so awash Ltd-4 EUDHUJ W564 445 2932 t $0 R5 529191 19 -- Report Date 6Jan98 Name Comm search Laboratory NRL Phone COMM Phone DSN 2 202-767-3438 97-3438 E-Mail hightop navy mil Type Attempt Suspect IP Victim IP 0 Port Service 80 54 a Incident Date 25Dec1997 NCIS Case # Case Status open By NOtes 1 Probe Type attempt to take passwd file - 25 Dec 1997 11 32 53 05001 was Il - - 25 Dec 1997 11 32 55 -0500 swd 404 - m- - 25 Dec 1997 11 32 57 -0500 dow 404 - 2 System system name cmf nr1 navy mil TCPXIP address for atd and_-fa0 3 Date Dec 25 1997 4 Origin of Probe m- nstname desor MicroNet Ltd descr Requested network in numbers will be used for connecting desor to MAcomnet country RU adminrc tech-o status ASSIGNED PA notify ip-regaripn net changed oleern net 980105 source RIPE descr oomne descr Miusskaya sq 6 3 descr Moscow Russia 125267 Page 1 IS HLAEI lid 96 39 51 31 NCIS EREG ISHQJ BB4 445-2982 origin notify notify mnt-by changed source 'person address address address phone phone phone fax no e-mail mienhdl changed source person address address address phone e-mail nic-hdl changed source D0106 14 A58470 hostmasteremacomnet ru lvv macomnet ru 1vv@relcom eu net 971018 RIPE gloroNet Egg 13 Novozavodskaya at 121309 Mbsoow Russia 7 095 145-9520 7 095 145-9522 7 095 142-0618 7 095 924-0464 microdin ru ovlaripn net 980105 RIPE 3 5 Raspletina str 193060 Moscow 7 095 1941995 Vreloom eu nel DV reloom mnet 971017 5 NUmber of Probes 3 Page 2 P E db