# intrusion_prevention

event_id: d98772d7-83b6-4fe5-bf60-cebe96d796d6
log_level: critical
event_category: detections
event_data:
{"connection_id":1963845,"detection_time":1742058192,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.155","remote_port":32360,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 52f4e9dd-fb1b-49cb-b179-adaaeb26f34e
log_level: critical
event_category: detections
event_data:
{"connection_id":1964362,"detection_time":1742058256,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":23985,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b11c3bb2-c7cc-4974-af16-8ce148123090
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742058258,"event_type_id":6,"status":"blocked"}


event_id: dc41a777-7930-4b72-a97a-781a5862346e
log_level: critical
event_category: detections
event_data:
{"connection_id":1964374,"detection_time":1742058258,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":53264,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cf427c68-32cd-4a91-bfdc-bda64ab09b47
log_level: critical
event_category: detections
event_data:
{"connection_id":1964411,"detection_time":1742058262,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":12713,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 12583d12-a418-4694-91ec-9fe15fd2bbb6
log_level: critical
event_category: detections
event_data:
{"connection_id":1964459,"detection_time":1742058268,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":58454,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: eb1b0fd1-43d0-493a-91ab-f77bb963e091
log_level: critical
event_category: detections
event_data:
{"connection_id":1964462,"detection_time":1742058269,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":59468,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 49db0089-ac3b-4736-a90d-cdd828804af8
log_level: critical
event_category: detections
event_data:
{"connection_id":1964529,"detection_time":1742058275,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":46788,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c3897a22-0ddc-4f7e-a922-92cbae4638f1
log_level: critical
event_category: detections
event_data:
{"connection_id":1964571,"detection_time":1742058281,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":34686,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6a0a573d-02b6-4950-aa69-ef12b53120c5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"162.19.186.167","autoblock_timeout":25,"detection_time":1742058458,"event_type_id":6,"status":"blocked"}


event_id: 9542c5e2-6155-4c74-9efb-80be7a1bc03e
log_level: critical
event_category: detections
event_data:
{"connection_id":1965975,"detection_time":1742058458,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"162.19.186.167","remote_port":57156,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2771b31a-fcf6-4659-8bf7-43cbd6cba024
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"162.19.186.167","autoblock_timeout":25,"detection_time":1742058460,"event_type_id":6,"status":"blocked"}


event_id: 7fb8f9c9-3479-48b3-8a88-a97ea741e15b
log_level: critical
event_category: detections
event_data:
{"connection_id":1965992,"detection_time":1742058460,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"162.19.186.167","remote_port":58388,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: af8ca206-ef7b-41e9-950e-249d668f95bd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"162.19.186.167","autoblock_timeout":25,"detection_time":1742058462,"event_type_id":6,"status":"blocked"}


event_id: 7162a3ea-a003-4cef-a1e6-f07fe4dfcac9
log_level: critical
event_category: detections
event_data:
{"connection_id":1966007,"detection_time":1742058462,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"162.19.186.167","remote_port":59683,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ab1f8f81-7868-4ce4-bd6b-8cb1be34f8be
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"162.19.186.167","autoblock_timeout":25,"detection_time":1742058463,"event_type_id":6,"status":"blocked"}


event_id: f34c7f8e-8538-48c6-b11b-8161ae77b216
log_level: critical
event_category: detections
event_data:
{"connection_id":1966017,"detection_time":1742058463,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"162.19.186.167","remote_port":60880,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2c45942d-1824-49e0-a2ae-b84151f184b6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"162.19.186.167","autoblock_timeout":25,"detection_time":1742058465,"event_type_id":6,"status":"blocked"}


event_id: f125fd78-52ed-4a60-a1b6-3336831cbccf
log_level: critical
event_category: detections
event_data:
{"connection_id":1966032,"detection_time":1742058465,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"162.19.186.167","remote_port":62099,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8c7473fd-3b05-45a3-86f3-eacf4c2d1193
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"162.19.186.167","autoblock_timeout":25,"detection_time":1742058467,"event_type_id":6,"status":"blocked"}


event_id: 1b079790-24a6-4ec6-a549-66d577b494a1
log_level: critical
event_category: detections
event_data:
{"connection_id":1966044,"detection_time":1742058467,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"162.19.186.167","remote_port":63328,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4cdcbfea-dfa6-4c7f-8dd7-68aff92c34e6
log_level: critical
event_category: detections
event_data:
{"connection_id":1966586,"detection_time":1742058539,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":25182,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9ef947cc-9572-43fa-baa2-9a2ba919f0e6
log_level: critical
event_category: detections
event_data:
{"connection_id":1966638,"detection_time":1742058545,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":16275,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 235d7a5e-a0f9-4562-b0ed-4c98c4e3fe3f
log_level: critical
event_category: detections
event_data:
{"connection_id":1966694,"detection_time":1742058552,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":6277,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 98e62859-7d38-456f-8432-a45752455fc3
log_level: critical
event_category: detections
event_data:
{"connection_id":1968291,"detection_time":1742058765,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":59398,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 2d6a8edc-bcbd-4886-80e4-e00bf13a70f6
log_level: critical
event_category: detections
event_data:
{"connection_id":1968338,"detection_time":1742058772,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":51853,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7db0f0f2-9b95-465b-b8bb-61b2c1169dfe
log_level: critical
event_category: detections
event_data:
{"connection_id":1968386,"detection_time":1742058778,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":43163,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c3570293-acd8-443c-83b3-3e5b47c5e9c3
log_level: critical
event_category: detections
event_data:
{"connection_id":1968849,"detection_time":1742058839,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":30525,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 844157e5-a84b-4847-9b0d-10a7140f8cdc
log_level: critical
event_category: detections
event_data:
{"connection_id":1968907,"detection_time":1742058846,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":22178,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e644259f-a39e-4c7e-8308-9791737ca770
log_level: critical
event_category: detections
event_data:
{"connection_id":1968948,"detection_time":1742058852,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":12581,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 61bc7f78-25bb-4f61-8fec-a075b2d2b6cf
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742058880,"event_type_id":6,"status":"blocked"}


event_id: c5938999-1e90-46e9-88eb-7bf64e9c2c97
log_level: critical
event_category: detections
event_data:
{"connection_id":1969164,"detection_time":1742058880,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":54502,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5914c0fa-ae24-441c-b382-741144baa69f
log_level: critical
event_category: detections
event_data:
{"connection_id":1969355,"detection_time":1742058906,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":46989,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 46232005-daa6-4c25-9b6e-ad1130b618c9
log_level: critical
event_category: detections
event_data:
{"connection_id":1969416,"detection_time":1742058912,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":39739,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: fb2a31cc-8271-4ffd-bd36-29b2ad338eb3
log_level: critical
event_category: detections
event_data:
{"connection_id":1969473,"detection_time":1742058919,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":32399,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0f67251a-b122-4b19-9d41-b4a171b447ae
log_level: critical
event_category: detections
event_data:
{"connection_id":1970500,"detection_time":1742059052,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.151","remote_port":34173,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 947f4e8b-f77f-4a31-8a77-fcd0f536663f
log_level: critical
event_category: detections
event_data:
{"connection_id":1970543,"detection_time":1742059058,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.151","remote_port":18778,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9ebf401a-c666-4e93-a395-db09b418171e
log_level: critical
event_category: detections
event_data:
{"connection_id":1970588,"detection_time":1742059064,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.151","remote_port":1709,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7a669b19-3051-4e92-8323-f2c21a72440a
log_level: critical
event_category: detections
event_data:
{"connection_id":1971036,"detection_time":1742059123,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.164","remote_port":12410,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d10554d5-778a-489c-9d79-2c93630737ac
log_level: critical
event_category: detections
event_data:
{"connection_id":1971086,"detection_time":1742059129,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.164","remote_port":12119,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 913564bd-0e4b-419f-a038-9218838d0246
log_level: critical
event_category: detections
event_data:
{"connection_id":1971131,"detection_time":1742059136,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.164","remote_port":59577,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c80cf53f-4e7b-41bf-84f2-83acd8650316
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742059234,"event_type_id":6,"status":"blocked"}


event_id: 11f926b0-7c90-4b8d-a83b-0eb1f532ef22
log_level: critical
event_category: detections
event_data:
{"connection_id":1971896,"detection_time":1742059234,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":51316,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1b04f8bb-1a74-4f33-8676-719a0935a440
log_level: critical
event_category: detections
event_data:
{"connection_id":1973711,"detection_time":1742059477,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":42125,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9a3a57fd-8d49-41cc-80ee-2226868f1662
log_level: critical
event_category: detections
event_data:
{"connection_id":1973774,"detection_time":1742059483,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":36678,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4f903edc-c9e3-4b1e-a9ee-91265c273abc
log_level: critical
event_category: detections
event_data:
{"connection_id":1973819,"detection_time":1742059489,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":28571,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 91803fb1-a0d4-4c98-8ed0-f614718649e0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742059718,"event_type_id":6,"status":"blocked"}


event_id: 3de44de0-3330-40e4-af29-b6124bb8a03b
log_level: critical
event_category: detections
event_data:
{"connection_id":1975606,"detection_time":1742059718,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":50426,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 33027f49-42e3-4563-8b4a-8d1b48811db8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742059886,"event_type_id":6,"status":"blocked"}


event_id: cf8cf085-27d4-4365-9eea-e13ce22928a6
log_level: critical
event_category: detections
event_data:
{"connection_id":1977213,"detection_time":1742059886,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":44926,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b750733f-660c-457e-aa7b-95184662912c
log_level: critical
event_category: detections
event_data:
{"connection_id":1979368,"detection_time":1742060159,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":13508,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a91bf132-b77c-40b6-96b8-17461d978a38
log_level: critical
event_category: detections
event_data:
{"connection_id":1979435,"detection_time":1742060165,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":6422,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3e4cfb25-9117-431c-9f5e-bf1df1e24a9d
log_level: critical
event_category: detections
event_data:
{"connection_id":1979484,"detection_time":1742060172,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":57953,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3f9a6588-0e0f-405a-b51d-61c1c6a8a437
log_level: critical
event_category: detections
event_data:
{"connection_id":1980584,"detection_time":1742060319,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.163","remote_port":41412,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a5d41ab1-bfa0-4e34-9f72-34595352dcb5
log_level: critical
event_category: detections
event_data:
{"connection_id":1980628,"detection_time":1742060325,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.163","remote_port":30680,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6b42eff4-f5ef-4886-bbc1-4c7417c3f0c5
log_level: critical
event_category: detections
event_data:
{"connection_id":1980670,"detection_time":1742060332,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.163","remote_port":20067,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 330fcbaf-e727-4c18-be7a-4f7d5a427c59
log_level: critical
event_category: detections
event_data:
{"connection_id":1980673,"detection_time":1742060332,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":52205,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 83e05c99-0b54-437a-9318-b2fe14352700
log_level: critical
event_category: detections
event_data:
{"connection_id":1980724,"detection_time":1742060338,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":43753,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 05d62c1b-f65a-4935-8a96-23a1f55d428e
log_level: critical
event_category: detections
event_data:
{"connection_id":1980774,"detection_time":1742060345,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":34859,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b4a668cb-a958-4e11-9f63-d457c9e96e24
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742060698,"event_type_id":6,"status":"blocked"}


event_id: 1a4d99ac-e9cc-4e2d-b9bb-6458457b5514
log_level: critical
event_category: detections
event_data:
{"connection_id":1983329,"detection_time":1742060698,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":48586,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 85b42ba7-4d59-49dc-8d7a-9080946b0d57
log_level: critical
event_category: detections
event_data:
{"connection_id":1986868,"detection_time":1742061173,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":17894,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bf8e8305-f8e7-44ef-8a32-9a1c89477b05
log_level: critical
event_category: detections
event_data:
{"connection_id":1986912,"detection_time":1742061180,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":8766,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ceea9c62-a9e2-4dc0-bfc4-53ec5325e483
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742061186,"event_type_id":6,"status":"blocked"}


event_id: e6ecf047-cd44-49ef-a9b2-91e9b1d66f16
log_level: critical
event_category: detections
event_data:
{"connection_id":1986961,"detection_time":1742061186,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":47699,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3c131c85-6cf5-4bac-9ba2-efebfc7d3fe9
log_level: critical
event_category: detections
event_data:
{"connection_id":1986990,"detection_time":1742061187,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":59009,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f7f8cf40-1ee6-4a80-8aae-bb4a302cddf9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742061401,"event_type_id":6,"status":"blocked"}


event_id: 1683ce70-f3aa-417c-b278-5128c131a02e
log_level: critical
event_category: detections
event_data:
{"connection_id":1988539,"detection_time":1742061401,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":43732,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c1202ed8-df2a-4525-a227-5f1c780bd5eb
log_level: critical
event_category: detections
event_data:
{"connection_id":1988706,"detection_time":1742061424,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.165","remote_port":35183,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 2fd141a6-3d4f-4dfd-bb1b-b003cb1ec122
log_level: critical
event_category: detections
event_data:
{"connection_id":1988761,"detection_time":1742061431,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.165","remote_port":24625,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 084971da-d676-473c-b63e-60ad9a7f83d6
log_level: critical
event_category: detections
event_data:
{"connection_id":1988819,"detection_time":1742061437,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.165","remote_port":13062,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: aab8b407-fda1-4dda-ac15-27a3bff1c11d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742061896,"event_type_id":6,"status":"blocked"}


event_id: a4189041-d16b-4afe-b52e-09bb6817c81a
log_level: critical
event_category: detections
event_data:
{"connection_id":1992325,"detection_time":1742061896,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":52577,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e8945202-d016-4bb7-9327-247a11238f9b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"82.165.133.160","autoblock_timeout":25,"detection_time":1742062013,"event_type_id":6,"status":"blocked"}


event_id: 1c8a918e-4909-4905-b987-0c7943efad7c
log_level: critical
event_category: detections
event_data:
{"connection_id":1993237,"detection_time":1742062013,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"82.165.133.160","remote_port":49719,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b69f615e-82f1-4005-9d89-e6cf65f45b8d
log_level: critical
event_category: detections
event_data:
{"connection_id":1993547,"detection_time":1742062054,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":57031,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e21281a9-44b3-437d-a1ee-3a615b7edd02
log_level: critical
event_category: detections
event_data:
{"connection_id":1993585,"detection_time":1742062060,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":36823,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: dcdaa4ec-fada-4125-b72a-9b4557bedc7f
log_level: critical
event_category: detections
event_data:
{"connection_id":1993630,"detection_time":1742062067,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":17352,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 086a54da-8369-47e8-90c6-eae0f1dcb510
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"43.133.180.36","autoblock_timeout":25,"detection_time":1742062077,"event_type_id":6,"status":"blocked"}


event_id: b22de920-0906-4b0d-b44a-737c99b767c4
log_level: critical
event_category: detections
event_data:
{"connection_id":1993719,"detection_time":1742062077,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"43.133.180.36","remote_port":51284,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 408728e7-1c3a-4833-8de4-a994b62d35ab
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742062150,"event_type_id":6,"status":"blocked"}


event_id: 6e2689fe-f2e7-40d8-93b3-651e8d44d280
log_level: critical
event_category: detections
event_data:
{"connection_id":1994260,"detection_time":1742062150,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":44792,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 50889973-d07b-489f-8b8e-9d6f10294ad2
log_level: critical
event_category: detections
event_data:
{"connection_id":1994488,"detection_time":1742062182,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":55908,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c169b6bc-2d08-4a8a-90e2-a3c0f3b541a7
log_level: critical
event_category: detections
event_data:
{"connection_id":1994546,"detection_time":1742062189,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":48795,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bdf087f2-db89-4045-9e18-5fa0c32a023d
log_level: critical
event_category: detections
event_data:
{"connection_id":1994597,"detection_time":1742062195,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":40852,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0cd955d9-02e8-4fec-8975-b9a8412dd181
log_level: critical
event_category: detections
event_data:
{"connection_id":1996176,"detection_time":1742062409,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":56825,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 12d90590-f049-4472-baa0-8af659f48365
log_level: critical
event_category: detections
event_data:
{"connection_id":1996229,"detection_time":1742062415,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":46532,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0b820d53-f237-46ec-92ea-224093809772
log_level: critical
event_category: detections
event_data:
{"connection_id":1996283,"detection_time":1742062422,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":36323,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d73fac00-28be-48cb-a45d-0bfca05dc390
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742062638,"event_type_id":6,"status":"blocked"}


event_id: 4d405f87-9c2a-4d76-8447-6d9bf10ad34f
log_level: critical
event_category: detections
event_data:
{"connection_id":1997941,"detection_time":1742062638,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":43509,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b72b93f7-04dc-42a7-bd0f-d20e00bf5d38
log_level: critical
event_category: detections
event_data:
{"connection_id":1998010,"detection_time":1742062648,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":16159,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 60c3f4ed-f4c4-40a2-a0e3-7848d33a0fed
log_level: critical
event_category: detections
event_data:
{"connection_id":1998061,"detection_time":1742062655,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":8337,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e912c574-2f5b-4a85-96b8-f6ba5179c38c
log_level: critical
event_category: detections
event_data:
{"connection_id":1998110,"detection_time":1742062661,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":58778,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5fc7b358-7ffe-4cd2-81d1-ea5a48ec54cb
log_level: critical
event_category: detections
event_data:
{"connection_id":1998389,"detection_time":1742062696,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":10161,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3865eb09-047f-4b93-a0de-b3d69667c399
log_level: critical
event_category: detections
event_data:
{"connection_id":1998431,"detection_time":1742062703,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":1584,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: be725b87-d93d-434d-a659-e33accfa2f17
log_level: critical
event_category: detections
event_data:
{"connection_id":1998491,"detection_time":1742062709,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":51970,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c32ccac6-c83b-4d46-8788-4efb8da89ac9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742063131,"event_type_id":6,"status":"blocked"}


event_id: 779a4654-0fa4-443f-8049-5d65e06b852a
log_level: critical
event_category: detections
event_data:
{"connection_id":2001623,"detection_time":1742063131,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":42377,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 356a7393-ea50-4c94-b601-6d962f24245c
log_level: critical
event_category: detections
event_data:
{"connection_id":2001914,"detection_time":1742063168,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":30981,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 99b1736a-77c3-4dac-999a-b8c5682a40be
log_level: critical
event_category: detections
event_data:
{"connection_id":2001963,"detection_time":1742063174,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":21690,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8d01c886-2358-462c-9763-fb8e957a8616
log_level: critical
event_category: detections
event_data:
{"connection_id":2002005,"detection_time":1742063181,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":9689,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7b245d0e-a33e-4d1e-81b8-5a801dd5e0ca
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742063409,"event_type_id":6,"status":"blocked"}


event_id: e4fe757a-08c0-48cb-a2bf-d9ca8b055ea7
log_level: critical
event_category: detections
event_data:
{"connection_id":2003704,"detection_time":1742063409,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":53221,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 36229000-ba23-4691-aca1-67d4f8d76191
log_level: critical
event_category: detections
event_data:
{"connection_id":2004402,"detection_time":1742063505,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":40892,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 675dab6a-5ac8-4288-9bfa-913ed4ce7b35
log_level: critical
event_category: detections
event_data:
{"connection_id":2004451,"detection_time":1742063512,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":32783,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: be6c421b-3eda-42d4-989d-8cbc75a11ded
log_level: critical
event_category: detections
event_data:
{"connection_id":2004508,"detection_time":1742063518,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":26691,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8ffc107b-9bd7-447b-8f50-3b5c1cb9c201
log_level: critical
event_category: detections
event_data:
{"connection_id":2004610,"detection_time":1742063532,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":47513,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: fe4ad58a-ba96-41a1-9654-29a82d20129c
log_level: critical
event_category: detections
event_data:
{"connection_id":2004651,"detection_time":1742063539,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":38843,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5779fbf6-5994-4caf-b008-edf41d20d956
log_level: critical
event_category: detections
event_data:
{"connection_id":2004707,"detection_time":1742063545,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":31175,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 512c9032-bd8d-4ec8-8ba8-ea5ce579b02b
log_level: critical
event_category: detections
event_data:
{"connection_id":2004766,"detection_time":1742063552,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":25942,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e535b9b2-3a61-4221-b1af-8ec41a2f06a5
log_level: critical
event_category: detections
event_data:
{"connection_id":2004811,"detection_time":1742063559,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":18818,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 2c3f51d1-2dce-4b35-9a31-ac1a592f9b35
log_level: critical
event_category: detections
event_data:
{"connection_id":2004862,"detection_time":1742063565,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":11902,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: efec831b-b1e5-4457-8ae5-9142a447dad7
log_level: critical
event_category: detections
event_data:
{"connection_id":2008129,"detection_time":1742063987,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":23966,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: da0048ee-850d-4ff2-b14e-3b6c7accf27d
log_level: critical
event_category: detections
event_data:
{"connection_id":2008172,"detection_time":1742063994,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":12577,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: be075bed-37c5-497e-adba-0b4b70f222dc
log_level: critical
event_category: detections
event_data:
{"connection_id":2008211,"detection_time":1742063998,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":41807,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 759d00ee-d984-489e-b970-899541a63426
log_level: critical
event_category: detections
event_data:
{"connection_id":2008226,"detection_time":1742064000,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":59762,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 43400d9f-a9b2-4968-b0ee-79a2b007ed70
log_level: critical
event_category: detections
event_data:
{"connection_id":2008262,"detection_time":1742064005,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":30100,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b5893ca6-f9a4-42f6-9f11-187f1962dcd4
log_level: critical
event_category: detections
event_data:
{"connection_id":2008311,"detection_time":1742064011,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":18734,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e8995a0b-8303-437d-bbf0-874fd511da53
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742064098,"event_type_id":6,"status":"blocked"}


event_id: e9deeba1-a430-4dbe-bab7-5eb59075909d
log_level: critical
event_category: detections
event_data:
{"connection_id":2008971,"detection_time":1742064098,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":39868,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a28bcfce-d9b5-4884-ad9b-d2ea5c5c48b6
log_level: critical
event_category: detections
event_data:
{"connection_id":2009767,"detection_time":1742064207,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":5965,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c27a6591-980d-4e17-af45-ec522c95bc05
log_level: critical
event_category: detections
event_data:
{"connection_id":2009826,"detection_time":1742064213,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":50388,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c4ce2b00-1db8-4d23-8e70-91a2927589fe
log_level: critical
event_category: detections
event_data:
{"connection_id":2009872,"detection_time":1742064220,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":35568,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1225ed5c-5e7a-4fb1-a684-dcf6319ed6ba
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742064584,"event_type_id":6,"status":"blocked"}


event_id: 65406142-60f1-431e-adfc-5138b44f6402
log_level: critical
event_category: detections
event_data:
{"connection_id":2012621,"detection_time":1742064584,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":37674,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1bfb5f8e-4494-45e0-bc6d-741c4b4f2299
log_level: critical
event_category: detections
event_data:
{"connection_id":2012755,"detection_time":1742064601,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":34464,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d2123e3a-f140-42de-b98e-175892a71ce2
log_level: critical
event_category: detections
event_data:
{"connection_id":2012809,"detection_time":1742064607,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":23445,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4e636252-9324-4ee2-991e-a5d6b62e1e39
log_level: critical
event_category: detections
event_data:
{"connection_id":2012857,"detection_time":1742064614,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":12873,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bc75d64f-6921-4ba3-8095-5b8b41c6afbd
log_level: critical
event_category: detections
event_data:
{"connection_id":2013489,"detection_time":1742064699,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"193.37.69.105","remote_port":64936,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7ff50c34-dad9-45a5-aef3-5a290d5a66d5
log_level: critical
event_category: detections
event_data:
{"connection_id":2015026,"detection_time":1742064904,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":41548,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3d7f27e5-4382-4c7a-bc55-9312564bfdaf
log_level: critical
event_category: detections
event_data:
{"connection_id":2015072,"detection_time":1742064910,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":32834,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3a87a88f-0454-4411-950d-fb612cf93db1
log_level: critical
event_category: detections
event_data:
{"connection_id":2015112,"detection_time":1742064917,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":25767,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9d533de5-79ce-4ddf-bc85-e26f24e627d7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742064920,"event_type_id":6,"status":"blocked"}


