Wankwood Associates
Firewall Activity
September 30, 1999

Alerts
Reason Time Duration Protocol Bytes
Sent
Bytes
Received
Bytes
Total
Source
Interface
Source
Host
Destination
Interface
Destination
Host
Argument
Volume 03:57:09 000:01:05 smtp 2.50 Mb 411 2.50 Mb Outside spectgw01.spectrian.com Inside mail.zeeko.com <77CD2E3425DED1119F2400A0C9B40AF572F8FE@spectexmsg02.spectrian.com>
Volume 03:59:36 000:03:11 smtp 9.58 Mb 411 9.58 Mb Outside spectgw01.spectrian.com Inside mail.zeeko.com <77CD2E3425DED1119F2400A0C9B40AF572F8FD@spectexmsg02.spectrian.com>
Volume 05:45:56 000:02:30 smtp 1.04 Mb 359 1.04 Mb Outside host1.2037747.gcn.net.tw Inside mail.zeeko.com <NBBBLIJAOPEPPFHCKKFGGEGDCFAA.julie@chinnan.com.tw>
Time 05:56:16 000:00:01 ftp 0 5.3 Kb 5.3 Kb Inside 192.168.2.87 Unidentified 167.142.225.1 /showcase/glitch/.web/public/graph/misc/cool/pentacle.gif
Time 05:57:12 000:00:59 ftp 119 1.1 Kb 1.2 Kb Inside pillar Outside ins1.netins.net  
Time 05:58:09 000:00:01 ftp 0 5.3 Kb 5.3 Kb Inside 192.168.2.87 Unidentified 167.142.225.1 /showcase/glitch/.web/public/graph/misc/cool/pentacle.gif
Time 05:58:49 000:00:01 ftp 0 5.3 Kb 5.3 Kb Inside 192.168.2.87 Unidentified 167.142.225.1 /showcase/glitch/.web/public/graph/misc/cool/pentacle.gif
Time 06:00:01 000:00:01 ftp 0 5.3 Kb 5.3 Kb Inside 192.168.2.87 Unidentified 167.142.225.1 /showcase/glitch/.web/public/graph/misc/cool/pentacle.gif
Volume 06:07:31 000:00:11 smtp 1.58 Mb 409 1.58 Mb Inside mail.zeeko.com Outside rly-yd03.mx.aol.com <699538F7E6AAD011AC0D00A0C94AEFBF7FB21F@zeek.zeeko.com>
Volume 06:08:29 000:00:11 smtp 1.58 Mb 409 1.58 Mb Inside mail.zeeko.com Outside rly-yg03.mx.aol.com <699538F7E6AAD011AC0D00A0C94AEFBF7FB220@zeek.zeeko.com>
Duration 06:13:09 000:15:03 ftp 120 1.1 Kb 1.2 Kb Inside pillar Outside ins1.netins.net  
Duration 06:13:50 000:15:03 ftp 120 1.1 Kb 1.2 Kb Inside pillar Outside ins1.netins.net  
Duration 06:15:01 000:15:03 ftp 110 1.1 Kb 1.2 Kb Inside pillar Outside ins1.netins.net  
Volume 07:08:50 000:01:32 smtp 1.86 Mb 435 1.86 Mb Outside mta1.tm.net.my Inside mail.zeeko.com <000901bf0b29$fb618460$ded3fea9@tlkhl>
Volume 08:43:39 000:00:24 smtp 1.59 Mb 365 1.59 Mb Outside e2.ny.us.ibm.com Inside mail.zeeko.com <852567FC.0045D70E.00@D51MTA09.pok.ibm.com>
Word 09:22:16 000:00:00 http 256 12.0 Kb 12.2 Kb Inside phi Outside www.doverdowns.com http://www.doverdowns.com/casino.jpg
Volume 11:28:26 000:00:22 http 3.5 Kb 5.71 Mb 5.71 Mb Inside wally Outside test.zeeko.com http://test.zeeko.com/drawings/C-Press.pdf
Volume 12:12:24 000:01:54 smtp 2.36 Mb 369 2.36 Mb Outside spectgw01.spectrian.com Inside mail.zeeko.com <77CD2E3425DED1119F2400A0C9B40AF572F8FF@spectexmsg02.spectrian.com>
Volume 12:12:25 000:01:55 smtp 2.36 Mb 365 2.36 Mb Outside spectgw01.spectrian.com Inside mail.zeeko.com <77CD2E3425DED1119F2400A0C9B40AF572F8FF@spectexmsg02.spectrian.com>
