE llALL 44.08075704/01/1999 08:08:32 00:00:01 172.016.112.009ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 44.08075704/01/1999 08:08:42 00:00:01 172.016.112.010ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 44.08075704/01/1999 08:08:42 00:00:01 194.027.251.021ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE llALL Summarized attack: 44.082615 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 44.08261504/01/1999 08:26:20 00:15:01 172.016.114.050teardrop in auto rem succ aDmp not iDmp not SysLg not Clr Old llDOS Summarized attack: 44.083000 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 44.08300004/01/1999 08:35:11 00:00:05 172.016.112.100netbus out man rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llR2L 44.08300004/01/1999 08:35:11 00:00:03 135.008.060.182netbus out man rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llR2L 44.08300004/01/1999 08:39:39 00:01:36 172.016.112.100netbus out man rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llR2L 44.08300004/01/1999 08:41:46 00:00:01 192.168.001.010 out man rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llR2L Summarized attack: 44.091807 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category 44.09180704/01/1999 09:38:15 00:10:30 172.016.114.050sshtrojan out auto rem succ aDmp oDmp iDmp not SysLg not Stlth New llDATA-llR2L- llLINUX Summarized attack: 44.110000 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 44.11000004/01/1999 11:00:07 00:16:33 172.016.112.100dosnuke in auto rem succ aDmp not iDmp not SysLg not Clr New llDOS t, llNT Summarized attack: 44.114500 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 44.11450004/01/1999 11:45:14 00:01:28 172.016.114.050ncftp in auto rem succ aDmp not iDmp not not FSLst Stlth New llR2L roullLINUX 44.11450004/01/1999 11:45:35 00:00:47 172.016.118.040ncftp in auto rem succ aDmp not iDmp not not FSLst Stlth New llR2L Summarized attack: 44.120500 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category 44.12050004/01/1999 12:12:38 00:00:05 172.016.112.100ppmacro out man rem succ aDmp oDmp iDmp not not FSLst Clr New llDATA-llR2L- llNT 44.12050004/01/1999 12:12:38 00:00:03 194.027.251.021ppmacro out man rem succ aDmp oDmp iDmp not not FSLst Clr New llDATA-llR2L- llNT 44.12050004/01/1999 12:24:45 00:00:01 172.016.112.100ppmacro out man rem succ aDmp oDmp iDmp not not FSLst Clr New llDATA-llR2L- llNT 44.12050004/01/1999 12:24:59 00:01:24 172.016.112.100ppmacro out man rem succ aDmp oDmp iDmp not not FSLst Clr New llDATA-llR2L- llNT Summarized attack: 44.124700 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 44.12470004/01/1999 12:56:47 00:00:04 172.016.112.050guest out auto rem succ aDmp oDmp iDmp BSM SysLg not Clr Old llR2L VllSOLARIS 44.12470004/01/1999 12:56:52 00:00:05 172.016.112.050guest out auto rem succ aDmp oDmp iDmp BSM SysLg not Clr Old llR2L 44.12470004/01/1999 12:56:58 00:00:05 172.016.112.050guest out auto rem succ aDmp oDmp iDmp BSM SysLg not Clr Old llR2L  44.12470004/01/1999 12:57:04 00:00:05 172.016.112.050guest out auto rem succ aDmp oDmp iDmp BSM SysLg not Clr Old llR2L }llSOLARIS 44.12470004/01/1999 12:57:10 00:00:05 172.016.112.050guest out auto rem succ aDmp oDmp iDmp BSM SysLg not Clr Old llR2L 44.12470004/01/1999 12:57:16 00:00:05 172.016.112.050guest out auto rem succ aDmp oDmp iDmp BSM SysLg not Clr Old llR2L }llSOLARIS 44.12470004/01/1999 12:57:22 00:00:05 172.016.112.050guest out auto rem succ aDmp oDmp iDmp BSM SysLg not Clr Old llR2L 44.12470004/01/1999 12:57:28 00:00:05 172.016.112.050guest out auto rem succ aDmp oDmp iDmp BSM SysLg not Clr Old llR2L 44.12470004/01/1999 12:57:34 00:01:55 172.016.112.050guest out auto rem succ aDmp oDmp iDmp BSM SysLg not Clr Old llR2L 4llSOLARIS Summarized attack: 44.130700 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 44.13070004/01/1999 13:08:19 00:00:01 172.016.114.168xlock out man rem succ aDmp oDmp iDmp not not not Clr Old llR2L }llLINUX 44.13070004/01/1999 13:08:30 00:00:14 172.016.114.168xlock out man rem succ aDmp oDmp iDmp not not not Clr Old llR2L Summarized attack: 44.131529 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 44.13152904/01/1999 13:15:16 00:02:11 172.016.112.194guesspop out auto rem succ aDmp oDmp iDmp not SysLg not Clr Old llR2L Summarized attack: 44.161242 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 44.16124204/01/1999 16:12:15 00:00:01 172.016.114.050phf out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L Summarized attack: 44.164944 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 44.16494404/01/1999 16:49:15 00:00:26 172.016.112.050sshprocesstable in auto rem succ aDmp not iDmp BSM SysLg not Clr New llDOS z llSOLARIS 44.16494404/01/1999 16:49:42 00:00:50 172.016.112.050sshprocesstable in auto rem succ aDmp not iDmp BSM SysLg not Clr New llDOS 44.16494404/01/1999 16:50:33 00:00:47 172.016.112.050sshprocesstable in auto rem succ aDmp not iDmp BSM SysLg not Clr New llDOS 44.16494404/01/1999 16:51:21 00:00:50 172.016.112.050sshprocesstable in auto rem succ aDmp not iDmp BSM SysLg not Clr New llDOS :{ llSOLARIS 44.16494404/01/1999 16:52:12 00:00:50 172.016.112.050sshprocesstable in auto rem succ aDmp not iDmp BSM SysLg not Clr New llDOS 44.16494404/01/1999 16:53:03 00:00:45 172.016.112.050sshprocesstable in auto rem succ aDmp not iDmp BSM SysLg not Clr New llDOS 44.16494404/01/1999 16:53:49 00:00:39 172.016.112.050sshprocesstable in auto rem succ aDmp not iDmp BSM SysLg not Clr New llDOS 44.16494404/01/1999 16:54:29 00:00:46 172.016.112.050sshprocesstable in auto rem succ aDmp not iDmp BSM SysLg not Clr New llDOS 44.16494404/01/1999 16:55:16 00:00:45 172.016.112.050sshprocesstable in auto rem succ aDmp not iDmp BSM SysLg not Clr New llDOS 44.16494404/01/1999 16:56:02 00:00:42 172.016.112.050sshprocesstable in auto rem succ aDmp not iDmp BSM SysLg not Clr New llDOS 44.16494404/01/1999 16:56:45 00:00:42 172.016.112.050sshprocesstable in auto rem succ aDmp not iDmp BSM SysLg not Clr New llDOS 44.16494404/01/1999 16:57:28 00:00:08 172.016.112.050sshprocesstable in auto rem succ aDmp not iDmp BSM SysLg not Clr New llDOS Summarized attack: 44.183234 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 44.18323404/01/1999 18:32:17 00:10:07 172.016.114.050mailbomb out auto rem succ aDmp oDmp iDmp not not not Clr Old llDOS Summarized attack: 44.201454 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category 44.20145404/01/1999 20:14:17 00:01:08 172.016.112.194sqlattack out auto rem succ aDmp oDmp iDmp not not FSLst Clr Old llDATA-llU2R- llLINUX Summarized attack: 45.084547 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 45.08454704/02/1999 08:45:18 00:00:02 172.016.112.050smurf in auto rem succ aDmp not iDmp not not not Clr Old llDOS  Summarized attack: 45.090000 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 45.09000004/02/1999 09:00:10 00:00:18 172.016.114.050arppoison out auto rem succ aDmp oDmp iDmp not not not Clr New llDOS anllLINUX 45.09000004/02/1999 09:02:09 00:10:52 172.016.114.050arppoison out auto rem succ aDmp oDmp iDmp not not not Clr New llDOS sh llLINUX Summarized attack: 45.095541 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 45.09554104/02/1999 09:55:15 00:10:29 172.016.114.050sshtrojan out auto rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llR2L L Summarized attack: 45.100334 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 45.10033404/02/1999 10:03:10 00:00:01 172.016.112.001ipsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 45.10033404/02/1999 10:04:50 00:00:01 172.016.112.002ipsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 45.10033404/02/1999 10:06:30 00:00:01 172.016.112.003ipsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 45.10033404/02/1999 10:08:10 00:00:01 172.016.112.004ipsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE llALL 45.10033404/02/1999 10:09:50 00:00:01 172.016.112.005ipsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE llALL 45.10033404/02/1999 10:09:50 00:00:01 194.007.248.153ipsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 45.10033404/02/1999 10:11:30 00:00:01 172.016.112.006ipsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE hllALL 45.10033404/02/1999 10:13:10 00:00:01 172.016.112.007ipsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE mllALL 45.10033404/02/1999 10:14:50 00:00:01 172.016.112.008ipsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE ellALL 45.10033404/02/1999 10:16:30 00:00:01 172.016.112.009ipsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE pllALL 45.10033404/02/1999 10:18:10 00:00:01 172.016.112.010ipsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE rllALL 45.10033404/02/1999 10:18:10 00:00:01 194.007.248.153ipsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE lllALL Summarized attack: 45.103937 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 45.10393704/02/1999 10:42:04 00:00:18 172.016.114.050xlock out man rem succ aDmp oDmp iDmp not not not Clr Old llR2L 45.10393704/02/1999 10:43:04 00:00:19 172.016.114.050xlock out man rem succ aDmp oDmp iDmp not not not Clr Old llR2L Summarized attack: 45.105138 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 45.10513804/02/1999 10:53:24 00:03:35 172.016.112.020named out man rem succ aDmp oDmp iDmp not SysLg not Clr Old llR2L 45.10513804/02/1999 10:53:24 00:03:35 172.016.113.105named out man rem succ aDmp oDmp iDmp not SysLg not Clr Old llR2L 45.10513804/02/1999 10:53:24 00:03:35 194.007.248.153named out man rem succ aDmp oDmp iDmp not SysLg not Clr Old llR2L Summarized attack: 45.111010 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 45.11101004/02/1999 11:10:15 00:00:01 172.016.113.050portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE QllSUNOS 45.11101004/02/1999 11:10:15 00:00:01 208.240.124.083portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE QllSUNOS 45.11101004/02/1999 11:11:15 00:00:07 172.016.113.050portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE RllSUNOS 45.11101004/02/1999 11:12:27 00:00:01 172.016.113.050portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE RllSUNOS 45.11101004/02/1999 11:12:27 00:00:01 208.240.124.083portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE RllSUNOS 45.11101004/02/1999 11:13:27 00:00:07 172.016.113.050portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE RllSUNOS 45.11101004/02/1999 11:14:39 00:00:01 172.016.113.050portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE SllSUNOS 45.11101004/02/1999 11:14:45 00:00:01 172.016.113.050portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE SllSUNOS Summarized attack: 45.114500 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 45.11450004/02/1999 11:45:13 00:01:29 172.016.114.050ncftp in auto rem succ aDmp not iDmp not not FSLst Stlth New llR2L 45.11450004/02/1999 11:45:35 00:00:47 172.016.118.070ncftp in auto rem succ aDmp not iDmp not not FSLst Stlth New llR2L on llLINUX Summarized attack: 45.114900 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 45.11490004/02/1999 11:51:00 00:00:05 172.016.112.100netbus out man rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llR2L 45.11490004/02/1999 11:51:00 00:00:02 209.001.012.046netbus out man rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llR2L djllNT 45.11490004/02/1999 11:54:02 00:01:11 172.016.112.100netbus out man rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llR2L Summarized attack: 45.123234 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 45.12323404/02/1999 12:32:17 00:12:59 172.016.113.050mailbomb out auto rem succ aDmp oDmp iDmp not not not Clr Old llDOS 45.12323404/02/1999 12:38:25 00:00:01 202.072.001.077mailbomb out auto rem succ aDmp oDmp iDmp not not not Clr Old llDOS Summarized attack: 45.130542 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 45.13054204/02/1999 13:49:30 00:00:58 172.016.112.020named out man rem succ aDmp oDmp iDmp not not not Clr Old llR2L n. 45.13054204/02/1999 13:49:30 00:00:58 195.073.151.050named out man rem succ aDmp oDmp iDmp not not not Clr Old llR2L thollLINUX Summarized attack: 45.140000 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 45.14000004/02/1999 14:00:15 00:00:01 172.016.114.001ipsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 45.14000004/02/1999 14:02:25 00:00:01 172.016.114.003ipsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 45.14000004/02/1999 14:04:34 00:00:01 172.016.114.005ipsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 45.14000004/02/1999 14:06:44 00:00:01 172.016.114.004ipsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 45.14000004/02/1999 14:08:53 00:00:01 172.016.114.050ipsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 45.14000004/02/1999 14:08:53 00:00:01 204.233.047.021ipsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE Summarized attack: 45.162148 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 45.16214804/02/1999 16:21:16 00:05:41 172.016.113.050loadmodule out auto rem succ aDmp oDmp iDmp not not FSLst Clr Old llU2R Summarized attack: 45.165009 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 45.16500904/02/1999 16:50:15 00:00:10 172.016.112.100sechole out auto rem succ aDmp oDmp iDmp not SysLg not Clr New llU2R 45.16500904/02/1999 16:50:23 00:00:02 195.115.218.108sechole out auto rem succ aDmp oDmp iDmp not SysLg not Clr New llU2R 45.16500904/02/1999 16:50:27 00:06:41 172.016.112.100sechole out auto rem succ aDmp oDmp iDmp not SysLg not Clr New llU2R 45.16500904/02/1999 17:30:10 00:05:16 172.016.112.100sechole out auto rem succ aDmp oDmp iDmp not SysLg not Clr New llU2R Summarized attack: 45.181011 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 45.18101104/02/1999 18:10:15 00:00:05 172.016.113.050portsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE Summarized attack: 45.192523 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 45.19252304/02/1999 19:25:14 00:00:01 172.016.112.001ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:25:24 00:00:01 172.016.112.002ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:25:34 00:00:01 172.016.112.003ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:25:44 00:00:01 172.016.112.004ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:25:54 00:00:01 172.016.112.005ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:25:54 00:00:01 194.007.248.153ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:26:04 