event_id: ba8e1852-5ede-4ade-8275-686791af4cf3
log_level: critical
event_category: detections
event_data:
{"connection_id":2015133,"detection_time":1742064920,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":53386,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6a1acc8f-b8c1-4e7c-8237-e2b0a156496a
log_level: critical
event_category: detections
event_data:
{"connection_id":2015410,"detection_time":1742064958,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":44544,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 202bd2f4-d7f2-4d79-a292-81ca6b4ec69a
log_level: critical
event_category: detections
event_data:
{"connection_id":2015461,"detection_time":1742064964,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":32450,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9e29a961-8385-4a05-9e15-42c9d46d99f0
log_level: critical
event_category: detections
event_data:
{"connection_id":2015507,"detection_time":1742064971,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":21564,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 2fe66c24-c26c-47ad-8bf4-2b41c8787622
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742065421,"event_type_id":6,"status":"blocked"}


event_id: 5782d1b4-948c-40b2-84cf-9b5248e9c7ee
log_level: critical
event_category: detections
event_data:
{"connection_id":2018926,"detection_time":1742065421,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":34441,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f29a6a0e-5b38-40ee-b1f8-49f4b3c5f7ba
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742065558,"event_type_id":6,"status":"blocked"}


event_id: 7cf30970-64cb-4b42-b7ce-a0890aa11909
log_level: critical
event_category: detections
event_data:
{"connection_id":2019991,"detection_time":1742065558,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":35861,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6b207f29-0496-4ba0-879e-3c98b78428af
log_level: critical
event_category: detections
event_data:
{"connection_id":2020256,"detection_time":1742065592,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.96","remote_port":49421,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8e07a914-bf2d-4b47-a044-4bf48e1b4f1e
log_level: critical
event_category: detections
event_data:
{"connection_id":2020314,"detection_time":1742065599,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.96","remote_port":35501,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9bf978ed-3362-4a74-974a-923a2d1e4411
log_level: critical
event_category: detections
event_data:
{"connection_id":2020360,"detection_time":1742065605,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.96","remote_port":26990,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 299494bb-a488-4d74-977f-2474f7da8650
log_level: critical
event_category: detections
event_data:
{"connection_id":2020958,"detection_time":1742065688,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":36527,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6ce7a255-8f35-4f2b-a888-381f6b6b67c5
log_level: critical
event_category: detections
event_data:
{"connection_id":2021010,"detection_time":1742065694,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":28456,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9d239227-a4e8-4fb1-b3c7-b8895c588e82
log_level: critical
event_category: detections
event_data:
{"connection_id":2021054,"detection_time":1742065701,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":19437,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b2608a9d-57a4-4b0d-aa97-acdf5e53ff3a
log_level: critical
event_category: detections
event_data:
{"connection_id":2022229,"detection_time":1742065859,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.96","remote_port":20661,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 43edf05c-6bcd-4887-8fe9-a6d2b805969c
log_level: critical
event_category: detections
event_data:
{"connection_id":2022275,"detection_time":1742065866,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.96","remote_port":9831,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0f1c5acf-67ea-4ef7-995c-fa176705671c
log_level: critical
event_category: detections
event_data:
{"connection_id":2022330,"detection_time":1742065872,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.96","remote_port":57067,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c82eddc1-87bf-4b2b-a501-027c81d61f75
log_level: critical
event_category: detections
event_data:
{"connection_id":2022708,"detection_time":1742065922,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":24372,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c999c064-ee6b-45bc-a53b-1c9cd287c02a
log_level: critical
event_category: detections
event_data:
{"connection_id":2022754,"detection_time":1742065928,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":16205,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6e17b450-e311-442d-b13e-c55924cffad2
log_level: critical
event_category: detections
event_data:
{"connection_id":2022800,"detection_time":1742065934,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":8182,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 48908813-bf5e-4104-b5d6-27c044bea5bd
log_level: critical
event_category: detections
event_data:
{"connection_id":2022857,"detection_time":1742065943,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":47300,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c25906cf-e7a5-4f8e-904c-63ab910c882b
log_level: critical
event_category: detections
event_data:
{"connection_id":2022920,"detection_time":1742065950,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":38068,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 25b5232a-20e0-43bc-9e4a-4500001b1a01
log_level: critical
event_category: detections
event_data:
{"connection_id":2022969,"detection_time":1742065956,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":28090,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 09b825fd-3221-4bd2-b976-d210829232cf
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742066424,"event_type_id":6,"status":"blocked"}


event_id: 983d3965-242a-4e6e-987d-8f343eb295c8
log_level: critical
event_category: detections
event_data:
{"connection_id":2026414,"detection_time":1742066424,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":52408,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: a320cd22-e6a6-479e-9783-b40da3489eb8
log_level: critical
event_category: detections
event_data:
{"connection_id":2027924,"detection_time":1742066636,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":50126,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 403de093-cc31-4aa9-97f0-b962854ee555
log_level: critical
event_category: detections
event_data:
{"connection_id":2027976,"detection_time":1742066642,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":40067,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 50eb5a38-904b-4842-8c2c-fe009db9cd9a
log_level: critical
event_category: detections
event_data:
{"connection_id":2028022,"detection_time":1742066649,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":28722,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 49364fa8-8b1b-4127-b007-044933896fbb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742066926,"event_type_id":6,"status":"blocked"}


event_id: 1f54b728-9a39-484c-acee-f73767649c55
log_level: critical
event_category: detections
event_data:
{"connection_id":2030055,"detection_time":1742066926,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":32862,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 31fed5cb-2841-47c6-b9c1-568d45d3ed13
log_level: critical
event_category: detections
event_data:
{"connection_id":2030488,"detection_time":1742066984,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":30012,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d545659b-b413-4c1f-b563-9da1b94ffe3a
log_level: critical
event_category: detections
event_data:
{"connection_id":2030533,"detection_time":1742066990,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":20044,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f2ef43b3-6d01-4c15-81e8-d8d62e2a7f24
log_level: critical
event_category: detections
event_data:
{"connection_id":2030571,"detection_time":1742066997,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":9454,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 146d833b-5ea3-4585-a004-f7c66ab85bf7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742067021,"event_type_id":6,"status":"blocked"}


event_id: 9e384949-da3d-404e-94d4-68bb4a1d9fa8
log_level: critical
event_category: detections
event_data:
{"connection_id":2030750,"detection_time":1742067021,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":32824,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b5caf3a6-be3f-450b-b87a-60d7bb24bf48
log_level: critical
event_category: detections
event_data:
{"connection_id":2031364,"detection_time":1742067106,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":45259,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6bfcff32-01ae-4e42-ad84-a40651b4e142
log_level: critical
event_category: detections
event_data:
{"connection_id":2031410,"detection_time":1742067113,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":35662,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 625f376a-1101-48b1-be07-53361fac5065
log_level: critical
event_category: detections
event_data:
{"connection_id":2031448,"detection_time":1742067119,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":25432,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3ad254a3-2892-408f-9749-235d939ff69d
log_level: critical
event_category: detections
event_data:
{"connection_id":2033580,"detection_time":1742067389,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":7905,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7ebaec4f-dbd2-4fd3-a8b0-bdae7e1b5798
log_level: critical
event_category: detections
event_data:
{"connection_id":2033626,"detection_time":1742067396,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":56534,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ab729ec5-d0b3-4d80-b058-174c62f26982
log_level: critical
event_category: detections
event_data:
{"connection_id":2033684,"detection_time":1742067402,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":46253,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f248c28d-01f1-4de8-908b-50ae3f90794a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742067429,"event_type_id":6,"status":"blocked"}


event_id: 6e1c352d-7344-42da-8d00-ab5f1bc5eaee
log_level: critical
event_category: detections
event_data:
{"connection_id":2033866,"detection_time":1742067429,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":42453,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 74753560-cf9c-490e-8aa4-97d09cd82e6f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742067501,"event_type_id":6,"status":"blocked"}


event_id: 552a53fe-975f-4d00-abb9-c7da6e3c6daa
log_level: critical
event_category: detections
event_data:
{"connection_id":2034388,"detection_time":1742067502,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":59970,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ec841501-f975-4475-a507-7ef08356a9e7
log_level: critical
event_category: detections
event_data:
{"connection_id":2035001,"detection_time":1742067587,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":55587,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4691ced4-1bac-482d-b2a2-1479dc40634b
log_level: critical
event_category: detections
event_data:
{"connection_id":2035051,"detection_time":1742067593,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":45595,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 62b6de52-fad3-4028-96ea-6cefa30359b5
log_level: critical
event_category: detections
event_data:
{"connection_id":2035108,"detection_time":1742067599,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":35016,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 21a704e9-7736-4941-9794-2921199c7c29
log_level: critical
event_category: detections
event_data:
{"connection_id":2036785,"detection_time":1742067826,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"139.5.64.124","remote_port":61619,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f312ccd3-b1da-4d10-b2be-4c392d4a57b8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742067931,"event_type_id":6,"status":"blocked"}


event_id: 397a27ae-6c1e-4096-9255-656fdbb9b611
log_level: critical
event_category: detections
event_data:
{"connection_id":2037625,"detection_time":1742067931,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":50712,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 959992d1-cd31-4941-bc2b-c0170570be17
log_level: critical
event_category: detections
event_data:
{"connection_id":2037989,"detection_time":1742067980,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":21555,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a2cfa70d-0b91-46c7-936a-bad1ee15e765
log_level: critical
event_category: detections
event_data:
{"connection_id":2038035,"detection_time":1742067987,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":11016,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 79cd1874-5003-45f5-9fbd-90a55598230c
log_level: critical
event_category: detections
event_data:
{"connection_id":2038104,"detection_time":1742067993,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":58304,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ea7e555f-1e4f-4d76-9419-3652a0a538be
log_level: critical
event_category: detections
event_data:
{"connection_id":2038893,"detection_time":1742068100,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.166","remote_port":34344,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 85c04066-d1b4-4c38-b575-c1be2a0d144c
log_level: critical
event_category: detections
event_data:
{"connection_id":2038944,"detection_time":1742068106,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.166","remote_port":25202,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: eedc4bb8-99a7-4df8-8fb0-68d41cc86ee0
log_level: critical
event_category: detections
event_data:
{"connection_id":2039001,"detection_time":1742068113,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.166","remote_port":10950,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: dd2d9e41-8216-4bcf-8cad-70a8db7b1cd5
log_level: critical
event_category: detections
event_data:
{"connection_id":2039350,"detection_time":1742068159,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"121.142.5.105","remote_port":29264,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5a6fcf43-b16b-4166-bce9-7c1ebac7d65e
log_level: critical
event_category: detections
event_data:
{"connection_id":2039399,"detection_time":1742068166,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"121.142.5.105","remote_port":36183,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 055c5c9a-94ad-4607-afcd-3cda4f76eadb
log_level: critical
event_category: detections
event_data:
{"connection_id":2039642,"detection_time":1742068199,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":45871,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 791f6d20-1866-4e89-98a3-3267f1b2adb1
log_level: critical
event_category: detections
event_data:
{"connection_id":2039688,"detection_time":1742068206,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":37097,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ea03fd28-6f4c-4169-b591-7889c469627f
log_level: critical
event_category: detections
event_data:
{"connection_id":2039731,"detection_time":1742068211,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":12380,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ff9ba48d-108e-4068-b2fd-c14e1c5b1369
log_level: critical
event_category: detections
event_data:
{"connection_id":2039739,"detection_time":1742068212,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":29412,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 47cfd003-4e59-402c-b388-ce4d4c5771f7
log_level: critical
event_category: detections
event_data:
{"connection_id":2039772,"detection_time":1742068217,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":59851,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6fc6e81f-f400-49eb-94cb-939ed32a8a8a
log_level: critical
event_category: detections
event_data:
{"connection_id":2039814,"detection_time":1742068224,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":49061,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a6aabc18-4e16-46a4-b4cf-40e44f602876
log_level: critical
event_category: detections
event_data:
{"connection_id":2040283,"detection_time":1742068286,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.156","remote_port":21910,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b1a0ee11-ebdc-465c-b2cb-066620df8cb0
log_level: critical
event_category: detections
event_data:
{"connection_id":2040321,"detection_time":1742068292,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.156","remote_port":5739,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7c8e8b01-0fba-4426-9e55-905e7a3b1bc1
log_level: critical
event_category: detections
event_data:
{"connection_id":2040363,"detection_time":1742068299,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.156","remote_port":46972,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 06b90c40-1531-4ebd-ba86-fe68db59d103
log_level: critical
event_category: detections
event_data:
{"connection_id":2040433,"detection_time":1742068307,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":42903,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3efd7163-7f88-48e7-bf93-02118ed0bd36
log_level: critical
event_category: detections
event_data:
{"connection_id":2040489,"detection_time":1742068313,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":33964,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ab27fcf1-9fc1-4f49-9f58-883af3213dd4
log_level: critical
event_category: detections
event_data:
{"connection_id":2040535,"detection_time":1742068319,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":24712,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 68369906-a745-408a-9758-bdb02133b6f1
log_level: critical
event_category: detections
event_data:
{"connection_id":2040849,"detection_time":1742068365,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":6477,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b7be758a-9ffb-4bd3-8e68-b5adec9bc849
log_level: critical
event_category: detections
event_data:
{"connection_id":2040898,"detection_time":1742068371,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":55564,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: cb0e1853-3cb6-4be2-a50f-38d6d86cda91
log_level: critical
event_category: detections
event_data:
{"connection_id":2040950,"detection_time":1742068378,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":47476,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 38605c13-8606-4f76-b4fe-b3f0bbc76ce0
log_level: critical
event_category: detections
event_data:
{"connection_id":2041274,"detection_time":1742068423,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.154","remote_port":17009,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 62c36dd2-20b1-4f19-bc0e-b2dddd88c0b9
log_level: critical
event_category: detections
event_data:
{"connection_id":2041332,"detection_time":1742068429,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.154","remote_port":48456,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f81f7504-94a2-4ddc-ab94-838dc374d270
log_level: critical
event_category: detections
event_data:
{"connection_id":2041376,"detection_time":1742068435,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.154","remote_port":12086,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: cadd1b40-9799-46e4-afb5-49e503a4327b
log_level: critical
event_category: detections
event_data:
{"connection_id":2043022,"detection_time":1742068663,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":32134,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1160370a-98d0-415a-ae70-a30a4e42202f
log_level: critical
event_category: detections
event_data:
{"connection_id":2043088,"detection_time":1742068669,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":23787,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e139a9f0-0a95-4ffb-a480-7664bbea77bf
log_level: critical
event_category: detections
event_data:
{"connection_id":2043132,"detection_time":1742068676,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":16787,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8c841a80-e82b-4079-b7aa-b192fc1a4088
log_level: critical
event_category: detections
event_data:
{"connection_id":2043237,"detection_time":1742068691,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":34831,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: be8be355-5ea1-4bbc-8753-7d22cce3b0d7
log_level: critical
event_category: detections
event_data:
{"connection_id":2043284,"detection_time":1742068697,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":26778,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 41277b39-067d-4a6e-89f2-92f54956cbbd
log_level: critical
event_category: detections
event_data:
{"connection_id":2043326,"detection_time":1742068704,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":18350,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8f77c89b-8bc7-40fd-8f74-64e91f4e1951
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742068968,"event_type_id":6,"status":"blocked"}


event_id: 822cf7e7-841a-4d10-91ff-154b715f2d3d
log_level: critical
event_category: detections
event_data:
{"connection_id":2045264,"detection_time":1742068968,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":56960,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3eb0d612-31ae-4605-9cbf-3d46d942b7cb
log_level: critical
event_category: detections
event_data:
{"connection_id":2045628,"detection_time":1742069010,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":11969,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 64c8fa5f-ef42-4b9b-a808-bf91344a9358
log_level: critical
event_category: detections
event_data:
{"connection_id":2045672,"detection_time":1742069017,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":2405,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 153fcf50-bd91-48c7-aba3-3b8e95c78e66
log_level: critical
event_category: detections
event_data:
{"connection_id":2045718,"detection_time":1742069023,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":47423,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 19fc87a1-d173-48b4-a4db-aff1a19c48b2
log_level: critical
event_category: detections
event_data:
{"connection_id":2046342,"detection_time":1742069102,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.142.193.141","remote_port":17484,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6db10386-e261-4fca-9fba-a2c6241b0b3f
log_level: critical
event_category: detections
event_data:
{"connection_id":2048168,"detection_time":1742069344,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":33319,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 22331ad6-cbb6-4f9a-8de4-0d5bbcb69f51
log_level: critical
event_category: detections
event_data:
{"connection_id":2048210,"detection_time":1742069351,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":25457,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 20f8970f-3190-4f03-9160-5a9567e85ece
log_level: critical
event_category: detections
event_data:
{"connection_id":2048259,"detection_time":1742069357,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":17040,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 679d9f84-9b8a-4655-b7cb-70787b3ebf4a
log_level: critical
event_category: detections
event_data:
{"connection_id":2048366,"detection_time":1742069373,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":59180,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ccda91b4-9668-4392-9462-3b10db66ab93
log_level: critical
event_category: detections
event_data:
{"connection_id":2048412,"detection_time":1742069379,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":51127,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d76fc6a9-2be1-4684-9876-192cf16adb79
log_level: critical
event_category: detections
event_data:
{"connection_id":2048474,"detection_time":1742069386,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":42704,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 356d7a31-5dcc-47e3-bc75-133033b8919d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742069441,"event_type_id":6,"status":"blocked"}


event_id: d72e7523-cd2c-454d-8695-cf96b38efbe5
log_level: critical
event_category: detections
event_data:
{"connection_id":2048870,"detection_time":1742069441,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":50609,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 558985ed-d69a-4ae5-9019-1a912842a6f4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742069450,"event_type_id":6,"status":"blocked"}


event_id: 721a326a-d935-4e69-9f37-c93da8c8d7d6
log_level: critical
event_category: detections
event_data:
{"connection_id":2048933,"detection_time":1742069450,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":55191,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 51e39cf4-215c-48cd-a877-10c8c3251b40
log_level: critical
event_category: detections
event_data:
{"connection_id":2051333,"detection_time":1742069775,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":15183,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b5690bf3-a647-4cda-ac64-85dd93010909
log_level: critical
event_category: detections
event_data:
{"connection_id":2051384,"detection_time":1742069781,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":6085,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 933daa67-a74d-47df-8b9b-527a86de3f9d
log_level: critical
event_category: detections
event_data:
{"connection_id":2051448,"detection_time":1742069788,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":54925,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1ca39813-aefe-4a27-b571-1aae489ce250
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742069943,"event_type_id":6,"status":"blocked"}


event_id: e55fb83d-1eec-4f8e-ad92-d98580feb3b4
log_level: critical
event_category: detections
event_data:
{"connection_id":2052607,"detection_time":1742069943,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":59884,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3978c2e5-2d6d-4261-ba1a-7512c6da9c42
log_level: critical
event_category: detections
event_data:
{"connection_id":2053175,"detection_time":1742070022,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":25814,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5d7ff13e-fa19-4e8d-ad83-b20b74c1dbf5
log_level: critical
event_category: detections
event_data:
{"connection_id":2053225,"detection_time":1742070029,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":13602,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4ff95990-f194-4e65-babe-6bb4fdecfa0e
log_level: critical
event_category: detections
event_data:
{"connection_id":2053272,"detection_time":1742070035,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":6555,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 52dcedff-ed8d-42f5-928e-5203f265461a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"102.211.232.152","autoblock_timeout":25,"detection_time":1742070212,"event_type_id":6,"status":"blocked"}


event_id: 59d73ac3-47b7-4621-9751-e2214264229e
log_level: critical
event_category: detections
event_data:
{"connection_id":2054540,"detection_time":1742070212,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"102.211.232.152","remote_port":53230,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 324aab1b-d797-4a1a-b4b7-953ae5aee098
log_level: critical
event_category: detections
event_data:
{"connection_id":2054728,"detection_time":1742070236,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.96","remote_port":17004,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 79e24219-b4e9-4300-96e6-a01d93e606d0
log_level: critical
event_category: detections
event_data:
{"connection_id":2054776,"detection_time":1742070242,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.96","remote_port":8583,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 24f201c0-32b4-46a3-b5f7-3e75cecdc71a
log_level: critical
event_category: detections
event_data:
{"connection_id":2054814,"detection_time":1742070249,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.96","remote_port":58524,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 09628b69-8bc0-4cc3-8494-a3b68b61d0cc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"102.211.232.152","autoblock_timeout":25,"detection_time":1742070284,"event_type_id":6,"status":"blocked"}


event_id: 2906aadd-3a1a-4f84-9731-1e58a87cc77e
log_level: critical
event_category: detections
event_data:
{"connection_id":2055061,"detection_time":1742070284,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"102.211.232.152","remote_port":59720,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2cd2f071-992e-47cb-a359-e6d9e45cf7fe
log_level: critical
event_category: detections
event_data:
{"connection_id":2056108,"detection_time":1742070419,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":39729,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 59bb9447-46da-4ddd-8e0b-cab13f17e5e6
log_level: critical
event_category: detections
event_data:
{"connection_id":2056159,"detection_time":1742070426,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":32096,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6c9defa8-fde0-4a45-a43c-d57c1627f034
log_level: critical
event_category: detections
event_data:
{"connection_id":2056215,"detection_time":1742070432,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":23835,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 87aed7eb-af67-41f6-998d-17e3a48f29ca
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742070448,"event_type_id":6,"status":"blocked"}


event_id: 5d86d2e2-4ec8-4dbf-ae07-2e87c1ced45c
log_level: critical
event_category: detections
event_data:
{"connection_id":2056325,"detection_time":1742070448,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":42225,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bfeab368-0913-4f01-8bd0-f04272f75c6b
log_level: critical
event_category: detections
event_data:
{"connection_id":2059392,"detection_time":1742070858,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":33855,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 792fb84c-543b-4fd0-8f5c-d90eeb78d6d9
log_level: critical
event_category: detections
event_data:
{"connection_id":2059451,"detection_time":1742070865,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":26268,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ac63ee9e-738c-421f-a865-3b6e7913c977
log_level: critical
event_category: detections
event_data:
{"connection_id":2059501,"detection_time":1742070871,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":17995,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 2d8c41be-1c8b-45a6-83c4-a84d10be3d6b
log_level: critical
event_category: detections
event_data:
{"connection_id":2059709,"detection_time":1742070896,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":2872,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e933b4ab-4f40-4665-bc24-011fc8567f79
log_level: critical
event_category: detections
event_data:
{"connection_id":2059777,"detection_time":1742070902,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":42957,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3c207199-9999-4e96-8087-cba81e158f85
log_level: critical
event_category: detections
event_data:
{"connection_id":2059822,"detection_time":1742070909,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":23469,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8232eafb-2511-499f-b137-8c6e22679744
log_level: critical
event_category: detections
event_data:
{"connection_id":2060002,"detection_time":1742070933,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.96","remote_port":11570,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 76b0e5e8-dfde-47a7-9f56-9bcb9febc718
log_level: critical
event_category: detections
event_data:
{"connection_id":2060050,"detection_time":1742070937,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":45572,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e78f8996-52a2-46a8-9c6a-2a6354c7008a
log_level: critical
event_category: detections
event_data:
{"connection_id":2060069,"detection_time":1742070940,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.96","remote_port":2575,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 626972fc-9762-48e5-bb4b-1845489e4ad0
log_level: critical
event_category: detections
event_data:
{"connection_id":2060096,"detection_time":1742070943,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":27857,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7c19008a-56e3-40da-830e-0e88096de228
log_level: critical
event_category: detections
event_data:
{"connection_id":2060114,"detection_time":1742070946,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.96","remote_port":53704,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ae16452e-493f-42c9-bf70-65b4e2e3b703
log_level: critical
event_category: detections
event_data:
{"connection_id":2060144,"detection_time":1742070950,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":21735,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c748b602-1103-4676-a7f7-bf15cd2b0443
log_level: critical
event_category: detections
event_data:
{"connection_id":2060188,"detection_time":1742070957,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":48736,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e2c3a3ba-0530-4572-ac60-4aabe275bb92
log_level: critical
event_category: detections
event_data:
{"connection_id":2060239,"detection_time":1742070963,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":40557,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a7f9a021-7e28-4452-98d1-296e93213649
log_level: critical
event_category: detections
event_data:
{"connection_id":2060288,"detection_time":1742070970,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":31819,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 19955bf5-c5dd-48a9-b2a5-1288d1c4f9ce
log_level: critical
event_category: detections
event_data:
{"connection_id":2062161,"detection_time":1742071217,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":43026,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ead76093-84f4-4d39-bc50-f44123df6350
log_level: critical
event_category: detections
event_data:
{"connection_id":2062199,"detection_time":1742071224,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":33452,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ec001a7d-e5be-421e-855f-daff88dd119d
log_level: critical
event_category: detections
event_data:
{"connection_id":2062250,"detection_time":1742071230,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":23731,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 42bf9292-8db7-482b-92f1-24ae5bc1f6ef
log_level: critical
event_category: detections
event_data:
{"connection_id":2062554,"detection_time":1742071272,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.167","remote_port":9682,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6aebe935-ad31-41c6-9326-5421f7bf5c1f
log_level: critical
event_category: detections
event_data:
{"connection_id":2062596,"detection_time":1742071278,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.167","remote_port":4516,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 89699d3e-74ec-45d9-9e39-7b7839df2577
log_level: critical
event_category: detections
event_data:
{"connection_id":2062637,"detection_time":1742071285,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.167","remote_port":52760,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 925e4618-41a6-44a7-94dc-59298fdd3051
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742071393,"event_type_id":6,"status":"blocked"}


