svchost.exe 2760 TCP 88.86.107.90 3389 222.161.63.34 3504 ESTABLISHED svchost.exe 2408 TCP vwwebsrv ms-wbt-server 221.130.126.241 28804 ESTABLISHED svchost.exe 2408 TCP 88.86.107.90 3389 125.227.234.128 64815 ESTABLISHED [System Process] 0 TCP 88.86.107.90 21 182.75.107.34 53158 TIME_WAIT 5 134 6 39 svchost.exe 2512 TCP vwwebsrv ms-wbt-server 78.130.133.8 62341 ESTABLISHED svchost.exe 2512 TCP 88.86.107.90 3389 212.72.136.23 62321 ESTABLISHED svchost.exe 2512 TCP 88.86.107.91 3389 137.154.18.27 65216 ESTABLISHED svchost.exe 2512 TCP 88.86.107.90 3389 80.179.10.30 49185 SYN_RCVD svchost.exe 2512 TCP 88.86.107.90 3389 24.178.196.186 23532 ESTABLISHED svchost.exe 2568 TCP 88.86.107.91 3389 46.137.215.32 59854 ESTABLISHED 22 80 061 14 2 570 svchost.exe 2568 TCP 88.86.107.91 3389 122.143.81.39 63136 ESTABLISHED 21 80 046 14 2 631 svchost.exe 2568 TCP vwwebsrv ms-wbt-server 5.230.134.13 21614 SYN_RCVD [System Process] 0 TCP 88.86.107.90 21 58.96.169.102 50859 TIME_WAIT [System Process] 0 TCP 88.86.107.91 25 37.59.87.23 55614 TIME_WAIT 218.1.34.246 logon svchost.exe 2568 TCP 88.86.107.91 3389 213.81.168.162 55089 ESTABLISHED 418 42 627 403 42 951 62 2 svchost.exe 2568 TCP 88.86.107.91 3389 176.101.148.67 63623 ESTABLISHED 23.97.193.163 smtp 208.45.248.77 ftp svchost.exe 2568 TCP 88.86.107.90 3389 118.163.196.25 51155 ESTABLISHED 188.143.232.1 188.143.232.254 spam z ruska a napadání eshopu svchost.exe 2568 TCP vwwebsrv ms-wbt-server 203.147.34.151 63462 ESTABLISHED svchost.exe 2568 TCP 88.86.107.91 3389 81.2.236.180 61740 ESTABLISHED svchost.exe 2568 TCP 88.86.107.91 3389 89.165.170.30 60176 ESTABLISHED svchost.exe 2504 TCP 88.86.107.91 3389 165.255.165.104 64764 ESTABLISHED 185.130.5.167 ftp 61.146.235.122 ftp 119.118.228.152 ftp svchost.exe 2504 TCP 88.86.107.91 3389 92.39.246.105 51915 ESTABLISHED svchost.exe 2504 TCP 88.86.107.90 3389 189.131.163.107 62498 ESTABLISHED svchost.exe 2504 TCP 88.86.107.91 3389 203.130.216.59 56092 SYN_RCVD 178.15.3.47 logon 212.83.160.75 logon svchost.exe 2504 TCP vwwebsrv ms-wbt-server 82.200.248.150 2649 SYN_RCVD 15 6 998 22 3 494 svchost.exe 2600 TCP vwwebsrv ms-wbt-server 185.110.236.9 3565 ESTABLISHED 4 112 2 106 svchost.exe 2600 TCP vwwebsrv ms-wbt-server 64.207.16.206 27539 ESTABLISHED svchost.exe 2600 TCP 88.86.107.90 3389 193.189.117.11 60091 ESTABLISHED svchost.exe 2600 TCP 88.86.107.90 3389 217.23.12.158 57152 ESTABLISHED [System Process] 0 TCP 88.86.107.90 21 60.10.69.37 60896 TIME_WAIT [System Process] 0 TCP 88.86.107.91 25 181.60.60.73 4631 TIME_WAIT svchost.exe 2600 TCP vwwebsrv ms-wbt-server 58.218.211.157 3596 ESTABLISHED 17 79 701 4 128 svchost.exe 2600 TCP vwwebsrv ms-wbt-server 222.240.225.67 23760 ESTABLISHED svchost.exe 2600 TCP 88.86.107.90 3389 213.3.17.29 36411 ESTABLISHED svchost.exe 2600 TCP 88.86.107.91 3389 177.69.65.241 55749 SYN_RCVD svchost.exe 2600 TCP vwwebsrv ms-wbt-server 61.177.119.229 24344 ESTABLISHED svchost.exe 2600 TCP 88.86.107.91 3389 46.175.235.190 50140 ESTABLISHED svchost.exe 2600 TCP vwwebsrv ms-wbt-server 121.155.128.39 63119 ESTABLISHED svchost.exe 1404 TCP vwwebsrv ftp 14.139.191.195 43427 ESTABLISHED svchost.exe 2508 TCP 88.86.107.91 3389 190.75.48.101 4622 ESTABLISHED [System Process] 0 TCP vwwebsrv ftp 59.37.165.160 5680 TIME_WAIT 222.42.146.225 ftp [System Process] 0 TCP vwwebsrv ftp 121.26.251.26 2458 TIME_WAIT svchost.exe 1404 TCP vwwebsrv ftp 58.187.105.70 59705 SYN_RCVD 139.196.29.24 ftp svchost.exe 2508 TCP 88.86.107.91 3389 217.126.9.28 54392 ESTABLISHED svchost.exe 2508 TCP 88.86.107.91 ms-wbt-server 40.68.167.69 65247 ESTABLISHED 10 1 146 29 3 467 1 146 3 467 10 29 svchost.exe 2508 TCP vwwebsrv ms-wbt-server 54.233.125.40 52622 ESTABLISHED 4 1 470 12 2 731 svchost.exe 1404 TCP vwwebsrv ftp 220.172.23.106 3149 FIN_WAIT1 3 74 3 22 52.63.197.61 ftp 118.69.60.31 ftp 108.163.248.110 smtp svchost.exe 2508 TCP 88.86.107.90 3389 47.21.54.10 4633 ESTABLISHED svchost.exe 2508 TCP 88.86.107.91 3389 23.231.23.176 41301 ESTABLISHED 145 34 854 332 45 072 30 1 376 2 6 [System Process] 0 TCP vwwebsrv smtp 