# firewall

event_id: 77de8820-6d15-4cb1-8b8d-5faf048bbb83
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":24276,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e6193567-dfc3-4b73-baa3-03a81ddd3021
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"78.83.57.71","remote_port":50409,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 12890288-f3e7-40a0-8342-9c59e2f1f3f4
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":62953,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 492d092b-2571-43dd-ba68-7dd00ce3d37f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":34067,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 47c11512-1f91-4aea-a1d0-afb72835f435
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":52190,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 4c8bd0f7-4e36-4908-8ac8-53df3c8d68a9
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":60101,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 4a5ab244-5fa8-4cec-9827-869e318df592
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":51198,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: cea85929-2c13-4ff3-a1a6-57b5861a865f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":52427,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a2b2e6e5-91a6-4ba4-a60b-0e493dee35a1
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":52490,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a12d44e0-76ce-4eb9-87e5-d67454e5a889
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":49953,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 5b4b3920-32ea-402f-a78a-b4cb9fd8a102
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":46859,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7361a643-1d97-4151-a822-6fd40743f8fc
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":58564,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a754e343-7989-4ebb-a37e-11d5f8f7183f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"190.57.75.42","remote_port":51865,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 2dd730a9-e147-4d9c-9047-420e0820cdb1
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":2553,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b08e194f-b82f-439a-9eae-1d4f774cca77
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"217.113.235.235","remote_port":52957,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 2ee779ab-ce63-49bb-a8e0-945e6714683b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":62435,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f4bec9c7-beaa-460c-9542-b7f173270f54
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":56060,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 920693ce-2c14-4129-8c54-02de7982f854
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":60542,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ba23d848-c4b5-4e28-b329-fc3bad980b03
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":3939,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 160026a8-fc4c-4739-8721-fd386f52c7d2
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":19835,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c5c4dc89-2d97-468c-a19a-b5e765d9912d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":29403,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 4eb361cd-8f2f-42fc-ae39-06310fcc87aa
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"255.255.255.255","local_port":137,"path":"System","pid":4,"protocol":17,"protocol_name":"UDP","remote_address":"192.168.1.161","remote_port":38500,"rule":"Windows Networking In","rule_guid":"{84c32923-574e-47d6-b517-febdaacc62e3}","status":"allowed"}


event_id: 5122bce9-fede-41c2-9ead-fd0c6ed77ffe
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":65119,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0a41b239-bd36-46e2-ae04-8599446df6d4
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":39519,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c648d277-2ea2-49d6-8034-44f2c8c0a7d7
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":61920,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d6c1837c-c5a3-41c4-b8ba-d8715627f55f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":1909,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: bbcde9d9-da61-4037-85a4-01e660e38404
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":43372,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 88f65f0b-086c-4df2-80e1-ce0d52c1649a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":17482,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 94fbeff2-689b-4bed-854e-62e1f0bff333
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":20300,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 78fbc1c7-08aa-42c4-8ef8-edf8d8060aa0
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":57015,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 04009167-5a58-431e-87df-9ad9f6b6ab50
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":57373,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0bc60cf7-4889-4371-939a-abf401bb3bbf
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":59808,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ef5b4b28-b18d-4ab7-b21c-5d24d4b8541a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":18417,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 36364239-0c72-47dc-90b0-1125aaffbaa8
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":60858,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 316f8df8-dc83-43c9-8d08-29f67e016e98
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":29127,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: eb86ac09-9132-44ab-ae4c-697c5c77f4cf
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"66.23.33.5","remote_port":57023,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 372e6ab3-a6fc-43b9-b677-abadab789534
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":61766,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c5f11256-a640-4cbb-b000-02d0178a9125
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"66.23.33.5","remote_port":59317,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 017b9a38-9cdd-49d9-8200-ae0cb928a97c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":27060,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 1e7cfc4f-e653-4465-a723-02725da378c4
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":33847,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7860bd94-f722-4628-9712-f53b5bca2321
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":14316,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 35edec89-7fe0-40b4-b9ac-8019e85f1633
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":64049,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a6d50532-c961-496c-ba4b-349269f3f807
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":5512,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 05b4c840-58be-4714-9d3d-61d8ef613d74
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":49596,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 6fcade09-287a-435a-9dde-b5953da7a02e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":7092,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 6e02f7af-e2ba-46b5-a274-8a19e0c576da
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":34238,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ffb1a85b-dcff-4772-8f38-3b2dc061dbf9
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":21168,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e113e0d4-807e-47dd-8324-6cbc15e62389
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"217.113.235.235","remote_port":55911,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f76df9ee-7176-48ed-a3e7-e9ee4cb898f0
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":23425,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3f8e4a36-dbbd-4942-8b23-55fe08888757
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":23971,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c4747939-bb5c-4ef0-9edd-70e4f448791f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":44464,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3d27f6b1-3485-4c9d-95fa-7662f757447b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":59358,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: fc7f5bc1-9fdd-4d79-9dfe-b24fc82d9c66
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":61982,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 378788ca-cd09-4514-b957-d7e9bd7d8450
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":17715,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c550fb5c-030e-43eb-a2f8-d34cf5767862
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":30581,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: aa76338d-3cee-4f0c-8977-bb61458eb5a6
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":58327,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3bc721b2-7797-4a53-9743-fd0ba7f4ae87
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":52957,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a3a566e2-96c0-49e2-9849-82d54f155535
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":62486,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 10e3d669-8822-468d-99ba-03b67638cd8a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"190.57.75.42","remote_port":53808,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 52e4bb4e-b73c-480a-9a28-e876ac6445a1
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":53671,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: fe9ea797-d2c5-4f53-8168-986e4d600032
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":56104,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0838ecd9-e4b4-4368-9430-76407b8fbdc1
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":3420,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ba0d8c03-9481-4610-b7e8-1df8c1eaaa2c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":35956,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 06a548e7-7027-429f-9874-9bac9c1be292
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":61874,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 2eac465c-8855-4eea-a8a1-2000cc5b26a9
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"66.23.33.5","remote_port":53973,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 4c20828a-5afa-4eb4-beb5-1a4d5d7527ca
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":59673,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e5d4624b-f9ea-4bd8-bc96-66c197a28eed
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":60712,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a7237b5d-d529-4b35-8532-b67ba7f736ad
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":47374,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e813c42b-e056-48c9-ad1e-2990dfadc3ec
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":9717,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 731f7133-6e95-41d4-abf4-93e95ca8ca07
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":60734,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 15fa4ffe-56a2-4115-bbbb-e1aacf89aaea
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":48697,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 57dd3537-78e0-46f7-94f4-a1826d6e9041
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":62906,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 1b77b0f8-9410-40aa-9f60-ef37903de4d3
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":14334,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 404edf3a-6093-4693-ab0c-3c3e652d6f57
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":56321,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 895d15e8-9ecb-4ee8-842d-84058850bb98
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":27197,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f9f5448f-ac2b-4bd8-8605-9a055629cc7d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":59255,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 8e01ab6c-e5af-4a83-89a2-bdd9c4b8cc22
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"217.113.235.235","remote_port":58844,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d113722c-8d41-4b1d-8dcc-3de190bec348
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":30199,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3eae69b9-2631-4392-948f-81f05fc5e334
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":64691,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 2892ad46-f257-4864-9712-0064706434fa
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":4519,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 4a29352e-06ca-440f-a81c-364746058fad
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"66.23.33.5","remote_port":53371,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d7ecb216-fd00-47a9-8326-14ee9fbf78a9
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":51038,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 4ee01052-ef40-446b-ab2d-d025206c0b5b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"66.23.33.5","remote_port":55504,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0530ad20-3af2-4673-9144-8ba286dc12a2
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":38784,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c6765044-d923-4b18-92f6-f5d01f7d12a5
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":53675,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c8efedcd-eff9-47c7-b3fb-bc3c4ac171e5
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":40793,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 5f489885-9ee7-4dbe-bb0c-0502932c6f38
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"66.23.33.5","remote_port":49963,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 05f1ec50-1f07-4a1d-baaa-1e9134163458
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":46777,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 60de4c6a-a4cd-4079-97ec-0538438a2fbb
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":60251,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: db40c398-ac76-4b76-ba0d-885f6447ab5c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":60919,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c67d2302-379d-41fb-bf30-74f6dd53255a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":23810,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 89bf849a-c93d-4033-8dd6-44b2b5147641
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":58123,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d4917df5-2fbc-4d50-93d8-0d972ae0b1a5
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":59464,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9c7ec9e2-6762-4f53-9062-f0d8ffd97db3
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":62278,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: fafc365b-c10e-44ab-b8e6-c9989c494022
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":65002,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3842e89d-c8dc-4993-b85c-6bf2e673cc46
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":53017,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 455cf658-e37c-4650-a6c7-9bc294da8972
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":63239,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 65de9e0d-3f60-4c6d-8ece-9faea0fead38
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":56086,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c0cdffc5-4f4c-4355-b901-2ef0df876313
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"190.57.75.42","remote_port":55398,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d880be12-532c-4994-b3be-816b2fa39013
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":10073,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 8298ff47-f741-4b00-80dd-785461fdfcf3
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":41464,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9da9ccf2-56dc-4f16-9c48-37469eb3411c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":7415,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 2f1e3a7c-cb83-483c-8edf-63f0cb122f33
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":14269,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ba8a6c1d-c4df-4640-a0fd-35668f41aa8b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"217.113.235.235","remote_port":61801,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: fe105755-5ff8-43d6-85df-6f84a23ed3b0
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":50592,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3f4416d1-67f6-4517-b209-9788cbeadc11
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":52257,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a3157cac-8d14-4a9b-9457-c13266c79011
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":14550,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: fed31204-7eaa-465c-ac62-c0e11ab444da
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":64445,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 1039cb3c-3155-4b03-bc20-c5a3950e8d0c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":24867,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e03eb813-e829-41b5-98ca-1c40bd0f5996
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":50583,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 4fb16b1f-b4a8-4243-8b97-1b5e82b79d23
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":13136,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 03e6301d-a663-4537-a3d7-d13c2be5f2ca
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":62621,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7abdc70f-857f-4d13-9748-340b612509aa
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":15355,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 4adc0a52-7705-41ba-8d93-d2012f21256f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":60374,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 875c36e3-515b-4834-b89e-b6d1b6333bf2
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":38380,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e75170a4-d6f1-441e-b234-bb66fda7e7c7
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":61934,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e45e74bf-73a3-4eda-9d52-7c298d5dd369
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":54607,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c429427a-0b53-4114-9a71-9d46f8294f56
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":33202,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 89d2f756-d403-43b7-8409-0d24c7bed852
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":56744,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0c2860fd-6864-4b76-b899-11293437611e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":42625,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d91247fa-2737-42c1-a3a4-0ecc4ace5314
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"66.23.33.5","remote_port":51695,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ce4e59a6-09a3-462a-8e85-b04f510a2117
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":48287,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 5f24b103-489e-4720-abe1-9e619f44e21e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":49946,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f821000b-4260-4725-aa0d-7d9a6ec5b951
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":42271,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 4aa1f383-b8e3-405c-b9bf-bacc35070851
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":30610,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 59ec6a2a-e5e5-488f-8368-d42c6c7c2786
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":16541,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: fde7ae3b-3cd7-472a-a5b0-52aaf913e86a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"66.23.33.5","remote_port":61769,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: db0e36e4-b4bc-422d-a314-c90a0f715c3e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":53200,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 10e9c7a0-f683-490e-b435-23a0521989e5
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":54648,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 5eec99c6-52aa-489c-be95-ae9cde78cf39
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":27787,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d1242879-60b9-417d-b4b6-1ca81957fe39
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":29125,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0168b07c-1d51-42d7-922d-8f54c5e9ce8a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":59192,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 2f4a2be0-793e-4737-9b8e-7d9747fee97b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":61137,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 28a65adf-b843-4137-a17b-dd971892af6b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"217.113.235.235","remote_port":64724,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: afcc7e64-fa8a-431d-b949-3417b3b1048e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":63541,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: bf0044ce-f493-4745-9995-d105ec1e39ce
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":43039,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a90579ce-2afd-4358-814f-718ce7907387
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":7348,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f1d13b9a-2d95-4417-b2b2-83d2ba5f93f8
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":10356,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 17439635-e929-400f-af11-4be532b0e311
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":50189,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 8c0a8a70-4d04-44df-bcfd-d7030ef2614b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":60399,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0bf62874-a6da-4d0a-89a1-76780bbe85d5
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":44630,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 721ccd19-b80f-4953-ad38-2244a2fad0d0
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":49252,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0b666366-6a74-42a0-81c6-0484cfde807e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":51430,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 74b1bfc1-f70f-4432-a916-b4b5a2f97f11
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":62899,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 21ff180e-a9ed-46d9-a2ca-c840debd9e07
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"190.57.75.42","remote_port":56724,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: aebef254-16dd-4dec-9eb6-d3372ada514d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":53609,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 54acd4f7-bc0e-41c7-b165-17dbac231a17
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":19145,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 6853bf7d-5bd4-48e2-aeb1-9ca2932a6300
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":63306,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: fa8c920a-ab11-4e08-8ffe-16a232dc422b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":21076,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e769fa30-6cfb-464a-bafe-51c749c62593
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":50003,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 6185a9da-868e-4792-8afe-04098415147e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":27255,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: dacf8580-fb94-4452-8399-d2b506b573de
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":58376,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 03ebc9c2-6750-42dc-9c87-efbc3ce2eadb
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":4014,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 5fdd0cf1-b79d-4874-8741-81ba7c17edf1
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.91","remote_port":16109,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 8436e572-9f63-422d-977f-7bec4497efbc
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":63362,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 619e9925-622d-43fc-ba07-9459186fa92c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":42752,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: eb7ec960-ca0a-49ce-aa34-a29c2cde940b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":45259,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c02f80c5-4373-4db8-82af-86ecee9f871e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":1822,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e69f01c2-3678-487f-bbe3-98bbce4b6e21
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":58108,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9cc53fef-7982-4e65-a243-8c9f07c249c8
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":60840,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 29fca302-ddc6-476e-9d5f-0bc6e96b58b6
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":43726,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3fb0aca5-90a1-4148-a263-d09eda993c1a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":55112,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ab5c937a-bff8-4009-bff7-d136eefd5bf5
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":21852,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 1112e4a4-fb23-4964-9690-5cf8667d7ab4
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"217.113.235.235","remote_port":51431,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3abba437-b60f-4c74-9b48-8a50af7af262
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":60714,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d3c16ce4-7588-4fa1-a839-62328257fbf5
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":52002,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 03f345de-79dd-4fe1-849b-219eb216af4f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":59272,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f6b233a2-fb14-4a07-9d8b-cd9198e759f8
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.91","remote_port":12419,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e77e877f-f3e9-4597-8290-23583a96d28d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":65106,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 4038ac56-102f-4245-991e-07f5aaad0fa0
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":50333,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0f0e5d77-9228-4715-9059-e6edca37e4a5
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":30722,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: db75e6a9-7070-4801-bcac-385e8db45049
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":63369,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 04dc4e9d-6228-4619-8561-c125abe2b9d0
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":59331,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 6139d6dc-4ff0-428e-bd7a-ccf43d33aebe
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":32718,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9772373d-9b3b-493c-8054-9a26b5c2f762
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":5007,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 2fc47258-93bb-4c6d-b0f6-692c014d2ffb
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":59566,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 534bb1a7-41f2-4ce8-840b-35d4213bed63
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":63029,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b45abd5d-3a3e-4135-b8c6-3b1918e0868a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":43013,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0ddec13a-4fe7-4bc5-9ddf-662b488262dc
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":18670,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e7750344-c164-4833-8f45-06b7cc29368b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":22817,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 49507df6-6cde-44f0-b06e-8839d6348331
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":13560,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b028912d-e6b4-4b40-a775-01a583b74012
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":22816,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: befa3c0f-3a61-4bea-934c-46c235e64ccc
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"91.238.181.91","remote_port":11121,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: fe91262d-8cd2-4969-be12-08fef76ffea0
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":28695,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 509b193f-5d74-4b97-8bc5-9091df2479e4
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":54946,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: c9ef81c0-d72a-497a-a0ff-408b8d57cfe4
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":28701,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 48a33c24-bed5-4c7b-9a6c-cfe37d15f191
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":57724,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: bb538090-b7c5-4281-85ff-e03fee94e534
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":22639,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 230be693-2499-42d5-92e7-d446b98f098e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":61277,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7d597556-afcc-4ee8-8156-c34bd7c3add1
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"190.57.75.42","remote_port":57743,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: fd3120cc-8d91-4637-9ff8-d68130af7343
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":61285,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 011487fc-cfe7-4887-a0bd-8745143994b2
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":35032,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7546a3e4-0e65-45fe-a56f-9b41d619bb42
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":61907,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ff875b6a-c012-47e4-a9c9-42e08db3bb84
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":8134,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: cdb5030a-16c5-4408-bcba-dd600cefe5b6
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"217.113.235.235","remote_port":54365,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 09196382-18bd-4bba-8a65-d828cab1dd05
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":63722,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 985d55c2-1e84-4b37-8de2-eaa6552614b0
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":9645,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: dc7642cc-539d-47a5-bd4d-601746fd2833
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":39251,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7c74df17-8b88-4360-ad19-31a5dba3f70a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":63990,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 98b6c033-c45a-4331-a8c5-b93c6864c12e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":56807,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 240b97f5-ea54-4812-bf88-05ae85d35f4e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":52160,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7d5d8090-8807-45ff-a1ef-2fef174d0c40
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":59935,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 1fd2ac26-a289-4954-afc4-3e8371385216
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":55022,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 020b0a17-e4a5-4b04-a67b-8a03b2bc2941
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":25007,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 8462c39f-8711-4b34-832c-eca0747b9834
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":29528,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: bc9fdfc6-c504-401b-8f8b-4bc7ec23b4c2
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":55251,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 5dd599ac-e9b2-465b-80ab-62eaf8097e2e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":51667,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 521b0191-13c4-4fca-abee-4d151c11bb5d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":64010,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 311cc3c0-730b-4ea8-845d-ea5fc896b521
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":54409,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3462a468-513b-4041-bf0c-bd23c5083762
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":1524,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 16ccd6cd-ad26-4d0c-96c0-65302903645c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":7604,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 40975e96-fbb5-43e0-8d4a-3ce58bcd5c12
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":48890,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7b8cd952-1c94-4e6e-9b32-b5a47b7ea810
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":62156,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 04128d89-afad-4edd-b76f-9a7cf8fcb8fd
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":59028,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 4ad1be95-65d4-439d-87a8-5f9f57bfe28f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":22982,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: d3ee8faf-f110-4da9-9de1-4d4e7e57750a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":4329,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 4dff75f2-35bb-4d4b-a51b-8e7d1f204e59
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":60583,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 26f2c3ae-d0c7-45df-b80f-9142594ca682
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":25547,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9b42f070-e81d-479a-adca-2c47c1586f2b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":64170,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9c1c7159-52f7-4335-8260-9f8ddb61904b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":7154,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 58b42eae-c2cf-4228-8116-cb41343e84c8
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"66.23.33.5","remote_port":52948,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 40ff5f13-417c-47f4-9a63-5835e4bf8ad0
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":53797,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 2e074ff4-eca8-4a12-b0b9-db3224f4e5fd
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":23985,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7cc2c4e5-f136-4e4d-8740-7be4c7a5d662
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"217.113.235.235","remote_port":57311,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7f84521b-7b3e-43f5-8836-9509e561890b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":57038,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 675ea55f-9b6c-4e9b-bd83-b6f70ef48a67
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":35464,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e4fc9bf6-f487-4fa8-b387-cc82523a2110
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":2320,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 48a0d32d-6260-403d-afcb-43d9a3cdf27d
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":32212,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 985b8b32-1009-493c-a2f0-98b74ce6b38c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":39562,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a2520e3c-d82c-4c8b-a769-d52073764028
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"190.57.75.42","remote_port":58577,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 776782c3-7846-47ec-8de4-5d0ef4d07cc7
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":23544,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e2a87c30-6ce0-423f-b431-0f2a9b128d64
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"122.107.70.234","remote_port":16704,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 1bfd4072-a1f2-4edd-9944-238e6d6cba55
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":39949,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 63854559-0f92-42a8-8c5b-604a94ca2570
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":11088,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7adb3361-d363-4c9f-995b-ab00a273d9ee
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":13057,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 5f71496f-66b5-48b6-a149-7328f5d96cfb
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":49982,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 76a82a9d-6c78-4ad9-b7b2-f4697e6d8e65
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":65149,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e108d196-7f4d-45fd-8451-bec8b1a30b5a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":51830,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 561aa488-ebca-4be9-9a15-a7c262294687
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":23490,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: dbc977a2-9504-48e3-b06a-345ecbba808a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":63445,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 592d5e1f-0e5f-4470-b54a-26fb694a8157
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":58553,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: acdf11ba-517d-4c08-8adb-f0e379d0479f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":3107,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 8131d4f6-e4c9-4456-aeec-be8c8eadb89f
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":56189,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ebb515af-bcf5-411b-b397-b0b913bd762c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":57230,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 94dd72ab-eebd-4023-831a-86e898e49b69
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":63204,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 72715584-9fb0-4136-91dd-b8195e5cd25c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":64098,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 09115c77-e8c3-4925-8b47-bbfc9678c251
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":36601,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 366fe36b-6fa2-467d-b79a-e69a196d779e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":9087,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 15018ef1-104d-47fd-b6dc-eb610e99367a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":50518,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 2f50eb73-2bcf-4736-a07e-ecd853913e21
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":2775,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a3b1855c-524b-4d5d-8b55-b8c0c4fb3288
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":38906,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 6d727cd1-3aa1-4b21-bddd-760ec11c9262
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":53527,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 6341f888-2839-4fa1-b9d9-8b73bece5ac7
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":41836,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b19f4d01-1659-4b5e-9859-a1b1218cefa6
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"66.23.33.5","remote_port":55036,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 16c429af-d92e-43bf-b48a-6292f461a83a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":44726,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 4bc478cb-d0cd-46be-80f4-5bea094a6a69
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":46422,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 81179798-9426-47cd-b734-05d4a1a5f26c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"217.113.235.235","remote_port":60257,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a684c626-84ec-4609-b928-3c27135691b5
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":15356,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f9e519b7-72ff-43aa-acd8-5ae6b1e33043
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":53266,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ea97191c-9ea9-4f03-80a9-970f5e5ae072
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":54591,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0bfac512-8050-4e72-91da-2d40a41394f2
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":19640,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b005d5e9-541f-4efd-8f29-56a0adb5d65a
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":61777,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 8a0f4fd4-10ef-46e5-97f6-04d630f034ac
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":32447,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 7c2fc34f-8497-42c9-b575-d30d8ddeaa9b
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":64958,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 760bc6d2-f281-422e-a380-059d1243e636
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":35251,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 2347f72b-edba-4734-bbca-8364d8a1cfe8
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":5193,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e17d9189-7b11-4860-b318-8a4549996f3c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":52609,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 5afe2755-8cb9-4aeb-992f-c80303018266
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":9738,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: cfed6354-3315-40b5-84b4-98da5b037280
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":54787,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 3b6a1925-2a9b-4cca-af10-273d0b863be5
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":63843,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: daad9da8-4dd9-4e8a-98cc-24312f95c9c2
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":63907,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e248b80d-85f1-4136-9e32-7ea2513a0c50
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":44420,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 6ca0ef83-b01c-4802-a99f-8170f04df929
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":65238,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: be17dbd9-a168-4f80-a440-e24804d316a9
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":64464,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: a22f6039-665c-4280-b834-6adbd9b936c5
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":46396,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: e8f20edd-8687-4b5f-bcc2-2d7b1fed88ce
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":63819,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 159a5c07-187a-4d11-b33b-339fab09ad21
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"190.57.75.42","remote_port":60524,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: b1fba061-fbf6-4db2-bca2-5b6756aaa654
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":50448,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 67f0a9b7-1ddb-4907-95c5-5e721b401dc1
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":52273,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 21259f46-acbb-4247-80cf-0e0495bd1a8e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":29322,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 4795fd03-012f-4b18-820e-f98342b498db
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":3235,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 51737683-642a-47af-96bb-9291cedd0ffd
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":5753,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 81f095d7-6adf-4e7c-af6a-48233ed14884
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"217.113.235.235","remote_port":63194,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 944d632c-044b-436d-9a31-1e105177ddbd
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":58513,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: af56363d-0be9-480b-a124-1a55452d08b9
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":61471,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: bbe0a7f2-7e6b-4364-b910-20f92ec6cbb9
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":4517,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f60941e8-64ed-4918-8925-e6697017e743
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":15744,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 9e96223c-fb25-44af-8cc3-55871e069201
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":12821,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 14f01591-0078-4eda-84ec-73920116fb30
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":46972,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: f9612231-08c6-48ec-899f-ac1313c1a0b6
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":20285,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 849257e8-5038-4d12-b690-9808befed865
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":49512,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 6cdd180c-0a27-4d9c-8ca8-ef891f63446c
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":51762,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 69a5a5b9-f999-46f4-9ead-d767f8bab3a5
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"84.17.35.43","remote_port":20429,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 75bf70b5-9d47-4f2c-bad8-212ccfa71739
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"66.23.33.5","remote_port":50691,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 35de8a8e-1c75-477f-b718-d7bae0260656
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":55843,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 44302c30-e2af-48eb-ad5a-75a616668304
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"89.222.100.41","remote_port":28157,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ec2bda9c-10bc-4faa-b19d-41141a448f2e
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"191.96.227.203","remote_port":30326,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 582c35b1-cfec-45eb-b1af-64274149cbba
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"79.127.132.29","remote_port":57713,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 0fcc877d-ada2-4a5b-a5c2-a337924c75ff
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":64495,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 5c93a1fa-95b9-4cb6-9f7b-97d2095c56cd
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"209.15.110.167","remote_port":64901,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: ca25673d-4cf7-4c9c-9cc7-e182c14f9ffa
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":60826,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