event_id: 65b38ff7-d642-4492-a8d5-f0ccb3f332ed
log_level: critical
event_category: detections
event_data:
{"connection_id":2063434,"detection_time":1742071393,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":49151,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2d8a19cf-6214-45d5-8598-53b01b97f14e
log_level: critical
event_category: detections
event_data:
{"connection_id":2063493,"detection_time":1742071402,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.135.222.78","remote_port":50672,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: fbfebfce-c539-40bb-91ca-bf0c97372aad
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742071453,"event_type_id":6,"status":"blocked"}


event_id: 1ebd8b93-68a1-4423-bf42-58f6233a420e
log_level: critical
event_category: detections
event_data:
{"connection_id":2063877,"detection_time":1742071453,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":33062,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2fbec1b9-e5f0-4b03-a020-202161b7bd7a
log_level: critical
event_category: detections
event_data:
{"connection_id":2065292,"detection_time":1742071643,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":22436,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bbc0a5e1-8e04-4249-98e2-a0a618acbde8
log_level: critical
event_category: detections
event_data:
{"connection_id":2065343,"detection_time":1742071650,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":14219,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 793c6aa7-6887-4c29-a26a-78aa5838fb7e
log_level: critical
event_category: detections
event_data:
{"connection_id":2065406,"detection_time":1742071656,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":6873,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 02b67467-8999-463c-9c80-b336f410b8a4
log_level: critical
event_category: detections
event_data:
{"connection_id":2066098,"detection_time":1742071751,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":19759,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e34aa905-6ac4-4acf-835a-495a75294c35
log_level: critical
event_category: detections
event_data:
{"connection_id":2066138,"detection_time":1742071757,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":9089,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4081cf9c-7473-4440-9071-3edeb574b974
log_level: critical
event_category: detections
event_data:
{"connection_id":2066189,"detection_time":1742071764,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":58862,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ed1a94d8-6c95-4f60-903b-073b82c18531
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742071876,"event_type_id":6,"status":"blocked"}


event_id: 9aec694f-688f-4ea5-9dc0-a0a2b57d2947
log_level: critical
event_category: detections
event_data:
{"connection_id":2067023,"detection_time":1742071876,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":47181,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 541e0334-383e-46f6-a70d-8acef7efc72b
log_level: critical
event_category: detections
event_data:
{"connection_id":2067507,"detection_time":1742071941,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":17813,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: fe4dbf2c-1714-4437-a8cf-60391e52a136
log_level: critical
event_category: detections
event_data:
{"connection_id":2067556,"detection_time":1742071948,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":9790,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9e0c1ab4-423f-422c-a87e-7058cbc4ab00
log_level: critical
event_category: detections
event_data:
{"connection_id":2067568,"detection_time":1742071950,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":52281,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 35c9b1c5-43f9-4268-8e0b-801b48175fc8
log_level: critical
event_category: detections
event_data:
{"connection_id":2067599,"detection_time":1742071954,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":1714,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 833e9a52-62b7-4aec-ae05-d5e015e40556
log_level: critical
event_category: detections
event_data:
{"connection_id":2067615,"detection_time":1742071957,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":44387,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 80923c53-c6df-4b2b-a0b4-a48be19a54fb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742071961,"event_type_id":6,"status":"blocked"}


event_id: bbe6e062-a115-4251-9c5e-b9fe893b49ea
log_level: critical
event_category: detections
event_data:
{"connection_id":2067643,"detection_time":1742071961,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":43433,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b18b54aa-dfa6-4c4c-bdd0-cadcff3a381e
log_level: critical
event_category: detections
event_data:
{"connection_id":2067667,"detection_time":1742071963,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":34805,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e3d0d1de-d2db-4dd0-9f48-6236324d141a
log_level: critical
event_category: detections
event_data:
{"connection_id":2070593,"detection_time":1742072363,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":24106,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a332c178-1ade-4a70-b5d9-3a3f1dc000dd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742072363,"event_type_id":6,"status":"blocked"}


event_id: b56095f0-b4cc-4c2f-a62c-22900cb78fc8
log_level: critical
event_category: detections
event_data:
{"connection_id":2070594,"detection_time":1742072363,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":46533,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 448ef54c-a1a2-4878-9b29-a6cf6f09ee90
log_level: critical
event_category: detections
event_data:
{"connection_id":2070643,"detection_time":1742072369,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":17356,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 60012539-b7d6-4ddf-92d9-01394d2f4d1d
log_level: critical
event_category: detections
event_data:
{"connection_id":2070700,"detection_time":1742072376,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":9677,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: dc9f0cad-b226-4565-9c60-2d0aea108032
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742072460,"event_type_id":6,"status":"blocked"}


event_id: b869ed37-0f86-4b9d-b156-c45fde4c1bc4
log_level: critical
event_category: detections
event_data:
{"connection_id":2071281,"detection_time":1742072460,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":52074,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9aa313f4-555e-4837-aa38-122d148b0874
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742072852,"event_type_id":6,"status":"blocked"}


event_id: 4736c960-3215-48fc-9d6b-16145ccc5d2e
log_level: critical
event_category: detections
event_data:
{"connection_id":2074280,"detection_time":1742072852,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":45162,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c0b23aab-507e-46f6-9425-33e54466e57f
log_level: critical
event_category: detections
event_data:
{"connection_id":2074782,"detection_time":1742072921,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":40950,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 95d72374-270e-4b3a-87ec-7d57f37b30ff
log_level: critical
event_category: detections
event_data:
{"connection_id":2074827,"detection_time":1742072928,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":33134,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 365a1fef-84bc-4459-b9cc-e6e55d900768
log_level: critical
event_category: detections
event_data:
{"connection_id":2074865,"detection_time":1742072934,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":25222,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0b6d4583-8d71-4f36-9a0c-2ebc1b823fc4
log_level: critical
event_category: detections
event_data:
{"connection_id":2074900,"detection_time":1742072939,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":12905,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bf86fc92-9de3-460f-af21-4df6778bd4a5
log_level: critical
event_category: detections
event_data:
{"connection_id":2074947,"detection_time":1742072945,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":4576,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f466a8b6-2439-4512-b9f7-01e03895f035
log_level: critical
event_category: detections
event_data:
{"connection_id":2075012,"detection_time":1742072951,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":55365,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3f3147fc-2199-457b-a8b0-e17eba1bea15
log_level: critical
event_category: detections
event_data:
{"connection_id":2076028,"detection_time":1742073094,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":2183,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 84c9233a-213a-4192-b4e7-f0c189600cee
log_level: critical
event_category: detections
event_data:
{"connection_id":2076073,"detection_time":1742073101,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":54821,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bc02d1f1-5ee7-4be6-83cd-bc59bd2cdd79
log_level: critical
event_category: detections
event_data:
{"connection_id":2076112,"detection_time":1742073107,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":47864,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: feef50e1-aabe-48bb-808c-0d15e4a9dfbf
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742073336,"event_type_id":6,"status":"blocked"}


event_id: f41a1772-c3c3-41a2-b03f-2c5889ac01d2
log_level: critical
event_category: detections
event_data:
{"connection_id":2077805,"detection_time":1742073336,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":43890,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d0245a65-17f7-4f59-ab0e-0bc6da2e69a3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742073466,"event_type_id":6,"status":"blocked"}


event_id: 38b547a2-3ee9-4715-bbfc-9bf034cc49b1
log_level: critical
event_category: detections
event_data:
{"connection_id":2078789,"detection_time":1742073466,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":42740,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7e290ce5-0679-48f0-a1ab-743d0bee567e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742073968,"event_type_id":6,"status":"blocked"}


event_id: d7fc29de-6f80-447f-82b0-8f7876750fc4
log_level: critical
event_category: detections
event_data:
{"connection_id":2082440,"detection_time":1742073968,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":51527,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 85c59c75-02b7-428c-9256-a195652fe88e
log_level: critical
event_category: detections
event_data:
{"connection_id":2083350,"detection_time":1742074090,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.155","remote_port":39823,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0be39651-5027-45cd-a8c1-aa68212473d0
log_level: critical
event_category: detections
event_data:
{"connection_id":2083401,"detection_time":1742074097,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.155","remote_port":26584,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 039d1388-07ca-4b11-a805-93e4c909a32f
log_level: critical
event_category: detections
event_data:
{"connection_id":2083443,"detection_time":1742074103,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.155","remote_port":12016,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9eee6875-23e1-49ca-8cf0-c9c69a1e716e
log_level: critical
event_category: detections
event_data:
{"connection_id":2084175,"detection_time":1742074206,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"158.160.17.161","remote_port":54787,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a31d5580-5da7-497d-b856-614bd4bca1d2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742074309,"event_type_id":6,"status":"blocked"}


event_id: 27364a8f-454c-4e1f-9564-ab6e2702ba02
log_level: critical
event_category: detections
event_data:
{"connection_id":2084907,"detection_time":1742074309,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":41611,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c491ecd1-ae20-49ec-b62a-a915178e6766
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742074472,"event_type_id":6,"status":"blocked"}


event_id: aea7d345-c9aa-413d-91f0-f4c98e707e65
log_level: critical
event_category: detections
event_data:
{"connection_id":2086160,"detection_time":1742074472,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":33045,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4325d51d-c0c3-4f8b-b1c3-e8e7c307e9c9
log_level: critical
event_category: detections
event_data:
{"connection_id":2086582,"detection_time":1742074521,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":39435,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5581b564-2639-4bde-924f-3e36342878b5
log_level: critical
event_category: detections
event_data:
{"connection_id":2086645,"detection_time":1742074527,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":31077,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c085466b-f71c-4833-ac81-d6f8dccfce3c
log_level: critical
event_category: detections
event_data:
{"connection_id":2086684,"detection_time":1742074533,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":22319,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 572eca56-cb64-4bd5-b2d2-a773f65e0092
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742074974,"event_type_id":6,"status":"blocked"}


event_id: 5e4cf5d4-ed83-472a-8dc0-b8038d6bad1a
log_level: critical
event_category: detections
event_data:
{"connection_id":2089897,"detection_time":1742074974,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":41993,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e456b70e-3027-4c9e-8f45-48aa3dc64b17
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742075282,"event_type_id":6,"status":"blocked"}


event_id: c52a699f-c822-49cc-8473-20eebea252d9
log_level: critical
event_category: detections
event_data:
{"connection_id":2092169,"detection_time":1742075283,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":40269,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cd667c9e-cdc7-46be-ad94-4a013de00c25
log_level: critical
event_category: detections
event_data:
{"connection_id":2093066,"detection_time":1742075407,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.162","remote_port":42337,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e2108fb7-4a2c-4bcb-b8fe-2c4c64cca18d
log_level: critical
event_category: detections
event_data:
{"connection_id":2093111,"detection_time":1742075414,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.162","remote_port":29682,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f42f3972-6b2c-46dc-b136-818e9dbabd95
log_level: critical
event_category: detections
event_data:
{"connection_id":2093170,"detection_time":1742075420,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.162","remote_port":14547,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 225c4770-1554-4f1c-8121-e84f0112c17c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742075476,"event_type_id":6,"status":"blocked"}


event_id: 75a60afa-eb6d-48b6-bcc8-cd9199381886
log_level: critical
event_category: detections
event_data:
{"connection_id":2093549,"detection_time":1742075476,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":50802,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8967a1f0-2df3-42b0-9941-f6c90b980397
log_level: critical
event_category: detections
event_data:
{"connection_id":2095879,"detection_time":1742075798,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":18895,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 69d93a1f-2c3b-44ec-9731-950669daabb8
log_level: critical
event_category: detections
event_data:
{"connection_id":2095929,"detection_time":1742075804,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":12133,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 988ad787-03ca-4dad-a352-9a0f1eee9f56
log_level: critical
event_category: detections
event_data:
{"connection_id":2095975,"detection_time":1742075811,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":3708,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6d930794-7dda-40ce-9962-9b001f991fd7
log_level: critical
event_category: detections
event_data:
{"connection_id":2097030,"detection_time":1742075951,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":25240,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 44d20d5c-bd93-4666-8035-e0f6decf9d35
log_level: critical
event_category: detections
event_data:
{"connection_id":2097074,"detection_time":1742075958,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":18119,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: aaac9f62-659c-4fb8-8805-7f5d8a0d04a4
log_level: critical
event_category: detections
event_data:
{"connection_id":2097118,"detection_time":1742075964,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":9590,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1d23acbd-8be7-4fd7-a981-04ce52fc2b5a
log_level: critical
event_category: detections
event_data:
{"connection_id":2098679,"detection_time":1742076175,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.156","remote_port":55233,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a080256b-6514-49e1-aa26-19e950eb27e5
log_level: critical
event_category: detections
event_data:
{"connection_id":2098723,"detection_time":1742076181,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.156","remote_port":46474,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f9ea5449-1346-4540-892e-b4008dca5c5c
log_level: critical
event_category: detections
event_data:
{"connection_id":2098790,"detection_time":1742076188,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.156","remote_port":37081,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6dd8649a-8e6e-4263-810d-4d8bd9e67ca7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742076255,"event_type_id":6,"status":"blocked"}


event_id: bf43d75d-7d0d-4ec8-ba88-c1defe6a389b
log_level: critical
event_category: detections
event_data:
{"connection_id":2099314,"detection_time":1742076255,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":36776,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f641ada1-7618-41ab-a97f-da04acebb60e
log_level: critical
event_category: detections
event_data:
{"connection_id":2100124,"detection_time":1742076356,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":57679,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c729bdf8-73e8-4f8e-8ae6-3d22b43c3737
log_level: critical
event_category: detections
event_data:
{"connection_id":2100177,"detection_time":1742076363,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":51173,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 479a1dc9-4eb1-4307-a062-ef5711610210
log_level: critical
event_category: detections
event_data:
{"connection_id":2100217,"detection_time":1742076369,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":42266,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7c123e80-ee08-451c-bc84-40a5e9ee31eb
log_level: critical
event_category: detections
event_data:
{"connection_id":2103069,"detection_time":1742076760,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":56318,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 38c74a17-997d-4496-9b94-fa2c7e02fdb2
log_level: critical
event_category: detections
event_data:
{"connection_id":2103116,"detection_time":1742076766,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":44859,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 359017f0-42bc-48ee-a5e7-f8b41536252f
log_level: critical
event_category: detections
event_data:
{"connection_id":2103185,"detection_time":1742076773,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":32856,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bdc7204c-67f3-42a9-85ca-848f08735b51
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742076987,"event_type_id":6,"status":"blocked"}


event_id: 47b8f627-60c6-4f23-a9a4-4af0f1027391
log_level: critical
event_category: detections
event_data:
{"connection_id":2104780,"detection_time":1742076987,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":51053,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 39db4eb5-51ac-45ec-813f-fdc245eb64b1
log_level: critical
event_category: detections
event_data:
{"connection_id":2104909,"detection_time":1742077003,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":48923,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d085ac7a-95b4-4f00-80e8-1a1089b44ed4
log_level: critical
event_category: detections
event_data:
{"connection_id":2104953,"detection_time":1742077010,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":40898,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 85486951-2a34-494e-b669-f61a53f28f1b
log_level: critical
event_category: detections
event_data:
{"connection_id":2104998,"detection_time":1742077016,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":31992,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 01df0ea0-9534-47bc-b392-f3768b6f80d9
log_level: critical
event_category: detections
event_data:
{"connection_id":2105209,"detection_time":1742077043,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.151","remote_port":38669,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: dffba960-fb10-4519-9a40-31114272b5de
log_level: critical
event_category: detections
event_data:
{"connection_id":2105253,"detection_time":1742077050,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.151","remote_port":25460,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e4fc36fa-f07d-45dd-aae1-f2a08825fe20
log_level: critical
event_category: detections
event_data:
{"connection_id":2105296,"detection_time":1742077056,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.151","remote_port":10092,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 755564fd-a98a-4353-87bc-aefe9ad0eaf3
log_level: critical
event_category: detections
event_data:
{"connection_id":2106227,"detection_time":1742077184,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":31985,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: efab53aa-4752-4d86-94b3-1b7b2f2fccac
log_level: critical
event_category: detections
event_data:
{"connection_id":2106266,"detection_time":1742077190,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":23951,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f60814a9-c6bb-45c0-b2ca-3c339bb545e5
log_level: critical
event_category: detections
event_data:
{"connection_id":2106329,"detection_time":1742077197,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":17030,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7838cfe4-8f23-4c61-af87-71c26419775a
log_level: critical
event_category: detections
event_data:
{"connection_id":2107927,"detection_time":1742077417,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":50250,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 846c4796-019d-44f6-b2bc-dc2bad964a1f
log_level: critical
event_category: detections
event_data:
{"connection_id":2107964,"detection_time":1742077424,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":43113,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 66ec2915-9106-4fdf-84c2-8b4e307a476d
log_level: critical
event_category: detections
event_data:
{"connection_id":2108024,"detection_time":1742077430,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":35582,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4af78c25-f80e-40e5-96b5-3d3ace624b43
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742077490,"event_type_id":6,"status":"blocked"}


event_id: 5e40588e-97ae-42bb-8d21-14b9bcc3d5e3
log_level: critical
event_category: detections
event_data:
{"connection_id":2108432,"detection_time":1742077490,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":59704,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ffdde354-7fe6-4de0-a7e6-c9c9d98b5c6a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742077714,"event_type_id":6,"status":"blocked"}


event_id: 1774962a-e521-4c61-bd81-44dc6f0acf1f
log_level: critical
event_category: detections
event_data:
{"connection_id":2110095,"detection_time":1742077714,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":34587,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 82825bc9-eaab-4390-b38f-d783c74eb130
log_level: critical
event_category: detections
event_data:
{"connection_id":2110298,"detection_time":1742077731,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":54528,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 155bebef-35b1-473e-8b66-c1fcbd4fba46
log_level: critical
event_category: detections
event_data:
{"connection_id":2110361,"detection_time":1742077737,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":46060,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 82fa7a1d-7aca-47ed-b7d5-8160598db745
log_level: critical
event_category: detections
event_data:
{"connection_id":2110459,"detection_time":1742077744,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":38264,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a756b617-9683-44b6-8b79-5049dd0a78f3
log_level: critical
event_category: detections
event_data:
{"connection_id":2111168,"detection_time":1742077818,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"193.29.13.50","remote_port":64078,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f27a3856-a102-42a2-aad9-30906882fa8b
log_level: critical
event_category: detections
event_data:
{"connection_id":2111589,"detection_time":1742077882,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.163","remote_port":1615,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7aa1bb8d-1079-4ae2-b067-7b7ef1d47b74
log_level: critical
event_category: detections
event_data:
{"connection_id":2111635,"detection_time":1742077888,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.163","remote_port":49972,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0cbf2d20-e75d-4b53-b7e0-b35959b34002
log_level: critical
event_category: detections
event_data:
{"connection_id":2111685,"detection_time":1742077895,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.163","remote_port":38819,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0c124c50-a08d-4827-8998-3908231f05bc
log_level: critical
event_category: detections
event_data:
{"connection_id":2111995,"detection_time":1742077935,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":26755,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 97fd654b-7f42-4504-97e0-aafca7f54481
log_level: critical
event_category: detections
event_data:
{"connection_id":2112049,"detection_time":1742077942,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":17774,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b7f6331d-6209-4ff1-bead-275f0913e818
log_level: critical
event_category: detections
event_data:
{"connection_id":2112097,"detection_time":1742077948,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":10992,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 62c78cc3-42e6-4bbd-ae89-3b435706da80
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742078201,"event_type_id":6,"status":"blocked"}


event_id: 26775aa6-ba88-4185-8004-323b93d01ef4
log_level: critical
event_category: detections
event_data:
{"connection_id":2114130,"detection_time":1742078201,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":33482,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6f9c16b1-664a-4176-935a-0d553eb1d5e1
log_level: critical
event_category: detections
event_data:
{"connection_id":2114156,"detection_time":1742078205,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":14921,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e2bdd5cd-968f-49ca-8772-8362cd98e45c
log_level: critical
event_category: detections
event_data:
{"connection_id":2114185,"detection_time":1742078209,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":34470,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e8035995-2a35-47f3-878b-23189e91540c
log_level: critical
event_category: detections
event_data:
{"connection_id":2114204,"detection_time":1742078211,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":7018,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8921e7b8-1c7e-4ae2-8da5-0772a1d017f2
log_level: critical
event_category: detections
event_data:
{"connection_id":2114234,"detection_time":1742078215,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":25516,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 214df5c6-d96e-4261-8c82-c76ef62456cb
log_level: critical
event_category: detections
event_data:
{"connection_id":2114264,"detection_time":1742078218,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":56688,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 519a06da-81fb-4b74-a9d6-25a9710149cd
log_level: critical
event_category: detections
event_data:
{"connection_id":2114300,"detection_time":1742078222,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":16612,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c3c46c16-ba04-4c9d-be4b-45fa7234ef44
log_level: critical
event_category: detections
event_data:
{"connection_id":2115398,"detection_time":1742078372,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":4654,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 197ebbfc-2622-42aa-ad7f-8a58bd31f7e3
log_level: critical
event_category: detections
event_data:
{"connection_id":2115435,"detection_time":1742078379,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":51748,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 01d548d7-ec9f-4904-8bca-57dc40005209
log_level: critical
event_category: detections
event_data:
{"connection_id":2115481,"detection_time":1742078385,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":43103,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7965f52f-f312-499c-9fd8-44ca156567fd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742078499,"event_type_id":6,"status":"blocked"}


event_id: 5657b16c-85e2-423a-acab-0d527e9d79c0
log_level: critical
event_category: detections
event_data:
{"connection_id":2116339,"detection_time":1742078499,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":49898,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 440c1110-ff13-4125-a9c2-53a78f0f1c19
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742078686,"event_type_id":6,"status":"blocked"}


event_id: c3e4c020-ee38-4bda-a813-6d4b673e2c53
log_level: critical
event_category: detections
event_data:
{"connection_id":2117736,"detection_time":1742078686,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":59789,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 860c504a-5c61-4a2a-8508-b5c7185b1d76
log_level: critical
event_category: detections
event_data:
{"connection_id":2122990,"detection_time":1742079394,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":57845,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 83a880e5-2234-49ab-a07e-034b269218df
log_level: critical
event_category: detections
event_data:
{"connection_id":2123042,"detection_time":1742079401,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":50081,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 668c570e-a0e5-4d83-989f-9784b5c6310b
log_level: critical
event_category: detections
event_data:
{"connection_id":2123086,"detection_time":1742079407,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":41913,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5ea8d81e-ba95-4bcf-9be0-ffc02b2b8c11
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742079498,"event_type_id":6,"status":"blocked"}