00:00:01 172.016.112.006ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:26:14 00:00:01 172.016.112.007ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:26:24 00:00:01 172.016.112.008ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:26:34 00:00:01 172.016.112.009ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:26:44 00:00:01 172.016.112.010ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:26:44 00:00:01 194.007.248.153ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:26:55 00:00:01 172.016.112.011ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:27:05 00:00:01 172.016.112.012ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:27:15 00:00:01 172.016.112.013ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:27:25 00:00:01 172.016.112.014ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:27:35 00:00:01 172.016.112.015ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:27:45 00:00:01 172.016.112.016ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:27:55 00:00:01 172.016.112.017ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:28:05 00:00:01 172.016.112.018ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:28:15 00:00:01 172.016.112.019ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:28:25 00:00:01 172.016.112.020ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:28:25 00:00:01 194.007.248.153ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:28:35 00:00:01 172.016.112.021ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:28:45 00:00:01 172.016.112.022ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:28:55 00:00:01 172.016.112.023ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:29:05 00:00:01 172.016.112.024ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:29:15 00:00:01 172.016.112.025ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:29:25 00:00:01 172.016.112.026ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:29:35 00:00:01 172.016.112.027ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:29:45 00:00:01 172.016.112.028ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:29:55 00:00:01 172.016.112.029ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:30:05 00:00:01 172.016.112.030ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:30:15 00:00:01 172.016.112.031ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:30:25 00:00:01 172.016.112.032ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:30:35 00:00:01 172.016.112.033ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:30:45 00:00:01 172.016.112.034ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:30:55 00:00:01 172.016.112.035ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:31:05 00:00:01 172.016.112.036ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:31:15 00:00:01 172.016.112.037ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:31:25 00:00:01 172.016.112.038ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:31:35 00:00:01 172.016.112.039ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:31:45 00:00:01 172.016.112.040ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:31:55 00:00:01 172.016.112.041ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:32:05 00:00:01 172.016.112.042ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:32:15 00:00:01 172.016.112.043ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:32:25 00:00:01 172.016.112.044ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:32:35 00:00:01 172.016.112.045ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:32:45 00:00:01 172.016.112.046ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:32:55 00:00:01 172.016.112.047ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:33:05 00:00:01 172.016.112.048ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:33:15 00:00:01 172.016.112.049ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:33:25 00:00:01 172.016.112.050ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:33:25 00:00:01 194.007.248.153ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:33:35 00:00:01 172.016.112.051ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:33:45 00:00:01 172.016.112.052ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:33:55 00:00:01 172.016.112.053ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:34:05 00:00:01 172.016.112.054ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:34:15 00:00:01 172.016.112.055ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:34:25 00:00:01 172.016.112.056ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:34:35 00:00:01 172.016.112.057ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:34:45 00:00:01 172.016.112.058ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:34:55 00:00:01 172.016.112.059ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:35:05 00:00:01 172.016.112.060ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:35:16 00:00:01 172.016.112.061ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:35:26 00:00:01 172.016.112.062ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:35:36 00:00:01 172.016.112.063ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:35:46 00:00:01 172.016.112.064ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:35:56 00:00:01 172.016.112.065ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:36:06 00:00:01 172.016.112.066ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:36:16 00:00:01 172.016.112.067ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:36:26 00:00:01 172.016.112.068ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:36:36 00:00:01 172.016.112.069ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:36:46 00:00:01 172.016.112.070ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:36:56 00:00:01 172.016.112.071ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:37:06 00:00:01 172.016.112.072ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:37:16 00:00:01 172.016.112.073ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:37:26 00:00:01 172.016.112.074ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:37:36 00:00:01 172.016.112.075ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:37:46 00:00:01 172.016.112.076ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:37:56 00:00:01 172.016.112.077ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:38:06 00:00:01 172.016.112.078ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:38:16 00:00:01 172.016.112.079ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:38:26 00:00:01 172.016.112.080ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:38:36 00:00:01 172.016.112.081ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:38:46 00:00:01 172.016.112.082ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:38:56 00:00:01 172.016.112.083ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:39:06 00:00:01 172.016.112.084ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:39:16 00:00:01 172.016.112.085ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:39:26 00:00:01 172.016.112.086ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:39:36 00:00:01 172.016.112.087ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:39:46 00:00:01 172.016.112.088ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:39:56 00:00:01 172.016.112.089ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:40:06 00:00:01 172.016.112.090ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:40:16 00:00:01 172.016.112.091ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:40:26 00:00:01 172.016.112.092ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:40:37 00:00:01 172.016.112.093ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:40:47 00:00:01 172.016.112.094ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:40:57 00:00:01 172.016.112.095ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:41:07 00:00:01 172.016.112.096ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:41:17 00:00:01 172.016.112.097ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:41:27 00:00:01 172.016.112.098ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:41:37 00:00:01 172.016.112.099ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:41:47 00:00:01 172.016.112.100ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:41:47 00:00:01 194.007.248.153ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:41:57 00:00:01 172.016.112.101ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:42:07 00:00:01 172.016.112.102ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:42:17 00:00:01 172.016.112.103ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:42:27 00:00:01 172.016.112.104ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:42:37 00:00:01 172.016.112.105ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:42:47 00:00:01 172.016.112.106ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:42:57 00:00:01 172.016.112.107ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:43:07 00:00:01 172.016.112.108ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:43:17 00:00:01 172.016.112.109ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:43:27 00:00:01 172.016.112.110ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:43:37 00:00:01 172.016.112.111ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:43:47 00:00:01 172.016.112.112ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:43:57 00:00:01 172.016.112.113ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:44:07 00:00:01 172.016.112.114ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:44:17 00:00:01 172.016.112.115ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:44:27 00:00:01 172.016.112.116ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:44:37 00:00:01 172.016.112.117ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:44:47 00:00:01 172.016.112.118ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:44:57 00:00:01 172.016.112.119ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:45:07 00:00:01 172.016.112.120ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:45:17 00:00:01 172.016.112.121ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:45:27 00:00:01 172.016.112.122ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:45:37 00:00:01 172.016.112.123ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:45:47 00:00:01 172.016.112.124ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:45:57 00:00:01 172.016.112.125ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:46:07 00:00:01 172.016.112.126ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:46:17 00:00:01 172.016.112.127ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:46:28 00:00:01 172.016.112.128ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:46:38 00:00:01 172.016.112.129ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:46:48 00:00:01 172.016.112.130ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:46:58 00:00:01 172.016.112.131ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:47:08 00:00:01 172.016.112.132ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:47:18 00:00:01 172.016.112.133ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:47:28 00:00:01 172.016.112.134ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:47:38 00:00:01 172.016.112.135ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:47:48 00:00:01 172.016.112.136ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:47:58 00:00:01 172.016.112.137ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:48:08 00:00:01 172.016.112.138ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:48:18 00:00:01 172.016.112.139ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:48:28 00:00:01 172.016.112.140ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:48:38 00:00:01 172.016.112.141ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:48:48 00:00:01 172.016.112.142ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:48:58 00:00:01 172.016.112.143ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:49:08 00:00:01 172.016.112.144ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:49:18 00:00:01 172.016.112.145ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:49:28 00:00:01 172.016.112.146ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:49:38 00:00:01 172.016.112.147ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:49:48 00:00:01 172.016.112.148ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:49:58 00:00:01 172.016.112.149ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:49:58 00:00:01 194.007.248.153ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:50:08 00:00:01 172.016.112.150ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:50:18 00:00:01 172.016.112.151ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:50:28 00:00:01 172.016.112.152ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:50:38 00:00:01 172.016.112.153ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:50:48 00:00:01 172.016.112.154ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:50:58 00:00:01 172.016.112.155ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:51:08 00:00:01 172.016.112.156ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:51:18 00:00:01 172.016.112.157ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:51:28 00:00:01 172.016.112.158ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:51:38 00:00:01 172.016.112.159ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:51:48 00:00:01 172.016.112.160ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:51:59 00:00:01 172.016.112.161ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:52:09 00:00:01 172.016.112.162ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:52:19 00:00:01 172.016.112.163ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:52:29 00:00:01 172.016.112.164ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:52:39 00:00:01 172.016.112.165ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:52:49 00:00:01 172.016.112.166ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:52:59 00:00:01 172.016.112.167ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:53:09 00:00:01 172.016.112.168ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:53:19 00:00:01 172.016.112.169ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:53:29 00:00:01 172.016.112.170ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:53:39 00:00:01 172.016.112.171ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:53:49 