2025-04-14 00:18:41 [Info] on report:79.171.115.22 N/A RDPCRACK 6 3389 N/A
2025-04-14 00:18:41 [Info] on login:79.171.115.22 N/A 6 RDPCRACK N/A
2025-04-14 00:19:12 [Info] on report raw login:UNKNOWN - admin 3389 1 N/A 3 fail invalid N/A user
2025-04-14 00:19:12 [Info] on report raw login:UNKNOWN - administrator 3389 1 N/A 3 fail valid N/A user
2025-04-14 00:19:12 [Info] on report raw login:UNKNOWN - benjamin 3389 1 N/A 3 fail invalid N/A user
2025-04-14 00:19:12 [Info] on report raw login:UNKNOWN - pc 3389 1 N/A 3 fail invalid N/A user
2025-04-14 00:19:12 [Info] on report raw login:UNKNOWN - sri 3389 1 N/A 3 fail invalid N/A user
2025-04-14 00:19:12 [Info] on report raw login:RDP 194.180.49.232 N/A 3389 2 N/A N/A fail valid N/A user
2025-04-14 00:19:12 [Info] on report raw login:RDP 79.171.115.22 N/A 3389 2 N/A N/A fail valid N/A user
2025-04-14 00:19:12 [Info] on report raw login:RDP 84.47.235.143 N/A 3389 1 N/A N/A fail valid N/A user
2025-04-14 00:20:19 [Info] on report raw login:UNKNOWN - admin 3389 1 N/A 3 fail invalid N/A user
2025-04-14 00:20:19 [Info] on report raw login:UNKNOWN - administrator 3389 1 N/A 3 fail valid N/A user
2025-04-14 00:20:19 [Info] on report raw login:RDP 79.171.115.22 N/A 3389 1 N/A N/A fail valid N/A user
2025-04-14 00:20:19 [Info] on report raw login:RDP 84.47.235.143 N/A 3389 1 N/A N/A fail valid N/A user
2025-04-14 00:20:58 [Info] on report:84.47.235.143 N/A RDPCRACK 12 3389 N/A
2025-04-14 00:20:58 [Info] on login:84.47.235.143 N/A 12 RDPCRACK N/A
2025-04-14 00:21:25 [Info] on report raw login:UNKNOWN - administrator 3389 2 N/A 3 fail valid N/A user
2025-04-14 00:21:25 [Info] on report raw login:UNKNOWN - dylan 3389 1 N/A 3 fail invalid N/A user
2025-04-14 00:21:25 [Info] on report raw login:UNKNOWN - sqlserver 3389 1 N/A 3 fail invalid N/A user
2025-04-14 00:21:25 [Info] on report raw login:RDP 194.180.49.232 N/A 3389 2 N/A N/A fail valid N/A user
2025-04-14 00:21:25 [Info] on report raw login:RDP 84.47.235.143 N/A 3389 2 N/A N/A fail valid N/A user
2025-04-14 00:22:31 [Info] on report raw login:UNKNOWN - administrator 3389 2 N/A 3 fail valid N/A user
2025-04-14 00:22:31 [Info] on report raw login:UNKNOWN - cody 3389 1 N/A 3 fail invalid N/A user
2025-04-14 00:22:31 [Info] on report raw login:RDP 194.180.49.232 N/A 3389 1 N/A N/A fail valid N/A user
2025-04-14 00:22:31 [Info] on report raw login:RDP 84.47.235.143 N/A 3389 2 N/A N/A fail valid N/A user
2025-04-14 00:23:38 [Info] on report raw login:UNKNOWN - administrator 3389 1 N/A 3 fail valid N/A user
2025-04-14 00:23:38 [Info] on report raw login:RDP 84.47.235.143 N/A 3389 1 N/A N/A fail valid N/A user
2025-04-14 00:24:44 [Info] on report raw login:UNKNOWN - administrator 3389 1 N/A 3 fail valid N/A user
2025-04-14 00:24:44 [Info] on report raw login:UNKNOWN - sota 3389 1 N/A 3 fail invalid N/A user
2025-04-14 00:24:44 [Info] on report raw login:RDP 79.171.115.22 N/A 3389 1 N/A N/A fail valid N/A user
2025-04-14 00:24:44 [Info] on report raw login:RDP 84.47.235.143 N/A 3389 1 N/A N/A fail valid N/A user
2025-04-14 00:25:51 [Info] on report raw login:UNKNOWN - administrator 3389 2 N/A 3 fail valid N/A user