141.105.70.93 64562 TIME_WAIT svchost.exe 2508 TCP 88.86.107.90 3389 80.15.143.97 2882 ESTABLISHED 26 761 24 1 048 117.239.109.196 smtp svchost.exe 2508 TCP 88.86.107.90 3389 98.102.55.94 2839 ESTABLISHED 31 2 655 24 980 svchost.exe 1404 TCP vwwebsrv ftp 206.221.217.42 43579 ESTABLISHED svchost.exe 1404 TCP 88.86.107.90 21 173.44.38.37 42891 ESTABLISHED 612 20 196 612 12 240 264 160 8 8 60.28.166.228 ftp 119.10.115.43 ftp 217.171.199.100 ftp 112.175.184.48 ftp 36.110.119.50 ftp svchost.exe 2772 TCP 88.86.107.90 3389 167.114.137.10 4010 ESTABLISHED svchost.exe 2772 TCP vwwebsrv ms-wbt-server 27.106.8.86 5684 ESTABLISHED svchost.exe 2772 TCP 88.86.107.91 3389 122.169.96.192 35573 ESTABLISHED svchost.exe 2772 TCP 88.86.107.91 3389 62.103.96.47 51038 ESTABLISHED svchost.exe 2772 TCP vwwebsrv ms-wbt-server 103.224.164.48 64132 ESTABLISHED svchost.exe 2772 TCP 88.86.107.91 ms-wbt-server 118.122.124.9 61168 ESTABLISHED Falešný apple: 46.183.216.92 46.183.216.93 46.183.216.94 218.38.243.204 46.183.219.135 46.183.219.136 Apple konec svchost.exe 2556 TCP vwwebsrv ms-wbt-server 103.239.172.200 2801 ESTABLISHED 4 27 258 2 22 svchost.exe 2556 TCP vwwebsrv ms-wbt-server 185.72.179.232 53748 SYN_RCVD svchost.exe 2556 TCP vwwebsrv ms-wbt-server 27.255.66.109 2311 ESTABLISHED svchost.exe 2556 TCP vwwebsrv ms-wbt-server 92.62.138.128 63569 ESTABLISHED svchost.exe 2556 TCP 88.86.107.90 3389 155.94.163.54 3621 ESTABLISHED svchost.exe 1400 TCP 88.86.107.90 21 79.174.71.101 53165 ESTABLISHED [System Process] 0 TCP vwwebsrv ftp 27.194.103.124 3436 TIME_WAIT 1 27 1 10 svchost.exe 2556 TCP 88.86.107.90 3389 81.35.93.223 1154 ESTABLISHED [System Process] 0 TCP vwwebsrv ftp 223.72.192.190 1749 TIME_WAIT 60.174.109.179 ftp 61.184.86.35 logon svchost.exe 2580 TCP 88.86.107.90 3389 110.37.218.18 61268 ESTABLISHED svchost.exe 2580 TCP vwwebsrv ms-wbt-server 194.44.85.83 1724 ESTABLISHED 102 11 085 102 11 509 93 120 4 4 svchost.exe 2580 TCP 88.86.107.90 3389 212.62.59.40 58293 ESTABLISHED 111.124.232.82 ftp [System Process] 0 TCP 88.86.107.91 25 109.164.199.103 21782 TIME_WAIT 89.248.160.150 smtp 41.161.76.212 smtp 221.215.221.81 ftp 101.16.36.7 ftp 60.13.214.247 ftp 61.172.115.195 ftp 61.36.159.46 logon svchost.exe 2580 TCP vwwebsrv ms-wbt-server 183.234.103.86 65008 ESTABLISHED svchost.exe 2580 TCP 88.86.107.90 3389 177.1.221.214 65515 ESTABLISHED svchost.exe 2580 TCP 88.86.107.90 3389 191.101.31.123 59667 ESTABLISHED 221.192.142.24 ftp svchost.exe 2580 TCP 88.86.107.90 3389 88.208.236.237 58559 ESTABLISHED svchost.exe 2580 TCP 88.86.107.90 3389 104.130.243.173 55432 ESTABLISHED Spam 94.242.231.0-94.242.231.254 spam 94.177.160.0 - 94.177.255.255 spam 89.46.64.0 - 89.46.79.255 spam 31.14.131.0 - 31.14.131.255 spam 46.183.222.0 - 46.183.223.255 spam 46.183.216.0 - 46.183.218.255 spam 92.222.0.0 - 92.222.255.255 spam 46.105.254.128 - 46.105.254.143 spam 89.40.126.0 - 89.40.126.255 spam 185.35.67.0 - 185.35.67.255 spam 5.249.128.0 - 5.249.159.255 spam 89.40.112.0 - 89.40.127.255 spam 94.152.193.0 - 94.152.193.255 spam 178.32.0.0 - 178.33.255.255 spam 193.150.13.0 - 193.150.13.255 svchost.exe 2580 TCP 88.86.107.90 3389 138.201.209.194 53791 ESTABLISHED 4 1 466 12 2 127 1 466 2 127 4 12 svchost.exe 2580 TCP 88.86.107.91 3389 61.19.57.6 61077 ESTABLISHED svchost.exe 2580 TCP 88.86.107.91 3389 46.4.37.72 10786 ESTABLISHED svchost.exe 2580 TCP 88.86.107.91 3389 37.34.244.18 61160 ESTABLISHED spam 185.7.24.0 - 185.7.24.255 emailkampane.cz svchost.exe 2624 TCP 88.86.107.90 3389 138.201.212.194 60831 ESTABLISHED svchost.exe 2624 TCP vwwebsrv ms-wbt-server 195.251.218.44 58091 ESTABLISHED svchost.exe 2624 TCP vwwebsrv ms-wbt-server 39.57.31.174 1983 ESTABLISHED svchost.exe 2624 TCP 88.86.107.91 3389 138.201.212.195 58623 ESTABLISHED 4 1 470 10 832 94 2 spam 188.93.77.0 - 188.93.77.255 spam 185.70.36.0 - 185.70.36.255 svchost.exe 2624 TCP vwwebsrv ms-wbt-server 173.208.176.141 56053 ESTABLISHED 2 288 8 1 795 288 1 795 2 8 svchost.exe 2624 TCP 88.86.107.91 3389 125.227.186.49 1278 ESTABLISHED smtp 108.178.61.162 [System Process] 