event_id: 44f8920c-c6df-4412-93fc-25f1b1b018d4
log_level: info
event_category: activities
event_data:
{"direction":"in","event_type_id":5,"local":"192.168.1.100","local_port":3389,"path":"C:\\Windows\\System32\\svchost.exe","pid":1560,"protocol":6,"protocol_name":"TCP","remote_address":"101.109.253.244","remote_port":63693,"rule":"Remote Desktop In","rule_guid":"{91feaa7d-4b65-4c3d-ac8c-d9c7a2750fef}","status":"allowed"}


# intrusion_prevention

event_id: 60fffa70-dcba-4419-9339-146f9741248e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531048,"event_type_id":6,"status":"blocked"}


event_id: 218169b6-82c2-4d23-b28e-3cfce08eb623
log_level: critical
event_category: detections
event_data:
{"connection_id":5453338,"detection_time":1742531048,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":62403,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1d5cf15d-10ed-4150-9c64-36cddb5c1703
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531049,"event_type_id":6,"status":"blocked"}


event_id: d20b9b1f-2c60-43a3-a2be-e3b1745945c9
log_level: critical
event_category: detections
event_data:
{"connection_id":5453325,"detection_time":1742531049,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":61694,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 51a269e2-b5ef-407b-99bd-a0bd33ac3e26
log_level: critical
event_category: detections
event_data:
{"connection_id":5453342,"detection_time":1742531049,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":6468,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 513d8aa8-bcb0-4542-8a3b-40697f1897cb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742531049,"event_type_id":6,"status":"blocked"}


event_id: 1f063263-59eb-439e-9025-fdf5bdd284eb
log_level: critical
event_category: detections
event_data:
{"connection_id":5453343,"detection_time":1742531049,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":56645,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7ee53ea4-8783-46d1-8911-7222a02bdd56
log_level: critical
event_category: detections
event_data:
{"connection_id":5453333,"detection_time":1742531049,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":64341,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5bd7a482-3c29-472b-8993-cdcb6351df50
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531050,"event_type_id":6,"status":"blocked"}


event_id: 20932ba9-666e-446b-831f-58a8410b54c2
log_level: critical
event_category: detections
event_data:
{"connection_id":5453334,"detection_time":1742531050,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":64504,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b53980e4-5398-41ae-9da4-5831cdda2bd2
log_level: critical
event_category: detections
event_data:
{"connection_id":5453337,"detection_time":1742531050,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":2030,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 58649b0f-8bed-4918-8e37-2fe2d18557a3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531050,"event_type_id":6,"status":"blocked"}


event_id: 7aba2b9e-f775-43e6-a0fe-b6ee947bdf3e
log_level: critical
event_category: detections
event_data:
{"connection_id":5453361,"detection_time":1742531050,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":3802,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c281ef6c-839b-4fa8-892c-ff25ecfa5040
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531050,"event_type_id":6,"status":"blocked"}


event_id: 1dc1fbc1-f35d-4806-abce-f0f7fb63fd01
log_level: critical
event_category: detections
event_data:
{"connection_id":5453369,"detection_time":1742531050,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":6156,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4593d698-b42c-4ae0-8734-bf985a62c484
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531051,"event_type_id":6,"status":"blocked"}


event_id: 4ae6b8dc-ed7c-4e08-891e-1100198c5e34
log_level: critical
event_category: detections
event_data:
{"connection_id":5453367,"detection_time":1742531051,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":59408,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 308fa757-7003-4369-b886-80d16ea129c0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531051,"event_type_id":6,"status":"blocked"}


event_id: 65248ba7-0e4d-4343-9900-22c1dffc288e
log_level: critical
event_category: detections
event_data:
{"connection_id":5453368,"detection_time":1742531051,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":58109,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2ee0a825-e0c7-4ac3-b3c3-951a06379031
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531051,"event_type_id":6,"status":"blocked"}


event_id: a8ce6c03-0a06-458d-bfb8-93fd6fc6ab5e
log_level: critical
event_category: detections
event_data:
{"connection_id":5453374,"detection_time":1742531051,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":60533,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7f8197ee-a29f-41f0-877a-2f8f274e39d5
log_level: critical
event_category: detections
event_data:
{"connection_id":5453371,"detection_time":1742531051,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":60548,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a9ea60bd-880c-4c03-8510-5db44b13e837
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531052,"event_type_id":6,"status":"blocked"}


event_id: d77f20e2-5b24-408c-94b7-6e9aafe3259f
log_level: critical
event_category: detections
event_data:
{"connection_id":5453377,"detection_time":1742531052,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":11753,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6d569dcc-62c1-426d-92a5-47a755815392
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742531052,"event_type_id":6,"status":"blocked"}


event_id: 29d126a9-cd6a-4002-90f5-036e49e9880d
log_level: critical
event_category: detections
event_data:
{"connection_id":5453378,"detection_time":1742531052,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":49660,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 17ae9e48-afd8-4c93-a77d-e329f8610d72
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531052,"event_type_id":6,"status":"blocked"}


event_id: 189a2aab-2545-4e45-87c6-ba9632368735
log_level: critical
event_category: detections
event_data:
{"connection_id":5453379,"detection_time":1742531052,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":12700,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 934a180a-4cda-4a87-923f-f36d1b0c55d9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531053,"event_type_id":6,"status":"blocked"}


event_id: 434c8d57-c447-4053-92f1-5d0ebfd450ce
log_level: critical
event_category: detections
event_data:
{"connection_id":5453381,"detection_time":1742531053,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":55945,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 80c0e1cf-c7ea-46ab-a5fe-c551bf31b519
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742531053,"event_type_id":6,"status":"blocked"}


event_id: 324468a1-b5e1-4206-b941-7e0500012997
log_level: critical
event_category: detections
event_data:
{"connection_id":5453388,"detection_time":1742531053,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":63675,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 45a3d8a8-0e2e-4417-874b-31cf818498d8
log_level: critical
event_category: detections
event_data:
{"connection_id":5453382,"detection_time":1742531053,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":58419,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1754eda1-a59e-407c-8a66-b18459926cf0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531053,"event_type_id":6,"status":"blocked"}


event_id: c253a2ce-eb5a-44db-bb57-f4816cb25bf9
log_level: critical
event_category: detections
event_data:
{"connection_id":5453385,"detection_time":1742531053,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":15834,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2223e56e-15c4-4956-ac5a-9fcfe2231740
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531053,"event_type_id":6,"status":"blocked"}


event_id: ab24523c-54a9-4305-b809-5861325fe7c3
log_level: critical
event_category: detections
event_data:
{"connection_id":5453384,"detection_time":1742531053,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":63818,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4bdf176c-601a-4a79-bf5c-28f170b0edd0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531055,"event_type_id":6,"status":"blocked"}


event_id: 6d8b65a9-36b0-4a7e-8ded-8f7ea105b911
log_level: critical
event_category: detections
event_data:
{"connection_id":5453390,"detection_time":1742531055,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":22141,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ed383a92-a702-4e9c-9bbe-a8c54f16f5ed
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531056,"event_type_id":6,"status":"blocked"}


event_id: c1fea4e0-4a71-4cfd-ac7e-ba1696974607
log_level: critical
event_category: detections
event_data:
{"connection_id":5453396,"detection_time":1742531056,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":19879,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1731203c-c1c9-4a1b-b0af-ffe547acac06
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531056,"event_type_id":6,"status":"blocked"}


event_id: 22c13b25-95b2-4b4b-94e7-82603c894507
log_level: critical
event_category: detections
event_data:
{"connection_id":5453398,"detection_time":1742531056,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":14241,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 246c0589-2290-4ea3-899b-d3908c145aa8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531057,"event_type_id":6,"status":"blocked"}


event_id: d14870c5-b93c-41c5-a643-13cec6ef894a
log_level: critical
event_category: detections
event_data:
{"connection_id":5453403,"detection_time":1742531057,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":30758,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3850faec-a343-4588-8eba-0f73c365a17e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531058,"event_type_id":6,"status":"blocked"}


event_id: 9da4780a-bac8-4252-b5bf-c3c4de4db6e9
log_level: critical
event_category: detections
event_data:
{"connection_id":5453406,"detection_time":1742531058,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":35853,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1152b196-70d1-4b63-bd8c-00718f33f8db
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531058,"event_type_id":6,"status":"blocked"}


event_id: ac92a937-28cd-45d4-85e9-d7f5878a34ca
log_level: critical
event_category: detections
event_data:
{"connection_id":5453407,"detection_time":1742531058,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":51877,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9d70d6a4-a807-4031-9955-28af94104acf
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531059,"event_type_id":6,"status":"blocked"}


event_id: 2b9f0aae-1a41-4458-adf4-a7aed11535ab
log_level: critical
event_category: detections
event_data:
{"connection_id":5453409,"detection_time":1742531059,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":52939,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c2d984fa-91c6-4d03-a5b1-88d9b7b59cd9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531059,"event_type_id":6,"status":"blocked"}


event_id: 1b368710-b44c-4ed8-b596-e44bbf91a624
log_level: critical
event_category: detections
event_data:
{"connection_id":5453410,"detection_time":1742531059,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":24424,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fa66a43c-fe24-4707-8369-d862c9d1103f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531059,"event_type_id":6,"status":"blocked"}


event_id: 2c453f95-8f29-4d16-911d-569965dd67a3
log_level: critical
event_category: detections
event_data:
{"connection_id":5453412,"detection_time":1742531059,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":40826,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fa36d528-7eb9-4c6c-891b-77b9e6554ea8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531060,"event_type_id":6,"status":"blocked"}


event_id: 106f86d1-5b7c-45c7-bf49-938d8a7e81ec
log_level: critical
event_category: detections
event_data:
{"connection_id":5453413,"detection_time":1742531060,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":39900,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8a1f0a8b-d7eb-40c8-a7b7-7efc506068a5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531060,"event_type_id":6,"status":"blocked"}


event_id: 554c7983-cfdf-43a8-a88b-83d1bb79c3c6
log_level: critical
event_category: detections
event_data:
{"connection_id":5453415,"detection_time":1742531060,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":27417,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c69c1974-c0b4-4e70-bf0d-01149c9720fa
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531061,"event_type_id":6,"status":"blocked"}


event_id: 01bee106-6948-4584-a333-f5bc38020a12
log_level: critical
event_category: detections
event_data:
{"connection_id":5453420,"detection_time":1742531061,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":46291,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e8820557-2b48-4dfa-bc3a-6466e4e8091a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"199.27.221.19","autoblock_timeout":25,"detection_time":1742531061,"event_type_id":6,"status":"blocked"}


event_id: 70bc147b-90ed-4491-85e5-6d4befce7767
log_level: critical
event_category: detections
event_data:
{"connection_id":5453425,"detection_time":1742531061,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"199.27.221.19","remote_port":64362,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c7d57cea-2ead-48b3-af4f-bbe9b696321c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"202.165.25.140","autoblock_timeout":25,"detection_time":1742531062,"event_type_id":6,"status":"blocked"}


event_id: 76080fae-d31f-4368-a5dd-204091e47a14
log_level: critical
event_category: detections
event_data:
{"connection_id":5453433,"detection_time":1742531062,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"202.165.25.140","remote_port":50555,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: dc9ff8f6-85bd-4bb3-bd89-cbd48f7105d5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531062,"event_type_id":6,"status":"blocked"}


event_id: 884cfc44-e4ad-4bd0-9afe-121a639fd5c7
log_level: critical
event_category: detections
event_data:
{"connection_id":5453427,"detection_time":1742531062,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":55158,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 32a25dd1-ccff-408a-b0b8-2ca538edbccb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531062,"event_type_id":6,"status":"blocked"}


event_id: 3652549f-3fdf-4a75-81e2-6011af7e7baf
log_level: critical
event_category: detections
event_data:
{"connection_id":5453419,"detection_time":1742531062,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":35306,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d019027e-2791-48e6-9764-ce0d507aa379
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531063,"event_type_id":6,"status":"blocked"}


event_id: f111e251-41cf-49f7-b0ee-8eb735e184ca
log_level: critical
event_category: detections
event_data:
{"connection_id":5453429,"detection_time":1742531063,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":57741,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ae8dd0e5-a2fc-4447-8231-e1c1d17f8b77
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531063,"event_type_id":6,"status":"blocked"}


event_id: 5b733710-5658-4f51-980a-5273159785a1
log_level: critical
event_category: detections
event_data:
{"connection_id":5453430,"detection_time":1742531063,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":60043,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5b934492-2d20-4f84-b7f2-ec71e7d94315
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531063,"event_type_id":6,"status":"blocked"}


event_id: c4fd68b1-73c2-45bd-8482-978f33bd5faf
log_level: critical
event_category: detections
event_data:
{"connection_id":5453434,"detection_time":1742531063,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":52429,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7c48416a-e0a3-4a6c-8fa9-d2c03cb41dfe
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531064,"event_type_id":6,"status":"blocked"}


event_id: 468e40f8-df13-4761-b6be-5f0462cdfdb9
log_level: critical
event_category: detections
event_data:
{"connection_id":5453437,"detection_time":1742531064,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":42740,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e68cd565-7446-4cf9-a148-dfbaafb4f149
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531064,"event_type_id":6,"status":"blocked"}


event_id: 152822c3-af07-47c4-96da-f1847661faf3
log_level: critical
event_category: detections
event_data:
{"connection_id":5453439,"detection_time":1742531064,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":56613,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3014503a-8520-433e-a237-6d0e4e12825c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531065,"event_type_id":6,"status":"blocked"}


event_id: 5d45e3a3-6c37-4c64-89c4-1888682bf0e1
log_level: critical
event_category: detections
event_data:
{"connection_id":5453441,"detection_time":1742531065,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":52689,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 65cbe014-6eba-4bd5-9f27-9164cb811bd8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531065,"event_type_id":6,"status":"blocked"}


event_id: a47cddd4-90c9-4150-a135-39390ed991d1
log_level: critical
event_category: detections
event_data:
{"connection_id":5453447,"detection_time":1742531065,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":47437,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 015cb6a7-a92b-4f14-ad53-0a82e3ba483b
log_level: critical
event_category: detections
event_data:
{"connection_id":5453446,"detection_time":1742531065,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":55453,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a88acb5e-d5a5-4bf5-aa64-88bdf039958e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531066,"event_type_id":6,"status":"blocked"}


event_id: fb60a1ff-a4e9-4ce3-af9a-195a8f880ecb
log_level: critical
event_category: detections
event_data:
{"connection_id":5453448,"detection_time":1742531066,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":64251,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 248033b2-ac47-4aaf-a08e-b2f0eca0d99f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742531067,"event_type_id":6,"status":"blocked"}