Volume 12:23:55 000:00:35 http 380 5.08 Mb 5.08 Mb Inside fallen Outside zappo.com http://www.zappo.com/quake/files/q2-3.20-x86.exe
Word 14:06:21 000:00:00 http 365 11.3 Kb 11.7 Kb Inside rennta Outside ny450cd3vip.doubleclick.net http://ad.doubleclick.net/viewad/336515-90445-93277_casinoonnet052099_onnetsaveadaa2.gif
Volume 15:30:14 000:02:44 http 384 6.02 Mb 6.02 Mb Inside fallen Outside mschus4.www.conxion.com http://mschus.www.conxion.com/download/win98SE/Update/7.0/W9X/EN-US/DX70eng.exe
Volume 15:41:26 000:00:53 smtp 1.66 Mb 289 1.66 Mb Inside mail.zeeko.com Outside sbs1.msbs.com <699538F7E6AAD011AC0D00A0C94AEFBF4E5898@zeek.zeeko.com>
Volume 15:50:39 000:00:57 smtp 1.59 Mb 390 1.59 Mb Inside mail.zeeko.com Outside e3.ny.us.ibm.com <699538F7E6AAD011AC0D00A0C94AEFBF7F71E8@zeek.zeeko.com>
Volume 15:50:40 000:00:57 smtp 1.58 Mb 387 1.58 Mb Inside mail.zeeko.com Outside e4.ny.us.ibm.com <699538F7E6AAD011AC0D00A0C94AEFBF7F71E8@zeek.zeeko.com>
Word 16:30:13 000:00:01 http 379 11.1 Kb 11.5 Kb Inside damu Outside m.doubleclick.net http://m.doubleclick.net/viewad/337128-gamble.gif
Volume 16:47:41 000:12:31 ftp 0 18.09 Mb 18.09 Mb Inside 192.168.2.73 Unidentified 207.200.79.197 /pub/communicator/english/4.7/windows/windows95_or_nt/complete_install/cc32e47.exe
Volume 16:54:40 000:04:14 http 270 6.20 Mb 6.20 Mb Inside fallen Outside tucows.cows.net http://tucows.cows.net/files/xwp32.exe
Duration 17:54:57 000:24:25 ftp 1.1 Kb 1.9 Kb 3.0 Kb Inside fallen Outside 205.188.247.193  
Volume 18:10:14 000:11:24 ftp 0 18.46 Mb 18.46 Mb Inside 192.168.2.73 Unidentified 199.224.117.17 /pub/3dfiles/games/rcdemo2.zip
Volume 18:16:42 000:04:40 ftp 0 8.47 Mb 8.47 Mb Inside 192.168.2.73 Unidentified 192.151.11.14 /pub/printers/software/lj620en.exe
Duration 19:06:50 000:15:06 ftp 90 2.1 Kb 2.2 Kb Inside 192.168.2.76 Outside rufus.w3.org  
Duration 19:07:33 000:15:01 ftp 81 2.1 Kb 2.1 Kb Inside 192.168.2.76 Outside rufus.w3.org  
Duration 19:09:47 000:16:17 ftp 94 2.1 Kb 2.2 Kb Inside 192.168.2.76 Outside rufus.w3.org  
Duration 19:11:26 000:14:28 http 321 0 321 Inside saxon Outside windowsupdate.microsoft.com http://windowsupdate.microsoft.com/selfupd.cab
Duration 19:26:22 000:15:02 http 321 862 1.2 Kb Inside saxon Outside windowsupdate.microsoft.com http://windowsupdate.microsoft.com/selfupd.cab
Duration 19:53:17 000:15:01 http 321 862 1.2 Kb Inside saxon Outside windowsupdate.microsoft.com http://windowsupdate.microsoft.com/selfupd.cab
Duration 20:23:10 000:05:03 smtp 25 267 292 Outside 38.157.94.2 Inside mail.zeeko.com  
Duration 20:29:12 000:05:07 smtp 25 267 292 Outside 38.157.94.2 Inside mail.zeeko.com  
Volume 21:25:58 000:01:09 smtp 1.23 Mb 361 1.23 Mb Outside imo-d10.mx.aol.com Inside mail.zeeko.com <6dc1ece5.252546a7@aol.com>