0 TCP vwwebsrv ftp 114.249.30.119 63681 TIME_WAIT 1 27 1 10 svchost.exe 2624 TCP 88.86.107.91 3389 52.202.203.112 58248 ESTABLISHED 2 1 178 4 504 1 178 504 2 4 [System Process] 0 TCP vwwebsrv ftp 113.119.149.102 4124 TIME_WAIT svchost.exe 2624 TCP vwwebsrv ms-wbt-server 107.160.240.163 3909 ESTABLISHED svchost.exe 2624 TCP vwwebsrv ms-wbt-server 213.177.72.194 43634 ESTABLISHED svchost.exe 2624 TCP vwwebsrv ms-wbt-server 37.49.231.168 40729 ESTABLISHED spam 164.132.0.0 - 164.132.255.255 svchost.exe 2624 TCP 88.86.107.90 3389 91.223.89.122 52594 ESTABLISHED svchost.exe 2624 TCP vwwebsrv ms-wbt-server 112.20.187.77 52977 ESTABLISHED svchost.exe 2624 TCP vwwebsrv ms-wbt-server 72.252.251.22 65276 ESTABLISHED 12 2 089 22 3 434 svchost.exe 2624 TCP vwwebsrv ms-wbt-server 123.51.191.70 60404 ESTABLISHED 18 6 850 57 9 082 svchost.exe 2624 TCP 88.86.107.91 3389 185.5.240.230 62735 ESTABLISHED svchost.exe 2624 TCP vwwebsrv ms-wbt-server 218.91.205.69 58752 ESTABLISHED svchost.exe 2624 TCP vwwebsrv ms-wbt-server 5.100.248.154 55822 ESTABLISHED svchost.exe 2624 TCP 88.86.107.90 3389 146.185.239.95 46427 ESTABLISHED svchost.exe 2624 TCP 88.86.107.91 3389 113.10.173.17 1395 ESTABLISHED Falešný apple 46.183.220.128 - 46.183.220.255 svchost.exe 2624 TCP 88.86.107.91 3389 89.203.249.213 64076 ESTABLISHED 2 288 8 1 795 svchost.exe 2624 TCP 88.86.107.90 3389 212.129.58.83 62374 ESTABLISHED svchost.exe 2624 TCP vwwebsrv ms-wbt-server 58.213.51.130 16886 ESTABLISHED svchost.exe 2624 TCP 88.86.107.90 3389 113.160.142.109 60177 ESTABLISHED spam 213.181.208.0 - 213.181.208.255 svchost.exe 2624 TCP 88.86.107.91 ms-wbt-server 89.163.222.78 53591 ESTABLISHED spam 37.59.0.0 - 37.59.255.255 spam 137.74.0.0 - 137.74.255.255 svchost.exe 2624 TCP vwwebsrv ms-wbt-server 1.215.211.19 63850 ESTABLISHED svchost.exe 2624 TCP vwwebsrv ms-wbt-server 23.94.17.162 55493 ESTABLISHED spam 91.192.164.0 - 91.192.167.255 svchost.exe 2624 TCP vwwebsrv ms-wbt-server 212.187.239.28 41871 ESTABLISHED svchost.exe 2624 TCP vwwebsrv ms-wbt-server 88.198.80.30 55997 ESTABLISHED 4 1 466 12 2 299 229 1 527 1 6 svchost.exe 2624 TCP vwwebsrv ms-wbt-server 118.70.118.159 52374 SYN_RCVD 4 1 466 12 2 299 svchost.exe 2624 TCP vwwebsrv ms-wbt-server 109.190.42.246 59311 ESTABLISHED svchost.exe 2624 TCP 88.86.107.90 3389 5.135.130.16 56962 ESTABLISHED svchost.exe 2624 TCP 88.86.107.91 3389 123.31.40.15 54952 ESTABLISHED 2 86 86 2 ftp 120.76.200.217 ftp 211.54.4.169 ftp 110.152.140.172 ftp 123.109.46.226 ftp 113.160.133.103 svchost.exe 2624 TCP vwwebsrv ms-wbt-server 104.130.26.176 51911 ESTABLISHED svchost.exe 2624 TCP 88.86.107.90 3389 179.60.146.21 61524 ESTABLISHED svchost.exe 2624 TCP 88.86.107.91 3389 154.66.66.206 51796 ESTABLISHED svchost.exe 2624 TCP 88.86.107.90 3389 78.188.75.219 49384 ESTABLISHED svchost.exe 2624 TCP vwwebsrv ms-wbt-server 103.245.220.38 62360 ESTABLISHED svchost.exe 2624 TCP 88.86.107.90 3389 94.208.236.35 55248 ESTABLISHED 2 86 86 2 svchost.exe 2520 TCP 88.86.107.90 3389 163.172.65.85 51718 ESTABLISHED svchost.exe 2520 TCP 88.86.107.91 3389 138.201.147.8 56281 ESTABLISHED svchost.exe 2520 TCP vwwebsrv ms-wbt-server 162.221.183.163 61431 ESTABLISHED svchost.exe 2520 TCP 88.86.107.90 3389 144.76.106.138 53464 ESTABLISHED svchost.exe 2520 TCP vwwebsrv ms-wbt-server 93.183.201.3 59329 ESTABLISHED svchost.exe 2520 TCP 88.86.107.91 3389 203.219.105.234 63172 ESTABLISHED 2 1 178 6 772 1 178 686 2 4 svchost.exe 2520 TCP 88.86.107.90 3389 138.201.215.204 58628 ESTABLISHED 2 86 86 2 svchost.exe 2520 TCP 88.86.107.90 3389 52.8.236.245 57262 ESTABLISHED SMTP [System Process] 0 TCP 88.86.107.91 25 221.143.43.142 50094 TIME_WAIT svchost.exe 1388 TCP 88.86.107.90 ftp 125.64.94.200 45176 SYN_RCVD svchost.exe 2520 TCP 88.86.107.91 ms-wbt-server 112.2.33.5 57401 ESTABLISHED svchost.exe 2520 TCP 88.86.107.91 3389 138.201.90.93 64551 ESTABLISHED svchost.exe 2520 TCP vwwebsrv ms-wbt-server 217.116.230.53 2010 ESTABLISHED svchost.exe 2520 TCP 88.86.107.90 3389 148.251.41.83 54436 ESTABLISHED svchost.exe 2520 TCP 88.86.107.91 3389 