event_id: c1d93963-e6f1-40fe-b8ae-f9e2721164bd
log_level: critical
event_category: detections
event_data:
{"connection_id":5453457,"detection_time":1742531067,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":58277,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5af80443-8aec-41c0-b43f-dbe1d17f8607
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531067,"event_type_id":6,"status":"blocked"}


event_id: 931a018f-6912-4761-b05f-d34103376f4c
log_level: critical
event_category: detections
event_data:
{"connection_id":5453456,"detection_time":1742531067,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":5353,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0767e6e0-66a7-4459-945b-0fd33a4c02b2
log_level: critical
event_category: detections
event_data:
{"connection_id":5453463,"detection_time":1742531067,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":9464,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b8c61a16-152a-4799-ae9e-de4507866ea1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742531067,"event_type_id":6,"status":"blocked"}


event_id: f13507a0-31ba-4807-ada0-cba437ab65bd
log_level: critical
event_category: detections
event_data:
{"connection_id":5453461,"detection_time":1742531067,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":50377,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c57dc70e-da19-4a51-a9e9-c10a53a6f4df
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742531070,"event_type_id":6,"status":"blocked"}


event_id: e333f1b6-70d1-4c30-9845-34ba60c82509
log_level: critical
event_category: detections
event_data:
{"connection_id":5453472,"detection_time":1742531070,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":56966,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3f03c348-e222-4f17-82ce-524829e28dcf
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531070,"event_type_id":6,"status":"blocked"}


event_id: 1d97128b-c277-473b-a34b-048d090bfb77
log_level: critical
event_category: detections
event_data:
{"connection_id":5453469,"detection_time":1742531070,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":1799,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e687b834-2b3c-4304-af00-83c12e911668
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531070,"event_type_id":6,"status":"blocked"}


event_id: c2b05b93-97b6-4c69-bf9e-8d0bf931752e
log_level: critical
event_category: detections
event_data:
{"connection_id":5453468,"detection_time":1742531070,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":49222,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6a4181e7-b0cc-47bb-a329-ae39779e3560
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531071,"event_type_id":6,"status":"blocked"}


event_id: 386c7111-bb76-4acd-b1fd-35ac05af8b44
log_level: critical
event_category: detections
event_data:
{"connection_id":5453470,"detection_time":1742531071,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":50594,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ea701ca0-3b4d-4669-bdb5-0489e7514dc7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531071,"event_type_id":6,"status":"blocked"}


event_id: 43a70530-71a8-4374-83d6-ddeeee8689a7
log_level: critical
event_category: detections
event_data:
{"connection_id":5453471,"detection_time":1742531071,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":15997,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ae000522-df05-46b8-897b-6297a4b8f023
log_level: critical
event_category: detections
event_data:
{"connection_id":5453473,"detection_time":1742531071,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":17615,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b830fd27-e40b-4cbc-a436-0e8a7bc8e08f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531073,"event_type_id":6,"status":"blocked"}


event_id: bf375c12-46f7-4dec-82e1-12062a48d36d
log_level: critical
event_category: detections
event_data:
{"connection_id":5453484,"detection_time":1742531073,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":25328,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 48628532-a7d2-470f-b75d-cd635d47b2e0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531074,"event_type_id":6,"status":"blocked"}


event_id: c1b6183a-7f54-4b82-bd5d-22c04179aa43
log_level: critical
event_category: detections
event_data:
{"connection_id":5453486,"detection_time":1742531074,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":52848,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6625c6bb-7d9d-4a1d-a3e1-540bc0dbe6a7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531075,"event_type_id":6,"status":"blocked"}


event_id: a82055be-9f53-4ae6-8b0e-3c75f7bd8215
log_level: critical
event_category: detections
event_data:
{"connection_id":5453488,"detection_time":1742531075,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":54815,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 02750ac3-279b-4e07-bdf1-7d9acd2d60f6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531075,"event_type_id":6,"status":"blocked"}


event_id: f9aced79-f82c-418f-bfcd-ccb977aae1d3
log_level: critical
event_category: detections
event_data:
{"connection_id":5453490,"detection_time":1742531075,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":60607,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a6341857-f817-4358-b4f9-f36a27d223a2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531075,"event_type_id":6,"status":"blocked"}


event_id: f1baab92-48cf-45e8-9622-b3ac609b9dd2
log_level: critical
event_category: detections
event_data:
{"connection_id":5453492,"detection_time":1742531075,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":19155,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d3083222-796f-4924-974d-2d54a74e37d2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531077,"event_type_id":6,"status":"blocked"}


event_id: 97fcb2a2-0fd5-4de4-a646-4cd36eb325b0
log_level: critical
event_category: detections
event_data:
{"connection_id":5453497,"detection_time":1742531077,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":49650,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 69266d43-411c-4284-8c9e-deff0cf49f37
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531077,"event_type_id":6,"status":"blocked"}


event_id: 256b4cf4-13d5-436d-85c8-4d8ff421a388
log_level: critical
event_category: detections
event_data:
{"connection_id":5453499,"detection_time":1742531077,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":40364,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 66d4cd5b-abd0-4368-b560-e080bd90bcc9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531077,"event_type_id":6,"status":"blocked"}


event_id: 05df80b7-605b-4890-810e-fba432a0d983
log_level: critical
event_category: detections
event_data:
{"connection_id":5453502,"detection_time":1742531077,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":26366,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f958f1b6-cb67-40bc-a19a-a351a7fcab81
log_level: critical
event_category: detections
event_data:
{"connection_id":5453501,"detection_time":1742531077,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":52283,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 024437e0-b0b6-4278-9fcb-59b14f7620b0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531077,"event_type_id":6,"status":"blocked"}


event_id: 3be4ecde-3715-48c4-88b9-b1fd636f946f
log_level: critical
event_category: detections
event_data:
{"connection_id":5453503,"detection_time":1742531077,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":41018,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 006a1786-4dbc-4882-a3ca-30ef8e8a08f3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531078,"event_type_id":6,"status":"blocked"}


event_id: dbf3f1b7-19cd-4067-ae3c-a4c37e7b234c
log_level: critical
event_category: detections
event_data:
{"connection_id":5453504,"detection_time":1742531078,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":42984,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7ecf3da9-59e6-4634-826b-824fffd0cd22
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531078,"event_type_id":6,"status":"blocked"}


event_id: 9133c3c6-8e95-4d23-b09c-3f6c440e778e
log_level: critical
event_category: detections
event_data:
{"connection_id":5453507,"detection_time":1742531078,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":28527,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4a26ff46-c6d3-4c7c-be3f-28962fd065eb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531078,"event_type_id":6,"status":"blocked"}


event_id: a7393659-52d7-464b-a568-d49a4f74938f
log_level: critical
event_category: detections
event_data:
{"connection_id":5453505,"detection_time":1742531078,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":64717,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 02c8876a-1150-4743-a1ef-e4e38af77cf3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531079,"event_type_id":6,"status":"blocked"}


event_id: d7722b60-6be8-4d23-838f-fc9829ac8ced
log_level: critical
event_category: detections
event_data:
{"connection_id":5453514,"detection_time":1742531079,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":48622,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 93e1eec2-150e-45dd-a497-187e18867609
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531080,"event_type_id":6,"status":"blocked"}


event_id: 8445122a-884c-4036-a794-31a7cbc42216
log_level: critical
event_category: detections
event_data:
{"connection_id":5453517,"detection_time":1742531080,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":50956,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f37f156b-841d-43b7-9a13-3bc6037f62a1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531081,"event_type_id":6,"status":"blocked"}


event_id: 5fb32dc6-c1ee-4390-8527-c3dab01ef667
log_level: critical
event_category: detections
event_data:
{"connection_id":5453522,"detection_time":1742531081,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":40941,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d79fd9d1-6b0c-414b-b561-f5d7de5158d5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742531081,"event_type_id":6,"status":"blocked"}


event_id: 93f78807-20ad-4c62-857b-d5f4b1aedd33
log_level: critical
event_category: detections
event_data:
{"connection_id":5453533,"detection_time":1742531081,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":53302,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a8706507-30a6-472f-af67-7ecb9118d1bf
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531081,"event_type_id":6,"status":"blocked"}


event_id: 2a450c2e-bde9-48d1-87cb-072ca40d06b7
log_level: critical
event_category: detections
event_data:
{"connection_id":5453523,"detection_time":1742531081,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":56534,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ed4dcf77-0978-4b9e-8fd7-bb4aac7e4668
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531082,"event_type_id":6,"status":"blocked"}


event_id: 4c5e48f0-0c2d-4b38-9efc-141c98686ada
log_level: critical
event_category: detections
event_data:
{"connection_id":5453527,"detection_time":1742531082,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":57272,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9a493d85-d144-4619-9692-3e191550c35f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531082,"event_type_id":6,"status":"blocked"}


event_id: 49a115f7-9da0-4f09-bf12-855a1b8ee0c3
log_level: critical
event_category: detections
event_data:
{"connection_id":5453532,"detection_time":1742531082,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":62227,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1cf3411e-ff84-4215-b92c-22559bbe75c8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531083,"event_type_id":6,"status":"blocked"}


event_id: 396cd1b6-9ad2-423e-ae4f-e527561325ed
log_level: critical
event_category: detections
event_data:
{"connection_id":5453534,"detection_time":1742531083,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":64060,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fe07a5e7-8e41-433e-a4c1-1ef1c9759e95
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531083,"event_type_id":6,"status":"blocked"}


event_id: c256340e-a931-4f77-9bf2-6215911b5245
log_level: critical
event_category: detections
event_data:
{"connection_id":5453538,"detection_time":1742531083,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":25843,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5272fdda-1338-4284-8e38-042a72367f2d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531084,"event_type_id":6,"status":"blocked"}


event_id: 56a24600-5d61-4693-8363-f8ce9480f7e8
log_level: critical
event_category: detections
event_data:
{"connection_id":5453540,"detection_time":1742531084,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":2382,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 187ee461-424b-4a14-b479-57519d5a98c3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531086,"event_type_id":6,"status":"blocked"}


event_id: 408f984c-904d-4d43-8e12-8795974b4d6b
log_level: critical
event_category: detections
event_data:
{"connection_id":5453547,"detection_time":1742531086,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":59240,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bbc4a93f-0fde-4669-8df9-fb54e4191fce
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531086,"event_type_id":6,"status":"blocked"}


event_id: 40fcaeb2-3642-454c-9332-11036b2486a9
log_level: critical
event_category: detections
event_data:
{"connection_id":5453546,"detection_time":1742531086,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":49190,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 23ef61d9-dcb1-4a8e-8418-b834036a4095
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531087,"event_type_id":6,"status":"blocked"}


event_id: 6b6cab9e-c78c-4319-acf5-63218e007b1f
log_level: critical
event_category: detections
event_data:
{"connection_id":5453549,"detection_time":1742531087,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":52385,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5b0797cd-9e0d-4dc2-ba66-9e88967055c5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531087,"event_type_id":6,"status":"blocked"}


event_id: 87fd8636-728a-409c-9abc-dc8b83f27d39
log_level: critical
event_category: detections
event_data:
{"connection_id":5453553,"detection_time":1742531087,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":11035,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b860fa30-4bc8-4b0f-8e83-a27a1f3d0525
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531087,"event_type_id":6,"status":"blocked"}


event_id: 011d732f-91b2-450e-8a85-3c10de9d7c08
log_level: critical
event_category: detections
event_data:
{"connection_id":5453552,"detection_time":1742531087,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":61265,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e750d300-a308-4daa-a3dc-66496db67b28
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742531087,"event_type_id":6,"status":"blocked"}


event_id: 19f2a1ec-6c2c-4cad-948b-f1c1f3abf635
log_level: critical
event_category: detections
event_data:
{"connection_id":5453560,"detection_time":1742531087,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":59503,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: dce3e3e1-8b83-4ea2-9e73-ee9483455a4f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531088,"event_type_id":6,"status":"blocked"}


event_id: 9a1e7486-93d4-461b-b46a-205c78308b9a
log_level: critical
event_category: detections
event_data:
{"connection_id":5453557,"detection_time":1742531088,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":16214,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ba707d1c-c244-4e49-8b44-6796785a680d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531088,"event_type_id":6,"status":"blocked"}


event_id: 1a1d0d87-0a37-47c3-99fb-76dec6a933ee
log_level: critical
event_category: detections
event_data:
{"connection_id":5453555,"detection_time":1742531088,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":39095,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7e804ca9-62a1-48bf-a8a6-b03acd37f890
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531089,"event_type_id":6,"status":"blocked"}


event_id: b8632be8-76ea-442f-bffc-a0287e786305
log_level: critical
event_category: detections
event_data:
{"connection_id":5453571,"detection_time":1742531089,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":62927,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fab7ce2d-a043-4390-b044-077b79cede0a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531089,"event_type_id":6,"status":"blocked"}


event_id: 76ef059c-9567-489d-bd39-58dea2eff220
log_level: critical
event_category: detections
event_data:
{"connection_id":5453578,"detection_time":1742531089,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":21119,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d161af88-d478-4ab8-947d-716ab3671485
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531089,"event_type_id":6,"status":"blocked"}


event_id: abb2eaca-96c5-4716-b47b-8c50275ab477
log_level: critical
event_category: detections
event_data:
{"connection_id":5453579,"detection_time":1742531089,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":4861,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c05e5647-31a9-4c72-816f-d59b92e80d35
log_level: critical
event_category: detections
event_data:
{"connection_id":5453580,"detection_time":1742531089,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":49200,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cf9a2f7f-8738-404e-8c45-f22825b31a9b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531089,"event_type_id":6,"status":"blocked"}


event_id: 40a45667-fb65-46f5-a93c-bc99ee2a143a
log_level: critical
event_category: detections
event_data:
{"connection_id":5453582,"detection_time":1742531089,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":20487,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c20b0530-7d1e-4897-b4cd-462ed301cfea
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531089,"event_type_id":6,"status":"blocked"}


event_id: e89bd685-6012-4f8b-a593-c69fd4c8c4d9
log_level: critical
event_category: detections
event_data:
{"connection_id":5453574,"detection_time":1742531089,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":44123,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: dd6e8782-182d-4efd-8804-eb9071a1342f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531090,"event_type_id":6,"status":"blocked"}


event_id: bf98a33f-9bcf-494a-babf-1e8dc6072b8d
log_level: critical
event_category: detections
event_data:
{"connection_id":5453583,"detection_time":1742531090,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":65091,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: eb97d938-30d4-46b3-8474-0105d33ffdd3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531090,"event_type_id":6,"status":"blocked"}


event_id: 86538c95-1463-4671-92b9-689a9308ee98
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531090,"event_type_id":6,"status":"blocked"}


event_id: 8d3c6ab9-33c0-4290-857e-d4aedab5e2fd
log_level: critical
event_category: detections
event_data:
{"connection_id":5453586,"detection_time":1742531090,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":7803,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 318716b7-67c1-44a5-a560-75d4967b2eb5
log_level: critical
event_category: detections
event_data:
{"connection_id":5453556,"detection_time":1742531090,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":39281,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0507a79c-dd93-4abf-9552-c299e04ce8fc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531090,"event_type_id":6,"status":"blocked"}


event_id: adc17ed1-8625-4e6d-aee7-795446ebd439
log_level: critical
event_category: detections
event_data:
{"connection_id":5453588,"detection_time":1742531090,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":26697,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d9a77e86-39b1-40b6-aa36-81dd22d2f942
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"54.38.41.116","autoblock_timeout":25,"detection_time":1742531092,"event_type_id":6,"status":"blocked"}


event_id: 85123d96-7c9e-4fb8-9770-84997a4a5be7
log_level: critical
event_category: detections
event_data:
{"connection_id":5453598,"detection_time":1742531092,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"54.38.41.116","remote_port":53076,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6ffc6bf6-199a-4581-8fc6-498022591b5b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531093,"event_type_id":6,"status":"blocked"}


event_id: be00e852-e9ec-4384-a817-afde19b0ed9e
log_level: critical
event_category: detections
event_data:
{"connection_id":5453596,"detection_time":1742531093,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":33038,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7afc6e3b-206d-45cf-a8f9-db98ff526d1d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531093,"event_type_id":6,"status":"blocked"}


event_id: b015a8da-23f0-4560-821d-5a65d0ffcf44
log_level: critical
event_category: detections
event_data:
{"connection_id":5453597,"detection_time":1742531093,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":46719,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: adaad54e-8a3a-454e-8c48-59f4e39bf1db
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531094,"event_type_id":6,"status":"blocked"}


event_id: faa189a9-79a4-453f-9db3-4a95afb876c1
log_level: critical
event_category: detections
event_data:
{"connection_id":5453601,"detection_time":1742531094,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":37125,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b581e91c-cc9b-4b6c-a039-dd1950659245
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531094,"event_type_id":6,"status":"blocked"}


event_id: 16d83fb5-4366-4047-834b-d32c51cd34a5
log_level: critical
event_category: detections
event_data:
{"connection_id":5453600,"detection_time":1742531094,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":48177,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 47fb1947-b2e1-4112-b24d-218456378cdf
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531094,"event_type_id":6,"status":"blocked"}


event_id: ba2ac745-718d-489e-b266-f8e2a0bb157c
log_level: critical
event_category: detections
event_data:
{"connection_id":5453602,"detection_time":1742531094,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":23348,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 31155db2-e3b3-495a-81ec-0dbe181db266
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531094,"event_type_id":6,"status":"blocked"}


event_id: 26ab56d3-daa1-4b6a-87bd-3ade7bfa7061
log_level: critical
event_category: detections
event_data:
{"connection_id":5453603,"detection_time":1742531094,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":58828,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 97eff6b5-cfde-4b1c-9181-f6412cd86c91
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531095,"event_type_id":6,"status":"blocked"}


event_id: b55a1803-c80f-45f4-aea3-b19e111f96f8
log_level: critical
event_category: detections
event_data:
{"connection_id":5453606,"detection_time":1742531095,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":60390,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0a50a793-8d5a-403b-94a0-a5f6c9c43b42
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531095,"event_type_id":6,"status":"blocked"}


event_id: 099872d9-9901-4a4b-8a89-46e42c12aa78
log_level: critical
event_category: detections
event_data:
{"connection_id":5453613,"detection_time":1742531095,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":52601,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3ef994f6-e94c-4c90-b2c5-cd04fdac43fa
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742531095,"event_type_id":6,"status":"blocked"}


event_id: a35661f1-a560-4f3b-b9d9-9b95ad188775
log_level: critical
event_category: detections
event_data:
{"connection_id":5453619,"detection_time":1742531095,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":56255,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 523deb22-768a-4671-9780-45021e50714d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531095,"event_type_id":6,"status":"blocked"}


event_id: 6cdb937a-a3b6-4a85-bee3-9154df768803
log_level: critical
event_category: detections
event_data:
{"connection_id":5453614,"detection_time":1742531095,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":28004,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 12685e39-2904-46c5-9d6b-9057319a1305
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531097,"event_type_id":6,"status":"blocked"}


event_id: a08bfc47-985a-4873-9ec0-85446baccd73
log_level: critical
event_category: detections
event_data:
{"connection_id":5453623,"detection_time":1742531097,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":50072,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f576aff4-6d87-4d3d-bf5b-3ca697dfe945
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531098,"event_type_id":6,"status":"blocked"}


event_id: 27ab4463-75b0-4e99-9ea8-aa16fd4f1f83
log_level: critical
event_category: detections
event_data:
{"connection_id":5453627,"detection_time":1742531098,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":54204,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d8971c8c-472a-42f5-a75f-38b4b6fe43e9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531098,"event_type_id":6,"status":"blocked"}


event_id: 2e7ca952-d146-4ec4-9197-3e46d2f91426
log_level: critical
event_category: detections
event_data:
{"connection_id":5453626,"detection_time":1742531098,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":62450,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 677cd380-e6a5-42f3-b2ab-6851e13153f1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531099,"event_type_id":6,"status":"blocked"}


event_id: 842c939e-a0d7-4b6a-9e5a-fbdf0132bdbc
log_level: critical
event_category: detections
event_data:
{"connection_id":5453631,"detection_time":1742531099,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":49233,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 59e7eb39-36d7-4684-b942-1f50a220ea25
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531099,"event_type_id":6,"status":"blocked"}


event_id: c997e71e-7c72-4424-a0aa-2f34a579ef58
log_level: critical
event_category: detections
event_data:
{"connection_id":5453636,"detection_time":1742531099,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":61827,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 60c0c341-02d5-49e9-92b3-8049e4e0560d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531099,"event_type_id":6,"status":"blocked"}


