# intrusion_prevention

event_id: cf2a2ee9-0129-48ad-864e-bda48d6777ae
log_level: critical
event_category: detections
event_data:
{"connection_id":5454817,"detection_time":1742531261,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":52006,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fda46b41-e331-4eb4-8abf-1b79836333c5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531262,"event_type_id":6,"status":"blocked"}


event_id: e0e6e4f7-dc0a-4133-aa7c-fb18f1f537b5
log_level: critical
event_category: detections
event_data:
{"connection_id":5454819,"detection_time":1742531262,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":13534,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 999d5294-08a0-4aaa-834e-94d114f92585
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531264,"event_type_id":6,"status":"blocked"}


event_id: f840989e-6d44-4a46-9cc2-fd8d5a0e435c
log_level: critical
event_category: detections
event_data:
{"connection_id":5454831,"detection_time":1742531264,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":52369,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 98709812-d71d-42fe-9290-a643d863d99d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531265,"event_type_id":6,"status":"blocked"}


event_id: 565a0817-904f-4bf6-8283-f7c921e6197d
log_level: critical
event_category: detections
event_data:
{"connection_id":5454835,"detection_time":1742531265,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":51818,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e9a7bd66-d170-4b7a-a04c-eaae4e06faf9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531265,"event_type_id":6,"status":"blocked"}


event_id: f243c36c-1455-4330-b402-bf9a86b1cce0
log_level: critical
event_category: detections
event_data:
{"connection_id":5454837,"detection_time":1742531265,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":22125,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 33ecbf66-8d44-4564-bb66-fe5a63ff98ae
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531265,"event_type_id":6,"status":"blocked"}


event_id: 53e14b81-7ea3-4111-8017-e3306526ba4f
log_level: critical
event_category: detections
event_data:
{"connection_id":5454838,"detection_time":1742531265,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":27497,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7edef3ee-1137-403a-9019-b3725d315b71
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742531266,"event_type_id":6,"status":"blocked"}


event_id: c89c958b-bf10-4999-9fd7-e9a6df868237
log_level: critical
event_category: detections
event_data:
{"connection_id":5454844,"detection_time":1742531266,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":59018,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4ca0481b-f729-48f0-b683-20bf820c9295
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531266,"event_type_id":6,"status":"blocked"}


event_id: bc9a9aec-75b8-422e-94e8-1726bd704cdf
log_level: critical
event_category: detections
event_data:
{"connection_id":5454839,"detection_time":1742531266,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53965,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4d1c3636-ba28-4041-9d0a-536e2771983a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531266,"event_type_id":6,"status":"blocked"}


event_id: b4901854-43f6-4f37-8ac4-79a8f86f8ed2
log_level: critical
event_category: detections
event_data:
{"connection_id":5454841,"detection_time":1742531266,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":5429,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 81dcc50a-72c7-4438-959a-6b060fa0db84
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742531267,"event_type_id":6,"status":"blocked"}


event_id: dd9a3194-cf83-4328-bdff-77605e4dcc14
log_level: critical
event_category: detections
event_data:
{"connection_id":5454848,"detection_time":1742531267,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":54161,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 69a76d66-7a10-44ce-952b-8889badc3dc9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531267,"event_type_id":6,"status":"blocked"}


event_id: 63d6afc6-b879-4037-83df-fc3a219bdb26
log_level: critical
event_category: detections
event_data:
{"connection_id":5454845,"detection_time":1742531267,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":32080,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 98d0b452-7caa-476b-9af7-c90fd4fd1882
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531267,"event_type_id":6,"status":"blocked"}


event_id: 7dd9416b-8732-4584-b63f-5cd9871eb1fe
log_level: critical
event_category: detections
event_data:
{"connection_id":5454847,"detection_time":1742531267,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":64001,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 55dcd8f9-a5d5-4d70-96e5-8683ebb578aa
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531268,"event_type_id":6,"status":"blocked"}


event_id: ad6eaa51-fc31-4ce0-8a80-e83d52eb0ec6
log_level: critical
event_category: detections
event_data:
{"connection_id":5454850,"detection_time":1742531268,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":30860,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b613f508-6696-4994-9c0c-3e9d81261c02
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531268,"event_type_id":6,"status":"blocked"}


event_id: 77d8b4bc-d22d-4f9b-addd-56d446e0d8ec
log_level: critical
event_category: detections
event_data:
{"connection_id":5454849,"detection_time":1742531268,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":56268,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0fc0c9bf-d22c-46eb-bd9c-094ba84e83cc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531268,"event_type_id":6,"status":"blocked"}


event_id: 6890356d-7e6c-4b5b-bf31-5b9424effa4f
log_level: critical
event_category: detections
event_data:
{"connection_id":5454852,"detection_time":1742531268,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":50608,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cb451ee2-7dc8-46b5-8b98-be35d9c1c52f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531268,"event_type_id":6,"status":"blocked"}


event_id: e160aa9a-3074-4403-8c0e-b79de005827f
log_level: critical
event_category: detections
event_data:
{"connection_id":5454856,"detection_time":1742531268,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":37233,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3af4eb6a-c8cc-45d9-8412-526a34d3f8a2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531269,"event_type_id":6,"status":"blocked"}


event_id: ff688e47-33d1-4e91-9034-d5ec54acd0e6
log_level: critical
event_category: detections
event_data:
{"connection_id":5454862,"detection_time":1742531269,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":16559,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 81fac75d-c64e-49ea-aad0-c716671b5a8e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531270,"event_type_id":6,"status":"blocked"}


event_id: c424e6d8-cb8b-419c-b67c-ab38fd4971f3
log_level: critical
event_category: detections
event_data:
{"connection_id":5454863,"detection_time":1742531270,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":18631,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fa7b03fe-e9fa-4041-b5c9-0e7ed3a9dfbd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531271,"event_type_id":6,"status":"blocked"}


event_id: 0faca2bc-8a97-4689-808c-3fcb6a17f9b8
log_level: critical
event_category: detections
event_data:
{"connection_id":5454868,"detection_time":1742531271,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":43867,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c15308dd-92e2-44ee-93cf-6ecaf7882180
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742531271,"event_type_id":6,"status":"blocked"}


event_id: 5aee6e7d-1a09-4478-9640-182ff14c4679
log_level: critical
event_category: detections
event_data:
{"connection_id":5454876,"detection_time":1742531271,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":58209,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e418140e-9ef7-42fa-ba3d-c6afeebc8dca
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531272,"event_type_id":6,"status":"blocked"}


event_id: 20033bf8-6ecb-4506-a43f-bc85d43e8cd5
log_level: critical
event_category: detections
event_data:
{"connection_id":5454877,"detection_time":1742531272,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":48212,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7164e1df-1e0e-4cfb-b785-726bd4a40202
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531273,"event_type_id":6,"status":"blocked"}


event_id: bdc59d72-efe4-4b57-a0a8-2472c4476568
log_level: critical
event_category: detections
event_data:
{"connection_id":5454879,"detection_time":1742531273,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":58424,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a890a692-8ff2-4ac0-a301-459a1ff6c15c
log_level: critical
event_category: detections
event_data:
{"connection_id":5454882,"detection_time":1742531273,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":60895,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 82eee5a1-fc68-4519-bc1e-9c61522d2fd2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531274,"event_type_id":6,"status":"blocked"}


event_id: 7ff8749c-2f7e-4521-a681-89a179bf9a49
log_level: critical
event_category: detections
event_data:
{"connection_id":5454871,"detection_time":1742531274,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":18024,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9568eee9-3746-4d46-addc-03f1eaf0db3e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531274,"event_type_id":6,"status":"blocked"}


event_id: f6f0f4c3-efc8-4479-86be-510bd0351202
log_level: critical
event_category: detections
event_data:
{"connection_id":5454885,"detection_time":1742531274,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":34345,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7c65c57b-df3e-473b-ab68-9ac652cdd226
log_level: critical
event_category: detections
event_data:
{"connection_id":5454873,"detection_time":1742531274,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":18728,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c284049d-91dd-434b-9499-9a6ba257e94f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531275,"event_type_id":6,"status":"blocked"}


event_id: e9ef31cc-f297-416e-951e-e4c622a26d46
log_level: critical
event_category: detections
event_data:
{"connection_id":5454890,"detection_time":1742531275,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":60970,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: dae2f0a2-d73c-4c54-8c9f-e48749a9b73d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531275,"event_type_id":6,"status":"blocked"}


event_id: 9f611e01-ffb3-47d8-88ef-abedbb041e96
log_level: critical
event_category: detections
event_data:
{"connection_id":5454905,"detection_time":1742531275,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":51736,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5fa03e93-7d41-4b75-bd5a-19c6bd4b44c5
log_level: critical
event_category: detections
event_data:
{"connection_id":5454895,"detection_time":1742531275,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":64216,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 65081aa3-a0c0-4820-ab5a-74d554b72353
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531275,"event_type_id":6,"status":"blocked"}


event_id: 564aef22-5dff-4203-a6cc-d2e212b7cd81
log_level: critical
event_category: detections
event_data:
{"connection_id":5454897,"detection_time":1742531275,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":38644,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 374ad785-c05e-4c80-8f05-4076c3925a5f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531277,"event_type_id":6,"status":"blocked"}


event_id: 1bc919cf-47af-4109-98c9-e9063e1dc48d
log_level: critical
event_category: detections
event_data:
{"connection_id":5454908,"detection_time":1742531277,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":65080,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 28318034-202c-49ea-bc0c-994d3430d5c6
log_level: critical
event_category: detections
event_data:
{"connection_id":5454910,"detection_time":1742531277,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":50557,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f21f5d36-1c83-475a-aa4c-2bda65095b6e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531278,"event_type_id":6,"status":"blocked"}


event_id: b5f15dbb-129c-4ace-82b0-4bb65d66be39
log_level: critical
event_category: detections
event_data:
{"connection_id":5454922,"detection_time":1742531278,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":26250,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b34b74ac-33c0-41b8-87ed-68caed4f6626
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742531278,"event_type_id":6,"status":"blocked"}


event_id: 5cec1bdc-2c4b-4104-91f7-7af44327ff39
log_level: critical
event_category: detections
event_data:
{"connection_id":5454925,"detection_time":1742531278,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":51584,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fc4cbdb9-99fb-48fd-9d43-815fc3cba4ad
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531279,"event_type_id":6,"status":"blocked"}


event_id: c38471c4-8262-4f98-b587-820ca566777a
log_level: critical
event_category: detections
event_data:
{"connection_id":5454915,"detection_time":1742531279,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":28830,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7fa683f8-d151-445e-ba8a-c34fddf99136
log_level: critical
event_category: detections
event_data:
{"connection_id":5454916,"detection_time":1742531279,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":29290,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d6f740ec-3b09-4443-9e60-a3c15097475b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531279,"event_type_id":6,"status":"blocked"}


event_id: bcbd884e-3747-433a-9de1-9aa13fce8b07
log_level: critical
event_category: detections
event_data:
{"connection_id":5454918,"detection_time":1742531279,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":8418,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ee3a02e2-8420-4aa9-a95a-c35c86d6a150
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531279,"event_type_id":6,"status":"blocked"}


event_id: c59f1f92-85cc-4730-a3a9-1d09c2fb3416
log_level: critical
event_category: detections
event_data:
{"connection_id":5454919,"detection_time":1742531279,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":60939,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fbcebdcb-8cb1-473a-b16c-836a1362aaf7
log_level: critical
event_category: detections
event_data:
{"connection_id":5454923,"detection_time":1742531279,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":9867,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ac2262b8-49d4-4bb9-91bd-bc852b748f8e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742531280,"event_type_id":6,"status":"blocked"}


event_id: 51d4efae-c90d-4b5a-9b92-d56fbbbc8bc4
log_level: critical
event_category: detections
event_data:
{"connection_id":5454939,"detection_time":1742531280,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":61971,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e019de93-6b0f-4afa-a754-8458a60120b5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531280,"event_type_id":6,"status":"blocked"}


event_id: 0d3065c7-1b94-4f50-9734-524350367556
log_level: critical
event_category: detections
event_data:
{"connection_id":5454929,"detection_time":1742531280,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":64024,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cc149f69-0b0c-421a-8c70-d042b900c4ce
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531281,"event_type_id":6,"status":"blocked"}


event_id: 91d3dd2f-1ef6-44ed-9e1f-0f893006727c
log_level: critical
event_category: detections
event_data:
{"connection_id":5454930,"detection_time":1742531281,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":57463,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 05423f7f-b768-4892-973b-3999239308f1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531281,"event_type_id":6,"status":"blocked"}


event_id: facd5fe8-7557-4dc7-a9b6-34945e592a76
log_level: critical
event_category: detections
event_data:
{"connection_id":5454935,"detection_time":1742531281,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":57821,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2ece6de2-5c3b-4ade-879f-09295df503e5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531281,"event_type_id":6,"status":"blocked"}


event_id: 11fdba0a-4576-4392-a73c-d597643e9826
log_level: critical
event_category: detections
event_data:
{"connection_id":5454940,"detection_time":1742531281,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":15980,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6abbd7f6-7618-49a7-8348-78f7751a9c33
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531284,"event_type_id":6,"status":"blocked"}


event_id: 91f67b3a-56ba-4155-ba10-66d6ddbf9170
log_level: critical
event_category: detections
event_data:
{"connection_id":5454972,"detection_time":1742531284,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":32025,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4ea30c34-f82f-429d-997e-a471e00bac46
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531285,"event_type_id":6,"status":"blocked"}


event_id: f763e93a-a966-4d8a-8ce5-64fa1d5b343b
log_level: critical
event_category: detections
event_data:
{"connection_id":5454967,"detection_time":1742531285,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":46309,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d4afe7d4-f16e-4bcd-b68b-4e7ee202a828
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531285,"event_type_id":6,"status":"blocked"}


event_id: d7809b4f-49ce-4c65-b164-e42ad9ed76d0
log_level: critical
event_category: detections
event_data:
{"connection_id":5454974,"detection_time":1742531285,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":55544,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a8f29874-cfb5-4fda-b944-6537e6e62d9d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742531285,"event_type_id":6,"status":"blocked"}


event_id: 5dcbffb4-2308-4b5b-ad04-64d082de5307
log_level: critical
event_category: detections
event_data:
{"connection_id":5454977,"detection_time":1742531285,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":52111,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7f0e6cca-66a1-4185-a95c-c7725ae0da39
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531285,"event_type_id":6,"status":"blocked"}


event_id: 6235ee1a-5e26-4bc9-a3bf-2e9cf00da1c3
log_level: critical
event_category: detections
event_data:
{"connection_id":5454978,"detection_time":1742531285,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":34568,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 57515adf-b00c-4e8b-8eb8-b46be3205e96
log_level: critical
event_category: detections
event_data:
{"connection_id":5454976,"detection_time":1742531285,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":58350,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 82ae1cd4-c300-446e-8766-86e26832672c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531286,"event_type_id":6,"status":"blocked"}


event_id: 899520ed-65e6-4b40-9e2f-9d4855b86097
log_level: critical
event_category: detections
event_data:
{"connection_id":5454980,"detection_time":1742531286,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":32756,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d7ac6786-a588-4a21-aae6-be91703546de
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531286,"event_type_id":6,"status":"blocked"}


event_id: fa68b448-6c79-4948-a38f-942d5b6de005
log_level: critical
event_category: detections
event_data:
{"connection_id":5454981,"detection_time":1742531286,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":10781,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 83d9ccbc-cbfd-4fdd-bfa5-60ed50c3d434
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531287,"event_type_id":6,"status":"blocked"}


event_id: 12d4b3f1-52fc-4235-b0f4-ddc28d86d486
log_level: critical
event_category: detections
event_data:
{"connection_id":5454995,"detection_time":1742531287,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":51329,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: dcb126aa-bc13-4085-a5ca-f0cdee2f2b87
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531287,"event_type_id":6,"status":"blocked"}


event_id: 4bf2488c-352a-4198-8b3e-c6b77b013602
log_level: critical
event_category: detections
event_data:
{"connection_id":5454988,"detection_time":1742531287,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":42748,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: acfbe5ad-3331-4828-90d5-5e34217f04f5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531288,"event_type_id":6,"status":"blocked"}


event_id: c43c7ce0-e816-456b-9ceb-2e2f85351180
log_level: critical
event_category: detections
event_data:
{"connection_id":5454991,"detection_time":1742531288,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":18661,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7e2cdfa2-3ee5-41e4-af54-ab2a14416db4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531288,"event_type_id":6,"status":"blocked"}


event_id: 7e048f9e-af2a-4dfb-83b1-0b59b540ab2f
log_level: critical
event_category: detections
event_data:
{"connection_id":5454993,"detection_time":1742531288,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":40766,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b69ff14d-9cf7-481b-8b69-54b526a1ac97
log_level: critical
event_category: detections
event_data:
{"connection_id":5454994,"detection_time":1742531288,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":20197,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 53d95597-9f54-44eb-b567-a65284211f0c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531289,"event_type_id":6,"status":"blocked"}


event_id: b5819f36-32ec-4d64-8a49-ee3dffe8c94b
log_level: critical
event_category: detections
event_data:
{"connection_id":5454996,"detection_time":1742531289,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":48076,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2f79a7a4-16ae-4298-b788-3508e3dbf0f2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531289,"event_type_id":6,"status":"blocked"}


event_id: e221888b-f71a-49b1-ad4f-9d3e975b549d
log_level: critical
event_category: detections
event_data:
{"connection_id":5454997,"detection_time":1742531289,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":62103,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2c217ab0-dfd2-465f-96f3-3a0bc84fcc8d
log_level: critical
event_category: detections
event_data:
{"connection_id":5454998,"detection_time":1742531289,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":63407,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1920a429-6ffc-40d3-b6fa-18f444b63925
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531290,"event_type_id":6,"status":"blocked"}


event_id: 2d9e1e9d-e2ec-4e92-bc5d-751a68b0383d
log_level: critical
event_category: detections
event_data:
{"connection_id":5455000,"detection_time":1742531290,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":51845,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ca1a7cc0-00ae-4b0f-9f67-541ba47602c2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531290,"event_type_id":6,"status":"blocked"}


event_id: c4fb647b-9a66-4c64-9e6d-3da90adbfb81
log_level: critical
event_category: detections
event_data:
{"connection_id":5455002,"detection_time":1742531290,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":48377,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 531160e0-bb69-43c5-be5e-8ba710a3de5b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531291,"event_type_id":6,"status":"blocked"}


event_id: 685217be-f68e-4046-a954-9f20b9570a23
log_level: critical
event_category: detections
event_data:
{"connection_id":5455007,"detection_time":1742531291,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":57449,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 65288967-9c10-40a8-b45b-b6511db6232f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531291,"event_type_id":6,"status":"blocked"}


event_id: 0d39ad03-1132-4fe3-b7d5-c45a852f0146
log_level: critical
event_category: detections
event_data:
{"connection_id":5455010,"detection_time":1742531291,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":32132,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cd59d802-3cdb-4844-9bcb-0c9cc651d98c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531291,"event_type_id":6,"status":"blocked"}


event_id: 53153b42-e91a-43e0-8cfa-ea2a45915241
log_level: critical
event_category: detections
event_data:
{"connection_id":5455011,"detection_time":1742531291,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":58382,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b11f2566-a6c3-43d5-94e8-1b054f558a3e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742531292,"event_type_id":6,"status":"blocked"}


event_id: 837fa4c5-3583-4684-b6b9-d63a8ef0e0e1
log_level: critical
event_category: detections
event_data:
{"connection_id":5455016,"detection_time":1742531292,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":59023,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ec013d6d-655a-48e7-9fd0-6d8710111cc4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531292,"event_type_id":6,"status":"blocked"}


event_id: 4df4a7e7-8276-40c7-ac82-59d515836e77
log_level: critical
event_category: detections
event_data:
{"connection_id":5455012,"detection_time":1742531292,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":60584,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 721d089f-df9d-4e5f-9503-8014c94fcf7a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531292,"event_type_id":6,"status":"blocked"}


event_id: 509e4ebb-e288-4b4b-9144-ed867e5fc3a7
log_level: critical
event_category: detections
event_data:
{"connection_id":5455019,"detection_time":1742531292,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":58704,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ff4b22d0-ea5d-48df-b22a-b9ebcebd28d9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742531294,"event_type_id":6,"status":"blocked"}


event_id: 5ecc34a3-96ef-4cc0-a578-c0be353a556f
log_level: critical
event_category: detections
event_data:
{"connection_id":5455028,"detection_time":1742531294,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":64881,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a0d70d05-d9a2-4365-aece-85917067e85a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531295,"event_type_id":6,"status":"blocked"}