Alert Summary
Host Alerts
mail.zeeko.com 5
spectgw01.spectrian.com 4
pillar 4
fallen 4
192.168.2.87 4

Totals
Hits 41,755
Duration 064:34:41
Bytes 362.17 Mb
Hosts [DMZ] 1
Hosts [Inside] 125
Hosts [Outside] 1474

Protocol Summary
Protocol Hits Duration Bytes
Sent
Bytes
Received
Bytes
Total
Percent of Total Bytes
http 37,543 028:07:05 14.77 Mb 223.79 Mb 238.56 Mb 65.87 graph
ftp 221 004:40:44 5.34 Mb 74.99 Mb 80.33 Mb 22.18 graph
smtp 3,662 015:57:29 40.92 Mb 410.1 Kb 41.32 Mb 11.41 graph
ssh 12 012:57:25 263.1 Kb 898.0 Kb 1.13 Mb 0.31 graph
imap 5 000:00:36 16.6 Kb 787.7 Kb 804.2 Kb 0.22 graph
pop3 310 002:51:09 8.9 Kb 33.2 Kb 42.0 Kb 0.01 graph
telnet 2 000:00:13 38 144 182 0.00 graph

Protocol Detail by Host [ftp]
Host Hits Duration Bytes
Sent
Bytes
Received
Bytes
Total
Percent of Total Bytes
192.168.2.73 37 000:54:52 0 64.22 Mb 64.22 Mb 17.73 graph
199.224.117.17 1 000:11:24 0 18.46 Mb 18.46 Mb 5.10 graph
207.200.79.197 1 000:12:31 0 18.09 Mb 18.09 Mb 4.99 graph
192.151.11.14 1 000:04:40 0 8.47 Mb 8.47 Mb 2.34 graph
206.67.200.2 42 000:00:25 5.33 Mb 1.28 Mb 6.61 Mb 1.82 graph
18.29.1.67 12 000:05:59 0 6.25 Mb 6.25 Mb 1.73 graph
192.168.2.252 6 000:03:41 0 5.29 Mb 5.29 Mb 1.46 graph
192.168.2.8 9 000:00:21 5.28 Mb 1.2 Kb 5.28 Mb 1.46 graph
208.194.156.3 10 000:05:16 661 4.40 Mb 4.40 Mb 1.22 graph
205.188.247.193 5 000:35:24 1.1 Kb 3.68 Mb 3.68 Mb 1.02 graph

Protocol Detail by Host [http]
Host Hits Duration Bytes
Sent
Bytes
Received
Bytes
Total
Percent of Total Bytes
fallen 2,092 002:14:34 749.6 Kb 31.11 Mb 31.84 Mb 8.79 graph
spackle 716 000:55:21 224.8 Kb 25.50 Mb 25.72 Mb 7.10 graph
me1 423 000:25:02 121.6 Kb 23.88 Mb 24.00 Mb 6.63 graph
wally 1,570 000:23:06 802.5 Kb 16.59 Mb 17.37 Mb 4.80 graph
test.zeeko.com 363 000:04:14 250.8 Kb 10.75 Mb 10.99 Mb 3.04 graph
otar 1,868 000:38:40 680.8 Kb 9.07 Mb 9.74 Mb 2.69 graph
undul 1,291 001:23:23 455.6 Kb 8.14 Mb 8.59 Mb 2.37 graph
tucows.cows.net 58 000:09:34 17.2 Kb 8.19 Mb 8.20 Mb 2.27 graph
qaaz.zeeko.com 2,033 001:04:20 814.5 Kb 6.25 Mb 7.04 Mb 1.94 graph
mswusvca0.www.conxion.com 6 000:08:33 1.1 Kb 6.97 Mb 6.97 Mb 1.92 graph