00:00:01 172.016.112.172ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:53:59 00:00:01 172.016.112.173ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:54:09 00:00:01 172.016.112.174ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:54:19 00:00:01 172.016.112.175ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:54:29 00:00:01 172.016.112.176ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:54:39 00:00:01 172.016.112.177ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:54:49 00:00:01 172.016.112.178ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:54:59 00:00:01 172.016.112.179ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:55:09 00:00:01 172.016.112.180ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:55:19 00:00:01 172.016.112.181ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:55:29 00:00:01 172.016.112.182ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:55:39 00:00:01 172.016.112.183ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:55:49 00:00:01 172.016.112.184ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:55:59 00:00:01 172.016.112.185ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:56:09 00:00:01 172.016.112.186ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:56:19 00:00:01 172.016.112.187ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:56:29 00:00:01 172.016.112.188ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:56:39 00:00:01 172.016.112.189ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:56:49 00:00:01 172.016.112.190ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:56:59 00:00:01 172.016.112.191ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:57:09 00:00:01 172.016.112.192ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:57:19 00:00:01 172.016.112.193ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:57:29 00:00:01 172.016.112.194ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:57:29 00:00:01 194.007.248.153ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:57:39 00:00:01 172.016.112.195ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:57:50 00:00:01 172.016.112.196ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:58:00 00:00:01 172.016.112.197ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:58:10 00:00:01 172.016.112.198ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:58:20 00:00:01 172.016.112.199ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:58:30 00:00:01 172.016.112.200ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:58:40 00:00:01 172.016.112.201ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:58:50 00:00:01 172.016.112.202ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:59:00 00:00:01 172.016.112.203ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:59:10 00:00:01 172.016.112.204ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:59:20 00:00:01 172.016.112.205ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:59:30 00:00:01 172.016.112.206ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:59:40 00:00:01 172.016.112.207ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:59:40 00:00:01 194.007.248.153ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 19:59:50 00:00:01 172.016.112.208ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:00:00 00:00:01 172.016.112.209ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:00:10 00:00:01 172.016.112.210ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:00:20 00:00:01 172.016.112.211ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:00:30 00:00:01 172.016.112.212ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:00:40 00:00:01 172.016.112.213ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:00:50 00:00:01 172.016.112.214ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:01:00 00:00:01 172.016.112.215ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:01:10 00:00:01 172.016.112.216ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:01:20 00:00:01 172.016.112.217ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:01:30 00:00:01 172.016.112.218ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:01:40 00:00:01 172.016.112.219ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:01:50 00:00:01 172.016.112.220ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:02:00 00:00:01 172.016.112.221ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:02:10 00:00:01 172.016.112.222ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:02:20 00:00:01 172.016.112.223ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:02:30 00:00:01 172.016.112.224ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:02:40 00:00:01 172.016.112.225ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:02:50 00:00:01 172.016.112.226ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:03:00 00:00:01 172.016.112.227ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:03:10 00:00:01 172.016.112.228ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:03:20 00:00:01 172.016.112.229ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:03:30 00:00:01 172.016.112.230ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:03:41 00:00:01 172.016.112.231ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:03:51 00:00:01 172.016.112.232ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:04:01 00:00:01 172.016.112.233ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:04:11 00:00:01 172.016.112.234ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:04:21 00:00:01 172.016.112.235ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:04:31 00:00:01 172.016.112.236ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:04:41 00:00:01 172.016.112.237ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:04:51 00:00:01 172.016.112.238ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:05:01 00:00:01 172.016.112.239ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:05:11 00:00:01 172.016.112.240ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:05:21 00:00:01 172.016.112.241ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:05:31 00:00:01 172.016.112.242ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:05:41 00:00:01 172.016.112.243ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:05:51 00:00:01 172.016.112.244ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:06:01 00:00:01 172.016.112.245ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:06:11 00:00:01 172.016.112.246ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:06:21 00:00:01 172.016.112.247ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:06:31 00:00:01 172.016.112.248ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:06:41 00:00:01 172.016.112.249ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:06:51 00:00:01 172.016.112.250ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:07:01 00:00:01 172.016.112.251ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:07:11 00:00:01 172.016.112.252ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:07:21 00:00:01 172.016.112.253ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 45.19252304/02/1999 20:07:31 00:00:01 172.016.112.254ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE Summarized attack: 45.203400 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 45.20340004/02/1999 20:34:00 00:02:00 172.016.112.050secret auto rem succ not not not BSM not FSLst Clr New llDATA n Summarized attack: 51.083800 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 51.08380004/05/1999 08:39:52 00:00:10 172.016.112.050pod out man rem succ aDmp oDmp iDmp not not not Clr Old llDOS Summarized attack: 51.084334 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 51.08433404/05/1999 08:43:17 00:00:01 192.168.001.001portsweep in auto rem succ aDmp oDmp not not not not Stlth Old llPROBE NllCISCO 51.08433404/05/1999 08:45:13 00:00:01 192.168.001.001portsweep in auto rem succ aDmp oDmp not not not not Stlth Old llPROBE 51.08433404/05/1999 08:47:09 00:00:01 192.168.001.001portsweep in auto rem succ aDmp oDmp not not not not Stlth Old llPROBE Summarized attack: 51.085000 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 51.08500004/05/1999 08:48:33 00:00:05 172.016.114.050pod out man rem succ aDmp oDmp iDmp not not not Clr Old llDOS 51.08500004/05/1999 08:49:03 00:00:01 202.077.162.213pod out man rem succ aDmp oDmp iDmp not not not Clr Old llDOS Summarized attack: 51.085947 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 51.08594704/05/1999 08:59:16 00:00:41 172.016.112.050warezclient out auto rem succ aDmp oDmp iDmp BSM SysLg not Clr Old llDOS 51.08594704/05/1999 08:59:45 00:00:01 207.075.239.115warezclient out auto rem succ aDmp oDmp iDmp BSM SysLg not Clr Old llDOS k Summarized attack: 51.093123 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 51.09312304/05/1999 09:33:00 00:02:00 172.016.112.050smurf man rem succ aDmp not iDmp not not not Clr Old llDOS Summarized attack: 51.094334 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 51.09433404/05/1999 09:43:11 00:00:08 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp BSM not not Clr Old llPROBE tllSOLARIS 51.09433404/05/1999 09:43:24 00:00:01 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp BSM not not Clr Old llPROBE 51.09433404/05/1999 09:43:31 00:00:03 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp BSM not not Clr Old llPROBE lllSOLARIS 51.09433404/05/1999 09:43:35 00:00:03 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp BSM not not Clr Old llPROBE 51.09433404/05/1999 09:43:43 00:00:01 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp BSM not not Clr Old llPROBE illSOLARIS 51.09433404/05/1999 09:43:50 00:00:02 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp BSM not not Clr Old llPROBE 51.09433404/05/1999 09:43:57 00:00:01 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp BSM not not Clr Old llPROBE hllSOLARIS 51.09433404/05/1999 09:44:04 00:00:04 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp BSM not not Clr Old llPROBE 51.09433404/05/1999 09:44:09 00:00:04 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp BSM not not Clr Old llPROBE rllSOLARIS 51.09433404/05/1999 09:44:18 00:00:01 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp BSM not not Clr Old llPROBE 51.09433404/05/1999 09:44:25 00:00:04 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp BSM not not Clr Old llPROBE rllSOLARIS 51.09433404/05/1999 09:44:34 00:00:01 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp BSM not not Clr Old llPROBE 51.09433404/05/1999 09:44:41 00:00:02 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp BSM not not Clr Old llPROBE llSOLARIS 51.09433404/05/1999 09:44:44 00:00:05 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp BSM not not Clr Old llPROBE 51.09433404/05/1999 09:44:54 00:00:01 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp BSM not not Clr Old llPROBE nllSOLARIS 51.09433404/05/1999 09:45:01 00:00:03 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp BSM not not Clr Old llPROBE sllSOLARIS 51.09433404/05/1999 09:45:05 00:00:02 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp BSM not not Clr Old llPROBE 51.09433404/05/1999 09:45:12 00:00:01 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp BSM not not Clr Old llPROBE llSOLARIS 51.09433404/05/1999 09:45:19 00:00:09 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp BSM not not Clr Old llPROBE sllSOLARIS 51.09433404/05/1999 09:45:29 00:00:10 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp BSM not not Clr Old llPROBE ellSOLARIS 51.09433404/05/1999 09:45:44 00:00:01 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp BSM not not Clr Old llPROBE allSOLARIS 51.09433404/05/1999 09:45:52 00:00:10 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp BSM not not Clr Old llPROBE ellSOLARIS 51.09433404/05/1999 09:46:03 00:00:11 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp BSM not not Clr Old llPROBE rllSOLARIS 51.09433404/05/1999 09:46:15 00:00:06 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp BSM not not Clr Old llPROBE lllSOLARIS 51.09433404/05/1999 09:46:26 00:00:01 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp BSM not not Clr Old llPROBE 51.09433404/05/1999 09:46:33 00:00:01 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp BSM not not Clr Old llPROBE ellSOLARIS 51.09433404/05/1999 09:46:35 00:00:01 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp BSM not not Clr Old llPROBE illSOLARIS 51.09433404/05/1999 09:46:37 00:00:11 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp BSM not not Clr Old llPROBE 51.09433404/05/1999 09:46:53 00:00:01 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp BSM not not Clr Old llPROBE Summarized attack: 51.102700 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 51.10270004/05/1999 10:29:22 00:17:37 172.016.114.050apache2 out man rem succ aDmp oDmp iDmp not not not Clr Old llDOS 51.10270004/05/1999 10:29:28 00:00:22 202.077.162.213apache2 out man rem succ aDmp oDmp iDmp not not not Clr Old llDOS  Summarized attack: 51.105811 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 51.10581104/05/1999 10:58:14 00:01:46 172.016.118.080guesstelnet out auto rem succ aDmp oDmp iDmp not SysLg not Clr Old llR2L 51.10581104/05/1999 11:00:01 00:01:33 172.016.118.080guesstelnet out auto rem succ aDmp oDmp iDmp not SysLg not Clr Old llR2L 51.10581104/05/1999 11:00:03 00:00:01 192.005.041.239guesstelnet out auto rem succ aDmp oDmp iDmp not SysLg not Clr Old llR2L : llLINUX Summarized attack: 51.114500 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 51.11450004/05/1999 11:45:27 00:16:33 172.016.112.100dosnuke in man rem succ aDmp not iDmp not SysLg not Clr New llDOS Summarized attack: 51.120309 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 51.12030904/05/1999 12:03:14 00:11:15 172.016.113.050loadmodule in auto rem succ aDmp not iDmp not not FSLst Stlth Old llU2R s ullSUNOS Summarized attack: 51.121101 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 51.12110104/05/1999 12:11:18 00:12:28 172.016.112.050ffbconfig out auto rem succ aDmp oDmp iDmp BSM not FSLst Clr Old llU2R Summarized attack: 51.131803 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 51.13180304/05/1999 13:18:12 00:00:01 172.016.114.050smurf out auto rem succ aDmp oDmp iDmp not not not Clr Old llDOS mallLINUX Summarized attack: 51.133019 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 