event_id: c1616d2a-3377-4486-b500-7fb66def78c9
log_level: critical
event_category: detections
event_data:
{"connection_id":5455027,"detection_time":1742531295,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":2459,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e6252563-1dfb-461e-8c5e-fda6b28b0b86
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531295,"event_type_id":6,"status":"blocked"}


event_id: 51de411d-01e4-4e36-a31b-2daaf1177ade
log_level: critical
event_category: detections
event_data:
{"connection_id":5455030,"detection_time":1742531295,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":7991,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 44ef8d58-5647-4a42-b47a-d423193703c8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531295,"event_type_id":6,"status":"blocked"}


event_id: 5c19d456-2b6b-447f-8e7c-0163efc44099
log_level: critical
event_category: detections
event_data:
{"connection_id":5455029,"detection_time":1742531295,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":6214,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: aea9f6d5-b80a-48e7-9767-7f718cffae44
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531296,"event_type_id":6,"status":"blocked"}


event_id: 7be566bf-a3ce-4fcf-88d0-0c5f36a90e7a
log_level: critical
event_category: detections
event_data:
{"connection_id":5455041,"detection_time":1742531296,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":50139,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f7b1fd36-fa64-4eae-9343-94a4343fc586
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531296,"event_type_id":6,"status":"blocked"}


event_id: 57a29779-4bbe-4a56-bf54-88eafcf1fe81
log_level: critical
event_category: detections
event_data:
{"connection_id":5455043,"detection_time":1742531296,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":12509,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 83e032a3-1850-4a59-ad07-10af5d669cc5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531296,"event_type_id":6,"status":"blocked"}


event_id: e1bfb36a-de6e-4620-840b-c0216914a770
log_level: critical
event_category: detections
event_data:
{"connection_id":5455042,"detection_time":1742531296,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":52431,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8402881c-6e0c-451c-951e-c8472dbf56cd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742531297,"event_type_id":6,"status":"blocked"}


event_id: c3bbd09a-fe21-4909-9c2a-dd74bcc78ef4
log_level: critical
event_category: detections
event_data:
{"connection_id":5455052,"detection_time":1742531297,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":57379,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8d4fe9c6-8282-4313-bb94-bfa4eac720f3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531297,"event_type_id":6,"status":"blocked"}


event_id: f2649654-0d31-4715-8ac8-7673c873301f
log_level: critical
event_category: detections
event_data:
{"connection_id":5455046,"detection_time":1742531297,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":55032,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8b81629f-cabd-4096-ac89-ef4295f2cf0e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531297,"event_type_id":6,"status":"blocked"}


event_id: 337eddf9-1085-4ae8-a44f-d62e4194fc21
log_level: critical
event_category: detections
event_data:
{"connection_id":5455049,"detection_time":1742531297,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":11065,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 26f003c9-4eba-4cfb-9bbc-852b7b8f8367
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531298,"event_type_id":6,"status":"blocked"}


event_id: 1bb10198-35bd-4109-8c03-ab4140857276
log_level: critical
event_category: detections
event_data:
{"connection_id":5455051,"detection_time":1742531298,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":17303,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7c774980-b75c-4c5b-8e25-21aceedd61e2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531299,"event_type_id":6,"status":"blocked"}


event_id: 63edb286-309b-4376-9dae-970891a73ec2
log_level: critical
event_category: detections
event_data:
{"connection_id":5455056,"detection_time":1742531299,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":13642,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: df26f39e-3408-4921-b2e7-156417ffc5b8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531299,"event_type_id":6,"status":"blocked"}


event_id: 4a6660a7-8730-48c3-b431-8a3f92f88995
log_level: critical
event_category: detections
event_data:
{"connection_id":5455062,"detection_time":1742531299,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":51994,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 443864b4-f1eb-4a0c-b5ee-040b98fce9bd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531299,"event_type_id":6,"status":"blocked"}


event_id: 8acffb3f-159e-4181-929e-25841c4a6beb
log_level: critical
event_category: detections
event_data:
{"connection_id":5455058,"detection_time":1742531299,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":61551,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1fcb085a-448d-4dc4-aa80-c6d30cf0f780
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531300,"event_type_id":6,"status":"blocked"}


event_id: f27505f8-f87d-4023-b413-fda68b8a7426
log_level: critical
event_category: detections
event_data:
{"connection_id":5455061,"detection_time":1742531300,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":63338,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c12b55e9-0729-49df-a341-0a1b4235033c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531301,"event_type_id":6,"status":"blocked"}


event_id: 866e8168-210b-46ca-a36c-f0ada4ffa020
log_level: critical
event_category: detections
event_data:
{"connection_id":5455063,"detection_time":1742531301,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":58468,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2739c63c-e441-41ec-bb2e-a0b1bd31f5d6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531301,"event_type_id":6,"status":"blocked"}


event_id: 261c3d8c-80bc-4363-a3b8-70c2fbf95faa
log_level: critical
event_category: detections
event_data:
{"connection_id":5455064,"detection_time":1742531301,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":24048,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bb458d07-5973-44e4-a97a-8a510b7c205e
log_level: critical
event_category: detections
event_data:
{"connection_id":5455065,"detection_time":1742531301,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":60651,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8cef87c5-bc94-4a94-85cd-e0f1198fdc2b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531302,"event_type_id":6,"status":"blocked"}


event_id: 6db2fe48-eaf3-4f4b-afd4-10414fd3351b
log_level: critical
event_category: detections
event_data:
{"connection_id":5455068,"detection_time":1742531302,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":28553,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c7df4a8b-7f51-40ee-80e2-b20b8be72b70
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742531302,"event_type_id":6,"status":"blocked"}


event_id: ab565f74-e8a5-4e2d-917c-601bb2d4d903
log_level: critical
event_category: detections
event_data:
{"connection_id":5455070,"detection_time":1742531302,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":62142,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: dc79e8d9-5910-4211-866d-29639a11e8d7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531303,"event_type_id":6,"status":"blocked"}


event_id: ad68f7a4-09c8-41b0-a4d3-7e574ad8e4de
log_level: critical
event_category: detections
event_data:
{"connection_id":5455073,"detection_time":1742531303,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":54354,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cef0961b-cbdd-4238-a279-dd5b3f97ae02
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531304,"event_type_id":6,"status":"blocked"}


event_id: 7ff3932e-bee7-4164-a8be-a55734491d30
log_level: critical
event_category: detections
event_data:
{"connection_id":5455081,"detection_time":1742531304,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":30147,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7a98fd40-db03-40c9-a47b-02e5d5aaeae4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531304,"event_type_id":6,"status":"blocked"}


event_id: c0ff022e-c9c8-46e4-a5c7-1a27c042e67f
log_level: critical
event_category: detections
event_data:
{"connection_id":5455080,"detection_time":1742531304,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":57880,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: debcc09b-dfe9-4edc-84ed-02811aa5ce4a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531304,"event_type_id":6,"status":"blocked"}


event_id: 9668dc75-1faf-4068-a2de-6f25a2d008fa
log_level: critical
event_category: detections
event_data:
{"connection_id":5455084,"detection_time":1742531304,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":41608,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 093b549e-e9b5-4140-ac6c-61aeb3a8d26f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531304,"event_type_id":6,"status":"blocked"}


event_id: 29bc7926-eb25-46f0-b032-dee3b0109273
log_level: critical
event_category: detections
event_data:
{"connection_id":5455085,"detection_time":1742531304,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":14551,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5582a9c0-18b7-4296-bccf-f7d28a531c35
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531304,"event_type_id":6,"status":"blocked"}


event_id: 899bd6ae-cf9d-4cba-81dd-aeb4bbd1d804
log_level: critical
event_category: detections
event_data:
{"connection_id":5455088,"detection_time":1742531304,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":59023,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 40c182ac-fb7f-4254-8e43-690250649a5c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531305,"event_type_id":6,"status":"blocked"}


event_id: 040bbf62-3d63-4006-99ef-169b3497ee90
log_level: critical
event_category: detections
event_data:
{"connection_id":5455086,"detection_time":1742531305,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":44499,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f9b984e6-abd3-4fd2-b5af-4f1124e994e8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531305,"event_type_id":6,"status":"blocked"}


event_id: eb4e1195-befa-460b-b8d9-f6e704f678db
log_level: critical
event_category: detections
event_data:
{"connection_id":5455089,"detection_time":1742531305,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":18660,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6a1b3c6f-e537-46a9-99fe-389ee1643279
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531308,"event_type_id":6,"status":"blocked"}


event_id: 3f7aac93-aa07-4837-bf9a-3e54567b357f
log_level: critical
event_category: detections
event_data:
{"connection_id":5455100,"detection_time":1742531308,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":51562,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 81450d25-bb7e-40c5-a741-0f6cee14c834
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742531308,"event_type_id":6,"status":"blocked"}


event_id: 0dbf1b89-df29-49af-83dc-eadf53dec8e1
log_level: critical
event_category: detections
event_data:
{"connection_id":5455102,"detection_time":1742531308,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":51587,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 839b5d02-b2fd-4705-9bda-30510e02576e
log_level: critical
event_category: detections
event_data:
{"connection_id":5455098,"detection_time":1742531308,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":49241,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7229bf30-6231-4437-be8f-4c9b8679ec47
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531309,"event_type_id":6,"status":"blocked"}


event_id: eeb48cdc-646f-407a-9c4a-a840be4f6bb7
log_level: critical
event_category: detections
event_data:
{"connection_id":5455099,"detection_time":1742531309,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":53253,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 44b55475-2b36-4945-9863-e32b88bf29ea
log_level: critical
event_category: detections
event_data:
{"connection_id":5455101,"detection_time":1742531309,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":54822,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d8e33dd8-3373-4a77-9263-ff91ddb011e1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"202.165.25.140","autoblock_timeout":25,"detection_time":1742531310,"event_type_id":6,"status":"blocked"}


event_id: 3556196f-37b2-4c70-bc70-025220b915ef
log_level: critical
event_category: detections
event_data:
{"connection_id":5455120,"detection_time":1742531310,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"202.165.25.140","remote_port":58159,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d1cd27ce-fd01-44aa-aae6-ecff3124752d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531311,"event_type_id":6,"status":"blocked"}


event_id: 93fa06b5-410b-4e7c-a23f-8637c0d152b8
log_level: critical
event_category: detections
event_data:
{"connection_id":5455115,"detection_time":1742531311,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":37873,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 55c1d23d-756c-4397-8eac-30076ecff698
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531311,"event_type_id":6,"status":"blocked"}


event_id: f5b5c17b-1a5f-4a8d-a3be-9d767ddf1ae2
log_level: critical
event_category: detections
event_data:
{"connection_id":5455117,"detection_time":1742531311,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":60741,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cb22e012-c394-4d7b-8581-f2c39cba6bf1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531312,"event_type_id":6,"status":"blocked"}


event_id: 48ae8f24-73ce-4b91-955d-73dbe8a69b56
log_level: critical
event_category: detections
event_data:
{"connection_id":5455136,"detection_time":1742531312,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":52228,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 03c4a97b-c0d7-41b7-8615-8956b0ebb269
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742531312,"event_type_id":6,"status":"blocked"}


event_id: e764d8b9-e194-4bd5-a733-a522bc431b43
log_level: critical
event_category: detections
event_data:
{"connection_id":5455141,"detection_time":1742531312,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":60243,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 200c5b5d-a4b8-47eb-b581-6f5312dd9541
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531313,"event_type_id":6,"status":"blocked"}


event_id: ae7f66f9-5d0a-49ca-a299-cb967ad4c6bd
log_level: critical
event_category: detections
event_data:
{"connection_id":5455135,"detection_time":1742531313,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":55629,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2935de8d-03de-4807-ae48-3f6c788c7ad6
log_level: critical
event_category: detections
event_data:
{"connection_id":5455139,"detection_time":1742531313,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":57819,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9c681465-c1ab-4fe6-b054-7e083a67b528
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531314,"event_type_id":6,"status":"blocked"}


event_id: e688b919-a7ce-4b32-9afb-e7b5845910a5
log_level: critical
event_category: detections
event_data:
{"connection_id":5455146,"detection_time":1742531314,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":12138,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4bb8cdc6-6a21-4ae9-add6-25ad0fb77457
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531315,"event_type_id":6,"status":"blocked"}


event_id: 3da52785-54c5-48a2-b65b-b23987d6cfee
log_level: critical
event_category: detections
event_data:
{"connection_id":5455153,"detection_time":1742531315,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":14971,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ddba1edb-9dbf-40ee-af52-028763dfb32f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531315,"event_type_id":6,"status":"blocked"}


event_id: bbd7b4bb-a275-42e9-9454-932d4cdea3a9
log_level: critical
event_category: detections
event_data:
{"connection_id":5455156,"detection_time":1742531315,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":51482,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b0fe80fc-1d1f-4d23-a040-a2f2fbd91411
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531316,"event_type_id":6,"status":"blocked"}


event_id: e7acf1ae-875a-4dc4-8ecc-ce178d88c5a3
log_level: critical
event_category: detections
event_data:
{"connection_id":5455160,"detection_time":1742531316,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":54791,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8841157a-05bb-4362-b069-072a0d103425
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531316,"event_type_id":6,"status":"blocked"}


event_id: 8ce0a83b-150b-4ac8-8c90-8b666cf89c61
log_level: critical
event_category: detections
event_data:
{"connection_id":5455164,"detection_time":1742531316,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":55946,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 279db4f6-1d58-4056-95c1-8cdc341c24b3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531316,"event_type_id":6,"status":"blocked"}


event_id: c72a247f-50f1-4c56-aa5a-b583b96f78f3
log_level: critical
event_category: detections
event_data:
{"connection_id":5455169,"detection_time":1742531316,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":13055,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a55dd32a-45a9-4a43-b573-df43674c2ec3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531317,"event_type_id":6,"status":"blocked"}


event_id: 43676312-b3a5-4850-b440-bf5a1fb5cac5
log_level: critical
event_category: detections
event_data:
{"connection_id":5455171,"detection_time":1742531317,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":63295,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b4b1abb8-f024-471c-aef3-b3b3949ba4c9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531317,"event_type_id":6,"status":"blocked"}


event_id: fc01f919-25e4-453d-8300-cae3e86af757
log_level: critical
event_category: detections
event_data:
{"connection_id":5455172,"detection_time":1742531317,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":23253,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1e412d3e-bed7-4125-8938-ecf40a59c47b
log_level: critical
event_category: detections
event_data:
{"connection_id":5455176,"detection_time":1742531317,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":64893,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b2802fbe-335b-4f52-a423-2888abb5ff16
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531318,"event_type_id":6,"status":"blocked"}


event_id: 6b2f9006-35fb-4a0d-a10f-da31e86510c5
log_level: critical
event_category: detections
event_data:
{"connection_id":5455183,"detection_time":1742531318,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":21561,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c9490813-dfeb-4706-813f-3b2adf4b40e6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531318,"event_type_id":6,"status":"blocked"}


event_id: 81505ce9-9002-4cc2-8c41-0495bece38d3
log_level: critical
event_category: detections
event_data:
{"connection_id":5455185,"detection_time":1742531318,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":63879,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e20c81f5-7c11-44a7-9cc6-7da1d358d4ac
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531318,"event_type_id":6,"status":"blocked"}


event_id: d5050f8d-1a1e-41fc-a3af-27d4bd9f7586
log_level: critical
event_category: detections
event_data:
{"connection_id":5455194,"detection_time":1742531318,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":60771,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f4bb75ab-c5ce-48d6-bf73-0e5fa500cb3b
log_level: critical
event_category: detections
event_data:
{"connection_id":5455189,"detection_time":1742531318,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":1053,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fc816d9a-2869-4ad4-a6fb-eb182e6e209c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531318,"event_type_id":6,"status":"blocked"}


event_id: ed64b177-0291-4301-9f35-2fb4ccb5f960
log_level: critical
event_category: detections
event_data:
{"connection_id":5455191,"detection_time":1742531318,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":28306,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cbb1138a-4bd9-476d-a014-01e31307076b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742531319,"event_type_id":6,"status":"blocked"}


event_id: f4c75034-a897-4d66-a635-3fd4ca002dd4
log_level: critical
event_category: detections
event_data:
{"connection_id":5455204,"detection_time":1742531319,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":58230,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4cb43378-7e07-424e-ad1a-374d062e392e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531319,"event_type_id":6,"status":"blocked"}


event_id: d83b668d-0738-4e59-9827-8d9766890180
log_level: critical
event_category: detections
event_data:
{"connection_id":5455198,"detection_time":1742531319,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":6314,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ba41490e-6e4e-4fc5-b922-06beb69523bd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531320,"event_type_id":6,"status":"blocked"}


event_id: 38ea6fae-d95e-4f48-83e6-d6ddeec5603e
log_level: critical
event_category: detections
event_data:
{"connection_id":5455200,"detection_time":1742531320,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":28594,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0ee229a9-9ee0-4639-a1d7-7186f12390a0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531320,"event_type_id":6,"status":"blocked"}


event_id: 34326ba9-a557-439f-a8af-41f1accb4559
log_level: critical
event_category: detections
event_data:
{"connection_id":5455207,"detection_time":1742531320,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":65236,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 66038189-7857-4fd6-9dc3-858ad578ef80
log_level: critical
event_category: detections
event_data:
{"connection_id":5455205,"detection_time":1742531320,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":62919,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a1b9c8ce-f757-4797-9f96-71075c45189a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531321,"event_type_id":6,"status":"blocked"}


event_id: 3064ad8c-0cca-44a5-a1a3-faab63122c4d
log_level: critical
event_category: detections
event_data:
{"connection_id":5455209,"detection_time":1742531321,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":38569,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9dc0bc9e-3c26-48b9-aef0-f2806035eb3b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531321,"event_type_id":6,"status":"blocked"}


event_id: ecbdc272-1854-4c1f-8e82-29103664e55b
log_level: critical
event_category: detections
event_data:
{"connection_id":5455213,"detection_time":1742531321,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":12648,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6d6070e9-3704-4ed7-9421-4c95a43dd85c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"199.27.221.21","autoblock_timeout":25,"detection_time":1742531322,"event_type_id":6,"status":"blocked"}


event_id: 5fa49105-ba0f-4562-93d1-4dc4d1eea1f8
log_level: critical
event_category: detections
event_data:
{"connection_id":5455242,"detection_time":1742531322,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"199.27.221.21","remote_port":53884,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 81b2abf1-bb28-4375-9195-836738924e53
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742531323,"event_type_id":6,"status":"blocked"}


event_id: 1cbcc57a-04b2-4c8f-a585-4595dcdcb7de
log_level: critical
event_category: detections
event_data:
{"connection_id":5455255,"detection_time":1742531323,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":54518,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ff0bf235-9fbc-4477-b28d-4a612be9cada
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531325,"event_type_id":6,"status":"blocked"}


event_id: d1950911-0593-4d2e-be56-9cf47d3bbbc5
log_level: critical
event_category: detections
event_data:
{"connection_id":5455257,"detection_time":1742531325,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":51933,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 331713e5-0d6d-449e-8706-128f10955514
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531325,"event_type_id":6,"status":"blocked"}


event_id: 6f51eb20-bc13-4852-8710-8379d597b286
log_level: critical
event_category: detections
event_data:
{"connection_id":5455259,"detection_time":1742531325,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":52934,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 30aa0dc1-50cd-4eb7-84d4-93b73c91093b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531325,"event_type_id":6,"status":"blocked"}


event_id: 55fcd93a-dbd7-4ec4-b36e-3ff5fde9b092
log_level: critical
event_category: detections
event_data:
{"connection_id":5455262,"detection_time":1742531325,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":47358,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: daf70b7c-f322-4512-be36-ba8bc81be08a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531325,"event_type_id":6,"status":"blocked"}


event_id: 358c1e48-6b16-42fc-9e07-3dbd75de0154
log_level: critical
event_category: detections
event_data:
{"connection_id":5455258,"detection_time":1742531325,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53102,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: be783be1-cbc8-447a-851d-6aa592b914be
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531325,"event_type_id":6,"status":"blocked"}


event_id: 3ff00838-28f7-4f2f-a201-bac0cd7a3d29
log_level: critical
event_category: detections
event_data:
{"connection_id":5455223,"detection_time":1742531325,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":13607,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 48854a5f-0d76-48ca-8a4f-e8e9c6249fb7
log_level: critical
event_category: detections
event_data:
{"connection_id":5455264,"detection_time":1742531325,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":54414,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7a87b549-fe94-4291-8a3c-7b43cd979ce1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531326,"event_type_id":6,"status":"blocked"}


