0115.19:07:02.259 0115.19:07:57.623 xx.yy.58.25 137.189.victim1 3965 ( ) 2222 ( ) 30 1278 0115.19:08:52.534 0115.19:11:39.10 xx.yy.58.25 137.189.victim1 3965 ( ) 2222 ( ) 49 2145 0115.19:12:49.970 0115.19:12:50.866 xx.yy.58.25 137.189.victim1 3965 ( ) 2222 ( ) 3 144 0115.19:14:55.861 0115.19:14:55.861 xx.yy.58.25 137.189.victim1 3965 ( ) 2222 ( ) 1 40 0115.19:14:58.61 0115.19:16:48.653 xx.yy.58.25 137.189.victim1 3978 ( ) 2222 ( ) 45 1897 0115.19:17:37.829 0115.19:17:37.849 xx.yy.58.25 137.189.victim1 3965 ( ) 2222 ( ) 2 80 0115.19:18:30.861 0115.19:18:31.125 xx.yy.58.25 137.189.victim1 3978 ( ) 2222 ( ) 2 80 0116.15:40:20.265 0116.15:40:34.1 xx.yy.58.25 137.189.victim1 1959 ( ) 2222 ( ) 5 208 0116.15:41:24.957 0116.15:41:26.829 xx.yy.58.25 137.189.victim1 1959 ( ) 2222 ( ) 5 213 0116.15:46:37.649 0116.15:46:37.917 xx.yy.58.25 137.189.victim1 1959 ( ) 2222 ( ) 2 80 ============================================================================================================================= 0115.20:48:54.264 0115.20:49:05.292 209.245.205.154 137.189.victim1 1064 ( ) 2222 ( ) 7 292 ============================================================================================================================= 0117.02:42:33.547 0117.02:42:51.683 aa.bb.90.22 137.189.victim1 1513 ( ) 80 ( www ) 7 981 0117.02:47:33.198 0117.02:49:25.646 aa.bb.90.22 137.189.victim1 1514 ( ) 2222 ( ) 35 1499 0116.16:34:26.144 0116.16:34:27.180 aa.bb.90.32 137.189.victim1 1138 ( ) 2222 ( ) 3 128 0116.16:36:47.399 0116.16:38:21.583 aa.bb.90.32 137.189.victim1 1138 ( ) 2222 ( ) 9 458 0116.16:40:35.191 0116.16:40:49.19 aa.bb.90.46 137.189.victim1 1146 ( ) 2222 ( ) 6 254 0116.16:46:09.702 0116.16:46:10.842 aa.bb.90.46 137.189.victim1 1146 ( ) 2222 ( ) 3 140 0116.16:47:13.546 0116.16:47:18.918 aa.bb.90.46 137.189.victim1 1146 ( ) 2222 ( ) 6 248 0116.16:48:10.818 0116.16:48:52.886 aa.bb.90.46 137.189.victim1 1146 ( ) 2222 ( ) 6 271 0116.17:23:11.712 0116.17:24:00.240 aa.bb.90.46 137.189.victim1 1146 ( ) 2222 ( ) 75 33065 0116.17:25:16.336 0116.17:25:41.368 aa.bb.90.46 137.189.victim1 1155 ( ) 80 ( www ) 10 1217 0116.17:25:13.60 0116.17:25:35.824 aa.bb.90.46 137.189.victim1 1154 ( ) 80 ( www ) 12 1559 0116.17:25:57.40 0116.17:26:22.940 aa.bb.90.46 137.189.victim1 1161 ( ) 80 ( www ) 34 2229 0116.17:28:06.720 0116.17:28:07.936 aa.bb.90.46 137.189.victim1 1146 ( ) 2222 ( ) 3 145 0116.17:28:18.100 0116.17:28:36.532 aa.bb.90.46 137.189.victim1 1162 ( ) 80 ( www ) 7 552 0116.17:41:39.574 0116.17:41:40.410 aa.bb.90.46 137.189.victim1 1146 ( ) 2222 ( ) 5 200 0116.18:05:11.559 0116.18:06:56.131 aa.bb.90.46 137.189.victim1 1223 ( ) 2222 ( ) 27 1140 0116.18:07:39.158 0116.18:09:54.638 aa.bb.90.46 137.189.victim1 1223 ( ) 2222 ( ) 36 1537 0116.18:13:21.130 0116.18:15:10.434 aa.bb.90.46 137.189.victim1 1223 ( ) 2222 ( ) 25 1137 0116.18:41:46.970 0116.18:42:05.82 aa.bb.90.46 137.189.victim1 1237 ( ) 80 ( www ) 7 981 