event_id: e27641b6-2592-4906-8ec2-395130226bef
log_level: critical
event_category: detections
event_data:
{"connection_id":5453638,"detection_time":1742531099,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":46357,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 55d6851e-9ca9-4fa5-be9f-70f697125cd0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742531100,"event_type_id":6,"status":"blocked"}


event_id: e2098e3b-2646-40ac-92bc-add31eb5f790
log_level: critical
event_category: detections
event_data:
{"connection_id":5453642,"detection_time":1742531100,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":52633,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 47cbfda5-aac0-4d34-8db3-f87ac5cf379e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531100,"event_type_id":6,"status":"blocked"}


event_id: 21b2454e-f6e2-40f9-99c4-cdde1f25125f
log_level: critical
event_category: detections
event_data:
{"connection_id":5453639,"detection_time":1742531100,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":61078,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bd8e2189-dfab-4a16-bbd5-9be44ec5def8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531101,"event_type_id":6,"status":"blocked"}


event_id: 3f9be2b8-8f8c-4ddf-99c5-b4b788e13521
log_level: critical
event_category: detections
event_data:
{"connection_id":5453640,"detection_time":1742531101,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":59772,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 24b3eed7-f622-442d-a9cf-2b47e437cb52
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531101,"event_type_id":6,"status":"blocked"}


event_id: 077a7e3f-d79f-416e-a8fb-7581be5b1e9c
log_level: critical
event_category: detections
event_data:
{"connection_id":5453643,"detection_time":1742531101,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":62552,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b1175b6d-d53e-4c8f-836b-621fec2f2acf
log_level: critical
event_category: detections
event_data:
{"connection_id":5453644,"detection_time":1742531101,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":62486,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2d3e1ba6-2b57-4576-9579-378437f87dac
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531102,"event_type_id":6,"status":"blocked"}


event_id: 4a9cb8ef-8db1-41c5-82df-cea93439dc3a
log_level: critical
event_category: detections
event_data:
{"connection_id":5453645,"detection_time":1742531102,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":65531,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6d147c1a-c5de-46fd-b96b-956a5c414990
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531102,"event_type_id":6,"status":"blocked"}


event_id: 7e6b20ec-dbbe-43a2-9221-dadc51dafa23
log_level: critical
event_category: detections
event_data:
{"connection_id":5453621,"detection_time":1742531102,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":57920,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 038be8e9-2b9a-4e0a-8d42-e6d9f9b3a829
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531103,"event_type_id":6,"status":"blocked"}


event_id: 0c7de0bc-0ce4-4827-9a7e-7cacf691b463
log_level: critical
event_category: detections
event_data:
{"connection_id":5453622,"detection_time":1742531103,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":59118,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e33586d0-4642-49c3-89ef-546e5cdaed3b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531103,"event_type_id":6,"status":"blocked"}


event_id: 4673c273-fd1a-41b7-b474-faa77b093fdf
log_level: critical
event_category: detections
event_data:
{"connection_id":5453653,"detection_time":1742531103,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":5695,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 29feb03b-6a3b-492e-a2e0-a7f831063a7b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531105,"event_type_id":6,"status":"blocked"}


event_id: 1a20e10a-7f2e-4eef-b9e4-5deb55fffd06
log_level: critical
event_category: detections
event_data:
{"connection_id":5453667,"detection_time":1742531105,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":9872,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1f86b1a3-ed7c-4554-ae0d-e25f8fce7935
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531105,"event_type_id":6,"status":"blocked"}


event_id: 0b514209-d69c-42bf-8d36-2f7b06235b19
log_level: critical
event_category: detections
event_data:
{"connection_id":5453668,"detection_time":1742531105,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":63869,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9bbf8221-8fe7-409f-95c4-d17945fa042a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531106,"event_type_id":6,"status":"blocked"}


event_id: 54f3a147-a628-4edf-8002-bec45ca06b1b
log_level: critical
event_category: detections
event_data:
{"connection_id":5453670,"detection_time":1742531106,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":55511,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ce0333b7-d693-449f-87bd-6cf9fad18f84
log_level: critical
event_category: detections
event_data:
{"connection_id":5453672,"detection_time":1742531106,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":57445,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5ce0b96d-c206-495e-966c-a6e9e3e68719
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531106,"event_type_id":6,"status":"blocked"}


event_id: 4ce26d13-0328-4625-a139-a0c47514b389
log_level: critical
event_category: detections
event_data:
{"connection_id":5453673,"detection_time":1742531106,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":20710,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 719a443f-a47c-4fbc-a326-e406a0cded29
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531107,"event_type_id":6,"status":"blocked"}


event_id: 3854c9eb-fe76-4ecc-ac73-c04018c53ab5
log_level: critical
event_category: detections
event_data:
{"connection_id":5453678,"detection_time":1742531107,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":21238,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a2b0b065-aa98-44ed-a669-6f67f5d7d8d1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531107,"event_type_id":6,"status":"blocked"}


event_id: 72943e23-96f1-4189-af05-ad70ba3ab0ae
log_level: critical
event_category: detections
event_data:
{"connection_id":5453679,"detection_time":1742531107,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":23422,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d6a19352-8060-4c9c-8d57-22c5631d6b3b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531107,"event_type_id":6,"status":"blocked"}


event_id: 1130e73b-e62e-4d61-9a70-9412c662efe0
log_level: critical
event_category: detections
event_data:
{"connection_id":5453680,"detection_time":1742531107,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":6849,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6cd24367-0e36-4a4f-a6e8-de10279e5cb6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742531108,"event_type_id":6,"status":"blocked"}


event_id: 70e0cd27-125e-42a2-b182-9ccfb8d67dbb
log_level: critical
event_category: detections
event_data:
{"connection_id":5453687,"detection_time":1742531108,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":60186,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cab5d881-ab9d-4796-8d79-c7fedd208fb2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531108,"event_type_id":6,"status":"blocked"}


event_id: 6d2a7aa3-b567-4e54-ac19-9bb6120e1934
log_level: critical
event_category: detections
event_data:
{"connection_id":5453683,"detection_time":1742531108,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":8737,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 76385dba-5225-400a-abaa-df0717d2fa74
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531109,"event_type_id":6,"status":"blocked"}


event_id: 0d17c5e3-bb45-4e34-8d3e-15f2500a8f68
log_level: critical
event_category: detections
event_data:
{"connection_id":5453692,"detection_time":1742531109,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":29165,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cdf1470f-a97f-40b8-8bc0-138192840b34
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531109,"event_type_id":6,"status":"blocked"}


event_id: 49b9112f-4600-4cff-828c-5f0e7f552999
log_level: critical
event_category: detections
event_data:
{"connection_id":5453693,"detection_time":1742531109,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":31410,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f6bafb26-dbe1-47fb-8de3-4f39795b4680
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742531109,"event_type_id":6,"status":"blocked"}


event_id: 823f237a-196c-435c-a9bc-e33628b85587
log_level: critical
event_category: detections
event_data:
{"connection_id":5453698,"detection_time":1742531109,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":59186,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 84ff57e6-ea4a-4ef5-b219-4f4d02c4fee5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531110,"event_type_id":6,"status":"blocked"}


event_id: cc5d1e5b-4d3b-4df0-bcaf-fa8a27eb5415
log_level: critical
event_category: detections
event_data:
{"connection_id":5453695,"detection_time":1742531110,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":59812,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 63c53a29-9cde-4436-807e-fa7779eeaadf
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531111,"event_type_id":6,"status":"blocked"}


event_id: 461dbe2c-09e8-4ba3-bb13-ab439ceaaeb5
log_level: critical
event_category: detections
event_data:
{"connection_id":5453696,"detection_time":1742531111,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":62021,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 919313e2-316c-4530-9d61-d595aaa39373
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531111,"event_type_id":6,"status":"blocked"}


event_id: 38f708d4-2f90-49c4-9df7-51aabd32b52d
log_level: critical
event_category: detections
event_data:
{"connection_id":5453703,"detection_time":1742531111,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":36907,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2a17706f-d648-4f6e-a3dd-bae3f568b914
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531111,"event_type_id":6,"status":"blocked"}


event_id: 7cb0cd23-74ac-4ae5-95e6-95ef783ebcec
log_level: critical
event_category: detections
event_data:
{"connection_id":5453705,"detection_time":1742531111,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":21288,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b1130e07-a9b8-4c64-a256-6ad39be2ef8b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531111,"event_type_id":6,"status":"blocked"}


event_id: ca5db9ee-046e-4309-91ee-df1c2f5c6d03
log_level: critical
event_category: detections
event_data:
{"connection_id":5453706,"detection_time":1742531111,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":37584,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cc5e5676-e182-4803-b515-38fd2c0f10d3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531112,"event_type_id":6,"status":"blocked"}


event_id: 54556051-fc24-40ca-a718-d60b9af01eda
log_level: critical
event_category: detections
event_data:
{"connection_id":5453708,"detection_time":1742531112,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":63205,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cd132de7-5c25-47a1-a982-382713291249
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531112,"event_type_id":6,"status":"blocked"}


event_id: b63e1464-c3eb-4f82-abc7-c2e44e335c91
log_level: critical
event_category: detections
event_data:
{"connection_id":5453710,"detection_time":1742531112,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":56428,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 00dcc3e2-4d44-4a09-9240-3645cd7a49be
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531113,"event_type_id":6,"status":"blocked"}


event_id: 66775800-7a3a-4f3b-a58b-5501ac5d727e
log_level: critical
event_category: detections
event_data:
{"connection_id":5453712,"detection_time":1742531113,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":58794,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2ce63206-6ba3-461f-ae9a-322c7c3f173c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742531113,"event_type_id":6,"status":"blocked"}


event_id: 60b76704-3d95-49e9-9152-b633f9d43751
log_level: critical
event_category: detections
event_data:
{"connection_id":5453713,"detection_time":1742531113,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":49304,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ea7b7367-b00a-484f-a40e-43875ff3ef31
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531114,"event_type_id":6,"status":"blocked"}


event_id: f198f325-d0cb-45f4-85d4-4a683b3c0f3b
log_level: critical
event_category: detections
event_data:
{"connection_id":5453718,"detection_time":1742531114,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":47414,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a02e05c4-3d3a-4708-89cf-b84a4273af23
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531114,"event_type_id":6,"status":"blocked"}


event_id: 58113b2f-82a8-4d2a-b707-563a8b498353
log_level: critical
event_category: detections
event_data:
{"connection_id":5453717,"detection_time":1742531114,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":65256,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3945f5f4-720f-4216-a4d1-203e51c97f82
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742531115,"event_type_id":6,"status":"blocked"}


event_id: c75bf303-78f6-45bd-a994-f6ec94c24fdc
log_level: critical
event_category: detections
event_data:
{"connection_id":5453725,"detection_time":1742531115,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":61978,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 58bcf9c3-3e1e-40b4-929e-b7196a6028cd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531116,"event_type_id":6,"status":"blocked"}


event_id: 2928f898-0df8-40e6-b7c0-8ae00c4554a3
log_level: critical
event_category: detections
event_data:
{"connection_id":5453727,"detection_time":1742531116,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":39579,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 600dfb37-7547-4b8a-bad3-3a26a51ee80a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531117,"event_type_id":6,"status":"blocked"}


event_id: 5b41c8b4-ac54-46c4-bd26-828809e90951
log_level: critical
event_category: detections
event_data:
{"connection_id":5453732,"detection_time":1742531117,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":56207,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 30394021-4fb0-4c5a-ba40-fbdb81183eeb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531117,"event_type_id":6,"status":"blocked"}


event_id: c5e3cc5a-0512-4f80-bc9f-a1c882f67772
log_level: critical
event_category: detections
event_data:
{"connection_id":5453737,"detection_time":1742531117,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":60960,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 14d86435-41a6-485e-9073-f1da16d71a03
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531117,"event_type_id":6,"status":"blocked"}


event_id: 161227ce-3f60-4132-9853-8b336ac05c6a
log_level: critical
event_category: detections
event_data:
{"connection_id":5453741,"detection_time":1742531117,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53924,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 23b94c36-e88b-4cc1-9fd7-e89b4e16fe82
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531118,"event_type_id":6,"status":"blocked"}


event_id: 4300f1d7-1ebf-43ca-a83a-e6cb4c8fd89f
log_level: critical
event_category: detections
event_data:
{"connection_id":5453740,"detection_time":1742531118,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":52165,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f354f250-2505-497e-b901-550dbb3b73cc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531119,"event_type_id":6,"status":"blocked"}


event_id: 27d0601f-61c3-4dea-a7af-dba744d20abc
log_level: critical
event_category: detections
event_data:
{"connection_id":5453745,"detection_time":1742531119,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":1609,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 18014542-b6ea-428b-943c-3ba5eaee7975
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531119,"event_type_id":6,"status":"blocked"}


event_id: 49d81f05-8f9f-48d7-a419-c4c26bae7591
log_level: critical
event_category: detections
event_data:
{"connection_id":5453747,"detection_time":1742531119,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":65094,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f65af38d-28c6-406f-92a2-df4f6b97235d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531119,"event_type_id":6,"status":"blocked"}


event_id: 62aa213c-af3c-48d0-bcca-82cc1e540e64
log_level: critical
event_category: detections
event_data:
{"connection_id":5453748,"detection_time":1742531119,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":49830,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ce773e6b-c881-41fb-a5f1-d5298bef06e0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531120,"event_type_id":6,"status":"blocked"}


event_id: f3eda894-6109-4df5-8fb7-bdc276c9c96c
log_level: critical
event_category: detections
event_data:
{"connection_id":5453750,"detection_time":1742531120,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":52490,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4a385b2b-1ae9-4534-b686-fa78493e6ce5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531120,"event_type_id":6,"status":"blocked"}


event_id: 23badbce-8879-4b80-be02-cf1a18143e7d
log_level: critical
event_category: detections
event_data:
{"connection_id":5453751,"detection_time":1742531120,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":6915,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9e7f42ec-7ff1-4f0e-ba88-c9c8b64edc45
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531122,"event_type_id":6,"status":"blocked"}


event_id: fea2c501-fd02-4a23-a8a0-ab8683f67fdb
log_level: critical
event_category: detections
event_data:
{"connection_id":5453752,"detection_time":1742531122,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":56711,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 191582b4-143e-44df-93e6-6e7fbd64aaf2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742531122,"event_type_id":6,"status":"blocked"}


event_id: 812da0ca-40ad-4642-b9c7-831fe3555025
log_level: critical
event_category: detections
event_data:
{"connection_id":5453762,"detection_time":1742531122,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":53555,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1bff8c1b-7f0f-4aed-b6d3-c5fd02e410d4
log_level: critical
event_category: detections
event_data:
{"connection_id":5453755,"detection_time":1742531122,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":59081,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 388813e0-162d-4929-9a8a-badc1f8da1eb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531122,"event_type_id":6,"status":"blocked"}


event_id: 9709c7b5-bd3d-4299-bb46-e7de018ce1b3
log_level: critical
event_category: detections
event_data:
{"connection_id":5453756,"detection_time":1742531122,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":13100,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bad750cf-7572-4840-962e-a9ecfba58599
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742531124,"event_type_id":6,"status":"blocked"}


event_id: d4b539e9-3aee-499f-89a2-de495383f8ef
log_level: critical
event_category: detections
event_data:
{"connection_id":5453771,"detection_time":1742531124,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":62139,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2fe1e89c-f9fe-4203-a155-691f56719415
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531124,"event_type_id":6,"status":"blocked"}


event_id: cc5bffeb-89be-402c-a0d5-0c1212f95674
log_level: critical
event_category: detections
event_data:
{"connection_id":5453765,"detection_time":1742531124,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":17354,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: baaa94e3-c19a-401f-8455-c4c826996eca
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531124,"event_type_id":6,"status":"blocked"}


event_id: 9036b6f5-8759-4730-a1d1-c6d6595e6f87
log_level: critical
event_category: detections
event_data:
{"connection_id":5453768,"detection_time":1742531124,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":3862,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1582561b-38dc-4332-802e-94b88eb5936a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531125,"event_type_id":6,"status":"blocked"}


event_id: bb482748-7656-4318-afe6-8e4c7231a986
log_level: critical
event_category: detections
event_data:
{"connection_id":5453770,"detection_time":1742531125,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53738,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ad54fa8c-9b47-4c9c-8d27-ccc933117294
log_level: critical
event_category: detections
event_data:
{"connection_id":5453773,"detection_time":1742531125,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":55861,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8cd18b2c-4b81-42db-a746-ffd2d45ec8cf
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531125,"event_type_id":6,"status":"blocked"}


event_id: db44705f-8f30-453f-80de-156881bb1f3c
log_level: critical
event_category: detections
event_data:
{"connection_id":5453775,"detection_time":1742531125,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":8260,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 926b5ab0-2f76-4109-9061-81968462489a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531125,"event_type_id":6,"status":"blocked"}


event_id: d3aad1b3-366b-4a22-be8e-315b518ddbbe
log_level: critical
event_category: detections
event_data:
{"connection_id":5453781,"detection_time":1742531125,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":65180,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: febe34da-88ce-48a7-a195-9872984275b0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531126,"event_type_id":6,"status":"blocked"}


event_id: df02db78-caa2-4a0e-8d80-c44e6b8edb31
log_level: critical
event_category: detections
event_data:
{"connection_id":5453776,"detection_time":1742531126,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":64408,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c759cac7-d3ad-46e3-af70-88e1481628e5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531126,"event_type_id":6,"status":"blocked"}


event_id: e62e245e-7f1b-4ffe-97a9-8879e5a5f767
log_level: critical
event_category: detections
event_data:
{"connection_id":5453783,"detection_time":1742531126,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":30127,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3b6d049e-3aae-4784-b6ce-179c70b80033
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531127,"event_type_id":6,"status":"blocked"}


event_id: 8070d79d-7159-467b-874d-e836d0425923
log_level: critical
event_category: detections
event_data:
{"connection_id":5453800,"detection_time":1742531127,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":34303,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cd00f380-3994-48d7-936f-44ccf3355f71
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742531128,"event_type_id":6,"status":"blocked"}


event_id: 2de8d852-dc8e-4426-8134-ebad939eb73d
log_level: critical
event_category: detections
event_data:
{"connection_id":5453809,"detection_time":1742531128,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":61844,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9c7a61f9-d877-4a3a-87c1-e0c123e29b04
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531129,"event_type_id":6,"status":"blocked"}


event_id: 6a379c64-40ad-48cf-9968-f93ec0bf3a95
log_level: critical
event_category: detections
event_data:
{"connection_id":5453806,"detection_time":1742531129,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":4509,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b1479bec-d8c1-4a8d-b972-d9dfa9b15d01
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742531129,"event_type_id":6,"status":"blocked"}


event_id: 0ab7d823-664e-4480-b5e1-be4c1e82ea78
log_level: critical
event_category: detections
event_data:
{"connection_id":5453822,"detection_time":1742531129,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":57508,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 985c9807-51ef-49a4-b3e5-b799947d806b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531130,"event_type_id":6,"status":"blocked"}


event_id: 75ac0a16-dc3f-4fcd-beed-b32d6f4500f2
log_level: critical
event_category: detections
event_data:
{"connection_id":5453814,"detection_time":1742531130,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":65338,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 62dca629-9406-483b-a4ae-ece03af9ca83
log_level: critical
event_category: detections
event_data:
{"connection_id":5453818,"detection_time":1742531130,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":50313,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b61d48f5-f8c9-4d54-9b40-c5a18dc20d8e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531130,"event_type_id":6,"status":"blocked"}


event_id: 2899f176-dfb0-4d33-8adb-7cd9fcfe7046
log_level: critical
event_category: detections
event_data:
{"connection_id":5453821,"detection_time":1742531130,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":41933,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f683b5d5-1142-42c1-9215-2cc3f0fa3354
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531130,"event_type_id":6,"status":"blocked"}


event_id: c42062cc-785b-4dcd-868d-0c4053719cf2
log_level: critical
event_category: detections
event_data:
{"connection_id":5453823,"detection_time":1742531130,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":27027,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c694707f-3a90-4a9b-a42c-692256f9f4fc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531131,"event_type_id":6,"status":"blocked"}


event_id: 9f1babd7-7ce8-4700-bcf2-01d1a9a06b66
log_level: critical
event_category: detections
event_data:
{"connection_id":5453824,"detection_time":1742531131,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":43101,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8301e5eb-0430-4bc0-b148-004111196c8c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531133,"event_type_id":6,"status":"blocked"}


