June Iparis is a Sales department employee based in Los Angeles. She uses the endpoint IP 192.168.1.100 and last logged in at 5:45 AM on July 17, 2024. Her email is june@domain.com.

Target User works in the Finance department and is located in Chicago. They use the endpoint IP 192.168.1.101 and last logged in at 6:00 AM on July 17, 2024. Their email is attacktarget@domain.com.

Day Wing is an Sales department employee situated in San Francisco. Day uses the endpoint IP 192.168.1.102 and last logged in at 6:30 AM on July 17, 2024. Their email is day@domain.com.

John Doe works in the Engineering department and is based in Boston. He uses the endpoint IP 192.168.1.103 and last logged in at 7:00 AM on July 17, 2024. His email is john@domain.com.

Alice Johnson is a Marketing department employee located in Seattle. She uses the endpoint IP 192.168.1.104 and last logged in at 7:15 AM on July 17, 2024. Her email is alice@domain.com.

Bob Williams works in the Support department and is situated in Denver. He uses the endpoint IP 192.168.1.105 and last logged in at 7:30 AM on July 17, 2024. His email is bob@domain.com.

Carol Davis is an HR department employee based in Atlanta. She uses the endpoint IP 192.168.1.106 and last logged in at 7:45 AM on July 17, 2024. Her email is carol@domain.com.

Dave Miller works in the Legal department and is located in Miami. He uses the endpoint IP 192.168.1.107 and last logged in at 8:00 AM on July 17, 2024. His email is dave@domain.com.

Eve Wilson is an Operations department employee based in Los Angeles. She uses the endpoint IP 192.168.1.108 and last logged in at 8:15 AM on July 17, 2024. Her email is eve@domain.com.

Frank Thomas works in the R&D department and is situated in Houston. He uses the endpoint IP 192.168.1.109 and last logged in at 8:30 AM on July 17, 2024. His email is frank@domain.com.

Below are some known malicious domain names: 
fromjoy.fr
gurkerwirt.at
elom.su
anyes.com.cn
numidiatalent.com
patoimpex.com
itachituff.hopto.org
ashtangafor.life
feratotogaz.com
rqtradingcompany.com

At 6:12 AM on July 17, 2024, the endpoint with IP 192.168.1.100, used by june@domain.com, connected to the IP 203.0.113.45 on port 80 using the TCP protocol. The destination URL was elom.su.

At 6:15 AM on July 17, 2024, the endpoint with IP 192.168.1.100 connected to the IP 198.51.100.10 on port 80 using the TCP protocol. The destination URL was elom.su.

At 6:20 AM on July 17, 2024, the endpoint with IP 192.168.1.100 connected to the IP 198.51.100.10 on port 80 using the TCP protocol. The destination URL was elom.su.

At 6:30 AM on July 17, 2024, the endpoint with IP 192.168.1.100 connected to the IP 198.51.100.10 on port 80 using the TCP protocol. The destination URL was elom.su.

At 6:45 AM on July 17, 2024, the endpoint with IP 192.168.1.100 connected to the IP 203.0.113.45 on port 443 using the TCP protocol. The destination URL was helloworld.com.

At 7:00 AM on July 17, 2024, the endpoint with IP 192.168.1.100 connected to the IP 198.51.100.10 on port 80 using the TCP protocol. The destination URL was elom.su.

At 7:15 AM on July 17, 2024, the endpoint with IP 192.168.1.100 connected to the IP 198.51.100.10 on port 80 using the TCP protocol. The destination URL was elom.su.

At 6:12 AM on July 17, 2024, the endpoint with IP 192.168.1.102 connected to the IP 203.0.113.45 on port 80 using the TCP protocol. The connection had 1024 bytes sent and 2048 bytes received. The destination URL was pets.com.

At 6:15 AM on July 17, 2024, the endpoint with IP 192.168.1.102 connected to the IP 203.0.113.45 on port 443 using the TCP protocol. The connection had 2048 bytes sent and 4096 bytes received. The destination URL was pets.com.

At 6:20 AM on July 17, 2024, the endpoint with IP 192.168.1.102 connected to the IP 198.51.100.10 on port 80 using the TCP protocol. The connection had 512 bytes sent and 1024 bytes received. The destination URL was http://randomsite.net.

At 6:30 AM on July 17, 2024, the endpoint with IP 192.168.1.102 connected to the IP 203.0.113.45 on port 80 using the TCP protocol. The connection had 1024 bytes sent and 2048 bytes received. The destination URL was pets.com.

At 6:45 AM on July 17, 2024, the endpoint with IP 192.168.1.102 connected to the IP 203.0.113.45 on port 443 using the TCP protocol. The connection had 2048 bytes sent and 4096 bytes received. The destination URL was pets.com.

At 7:00 AM on July 17, 2024, the endpoint with IP 192.168.1.102 connected to the IP 192.0.2.20 on port 80 using the TCP protocol. The connection had 512 bytes sent and 1024 bytes received. The destination URL was http://helloworld.org.

At 7:15 AM on July 17, 2024, the endpoint with IP 192.168.1.102 connected to the IP 203.0.113.45 on port 80 using the TCP protocol. The connection had 1024 bytes sent and 2048 bytes received. The destination URL was pets.com.