event_id: b2f22c01-d415-4517-a468-92d45ad3aab5
log_level: critical
event_category: detections
event_data:
{"connection_id":2123759,"detection_time":1742079498,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":40758,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1d110690-2a5f-483d-8502-3d7c991b4a20
log_level: critical
event_category: detections
event_data:
{"connection_id":2124039,"detection_time":1742079533,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":56414,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: feb8861a-8ade-43a2-8ec6-3efd18f369b8
log_level: critical
event_category: detections
event_data:
{"connection_id":2124086,"detection_time":1742079539,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":48515,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 508b244b-177b-4c51-a05d-d1f5156b09cd
log_level: critical
event_category: detections
event_data:
{"connection_id":2124162,"detection_time":1742079546,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":40406,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b6c2df8b-7033-4b53-9a6c-2f368bd59e54
log_level: critical
event_category: detections
event_data:
{"connection_id":2124336,"detection_time":1742079572,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":38855,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ce32ab66-16f4-438b-b71f-9a364b12830b
log_level: critical
event_category: detections
event_data:
{"connection_id":2124379,"detection_time":1742079579,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":30831,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f879c21c-b83d-442f-8b86-6ba15a75278c
log_level: critical
event_category: detections
event_data:
{"connection_id":2124448,"detection_time":1742079585,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":22505,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5f399a70-2fa2-4496-84ae-e9f1176e8ba8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742079661,"event_type_id":6,"status":"blocked"}


event_id: 80940ec9-b4e8-43ae-806a-c80c78e06312
log_level: critical
event_category: detections
event_data:
{"connection_id":2124961,"detection_time":1742079661,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":57867,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 78310d4e-ff4f-4f89-9cc3-286b3632cf8f
log_level: critical
event_category: detections
event_data:
{"connection_id":2127632,"detection_time":1742080000,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":46891,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7a7e4974-cd40-4d45-a26f-487d01f39791
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742080005,"event_type_id":6,"status":"blocked"}


event_id: a7a5af37-59d0-4dcf-8c7c-6fca3c990f29
log_level: critical
event_category: detections
event_data:
{"connection_id":2127666,"detection_time":1742080005,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":48914,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0945dbb2-38bb-4198-9d40-b2f671c371db
log_level: critical
event_category: detections
event_data:
{"connection_id":2127682,"detection_time":1742080007,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":38314,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 816b6a33-2f1b-4c16-9b46-b44ec2b114f1
log_level: critical
event_category: detections
event_data:
{"connection_id":2127738,"detection_time":1742080013,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":30354,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 85fb874b-f754-4374-9a6c-7f2c8412fad0
log_level: critical
event_category: detections
event_data:
{"connection_id":2128725,"detection_time":1742080148,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":37763,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 94a940a9-6a03-4d3d-b75a-3cfd7b4fd659
log_level: critical
event_category: detections
event_data:
{"connection_id":2128770,"detection_time":1742080155,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":30765,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ef536d1c-60e7-4daf-b849-4fce60b0e112
log_level: critical
event_category: detections
event_data:
{"connection_id":2128816,"detection_time":1742080161,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":22451,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 81c8c3ae-05d9-493f-ac71-b203717d010f
log_level: critical
event_category: detections
event_data:
{"connection_id":2130962,"detection_time":1742080445,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":27193,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a1508121-7567-4e91-a996-7618de9e2fa9
log_level: critical
event_category: detections
event_data:
{"connection_id":2131005,"detection_time":1742080451,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":2904,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 857e31f0-a5ee-44ad-8639-87ef231cdbdd
log_level: critical
event_category: detections
event_data:
{"connection_id":2131053,"detection_time":1742080458,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":32137,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 41d320df-8d5f-4f54-b0dd-3d3182a3f68c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742080507,"event_type_id":6,"status":"blocked"}


event_id: b44225e1-cdaf-4394-bc6b-16d4272857c4
log_level: critical
event_category: detections
event_data:
{"connection_id":2131410,"detection_time":1742080507,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":57728,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f2bdc9ef-ef7f-4b5f-812d-ad2efd665df7
log_level: critical
event_category: detections
event_data:
{"connection_id":2132280,"detection_time":1742080623,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"3.138.178.154","remote_port":38644,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 512e4613-ddce-4889-90f0-198e01f7a163
log_level: critical
event_category: detections
event_data:
{"connection_id":2132283,"detection_time":1742080623,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"3.138.178.154","remote_port":38666,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 377a0215-2b5d-448f-8f80-9b51165a23cf
log_level: critical
event_category: detections
event_data:
{"connection_id":2132516,"detection_time":1742080652,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"3.138.178.154","remote_port":33078,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6be0aac3-7cbf-478d-82f8-558c37d23628
log_level: critical
event_category: detections
event_data:
{"connection_id":2132517,"detection_time":1742080652,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"3.138.178.154","remote_port":33090,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7c3fffaf-edfd-4b92-b1f1-a3e5760da82e
log_level: critical
event_category: detections
event_data:
{"connection_id":2132554,"detection_time":1742080656,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"3.138.178.154","remote_port":36886,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e9fbf2fe-9455-414a-b6e0-7d4b863ff14d
log_level: critical
event_category: detections
event_data:
{"connection_id":2132703,"detection_time":1742080676,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.164","remote_port":6834,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5e1b2005-35b1-4788-a95a-993fb597b3ed
log_level: critical
event_category: detections
event_data:
{"connection_id":2132752,"detection_time":1742080682,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.164","remote_port":55506,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 31ac112f-2272-4b49-9288-cc38b1caa2cc
log_level: critical
event_category: detections
event_data:
{"connection_id":2132804,"detection_time":1742080689,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.164","remote_port":43707,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9b9c4bcc-9601-49a5-b923-9f21bc68f6f4
log_level: critical
event_category: detections
event_data:
{"connection_id":2133051,"detection_time":1742080723,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"3.138.178.154","remote_port":58470,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 2da53c3d-c5d1-40f8-b2d3-ca3adf976664
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742081008,"event_type_id":6,"status":"blocked"}


event_id: b0ec98d5-9a2a-4bfa-83a6-79bae13f3426
log_level: critical
event_category: detections
event_data:
{"connection_id":2135177,"detection_time":1742081008,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":38746,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bf5f2a6b-89f3-40c6-80e2-bdfd893a26a9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742081506,"event_type_id":6,"status":"blocked"}


event_id: 76ce4f78-be76-4dbe-ac1a-aa2581c93fc8
log_level: critical
event_category: detections
event_data:
{"connection_id":2138842,"detection_time":1742081506,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":48702,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6a42f33e-588b-4a5e-b620-e0eb047f711d
log_level: critical
event_category: detections
event_data:
{"connection_id":2141687,"detection_time":1742081878,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":5557,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4dd3758b-5c9a-4f1c-8394-6bc1010b96d8
log_level: critical
event_category: detections
event_data:
{"connection_id":2141739,"detection_time":1742081885,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":56413,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 47c9c8f2-c09a-42ba-9a56-9a64210fd5bf
log_level: critical
event_category: detections
event_data:
{"connection_id":2141798,"detection_time":1742081891,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":47835,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8dc0dea2-c6c3-43ec-a46f-ba71ff0b97ed
log_level: critical
event_category: detections
event_data:
{"connection_id":2142659,"detection_time":1742082008,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.163","remote_port":53714,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5f3a10de-cdad-4d7d-abe4-083946a67ac1
log_level: critical
event_category: detections
event_data:
{"connection_id":2142709,"detection_time":1742082015,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.163","remote_port":43223,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7f7fc698-2781-4e62-ba53-edad25a2b349
log_level: critical
event_category: detections
event_data:
{"connection_id":2142725,"detection_time":1742082017,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":46115,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: fba9002d-5418-4c74-8d29-c03eea3f0742
log_level: critical
event_category: detections
event_data:
{"connection_id":2142752,"detection_time":1742082021,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.163","remote_port":31741,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f3f0c549-b710-498e-8d37-decddc614e36
log_level: critical
event_category: detections
event_data:
{"connection_id":2142772,"detection_time":1742082024,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":36810,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f2c785af-b23e-4ebe-ba98-bff3944f33d6
log_level: critical
event_category: detections
event_data:
{"connection_id":2142816,"detection_time":1742082030,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":27404,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 2f949405-457b-48d0-8a5f-4cd3991ab1cd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742082088,"event_type_id":6,"status":"blocked"}


event_id: 72148404-cb10-4352-9266-5ce82dff622d
log_level: critical
event_category: detections
event_data:
{"connection_id":2143246,"detection_time":1742082088,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":53560,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0c3f451e-a0ba-4d51-8716-dac6581b0197
log_level: critical
event_category: detections
event_data:
{"connection_id":2145516,"detection_time":1742082387,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.167","remote_port":33024,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e525ec77-96ed-47d1-8be4-443b53bfb6e6
log_level: critical
event_category: detections
event_data:
{"connection_id":2145560,"detection_time":1742082394,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.167","remote_port":23336,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 2dcec369-8120-4baa-a934-6590c9658069
log_level: critical
event_category: detections
event_data:
{"connection_id":2145617,"detection_time":1742082400,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.167","remote_port":11297,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 96b8a964-af29-4881-b81a-99da50b635f8
log_level: critical
event_category: detections
event_data:
{"connection_id":2145950,"detection_time":1742082444,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":34252,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 50549dca-8783-4195-8cae-0bd718658d2b
log_level: critical
event_category: detections
event_data:
{"connection_id":2145992,"detection_time":1742082451,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":26446,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ff840b88-fdbc-485f-9f5a-b4c6db46d6d3
log_level: critical
event_category: detections
event_data:
{"connection_id":2146041,"detection_time":1742082457,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":18123,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 67e14787-8310-433a-b5d8-cbd9d0826af9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742082515,"event_type_id":6,"status":"blocked"}


event_id: a6e4ca9a-5637-49f3-b4ef-99af5e4ec8c4
log_level: critical
event_category: detections
event_data:
{"connection_id":2146486,"detection_time":1742082515,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":37939,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 66409800-b1bd-4404-83bf-75e113952c9f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742082576,"event_type_id":6,"status":"blocked"}


event_id: 424aa10c-082f-4f0a-a93b-920d463f4408
log_level: critical
event_category: detections
event_data:
{"connection_id":2146934,"detection_time":1742082576,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":52750,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fc597543-6fb1-4a71-bdbc-265c309405bb
log_level: critical
event_category: detections
event_data:
{"connection_id":2147740,"detection_time":1742082682,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":44744,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a9a7d7d7-9abe-45ff-9f18-0941e7e428bf
log_level: critical
event_category: detections
event_data:
{"connection_id":2147791,"detection_time":1742082688,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":36623,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1130daa9-e67f-4f29-9025-4977b66e5c6d
log_level: critical
event_category: detections
event_data:
{"connection_id":2147831,"detection_time":1742082695,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":28352,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 60e2948a-7a6f-41c6-83e0-eb64b0a3f095
log_level: critical
event_category: detections
event_data:
{"connection_id":2149829,"detection_time":1742082955,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.152","remote_port":49791,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 72a5387f-8ebf-4296-ab76-764c9a5d3c4f
log_level: critical
event_category: detections
event_data:
{"connection_id":2149881,"detection_time":1742082962,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.152","remote_port":38582,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4cfb93d3-9845-47c9-8aea-806945410897
log_level: critical
event_category: detections
event_data:
{"connection_id":2149930,"detection_time":1742082968,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.152","remote_port":25395,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f660cbcb-4a71-4c91-8522-a502ff99fa70
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742083552,"event_type_id":6,"status":"blocked"}


event_id: cf8d7400-6b7c-45c4-85a7-18a161b2fb72
log_level: critical
event_category: detections
event_data:
{"connection_id":2154444,"detection_time":1742083552,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":51361,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7a3bf5e7-73e4-4876-aaf8-29cea8169689
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742084021,"event_type_id":6,"status":"blocked"}


event_id: b7403bf7-76cc-4db0-a160-79595a1d31fa
log_level: critical
event_category: detections
event_data:
{"connection_id":2157947,"detection_time":1742084021,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":36507,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 60419afd-eb1a-4ac4-8fee-a7b88ad3e790
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742084036,"event_type_id":6,"status":"blocked"}


event_id: 12cd4f8e-3703-4d14-ad50-00ae1e8083b8
log_level: critical
event_category: detections
event_data:
{"connection_id":2158053,"detection_time":1742084036,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":50344,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1cbf3181-06ae-46b9-8b3f-2fd3bcaf8527
log_level: critical
event_category: detections
event_data:
{"connection_id":2158843,"detection_time":1742084141,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":4524,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 85dc3160-dccb-42fa-947f-8c1a6fed77a6
log_level: critical
event_category: detections
event_data:
{"connection_id":2158890,"detection_time":1742084148,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":45073,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c35ace8a-6b47-4c4b-af7d-4ba1c8f3373c
log_level: critical
event_category: detections
event_data:
{"connection_id":2158942,"detection_time":1742084154,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":25920,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f50be7b7-b544-46e2-9051-38c76444908d
log_level: critical
event_category: detections
event_data:
{"connection_id":2159155,"detection_time":1742084181,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":24895,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f07fc2ed-e529-4217-93d8-b821d7af7676
log_level: critical
event_category: detections
event_data:
{"connection_id":2159203,"detection_time":1742084188,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":13141,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f23c6a59-d2cc-4312-ab72-8e8bcf9cfc0a
log_level: critical
event_category: detections
event_data:
{"connection_id":2159258,"detection_time":1742084194,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":1525,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1fc52ac1-9e03-40d1-a23c-761f9d47db0a
log_level: critical
event_category: detections
event_data:
{"connection_id":2159328,"detection_time":1742084204,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":49034,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c85872cb-1644-4476-9ba2-ae869a56d720
log_level: critical
event_category: detections
event_data:
{"connection_id":2159399,"detection_time":1742084211,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":27098,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 397b3bd8-430c-4db2-aa26-b41069e83b2f
log_level: critical
event_category: detections
event_data:
{"connection_id":2159451,"detection_time":1742084218,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":7217,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e7741568-8f7b-4a1b-aeea-61d9fb3c1847
log_level: critical
event_category: detections
event_data:
{"connection_id":2159903,"detection_time":1742084276,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":58953,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e841d09f-950c-4004-be3d-a81c6c4534ed
log_level: critical
event_category: detections
event_data:
{"connection_id":2159951,"detection_time":1742084283,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":52751,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 751c58ef-ad56-4997-bd1d-20ef5fcaa80b
log_level: critical
event_category: detections
event_data:
{"connection_id":2160009,"detection_time":1742084289,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":46115,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a47ffe50-9c4a-4d27-84ca-57bcf57e1c7d
log_level: critical
event_category: detections
event_data:
{"connection_id":2160856,"detection_time":1742084402,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":42995,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c5712a17-8f03-496f-a7f5-773b21d587d3
log_level: critical
event_category: detections
event_data:
{"connection_id":2160925,"detection_time":1742084408,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":23593,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9846d464-41c8-490d-80ed-ae9a9284205a
log_level: critical
event_category: detections
event_data:
{"connection_id":2160965,"detection_time":1742084415,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":3500,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 575d77cd-2e3f-4ee1-ba06-58e56756442b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742084521,"event_type_id":6,"status":"blocked"}


event_id: ca08fb9f-3162-42aa-b385-c17bc53e33ae
log_level: critical
event_category: detections
event_data:
{"connection_id":2161767,"detection_time":1742084521,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":48557,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3862d2f1-c855-4c20-abe0-4525a03945f7
log_level: critical
event_category: detections
event_data:
{"connection_id":2162269,"detection_time":1742084587,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":55580,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ec01fe25-b862-4f01-8fb1-05ebe528e032
log_level: critical
event_category: detections
event_data:
{"connection_id":2162315,"detection_time":1742084594,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":47516,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 796b75b9-fffb-4bc4-925b-77355bc7b161
log_level: critical
event_category: detections
event_data:
{"connection_id":2162372,"detection_time":1742084600,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":39159,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e975d4a9-a73f-49c0-ad0d-ac31b9619ca9
log_level: critical
event_category: detections
event_data:
{"connection_id":2163423,"detection_time":1742084739,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":28572,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f8207ab2-978c-441f-905b-55385abd3e06
log_level: critical
event_category: detections
event_data:
{"connection_id":2163471,"detection_time":1742084745,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":22615,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a263a3f8-369a-4c18-915b-72aae8090c1b
log_level: critical
event_category: detections
event_data:
{"connection_id":2163522,"detection_time":1742084752,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":15184,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b743f18d-cba2-485f-b664-3e90fcc21b58
log_level: critical
event_category: detections
event_data:
{"connection_id":2163633,"detection_time":1742084768,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":59935,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f136df0f-c2e8-4965-b2cc-5e581eed845f
log_level: critical
event_category: detections
event_data:
{"connection_id":2163694,"detection_time":1742084774,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":25775,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ff731cdc-b8b7-4be0-82dd-fbba28191ea6
log_level: critical
event_category: detections
event_data:
{"connection_id":2163744,"detection_time":1742084781,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":44048,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c2dafa7d-61f5-487b-9b6e-c14252a819c7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742085008,"event_type_id":6,"status":"blocked"}


event_id: 52cf47a5-2e2c-4696-be22-06c6f99d80f2
log_level: critical
event_category: detections
event_data:
{"connection_id":2166088,"detection_time":1742085008,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":47044,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5c4bf1f5-6d01-4d5a-bae0-b0290c7072a4
log_level: critical
event_category: detections
event_data:
{"connection_id":2167706,"detection_time":1742085214,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":18271,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 037ac34e-83c1-42ea-b643-1250569352e7
log_level: critical
event_category: detections
event_data:
{"connection_id":2167781,"detection_time":1742085221,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":11294,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 11c52003-e92d-4982-a504-11bb1224f27d
log_level: critical
event_category: detections
event_data:
{"connection_id":2167822,"detection_time":1742085227,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":4323,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ad48a73a-ad87-480e-8985-7ed9b0cc8ec3
log_level: critical
event_category: detections
event_data:
{"connection_id":2169101,"detection_time":1742085380,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":40767,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 018ceaa4-b50f-4526-8e5e-1118c95a5f17
log_level: critical
event_category: detections
event_data:
{"connection_id":2169147,"detection_time":1742085386,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":33589,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4aefdfa9-dfce-4b15-812e-c8a19d45b7a9
log_level: critical
event_category: detections
event_data:
{"connection_id":2169195,"detection_time":1742085393,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":26104,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e34c4fd2-6df6-4f95-8b34-d791cfccd803
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742085525,"event_type_id":6,"status":"blocked"}


event_id: 903d0ca2-b8d9-4364-a9d4-055009f7fcba
log_level: critical
event_category: detections
event_data:
{"connection_id":2170209,"detection_time":1742085525,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":37753,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b0c46c52-6776-418f-994d-f10af47f1527
log_level: critical
event_category: detections
event_data:
{"connection_id":2172462,"detection_time":1742085818,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":3893,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: be81f5da-591f-4f10-ac16-37310bb6d827
log_level: critical
event_category: detections
event_data:
{"connection_id":2172513,"detection_time":1742085824,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":54139,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b7fd0c06-5a18-4563-80d6-c7553f1467d1
log_level: critical
event_category: detections
event_data:
{"connection_id":2172564,"detection_time":1742085831,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":45077,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 28e58a2b-26b2-40e5-a4b4-ac1dea1c548f
log_level: critical
event_category: detections
event_data:
{"connection_id":2173928,"detection_time":1742086009,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.166","remote_port":27232,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b1c16b6a-feed-4cf8-b748-25e1387aad05
log_level: critical
event_category: detections
event_data:
{"connection_id":2173995,"detection_time":1742086015,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.166","remote_port":17415,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 44424cac-d37d-4633-8f2c-0bd3312e1c1d
log_level: critical
event_category: detections
event_data:
{"connection_id":2174053,"detection_time":1742086022,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.166","remote_port":4659,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b0fcf89d-56ab-4f26-ae64-3d81947f5b4e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"80.64.30.13","autoblock_timeout":25,"detection_time":1742086029,"event_type_id":6,"status":"blocked"}


event_id: 7be68b76-3582-4227-9286-5676b63146ba
log_level: critical
event_category: detections
event_data:
{"connection_id":2174107,"detection_time":1742086029,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"80.64.30.13","remote_port":59262,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 81221a9f-c13a-44ff-9bd8-17ba04294f89
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"80.64.30.13","autoblock_timeout":25,"detection_time":1742086037,"event_type_id":6,"status":"blocked"}


event_id: dd2e23ce-cace-4488-ab9a-154b0725aac4
log_level: critical
event_category: detections
event_data:
{"connection_id":2174161,"detection_time":1742086037,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"80.64.30.13","remote_port":63605,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0c0ad565-ec32-432c-8518-5b7171e4a20d
log_level: critical
event_category: detections
event_data:
{"connection_id":2175639,"detection_time":1742086228,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":22479,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 71052b81-5a35-4fa0-a0a0-923825653461
log_level: critical
event_category: detections
event_data:
{"connection_id":2175683,"detection_time":1742086235,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":14510,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 51c14d00-d1d4-4764-819f-4dc2b26758e3
log_level: critical
event_category: detections
event_data:
{"connection_id":2175735,"detection_time":1742086241,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":6004,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9bdf3ff8-5b91-4bf7-83d1-e7a397ac57fd
log_level: critical
event_category: detections
event_data:
{"connection_id":2176788,"detection_time":1742086377,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":13003,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6ecebe95-bb26-4c99-a42c-41218720f015
log_level: critical
event_category: detections
event_data:
{"connection_id":2176840,"detection_time":1742086384,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":58297,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e76a4037-ad41-43dd-bc0c-55df207e06f7
log_level: critical
event_category: detections
event_data:
{"connection_id":2176892,"detection_time":1742086390,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":44311,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: eaeffa4b-aaaa-42de-a122-25a8aff31e72
log_level: critical
event_category: detections
event_data:
{"connection_id":2177141,"detection_time":1742086424,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":59291,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 94e7b729-1f87-409e-8ebe-2a3062b545b3
log_level: critical
event_category: detections
event_data:
{"connection_id":2177191,"detection_time":1742086430,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":52717,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3a3ed6ed-de56-4510-a069-c4b99ae7e993
log_level: critical
event_category: detections
event_data:
{"connection_id":2177235,"detection_time":1742086437,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":45517,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9767705e-3f1a-4737-949a-5355824ee342
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742086465,"event_type_id":6,"status":"blocked"}


event_id: 6cc8c112-daa6-402e-a7af-ae77a266374f
log_level: critical
event_category: detections
event_data:
{"connection_id":2177456,"detection_time":1742086465,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":42569,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: dd2c681a-beb1-4ca0-ac6d-47c511c3f786
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742086540,"event_type_id":6,"status":"blocked"}


event_id: 0710816a-f711-4646-9817-aaa639ceaa25
log_level: critical
event_category: detections
event_data:
{"connection_id":2178020,"detection_time":1742086540,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":57874,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 713ad6dc-0d86-4c35-9391-fc7108941030
log_level: critical
event_category: detections
event_data:
{"connection_id":2179602,"detection_time":1742086746,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":3270,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9cfcb321-84f8-4e25-88ec-347a626a24bc
log_level: critical
event_category: detections
event_data:
{"connection_id":2179650,"detection_time":1742086752,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":52541,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9e86f721-7d12-4059-95b9-89a85b6e74df
log_level: critical
event_category: detections
event_data:
{"connection_id":2179700,"detection_time":1742086759,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":41310,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 03d36df8-6c5f-4673-935b-536e7d12054a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742086951,"event_type_id":6,"status":"blocked"}


event_id: 2ad14beb-da95-467a-983e-9d4a8633bd70
log_level: critical
event_category: detections
event_data:
{"connection_id":2181178,"detection_time":1742086951,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":41057,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: cdeb257b-851a-4acf-a761-6330ab581d75
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742087043,"event_type_id":6,"status":"blocked"}


event_id: 564eede5-4241-48d9-a3ec-72aa97dba620
log_level: critical
event_category: detections
event_data:
{"connection_id":2181978,"detection_time":1742087043,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":39662,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 00b7a314-9df4-41d1-81b0-fa618d605c46
log_level: critical
event_category: detections
event_data:
{"connection_id":2185589,"detection_time":1742087519,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":56671,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d3fc8a1e-924d-45cf-bd08-0554fc23ebac
log_level: critical
event_category: detections
event_data:
{"connection_id":2185657,"detection_time":1742087525,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":48395,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 90822607-d73b-4feb-a17e-0b674eba599f
log_level: critical
event_category: detections
event_data:
{"connection_id":2185698,"detection_time":1742087532,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":38955,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 68a611e5-1e9a-4287-ab0d-8f33f176f2eb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742087539,"event_type_id":6,"status":"blocked"}


