1 08/07/1999 08:12:42 00:00:05 smtp 1026 25 194.027.251.021 172.016.112.100 1 ppmacro_setup 2 08/07/1999 08:49:17 00:00:06 smtp 1107 25 135.008.060.182 172.016.112.100 1 netbus_setup 3 08/07/1999 08:55:10 00:01:05 12345 1098 12345 206.048.044.018 172.016.112.100 1 netbus_breakin 4 08/07/1999 09:09:44 00:05:00 - - - 172.016.112.100 172.016.112.100 1 NTFSDoS 5 08/07/1999 09:44:17 00:00:40 ftp 1051 21 172.016.113.204 172.016.112.100 1 casesen_setup 5 08/07/1999 09:44:48 00:00:01 ftp-data 20 1052 172.016.112.100 172.016.113.204 1 casesen_setup 5 08/07/1999 09:44:53 00:00:01 ftp-data 20 1104 172.016.112.100 172.016.113.204 1 casesen_setup 5 08/07/1999 09:44:57 00:00:01 ftp-data 20 1106 172.016.112.100 172.016.113.204 1 casesen_setup 6 08/07/1999 09:55:27 00:00:03 smtp 37433 25 153.107.252.061 172.016.112.100 1 portsweep 6 08/07/1999 09:57:11 00:00:01 ssh 55394 22 153.107.252.061 172.016.112.100 1 portsweep 6 08/07/1999 09:58:51 00:00:01 http 49924 80 153.107.252.061 172.016.112.100 1 portsweep 6 08/07/1999 10:00:31 00:00:01 ftp 51173 21 153.107.022.061 172.016.112.100 1 portsweep 7 08/07/1999 10:06:42 00:03:43 telnet 1114 23 172.016.118.070 172.016.112.100 1 yaga_setup 7 08/07/1999 10:10:46 00:00:21 http 1115 80 172.016.118.070 172.016.112.100 1 yaga_setup 8 08/07/1999 10:40:29 00:00:03 ftp 1116 21 205.160.208.190 172.016.112.100 1 sechole_setup 8 08/07/1999 10:40:38 00:00:56 ftp 1116 21 205.160.208.190 172.016.112.100 1 sechole_setup 8 08/07/1999 10:41:28 00:00:01 ftp-data 20 1118 172.016.112.100 205.160.208.190 1 sechole_setup 8 08/07/1999 10:41:33 00:00:01 ftp-data 20 1169 172.016.112.100 205.160.208.190 1 sechole_setup 8 08/07/1999 10:41:43 00:01:16 telnet 1170 23 205.160.208.190 172.016.112.100 1 sechole_setup 9 08/07/1999 10:52:28 00:02:56 telnet 1169 23 172.016.118.070 172.016.112.100 1 yaga_breakin 10 08/07/1999 11:08:46 00:00:07 http 1028 80 209.001.012.046 172.016.112.100 1 crash_iis 11 08/07/1999 11:23:13 00:00:05 smtp 1050 25 207.230.054.203 172.016.112.100 1 netcat_setup 12 08/07/1999 11:50:08 00:00:04 smtp 1173 25 208.239.005.230 172.016.112.100 1 framespoofer 12 08/07/1999 11:51:31 00:00:26 http 4482 80 172.016.112.100 208.239.005.230 1 framespoofer 12 08/07/1999 12:08:44 00:00:01 http 4482 80 172.016.112.100 208.239.005.230 1 framespoofer 13 08/07/1999 12:04:11 00:00:01 http 1301 80 194.027.251.021 172.016.112.100 1 ppmacro_breakin 13 08/07/1999 12:04:16 00:00:01 http 1302 80 194.027.251.021 172.016.112.100 1 ppmacro_breakin 13 08/07/1999 12:04:32 00:00:01 http 1303 80 194.027.251.021 172.016.112.100 1 ppmacro_breakin 13 08/07/1999 12:05:08 00:00:24 http 1305 80 194.027.251.021 172.016.112.100 1 ppmacro_breakin 14 08/07/1999 12:29:19 00:02:04 telnet 1173 23 172.016.113.204 172.016.112.100 1 casesen_breakin 15 08/07/1999 12:41:55 00:01:27 telnet 1427 23 205.160.208.190 172.016.112.100 1 sechole_breakin 16 08/07/1999 12:50:00 00:27:45 - - - 172.016.112.100 172.016.112.100 1 anyPW_setup 17 08/07/1999 13:26:25 00:01:04 telnet 1321 23 172.016.117.103 172.016.112.100 1 anyPW_breakin 18 08/07/1999 13:36:46 00:01:33 nbssn 1092 139 172.016.115.234 172.016.112.100 1 dosnuke 19 08/07/1999 13:49:56 00:00:14 ftp 1387 21 206.048.044.018 172.016.112.100 1 ntis 19 08/07/1999 13:49:56 00:00:01 ftp-data 20 20 172.016.112.100 206.048.044.018 1 ntis 19 08/07/1999 13:49:56 00:00:01 ftp-data 20 20 172.016.112.100 206.048.044.018 1 ntis 19 08/07/1999 13:49:57 00:00:01 ftp-data 20 20 172.016.112.100 206.048.044.018 1 ntis 19 08/07/1999 13:49:57 00:00:01 ftp-data 20 20 172.016.112.100 206.048.044.018 1 ntis 19 08/07/1999 13:50:15 00:00:58 ftp 1389 21 206.048.044.018 172.016.112.100 1 ntis 19 08/07/1999 13:50:15 00:00:01 ftp-data 20 20 172.016.112.100 206.048.044.018 1 ntis 19 08/07/1999 13:50:16 00:00:01 ftp-data 20 20 172.016.112.100 206.048.044.018 1 ntis 19 08/07/1999 13:50:16 00:00:01 ftp-data 20 20 172.016.112.100 206.048.044.018 1 ntis 19 08/07/1999 13:50:17 00:00:01 ftp-data 20 20 172.016.112.100 206.048.044.018 1 ntis 19 08/07/1999 13:51:29 00:01:00 ftp 1392 21 206.048.044.018 172.016.112.100 1 ntis 19 08/07/1999 13:51:29 00:00:01 ftp-data 20 20 172.016.112.100 206.048.044.018 1 ntis 19 08/07/1999 13:51:29 00:00:01 ftp-data 20 20 172.016.112.100 206.048.044.018 1 ntis 19 08/07/1999 13:51:30 00:00:01 ftp-data 20 20 172.016.112.100 206.048.044.018 1 ntis 19 08/07/1999 13:51:31 00:00:01 ftp-data 20 20 172.016.112.100 206.048.044.018 1 ntis 19 08/07/1999 13:52:29 00:00:01 telnet 1394 23 206.048.044.018 172.016.112.100 1 ntis 19 08/07/1999 13:52:29 00:00:01 http 1395 80 206.048.044.018 172.016.112.100 1 ntis 19 08/07/1999 13:52:29 00:00:01 http 1396 80 206.048.044.018 172.016.112.100 1 ntis 19 08/07/1999 13:52:29 00:00:01 http 1397 80 206.048.044.018 172.016.112.100 1 ntis 19 08/07/1999 13:52:29 00:00:01 http 1398 80 206.048.044.018 172.016.112.100 1 ntis 19 08/07/1999 13:52:29 00:00:01 http 1399 80 206.048.044.018 172.016.112.100 1 ntis 19 08/07/1999 13:52:29 00:00:01 http 1400 80 206.048.044.018 172.016.112.100 1 ntis 19 08/07/1999 13:52:29 00:15:00 http 1401 80 206.048.044.018 172.016.112.100 1 ntis