2025-04-14 00:25:51 [Info] on report raw login:RDP 84.47.235.143 N/A 3389 2 N/A N/A fail valid N/A user
2025-04-14 00:26:57 [Info] on report raw login:UNKNOWN - administrator 3389 2 N/A 3 fail valid N/A user
2025-04-14 00:26:57 [Info] on report raw login:UNKNOWN - data 3389 1 N/A 3 fail invalid N/A user
2025-04-14 00:26:57 [Info] on report raw login:UNKNOWN - emilia 3389 1 N/A 3 fail invalid N/A user
2025-04-14 00:26:57 [Info] on report raw login:UNKNOWN - indra 3389 1 N/A 3 fail invalid N/A user
2025-04-14 00:26:57 [Info] on report raw login:UNKNOWN - user 3389 1 N/A 3 fail invalid N/A user
2025-04-14 00:26:57 [Info] on report raw login:RDP 194.180.49.232 N/A 3389 2 N/A N/A fail valid N/A user
2025-04-14 00:26:57 [Info] on report raw login:RDP 79.171.115.22 N/A 3389 2 N/A N/A fail valid N/A user
2025-04-14 00:26:57 [Info] on report raw login:RDP 84.47.235.143 N/A 3389 2 N/A N/A fail valid N/A user
2025-04-14 00:27:13 [Info] on report:79.171.115.22 N/A RDPCRACK 12 3389 N/A
2025-04-14 00:27:13 [Info] on login:79.171.115.22 N/A 12 RDPCRACK N/A
2025-04-14 00:28:04 [Info] on report raw login:UNKNOWN - administrator 3389 1 N/A 3 fail valid N/A user
2025-04-14 00:28:04 [Info] on report raw login:UNKNOWN - mypc 3389 1 N/A 3 fail invalid N/A user
2025-04-14 00:28:04 [Info] on report raw login:UNKNOWN - user 3389 1 N/A 3 fail invalid N/A user
2025-04-14 00:28:04 [Info] on report raw login:RDP 194.180.49.232 N/A 3389 1 N/A N/A fail valid N/A user
2025-04-14 00:28:04 [Info] on report raw login:RDP 79.171.115.22 N/A 3389 1 N/A N/A fail valid N/A user
2025-04-14 00:28:04 [Info] on report raw login:RDP 84.47.235.143 N/A 3389 1 N/A N/A fail valid N/A user
2025-04-14 00:29:10 [Info] on report raw login:UNKNOWN - administrator 3389 1 N/A 3 fail valid N/A user
2025-04-14 00:29:10 [Info] on report raw login:UNKNOWN - backup 3389 1 N/A 3 fail invalid N/A user
2025-04-14 00:29:10 [Info] on report raw login:RDP 194.180.49.232 N/A 3389 1 N/A N/A fail valid N/A user
2025-04-14 00:29:10 [Info] on report raw login:RDP 84.47.235.143 N/A 3389 1 N/A N/A fail valid N/A user
2025-04-14 00:30:16 [Info] on report raw login:UNKNOWN - administrator 3389 2 N/A 3 fail valid N/A user
2025-04-14 00:30:16 [Info] on report raw login:UNKNOWN - joshua 3389 1 N/A 3 fail invalid N/A user
2025-04-14 00:30:16 [Info] on report raw login:RDP 194.180.49.232 N/A 3389 1 N/A N/A fail valid N/A user
2025-04-14 00:30:16 [Info] on report raw login:RDP 84.47.235.143 N/A 3389 2 N/A N/A fail valid N/A user
2025-04-14 00:31:23 [Info] on report raw login:UNKNOWN - administrator 3389 2 N/A 3 fail valid N/A user
2025-04-14 00:31:23 [Info] on report raw login:UNKNOWN - alexander 3389 1 N/A 3 fail invalid N/A user
2025-04-14 00:31:23 [Info] on report raw login:UNKNOWN - yuki 3389 1 N/A 3 fail invalid N/A user
2025-04-14 00:31:23 [Info] on report raw login:RDP 194.180.49.232 N/A 3389 1 N/A N/A fail valid N/A user
2025-04-14 00:31:23 [Info] on report raw login:RDP 79.171.115.22 N/A 3389 1 N/A N/A fail valid N/A user
2025-04-14 00:31:23 [Info] on report raw login:RDP 84.47.235.143 N/A 3389 2 N/A N/A fail valid N/A user