event_id: 8646049a-47ac-4628-b8a6-8748fb53fac6
log_level: critical
event_category: detections
event_data:
{"connection_id":5455271,"detection_time":1742531326,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":57321,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: dca314a7-540c-4415-a119-77d4fb5acb6e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531326,"event_type_id":6,"status":"blocked"}


event_id: 9710fa88-a24b-4c85-988f-a845b99628ae
log_level: critical
event_category: detections
event_data:
{"connection_id":5455210,"detection_time":1742531326,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":8552,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d69a1c0d-a6a5-4812-b5b9-ea33571e1531
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531326,"event_type_id":6,"status":"blocked"}


event_id: c19c68ff-203f-4493-b75b-caae2235c228
log_level: critical
event_category: detections
event_data:
{"connection_id":5455277,"detection_time":1742531326,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":30593,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a720337e-fe55-45cd-81c5-df2408f5a6b3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531327,"event_type_id":6,"status":"blocked"}


event_id: 012d1712-4962-4422-a501-d4fb44cef3b3
log_level: critical
event_category: detections
event_data:
{"connection_id":5455280,"detection_time":1742531327,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":64472,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 84b7524b-0273-44f6-aa13-e7ca0ec5946b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531327,"event_type_id":6,"status":"blocked"}


event_id: 74132f85-4b06-4b9e-a760-e28c67837ddc
log_level: critical
event_category: detections
event_data:
{"connection_id":5455281,"detection_time":1742531327,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":55530,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fdafcea8-e34a-41e1-adb4-1bc094048ba5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531327,"event_type_id":6,"status":"blocked"}


event_id: 75db487a-cf17-42a0-8574-64bf4e164254
log_level: critical
event_category: detections
event_data:
{"connection_id":5455284,"detection_time":1742531327,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":62138,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e2302bd6-43a4-4703-854b-83e8971611d0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531328,"event_type_id":6,"status":"blocked"}


event_id: 6fe12751-befe-46a1-a3dc-633ef0453518
log_level: critical
event_category: detections
event_data:
{"connection_id":5455286,"detection_time":1742531328,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":51641,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5bcc2045-a91e-4a15-b281-13fa7e0ab879
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531329,"event_type_id":6,"status":"blocked"}


event_id: 8b632c33-5ab7-46f4-8b8a-a00efe4ea7b3
log_level: critical
event_category: detections
event_data:
{"connection_id":5455294,"detection_time":1742531329,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":25798,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 49524e60-6449-4548-b6a3-8675b4e3132b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531329,"event_type_id":6,"status":"blocked"}


event_id: 20f568c2-1f7b-4dd1-9ee5-4d6d15802e56
log_level: critical
event_category: detections
event_data:
{"connection_id":5455295,"detection_time":1742531329,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":41602,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 795b450b-c8ac-4969-bb64-10c288db0bde
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531330,"event_type_id":6,"status":"blocked"}


event_id: f7b5ac3c-6dee-4921-af5e-23ffbdf25de7
log_level: critical
event_category: detections
event_data:
{"connection_id":5455299,"detection_time":1742531330,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":43333,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8f30e6a4-cfe1-48ce-9c83-3f1c281f64dc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531331,"event_type_id":6,"status":"blocked"}


event_id: 8b16506d-2c3b-433e-ba6d-32ae6ab057c6
log_level: critical
event_category: detections
event_data:
{"connection_id":5455303,"detection_time":1742531331,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":4343,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3a671ac7-d66c-43e5-9962-e7fb8d0fef30
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531331,"event_type_id":6,"status":"blocked"}


event_id: b661b903-b79a-4a6c-986e-e6e567b930bc
log_level: critical
event_category: detections
event_data:
{"connection_id":5455311,"detection_time":1742531331,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":61113,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e156b58c-c5d5-464a-8ba5-2e2bae96103e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531332,"event_type_id":6,"status":"blocked"}


event_id: e004df56-caed-4f45-b6cd-31d5a3ea2d9c
log_level: critical
event_category: detections
event_data:
{"connection_id":5455317,"detection_time":1742531332,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":8886,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a1057659-c92f-46c9-af7e-2244ca752100
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531332,"event_type_id":6,"status":"blocked"}


event_id: 6037baa9-b864-4ca8-a86a-d5b1fdf6ce28
log_level: critical
event_category: detections
event_data:
{"connection_id":5455323,"detection_time":1742531332,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":59608,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fef9ec11-adfc-421a-8e54-7396f97bfdd1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742531333,"event_type_id":6,"status":"blocked"}


event_id: 68b6f3d3-f596-44be-bccf-04edb8050003
log_level: critical
event_category: detections
event_data:
{"connection_id":5455337,"detection_time":1742531333,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":62356,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9ca6ced7-00c9-4395-90d1-07cdc8bb05ad
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531333,"event_type_id":6,"status":"blocked"}


event_id: e62417a1-37dc-4ad3-b5e7-60482ed520b5
log_level: critical
event_category: detections
event_data:
{"connection_id":5455325,"detection_time":1742531333,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":62038,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 460b2ac5-fd93-4b29-87c5-c82c90842c42
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531334,"event_type_id":6,"status":"blocked"}


event_id: f64513c2-b2fc-4aac-943c-69396f70f588
log_level: critical
event_category: detections
event_data:
{"connection_id":5455339,"detection_time":1742531334,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":21599,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2a4efdf0-3763-495a-b720-81e94654966c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531334,"event_type_id":6,"status":"blocked"}


event_id: 2e9115ba-65da-425c-bdb2-a0644f194c5e
log_level: critical
event_category: detections
event_data:
{"connection_id":5455343,"detection_time":1742531334,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":59054,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a66c32e1-7830-4fbd-b698-1ae7b836f3a3
log_level: critical
event_category: detections
event_data:
{"connection_id":5455348,"detection_time":1742531334,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":24753,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6c91f5b4-76d1-4d83-a28a-c05d6e74c551
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531335,"event_type_id":6,"status":"blocked"}


event_id: c7ca9cd0-688b-4af3-9538-469367ddab4c
log_level: critical
event_category: detections
event_data:
{"connection_id":5455355,"detection_time":1742531335,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":63388,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d0a7d2db-97b7-4d0d-bed1-bff28c583574
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531336,"event_type_id":6,"status":"blocked"}


event_id: 1c4a283b-f7ba-4ead-9aa0-44c895cd256d
log_level: critical
event_category: detections
event_data:
{"connection_id":5455326,"detection_time":1742531336,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":32706,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f1f16214-7184-477e-86b5-9652c7348cc2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531337,"event_type_id":6,"status":"blocked"}


event_id: 01b3f657-33dd-4bd8-aa26-c2b02ef9998e
log_level: critical
event_category: detections
event_data:
{"connection_id":5455367,"detection_time":1742531337,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":49840,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1856de81-e64d-4609-b46c-9e6b77bdb402
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742531337,"event_type_id":6,"status":"blocked"}


event_id: 8caa7bd6-1c7f-442f-a05f-1c0aaf011f98
log_level: critical
event_category: detections
event_data:
{"connection_id":5455381,"detection_time":1742531337,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":57454,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f3396a5e-2864-4f10-bccc-010bc07d4126
log_level: critical
event_category: detections
event_data:
{"connection_id":5455372,"detection_time":1742531337,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":51776,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: af641fc4-cbe8-429a-94d0-edd0dfc2d16a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531337,"event_type_id":6,"status":"blocked"}


event_id: d75fe795-4db3-4f30-8cbc-45e2e0db8a7d
log_level: critical
event_category: detections
event_data:
{"connection_id":5455374,"detection_time":1742531337,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":52611,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 72297727-b8bf-422e-9d16-e28979680504
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531338,"event_type_id":6,"status":"blocked"}


event_id: f8b166f6-fde4-46b2-87a4-b02186227471
log_level: critical
event_category: detections
event_data:
{"connection_id":5455382,"detection_time":1742531338,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":33591,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ddeb44c9-79c9-408e-bc05-85d53b463a2d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531339,"event_type_id":6,"status":"blocked"}


event_id: b09cce3c-2950-42e3-bd14-22ada05188f0
log_level: critical
event_category: detections
event_data:
{"connection_id":5455385,"detection_time":1742531339,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":35269,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 74b6c41d-d954-4c74-a102-e2b28c2fd621
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531339,"event_type_id":6,"status":"blocked"}


event_id: 15911bf1-6a6d-4ab8-a89b-2dbe301fcd8c
log_level: critical
event_category: detections
event_data:
{"connection_id":5455384,"detection_time":1742531339,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":61462,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 54e51947-16b1-4d36-9558-4c0d057c6836
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531340,"event_type_id":6,"status":"blocked"}


event_id: 4338de4a-3f54-4d07-a12e-1763b3ecde84
log_level: critical
event_category: detections
event_data:
{"connection_id":5455394,"detection_time":1742531340,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":64874,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 33f1c918-c70f-477d-bf0d-60c4f168d45e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531340,"event_type_id":6,"status":"blocked"}


event_id: 7b4073ee-565f-49a8-83a6-c5f78e9529c3
log_level: critical
event_category: detections
event_data:
{"connection_id":5455403,"detection_time":1742531340,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":18052,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6a6ddfcb-655f-4d4b-a124-0faf04d3f715
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531341,"event_type_id":6,"status":"blocked"}


event_id: 615e06ec-a4e0-41d8-a154-561810b4fad0
log_level: critical
event_category: detections
event_data:
{"connection_id":5455407,"detection_time":1742531341,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":41029,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0148a773-9ff6-426b-b573-19a05f842925
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531341,"event_type_id":6,"status":"blocked"}


event_id: aeff6823-4a68-47ca-9782-547978992e7b
log_level: critical
event_category: detections
event_data:
{"connection_id":5455409,"detection_time":1742531341,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":50148,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5d02cf51-a6d4-49c7-8b9b-9ea6a36b9d16
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531344,"event_type_id":6,"status":"blocked"}


event_id: 5deadb8b-21a7-4725-8bfd-fcdecf24bbea
log_level: critical
event_category: detections
event_data:
{"connection_id":5455429,"detection_time":1742531344,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":57040,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 245f795e-8279-4beb-a6fc-a107312bb2dd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531344,"event_type_id":6,"status":"blocked"}


event_id: b1631802-cbdc-4911-9622-b78786c376c8
log_level: critical
event_category: detections
event_data:
{"connection_id":5455440,"detection_time":1742531344,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":62268,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 60055b48-a601-489e-b360-6008f05bdc3c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531344,"event_type_id":6,"status":"blocked"}


event_id: 9ca233c3-d333-49fb-a9f1-0f0b92d08d6c
log_level: critical
event_category: detections
event_data:
{"connection_id":5455432,"detection_time":1742531344,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":56103,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ed2fe39a-4c58-4f3b-ab54-17b9c88046b9
log_level: critical
event_category: detections
event_data:
{"connection_id":5455434,"detection_time":1742531344,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":59719,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 665ba4a2-396b-435c-9c0e-922be328fe13
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531345,"event_type_id":6,"status":"blocked"}


event_id: dfd7b99a-11db-4ad5-8da5-a4eed1a8df64
log_level: critical
event_category: detections
event_data:
{"connection_id":5455439,"detection_time":1742531345,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":58799,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b71a2701-8b24-4809-a901-8439faa3be03
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531345,"event_type_id":6,"status":"blocked"}


event_id: 47e7ec85-6b28-48bb-8cbc-60f038c6b9f4
log_level: critical
event_category: detections
event_data:
{"connection_id":5455445,"detection_time":1742531345,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":57842,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 428a9d37-fc09-4ae3-9054-a65abaccff89
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531346,"event_type_id":6,"status":"blocked"}


event_id: 659e434a-6f77-4a91-b033-238ab83d6df0
log_level: critical
event_category: detections
event_data:
{"connection_id":5455451,"detection_time":1742531346,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":36129,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b2455194-33d9-4634-8ea9-362e5904d502
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531347,"event_type_id":6,"status":"blocked"}


event_id: 363fdee4-f41a-41ce-936d-52176bee6b6d
log_level: critical
event_category: detections
event_data:
{"connection_id":5455455,"detection_time":1742531347,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":3985,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c74b012f-53c1-4ac9-b25b-074b76686625
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531347,"event_type_id":6,"status":"blocked"}


event_id: 3d9ddaaf-dc0d-4480-9b3c-348144765509
log_level: critical
event_category: detections
event_data:
{"connection_id":5455466,"detection_time":1742531347,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":1992,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7608a59f-8712-43e3-ac6e-a38ac1ca6acf
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531348,"event_type_id":6,"status":"blocked"}


event_id: c72a48e6-e66e-4ec2-a660-1b36f536df90
log_level: critical
event_category: detections
event_data:
{"connection_id":5455471,"detection_time":1742531348,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":44432,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 52b2a8d8-8573-4de6-86e0-2fbc0718b06d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531348,"event_type_id":6,"status":"blocked"}


event_id: 21e473eb-f799-4f4b-a212-a18c4c7e1cff
log_level: critical
event_category: detections
event_data:
{"connection_id":5455472,"detection_time":1742531348,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":8604,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 09da5dc6-846e-4930-8957-9ef1697f3a43
log_level: critical
event_category: detections
event_data:
{"connection_id":5455476,"detection_time":1742531348,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":45831,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a9a7177e-1877-44d9-97ed-bd2d599e6507
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531349,"event_type_id":6,"status":"blocked"}


event_id: f49c7147-0686-4dfb-bd9b-de6da4d753c0
log_level: critical
event_category: detections
event_data:
{"connection_id":5455478,"detection_time":1742531349,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":63224,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6289aadc-9b32-4434-be7e-7f33b0420beb
log_level: critical
event_category: detections
event_data:
{"connection_id":5455482,"detection_time":1742531349,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":65021,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 11f7b400-9498-4597-842e-dfa9683f7e40
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531349,"event_type_id":6,"status":"blocked"}


event_id: 372a775e-04da-4069-9971-62f0697ee779
log_level: critical
event_category: detections
event_data:
{"connection_id":5455487,"detection_time":1742531349,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":9024,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8b9a69fb-17e8-44e6-a2a2-756ae6a9d600
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531350,"event_type_id":6,"status":"blocked"}


event_id: 6aa33ded-2b0c-402d-be2c-82038e17c2ea
log_level: critical
event_category: detections
event_data:
{"connection_id":5455498,"detection_time":1742531350,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":53172,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bb461539-3136-46ea-a805-bb1025e95644
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531351,"event_type_id":6,"status":"blocked"}


event_id: c4425fbf-f157-4a71-a15a-c812763481ff
log_level: critical
event_category: detections
event_data:
{"connection_id":5455494,"detection_time":1742531351,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":19105,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e1cca4bd-e1a5-47d0-b6e2-a80605e181be
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531351,"event_type_id":6,"status":"blocked"}


event_id: d48608ba-4ea8-4ba4-8ad1-fd878f9a2197
log_level: critical
event_category: detections
event_data:
{"connection_id":5455495,"detection_time":1742531351,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":58662,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7cb416da-505f-4186-8338-27a4b42dafd2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742531351,"event_type_id":6,"status":"blocked"}


event_id: 44debef3-8649-4852-80e3-0d797bf2ca59
log_level: critical
event_category: detections
event_data:
{"connection_id":5455512,"detection_time":1742531351,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":60392,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 71b79947-fdf1-4055-92c9-33e6499a4f60
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531351,"event_type_id":6,"status":"blocked"}


event_id: 7935f997-ae18-44f1-a9b3-eb585b6e594d
log_level: critical
event_category: detections
event_data:
{"connection_id":5455505,"detection_time":1742531351,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":57471,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fe94ac20-2737-40f8-9c54-5f508f65f2d2
log_level: critical
event_category: detections
event_data:
{"connection_id":5455504,"detection_time":1742531351,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":61914,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e5881fa7-5026-499a-b352-dac00eeb36c5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531352,"event_type_id":6,"status":"blocked"}


event_id: acf39556-f292-449b-bb1f-fea79a5a1741
log_level: critical
event_category: detections
event_data:
{"connection_id":5455517,"detection_time":1742531352,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":13028,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5797b0ed-c348-4262-ae75-85fc7e003c13
log_level: critical
event_category: detections
event_data:
{"connection_id":5455518,"detection_time":1742531353,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":43047,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ca0268d1-9620-4dbf-a936-53f683821740
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742531353,"event_type_id":6,"status":"blocked"}


event_id: e2c5d5fd-480f-4b00-beec-7e317ba8460f
log_level: critical
event_category: detections
event_data:
{"connection_id":5455519,"detection_time":1742531353,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":64432,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ade7b7ed-91df-4f96-9ca9-57f81b75420d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531354,"event_type_id":6,"status":"blocked"}


event_id: 407b6d69-13f6-4f04-87fc-64182bf8a6ca
log_level: critical
event_category: detections
event_data:
{"connection_id":5455522,"detection_time":1742531354,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":33482,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 60eefff6-6043-41bf-9f25-42b2d4e79c66
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531354,"event_type_id":6,"status":"blocked"}


event_id: ea2482aa-3198-4614-9840-326d3de7ac25
log_level: critical
event_category: detections
event_data:
{"connection_id":5455524,"detection_time":1742531354,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":27731,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f21326bd-9db6-4c35-af69-feb13c3d5820
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531356,"event_type_id":6,"status":"blocked"}


event_id: 78ae0136-291a-4246-aa81-11d71415c1d7
log_level: critical
event_category: detections
event_data:
{"connection_id":5455530,"detection_time":1742531356,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":37654,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 37a59c49-fff2-447f-a9df-605ee357fd7e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531356,"event_type_id":6,"status":"blocked"}


event_id: 3bbbd147-8f92-4d9c-a050-c343d7f24f4b
log_level: critical
event_category: detections
event_data:
{"connection_id":5455535,"detection_time":1742531356,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53202,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 072a4143-01ef-446e-96e8-29744d244350
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531356,"event_type_id":6,"status":"blocked"}


event_id: 3e4abc9a-f32c-4e0f-bb17-c2e53c5e6319
log_level: critical
event_category: detections
event_data:
{"connection_id":5455540,"detection_time":1742531356,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":11048,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6c020ffc-01f6-4bfe-bafb-05762d1b8f46
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531357,"event_type_id":6,"status":"blocked"}


event_id: 74afa9cb-58ef-4ba1-9175-be0124d6489a
log_level: critical
event_category: detections
event_data:
{"connection_id":5455554,"detection_time":1742531357,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":60770,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e18440af-9986-4eab-a45e-34073bb2cf91
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531357,"event_type_id":6,"status":"blocked"}


event_id: 05634b44-2370-4a26-8ef9-c523e7d3e99c
log_level: critical
event_category: detections
event_data:
{"connection_id":5455545,"detection_time":1742531357,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":36134,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 691eb304-d6fb-48b3-88d6-5b756f100443
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531357,"event_type_id":6,"status":"blocked"}


event_id: 4dd92cdf-8b47-46ce-bdea-486fe186a388
log_level: critical
event_category: detections
event_data:
{"connection_id":5455544,"detection_time":1742531357,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":56318,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 28a9bca5-5319-4de3-b55e-482448d39e86
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531357,"event_type_id":6,"status":"blocked"}


event_id: 463c65b8-43ee-43ae-bc4d-d9e9a7208093
log_level: critical
event_category: detections
event_data:
{"connection_id":5455547,"detection_time":1742531357,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":42507,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 831de3d7-4e48-45a6-8ccf-afe689b686e0
log_level: critical
event_category: detections
event_data:
{"connection_id":5455578,"detection_time":1742531359,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":42870,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 853af611-8fae-46ff-b766-6a5ae07722b6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531359,"event_type_id":6,"status":"blocked"}


event_id: da97d747-de56-45ee-a0aa-84ee47027a0b
log_level: critical
event_category: detections
event_data:
{"connection_id":5455568,"detection_time":1742531359,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":22084,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a6e80023-ba17-43c5-8252-fde619f25a8f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531360,"event_type_id":6,"status":"blocked"}


event_id: 29d3c3bb-2c32-4272-b823-f414e447b0ff
log_level: critical
event_category: detections
event_data:
{"connection_id":5455572,"detection_time":1742531360,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":23531,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7cef5c19-3cac-4307-aee3-137d01122e98
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531360,"event_type_id":6,"status":"blocked"}