Protocol Detail by Host [ssh]
Host Hits Duration Bytes
Sent
Bytes
Received
Bytes
Total
Percent of Total Bytes
mail.eevar.com 12 012:57:25 263.1 Kb 898.0 Kb 1.13 Mb 0.31 graph
wally 4 012:11:22 176.6 Kb 550.4 Kb 727.0 Kb 0.20 graph
beta.zeeko.com 8 000:46:03 86.5 Kb 347.5 Kb 434.0 Kb 0.12 graph

Protocol Detail by User [smtp]
User Hits Duration Bytes
Sent
Bytes
Received
Bytes
Total
Percent of Total Bytes
marco@felpappo.com 4 000:08:05 16.81 Mb 1.5 Kb 16.81 Mb 4.64 graph
X.Gamut@mail.zeeko.com 2 000:01:54 3.16 Mb 777 3.16 Mb 0.87 graph
J.Jaime@mail.zeeko.com 3 000:00:25 3.16 Mb 1.0 Kb 3.16 Mb 0.87 graph
keneflwr@tm.net.my 1 000:01:32 1.86 Mb 435 1.86 Mb 0.51 graph
F.Malice@mail.zeeko.com 2 000:00:55 1.67 Mb 716 1.67 Mb 0.46 graph
kwaddell@us.ibm.com 4 000:00:44 1.59 Mb 1.4 Kb 1.59 Mb 0.44 graph
GDOUGSII@aol.com 1 000:01:09 1.23 Mb 361 1.23 Mb 0.34 graph
B.Wake@mail.zeeko.com 10 000:00:43 1.05 Mb 3.7 Kb 1.05 Mb 0.29 graph
julie@chinnan.com.tw 1 000:02:30 1.04 Mb 359 1.04 Mb 0.29 graph
H.Maris@mail.zeeko.com 8 000:03:19 1.00 Mb 1.9 Kb 1.00 Mb 0.28 graph

Interface Summary
Interface Hits Duration Bytes
Sent
Bytes
Received
Bytes
Total
Percent of Total Bytes
Inside 42,892 064:37:33 35.68 Mb 327.20 Mb 362.88 Mb 100.20 graph
Outside 40,343 063:21:58 250.78 Mb 28.77 Mb 279.55 Mb 77.19 graph
Unidentified 148 001:05:23 74.92 Mb 5.34 Mb 80.27 Mb 22.16 graph
DMZ 127 000:04:28 802.4 Kb 885.2 Kb 1.65 Mb 0.46 graph