2025-04-14 00:32:29 [Info] on report raw login:UNKNOWN - administrator 3389 1 N/A 3 fail valid N/A user
2025-04-14 00:32:29 [Info] on report raw login:RDP 84.47.235.143 N/A 3389 1 N/A N/A fail valid N/A user
2025-04-14 00:33:36 [Info] on report raw login:UNKNOWN - administrator 3389 2 N/A 3 fail valid N/A user
2025-04-14 00:33:36 [Info] on report raw login:UNKNOWN - vicente 3389 1 N/A 3 fail invalid N/A user
2025-04-14 00:33:36 [Info] on report raw login:RDP 194.180.49.232 N/A 3389 1 N/A N/A fail valid N/A user
2025-04-14 00:33:36 [Info] on report raw login:RDP 79.171.115.22 N/A 3389 1 N/A N/A fail valid N/A user
2025-04-14 00:33:36 [Info] on report raw login:RDP 84.47.235.143 N/A 3389 1 N/A N/A fail valid N/A user
2025-04-14 00:34:42 [Info] on report raw login:UNKNOWN - 1 3389 1 N/A 3 fail invalid N/A user
2025-04-14 00:34:42 [Info] on report raw login:UNKNOWN - administrator 3389 3 N/A 3 fail valid N/A user
2025-04-14 00:34:42 [Info] on report raw login:UNKNOWN - sari 3389 1 N/A 3 fail invalid N/A user
2025-04-14 00:34:42 [Info] on report raw login:RDP 194.180.49.232 N/A 3389 1 N/A N/A fail valid N/A user
2025-04-14 00:34:42 [Info] on report raw login:RDP 79.171.115.22 N/A 3389 2 N/A N/A fail valid N/A user
2025-04-14 00:34:42 [Info] on report raw login:RDP 84.47.235.143 N/A 3389 2 N/A N/A fail valid N/A user
2025-04-14 00:35:48 [Info] on report raw login:UNKNOWN - administrator 3389 2 N/A 3 fail valid N/A user
2025-04-14 00:35:48 [Info] on report raw login:RDP 84.47.235.143 N/A 3389 2 N/A N/A fail valid N/A user
2025-04-14 00:36:55 [Info] on report raw login:UNKNOWN - administrator 3389 1 N/A 3 fail valid N/A user
2025-04-14 00:36:55 [Info] on report raw login:UNKNOWN - remote 3389 1 N/A 3 fail invalid N/A user
2025-04-14 00:36:55 [Info] on report raw login:RDP 194.180.49.232 N/A 3389 1 N/A N/A fail valid N/A user
2025-04-14 00:36:55 [Info] on report raw login:RDP 84.47.235.143 N/A 3389 1 N/A N/A fail valid N/A user
2025-04-14 00:38:01 [Info] on report raw login:UNKNOWN - administrator 3389 1 N/A 3 fail valid N/A user
2025-04-14 00:38:01 [Info] on report raw login:UNKNOWN - jordan 3389 1 N/A 3 fail invalid N/A user
2025-04-14 00:38:01 [Info] on report raw login:UNKNOWN - tally 3389 1 N/A 3 fail invalid N/A user
2025-04-14 00:38:01 [Info] on report raw login:RDP 194.180.49.232 N/A 3389 2 N/A N/A fail valid N/A user
2025-04-14 00:38:01 [Info] on report raw login:RDP 84.47.235.143 N/A 3389 1 N/A N/A fail valid N/A user
2025-04-14 00:39:08 [Info] on report raw login:UNKNOWN - administrator 3389 2 N/A 3 fail valid N/A user
2025-04-14 00:39:08 [Info] on report raw login:UNKNOWN - riku 3389 1 N/A 3 fail invalid N/A user
2025-04-14 00:39:08 [Info] on report raw login:RDP 79.171.115.22 N/A 3389 1 N/A N/A fail valid N/A user
2025-04-14 00:39:08 [Info] on report raw login:RDP 84.47.235.143 N/A 3389 2 N/A N/A fail valid N/A user
2025-04-14 00:40:14 [Info] on report raw login:UNKNOWN - admin 3389 1 N/A 3 fail invalid N/A user
2025-04-14 00:40:14 [Info] on report raw login:UNKNOWN - administrator 3389 2 N/A 3 fail valid N/A user