31.193.142.209 59297 ESTABLISHED svchost.exe 2520 TCP vwwebsrv ms-wbt-server 175.143.31.13 52933 ESTABLISHED svchost.exe 2520 TCP 88.86.107.90 3389 176.9.11.196 51817 ESTABLISHED svchost.exe 2520 TCP 88.86.107.90 3389 89.191.21.210 62831 ESTABLISHED 4 1 466 12 2 299 svchost.exe 2520 TCP vwwebsrv ms-wbt-server 216.170.115.30 61528 ESTABLISHED 2 1 178 2 418 svchost.exe 2520 TCP 88.86.107.90 3389 213.136.79.187 58604 ESTABLISHED 1 19 2 88 19 88 1 2 svchost.exe 2520 TCP vwwebsrv ms-wbt-server 172.245.16.13 58800 ESTABLISHED ftp 120.25.255.58 ftp 222.124.168.146 ftp 222.246.85.185 svchost.exe 2520 TCP 88.86.107.90 3389 173.186.84.221 28219 ESTABLISHED svchost.exe 2520 TCP vwwebsrv ms-wbt-server 78.155.223.196 65217 ESTABLISHED smtp [System Process] 0 TCP 88.86.107.91 25 107.172.129.133 61991 TIME_WAIT svchost.exe 2520 TCP vwwebsrv ms-wbt-server 77.81.188.130 65031 ESTABLISHED svchost.exe 2520 TCP 88.86.107.91 3389 95.153.31.98 13476 ESTABLISHED 4 1 466 12 2 135 1 466 2 135 4 12 svchost.exe 2520 TCP vwwebsrv ms-wbt-server 217.111.220.70 56728 ESTABLISHED 2 1 178 4 504 1 178 504 2 4 svchost.exe 2520 TCP 88.86.107.91 3389 41.178.89.246 49696 ESTABLISHED 2 86 86 2 svchost.exe 1388 TCP vwwebsrv ftp 202.46.14.178 52376 FIN_WAIT1 2 60 1 16 svchost.exe 2520 TCP vwwebsrv ms-wbt-server 80.227.149.74 59386 ESTABLISHED 4 1 466 12 2 299 1 466 2 299 4 12 svchost.exe 2520 TCP 88.86.107.91 3389 54.69.255.106 52730 ESTABLISHED svchost.exe 2520 TCP vwwebsrv ms-wbt-server 106.240.228.66 29998 SYN_RCVD svchost.exe 2520 TCP vwwebsrv ms-wbt-server 194.65.113.102 60980 ESTABLISHED svchost.exe 2520 TCP 88.86.107.90 3389 77.245.75.130 64025 ESTABLISHED svchost.exe 2520 TCP 88.86.107.91 3389 117.239.180.192 53841 ESTABLISHED 1 19 4 504 19 504 1 4 svchost.exe 2520 TCP 88.86.107.91 3389 114.55.101.218 51536 ESTABLISHED svchost.exe 2520 TCP 88.86.107.91 3389 31.18.164.24 7283 SYN_RCVD svchost.exe 2520 TCP vwwebsrv ms-wbt-server 5.32.65.242 62920 ESTABLISHED svchost.exe 2520 TCP vwwebsrv ms-wbt-server 204.16.198.219 4020 SYN_RCVD svchost.exe 2520 TCP vwwebsrv ms-wbt-server 86.127.82.40 63130 ESTABLISHED svchost.exe 2520 TCP 88.86.107.91 3389 91.197.232.30 55285 ESTABLISHED 4 1 466 12 2 291 1 466 2 291 4 12 svchost.exe 2520 TCP vwwebsrv ms-wbt-server 180.179.53.114 61088 ESTABLISHED svchost.exe 2520 TCP 88.86.107.91 3389 90.181.103.159 52736 ESTABLISHED 1 19 4 504 19 504 1 4 [System Process] 0 TCP vwwebsrv smtp 67.224.84.250 60975 TIME_WAIT svchost.exe 2520 TCP 88.86.107.91 3389 95.168.195.178 64357 ESTABLISHED svchost.exe 2520 TCP 88.86.107.90 3389 14.161.36.118 52226 ESTABLISHED svchost.exe 2520 TCP 88.86.107.91 3389 70.60.48.218 43712 ESTABLISHED svchost.exe 2520 TCP 88.86.107.90 3389 188.240.196.3 56104 ESTABLISHED svchost.exe 2520 TCP 88.86.107.90 3389 52.220.77.254 56731 ESTABLISHED svchost.exe 2520 TCP vwwebsrv ms-wbt-server 77.123.34.71 51203 SYN_RCVD svchost.exe 2520 TCP vwwebsrv ms-wbt-server 140.121.81.212 2281 ESTABLISHED 1 7 213 2 22 svchost.exe 2520 TCP 88.86.107.91 3389 186.224.103.117 1390 ESTABLISHED 15 65 307 4 128 webdav 91.142.211.147 logon 192.99.144.140 logon 46.102.152.74 webdav 183.91.66.165 logon 149.56.28.239 svchost.exe 2520 TCP 88.86.107.91 3389 197.242.158.198 60286 ESTABLISHED svchost.exe 2520 TCP vwwebsrv ms-wbt-server 112.217.30.251 59745 ESTABLISHED logon 167.114.103.142 svchost.exe 2520 TCP 88.86.107.91 3389 91.225.53.28 53617 ESTABLISHED 2 1 178 4 504 logon 220.130.247.250 svchost.exe 2520 TCP 88.86.107.91 3389 94.181.181.94 59818 ESTABLISHED 2 1 178 6 772 1 178 772 2 6 svchost.exe 2520 TCP 88.86.107.91 3389 193.201.225.135 53622 ESTABLISHED 2 1 178 4 504 svchost.exe 2520 TCP 88.86.107.90 3389 54.70.98.117 50878 ESTABLISHED 2 1 178 4 504 1 159 418 1 2 svchost.exe 2520 TCP vwwebsrv ms-wbt-server 61.216.76.22 57891 ESTABLISHED svchost.exe 2520 TCP vwwebsrv ms-wbt-server 183.220.200.243 30669 ESTABLISHED svchost.exe 2520 TCP 88.86.107.91 3389 185.8.56.220 43045 ESTABLISHED svchost.exe 2520 TCP 88.86.107.91 3389 54.70.211.83 54698 ESTABLISHED 2 86 86 2 svchost.exe 2520 TCP 88.86.107.91 