event_id: 61cc4d1e-ae8a-458e-97ad-8136c3e40721
log_level: critical
event_category: detections
event_data:
{"connection_id":5455582,"detection_time":1742531360,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":49174,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cc22405b-6c13-45a8-9719-2ce6ff753ed8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531361,"event_type_id":6,"status":"blocked"}


event_id: 55634bbe-b73d-43f8-ba87-9f9bae209358
log_level: critical
event_category: detections
event_data:
{"connection_id":5455583,"detection_time":1742531361,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":60458,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ca19e30d-8ca8-40d4-a885-509f053b8384
log_level: critical
event_category: detections
event_data:
{"connection_id":5455584,"detection_time":1742531361,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":61554,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 79d90a84-fa7c-46cb-8270-69760cd04204
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531361,"event_type_id":6,"status":"blocked"}


event_id: b4484c00-f438-4a15-a052-8f354dfb9d33
log_level: critical
event_category: detections
event_data:
{"connection_id":5455592,"detection_time":1742531361,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":53636,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9cf02b66-dd9f-439b-b685-22e0107c9c96
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531363,"event_type_id":6,"status":"blocked"}


event_id: 5bdb6251-650c-4e37-9b4f-252692191e7d
log_level: critical
event_category: detections
event_data:
{"connection_id":5455618,"detection_time":1742531363,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":55353,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 49031139-bf98-46bb-b23f-069627846487
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742531363,"event_type_id":6,"status":"blocked"}


event_id: 2b342e88-6617-4e94-bda1-0f3d6a940e1b
log_level: critical
event_category: detections
event_data:
{"connection_id":5455628,"detection_time":1742531363,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":49452,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 45fc6900-d716-4eec-a584-4d5094269d77
log_level: critical
event_category: detections
event_data:
{"connection_id":5455622,"detection_time":1742531363,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":58218,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 97034f03-bb59-4448-a385-b254152f3214
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531363,"event_type_id":6,"status":"blocked"}


event_id: 6a53bcbd-617c-4500-832b-8218d48eca25
log_level: critical
event_category: detections
event_data:
{"connection_id":5455625,"detection_time":1742531363,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":2046,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e8273f3a-61d7-45bf-89bf-5e7b5b2cc95d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531364,"event_type_id":6,"status":"blocked"}


event_id: 13ab1033-3828-454f-8c74-dc66efc335c7
log_level: critical
event_category: detections
event_data:
{"connection_id":5455631,"detection_time":1742531364,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":5115,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2d948918-5af0-43cd-8378-951f78d0cb50
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531364,"event_type_id":6,"status":"blocked"}


event_id: 1526908d-eb6b-4b14-9456-ec7cd2aaf806
log_level: critical
event_category: detections
event_data:
{"connection_id":5455632,"detection_time":1742531364,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":39425,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: de887b50-be98-41cc-ac8f-76ec0ada9b56
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531365,"event_type_id":6,"status":"blocked"}


event_id: c9bfa022-3d97-4fb2-9a60-5091f2ed01a0
log_level: critical
event_category: detections
event_data:
{"connection_id":5455645,"detection_time":1742531365,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":55284,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: da9a3b25-a23c-45a2-972f-36b2e8379426
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531365,"event_type_id":6,"status":"blocked"}


event_id: d59d3395-7c97-4176-8eb7-65db2053ac6f
log_level: critical
event_category: detections
event_data:
{"connection_id":5455641,"detection_time":1742531365,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":44020,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9bf0db85-91c2-4e0b-ad4b-196e09197d30
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742531365,"event_type_id":6,"status":"blocked"}


event_id: ea74d095-9453-4ce8-90a7-5b31eca5e17f
log_level: critical
event_category: detections
event_data:
{"connection_id":5455648,"detection_time":1742531365,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":63335,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9eb2202e-44b5-4e22-96b8-ebb7387345db
log_level: critical
event_category: detections
event_data:
{"connection_id":5455650,"detection_time":1742531365,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":44310,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7e0f7445-a895-4e86-a581-71a1833b55cb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531367,"event_type_id":6,"status":"blocked"}


event_id: 851c939e-976d-45d7-8386-676119e1375b
log_level: critical
event_category: detections
event_data:
{"connection_id":5455637,"detection_time":1742531367,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":40627,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4ea52a8a-38e9-4971-a957-edf08bab07f3
log_level: critical
event_category: detections
event_data:
{"connection_id":5455640,"detection_time":1742531367,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":41737,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 46487cab-d31f-486f-a2b2-088b7da12930
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531368,"event_type_id":6,"status":"blocked"}


event_id: d72c1ae2-4fd0-48e0-ba0a-23d8a1b63d26
log_level: critical
event_category: detections
event_data:
{"connection_id":5455658,"detection_time":1742531368,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":47160,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f02abb00-6a9a-42fb-888e-6e45b5fa4391
log_level: critical
event_category: detections
event_data:
{"connection_id":5455660,"detection_time":1742531368,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":51549,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 69808563-cdd7-4287-b0e7-3837f2ecb118
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531368,"event_type_id":6,"status":"blocked"}


event_id: cab4e370-ac0f-4dcb-a8de-1f29141a1250
log_level: critical
event_category: detections
event_data:
{"connection_id":5455661,"detection_time":1742531368,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":49829,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5d6c671e-b640-475f-9a97-754755bcd687
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531368,"event_type_id":6,"status":"blocked"}


event_id: cce02401-02c2-47fa-afdc-1e4e4b7fc54e
log_level: critical
event_category: detections
event_data:
{"connection_id":5455666,"detection_time":1742531368,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":13937,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8e46c666-6461-45a3-b23b-34e5f5b2a169
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531369,"event_type_id":6,"status":"blocked"}


event_id: 671b8541-86ff-4fb4-b33a-23d281c9d2fc
log_level: critical
event_category: detections
event_data:
{"connection_id":5455675,"detection_time":1742531369,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":15821,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 78b8616a-c8e9-4783-a691-aee766c2f9e2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531369,"event_type_id":6,"status":"blocked"}


event_id: b7aecb53-7773-4700-89d8-3c444d25f60e
log_level: critical
event_category: detections
event_data:
{"connection_id":5455673,"detection_time":1742531369,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53013,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 361891d9-56f7-4b75-8f92-4ef1249c14d0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531369,"event_type_id":6,"status":"blocked"}


event_id: 10817fca-993b-4d83-96ed-dcc218650598
log_level: critical
event_category: detections
event_data:
{"connection_id":5455679,"detection_time":1742531369,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":60919,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 71c373db-8bfb-4b82-9489-7e70bed02afd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531369,"event_type_id":6,"status":"blocked"}


event_id: d50a1ab7-ce57-43e8-851e-598347751357
log_level: critical
event_category: detections
event_data:
{"connection_id":5455671,"detection_time":1742531369,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":53357,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ec011310-f575-48df-bb51-8058656a2d8a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531370,"event_type_id":6,"status":"blocked"}


event_id: cc85a895-a8cb-4056-aaef-7a8f725fa0c8
log_level: critical
event_category: detections
event_data:
{"connection_id":5455687,"detection_time":1742531370,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":21480,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 29f3ae4d-b586-40d3-ae3c-5eda7ea06b34
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531371,"event_type_id":6,"status":"blocked"}


event_id: 559be5f9-a67e-49dd-862b-1bf3f5ba5176
log_level: critical
event_category: detections
event_data:
{"connection_id":5455689,"detection_time":1742531371,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":63086,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 10d41f2b-22a1-4348-9373-034330dee914
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531372,"event_type_id":6,"status":"blocked"}


event_id: 0d2c8b9f-e11d-49b3-8680-a6d112717402
log_level: critical
event_category: detections
event_data:
{"connection_id":5455695,"detection_time":1742531372,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":57191,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: eda37722-8a63-4af4-90f6-237bf425b8e8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531373,"event_type_id":6,"status":"blocked"}


event_id: 73c36a19-7b87-4885-9cf6-af514741b4e8
log_level: critical
event_category: detections
event_data:
{"connection_id":5455701,"detection_time":1742531373,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":58942,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 82985c0c-8055-46fb-b15c-4fdd8b6f1b3d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531373,"event_type_id":6,"status":"blocked"}


event_id: a2c7625c-cec0-4570-b992-97ae99545283
log_level: critical
event_category: detections
event_data:
{"connection_id":5455702,"detection_time":1742531373,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":37306,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 90acce81-1a93-4f56-a602-1d4994a42598
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742531373,"event_type_id":6,"status":"blocked"}


event_id: 4caae81b-3306-45c8-b0b6-2b6d6e65ec7f
log_level: critical
event_category: detections
event_data:
{"connection_id":5455710,"detection_time":1742531373,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":49331,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 195a2f90-cbf0-4fa2-a0f3-099b1d66a385
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531374,"event_type_id":6,"status":"blocked"}


event_id: 8d7aa5f1-9484-4245-8774-c7d8c3667b86
log_level: critical
event_category: detections
event_data:
{"connection_id":5455707,"detection_time":1742531374,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":40036,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 54a15ca2-fa30-45fc-a349-2e875c10ad58
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531375,"event_type_id":6,"status":"blocked"}


event_id: 3f6004a1-f586-40c6-9fd6-837c957aa867
log_level: critical
event_category: detections
event_data:
{"connection_id":5455711,"detection_time":1742531375,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":52641,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 56379200-5e56-4809-be8d-4e3693e2da04
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531375,"event_type_id":6,"status":"blocked"}


event_id: b4035283-6427-45dd-85ce-750c77d04c76
log_level: critical
event_category: detections
event_data:
{"connection_id":5455712,"detection_time":1742531375,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":38054,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: aeeb1b12-dd39-4220-b1a7-60058afc51cf
log_level: critical
event_category: detections
event_data:
{"connection_id":5455714,"detection_time":1742531375,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":55575,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b76be08c-2a58-43c7-9426-b817ac2ba4b8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531376,"event_type_id":6,"status":"blocked"}


event_id: 08fe2b9c-ca6b-4008-be20-cc3c921e6fdf
log_level: critical
event_category: detections
event_data:
{"connection_id":5455716,"detection_time":1742531376,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":16332,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 03d5b084-e682-4170-9d64-911d1c150d2e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531376,"event_type_id":6,"status":"blocked"}


event_id: 082f37d4-a9ef-4328-a8b9-e272bc42c327
log_level: critical
event_category: detections
event_data:
{"connection_id":5455721,"detection_time":1742531376,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":48818,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4834fe8a-7f6b-4b81-a522-4e65be7a6f2e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531377,"event_type_id":6,"status":"blocked"}


event_id: 3c93c835-372c-4503-943a-5e7797297843
log_level: critical
event_category: detections
event_data:
{"connection_id":5455727,"detection_time":1742531377,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":55419,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 03de063f-3c27-4f85-bfbf-cc8ba15d922b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531377,"event_type_id":6,"status":"blocked"}


event_id: 4f6f3107-2769-4185-960a-623d75b0c005
log_level: critical
event_category: detections
event_data:
{"connection_id":5455724,"detection_time":1742531377,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":46788,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ad86555c-d166-4321-8b5b-1cc46c533237
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531377,"event_type_id":6,"status":"blocked"}


event_id: 3a196821-b09a-4193-a965-e501a71921c7
log_level: critical
event_category: detections
event_data:
{"connection_id":5455726,"detection_time":1742531377,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":53524,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 02f3fb22-10e1-4a98-a578-43131d6d1511
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531378,"event_type_id":6,"status":"blocked"}


event_id: e3dffc9b-3b83-4805-b430-ffc406a954fd
log_level: critical
event_category: detections
event_data:
{"connection_id":5455729,"detection_time":1742531378,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":25067,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0be7f2bc-a7d0-4811-89e3-bda5d5b92791
log_level: critical
event_category: detections
event_data:
{"connection_id":5455733,"detection_time":1742531378,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":26613,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: eac6d6ae-be97-4740-a312-5d98473cb8bd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531379,"event_type_id":6,"status":"blocked"}


event_id: 6e3c1058-aa7c-42d8-8abd-de6acb7daa03
log_level: critical
event_category: detections
event_data:
{"connection_id":5455737,"detection_time":1742531379,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":53820,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ad0f85d4-26af-486c-9a8d-e3c7fe144115
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531379,"event_type_id":6,"status":"blocked"}


event_id: e59c96ad-5bed-4b5b-b513-f36839b04411
log_level: critical
event_category: detections
event_data:
{"connection_id":5455734,"detection_time":1742531379,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":17017,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a38a2c3f-f86c-4da3-95c1-439f4fe8043f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742531380,"event_type_id":6,"status":"blocked"}


event_id: 94d3e00c-323f-4f77-b3fd-c084e1663884
log_level: critical
event_category: detections
event_data:
{"connection_id":5455746,"detection_time":1742531380,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":50022,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8a9e2976-72fe-4dd9-9622-db083335b5c7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531380,"event_type_id":6,"status":"blocked"}


event_id: eebe3607-c6d5-44ff-876c-aa0ae2e7285a
log_level: critical
event_category: detections
event_data:
{"connection_id":5455740,"detection_time":1742531380,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":63072,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 21b8b696-2f18-45d1-b9cd-6eba3c430c6b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531380,"event_type_id":6,"status":"blocked"}


event_id: fde0b4c8-d33c-4d00-9be8-d0ebde6cd29e
log_level: critical
event_category: detections
event_data:
{"connection_id":5455743,"detection_time":1742531380,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":63992,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c865a3bb-629f-43c8-bac1-2a62469f0d69
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531381,"event_type_id":6,"status":"blocked"}


event_id: 35ead872-916c-47a7-980d-a42bed0c8431
log_level: critical
event_category: detections
event_data:
{"connection_id":5455744,"detection_time":1742531381,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":49847,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e0459b2a-2f7b-4c92-8d66-62dbdd13086b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531381,"event_type_id":6,"status":"blocked"}


event_id: 33c4e7ef-79d0-4463-8b0e-bfadd978ddac
log_level: critical
event_category: detections
event_data:
{"connection_id":5455748,"detection_time":1742531381,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":37600,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f8056560-2daa-40fd-bf27-02a1739b9809
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531382,"event_type_id":6,"status":"blocked"}


event_id: 3fedac4d-7997-45b5-96da-479b447c7d44
log_level: critical
event_category: detections
event_data:
{"connection_id":5455749,"detection_time":1742531382,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":61432,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ff6aaf9a-af1e-4638-aee3-0bf538765b4d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531384,"event_type_id":6,"status":"blocked"}


event_id: 8da5a5ee-70b1-441a-bc10-883c9773e6fd
log_level: critical
event_category: detections
event_data:
{"connection_id":5455761,"detection_time":1742531384,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":13693,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 45c60475-0917-4e4a-bcd2-7e861dd843d1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531384,"event_type_id":6,"status":"blocked"}


event_id: 6c7f38f8-fe79-4db4-b5d4-d2103d1ca047
log_level: critical
event_category: detections
event_data:
{"connection_id":5455762,"detection_time":1742531384,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":8085,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 32d9d078-948f-4d11-926d-9d3ac35b5dc9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531384,"event_type_id":6,"status":"blocked"}


event_id: b93edb6c-99c3-45f7-9c07-6f364542814e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531384,"event_type_id":6,"status":"blocked"}


event_id: 9f89574d-5c4c-44f7-816f-76c077f265f8
log_level: critical
event_category: detections
event_data:
{"connection_id":5455763,"detection_time":1742531384,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53930,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: aba1f7da-db90-476c-b4d6-cedfcb09aa77
log_level: critical
event_category: detections
event_data:
{"connection_id":5455764,"detection_time":1742531384,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":22953,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6ba466e1-05be-4072-a985-2ee309f026a2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531385,"event_type_id":6,"status":"blocked"}


event_id: fbb60c2c-6011-4e30-aa93-6657ec42be6f
log_level: critical
event_category: detections
event_data:
{"connection_id":5455766,"detection_time":1742531385,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":55857,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fe3edb6e-bada-484d-8bbf-de5982b9e138
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531385,"event_type_id":6,"status":"blocked"}


event_id: 0ba0eec3-826f-4d79-b81f-0c9debeba68d
log_level: critical
event_category: detections
event_data:
{"connection_id":5455771,"detection_time":1742531385,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":17727,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5b0e6bad-275c-4563-825c-85b30beafa1e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531386,"event_type_id":6,"status":"blocked"}


event_id: 61f981df-acdd-4c29-81ae-70cbd7529d46
log_level: critical
event_category: detections
event_data:
{"connection_id":5455772,"detection_time":1742531386,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":26245,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ebf2f80e-9af0-4922-b038-384ae6470cec
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531386,"event_type_id":6,"status":"blocked"}


event_id: bdf58c1a-6cf8-4cdd-aa88-1279d0e56cc9
log_level: critical
event_category: detections
event_data:
{"connection_id":5455780,"detection_time":1742531386,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":55636,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ce28c384-34b4-4bc1-9b2d-53dee1a05f0b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531386,"event_type_id":6,"status":"blocked"}


event_id: e2ceb0dc-2dae-40d8-bf01-7805658a0159
log_level: critical
event_category: detections
event_data:
{"connection_id":5455781,"detection_time":1742531386,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":49238,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 28f3a96b-29b0-4506-ae95-d7a87ba6c5f4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531386,"event_type_id":6,"status":"blocked"}


event_id: 6a27706c-9e68-4e1d-88b8-4d38416944a2
log_level: critical
event_category: detections
event_data:
{"connection_id":5455782,"detection_time":1742531386,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":23002,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9c4c018a-4d8c-4f4d-8ad5-6beca8254dfa
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531387,"event_type_id":6,"status":"blocked"}


event_id: ab2e3b6d-ae11-4a2e-96f4-54e0bace6061
log_level: critical
event_category: detections
event_data:
{"connection_id":5455784,"detection_time":1742531387,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":16638,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 59f51fb5-1a6a-4a3c-a839-d4bf8cdc96fd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531387,"event_type_id":6,"status":"blocked"}


event_id: 5e4dfec7-ca47-49bd-aadd-4ded9dcecfdd
log_level: critical
event_category: detections
event_data:
{"connection_id":5455786,"detection_time":1742531387,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":52190,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b73b04b7-389d-4484-a11f-cc722dbfcb56
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"78.83.57.71","autoblock_timeout":25,"detection_time":1742531388,"event_type_id":6,"status":"blocked"}


event_id: 0aef67d0-f490-4d57-a26a-1de960577aa4
log_level: critical
event_category: detections
event_data:
{"connection_id":5455788,"detection_time":1742531388,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"78.83.57.71","remote_port":50409,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d594d1f3-f92c-4b06-b247-3694bf491ea6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531389,"event_type_id":6,"status":"blocked"}


event_id: 36f30d30-23e5-42e2-b3ea-ee28e8a2cafa
log_level: critical
event_category: detections
event_data:
{"connection_id":5455794,"detection_time":1742531389,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":2553,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b99f5a3a-a256-49e2-b25b-3dc7b49bb524
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531390,"event_type_id":6,"status":"blocked"}


event_id: 96dc8572-41fa-492d-b875-4c1a38601355
log_level: critical
event_category: detections
event_data:
{"connection_id":5455802,"detection_time":1742531390,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":56060,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3fc08bc7-3d12-48e2-b4c4-69e7d28a5f8a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531390,"event_type_id":6,"status":"blocked"}


event_id: 4181cf69-f708-4e1b-af83-6459a3017562
log_level: critical
event_category: detections
event_data:
{"connection_id":5455798,"detection_time":1742531390,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":3939,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: feed892d-d311-4685-915d-bedaf02d7f1a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531390,"event_type_id":6,"status":"blocked"}


event_id: cfdbf487-7d25-4d40-b46d-b9bc9b72b579
log_level: critical
event_category: detections
event_data:
{"connection_id":5455801,"detection_time":1742531390,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":29403,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f49dac64-c477-438d-bd9d-e6fe04d59829
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531390,"event_type_id":6,"status":"blocked"}


event_id: 0a40c94d-8415-461d-8995-55a9c8b446c5
log_level: critical
event_category: detections
event_data:
{"connection_id":5455792,"detection_time":1742531390,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":39519,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: abce42dd-f9f3-43ae-94d5-b11c2c50f729
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531391,"event_type_id":6,"status":"blocked"}


event_id: 26234290-6abd-4427-92c9-24d29213e9dd
log_level: critical
event_category: detections
event_data:
{"connection_id":5455808,"detection_time":1742531391,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":34067,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 063738a4-b512-440b-bfb6-54d6c921dfbe
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531391,"event_type_id":6,"status":"blocked"}