51.13301904/05/1999 13:30:14 00:00:17 172.016.112.100arppoison out auto rem succ aDmp oDmp iDmp not not not Clr New llDOS s allNT 51.13301904/05/1999 13:33:52 00:10:59 172.016.112.100arppoison out auto rem succ aDmp oDmp iDmp not not not Clr New llDOS he llNT Summarized attack: 51.140100 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 51.14010004/05/1999 14:05:43 00:10:04 172.016.114.050apache2 out man rem succ aDmp oDmp iDmp not not not Clr Old llDOS th.llLINUX 51.14010004/05/1999 14:05:47 00:00:01 152.169.215.104apache2 out man rem succ aDmp oDmp iDmp not not not Clr Old llDOS f, llLINUX 51.14010004/05/1999 14:11:48 00:00:01 152.169.215.104apache2 out man rem succ aDmp oDmp iDmp not not not Clr Old llDOS 51.14010004/05/1999 14:13:02 00:00:01 152.169.215.104apache2 out man rem succ aDmp oDmp iDmp not not not Clr Old llDOS 51.14010004/05/1999 14:13:16 00:00:01 152.169.215.104apache2 out man rem succ aDmp oDmp iDmp not not not Clr Old llDOS 51.14010004/05/1999 14:13:56 00:00:01 152.169.215.104apache2 out man rem succ aDmp oDmp iDmp not not not Clr Old llDOS e allLINUX 51.14010004/05/1999 14:14:05 00:00:01 152.169.215.104apache2 out man rem succ aDmp oDmp iDmp not not not Clr Old llDOS 51.14010004/05/1999 14:14:52 00:00:01 152.169.215.104apache2 out man rem succ aDmp oDmp iDmp not not not Clr Old llDOS erellLINUX 51.14010004/05/1999 14:14:55 00:00:01 152.169.215.104apache2 out man rem succ aDmp oDmp iDmp not not not Clr Old llDOS erellLINUX 51.14010004/05/1999 14:15:06 00:00:01 152.169.215.104apache2 out man rem succ aDmp oDmp iDmp not not not Clr Old llDOS 51.14010004/05/1999 14:15:19 00:00:01 152.169.215.104apache2 out man rem succ aDmp oDmp iDmp not not not Clr Old llDOS 51.14010004/05/1999 14:16:51 00:00:01 206.048.044.050apache2 out man rem succ aDmp oDmp iDmp not not not Clr Old llDOS Summarized attack: 51.142100 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 51.14210004/05/1999 14:22:30 00:00:01 172.016.113.050pod out man rem succ aDmp oDmp iDmp not not Clr Old llDOS TllLINUX Summarized attack: 51.144601 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 51.14460104/05/1999 14:46:19 00:00:10 172.016.114.050imap in auto rem succ aDmp not iDmp not SysLg not Clr Old llR2L $UUllLINUX Summarized attack: 51.150000 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 51.15000004/05/1999 15:00:16 00:00:01 172.016.113.001ipsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 51.15000004/05/1999 15:04:06 00:00:01 172.016.113.003ipsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 51.15000004/05/1999 15:07:56 00:00:01 172.016.113.005ipsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE llALL 51.15000004/05/1999 15:11:46 00:00:01 172.016.113.004ipsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 51.15000004/05/1999 15:15:36 00:00:01 172.016.113.050ipsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 51.15000004/05/1999 15:15:36 00:00:01 204.233.047.021ipsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE }llALL Summarized attack: 51.163200 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 51.16320004/05/1999 16:32:17 00:00:10 172.016.114.050dict in auto rem succ aDmp not iDmp not SysLg not Clr Old llR2L 51.16320004/05/1999 16:32:28 00:00:31 172.016.114.050dict in auto rem succ aDmp not iDmp not SysLg not Clr Old llR2L  51.16320004/05/1999 16:33:00 00:00:22 172.016.114.050dict in auto rem succ aDmp not iDmp not SysLg not Clr Old llR2L 4̘llLINUX 51.16320004/05/1999 16:33:23 00:08:40 172.016.114.050dict in auto rem succ aDmp not iDmp not SysLg not Clr Old llR2L 51.16320004/05/1999 16:42:04 00:04:05 172.016.114.050dict in auto rem succ aDmp not iDmp not SysLg not Clr Old llR2L 51.16320004/05/1999 16:46:10 00:02:42 172.016.114.050dict in auto rem succ aDmp not iDmp not SysLg not Clr Old llR2L llLINUX Summarized attack: 51.171917 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 51.17191704/05/1999 17:19:10 00:15:01 172.016.112.050syslogd out auto rem succ aDmp iDmp BSM SysLg not Clr Old llDOS  Summarized attack: 51.180445 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 51.18044504/05/1999 18:04:04 00:06:51 172.016.112.050neptune out auto rem succ aDmp oDmp iDmp not not not Clr Old llDOS L Summarized attack: 51.183623 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 51.18362304/05/1999 18:36:11 00:15:07 172.016.112.100crashiis out auto rem succ aDmp oDmp iDmp not SysLg not Clr Old llDOS Summarized attack: 51.185613 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 51.18561304/05/1999 18:57:21 00:00:01 172.016.112.020ls_domain out auto rem succ aDmp oDmp iDmp not not not Clr New llPROBE Summarized attack: 51.194715 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 51.19471504/05/1999 19:48:01 00:16:41 172.016.115.234dosnuke out auto rem succ aDmp oDmp iDmp not SysLg not Clr New llDOS  Summarized attack: 51.200037 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 51.20003704/05/1999 20:00:27 00:15:00 172.016.113.*udpstorm out auto rem succ not oDmp iDmp not not not Old llDOS llALL 51.20003704/05/1999 20:00:27 00:15:00 172.016.112.*udpstorm out auto rem succ not oDmp iDmp not not not Old llDOS llALL Summarized attack: 51.201715 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 51.20171504/05/1999 20:17:12 00:03:03 172.016.112.050selfping out auto rem succ aDmp oDmp iDmp BSM not not Clr New llDOS 2llSOLARIS Summarized attack: 51.204631 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 51.20463104/05/1999 20:46:13 00:01:29 172.016.114.050ncftp in auto rem succ aDmp not iDmp not SysLg FSLst Stlth New llR2L FllLINUX 51.20463104/05/1999 20:46:35 00:00:47 172.016.118.070ncftp in auto rem succ aDmp not iDmp not SysLg FSLst Stlth New llR2L Summarized attack: 52.081109 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 52.08110904/06/1999 08:11:15 00:00:10 172.016.112.050tcpreset out auto rem succ aDmp oDmp iDmp not not not Clr New llDOS 52.08110904/06/1999 08:11:27 00:10:38 172.016.112.050tcpreset out auto rem succ aDmp oDmp iDmp not not not Clr New llDOS ns.llLINUX Summarized attack: 52.083236 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 52.08323604/06/1999 08:32:14 00:15:01 172.016.114.050teardrop out auto rem succ aDmp oDmp iDmp not SysLg not Clr Old llDOS Summarized attack: 52.085357 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 52.08535704/06/1999 08:53:17 00:00:07 172.016.112.100casesen in auto rem succ aDmp not iDmp not SysLg FSLst Clr New llU2R erellNT 52.08535704/06/1999 08:53:21 00:00:03 172.016.113.204casesen in auto rem succ aDmp not iDmp not SysLg FSLst Clr New llU2R ialllNT 52.08535704/06/1999 08:53:26 00:17:16 172.016.112.100casesen in auto rem succ aDmp not iDmp not SysLg FSLst Clr New llU2R whllNT 52.08535704/06/1999 09:33:15 00:09:40 172.016.112.100casesen in auto rem succ aDmp not iDmp not SysLg FSLst Clr New llU2R polllNT Summarized attack: 52.092200 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 52.09220004/06/1999 09:19:01 00:01:12 172.016.112.050xsnoop out man rem succ aDmp oDmp iDmp not not not Clr Old llR2L }llSOLARIS Summarized attack: 52.094514 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 52.09451404/06/1999 09:45:13 00:03:03 172.016.112.050selfping out auto rem succ aDmp oDmp iDmp BSM not not Clr New llDOS 4ullSOLARIS Summarized attack: 52.100738 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 52.10073804/06/1999 10:07:18 00:00:36 172.016.112.194xterm out auto rem succ aDmp oDmp iDmp not not FSLst Clr Old llU2R dYjllLINUX 52.10073804/06/1999 10:07:38 00:00:01 152.169.215.104xterm out auto rem succ aDmp oDmp iDmp not not FSLst Clr Old llU2R jllLINUX 52.10073804/06/1999 10:07:42 00:00:01 152.169.215.104xterm out auto rem succ aDmp oDmp iDmp not not FSLst Clr Old llU2R ronllLINUX 52.10073804/06/1999 10:36:16 00:11:45 172.016.112.194xterm out auto rem succ aDmp oDmp iDmp not not FSLst Clr Old llU2R ellLINUX Summarized attack: 52.101901 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 52.10190104/06/1999 10:19:16 00:00:11 172.016.112.050ftpwrite in auto rem succ aDmp not iDmp BSM SysLg FSLst Clr Old llR2L 52.10190104/06/1999 10:19:19 00:00:01 172.016.114.207ftpwrite in auto rem succ aDmp not iDmp BSM SysLg FSLst Clr Old llR2L 52.10190104/06/1999 10:32:48 00:00:32 172.016.112.050ftpwrite in auto rem succ aDmp not iDmp BSM SysLg FSLst Clr Old llR2L Summarized attack: 52.103409 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 52.10340904/06/1999 11:31:21 00:20:38 172.016.114.050back in auto rem succ aDmp oDmp iDmp not not not Clr Old llDOS |llLINUX 52.10340904/06/1999 11:37:43 00:00:01 206.048.044.050back in auto rem succ aDmp oDmp iDmp not not not Clr Old llDOS s fllLINUX 52.10340904/06/1999 11:42:40 00:00:01 206.048.044.050back in auto rem succ aDmp oDmp iDmp not not not Clr Old llDOS e ollLINUX 52.10340904/06/1999 11:47:03 00:00:01 206.048.044.050back in auto rem succ aDmp oDmp iDmp not not not Clr Old llDOS hadllLINUX Summarized attack: 52.112045 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 52.11204504/06/1999 11:20:09 00:23:36 172.016.112.050ps out man rem succ aDmp oDmp iDmp BSM SysLg FSLst Stlth Old llU2R n allSOLARIS 52.11204504/06/1999 11:25:13 00:00:53 199.227.099.125ps out man rem succ aDmp oDmp iDmp BSM SysLg FSLst Stlth Old llU2R ervllSOLARIS 52.11204504/06/1999 12:59:00 00:02:00 172.016.112.050ps out man rem succ aDmp oDmp iDmp BSM SysLg FSLst Stlth Old llU2R Summarized attack: 52.113855 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 52.11385504/06/1999 11:38:04 00:13:41 172.016.114.050neptune out auto rem succ aDmp oDmp iDmp not not not Clr Old llDOS hllLINUX 52.11385504/06/1999 11:48:42 00:00:01 192.168.001.010neptune out auto rem succ aDmp oDmp iDmp not not not Clr Old llDOS hllLINUX Summarized attack: 52.120600 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 52.12060004/06/1999 12:06:32 00:03:30 196.037.075.158httptunnel out auto rem succ aDmp oDmp iDmp BSM not not Clr Old llR2L actllSOLARIS Summarized attack: 52.125501 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 52.12550104/06/1999 12:55:14 00:16:32 172.016.112.050eject out auto rem succ aDmp oDmp iDmp BSM SysLg FSLst Stlth Old llU2R 52.12550104/06/1999 12:57:57 00:00:27 152.169.215.104eject out auto rem succ aDmp oDmp iDmp BSM SysLg FSLst Stlth Old llU2R 52.12550104/06/1999 13:03:11 00:00:01 152.169.215.104eject out auto rem succ aDmp oDmp iDmp BSM SysLg FSLst Stlth Old llU2R Summarized attack: 52.130655 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 52.13065504/06/1999 13:06:00 00:00:30 172.016.113.050pod out auto rem succ aDmp oDmp iDmp not SysLg not Clr Old llDOS resllSUNOS Summarized attack: 52.132827 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 52.13282704/06/1999 13:28:11 00:22:27 172.016.112.100yaga out auto rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llU2R 52.13282704/06/1999 13:58:10 00:12:20 172.016.112.100yaga out auto rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llU2R othllNT Summarized attack: 52.135003 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 52.13500304/06/1999 13:50:03 00:15:05 172.016.112.100crashiis out auto rem succ aDmp oDmp iDmp not not not Clr Old llDOS ortllNT Summarized attack: 52.140207 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 52.14020704/06/1999 14:26:26 00:00:11 172.016.112.100ppmacro out man rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llR2L 52.14020704/06/1999 14:26:29 00:00:08 199.174.194.016ppmacro out man rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llR2L llNT 52.14020704/06/1999 14:34:11 00:00:01 172.016.112.100ppmacro out man rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llR2L 4llNT 52.14020704/06/1999 14:34:19 00:00:01 172.016.112.100ppmacro out man rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llR2L L 52.14020704/06/1999 14:34:41 00:00:01 172.016.112.100ppmacro out man rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llR2L 52.14020704/06/1999 14:34:48 00:00:01 172.016.112.100ppmacro out man rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llR2L llNT 52.14020704/06/1999 14:36:19 00:00:01 172.016.112.100ppmacro out man rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llR2L 52.14020704/06/1999 14:36:39 00:00:01 172.016.112.100ppmacro out man rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llR2L  52.14020704/06/1999 14:36:47 00:00:01 172.016.112.100ppmacro out man rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llR2L  52.14020704/06/1999 14:38:25 00:00:01 172.016.112.100ppmacro out man rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llR2L 52.14020704/06/1999 14:38:34 00:00:44 172.016.112.100ppmacro out man rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llR2L llNT Summarized attack: 52.141200 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 52.14120004/06/1999 14:13:56 00:00:01 172.016.112.050syslog in man rem succ aDmp not iDmp BSM SysLg not Clr Old llDOS Summarized attack: 52.142452 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 52.14245204/06/1999 14:24:17 00:14:47 172.016.114.207perl out auto rem succ aDmp oDmp iDmp not SysLg FSLst Clr Old llU2R nerllLINUX Summarized attack: 52.162435 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category ed NaOS 52.16243504/06/1999 16:24:15 00:00:33 172.016.112.050fdformat out auto rem succ aDmp oDmp iDmp BSM SysLg FSLst Clr Old llDATA-llU2R- llSOLARIS 52.16243504/06/1999 16:24:33 00:00:02 196.038.075.158fdformat out auto rem succ aDmp oDmp iDmp BSM SysLg FSLst Clr Old llDATA-llU2R- llSOLARIS 52.16243504/06/1999 16:24:39 00:00:01 196.038.075.158fdformat out auto rem succ aDmp oDmp iDmp BSM SysLg FSLst Clr Old llDATA-llU2R- llSOLARIS 52.16243504/06/1999 16:24:44 00:00:01 196.038.075.158fdformat out auto rem succ aDmp oDmp iDmp BSM SysLg FSLst Clr Old llDATA-llU2R- llSOLARIS 52.16243504/06/1999 16:40:15 00:40:24 172.016.112.050fdformat out auto rem succ aDmp oDmp iDmp BSM SysLg FSLst Clr Old llDATA-llU2R- llSOLARIS 52.16243504/06/1999 17:22:15 00:02:00 172.016.112.050secret out auto rem succ aDmp oDmp iDmp BSM SysLg FSLst Clr Old llDATA-llU2R- llSOLARIS Summarized attack: 52.165435 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 52.16543504/06/1999 16:54:20 00:00:01 172.016.113.050queso out auto rem succ aDmp oDmp iDmp not not not Clr New llPROBE llSUNOS 52.16543504/06/1999 16:54:22 00:00:01 172.016.113.050queso out auto rem succ aDmp oDmp