Hour Summary
Hour Hits Duration Bytes
Sent
Bytes
Received
Bytes
Total
Percent of Total Bytes
00:00 - 00:59 163 000:28:08 40.4 Kb 16.3 Kb 56.6 Kb 0.02 graph
01:00 - 01:59 147 000:22:09 18.9 Kb 13.2 Kb 32.1 Kb 0.01 graph
02:00 - 02:59 151 000:25:19 44.9 Kb 15.1 Kb 60.0 Kb 0.02 graph
03:00 - 03:59 154 000:29:45 12.13 Mb 15.8 Kb 12.14 Mb 3.35 graph
04:00 - 04:59 149 000:22:06 793.6 Kb 14.1 Kb 807.7 Kb 0.22 graph
05:00 - 05:59 458 000:33:23 1.29 Mb 1.24 Mb 2.53 Mb 0.70 graph
06:00 - 06:59 865 001:26:05 3.66 Mb 2.07 Mb 5.73 Mb 1.58 graph
07:00 - 07:59 798 000:46:38 2.15 Mb 1.73 Mb 3.88 Mb 1.07 graph
08:00 - 08:59 2,716 002:06:15 2.50 Mb 8.90 Mb 11.40 Mb 3.15 graph
09:00 - 09:59 3,131 003:31:22 1.31 Mb 27.48 Mb 28.79 Mb 7.95 graph
10:00 - 10:59 4,215 004:08:20 7.66 Mb 29.14 Mb 36.80 Mb 10.16 graph
11:00 - 11:59 2,375 005:57:00 2.66 Mb 14.64 Mb 17.30 Mb 4.78 graph
12:00 - 12:59 4,925 009:42:57 7.67 Mb 26.46 Mb 34.13 Mb 9.42 graph
13:00 - 13:59 2,336 002:50:36 858.7 Kb 20.32 Mb 21.16 Mb 5.84 graph
14:00 - 14:59 3,812 003:23:25 2.46 Mb 35.98 Mb 38.44 Mb 10.61 graph
15:00 - 15:59 6,193 006:06:05 7.55 Mb 32.00 Mb 39.55 Mb 10.92 graph
16:00 - 16:59 3,995 008:39:23 4.06 Mb 41.80 Mb 45.85 Mb 12.66 graph
17:00 - 17:59 1,243 003:35:19 613.7 Kb 14.26 Mb 14.86 Mb 4.10 graph
18:00 - 18:59 1,331 002:26:47 1.04 Mb 36.18 Mb 37.22 Mb 10.28 graph
19:00 - 19:59 1,542 003:13:59 874.2 Kb 7.10 Mb 7.95 Mb 2.20 graph
20:00 - 20:59 177 001:22:51 115.6 Kb 17.3 Kb 132.9 Kb 0.04 graph
21:00 - 21:59 527 001:05:30 1.39 Mb 1.45 Mb 2.84 Mb 0.78 graph
22:00 - 22:59 175 000:45:47 427.2 Kb 17.7 Kb 444.9 Kb 0.12 graph
23:00 - 23:59 177 000:45:32 86.0 Kb 17.1 Kb 103.1 Kb 0.03 graph

Host Summary [DMZ]
Host Hits Duration Bytes
Sent
Bytes
Received
Bytes
Total
Percent of Total Bytes
philko.zeeko.com 127 000:04:28 802.4 Kb 885.2 Kb 1.65 Mb 0.46 graph

Host Summary [Inside]
Host Hits Duration Bytes
Sent
Bytes
Received
Bytes
Total
Percent of Total Bytes
192.168.2.73 37 000:54:52 0 64.22 Mb 64.22 Mb 17.73 graph
mail.zeeko.com 3,663 016:00:28 13.57 Mb 27.76 Mb 41.33 Mb 11.41 graph
fallen 2,123 003:55:47 754.8 Kb 31.14 Mb 31.88 Mb 8.80 graph
spackle 721 000:58:34 225.3 Kb 25.50 Mb 25.72 Mb 7.10 graph
me1 424 000:26:19 121.6 Kb 23.89 Mb 24.00 Mb 6.63 graph
wally 1,577 012:38:13 981.0 Kb 17.13 Mb 18.09 Mb 4.99 graph
otar 1,868 000:38:40 680.8 Kb 9.07 Mb 9.74 Mb 2.69 graph
undul 1,291 001:23:23 455.6 Kb 8.14 Mb 8.59 Mb 2.37 graph
qaaz.zeeko.com 2,033 001:04:20 814.5 Kb 6.25 Mb 7.04 Mb 1.94 graph
niko 1,549 001:32:30 715.4 Kb 5.87 Mb 6.57 Mb 1.81 graph