event_id: 32e5a2c1-053f-4ed7-8883-a29800aa9360
log_level: critical
event_category: detections
event_data:
{"connection_id":5455812,"detection_time":1742531391,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":62953,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c1de0a54-c438-48bb-9036-09d602326c65
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531392,"event_type_id":6,"status":"blocked"}


event_id: 06380f7a-45bc-4d44-9df7-aa0b70683688
log_level: critical
event_category: detections
event_data:
{"connection_id":5455809,"detection_time":1742531392,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":60101,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 922baf03-cef9-4b30-8a8c-453294f8e326
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531393,"event_type_id":6,"status":"blocked"}


event_id: 5ccd8ea2-3135-4916-a5fa-3fad2984a87c
log_level: critical
event_category: detections
event_data:
{"connection_id":5455816,"detection_time":1742531393,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":49953,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 227fa64e-eb86-4e99-a9d9-1a0f94c6bd30
log_level: critical
event_category: detections
event_data:
{"connection_id":5455813,"detection_time":1742531393,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":46859,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 758afad7-c0dc-4751-8dca-69ec4a4a8f2b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742531394,"event_type_id":6,"status":"blocked"}


event_id: 8227cabd-34b8-4121-a625-e7a8eacb10df
log_level: critical
event_category: detections
event_data:
{"connection_id":5455820,"detection_time":1742531394,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":52957,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1ef10e7f-21fb-49b6-914d-29ce68edaafa
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742531394,"event_type_id":6,"status":"blocked"}


event_id: af7b4836-e7e7-40ee-9889-f8705ae02938
log_level: critical
event_category: detections
event_data:
{"connection_id":5455818,"detection_time":1742531394,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":51865,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4bfadc8b-5abb-4afd-b357-65fe5995cc18
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531394,"event_type_id":6,"status":"blocked"}


event_id: ef3a2f25-d1d5-4727-9c1c-555aa0773ca6
log_level: critical
event_category: detections
event_data:
{"connection_id":5455817,"detection_time":1742531394,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":19835,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 710727b7-a9d4-424f-a142-f53be66f2640
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531395,"event_type_id":6,"status":"blocked"}


event_id: 2431adcf-bfa3-4cc7-981f-95638b0461ab
log_level: critical
event_category: detections
event_data:
{"connection_id":5455821,"detection_time":1742531395,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":61920,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3ffbd8d4-7f79-46a8-a758-df7ae6ec5d7c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531395,"event_type_id":6,"status":"blocked"}


event_id: 6b79f14f-8117-416e-84a1-2824f11ec6ae
log_level: critical
event_category: detections
event_data:
{"connection_id":5455823,"detection_time":1742531395,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":24276,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2fe2689e-2626-4540-8d60-af5e4d3a3824
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531396,"event_type_id":6,"status":"blocked"}


event_id: ba6b76e9-1002-4193-9cf3-9f7b48362a60
log_level: critical
event_category: detections
event_data:
{"connection_id":5455827,"detection_time":1742531396,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":51198,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6271fff9-f20e-43eb-b6f1-ee4cd73d5f64
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531397,"event_type_id":6,"status":"blocked"}


event_id: 132bf7bd-8cfa-4e31-9841-27c36abef784
log_level: critical
event_category: detections
event_data:
{"connection_id":5455828,"detection_time":1742531397,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":52427,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 60c68204-691b-4e0f-9561-f88aabd45ab0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531397,"event_type_id":6,"status":"blocked"}


event_id: 8137e26f-a11c-4233-a375-0bada7b94765
log_level: critical
event_category: detections
event_data:
{"connection_id":5455829,"detection_time":1742531397,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":52490,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b7e19517-3708-434a-ae03-2cc190058463
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531398,"event_type_id":6,"status":"blocked"}


event_id: 4961fc98-671a-40d2-898c-6086455ad135
log_level: critical
event_category: detections
event_data:
{"connection_id":5455838,"detection_time":1742531398,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":58564,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b3f5a45c-551f-4693-a831-488f7481c890
log_level: critical
event_category: detections
event_data:
{"connection_id":5455842,"detection_time":1742531398,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":60542,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 58798108-36cd-467b-8b4e-d75bcd19d40f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531398,"event_type_id":6,"status":"blocked"}


event_id: 10f2502c-0e37-4124-b4b5-fe27eae9f739
log_level: critical
event_category: detections
event_data:
{"connection_id":5455841,"detection_time":1742531398,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":62435,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 83107c9f-65e5-4b48-8f37-a5a4a8fc19d6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531399,"event_type_id":6,"status":"blocked"}


event_id: 6580aef7-4202-4c0d-bcc8-2ca9e9c401ee
log_level: critical
event_category: detections
event_data:
{"connection_id":5455843,"detection_time":1742531399,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":65119,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 81041e59-fdc5-4c67-942b-1d1b71cf7e9d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531400,"event_type_id":6,"status":"blocked"}


event_id: 0b5edc8d-603c-4cdc-a7e4-7b78cb83aa7a
log_level: critical
event_category: detections
event_data:
{"connection_id":5455847,"detection_time":1742531400,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":1909,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 409ff288-e59c-4437-9552-32aed09448ea
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531401,"event_type_id":6,"status":"blocked"}


event_id: 28a29c95-6b96-49c1-823d-da8b925c4de3
log_level: critical
event_category: detections
event_data:
{"connection_id":5455848,"detection_time":1742531401,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":43372,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6aa414dc-dc5e-4fea-81c3-7cbdf3c5c412
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531403,"event_type_id":6,"status":"blocked"}


event_id: 6d8adbfc-c329-4b4a-8547-0723725fa587
log_level: critical
event_category: detections
event_data:
{"connection_id":5455868,"detection_time":1742531403,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":17482,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ed74ed1d-e1c7-4680-835f-b1ff282ab040
log_level: critical
event_category: detections
event_data:
{"connection_id":5455875,"detection_time":1742531403,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":20300,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 09c9d568-34c0-49ee-9cc1-82536716fbca
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531404,"event_type_id":6,"status":"blocked"}


event_id: 8e61f258-b3ff-4051-8be2-c38619d35efb
log_level: critical
event_category: detections
event_data:
{"connection_id":5455880,"detection_time":1742531404,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":57373,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5ef95842-4269-42e8-8654-5071a79fca59
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531404,"event_type_id":6,"status":"blocked"}


event_id: 99b1c1c9-9a20-4d95-92c8-a7d49ff66fca
log_level: critical
event_category: detections
event_data:
{"connection_id":5455881,"detection_time":1742531404,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":57015,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0234044a-8f61-4323-98e9-17d3d0d348de
log_level: critical
event_category: detections
event_data:
{"connection_id":5455883,"detection_time":1742531404,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":59808,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2ba5bea5-1a57-4832-a1ce-75c15ddd2bb4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531404,"event_type_id":6,"status":"blocked"}


event_id: b31b509d-daa9-4ebd-b3df-c854f257ea74
log_level: critical
event_category: detections
event_data:
{"connection_id":5455884,"detection_time":1742531404,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":18417,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3d9ae6e1-d704-4c03-84be-4dc9972fa781
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531406,"event_type_id":6,"status":"blocked"}


event_id: 99c70299-209a-4c2e-8aeb-db5f431e58c6
log_level: critical
event_category: detections
event_data:
{"connection_id":5455891,"detection_time":1742531406,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":60858,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8d5fa2f4-6cd6-48a3-ba67-fbf2e634d5be
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531406,"event_type_id":6,"status":"blocked"}


event_id: 6d71dda7-1a6b-4fd0-845c-bd6e884d8305
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742531406,"event_type_id":6,"status":"blocked"}


event_id: 4647e1a9-c153-4f93-9535-9de4b359dc17
log_level: critical
event_category: detections
event_data:
{"connection_id":5455893,"detection_time":1742531406,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":29127,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a2a835b7-c7f0-4b58-9144-204155e52ef8
log_level: critical
event_category: detections
event_data:
{"connection_id":5455895,"detection_time":1742531406,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":59317,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4c61f4e8-1902-42ed-890c-d59a22f0ac07
log_level: critical
event_category: detections
event_data:
{"connection_id":5455894,"detection_time":1742531406,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":57023,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1e731f5d-9e09-4531-ad6b-258c5a2d3d31
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531407,"event_type_id":6,"status":"blocked"}


event_id: 3d10ab9d-0846-4a38-a0c6-c0c25bb8490f
log_level: critical
event_category: detections
event_data:
{"connection_id":5455897,"detection_time":1742531407,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":27060,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cf6bd638-b311-4082-bf37-c3e7b8eb8b59
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531407,"event_type_id":6,"status":"blocked"}


event_id: eb06fb64-c15e-49a1-aa7d-2eb0702850cc
log_level: critical
event_category: detections
event_data:
{"connection_id":5455896,"detection_time":1742531407,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":61766,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3aa904a8-dbf5-40ae-af2b-7b4ba59bf666
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531407,"event_type_id":6,"status":"blocked"}


event_id: 99d62a90-517b-4255-812a-5ab5c82c057e
log_level: critical
event_category: detections
event_data:
{"connection_id":5455899,"detection_time":1742531407,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":33847,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 44f3c9aa-15f8-44a7-94cc-4d8ff2c9423c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531408,"event_type_id":6,"status":"blocked"}


event_id: 42c8e1f1-bf13-43cb-871d-ad3d382f986f
log_level: critical
event_category: detections
event_data:
{"connection_id":5455901,"detection_time":1742531408,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":14316,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: baad4efe-8329-4386-a9d7-362795e41cbf
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742531408,"event_type_id":6,"status":"blocked"}


event_id: 5b3459e7-6ca6-4148-92d3-3be881d76b39
log_level: critical
event_category: detections
event_data:
{"connection_id":5455912,"detection_time":1742531408,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":55911,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b59ffd8d-06e4-4a2a-bcd7-240c1721e6cc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531408,"event_type_id":6,"status":"blocked"}


event_id: 67c3fb53-35eb-4584-a5b0-9496a93d9537
log_level: critical
event_category: detections
event_data:
{"connection_id":5455903,"detection_time":1742531408,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":5512,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c7c96698-86ca-4f74-b78c-f74dcb869591
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531408,"event_type_id":6,"status":"blocked"}


event_id: dee77841-01ef-4a6e-baaf-3beca037fbff
log_level: critical
event_category: detections
event_data:
{"connection_id":5455905,"detection_time":1742531408,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":64049,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fb740567-969e-465f-9c77-bcb13315fc11
log_level: critical
event_category: detections
event_data:
{"connection_id":5455906,"detection_time":1742531408,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":7092,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f11c5d5a-0941-4bdd-b0a7-db492db951f4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531409,"event_type_id":6,"status":"blocked"}


event_id: 3d5b5fbf-3de3-4df3-9e3d-76cd39e080b5
log_level: critical
event_category: detections
event_data:
{"connection_id":5455907,"detection_time":1742531409,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":49596,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 69a01341-f627-4eda-b2e5-fc160c55425b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531409,"event_type_id":6,"status":"blocked"}


event_id: 19fe350c-6568-46ef-b26d-a49145028982
log_level: critical
event_category: detections
event_data:
{"connection_id":5455910,"detection_time":1742531409,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":34238,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2e4359fe-ab64-4606-9a2a-ecda7b4f27d3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531410,"event_type_id":6,"status":"blocked"}


event_id: 6948e7f4-010d-442c-afd5-d8849590b0f0
log_level: critical
event_category: detections
event_data:
{"connection_id":5455921,"detection_time":1742531410,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":44464,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5960ae25-468c-4a47-aed3-6e69adfe7b44
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531410,"event_type_id":6,"status":"blocked"}


event_id: 50403d4d-d672-4395-8471-85acfd73fb3d
log_level: critical
event_category: detections
event_data:
{"connection_id":5455923,"detection_time":1742531410,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":59358,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cfd84034-ec4f-4348-a824-54f70f2e1d6b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531411,"event_type_id":6,"status":"blocked"}


event_id: bbc962aa-c613-4d0a-bd5f-b8386c773229
log_level: critical
event_category: detections
event_data:
{"connection_id":5455926,"detection_time":1742531411,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":61982,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e0de91e4-7fb3-4b02-804c-947ba7cb8212
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531411,"event_type_id":6,"status":"blocked"}


event_id: 0d5c01da-52c2-41a2-b4f5-0bc410742bbf
log_level: critical
event_category: detections
event_data:
{"connection_id":5455928,"detection_time":1742531411,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":17715,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a502501f-2834-43ff-bfd2-ec7f1a775e1a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531412,"event_type_id":6,"status":"blocked"}


event_id: 9bffdd02-f7cb-4959-9b88-a76beb13d15c
log_level: critical
event_category: detections
event_data:
{"connection_id":5455919,"detection_time":1742531412,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":23425,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e8d95ecd-bb76-492d-8f62-b37fb1c4785d
log_level: critical
event_category: detections
event_data:
{"connection_id":5455913,"detection_time":1742531412,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":21168,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 909b24cb-8d7b-4b69-8617-f599a8fdd6aa
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531413,"event_type_id":6,"status":"blocked"}


event_id: 8e9d6122-bf64-4837-a617-31a8c82021fc
log_level: critical
event_category: detections
event_data:
{"connection_id":5455920,"detection_time":1742531413,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":23971,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b18644f6-507f-4799-8267-0a6164b23fbd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531413,"event_type_id":6,"status":"blocked"}


event_id: b1e8bbb1-b975-4120-b296-b97cc1017727
log_level: critical
event_category: detections
event_data:
{"connection_id":5455934,"detection_time":1742531413,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":58327,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 44febdac-eab1-4922-ac88-6ba285795117
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531414,"event_type_id":6,"status":"blocked"}


event_id: c0492118-3d10-48bc-a0f8-8941b998dc7d
log_level: critical
event_category: detections
event_data:
{"connection_id":5455940,"detection_time":1742531414,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":52957,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: acd25815-68bd-4e1e-8bfa-3dcbf5b58d1d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742531414,"event_type_id":6,"status":"blocked"}


event_id: 7da7c5a0-f9eb-42e3-94d3-841b551d8476
log_level: critical
event_category: detections
event_data:
{"connection_id":5455946,"detection_time":1742531414,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":53808,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d42ff1fb-0f1e-436b-8719-e3c39be36e52
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531414,"event_type_id":6,"status":"blocked"}


event_id: cf8d85b5-ab02-4c56-9a33-3f565c7c652e
log_level: critical
event_category: detections
event_data:
{"connection_id":5455931,"detection_time":1742531414,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":30581,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8b57c22a-6a60-4c1e-a11f-4fa203dc16ec
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531415,"event_type_id":6,"status":"blocked"}


event_id: d83276b8-5ae7-41fe-ba92-fa2c51c3dadf
log_level: critical
event_category: detections
event_data:
{"connection_id":5455942,"detection_time":1742531415,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":62486,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: dd9cfe14-6eb3-4411-b4cf-09e6d785e9a0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742531415,"event_type_id":6,"status":"blocked"}


event_id: bd3cc9c1-36e6-4446-b38b-4a24989de8aa
log_level: critical
event_category: detections
event_data:
{"connection_id":5455957,"detection_time":1742531415,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":53973,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d3adaa88-6e01-46fa-a47f-4e8abc21ab01
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531416,"event_type_id":6,"status":"blocked"}


event_id: 387f1e3c-b2bb-48e0-94a4-cd090f5ac81b
log_level: critical
event_category: detections
event_data:
{"connection_id":5455948,"detection_time":1742531416,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53671,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6f023d56-16f0-4128-8070-86e5dbdd4571
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531416,"event_type_id":6,"status":"blocked"}


event_id: abbbf86f-2e19-4f3d-9b0c-36f5668993d6
log_level: critical
event_category: detections
event_data:
{"connection_id":5455951,"detection_time":1742531416,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":3420,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5f629423-bc3c-46a4-ad80-387a7dca8c84
log_level: critical
event_category: detections
event_data:
{"connection_id":5455950,"detection_time":1742531416,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":56104,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8bca1eb9-9bce-4e86-b4c8-baa5b346a14e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531416,"event_type_id":6,"status":"blocked"}


event_id: 8b1d469d-183f-4e3c-8e5d-fc05ed8b1f97
log_level: critical
event_category: detections
event_data:
{"connection_id":5455954,"detection_time":1742531416,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":35956,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 072f1ce3-b3e4-4767-970d-63e1a86c8edc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531416,"event_type_id":6,"status":"blocked"}


event_id: 526d3715-21c6-45a9-a588-f3475db07af9
log_level: critical
event_category: detections
event_data:
{"connection_id":5455956,"detection_time":1742531416,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":61874,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3fbd17d2-a3c5-41b2-b67c-e6b456cbec0a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531418,"event_type_id":6,"status":"blocked"}


event_id: 52eaa86f-100a-48f5-b0a8-0e188da330ca
log_level: critical
event_category: detections
event_data:
{"connection_id":5455960,"detection_time":1742531418,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":59673,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3ec54fff-3e33-45dc-bc13-3c15699b02a3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531419,"event_type_id":6,"status":"blocked"}


event_id: 3ba34256-e0d5-4256-87eb-63f3d466abbd
log_level: critical
event_category: detections
event_data:
{"connection_id":5455963,"detection_time":1742531419,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":60712,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a4bd506e-607f-4cd6-bb8d-ef1ea45f2759
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531419,"event_type_id":6,"status":"blocked"}


event_id: 1e7f29a1-2dad-4b79-bd9e-b4c2a3187827
log_level: critical
event_category: detections
event_data:
{"connection_id":5455965,"detection_time":1742531419,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":47374,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d4736c78-05a1-4b0e-a169-48c4a7982a94
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531420,"event_type_id":6,"status":"blocked"}


event_id: 20752d2f-4ad3-41e4-9727-8daf02f31601
log_level: critical
event_category: detections
event_data:
{"connection_id":5455966,"detection_time":1742531420,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":9717,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f54bf3b1-f60b-4542-8227-ec51291e7881
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531420,"event_type_id":6,"status":"blocked"}


event_id: 815ffbe3-6642-43e8-987b-3530c626a849
log_level: critical
event_category: detections
event_data:
{"connection_id":5455968,"detection_time":1742531420,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":48697,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2bef1937-30ab-4f88-9d91-cdacfebdeb44
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531420,"event_type_id":6,"status":"blocked"}


event_id: 6dd01608-6505-4397-8ab0-a06e03b1d458
log_level: critical
event_category: detections
event_data:
{"connection_id":5455969,"detection_time":1742531420,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":60734,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b72b6d9e-16bb-4d60-8218-6136c493de3a
log_level: critical
event_category: detections
event_data:
{"connection_id":5455971,"detection_time":1742531420,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":62906,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 98a1bcd9-3f48-4d52-b40d-88343506c956
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531421,"event_type_id":6,"status":"blocked"}


event_id: 16ede3fe-123b-4d28-a132-0cca005ff569
log_level: critical
event_category: detections
event_data:
{"connection_id":5455972,"detection_time":1742531421,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":14334,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 449c8d8a-9755-4067-b9d9-29335979fead
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742531422,"event_type_id":6,"status":"blocked"}


event_id: 5823ed2f-6b6f-4f65-839a-a72b282b9854
log_level: critical
event_category: detections
event_data:
{"connection_id":5455982,"detection_time":1742531422,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":58844,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ef324956-b639-4d9d-bf05-55d83c4a4624
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531422,"event_type_id":6,"status":"blocked"}


event_id: 32f0e758-0bed-4376-880c-43abf29e5cd3
log_level: critical
event_category: detections
event_data:
{"connection_id":5455986,"detection_time":1742531422,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":30199,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8fe2413f-0683-45e1-8e0e-cc4c22f579f2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531422,"event_type_id":6,"status":"blocked"}


event_id: f87369a7-8fe6-4cdf-82e6-fba84e239fad
log_level: critical
event_category: detections
event_data:
{"connection_id":5455978,"detection_time":1742531422,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":56321,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a4c72e97-f176-4214-aefa-e24352aeea80
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531423,"event_type_id":6,"status":"blocked"}


event_id: 15b04359-d7b8-40af-b60f-a0d2d3992f76
log_level: critical
event_category: detections
event_data:
{"connection_id":5455980,"detection_time":1742531423,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":27197,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1621761f-8b46-46a6-9b64-4e4558a25339
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531423,"event_type_id":6,"status":"blocked"}