2025-04-14 00:40:14 [Info] on report raw login:UNKNOWN - gabriel 3389 1 N/A 3 fail invalid N/A user
2025-04-14 00:40:14 [Info] on report raw login:RDP 194.180.49.232 N/A 3389 2 N/A N/A fail valid N/A user
2025-04-14 00:40:14 [Info] on report raw login:RDP 84.47.235.143 N/A 3389 2 N/A N/A fail valid N/A user
2025-04-14 00:40:25 [Info] SendMessage T_MSG_LOGIN
2025-04-14 00:40:25 [Info] GetMessage : T_MSG_LOGIN_RSP
2025-04-14 00:40:25 [Info] GetMessage : T_MSG_MACHINE_INFO
2025-04-14 00:40:25 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2025-04-14 00:40:25 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2025-04-14 00:40:25 [Info] vulfix user conf:1
2025-04-14 00:40:25 [Info] vulfix cmd conf:1
2025-04-14 00:40:25 [Info] crack user conf:1
2025-04-14 00:40:25 [Info] rdp_filter user conf:1
2025-04-14 00:40:25 [Info] login event check time user conf:1
2025-04-14 00:40:25 [Info] RTAP timeout config:9600000
2025-04-14 00:40:25 [Info] webshell user conf:1
2025-04-14 00:40:25 [Info] webshell timescan user conf:1
2025-04-14 00:40:25 [Info] proc_info user conf:1
2025-04-14 00:40:25 [Info] tcp_netstat user conf:1
2025-04-14 00:40:25 [Info] bin_repo user conf:1
2025-04-14 00:40:25 [Info] bin_repo_auto_deleted user conf:1
2025-04-14 00:40:25 [Info] kprobe_trace user conf:0
2025-04-14 00:40:25 [Info] kprobe_trace_file user conf:0
2025-04-14 00:40:25 [Info] proc_file_enable user conf:1
2025-04-14 00:40:25 [Info] proc_file_create_new_only user conf:1
2025-04-14 00:40:25 [Info] proc_file_filter user conf:1
2025-04-14 00:40:25 [Info] set send queue limit value [4096]
2025-04-14 00:40:25 [Info] tcp_snapshot user conf:1
2025-04-14 00:40:25 [Info] tcp_trace_clear user conf:0
2025-04-14 00:40:25 [Info] tcp_trace user conf:0
2025-04-14 00:40:25 [Info] bash_shell user conf:0
2025-04-14 00:40:25 [Info] script_repo user conf:1
2025-04-14 00:40:25 [Info] script_no_suffix user conf:0
2025-04-14 00:40:25 [Info] data_send_loop_time user conf:100
2025-04-14 00:40:25 [Info] data_list_limit user conf:10000
2025-04-14 00:40:25 [Info] file_push_timeout user conf:60
2025-04-14 00:40:25 [Info] bin_file_size_limit user conf:20971520
2025-04-14 00:40:25 [Info] monitor_all user conf:0
2025-04-14 00:40:25 [Info] proc_chain user conf:1
2025-04-14 00:40:25 [Info] proc_filter user conf:2
2025-04-14 00:40:25 [Info] proc_filter_statistic user conf:1
2025-04-14 00:40:25 [Info] proc_filter_method user conf:1
2025-04-14 00:40:25 [Info] event_log user conf:0
2025-04-14 00:40:25 [Info] Stop Subscribe Microsoft-Windows-PowerShell/Operational Success
2025-04-14 00:40:25 [Info] Stop Subscribe Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational Success
2025-04-14 00:40:25 [Info] Stop Subscribe Microsoft-Windows-TerminalServices-LocalSessionManager/Operational Success
2025-04-14 00:40:25 [Info] Stop Subscribe Security Success
2025-04-14 00:40:25 [Info] Stop Subscribe System Success
2025-04-14 00:40:25 [Info] proc_reg user conf:0
2025-04-14 00:40:25 [Info] proc_limit user conf:1
2025-04-14 00:40:25 [Info] proc_parent_check user conf:0
2025-04-14 00:40:25 [Info] queue_size_ratio user conf:80
2025-04-14 00:40:25 [Info] set send queue ratio value [80]