iDmp not not not Clr New llPROBE 52.16543504/06/1999 16:54:24 00:00:01 172.016.113.050queso out auto rem succ aDmp oDmp iDmp not not not Clr New llPROBE allSUNOS 52.16543504/06/1999 16:54:45 00:00:01 172.016.113.050queso out auto rem succ aDmp oDmp iDmp not not not Clr New llPROBE 52.16543504/06/1999 16:54:47 00:00:01 172.016.113.050queso out auto rem succ aDmp oDmp iDmp not not not Clr New llPROBE llSUNOS 52.16543504/06/1999 16:54:49 00:00:01 172.016.113.050queso out auto rem succ aDmp oDmp iDmp not not not Clr New llPROBE 52.16543504/06/1999 16:55:10 00:00:01 172.016.113.050queso out auto rem succ aDmp oDmp iDmp not not not Clr New llPROBE Summarized attack: 52.181637 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 52.18163704/06/1999 18:16:05 00:03:26 192.168.001.001neptune out auto rem succ aDmp oDmp not not not not Clr Old llDOS nomllCISCO Summarized attack: 52.205605 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 52.20560504/06/1999 20:57:03 00:16:33 172.016.112.100dosnuke in auto rem succ aDmp not iDmp not SysLg not Clr New llDOS ubsllNT Summarized attack: 52.211313 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 52.21131304/06/1999 21:15:54 00:00:03 172.016.114.148portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:16:00 00:00:03 172.016.114.148portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:16:06 00:00:03 172.016.114.148portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:16:12 00:00:03 172.016.114.148portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:16:18 00:00:03 172.016.114.148portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:16:24 00:00:03 172.016.112.100portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:16:30 00:00:03 172.016.112.100portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:16:36 00:00:03 172.016.112.100portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:16:42 00:00:03 172.016.112.100portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:16:48 00:00:03 172.016.112.100portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:16:54 00:00:03 172.016.118.010portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:17:00 00:00:03 172.016.118.010portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:17:06 00:00:03 172.016.118.010portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:17:12 00:00:03 172.016.118.010portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:17:18 00:00:03 172.016.118.010portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:17:24 00:00:03 172.016.118.020portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:17:30 00:00:03 172.016.118.020portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:17:36 00:00:03 172.016.118.020portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:17:42 00:00:03 172.016.118.020portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:17:48 00:00:03 172.016.118.020portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:17:54 00:00:03 172.016.118.030portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:18:00 00:00:03 172.016.118.030portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:18:06 00:00:03 172.016.118.030portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:18:12 00:00:03 172.016.118.030portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:18:18 00:00:03 172.016.118.030portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:18:24 00:00:03 172.016.118.040portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:18:30 00:00:03 172.016.118.040portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:18:36 00:00:03 172.016.118.040portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:18:42 00:00:03 172.016.118.040portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:18:48 00:00:03 172.016.118.040portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:18:54 00:00:03 172.016.118.050portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:19:00 00:00:03 172.016.118.050portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:19:06 00:00:03 172.016.118.050portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:19:12 00:00:03 172.016.118.050portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:19:18 00:00:03 172.016.118.050portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:19:24 00:00:03 172.016.118.060portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:19:30 00:00:03 172.016.118.060portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:19:36 00:00:03 172.016.118.060portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:19:42 00:00:03 172.016.118.060portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:19:48 00:00:03 172.016.118.060portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:19:55 00:00:03 172.016.118.070portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:20:01 00:00:03 172.016.118.070portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:20:07 00:00:03 172.016.118.070portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:20:13 00:00:03 172.016.118.070portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:20:19 00:00:03 172.016.118.070portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:20:25 00:00:03 172.016.118.080portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:20:31 00:00:03 172.016.118.080portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:20:37 00:00:03 172.016.118.080portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:20:43 00:00:03 172.016.118.080portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:20:49 00:00:03 172.016.118.080portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:20:55 00:00:03 172.016.118.090portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:21:01 00:00:03 172.016.118.090portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:21:07 00:00:03 172.016.118.090portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:21:13 00:00:03 172.016.118.090portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:21:19 00:00:03 172.016.118.090portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:21:25 00:00:03 172.016.112.020portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:21:31 00:00:03 172.016.112.020portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:21:37 00:00:03 172.016.112.020portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:21:43 00:00:03 172.016.112.020portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:21:49 00:00:03 172.016.112.020portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:21:55 00:00:03 172.016.114.169portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:22:01 00:00:03 172.016.114.169portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:22:07 00:00:03 172.016.114.169portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:22:13 00:00:03 172.016.114.169portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:22:19 00:00:03 172.016.114.169portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:22:25 00:00:03 172.016.112.207portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:22:31 00:00:03 172.016.112.207portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:22:37 00:00:03 172.016.112.207portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:22:43 00:00:03 172.016.112.207portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:22:49 00:00:03 172.016.112.207portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:22:55 00:00:03 172.016.113.084portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:23:01 00:00:03 172.016.113.084portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:23:07 00:00:03 172.016.113.084portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:23:13 00:00:03 172.016.113.084portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:23:19 00:00:03 172.016.113.084portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:23:25 00:00:03 172.016.000.001portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:23:31 00:00:03 172.016.000.001portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:23:37 00:00:03 172.016.000.001portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:23:43 00:00:03 172.016.000.001portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:23:49 00:00:03 172.016.000.001portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:23:55 00:00:03 172.016.112.194portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:24:01 00:00:03 172.016.112.194portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:24:07 00:00:03 172.016.112.194portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:24:13 00:00:03 172.016.112.194portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:24:19 00:00:03 172.016.112.194portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:24:25 00:00:03 172.016.115.234portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:24:31 00:00:03 172.016.115.234portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:24:37 00:00:03 172.016.115.234portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:24:43 00:00:03 172.016.115.234portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:24:49 00:00:03 172.016.115.234portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:24:55 00:00:03 172.016.115.005portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:25:01 00:00:03 172.016.115.005portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:25:07 00:00:03 172.016.115.005portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:25:13 00:00:03 172.016.115.005portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:25:19 00:00:03 172.016.115.005portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:25:25 00:00:03 172.016.115.087portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:25:31 00:00:03 172.016.115.087portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:25:37 00:00:03 172.016.115.087portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:25:43 00:00:03 172.016.115.087portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:25:49 00:00:03 172.016.115.087portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:25:55 00:00:03 172.016.116.194portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:26:01 00:00:03 172.016.116.194portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:26:07 00:00:03 172.016.116.194portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:26:13 00:00:03 172.016.116.194portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:26:20 00:00:03 172.016.116.194portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:26:26 00:00:03 172.016.116.201portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:26:32 00:00:03 172.016.116.201portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:26:38 00:00:03 172.016.116.201portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:26:44 00:00:03 172.016.116.201portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:26:50 00:00:03 172.016.116.201portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:26:56 00:00:03 172.016.116.044portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:27:02 00:00:03 172.016.116.044portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:27:08 00:00:03 172.016.116.044portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:27:14 00:00:03 172.016.116.044portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:27:20 00:00:03 172.016.116.044portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:27:26 00:00:03 172.016.112.010portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:27:32 00:00:03 172.016.112.010portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:27:38 00:00:03 172.016.112.010portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:27:44 00:00:03 172.016.112.010portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:27:50 00:00:03 172.016.112.010portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:27:56 00:00:03 172.016.117.132portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:28:02 00:00:03 172.016.117.132portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:28:08 00:00:03 172.016.117.132portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:28:14 00:00:03 172.016.117.132portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:28:20 00:00:03 172.016.117.132portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:28:26 00:00:03 172.016.117.052portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:28:32 00:00:03 172.016.117.052portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:28:38 00:00:03 172.016.117.052portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:28:44 00:00:03 172.016.117.052portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:28:50 00:00:03 172.016.117.052portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:28:56 00:00:03 172.016.114.168portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:29:02 00:00:03 172.016.114.168portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:29:08 00:00:03 172.016.114.168portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:29:14 00:00:03 172.016.114.168portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:29:20 00:00:03 172.016.114.168portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:29:26 00:00:03 172.016.117.111portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:29:32 00:00:03 172.016.117.111portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:29:38 00:00:03 172.016.117.111portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:29:44 00:00:03 172.016.117.111portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:29:50 00:00:03 172.016.117.111portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:29:56 00:00:03 172.016.117.103portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:30:02 00:00:03 172.016.117.103portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:30:08 00:00:03 172.016.117.103portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:30:14 00:00:03 172.016.117.103portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:30:20 00:00:03 172.016.117.103portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:30:26 00:00:03 172.016.112.200portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:30:32 00:00:03 172.016.112.200portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:30:38 00:00:03 172.016.112.200portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:30:44 00:00:03 172.016.112.200portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:30:50 00:00:03 172.016.112.200portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:30:56 