event_id: 6297e801-6dff-4564-8ab5-b857f524eea9
log_level: critical
event_category: detections
event_data:
{"connection_id":5455981,"detection_time":1742531423,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":59255,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 74bab8d9-536e-4059-95aa-b468666b499a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531424,"event_type_id":6,"status":"blocked"}


event_id: 8d76bfde-96bc-4b2f-9a9a-d336820c4f8d
log_level: critical
event_category: detections
event_data:
{"connection_id":5455989,"detection_time":1742531424,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":64691,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 40a439db-2781-4f35-b959-3a6ca37e875e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531425,"event_type_id":6,"status":"blocked"}


event_id: 3e2490e7-5882-49ad-accd-c38a570ef634
log_level: critical
event_category: detections
event_data:
{"connection_id":5455990,"detection_time":1742531425,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":4519,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ceb7204b-4daa-461f-a5a3-f52d33ea4989
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742531427,"event_type_id":6,"status":"blocked"}


event_id: 68da390b-b108-4085-ad55-02c47f8f3118
log_level: critical
event_category: detections
event_data:
{"connection_id":5455997,"detection_time":1742531427,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":53371,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 02d170a7-ec4c-4b2b-a6c5-d45ff1674ee0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531428,"event_type_id":6,"status":"blocked"}


event_id: eeac612a-9cfa-4cad-bdaf-722fb29c1308
log_level: critical
event_category: detections
event_data:
{"connection_id":5455999,"detection_time":1742531428,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":38784,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8db7e90b-062d-49f7-ba3e-eb7452cbd24f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531428,"event_type_id":6,"status":"blocked"}


event_id: 7a2b8b8a-6d5e-4980-afc9-eda48034cd79
log_level: critical
event_category: detections
event_data:
{"connection_id":5456000,"detection_time":1742531428,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":51038,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 82da65e5-6be2-4f79-8f88-a479d87ef73a
log_level: critical
event_category: detections
event_data:
{"connection_id":5456003,"detection_time":1742531428,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":40793,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cd83b7f4-2c52-4baa-9c9e-b7991d961af4
log_level: critical
event_category: detections
event_data:
{"connection_id":5456002,"detection_time":1742531428,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53675,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a9b78182-5f61-41ea-9a2f-d0658c61d9b6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742531428,"event_type_id":6,"status":"blocked"}


event_id: c972bad0-2cce-4ccd-8141-75a265bdf0a8
log_level: critical
event_category: detections
event_data:
{"connection_id":5456004,"detection_time":1742531428,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":49963,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 22e9666b-5e09-45e7-8497-69da9ccc9a9e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531430,"event_type_id":6,"status":"blocked"}


event_id: 056e95a1-a462-4c07-9f86-5c02ac133842
log_level: critical
event_category: detections
event_data:
{"connection_id":5456011,"detection_time":1742531430,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":46777,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5c57d795-766f-4b58-913b-af0f6bd1c806
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531430,"event_type_id":6,"status":"blocked"}


event_id: c5814d59-3cd3-43ca-b5d6-1979dd6a9044
log_level: critical
event_category: detections
event_data:
{"connection_id":5456016,"detection_time":1742531430,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":60919,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c06949f1-afd1-490c-b6a5-299fa9240d45
log_level: critical
event_category: detections
event_data:
{"connection_id":5456014,"detection_time":1742531430,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":60251,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e30d0cce-8974-49d7-a353-39e00176d32b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531431,"event_type_id":6,"status":"blocked"}


event_id: ad6aaa5f-e53a-45e7-b096-c088960739e2
log_level: critical
event_category: detections
event_data:
{"connection_id":5456015,"detection_time":1742531431,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":23810,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ba44f96d-e8ef-4287-8c47-713013444540
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531432,"event_type_id":6,"status":"blocked"}


event_id: 5f73fc34-a14f-42d4-a375-7016b489c9ad
log_level: critical
event_category: detections
event_data:
{"connection_id":5456021,"detection_time":1742531432,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":58123,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 80ce0531-4bb6-4834-aa40-9491781fb088
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531432,"event_type_id":6,"status":"blocked"}


event_id: 0c5c15fe-1960-4a43-98f1-f6e7b0f6e916
log_level: critical
event_category: detections
event_data:
{"connection_id":5456025,"detection_time":1742531432,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":62278,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 773a1f4c-abfc-4fbe-83e1-b8ae343f4b31
log_level: critical
event_category: detections
event_data:
{"connection_id":5456024,"detection_time":1742531432,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":59464,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 423ab4e4-05e7-4455-b0e7-05d679dc201f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531433,"event_type_id":6,"status":"blocked"}


event_id: d31c4427-7d67-4e9f-a196-e8ffafa0d3f5
log_level: critical
event_category: detections
event_data:
{"connection_id":5456029,"detection_time":1742531433,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":65002,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2f9767dd-0b1a-445b-aaca-e89f196b9666
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531434,"event_type_id":6,"status":"blocked"}


event_id: 87d7d78d-bfc5-4022-bb81-99f8f3e693b1
log_level: critical
event_category: detections
event_data:
{"connection_id":5456034,"detection_time":1742531434,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":63239,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 521ab9b6-8a4e-4e2f-9f35-a6fa9e306fcc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531434,"event_type_id":6,"status":"blocked"}


event_id: 01d98e0a-651e-437a-85bf-4f8a9ce961b9
log_level: critical
event_category: detections
event_data:
{"connection_id":5456033,"detection_time":1742531434,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53017,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fcea2282-a727-4408-82be-735ca7df9502
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742531435,"event_type_id":6,"status":"blocked"}


event_id: 4aa6a7a6-6f44-4358-9d20-4603b86afdc4
log_level: critical
event_category: detections
event_data:
{"connection_id":5456041,"detection_time":1742531435,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":55398,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7719e1f9-4202-49fc-8df0-dd3718ecc164
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531435,"event_type_id":6,"status":"blocked"}


event_id: 9cbd9888-e9c4-49ed-a6bd-718fb72e8092
log_level: critical
event_category: detections
event_data:
{"connection_id":5456036,"detection_time":1742531435,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":56086,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8f918ba7-0721-45ed-b7e1-25c3410b7630
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531436,"event_type_id":6,"status":"blocked"}


event_id: 9f5f79f9-57e5-4933-9531-c69a78d21ffc
log_level: critical
event_category: detections
event_data:
{"connection_id":5456040,"detection_time":1742531436,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":10073,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2a921c83-6e26-4bfb-bce1-c8cbbf0f9bc5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531436,"event_type_id":6,"status":"blocked"}


event_id: aaa4731c-4c09-4d14-a7e9-d941d37b37a8
log_level: critical
event_category: detections
event_data:
{"connection_id":5456043,"detection_time":1742531436,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":41464,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 90032ecb-e46d-4d98-8bfb-976bff690d46
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742531436,"event_type_id":6,"status":"blocked"}


event_id: 17a8d36a-b2d9-4edd-888c-c4e6eb6a9bd6
log_level: critical
event_category: detections
event_data:
{"connection_id":5456050,"detection_time":1742531436,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":61801,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a9fcfc76-c49a-4d22-ad05-3b0207e0a510
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531437,"event_type_id":6,"status":"blocked"}


event_id: 9c024669-c496-430a-8e22-fa3128eecbe3
log_level: critical
event_category: detections
event_data:
{"connection_id":5456046,"detection_time":1742531437,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":7415,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9602ed79-40aa-4f37-a5d9-1a17b92f942e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531437,"event_type_id":6,"status":"blocked"}


event_id: 8ad2f24e-3c15-4fd2-9b37-9a2281887358
log_level: critical
event_category: detections
event_data:
{"connection_id":5456047,"detection_time":1742531437,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":14269,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f1536a2e-dac5-4991-a4f6-bcc90579b656
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531438,"event_type_id":6,"status":"blocked"}


event_id: 529a8338-f34a-409a-81f9-807320c97060
log_level: critical
event_category: detections
event_data:
{"connection_id":5456055,"detection_time":1742531438,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":50592,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0cbb0b86-ccfd-4d82-b0f1-6e9d1e7c3a9f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531438,"event_type_id":6,"status":"blocked"}


event_id: 766b647d-0e96-4eec-bca3-9611a71f4339
log_level: critical
event_category: detections
event_data:
{"connection_id":5456058,"detection_time":1742531438,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":14550,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: dbcbee52-b4f9-4abd-8d7c-f2bbb310d3e2
log_level: critical
event_category: detections
event_data:
{"connection_id":5456059,"detection_time":1742531438,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":52257,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 15fe0bdf-812d-4a44-8d8f-4e2b6f4b3d85
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531440,"event_type_id":6,"status":"blocked"}


event_id: 915ab82b-1f73-4641-9a5e-652a2b9d51a1
log_level: critical
event_category: detections
event_data:
{"connection_id":5456062,"detection_time":1742531440,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":24867,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 37fb5bc5-7ec8-46a3-8d96-4b8fd0828cdc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531440,"event_type_id":6,"status":"blocked"}


event_id: fde67dcb-b3eb-481d-a239-ffc2dc1cd416
log_level: critical
event_category: detections
event_data:
{"connection_id":5456061,"detection_time":1742531440,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":64445,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 38f3b187-3609-4d84-9f58-b430208bb091
log_level: critical
event_category: detections
event_data:
{"connection_id":5456066,"detection_time":1742531440,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":50583,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 56e4ae74-2dac-4889-83a7-3a3aedae95de
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531441,"event_type_id":6,"status":"blocked"}


event_id: fa34b3de-72a7-4040-b14d-f84398332785
log_level: critical
event_category: detections
event_data:
{"connection_id":5456084,"detection_time":1742531441,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":13136,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 96727d12-62b9-44fc-b76b-0cf7214cd9f7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531441,"event_type_id":6,"status":"blocked"}


event_id: 069fa566-f977-4d41-973f-e3aa8eed8640
log_level: critical
event_category: detections
event_data:
{"connection_id":5456086,"detection_time":1742531441,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":62621,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 23f3b7d1-e416-462e-8ecf-fecb8a648f2a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531442,"event_type_id":6,"status":"blocked"}


event_id: 0ca2e2ed-0601-49de-93c1-776a21f5980c
log_level: critical
event_category: detections
event_data:
{"connection_id":5456089,"detection_time":1742531442,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":15355,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7fe53d9f-f0de-4e5f-b2b9-0ce672b121a7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531442,"event_type_id":6,"status":"blocked"}


event_id: fde79a7e-42c1-4a75-9283-a985a6f0da92
log_level: critical
event_category: detections
event_data:
{"connection_id":5456091,"detection_time":1742531442,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":60374,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 944135e2-518e-43be-bef2-7f05e4f651b3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531443,"event_type_id":6,"status":"blocked"}


event_id: 12b3b45b-8c91-4952-8ab5-8b6a875360a7
log_level: critical
event_category: detections
event_data:
{"connection_id":5456094,"detection_time":1742531443,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":38380,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: feaff3d5-24e2-484f-bc0d-690e961f61ad
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531443,"event_type_id":6,"status":"blocked"}


event_id: a5b6f7a5-5202-44de-967f-fea7be6a591d
log_level: critical
event_category: detections
event_data:
{"connection_id":5456097,"detection_time":1742531443,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":61934,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: df834ce2-de37-4eda-8245-89dbc8bd522d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531444,"event_type_id":6,"status":"blocked"}


event_id: 5a0fb6f5-a946-4ad6-8c65-118a2314233f
log_level: critical
event_category: detections
event_data:
{"connection_id":5456098,"detection_time":1742531444,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":33202,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 14d97452-cdef-40bb-b2ce-d51cfc498f2f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531444,"event_type_id":6,"status":"blocked"}


event_id: 62d4163d-f5ad-4764-afe1-f61c1ea7e658
log_level: critical
event_category: detections
event_data:
{"connection_id":5456099,"detection_time":1742531444,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":54607,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 88af9e17-0b29-4115-9591-ea19d150403d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531444,"event_type_id":6,"status":"blocked"}


event_id: 1e973900-0609-40a6-8976-8e92d4d4adac
log_level: critical
event_category: detections
event_data:
{"connection_id":5456100,"detection_time":1742531444,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":42625,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 88f0c15f-02c2-4948-a9c9-91124019cbe3
log_level: critical
event_category: detections
event_data:
{"connection_id":5456101,"detection_time":1742531444,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":56744,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 579f90c5-eb0f-42d5-bd3c-d19c7d6ea2a5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742531446,"event_type_id":6,"status":"blocked"}


event_id: 51b06527-9d06-44c3-9cb5-537332a1ab5d
log_level: critical
event_category: detections
event_data:
{"connection_id":5456106,"detection_time":1742531446,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":51695,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7044d334-1931-4c01-8024-680a5e118abc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531446,"event_type_id":6,"status":"blocked"}


event_id: 766f7b99-cd6f-4a0c-84c6-e0f3f0cfb924
log_level: critical
event_category: detections
event_data:
{"connection_id":5456107,"detection_time":1742531446,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":48287,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 57eead34-bc0c-4f15-ae28-aa8e8879b144
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531446,"event_type_id":6,"status":"blocked"}


event_id: bcc45497-2a7e-47ba-8f1b-2103afe9f589
log_level: critical
event_category: detections
event_data:
{"connection_id":5456109,"detection_time":1742531446,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":42271,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 851f75c9-c492-4101-981d-8767c12954c1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531446,"event_type_id":6,"status":"blocked"}


event_id: d203ceda-c3ab-4265-98a0-b35c6848ea19
log_level: critical
event_category: detections
event_data:
{"connection_id":5456108,"detection_time":1742531446,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":49946,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e3e75be2-3474-4007-8b54-1969aa95c122
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531446,"event_type_id":6,"status":"blocked"}


event_id: 749b4c20-c0c0-41a7-8ed8-e9ba9d63d9fd
log_level: critical
event_category: detections
event_data:
{"connection_id":5456110,"detection_time":1742531446,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":30610,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 446b40cb-3eff-469b-a202-3f25dba12cc2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531446,"event_type_id":6,"status":"blocked"}


event_id: d587cfde-b47c-4558-b68d-0793a647be77
log_level: critical
event_category: detections
event_data:
{"connection_id":5456111,"detection_time":1742531446,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":16541,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ef8ba685-5e3a-4c00-b1e4-2c02850aee3f
log_level: critical
event_category: detections
event_data:
{"connection_id":5456114,"detection_time":1742531446,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":61769,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 62a35942-5d26-4cd8-b941-7475533a776d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531447,"event_type_id":6,"status":"blocked"}


event_id: 290d3861-b892-4c5c-b8bc-4d4e692fd08a
log_level: critical
event_category: detections
event_data:
{"connection_id":5456115,"detection_time":1742531447,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53200,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 805a3542-7766-4abc-9c48-8106cb81eec4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531449,"event_type_id":6,"status":"blocked"}


event_id: c4049fe5-be42-4d5b-9ce1-0439b9aa49ff
log_level: critical
event_category: detections
event_data:
{"connection_id":5456127,"detection_time":1742531449,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":54648,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e79e93a2-d217-41e5-9405-7fb445326fc6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531450,"event_type_id":6,"status":"blocked"}


event_id: 5287f535-b586-4a30-a4fb-eac3edd4ce18
log_level: critical
event_category: detections
event_data:
{"connection_id":5456128,"detection_time":1742531450,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":27787,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c790473c-682b-410d-ba42-c2382fded6ab
log_level: critical
event_category: detections
event_data:
{"connection_id":5456130,"detection_time":1742531450,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":29125,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c562220f-41e9-444a-a9b2-9f6ae21376d0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742531450,"event_type_id":6,"status":"blocked"}


event_id: 29b1ac79-f00b-4994-b6cd-899ad0211bc7
log_level: critical
event_category: detections
event_data:
{"connection_id":5456137,"detection_time":1742531450,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":64724,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a19fffd9-3bb3-4801-ad4f-70e0fd98d65c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531451,"event_type_id":6,"status":"blocked"}


event_id: 10c376bf-5bb8-4e52-a480-44f897e33d3e
log_level: critical
event_category: detections
event_data:
{"connection_id":5456133,"detection_time":1742531451,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":59192,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6c7a029c-dab3-4497-a985-774e9151416c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531451,"event_type_id":6,"status":"blocked"}


event_id: fb5f8203-685a-4324-b18d-ddbda098d4d3
log_level: critical
event_category: detections
event_data:
{"connection_id":5456141,"detection_time":1742531451,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":63541,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 45f05b52-ba9c-45ac-8b1c-02b2b35da9a8
log_level: critical
event_category: detections
event_data:
{"connection_id":5456135,"detection_time":1742531451,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":61137,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 29da26b1-d70c-4b38-80d0-5513ade835eb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531452,"event_type_id":6,"status":"blocked"}


event_id: ae5c0bd8-0b99-4638-80bf-2b0240345b8b
log_level: critical
event_category: detections
event_data:
{"connection_id":5456147,"detection_time":1742531452,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":10356,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a0b2d0cf-3ff7-4f8a-8327-d3bdff39f0ed
log_level: critical
event_category: detections
event_data:
{"connection_id":5456142,"detection_time":1742531452,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":7348,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 51ec25a4-8f65-404d-9af9-320419b41871
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531454,"event_type_id":6,"status":"blocked"}


event_id: 67c9c456-1c86-4bf9-bba7-d8556fbfe94e
log_level: critical
event_category: detections
event_data:
{"connection_id":5456140,"detection_time":1742531454,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":43039,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 08a806aa-96bc-494a-9f46-b44d6579ce0a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531454,"event_type_id":6,"status":"blocked"}


event_id: cd4800c4-f11f-4bc8-98f7-ca429409266f
log_level: critical
event_category: detections
event_data:
{"connection_id":5456152,"detection_time":1742531454,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":44630,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e114c64e-18f8-48cc-894b-7f5c5f575848
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531454,"event_type_id":6,"status":"blocked"}


event_id: b09e9383-4a91-4040-9677-33806aca04fb
log_level: critical
event_category: detections
event_data:
{"connection_id":5456153,"detection_time":1742531454,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":60399,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 42e31c25-1268-48da-803d-b04a05e504f0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742531455,"event_type_id":6,"status":"blocked"}


event_id: 8fa2dc04-15b6-4e87-ac32-2b35fd6c5038
log_level: critical
event_category: detections
event_data:
{"connection_id":5456164,"detection_time":1742531455,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":56724,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ada14f15-89a8-448a-8d07-f2f6f78f4d4a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531455,"event_type_id":6,"status":"blocked"}


event_id: d05c438f-fda9-434b-bb4b-cd9606462aa6
log_level: critical
event_category: detections
event_data:
{"connection_id":5456160,"detection_time":1742531455,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":49252,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 631d6f82-325b-4f50-94f6-1aa43ad8b7d5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531456,"event_type_id":6,"status":"blocked"}


event_id: d0637d74-c5ec-4d28-b028-98c6eb9bb864
log_level: critical
event_category: detections
event_data:
{"connection_id":5456162,"detection_time":1742531456,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":51430,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 45605bf5-1ee5-4574-94fa-8bf70e58d7fb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531456,"event_type_id":6,"status":"blocked"}


event_id: fb9816a6-82e4-4a31-bf6d-c5bfe8525dfa
log_level: critical
event_category: detections
event_data:
{"connection_id":5456150,"detection_time":1742531456,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":50189,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: dd783c30-0e17-4533-a104-32bb1e794d79
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531456,"event_type_id":6,"status":"blocked"}


event_id: e4a4ee71-b60a-4d1c-9946-cae484b542d2
log_level: critical
event_category: detections
event_data:
{"connection_id":5456163,"detection_time":1742531456,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":62899,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d133011c-d64f-4245-8c98-b22a5cca9d8a
log_level: critical
event_category: detections
event_data:
{"connection_id":5456165,"detection_time":1742531456,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53609,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4d22cb54-0b55-4af6-a79a-4ae25651e4e1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531457,"event_type_id":6,"status":"blocked"}


event_id: f4010219-2af2-42be-8b01-7dcfff976e00
log_level: critical
event_category: detections
event_data:
{"connection_id":5456174,"detection_time":1742531457,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":19145,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7ccfc565-55ab-43c0-9fce-3861e98b2b90
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531458,"event_type_id":6,"status":"blocked"}


event_id: cc2e146c-2bb1-439d-ac06-9747bf3e5a95
log_level: critical
event_category: detections
event_data:
{"connection_id":5456178,"detection_time":1742531458,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":21076,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 36d17df7-50cc-42af-a717-fa215e1d1d15
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531458,"event_type_id":6,"status":"blocked"}


