is 55 wrist-Hm mu that menu Lass 445 2982 P 11 fa 055% I0622 24 Report Date 22Jun98 Name Comman ava pace Command Phone COMM 540-653-5543 Phone DSN 249-5543 E Mail nec navy mi1 Type Probe Suspect IP Victim 1P Port Service ICMP echo requests Incident Date 16Jun1998 - NCIS Cass Case Status open By Notes Subject ICMP to map hosts in 204 34 229 address NAHCIRT was not called prior to this report -1 Report Date 16 June 1998 - 2 Incident Date 16 June 1998 3 Iype of incident Attempt to map responding hosts in add ress 4 Individuals involved unregistered 5 Cost of this incident nu as analysis 6 Summary of incident and investigation results Attempt was a probe to determine which hosts within the add ress would respond to ICMP echo request bu Forwarded log notifications to NANCIRT Date Time SRC IP we SRO PORT DST IP DST PORT b qr 1998 06 16 05 03 43 00 0 7 Supervisors Recommendation and Comment Report to NAVCIRT 8 Investigating Official 9 Local Action to Prevent occuranc 10 Recommended Action by 1380 or ISSM File Report to NAVCIRT 11 Attack IP address 12 Physical location om ava Space Command Dahlgren Va 13 Hardware Configuration 14 Operating System 15 Security Software installed ISS Internet Scanner 16 Highest level of data on system Unclas sified 1'7 Damage from attack None no access 18 Other affected hosts or sites None Page 1 5 Hue iU ss o9 oer Lib EHEG EU4J 445 2982 P 1d 10622 24 19 Command name and location Space Command 5280 4th Street Dahlgren Va 20 POC 1880 Jim Rights ht html inetnum netname descr descr descr country admin-o tech o changed source route origin mnt by changed source person address address address address phone fax-no e-msil nio-hdl changed source person address address address address phone fax-no e-msil m restricted by copyright See for Information Technologies Moscow Mayor's Office Moscow RU 96 E14 0018 ASBB20-MNT _E- 1vis ru 970718 RIPE Mbscow Mayor's Office 13 TVerskaya str 103032 Moscow City Russia 7 095 2005926 7 095 2005978 illnemos ru demosmet 960619 I53cm asyor's 13 str 103032 Moscow Russia 7 095 2005926 7 095 2005978 msn mos ru Page 2 1 6 nio-hdl notify changed source person address address address address phone fax no e-mail nic-hdl changed source person address address address address phone fax no e-mail ' nic-hdl notify changed source so us buHm Nle tNEb USHQJ 884 445-2982 10622 24 noceitc mos ru Fmsunmosmu 980326 goscow lalyl yr 13 Tverskaya str 103032 Mbscow city Russia 7 095 2005325 7 095 2005978 @mos ru B-RIPE memos net 950619 b6 Moscow Mayor's Office 13 Tverskaya str 103032 Moscow Russia 7 095 2005325 7 095 2005978 llIleos ru KHZ-RIPE noo itc mos ru mesunmosmu 980326 Page 3 R13 31