ms-wbt-server 85.132.70.162 49775 ESTABLISHED svchost.exe 2520 TCP 88.86.107.90 3389 178.151.180.149 60109 ESTABLISHED svchost.exe 2520 TCP 88.86.107.91 3389 132.148.23.57 49904 ESTABLISHED 1 19 4 504 19 504 1 4 svchost.exe 2520 TCP vwwebsrv ms-wbt-server 78.108.156.22 51537 ESTABLISHED 1 43 43 1 svchost.exe 2520 TCP 88.86.107.91 3389 175.100.151.150 57596 ESTABLISHED svchost.exe 2520 TCP vwwebsrv ms-wbt-server 194.213.39.22 50537 ESTABLISHED svchost.exe 2520 TCP 88.86.107.91 3389 217.92.18.250 59387 ESTABLISHED svchost.exe 2520 TCP vwwebsrv ms-wbt-server 41.162.0.230 49670 ESTABLISHED 2 1 182 4 292 svchost.exe 2520 TCP 88.86.107.90 3389 124.248.215.114 61798 ESTABLISHED 2 1 178 6 772 1 178 772 2 6 svchost.exe 2520 TCP 88.86.107.91 3389 203.146.30.64 64460 ESTABLISHED svchost.exe 2520 TCP vwwebsrv ms-wbt-server 61.250.242.7 46816 ESTABLISHED svchost.exe 2520 TCP 88.86.107.90 3389 217.127.183.150 54833 ESTABLISHED svchost.exe 2520 TCP 88.86.107.91 3389 37.216.192.28 56657 ESTABLISHED svchost.exe 2520 TCP 88.86.107.90 3389 83.166.240.251 54489 ESTABLISHED svchost.exe 2520 TCP 88.86.107.90 3389 89.38.150.54 51265 ESTABLISHED svchost.exe 2520 TCP 88.86.107.91 3389 27.106.18.25 58746 ESTABLISHED 3 1 237 8 942 1 237 942 3 8 svchost.exe 2520 TCP 88.86.107.91 3389 94.179.36.74 62190 ESTABLISHED svchost.exe 2520 TCP 88.86.107.90 3389 62.103.135.19 47146 ESTABLISHED svchost.exe 2520 TCP 88.86.107.91 3389 81.136.242.191 53933 ESTABLISHED 4 558 8 898 15 1 smtp 70.35.204.252 svchost.exe 2520 TCP 88.86.107.90 3389 85.173.96.210 3145 ESTABLISHED svchost.exe 2520 TCP vwwebsrv ms-wbt-server 5.10.73.99 55432 ESTABLISHED svchost.exe 2520 TCP vwwebsrv ms-wbt-server 192.248.66.24 52765 ESTABLISHED svchost.exe 2520 TCP 88.86.107.90 3389 221.204.19.113 57838 ESTABLISHED 35 56 741 44 6 876 ftp 2.132.201.207 svchost.exe 2520 TCP 88.86.107.91 3389 95.191.130.150 23349 ESTABLISHED svchost.exe 1388 TCP vwwebsrv ftp 5.179.88.202 45021 ESTABLISHED smtp planalo.cz hMailServer.exe 6236 TCP 88.86.107.91 25 173.0.51.180 34214 ESTABLISHED 6 146 31 42 995 svchost.exe 2520 TCP 88.86.107.90 3389 74.101.57.23 63062 ESTABLISHED svchost.exe 2520 TCP 88.86.107.90 3389 155.133.82.115 57562 ESTABLISHED ftp svchost.exe 1388 TCP 88.86.107.90 21 92.242.122.174 55804 ESTABLISHED 2 60 1 11 60 11 2 1 svchost.exe 2520 TCP 88.86.107.91 3389 45.32.84.148 55087 ESTABLISHED svchost.exe 2520 TCP 88.86.107.91 3389 89.197.38.210 59147 ESTABLISHED svchost.exe 2520 TCP 88.86.107.91 3389 108.61.166.6 56290 ESTABLISHED 4 1 466 12 2 799 1 466 2 799 4 12 svchost.exe 1388 TCP 88.86.107.90 21 37.110.45.194 51008 SYN_RCVD svchost.exe 2520 TCP 88.86.107.90 3389 93.190.20.53 64258 ESTABLISHED 4 1 470 12 2 899 1 470 2 899 4 12 svchost.exe 2520 TCP 88.86.107.91 ms-wbt-server 37.46.255.63 7439 ESTABLISHED svchost.exe 2520 TCP vwwebsrv ms-wbt-server 115.79.60.19 1951 ESTABLISHED 28 3 516 28 3 555 120 82 5 2 svchost.exe 2520 TCP vwwebsrv ms-wbt-server 178.162.211.213 49997 ESTABLISHED svchost.exe 2496 TCP 88.86.107.91 3389 91.219.43.57 60220 ESTABLISHED 90 41 984 158 24 178 2 089 3 434 12 22 svchost.exe 2496 TCP 88.86.107.91 3389 220.246.64.238 57220 ESTABLISHED svchost.exe 2496 TCP vwwebsrv ms-wbt-server 212.92.127.240 61341 ESTABLISHED svchost.exe 2496 TCP vwwebsrv ms-wbt-server 218.54.20.254 39275 ESTABLISHED svchost.exe 2496 TCP 88.86.107.91 3389 71.42.103.106 8120 ESTABLISHED 2 1 178 6 772 1 178 772 2 6 svchost.exe 1300 TCP vwwebsrv ftp 185.36.174.100 63777 ESTABLISHED svchost.exe 2496 TCP 88.86.107.90 3389 90.177.236.170 51524 ESTABLISHED 3 1 237 8 942 59 170 1 2 svchost.exe 2496 TCP 88.86.107.91 3389 186.225.145.30 51017 ESTABLISHED svchost.exe 2496 TCP 88.86.107.91 3389 91.183.220.117 59560 ESTABLISHED svchost.exe 2496 TCP vwwebsrv ms-wbt-server 194.204.43.89 62221 ESTABLISHED svchost.exe 2496 TCP vwwebsrv ms-wbt-server 61.157.97.83 9410 ESTABLISHED svchost.exe 2496 TCP 88.86.107.90 3389 64.235.34.106 65378 ESTABLISHED 4 1 466 12 2 299 229 1 527 1 6 svchost.exe 2496 TCP vwwebsrv ms-wbt-server 118.201.184.54 56641 ESTABLISHED svchost.exe 2496 