| | DURATION | PROTOCOL | SRC PORT | DST PORT | SRC IP | DST IP | ATTACK NAME | ||||||||
| H | M | S | 0 | 1 | 2 | 3 | 0 | 1 | 2 | 3 | |||||
| 1 | 0 | 1 | 126 | telnet | 1754 | 23 | 192 | 168 | 1 | 30 | 192 | 168 | 0 | 20 | - |
| 2 | 0 | 0 | 0 | htp | 1784 | 80 | 192 | 168 | 1 | 30 | 192 | 168 | 0 | 40 | phf |
| 3 | 0 | 0 | 0 | finger | 240 | 79 | 192 | 168 | 1 | 30 | 192 | 168 | 0 | 40 | port-scan |
| 4 | 0 | 0 | 14 | rlogin | 1022 | 513 | 192 | 168 | 1 | 30 | 192 | 168 | 0 | 20 | rlogin |
| 5 | 0 | 0 | 2 | rsh | 1023 | 1021 | 192 | 168 | 1 | 30 | 192 | 168 | 0 | 20 | rcp |
| 6 | 0 | 0 | 38 | telnet | 1042 | 23 | 192 | 168 | 1 | 30 | 192 | 168 | 0 | 20 | - |
| 7 | 0 | 0 | 1 | smtp | 43494 | 25 | 192 | 168 | 0 | 40 | 192 | 168 | 1 | 30 | - |
| 8 | 0 | 0 | 1 | smtp | 43493 | 25 | 192 | 168 | 0 | 40 | 192 | 168 | 1 | 30 | - |
| 9 | 0 | 1 | 1 | telnet | 1769 | 23 | 192 | 168 | 1 | 30 | 192 | 168 | 0 | 20 | - |
| 10 | 0 | 0 | 22 | telnet | 1906 | 23 | 192 | 168 | 1 | 30 | 192 | 168 | 0 | 20 | guess |
| 11 | 0 | 0 | 14 | rlogin | 1022 | 513 | 192 | 168 | 1 | 30 | 192 | 168 | 0 | 20 | rlogin |
| 12 | 0 | 0 | 4 | telnet | 1914 | 23 | 192 | 168 | 1 | 30 | 192 | 168 | 0 | 20 | telnet |
| Population Individual rule | |||||||||||||||
| t | 0 | 0 | 14 | -1 | -1 | -1 | 192 | 168 | 1 | 30 | 192 | 168 | 0 | 20 | rlogin |