event_id: 7de836e6-3336-4ed1-9ca2-859cd7c4a394
log_level: critical
event_category: detections
event_data:
{"connection_id":5453829,"detection_time":1742531133,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":50502,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 16f78416-402f-47ee-ae52-8e56bad86a78
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531134,"event_type_id":6,"status":"blocked"}


event_id: f3c7b998-fc0d-4191-aaa9-a6c027e2bf4c
log_level: critical
event_category: detections
event_data:
{"connection_id":5453844,"detection_time":1742531134,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53714,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 42c78e56-c1cb-46d4-aaaf-a4b8022dc4bf
log_level: critical
event_category: detections
event_data:
{"connection_id":5453847,"detection_time":1742531134,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":56177,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4ebc6367-92a0-468f-a32d-1690637fcf56
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531135,"event_type_id":6,"status":"blocked"}


event_id: beb1206a-00ac-4595-b27e-7079ef81a367
log_level: critical
event_category: detections
event_data:
{"connection_id":5453855,"detection_time":1742531135,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":44331,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ce27c8b5-a1d4-4ced-a733-45a9918e93b7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531136,"event_type_id":6,"status":"blocked"}


event_id: 4d3f546f-742e-4d0e-bdd6-544033fb5dc4
log_level: critical
event_category: detections
event_data:
{"connection_id":5453861,"detection_time":1742531136,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":1063,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 71de0852-d64d-438d-9544-02e489708ff2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531136,"event_type_id":6,"status":"blocked"}


event_id: 36ab8752-53ce-43a5-97ce-66bd0c53bbee
log_level: critical
event_category: detections
event_data:
{"connection_id":5453863,"detection_time":1742531136,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":50372,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d1811c76-e7e5-4d8d-97f3-51a9ee694171
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531137,"event_type_id":6,"status":"blocked"}


event_id: 730ebbbe-7b62-412f-83a5-f2b8c638826b
log_level: critical
event_category: detections
event_data:
{"connection_id":5453866,"detection_time":1742531137,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53041,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0ccdb560-127a-4f9e-b06e-5a0ffbaead0a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531137,"event_type_id":6,"status":"blocked"}


event_id: 81e3b126-d67c-4084-9fe8-6fbc42133383
log_level: critical
event_category: detections
event_data:
{"connection_id":5453867,"detection_time":1742531137,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":3875,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b0c72308-0ccd-4a89-bfd5-9b5abe59c87c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531137,"event_type_id":6,"status":"blocked"}


event_id: 54071209-c636-4563-b5bf-54675e8cf792
log_level: critical
event_category: detections
event_data:
{"connection_id":5453869,"detection_time":1742531137,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":1508,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 52cb2036-b650-475c-9e8f-4c974ea88d43
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531137,"event_type_id":6,"status":"blocked"}


event_id: 3664cd09-b68f-4f97-849b-66ddcc63b9d2
log_level: critical
event_category: detections
event_data:
{"connection_id":5453873,"detection_time":1742531137,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":51929,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 16d47d69-9bfc-449c-8b8f-4ed4c615a27f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742531138,"event_type_id":6,"status":"blocked"}


event_id: f22aaeb3-34c3-4d0b-a02b-b4c58cd4b0f4
log_level: critical
event_category: detections
event_data:
{"connection_id":5453889,"detection_time":1742531138,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":65068,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 47b35b02-834e-48ab-a1a2-38cd79faafc7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531138,"event_type_id":6,"status":"blocked"}


event_id: b9c37294-d98c-4e7b-bd3c-54362ebc7d4d
log_level: critical
event_category: detections
event_data:
{"connection_id":5453879,"detection_time":1742531138,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":54007,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f3178f59-65ba-4c9f-a530-33b15c7785fa
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531138,"event_type_id":6,"status":"blocked"}


event_id: 64481d65-443b-4d5b-a3cc-7472e11a69ed
log_level: critical
event_category: detections
event_data:
{"connection_id":5453877,"detection_time":1742531138,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":64792,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cb47ede3-417e-4b44-bed7-359ed08e135d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531139,"event_type_id":6,"status":"blocked"}


event_id: d581087b-c742-4bce-b348-c4c73ba61df6
log_level: critical
event_category: detections
event_data:
{"connection_id":5453882,"detection_time":1742531139,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":49276,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4b663bc6-eddc-4916-879c-e3d60ea80134
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531139,"event_type_id":6,"status":"blocked"}


event_id: c067858f-527a-4484-9f04-9decac9169b2
log_level: critical
event_category: detections
event_data:
{"connection_id":5453868,"detection_time":1742531139,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":28951,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a1f98f3f-b4c9-421f-ab88-6647fcd7aa81
log_level: critical
event_category: detections
event_data:
{"connection_id":5453854,"detection_time":1742531139,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":23579,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 08851e52-ec14-459e-84f7-a3d84686c4f0
log_level: critical
event_category: detections
event_data:
{"connection_id":5453836,"detection_time":1742531139,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":16299,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 03a1796a-d095-44d0-95b3-170630409010
log_level: critical
event_category: detections
event_data:
{"connection_id":5453858,"detection_time":1742531139,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":25624,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fb882f49-ba90-47b4-b55e-f185949fee11
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531139,"event_type_id":6,"status":"blocked"}


event_id: b430f3d8-f38f-493d-a5b6-f7c9d1e7ef09
log_level: critical
event_category: detections
event_data:
{"connection_id":5453891,"detection_time":1742531139,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":9595,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 66113bbb-cf8a-4327-ae5c-92dd056a2f0d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531139,"event_type_id":6,"status":"blocked"}


event_id: dcd210bc-d95d-4382-8137-092fd5d10ce6
log_level: critical
event_category: detections
event_data:
{"connection_id":5453892,"detection_time":1742531139,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":11898,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7571518c-7387-42bf-a08f-ab17e829a06f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531140,"event_type_id":6,"status":"blocked"}


event_id: 5dffd95c-6858-4fb9-8fb3-61ed56cecfe9
log_level: critical
event_category: detections
event_data:
{"connection_id":5453846,"detection_time":1742531140,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":18554,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8668de0b-c83b-462e-80dc-128c8d4d6356
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531141,"event_type_id":6,"status":"blocked"}


event_id: 85d3771f-53d2-40d7-aff7-49520a78edef
log_level: critical
event_category: detections
event_data:
{"connection_id":5453902,"detection_time":1742531141,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":17297,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c86b2683-d00e-484a-af5d-80f6ddf682c6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531141,"event_type_id":6,"status":"blocked"}


event_id: 222bd291-6ca2-4497-b0bb-8a85ecc291c3
log_level: critical
event_category: detections
event_data:
{"connection_id":5453921,"detection_time":1742531141,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":64096,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c16e12d3-1db1-4aad-a45a-ed4fc84a2ef5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531141,"event_type_id":6,"status":"blocked"}


event_id: 2da8116b-61c4-47de-81ae-4d222d957dd5
log_level: critical
event_category: detections
event_data:
{"connection_id":5453910,"detection_time":1742531141,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":17959,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9bd3bcab-99b3-4768-98eb-8b3328a18bc6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531141,"event_type_id":6,"status":"blocked"}


event_id: 186ca9a0-4616-4fb2-ae48-d816d6249d63
log_level: critical
event_category: detections
event_data:
{"connection_id":5453909,"detection_time":1742531141,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":1551,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1c8d2284-b637-4523-9afa-785dc22d390b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531142,"event_type_id":6,"status":"blocked"}


event_id: 322169e3-533c-4a2b-8974-6ee744666a38
log_level: critical
event_category: detections
event_data:
{"connection_id":5453919,"detection_time":1742531142,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":62553,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e7815e2a-f144-4931-a6d4-799f246a075b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531143,"event_type_id":6,"status":"blocked"}


event_id: ecccb0b0-04b2-4e31-80cb-dcf84e3895d2
log_level: critical
event_category: detections
event_data:
{"connection_id":5453927,"detection_time":1742531143,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":31089,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f7381b8e-79ac-4397-82e2-b2f42f26c783
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742531143,"event_type_id":6,"status":"blocked"}


event_id: eb3e05e7-8b14-4bab-84fa-3a9979c9eb55
log_level: critical
event_category: detections
event_data:
{"connection_id":5453939,"detection_time":1742531143,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":49524,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 387fd56c-293e-4e31-a4ae-f0e3e781a750
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531143,"event_type_id":6,"status":"blocked"}


event_id: 41c38557-b32c-4725-a78a-bd7ace48dff9
log_level: critical
event_category: detections
event_data:
{"connection_id":5453935,"detection_time":1742531143,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":27782,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c3b6b80e-193e-4388-9629-4dbfe92bd424
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531145,"event_type_id":6,"status":"blocked"}


event_id: c5f1822c-0ab3-4910-aaee-2116d94b4d0f
log_level: critical
event_category: detections
event_data:
{"connection_id":5453942,"detection_time":1742531145,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":43296,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 00646c70-19f3-41b0-bd52-29a6870a3443
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531146,"event_type_id":6,"status":"blocked"}


event_id: 112cf39f-7e7f-4191-a9b7-c3a361ba7cbc
log_level: critical
event_category: detections
event_data:
{"connection_id":5453946,"detection_time":1742531146,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":50970,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5ec1939d-846c-45ec-83cb-fc878dc6e5f9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531146,"event_type_id":6,"status":"blocked"}


event_id: 3ff1ce68-1821-4824-a7ad-f7ecb1dd4109
log_level: critical
event_category: detections
event_data:
{"connection_id":5453949,"detection_time":1742531146,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":42806,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: af6df167-597f-4275-b319-f15a4a766991
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531146,"event_type_id":6,"status":"blocked"}


event_id: 73da3b5c-53c3-4410-8fbb-1af662b0209c
log_level: critical
event_category: detections
event_data:
{"connection_id":5453956,"detection_time":1742531146,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":19853,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8cd82378-9184-4e07-bed9-ccb432f7fa32
log_level: critical
event_category: detections
event_data:
{"connection_id":5453955,"detection_time":1742531146,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":52816,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c9424a0a-4d80-4572-ad99-ff2447c24286
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531146,"event_type_id":6,"status":"blocked"}


event_id: 3f64f82a-fda1-4005-9448-2ff4fca73086
log_level: critical
event_category: detections
event_data:
{"connection_id":5453959,"detection_time":1742531146,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":36394,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8ed8da8a-cdeb-4efe-abc4-b077b7bf83f9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531147,"event_type_id":6,"status":"blocked"}


event_id: 60f9cb9d-829c-48ed-ada8-b35b08074efd
log_level: critical
event_category: detections
event_data:
{"connection_id":5453961,"detection_time":1742531147,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":41341,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 60b3fb60-6845-47db-a9cd-c33b5d694e80
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531148,"event_type_id":6,"status":"blocked"}


event_id: af47ff5b-d843-454e-984b-b9b519248a56
log_level: critical
event_category: detections
event_data:
{"connection_id":5453966,"detection_time":1742531148,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":46249,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6c007494-a141-4a02-b441-7eea14017ac4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531148,"event_type_id":6,"status":"blocked"}


event_id: 747f57ad-c641-432d-8487-4a02965ceef4
log_level: critical
event_category: detections
event_data:
{"connection_id":5453965,"detection_time":1742531148,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":63533,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 600a3e49-79bb-4968-b789-15cac31d8664
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742531149,"event_type_id":6,"status":"blocked"}


event_id: ddf6d4dd-db07-49ee-bd12-a63b9a705896
log_level: critical
event_category: detections
event_data:
{"connection_id":5453979,"detection_time":1742531149,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":63841,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 728d2aa0-9f38-42dd-bf34-ea5e4958133a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531149,"event_type_id":6,"status":"blocked"}


event_id: a6668914-39df-4b87-aae5-e1c76b6787a7
log_level: critical
event_category: detections
event_data:
{"connection_id":5453975,"detection_time":1742531149,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":45005,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0e743fb0-039f-4853-95c2-cf8120867c32
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531149,"event_type_id":6,"status":"blocked"}


event_id: 31df1e61-c647-4a6d-8ad0-13c4032564e5
log_level: critical
event_category: detections
event_data:
{"connection_id":5453973,"detection_time":1742531149,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":49636,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 336742de-deda-4e8e-81d1-e3453212122b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531149,"event_type_id":6,"status":"blocked"}


event_id: 70f3ce9d-0830-4b66-82b5-3c34e3d55519
log_level: critical
event_category: detections
event_data:
{"connection_id":5453976,"detection_time":1742531149,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":29960,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e7b061d7-bd99-4d72-a4e8-a4999f9cb712
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531150,"event_type_id":6,"status":"blocked"}


event_id: 615b4b50-0e8f-4946-8af2-d6467ccb110e
log_level: critical
event_category: detections
event_data:
{"connection_id":5453982,"detection_time":1742531150,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":51613,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 796bfc0a-e58f-40c7-a6b2-f530ff3b2638
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531150,"event_type_id":6,"status":"blocked"}


event_id: 5f0d6962-33cf-4399-8342-a849926cbe78
log_level: critical
event_category: detections
event_data:
{"connection_id":5453989,"detection_time":1742531150,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":33004,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6e858a90-9906-477e-8bcf-22d1efa5fdbc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531150,"event_type_id":6,"status":"blocked"}


event_id: 3a618cc1-ceda-4ef9-b394-cb2d20ea4018
log_level: critical
event_category: detections
event_data:
{"connection_id":5453986,"detection_time":1742531150,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":64331,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a4b6b8c6-3716-48cd-b80c-4db21e49d587
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"200.89.178.226","autoblock_timeout":25,"detection_time":1742531150,"event_type_id":6,"status":"blocked"}


event_id: c03cc049-9e5d-4579-9b0f-8d8670a36015
log_level: critical
event_category: detections
event_data:
{"connection_id":5453998,"detection_time":1742531150,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"200.89.178.226","remote_port":57611,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c55bb896-d315-4841-a57a-164ac9c8472d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742531152,"event_type_id":6,"status":"blocked"}


event_id: c533f6ce-baf3-44ec-a45a-64cbe967b1c9
log_level: critical
event_category: detections
event_data:
{"connection_id":5454019,"detection_time":1742531152,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":51754,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 87ed745e-0f76-41d3-96d3-670ebdb33618
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531152,"event_type_id":6,"status":"blocked"}


event_id: 1a7720ac-b20e-41d2-879b-5a5f0051f694
log_level: critical
event_category: detections
event_data:
{"connection_id":5454004,"detection_time":1742531152,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":50810,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 222e6c30-6e05-427d-8583-8c6307a26ac3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531152,"event_type_id":6,"status":"blocked"}


event_id: 814e2837-4c3b-4493-bd53-27c2073ae6e2
log_level: critical
event_category: detections
event_data:
{"connection_id":5454013,"detection_time":1742531152,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":57835,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c328d6af-4885-43e0-9da9-69c3b68e1d82
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531153,"event_type_id":6,"status":"blocked"}


event_id: a409b8b4-be0c-4e4c-939c-0777143e5dc9
log_level: critical
event_category: detections
event_data:
{"connection_id":5454022,"detection_time":1742531153,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":62069,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bdb136ec-c11a-4447-aa16-0c0ce66a8528
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531154,"event_type_id":6,"status":"blocked"}


event_id: 9f830f92-482b-46c6-9992-3c4c5362e7f8
log_level: critical
event_category: detections
event_data:
{"connection_id":5454026,"detection_time":1742531154,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":59288,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4122cfba-fd84-4855-92cf-904a65d92500
log_level: critical
event_category: detections
event_data:
{"connection_id":5454032,"detection_time":1742531154,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":60612,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 043aa2e2-1bff-4f97-a4f6-b4cec96e1580
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531154,"event_type_id":6,"status":"blocked"}


event_id: e9fe2765-0e00-4abd-9c61-d5469e2f1912
log_level: critical
event_category: detections
event_data:
{"connection_id":5454035,"detection_time":1742531154,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":48664,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 702ccb83-d1d7-4eda-95ce-0bc91d3a7323
log_level: critical
event_category: detections
event_data:
{"connection_id":5454047,"detection_time":1742531154,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":52975,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 889a5430-d273-4ffc-90fb-e6211c168919
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531156,"event_type_id":6,"status":"blocked"}


event_id: a6a68a0c-bc8d-426e-8495-2947b2ed5ae0
log_level: critical
event_category: detections
event_data:
{"connection_id":5454051,"detection_time":1742531156,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":10606,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 57e0dc05-1176-4a42-a292-cd72fc3dc5e2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742531156,"event_type_id":6,"status":"blocked"}


event_id: 8f40bae6-8b51-4320-8b80-9903784e65e6
log_level: critical
event_category: detections
event_data:
{"connection_id":5454060,"detection_time":1742531156,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":54146,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 409d5eba-4bbf-4159-81c9-518ea310e57d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531157,"event_type_id":6,"status":"blocked"}


event_id: 3925bf76-538f-4a73-a9e2-107d8cdd0011
log_level: critical
event_category: detections
event_data:
{"connection_id":5454059,"detection_time":1742531157,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":14349,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9b9e611f-37e4-4bdb-abe6-bd00e842aa2a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531158,"event_type_id":6,"status":"blocked"}


event_id: 941f2da6-92a1-41a8-acf5-c6fec97429e0
log_level: critical
event_category: detections
event_data:
{"connection_id":5454005,"detection_time":1742531158,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":61815,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bf664f76-da3c-4f53-8a8b-ac3281b2fb6f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531158,"event_type_id":6,"status":"blocked"}


event_id: 575d8f21-7c9a-4418-afb6-e1311c467398
log_level: critical
event_category: detections
event_data:
{"connection_id":5454066,"detection_time":1742531158,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":64020,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7159f527-66e7-4c2e-9a40-64bef7482f16
log_level: critical
event_category: detections
event_data:
{"connection_id":5454069,"detection_time":1742531158,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":49967,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 41c1c324-80fd-4280-b25d-e32a01cbff5f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531160,"event_type_id":6,"status":"blocked"}


event_id: ec8de4da-6bef-46ae-bbb6-6332c1c16e8c
log_level: critical
event_category: detections
event_data:
{"connection_id":5454083,"detection_time":1742531160,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":22225,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a70b8595-7479-43ed-a88c-3167556b51b8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531160,"event_type_id":6,"status":"blocked"}


event_id: 6867b0f7-5990-4334-a821-28a5740e0548
log_level: critical
event_category: detections
event_data:
{"connection_id":5454086,"detection_time":1742531160,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":60844,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4383c715-1095-46dc-b44e-b3c98f5648e1
log_level: critical
event_category: detections
event_data:
{"connection_id":5454089,"detection_time":1742531160,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":23600,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 45e8adf5-f89e-44d7-993b-c6d2a63b1f02
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531160,"event_type_id":6,"status":"blocked"}


event_id: 47525bfa-228c-4cdb-941f-5997a4cab6f6
log_level: critical
event_category: detections
event_data:
{"connection_id":5454090,"detection_time":1742531160,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":7156,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 240713c4-ac64-43d8-b618-bb7a3bc3c551
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531161,"event_type_id":6,"status":"blocked"}


event_id: b42016f9-15da-4818-a39d-382aaa8829cd
log_level: critical
event_category: detections
event_data:
{"connection_id":5454092,"detection_time":1742531161,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":63057,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4fad29cc-c3ee-4441-96a3-df5d96c209fb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531162,"event_type_id":6,"status":"blocked"}


event_id: cb0e24f6-76de-475d-956d-fdf44d92bb20
log_level: critical
event_category: detections
event_data:
{"connection_id":5454108,"detection_time":1742531162,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":30731,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f2eeaf6d-bfcb-46bb-a915-c74e75e7eab0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531163,"event_type_id":6,"status":"blocked"}


event_id: 957f4804-9317-4ea5-9fee-27bf61546e79
log_level: critical
event_category: detections
event_data:
{"connection_id":5454110,"detection_time":1742531163,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":64898,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 52d34eb7-91d9-4001-a333-a948005a95c2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531164,"event_type_id":6,"status":"blocked"}


event_id: 33b78a5e-4a57-45a3-a3ed-3d20fadee88f
log_level: critical
event_category: detections
event_data:
{"connection_id":5454129,"detection_time":1742531164,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":51261,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1b626c66-45c2-4d81-a9f5-12057f89b4ad
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531165,"event_type_id":6,"status":"blocked"}