TCP 88.86.107.91 3389 173.12.105.49 55236 ESTABLISHED svchost.exe 2496 TCP vwwebsrv ms-wbt-server 92.39.130.51 27372 ESTABLISHED svchost.exe 1300 TCP 88.86.107.90 21 158.181.183.212 64128 ESTABLISHED logon 212.129.54.164 logon 170.0.236.103 svchost.exe 2496 TCP 88.86.107.90 3389 45.76.128.188 61396 ESTABLISHED 4 1 466 12 2 799 logon 118.193.197.137 ftp 187.53.223.108 svchost.exe 2496 TCP 88.86.107.90 3389 83.99.159.169 60413 ESTABLISHED 2 86 logon 94.102.51.99 logon 220.241.112.201 logon 94.102.63.23 logon 84.200.7.193 logon 211.81.21.196 svchost.exe 2496 TCP vwwebsrv ms-wbt-server 185.93.185.7 58426 ESTABLISHED 1 19 2 410 19 410 1 2 ftp 37.214.208.14 smtp 141.155.103.170 svchost.exe 2496 TCP 88.86.107.91 3389 95.172.48.30 59849 ESTABLISHED 2 1 178 4 504 1 178 504 2 4 svchost.exe 2516 TCP vwwebsrv ms-wbt-server 185.76.33.178 50521 ESTABLISHED [System Process] 0 TCP vwwebsrv smtp 70.35.197.195 59902 TIME_WAIT svchost.exe 2516 TCP vwwebsrv ms-wbt-server 217.11.74.218 60730 ESTABLISHED 58 169 896 56 7 968 558 922 4 12 svchost.exe 2516 TCP vwwebsrv ms-wbt-server 183.97.28.3 54948 ESTABLISHED 3 1 237 8 942 1 218 438 2 4 svchost.exe 2516 TCP vwwebsrv ms-wbt-server 81.216.60.90 62597 ESTABLISHED 24 50 361 34 4 356 558 860 4 10 svchost.exe 2516 TCP vwwebsrv ms-wbt-server 85.95.145.226 56979 ESTABLISHED 2 1 178 4 504 1 178 504 2 4 svchost.exe 2516 TCP vwwebsrv ms-wbt-server 63.158.85.171 24324 ESTABLISHED 3 1 447 8 1 795 229 1 357 1 4 svchost.exe 2516 TCP 88.86.107.91 3389 151.80.227.155 51839 ESTABLISHED 4 1 466 10 2 165 1 466 2 165 4 10 svchost.exe 2516 TCP vwwebsrv ms-wbt-server 2.50.19.67 2137 ESTABLISHED svchost.exe 2516 TCP vwwebsrv ms-wbt-server 185.56.82.74 51653 ESTABLISHED 4 344 12 1 751 37 1 svchost.exe 2516 TCP vwwebsrv ms-wbt-server 103.252.25.41 4935 SYN_RCVD semrush bot crAWLER 192.243.48.0 - 192.243.63.255 SMTP [System Process] 0 TCP 88.86.107.91 25 187.188.175.248 50971 TIME_WAIT svchost.exe 2516 TCP vwwebsrv ms-wbt-server 80.82.77.34 53552 ESTABLISHED 4 1 466 9 1 375 1 466 1 375 4 9 WebFuck V2.1 T0PHackTeam www.t0p.xyz 125.141.63.99 svchost.exe 2516 TCP vwwebsrv ms-wbt-server 123.231.8.234 36872 ESTABLISHED svchost.exe 2516 TCP 88.86.107.90 3389 220.130.85.83 58732 ESTABLISHED svchost.exe 2516 TCP vwwebsrv ms-wbt-server 155.133.38.236 58851 ESTABLISHED 4 1 466 12 2 251 1 466 2 251 4 12 svchost.exe 2516 TCP 88.86.107.91 3389 158.255.211.25 64745 ESTABLISHED 2 86 86 2 svchost.exe 2516 TCP vwwebsrv ms-wbt-server 78.96.149.237 49676 ESTABLISHED 4 1 466 12 2 827 svchost.exe 2516 TCP vwwebsrv ms-wbt-server 70.25.35.173 53953 ESTABLISHED svchost.exe 2516 TCP 88.86.107.90 3389 75.147.74.137 22621 ESTABLISHED svchost.exe 2516 TCP 88.86.107.91 3389 5.106.1.14 57482 ESTABLISHED svchost.exe 2516 TCP 88.86.107.91 3389 94.215.184.161 58459 ESTABLISHED 4 1 466 12 2 299 1 466 2 299 4 12 ftp 212.48.81.202 svchost.exe 2516 TCP 88.86.107.91 3389 92.220.62.54 51746 ESTABLISHED svchost.exe 2516 TCP 88.86.107.90 3389 85.214.203.139 62486 ESTABLISHED svchost.exe 2516 TCP 88.86.107.90 3389 62.90.235.151 48091 ESTABLISHED svchost.exe 2516 TCP 88.86.107.91 3389 87.98.197.231 60375 ESTABLISHED 2 1 182 6 724 1 182 724 2 6 svchost.exe 1360 TCP vwwebsrv ftp 193.124.1.200 55814 ESTABLISHED ftp 88.186.169.211 ftp 95.134.192.65 ftp 5.18.178.79 ftp 178.129.221.148 ftp 37.55.217.55 ftp 2.135.220.174 ftp 195.242.151.17 ftp 178.88.241.212 ftp 195.34.207.54 ftp 46.229.188.185 ftp 109.111.7.249 ftp 82.140.219.201 ftp 176.15.217.20 ftp 109.19.151.125 ftp 212.35.172.221 ftp 128.70.236.133 ftp 37.21.84.245 ftp 88.164.244.56 ftp 93.72.107.100 ftp 78.137.31.230 ftp 2.132.85.126 ftp 95.106.44.218 ftp 109.87.179.229 ftp 178.120.23.170 ftp 176.212.227.167 ftp 178.184.158.84 ftp 178.129.255.243 ftp 61.92.29.138 ftp 82.140.203.28 ftp 88.102.99.154 ftp 189.70.107.15 ftp 95.69.228.45 ftp 91.223.136.250 ftp 78.224.243.34 ftp 92.115.23.106 ftp 178.66.103.183 ftp 188.244.162.180 ftp 201.52.194.72 ftp 46.28.108.209 wedos ftp 193.193.230.71 ftp 14.191.92.46 ftp 91.220.204.18 ftp 78.220.89.24 ftp 82.235.244.62 ftp 78.244.38.48 