event_id: 6846c296-b501-43e4-bf86-fa8f9440019c
log_level: critical
event_category: detections
event_data:
{"connection_id":5456179,"detection_time":1742531458,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":63306,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ee20906e-cf73-4ea7-a2eb-173794e7ceff
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531459,"event_type_id":6,"status":"blocked"}


event_id: 27a98a64-f104-4fbe-8022-dabff285e7fd
log_level: critical
event_category: detections
event_data:
{"connection_id":5456182,"detection_time":1742531459,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":50003,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c545d677-4d93-43d5-bee2-537257f9aea3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531460,"event_type_id":6,"status":"blocked"}


event_id: 27ed744e-1c82-4fd9-bed7-f306f680cdd3
log_level: critical
event_category: detections
event_data:
{"connection_id":5456186,"detection_time":1742531460,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":27255,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: caeb674e-64ce-44fe-8639-fa1a5773e939
log_level: critical
event_category: detections
event_data:
{"connection_id":5456193,"detection_time":1742531460,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":16109,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8355adbd-2f5d-4f2a-aef5-c9f929646793
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531460,"event_type_id":6,"status":"blocked"}


event_id: f0cbcf28-48dc-472d-a21e-33e14316c076
log_level: critical
event_category: detections
event_data:
{"connection_id":5456187,"detection_time":1742531460,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":58376,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 73e3c5b1-2b5d-4108-9218-8ea711bd5203
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531461,"event_type_id":6,"status":"blocked"}


event_id: adf99486-8732-4eb1-8718-0a1e83e15664
log_level: critical
event_category: detections
event_data:
{"connection_id":5456190,"detection_time":1742531461,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":4014,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 69ec5248-1cca-4838-8b9b-33461f9c4dab
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531462,"event_type_id":6,"status":"blocked"}


event_id: 84fb632d-e3c1-4089-b070-b4c6ce1964fc
log_level: critical
event_category: detections
event_data:
{"connection_id":5456197,"detection_time":1742531462,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":42752,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5a472902-66ed-43cb-9e31-2233797dea4d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531462,"event_type_id":6,"status":"blocked"}


event_id: d714c642-b133-42b7-afdb-8a79e913e5ef
log_level: critical
event_category: detections
event_data:
{"connection_id":5456195,"detection_time":1742531462,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":63362,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8b3945f9-6039-4d48-922a-575e6d6cf9eb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531463,"event_type_id":6,"status":"blocked"}


event_id: ccf066f9-df48-42e6-b349-79ce20ac408b
log_level: critical
event_category: detections
event_data:
{"connection_id":5456201,"detection_time":1742531463,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":45259,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d0d00872-4f86-4c39-8097-4e6d5dfea368
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531463,"event_type_id":6,"status":"blocked"}


event_id: 8da1d911-0d82-4207-8a9b-189134701a7d
log_level: critical
event_category: detections
event_data:
{"connection_id":5456217,"detection_time":1742531463,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":60840,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 02d5da1f-631b-4160-9706-6b3e16b6e037
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531463,"event_type_id":6,"status":"blocked"}


event_id: 5903ed08-fd04-4261-902b-a70d1485c91e
log_level: critical
event_category: detections
event_data:
{"connection_id":5456203,"detection_time":1742531463,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":1822,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9eda44b7-b6b4-481e-9894-cfccbeb56d1a
log_level: critical
event_category: detections
event_data:
{"connection_id":5456210,"detection_time":1742531463,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":58108,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e8e1dac9-7343-45c4-a321-6c390f7f271c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531464,"event_type_id":6,"status":"blocked"}


event_id: 660ab095-8605-49cb-b04b-7bed063c4597
log_level: critical
event_category: detections
event_data:
{"connection_id":5456218,"detection_time":1742531464,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":43726,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4e0ccfa0-4665-40da-8156-8e9f1b846265
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742531465,"event_type_id":6,"status":"blocked"}


event_id: a58c0be6-3c54-43a1-b70c-5991a0c96126
log_level: critical
event_category: detections
event_data:
{"connection_id":5456224,"detection_time":1742531465,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":51431,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: df3a752e-940d-49fb-9bb7-aec6c65b3a92
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531465,"event_type_id":6,"status":"blocked"}


event_id: 600350e4-47a4-4062-ae8f-c02745587858
log_level: critical
event_category: detections
event_data:
{"connection_id":5456222,"detection_time":1742531465,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":55112,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c9e5aeb0-0d3a-4cd3-a987-c49a24980cd0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531466,"event_type_id":6,"status":"blocked"}


event_id: 664bcb77-0c8a-456b-8d6d-bfc848c23569
log_level: critical
event_category: detections
event_data:
{"connection_id":5456225,"detection_time":1742531466,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":21852,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fe233d64-1409-409a-a0a9-0bacffa7a35d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531466,"event_type_id":6,"status":"blocked"}


event_id: fcbf44f5-693b-48b8-ac4c-a6d683aeb19c
log_level: critical
event_category: detections
event_data:
{"connection_id":5456227,"detection_time":1742531466,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":52002,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a529e09b-e9a1-4933-8153-689601a56994
log_level: critical
event_category: detections
event_data:
{"connection_id":5456233,"detection_time":1742531466,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":12419,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c0f69dd9-3f8b-4089-b24c-45f84297662a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531466,"event_type_id":6,"status":"blocked"}


event_id: 293fbf89-68d8-4fc1-9f9f-c763cfbc9023
log_level: critical
event_category: detections
event_data:
{"connection_id":5456230,"detection_time":1742531466,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":59272,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fd5fc2db-c9cd-41e7-a41a-e67a7e89ec4d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531466,"event_type_id":6,"status":"blocked"}


event_id: 50194d3a-edd5-4c1f-8f01-d3e4575c7d9c
log_level: critical
event_category: detections
event_data:
{"connection_id":5456228,"detection_time":1742531466,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":60714,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 53455c98-7954-4d72-a658-c9d328670732
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531468,"event_type_id":6,"status":"blocked"}


event_id: a3dd8697-2bf5-4eac-bd4a-277ed8fa62bd
log_level: critical
event_category: detections
event_data:
{"connection_id":5456234,"detection_time":1742531468,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":65106,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 457086d7-fd83-4528-8762-edf3560007f9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531468,"event_type_id":6,"status":"blocked"}


event_id: b0daf28c-fd38-4368-8cc1-a60af51ce7f1
log_level: critical
event_category: detections
event_data:
{"connection_id":5456236,"detection_time":1742531468,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":30722,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7d253227-8599-443c-bf18-39862a6c7941
log_level: critical
event_category: detections
event_data:
{"connection_id":5456235,"detection_time":1742531468,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":50333,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 91ed1575-df5f-43d7-b365-4da199a2d2ab
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531468,"event_type_id":6,"status":"blocked"}


event_id: 2a00335a-0321-4fe9-b320-d585b7560d9b
log_level: critical
event_category: detections
event_data:
{"connection_id":5456238,"detection_time":1742531468,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":59331,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7d74dc23-5c2c-4c4b-b216-4d54005663f2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531468,"event_type_id":6,"status":"blocked"}


event_id: 12ad897c-d305-48ae-b478-2eb326740ed0
log_level: critical
event_category: detections
event_data:
{"connection_id":5456240,"detection_time":1742531468,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":63369,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bce1c92c-d78c-4442-911e-e46cbb354de0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531469,"event_type_id":6,"status":"blocked"}


event_id: 76b2e26f-dd49-4430-bc66-08668af3ab23
log_level: critical
event_category: detections
event_data:
{"connection_id":5456241,"detection_time":1742531469,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":32718,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 584e7765-9b38-4890-b5be-08b34e5180f5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531469,"event_type_id":6,"status":"blocked"}


event_id: 7ea15f90-7e21-4f49-9eb5-8c1fe88afea7
log_level: critical
event_category: detections
event_data:
{"connection_id":5456244,"detection_time":1742531469,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":5007,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9a1b1ed9-c113-4dff-be9d-0f46bb4c4d6c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531470,"event_type_id":6,"status":"blocked"}


event_id: db65e705-4a18-47f2-a143-8deef2d46331
log_level: critical
event_category: detections
event_data:
{"connection_id":5456249,"detection_time":1742531470,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":59566,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4b733b68-ff7b-4221-bdc6-b3f736c6f45e
log_level: critical
event_category: detections
event_data:
{"connection_id":5456254,"detection_time":1742531470,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":63029,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8f50a027-f330-4f6a-96a6-75a1172392a6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531471,"event_type_id":6,"status":"blocked"}


event_id: 341c8b55-d03e-44d2-9114-9abd71042039
log_level: critical
event_category: detections
event_data:
{"connection_id":5456261,"detection_time":1742531471,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":43013,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a3313eef-0cf5-40f0-9e9d-815e7e4cba36
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531473,"event_type_id":6,"status":"blocked"}


event_id: d43fabc7-2c3e-4e38-916c-ba2dd4073e5e
log_level: critical
event_category: detections
event_data:
{"connection_id":5456266,"detection_time":1742531473,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":18670,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f8109e15-9f9a-4c53-9012-dc176c81356a
log_level: critical
event_category: detections
event_data:
{"connection_id":5456272,"detection_time":1742531473,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":11121,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 700acf66-42fb-4dff-b4db-3242255246ae
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531473,"event_type_id":6,"status":"blocked"}


event_id: d5789de2-91b6-4507-990f-596f88f4e11e
log_level: critical
event_category: detections
event_data:
{"connection_id":5456268,"detection_time":1742531473,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":22817,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 41108e1f-f70e-44be-88be-cc5c6512a5c9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531473,"event_type_id":6,"status":"blocked"}


event_id: 1c8047f4-e098-405a-b044-43f86621f8d4
log_level: critical
event_category: detections
event_data:
{"connection_id":5456269,"detection_time":1742531473,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":13560,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1cdd0b17-3b12-4470-b69a-d0d6e7d736d5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531474,"event_type_id":6,"status":"blocked"}


event_id: 4d6ec248-b2f4-469c-bfff-966326366d8f
log_level: critical
event_category: detections
event_data:
{"connection_id":5456270,"detection_time":1742531474,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":22816,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: aa1f6f0d-0936-4f47-acd2-1266cbad5a69
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531475,"event_type_id":6,"status":"blocked"}


event_id: b45af216-1006-4c29-a5d6-3ec670ef9d5a
log_level: critical
event_category: detections
event_data:
{"connection_id":5456279,"detection_time":1742531475,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":28695,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fcac28d0-93a7-4ee5-9445-dcf488469c96
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531475,"event_type_id":6,"status":"blocked"}


event_id: 3816ec99-326a-4c6f-8fa0-03db49d4218c
log_level: critical
event_category: detections
event_data:
{"connection_id":5456287,"detection_time":1742531475,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":57724,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 744105ea-ba6f-44cf-a8cd-454061bf683a
log_level: critical
event_category: detections
event_data:
{"connection_id":5456281,"detection_time":1742531475,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":54946,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d88d8ad9-6002-438c-bfc7-26eb96d871a1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531475,"event_type_id":6,"status":"blocked"}


event_id: 20b549b3-256a-42ea-ac23-657603b8dde0
log_level: critical
event_category: detections
event_data:
{"connection_id":5456283,"detection_time":1742531475,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":28701,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b6f385d7-86a0-4a7d-b7c9-2cdcef5ecae1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742531476,"event_type_id":6,"status":"blocked"}


event_id: 0078d3a2-e295-4d67-89c2-6734642856d4
log_level: critical
event_category: detections
event_data:
{"connection_id":5456290,"detection_time":1742531476,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":57743,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e23e99a7-5559-49bd-ae46-e99c10499777
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531476,"event_type_id":6,"status":"blocked"}


event_id: b16dba7e-ab1b-430f-91fd-bbfd40abd07a
log_level: critical
event_category: detections
event_data:
{"connection_id":5456288,"detection_time":1742531476,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":22639,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9ecda54d-3bda-4906-8eb9-e9888a31aff0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531476,"event_type_id":6,"status":"blocked"}


event_id: e2eeb8a6-71dd-4025-85b0-1a6109ec102c
log_level: critical
event_category: detections
event_data:
{"connection_id":5456289,"detection_time":1742531476,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":61277,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f8bba5b3-7c3d-406e-a301-e54ab7173247
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742531479,"event_type_id":6,"status":"blocked"}


event_id: 03d98a51-cd91-4c2d-b53b-fff2cb885451
log_level: critical
event_category: detections
event_data:
{"connection_id":5456322,"detection_time":1742531479,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":54365,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6b9b1701-133e-4aaa-9d42-95bd9129f587
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531479,"event_type_id":6,"status":"blocked"}


event_id: 6a216e47-43ce-4671-8410-fbc9fad3fcf0
log_level: critical
event_category: detections
event_data:
{"connection_id":5456299,"detection_time":1742531479,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":61285,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2c532434-f9c8-4429-bb28-2a21be94a5c6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531479,"event_type_id":6,"status":"blocked"}


event_id: f765f495-fd95-40ee-a159-a89b72008353
log_level: critical
event_category: detections
event_data:
{"connection_id":5456308,"detection_time":1742531479,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":35032,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: faf535d8-2714-4b75-a15d-45b1c174cd79
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531480,"event_type_id":6,"status":"blocked"}


event_id: b286d673-0c1e-4bc1-9c50-b713cbaeb164
log_level: critical
event_category: detections
event_data:
{"connection_id":5456317,"detection_time":1742531480,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":8134,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b6b771ea-371a-4b30-8f05-2d98696cee3c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531480,"event_type_id":6,"status":"blocked"}


event_id: 900d5daf-b75c-473c-9175-6631bfdbdfd6
log_level: critical
event_category: detections
event_data:
{"connection_id":5456320,"detection_time":1742531480,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":61907,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 21c9be03-f3f0-4e91-b411-11dd1f9beb33
log_level: critical
event_category: detections
event_data:
{"connection_id":5456325,"detection_time":1742531480,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":9645,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a40557b0-9870-4500-864b-23157e1775ac
log_level: critical
event_category: detections
event_data:
{"connection_id":5456326,"detection_time":1742531480,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":63722,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 22629e7a-2b6a-4841-9fb7-d013bbddea6a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531480,"event_type_id":6,"status":"blocked"}


event_id: 3a4da71e-c156-429e-b39d-b827291bf26a
log_level: critical
event_category: detections
event_data:
{"connection_id":5456327,"detection_time":1742531480,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":39251,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 45f13557-7954-4417-a7f2-755e8b3dd232
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531481,"event_type_id":6,"status":"blocked"}


event_id: d3325913-9a07-4ff3-9c6d-f42dd4e50787
log_level: critical
event_category: detections
event_data:
{"connection_id":5456328,"detection_time":1742531481,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":63990,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c6692be8-28e8-41ed-9ff1-9996275f9dd0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531482,"event_type_id":6,"status":"blocked"}


event_id: 1b4b252b-80ff-48ff-a948-87882be2ba80
log_level: critical
event_category: detections
event_data:
{"connection_id":5456330,"detection_time":1742531482,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":52160,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 83ff8607-4580-4dcb-a619-fe9bce98b2f5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531482,"event_type_id":6,"status":"blocked"}


event_id: 39b3cb49-f318-449d-87ec-abfff4394909
log_level: critical
event_category: detections
event_data:
{"connection_id":5456331,"detection_time":1742531482,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":56807,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 988eb277-9d29-4563-95e4-c93222576fed
log_level: critical
event_category: detections
event_data:
{"connection_id":5456337,"detection_time":1742531482,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":55022,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 22b6a92c-569d-4297-8575-7bc639dc89fa
log_level: critical
event_category: detections
event_data:
{"connection_id":5456335,"detection_time":1742531482,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":59935,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3072f601-5e74-49e5-b221-00846e85365b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531484,"event_type_id":6,"status":"blocked"}


event_id: 6fdc3ffd-259b-4b5e-8388-07104d055703
log_level: critical
event_category: detections
event_data:
{"connection_id":5456341,"detection_time":1742531484,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":25007,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5493742e-c817-444f-b292-35af4f4a8775
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531485,"event_type_id":6,"status":"blocked"}


event_id: 16df921d-648b-4eb1-b0fe-529d3ae1a56f
log_level: critical
event_category: detections
event_data:
{"connection_id":5456347,"detection_time":1742531485,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":55251,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bf4371f4-c167-41b4-8cec-4a0b6878e85b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531485,"event_type_id":6,"status":"blocked"}


event_id: 10773c6f-0faa-4cb9-a966-d8ef6c1aebfe
log_level: critical
event_category: detections
event_data:
{"connection_id":5456344,"detection_time":1742531485,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":29528,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0bb363cf-681b-49f3-a296-dc7bb3c4cf48
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531487,"event_type_id":6,"status":"blocked"}


event_id: f18ddb3e-9ad0-4fe8-b28e-c64d4a523276
log_level: critical
event_category: detections
event_data:
{"connection_id":5456350,"detection_time":1742531487,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":64010,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: eb02675d-97dc-4833-af52-b557d5831425
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531487,"event_type_id":6,"status":"blocked"}


event_id: 20585839-bfa9-4c41-b0ab-b896c988a68a
log_level: critical
event_category: detections
event_data:
{"connection_id":5456351,"detection_time":1742531487,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":51667,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 97b174e3-b7c8-4597-83a8-907cd7da0265
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531488,"event_type_id":6,"status":"blocked"}


event_id: 6927efaa-7fb4-4cb1-8f6e-f2edc441df97
log_level: critical
event_category: detections
event_data:
{"connection_id":5456355,"detection_time":1742531488,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":1524,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9999b062-e2d5-4eee-ba0e-34c78d6b8324
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531488,"event_type_id":6,"status":"blocked"}


event_id: 1dbb4f98-e777-414c-8380-352638fcf600
log_level: critical
event_category: detections
event_data:
{"connection_id":5456356,"detection_time":1742531488,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":54409,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 98c836a1-bed9-4750-9e12-2730aae23758
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531489,"event_type_id":6,"status":"blocked"}


event_id: 779546e5-7ae2-4ef8-896c-18da32ea8a0e
log_level: critical
event_category: detections
event_data:
{"connection_id":5456364,"detection_time":1742531489,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":7604,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 230f57ff-17fd-4c21-a584-3663a2ae2a11
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531491,"event_type_id":6,"status":"blocked"}


event_id: 1d8cec73-c76e-461a-b00b-0d1a231c427b
log_level: critical
event_category: detections
event_data:
{"connection_id":5456371,"detection_time":1742531491,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":48890,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 38bee5fb-ca3d-4872-8108-63d84b6806a5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531491,"event_type_id":6,"status":"blocked"}


event_id: 88dfc680-b3ab-4704-9673-778ecc6adc1e
log_level: critical
event_category: detections
event_data:
{"connection_id":5456374,"detection_time":1742531491,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":22982,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 00e44619-9b33-4ced-86f7-a480bd49be13
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531492,"event_type_id":6,"status":"blocked"}


event_id: 5c187931-0b23-447a-b2a8-f6fda07bada2
log_level: critical
event_category: detections
event_data:
{"connection_id":5456373,"detection_time":1742531492,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":62156,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2926753b-01b4-4b8c-9c37-0d66bb27a077
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531492,"event_type_id":6,"status":"blocked"}


event_id: a3084c25-bf68-4874-8d10-d45b8f6023e0
log_level: critical
event_category: detections
event_data:
{"connection_id":5456375,"detection_time":1742531492,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":59028,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e284760e-cb4a-4d17-ad3e-08f539b5046c
log_level: critical
event_category: detections
event_data:
{"connection_id":5456376,"detection_time":1742531492,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":60583,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fb850d50-9e09-4202-b0f4-30bdafca5e10
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742531492,"event_type_id":6,"status":"blocked"}


event_id: 640f767f-209d-40d2-9ebf-9c8304ca1ffe
log_level: critical
event_category: detections
event_data:
{"connection_id":5456385,"detection_time":1742531492,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":52948,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6982c18a-ccb3-4176-8996-40fe4ef6eb12
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531492,"event_type_id":6,"status":"blocked"}


event_id: d04e4834-972e-4519-a8a8-daa30267bafe
log_level: critical
event_category: detections
event_data:
{"connection_id":5456379,"detection_time":1742531492,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":25547,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3964ed46-f729-410d-8f58-40e92f34a5cc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531493,"event_type_id":6,"status":"blocked"}


event_id: 8504bb78-ab71-4238-84e9-01ec4e16d114
log_level: critical
event_category: detections
event_data:
{"connection_id":5456382,"detection_time":1742531493,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":4329,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a74ca5a7-8b63-49e4-9f7e-86329b983611
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742531493,"event_type_id":6,"status":"blocked"}