Host Summary [Outside]
Host Hits Duration Bytes
Sent
Bytes
Received
Bytes
Total
Percent of Total Bytes
spectgw01.spectrian.com 7 000:08:18 16.81 Mb 5.3 Kb 16.82 Mb 4.64 graph
test.zeeko.com 363 000:04:14 10.75 Mb 250.8 Kb 10.99 Mb 3.04 graph
tucows.cows.net 58 000:09:34 8.19 Mb 17.2 Kb 8.20 Mb 2.27 graph
mswusvca0.www.conxion.com 6 000:08:33 6.97 Mb 1.1 Kb 6.97 Mb 1.92 graph
mschus4.www.conxion.com 1 000:02:44 6.02 Mb 384 6.02 Mb 1.66 graph
mswusvca7.www.conxion.com 5 000:02:11 5.25 Mb 1.2 Kb 5.25 Mb 1.45 graph
zappo.com 34 000:00:38 5.20 Mb 8.9 Kb 5.21 Mb 1.44 graph
mswuheva8.www.conxion.com 5 000:05:42 5.15 Mb 938 5.15 Mb 1.42 graph
209.1.231.150 2 000:12:47 4.75 Mb 818 4.75 Mb 1.31 graph
mswuheva3.www.conxion.com 8 000:03:11 4.58 Mb 1.5 Kb 4.58 Mb 1.27 graph

Host Detail by Protocol [beta.zeeko.com]
Protocol Hits Duration Bytes
Sent
Bytes
Received
Bytes
Total
Percent of Total Bytes
http 333 000:07:22 111.5 Kb 1.25 Mb 1.36 Mb 0.38 graph
ssh 8 000:46:03 86.5 Kb 347.5 Kb 434.0 Kb 0.12 graph
ftp 1 000:00:07 210 1.1 Kb 1.3 Kb 0.00 graph

Host Detail by Protocol [mail.zeeko.com]
Protocol Hits Duration Bytes
Sent
Bytes
Received
Bytes
Total
Percent of Total Bytes
smtp 3,661 015:57:24 40.92 Mb 410.1 Kb 41.32 Mb 11.41 graph
ftp 2 000:03:04 290 3.3 Kb 3.6 Kb 0.00 graph

Host Detail by User [mail.zeeko.com]
User Hits Duration Bytes
Sent
Bytes
Received
Bytes
Total
Percent of Total Bytes
marco@felpappo.com 4 000:08:05 16.81 Mb 1.5 Kb 16.81 Mb 4.64 graph
X.Gamut@mail.zeeko.com 2 000:01:54 3.16 Mb 777 3.16 Mb 0.87 graph
J.Jaime@mail.zeeko.com 3 000:00:25 3.16 Mb 1.0 Kb 3.16 Mb 0.87 graph
keneflwr@tm.net.my 1 000:01:32 1.86 Mb 435 1.86 Mb 0.51 graph
F.Malice@mail.zeeko.com 2 000:00:55 1.67 Mb 716 1.67 Mb 0.46 graph
kwaddell@us.ibm.com 4 000:00:44 1.59 Mb 1.4 Kb 1.59 Mb 0.44 graph
GDOUGSII@aol.com 1 000:01:09 1.23 Mb 361 1.23 Mb 0.34 graph
B.Wake@mail.zeeko.com 10 000:00:43 1.05 Mb 3.7 Kb 1.05 Mb 0.29 graph
julie@chinnan.com.tw 1 000:02:30 1.04 Mb 359 1.04 Mb 0.29 graph
H.Maris@mail.zeeko.com 8 000:03:19 1.00 Mb 1.9 Kb 1.00 Mb 0.28 graph

User Summary
User Hits Duration Bytes
Sent
Bytes
Received
Bytes
Total
Percent of Total Bytes
marco@felpappo.com 4 000:08:05 16.81 Mb 1.5 Kb 16.81 Mb 4.64 graph
X.Gamut@mail.zeeko.com 2 000:01:54 3.16 Mb 777 3.16 Mb 0.87 graph
J.Jaime@mail.zeeko.com 3 000:00:25 3.16 Mb 1.0 Kb 3.16 Mb 0.87 graph
keneflwr@tm.net.my 1 000:01:32 1.86 Mb 435 1.86 Mb 0.51 graph
F.Malice@mail.zeeko.com 2 000:00:55 1.67 Mb 716 1.67 Mb 0.46 graph
kwaddell@us.ibm.com 4 000:00:44 1.59 Mb 1.4 Kb 1.59 Mb 0.44 graph
GDOUGSII@aol.com 1 000:01:09 1.23 Mb 361 1.23 Mb 0.34 graph
B.Wake@mail.zeeko.com 10 000:00:43 1.05 Mb 3.7 Kb 1.05 Mb 0.29 graph
julie@chinnan.com.tw 1 000:02:30 1.04 Mb 359 1.04 Mb 0.29 graph
H.Maris@mail.zeeko.com 8 000:03:19 1.00 Mb 1.9 Kb 1.00 Mb 0.28 graph