ftp 37.233.26.118 svchost.exe 2516 TCP vwwebsrv ms-wbt-server 85.112.144.210 18491 ESTABLISHED svchost.exe 1360 TCP vwwebsrv ftp 91.226.122.109 36411 ESTABLISHED 3 93 1 10 svchost.exe 2516 TCP 88.86.107.90 3389 173.198.71.234 51125 ESTABLISHED svchost.exe 2516 TCP 88.86.107.91 3389 217.20.36.198 51551 ESTABLISHED svchost.exe 2516 TCP vwwebsrv ms-wbt-server 52.178.149.182 50326 ESTABLISHED svchost.exe 2516 TCP vwwebsrv ms-wbt-server 40.68.168.143 50497 ESTABLISHED svchost.exe 2516 TCP vwwebsrv ms-wbt-server 193.212.137.131 12565 ESTABLISHED 4 1 466 12 2 203 1 466 2 203 4 12 svchost.exe 2516 TCP 88.86.107.91 3389 80.36.17.232 24129 SYN_RCVD svchost.exe 2516 TCP vwwebsrv ms-wbt-server 98.246.71.162 60277 ESTABLISHED svchost.exe 2516 TCP vwwebsrv ms-wbt-server 194.110.220.144 58571 ESTABLISHED svchost.exe 2516 TCP 88.86.107.91 3389 176.119.20.141 49305 ESTABLISHED 4 1 466 12 2 203 1 447 1 699 3 8 ftp 91.121.221.122 svchost.exe 2516 TCP vwwebsrv ms-wbt-server 222.242.224.118 3617 ESTABLISHED svchost.exe 2516 TCP vwwebsrv ms-wbt-server 104.245.181.48 51001 ESTABLISHED svchost.exe 2516 TCP vwwebsrv ms-wbt-server 76.70.14.38 60608 ESTABLISHED svchost.exe 1360 TCP vwwebsrv ftp 51.254.13.36 51222 SYN_RCVD svchost.exe 1360 TCP 88.86.107.90 21 46.105.102.26 7777 SYN_RCVD svchost.exe 2516 TCP vwwebsrv ms-wbt-server 86.34.140.234 58073 ESTABLISHED 2 1 178 4 504 1 159 1 svchost.exe 2516 TCP vwwebsrv ms-wbt-server 194.144.13.88 52647 ESTABLISHED svchost.exe 2516 TCP 88.86.107.90 ms-wbt-server 193.28.179.25 19722 ESTABLISHED 5 1 507 13 2 156 1 507 2 156 5 13 smtp 178.216.52.194 ftp 185.94.252.6 svchost.exe 2516 TCP vwwebsrv ms-wbt-server 92.126.36.138 55647 ESTABLISHED svchost.exe 2516 TCP 88.86.107.90 3389 23.249.164.35 52599 ESTABLISHED 2 1 178 4 504 svchost.exe 2516 TCP vwwebsrv ms-wbt-server 103.254.110.129 4935 SYN_RCVD [System Process] 0 TCP 88.86.107.91 25 61.221.218.169 1509 TIME_WAIT svchost.exe 2516 TCP 88.86.107.91 3389 52.23.168.175 56164 ESTABLISHED 1 19 19 1 ftp 212.92.127.202 svchost.exe 2516 TCP 88.86.107.91 3389 59.125.4.139 64287 ESTABLISHED 53 84 099 66 10 430 47 465 8 svchost.exe 2516 TCP 88.86.107.90 3389 173.10.107.141 52982 ESTABLISHED svchost.exe 2516 TCP 88.86.107.90 3389 211.229.100.149 63613 ESTABLISHED ftp 188.114.209.237 ftp 178.91.2.68 ftp 89.45.241.193 ftp 46.158.216.42 ftp 46.201.15.197 ftp 95.153.103.231 ftp 91.233.135.105 ftp 5.251.69.230 ftp 2.94.156.108 ftp 109.252.62.228 ftp 87.247.27.159 ftp 109.252.108.137 ftp svchost.exe 1408 TCP vwwebsrv ftp 5.141.67.206 50954 ESTABLISHED 4 120 5 42 svchost.exe 1408 TCP 88.86.107.90 21 95.174.193.39 64353 LAST_ACK svchost.exe 2516 TCP 88.86.107.91 3389 62.109.3.197 50616 ESTABLISHED svchost.exe 2516 TCP vwwebsrv ms-wbt-server 40.83.188.222 1080 ESTABLISHED svchost.exe 2516 TCP vwwebsrv ms-wbt-server 45.35.13.210 57958 ESTABLISHED svchost.exe 2516 TCP vwwebsrv ms-wbt-server 80.87.205.5 58513 ESTABLISHED svchost.exe 2516 TCP vwwebsrv ms-wbt-server 5.77.63.42 56518 ESTABLISHED svchost.exe 2516 TCP 88.86.107.91 3389 195.154.60.101 56352 ESTABLISHED 4 1 466 12 2 251 1 466 2 251 4 12 ftp 139.215.205.63 svchost.exe 2516 TCP 88.86.107.91 3389 93.108.245.5 56542 ESTABLISHED svchost.exe 2516 TCP vwwebsrv ms-wbt-server 194.97.1.212 64840 ESTABLISHED svchost.exe 2516 TCP 88.86.107.91 3389 187.157.138.235 58247 ESTABLISHED svchost.exe 2516 TCP vwwebsrv ms-wbt-server 31.131.248.87 62692 ESTABLISHED svchost.exe 2516 TCP 88.86.107.91 3389 195.154.47.211 62121 ESTABLISHED 2 86 86 2 svchost.exe 2516 TCP 88.86.107.91 3389 118.69.171.47 64215 ESTABLISHED svchost.exe 2516 TCP vwwebsrv ms-wbt-server 168.205.156.7 60733 ESTABLISHED svchost.exe 2516 TCP vwwebsrv ms-wbt-server 77.220.187.106 61541 ESTABLISHED 22 2 098 34 4 367 1 550 3 309 20 26 svchost.exe 2516 TCP 88.86.107.91 3389 103.37.200.68 53388 ESTABLISHED svchost.exe 2516 TCP vwwebsrv ms-wbt-server 183.224.31.132 5885 ESTABLISHED svchost.exe 1408 TCP vwwebsrv ftp 89.42.63.243 20862 ESTABLISHED svchost.exe 2516 TCP 88.86.107.91 3389 77.22.232.210 59369 ESTABLISHED svchost.exe 2516 TCP