event_id: f1bbe519-faf4-4be8-871a-4fc89e192a20
log_level: critical
event_category: detections
event_data:
{"connection_id":5456389,"detection_time":1742531493,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":57311,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9fd76e1d-2edd-4f5d-8ff7-24be8c30e818
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531493,"event_type_id":6,"status":"blocked"}


event_id: 76a17e27-143e-44d1-9c7c-810a100c0a78
log_level: critical
event_category: detections
event_data:
{"connection_id":5456383,"detection_time":1742531493,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":64170,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7d363753-5426-4336-9ac9-9641202aa931
log_level: critical
event_category: detections
event_data:
{"connection_id":5456384,"detection_time":1742531493,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":7154,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c96bb35a-3b1b-4cd0-8a81-87c145650d9c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531494,"event_type_id":6,"status":"blocked"}


event_id: cf2846e4-3032-4db1-8f24-542cc648a92f
log_level: critical
event_category: detections
event_data:
{"connection_id":5456387,"detection_time":1742531494,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53797,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 307c5b47-733d-4c19-b74e-8be4a26e732b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531494,"event_type_id":6,"status":"blocked"}


event_id: 12ccc11f-65d0-4555-861b-e4243e513579
log_level: critical
event_category: detections
event_data:
{"connection_id":5456388,"detection_time":1742531494,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":23985,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 86caa103-bdee-4a38-8c80-37396e8dbdff
log_level: critical
event_category: detections
event_data:
{"connection_id":5456395,"detection_time":1742531494,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":57038,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9003555a-b719-4d8f-a923-67017d3cc8ed
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531495,"event_type_id":6,"status":"blocked"}


event_id: 12eca591-6c6e-4055-af2d-29a382a30561
log_level: critical
event_category: detections
event_data:
{"connection_id":5456397,"detection_time":1742531495,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":35464,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3dc0fda0-a270-40a1-9e55-f5da8b1aa5f2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531496,"event_type_id":6,"status":"blocked"}


event_id: b6c05f46-4bf2-4b90-8d62-09676c79a22e
log_level: critical
event_category: detections
event_data:
{"connection_id":5456403,"detection_time":1742531496,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":2320,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ac4ad600-0c3e-46a7-a26f-b96973fd4b9a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531496,"event_type_id":6,"status":"blocked"}


event_id: b3dcaead-b1be-4043-9b28-7df6c4dd6793
log_level: critical
event_category: detections
event_data:
{"connection_id":5456404,"detection_time":1742531496,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":32212,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 850fb2a6-1077-422d-932f-fbd053ac0585
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531496,"event_type_id":6,"status":"blocked"}


event_id: ce72a2e7-e0c8-4989-81dc-8f3598983280
log_level: critical
event_category: detections
event_data:
{"connection_id":5456406,"detection_time":1742531496,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":39562,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 969ccf91-b82e-403c-8324-62b791c3b125
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742531496,"event_type_id":6,"status":"blocked"}


event_id: bf41d051-cc5d-4497-86bb-547e11354cd5
log_level: critical
event_category: detections
event_data:
{"connection_id":5456410,"detection_time":1742531496,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":58577,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 56917b4c-46ab-4bbe-a21a-8d7f6aefa713
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531498,"event_type_id":6,"status":"blocked"}


event_id: 07d978ca-be18-47dd-8c16-62d069e1b986
log_level: critical
event_category: detections
event_data:
{"connection_id":5456411,"detection_time":1742531498,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":23544,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 804effb3-09e3-4044-baba-246d0606bf6c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531498,"event_type_id":6,"status":"blocked"}


event_id: 8bd4c53d-a108-4952-9ae6-31e7694955fb
log_level: critical
event_category: detections
event_data:
{"connection_id":5456413,"detection_time":1742531498,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":39949,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 71161e00-4181-403d-9cad-e554d8123581
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531498,"event_type_id":6,"status":"blocked"}


event_id: 5ec8092f-13c7-4250-a6da-23b303febc5c
log_level: critical
event_category: detections
event_data:
{"connection_id":5456414,"detection_time":1742531498,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":11088,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b2ddf9fc-617c-46a8-b229-85184e84a523
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531499,"event_type_id":6,"status":"blocked"}


event_id: 3cdde39d-0847-4c35-b8e0-9e11f3e64af5
log_level: critical
event_category: detections
event_data:
{"connection_id":5456420,"detection_time":1742531499,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":13057,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4e598f5f-6898-4eb3-8d92-51706ef80751
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531499,"event_type_id":6,"status":"blocked"}


event_id: 3c746b01-e772-4e71-8a50-bd474a457d22
log_level: critical
event_category: detections
event_data:
{"connection_id":5456424,"detection_time":1742531499,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":49982,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b81cc9a8-4471-4278-8a9c-85ddbf711d4f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531499,"event_type_id":6,"status":"blocked"}


event_id: 50e2b915-3ea0-4386-8904-b21da89a382e
log_level: critical
event_category: detections
event_data:
{"connection_id":5456425,"detection_time":1742531499,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":65149,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1b6826ed-c598-4537-9cbe-817588c8398c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531500,"event_type_id":6,"status":"blocked"}


event_id: 4e637a4f-5640-49b1-8e31-3c8bf92ba698
log_level: critical
event_category: detections
event_data:
{"connection_id":5456427,"detection_time":1742531500,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":51830,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 24d3fcdd-e145-4aae-8c87-724ec25cc5f0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531501,"event_type_id":6,"status":"blocked"}


event_id: fd8b0841-05a0-463d-854a-f3ba8960ce9a
log_level: critical
event_category: detections
event_data:
{"connection_id":5456435,"detection_time":1742531501,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":23490,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ae695bdb-e2aa-41ef-a0b5-8aee1bb7d209
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531502,"event_type_id":6,"status":"blocked"}


event_id: 1a2e1b34-d369-436e-a258-b9ccecf1a771
log_level: critical
event_category: detections
event_data:
{"connection_id":5456443,"detection_time":1742531502,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":63445,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bac4a128-8a07-4d55-b563-879a2f2b1b52
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531503,"event_type_id":6,"status":"blocked"}


event_id: 83485e0d-5991-4435-8868-165627b14217
log_level: critical
event_category: detections
event_data:
{"connection_id":5456449,"detection_time":1742531503,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":58553,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: feba3ddc-e6a6-4352-9383-0cb71a0c4ab2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531503,"event_type_id":6,"status":"blocked"}


event_id: 9b40a219-ad5d-429b-b6cd-2e6219857cd4
log_level: critical
event_category: detections
event_data:
{"connection_id":5456451,"detection_time":1742531503,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":3107,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0334c659-8a04-406a-90ed-a7e3a75932e3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531504,"event_type_id":6,"status":"blocked"}


event_id: ea5e8fe1-5953-4c32-8943-d967e53e89a8
log_level: critical
event_category: detections
event_data:
{"connection_id":5456453,"detection_time":1742531504,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":56189,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 482b3f96-b7f8-4ca2-bb11-387ec08c6c69
log_level: critical
event_category: detections
event_data:
{"connection_id":5456459,"detection_time":1742531504,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":57230,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f50d50a5-7051-47b4-91c4-5b679ac93fc3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531504,"event_type_id":6,"status":"blocked"}


event_id: 3d23c308-08b4-4f49-9589-1fafce9a849f
log_level: critical
event_category: detections
event_data:
{"connection_id":5456461,"detection_time":1742531504,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":63204,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 47ae1918-9513-4d98-846d-be85f5bd4b51
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531505,"event_type_id":6,"status":"blocked"}


event_id: 8019fcc8-ee63-4a11-bcee-3a3d2eefe394
log_level: critical
event_category: detections
event_data:
{"connection_id":5456469,"detection_time":1742531505,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":9087,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5f2710c7-d5cb-45b9-95d7-5e4ce4bddfdf
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531505,"event_type_id":6,"status":"blocked"}


event_id: bbdd2c1b-fc12-4afd-b3cd-9c026e083112
log_level: critical
event_category: detections
event_data:
{"connection_id":5456466,"detection_time":1742531505,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":64098,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fc47b31c-3b6d-41eb-a3f3-012837a6617c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531505,"event_type_id":6,"status":"blocked"}


event_id: de17a078-9f6e-4326-8996-db47a87a0ad6
log_level: critical
event_category: detections
event_data:
{"connection_id":5456471,"detection_time":1742531506,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":2775,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: dacfbb2c-e66b-4161-95b0-bf5abdb69b57
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531506,"event_type_id":6,"status":"blocked"}


event_id: 9ed9a7fd-dda4-4f61-b0fb-9351865c2606
log_level: critical
event_category: detections
event_data:
{"connection_id":5456474,"detection_time":1742531506,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":50518,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 444109bb-d782-4288-92b9-813af18631d4
log_level: critical
event_category: detections
event_data:
{"connection_id":5456480,"detection_time":1742531506,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53527,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 32dab990-681a-4dd0-90ba-e8cb4bdc8027
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742531506,"event_type_id":6,"status":"blocked"}


event_id: 59bce19b-f497-43e4-91ca-8e7a04a13622
log_level: critical
event_category: detections
event_data:
{"connection_id":5456489,"detection_time":1742531506,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":55036,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b90da76a-86f6-4ca9-a0e1-1806493670d3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531506,"event_type_id":6,"status":"blocked"}


event_id: 7ec78fd7-1d6c-4d01-ab77-690786aee2da
log_level: critical
event_category: detections
event_data:
{"connection_id":5456481,"detection_time":1742531506,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":41836,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 145ec9cd-fc31-4432-848e-c208d73de963
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742531507,"event_type_id":6,"status":"blocked"}


event_id: 3fd389e0-66b4-4715-8be1-5995c093f858
log_level: critical
event_category: detections
event_data:
{"connection_id":5456494,"detection_time":1742531507,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":60257,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 14b692fe-54d1-4297-8f86-0c6ac10c7bd4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531509,"event_type_id":6,"status":"blocked"}


event_id: 0aaffc8c-2b4d-4712-afb6-56dcd7cd3132
log_level: critical
event_category: detections
event_data:
{"connection_id":5456502,"detection_time":1742531509,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":15356,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6485ee95-65e4-4bc8-871f-57c9403ab06f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531509,"event_type_id":6,"status":"blocked"}


event_id: 5db7be5b-6ae3-4e43-8d13-1c56632bcaa1
log_level: critical
event_category: detections
event_data:
{"connection_id":5456490,"detection_time":1742531509,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":44726,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 444fff15-b573-4c38-9102-94e3741bd052
log_level: critical
event_category: detections
event_data:
{"connection_id":5456493,"detection_time":1742531509,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":46422,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8c77e215-50d9-4212-b017-511714cc0154
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531510,"event_type_id":6,"status":"blocked"}


event_id: 66f3a93a-e183-489d-a484-7f5ce2595d57
log_level: critical
event_category: detections
event_data:
{"connection_id":5456506,"detection_time":1742531510,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":53266,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d161f0a4-ed47-4ea3-9ade-87a53f345c46
log_level: critical
event_category: detections
event_data:
{"connection_id":5456508,"detection_time":1742531510,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":54591,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fcc61598-3407-43ad-af7b-c00d367dc1e4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531510,"event_type_id":6,"status":"blocked"}


event_id: a94b9ca4-a169-413d-b168-ea91b8607d13
log_level: critical
event_category: detections
event_data:
{"connection_id":5456509,"detection_time":1742531510,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":19640,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 45b4fbbf-6e23-41a6-a144-87a524f2f0eb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531511,"event_type_id":6,"status":"blocked"}


event_id: 086d80ac-14d5-4128-b0f0-91a3165cfb6c
log_level: critical
event_category: detections
event_data:
{"connection_id":5456468,"detection_time":1742531511,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":36601,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c606e156-9cd6-4601-991f-80be5d2de456
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531511,"event_type_id":6,"status":"blocked"}


event_id: eb0581a2-d3cc-427a-94a3-d5ee8d020205
log_level: critical
event_category: detections
event_data:
{"connection_id":5456514,"detection_time":1742531511,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":61777,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 978e6d4e-637f-4c0c-8d03-be79a72a58fa
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531511,"event_type_id":6,"status":"blocked"}


event_id: 3b4f7961-4714-4deb-b386-2266dd354b6d
log_level: critical
event_category: detections
event_data:
{"connection_id":5456520,"detection_time":1742531511,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":32447,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7f252882-79d6-4337-8f12-43b8a90fc964
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531512,"event_type_id":6,"status":"blocked"}


event_id: af7163e8-30ba-4a13-bb23-4d00c53a5f44
log_level: critical
event_category: detections
event_data:
{"connection_id":5456522,"detection_time":1742531512,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":64958,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5797bde7-4368-496b-b5c6-dbf53023032e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531512,"event_type_id":6,"status":"blocked"}


event_id: 4fe72588-1622-4280-83b6-f28f79d18de2
log_level: critical
event_category: detections
event_data:
{"connection_id":5456529,"detection_time":1742531512,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":35251,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ff5cbac7-08fd-42bb-b7da-ec5754fc34a9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531514,"event_type_id":6,"status":"blocked"}


event_id: 2c2c6816-004c-4021-831a-c6ef9c42c7e9
log_level: critical
event_category: detections
event_data:
{"connection_id":5456542,"detection_time":1742531514,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":5193,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f5211f78-e398-4dae-acef-b32fa850064d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531515,"event_type_id":6,"status":"blocked"}


event_id: 16817b73-271b-4055-abe0-0a177962b72a
log_level: critical
event_category: detections
event_data:
{"connection_id":5456545,"detection_time":1742531515,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":9738,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 51b6d6cd-9488-4c2b-8503-4fc4f7ca03e3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531515,"event_type_id":6,"status":"blocked"}


event_id: 686cf0ff-092e-473f-ad59-2154d27dfc8a
log_level: critical
event_category: detections
event_data:
{"connection_id":5456546,"detection_time":1742531515,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":52609,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a21ae6b4-6d11-4316-89e9-4a839675b6a8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531516,"event_type_id":6,"status":"blocked"}


event_id: b8fde618-79bb-4150-8082-18072dfb5abd
log_level: critical
event_category: detections
event_data:
{"connection_id":5456548,"detection_time":1742531516,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":54787,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 88dbf59b-c242-4cbe-9a3a-cfa034d9c722
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531516,"event_type_id":6,"status":"blocked"}


event_id: cbfb83fc-9806-4277-a368-3346dd0246dc
log_level: critical
event_category: detections
event_data:
{"connection_id":5456558,"detection_time":1742531516,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":64464,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 70e10e0d-331f-4820-8334-645e56a5df52
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531517,"event_type_id":6,"status":"blocked"}


event_id: 6b47db56-9956-4744-bf47-c97a9b81fe17
log_level: critical
event_category: detections
event_data:
{"connection_id":5456553,"detection_time":1742531517,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":63843,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 307961f4-f157-42ac-be6c-006fc4bef8cc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742531517,"event_type_id":6,"status":"blocked"}


event_id: f813cd09-c865-49de-a817-f164b3d2f7d7
log_level: critical
event_category: detections
event_data:
{"connection_id":5456563,"detection_time":1742531517,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":60524,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e6f6fd25-1c7c-4b96-a7bf-a636346c9b62
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531517,"event_type_id":6,"status":"blocked"}


event_id: 4becfb91-261b-44bb-ab3e-85050a5de301
log_level: critical
event_category: detections
event_data:
{"connection_id":5456556,"detection_time":1742531517,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":44420,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 76276d75-90fa-44ff-9a31-a64aa67ab514
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531517,"event_type_id":6,"status":"blocked"}


event_id: 065bfd6a-04b3-4ea1-a7cd-d2221c899b1d
log_level: critical
event_category: detections
event_data:
{"connection_id":5456555,"detection_time":1742531517,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":63907,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6046ca9b-4136-4abb-a6dd-4ddf105bd448
log_level: critical
event_category: detections
event_data:
{"connection_id":5456559,"detection_time":1742531517,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":46396,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cd706df0-b69d-4692-b569-a9ed382c01fa
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531518,"event_type_id":6,"status":"blocked"}


event_id: 3b9f955d-ba16-4a7c-bd75-3aa0a6d280e0
log_level: critical
event_category: detections
event_data:
{"connection_id":5456560,"detection_time":1742531518,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":63819,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 83b88a3f-0c20-4371-a92e-965e2dc3154e
log_level: critical
event_category: detections
event_data:
{"connection_id":5456569,"detection_time":1742531518,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":50448,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5f976598-4b4e-4044-8bc1-de153d6b08c2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531519,"event_type_id":6,"status":"blocked"}


event_id: 8ed3488b-30d8-4ec4-b0cb-b586bb201bb9
log_level: critical
event_category: detections
event_data:
{"connection_id":5456573,"detection_time":1742531519,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":52273,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f14dd446-e9a7-48f0-974f-ae4c75599a0a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531519,"event_type_id":6,"status":"blocked"}


event_id: 1ca375a2-351c-44b3-a790-3fa36f320d29
log_level: critical
event_category: detections
event_data:
{"connection_id":5456567,"detection_time":1742531519,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":65238,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: eef5bb8f-6f72-4076-9a51-d1b5b301b5f8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531521,"event_type_id":6,"status":"blocked"}


event_id: 0108c22b-4915-497a-bbd3-5f7b6f4094d3
log_level: critical
event_category: detections
event_data:
{"connection_id":5456582,"detection_time":1742531521,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":29322,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: db9293f6-702e-42da-a674-a7d9620e5b77
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742531521,"event_type_id":6,"status":"blocked"}


event_id: cebb4df4-166a-424b-b53d-53dbe6b173fd
log_level: critical
event_category: detections
event_data:
{"connection_id":5456600,"detection_time":1742531521,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":63194,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d0b7ebfe-48fc-433d-b6fb-a71683657013
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531521,"event_type_id":6,"status":"blocked"}


event_id: ae706410-eac7-46e9-a815-9de25c4e637e
log_level: critical
event_category: detections
event_data:
{"connection_id":5456587,"detection_time":1742531521,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":3235,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 94636e1a-5b5c-4866-9b29-f8da00e54369
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531522,"event_type_id":6,"status":"blocked"}


event_id: cc438b11-5ade-4cd5-b292-fa5242ac0b4f
log_level: critical
event_category: detections
event_data:
{"connection_id":5456595,"detection_time":1742531522,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":5753,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8f294a43-790c-4a0f-91e0-525f95fd28cf
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531523,"event_type_id":6,"status":"blocked"}


event_id: 57d2bf86-2c95-4808-a3d2-14e3782c2ae8
log_level: critical
event_category: detections
event_data:
{"connection_id":5456606,"detection_time":1742531523,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":58513,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cd3c0d75-0bf2-456e-9239-1823cd421c5c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531523,"event_type_id":6,"status":"blocked"}


event_id: 6fbad4b3-b071-4b95-a49d-ce89db1f31b2
log_level: critical
event_category: detections
event_data:
{"connection_id":5456615,"detection_time":1742531523,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":4517,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b579dea3-5152-42b4-a3d8-cc2c287199c8
log_level: critical
event_category: detections
event_data:
{"connection_id":5456614,"detection_time":1742531523,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":61471,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 56f06ca1-71fc-4b19-aec3-7ae825fbf7e3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531525,"event_type_id":6,"status":"blocked"}


event_id: dd65081c-4eb2-4f38-b022-a584f9cced5c
log_level: critical
event_category: detections
event_data:
{"connection_id":5456623,"detection_time":1742531525,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":15744,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 75227f4e-19ee-4301-8ac5-d53562bf3b61
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531526,"event_type_id":6,"status":"blocked"}


event_id: 36b24966-0dd2-41d8-bd07-124e7b4574a4
log_level: critical
event_category: detections
event_data:
{"connection_id":5456636,"detection_time":1742531526,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":12821,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9a14c2df-0980-4e16-83b9-5804e88abc93
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531526,"event_type_id":6,"status":"blocked"}


event_id: e4a6ecc9-ed36-4b32-b732-a79a861079ab
log_level: critical
event_category: detections
event_data:
{"connection_id":5456637,"detection_time":1742531526,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":46972,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 80265953-c0fa-4273-981b-70168f0eb4bf
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531526,"event_type_id":6,"status":"blocked"}


event_id: 9b8c06b9-ada9-4d8d-8bd8-de06f36a0ed1
log_level: critical
event_category: detections
event_data:
{"connection_id":5456638,"detection_time":1742531526,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":20285,"status":"detected","threat_name":"RDP:BruteForce"}