00:00:03 172.016.113.105portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:31:02 00:00:03 172.016.113.105portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:31:08 00:00:03 172.016.113.105portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:31:14 00:00:03 172.016.113.105portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:31:20 00:00:03 172.016.113.105portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:31:26 00:00:03 172.016.113.204portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:31:32 00:00:03 172.016.113.204portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:31:38 00:00:03 172.016.113.204portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:31:44 00:00:03 172.016.113.204portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:31:50 00:00:03 172.016.113.204portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:31:56 00:00:03 172.016.112.149portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:32:02 00:00:03 172.016.112.149portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:32:08 00:00:03 172.016.112.149portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:32:14 00:00:03 172.016.112.149portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:32:20 00:00:03 172.016.112.149portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:32:27 00:00:03 172.016.114.207portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:32:33 00:00:03 172.016.114.207portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:32:39 00:00:03 172.016.114.207portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:32:45 00:00:03 172.016.114.207portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:32:51 00:00:03 172.016.114.207portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:32:57 00:00:03 172.016.118.100portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:33:03 00:00:03 172.016.118.100portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:33:09 00:00:03 172.016.118.100portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:33:15 00:00:03 172.016.118.100portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:33:21 00:00:03 172.016.118.100portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:33:27 00:00:03 172.016.113.050portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:33:33 00:00:03 172.016.113.050portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:33:39 00:00:03 172.016.113.050portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:33:45 00:00:03 172.016.113.050portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:33:51 00:00:03 172.016.113.050portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:33:57 00:00:03 172.016.114.050portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:34:03 00:00:03 172.016.114.050portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:34:09 00:00:03 172.016.114.050portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:34:15 00:00:03 172.016.114.050portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:34:21 00:00:03 172.016.114.050portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:34:27 00:00:03 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:34:33 00:00:03 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:34:39 00:00:03 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:34:45 00:00:03 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:34:51 00:00:03 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:34:57 00:00:03 172.016.114.050portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:35:03 00:00:03 172.016.114.050portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:35:09 00:00:03 172.016.114.050portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:35:15 00:00:03 172.016.114.050portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE 52.21131304/06/1999 21:35:21 00:00:03 172.016.114.050portsweep out auto rem succ aDmp oDmp iDmp Clr Old llPROBE Summarized attack: 52.214522 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 52.21452204/06/1999 21:45:02 00:01:28 172.016.114.050ncftp in auto rem succ aDmp not iDmp not not FSLst Stlth New llR2L  52.21452204/06/1999 21:45:24 00:00:46 172.016.118.020ncftp in auto rem succ aDmp not iDmp not not FSLst Stlth New llR2L Summarized attack: 52.050813 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 52.05081304/07/1999 05:30:38 00:00:01 172.016.113.*udpstorm out man rem succ aDmp not iDmp Clr Old llDOS ellALL Summarized attack: 53.045454 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 53.04545404/08/1999 05:04:19 00:04:02 172.016.112.050selfping out man rem succ aDmp oDmp iDmp BSM SysLg FSLst Clr New llDOS ittllSOLARIS Summarized attack: 53.084346 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 53.08434604/07/1999 08:46:02 00:00:25 172.016.112.050xlock out man rem succ aDmp oDmp iDmp not not not Clr Old llR2L f hllSOLARIS Summarized attack: 53.085717 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 53.08571704/07/1999 08:58:16 00:00:01 172.016.114.050phf out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L  Summarized attack: 53.092039 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 53.09203904/07/1999 09:44:00 00:15:00 172.016.112.050tcpreset man rem succ not not iDmp not not not Clr New llDOS Summarized attack: 53.094800 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 53.09480004/07/1999 09:50:33 00:00:05 172.016.112.100netbus out man rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llR2L \llNT 53.09480004/07/1999 12:03:45 00:01:16 172.016.112.100netbus out man rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llR2L Summarized attack: 53.102617 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 53.10261704/07/1999 10:26:12 00:00:04 172.016.114.050back out auto rem succ aDmp oDmp iDmp not not not Clr Old llDOS denllLINUX Summarized attack: 53.110500 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 53.11050004/07/1999 11:06:56 00:00:01 197.182.091.233netcat out man rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llR2L 53.11050004/07/1999 11:35:38 00:01:29 172.016.112.100netcat out man rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llR2L Summarized attack: 53.110516 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 53.11051604/07/1999 11:32:16 00:00:01 172.016.114.050queso out auto rem succ aDmp oDmp iDmp not not not Stlth New llPROBE 53.11051604/07/1999 11:34:17 00:00:01 172.016.114.050queso out auto rem succ aDmp oDmp iDmp not not not Stlth New llPROBE 53.11051604/07/1999 11:36:18 00:00:01 172.016.114.050queso out auto rem succ aDmp oDmp iDmp not not not Stlth New llPROBE 53.11051604/07/1999 11:38:39 00:00:01 172.016.114.050queso out auto rem succ aDmp oDmp iDmp not not not Stlth New llPROBE 53.11051604/07/1999 11:40:40 00:00:01 172.016.114.050queso out auto rem succ aDmp oDmp iDmp not not not Stlth New llPROBE sllLINUX 53.11051604/07/1999 11:43:00 00:00:01 172.016.114.050queso out auto rem succ aDmp oDmp iDmp not not not Stlth New llPROBE ellLINUX 53.11051604/07/1999 11:45:20 00:00:01 172.016.114.050queso out auto rem succ aDmp oDmp iDmp not not not Stlth New llPROBE illLINUX Summarized attack: 53.123735 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 53.12373504/07/1999 12:37:10 00:00:01 172.016.114.050portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE fllLINUX 53.12373504/07/1999 12:37:16 00:00:01 172.016.114.050portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE lllLINUX 53.12373504/07/1999 12:38:16 00:00:01 172.016.114.050portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE nllLINUX 53.12373504/07/1999 12:39:16 00:00:01 172.016.114.050portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 53.12373504/07/1999 12:40:16 00:00:01 172.016.114.050portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE |llLINUX 53.12373504/07/1999 12:41:16 00:00:01 172.016.114.050portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 53.12373504/07/1999 12:42:17 00:00:01 172.016.114.050portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 53.12373504/07/1999 12:43:17 00:00:01 172.016.114.050portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE >llLINUX 53.12373504/07/1999 12:43:23 00:00:01 172.016.114.050portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 53.12373504/07/1999 12:44:29 00:00:01 172.016.114.050portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 53.12373504/07/1999 12:45:29 00:00:01 172.016.114.050portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE llLINUX 53.12373504/07/1999 12:45:35 00:00:01 172.016.114.050portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 53.12373504/07/1999 12:46:41 00:00:01 172.016.114.050portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE Summarized attack: 53.133203 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 53.13320304/07/1999 13:33:17 00:10:46 172.016.112.207perl out auto rem succ aDmp oDmp iDmp not not FSLst Stlth Old llU2R nlellLINUX Summarized attack: 53.134015 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 53.13401504/07/1999 13:40:24 00:00:01 172.016.112.050queso in auto rem succ aDmp not iDmp not not not Stlth New llPROBE nllSOLARIS 53.13401504/07/1999 13:43:25 00:00:01 172.016.112.050queso in auto rem succ aDmp not iDmp not not not Stlth New llPROBE ollSOLARIS 53.13401504/07/1999 13:46:45 00:00:01 172.016.112.050queso in auto rem succ aDmp not iDmp not not not Stlth New llPROBE llSOLARIS 53.13401504/07/1999 13:50:05 00:00:01 172.016.112.050queso in auto rem succ aDmp not iDmp not not not Stlth New llPROBE llSOLARIS 53.13401504/07/1999 13:53:25 00:00:01 172.016.112.050queso in auto rem succ aDmp not iDmp not not not Stlth New llPROBE ullSOLARIS 53.13401504/07/1999 13:56:29 00:00:01 172.016.112.050queso in auto rem succ aDmp not iDmp not not not Stlth New llPROBE dllSOLARIS 53.13401504/07/1999 13:59:33 00:00:01 172.016.112.050queso in auto rem succ aDmp not iDmp not not not Stlth New llPROBE illSOLARIS Summarized attack: 53.144800 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 53.14480004/07/1999 14:49:35 00:00:02 172.016.000.001snmpget out man rem succ aDmp oDmp iDmp not not not Clr Old llR2L WhillCISCO 53.14480004/07/1999 14:49:42 00:00:01 172.016.000.001snmpget out man rem succ aDmp oDmp iDmp not not not Clr Old llR2L 53.14480004/07/1999 14:49:47 00:00:01 172.016.000.001snmpget out man rem succ aDmp oDmp iDmp not not not Clr Old llR2L wasllCISCO 53.14480004/07/1999 14:49:52 00:00:01 172.016.000.001snmpget out man rem succ aDmp oDmp iDmp not not not Clr Old llR2L 53.14480004/07/1999 14:49:57 00:00:01 172.016.000.001snmpget out man rem succ aDmp oDmp iDmp not not not Clr Old llR2L n gllCISCO 53.14480004/07/1999 14:50:02 00:00:01 172.016.000.001snmpget out man rem succ aDmp oDmp iDmp not not not Clr Old llR2L 53.14480004/07/1999 14:50:07 00:00:01 172.016.000.001snmpget out man rem succ aDmp oDmp iDmp not not not Clr Old llR2L *j llCISCO 53.14480004/07/1999 14:50:12 00:00:01 172.016.000.001snmpget out man rem succ aDmp oDmp iDmp not not not Clr Old llR2L 53.14480004/07/1999 14:50:18 00:00:01 172.016.000.001snmpget out man rem succ aDmp oDmp iDmp not not not Clr Old llR2L  53.14480004/07/1999 14:50:23 00:00:01 172.016.000.001snmpget out man rem succ aDmp oDmp iDmp not not not Clr Old llR2L 53.14480004/07/1999 14:50:28 00:00:01 172.016.000.001snmpget out man rem succ aDmp oDmp iDmp not not not Clr Old llR2L  53.14480004/07/1999 14:50:33 00:00:01 172.016.000.001snmpget out man rem succ aDmp oDmp iDmp not not not Clr Old llR2L  53.14480004/07/1999 14:50:38 00:00:01 172.016.000.001snmpget out man rem succ aDmp oDmp iDmp not not not Clr Old llR2L 53.14480004/07/1999 14:50:43 00:00:01 172.016.000.001snmpget out man rem succ aDmp oDmp iDmp not not not Clr Old llR2L 7 53.14480004/07/1999 14:50:48 00:00:01 172.016.000.001snmpget out man rem succ aDmp oDmp iDmp not not not Clr Old llR2L 53.14480004/07/1999 14:50:53 00:00:01 172.016.000.001snmpget out man rem succ aDmp oDmp iDmp not not not Clr Old llR2L mbellCISCO 53.14480004/07/1999 14:50:58 00:00:01 172.016.000.001snmpget out man rem succ aDmp oDmp iDmp not not not Clr Old llR2L ialllCISCO 53.14480004/07/1999 14:51:03 00:00:01 172.016.000.001snmpget out man rem succ aDmp oDmp iDmp not not not Clr Old llR2L 53.14480004/07/1999 14:51:08 00:00:01 172.016.000.001snmpget out man rem succ aDmp oDmp iDmp not not not Clr Old llR2L litllCISCO 53.14480004/07/1999 14:51:13 00:00:01 172.016.000.001snmpget out man rem succ aDmp oDmp iDmp not not not Clr Old llR2L iatllCISCO 53.14480004/07/1999 14:51:19 00:00:01 172.016.000.001snmpget out man rem succ aDmp oDmp iDmp not not not Clr Old llR2L Summarized attack: 53.150110 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 53.15011004/07/1999 15:01:16 00:31:05 172.016.113.050processtable in auto rem succ aDmp not iDmp not SysLg not Clr Old llDOS Summarized attack: 53.152648 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 53.15264804/07/1999 15:26:15 00:01:49 172.016.114.050back out auto rem succ aDmp iDmp not not not Clr Old llDOS llLINUX Summarized attack: 53.155432 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 53.15543204/07/1999 15:59:19 06:51:40 172.016.112.050ffbconfig out auto rem succ aDmp oDmp iDmp BSM not FSLst Stlth Old llU2R 53.15543204/07/1999 15:54:19 00:00:01 172.016.112.050ffbconfig out auto rem succ aDmp oDmp iDmp BSM not FSLst Stlth Old llU2R he llSOLARIS Summarized attack: 53.171350 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 53.17135004/07/1999 17:13:17 00:08:39 172.016.114.050apache2 in auto rem succ aDmp not iDmp not SysLg not Clr Old llDOS Summarized attack: 53.195130 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 53.19513004/07/1999 19:51:19 00:00:05 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE llSOLARIS 53.19513004/07/1999 19:51:25 00:00:14 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 53.19513004/07/1999 19:51:40 00:00:11 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 53.19513004/07/1999 19:51:52 00:00:13 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE llSOLARIS 53.19513004/07/1999 19:52:06 00:00:09 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 53.19513004/07/1999 19:52:16 00:00:03 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 53.19513004/07/1999 19:52:20 00:00:15 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE llSOLARIS 53.19513004/07/1999 19:52:36 00:00:12 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 