event_id: 8ef907ae-fdd5-44d9-aaf6-6d773bfc6b60
log_level: critical
event_category: detections
event_data:
{"connection_id":5454139,"detection_time":1742531165,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":24479,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 82728872-b37f-447a-87b3-f2bad5ce1055
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531166,"event_type_id":6,"status":"blocked"}


event_id: f5ac81e3-2281-4043-932c-570e1918fc7b
log_level: critical
event_category: detections
event_data:
{"connection_id":5454140,"detection_time":1742531166,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":55424,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ec6c9cee-e3bb-4296-919f-bf08f4b88e49
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531166,"event_type_id":6,"status":"blocked"}


event_id: 7a277245-d825-4218-abce-30a8bbf4bc67
log_level: critical
event_category: detections
event_data:
{"connection_id":5454144,"detection_time":1742531166,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":45856,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b4947528-492a-475a-aa69-20e25972cf20
log_level: critical
event_category: detections
event_data:
{"connection_id":5454145,"detection_time":1742531166,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":57221,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 07a70730-4e9e-46b1-8b60-11a4255e7eda
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742531166,"event_type_id":6,"status":"blocked"}


event_id: 299299c2-1ece-4b48-b45e-3fb8f32a8de3
log_level: critical
event_category: detections
event_data:
{"connection_id":5454172,"detection_time":1742531166,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":54698,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4b83700e-32cf-4eba-aaad-9c062d8136fd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531167,"event_type_id":6,"status":"blocked"}


event_id: 123191cc-9d7f-4036-bce8-6f1fdf797e63
log_level: critical
event_category: detections
event_data:
{"connection_id":5454162,"detection_time":1742531167,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":48626,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 03000223-05a8-4f69-a71b-cf712e16ab6e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531167,"event_type_id":6,"status":"blocked"}


event_id: 017ccd06-5502-40c8-a8bf-ae9407efbfa2
log_level: critical
event_category: detections
event_data:
{"connection_id":5454165,"detection_time":1742531167,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":46588,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d0b26e90-212b-4132-92d8-55d2dbfb71d8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531167,"event_type_id":6,"status":"blocked"}


event_id: 2d30d7f0-9b5d-458e-8b64-3cf400e15063
log_level: critical
event_category: detections
event_data:
{"connection_id":5454174,"detection_time":1742531167,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":32170,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9ca93df6-adae-44c0-b078-8d1f0a229804
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531168,"event_type_id":6,"status":"blocked"}


event_id: 0f34db41-4356-4fb1-b3cd-6ac1c8ec794e
log_level: critical
event_category: detections
event_data:
{"connection_id":5454177,"detection_time":1742531168,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":34047,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8f3540d4-c19e-4b12-895d-d4160a7c6937
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531169,"event_type_id":6,"status":"blocked"}


event_id: 3670c167-c4a7-435d-9e4c-c1bcddb750c9
log_level: critical
event_category: detections
event_data:
{"connection_id":5454181,"detection_time":1742531169,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":56754,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1e847fd1-b1ff-47e1-a09f-9db7c57dfb9a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531169,"event_type_id":6,"status":"blocked"}


event_id: 61ca4560-ed8c-466d-875e-a6e2c6183298
log_level: critical
event_category: detections
event_data:
{"connection_id":5454182,"detection_time":1742531169,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":54506,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5d5ce71b-bc6f-47c2-8592-d1b9ac7b2010
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742531169,"event_type_id":6,"status":"blocked"}


event_id: 21b0a5f0-658d-4af0-bf06-0fedd4b12d4c
log_level: critical
event_category: detections
event_data:
{"connection_id":5454197,"detection_time":1742531169,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":49421,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: de8bfaeb-1c59-4dfd-abb4-30e84b09087d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531170,"event_type_id":6,"status":"blocked"}


event_id: 6e2b917c-66f8-4971-8bc9-cbd177ab24c1
log_level: critical
event_category: detections
event_data:
{"connection_id":5454189,"detection_time":1742531170,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":61043,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2043e9f4-d46e-4665-b220-2d211bb27dfb
log_level: critical
event_category: detections
event_data:
{"connection_id":5454195,"detection_time":1742531170,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":63077,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 46007c7d-437a-4c2a-8d02-108bf5943979
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531170,"event_type_id":6,"status":"blocked"}


event_id: 11be5dbe-e699-4bff-bb35-729319da3cde
log_level: critical
event_category: detections
event_data:
{"connection_id":5454198,"detection_time":1742531170,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":62152,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 81ba8691-a8db-45aa-b5e5-b4c6f1ed9c19
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531171,"event_type_id":6,"status":"blocked"}


event_id: af26093c-eb7e-43f1-94cb-53e1c9d2bc11
log_level: critical
event_category: detections
event_data:
{"connection_id":5454204,"detection_time":1742531171,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":62747,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7657784f-f6a7-4a31-ac2e-c42399f21bf4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531171,"event_type_id":6,"status":"blocked"}


event_id: e62b149f-9853-4dda-8ca9-b4628a5c6907
log_level: critical
event_category: detections
event_data:
{"connection_id":5454208,"detection_time":1742531171,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":46477,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ea9d1723-5f1f-4044-9fed-f0c47f582065
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531171,"event_type_id":6,"status":"blocked"}


event_id: 5b72ae86-ca93-49f3-9f4a-7c6cc2d80f9b
log_level: critical
event_category: detections
event_data:
{"connection_id":5454218,"detection_time":1742531171,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":41864,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8b730ffd-e7c4-4060-aa71-e1fe0298fa55
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531172,"event_type_id":6,"status":"blocked"}


event_id: 1276d549-e895-4bea-9c2b-8e2bab1826f8
log_level: critical
event_category: detections
event_data:
{"connection_id":5454215,"detection_time":1742531172,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":57647,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bfb09d91-8cca-476f-86fb-494a1e9173f1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531173,"event_type_id":6,"status":"blocked"}


event_id: 108a10a7-119b-4bb0-b439-7cd9cdab8673
log_level: critical
event_category: detections
event_data:
{"connection_id":5454221,"detection_time":1742531173,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":59977,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: dee190dc-5ccc-4d57-ab32-ad9c7ac3a981
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531173,"event_type_id":6,"status":"blocked"}


event_id: 0473267e-571b-4249-823c-20ce4468521d
log_level: critical
event_category: detections
event_data:
{"connection_id":5454224,"detection_time":1742531173,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":8202,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5123dd44-445a-4ba1-b02e-d596030e3e09
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742531173,"event_type_id":6,"status":"blocked"}


event_id: 9ad4f110-73b2-4cbf-b286-24b244af290d
log_level: critical
event_category: detections
event_data:
{"connection_id":5454233,"detection_time":1742531173,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":49725,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0da7d96c-247e-44f1-bcfa-a66ad5d64445
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531176,"event_type_id":6,"status":"blocked"}


event_id: b740636f-109a-41dd-8862-5d1a5d897734
log_level: critical
event_category: detections
event_data:
{"connection_id":5454240,"detection_time":1742531176,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":49635,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 370acdee-5836-454e-8d7b-da5770fad115
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531176,"event_type_id":6,"status":"blocked"}


event_id: c6d62818-b48b-467e-b966-9070b542ca29
log_level: critical
event_category: detections
event_data:
{"connection_id":5454245,"detection_time":1742531176,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":16798,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2a40ac16-f578-47b0-a164-46de315b4963
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531176,"event_type_id":6,"status":"blocked"}


event_id: cd269c28-218f-4a68-b57a-69fa3d8fa3b8
log_level: critical
event_category: detections
event_data:
{"connection_id":5454248,"detection_time":1742531176,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":64688,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bc876cb7-adad-4fa2-bf41-c6f3c0e0167a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531176,"event_type_id":6,"status":"blocked"}


event_id: 4fc692a6-7c46-42f7-be30-b0911f336402
log_level: critical
event_category: detections
event_data:
{"connection_id":5454249,"detection_time":1742531176,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":21648,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 726931ff-c401-4634-a187-70bcc8a80e43
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531177,"event_type_id":6,"status":"blocked"}


event_id: e3fef645-19df-4682-b1e9-407cd705fcc6
log_level: critical
event_category: detections
event_data:
{"connection_id":5454253,"detection_time":1742531177,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":51093,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e3656fec-8ee7-4668-b3a4-9a5770331704
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531178,"event_type_id":6,"status":"blocked"}


event_id: 1f28f574-a5f3-4e8f-b11a-ca4e4754c555
log_level: critical
event_category: detections
event_data:
{"connection_id":5454257,"detection_time":1742531178,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":52292,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 916206f1-d0da-482a-b73b-8b2434d87253
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531178,"event_type_id":6,"status":"blocked"}


event_id: c4a67f32-69a8-49d2-b429-f19365d5bab9
log_level: critical
event_category: detections
event_data:
{"connection_id":5454260,"detection_time":1742531178,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":26732,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cc686981-cb61-4fce-b5ee-09ec138817ae
log_level: critical
event_category: detections
event_data:
{"connection_id":5454262,"detection_time":1742531178,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":54726,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f7ac12a5-54ec-4385-ad36-0e900dc33855
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531178,"event_type_id":6,"status":"blocked"}


event_id: 29eb8f0c-6e85-426c-99c1-54dfc93e02a2
log_level: critical
event_category: detections
event_data:
{"connection_id":5454258,"detection_time":1742531178,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":61037,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 56b1fd5f-ccb1-414c-bc19-98f2297ba209
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531179,"event_type_id":6,"status":"blocked"}


event_id: daa4bfad-801d-4de7-b21f-1528b75b36d9
log_level: critical
event_category: detections
event_data:
{"connection_id":5454265,"detection_time":1742531179,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":25749,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 00671951-680a-46c4-ab00-78aa049d21a2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531179,"event_type_id":6,"status":"blocked"}


event_id: 333ffa03-80c5-47a9-9965-b485c8fe7cdd
log_level: critical
event_category: detections
event_data:
{"connection_id":5454273,"detection_time":1742531179,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":10455,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2d1c1dce-cb35-4653-a9e1-56b8db0e83ab
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531179,"event_type_id":6,"status":"blocked"}


event_id: 6da36a6d-f08d-4cc6-bc0b-addf50ac48d4
log_level: critical
event_category: detections
event_data:
{"connection_id":5454275,"detection_time":1742531179,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":32031,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8d3aafc8-3be1-40d0-af24-5cfdc6c5feaf
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531180,"event_type_id":6,"status":"blocked"}


event_id: 356343c5-b50d-4cbc-98dc-b9dc18862697
log_level: critical
event_category: detections
event_data:
{"connection_id":5454281,"detection_time":1742531180,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":13511,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d2cfa16a-9696-41bf-9d01-dd707bcd1082
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742531180,"event_type_id":6,"status":"blocked"}


event_id: 58bde502-8fcb-4b3a-bcda-ea14169f9208
log_level: critical
event_category: detections
event_data:
{"connection_id":5454293,"detection_time":1742531180,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":57636,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3b49dbb2-adc6-4eb0-803a-6b6b950d5233
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531182,"event_type_id":6,"status":"blocked"}


event_id: 202bdf9f-f622-45f0-b6cb-14cf5056726e
log_level: critical
event_category: detections
event_data:
{"connection_id":5454297,"detection_time":1742531182,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":58303,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0e58cd87-83cf-4d58-a329-8de5394d5723
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531182,"event_type_id":6,"status":"blocked"}


event_id: f14c2944-e9d6-4102-aac2-9afcfb9323a9
log_level: critical
event_category: detections
event_data:
{"connection_id":5454302,"detection_time":1742531182,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":38193,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a433169e-267d-4779-9a31-6acdc7b64fc0
log_level: critical
event_category: detections
event_data:
{"connection_id":5454309,"detection_time":1742531182,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":42343,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 93b615c6-5163-481b-b074-f85ca8bbc57c
log_level: critical
event_category: detections
event_data:
{"connection_id":5454301,"detection_time":1742531182,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":59341,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7d1238ad-02c7-4f00-9dec-32e442045638
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742531183,"event_type_id":6,"status":"blocked"}


event_id: 5586eec8-169a-4575-b0b6-c2805a7775ed
log_level: critical
event_category: detections
event_data:
{"connection_id":5454314,"detection_time":1742531183,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":61029,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fbda95a8-9ddc-4081-bf7f-3ad37129b8f6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531183,"event_type_id":6,"status":"blocked"}


event_id: 17a11197-05ff-4dc7-8a24-ae33f288f8b6
log_level: critical
event_category: detections
event_data:
{"connection_id":5454313,"detection_time":1742531183,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":2118,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 526212aa-26c4-49f0-a940-388e323a245c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531184,"event_type_id":6,"status":"blocked"}


event_id: 5c76f448-b9af-47c7-ba57-68fddd37df62
log_level: critical
event_category: detections
event_data:
{"connection_id":5454316,"detection_time":1742531184,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":5552,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 956cf420-68d7-45d3-a53e-005dd72d08c0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531184,"event_type_id":6,"status":"blocked"}


event_id: 039bfcfc-cd95-4086-8420-2a5194b3957b
log_level: critical
event_category: detections
event_data:
{"connection_id":5454317,"detection_time":1742531184,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53503,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 295e5a4a-f089-4ae4-ab64-95ac0d406085
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531184,"event_type_id":6,"status":"blocked"}


event_id: 8319bc75-37a0-46db-af13-d323d4333496
log_level: critical
event_category: detections
event_data:
{"connection_id":5454321,"detection_time":1742531184,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":29060,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 41e8b162-b024-4332-b464-5ef4391a3bf6
log_level: critical
event_category: detections
event_data:
{"connection_id":5454335,"detection_time":1742531184,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":33152,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 02e0c531-687e-4cef-a76a-e3363efe6354
log_level: critical
event_category: detections
event_data:
{"connection_id":5454325,"detection_time":1742531184,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":8199,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 04536a1f-58a6-4e19-9414-3f9a88ba4279
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531185,"event_type_id":6,"status":"blocked"}


event_id: 0de3ea45-e3a2-4ebb-a965-3bc73ab0fbfc
log_level: critical
event_category: detections
event_data:
{"connection_id":5454326,"detection_time":1742531185,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":56422,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d7e3f4a9-0820-4647-9f4e-a55f527c2aab
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531186,"event_type_id":6,"status":"blocked"}


event_id: a9ff569b-3033-44d9-bb77-f9aaa5129822
log_level: critical
event_category: detections
event_data:
{"connection_id":5454338,"detection_time":1742531186,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":55534,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d3c31236-3d86-4004-b5ea-afe4503a20e9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531187,"event_type_id":6,"status":"blocked"}


event_id: 2d6371b8-27cb-41b3-a760-01238a56c338
log_level: critical
event_category: detections
event_data:
{"connection_id":5454350,"detection_time":1742531187,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":58974,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c8ba4cb3-6ec3-4b02-b0a6-8749b34b68a5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531189,"event_type_id":6,"status":"blocked"}


event_id: 0adf5209-6599-4eb6-b47a-df83cab4b9d6
log_level: critical
event_category: detections
event_data:
{"connection_id":5454379,"detection_time":1742531189,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":51514,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1c292b9a-3333-4528-a497-fda07dbcc113
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531190,"event_type_id":6,"status":"blocked"}


event_id: bd9b77ec-40cc-4588-a323-a345a354d387
log_level: critical
event_category: detections
event_data:
{"connection_id":5454372,"detection_time":1742531190,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":49268,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 507a7f7c-e110-447c-8394-32b638c16f35
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742531190,"event_type_id":6,"status":"blocked"}


event_id: 72c22d70-dd95-4285-b309-d29d51590462
log_level: critical
event_category: detections
event_data:
{"connection_id":5454386,"detection_time":1742531190,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":51227,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 91cbc743-f733-43e4-b576-4f1489495656
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531190,"event_type_id":6,"status":"blocked"}


event_id: 325e0f68-8059-4996-a8df-24a28420fbd9
log_level: critical
event_category: detections
event_data:
{"connection_id":5454375,"detection_time":1742531190,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":50511,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6f605d09-332c-4a53-9511-462709d5b432
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531190,"event_type_id":6,"status":"blocked"}


event_id: 0f0ed386-da2a-4b7e-bfbc-8af49dba684d
log_level: critical
event_category: detections
event_data:
{"connection_id":5454381,"detection_time":1742531190,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":2682,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a8e3ea09-3aa3-4fdd-a138-14540329de2a
log_level: critical
event_category: detections
event_data:
{"connection_id":5454383,"detection_time":1742531190,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":3846,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 98a76a4b-820a-4449-8a3b-efd137ca8729
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531190,"event_type_id":6,"status":"blocked"}


event_id: 268adcf3-3056-4f2c-8f9a-b3ea409f6a91
log_level: critical
event_category: detections
event_data:
{"connection_id":5454356,"detection_time":1742531190,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":15623,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7ab46545-a983-491c-8754-34beb3cdf5c7
log_level: critical
event_category: detections
event_data:
{"connection_id":5454382,"detection_time":1742531190,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":51570,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f9190d4b-9969-4dd4-9ced-bf5fa00c72f6
log_level: critical
event_category: detections
event_data:
{"connection_id":5454360,"detection_time":1742531190,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":18098,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5ddb8b9e-b112-4f2e-95fb-94d8cd863042
log_level: critical
event_category: detections
event_data:
{"connection_id":5454332,"detection_time":1742531190,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":62278,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e398d6b3-329a-42f1-b125-f7cbd24b4c93
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531191,"event_type_id":6,"status":"blocked"}


event_id: cf79e2af-360e-47a9-b556-e0117c8839c6
log_level: critical
event_category: detections
event_data:
{"connection_id":5454385,"detection_time":1742531191,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":52110,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 21a3505c-6504-4bd2-bc76-291d2e0459a8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531192,"event_type_id":6,"status":"blocked"}


event_id: 06afdde9-cd88-4610-add8-0c8aad30ad9f
log_level: critical
event_category: detections
event_data:
{"connection_id":5454397,"detection_time":1742531192,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":10979,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 74c85150-9ec4-468c-be12-588285fa91aa
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531194,"event_type_id":6,"status":"blocked"}


event_id: 6366effc-b7b2-4b84-be92-2e40da7c71b5
log_level: critical
event_category: detections
event_data:
{"connection_id":5454409,"detection_time":1742531194,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":55097,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5152338b-0224-4d88-bf3a-0eeeb3ba39d5
log_level: critical
event_category: detections
event_data:
{"connection_id":5454413,"detection_time":1742531194,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":56685,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e6714b93-2cea-4887-bbb1-2730f5cee0a2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742531194,"event_type_id":6,"status":"blocked"}


event_id: 60b9579e-083f-4f9a-ab7b-e8993c126a6f
log_level: critical
event_category: detections
event_data:
{"connection_id":5454426,"detection_time":1742531194,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":60579,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2878c49b-4477-40a7-b63e-21097229fcf0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531195,"event_type_id":6,"status":"blocked"}


event_id: 9c159f45-2d0a-4e48-a8d5-620c4e35a27f
log_level: critical
event_category: detections
event_data:
{"connection_id":5454424,"detection_time":1742531195,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":26242,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 40a38e7e-fd7d-42e6-898d-a9d6a54c2429
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531195,"event_type_id":6,"status":"blocked"}


event_id: f6090f7e-bcfd-4fdd-a535-b234514f9f1e
log_level: critical
event_category: detections
event_data:
{"connection_id":5454425,"detection_time":1742531195,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":4892,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0eda766f-06b0-4d68-a933-eb90d10db905
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531196,"event_type_id":6,"status":"blocked"}


event_id: 33bfc61a-9530-43b0-8612-b8645caf29f0
log_level: critical
event_category: detections
event_data:
{"connection_id":5454430,"detection_time":1742531196,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":50661,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7b868f17-0fd6-4885-97a7-862e5aef1a9d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531196,"event_type_id":6,"status":"blocked"}


event_id: 6b3ad8ff-2901-4633-b3d0-b3f9229d28c2
log_level: critical
event_category: detections
event_data:
{"connection_id":5454431,"detection_time":1742531196,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":29026,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f6c65c5d-11f7-417f-a699-bfa74bc8d59e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531196,"event_type_id":6,"status":"blocked"}


event_id: 5438d007-3549-415d-89d3-62e86bbc0257
log_level: critical
event_category: detections
event_data:
{"connection_id":5454433,"detection_time":1742531196,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":26811,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a8f07c22-7c6e-4c8a-abd6-36c66b03da24
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531197,"event_type_id":6,"status":"blocked"}