event_id: a9183f4b-cc29-4e84-9aab-185596536b20
log_level: critical
event_category: detections
event_data:
{"connection_id":2185755,"detection_time":1742087539,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":49004,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: df6ea9af-9930-4b36-af7b-7f07e25a87da
log_level: critical
event_category: detections
event_data:
{"connection_id":2186691,"detection_time":1742087660,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":56211,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8567bdbf-7bcf-4bcc-9896-4b7958275bfd
log_level: critical
event_category: detections
event_data:
{"connection_id":2186759,"detection_time":1742087666,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":49739,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b0ae12f7-ea28-4d23-b4d8-8f24129576a2
log_level: critical
event_category: detections
event_data:
{"connection_id":2186805,"detection_time":1742087672,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":41829,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: caf006ac-5141-43b8-844e-ffec627bbef2
log_level: critical
event_category: detections
event_data:
{"connection_id":2188509,"detection_time":1742087898,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":8185,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5774d93c-f6a8-4420-a4ad-35f7b38f1131
log_level: critical
event_category: detections
event_data:
{"connection_id":2188517,"detection_time":1742087898,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":50713,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e15dbfc0-b80d-4104-9aee-061663b252c5
log_level: critical
event_category: detections
event_data:
{"connection_id":2188563,"detection_time":1742087904,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":59224,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ae02073c-ba67-4048-85a3-cfbf39ca5955
log_level: critical
event_category: detections
event_data:
{"connection_id":2188570,"detection_time":1742087905,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":37167,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: aa40767e-cb4f-4d77-a958-81965d044be6
log_level: critical
event_category: detections
event_data:
{"connection_id":2188614,"detection_time":1742087910,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":50506,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b8ad628a-7e92-45ab-9f14-78edde3ab64f
log_level: critical
event_category: detections
event_data:
{"connection_id":2188624,"detection_time":1742087912,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":22971,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b02f8fd2-40c5-4ca5-aa19-4e02a2470725
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742087926,"event_type_id":6,"status":"blocked"}


event_id: e8aff727-f8ad-4988-841d-44c03752d1e1
log_level: critical
event_category: detections
event_data:
{"connection_id":2188729,"detection_time":1742087926,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":39063,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 59d123cd-53a1-4040-b494-00ef48772d03
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742088041,"event_type_id":6,"status":"blocked"}


event_id: 450bc917-6baa-413f-9596-1ee326d0a2bc
log_level: critical
event_category: detections
event_data:
{"connection_id":2189584,"detection_time":1742088041,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":57871,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2e0df7a8-1982-49d4-a512-7413c221eecd
log_level: critical
event_category: detections
event_data:
{"connection_id":2192179,"detection_time":1742088393,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":31078,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 02692408-51cf-45fa-a1fa-ee3a6c441a74
log_level: critical
event_category: detections
event_data:
{"connection_id":2192220,"detection_time":1742088399,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":11156,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c96bd5ee-25ed-4f65-a552-bb3b62ab7896
log_level: critical
event_category: detections
event_data:
{"connection_id":2192266,"detection_time":1742088405,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":49852,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e1ceca35-46cc-4d51-a746-8ce74cd52608
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742088551,"event_type_id":6,"status":"blocked"}


event_id: 397ac14c-a055-44e0-bf7b-06e53ad243c8
log_level: critical
event_category: detections
event_data:
{"connection_id":2193366,"detection_time":1742088551,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":39579,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3f70d8d8-ce8b-417c-a84c-f909565b6233
log_level: critical
event_category: detections
event_data:
{"connection_id":2193387,"detection_time":1742088553,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.165","remote_port":41066,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b675fa01-cdcb-4198-a8e9-b8f10dec80d6
log_level: critical
event_category: detections
event_data:
{"connection_id":2193431,"detection_time":1742088559,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.165","remote_port":25738,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d0706535-bfb6-49a0-ab07-0383a1442453
log_level: critical
event_category: detections
event_data:
{"connection_id":2193474,"detection_time":1742088566,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.165","remote_port":10840,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e029fb5a-0f9f-48f5-8675-789a9a5ac58b
log_level: critical
event_category: detections
event_data:
{"connection_id":2196244,"detection_time":1742088928,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":26885,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f2508ef9-9b7a-414e-b14c-08dc4875704b
log_level: critical
event_category: detections
event_data:
{"connection_id":2196295,"detection_time":1742088934,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":18060,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e3a98d2d-24ca-4664-8398-610ab0413670
log_level: critical
event_category: detections
event_data:
{"connection_id":2196359,"detection_time":1742088941,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":9335,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a8404466-b9b1-4f25-b413-a8166717b02d
log_level: critical
event_category: detections
event_data:
{"connection_id":2196925,"detection_time":1742089014,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":33184,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 91cf4da9-0152-485e-b38d-4947cd55a244
log_level: critical
event_category: detections
event_data:
{"connection_id":2196982,"detection_time":1742089020,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":24371,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6605aa20-de02-4a0d-b048-9e55dfd319d8
log_level: critical
event_category: detections
event_data:
{"connection_id":2197039,"detection_time":1742089027,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":16133,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 63b811ea-c26a-493d-bf15-2076d8276bf1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742089046,"event_type_id":6,"status":"blocked"}


event_id: 90c70473-1e2c-440a-b99a-23c1ce067db9
log_level: critical
event_category: detections
event_data:
{"connection_id":2197160,"detection_time":1742089046,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":48454,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 65d834a0-0c86-4702-8fe4-49d91df3914b
log_level: critical
event_category: detections
event_data:
{"connection_id":2197840,"detection_time":1742089138,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.154","remote_port":19133,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bbc3216b-bd4d-461e-a44d-35d0d8b3aaa2
log_level: critical
event_category: detections
event_data:
{"connection_id":2197893,"detection_time":1742089144,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.154","remote_port":56511,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 109489f0-93c3-4695-99ad-65adf9f40462
log_level: critical
event_category: detections
event_data:
{"connection_id":2197931,"detection_time":1742089149,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":8342,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3c1756fc-01e1-48bc-9b26-97357d54cd0a
log_level: critical
event_category: detections
event_data:
{"connection_id":2197941,"detection_time":1742089151,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.154","remote_port":33522,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 19416e29-b250-43af-b598-babbd1ec5040
log_level: critical
event_category: detections
event_data:
{"connection_id":2197974,"detection_time":1742089156,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":20213,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8eefe752-c47e-421c-9f3d-e602b65c922c
log_level: critical
event_category: detections
event_data:
{"connection_id":2198332,"detection_time":1742089205,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":59600,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ee32894e-bd61-4a3f-aa10-702d94cb4aad
log_level: critical
event_category: detections
event_data:
{"connection_id":2198396,"detection_time":1742089211,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":33120,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e66fd80a-5552-4a85-b0a7-d20676d3e0d0
log_level: critical
event_category: detections
event_data:
{"connection_id":2198434,"detection_time":1742089218,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":6656,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1fe90ddc-e272-4807-93f8-bd99a078b47c
log_level: critical
event_category: detections
event_data:
{"connection_id":2198621,"detection_time":1742089245,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":52578,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d6427d09-d6eb-4409-8ba3-a497e493c37b
log_level: critical
event_category: detections
event_data:
{"connection_id":2198689,"detection_time":1742089252,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":43863,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e0677009-c018-4e8a-83af-cd1f5f97559d
log_level: critical
event_category: detections
event_data:
{"connection_id":2198737,"detection_time":1742089258,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":34108,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ff18d400-95e7-4ace-8b29-f44242869bbd
log_level: critical
event_category: detections
event_data:
{"connection_id":2199983,"detection_time":1742089423,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":12933,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9d6e6c94-902d-4498-806d-c60d67baef60
log_level: critical
event_category: detections
event_data:
{"connection_id":2200025,"detection_time":1742089430,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":1491,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6991103e-fffd-4968-ba97-3f165fb3ed50
log_level: critical
event_category: detections
event_data:
{"connection_id":2200073,"detection_time":1742089436,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":48796,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 46e6f784-14fc-40d9-a1df-427b03d1e71c
log_level: critical
event_category: detections
event_data:
{"connection_id":2200203,"detection_time":1742089451,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":15913,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7cbe8323-340d-42b7-8be2-49a9aadf1eab
log_level: critical
event_category: detections
event_data:
{"connection_id":2200250,"detection_time":1742089458,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":31121,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5dcb1fd6-0572-49f9-a2f1-76ce3a74b596
log_level: critical
event_category: detections
event_data:
{"connection_id":2200295,"detection_time":1742089464,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":47798,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: af783518-b7d9-4398-bd2d-c92f15adde2d
log_level: critical
event_category: detections
event_data:
{"connection_id":2200608,"detection_time":1742089505,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":3674,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 31f40cb6-e6e5-4945-ad95-c76a977d8693
log_level: critical
event_category: detections
event_data:
{"connection_id":2200649,"detection_time":1742089511,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":19934,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ee72b20c-0401-4e04-8cee-4fcce16e425a
log_level: critical
event_category: detections
event_data:
{"connection_id":2200695,"detection_time":1742089518,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":38413,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 760148fb-038a-474d-ba08-eb3d4babec94
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742089548,"event_type_id":6,"status":"blocked"}


event_id: 60bf8607-7fca-4a15-b82e-462b58103843
log_level: critical
event_category: detections
event_data:
{"connection_id":2200924,"detection_time":1742089548,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":57641,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4425d6ad-2dd9-4010-9bb2-9ddb672c8f19
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742089873,"event_type_id":6,"status":"blocked"}


event_id: 544ae50f-a8bc-42bd-946b-6e6b394967ce
log_level: critical
event_category: detections
event_data:
{"connection_id":2203339,"detection_time":1742089873,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":34754,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 042a23ff-432d-4110-b781-d2c1f3d9d3b0
log_level: critical
event_category: detections
event_data:
{"connection_id":2203911,"detection_time":1742089949,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.155","remote_port":45791,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8c7e7935-0a5d-4978-9ccb-51ce6e962a7f
log_level: critical
event_category: detections
event_data:
{"connection_id":2203953,"detection_time":1742089955,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.155","remote_port":31848,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 86f9b527-cae3-4e5a-b928-a4cb0dd6a515
log_level: critical
event_category: detections
event_data:
{"connection_id":2204008,"detection_time":1742089962,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.155","remote_port":20951,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4ebef43b-7cfb-4fee-ba79-901ca9eb29fe
log_level: critical
event_category: detections
event_data:
{"connection_id":2207476,"detection_time":1742090438,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":19371,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bc207108-42d8-41b0-a602-0d1158dae5e4
log_level: critical
event_category: detections
event_data:
{"connection_id":2207540,"detection_time":1742090445,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":37440,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 2bdd11f5-f4f9-48c7-bf81-ca1a57152157
log_level: critical
event_category: detections
event_data:
{"connection_id":2207580,"detection_time":1742090451,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":1129,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9e9de181-0afe-466b-819f-7c984c8c41ec
log_level: critical
event_category: detections
event_data:
{"connection_id":2210450,"detection_time":1742090817,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":52120,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 278febb1-d70f-4b91-aa03-c624dae3e983
log_level: critical
event_category: detections
event_data:
{"connection_id":2210496,"detection_time":1742090824,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":24671,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8193d9b1-fb86-465b-9b60-eaa09cf59359
log_level: critical
event_category: detections
event_data:
{"connection_id":2210540,"detection_time":1742090830,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":48510,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 402a7f7b-e394-41dd-8172-f1a8edf50d18
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742090837,"event_type_id":6,"status":"blocked"}


event_id: 97ead25d-d119-4e14-9357-b7fd62b9382d
log_level: critical
event_category: detections
event_data:
{"connection_id":2210588,"detection_time":1742090837,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":33020,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: add8c418-1162-441f-ad04-7a4e02193c74
log_level: critical
event_category: detections
event_data:
{"connection_id":2212738,"detection_time":1742091125,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":24107,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b069d2c0-2c6c-4248-852f-c13449eaa5a8
log_level: critical
event_category: detections
event_data:
{"connection_id":2212786,"detection_time":1742091131,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":49790,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 17401334-f0c3-4f73-af0e-f206bcb13d7c
log_level: critical
event_category: detections
event_data:
{"connection_id":2212834,"detection_time":1742091137,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":13656,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bfa0eae3-3e6a-4577-a929-5630d7757419
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742091326,"event_type_id":6,"status":"blocked"}


event_id: c651fd9c-080c-4010-b941-ee517111b392
log_level: critical
event_category: detections
event_data:
{"connection_id":2214252,"detection_time":1742091327,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":60472,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 20f9b893-292e-40c5-bc4a-7c58282e3cab
log_level: critical
event_category: detections
event_data:
{"connection_id":2214406,"detection_time":1742091347,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":58492,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a73e90c7-616e-4f7c-aab6-44883a4ae903
log_level: critical
event_category: detections
event_data:
{"connection_id":2214459,"detection_time":1742091353,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":49419,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7688ab2d-c9d8-4e2c-9730-dff740bcf244
log_level: critical
event_category: detections
event_data:
{"connection_id":2214571,"detection_time":1742091369,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":53418,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 29b87704-33f4-4767-90cb-865f9c872a41
log_level: critical
event_category: detections
event_data:
{"connection_id":2214627,"detection_time":1742091376,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":4699,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ff320cc6-ca9f-4459-b30e-450dbc2212aa
log_level: critical
event_category: detections
event_data:
{"connection_id":2214673,"detection_time":1742091382,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":19317,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: cdd91137-e65b-40a3-8489-7fe7693deb37
log_level: critical
event_category: detections
event_data:
{"connection_id":2217940,"detection_time":1742091815,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.162","remote_port":42111,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f3b3df6b-db7d-40f2-98f0-182ea6e36b7f
log_level: critical
event_category: detections
event_data:
{"connection_id":2218005,"detection_time":1742091821,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.162","remote_port":31150,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ceeeffd7-a7ef-4e23-9f87-237c90629538
log_level: critical
event_category: detections
event_data:
{"connection_id":2218047,"detection_time":1742091828,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.162","remote_port":17864,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d1fdaef9-6d6b-4268-b355-8e06f125a906
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742092061,"event_type_id":6,"status":"blocked"}


event_id: 964d05cf-e4c9-45fb-ba78-6846293c22a0
log_level: critical
event_category: detections
event_data:
{"connection_id":2219874,"detection_time":1742092061,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":45094,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3d19ef7d-466e-4399-95ca-074c3af5eef9
log_level: critical
event_category: detections
event_data:
{"connection_id":2220858,"detection_time":1742092191,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":46663,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0b977a23-ec3d-4a6a-90a2-c513ec172741
log_level: critical
event_category: detections
event_data:
{"connection_id":2220916,"detection_time":1742092200,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":33379,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f2d65c65-170b-44e4-b55f-9d459e43679d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742092297,"event_type_id":6,"status":"blocked"}


event_id: 6e8a699a-74d6-4405-9374-0f1b60e587c9
log_level: critical
event_category: detections
event_data:
{"connection_id":2221638,"detection_time":1742092297,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":58797,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d3f620b3-f9b9-45b9-9a64-714187b0fd20
log_level: critical
event_category: detections
event_data:
{"connection_id":2223935,"detection_time":1742092583,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":54562,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 446b2b6e-352b-45a6-bc0f-1a7a0a4cc7df
log_level: critical
event_category: detections
event_data:
{"connection_id":2223980,"detection_time":1742092589,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":11871,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9af4286d-6459-4288-b3b0-5a93b24af779
log_level: critical
event_category: detections
event_data:
{"connection_id":2224029,"detection_time":1742092596,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":28587,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 61e063e4-a3d6-4fa5-904f-d09da141d9b9
log_level: critical
event_category: detections
event_data:
{"connection_id":2224792,"detection_time":1742092694,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":15346,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7c05d65a-1135-4177-b0fb-e21f1997f008
log_level: critical
event_category: detections
event_data:
{"connection_id":2224842,"detection_time":1742092700,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":9948,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 54d3f235-3eaa-424b-945f-97f7b0d7d162
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742092787,"event_type_id":6,"status":"blocked"}


event_id: ba93486e-6d22-4958-8c0c-ce6ee957bbd1
log_level: critical
event_category: detections
event_data:
{"connection_id":2225506,"detection_time":1742092787,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":58440,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 73e31946-5da2-4017-9302-76d637f618a7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742093057,"event_type_id":6,"status":"blocked"}


event_id: fb9be4e5-d5fb-449a-970d-495f64a83c3e
log_level: critical
event_category: detections
event_data:
{"connection_id":2227621,"detection_time":1742093058,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":35566,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 92582b78-6ab7-4c48-a2e2-93996a4adc93
log_level: critical
event_category: detections
event_data:
{"connection_id":2229191,"detection_time":1742093262,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":42449,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 99305000-a47b-488c-936a-c338da860e9f
log_level: critical
event_category: detections
event_data:
{"connection_id":2229247,"detection_time":1742093269,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":50050,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e62f5b6d-bc09-4e11-9fc1-d79843b81990
log_level: critical
event_category: detections
event_data:
{"connection_id":2229300,"detection_time":1742093275,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":59457,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 287711d6-e9a9-4512-8f1d-5ee18665d944
log_level: critical
event_category: detections
event_data:
{"connection_id":2229467,"detection_time":1742093296,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.96","remote_port":2021,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ae2d1955-62c9-4855-a48b-8b51212e3d4e
log_level: critical
event_category: detections
event_data:
{"connection_id":2229531,"detection_time":1742093305,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.96","remote_port":53159,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f525a49c-6967-4eb4-9cb9-9867533fe9d4
log_level: critical
event_category: detections
event_data:
{"connection_id":2229582,"detection_time":1742093312,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.96","remote_port":10490,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 249d063c-30c5-4be3-941c-bc3049f9ada9
log_level: critical
event_category: detections
event_data:
{"connection_id":2231128,"detection_time":1742093516,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":8635,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c6bd7f41-c25c-4318-b415-da0513ab1452
log_level: critical
event_category: detections
event_data:
{"connection_id":2231174,"detection_time":1742093522,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":23383,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: be93a4d3-934c-4a6b-9695-84d17a06d470
log_level: critical
event_category: detections
event_data:
{"connection_id":2231226,"detection_time":1742093529,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":35322,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 140c98e8-0853-4546-8a07-342f57a8faf2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742093758,"event_type_id":6,"status":"blocked"}


event_id: f4390c9f-1d9d-4315-bf49-752fc7afcc07
log_level: critical
event_category: detections
event_data:
{"connection_id":2232893,"detection_time":1742093758,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":56596,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bb04f9db-6f98-4860-b492-62e0ff406bf3
log_level: critical
event_category: detections
event_data:
{"connection_id":2233626,"detection_time":1742093855,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.151","remote_port":6784,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7c3b9b63-cc0b-4c35-b053-263f51c0a94a
log_level: critical
event_category: detections
event_data:
{"connection_id":2233667,"detection_time":1742093862,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.151","remote_port":52319,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: de0d0721-1283-46c9-a2cd-8436ebf78b87
log_level: critical
event_category: detections
event_data:
{"connection_id":2233730,"detection_time":1742093868,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.151","remote_port":38555,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3b9614f3-bdc0-4dea-9451-737919bfcd96
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742094242,"event_type_id":6,"status":"blocked"}


event_id: 73a081b1-ed16-4c5c-810b-a7a3c0fb0967
log_level: critical
event_category: detections
event_data:
{"connection_id":2236461,"detection_time":1742094242,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":55446,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 433bfd75-2e16-44bd-af42-508493ef53c6
log_level: critical
event_category: detections
event_data:
{"connection_id":2237214,"detection_time":1742094336,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":30375,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0008f7bb-ae06-4230-a105-3b5821311c2b
log_level: critical
event_category: detections
event_data:
{"connection_id":2237263,"detection_time":1742094343,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":31202,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: df424c25-2b6f-4e29-8851-689b7f29cd81
log_level: critical
event_category: detections
event_data:
{"connection_id":2237309,"detection_time":1742094349,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":32329,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 76f40a7f-fdb8-49bc-935f-ba71b9bbe964
log_level: critical
event_category: detections
event_data:
{"connection_id":2238579,"detection_time":1742094518,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.164","remote_port":25718,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 02d255dd-3537-49ac-80b2-d1c3cb8761db
log_level: critical
event_category: detections
event_data:
{"connection_id":2238626,"detection_time":1742094525,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.164","remote_port":16376,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a0e999e7-24e4-4c4f-ac60-e780ddecd307
log_level: critical
event_category: detections
event_data:
{"connection_id":2238675,"detection_time":1742094531,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.164","remote_port":5461,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 49093df0-3afd-471c-a685-dd5f8598a8e6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742094566,"event_type_id":6,"status":"blocked"}


event_id: 6655a707-3548-46e9-b780-5b796952081d
log_level: critical
event_category: detections
event_data:
{"connection_id":2238933,"detection_time":1742094567,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":35269,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 215a9c71-7a7b-47b2-aa94-afcc0336bbca
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742094733,"event_type_id":6,"status":"blocked"}


event_id: 68390f35-bcbd-48cf-949c-dc046199e688
log_level: critical
event_category: detections
event_data:
{"connection_id":2240167,"detection_time":1742094733,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":54819,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e4200e08-dd31-44f3-98ea-a3e9f6464ffb
log_level: critical
event_category: detections
event_data:
{"connection_id":2242839,"detection_time":1742095045,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":22471,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 30e9d350-430b-4e06-b33c-45900caad5ee
log_level: critical
event_category: detections
event_data:
{"connection_id":2242923,"detection_time":1742095052,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":31856,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0b609172-bae6-4023-a732-4c559b231a36
log_level: critical
event_category: detections
event_data:
{"connection_id":2243012,"detection_time":1742095058,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":45264,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 919b133f-ac8b-485e-8ac9-5fbd1fe88f1d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742095075,"event_type_id":6,"status":"blocked"}


event_id: be569e80-dfb3-4cc7-9ca2-3e5328a27763
log_level: critical
event_category: detections
event_data:
{"connection_id":2243194,"detection_time":1742095075,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":44291,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: df595f45-bee8-4e95-8595-1a4f796b30bd
log_level: critical
event_category: detections
event_data:
{"connection_id":2244160,"detection_time":1742095171,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.163","remote_port":7061,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 95425880-1a81-4717-bb75-bc44d107b849
log_level: critical
event_category: detections
event_data:
{"connection_id":2244208,"detection_time":1742095178,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.163","remote_port":59384,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 2c639de9-6e43-4e83-9474-24ac47cf2adb
log_level: critical
event_category: detections
event_data:
{"connection_id":2244259,"detection_time":1742095184,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.163","remote_port":52834,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 71ecf906-ee52-4a70-b5e4-e8912e0ee460
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742096075,"event_type_id":6,"status":"blocked"}


event_id: 8bf09030-5297-4b17-b11a-a41ca5058560
log_level: critical
event_category: detections
event_data:
{"connection_id":2250139,"detection_time":1742096075,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":35239,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8ea567cb-66ad-451d-9952-df1f881257d5
log_level: critical
event_category: detections
event_data:
{"connection_id":2250372,"detection_time":1742096107,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":12366,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bd0a0ac6-4092-463d-a691-6bf73d2ba350
log_level: critical
event_category: detections
event_data:
{"connection_id":2250439,"detection_time":1742096114,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":22536,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f0e316a8-fe93-4286-8aab-179b0e75151b
log_level: critical
event_category: detections
event_data:
{"connection_id":2250476,"detection_time":1742096120,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":34334,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 05d22e6a-7f83-40a2-80bc-d7e56f04a27e
log_level: critical
event_category: detections
event_data:
{"connection_id":2252392,"detection_time":1742096482,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"193.37.69.105","remote_port":64817,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 98b28e6b-7f90-4213-9317-db766d367380
log_level: critical
event_category: detections
event_data:
{"connection_id":2254044,"detection_time":1742096853,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":59761,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3b7b6924-3027-414a-8ad9-8619e513082b
log_level: critical
event_category: detections
event_data:
{"connection_id":2254063,"detection_time":1742096860,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":6680,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 71244cdf-50c1-45b5-8f4c-fdd8a2d36974
log_level: critical
event_category: detections
event_data:
{"connection_id":2254086,"detection_time":1742096866,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":13479,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6c88b7fa-d51b-475f-994f-0cc6d9e7a333
log_level: critical
event_category: detections
event_data:
{"connection_id":2254267,"detection_time":1742096913,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":55804,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4dc206fa-488d-4c67-bbf1-1bc4125729be
log_level: critical
event_category: detections
event_data:
{"connection_id":2254301,"detection_time":1742096919,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":54494,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4c95398a-ad1f-4343-b6fb-ed4e631c2256
log_level: critical
event_category: detections
event_data:
{"connection_id":2254319,"detection_time":1742096926,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":55737,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 2ece1ddb-863f-4e53-ba5c-23a8f5e4e515
log_level: critical
event_category: detections
event_data:
{"connection_id":2254594,"detection_time":1742097000,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":18504,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 820f5d7d-946e-4955-9840-e9ef249f5775
log_level: critical
event_category: detections
event_data:
{"connection_id":2254618,"detection_time":1742097006,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":27778,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8edd66e3-dcc7-498e-99d5-f7d259612d30
log_level: critical
event_category: detections
event_data:
{"connection_id":2254645,"detection_time":1742097013,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":33848,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 12ac1c82-4d55-43b4-ad1c-f1d9b9054072
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742097081,"event_type_id":6,"status":"blocked"}