2025-04-14 00:40:25 [Info] kprobe_trace_accept user conf:0
2025-04-14 00:40:25 [Info] thread_inject user conf:0
2025-04-14 00:40:25 [Info] proc_access user conf:0
2025-04-14 00:40:25 [Info] kprobe_trace_unixsocket user conf:0
2025-04-14 00:40:25 [Info] GetMessage : T_MSG_RENEW_UPDATE
2025-04-14 00:40:25 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/win32/updates/update_12_46/aegis_update
2025-04-14 00:40:25 [Info] HttpGetToBuffer Success : aegis-abroad.alicdn.com/download/win32/updates/update_12_46/aegis_update,code:200, ret:0
2025-04-14 00:40:25 [Info] HttpGetToBuffer Success : aegis-abroad.alicdn.com/download/win32/updates/update_12_46/aegis_update.md5,code:200, ret:0
2025-04-14 00:40:26 [Info] DownLoadBuffer ok update.aegis.aliyun.com/download/win32/updates/update_12_46/aegis_update
2025-04-14 00:40:26 [Warn] GetMaxCpu : 11
2025-04-14 00:40:26 [Warn] GetWarningCpu : 11
2025-04-14 00:40:28 [Info] WriteNewFile C:/Program Files (x86)/Alibaba/Aegis/aegis_update/AliYunDunUpdate.exe Success
2025-04-14 00:40:29 [Info] bin info:c:/program files (x86)/alibaba/aegis/aegis_update/aliyundunupdate.exe 0ea3c0721de0fa8be5cfeeb82f9691fc 1132
2025-04-14 00:40:30 [Info] RunUpdate Success Version : update_12_46
2025-04-14 00:40:30 [Info] PatchUpdate success update_12_46
2025-04-14 00:40:30 [Info] GetMessage : T_MSG_CHECK
2025-04-14 00:40:30 [Info] task e80a7c0d-893b-4346-9681-4fe3312237e5 has 1 items, priority is 1, aggregate is 0
2025-04-14 00:40:30 [Info] GetMessage : T_MSG_CHECK
2025-04-14 00:40:30 [Info] task 67cfaf620bc21fc74d611607e9279398 has 1 items, priority is 1, aggregate is 0
2025-04-14 00:40:32 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/SecureCheck/GrayList
2025-04-14 00:40:32 [Info] HttpGetToBuffer Success : aegis-abroad.alicdn.com/download/SecureCheck/GrayList,code:200, ret:0
2025-04-14 00:40:32 [Info] HttpGetToBuffer Success : aegis-abroad.alicdn.com/download/SecureCheck/GrayList.md5,code:200, ret:0
2025-04-14 00:40:32 [Info] DownLoadBuffer ok update.aegis.aliyun.com/download/SecureCheck/GrayList
2025-04-14 00:40:32 [Info] start to check remote md5
2025-04-14 00:40:32 [Info] start DownLoadFile update.aegis.aliyun.com/download/SecureCheck/Gray/win32/AliSecureCheckAdvanced.zip.md5
2025-04-14 00:40:32 [Info] HttpGetToBuffer Success : aegis-abroad.alicdn.com/download/SecureCheck/Gray/win32/AliSecureCheckAdvanced.zip.md5,code:200, ret:0
2025-04-14 00:40:32 [Info] DownLoadFile ok C:/Program Files (x86)/Alibaba/Aegis/PythonLoader/AliSecureCheckAdvanced.zip.md5.tmp
2025-04-14 00:40:32 [Info] run rtap work --windows-sysinfoext-check
2025-04-14 00:40:32 [Info] ipc client:Rtap279261744562432_handler Reg client_name:Rtap279261744562432 on WhiteList
2025-04-14 00:40:32 [Info] New ClientConnectNotify : Rtap279261744562432 
2025-04-14 00:40:32 [Info] ipc client:Rtap279261744562432 Reg msg_type:T_MSG_IPC_NETWORK_NOTIFY on WhiteList
2025-04-14 00:40:32 [Info] ipc client:Rtap279261744562432 Reg client_name:protocol_ipc_client on WhiteList
2025-04-14 00:40:32 [Info] Rtap Platform Rtap279261744562432 execv work --windows-sysinfoext-check on pid 2172