event_id: 460f0208-c8e4-41f9-992b-8d0a5ea549bc
log_level: critical
event_category: detections
event_data:
{"connection_id":5454432,"detection_time":1742531197,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53589,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ea59c27a-1c6d-4f05-a779-da426e867ed0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742531197,"event_type_id":6,"status":"blocked"}


event_id: a49d0259-a938-46a3-a63e-6589ca92a5ca
log_level: critical
event_category: detections
event_data:
{"connection_id":5454438,"detection_time":1742531197,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":53590,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 469bdf18-bfa0-4a92-893d-9ba8c4503518
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531197,"event_type_id":6,"status":"blocked"}


event_id: 6b055ddd-2e9e-4656-8f86-8dbc13dd579b
log_level: critical
event_category: detections
event_data:
{"connection_id":5454437,"detection_time":1742531197,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":12660,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 006842f5-38b2-42a8-a66a-190fc4312b1f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531198,"event_type_id":6,"status":"blocked"}


event_id: 2cf3bfd5-a4c8-47f2-95d6-e095dbe8bb86
log_level: critical
event_category: detections
event_data:
{"connection_id":5454439,"detection_time":1742531198,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":14375,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8a024d32-296c-4d2f-a4af-76f095b522fc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531198,"event_type_id":6,"status":"blocked"}


event_id: a7ea2045-b8d3-4b8d-965a-96dd6d04fb7b
log_level: critical
event_category: detections
event_data:
{"connection_id":5454441,"detection_time":1742531198,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":37048,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b41fe819-64b2-4d99-975f-70a6d0ba3a11
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531199,"event_type_id":6,"status":"blocked"}


event_id: 4f3f3856-1da8-4f24-bea6-0a106ec2109a
log_level: critical
event_category: detections
event_data:
{"connection_id":5454443,"detection_time":1742531199,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":34848,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7680aec4-f371-4e3a-82f7-0754498c4d5e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531200,"event_type_id":6,"status":"blocked"}


event_id: cae0e39b-1e48-436c-bee9-c2d43c3e6a0e
log_level: critical
event_category: detections
event_data:
{"connection_id":5454451,"detection_time":1742531200,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":42532,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 07ef3312-334a-481f-a3d0-331503ae85b9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531200,"event_type_id":6,"status":"blocked"}


event_id: fe09c005-e0b8-44d7-b79b-6300f10682bc
log_level: critical
event_category: detections
event_data:
{"connection_id":5454440,"detection_time":1742531200,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":39470,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 893810bd-7432-48d4-abd5-07fded26eea6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531201,"event_type_id":6,"status":"blocked"}


event_id: 548f8861-b215-4133-b152-ec30af82225e
log_level: critical
event_category: detections
event_data:
{"connection_id":5454454,"detection_time":1742531201,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":42912,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b31ce520-97d4-4765-9891-a3954714775b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531201,"event_type_id":6,"status":"blocked"}


event_id: d9a7778e-80fe-431b-b0ff-fc9a9a65b14c
log_level: critical
event_category: detections
event_data:
{"connection_id":5454460,"detection_time":1742531201,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":64406,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 37a688c7-ca45-4b37-ade6-de50da52e9b5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531201,"event_type_id":6,"status":"blocked"}


event_id: 99952882-b458-4713-a915-46485ae45fe6
log_level: critical
event_category: detections
event_data:
{"connection_id":5454458,"detection_time":1742531201,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":26601,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ef8e5e7f-5046-4198-9c82-b8ffbbf70b4d
log_level: critical
event_category: detections
event_data:
{"connection_id":5454457,"detection_time":1742531201,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":62354,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 53dbeb33-ca68-4d2c-a61a-5e5c55096ab3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531202,"event_type_id":6,"status":"blocked"}


event_id: 4ad620c4-0e60-4b6f-8938-60ef7964db4e
log_level: critical
event_category: detections
event_data:
{"connection_id":5454461,"detection_time":1742531202,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":51292,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 148f9926-589a-49dd-ae4e-0b2b302cef73
log_level: critical
event_category: detections
event_data:
{"connection_id":5454463,"detection_time":1742531202,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":51637,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b7161882-5e40-45ca-b3ea-794696a95153
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531203,"event_type_id":6,"status":"blocked"}


event_id: b800f00e-4284-4841-bd9b-78b8303850bd
log_level: critical
event_category: detections
event_data:
{"connection_id":5454467,"detection_time":1742531203,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":52999,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a4671b01-d976-4fd6-aece-ca52842199b5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742531203,"event_type_id":6,"status":"blocked"}


event_id: bbf711e7-337c-4ac7-acb1-298d716772e0
log_level: critical
event_category: detections
event_data:
{"connection_id":5454475,"detection_time":1742531203,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":56309,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: be4d6fcc-a8d4-4674-9e7a-a7e36caaefc8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531205,"event_type_id":6,"status":"blocked"}


event_id: 7b617a43-d86a-4c39-b539-a4321cf752dc
log_level: critical
event_category: detections
event_data:
{"connection_id":5454476,"detection_time":1742531205,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":47660,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b95c1580-4e84-4146-b7eb-dee9d2c8cd55
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531206,"event_type_id":6,"status":"blocked"}


event_id: 551c38d9-00ed-4c33-a3ab-9a2f0b185ace
log_level: critical
event_category: detections
event_data:
{"connection_id":5454486,"detection_time":1742531206,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":51979,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c79076bb-59fa-46a6-9a4d-a00c55fa534e
log_level: critical
event_category: detections
event_data:
{"connection_id":5454493,"detection_time":1742531206,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53293,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ef161fa2-66b9-4c73-a376-3bf0acf4292e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531206,"event_type_id":6,"status":"blocked"}


event_id: 40fe043f-31ad-48ac-b861-15cc4c3ac9b9
log_level: critical
event_category: detections
event_data:
{"connection_id":5454499,"detection_time":1742531206,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":61540,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9b601632-2b88-4110-9401-c7f1264a0b89
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531206,"event_type_id":6,"status":"blocked"}


event_id: c3810a92-4d32-4f3c-8bfa-7a0b72a7b7e9
log_level: critical
event_category: detections
event_data:
{"connection_id":5454502,"detection_time":1742531206,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":2350,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ea1a1703-aa57-4980-9997-1ab8161cec5a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531206,"event_type_id":6,"status":"blocked"}


event_id: 499fbab0-5299-4921-be5e-90d7b0c45c44
log_level: critical
event_category: detections
event_data:
{"connection_id":5454504,"detection_time":1742531206,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":45025,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e21eb66b-a379-41ce-a420-b628372d93a9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531207,"event_type_id":6,"status":"blocked"}


event_id: ff5eacab-af63-400c-86cd-9680602ac2d3
log_level: critical
event_category: detections
event_data:
{"connection_id":5454508,"detection_time":1742531207,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":6979,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2b5c4b89-a4a0-4329-adf8-c775c2aa7238
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531208,"event_type_id":6,"status":"blocked"}


event_id: 00a948a1-402c-40da-aa00-a6831f899d28
log_level: critical
event_category: detections
event_data:
{"connection_id":5454511,"detection_time":1742531208,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":63738,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f75d54b1-6dd9-4251-a200-52652b47eda6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531208,"event_type_id":6,"status":"blocked"}


event_id: 39b2a97a-f342-401e-8e1f-6fdf5b66f419
log_level: critical
event_category: detections
event_data:
{"connection_id":5454513,"detection_time":1742531208,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":6004,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7cf67975-630c-4f5c-a030-a57b54ea7357
log_level: critical
event_category: detections
event_data:
{"connection_id":5454514,"detection_time":1742531208,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":50343,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ba371aec-a925-4f37-8b56-4b4d09bda651
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742531209,"event_type_id":6,"status":"blocked"}


event_id: e61318e7-8b8d-4a72-86b5-06c3a6fad584
log_level: critical
event_category: detections
event_data:
{"connection_id":5454522,"detection_time":1742531209,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":63513,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 92def857-aa4b-468f-a933-e2b118ce79e2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531209,"event_type_id":6,"status":"blocked"}


event_id: e320ea4f-f2b9-49bf-9448-424ec863d4cf
log_level: critical
event_category: detections
event_data:
{"connection_id":5454518,"detection_time":1742531209,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":12283,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 433e6c5c-ddde-4c01-a27a-9c36e6939604
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531209,"event_type_id":6,"status":"blocked"}


event_id: 567b0dac-5b89-47aa-bd44-5c7fe515eb93
log_level: critical
event_category: detections
event_data:
{"connection_id":5454520,"detection_time":1742531209,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":55322,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 670a2fc2-6268-4e2e-b350-87474f82303d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742531210,"event_type_id":6,"status":"blocked"}


event_id: 19aaa64b-fb24-4511-ae6e-888ccfc93575
log_level: critical
event_category: detections
event_data:
{"connection_id":5454527,"detection_time":1742531210,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":53510,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9ddac0ab-3d6c-4c09-8e1d-9742318919b9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531210,"event_type_id":6,"status":"blocked"}


event_id: 12824ac6-1def-4538-afed-8dbbd1197ff2
log_level: critical
event_category: detections
event_data:
{"connection_id":5454525,"detection_time":1742531210,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":58214,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 78749b58-cc53-42af-b221-d48183e0217a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531212,"event_type_id":6,"status":"blocked"}


event_id: 95052ddf-c9ee-4b5a-8259-b8d9777e2317
log_level: critical
event_category: detections
event_data:
{"connection_id":5454531,"detection_time":1742531212,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":18477,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0aec9b8b-b408-4b4b-b24b-8dbce4b40231
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531213,"event_type_id":6,"status":"blocked"}


event_id: c51afd79-d790-45a7-afd9-db379b91c350
log_level: critical
event_category: detections
event_data:
{"connection_id":5454545,"detection_time":1742531213,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":6380,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 41831250-afc5-4136-abb5-8cb60263bb49
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531213,"event_type_id":6,"status":"blocked"}


event_id: e0dfae20-57ce-4dda-971d-70e76df1e52d
log_level: critical
event_category: detections
event_data:
{"connection_id":5454540,"detection_time":1742531213,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":22852,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ed66b0b3-eef6-4e03-9f41-a5e27a593a37
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531213,"event_type_id":6,"status":"blocked"}


event_id: abc3801c-e657-4261-8599-199869c14343
log_level: critical
event_category: detections
event_data:
{"connection_id":5454544,"detection_time":1742531213,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":61437,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a39db130-6a09-456a-ac28-497cb1dc680c
log_level: critical
event_category: detections
event_data:
{"connection_id":5454542,"detection_time":1742531213,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":59223,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 817bf444-1b2e-4add-9f6d-5d2a6509f915
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"121.52.149.13","autoblock_timeout":25,"detection_time":1742531214,"event_type_id":6,"status":"blocked"}


event_id: 62b95768-46d7-495e-b0f8-65c2e45b1fe1
log_level: critical
event_category: detections
event_data:
{"connection_id":5454550,"detection_time":1742531214,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"121.52.149.13","remote_port":60392,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 75cf9ccb-f989-4e12-b95a-3ef3ef4a981b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531214,"event_type_id":6,"status":"blocked"}


event_id: 0c0d651a-c6f6-498d-a137-e0b125f6ab36
log_level: critical
event_category: detections
event_data:
{"connection_id":5454551,"detection_time":1742531214,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":52378,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 56158002-16c9-4c99-ba4d-eb776b0c1823
log_level: critical
event_category: detections
event_data:
{"connection_id":5454546,"detection_time":1742531214,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":51316,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cf5f4608-0262-4dac-95b6-d4e121808082
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531214,"event_type_id":6,"status":"blocked"}


event_id: 690a18b5-1366-40eb-897e-e340b24289ec
log_level: critical
event_category: detections
event_data:
{"connection_id":5454548,"detection_time":1742531214,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":9255,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 245d42b9-7f5c-4911-bf37-bd8a3e9020ce
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742531215,"event_type_id":6,"status":"blocked"}


event_id: 4951769d-91e2-442c-ba6f-24ec8788fc21
log_level: critical
event_category: detections
event_data:
{"connection_id":5454556,"detection_time":1742531215,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":57692,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ce252ada-edc5-449c-8998-3954b9b689a2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531215,"event_type_id":6,"status":"blocked"}


event_id: cf746dbb-c33a-4fe1-b09c-6c15fe7a7189
log_level: critical
event_category: detections
event_data:
{"connection_id":5454553,"detection_time":1742531215,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":35841,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ca02d01f-2a79-4f8c-b4d5-8ee1497c11aa
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531215,"event_type_id":6,"status":"blocked"}


event_id: 64cca3a1-3713-467c-ba32-1619e7038427
log_level: critical
event_category: detections
event_data:
{"connection_id":5454554,"detection_time":1742531215,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":13379,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0e1e84d6-78b7-49ae-83e3-070b79242382
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531216,"event_type_id":6,"status":"blocked"}


event_id: 08c4a14e-133b-4401-bb67-93bbdcc1e87c
log_level: critical
event_category: detections
event_data:
{"connection_id":5454558,"detection_time":1742531216,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":39080,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 992925d6-5a49-41c0-8bb1-1c01b1765fd4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531218,"event_type_id":6,"status":"blocked"}


event_id: 38a99101-6062-4a1f-a3e6-d026d3e77b65
log_level: critical
event_category: detections
event_data:
{"connection_id":5454561,"detection_time":1742531218,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":49251,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 44ca0323-1962-4310-ae42-de5aa7bb394d
log_level: critical
event_category: detections
event_data:
{"connection_id":5454562,"detection_time":1742531218,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":50034,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 572f4412-6477-4dab-b90d-f942b98bb62a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531220,"event_type_id":6,"status":"blocked"}


event_id: 4a3dc69a-c502-445e-aa3a-c944c3e6bb90
log_level: critical
event_category: detections
event_data:
{"connection_id":5454569,"detection_time":1742531220,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":47613,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d2f729de-5859-406f-9e8a-8980f6fb8394
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531220,"event_type_id":6,"status":"blocked"}


event_id: 2c468191-cff7-48fa-b9db-c5fc15b5e8ee
log_level: critical
event_category: detections
event_data:
{"connection_id":5454571,"detection_time":1742531220,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":60517,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7e2a98d1-65fa-4b65-9420-22aea2259800
log_level: critical
event_category: detections
event_data:
{"connection_id":5454572,"detection_time":1742531220,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":48683,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b2e2b2a5-90ca-48b9-8311-0e06088eb948
log_level: critical
event_category: detections
event_data:
{"connection_id":5454575,"detection_time":1742531220,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":63322,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ab75a2d8-4355-4396-9257-c889c8b58b6f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531220,"event_type_id":6,"status":"blocked"}


event_id: ea739829-f97a-4847-912b-5cfb8956de3d
log_level: critical
event_category: detections
event_data:
{"connection_id":5454576,"detection_time":1742531220,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":32076,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cffb949e-d81b-4a23-95e4-4b91a4de6b5f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531222,"event_type_id":6,"status":"blocked"}


event_id: 7a253f0a-03c7-4d7d-a065-938864106c1f
log_level: critical
event_category: detections
event_data:
{"connection_id":5454579,"detection_time":1742531222,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":55755,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5a86294f-5433-449d-a68a-8e928ddfed31
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742531223,"event_type_id":6,"status":"blocked"}


event_id: dc393c40-18c8-4632-8e7d-89d5f11c4e60
log_level: critical
event_category: detections
event_data:
{"connection_id":5454596,"detection_time":1742531223,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":50203,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 64aeabeb-e57d-47c0-a4db-eaa9459190d0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531225,"event_type_id":6,"status":"blocked"}


event_id: 988409b1-d466-475f-898e-8702a470442d
log_level: critical
event_category: detections
event_data:
{"connection_id":5454602,"detection_time":1742531225,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":6798,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c111a6b4-0371-49fb-9e81-6eb20542cd07
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531225,"event_type_id":6,"status":"blocked"}


event_id: fce932e7-7597-4661-b7cc-72c1f55b5b93
log_level: critical
event_category: detections
event_data:
{"connection_id":5454603,"detection_time":1742531225,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":55861,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ca810e21-fbdc-4923-a73f-ef955a5dd912
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531226,"event_type_id":6,"status":"blocked"}


event_id: 96df48fb-d0c7-4e39-8a67-afad701c5f75
log_level: critical
event_category: detections
event_data:
{"connection_id":5454606,"detection_time":1742531226,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":50267,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1519be1c-8cc2-4daf-bf3b-a8d5da9495d3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531226,"event_type_id":6,"status":"blocked"}


event_id: 30ecd8cf-0d23-4b1c-8074-f4af450cb6e3
log_level: critical
event_category: detections
event_data:
{"connection_id":5454605,"detection_time":1742531226,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":58068,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d1acc573-70a2-423b-a3e2-603648467f7a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531226,"event_type_id":6,"status":"blocked"}


event_id: e051ea0e-37b4-4def-a280-f6eb4236a310
log_level: critical
event_category: detections
event_data:
{"connection_id":5454609,"detection_time":1742531226,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":9448,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b6fdb45b-872f-4314-bb36-b2488cf2b0c7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531226,"event_type_id":6,"status":"blocked"}


event_id: f3ea5ffc-6146-4299-9d6b-d0cdae0283d1
log_level: critical
event_category: detections
event_data:
{"connection_id":5454610,"detection_time":1742531226,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":46577,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6948a90c-9f72-4e2c-b3f2-b48d1215a0a1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531226,"event_type_id":6,"status":"blocked"}


event_id: 1ac00653-6893-4547-820a-8116f5cfafc1
log_level: critical
event_category: detections
event_data:
{"connection_id":5454613,"detection_time":1742531226,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":7489,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a4a04530-bbe3-4b2e-afce-2059016e6248
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531227,"event_type_id":6,"status":"blocked"}


event_id: 1519a046-8150-490c-b89f-a5aa750f391a
log_level: critical
event_category: detections
event_data:
{"connection_id":5454611,"detection_time":1742531227,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":46680,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 12467fb5-c799-49c9-88cb-7903e23d9d33
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531227,"event_type_id":6,"status":"blocked"}


event_id: 8d742788-751d-4629-9357-13f9db2555e7
log_level: critical
event_category: detections
event_data:
{"connection_id":5454615,"detection_time":1742531227,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":51559,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9f49eb30-3902-490a-ae1c-9a0b9c525fd6
log_level: critical
event_category: detections
event_data:
{"connection_id":5454612,"detection_time":1742531227,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":46802,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b3333185-1c5d-4350-8e1d-d2d761f6dfc1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531228,"event_type_id":6,"status":"blocked"}


event_id: 733e4cc6-e211-4660-8425-8f89d1d2c621
log_level: critical
event_category: detections
event_data:
{"connection_id":5454619,"detection_time":1742531228,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":57890,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 74470973-2c16-4cd6-a8f0-217461447565
log_level: critical
event_category: detections
event_data:
{"connection_id":5454621,"detection_time":1742531228,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":59146,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7c69436d-f364-4182-b14e-7affef5c30c5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531228,"event_type_id":6,"status":"blocked"}


event_id: b4a35e46-60bb-4d62-9517-f204269dd9dc
log_level: critical
event_category: detections
event_data:
{"connection_id":5454623,"detection_time":1742531228,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":17177,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 07faa5dc-a842-484c-9186-d3c2b8f04a2e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531228,"event_type_id":6,"status":"blocked"}


event_id: 7c29ac02-e036-47ad-8631-e21b2a8efaab
log_level: critical
event_category: detections
event_data:
{"connection_id":5454622,"detection_time":1742531228,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":53068,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 114978c7-4741-468c-b599-6f2d956bdb1b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531229,"event_type_id":6,"status":"blocked"}


event_id: f1e0a2ec-e9a6-468e-8f70-8479381628a7
log_level: critical
event_category: detections
event_data:
{"connection_id":5454626,"detection_time":1742531229,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":15387,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 65f1089d-dad0-43b7-8464-d3bd199ea9b4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531229,"event_type_id":6,"status":"blocked"}


event_id: db3fbc0c-4e58-4198-a0ea-947e5876c0d8
log_level: critical
event_category: detections
event_data:
{"connection_id":5454631,"detection_time":1742531229,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":22813,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 17e927ac-d8ae-43a5-b00a-74ab16cbba4a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531230,"event_type_id":6,"status":"blocked"}