event_id: 89ae9a71-bc51-4c85-ad27-c5ae8bc54c7b
log_level: critical
event_category: detections
event_data:
{"connection_id":2254886,"detection_time":1742097081,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":54090,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: de8705ef-f39e-43d6-a0dc-c37703d42697
log_level: critical
event_category: detections
event_data:
{"connection_id":2256204,"detection_time":1742097473,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.96","remote_port":36095,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 03f98d87-71f4-47ef-8477-24c40549476d
log_level: critical
event_category: detections
event_data:
{"connection_id":2256224,"detection_time":1742097479,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.96","remote_port":32239,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 51d894ad-9e9d-41c9-aef7-9327a7e24d1f
log_level: critical
event_category: detections
event_data:
{"connection_id":2256253,"detection_time":1742097486,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.96","remote_port":31258,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 50d1428c-21b1-4873-8a7b-eb915888125d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742097653,"event_type_id":6,"status":"blocked"}


event_id: 49e8b2b8-6c9d-403a-9ea5-c1c546de0d91
log_level: critical
event_category: detections
event_data:
{"connection_id":2256818,"detection_time":1742097653,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":48007,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1ec67d2d-fa09-49a8-afea-d8262b0665ec
log_level: critical
event_category: detections
event_data:
{"connection_id":2257087,"detection_time":1742097735,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":41251,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7036d11e-a569-44b4-bb54-70835f231871
log_level: critical
event_category: detections
event_data:
{"connection_id":2257108,"detection_time":1742097742,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":28192,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ee66a15c-9140-41c0-b5ff-946e6b3444a9
log_level: critical
event_category: detections
event_data:
{"connection_id":2257135,"detection_time":1742097748,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":15836,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e294d5fd-0d8a-4fc8-8410-bc7fec8c358f
log_level: critical
event_category: detections
event_data:
{"connection_id":2257775,"detection_time":1742097919,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":36783,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f41252fa-a939-4faa-a6db-787284942e0b
log_level: critical
event_category: detections
event_data:
{"connection_id":2257792,"detection_time":1742097925,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":44689,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 68ced409-d5cc-4987-8ab9-35f350a0069d
log_level: critical
event_category: detections
event_data:
{"connection_id":2257822,"detection_time":1742097931,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":54100,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: cf809652-2052-42f8-87d4-6a119af5967b
log_level: critical
event_category: detections
event_data:
{"connection_id":2258649,"detection_time":1742098177,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.162","remote_port":25440,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7e512068-aa1f-4a31-890f-7194389a1c66
log_level: critical
event_category: detections
event_data:
{"connection_id":2258683,"detection_time":1742098184,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.162","remote_port":11781,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 2dfd7265-cbe1-41cf-87bf-6559fe1a0861
log_level: critical
event_category: detections
event_data:
{"connection_id":2258730,"detection_time":1742098190,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.162","remote_port":55337,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1fb11540-1726-4ac3-aa18-a22af31f2675
log_level: critical
event_category: detections
event_data:
{"connection_id":2259146,"detection_time":1742098297,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":50749,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ea93ef3f-3dad-4704-9848-be725744233f
log_level: critical
event_category: detections
event_data:
{"connection_id":2259166,"detection_time":1742098304,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":58573,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 607b18bc-3717-40bf-b213-1e00ca3e6161
log_level: critical
event_category: detections
event_data:
{"connection_id":2259187,"detection_time":1742098310,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":9124,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 891a7bd5-362a-4f5a-ba8a-a954e9ea033c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742098592,"event_type_id":6,"status":"blocked"}


event_id: d4f29cc9-9c37-462f-8647-95121c93e9f9
log_level: critical
event_category: detections
event_data:
{"connection_id":2260118,"detection_time":1742098592,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":54621,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f991a7bc-b1ce-4860-b4c4-0a6585cdb4f7
log_level: critical
event_category: detections
event_data:
{"connection_id":2261538,"detection_time":1742099017,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":6282,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c18109fc-479e-4d86-958b-d61ee45a8378
log_level: critical
event_category: detections
event_data:
{"connection_id":2261562,"detection_time":1742099023,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":14948,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b8c1f6de-7929-4e7e-80d1-6ffeed6329cf
log_level: critical
event_category: detections
event_data:
{"connection_id":2261586,"detection_time":1742099030,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":28628,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5d05f87b-2ca1-46b8-a05a-33f9038a811f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742099095,"event_type_id":6,"status":"blocked"}


event_id: 84f7b304-9fcc-4b0e-a21b-9c49fb61403e
log_level: critical
event_category: detections
event_data:
{"connection_id":2261795,"detection_time":1742099095,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":35700,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 50c552e9-5140-47eb-acde-7e381c7fc5fe
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742099110,"event_type_id":6,"status":"blocked"}


event_id: 5ddd087a-deee-4c98-a91c-6c032bf8f771
log_level: critical
event_category: detections
event_data:
{"connection_id":2261844,"detection_time":1742099110,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":44723,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 37820db6-cc36-45ab-85ce-94902d83ad73
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742099603,"event_type_id":6,"status":"blocked"}


event_id: c1488f16-05e8-412e-96be-3ff2c9e8f50d
log_level: critical
event_category: detections
event_data:
{"connection_id":2263486,"detection_time":1742099603,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":45040,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4cd2b2ac-f64c-4141-b1f1-328a51574ca7
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742099605,"event_type_id":6,"status":"blocked"}


event_id: 37c0a509-99fc-47b2-afc6-02978624f3c8
log_level: critical
event_category: detections
event_data:
{"connection_id":2263494,"detection_time":1742099605,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":43750,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2a4fa553-3214-473c-a38d-4028ccde4e34
log_level: critical
event_category: detections
event_data:
{"connection_id":2264984,"detection_time":1742099913,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":37973,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f61c4dac-bf73-4deb-b75d-8020d59a152c
log_level: critical
event_category: detections
event_data:
{"connection_id":2265031,"detection_time":1742099920,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":51229,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 937a83a4-076b-42b5-9f5d-45531c88b756
log_level: critical
event_category: detections
event_data:
{"connection_id":2265064,"detection_time":1742099926,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":3455,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b83e3ded-00d2-40ce-af4c-b423393cab4a
log_level: critical
event_category: detections
event_data:
{"connection_id":2266174,"detection_time":1742100134,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":17969,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5e225597-d85f-4cdb-a936-a55cb8ce5fc0
log_level: critical
event_category: detections
event_data:
{"connection_id":2266241,"detection_time":1742100140,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":23327,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 62fe239b-e991-4117-8577-0f66a1fb0279
log_level: critical
event_category: detections
event_data:
{"connection_id":2266282,"detection_time":1742100147,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":30190,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: dc59ad7c-35a7-488d-b9e6-e43ebe4ff554
log_level: critical
event_category: detections
event_data:
{"connection_id":2267032,"detection_time":1742100276,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":10328,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 606fd51e-39c2-43b5-addf-0deb91af38c8
log_level: critical
event_category: detections
event_data:
{"connection_id":2267054,"detection_time":1742100282,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":4763,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d92ec864-5539-4030-b488-bab07469b29d
log_level: critical
event_category: detections
event_data:
{"connection_id":2267072,"detection_time":1742100288,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":55940,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 14a8d1b8-8843-4638-aec3-990ac0578f28
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742100572,"event_type_id":6,"status":"blocked"}


event_id: 95d3dcdd-7126-433e-9c79-a643ba4e9f65
log_level: critical
event_category: detections
event_data:
{"connection_id":2268789,"detection_time":1742100572,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":41278,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: edfac7d7-e3c3-4192-802c-a6847fbef8f5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742100609,"event_type_id":6,"status":"blocked"}


event_id: c6240eff-f6a5-4aa9-85db-2b29979f1c40
log_level: critical
event_category: detections
event_data:
{"connection_id":2268948,"detection_time":1742100609,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":36425,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 33337d18-5f73-489f-b281-96eb7ff85dcb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742101113,"event_type_id":6,"status":"blocked"}


event_id: 3b4d58cb-8ac8-4a3b-9c45-b91ac49e2ac6
log_level: critical
event_category: detections
event_data:
{"connection_id":2271645,"detection_time":1742101114,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":47039,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 349b2a94-4b4a-4f7a-9db8-a630eb33ea10
log_level: critical
event_category: detections
event_data:
{"connection_id":2272324,"detection_time":1742101273,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.96","remote_port":41283,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c7fd5348-83d3-4c85-8d83-dca17975913b
log_level: critical
event_category: detections
event_data:
{"connection_id":2272361,"detection_time":1742101279,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.96","remote_port":33586,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1f88f006-51e3-4690-8297-a0d7f7a58652
log_level: critical
event_category: detections
event_data:
{"connection_id":2272403,"detection_time":1742101286,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.96","remote_port":24146,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e8242a6a-7724-4be1-ac3d-641485577a4a
log_level: critical
event_category: detections
event_data:
{"connection_id":2272621,"detection_time":1742101315,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":52399,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 33063525-8f71-4e7c-8d31-084dc76eb261
log_level: critical
event_category: detections
event_data:
{"connection_id":2272666,"detection_time":1742101321,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":7220,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c0b92b23-8ad7-42f5-8f74-13899ea0f9c0
log_level: critical
event_category: detections
event_data:
{"connection_id":2272717,"detection_time":1742101327,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":18431,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 27387ae2-4d58-4da0-8d0c-9b21cb5100c5
log_level: critical
event_category: detections
event_data:
{"connection_id":2273646,"detection_time":1742101499,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.152","remote_port":18165,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0af545d5-131e-48f1-9c7f-36e8fd2d9a91
log_level: critical
event_category: detections
event_data:
{"connection_id":2273687,"detection_time":1742101505,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.152","remote_port":5858,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 94c3e027-f5ec-4d3f-a045-534c71be534e
log_level: critical
event_category: detections
event_data:
{"connection_id":2273733,"detection_time":1742101511,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.152","remote_port":52231,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b480d08e-4a35-401e-ab60-85c043957433
log_level: critical
event_category: detections
event_data:
{"connection_id":2273940,"detection_time":1742101537,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.166","remote_port":30169,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e67118d7-fecf-48e6-bda8-5d0dee7f69bd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742101542,"event_type_id":6,"status":"blocked"}


event_id: 54ab8851-0fac-4090-9fd4-f8fb31cbd6be
log_level: critical
event_category: detections
event_data:
{"connection_id":2273989,"detection_time":1742101542,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":37424,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: de9ffd88-1072-4729-8e3a-02b2f5dcf64b
log_level: critical
event_category: detections
event_data:
{"connection_id":2273997,"detection_time":1742101543,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.166","remote_port":17614,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c4e3d8d7-e511-4dfb-b764-14f595d33dea
log_level: critical
event_category: detections
event_data:
{"connection_id":2274047,"detection_time":1742101550,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.166","remote_port":6939,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7b31f9c6-5c92-4113-8e5f-766af72f9b81
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742102119,"event_type_id":6,"status":"blocked"}


event_id: 5d240533-616f-48d2-9e6d-4285dcb82869
log_level: critical
event_category: detections
event_data:
{"connection_id":2277000,"detection_time":1742102119,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":38697,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9a7d5f93-0777-48b6-a019-4e15d567c801
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742102513,"event_type_id":6,"status":"blocked"}


event_id: 94719cb0-94c5-4d1f-b268-b24f4d8b01a4
log_level: critical
event_category: detections
event_data:
{"connection_id":2279218,"detection_time":1742102514,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":34966,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: dc65ed52-ec59-4056-bb66-207b9b322f3b
log_level: critical
event_category: detections
event_data:
{"connection_id":2279480,"detection_time":1742102579,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":8095,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ce189f21-730c-4af6-ab5a-0706f360ab9e
log_level: critical
event_category: detections
event_data:
{"connection_id":2279498,"detection_time":1742102586,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":21805,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a5ca9813-f387-470c-baa1-ac97425af6c2
log_level: critical
event_category: detections
event_data:
{"connection_id":2279538,"detection_time":1742102592,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":30572,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7dbd1aa3-f2cb-42ba-86ae-a6b20f9f2d87
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742102623,"event_type_id":6,"status":"blocked"}


event_id: aedf4507-825b-4b11-bef3-edb29083cd12
log_level: critical
event_category: detections
event_data:
{"connection_id":2279636,"detection_time":1742102623,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":48149,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: dc3a8068-6477-4339-89ab-dcee47fb0a53
log_level: critical
event_category: detections
event_data:
{"connection_id":2279801,"detection_time":1742102668,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":33564,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 85f1937b-1437-4b28-9960-1d1f8ed3df55
log_level: critical
event_category: detections
event_data:
{"connection_id":2279822,"detection_time":1742102674,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":41017,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f2f935ff-49dd-49fc-aff5-de965f8aef3a
log_level: critical
event_category: detections
event_data:
{"connection_id":2279844,"detection_time":1742102681,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":55079,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f8369e25-6a8b-4aa9-994b-e37fca106e88
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742102999,"event_type_id":6,"status":"blocked"}


event_id: fb478c4f-62e3-40d7-a409-8348c39e07b1
log_level: critical
event_category: detections
event_data:
{"connection_id":2281067,"detection_time":1742102999,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":33162,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: de44c907-b623-4b62-8fc6-0197612531b6
log_level: critical
event_category: detections
event_data:
{"connection_id":2281073,"detection_time":1742103001,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.167","remote_port":25137,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 37eb74b0-c9ac-47d9-b55a-279a142fb0f3
log_level: critical
event_category: detections
event_data:
{"connection_id":2281096,"detection_time":1742103007,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.167","remote_port":15790,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 993341e7-b358-4cbc-8013-7512ad628afe
log_level: critical
event_category: detections
event_data:
{"connection_id":2281123,"detection_time":1742103014,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.167","remote_port":5657,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 17fb5b1d-56ed-49c7-b9f9-d9a2c0d0bd02
log_level: critical
event_category: detections
event_data:
{"connection_id":2281145,"detection_time":1742103022,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.151","remote_port":40148,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b245d2e7-aece-4347-af08-55c7eb1c7751
log_level: critical
event_category: detections
event_data:
{"connection_id":2281162,"detection_time":1742103029,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.151","remote_port":24846,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 816f2b54-291a-4802-9418-9b2a02c3ce84
log_level: critical
event_category: detections
event_data:
{"connection_id":2281179,"detection_time":1742103035,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.151","remote_port":11255,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5953a4a2-fcc1-4ed4-a21b-696e524deb9d
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742103128,"event_type_id":6,"status":"blocked"}


event_id: 7393bc35-3636-49d2-ae60-89b5d5b4087e
log_level: critical
event_category: detections
event_data:
{"connection_id":2281508,"detection_time":1742103128,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":57871,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 921f0e83-4d04-41f7-95b1-cee0d7f2801c
log_level: critical
event_category: detections
event_data:
{"connection_id":2284464,"detection_time":1742103934,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":36660,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4ad1659a-7bce-4a14-8eae-3531734a48fe
log_level: critical
event_category: detections
event_data:
{"connection_id":2284490,"detection_time":1742103943,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":48168,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c4af258d-2c3a-4205-ad59-bb4127a068ad
log_level: critical
event_category: detections
event_data:
{"connection_id":2284511,"detection_time":1742103950,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":40659,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8dfa9faa-c42a-4d65-a346-fd840c1c35fa
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742103977,"event_type_id":6,"status":"blocked"}


event_id: a5f8a58c-18e3-4ffd-ab75-3ab2b4e1e16a
log_level: critical
event_category: detections
event_data:
{"connection_id":2284625,"detection_time":1742103977,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":58840,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 39830fd1-e7ce-45c0-b34b-b95af4581eb0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742104131,"event_type_id":6,"status":"blocked"}


event_id: 141ac456-4274-4d4d-b711-2374e4953ece
log_level: critical
event_category: detections
event_data:
{"connection_id":2285146,"detection_time":1742104131,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":49129,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1860e54e-73d0-4b62-b611-12e91f13bd83
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742104458,"event_type_id":6,"status":"blocked"}


event_id: 4b17b580-84be-4f97-9442-1bd5d8618d8c
log_level: critical
event_category: detections
event_data:
{"connection_id":2286371,"detection_time":1742104458,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":58169,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1dce6792-3301-4eec-b72a-3b933acb0891
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742104633,"event_type_id":6,"status":"blocked"}


event_id: 15e5836b-36a1-4eaa-b06d-6d78c9094f16
log_level: critical
event_category: detections
event_data:
{"connection_id":2286982,"detection_time":1742104633,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":57913,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 465d5722-cadd-4ff6-aa21-200a6272280f
log_level: critical
event_category: detections
event_data:
{"connection_id":2287134,"detection_time":1742104674,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.152","remote_port":16381,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 48b27514-6dcd-4fd1-ab0e-5e5c01463559
log_level: critical
event_category: detections
event_data:
{"connection_id":2287167,"detection_time":1742104681,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.152","remote_port":3291,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e22fdc72-f85f-42c5-be27-bea7ee2d60fe
log_level: critical
event_category: detections
event_data:
{"connection_id":2287186,"detection_time":1742104687,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.152","remote_port":50616,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ea0c0a9b-d61b-4cc4-bd7e-14ce2401eeb4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742104943,"event_type_id":6,"status":"blocked"}


event_id: 1143da0b-6ec4-4d87-9a89-5a2e717f02a1
log_level: critical
event_category: detections
event_data:
{"connection_id":2288065,"detection_time":1742104943,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":57380,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b3333372-f4f7-4f6a-bf09-8a22266cb18e
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742105136,"event_type_id":6,"status":"blocked"}


event_id: 6f868d9b-e3b0-4b83-953e-7ce06b667379
log_level: critical
event_category: detections
event_data:
{"connection_id":2288820,"detection_time":1742105136,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":39497,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3a1c9f43-9082-4752-b4f9-4eb6f2f7739c
log_level: critical
event_category: detections
event_data:
{"connection_id":2288958,"detection_time":1742105173,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.165","remote_port":10449,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 66375a4b-c036-4397-b05c-a6c5f5892351
log_level: critical
event_category: detections
event_data:
{"connection_id":2288986,"detection_time":1742105180,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.165","remote_port":54911,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b6cb57bb-41a1-47e2-bdec-0e1ce0dc3ee2
log_level: critical
event_category: detections
event_data:
{"connection_id":2289022,"detection_time":1742105186,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.165","remote_port":41422,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 311b2e76-9d2c-4e3e-99ce-15e7d7505b7a
log_level: critical
event_category: detections
event_data:
{"connection_id":2289625,"detection_time":1742105372,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":57406,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ff78ec82-72f8-44e5-b794-83bb43e940cc
log_level: critical
event_category: detections
event_data:
{"connection_id":2289644,"detection_time":1742105378,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":45166,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 36683bea-4d28-421f-ad5b-0a87d93bae8d
log_level: critical
event_category: detections
event_data:
{"connection_id":2289664,"detection_time":1742105385,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":31691,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e26fc67c-7a98-4c51-ac3f-918d52df2ddb
log_level: critical
event_category: detections
event_data:
{"connection_id":2290371,"detection_time":1742105604,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.155","remote_port":24180,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 022d6ac8-50b8-4e18-99c5-82487c139da2
log_level: critical
event_category: detections
event_data:
{"connection_id":2290401,"detection_time":1742105610,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.155","remote_port":12931,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6ab45215-d0b4-473e-baee-85c5b0cdea6b
log_level: critical
event_category: detections
event_data:
{"connection_id":2290426,"detection_time":1742105617,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.155","remote_port":59355,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5f2a6bc4-4c84-4429-bb38-8c048195e666
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742105640,"event_type_id":6,"status":"blocked"}


event_id: de43e40c-9424-40ab-8843-126bdcf9a86e
log_level: critical
event_category: detections
event_data:
{"connection_id":2290497,"detection_time":1742105640,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":49178,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 37b31376-66dd-4cf1-8ec0-7364173ea90c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742105919,"event_type_id":6,"status":"blocked"}


event_id: e569fc44-c929-4912-ad18-53b6f6599d03
log_level: critical
event_category: detections
event_data:
{"connection_id":2291946,"detection_time":1742105919,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":56512,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6b300551-b04d-45aa-87d5-f44aa27ec6af
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742106143,"event_type_id":6,"status":"blocked"}


event_id: 629e192d-d62a-4055-980e-32ef338d9513
log_level: critical
event_category: detections
event_data:
{"connection_id":2293152,"detection_time":1742106143,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":58520,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5c0855ba-5321-489d-819f-c04299b31636
log_level: critical
event_category: detections
event_data:
{"connection_id":2293535,"detection_time":1742106196,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":8299,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 316bc6f3-2b4b-4087-9801-0a1b9a41fe1c
log_level: critical
event_category: detections
event_data:
{"connection_id":2293556,"detection_time":1742106203,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":15283,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f0377e67-3d73-44a4-b090-1373da3944d9
log_level: critical
event_category: detections
event_data:
{"connection_id":2293576,"detection_time":1742106209,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":24322,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 75588f9a-68a9-46ed-a88e-e253846c95c5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742106646,"event_type_id":6,"status":"blocked"}


event_id: 51a50514-0cd1-42a4-8e7d-c45425a3dbba
log_level: critical
event_category: detections
event_data:
{"connection_id":2296035,"detection_time":1742106646,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":39946,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f0453bfe-a934-4aa4-af6d-7f6b848d7ea9
log_level: critical
event_category: detections
event_data:
{"connection_id":2297320,"detection_time":1742106877,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":13331,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e7f07406-c371-4681-8f9e-90badbb290c3
log_level: critical
event_category: detections
event_data:
{"connection_id":2297332,"detection_time":1742106883,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":8347,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: fb3bc30d-0400-4f2c-9280-e425cb0553ca
log_level: critical
event_category: detections
event_data:
{"connection_id":2297350,"detection_time":1742106890,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":3176,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 677b7e39-51d9-4fae-a221-86b1fc2416a2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742106898,"event_type_id":6,"status":"blocked"}


event_id: 2cec2256-97f1-4f22-9f31-484650b047ae
log_level: critical
event_category: detections
event_data:
{"connection_id":2297376,"detection_time":1742106898,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":54179,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e4989abf-314b-4d27-ba68-191f333c2964
log_level: critical
event_category: detections
event_data:
{"connection_id":2298842,"detection_time":1742107202,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":31557,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6f99941e-b480-4587-bbd5-45390dad6f5e
log_level: critical
event_category: detections
event_data:
{"connection_id":2298865,"detection_time":1742107209,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":33400,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 34f9f840-d400-4a3d-b028-603533704d7a
log_level: critical
event_category: detections
event_data:
{"connection_id":2298892,"detection_time":1742107215,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":36983,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b0b43da6-1510-41e1-8be3-64c9c80900e5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742107650,"event_type_id":6,"status":"blocked"}