53.19513004/07/1999 19:52:49 00:00:13 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 53.19513004/07/1999 19:53:03 00:00:04 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE llSOLARIS Summarized attack: 54.082003 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 54.08200304/08/1999 08:33:00 00:03:00 172.016.112.050ps man cons succ not not not BSM not FSLst Stlth Old llU2R οllSOLARIS Summarized attack: 54.090101 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 54.09010104/08/1999 09:01:08 00:00:05 172.016.114.050phf in auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.09010104/08/1999 09:31:33 00:00:08 172.016.114.050phf in auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.09010104/08/1999 09:31:43 00:00:06 172.016.114.050phf in auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.09010104/08/1999 09:32:03 00:00:07 172.016.114.050phf in auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.09010104/08/1999 09:32:19 00:00:11 172.016.114.050phf in auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.09010104/08/1999 09:32:37 00:00:05 172.016.114.050phf in auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.09010104/08/1999 09:32:48 00:00:06 172.016.114.050phf in auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L Summarized attack: 54.091200 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 54.09120004/08/1999 09:16:20 00:01:18 172.016.112.100casesen in man rem succ aDmp not iDmp not SysLg not Clr New llU2R 54.09120004/08/1999 09:17:18 00:00:01 172.016.112.149casesen in man rem succ aDmp not iDmp not SysLg not Clr New llU2R R>llNT 54.09120004/08/1999 09:17:24 00:00:01 172.016.112.149casesen in man rem succ aDmp not iDmp not SysLg not Clr New llU2R 54.09120004/08/1999 09:17:28 00:00:01 172.016.112.149casesen in man rem succ aDmp not iDmp not SysLg not Clr New llU2R  54.09120004/08/1999 09:17:33 00:00:01 172.016.112.149casesen in man rem succ aDmp not iDmp not SysLg not Clr New llU2R io llNT 54.09120004/08/1999 09:17:52 00:09:43 172.016.112.100casesen in man rem succ aDmp not iDmp not SysLg not Clr New llU2R s bllNT 54.09120004/08/1999 11:14:29 00:05:38 172.016.112.100casesen in man rem succ aDmp not iDmp not SysLg not Clr New llU2R Summarized attack: 54.102102 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 54.10210204/08/1999 10:21:00 00:15:00 172.16.112.100ntfsdos man cons succ not not not not SysLg FSLst Clr New llDATA yrllNT Summarized attack: 54.103459 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 54.10345904/08/1999 10:34:11 00:00:01 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE fllSOLARIS 54.10345904/08/1999 10:37:02 00:00:01 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE llSOLARIS 54.10345904/08/1999 10:39:54 00:00:01 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE ellSOLARIS Summarized attack: 54.110416 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 54.11041604/08/1999 11:26:37 00:16:09 172.016.112.100ntinfoscan out auto rem succ aDmp oDmp iDmp not SysLg FSLst Clr Old llPROBE 54.11041604/08/1999 11:26:38 00:00:01 206.048.044.018ntinfoscan out auto rem succ aDmp oDmp iDmp not SysLg FSLst Clr Old llPROBE mllNT Summarized attack: 54.115000 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 54.11500004/08/1999 11:52:05 00:05:31 172.016.112.100yaga out man rem succ aDmp oDmp iDmp not SysLg not Clr New llU2R 54.11500004/08/1999 12:04:20 00:03:24 172.016.112.100yaga out man rem succ aDmp oDmp iDmp not SysLg not Clr New llU2R Summarized attack: 54.115701 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 54.11570104/08/1999 11:57:01 00:15:03 172.016.112.100crashiis out man rem succ aDmp oDmp iDmp not not not Clr Old llDOS g tllNT Summarized attack: 54.120600 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 54.12060004/08/1999 12:06:30 00:00:01 196.037.075.158httptunnel out auto rem succ aDmp oDmp iDmp BSM SysLg FSLst Clr Old llR2L  54.12060004/08/1999 12:07:00 00:00:01 196.037.075.158httptunnel out auto rem succ aDmp oDmp iDmp BSM SysLg FSLst Clr Old llR2L hrellSOLARIS 54.12060004/08/1999 12:07:30 00:00:01 196.037.075.158httptunnel out auto rem succ aDmp oDmp iDmp BSM SysLg FSLst Clr Old llR2L appllSOLARIS 54.12060004/08/1999 12:08:00 00:00:01 196.037.075.158httptunnel out auto rem succ aDmp oDmp iDmp BSM SysLg FSLst Clr Old llR2L ip llSOLARIS 54.12060004/08/1999 12:08:30 00:00:01 196.037.075.158httptunnel out auto rem succ aDmp oDmp iDmp BSM SysLg FSLst Clr Old llR2L }llSOLARIS 54.12060004/08/1999 12:09:00 00:00:01 196.037.075.158httptunnel out auto rem succ aDmp oDmp iDmp BSM SysLg FSLst Clr Old llR2L 54.12060004/08/1999 12:09:30 00:00:01 196.037.075.158httptunnel out auto rem succ aDmp oDmp iDmp BSM SysLg FSLst Clr Old llR2L 54.12060004/08/1999 12:10:00 00:00:01 196.037.075.158httptunnel out auto rem succ aDmp oDmp iDmp BSM SysLg FSLst Clr Old llR2L 4llSOLARIS Summarized attack: 54.125758 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 54.12575804/08/1999 12:57:17 00:02:17 172.016.112.050fdformat out auto rem succ aDmp oDmp iDmp BSM not FSLst Clr Old llU2R rdsllSOLARIS 54.12575804/08/1999 12:59:06 00:00:01 194.027.251.021fdformat out auto rem succ aDmp oDmp iDmp BSM not FSLst Clr Old llU2R s bllSOLARIS 54.12575804/08/1999 13:11:54 00:25:33 172.016.112.050fdformat out auto rem succ aDmp oDmp iDmp BSM not FSLst Clr Old llU2R *f llSOLARIS Summarized attack: 54.145832 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 54.14583204/08/1999 14:58:29 00:02:12 172.016.114.050satan out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE Summarized attack: 54.155338 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 54.15533804/08/1999 15:53:18 00:15:01 172.016.114.050teardrop out auto rem succ aDmp oDmp iDmp not not not Clr Old llDOS llLINUX Summarized attack: 54.160341 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 54.16034104/08/1999 16:03:15 00:00:07 172.016.112.100sechole out auto rem succ aDmp oDmp iDmp not SysLg not Clr New llU2R trallNT 54.16034104/08/1999 16:03:20 00:00:02 208.240.124.083sechole out auto rem succ aDmp oDmp iDmp not SysLg not Clr New llU2R  54.16034104/08/1999 16:03:24 00:06:42 172.016.112.100sechole out auto rem succ aDmp oDmp iDmp not SysLg not Clr New llU2R 54.16034104/08/1999 16:20:08 00:05:03 172.016.112.100sechole out auto rem succ aDmp oDmp iDmp not SysLg not Clr New llU2R  Summarized attack: 54.170132 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 54.17013204/08/1999 17:01:19 00:01:02 172.016.112.*resetscan in auto rem succ aDmp not iDmp not not not Stlth New llPROBE cllALL Summarized attack: 54.171643 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 54.17164304/08/1999 17:16:10 00:00:01 172.016.112.001ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE allALL 54.17164304/08/1999 17:16:20 00:00:01 172.016.112.002ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE ellALL 54.17164304/08/1999 17:16:30 00:00:01 172.016.112.003ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE llALL 54.17164304/08/1999 17:16:40 00:00:01 172.016.112.004ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE llALL 54.17164304/08/1999 17:16:50 00:00:01 172.016.112.005ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE allALL 54.17164304/08/1999 17:16:50 00:00:01 207.136.086.223ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE jllALL 54.17164304/08/1999 17:17:00 00:00:01 172.016.112.006ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 54.17164304/08/1999 17:17:10 00:00:01 172.016.112.007ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE llALL 54.17164304/08/1999 17:17:20 00:00:01 172.016.112.008ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 54.17164304/08/1999 17:17:30 00:00:01 172.016.112.009ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 54.17164304/08/1999 17:17:40 00:00:01 172.016.112.010ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE llALL 54.17164304/08/1999 17:17:40 00:00:01 207.136.086.223ipsweep out auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE Summarized attack: 54.175007 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 54.17500704/08/1999 17:50:12 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:50:17 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:50:22 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:50:28 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:50:33 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:50:38 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:50:43 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:50:48 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:50:53 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:50:58 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:51:03 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:51:08 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:51:13 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:51:18 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:51:23 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:51:28 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:51:33 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:51:39 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:51:44 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:51:49 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:51:54 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:51:59 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:52:04 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:52:09 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:52:14 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:52:19 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:52:24 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:52:29 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:52:34 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:52:39 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:52:45 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:52:50 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:52:55 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:53:00 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:53:05 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:53:10 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:53:15 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:53:20 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:53:25 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:53:30 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:53:35 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:53:40 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:53:46 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:53:51 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:53:56 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:54:01 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:54:06 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:54:11 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:54:16 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:54:21 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:54:26 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:54:31 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:54:36 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:54:41 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:54:46 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:54:52 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:54:57 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:55:02 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:55:07 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:55:12 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L 54.17500704/08/1999 17:55:17 00:00:01 172.016.000.001snmpget out auto rem succ aDmp oDmp iDmp not not not Clr Old llR2L Summarized attack: 54.183002 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 54.18300204/08/1999 18:31:00 00:16:09 172.016.112.100ntinfoscan out auto rem succ aDmp oDmp iDmp not SysLg FSLst Clr Old llPROBE ellNT 54.18300204/08/1999 18:31:00 00:00:01 206.048.044.018ntinfoscan out auto rem succ aDmp oDmp iDmp not SysLg FSLst Clr Old llPROBE ollNT 54.18300204/08/1999 18:47:10 00:00:01 172.016.112.100ntinfoscan out auto rem succ aDmp oDmp iDmp not SysLg FSLst Clr Old llPROBE rllNT Summarized attack: 54.190707 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 54.19070704/08/1999 19:08:31 00:00:01 172.016.112.020ls_domain out auto rem succ aDmp oDmp iDmp not SysLg not Clr New llPROBE ollLINUX Summarized attack: 54.194108 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 54.19410804/08/1999 19:41:14 00:00:41 172.016.112.050warez out auto rem succ aDmp oDmp iDmp BSM SysLg not Clr Old llDOS 54.19410804/08/1999 19:41:44 00:00:01 209.030.070.014warez out auto rem succ aDmp oDmp iDmp BSM SysLg not Clr Old llDOS  Summarized attack: 54.195951 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 54.19595104/08/1999 19:58:30 04:01:29 172.016.112.*mscan out auto rem succ aDmp oDmp iDmp not SysLg not Clr Old llPROBE llALL 54.19595104/09/1999 00:00:01 02:18:00 172.016.112.*mscan out auto rem succ aDmp oDmp iDmp not SysLg not Clr Old llPROBE bllALL 54.19595104/08/1999 19:58:30 04:01:29 172.016.113.*mscan out auto rem succ aDmp oDmp iDmp not SysLg not Clr Old llPROBE ellALL 54.19595104/09/1999 00:00:01 02:18:00 172.016.113.*mscan out auto rem succ aDmp oDmp iDmp not SysLg not Clr Old llPROBE 54.19595104/08/1999 19:58:30 04:01:29 172.016.114.*mscan out auto rem succ aDmp oDmp iDmp not SysLg not Clr Old llPROBE illALL 54.19595104/09/1999 00:00:01 02:18:00 172.016.114.*mscan out auto rem succ aDmp oDmp iDmp not SysLg not Clr Old llPROBE 54.19595104/08/1999 19:58:30 04:01:29 172.016.115.*mscan out auto rem succ aDmp oDmp iDmp not SysLg not Clr Old llPROBE llALL 54.19595104/09/1999 00:00:01 02:18:00 172.016.115.*mscan out auto rem succ aDmp oDmp iDmp not SysLg not Clr Old llPROBE llALL 54.19595104/08/1999 19:58:30 04:01:29 172.016.116.*mscan out auto rem succ aDmp oDmp iDmp not SysLg not Clr Old llPROBE llALL 54.19595104/09/1999 00:00:01 02:18:00 172.016.116.*mscan out auto rem succ aDmp oDmp iDmp not SysLg not Clr Old llPROBE llALL 54.19595104/08/1999 19:58:30 04:01:29 172.016.117.*mscan out auto rem succ aDmp oDmp iDmp not SysLg not Clr Old llPROBE 4llALL 54.19595104/09/1999 00:00:01 02:18:00 172.016.117.