event_id: 8eda928b-cc47-423d-8ea6-6fd3076ec6e2
log_level: critical
event_category: detections
event_data:
{"connection_id":5454629,"detection_time":1742531230,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":61898,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b5d157a6-1338-4444-9b4b-b60aec6b1999
log_level: critical
event_category: detections
event_data:
{"connection_id":5454635,"detection_time":1742531230,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":63571,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 05bd402c-1ad3-4a28-86ce-aa63b1461f33
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742531230,"event_type_id":6,"status":"blocked"}


event_id: faae3c3d-2894-474b-a4e5-fee33c65ec5b
log_level: critical
event_category: detections
event_data:
{"connection_id":5454646,"detection_time":1742531230,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":55316,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: df382ca6-1668-46e8-a1b0-9d7376d758d4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531230,"event_type_id":6,"status":"blocked"}


event_id: f6ec9c6a-bcb6-4999-bbc5-301ebec4f2a5
log_level: critical
event_category: detections
event_data:
{"connection_id":5454641,"detection_time":1742531230,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":23294,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c1a52fe2-aea3-4e77-a22d-b26bc6c7aa49
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531231,"event_type_id":6,"status":"blocked"}


event_id: 97812560-d397-4188-9508-5e35c37f4c99
log_level: critical
event_category: detections
event_data:
{"connection_id":5454643,"detection_time":1742531231,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":50816,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: dbafa7a5-6f1f-4ef8-afbe-f16c56ce37c9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531231,"event_type_id":6,"status":"blocked"}


event_id: 825d7ae7-0a05-4467-ae6a-3eb85dba876f
log_level: critical
event_category: detections
event_data:
{"connection_id":5454645,"detection_time":1742531231,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":6832,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 189c9a81-0782-4868-b811-4b1436d294cb
log_level: critical
event_category: detections
event_data:
{"connection_id":5454644,"detection_time":1742531231,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":51047,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3a92c904-4109-4db1-9017-b1cd061af6d9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531232,"event_type_id":6,"status":"blocked"}


event_id: d1357a36-1c53-4653-81e9-515ac1d844d3
log_level: critical
event_category: detections
event_data:
{"connection_id":5454647,"detection_time":1742531232,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":57381,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e62fbd58-1133-4e2f-bc5a-cdee88433a1d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531232,"event_type_id":6,"status":"blocked"}


event_id: 9e8f6067-bdc3-4f84-805f-1c00c77bd071
log_level: critical
event_category: detections
event_data:
{"connection_id":5454649,"detection_time":1742531232,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":33214,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fb22f061-c954-4f4c-a792-9140b61cc6fd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531233,"event_type_id":6,"status":"blocked"}


event_id: b7f68576-c5b6-4715-afb4-3e909767cfb0
log_level: critical
event_category: detections
event_data:
{"connection_id":5454650,"detection_time":1742531233,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":60507,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: de3c3d55-3335-44e6-9fc5-5acf04bd3054
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531236,"event_type_id":6,"status":"blocked"}


event_id: 935c71b8-c467-40e2-8a01-8aa181254195
log_level: critical
event_category: detections
event_data:
{"connection_id":5454663,"detection_time":1742531236,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":41789,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6890c044-664d-4017-b649-df0d7d8b6c0b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531236,"event_type_id":6,"status":"blocked"}


event_id: a0d9cb9c-c480-4483-a13e-619fe477ea27
log_level: critical
event_category: detections
event_data:
{"connection_id":5454664,"detection_time":1742531236,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":47056,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2e564caa-b92a-4c83-83a1-314c9f860cef
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531236,"event_type_id":6,"status":"blocked"}


event_id: f0765481-0b02-49ec-93e6-875229c4ec81
log_level: critical
event_category: detections
event_data:
{"connection_id":5454667,"detection_time":1742531236,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":25399,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 076cb75a-af67-4133-a0e2-3c9751f06415
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531237,"event_type_id":6,"status":"blocked"}


event_id: d3ec3fb6-734a-4d5c-84f4-a4bf99ad6388
log_level: critical
event_category: detections
event_data:
{"connection_id":5454672,"detection_time":1742531237,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":51821,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2dbb80fd-3085-4608-9815-78862850c755
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531237,"event_type_id":6,"status":"blocked"}


event_id: 70d48ad5-9145-4781-bfb7-b4e40752b198
log_level: critical
event_category: detections
event_data:
{"connection_id":5454671,"detection_time":1742531237,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":51983,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 56bdbaeb-fd8a-4840-a183-38b8b9ca50ee
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742531237,"event_type_id":6,"status":"blocked"}


event_id: 61e6c793-c8c9-421a-8122-1ba9eb18b63e
log_level: critical
event_category: detections
event_data:
{"connection_id":5454679,"detection_time":1742531237,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":53126,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1868229b-7ce9-426b-b14d-50b7300e9449
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531237,"event_type_id":6,"status":"blocked"}


event_id: f758430e-e1d1-4d01-9fcc-0196fc59d7f9
log_level: critical
event_category: detections
event_data:
{"connection_id":5454661,"detection_time":1742531237,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":2076,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0894e9ce-9ba8-4a15-b0f5-20af923428c6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531238,"event_type_id":6,"status":"blocked"}


event_id: dfc0d623-129a-415a-b246-4c609d684b4c
log_level: critical
event_category: detections
event_data:
{"connection_id":5454674,"detection_time":1742531238,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":54627,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c5e98eac-581e-405f-a007-a459fb97dfa3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531238,"event_type_id":6,"status":"blocked"}


event_id: 357d4b84-ad04-4838-b833-93a95e8b45e2
log_level: critical
event_category: detections
event_data:
{"connection_id":5454665,"detection_time":1742531238,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":64337,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 86e07fa6-6fad-4b67-8820-dd8cbd5e927b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531238,"event_type_id":6,"status":"blocked"}


event_id: 938aaba2-6288-4d40-8e99-4bdd451375e5
log_level: critical
event_category: detections
event_data:
{"connection_id":5454676,"detection_time":1742531238,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":50611,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1fbb5a97-aa69-45ea-9304-5aff181c5ba7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531239,"event_type_id":6,"status":"blocked"}


event_id: 03f372d1-6e4a-4a1e-b897-7042d6c14324
log_level: critical
event_category: detections
event_data:
{"connection_id":5454681,"detection_time":1742531239,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":56920,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: db37b7f8-4c82-4a1d-86d4-c56ba951a052
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531239,"event_type_id":6,"status":"blocked"}


event_id: 11142b0a-f27f-4e0f-b736-281998955a29
log_level: critical
event_category: detections
event_data:
{"connection_id":5454683,"detection_time":1742531239,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":35617,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b3fda3f5-2ef7-4726-81d1-7779ecb6622b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531239,"event_type_id":6,"status":"blocked"}


event_id: 1cee633e-3108-4806-8f2f-f61cf5fbbcd6
log_level: critical
event_category: detections
event_data:
{"connection_id":5454688,"detection_time":1742531239,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":53616,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f5e44087-e421-4327-a0d1-e707c72f8f1e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531240,"event_type_id":6,"status":"blocked"}


event_id: c8f9d2d7-d4ac-4e10-b35d-e11f90aae95b
log_level: critical
event_category: detections
event_data:
{"connection_id":5454685,"detection_time":1742531240,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":52358,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f4a6367d-a8eb-4694-b747-3b33b42d5f08
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531240,"event_type_id":6,"status":"blocked"}


event_id: 4ce29864-03ea-409e-a3c8-c54be7935fbf
log_level: critical
event_category: detections
event_data:
{"connection_id":5454687,"detection_time":1742531240,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":38482,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1c5b63c5-1cca-47af-b098-d550582734e0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531241,"event_type_id":6,"status":"blocked"}


event_id: 94d88c82-2cc6-40c8-846d-86cf327e3499
log_level: critical
event_category: detections
event_data:
{"connection_id":5454694,"detection_time":1742531241,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":63372,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8cfa2d58-0cce-4377-bc2a-65b89f348c87
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531241,"event_type_id":6,"status":"blocked"}


event_id: 80c837b2-e2c6-4d82-b8e8-8ec65e169de4
log_level: critical
event_category: detections
event_data:
{"connection_id":5454692,"detection_time":1742531241,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":58547,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f66561ea-cda2-4cc2-9c96-9f5d2ed6e22c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531242,"event_type_id":6,"status":"blocked"}


event_id: 91eb992a-1b15-4b97-b9cb-202d235530db
log_level: critical
event_category: detections
event_data:
{"connection_id":5454696,"detection_time":1742531242,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":60520,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d9f31cb9-a8bb-41d1-bada-950919a36416
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531243,"event_type_id":6,"status":"blocked"}


event_id: e60bc2b9-2c6b-4675-8a9d-b0616c4e0ce9
log_level: critical
event_category: detections
event_data:
{"connection_id":5454699,"detection_time":1742531243,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":3100,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 15e5fae6-b8f3-4120-aaea-10b392bf8f76
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531244,"event_type_id":6,"status":"blocked"}


event_id: 4d19b3ba-9438-46b1-83c2-3dd0cdb30e30
log_level: critical
event_category: detections
event_data:
{"connection_id":5454702,"detection_time":1742531244,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":54048,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 97af6b37-7265-4ee4-9823-7f45611a280b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531244,"event_type_id":6,"status":"blocked"}


event_id: 412e389d-fdb4-4722-a14d-73ec457cfa40
log_level: critical
event_category: detections
event_data:
{"connection_id":5454705,"detection_time":1742531244,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":15777,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 144c50aa-e0dc-49a6-8fd1-094e9b4977b3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"66.23.33.5","autoblock_timeout":25,"detection_time":1742531244,"event_type_id":6,"status":"blocked"}


event_id: 9ff90253-aef7-4765-aee4-d2a5edcc9fcd
log_level: critical
event_category: detections
event_data:
{"connection_id":5454725,"detection_time":1742531244,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"66.23.33.5","remote_port":62430,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c32a9c50-dc7d-42fa-9551-e2a1703601fd
log_level: critical
event_category: detections
event_data:
{"connection_id":5454707,"detection_time":1742531244,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":57104,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4652b144-363b-4f1e-903e-df0a71fea5b9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531244,"event_type_id":6,"status":"blocked"}


event_id: 3f87f88e-4fc1-4a68-a686-10dbbc687f9f
log_level: critical
event_category: detections
event_data:
{"connection_id":5454709,"detection_time":1742531244,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":54151,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3cdcbcd4-9964-4f46-99b8-a32cf8423e64
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531245,"event_type_id":6,"status":"blocked"}


event_id: 6467d701-94be-444a-86c0-2a3351e4d649
log_level: critical
event_category: detections
event_data:
{"connection_id":5454736,"detection_time":1742531245,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":19395,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7263cc55-0820-476a-acd8-e2f5f60b68a4
log_level: critical
event_category: detections
event_data:
{"connection_id":5454727,"detection_time":1742531245,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":16159,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9796a918-7ab0-45a6-bd07-d47cca9d4154
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531245,"event_type_id":6,"status":"blocked"}


event_id: ab080c20-f5a8-40d9-ac96-c0654d1595a6
log_level: critical
event_category: detections
event_data:
{"connection_id":5454733,"detection_time":1742531245,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":58311,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 64e8da25-7ca9-4aa0-919c-ff7ccafef4e1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531248,"event_type_id":6,"status":"blocked"}


event_id: 8f699f09-de22-4cc0-b2a9-987323020ee3
log_level: critical
event_category: detections
event_data:
{"connection_id":5454755,"detection_time":1742531248,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":51583,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 509d9e77-945a-4818-8dda-e762125ca842
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531249,"event_type_id":6,"status":"blocked"}


event_id: 91a3947d-9539-43e4-8b73-bee5c3169c04
log_level: critical
event_category: detections
event_data:
{"connection_id":5454753,"detection_time":1742531249,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":65406,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c642e728-d9d0-4981-a6e5-39533f2bbaf1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531249,"event_type_id":6,"status":"blocked"}


event_id: bd6c27d1-b685-47e8-a6a0-8976e0e1c85f
log_level: critical
event_category: detections
event_data:
{"connection_id":5454756,"detection_time":1742531249,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":28401,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5c5c0249-c78c-4bbc-a5e7-64ef083f7e00
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531250,"event_type_id":6,"status":"blocked"}


event_id: 07e77e33-f32f-4c31-8f63-1eaaa718da63
log_level: critical
event_category: detections
event_data:
{"connection_id":5454758,"detection_time":1742531250,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":29217,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fa2b5633-adc7-4b32-922f-f4fdc5049899
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531250,"event_type_id":6,"status":"blocked"}


event_id: 81883023-964c-4517-bb18-96173680dc22
log_level: critical
event_category: detections
event_data:
{"connection_id":5454761,"detection_time":1742531250,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":12408,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9352a3c4-5ee8-4a7b-ac0c-2af79bdcff24
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"190.57.75.42","autoblock_timeout":25,"detection_time":1742531251,"event_type_id":6,"status":"blocked"}


event_id: cd168c3e-37e6-4ca9-900d-bbec70dd3994
log_level: critical
event_category: detections
event_data:
{"connection_id":5454769,"detection_time":1742531251,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"190.57.75.42","remote_port":57018,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6e75d734-ac9c-4671-95d7-e07e62fa4e5c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"217.113.235.235","autoblock_timeout":25,"detection_time":1742531251,"event_type_id":6,"status":"blocked"}


event_id: f1420ff0-2a03-4803-903c-738fd275cdda
log_level: critical
event_category: detections
event_data:
{"connection_id":5454772,"detection_time":1742531251,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"217.113.235.235","remote_port":56076,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6e2bcd68-7036-4af8-97dc-33ae5700b3c1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531251,"event_type_id":6,"status":"blocked"}


event_id: 33c19b0d-9b19-48a4-8009-90319916026b
log_level: critical
event_category: detections
event_data:
{"connection_id":5454771,"detection_time":1742531251,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":53712,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7178673a-11d1-4912-8742-5dff45ac745d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531252,"event_type_id":6,"status":"blocked"}


event_id: 7db555e1-1e2e-4db2-9956-4d6e60b65746
log_level: critical
event_category: detections
event_data:
{"connection_id":5454767,"detection_time":1742531252,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":35873,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0b955f05-8aeb-440d-81d6-c072541d4041
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"209.15.110.167","autoblock_timeout":25,"detection_time":1742531252,"event_type_id":6,"status":"blocked"}


event_id: 494bfa32-320e-4bc5-aa8f-92f02c245094
log_level: critical
event_category: detections
event_data:
{"connection_id":5454768,"detection_time":1742531252,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"209.15.110.167","remote_port":53058,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fda1c396-8eb4-4142-96c2-ca952bcdab39
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531252,"event_type_id":6,"status":"blocked"}


event_id: bdfcbdc2-263d-4c7f-954e-56581871f8ea
log_level: critical
event_category: detections
event_data:
{"connection_id":5454773,"detection_time":1742531252,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":32398,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 650c98f6-ac80-4f59-aaac-b00b7e09a2a1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531253,"event_type_id":6,"status":"blocked"}


event_id: e12d2fd9-9bac-4bee-8cd5-76a1de5f6957
log_level: critical
event_category: detections
event_data:
{"connection_id":5454776,"detection_time":1742531253,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":55498,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 035159c8-8df2-484a-92b9-c1bdc9b663a3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531254,"event_type_id":6,"status":"blocked"}


event_id: 876519ac-cdc5-4987-bd64-cee65465d590
log_level: critical
event_category: detections
event_data:
{"connection_id":5454777,"detection_time":1742531254,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":57107,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7130705b-23dc-4649-86d9-bbbc66564e79
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531255,"event_type_id":6,"status":"blocked"}


event_id: 3380e0c1-42df-4ff9-93e9-f8dce498a900
log_level: critical
event_category: detections
event_data:
{"connection_id":5454781,"detection_time":1742531255,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":51562,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bfea593b-40f7-4f6a-9ca4-d89734287f55
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531255,"event_type_id":6,"status":"blocked"}


event_id: b87e34cd-a9be-4b4f-a508-15e9a038d2ec
log_level: critical
event_category: detections
event_data:
{"connection_id":5454785,"detection_time":1742531255,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":50509,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 093aac7c-454d-448a-8761-a3561480e7bf
log_level: critical
event_category: detections
event_data:
{"connection_id":5454787,"detection_time":1742531255,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":54409,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e5285200-a999-42b4-82d9-36a724dd3af0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531256,"event_type_id":6,"status":"blocked"}


event_id: 37c59c1a-a9a1-4cae-9e33-566040621efd
log_level: critical
event_category: detections
event_data:
{"connection_id":5454789,"detection_time":1742531256,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":30776,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 478e2535-d058-411b-a68c-39ad5c4dbe82
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531256,"event_type_id":6,"status":"blocked"}


event_id: 002ee7c4-123e-4cde-8171-b0ea5fd88390
log_level: critical
event_category: detections
event_data:
{"connection_id":5454791,"detection_time":1742531256,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":52247,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 16d1e3b4-7dce-41e7-89c7-ad5b66f086cb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531256,"event_type_id":6,"status":"blocked"}


event_id: cce7d64a-851c-4073-9b5f-df716e086da1
log_level: critical
event_category: detections
event_data:
{"connection_id":5454792,"detection_time":1742531256,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":53568,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e899e106-d6c1-4a96-907f-4015886ffba4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531258,"event_type_id":6,"status":"blocked"}


event_id: 70d06694-82e9-4dac-8702-f6fa607ee46a
log_level: critical
event_category: detections
event_data:
{"connection_id":5454800,"detection_time":1742531258,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":62398,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f652a3e5-03a0-4720-a5d2-a2c32527c784
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531258,"event_type_id":6,"status":"blocked"}


event_id: 5259272c-6150-4288-8e21-fa7992c4b538
log_level: critical
event_category: detections
event_data:
{"connection_id":5454799,"detection_time":1742531258,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":38365,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a26ed2c2-7f2f-4375-bfd2-d1ec6162056f
log_level: critical
event_category: detections
event_data:
{"connection_id":5454801,"detection_time":1742531258,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"79.127.132.29","remote_port":39623,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0bcd1a25-e267-41d0-a6e8-1195429bcdd7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531258,"event_type_id":6,"status":"blocked"}


event_id: c0158f67-f4e0-478d-9a25-f2caacca7a46
log_level: critical
event_category: detections
event_data:
{"connection_id":5454804,"detection_time":1742531258,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":60281,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b9483008-838d-4217-a158-ea980de4f41f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"191.96.227.203","autoblock_timeout":25,"detection_time":1742531259,"event_type_id":6,"status":"blocked"}


event_id: 73faf383-3f2d-43bd-a8da-f2ba43fad759
log_level: critical
event_category: detections
event_data:
{"connection_id":5454808,"detection_time":1742531259,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"191.96.227.203","remote_port":3164,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ab28b353-faf3-4770-8bc4-7ed630be67f4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"89.222.100.41","autoblock_timeout":25,"detection_time":1742531259,"event_type_id":6,"status":"blocked"}


event_id: ac1f1352-2093-4033-935c-c0658711d658
log_level: critical
event_category: detections
event_data:
{"connection_id":5454794,"detection_time":1742531259,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"89.222.100.41","remote_port":48299,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 137bca70-f94e-4a09-a76e-b7ebb203a98a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"84.17.35.43","autoblock_timeout":25,"detection_time":1742531260,"event_type_id":6,"status":"blocked"}


event_id: 1834d40f-4669-4e4d-96d1-ad248ffbb3d9
log_level: critical
event_category: detections
event_data:
{"connection_id":5454811,"detection_time":1742531260,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"84.17.35.43","remote_port":3649,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3cc8d4c1-9094-4db8-a329-5ce05116829e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531260,"event_type_id":6,"status":"blocked"}


event_id: fd09f1b0-3dfe-4145-be77-a1777077abd5
log_level: critical
event_category: detections
event_data:
{"connection_id":5454816,"detection_time":1742531260,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":64754,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 92cf3b8b-a19d-4788-8453-c6b72c88062a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"101.109.253.244","autoblock_timeout":25,"detection_time":1742531261,"event_type_id":6,"status":"blocked"}


event_id: a9aae93c-faae-4773-87d5-6f66a6414cb6
log_level: critical
event_category: detections
event_data:
{"connection_id":5454814,"detection_time":1742531261,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"101.109.253.244","remote_port":62146,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f7086c06-07f1-4fce-a690-a1fd831d3bfb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"79.127.132.29","autoblock_timeout":25,"detection_time":1742531261,"event_type_id":6,"status":"blocked"}