event_id: 53fca984-ddfb-403b-b5ce-36fdfbc544ee
log_level: critical
event_category: detections
event_data:
{"connection_id":2301342,"detection_time":1742107650,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":57734,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 33e1cce9-1559-48e4-adcf-041bfaa1fc1e
log_level: critical
event_category: detections
event_data:
{"connection_id":2302013,"detection_time":1742107766,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":41776,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5a3aa973-29cd-4f36-9cd1-880352f23815
log_level: critical
event_category: detections
event_data:
{"connection_id":2302028,"detection_time":1742107773,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":50139,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 87e03ae5-dcf5-449e-bde8-d40706e2dc40
log_level: critical
event_category: detections
event_data:
{"connection_id":2302052,"detection_time":1742107779,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":58633,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: adaeadb1-967a-449b-b300-1f2792743759
log_level: critical
event_category: detections
event_data:
{"connection_id":2302100,"detection_time":1742107790,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.156","remote_port":36870,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 536bef63-df79-4df3-b04a-beda2d7b9004
log_level: critical
event_category: detections
event_data:
{"connection_id":2302122,"detection_time":1742107797,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.156","remote_port":27336,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 47c67fc1-0597-4d89-87a9-a6bbd152036a
log_level: critical
event_category: detections
event_data:
{"connection_id":2302145,"detection_time":1742107803,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.156","remote_port":16237,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1e2ea100-a9c3-4636-bd7f-2bc4dc71383b
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742107866,"event_type_id":6,"status":"blocked"}


event_id: 45748360-65d9-44ee-b9cd-6ce84d3e72ff
log_level: critical
event_category: detections
event_data:
{"connection_id":2302450,"detection_time":1742107866,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":53902,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ab37a96d-8d33-40ba-8200-4babd8dbef2c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742108352,"event_type_id":6,"status":"blocked"}


event_id: 8031c247-f072-4314-8caf-86c2cc600cd0
log_level: critical
event_category: detections
event_data:
{"connection_id":2304968,"detection_time":1742108352,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":53204,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 083a7f65-8b76-4a24-be2f-16d694c724a3
log_level: critical
event_category: detections
event_data:
{"connection_id":2305709,"detection_time":1742108524,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":37382,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1a4e24de-477a-4d5b-b99a-fcf8384674b2
log_level: critical
event_category: detections
event_data:
{"connection_id":2305754,"detection_time":1742108530,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":49129,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f0689ce3-384d-42af-af82-f42ad5711a60
log_level: critical
event_category: detections
event_data:
{"connection_id":2305791,"detection_time":1742108536,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":56384,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4ad6416e-cae0-44fb-bc5c-4e0862a2c75d
log_level: critical
event_category: detections
event_data:
{"connection_id":2306143,"detection_time":1742108596,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.166","remote_port":17289,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1bf6e44e-e8b8-4126-b50f-ca6855ea8442
log_level: critical
event_category: detections
event_data:
{"connection_id":2306168,"detection_time":1742108602,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.166","remote_port":6857,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 43f77ce7-357a-459d-9536-4377fe69ba1a
log_level: critical
event_category: detections
event_data:
{"connection_id":2306191,"detection_time":1742108606,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":11409,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c06dc887-552a-4a71-9dbc-a11796e7e500
log_level: critical
event_category: detections
event_data:
{"connection_id":2306196,"detection_time":1742108608,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.166","remote_port":54607,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c8dd6df0-e971-471c-b7ca-c1ed3f5bb060
log_level: critical
event_category: detections
event_data:
{"connection_id":2306212,"detection_time":1742108613,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":21421,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: dc5053b3-f641-4cd0-80cd-059029387957
log_level: critical
event_category: detections
event_data:
{"connection_id":2306237,"detection_time":1742108619,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.186","remote_port":29290,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: cea5cad0-8107-40f1-8789-7469fb0caf7c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742108655,"event_type_id":6,"status":"blocked"}


event_id: 25b66ed2-5974-477b-b9bf-2301158049db
log_level: critical
event_category: detections
event_data:
{"connection_id":2306371,"detection_time":1742108656,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":48354,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 43eeceaf-0c89-4a8c-bd5f-5791225bd3fd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742108839,"event_type_id":6,"status":"blocked"}


event_id: 098be075-7d82-4ff8-8e86-25935f091cfb
log_level: critical
event_category: detections
event_data:
{"connection_id":2307104,"detection_time":1742108839,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":52524,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: bb3e8230-23cf-409f-a713-6b792f18dfb2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742109324,"event_type_id":6,"status":"blocked"}


event_id: 021bd50b-7203-4655-b97f-c44e51469b63
log_level: critical
event_category: detections
event_data:
{"connection_id":2308708,"detection_time":1742109324,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":51970,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3d203cba-6656-49ca-803a-eb0cae2ffaea
log_level: critical
event_category: detections
event_data:
{"connection_id":2309429,"detection_time":1742109529,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":3958,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4c013e64-4155-4e3d-905d-3839fa50caa7
log_level: critical
event_category: detections
event_data:
{"connection_id":2309450,"detection_time":1742109536,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":16565,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3c5aa4fb-edb3-453c-a7eb-c7afd582b900
log_level: critical
event_category: detections
event_data:
{"connection_id":2309487,"detection_time":1742109542,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.185","remote_port":27412,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 85c54128-8c10-48dc-905f-c6afca8ff0ba
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742109662,"event_type_id":6,"status":"blocked"}


event_id: d1f34e49-ba3f-47a9-a2ee-58e0f2460836
log_level: critical
event_category: detections
event_data:
{"connection_id":2309886,"detection_time":1742109662,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":39219,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5b0c4ff9-c091-4a35-b15a-bddc1c2ea00b
log_level: critical
event_category: detections
event_data:
{"connection_id":2312859,"detection_time":1742110503,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":8657,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c476338f-cd51-4df5-9df0-4eb521a1b56b
log_level: critical
event_category: detections
event_data:
{"connection_id":2312880,"detection_time":1742110510,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":59908,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6b8497ec-205b-4c77-942f-74732bccada2
log_level: critical
event_category: detections
event_data:
{"connection_id":2312896,"detection_time":1742110516,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":54385,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f3853f6c-092e-4d2f-9b3f-e8a7b21d839b
log_level: critical
event_category: detections
event_data:
{"connection_id":2313077,"detection_time":1742110559,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"193.29.13.50","remote_port":63697,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b693b73a-f631-4071-85a3-41aa92293db8
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742110785,"event_type_id":6,"status":"blocked"}


event_id: f2eb8fba-87f9-4fe4-87f7-40a43e173bb7
log_level: critical
event_category: detections
event_data:
{"connection_id":2313894,"detection_time":1742110785,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":49742,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 2df50827-f83a-4065-993a-a1e5748c12d8
log_level: critical
event_category: detections
event_data:
{"connection_id":2314108,"detection_time":1742110847,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.164","remote_port":51444,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9be5c881-eafc-431c-bd7b-d9f8b64870d2
log_level: critical
event_category: detections
event_data:
{"connection_id":2314152,"detection_time":1742110854,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.164","remote_port":37242,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 70ddfe90-c8ad-41c5-924d-c63c1b8f7c15
log_level: critical
event_category: detections
event_data:
{"connection_id":2314179,"detection_time":1742110860,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.164","remote_port":24166,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e2636fd3-9561-4a28-85b1-10ced0be3cd2
log_level: critical
event_category: detections
event_data:
{"connection_id":2315023,"detection_time":1742111099,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":7163,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 164a4b0b-4ca1-41a5-933d-9d2361350b05
log_level: critical
event_category: detections
event_data:
{"connection_id":2315042,"detection_time":1742111105,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":20176,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d18ac39b-bfd7-450a-9c43-da532074a425
log_level: critical
event_category: detections
event_data:
{"connection_id":2315056,"detection_time":1742111112,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":30189,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bfea8659-8d9a-4a84-b98c-a10becaa31c2
log_level: critical
event_category: detections
event_data:
{"connection_id":2316800,"detection_time":1742111615,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":11344,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 23495edd-16ce-4a77-a2d0-4a704f835926
log_level: critical
event_category: detections
event_data:
{"connection_id":2316818,"detection_time":1742111621,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":22790,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 35bc095e-3a19-474a-9133-30fec063b09d
log_level: critical
event_category: detections
event_data:
{"connection_id":2316840,"detection_time":1742111627,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":33094,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0b03a8f5-0053-4597-9be9-30e0cf8ba8d5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742112172,"event_type_id":6,"status":"blocked"}


event_id: 9296297d-38e6-4726-8220-8f097fb69993
log_level: critical
event_category: detections
event_data:
{"connection_id":2319465,"detection_time":1742112173,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":58436,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 4947f201-089f-4f34-9bcf-9f3220032c95
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742112244,"event_type_id":6,"status":"blocked"}


event_id: cd66969b-b488-4a62-a78a-d798781d5a5b
log_level: critical
event_category: detections
event_data:
{"connection_id":2319984,"detection_time":1742112244,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":46151,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7ae09e2e-689d-4c87-9458-5289ec34e369
log_level: critical
event_category: detections
event_data:
{"connection_id":2323205,"detection_time":1742112790,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.154","remote_port":40168,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0c9c53d7-cd83-4bd9-b743-cd4404463066
log_level: critical
event_category: detections
event_data:
{"connection_id":2323256,"detection_time":1742112797,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.154","remote_port":11881,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 119e34b3-1df4-4c08-b7cd-df6506e08df8
log_level: critical
event_category: detections
event_data:
{"connection_id":2323302,"detection_time":1742112803,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.154","remote_port":45541,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: da18c205-f232-4813-ba65-101646be22e6
log_level: critical
event_category: detections
event_data:
{"connection_id":2323324,"detection_time":1742112807,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.163","remote_port":46158,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d1bec7aa-9cdc-4f9a-8a48-fb337630c1f0
log_level: critical
event_category: detections
event_data:
{"connection_id":2323362,"detection_time":1742112813,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.163","remote_port":35635,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 451e381f-7c0e-4140-81ed-9004a9403c60
log_level: critical
event_category: detections
event_data:
{"connection_id":2323401,"detection_time":1742112820,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.163","remote_port":25592,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: eb66df90-f5e0-4ed5-b903-ecf2d95952f5
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742113181,"event_type_id":6,"status":"blocked"}


event_id: 8e9a73ff-9a1d-4d04-af47-1fb14a534ae0
log_level: critical
event_category: detections
event_data:
{"connection_id":2324861,"detection_time":1742113181,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":50185,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 552f0211-045a-418d-9d4f-161c9e2799ec
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742113214,"event_type_id":6,"status":"blocked"}


event_id: 047cb5bc-326f-4320-9251-90c725495097
log_level: critical
event_category: detections
event_data:
{"connection_id":2325026,"detection_time":1742113214,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":43974,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: de3f67e7-3ac4-47f0-b393-b0b3086970de
log_level: critical
event_category: detections
event_data:
{"connection_id":2325226,"detection_time":1742113240,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":40134,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 962e1dff-7def-4016-ab19-1a068f3dda22
log_level: critical
event_category: detections
event_data:
{"connection_id":2325256,"detection_time":1742113246,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":29258,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e952c9a5-bd8e-430c-a30c-4ee8d8ffa5d2
log_level: critical
event_category: detections
event_data:
{"connection_id":2325293,"detection_time":1742113252,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.161","remote_port":15725,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1305dda0-4f6a-4bd3-8af6-c510b5becc60
log_level: critical
event_category: detections
event_data:
{"connection_id":2326646,"detection_time":1742113569,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":53438,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1408eebe-3090-46e2-92f7-33e299135091
log_level: critical
event_category: detections
event_data:
{"connection_id":2326692,"detection_time":1742113576,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":3587,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7b45a530-efba-4bb4-b651-2db839541e39
log_level: critical
event_category: detections
event_data:
{"connection_id":2326721,"detection_time":1742113582,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":18458,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: cefed584-1a5e-4d08-ac40-f033ccce761c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742113692,"event_type_id":6,"status":"blocked"}


event_id: cb056318-d222-4a66-ad97-1d92ab509a55
log_level: critical
event_category: detections
event_data:
{"connection_id":2327354,"detection_time":1742113692,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":59622,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: d8745021-93e4-4349-96ec-afcfc8dbc559
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742113709,"event_type_id":6,"status":"blocked"}


event_id: da3d64ce-4897-46b9-a0ac-c04abf5270e3
log_level: critical
event_category: detections
event_data:
{"connection_id":2327408,"detection_time":1742113709,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":42926,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1c6b8622-81af-4436-8e3b-223894466b18
log_level: critical
event_category: detections
event_data:
{"connection_id":2329105,"detection_time":1742114048,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":32735,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 47b4f80f-b96b-4028-94b6-463695945680
log_level: critical
event_category: detections
event_data:
{"connection_id":2329142,"detection_time":1742114055,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":46000,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: fbdf7e5e-811d-4b59-917e-c75c0353a27a
log_level: critical
event_category: detections
event_data:
{"connection_id":2329157,"detection_time":1742114061,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":55818,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 900965b4-59ab-4c2f-92a3-e167e84d02c9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742114189,"event_type_id":6,"status":"blocked"}


event_id: f86e705b-bdd5-4539-8cb0-ea68abc3bb81
log_level: critical
event_category: detections
event_data:
{"connection_id":2329641,"detection_time":1742114189,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":40775,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 5a2c6835-87fd-4dd7-9d0a-f59cf9f3febf
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742114677,"event_type_id":6,"status":"blocked"}


event_id: 21e7ff66-c698-4289-ac3c-c15acd6e1c52
log_level: critical
event_category: detections
event_data:
{"connection_id":2332057,"detection_time":1742114677,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":40671,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 0e22becd-d21d-4728-8dff-057cabef2429
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742114692,"event_type_id":6,"status":"blocked"}


event_id: cbb22615-fc7a-4de1-ae52-a396457af583
log_level: critical
event_category: detections
event_data:
{"connection_id":2332094,"detection_time":1742114692,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":50596,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 44d52d8f-dcc1-4892-87c7-967e5d7e5fbc
log_level: critical
event_category: detections
event_data:
{"connection_id":2332420,"detection_time":1742114753,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"185.170.144.3","remote_port":64905,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 886ccc27-1dd6-4dcd-885b-9b717cf6f18b
log_level: critical
event_category: detections
event_data:
{"connection_id":2333266,"detection_time":1742114924,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":6439,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e1cd843a-840a-43b7-9189-7844467fa312
log_level: critical
event_category: detections
event_data:
{"connection_id":2333306,"detection_time":1742114930,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":7173,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f9a4fc31-08d1-4ad8-96a5-0e813c1c61c4
log_level: critical
event_category: detections
event_data:
{"connection_id":2333342,"detection_time":1742114937,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":6272,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3cb6e2ac-6932-4b22-8ebb-44cb853134af
log_level: critical
event_category: detections
event_data:
{"connection_id":2333888,"detection_time":1742115049,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.167","remote_port":54634,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 8a70369f-f03f-40b7-862d-c3d4c56c75db
log_level: critical
event_category: detections
event_data:
{"connection_id":2333925,"detection_time":1742115056,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.167","remote_port":42147,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bbe0c5c5-ec66-4d9f-8f7d-32b8d1f260a6
log_level: critical
event_category: detections
event_data:
{"connection_id":2333966,"detection_time":1742115062,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.167","remote_port":31023,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 9cc18881-2032-4764-84ec-c8a7a97c4632
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742115163,"event_type_id":6,"status":"blocked"}


event_id: 15dc3f65-6d1b-4046-9fee-17f93fa83492
log_level: critical
event_category: detections
event_data:
{"connection_id":2334621,"detection_time":1742115163,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":39241,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e699fd92-cd80-4d0a-8f65-22332dd67f3d
log_level: critical
event_category: detections
event_data:
{"connection_id":2335492,"detection_time":1742115324,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":15381,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e162245d-b192-4134-bd27-dd34ae8039d0
log_level: critical
event_category: detections
event_data:
{"connection_id":2335504,"detection_time":1742115331,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":23443,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 79b4a8b9-c338-42a0-a546-890a30d90a1d
log_level: critical
event_category: detections
event_data:
{"connection_id":2335517,"detection_time":1742115337,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.125","remote_port":32462,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: fc9cbe5f-4172-4cf0-92ba-c54f3cb25cc3
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742115701,"event_type_id":6,"status":"blocked"}


event_id: 4b74b4da-2533-4e9e-aa24-e93c72e94a5f
log_level: critical
event_category: detections
event_data:
{"connection_id":2337302,"detection_time":1742115701,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":42485,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 94804641-ff97-42de-bff9-f4a11508776d
log_level: critical
event_category: detections
event_data:
{"connection_id":2339623,"detection_time":1742116141,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":56756,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 98fb38c4-b2a2-4fff-8cad-1b593b6b7072
log_level: critical
event_category: detections
event_data:
{"connection_id":2339648,"detection_time":1742116147,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":48994,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ee1b089b-e1eb-49f5-8f41-3f29ea50370b
log_level: critical
event_category: detections
event_data:
{"connection_id":2339662,"detection_time":1742116154,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":44038,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f5c03de9-2db5-4f8d-bb2d-8bc61e01333c
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742116203,"event_type_id":6,"status":"blocked"}


event_id: 82768f0a-0b2e-4921-9959-75b8c30c494d
log_level: critical
event_category: detections
event_data:
{"connection_id":2339807,"detection_time":1742116203,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":51412,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 44526706-5328-4e17-9533-abc419f24a2d
log_level: critical
event_category: detections
event_data:
{"connection_id":2339887,"detection_time":1742116217,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.156","remote_port":29110,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 74cd048a-69e6-4e19-9b2f-3051055c8422
log_level: critical
event_category: detections
event_data:
{"connection_id":2339917,"detection_time":1742116224,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.156","remote_port":17876,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 243c1f4d-7fa3-4f59-bf9b-c75a1f266be2
log_level: critical
event_category: detections
event_data:
{"connection_id":2339943,"detection_time":1742116230,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.156","remote_port":7376,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b7fd722b-1c1c-4336-b358-f4f4c80ab9c9
log_level: critical
event_category: detections
event_data:
{"connection_id":2339947,"detection_time":1742116233,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.142.193.152","remote_port":55619,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4099cf3a-d57b-4307-8476-726807cda0d3
log_level: critical
event_category: detections
event_data:
{"connection_id":2339973,"detection_time":1742116234,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"193.37.69.105","remote_port":64965,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3e366e4d-0c50-4b1a-919a-21e47cb88798
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742116623,"event_type_id":6,"status":"blocked"}


event_id: 802a081a-594b-48cb-b89f-e1bf3d9a5d9f
log_level: critical
event_category: detections
event_data:
{"connection_id":2342017,"detection_time":1742116623,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":35766,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 65127783-48ba-4960-9229-efb798abb2e9
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742116707,"event_type_id":6,"status":"blocked"}


event_id: 39bab012-9668-42e0-a109-13a0173939e0
log_level: critical
event_category: detections
event_data:
{"connection_id":2342587,"detection_time":1742116707,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":32781,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 38ccbb74-0418-4e49-9656-8b4ad0ce6235
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742117113,"event_type_id":6,"status":"blocked"}


event_id: 7774c021-51f7-4f58-a017-2f072b33ef6a
log_level: critical
event_category: detections
event_data:
{"connection_id":2344810,"detection_time":1742117113,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":34564,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 88a4a20b-eb72-4a1b-b5fc-1f4b3d42a6a6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742117217,"event_type_id":6,"status":"blocked"}


event_id: 4204ba45-75b1-46ed-a086-8aed8a628a12
log_level: critical
event_category: detections
event_data:
{"connection_id":2345475,"detection_time":1742117217,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":42682,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 93849c18-17e2-45c0-8020-a7874253c388
log_level: critical
event_category: detections
event_data:
{"connection_id":2346271,"detection_time":1742117369,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":25134,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f603acdb-de06-467e-9d7f-cca68065a100
log_level: critical
event_category: detections
event_data:
{"connection_id":2346302,"detection_time":1742117376,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":38078,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 73c62ffa-e32d-4289-a6d9-a897ca399abf
log_level: critical
event_category: detections
event_data:
{"connection_id":2346344,"detection_time":1742117382,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":53300,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 048570de-ce3b-4d5c-985f-d306965f56ca
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742117720,"event_type_id":6,"status":"blocked"}


event_id: 2b7c8d17-da9f-464e-abce-74d30c5c3e5e
log_level: critical
event_category: detections
event_data:
{"connection_id":2348257,"detection_time":1742117720,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":51943,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: f7b9382a-9175-45de-bccf-3a608180cb33
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742118089,"event_type_id":6,"status":"blocked"}


event_id: 51e28b72-0466-4cfa-b44f-6784f1b64fc3
log_level: critical
event_category: detections
event_data:
{"connection_id":2350027,"detection_time":1742118089,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":60167,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 58480b2b-811d-4474-a860-034cb88ee37f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742118219,"event_type_id":6,"status":"blocked"}


event_id: b16652fd-2e6f-4ea8-a944-9a40e9429062
log_level: critical
event_category: detections
event_data:
{"connection_id":2350636,"detection_time":1742118219,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":33845,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6e0d1bfc-0261-4ea6-a889-6a51ce778160
log_level: critical
event_category: detections
event_data:
{"connection_id":2354424,"detection_time":1742118985,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":48316,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 939084e5-4ff9-4487-ba52-03ed3bafe1aa
log_level: critical
event_category: detections
event_data:
{"connection_id":2354478,"detection_time":1742118992,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":58586,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6439f1b2-fafd-4f87-912a-28a81e75a264
log_level: critical
event_category: detections
event_data:
{"connection_id":2354524,"detection_time":1742118998,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":9727,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 20c3f3d1-cda2-4250-94f3-704f9616d4a1
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742119223,"event_type_id":6,"status":"blocked"}


event_id: 711955d2-9586-4e7e-be53-55aec419d47e
log_level: critical
event_category: detections
event_data:
{"connection_id":2356631,"detection_time":1742119223,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":51958,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 27c63c76-2ba5-494b-8813-db71496535fa
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742119548,"event_type_id":6,"status":"blocked"}


event_id: 75ae8e4e-5e88-48e2-885e-296f3b501a54
log_level: critical
event_category: detections
event_data:
{"connection_id":2359484,"detection_time":1742119548,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":58151,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 6182296d-89b7-45b1-b551-80fe55b0f9cd
log_level: critical
event_category: detections
event_data:
{"connection_id":2359544,"detection_time":1742119553,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.154","remote_port":7530,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0279e8a2-0919-4cd4-9039-1ff873e6bde3
log_level: critical
event_category: detections
event_data:
{"connection_id":2359614,"detection_time":1742119560,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.154","remote_port":46520,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6596d74f-ca1b-419a-b6e5-c2bfe120b9c0
log_level: critical
event_category: detections
event_data:
{"connection_id":2359705,"detection_time":1742119566,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.154","remote_port":25585,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c5c1dc3c-a652-458a-99c8-2791a5f52a21
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742119729,"event_type_id":6,"status":"blocked"}


event_id: 7585d33d-7429-4773-80c8-f85a0c243fb9
log_level: critical
event_category: detections
event_data:
{"connection_id":2361196,"detection_time":1742119729,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":60612,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 536717f8-013f-49d0-94c7-6401e7a818ed
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742120035,"event_type_id":6,"status":"blocked"}


event_id: 3884df13-ace4-4ad9-b5d9-1570e9b59291
log_level: critical
event_category: detections
event_data:
{"connection_id":2363936,"detection_time":1742120035,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":57546,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 69f62125-97fb-4c63-80ab-3dce783b7fb0
log_level: critical
event_category: detections
event_data:
{"connection_id":2369906,"detection_time":1742120685,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":11014,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6a6aefac-708a-4007-b1bd-5b2fb8603c1a
log_level: critical
event_category: detections
event_data:
{"connection_id":2369945,"detection_time":1742120692,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":15147,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 545c7663-0778-4ae8-971a-0f9ae20175d7
log_level: critical
event_category: detections
event_data:
{"connection_id":2369993,"detection_time":1742120698,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.91","remote_port":13318,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5562117e-9dde-49bb-a120-b6937d678761
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742120735,"event_type_id":6,"status":"blocked"}


event_id: d1cb070d-7aaf-4baf-8d27-2f72b8f61f15
log_level: critical
event_category: detections
event_data:
{"connection_id":2370265,"detection_time":1742120735,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":51167,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: c5d59903-9236-4f6d-bc21-231052ff3660
log_level: critical
event_category: detections
event_data:
{"connection_id":2373668,"detection_time":1742121069,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":58527,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7fc64699-101c-4278-9954-dbe1a30c66b0
log_level: critical
event_category: detections
event_data:
{"connection_id":2373775,"detection_time":1742121078,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":5237,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4d72731e-8c03-4572-a05d-f522bb7322c2
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742121241,"event_type_id":6,"status":"blocked"}


