### Honeypot's Configuration ### Microsoft Windows 2000 Advanced Server SP3 ( / 10.0.0.71 / ) 80/tcp Microsoft Windows XP Professional SP1 or Windows 2000 SP3 ( / 10.0.0.72 / ) 139/tcp 137/tcp 135/tcp 445/tcp 593/tcp 6129/tcp 4444/tcp 137/udp 135/udp 445/udp -------------------------------------- Connection Counter -------------------------------------- Total: 10 TCP: 4 UDP: 2 ICMP: 4 -------------------------------------- -------------------------------------- Honeypot: 10.0.0.70 -------------------------------------- Source IP Resource Connections 192.168.50.20 21/tcp 1 192.168.100.130 21/tcp 1 192.168.177.253 11/icmp 1 192.168.139.133 11/icmp 1 -------------------------------------- IPs Resources Connections 4 2 4 -------------------------------------- -------------------------------------- Honeypot: 10.0.0.71 -------------------------------------- Source IP Resource Connections 192.168.100.130 21/tcp 1 192.168.131.157 11/icmp 1 192.168.139.133 11/icmp 1 -------------------------------------- IPs Resources Connections 3 2 3 -------------------------------------- -------------------------------------- Honeypot: 10.0.0.72 -------------------------------------- Source IP Resource Connections 192.168.100.130 21/tcp 1 192.168.207.84 53/udp 1 192.168.217.41 53/udp 1 -------------------------------------- IPs Resources Connections 3 2 3 -------------------------------------- Top 10 Source Hosts Rank Source IP Connections 1 192.168.100.130 3 2 192.168.139.133 2 3 192.168.50.20 1 4 192.168.131.157 1 5 192.168.217.41 1 6 192.168.207.84 1 7 192.168.177.253 1 Top 10 Accessed Resources Rank Resource Connections 1 21/tcp 4 2 11/icmp 4 3 53/udp 2 Top 10 ICMP > 40 bytes Senders Rank Source IP Connections 1 192.168.139.133 2 2 192.168.131.157 1 3 192.168.177.253 1 Connections per Hour Hour Connections 00:00 1 01:00 1 02:00 3 03:00 0 04:00 0 05:00 0 06:00 0 07:00 4 08:00 0 09:00 0 10:00 0 11:00 0 12:00 0 13:00 0 14:00 0 15:00 0 16:00 1 17:00 0 18:00 0 19:00 0 20:00 0 21:00 0 22:00 0 23:00 0