User Detail by Protocol [B.Wake@mail.zeeko.com]
Protocol Hits Duration Bytes
Sent
Bytes
Received
Bytes
Total
Percent of Total Bytes
smtp 10 000:00:43 1.05 Mb 3.7 Kb 1.05 Mb 0.29 graph

User Detail by Host [marco@felpappo.com]
Host Hits Duration Bytes
Sent
Bytes
Received
Bytes
Total
Percent of Total Bytes
mail.zeeko.com 4 000:08:05 16.81 Mb 1.5 Kb 16.81 Mb 4.64 graph
spectgw01.spectrian.com 4 000:08:05 16.81 Mb 1.5 Kb 16.81 Mb 4.64 graph

User Detail by Host [B.Wake@mail.zeeko.com]
Host Hits Duration Bytes
Sent
Bytes
Received
Bytes
Total
Percent of Total Bytes
mail.zeeko.com 10 000:00:43 1.05 Mb 3.7 Kb 1.05 Mb 0.29 graph
216.32.243.135 2 000:00:19 369.3 Kb 792 370.1 Kb 0.10 graph
rly-yd02.mx.aol.com 1 000:00:04 366.3 Kb 409 366.7 Kb 0.10 graph
mc1.law5.hotmail.com 2 000:00:11 166.8 Kb 792 167.6 Kb 0.05 graph
rly-zd04.mx.aol.com 1 000:00:02 116.2 Kb 425 116.6 Kb 0.03 graph
rly-za05.mx.aol.com 1 000:00:02 50.5 Kb 409 50.9 Kb 0.01 graph
rly-yg05.mx.aol.com 1 000:00:01 2.9 Kb 409 3.3 Kb 0.00 graph
mail.minicircuits.com 2 000:00:04 2.3 Kb 600 2.9 Kb 0.00 graph

Domain Summary
Domain Hits Duration Bytes
Sent
Bytes
Received
Bytes
Total
Percent of Total Bytes
com 37,119 057:09:36 88.45 Mb 193.58 Mb 282.03 Mb 77.87 graph
net 7,163 009:09:46 3.14 Mb 22.52 Mb 25.66 Mb 7.09 graph
org 870 001:22:53 312.5 Kb 4.50 Mb 4.81 Mb 1.33 graph
mx 380 000:22:46 131.9 Kb 2.75 Mb 2.88 Mb 0.80 graph
my 2 000:01:37 1.87 Mb 796 1.87 Mb 0.52 graph
gov 175 000:09:21 50.6 Kb 1.54 Mb 1.59 Mb 0.44 graph
tw 3 000:02:45 1.06 Mb 1.2 Kb 1.06 Mb 0.29 graph
edu 89 000:03:35 42.4 Kb 753.7 Kb 796.1 Kb 0.21 graph
us 40 000:02:03 227.3 Kb 198.0 Kb 425.3 Kb 0.11 graph
uk 73 000:07:47 23.2 Kb 301.1 Kb 324.3 Kb 0.09 graph

Raptor Mobile Summary
Net Entity Connections
em-albe 7 graph
em-secvar 5 graph
em-poklar 5 graph
em-nu 3 graph
em-lac 3 graph
em-yun 3 graph
em-larr 1 graph
em-bijo 1 graph
em-itimi 1 graph
em-nazgul 1 graph

Pattern Summary
Pattern Occurances
Port Scan on 192.168.0.1 894