event_id: 8602630b-176b-49ab-a8f6-0dc994bc8d80
log_level: critical
event_category: detections
event_data:
{"connection_id":2375310,"detection_time":1742121242,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":60158,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 7c9fb483-a90e-480a-83d8-2f34cf0f11f3
log_level: critical
event_category: detections
event_data:
{"connection_id":2376085,"detection_time":1742121323,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.151","remote_port":4102,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e7034a42-89cd-4d8c-939b-35a151356514
log_level: critical
event_category: detections
event_data:
{"connection_id":2376148,"detection_time":1742121329,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.151","remote_port":50148,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 1e5592d0-904a-46dc-8472-8758237fd802
log_level: critical
event_category: detections
event_data:
{"connection_id":2376225,"detection_time":1742121336,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.151","remote_port":36303,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f0f923f5-e8cc-48ad-bcdc-47fc4bafee95
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742121496,"event_type_id":6,"status":"blocked"}


event_id: 38bdc961-3bd9-41bb-8b8f-630772ee1d00
log_level: critical
event_category: detections
event_data:
{"connection_id":2377903,"detection_time":1742121497,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":54586,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 1f88a80d-03ee-42bf-89bd-2eb51dbd03aa
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742121749,"event_type_id":6,"status":"blocked"}


event_id: 0de2cd49-1319-4ba2-b859-149fb6946ee1
log_level: critical
event_category: detections
event_data:
{"connection_id":2380383,"detection_time":1742121749,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":41292,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ca080a67-143c-40ef-8fb2-bb0da9bda343
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742121988,"event_type_id":6,"status":"blocked"}


event_id: bb794a1d-48d2-4c00-b65d-9fade4bdc6fd
log_level: critical
event_category: detections
event_data:
{"connection_id":2382366,"detection_time":1742121988,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":53683,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 396b065e-7a86-416e-91d9-519f9645167b
log_level: critical
event_category: detections
event_data:
{"connection_id":2384206,"detection_time":1742122192,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":21411,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e109cf2f-5a76-4d95-98b8-04739c51a095
log_level: critical
event_category: detections
event_data:
{"connection_id":2384250,"detection_time":1742122198,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":9872,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c0260025-632b-42c1-b7c0-5a38f6185dca
log_level: critical
event_category: detections
event_data:
{"connection_id":2384314,"detection_time":1742122204,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":54563,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f681585d-f211-49a8-93ec-16a365f31993
log_level: critical
event_category: detections
event_data:
{"connection_id":2385859,"detection_time":1742122354,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":32767,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 18e6da7d-848e-40b9-8904-721648a432a4
log_level: critical
event_category: detections
event_data:
{"connection_id":2385919,"detection_time":1742122360,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":27597,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ec0978b9-79f1-4e1c-9135-e36786abc98b
log_level: critical
event_category: detections
event_data:
{"connection_id":2385981,"detection_time":1742122369,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.93","remote_port":42981,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 11f91489-5767-401c-85a4-69f1cf70b6b4
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742122472,"event_type_id":6,"status":"blocked"}


event_id: b07e0c8c-79a0-4648-94b3-4a2489425d39
log_level: critical
event_category: detections
event_data:
{"connection_id":2386938,"detection_time":1742122472,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":52885,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9888a537-b8ab-4046-8578-215cc4673836
log_level: critical
event_category: detections
event_data:
{"connection_id":2388427,"detection_time":1742122644,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":51271,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d3ae8948-8e3d-4cdc-af7c-86b842427e01
log_level: critical
event_category: detections
event_data:
{"connection_id":2388503,"detection_time":1742122651,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":58256,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6d3368d1-bbf2-4291-9c34-e1646baf1ae6
log_level: critical
event_category: detections
event_data:
{"connection_id":2388580,"detection_time":1742122657,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":10390,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 996c0d7a-cc4f-49ca-b2ea-e9da37e00391
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742122752,"event_type_id":6,"status":"blocked"}


event_id: ba779a7e-7270-4572-8368-b4d94a5b54d4
log_level: critical
event_category: detections
event_data:
{"connection_id":2389554,"detection_time":1742122752,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":60302,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 92089ce7-f900-4a74-916c-bb80eb37b2b8
log_level: critical
event_category: detections
event_data:
{"connection_id":2393876,"detection_time":1742123201,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":24601,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e1889b69-fadc-4481-ab96-96c64127c1fb
log_level: critical
event_category: detections
event_data:
{"connection_id":2393928,"detection_time":1742123207,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":17201,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a68c847c-6871-44bc-bbe8-71e35d23e614
log_level: critical
event_category: detections
event_data:
{"connection_id":2393972,"detection_time":1742123214,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.92","remote_port":8810,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7af9846c-9b4b-4c13-8b12-4a917d478e4f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742123257,"event_type_id":6,"status":"blocked"}


event_id: 68ac5207-553f-479a-bc96-0d74a42ba886
log_level: critical
event_category: detections
event_data:
{"connection_id":2394301,"detection_time":1742123257,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":42042,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 82a9b6c5-4a25-4df7-a5dc-9abfcf713a3c
log_level: critical
event_category: detections
event_data:
{"connection_id":2395622,"detection_time":1742123390,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.96","remote_port":17731,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b7effe7e-8865-4c21-9076-75986a738f8b
log_level: critical
event_category: detections
event_data:
{"connection_id":2395696,"detection_time":1742123396,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.96","remote_port":10178,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e9443b49-7558-4cb0-be6e-eaacc31411b6
log_level: critical
event_category: detections
event_data:
{"connection_id":2395750,"detection_time":1742123403,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.96","remote_port":3787,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7c3b18e3-c93a-440f-b9ed-c4377aaa65ad
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742123449,"event_type_id":6,"status":"blocked"}


event_id: 2c7ebfde-60b1-4003-b6c1-c2870fb9f957
log_level: critical
event_category: detections
event_data:
{"connection_id":2396150,"detection_time":1742123449,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":49903,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fd402300-2b0c-4e5b-8306-0d064ae7558b
log_level: critical
event_category: detections
event_data:
{"connection_id":2398431,"detection_time":1742123701,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":40166,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a9df29fa-8a3f-4b17-89fe-7f6e50180ecb
log_level: critical
event_category: detections
event_data:
{"connection_id":2398505,"detection_time":1742123707,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":57288,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b97f56cd-d0b8-4c5a-9018-eb4e14e18b8e
log_level: critical
event_category: detections
event_data:
{"connection_id":2398571,"detection_time":1742123713,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.181","remote_port":10183,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: abc9615d-45b3-41b1-8b16-9cfbb439c2b0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742123936,"event_type_id":6,"status":"blocked"}


event_id: babcf2d9-fd2b-4f31-937d-24ab184af64d
log_level: critical
event_category: detections
event_data:
{"connection_id":2400584,"detection_time":1742123936,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":49850,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 57061aa3-8941-4aca-82a1-68806026e363
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742124267,"event_type_id":6,"status":"blocked"}


event_id: 49498327-97ac-48ca-8951-fb8c3d832f7b
log_level: critical
event_category: detections
event_data:
{"connection_id":2403448,"detection_time":1742124267,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":60018,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 807a0286-84bd-4152-ba7f-ee1590d83555
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742124431,"event_type_id":6,"status":"blocked"}


event_id: 187a0abc-33b6-4f1f-aec3-a5552de00ee2
log_level: critical
event_category: detections
event_data:
{"connection_id":2404854,"detection_time":1742124431,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":49159,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: fe0b7380-27d0-47d1-900b-769fb9a71393
log_level: critical
event_category: detections
event_data:
{"connection_id":2411512,"detection_time":1742125128,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.155","remote_port":10286,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: a8633084-abc1-4484-8dd4-bdf3a5f81cd2
log_level: critical
event_category: detections
event_data:
{"connection_id":2411558,"detection_time":1742125134,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.155","remote_port":59885,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 99a0cbe8-9cd8-49c6-877e-f5f7434d9ee6
log_level: critical
event_category: detections
event_data:
{"connection_id":2411606,"detection_time":1742125141,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.227.254.155","remote_port":47978,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: faf207fa-26d6-4826-9deb-cb82d3ba2489
log_level: critical
event_category: detections
event_data:
{"connection_id":2411641,"detection_time":1742125145,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":25331,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f8c61403-d49d-4bbd-b428-76735c56ee16
log_level: critical
event_category: detections
event_data:
{"connection_id":2411684,"detection_time":1742125152,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":33770,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f4491c62-1753-4a07-b591-d01707bb378d
log_level: critical
event_category: detections
event_data:
{"connection_id":2411751,"detection_time":1742125158,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.183","remote_port":39870,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 99facb8c-024a-4b3d-acbb-33dffafe39dd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742125269,"event_type_id":6,"status":"blocked"}


event_id: e93eece5-48fe-4797-ac36-bdc54f18c60b
log_level: critical
event_category: detections
event_data:
{"connection_id":2412631,"detection_time":1742125269,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":49639,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 8500a7a7-7566-459e-91c5-be12515c0ecb
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742125400,"event_type_id":6,"status":"blocked"}


event_id: 5ed72e6e-292a-4c4d-90dd-f565d0db9840
log_level: critical
event_category: detections
event_data:
{"connection_id":2413818,"detection_time":1742125400,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":48327,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 10cb89ba-46bc-4fff-bde0-8c5cb6c49f9c
log_level: critical
event_category: detections
event_data:
{"connection_id":2414337,"detection_time":1742125459,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.165","remote_port":4918,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b3f0f79f-1055-45d1-b793-2521554cff17
log_level: critical
event_category: detections
event_data:
{"connection_id":2414408,"detection_time":1742125466,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.165","remote_port":55540,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e51102d8-7a4c-4098-bf3d-e4acd8bc28d1
log_level: critical
event_category: detections
event_data:
{"connection_id":2414465,"detection_time":1742125472,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.165","remote_port":42945,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: dadbdbb1-a844-4944-8a8a-55ed3edbe151
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742125775,"event_type_id":6,"status":"blocked"}


event_id: 0ab225ce-a30a-4a81-ba31-04953d64c51e
log_level: critical
event_category: detections
event_data:
{"connection_id":2417168,"detection_time":1742125775,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":58561,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 99a671fc-1238-44bc-b2ca-371f804ddcff
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742125887,"event_type_id":6,"status":"blocked"}


event_id: 8cf460f0-e6f2-4645-9896-f3bb0498e231
log_level: critical
event_category: detections
event_data:
{"connection_id":2418161,"detection_time":1742125887,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":47204,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 3a625a7a-2370-4244-9fdc-1ad1d4520334
log_level: critical
event_category: detections
event_data:
{"connection_id":2426315,"detection_time":1742126713,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":27927,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 411795d4-8d4f-47b6-a60f-ca0628113b22
log_level: critical
event_category: detections
event_data:
{"connection_id":2426387,"detection_time":1742126719,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":32169,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c84480f1-3779-4791-881c-8e699cb758d7
log_level: critical
event_category: detections
event_data:
{"connection_id":2426468,"detection_time":1742126726,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.184","remote_port":32888,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6037ff54-c0e7-47fe-aa29-3b8470a0fea6
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742126782,"event_type_id":6,"status":"blocked"}


event_id: 60be4e1d-352f-44ba-b545-54d100b2e879
log_level: critical
event_category: detections
event_data:
{"connection_id":2427062,"detection_time":1742126782,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":48892,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 87885270-9a3c-46df-993c-e703a6eedd98
log_level: critical
event_category: detections
event_data:
{"connection_id":2427122,"detection_time":1742126787,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":19537,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 2c625a06-72f4-489c-baab-aaae44790aa2
log_level: critical
event_category: detections
event_data:
{"connection_id":2427180,"detection_time":1742126793,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":15633,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: dcb241b2-8545-4cb4-9d08-6a3b371f7c56
log_level: critical
event_category: detections
event_data:
{"connection_id":2427235,"detection_time":1742126800,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.94","remote_port":14147,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 657b590c-70f0-4900-b3e0-cc9c2448c871
log_level: critical
event_category: detections
event_data:
{"connection_id":2432748,"detection_time":1742127336,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":17495,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ee37c5b3-fb3a-40a2-a6f2-22645f1c8e07
log_level: critical
event_category: detections
event_data:
{"connection_id":2432833,"detection_time":1742127342,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":34745,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 2224c7a5-5404-4c3f-a32c-60075b0ccaef
log_level: critical
event_category: detections
event_data:
{"connection_id":2432893,"detection_time":1742127349,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":47278,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7c766df1-1a6b-459d-b9b6-dc12a8f6400c
log_level: critical
event_category: detections
event_data:
{"connection_id":2434957,"detection_time":1742127582,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.162","remote_port":51659,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 0bf92ea3-5c36-4aea-95d2-e663e32b494c
log_level: critical
event_category: detections
event_data:
{"connection_id":2435034,"detection_time":1742127588,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.162","remote_port":37743,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: eba22a79-bd1d-4005-a256-5f1495c52aa7
log_level: critical
event_category: detections
event_data:
{"connection_id":2435111,"detection_time":1742127595,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"194.165.16.162","remote_port":26181,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 217369d7-b553-41f6-a4b4-fc3acfae1ddc
log_level: critical
event_category: detections
event_data:
{"connection_id":2435577,"detection_time":1742127647,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":48039,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 63c1c909-c019-4b8b-88e7-ac1039abbe81
log_level: critical
event_category: detections
event_data:
{"connection_id":2435633,"detection_time":1742127654,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":56819,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: f0537e38-03bf-4b9a-bc30-d6785b44e989
log_level: critical
event_category: detections
event_data:
{"connection_id":2435682,"detection_time":1742127660,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.124","remote_port":3428,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 84bd5b38-fa27-4d37-b1a2-3caa267f960f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742127785,"event_type_id":6,"status":"blocked"}


event_id: 8f8b8b55-346f-4a91-a22d-f3d32d0b24fe
log_level: critical
event_category: detections
event_data:
{"connection_id":2436936,"detection_time":1742127785,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":39106,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 828702da-2c2f-4a16-a60a-1f52105c21dc
log_level: critical
event_category: detections
event_data:
{"connection_id":2437900,"detection_time":1742127880,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":8609,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6b2dc86a-1ac8-42e3-95a2-46280546a4dc
log_level: critical
event_category: detections
event_data:
{"connection_id":2437960,"detection_time":1742127886,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":18574,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 03ca5a85-bd0c-496f-a2da-3086059c2be2
log_level: critical
event_category: detections
event_data:
{"connection_id":2438040,"detection_time":1742127893,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":30728,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 772eb76e-f760-45ff-9bb5-6fa53809b0fd
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742128332,"event_type_id":6,"status":"blocked"}


event_id: 21b0c6d2-0054-4d71-8fff-10fd2c8aedaa
log_level: critical
event_category: detections
event_data:
{"connection_id":2442582,"detection_time":1742128332,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":43661,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 56142707-68f8-4123-bd90-e8f4c5c0ca96
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742128812,"event_type_id":6,"status":"blocked"}


event_id: eaa4fc5b-b2b4-4106-b4af-dfad15e9a27a
log_level: critical
event_category: detections
event_data:
{"connection_id":2447485,"detection_time":1742128812,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":43128,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 30476566-8828-4370-8729-1ea80cfbc06a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742129293,"event_type_id":6,"status":"blocked"}


event_id: 4d3650d8-b889-4ea7-863d-a2d53c6757cd
log_level: critical
event_category: detections
event_data:
{"connection_id":2452032,"detection_time":1742129293,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":37542,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 32649d9d-6a72-45b1-8012-d07284aac3fc
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742129298,"event_type_id":6,"status":"blocked"}


event_id: 03b4f9b1-ec05-45df-9b52-6c636397d4d7
log_level: critical
event_category: detections
event_data:
{"connection_id":2452067,"detection_time":1742129298,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":41783,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: e6d59fb1-e734-4dc7-b8f0-8f436a7a03c6
log_level: critical
event_category: detections
event_data:
{"connection_id":2455271,"detection_time":1742129628,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":17165,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 91c1dc12-a301-4e72-b902-10f1fdbc6444
log_level: critical
event_category: detections
event_data:
{"connection_id":2455333,"detection_time":1742129635,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":34261,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3b59b3c3-ebfa-4fd6-994e-bbefff03aa1e
log_level: critical
event_category: detections
event_data:
{"connection_id":2455405,"detection_time":1742129641,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":51411,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 317819ee-432b-4b6a-9375-62e89b4a08b6
log_level: critical
event_category: detections
event_data:
{"connection_id":2456318,"detection_time":1742129755,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":16159,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 448e7a64-1dfa-4b50-bdd3-99fba5ea370f
log_level: critical
event_category: detections
event_data:
{"connection_id":2456399,"detection_time":1742129761,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":43349,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 5dbce694-cef2-42f5-aeb0-e6444ece07a2
log_level: critical
event_category: detections
event_data:
{"connection_id":2456461,"detection_time":1742129768,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.188","remote_port":10513,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 08c940fc-5fd9-4282-b5b5-844de8cd2276
log_level: critical
event_category: detections
event_data:
{"connection_id":2457845,"detection_time":1742129913,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":52154,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4e39508b-1176-4a35-b55a-1a6a3da777e0
log_level: critical
event_category: detections
event_data:
{"connection_id":2457901,"detection_time":1742129919,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":25777,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 09d2739f-1294-43f4-a1c7-41b3aabc8471
log_level: critical
event_category: detections
event_data:
{"connection_id":2457954,"detection_time":1742129926,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.187","remote_port":57638,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 19775a40-3ad7-4789-ba3d-7438b13788dc
log_level: critical
event_category: detections
event_data:
{"connection_id":2459291,"detection_time":1742130067,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":18000,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: fab285d0-be85-4111-a462-aa83b3a789f0
log_level: critical
event_category: detections
event_data:
{"connection_id":2459351,"detection_time":1742130074,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":9909,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bb1fd03c-63fa-49d9-b9e1-0d238dd27288
log_level: critical
event_category: detections
event_data:
{"connection_id":2459407,"detection_time":1742130080,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.122","remote_port":3566,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e5d4c8eb-5904-400f-92c7-6debcd907087
log_level: critical
event_category: detections
event_data:
{"connection_id":2461232,"detection_time":1742130275,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":54484,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: cfa6f38e-fe01-46be-95af-60f0ea364325
log_level: critical
event_category: detections
event_data:
{"connection_id":2461286,"detection_time":1742130282,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":46324,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bd660a7f-84cf-493b-b162-275c8f7a0b18
log_level: critical
event_category: detections
event_data:
{"connection_id":2461333,"detection_time":1742130288,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.121","remote_port":37409,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e4ede5ea-6893-4d2d-a72b-9ea6debed55a
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742130301,"event_type_id":6,"status":"blocked"}


event_id: 8bc2ff6f-a1c4-4c8d-9ca0-62e94f8d9515
log_level: critical
event_category: detections
event_data:
{"connection_id":2461458,"detection_time":1742130301,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":57574,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 530d34c3-d90d-4dcc-bc9b-d35c422d85c2
log_level: critical
event_category: detections
event_data:
{"connection_id":2462010,"detection_time":1742130349,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":5315,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: e781c744-999c-4cad-a47b-18b6d442a664
log_level: critical
event_category: detections
event_data:
{"connection_id":2462081,"detection_time":1742130355,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":50799,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: ecb7ce52-afea-4ab7-ae45-3386e61c9409
log_level: critical
event_category: detections
event_data:
{"connection_id":2462150,"detection_time":1742130362,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.95","remote_port":36329,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: d164f6ce-49f3-4bfd-b43c-cb4d9d5a614f
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742130758,"event_type_id":6,"status":"blocked"}


event_id: 589e2b10-e558-44e8-95cf-5a274247c714
log_level: critical
event_category: detections
event_data:
{"connection_id":2466063,"detection_time":1742130758,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":37504,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: ebabbf6b-e050-489c-b35c-87d5e2cf8ccc
log_level: critical
event_category: detections
event_data:
{"connection_id":2467190,"detection_time":1742130893,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"45.91.171.220","remote_port":58398,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 56e67ef9-12f3-4f2d-adb0-f1f30e9baf46
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"4.211.85.23","autoblock_timeout":25,"detection_time":1742130971,"event_type_id":6,"status":"blocked"}


event_id: 8f56d198-3421-44ea-a7e3-afa5b6ad48a1
log_level: critical
event_category: detections
event_data:
{"connection_id":2467934,"detection_time":1742130971,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"4.211.85.23","remote_port":64730,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: b56de620-2098-4fca-88da-567ded47c9be
log_level: critical
event_category: detections
event_data:
{"connection_id":2468116,"detection_time":1742130987,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":9149,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 937a7669-bb47-470b-8795-807d6ee0bd4d
log_level: critical
event_category: detections
event_data:
{"connection_id":2468172,"detection_time":1742130994,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":59046,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 45bad25e-518b-4560-9854-5ba752a70f8e
log_level: critical
event_category: detections
event_data:
{"connection_id":2468244,"detection_time":1742131000,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"88.214.25.123","remote_port":50154,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 4f5004ba-bc93-4b22-8980-d34f9fa65e90
log_level: critical
event_category: detections
event_data:
{"connection_id":2468560,"detection_time":1742131038,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.96","remote_port":48436,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 7445ca9a-2cc8-46ef-a5f8-c76bd0ebdb92
log_level: critical
event_category: detections
event_data:
{"connection_id":2468605,"detection_time":1742131045,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.96","remote_port":34246,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: b935d522-c41a-4fa1-9fd2-b1cb3554a6ec
log_level: critical
event_category: detections
event_data:
{"connection_id":2468643,"detection_time":1742131051,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.96","remote_port":19610,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 60a1009b-e5a9-4c61-b260-0faafd1e9237
log_level: critical
event_category: detections
event_data:
{"connection_id":2468713,"detection_time":1742131060,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.96","remote_port":18759,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 57436ca5-5ef2-4a1b-9bc4-42acc6c44664
log_level: critical
event_category: detections
event_data:
{"connection_id":2468770,"detection_time":1742131066,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.96","remote_port":4372,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 3439f525-585e-4cc8-a666-f1d370acba29
log_level: critical
event_category: detections
event_data:
{"connection_id":2468820,"detection_time":1742131073,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"91.238.181.96","remote_port":49538,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: bcbf672a-a09e-48e4-972f-de439cd9b029
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742131309,"event_type_id":6,"status":"blocked"}


event_id: 4c401dec-7d41-4744-b29a-e0bc8749962f
log_level: critical
event_category: detections
event_data:
{"connection_id":2470877,"detection_time":1742131309,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":48624,"status":"detected","threat_name":"RDP:BruteForce"}


event_id: 9fbb14d7-e972-4213-b8a3-3ff1b5fa507a
log_level: critical
event_category: detections
event_data:
{"connection_id":2474412,"detection_time":1742131705,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":39251,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: 6df47277-0871-4c0f-a688-183f7e98b390
log_level: critical
event_category: detections
event_data:
{"connection_id":2474509,"detection_time":1742131711,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":26766,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: fb71b0c8-b617-4b64-a4ba-d81c0eb79a7b
log_level: critical
event_category: detections
event_data:
{"connection_id":2474602,"detection_time":1742131718,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"147.45.112.182","remote_port":13810,"status":"detected","threat_name":"RDP:Blacklist"}


event_id: c6187c90-5713-48dc-bb69-42e97893b5d0
log_level: critical
event_category: detections
event_data:
{"attacker_ip":"110.171.40.33","autoblock_timeout":25,"detection_time":1742131729,"event_type_id":6,"status":"blocked"}


event_id: f4e2d3c6-f0bd-492a-ae2f-adb2c83a2564
log_level: critical
event_category: detections
event_data:
{"connection_id":2474752,"detection_time":1742131729,"event_type_id":1,"local_ip":"192.168.1.100","local_port":3389,"pid":1560,"process":"C:\\windows\\system32\\svchost.exe","protocol":"RDP","remote_ip":"110.171.40.33","remote_port":34585,"status":"detected","threat_name":"RDP:BruteForce"}