0116.18:42:13.854 0116.18:42:13.854 aa.bb.90.46 137.189.victim1 1239 ( ) 80 ( www ) 1 40 0116.18:42:10.982 0116.18:42:30.838 aa.bb.90.46 137.189.victim1 1239 ( ) 80 ( www ) 8 606 0116.18:42:07.874 0116.18:42:30.818 aa.bb.90.46 137.189.victim1 1238 ( ) 80 ( www ) 13 1130 ============================================================================================================================= 0115.08:39:15.319 0115.08:39:17.431 cc.dd.101.162 137.189.victim1 758 ( nlogin ) 111 ( sunrpc ) 6 288 0115.08:39:15.31 0115.08:39:17.419 cc.dd.101.162 137.189.victim1 13665 ( ) 111 ( sunrpc ) 3 120 0115.18:42:26.179 0115.18:42:46.223 cc.dd.101.162 137.189.victim1 653 ( ) 657 ( ) 5 5480 0115.18:42:32.659 0115.18:43:15.67 cc.dd.101.162 137.189.victim1 31321 ( ) 2222 ( ) 7 299 ============================================================================================================================= 0115.21:12:20.506 0115.21:12:22.406 ee.ff.35.187 137.189.victim1 1795 ( ) 2222 ( ) 3 120 ============================================================================================================================= 0116.15:31:52.826 0116.15:32:18.770 ff.gg.43.220 137.189.victim1 1107 ( ) 2222 ( ) 7 306 0116.16:33:58.680 0116.16:34:24.560 ff.gg.43.220 137.189.victim1 1351 (equationb) 2222 ( ) 8 328 0116.16:36:32.280 0116.16:37:51.344 ff.gg.43.220 137.189.victim1 1353 ( ) 2222 ( ) 21 874 0116.16:39:42.567 0116.16:39:45.639 ff.gg.43.220 137.189.victim1 1353 ( ) 2222 ( ) 3 120 0116.17:26:05.164 0116.17:26:28.692 ff.gg.43.220 137.189.victim1 1374 ( ) 80 ( www ) 12 1661 0116.17:26:09.288 0116.17:26:34.196 ff.gg.43.220 137.189.victim1 1375 ( ) 80 ( www ) 10 1268 0116.17:27:13.256 0116.17:27:33.416 ff.gg.43.220 137.189.victim1 1376 ( ) 80 ( www ) 11 1791 0116.17:27:14.904 0116.17:27:38.916 ff.gg.43.220 137.189.victim1 1377 ( ) 80 ( www ) 8 1448 0116.17:28:24.852 0116.17:28:24.852 ff.gg.43.220 137.189.victim1 1380 ( ) 80 ( www ) 1 40 0116.17:28:16.652 0116.17:28:35.48 ff.gg.43.220 137.189.victim1 1380 ( ) 80 ( www ) 35 1915 0115.18:57:00.569 0115.18:58:52.533 ff.gg.53.109 137.189.victim1 1083 ( ) 2222 ( ) 97 22708 0115.19:00:45.568 0115.19:03:11.728 ff.gg.53.109 137.189.victim1 1083 ( ) 2222 ( ) 65 4367 0115.19:05:02.507 0115.19:05:02.507 ff.gg.53.109 137.189.victim1 1083 ( ) 2222 ( ) 1 40 0115.19:05:01.959 0115.19:05:46.827 ff.gg.53.109 137.189.victim1 1083 ( ) 2222 ( ) 10 422 0115.19:07:15.875 0115.19:08:07.427 ff.gg.53.109 137.189.victim1 1083 ( ) 2222 ( ) 3 120 0115.19:08:48.770 0115.19:11:07.886 ff.gg.53.109 137.189.victim1 1083 ( ) 2222 ( ) 11 440 0115.19:12:09.874 0115.19:12:29.694 ff.gg.53.109 137.189.victim1 1097 ( ) 80 ( www ) 12 1059 0115.19:12:12.990 0115.19:12:46.806 ff.gg.53.109 137.189.victim1 1098 ( ) 80 ( www ) 10 982 0115.19:13:41.721 0115.19:18:26.785 ff.gg.53.109 137.189.victim1 1083 ( ) 2222 ( ) 103 4266 0115.19:19:45.628 0115.19:19:46.28 ff.gg.53.109 137.189.victim1 1083 ( ) 2222 ( ) 2 80