2025-04-14 00:40:34 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/SecureCheck/GrayList
2025-04-14 00:40:34 [Info] HttpGetToBuffer Success : aegis-abroad.alicdn.com/download/SecureCheck/GrayList,code:200, ret:0
2025-04-14 00:40:34 [Info] HttpGetToBuffer Success : aegis-abroad.alicdn.com/download/SecureCheck/GrayList.md5,code:200, ret:0
2025-04-14 00:40:34 [Info] DownLoadBuffer ok update.aegis.aliyun.com/download/SecureCheck/GrayList
2025-04-14 00:40:34 [Info] start to check remote md5
2025-04-14 00:40:34 [Info] start DownLoadFile update.aegis.aliyun.com/download/SecureCheck/Gray/win32/AliSecureCheckAdvanced.zip.md5
2025-04-14 00:40:34 [Info] HttpGetToBuffer Success : aegis-abroad.alicdn.com/download/SecureCheck/Gray/win32/AliSecureCheckAdvanced.zip.md5,code:200, ret:0
2025-04-14 00:40:34 [Info] DownLoadFile ok C:/Program Files (x86)/Alibaba/Aegis/PythonLoader/AliSecureCheckAdvanced.zip.md5.tmp
2025-04-14 00:40:34 [Info] run rtap work --windows-vul-check
2025-04-14 00:40:34 [Info] ipc client:Rtap279331744562434_handler Reg client_name:Rtap279331744562434 on WhiteList
2025-04-14 00:40:34 [Info] New ClientConnectNotify : Rtap279331744562434 
2025-04-14 00:40:34 [Info] ipc client:Rtap279331744562434 Reg msg_type:T_MSG_IPC_NETWORK_NOTIFY on WhiteList
2025-04-14 00:40:34 [Info] ipc client:Rtap279331744562434 Reg client_name:protocol_ipc_client on WhiteList
2025-04-14 00:40:34 [Warn] GetWarningCpu : 9
2025-04-14 00:40:34 [Info] Rtap Platform Rtap279331744562434 execv work --windows-vul-check on pid 2816
2025-04-14 00:40:39 [Info] bin info:c:/windows/syswow64/wbem/wmiprvse.exe de1934bdb5b8e10b2f3574c3ccd35bb4 2560
2025-04-14 00:40:41 [Info] Done Work --windows-sysinfoext-check:1
2025-04-14 00:40:41 [Info] Rtap Platform Rtap279261744562432 Exit:normal exit
2025-04-14 00:40:45 [Info] ClientDisConnectNotify : Rtap279261744562432
2025-04-14 00:40:46 [Warn] GetWarningCpu : 9
2025-04-14 00:40:46 [Info] Done Work --windows-vul-check:1
2025-04-14 00:40:46 [Info] Rtap Platform Rtap279331744562434 Exit:normal exit
2025-04-14 00:40:53 [Info] New ClientConnectNotify : AliYunDunUpdate 
2025-04-14 00:40:53 [Info] ipc client:AliYunDunUpdate Reg msg_type:T_MSG_IPC_NETWORK_NOTIFY on WhiteList
2025-04-14 00:40:53 [Info] ipc client:AliYunDunUpdate Reg client_name:protocol_ipc_client on WhiteList
2025-04-14 00:40:53 [Info] ipc client:AliYunDunUpdate Reg msg_type:T_MSG_ALIYUNDUN_IPC_HEART on WhiteList
2025-04-14 00:40:53 [Info] ipc client:AliYunDunUpdate Reg msg_type:T_MSG_SERVICE_SWITCH_RSP on WhiteList
2025-04-14 00:40:54 [Info] ipc client:AliYunDunUpdate UnReg client_name:protocol_ipc_client on WhiteList
2025-04-14 00:40:54 [Info] ClientDisConnectNotify : Rtap279331744562434
2025-04-14 00:41:22 [Info] on report raw login:UNKNOWN - administrator 3389 1 N/A 3 fail valid N/A user
2025-04-14 00:41:22 [Info] on report raw login:UNKNOWN - martin 3389 1 N/A 3 fail invalid N/A user
2025-04-14 00:41:22 [Info] on report raw login:RDP 79.171.115.22 N/A 3389 1 N/A N/A fail valid N/A user
2025-04-14 00:41:22 [Info] on report raw login:RDP 84.47.235.143 N/A 3389 1 N/A N/A fail valid N/A user