*mscan out auto rem succ aDmp oDmp iDmp not SysLg not Clr Old llPROBE ollALL 54.19595104/08/1999 19:58:30 04:01:29 172.016.118.*mscan out auto rem succ aDmp oDmp iDmp not SysLg not Clr Old llPROBE 54.19595104/09/1999 00:00:01 02:18:00 172.016.118.*mscan out auto rem succ aDmp oDmp iDmp not SysLg not Clr Old llPROBE llALL Summarized attack: 54.225131 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 54.22513104/08/1999 22:51:14 00:05:21 172.016.112.100arppoison out auto rem succ aDmp oDmp iDmp not not not Clr New llDOS plellNT 54.22513104/08/1999 22:59:56 00:19:19 172.016.112.100arppoison out auto rem succ aDmp oDmp iDmp not not not Clr New llDOS Summarized attack: 55.080105 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 55.08010504/09/1999 08:01:28 00:00:01 206.048.044.050portsweep in auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE llSUNOS 55.08010504/09/1999 08:01:39 00:00:01 206.048.044.050portsweep in auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE 55.08010504/09/1999 08:01:56 00:00:01 206.048.044.050portsweep in auto rem succ aDmp oDmp iDmp not not not Clr Old llPROBE Summarized attack: 55.080500 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 55.08050004/09/1999 08:08:37 00:01:19 172.016.113.050xsnoop out man rem succ aDmp oDmp iDmp not not not Clr Old llR2L Summarized attack: 55.081418 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 55.08141804/09/1999 08:14:17 00:15:45 172.016.112.100crashiis in auto rem succ aDmp not iDmp not SysLg not Clr Old llDOS earllNT Summarized attack: 55.082500 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 55.08250004/09/1999 08:26:21 00:17:53 172.016.112.*insidesniffer in man rem succ aDmp not not not not not Stlth New llPROBE 55.08250004/09/1999 08:26:21 00:17:53 172.016.113.*insidesniffer in man rem succ aDmp not not not not not Stlth New llPROBE 55.08250004/09/1999 08:26:21 00:17:53 172.016.114.*insidesniffer in man rem succ aDmp not not not not not Stlth New llPROBE 55.08250004/09/1999 08:26:21 00:17:53 172.016.115.*insidesniffer in man rem succ aDmp not not not not not Stlth New llPROBE 55.08250004/09/1999 08:26:21 00:17:53 172.016.116.*insidesniffer in man rem succ aDmp not not not not not Stlth New llPROBE 55.08250004/09/1999 08:26:21 00:17:53 172.016.117.*insidesniffer in man rem succ aDmp not not not not not Stlth New llPROBE 55.08250004/09/1999 08:26:21 00:17:53 172.016.118.*insidesniffer in man rem succ aDmp not not not not not Stlth New llPROBE Summarized attack: 55.084452 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 55.08445204/09/1999 08:44:16 00:01:49 172.016.114.050back out auto rem succ aDmp oDmp iDmp not not not Clr Old llDOS Summarized attack: 55.085500 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 55.08550004/09/1999 08:53:46 00:25:58 172.016.112.*insidesniffer in auto rem succ aDmp oDmp iDmp not not not Clr New llPROBE 55.08550004/09/1999 08:53:46 00:25:58 172.016.113.*insidesniffer in auto rem succ aDmp oDmp iDmp not not not Clr New llPROBE 55.08550004/09/1999 08:53:46 00:25:58 172.016.114.*insidesniffer in auto rem succ aDmp oDmp iDmp not not not Clr New llPROBE 55.08550004/09/1999 08:53:46 00:25:58 172.016.115.*insidesniffer in auto rem succ aDmp oDmp iDmp not not not Clr New llPROBE llALL 55.08550004/09/1999 08:53:46 00:25:58 172.016.116.*insidesniffer in auto rem succ aDmp oDmp iDmp not not not Clr New llPROBE llALL 55.08550004/09/1999 08:53:46 00:25:58 172.016.117.*insidesniffer in auto rem succ aDmp oDmp iDmp not not not Clr New llPROBE 55.08550004/09/1999 08:53:46 00:25:58 172.016.118.*insidesniffer in auto rem succ aDmp oDmp iDmp not not not Clr New llPROBE Summarized attack: 55.085514 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 55.08551404/09/1999 08:57:31 00:00:01 172.016.112.100netcat in man rem succ aDmp not iDmp not SysLg FSLst Clr New llR2L onsllNT 55.08551404/09/1999 12:03:08 00:01:44 172.016.112.100netcat in man rem succ aDmp not iDmp not SysLg FSLst Clr New llR2L Summarized attack: 55.091529 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 55.09152904/09/1999 09:16:17 00:05:32 172.016.112.207xterm out auto rem succ aDmp oDmp iDmp not not not Clr Old llU2R iatllLINUX 55.09152904/09/1999 09:18:28 00:00:39 194.027.251.021xterm out auto rem succ aDmp oDmp iDmp not not not Clr Old llU2R Summarized attack: 55.093137 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 55.09313704/09/1999 09:31:11 00:00:01 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 55.09313704/09/1999 09:31:11 00:00:01 153.010.008.174portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 55.09313704/09/1999 09:34:31 00:00:01 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 55.09313704/09/1999 09:34:31 00:00:01 153.010.008.174portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 55.09313704/09/1999 09:37:51 00:00:01 172.016.112.050portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 55.09313704/09/1999 09:37:51 00:00:01 153.010.008.174portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE Summarized attack: 55.100600 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 55.10060004/09/1999 10:45:00 00:15:00 172.16.112.100 anypw man cons succ not not not not not FSLst Clr New llU2R ophllNT 55.10060004/09/1999 10:46:16 00:02:37 172.016.112.100anypw man cons succ not not not not not FSLst Clr New llU2R esllNT Summarized attack: 55.100830 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 55.10083004/09/1999 10:08:13 00:00:05 172.016.112.050guest in auto rem succ aDmp not iDmp BSM SysLg not Clr Old llR2L ssellSOLARIS 55.10083004/09/1999 10:08:19 00:00:05 172.016.112.050guest in auto rem succ aDmp not iDmp BSM SysLg not Clr Old llR2L ry llSOLARIS 55.10083004/09/1999 10:08:25 00:00:05 172.016.112.050guest in auto rem succ aDmp not iDmp BSM SysLg not Clr Old llR2L Q?llSOLARIS 55.10083004/09/1999 10:08:31 00:00:05 172.016.112.050guest in auto rem succ aDmp not iDmp BSM SysLg not Clr Old llR2L thllSOLARIS 55.10083004/09/1999 10:08:37 00:00:05 172.016.112.050guest in auto rem succ aDmp not iDmp BSM SysLg not Clr Old llR2L whllSOLARIS 55.10083004/09/1999 10:08:43 00:00:05 172.016.112.050guest in auto rem succ aDmp not iDmp BSM SysLg not Clr Old llR2L 55.10083004/09/1999 10:08:49 00:00:10 172.016.112.050guest in auto rem succ aDmp not iDmp BSM SysLg not Clr Old llR2L 55.10083004/09/1999 10:09:00 00:00:05 172.016.112.050guest in auto rem succ aDmp not iDmp BSM SysLg not Clr Old llR2L }llSOLARIS Summarized attack: 55.102000 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 55.10200004/09/1999 10:20:00 00:05:00 172.016.112.100tcpreset man rem succ not not iDmp not SysLg FSLst Clr New llDOS intllNT Summarized attack: 55.103001 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 55.10300104/09/1999 10:35:00 00:05:00 172.016.114.050perl man cons succ not not not not SysLg FSLst Clr Old llU2R Summarized attack: 55.110800 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 55.11080004/09/1999 11:10:26 00:00:05 172.016.112.100framespoofer out man rem succ aDmp oDmp iDmp not not not Clr New llR2L ionllNT 55.11080004/09/1999 11:17:08 00:00:01 194.027.251.021framespoofer out man rem succ aDmp oDmp iDmp not not not Clr New llR2L < 4llNT 55.11080004/09/1999 11:17:14 00:00:04 194.027.251.021framespoofer out man rem succ aDmp oDmp iDmp not not not Clr New llR2L = llNT 55.11080004/09/1999 11:17:20 00:00:15 194.027.251.021framespoofer out man rem succ aDmp oDmp iDmp not not not Clr New llR2L t tllNT Summarized attack: 55.115202 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 55.11520204/09/1999 11:52:10 00:00:01 172.016.113.050portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE llSUNOS 55.11520204/09/1999 11:52:16 00:00:01 172.016.113.050portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 55.11520204/09/1999 11:54:02 00:00:01 172.016.113.050portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 55.11520204/09/1999 11:54:08 00:00:01 172.016.113.050portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE llSUNOS 55.11520204/09/1999 11:55:55 00:00:01 172.016.113.050portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 55.11520204/09/1999 11:56:01 00:00:01 172.016.113.050portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE 55.11520204/09/1999 11:57:47 00:00:01 172.016.113.050portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE bllSUNOS 55.11520204/09/1999 11:57:53 00:00:01 172.016.113.050portsweep out auto rem succ aDmp oDmp iDmp not not not Stlth Old llPROBE Summarized attack: 55.123412 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 55.12341204/09/1999 12:34:15 00:01:02 172.016.112.194sqlattack out auto rem succ aDmp oDmp iDmp not not FSLst Stlth Old llU2R ichllLINUX Summarized attack: 55.124400 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 55.12440004/09/1999 12:44:38 00:14:19 172.016.112.100yaga out auto rem succ aDmp oDmp iDmp not SysLg not Clr New llU2R 55.12440004/09/1999 12:59:06 00:03:14 172.016.112.100yaga out auto rem succ aDmp oDmp iDmp not SysLg not Clr New llU2R  Summarized attack: 55.125112 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 55.12511204/09/1999 12:51:12 00:15:32 172.016.112.100crashiis out auto rem succ aDmp oDmp iDmp not not not Clr Old llDOS atellNT Summarized attack: 55.125811 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 55.12581104/09/1999 12:58:11 00:03:00 172.016.112.100telnet out auto rem succ aDmp oDmp iDmp not SysLg not Clr Old llR2L  55.12581104/09/1999 13:01:12 00:03:30 172.016.112.100telnet out auto rem succ aDmp oDmp iDmp not SysLg not Clr Old llR2L 55.12581104/09/1999 13:04:43 00:03:31 172.016.112.100telnet out auto rem succ aDmp oDmp iDmp not SysLg not Clr Old llR2L $llNT Summarized attack: 55.125830 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 55.12583004/09/1999 12:58:30 00:15:03 172.016.112.100crashiis out auto rem succ aDmp oDmp iDmp not not not Clr Old llDOS Summarized attack: 55.140643 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 55.14064304/09/1999 14:06:15 00:15:01 172.016.112.050syslogd out auto rem succ aDmp oDmp iDmp BSM SysLg not Clr Old llDOS allllSOLARIS Summarized attack: 55.141732 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 55.14173204/09/1999 14:17:28 00:00:25 172.016.112.050eject in auto rem succ aDmp oDmp iDmp BSM SysLg FSLst Clr Old llU2R fCllSOLARIS 55.14173204/09/1999 14:17:42 00:00:09 206.048.044.050eject in auto rem succ aDmp oDmp iDmp BSM SysLg FSLst Clr Old llU2R 55.14173204/09/1999 14:21:17 00:00:29 172.016.112.050eject in auto rem succ aDmp oDmp iDmp BSM SysLg FSLst Clr Old llU2R Summarized attack: 55.163447 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 55.16344704/09/1999 14:32:27 00:15:01 172.016.113.050land in auto rem succ aDmp not iDmp not not not Clr Old llDOS , ellSUNOS Summarized attack: 55.171917 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 55.17191704/09/1999 14:56:30 00:15:01 172.016.112.050syslogd out man rem succ aDmp oDmp iDmp BSM SysLg not Clr Old llDOS Summarized attack: 55.172757 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 55.17275704/09/1999 17:27:15 00:00:11 172.016.114.050sendmail out auto rem succ aDmp oDmp iDmp not not FSLst Clr Old llR2L $ Summarized attack: 55.174733 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 55.17473304/09/1999 17:47:15 00:00:30 172.016.113.105xterm out auto rem succ aDmp oDmp iDmp not not not Clr Old llU2R n allLINUX 55.17473304/09/1999 17:47:33 00:00:01 202.072.001.077xterm out auto rem succ aDmp oDmp iDmp not not not Clr Old llU2R 55.17473304/09/1999 17:47:38 00:00:01 202.072.001.077xterm out auto rem succ aDmp oDmp iDmp not not not Clr Old llU2R 55.17473304/09/1999 17:56:45 00:28:10 172.016.113.105xterm out auto rem succ aDmp oDmp iDmp not not not Clr Old llU2R as llLINUX Summarized attack: 55.183012 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 55.18301204/09/1999 18:30:04 00:00:09 172.016.113.050neptune out auto rem succ aDmp oDmp iDmp not not not Clr Old llDOS Summarized attack: 55.184715 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 55.18471504/09/1999 18:47:14 00:35:49 172.016.114.050perl in auto rem succ aDmp not iDmp not not FSLst Stlth Old llU2R tatllLINUX Summarized attack: 55.185233 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 55.18523304/09/1999 18:52:09 00:00:41 172.016.112.050warez out auto rem succ aDmp oDmp iDmp BSM SysLg not Clr Old llDOS < 55.18523304/09/1999 18:52:39 00:00:01 206.047.098.151warez out auto rem succ aDmp oDmp iDmp BSM SysLg not Clr Old llDOS  Summarized attack: 55.202002 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 55.20200204/09/1999 20:20:20 00:00:01 172.016.000.001queso out auto rem succ aDmp oDmp not not not not Stlth New llPROBE 55.20200204/09/1999 20:23:21 00:00:01 172.016.000.001queso out auto rem succ aDmp oDmp not not not not Stlth New llPROBE llCISCO 55.20200204/09/1999 20:26:22 00:00:01 172.016.000.001queso out auto rem succ aDmp oDmp not not not not Stlth New llPROBE llCISCO 55.20200204/09/1999 20:29:23 00:00:01 172.016.000.001queso out auto rem succ aDmp oDmp not not not not Stlth New llPROBE llCISCO 55.20200204/09/1999 20:32:24 00:00:01 172.016.000.001queso out auto rem succ aDmp oDmp not not not not Stlth New llPROBE 55.20200204/09/1999 20:35:25 00:00:01 172.016.000.001queso out auto rem succ aDmp oDmp not not not not Stlth New llPROBE llCISCO 55.20200204/09/1999 20:38:26 00:00:01 172.016.000.001queso out auto rem succ aDmp oDmp not not not not Stlth New llPROBE Summarized attack: 55.204925 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 55.20492504/09/1999 20:49:17 00:00:14 172.016.112.100cassen out auto rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llU2R $ 55.20492504/09/1999 20:49:28 00:00:03 204.071.051.016cassen out auto rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llU2R  55.20492504/09/1999 20:49:33 00:18:22 172.016.112.100cassen out auto rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llU2R 55.20492504/09/1999 21:22:58 00:10:06 172.016.112.100cassen out auto rem succ aDmp oDmp iDmp not SysLg FSLst Clr New llU2R  Summarized attack: 55.200530 IDnum Date StartTime Duration Destination Attackname insider? manual? console?success? aDump? oDump iDumpBSM? SysLogs FSListing StealthyNew? Category OS 55.20053004/09/1999 20:05:30 00:10:00 172.016.112.050secret auto rem succ not not not BSM not FSLst Clr New llDATA