vwwebsrv ms-wbt-server 196.214.143.218 37006 ESTABLISHED 4 1 466 12 2 251 229 1 309 1 4 svchost.exe 1408 TCP vwwebsrv ftp 178.120.65.251 18286 ESTABLISHED svchost.exe 1408 TCP 88.86.107.90 21 87.247.15.130 55791 ESTABLISHED svchost.exe 1408 TCP 88.86.107.90 21 109.124.37.5 63633 ESTABLISHED svchost.exe 1408 TCP 88.86.107.90 21 31.150.92.35 55892 ESTABLISHED svchost.exe 2516 TCP 88.86.107.91 3389 210.245.89.116 64337 ESTABLISHED 1 19 4 504 19 504 1 4 svchost.exe 2516 TCP vwwebsrv ms-wbt-server 188.0.236.165 55726 ESTABLISHED 4 1 466 12 2 243 1 466 2 157 4 10 svchost.exe 2516 TCP 88.86.107.91 3389 62.73.101.89 51857 ESTABLISHED 4 1 466 12 2 299 288 1 795 2 8 svchost.exe 1408 TCP 88.86.107.90 21 119.224.102.28 54189 ESTABLISHED 2 60 1 12 svchost.exe 1408 TCP vwwebsrv ftp 83.239.14.245 23824 ESTABLISHED svchost.exe 1408 TCP vwwebsrv ftp 5.141.225.91 21354 SYN_RCVD svchost.exe 2516 TCP vwwebsrv ms-wbt-server 122.156.163.218 52022 ESTABLISHED 1 11 4 834 svchost.exe 2516 TCP vwwebsrv ms-wbt-server 193.104.114.101 51845 ESTABLISHED 4 1 466 12 2 299 svchost.exe 1408 TCP 88.86.107.90 21 212.34.45.34 49159 LAST_ACK 1 svchost.exe 1408 TCP 88.86.107.90 21 5.166.212.70 55760 ESTABLISHED 2 60 1 27 svchost.exe 2516 TCP vwwebsrv ms-wbt-server 218.235.95.100 58362 ESTABLISHED 4 1 466 12 2 299 1 466 2 299 4 12 svchost.exe 2516 TCP vwwebsrv ms-wbt-server 85.17.31.175 64085 ESTABLISHED svchost.exe 2516 TCP vwwebsrv ms-wbt-server 42.112.31.208 59794 ESTABLISHED 2 1 178 6 772 1 178 772 2 6 svchost.exe 2516 TCP vwwebsrv ms-wbt-server 36.110.129.235 55137 ESTABLISHED svchost.exe 2516 TCP 88.86.107.90 3389 185.40.4.93 52806 ESTABLISHED svchost.exe 2516 TCP vwwebsrv ms-wbt-server 103.237.147.228 54843 ESTABLISHED svchost.exe 2516 TCP vwwebsrv ms-wbt-server 103.212.34.4 2582 ESTABLISHED 2 62 62 2 svchost.exe 2516 TCP 88.86.107.90 3389 192.3.137.37 57727 ESTABLISHED svchost.exe 2516 TCP 88.86.107.91 3389 218.234.171.91 59908 ESTABLISHED svchost.exe 2516 TCP vwwebsrv ms-wbt-server 60.213.1.218 34510 ESTABLISHED 1 19 4 504 smtp 198.6.19.15 svchost.exe 2516 TCP vwwebsrv ms-wbt-server 216.170.118.112 62276 ESTABLISHED 4 1 466 12 2 299 svchost.exe 2516 TCP 88.86.107.91 3389 96.237.151.2 59322 ESTABLISHED 4 1 466 12 2 299 svchost.exe 2516 TCP 88.86.107.91 3389 94.156.133.22 26539 ESTABLISHED svchost.exe 2516 TCP 88.86.107.90 3389 80.24.201.34 65382 ESTABLISHED svchost.exe 2516 TCP 88.86.107.91 3389 5.101.2.205 64264 ESTABLISHED 2 1 178 4 504 1 159 1 [System Process] 0 TCP vwwebsrv smtp 199.168.142.245 59656 TIME_WAIT 16 497 16 208 svchost.exe 2516 TCP 88.86.107.91 3389 95.79.44.60 64796 ESTABLISHED 2 1 178 2 418 svchost.exe 2516 TCP vwwebsrv ms-wbt-server 31.184.234.145 41060 ESTABLISHED svchost.exe 2516 TCP vwwebsrv ms-wbt-server 83.166.220.206 41020 ESTABLISHED svchost.exe 2516 TCP 88.86.107.90 3389 197.241.32.67 60661 ESTABLISHED svchost.exe 2516 TCP 88.86.107.91 3389 162.17.101.45 60685 ESTABLISHED 4 1 466 12 2 251 1 466 2 165 4 10 svchost.exe 2516 TCP vwwebsrv ms-wbt-server 92.46.55.18 62349 ESTABLISHED svchost.exe 2516 TCP 88.86.107.91 3389 178.46.159.44 60557 ESTABLISHED 4 1 466 10 2 213 229 1 527 1 6 svchost.exe 2516 TCP vwwebsrv ms-wbt-server 116.31.75.46 56696 ESTABLISHED 3 1 237 8 942 59 170 1 2 svchost.exe 2516 TCP vwwebsrv ms-wbt-server 109.224.21.12 48265 ESTABLISHED 4 1 466 12 2 299 229 1 357 1 4 svchost.exe 2516 TCP vwwebsrv ms-wbt-server 111.203.22.17 25212 ESTABLISHED 1 19 4 504 19 418 1 2 svchost.exe 2516 TCP 88.86.107.91 3389 149.71.109.11 56568 ESTABLISHED 4 1 466 12 2 299 1 466 2 213 4 10 svchost.exe 2516 TCP 88.86.107.91 3389 125.209.68.253 63856 ESTABLISHED 1 19 2 418 19 418 1 2 svchost.exe 2516 TCP 88.86.107.91 3389 148.251.40.92 65038 ESTABLISHED 4 1 466 12 2 251 1 466 2 251 4 12 svchost.exe 2516 TCP vwwebsrv ms-wbt-server 94.20.61.98 60915 ESTABLISHED svchost.exe 2516 TCP vwwebsrv ms-wbt-server 111.203.22.19 58554 ESTABLISHED 1 59 2 170 59 170 1 2 svchost.exe 2516 TCP 88.86.107.91 3389 212.23.143.140 34266 ESTABLISHED svchost.exe 2516 TCP 88.86.107.91 3389 195.199.120.197 58197 ESTABLISHED